From 80a4d5bfe4edf99e72c39aa3b01f06e9e6375a7d Mon Sep 17 00:00:00 2001 From: schmurky Date: Wed, 21 Oct 2020 17:33:29 +0800 Subject: [PATCH 01/75] Replace for json --- .../microsoft-defender-atp/linux-support-perf.md | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md index 8390f37105..44a7b84113 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md @@ -32,7 +32,7 @@ This article provides some general steps that can be used to narrow down perform Real-time protection (RTP) is a feature of Microsoft Defender ATP for Linux that continuously monitors and protects your device against threats. It consists of file and process monitoring and other heuristics. -Depending on the applications that you are running and your device characteristics, you may experience suboptimal performance when running Microsoft Defender ATP for Linux. In particular, applications or system processes that access many resources over a short timespan can lead to performance issues in Microsoft Defender ATP for Linux. +Depending on the applications that you are running and your device characteristics, you may experience suboptimal performance when running Microsoft Defender ATP for Linux. In particular, applications or system processes that access many resources over a short timespan can lead to performance issues. The following steps can be used to troubleshoot and mitigate these issues: @@ -54,7 +54,7 @@ The following steps can be used to troubleshoot and mitigate these issues: > [!NOTE] > This feature is available in version 100.90.70 or newer. - This feature is enabled by default on the `Dogfood` and `InsisderFast` channels. If you're using a different update channel, this feature can be enabled from the command line: + This feature is enabled by default on the `Dogfood` and `InsiderFast` channels. If you're using a different update channel, this feature can be enabled from the command line: ```bash mdatp config real-time-protection-statistics --value enabled @@ -78,8 +78,10 @@ The following steps can be used to troubleshoot and mitigate these issues: To collect current statistics, run: ```bash - mdatp diagnostic real_time_protection_statistics # you can use ‘> stat.log’ to redirect to file + mdatp diagnostic real-time-protection-statistics --output json > real_time_protection_logs ``` + > [!NOTE] + > Adding ```--output json``` (note the double dash) ensures that the output format is ready for parsing. The output of this command will show all processes and their associated scan activity. To improve the performance of Microsoft Defender ATP for Linux, locate the one with the highest number under the `Total files scanned` row and add an exclusion for it. For more information, see [Configure and validate exclusions for Microsoft Defender ATP for Linux](linux-exclusions.md). @@ -88,6 +90,7 @@ The following steps can be used to troubleshoot and mitigate these issues: 3. Use the `top` command-line tool and analyze which applications are using the resources on your system. Typical examples include software updaters and compilers. -4. Configure Microsoft Defender ATP for Linux with exclusions for the processes or disk locations that contribute to the performance issues and re-enable real-time protection. +4. Configure Microsoft Defender ATP for Linux with exclusions for the processes or disk locations that contribute to the performance issues +5. Re-enable real-time protection. - For more details, see [Configure and validate exclusions for Microsoft Defender ATP for Linux](linux-exclusions.md). + For more information, see [Configure and validate exclusions for Microsoft Defender ATP for Linux](linux-exclusions.md). From 397c7a4c475b6cd473c33ad90e6f64837ff699b2 Mon Sep 17 00:00:00 2001 From: schmurky Date: Wed, 21 Oct 2020 17:37:59 +0800 Subject: [PATCH 02/75] Replace add with use --- .../microsoft-defender-atp/linux-support-perf.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md index 44a7b84113..d9b56bf731 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md @@ -81,7 +81,7 @@ The following steps can be used to troubleshoot and mitigate these issues: mdatp diagnostic real-time-protection-statistics --output json > real_time_protection_logs ``` > [!NOTE] - > Adding ```--output json``` (note the double dash) ensures that the output format is ready for parsing. + > Using ```--output json``` (note the double dash) ensures that the output format is ready for parsing. The output of this command will show all processes and their associated scan activity. To improve the performance of Microsoft Defender ATP for Linux, locate the one with the highest number under the `Total files scanned` row and add an exclusion for it. For more information, see [Configure and validate exclusions for Microsoft Defender ATP for Linux](linux-exclusions.md). From cc82b538cccd6c73a28ff5bb36f550a411628a51 Mon Sep 17 00:00:00 2001 From: schmurky Date: Thu, 22 Oct 2020 17:34:09 +0800 Subject: [PATCH 03/75] More details --- .../linux-support-perf.md | 17 +++++++++++++---- 1 file changed, 13 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md index d9b56bf731..2e16c94605 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md @@ -83,14 +83,23 @@ The following steps can be used to troubleshoot and mitigate these issues: > [!NOTE] > Using ```--output json``` (note the double dash) ensures that the output format is ready for parsing. - The output of this command will show all processes and their associated scan activity. To improve the performance of Microsoft Defender ATP for Linux, locate the one with the highest number under the `Total files scanned` row and add an exclusion for it. For more information, see [Configure and validate exclusions for Microsoft Defender ATP for Linux](linux-exclusions.md). + The output of this command will show all processes and their associated scan activity. +3. You can then run a script to parse the output. + + To do this, in your Windows system, create a folder in ```C:\temp\High_CPU_util_parser_for_Linux```. + + Save the output file ```real_time_protection_logs``` from your Linux system to the created folder. + + You can then use this sample Powershell script to parse the```real_time_protection_logs```. Save this script as ```MDATP_Linux_High_CPU_parser.ps1``` in ```C:\temp\High_CPU_util_parser_for_Linux```. + + Run the Powershell script as admin. The script launches a Microsoft Excel file. The Excel file shows the list of processes with the most activity arranged in descending order. From here you can analyze which processes to exclude. + > [!NOTE] > The application stores statistics in memory and only keeps track of file activity since it was started and real-time protection was enabled. Processes that were launched before or during periods when real time protection was off are not counted. Additionally, only events which triggered scans are counted. -3. Use the `top` command-line tool and analyze which applications are using the resources on your system. Typical examples include software updaters and compilers. +4. Configure Microsoft Defender ATP for Linux with exclusions for the processes or disk locations that contribute to the performance issues. For more information, see [Configure and validate exclusions for Microsoft Defender ATP for Linux](linux-exclusions.md). -4. Configure Microsoft Defender ATP for Linux with exclusions for the processes or disk locations that contribute to the performance issues 5. Re-enable real-time protection. - For more information, see [Configure and validate exclusions for Microsoft Defender ATP for Linux](linux-exclusions.md). + From f2ff564c5c96e7f01321988d4fb0c3971e62e4ee Mon Sep 17 00:00:00 2001 From: schmurky Date: Thu, 22 Oct 2020 17:36:07 +0800 Subject: [PATCH 04/75] PowerShell caps --- .../microsoft-defender-atp/linux-support-perf.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md index 2e16c94605..f52e335011 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md @@ -91,9 +91,9 @@ The following steps can be used to troubleshoot and mitigate these issues: Save the output file ```real_time_protection_logs``` from your Linux system to the created folder. - You can then use this sample Powershell script to parse the```real_time_protection_logs```. Save this script as ```MDATP_Linux_High_CPU_parser.ps1``` in ```C:\temp\High_CPU_util_parser_for_Linux```. + You can then use this sample PowerShell script to parse the```real_time_protection_logs```. Save this script as ```MDATP_Linux_High_CPU_parser.ps1``` in ```C:\temp\High_CPU_util_parser_for_Linux```. - Run the Powershell script as admin. The script launches a Microsoft Excel file. The Excel file shows the list of processes with the most activity arranged in descending order. From here you can analyze which processes to exclude. + Run the PowerShell script as admin. The script launches a Microsoft Excel file. The Excel file shows the list of processes with the most activity arranged in descending order. From here you can analyze which processes to exclude. > [!NOTE] > The application stores statistics in memory and only keeps track of file activity since it was started and real-time protection was enabled. Processes that were launched before or during periods when real time protection was off are not counted. Additionally, only events which triggered scans are counted. From 6173545dcd0d34dcadf1393c4e10b329f4b0db38 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 5 Nov 2020 13:15:13 -0800 Subject: [PATCH 05/75] Added ADMX_ControlPanel policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 4 + .../policy-configuration-service-provider.md | 19 +- .../mdm/policy-csp-admx-controlpanel.md | 362 ++++++++++++++++++ 4 files changed, 385 insertions(+), 1 deletion(-) create mode 100644 windows/client-management/mdm/policy-csp-admx-controlpanel.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 8ff993ef33..9bb975d40f 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -177,6 +177,7 @@ #### [ADMX_AuditSettings](policy-csp-admx-auditsettings.md) #### [ADMX_CipherSuiteOrder](policy-csp-admx-ciphersuiteorder.md) #### [ADMX_COM](policy-csp-admx-com.md) +#### [ADMX_ControlPanel](policy-csp-admx-controlpanel.md) #### [ADMX_Cpls](policy-csp-admx-cpls.md) #### [ADMX_CtrlAltDel](policy-csp-admx-ctrlaltdel.md) #### [ADMX_DigitalLocker](policy-csp-admx-digitallocker.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index a26052c419..1e7cd9e0e9 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -42,6 +42,10 @@ ms.date: 10/08/2020 - [ADMX_AppCompat/AppCompatTurnOffUserActionRecord](./policy-csp-admx-appcompat.md#admx-appcompat-appcompatturnoffuseractionrecord) - [ADMX_AppCompat/AppCompatTurnOffProgramInventory](./policy-csp-admx-appcompat.md#admx-appcompat-appcompatturnoffprograminventory) - [ADMX_AuditSettings/IncludeCmdLine](./policy-csp-admx-auditsettings.md#admx-auditsettings-includecmdline) +- [ADMX_ControlPanel/DisallowCpls](./policy-csp-admx-controlpanel.md#admx-controlpanel-disallowcpls) +- [ADMX_ControlPanel/ForceClassicControlPanel](./policy-csp-admx-controlpanel.md#admx-controlpanel-forceclassiccontrolpanel) +- [ADMX_ControlPanel/NoControlPanel](./policy-csp-admx-controlpanel.md#admx-controlpanel-nocontrolpanel) +- [ADMX_ControlPanel/RestrictCpls](./policy-csp-admx-controlpanel.md#admx-controlpanel-restrictcpls) - [ADMX_Cpls/UseDefaultTile](./policy-csp-admx-cpls.md#admx-cpls-usedefaulttile) - [ADMX_CtrlAltDel/DisableChangePassword](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-disablechangepassword) - [ADMX_CtrlAltDel/DisableLockComputer](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-disablelockcomputer) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 475eff78fd..b89a460193 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -245,6 +245,24 @@ The following diagram shows the Policy configuration service provider in tree fo + +### ADMX_ControlPanel policies + +
+
+ ADMX_ControlPanel/DisallowCpls +
+
+ ADMX_ControlPanel/ForceClassicControlPanel +
+
+ ADMX_ControlPanel/NoControlPanel +
+
+ ADMX_ControlPanel/RestrictCpls +
+
+ ### ADMX_Cpls policies
@@ -262,7 +280,6 @@ The following diagram shows the Policy configuration service provider in tree fo
- ### ADMX_CtrlAltDel policies
diff --git a/windows/client-management/mdm/policy-csp-admx-controlpanel.md b/windows/client-management/mdm/policy-csp-admx-controlpanel.md new file mode 100644 index 0000000000..8ae99cefe3 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-controlpanel.md @@ -0,0 +1,362 @@ +--- +title: Policy CSP - ADMX_ControlPanel +description: Policy CSP - ADMX_ControlPanel +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/05/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_ControlPanel +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
+ + +## ADMX_ControlPanel policies + +
+
+ ADMX_ControlPanel/DisallowCpls +
+
+ ADMX_ControlPanel/ForceClassicControlPanel +
+
+ ADMX_ControlPanel/NoControlPanel +
+
+ ADMX_ControlPanel/RestrictCpls +
+
+ + +
+ + +**ADMX_ControlPanel/DisallowCpls** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This setting allows you to display or hide specified Control Panel items, such as Mouse, System, or Personalization, from the Control Panel window and the Start screen. The setting affects the Start screen and Control Panel window, as well as other ways to access Control Panel items, such as shortcuts in Help and Support or command lines that use control.exe. This policy has no effect on items displayed in PC settings. + +If you enable this setting, you can select specific items not to display on the Control Panel window and the Start screen. + +To hide a Control Panel item, enable this policy setting and click Show to access the list of disallowed Control Panel items. In the Show Contents dialog box in the Value column, enter the Control Panel item's canonical name. For example, enter Microsoft.Mouse, Microsoft.System, or Microsoft.Personalization. + +> [!NOTE] +> For Windows Vista, Windows Server 2008, and earlier versions of Windows, the module name should be entered, for example timedate.cpl or inetcpl.cpl. If a Control Panel item does not have a CPL file, or the CPL file contains multiple applets, then its module name and string resource identification number should be entered, for example @systemcpl.dll,-1 for System, or @themecpl.dll,-1 for Personalization. A complete list of canonical and module names can be found in MSDN by searching "Control Panel items". + +If both the "Hide specified Control Panel items" setting and the "Show only specified Control Panel items" setting are enabled, the "Show only specified Control Panel items" setting is ignored. + +> [!NOTE] +> The Display Control Panel item cannot be hidden in the Desktop context menu by using this setting. To hide the Display Control Panel item and prevent users from modifying the computer's display settings use the "Disable Display Control Panel" setting instead. Note: To hide pages in the System Settings app, use the "Settings Page Visibility" setting under Computer Configuration. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide specified Control Panel items* +- GP name: *DisallowCpls* +- GP path: *Control Panel* +- GP ADMX file name: *ControlPanel.admx* + + + +
+ + +**ADMX_ControlPanel/ForceClassicControlPanel** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the default Control Panel view, whether by category or icons. + +If this policy setting is enabled, the Control Panel opens to the icon view. + +If this policy setting is disabled, the Control Panel opens to the category view. + +If this policy setting is not configured, the Control Panel opens to the view used in the last Control Panel session. + +> [!NOTE] +> Icon size is dependent upon what the user has set it to in the previous session. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Always open All Control Panel Items when opening Control Panel* +- GP name: *ForceClassicControlPanel* +- GP path: *Control Panel* +- GP ADMX file name: *ControlPanel.admx* + + + +
+ + +**ADMX_ControlPanel/NoControlPanel** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Disables all Control Panel programs and the PC settings app. + +This setting prevents Control.exe and SystemSettings.exe, the program files for Control Panel and PC settings, from starting. As a result, users cannot start Control Panel or PC settings, or run any of their items. + +This setting removes Control Panel from: + +- The Start screen +- File Explorer + +This setting removes PC settings from: + +- The Start screen +- Settings charm +- Account picture +- Search results + +If users try to select a Control Panel item from the Properties item on a context menu, a message appears explaining that a setting prevents the action. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit access to Control Panel and PC settings* +- GP name: *NoControlPanel* +- GP path: *Control Panel* +- GP ADMX file name: *ControlPanel.admx* + + + +
+ + +**ADMX_ControlPanel/RestrictCpls** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls which Control Panel items such as Mouse, System, or Personalization, are displayed on the Control Panel window and the Start screen. The only items displayed in Control Panel are those you specify in this setting. This setting affects the Start screen and Control Panel, as well as other ways to access Control Panel items such as shortcuts in Help and Support or command lines that use control.exe. This policy has no effect on items displayed in PC settings. + +To display a Control Panel item, enable this policy setting and click Show to access the list of allowed Control Panel items. In the Show Contents dialog box in the Value column, enter the Control Panel item's canonical name. For example, enter Microsoft.Mouse, Microsoft.System, or Microsoft.Personalization. + +> [!NOTE] +> For Windows Vista, Windows Server 2008, and earlier versions of Windows, the module name, for example timedate.cpl or inetcpl.cpl, should be entered. If a Control Panel item does not have a CPL file, or the CPL file contains multiple applets, then its module name and string resource identification number should be entered. For example, enter @systemcpl.dll,-1 for System or @themecpl.dll,-1 for Personalization. A complete list of canonical and module names of Control Panel items can be found in MSDN by searching "Control Panel items". + +If both the "Hide specified Control Panel items" setting and the "Show only specified Control Panel items" setting are enabled, the "Show only specified Control Panel items" setting is ignored. + +> [!NOTE] +> The Display Control Panel item cannot be hidden in the Desktop context menu by using this setting. To hide the Display Control Panel item and prevent users from modifying the computer's display settings use the "Disable Display Control Panel" setting instead. +> +> To hide pages in the System Settings app, use the "Settings Page Visibility" setting under Computer Configuration. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Show only specified Control Panel items* +- GP name: *RestrictCpls* +- GP path: *Control Panel* +- GP ADMX file name: *ControlPanel.admx* + + + +
+ +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From 3d0264c4c5678927c8690d44141efaf9bfb699f4 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 5 Nov 2020 15:26:41 -0800 Subject: [PATCH 06/75] Added ADMX_ControlPanelDisplay policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 24 + .../policy-configuration-service-provider.md | 77 + .../policy-csp-admx-controlpaneldisplay.md | 1825 +++++++++++++++++ 4 files changed, 1927 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-controlpaneldisplay.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 9bb975d40f..6fa7869867 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -178,6 +178,7 @@ #### [ADMX_CipherSuiteOrder](policy-csp-admx-ciphersuiteorder.md) #### [ADMX_COM](policy-csp-admx-com.md) #### [ADMX_ControlPanel](policy-csp-admx-controlpanel.md) +#### [ADMX_ControlPanelDisplay](policy-csp-admx-controlpaneldisplay.md) #### [ADMX_Cpls](policy-csp-admx-cpls.md) #### [ADMX_CtrlAltDel](policy-csp-admx-ctrlaltdel.md) #### [ADMX_DigitalLocker](policy-csp-admx-digitallocker.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 1e7cd9e0e9..e375180809 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -46,6 +46,30 @@ ms.date: 10/08/2020 - [ADMX_ControlPanel/ForceClassicControlPanel](./policy-csp-admx-controlpanel.md#admx-controlpanel-forceclassiccontrolpanel) - [ADMX_ControlPanel/NoControlPanel](./policy-csp-admx-controlpanel.md#admx-controlpanel-nocontrolpanel) - [ADMX_ControlPanel/RestrictCpls](./policy-csp-admx-controlpanel.md#admx-controlpanel-restrictcpls) +- [ADMX_ControlPanelDisplay/CPL_Display_Disable](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-display-disable) +- [ADMX_ControlPanelDisplay/CPL_Display_HideSettings](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-display-hidesettings) +- [ADMX_ControlPanelDisplay/CPL_Personalization_DisableColorSchemeChoice](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-disablecolorschemechoice) +- [ADMX_ControlPanelDisplay/CPL_Personalization_DisableThemeChange](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-disablethemechange) +- [ADMX_ControlPanelDisplay/CPL_Personalization_DisableVisualStyle](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-disablevisualstyle) +- [ADMX_ControlPanelDisplay/CPL_Personalization_EnableScreenSaver](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-enablescreensaver) +- [ADMX_ControlPanelDisplay/CPL_Personalization_ForceDefaultLockScreen](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-forcedefaultlockscreen) +- [ADMX_ControlPanelDisplay/CPL_Personalization_LockFontSize](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-lockfontsize) +- [ADMX_ControlPanelDisplay/CPL_Personalization_NoChangingLockScreen](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-nochanginglockscreen) +- [ADMX_ControlPanelDisplay/CPL_Personalization_NoChangingStartMenuBackground](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-nochangingstartmenubackground) +- [ADMX_ControlPanelDisplay/CPL_Personalization_NoColorAppearanceUI](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-nocolorappearanceui) +- [ADMX_ControlPanelDisplay/CPL_Personalization_NoDesktopBackgroundUI](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-nodesktopbackgroundui) +- [ADMX_ControlPanelDisplay/CPL_Personalization_NoDesktopIconsUI](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-nodesktopiconsui) +- [ADMX_ControlPanelDisplay/CPL_Personalization_NoLockScreen](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-nolockscreen) +- [ADMX_ControlPanelDisplay/CPL_Personalization_NoMousePointersUI](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-nomousepointersui) +- [ADMX_ControlPanelDisplay/CPL_Personalization_NoScreenSaverUI](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-noscreensaverui) +- [ADMX_ControlPanelDisplay/CPL_Personalization_NoSoundSchemeUI](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-nosoundschemeui) +- [ADMX_ControlPanelDisplay/CPL_Personalization_PersonalColors](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-personalcolors) +- [ADMX_ControlPanelDisplay/CPL_Personalization_ScreenSaverIsSecure](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-screensaverissecure) +- [ADMX_ControlPanelDisplay/CPL_Personalization_ScreenSaverTimeOut](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-screensavertimeout) +- [ADMX_ControlPanelDisplay/CPL_Personalization_SetScreenSaver](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-setscreensaver) +- [ADMX_ControlPanelDisplay/CPL_Personalization_SetTheme](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-settheme) +- [ADMX_ControlPanelDisplay/CPL_Personalization_SetVisualStyle](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-setvisualstyle) +- [ADMX_ControlPanelDisplay/CPL_Personalization_StartBackground](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-startbackground) - [ADMX_Cpls/UseDefaultTile](./policy-csp-admx-cpls.md#admx-cpls-usedefaulttile) - [ADMX_CtrlAltDel/DisableChangePassword](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-disablechangepassword) - [ADMX_CtrlAltDel/DisableLockComputer](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-disablelockcomputer) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index b89a460193..ce9320d5bb 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -263,6 +263,83 @@ The following diagram shows the Policy configuration service provider in tree fo
+### ADMX_ControlPanelDisplay policies + +
+
+ ADMX_ControlPanelDisplay/CPL_Display_Disable +
+
+ ADMX_ControlPanelDisplay/CPL_Display_HideSettings +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_DisableColorSchemeChoice +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_DisableThemeChange +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_DisableVisualStyle +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_EnableScreenSaver +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_ForceDefaultLockScreen +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_LockFontSize +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoChangingLockScreen +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoChangingStartMenuBackground +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoColorAppearanceUI +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoDesktopBackgroundUI +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoDesktopIconsUI +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoLockScreen +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoMousePointersUI +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoScreenSaverUI +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoSoundSchemeUI +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_PersonalColors +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_ScreenSaverIsSecure +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_ScreenSaverTimeOut +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_SetScreenSaver +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_SetTheme +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_SetVisualStyle +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_StartBackground +
+
+ ### ADMX_Cpls policies
diff --git a/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay.md b/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay.md new file mode 100644 index 0000000000..48dc02d6db --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay.md @@ -0,0 +1,1825 @@ +--- +title: Policy CSP - ADMX_ControlPanelDisplay +description: Policy CSP - ADMX_ControlPanelDisplay +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/05/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_ControlPanelDisplay +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
+ + +## ADMX_ControlPanelDisplay policies + +
+
+ ADMX_ControlPanelDisplay/CPL_Display_Disable +
+
+ ADMX_ControlPanelDisplay/CPL_Display_HideSettings +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_DisableColorSchemeChoice +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_DisableThemeChange +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_DisableVisualStyle +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_EnableScreenSaver +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_ForceDefaultLockScreen +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_LockFontSize +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoChangingLockScreen +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoChangingStartMenuBackground +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoColorAppearanceUI +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoDesktopBackgroundUI +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoDesktopIconsUI +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoLockScreen +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoMousePointersUI +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoScreenSaverUI +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_NoSoundSchemeUI +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_PersonalColors +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_ScreenSaverIsSecure +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_ScreenSaverTimeOut +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_SetScreenSaver +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_SetTheme +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_SetVisualStyle +
+
+ ADMX_ControlPanelDisplay/CPL_Personalization_StartBackground +
+
+ + +
+ + +**ADMX_ControlPanelDisplay/CPL_Display_Disable** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Disables the Display Control Panel. + +If you enable this setting, the Display Control Panel does not run. When users try to start Display, a message appears explaining that a setting prevents the action. + +Also, see the "Prohibit access to the Control Panel" (User Configuration\Administrative Templates\Control Panel) and "Remove programs on Settings menu" (User Configuration\Administrative Templates\Start Menu & Taskbar) settings. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disable the Display Control Panel* +- GP name: *CPL_Display_Disable* +- GP path: *Control Panel\Display* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Display_HideSettings** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Removes the Settings tab from Display in Control Panel. + +This setting prevents users from using Control Panel to add, configure, or change the display settings on the computer. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide Settings tab* +- GP name: *CPL_Display_HideSettings* +- GP path: *Control Panel\Display* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_DisableColorSchemeChoice** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This setting forces the theme color scheme to be the default color scheme. + +If you enable this setting, a user cannot change the color scheme of the current desktop theme. + +If you disable or do not configure this setting, a user may change the color scheme of the current desktop theme. + +For Windows 7 and later, use the "Prevent changing color and appearance" setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent changing color scheme* +- GP name: *CPL_Personalization_DisableColorSchemeChoice* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_DisableThemeChange** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This setting disables the theme gallery in the Personalization Control Panel. + +If you enable this setting, users cannot change or save a theme. Elements of a theme such as the desktop background, color, sounds, and screen saver can still be changed (unless policies are set to turn them off). + +If you disable or do not configure this setting, there is no effect. + +> [!NOTE] +> If you enable this setting but do not specify a theme using the "load a specific theme" setting, the theme defaults to whatever the user previously set or the system default. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent changing theme* +- GP name: *CPL_Personalization_DisableThemeChange* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_DisableVisualStyle** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Prevents users or applications from changing the visual style of the windows and buttons displayed on their screens. + +When enabled on Windows XP, this setting disables the "Windows and buttons" drop-down list on the Appearance tab in Display Properties. + +When enabled on Windows XP and later systems, this setting prevents users and applications from changing the visual style through the command line. Also, a user may not apply a different visual style when changing themes. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent changing visual style for windows and buttons* +- GP name: *CPL_Personalization_DisableVisualStyle* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_EnableScreenSaver** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Enables desktop screen savers. + +If you disable this setting, screen savers do not run. Also, this setting disables the Screen Saver section of the Screen Saver dialog in the Personalization or Display Control Panel. As a result, users cannot change the screen saver options. + +If you do not configure it, this setting has no effect on the system. + +If you enable it, a screen saver runs, provided the following two conditions hold: First, a valid screen saver on the client is specified through the "Screen Saver executable name" setting or through Control Panel on the client computer. Second, the screen saver timeout is set to a nonzero value through the setting or Control Panel. + +Also, see the "Prevent changing Screen Saver" setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Enable screen saver* +- GP name: *CPL_Personalization_EnableScreenSaver* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_ForceDefaultLockScreen** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This setting allows you to force a specific default lock screen and logon image by entering the path (location) of the image file. The same image will be used for both the lock and logon screens. + +This setting lets you specify the default lock screen and logon image shown when no user is signed in, and also sets the specified image as the default for all users (it replaces the inbox default image). + +To use this setting, type the fully qualified path and name of the file that stores the default lock screen and logon image. You can type a local path, such as C:\Windows\Web\Screen\img104.jpg or a UNC path, such as `\\Server\Share\Corp.jpg`. + +This can be used in conjunction with the "Prevent changing lock screen and logon image" setting to always force the specified lock screen and logon image to be shown. + +Note: This setting only applies to Enterprise, Education, and Server SKUs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Force a specific default lock screen and logon image* +- GP name: *CPL_Personalization_ForceDefaultLockScreen* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_LockFontSize** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Prevents users from changing the size of the font in the windows and buttons displayed on their screens. + +If this setting is enabled, the "Font size" drop-down list on the Appearance tab in Display Properties is disabled. + +If you disable or do not configure this setting, a user may change the font size using the "Font size" drop-down list on the Appearance tab. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit selection of visual style font size* +- GP name: *CPL_Personalization_LockFontSize* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_NoChangingLockScreen** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Prevents users from changing the background image shown when the machine is locked or when on the logon screen. + +By default, users can change the background image shown when the machine is locked or displaying the logon screen. + +If you enable this setting, the user will not be able to change their lock screen and logon image, and they will instead see the default image. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent changing lock screen and logon image* +- GP name: *CPL_Personalization_NoChangingLockScreen* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_NoChangingStartMenuBackground** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Prevents users from changing the look of their start menu background, such as its color or accent. + +By default, users can change the look of their start menu background, such as its color or accent. + +If you enable this setting, the user will be assigned the default start menu background and colors and will not be allowed to change them. + +If the "Force a specific background and accent color" policy is also set on a supported version of Windows, then those colors take precedence over this policy. + +If the "Force a specific Start background" policy is also set on a supported version of Windows, then that background takes precedence over this policy. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent changing start menu background* +- GP name: *CPL_Personalization_NoChangingStartMenuBackground* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_NoColorAppearanceUI** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Disables the Color (or Window Color) page in the Personalization Control Panel, or the Color Scheme dialog in the Display Control Panel on systems where the Personalization feature is not available. + +This setting prevents users from using Control Panel to change the window border and taskbar color (on Windows 8), glass color (on Windows Vista and Windows 7), system colors, or color scheme of the desktop and windows. + +If this setting is disabled or not configured, the Color (or Window Color) page or Color Scheme dialog is available in the Personalization or Display Control Panel. + +For systems prior to Windows Vista, this setting hides the Appearance and Themes tabs in the in Display in Control Panel. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent changing color and appearance* +- GP name: *CPL_Personalization_NoColorAppearanceUI* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_NoDesktopBackgroundUI** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Prevents users from adding or changing the background design of the desktop. + +By default, users can use the Desktop Background page in the Personalization or Display Control Panel to add a background design (wallpaper) to their desktop. + +If you enable this setting, none of the Desktop Background settings can be changed by the user. + +To specify wallpaper for a group, use the "Desktop Wallpaper" setting. + +Note: You must also enable the "Desktop Wallpaper" setting to prevent users from changing the desktop wallpaper. Refer to KB article: Q327998 for more information. + +Also, see the "Allow only bitmapped wallpaper" setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent changing desktop background* +- GP name: *CPL_Personalization_NoDesktopBackgroundUI* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_NoDesktopIconsUI** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Prevents users from changing the desktop icons. + +By default, users can use the Desktop Icon Settings dialog in the Personalization or Display Control Panel to show, hide, or change the desktop icons. + +If you enable this setting, none of the desktop icons can be changed by the user. + +For systems prior to Windows Vista, this setting also hides the Desktop tab in the Display Control Panel. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent changing desktop icons* +- GP name: *CPL_Personalization_NoDesktopIconsUI* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_NoLockScreen** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether the lock screen appears for users. + +If you enable this policy setting, users that are not required to press CTRL + ALT + DEL before signing in will see their selected tile after locking their PC. + +If you disable or do not configure this policy setting, users that are not required to press CTRL + ALT + DEL before signing in will see a lock screen after locking their PC. They must dismiss the lock screen using touch, the keyboard, or by dragging it with the mouse. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not display the lock screen* +- GP name: *CPL_Personalization_NoLockScreen* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_NoMousePointersUI** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Prevents users from changing the mouse pointers. + +By default, users can use the Pointers tab in the Mouse Control Panel to add, remove, or change the mouse pointers. + +If you enable this setting, none of the mouse pointer scheme settings can be changed by the user. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent changing mouse pointers* +- GP name: *CPL_Personalization_NoMousePointersUI* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_NoScreenSaverUI** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Prevents the Screen Saver dialog from opening in the Personalization or Display Control Panel. + +This setting prevents users from using Control Panel to add, configure, or change the screen saver on the computer. It does not prevent a screen saver from running. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent changing screen saver* +- GP name: *CPL_Personalization_NoScreenSaverUI* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_NoSoundSchemeUI** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Prevents users from changing the sound scheme. + +By default, users can use the Sounds tab in the Sound Control Panel to add, remove, or change the system Sound Scheme. + +If you enable this setting, none of the Sound Scheme settings can be changed by the user. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent changing sounds* +- GP name: *CPL_Personalization_NoSoundSchemeUI* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_PersonalColors** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Forces Windows to use the specified colors for the background and accent. The color values are specified in hex as #RGB. + +By default, users can change the background and accent colors. + +If this setting is enabled, the background and accent colors of Windows will be set to the specified colors and users cannot change those colors. This setting will not be applied if the specified colors do not meet a contrast ratio of 2:1 with white text. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Force a specific background and accent color* +- GP name: *CPL_Personalization_PersonalColors* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_ScreenSaverIsSecure** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Determines whether screen savers used on the computer are password protected. + +If you enable this setting, all screen savers are password protected. If you disable this setting, password protection cannot be set on any screen saver. + +This setting also disables the "Password protected" checkbox on the Screen Saver dialog in the Personalization or Display Control Panel, preventing users from changing the password protection setting. + +If you do not configure this setting, users can choose whether or not to set password protection on each screen saver. + +To ensure that a computer will be password protected, enable the "Enable Screen Saver" setting and specify a timeout via the "Screen Saver timeout" setting. + +> [!NOTE] +> To remove the Screen Saver dialog, use the "Prevent changing Screen Saver" setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Password protect the screen saver* +- GP name: *CPL_Personalization_ScreenSaverIsSecure* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_ScreenSaverTimeOut** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Specifies how much user idle time must elapse before the screen saver is launched. + +When configured, this idle time can be set from a minimum of 1 second to a maximum of 86,400 seconds, or 24 hours. If set to zero, the screen saver will not be started. + +This setting has no effect under any of the following circumstances: + +- The setting is disabled or not configured. + +- The wait time is set to zero. + +- The "Enable Screen Saver" setting is disabled. + +- Neither the "Screen saver executable name" setting nor the Screen Saver dialog of the client computer's Personalization or Display Control Panel specifies a valid existing screen saver program on the client. + +When not configured, whatever wait time is set on the client through the Screen Saver dialog in the Personalization or Display Control Panel is used. The default is 15 minutes. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Screen saver timeout* +- GP name: *CPL_Personalization_ScreenSaverTimeOut* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_SetScreenSaver** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Specifies the screen saver for the user's desktop. + +If you enable this setting, the system displays the specified screen saver on the user's desktop. Also, this setting disables the drop-down list of screen savers in the Screen Saver dialog in the Personalization or Display Control Panel, which prevents users from changing the screen saver. + +If you disable this setting or do not configure it, users can select any screen saver. + +If you enable this setting, type the name of the file that contains the screen saver, including the .scr file name extension. If the screen saver file is not in the %Systemroot%\System32 directory, type the fully qualified path to the file. + +If the specified screen saver is not installed on a computer to which this setting applies, the setting is ignored. + +> [!NOTE] +> This setting can be superseded by the "Enable Screen Saver" setting. If the "Enable Screen Saver" setting is disabled, this setting is ignored, and screen savers do not run. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Force specific screen saver* +- GP name: *CPL_Personalization_SetScreenSaver* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_SetTheme** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Specifies which theme file is applied to the computer the first time a user logs on. + +If you enable this setting, the theme that you specify will be applied when a new user logs on for the first time. This policy does not prevent the user from changing the theme or any of the theme elements such as the desktop background, color, sounds, or screen saver after the first logon. + +If you disable or do not configure this setting, the default theme will be applied at the first logon. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Load a specific theme* +- GP name: *CPL_Personalization_SetTheme* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_SetVisualStyle** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This setting allows you to force a specific visual style file by entering the path (location) of the visual style file. + +This can be a local computer visual style (aero.msstyles), or a file located on a remote server using a UNC path (\\Server\Share\aero.msstyles). + +If you enable this setting, the visual style file that you specify will be used. Also, a user may not apply a different visual style when changing themes. + +If you disable or do not configure this setting, the users can select the visual style that they want to use by changing themes (if the Personalization Control Panel is available). + +> [!NOTE] +> If this setting is enabled and the file is not available at user logon, the default visual style is loaded. +> +> When running Windows XP, you can select the Luna visual style by typing %windir%\resources\Themes\Luna\Luna.msstyles. +> +> To select the Windows Classic visual style, leave the box blank beside "Path to Visual Style:" and enable this setting. When running Windows 8 or Windows RT, you cannot apply the Windows Classic visual style. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Force a specific visual style file or force Windows Classic* +- GP name: *CPL_Personalization_SetVisualStyle* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ + +**ADMX_ControlPanelDisplay/CPL_Personalization_StartBackground** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Forces the Start screen to use one of the available backgrounds, 1 through 20, and prevents the user from changing it. + +If this setting is set to zero or not configured, then Start uses the default background, and users can change it. + +If this setting is set to a nonzero value, then Start uses the specified background, and users cannot change it. If the specified background is not supported, the default background is used. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Force a specific Start background* +- GP name: *CPL_Personalization_StartBackground* +- GP path: *Control Panel\Personalization* +- GP ADMX file name: *ControlPanelDisplay.admx* + + + +
+ +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From fbc71af39349926c3d17d714dd0111e8ce728dc1 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 9 Nov 2020 16:28:34 -0800 Subject: [PATCH 07/75] Added winlogon and activexinstallservice policies --- windows/client-management/mdm/TOC.md | 2 + .../mdm/policies-in-policy-csp-admx-backed.md | 9 +- .../policy-configuration-service-provider.md | 31 ++ .../policy-csp-admx-activexinstallservice.md | 119 +++++ .../mdm/policy-csp-admx-winlogon.md | 493 ++++++++++++++++++ 5 files changed, 653 insertions(+), 1 deletion(-) create mode 100644 windows/client-management/mdm/policy-csp-admx-activexinstallservice.md create mode 100644 windows/client-management/mdm/policy-csp-admx-winlogon.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index f2de6e5ef5..c5af7336e3 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -172,6 +172,7 @@ #### [AboveLock](policy-csp-abovelock.md) #### [Accounts](policy-csp-accounts.md) #### [ActiveXControls](policy-csp-activexcontrols.md) +#### [ADMX_ActiveXInstallService](policy-csp-admx-activexinstallservice.md) #### [ADMX_AddRemovePrograms](policy-csp-admx-addremoveprograms.md) #### [ADMX_AppCompat](policy-csp-admx-appcompat.md) #### [ADMX_AuditSettings](policy-csp-admx-auditsettings.md) @@ -233,6 +234,7 @@ #### [ADMX_WindowsMediaPlayer](policy-csp-admx-windowsmediaplayer.md) #### [ADMX_WindowsStore](policy-csp-admx-windowsstore.md) #### [ADMX_WinInit](policy-csp-admx-wininit.md) +#### [ADMX_WinLogon](policy-csp-admx-winlogon.md) #### [ADMX_wlansvc](policy-csp-admx-wlansvc.md) #### [ApplicationDefaults](policy-csp-applicationdefaults.md) #### [ApplicationManagement](policy-csp-applicationmanagement.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 1ce31e59ba..4215e9c6ec 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -21,7 +21,8 @@ ms.date: 10/08/2020 > - [ActiveXControls/ApprovedInstallationSites](./policy-csp-activexcontrols.md#activexcontrols-approvedinstallationsites) -- [ADMX_AddRemovePrograms/DefaultCategory](/policy-csp-admx-addremoveprograms.md#admx-addremoveprograms-defaultcategory) +- [ADMX_ActiveXInstallService/AxISURLZonePolicies](./policy-csp-admx-activexinstallservice.md#admx-activexinstallservice-axisurlzonepolicies) +- [ADMX_AddRemovePrograms/DefaultCategory](./policy-csp-admx-addremoveprograms.md#admx-addremoveprograms-defaultcategory) - [ADMX_AddRemovePrograms/NoAddFromCDorFloppy](./policy-csp-admx-addremoveprograms.md#admx-addremoveprograms-noaddfromcdorfloppy) - [ADMX_AddRemovePrograms/NoAddFromInternet](./policy-csp-admx-addremoveprograms.md#admx-addremoveprograms-noaddfrominternet) - [ADMX_AddRemovePrograms/NoAddFromNetwork](./policy-csp-admx-addremoveprograms.md#admx-addremoveprograms-noaddfromnetwork) @@ -819,6 +820,12 @@ ms.date: 10/08/2020 - [ADMX_WinInit/DisableNamedPipeShutdownPolicyDescription](./policy-csp-admx-wininit.md#admx-wininit-disablenamedpipeshutdownpolicydescription) - [ADMX_WinInit/Hiberboot](./policy-csp-admx-wininit.md#admx-wininit-hiberboot) - [ADMX_WinInit/ShutdownTimeoutHungSessionsDescription](./policy-csp-admx-wininit.md#admx-wininit-shutdowntimeouthungsessionsdescription) +- [ADMX_WinLogon/CustomShell](./policy-csp-admx-winlogon.md#admx-winlogon-customshell) +- [ADMX_WinLogon/DisplayLastLogonInfoDescription](./policy-csp-admx-winlogon.md#admx-winlogon-displaylastlogoninfodescription) +- [ADMX_WinLogon/LogonHoursNotificationPolicyDescription](./policy-csp-admx-winlogon.md#admx-winlogon-logonhoursnotificationpolicydescription) +- [ADMX_WinLogon/LogonHoursPolicyDescription](./policy-csp-admx-winlogon.md#admx-winlogon-logonhourspolicydescription) +- [ADMX_WinLogon/ReportCachedLogonPolicyDescription](./policy-csp-admx-winlogon.md#admx-winlogon-reportcachedlogonpolicydescription) +- [ADMX_WinLogon/SoftwareSASGeneration](./policy-csp-admx-winlogon.md#admx-winlogon-softwaresasgeneration) - [ADMX_wlansvc/SetCost](./policy-csp-admx-wlansvc.md#admx-wlansvc-setcost) - [ADMX_wlansvc/SetPINEnforced](./policy-csp-admx-wlansvc.md#admx-wlansvc-setpinenforced) - [ADMX_wlansvc/SetPINPreferred](./policy-csp-admx-wlansvc.md#admx-wlansvc-setpinpreferred) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 70d9a769a7..bd0661bf3e 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -168,6 +168,14 @@ The following diagram shows the Policy configuration service provider in tree fo
+### ADMX_ActiveXInstallService policies + +
+
+ ADMX_ActiveXInstallService/AxISURLZonePolicies +
+
+ ### ADMX_AddRemovePrograms policies
@@ -2852,6 +2860,29 @@ The following diagram shows the Policy configuration service provider in tree fo
+### ADMX_WinLogon policies + +
+
+ ADMX_WinLogon/CustomShell +
+
+ ADMX_WinLogon/DisplayLastLogonInfoDescription +
+
+ ADMX_WinLogon/LogonHoursNotificationPolicyDescription +
+
+ ADMX_WinLogon/LogonHoursPolicyDescription +
+
+ ADMX_WinLogon/ReportCachedLogonPolicyDescription +
+
+ ADMX_WinLogon/SoftwareSASGeneration +
+
+ ### ADMX_wlansvc policies
diff --git a/windows/client-management/mdm/policy-csp-admx-activexinstallservice.md b/windows/client-management/mdm/policy-csp-admx-activexinstallservice.md new file mode 100644 index 0000000000..38d15714d4 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-activexinstallservice.md @@ -0,0 +1,119 @@ +--- +title: Policy CSP - ADMX_ActiveXInstallService +description: Policy CSP - ADMX_ActiveXInstallService +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/09/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_ActiveXInstallService +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
+ + +## ADMX_ActiveXInstallService policies + +
+
+ ADMX_ActiveXInstallService/AxISURLZonePolicies +
+
+ + +
+ + +**ADMX_ActiveXInstallService/AxISURLZonePolicies** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the installation of ActiveX controls for sites in Trusted zone. + +If you enable this policy setting, ActiveX controls are installed according to the settings defined by this policy setting. + +If you disable or do not configure this policy setting, ActiveX controls prompt the user before installation. + +If the trusted site uses the HTTPS protocol, this policy setting can also control how ActiveX Installer Service responds to certificate errors. By default all HTTPS connections must supply a server certificate that passes all validation criteria. If you are aware that a trusted site has a certificate error but you want to trust it anyway you can select the certificate errors that you want to ignore. + +> [!NOTE] +> This policy setting applies to all sites in Trusted zones. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Establish ActiveX installation policy for sites in Trusted zones* +- GP name: *AxISURLZonePolicies* +- GP path: *Windows Components\ActiveX Installer Service* +- GP ADMX file name: *ActiveXInstallService.admx* + + + +
+ +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + diff --git a/windows/client-management/mdm/policy-csp-admx-winlogon.md b/windows/client-management/mdm/policy-csp-admx-winlogon.md new file mode 100644 index 0000000000..26187fd26d --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-winlogon.md @@ -0,0 +1,493 @@ +--- +title: Policy CSP - ADMX_WinLogon +description: Policy CSP - ADMX_WinLogon +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/09/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_WinLogon +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
+ + +## ADMX_WinLogon policies + +
+
+ ADMX_WinLogon/CustomShell +
+
+ ADMX_WinLogon/DisplayLastLogonInfoDescription +
+
+ ADMX_WinLogon/LogonHoursNotificationPolicyDescription +
+
+ ADMX_WinLogon/LogonHoursPolicyDescription +
+
+ ADMX_WinLogon/ReportCachedLogonPolicyDescription +
+
+ ADMX_WinLogon/SoftwareSASGeneration +
+
+ + +
+ + +**ADMX_WinLogon/CustomShell** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. Specifies an alternate user interface. The Explorer program (%windir%\explorer.exe) creates the familiar Windows interface, but you can use this setting to specify an alternate interface. + +If you enable this setting, the system starts the interface you specify instead of Explorer.exe. To use this setting, copy your interface program to a network share or to your system drive. Then, enable this setting, and type the name of the interface program, including the file name extension, in the Shell name text box. If the interface program file is not located in a folder specified in the Path environment variable for your system, enter the fully qualified path to the file. + +If you disable this setting or do not configure it, the setting is ignored and the system displays the Explorer interface. + +> [!TIP] +> To find the folders indicated by the Path environment variable, click System Properties in Control Panel, click the Advanced tab, click the Environment Variables button, and then, in the System variables box, click Path. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Custom User Interface* +- GP name: *CustomShell* +- GP path: *System* +- GP ADMX file name: *WinLogon.admx* + + + +
+ + +**ADMX_WinLogon/DisplayLastLogonInfoDescription** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether or not the system displays information about previous logons and logon failures to the user. + +For local user accounts and domain user accounts in domains of at least a Windows Server 2008 functional level, if you enable this setting, a message appears after the user logs on that displays the date and time of the last successful logon by that user, the date and time of the last unsuccessful logon attempted with that user name, and the number of unsuccessful logons since the last successful logon by that user. This message must be acknowledged by the user before the user is presented with the Microsoft Windows desktop. + +For domain user accounts in Windows Server 2003, Windows 2000 native, or Windows 2000 mixed functional level domains, if you enable this setting, a warning message will appear that Windows could not retrieve the information and the user will not be able to log on. Therefore, you should not enable this policy setting if the domain is not at the Windows Server 2008 domain functional level. + +If you disable or do not configure this setting, messages about the previous logon or logon failures are not displayed. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Display information about previous logons during user logon* +- GP name: *DisplayLastLogonInfoDescription* +- GP path: *Windows Components\Windows Logon Options* +- GP ADMX file name: *WinLogon.admx* + + + +
+ + + +**ADMX_WinLogon/LogonHoursNotificationPolicyDescription** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy controls whether the logged on user should be notified when his logon hours are about to expire. By default, a user is notified before logon hours expire, if actions have been set to occur when the logon hours expire. + +If you enable this setting, warnings are not displayed to the user before the logon hours expire. + +If you disable or do not configure this setting, users receive warnings before the logon hours expire, if actions have been set to occur when the logon hours expire. + +> [!NOTE] +> If you configure this setting, you might want to examine and appropriately configure the “Set action to take when logon hours expire” setting. If “Set action to take when logon hours expire” is disabled or not configured, the “Remove logon hours expiration warnings” setting will have no effect, and users receive no warnings about logon hour expiration + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Remove logon hours expiration warnings* +- GP name: *LogonHoursNotificationPolicyDescription* +- GP path: *Windows Components\Windows Logon Options* +- GP ADMX file name: *WinLogon.admx* + + + +
+ + +**ADMX_WinLogon/LogonHoursPolicyDescription** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy controls which action will be taken when the logon hours expire for the logged on user. The actions include lock the workstation, disconnect the user, or log the user off completely. + +If you choose to lock or disconnect a session, the user cannot unlock the session or reconnect except during permitted logon hours. + +If you choose to log off a user, the user cannot log on again except during permitted logon hours. If you choose to log off a user, the user might lose unsaved data. If you enable this setting, the system will perform the action you specify when the user’s logon hours expire. + +If you disable or do not configure this setting, the system takes no action when the user’s logon hours expire. The user can continue the existing session, but cannot log on to a new session. + +> [!NOTE] +> If you configure this setting, you might want to examine and appropriately configure the “Remove logon hours expiration warnings” setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set action to take when logon hours expire* +- GP name: *LogonHoursPolicyDescription* +- GP path: *Windows Components\Windows Logon Options* +- GP ADMX file name: *WinLogon.admx* + + + +
+ + +**ADMX_WinLogon/ReportCachedLogonPolicyDescription** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy controls whether the logged on user should be notified if the logon server could not be contacted during logon and he has been logged on using previously stored account information. + +If enabled, a notification popup will be displayed to the user when the user logs on with cached credentials. + +If disabled or not configured, no popup will be displayed to the user. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Report when logon server was not available during user logon* +- GP name: *ReportCachedLogonPolicyDescription* +- GP path: *Windows Components\Windows Logon Options* +- GP ADMX file name: *WinLogon.admx* + + + +
+ + +**ADMX_WinLogon/SoftwareSASGeneration** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether or not software can simulate the Secure Attention Sequence (SAS). + +If you enable this policy setting, you have one of four options: + +- If you set this policy setting to "None," user mode software cannot simulate the SAS. +- If you set this policy setting to "Services," services can simulate the SAS. +- If you set this policy setting to "Ease of Access applications," Ease of Access applications can simulate the SAS. +- If you set this policy setting to "Services and Ease of Access applications," both services and Ease of Access applications can simulate the SAS. + +If you disable or do not configure this setting, only Ease of Access applications running on the secure desktop can simulate the SAS. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disable or enable software Secure Attention Sequence* +- GP name: *SoftwareSASGeneration* +- GP path: *Windows Components\Windows Logon Options* +- GP ADMX file name: *WinLogon.admx* + + + +
+ +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From cfa3a8f9972cb33abc1b2c0ec05a7c0520f681b1 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 10 Nov 2020 12:13:12 -0800 Subject: [PATCH 08/75] Added AppXRuntime and AppXPAckageManager policies --- windows/client-management/mdm/TOC.md | 2 + .../mdm/policies-in-policy-csp-admx-backed.md | 5 + .../policy-configuration-service-provider.md | 25 ++ .../mdm/policy-csp-admx-appxpackagemanager.md | 120 +++++++ .../mdm/policy-csp-admx-appxruntime.md | 338 ++++++++++++++++++ 5 files changed, 490 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-appxpackagemanager.md create mode 100644 windows/client-management/mdm/policy-csp-admx-appxruntime.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index c5af7336e3..60a0b0fc6f 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -175,6 +175,8 @@ #### [ADMX_ActiveXInstallService](policy-csp-admx-activexinstallservice.md) #### [ADMX_AddRemovePrograms](policy-csp-admx-addremoveprograms.md) #### [ADMX_AppCompat](policy-csp-admx-appcompat.md) +#### [ADMX_AppxPackageManager](policy-csp-admx-appxpackagemanager.md) +#### [ADMX_AppXRuntime](policy-csp-admx-appxruntime.md) #### [ADMX_AuditSettings](policy-csp-admx-auditsettings.md) #### [ADMX_Bits](policy-csp-admx-bits.md) #### [ADMX_CipherSuiteOrder](policy-csp-admx-ciphersuiteorder.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 4215e9c6ec..87d8c00b35 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -42,6 +42,11 @@ ms.date: 10/08/2020 - [ADMX_AppCompat/AppCompatTurnOffProgramCompatibilityAssistant_2](./policy-csp-admx-appcompat.md#admx-appcompat-appcompatturnoffprogramcompatibilityassistant_2) - [ADMX_AppCompat/AppCompatTurnOffUserActionRecord](./policy-csp-admx-appcompat.md#admx-appcompat-appcompatturnoffuseractionrecord) - [ADMX_AppCompat/AppCompatTurnOffProgramInventory](./policy-csp-admx-appcompat.md#admx-appcompat-appcompatturnoffprograminventory) +- [ADMX_AppxPackageManager/AllowDeploymentInSpecialProfiles](./policy-csp-admx-appxpackagemanager.md#admx-appxpackagemanager-allowdeploymentinspecialprofiles) +- [ADMX_AppXRuntime/AppxRuntimeApplicationContentUriRules](./policy-csp-admx-appxruntime.md#admx-appxruntime-appxruntimeapplicationcontenturirules) +- [ADMX_AppXRuntime/AppxRuntimeBlockFileElevation](./policy-csp-admx-appxruntime.md#admx-appxruntime-appxruntimeblockfileelevation) +- [ADMX_AppXRuntime/AppxRuntimeBlockHostedAppAccessWinRT](./policy-csp-admx-appxruntime.md#admx-appxruntime-appxruntimeblockhostedappaccesswinrt) +- [ADMX_AppXRuntime/AppxRuntimeBlockProtocolElevation](./policy-csp-admx-appxruntime.md#admx-appxruntime-appxruntimeblockprotocolelevation) - [ADMX_AuditSettings/IncludeCmdLine](./policy-csp-admx-auditsettings.md#admx-auditsettings-includecmdline) - [ADMX_Bits/BITS_DisableBranchCache](./policy-csp-admx-bits.md#admx-bits-bits-disablebranchcache) - [ADMX_Bits/BITS_DisablePeercachingClient](./policy-csp-admx-bits.md#admx-bits-bits-disablepeercachingclient) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index bd0661bf3e..515a332e40 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -245,6 +245,31 @@ The following diagram shows the Policy configuration service provider in tree fo
+### ADMX_AppxPackageManager policies + +
+
+ ADMX_AppxPackageManager/AllowDeploymentInSpecialProfiles +
+
+ +### ADMX_AppXRuntime policies + +
+
+ ADMX_AppXRuntime/AppxRuntimeApplicationContentUriRules +
+
+ ADMX_AppXRuntime/AppxRuntimeBlockFileElevation +
+
+ ADMX_AppXRuntime/AppxRuntimeBlockHostedAppAccessWinRT +
+
+ ADMX_AppXRuntime/AppxRuntimeBlockProtocolElevation +
+
+ ### ADMX_AuditSettings policies
diff --git a/windows/client-management/mdm/policy-csp-admx-appxpackagemanager.md b/windows/client-management/mdm/policy-csp-admx-appxpackagemanager.md new file mode 100644 index 0000000000..44f5d6b6f7 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-appxpackagemanager.md @@ -0,0 +1,120 @@ +--- +title: Policy CSP - ADMX_AppxPackageManager +description: Policy CSP - ADMX_AppxPackageManager +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/10/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_AppxPackageManager +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
+ + +## ADMX_AppxPackageManager policies + +
+
+ ADMX_AppxPackageManager/AllowDeploymentInSpecialProfiles +
+
+ + +
+ + +**ADMX_AppxPackageManager/AllowDeploymentInSpecialProfiles** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage the deployment of Windows Store apps when the user is signed in using a special profile. + +Special profiles are the following user profiles, where changes are discarded after the user signs off: + +- Roaming user profiles to which the "Delete cached copies of roaming profiles" Group Policy setting applies +- Mandatory user profiles and super-mandatory profiles, which are created by an administrator +- Temporary user profiles, which are created when an error prevents the correct profile from loading +- User profiles for the Guest account and members of the Guests group + +If you enable this policy setting, Group Policy allows deployment operations (adding, registering, staging, updating, or removing an app package) of Windows Store apps when using a special profile. + +If you disable or do not configure this policy setting, Group Policy blocks deployment operations of Windows Store apps when using a special profile. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow deployment operations in special profiles* +- GP name: *AllowDeploymentInSpecialProfiles* +- GP path: *Windows Components\App Package Deployment* +- GP ADMX file name: *AppxPackageManager.admx* + + + +
+ +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file diff --git a/windows/client-management/mdm/policy-csp-admx-appxruntime.md b/windows/client-management/mdm/policy-csp-admx-appxruntime.md new file mode 100644 index 0000000000..8dcf16d88f --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-appxruntime.md @@ -0,0 +1,338 @@ +--- +title: Policy CSP - ADMX_AppXRuntime +description: Policy CSP - ADMX_AppXRuntime +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/10/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_AppXRuntime +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
+ + +## ADMX_AppXRuntime policies + +
+
+ ADMX_AppXRuntime/AppxRuntimeApplicationContentUriRules +
+
+ ADMX_AppXRuntime/AppxRuntimeBlockFileElevation +
+
+ ADMX_AppXRuntime/AppxRuntimeBlockHostedAppAccessWinRT +
+
+ ADMX_AppXRuntime/AppxRuntimeBlockProtocolElevation +
+
+ + +
+ + +**ADMX_AppXRuntime/AppxRuntimeApplicationContentUriRules** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting lets you turn on Content URI Rules to supplement the static Content URI Rules that were defined as part of the app manifest and apply to all Windows Store apps that use the enterpriseAuthentication capability on a computer. + +If you enable this policy setting, you can define additional Content URI Rules that all Windows Store apps that use the enterpriseAuthentication capability on a computer can use. + +If you disable or don't set this policy setting, Windows Store apps will only use the static Content URI Rules. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on dynamic Content URI Rules for Windows store apps* +- GP name: *AppxRuntimeApplicationContentUriRules* +- GP path: *Windows Components\App runtime* +- GP ADMX file name: *AppXRuntime.admx* + + + +
+ + +**ADMX_AppXRuntime/AppxRuntimeBlockFileElevation** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting lets you control whether Windows Store apps can open files using the default desktop app for a file type. Because desktop apps run at a higher integrity level than Windows Store apps, there is a risk that a Windows Store app might compromise the system by opening a file in the default desktop app for a file type. + +If you enable this policy setting, Windows Store apps cannot open files in the default desktop app for a file type; they can open files only in other Windows Store apps. + +If you disable or do not configure this policy setting, Windows Store apps can open files in the default desktop app for a file type. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Block launching desktop apps associated with a file.* +- GP name: *AppxRuntimeBlockFileElevation* +- GP path: *Windows Components\App runtime* +- GP ADMX file name: *AppXRuntime.admx* + + + +
+ + +**ADMX_AppXRuntime/AppxRuntimeBlockHostedAppAccessWinRT** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether Universal Windows apps with Windows Runtime API access directly from web content can be launched. + +If you enable this policy setting, Universal Windows apps which declare Windows Runtime API access in ApplicationContentUriRules section of the manifest cannot be launched; Universal Windows apps which have not declared Windows Runtime API access in the manifest are not affected. + +If you disable or do not configure this policy setting, all Universal Windows apps can be launched. + +> [!WARNING] +> This policy should not be enabled unless recommended by Microsoft as a security response because it can cause severe app compatibility issues. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Block launching Universal Windows apps with Windows Runtime API access from hosted content.* +- GP name: *AppxRuntimeBlockHostedAppAccessWinRT* +- GP path: *Windows Components\App runtime* +- GP ADMX file name: *AppXRuntime.admx* + + + +
+ + +**ADMX_AppXRuntime/AppxRuntimeBlockProtocolElevation** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting lets you control whether Windows Store apps can open URIs using the default desktop app for a URI scheme. Because desktop apps run at a higher integrity level than Windows Store apps, there is a risk that a URI scheme launched by a Windows Store app might compromise the system by launching a desktop app. + +If you enable this policy setting, Windows Store apps cannot open URIs in the default desktop app for a URI scheme; they can open URIs only in other Windows Store apps. + +If you disable or do not configure this policy setting, Windows Store apps can open URIs in the default desktop app for a URI scheme. + +> [!NOTE] +> Enabling this policy setting does not block Windows Store apps from opening the default desktop app for the http, https, and mailto URI schemes. The handlers for these URI schemes are hardened against URI-based vulnerabilities from untrusted sources, reducing the associated risk. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Block launching desktop apps associated with a URI scheme* +- GP name: *AppxRuntimeBlockProtocolElevation* +- GP path: *Windows Components\App runtime* +- GP ADMX file name: *AppXRuntime.admx* + + + +
+ +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From ed82ef3409f4fc9c9608fdaac7c4bdd10b004b85 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 10 Nov 2020 13:44:29 -0800 Subject: [PATCH 09/75] Added AttachementManager policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 5 + .../policy-configuration-service-provider.md | 20 + .../mdm/policy-csp-admx-attachmentmanager.md | 422 ++++++++++++++++++ 4 files changed, 448 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-attachmentmanager.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 60a0b0fc6f..4ae9979e4c 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -177,6 +177,7 @@ #### [ADMX_AppCompat](policy-csp-admx-appcompat.md) #### [ADMX_AppxPackageManager](policy-csp-admx-appxpackagemanager.md) #### [ADMX_AppXRuntime](policy-csp-admx-appxruntime.md) +#### [ADMX_AttachmentManager](policy-csp-admx-attachmentmanager.md) #### [ADMX_AuditSettings](policy-csp-admx-auditsettings.md) #### [ADMX_Bits](policy-csp-admx-bits.md) #### [ADMX_CipherSuiteOrder](policy-csp-admx-ciphersuiteorder.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 87d8c00b35..f8ae27ab30 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -47,6 +47,11 @@ ms.date: 10/08/2020 - [ADMX_AppXRuntime/AppxRuntimeBlockFileElevation](./policy-csp-admx-appxruntime.md#admx-appxruntime-appxruntimeblockfileelevation) - [ADMX_AppXRuntime/AppxRuntimeBlockHostedAppAccessWinRT](./policy-csp-admx-appxruntime.md#admx-appxruntime-appxruntimeblockhostedappaccesswinrt) - [ADMX_AppXRuntime/AppxRuntimeBlockProtocolElevation](./policy-csp-admx-appxruntime.md#admx-appxruntime-appxruntimeblockprotocolelevation) +- [ADMX_AttachmentManager/AM_EstimateFileHandlerRisk](./policy-csp-admx-attachmentmanager.md#admx-attachmentmanager-am-estimatefilehandlerrisk) +- [ADMX_AttachmentManager/AM_SetFileRiskLevel](./policy-csp-admx-attachmentmanager.md#admx-attachmentmanager-am-setfilerisklevel) +- [ADMX_AttachmentManager/AM_SetHighRiskInclusion](./policy-csp-admx-attachmentmanager.md#admx-attachmentmanager-am-sethighriskinclusion) +- [ADMX_AttachmentManager/AM_SetLowRiskInclusion](./policy-csp-admx-attachmentmanager.md#admx-attachmentmanager-am-setlowriskinclusion) +- [ADMX_AttachmentManager/AM_SetModRiskInclusion](./policy-csp-admx-attachmentmanager.md#admx-attachmentmanager-am-setmodriskinclusion) - [ADMX_AuditSettings/IncludeCmdLine](./policy-csp-admx-auditsettings.md#admx-auditsettings-includecmdline) - [ADMX_Bits/BITS_DisableBranchCache](./policy-csp-admx-bits.md#admx-bits-bits-disablebranchcache) - [ADMX_Bits/BITS_DisablePeercachingClient](./policy-csp-admx-bits.md#admx-bits-bits-disablepeercachingclient) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 515a332e40..3fac6f18b7 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -270,6 +270,26 @@ The following diagram shows the Policy configuration service provider in tree fo
+### ADMX_AttachmentManager policies + +
+
+ ADMX_AttachmentManager/AM_EstimateFileHandlerRisk +
+
+ ADMX_AttachmentManager/AM_SetFileRiskLevel +
+
+ ADMX_AttachmentManager/AM_SetHighRiskInclusion +
+
+ ADMX_AttachmentManager/AM_SetLowRiskInclusion +
+
+ ADMX_AttachmentManager/AM_SetModRiskInclusion +
+
+ ### ADMX_AuditSettings policies
diff --git a/windows/client-management/mdm/policy-csp-admx-attachmentmanager.md b/windows/client-management/mdm/policy-csp-admx-attachmentmanager.md new file mode 100644 index 0000000000..e43001ae9c --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-attachmentmanager.md @@ -0,0 +1,422 @@ +--- +title: Policy CSP - ADMX_AttachmentManager +description: Policy CSP - ADMX_AttachmentManager +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/10/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_AttachmentManager +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
+ + +## ADMX_AttachmentManager policies + +
+
+ ADMX_AttachmentManager/AM_EstimateFileHandlerRisk +
+
+ ADMX_AttachmentManager/AM_SetFileRiskLevel +
+
+ ADMX_AttachmentManager/AM_SetHighRiskInclusion +
+
+ ADMX_AttachmentManager/AM_SetLowRiskInclusion +
+
+ ADMX_AttachmentManager/AM_SetModRiskInclusion +
+
+ + +
+ + +**ADMX_AttachmentManager/AM_EstimateFileHandlerRisk** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure the logic that Windows uses to determine the risk for file attachments. + +Preferring the file handler instructs Windows to use the file handler data over the file type data. For example, trust notepad.exe, but don't trust .txt files. + +Preferring the file type instructs Windows to use the file type data over the file handler data. For example, trust .txt files, regardless of the file handler. Using both the file handler and type data is the most restrictive option. Windows chooses the more restrictive recommendation which will cause users to see more trust prompts than choosing the other options. + +If you enable this policy setting, you can choose the order in which Windows processes risk assessment data. + +If you disable this policy setting, Windows uses its default trust logic, which prefers the file handler over the file type. + +If you do not configure this policy setting, Windows uses its default trust logic, which prefers the file handler over the file type. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Trust logic for file attachments* +- GP name: *AM_EstimateFileHandlerRisk* +- GP path: *Windows Components\Attachment Manager* +- GP ADMX file name: *AttachmentManager.admx* + + + +
+ + +**ADMX_AttachmentManager/AM_SetFileRiskLevel** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage the default risk level for file types. To fully customize the risk level for file attachments, you may also need to configure the trust logic for file attachments. + +High Risk: If the attachment is in the list of high-risk file types and is from the restricted zone, Windows blocks the user from accessing the file. If the file is from the Internet zone, Windows prompts the user before accessing the file. + +Moderate Risk: If the attachment is in the list of moderate-risk file types and is from the restricted or Internet zone, Windows prompts the user before accessing the file. + +Low Risk: If the attachment is in the list of low-risk file types, Windows will not prompt the user before accessing the file, regardless of the file's zone information. + +If you enable this policy setting, you can specify the default risk level for file types. + +If you disable this policy setting, Windows sets the default risk level to moderate. + +If you do not configure this policy setting, Windows sets the default risk level to moderate. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Default risk level for file attachments* +- GP name: *AM_SetFileRiskLevel* +- GP path: *Windows Components\Attachment Manager* +- GP ADMX file name: *AttachmentManager.admx* + + + +
+ + +**ADMX_AttachmentManager/AM_SetHighRiskInclusion** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure the list of high-risk file types. If the file attachment is in the list of high-risk file types and is from the restricted zone, Windows blocks the user from accessing the file. If the file is from the Internet zone, Windows prompts the user before accessing the file. This inclusion list takes precedence over the medium-risk and low-risk inclusion lists (where an extension is listed in more than one inclusion list). + +If you enable this policy setting, you can create a custom list of high-risk file types. + +If you disable this policy setting, Windows uses its built-in list of file types that pose a high risk. + +If you do not configure this policy setting, Windows uses its built-in list of high-risk file types. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Inclusion list for high risk file types* +- GP name: *AM_SetHighRiskInclusion* +- GP path: *Windows Components\Attachment Manager* +- GP ADMX file name: *AttachmentManager.admx* + + + +
+ + +**ADMX_AttachmentManager/AM_SetLowRiskInclusion** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure the list of low-risk file types. If the attachment is in the list of low-risk file types, Windows will not prompt the user before accessing the file, regardless of the file's zone information. This inclusion list overrides the list of high-risk file types built into Windows and has a lower precedence than the high-risk or medium-risk inclusion lists (where an extension is listed in more than one inclusion list). + +If you enable this policy setting, you can specify file types that pose a low risk. + +If you disable this policy setting, Windows uses its default trust logic. + +If you do not configure this policy setting, Windows uses its default trust logic. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Inclusion list for low file types* +- GP name: *AM_SetLowRiskInclusion* +- GP path: *Windows Components\Attachment Manager* +- GP ADMX file name: *AttachmentManager.admx* + + + +
+ + +**ADMX_AttachmentManager/AM_SetModRiskInclusion** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure the list of moderate-risk file types. If the attachment is in the list of moderate-risk file types and is from the restricted or Internet zone, Windows prompts the user before accessing the file. This inclusion list overrides the list of potentially high-risk file types built into Windows and it takes precedence over the low-risk inclusion list but has a lower precedence than the high-risk inclusion list (where an extension is listed in more than one inclusion list). + +If you enable this policy setting, you can specify file types which pose a moderate risk. + +If you disable this policy setting, Windows uses its default trust logic. + +If you do not configure this policy setting, Windows uses its default trust logic. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Inclusion list for moderate risk file types* +- GP name: *AM_SetModRiskInclusion* +- GP path: *Windows Components\Attachment Manager* +- GP ADMX file name: *AttachmentManager.admx* + + + +
+ +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From 488913f75e7cf65ba68596ab3ce94631f70dfbcb Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 11 Nov 2020 15:47:15 -0800 Subject: [PATCH 10/75] Added new policies --- windows/client-management/mdm/TOC.md | 3 + .../mdm/policies-in-policy-csp-admx-backed.md | 32 + .../policy-configuration-service-provider.md | 111 + .../policy-csp-admx-credentialproviders.md | 412 ++++ .../mdm/policy-csp-admx-credui.md | 185 ++ .../mdm/policy-csp-admx-userprofiles.md | 1997 +++++++++++++++++ 6 files changed, 2740 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-credentialproviders.md create mode 100644 windows/client-management/mdm/policy-csp-admx-credui.md create mode 100644 windows/client-management/mdm/policy-csp-admx-userprofiles.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 4ae9979e4c..19328d6086 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -185,6 +185,8 @@ #### [ADMX_ControlPanel](policy-csp-admx-controlpanel.md) #### [ADMX_ControlPanelDisplay](policy-csp-admx-controlpaneldisplay.md) #### [ADMX_Cpls](policy-csp-admx-cpls.md) +#### [ADMX_CredentialProviders](policy-csp-admx-credentialproviders.md) +#### [ADMX_CredUI](policy-csp-admx-credui.md) #### [ADMX_CtrlAltDel](policy-csp-admx-ctrlaltdel.md) #### [ADMX_DigitalLocker](policy-csp-admx-digitallocker.md) #### [ADMX_DnsClient](policy-csp-admx-dnsclient.md) @@ -227,6 +229,7 @@ #### [ADMX_Thumbnails](policy-csp-admx-thumbnails.md) #### [ADMX_TPM](policy-csp-admx-tpm.md) #### [ADMX_UserExperienceVirtualization](policy-csp-admx-userexperiencevirtualization.md) +#### [ADMX_UserProfiles](policy-csp-admx-userprofiles.md) #### [ADMX_W32Time](policy-csp-admx-w32time.md) #### [ADMX_WCM](policy-csp-admx-wcm.md) #### [ADMX_WinCal](policy-csp-admx-wincal.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index f8ae27ab30..d9c44122bd 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -100,6 +100,13 @@ ms.date: 10/08/2020 - [ADMX_ControlPanelDisplay/CPL_Personalization_SetVisualStyle](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-setvisualstyle) - [ADMX_ControlPanelDisplay/CPL_Personalization_StartBackground](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-startbackground) - [ADMX_Cpls/UseDefaultTile](./policy-csp-admx-cpls.md#admx-cpls-usedefaulttile) +- [ADMX_CredentialProviders/AllowDomainDelayLock](./policy-csp-admx-credentialproviders.md#admx-credentialproviders-allowdomaindelaylock) +- [ADMX_CredentialProviders/AllowSecurityKeySignIn](./policy-csp-admx-credentialproviders.md#admx-credentialproviders-allowsecuritykeysignin) +- [ADMX_CredentialProviders/DefaultCredentialProvider](./policy-csp-admx-credentialproviders.md#admx-credentialproviders-defaultcredentialprovider) +- [ADMX_CredentialProviders/DefaultLogonDomain](./policy-csp-admx-credentialproviders.md#admx-credentialproviders-defaultlogondomain) +- [ADMX_CredentialProviders/ExcludedCredentialProviders](./policy-csp-admx-credentialproviders.md#admx-credentialproviders-excludedcredentialproviders) +- [ADMX_CredUI/EnableSecureCredentialPrompting](./policy-csp-admx-credui.md#admx-credui-enablesecurecredentialprompting) +- [ADMX_CredUI/NoLocalPasswordResetQuestions](./policy-csp-admx-credui.md#admx-credui-nolocalpasswordresetquestions) - [ADMX_CtrlAltDel/DisableChangePassword](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-disablechangepassword) - [ADMX_CtrlAltDel/DisableLockComputer](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-disablelockcomputer) - [ADMX_CtrlAltDel/DisableTaskMgr](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-disabletaskmgr) @@ -716,6 +723,31 @@ ms.date: 10/08/2020 - [ADMX_UserExperienceVirtualization/Video](./policy-csp-admx-userexperiencevirtualization.md#admx-userexperiencevirtualization-video) - [ADMX_UserExperienceVirtualization/Weather](./policy-csp-admx-userexperiencevirtualization.md#admx-userexperiencevirtualization-weather) - [ADMX_UserExperienceVirtualization/Wordpad](./policy-csp-admx-userexperiencevirtualization.md#admx-userexperiencevirtualization-wordpad) +- [ADMX_UserProfiles/AddAdminGroupToRUP](./policy-csp-admx-userprofiles.md#admx-userprofiles-addadmingrouptorup) +- [ADMX_UserProfiles/CleanupProfiles](./policy-csp-admx-userprofiles.md#admx-userprofiles-cleanupprofiles) +- [ADMX_UserProfiles/CompatibleRUPSecurity](./policy-csp-admx-userprofiles.md#admx-userprofiles-compatiblerupsecurity) +- [ADMX_UserProfiles/Connect_HomeDir_ToRoot](./policy-csp-admx-userprofiles.md#admx-userprofiles-connect-homedir-toroot) +- [ADMX_UserProfiles/CscSuspendDirectories](./policy-csp-admx-userprofiles.md#admx-userprofiles-cscsuspenddirectories) +- [ADMX_UserProfiles/DeleteRoamingCachedProfiles](./policy-csp-admx-userprofiles.md#admx-userprofiles-deleteroamingcachedprofiles) +- [ADMX_UserProfiles/DontForceUnloadHive](./policy-csp-admx-userprofiles.md#admx-userprofiles-dontforceunloadhive) +- [ADMX_UserProfiles/EnableSlowLinkDetect](./policy-csp-admx-userprofiles.md#admx-userprofiles-enableslowlinkdetect) +- [ADMX_UserProfiles/EnableSlowLinkUI](./policy-csp-admx-userprofiles.md#admx-userprofiles-enableslowlinkui) +- [ADMX_UserProfiles/ExcludeDirectories](./policy-csp-admx-userprofiles.md#admx-userprofiles-excludedirectories) +- [ADMX_UserProfiles/LeaveAppMgmtData](./policy-csp-admx-userprofiles.md#admx-userprofiles-leaveappmgmtdata) +- [ADMX_UserProfiles/LimitSize](./policy-csp-admx-userprofiles.md#admx-userprofiles-limitsize) +- [ADMX_UserProfiles/LocalProfile](./policy-csp-admx-userprofiles.md#admx-userprofiles-localprofile) +- [ADMX_UserProfiles/MachineProfilePath](./policy-csp-admx-userprofiles.md#admx-userprofiles-machineprofilepath) +- [ADMX_UserProfiles/PrimaryComputer_RUP](./policy-csp-admx-userprofiles.md#admx-userprofiles-primarycomputer-rup) +- [ADMX_UserProfiles/ProfileDlgTimeOut](./policy-csp-admx-userprofiles.md#admx-userprofiles-profiledlgtimeout) +- [ADMX_UserProfiles/ProfileErrorAction](./policy-csp-admx-userprofiles.md#admx-userprofiles-profileerroraction) +- [ADMX_UserProfiles/ProfileUnloadTimeout](./policy-csp-admx-userprofiles.md#admx-userprofiles-profileunloadtimeout) +- [ADMX_UserProfiles/Readonlyuserprofile](./policy-csp-admx-userprofiles.md#admx-userprofiles-readonlyuserprofile) +- [ADMX_UserProfiles/SlowLinkDefault](./policy-csp-admx-userprofiles.md#admx-userprofiles-slowlinkdefault) +- [ADMX_UserProfiles/SlowLinkTimeOut](./policy-csp-admx-userprofiles.md#admx-userprofiles-slowlinktimeout) +- [ADMX_UserProfiles/USER_HOME](./policy-csp-admx-userprofiles.md#admx-userprofiles-user-home) +- [ADMX_UserProfiles/UploadHive](./policy-csp-admx-userprofiles.md#admx-userprofiles-uploadhive) +- [ADMX_UserProfiles/UserInfoAccessAction](./policy-csp-admx-userprofiles.md#admx-userprofiles-userinfoaccessaction) +- [ADMX_UserProfiles/WaitForNetwork](./policy-csp-admx-userprofiles.md#admx-userprofiles-waitfornetwork) - [ADMX_W32Time/W32TIME_POLICY_CONFIG](./policy-csp-admx-w32time.md#admx-w32time-policy-config) - [ADMX_W32Time/W32TIME_POLICY_CONFIGURE_NTPCLIENT](./policy-csp-admx-w32time.md#admx-w32time-policy-configure-ntpclient) - [ADMX_W32Time/W32TIME_POLICY_ENABLE_NTPCLIENT](./policy-csp-admx-w32time.md#admx-w32time-policy-enable-ntpclient) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 3fac6f18b7..c4ea4193bf 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -479,6 +479,37 @@ The following diagram shows the Policy configuration service provider in tree fo
+### ADMX_CredentialProviders policies + +
+
+ ADMX_CredentialProviders/AllowDomainDelayLock +
+
+ ADMX_CredentialProviders/AllowSecurityKeySignIn +
+
+ ADMX_CredentialProviders/DefaultCredentialProvider +
+
+ ADMX_CredentialProviders/DefaultLogonDomain +
+
+ ADMX_CredentialProviders/ExcludedCredentialProviders +
+
+ +### ADMX_CredUI policies + +
+
+ ADMX_CredUI/EnableSecureCredentialPrompting +
+
+ ADMX_CredUI/NoLocalPasswordResetQuestions +
+
+ ### ADMX_CtrlAltDel policies
@@ -2512,6 +2543,86 @@ The following diagram shows the Policy configuration service provider in tree fo
+### ADMX_UserProfiles policies + +
+
+ ADMX_UserProfiles/AddAdminGroupToRUP +
+
+ ADMX_UserProfiles/CleanupProfiles +
+
+ ADMX_UserProfiles/CompatibleRUPSecurity +
+
+ ADMX_UserProfiles/Connect_HomeDir_ToRoot +
+
+ ADMX_UserProfiles/CscSuspendDirectories +
+
+ ADMX_UserProfiles/DeleteRoamingCachedProfiles +
+
+ ADMX_UserProfiles/DontForceUnloadHive +
+
+ ADMX_UserProfiles/EnableSlowLinkDetect +
+
+ ADMX_UserProfiles/EnableSlowLinkUI +
+
+ ADMX_UserProfiles/ExcludeDirectories +
+
+ ADMX_UserProfiles/LeaveAppMgmtData +
+
+ ADMX_UserProfiles/LimitSize +
+
+ ADMX_UserProfiles/LocalProfile +
+
+ ADMX_UserProfiles/MachineProfilePath +
+
+ ADMX_UserProfiles/PrimaryComputer_RUP +
+
+ ADMX_UserProfiles/ProfileDlgTimeOut +
+
+ ADMX_UserProfiles/ProfileErrorAction +
+
+ ADMX_UserProfiles/ProfileUnloadTimeout +
+
+ ADMX_UserProfiles/Readonlyuserprofile +
+
+ ADMX_UserProfiles/SlowLinkDefault +
+
+ ADMX_UserProfiles/SlowLinkTimeOut +
+
+ ADMX_UserProfiles/USER_HOME +
+
+ ADMX_UserProfiles/UploadHive +
+
+ ADMX_UserProfiles/UserInfoAccessAction +
+
+ ADMX_UserProfiles/WaitForNetwork +
+
+ ### ADMX_W32Time policies
diff --git a/windows/client-management/mdm/policy-csp-admx-credentialproviders.md b/windows/client-management/mdm/policy-csp-admx-credentialproviders.md new file mode 100644 index 0000000000..f01336f9ad --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-credentialproviders.md @@ -0,0 +1,412 @@ +--- +title: Policy CSP - ADMX_CredentialProviders +description: Policy CSP - ADMX_CredentialProviders +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/11/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_CredentialProviders +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
+ + +## ADMX_CredentialProviders policies + +
+
+ ADMX_CredentialProviders/AllowDomainDelayLock +
+
+ ADMX_CredentialProviders/AllowSecurityKeySignIn +
+
+ ADMX_CredentialProviders/DefaultCredentialProvider +
+
+ ADMX_CredentialProviders/DefaultLogonDomain +
+
+ ADMX_CredentialProviders/ExcludedCredentialProviders +
+
+ + +
+ + +**ADMX_CredentialProviders/AllowDomainDelayLock** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to control whether a user can change the time before a password is required when a Connected Standby device screen turns off. + +If you enable this policy setting, a user on a Connected Standby device can change the amount of time after the device's screen turns off before a password is required when waking the device. The time is limited by any EAS settings or Group Policies that affect the maximum idle time before a device locks. Additionally, if a password is required when a screensaver turns on, the screensaver timeout will limit the options the user may choose. + +If you disable this policy setting, a user cannot change the amount of time after the device's screen turns off before a password is required when waking the device. Instead, a password is required immediately after the screen turns off. + +If you don't configure this policy setting on a domain-joined device, a user cannot change the amount of time after the device's screen turns off before a password is required when waking the device. Instead, a password is required immediately after the screen turns off. + +If you don't configure this policy setting on a workgroup device, a user on a Connected Standby device can change the amount of time after the device's screen turns off before a password is required when waking the device. The time is limited by any EAS settings or Group Policies that affect the maximum idle time before a device locks. Additionally, if a password is required when a screensaver turns on, the screensaver timeout will limit the options the user may choose. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow users to select when a password is required when resuming from connected standby* +- GP name: *AllowDomainDelayLock* +- GP path: *System\Logon* +- GP ADMX file name: *CredentialProviders.admx* + + + +
+ + +**ADMX_CredentialProviders/AllowSecurityKeySignIn** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to control whether users can sign in using external security keys. + +If you enable this policy setting, users can sign in with external security keys. + +If you disable or don't configure this policy setting, users can't sign in with external security keys. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on security key sign-in* +- GP name: *AllowSecurityKeySignIn* +- GP path: *System\Logon* +- GP ADMX file name: *CredentialProviders.admx* + + + +
+ + +**ADMX_CredentialProviders/DefaultCredentialProvider** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows the administrator to assign a specified credential provider as the default credential provider. + +If you enable this policy setting, the specified credential provider is selected on other user tile. + +If you disable or do not configure this policy setting, the system picks the default credential provider on other user tile. + +> [!NOTE] +> A list of registered credential providers and their GUIDs can be found in the registry at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Assign a default credential provider* +- GP name: *DefaultCredentialProvider* +- GP path: *System\Logon* +- GP ADMX file name: *CredentialProviders.admx* + + + +
+ + +**ADMX_CredentialProviders/DefaultLogonDomain** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies a default logon domain, which might be a different domain than the domain to which the computer is joined. Without this policy setting, at logon, if a user does not specify a domain for logon, the domain to which the computer belongs is assumed as the default domain. For example if the computer belongs to the Fabrikam domain, the default domain for user logon is Fabrikam. + +If you enable this policy setting, the default logon domain is set to the specified domain, which might be different than the domain to which the computer is joined. + +If you disable or do not configure this policy setting, the default logon domain is always set to the domain to which the computer is joined. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Assign a default domain for logon* +- GP name: *DefaultLogonDomain* +- GP path: *System\Logon* +- GP ADMX file name: *CredentialProviders.admx* + + + +
+ + +**ADMX_CredentialProviders/ExcludedCredentialProviders** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows the administrator to exclude the specified credential providers from use during authentication. + +> [!NOTE] +> Credential providers are used to process and validate user credentials during logon or when authentication is required. Windows Vista provides two default credential providers: Password and Smart Card. An administrator can install additional credential providers for different sets of credentials (for example, to support biometric authentication). + +If you enable this policy, an administrator can specify the CLSIDs of the credential providers to exclude from the set of installed credential providers available for authentication purposes. + +If you disable or do not configure this policy, all installed and otherwise enabled credential providers are available for authentication purposes. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Exclude credential providers* +- GP name: *ExcludedCredentialProviders* +- GP path: *System\Logon* +- GP ADMX file name: *CredentialProviders.admx* + + + +
+ +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + diff --git a/windows/client-management/mdm/policy-csp-admx-credui.md b/windows/client-management/mdm/policy-csp-admx-credui.md new file mode 100644 index 0000000000..9247d038a8 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-credui.md @@ -0,0 +1,185 @@ +--- +title: Policy CSP - ADMX_CredUI +description: Policy CSP - ADMX_CredUI +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/09/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_CredUI +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
+ + +## ADMX_CredUI policies + +
+
+ ADMX_CredUI/EnableSecureCredentialPrompting +
+
+ ADMX_CredUI/NoLocalPasswordResetQuestions +
+
+ + +
+ + +**ADMX_CredUI/EnableSecureCredentialPrompting** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting requires the user to enter Microsoft Windows credentials using a trusted path, to prevent a Trojan horse or other types of malicious code from stealing the user’s Windows credentials. + +> [!NOTE] +> This policy affects nonlogon authentication tasks only. As a security best practice, this policy should be enabled. + +If you enable this policy setting, users will be required to enter Windows credentials on the Secure Desktop by means of the trusted path mechanism. + +If you disable or do not configure this policy setting, users will enter Windows credentials within the user’s desktop session, potentially allowing malicious code access to the user’s Windows credentials. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Require trusted path for credential entry* +- GP name: *EnableSecureCredentialPrompting* +- GP path: *Windows Components\Credential User Interface* +- GP ADMX file name: *CredUI.admx* + + + +
+ + +**ADMX_CredUI/NoLocalPasswordResetQuestions** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. If you turn this policy setting on, local users won’t be able to set up and use security questions to reset their passwords. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent the use of security questions for local accounts* +- GP name: *NoLocalPasswordResetQuestions* +- GP path: *Windows Components\Credential User Interface* +- GP ADMX file name: *CredUI.admx* + + + +
+ +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + diff --git a/windows/client-management/mdm/policy-csp-admx-userprofiles.md b/windows/client-management/mdm/policy-csp-admx-userprofiles.md new file mode 100644 index 0000000000..66677dde93 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-userprofiles.md @@ -0,0 +1,1997 @@ +--- +title: Policy CSP - ADMX_UserProfiles +description: Policy CSP - ADMX_UserProfiles +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/11/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_UserProfiles +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
+ + +## ADMX_UserProfiles policies + +
+
+ ADMX_UserProfiles/AddAdminGroupToRUP +
+
+ ADMX_UserProfiles/CleanupProfiles +
+
+ ADMX_UserProfiles/CompatibleRUPSecurity +
+
+ ADMX_UserProfiles/Connect_HomeDir_ToRoot +
+
+ ADMX_UserProfiles/CscSuspendDirectories +
+
+ ADMX_UserProfiles/DeleteRoamingCachedProfiles +
+
+ ADMX_UserProfiles/DontForceUnloadHive +
+
+ ADMX_UserProfiles/EnableSlowLinkDetect +
+
+ ADMX_UserProfiles/EnableSlowLinkUI +
+
+ ADMX_UserProfiles/ExcludeDirectories +
+
+ ADMX_UserProfiles/LeaveAppMgmtData +
+
+ ADMX_UserProfiles/LimitSize +
+
+ ADMX_UserProfiles/LocalProfile +
+
+ ADMX_UserProfiles/MachineProfilePath +
+
+ ADMX_UserProfiles/PrimaryComputer_RUP +
+
+ ADMX_UserProfiles/ProfileDlgTimeOut +
+
+ ADMX_UserProfiles/ProfileErrorAction +
+
+ ADMX_UserProfiles/ProfileUnloadTimeout +
+
+ ADMX_UserProfiles/Readonlyuserprofile +
+
+ ADMX_UserProfiles/SlowLinkDefault +
+
+ ADMX_UserProfiles/SlowLinkTimeOut +
+
+ ADMX_UserProfiles/USER_HOME +
+
+ ADMX_UserProfiles/UploadHive +
+
+ ADMX_UserProfiles/UserInfoAccessAction +
+
+ ADMX_UserProfiles/WaitForNetwork +
+
+ + +
+ + +**ADMX_UserProfiles/AddAdminGroupToRUP** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting adds the Administrator security group to the roaming user profile share. + +Once an administrator has configured a user's roaming profile, the profile will be created at the user's next login. The profile is created at the location that is specified by the administrator. + +For the Windows XP Professional and Windows 2000 Professional operating systems, the default file permissions for the newly generated profile are full control, or read and write access for the user, and no file access for the administrators group. + +By configuring this policy setting, you can alter this behavior. + +If you enable this policy setting, the administrator group is also given full control to the user's profile folder. + +If you disable or do not configure this policy setting, only the user is given full control of their user profile, and the administrators group has no file system access to this folder. + +> [!NOTE] +> If the policy setting is enabled after the profile is created, the policy setting has no effect. +> +> The policy setting must be configured on the client computer, not the server, for it to have any effect, because the client computer sets the file share permissions for the roaming profile at creation time. +> +> In the default case, administrators have no file access to the user's profile, but they may still take ownership of this folder to grant themselves file permissions. +> +> The behavior when this policy setting is enabled is exactly the same behavior as in Windows NT 4.0. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Add the Administrators security group to roaming user profiles* +- GP name: *AddAdminGroupToRUP* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/CleanupProfiles** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows an administrator to automatically delete user profiles on system restart that have not been used within a specified number of days. Note: One day is interpreted as 24 hours after a specific user profile was accessed. + +If you enable this policy setting, the User Profile Service will automatically delete on the next system restart all user profiles on the computer that have not been used within the specified number of days. + +If you disable or do not configure this policy setting, User Profile Service will not automatically delete any profiles on the next system restart. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Delete user profiles older than a specified number of days on system restart* +- GP name: *CleanupProfiles* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/CompatibleRUPSecurity** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting disables the more secure default setting for the user's roaming user profile folder. + +After an administrator has configured a user's roaming profile, the profile will be created at the user's next login. The profile is created at the location that is specified by the administrator. + +For Windows 2000 Professional pre-SP4 and Windows XP pre-SP1 operating systems, the default file permissions for the newly generated profile are full control access for the user and no file access for the administrators group. No checks are made for the correct permissions if the profile folder already exists. For Windows Server 2003 family, Windows 2000 Professional SP4 and Windows XP SP1, the default behavior is to check the folder for the correct permissions if the profile folder already exists, and not copy files to or from the roaming folder if the permissions are not correct. + +By configuring this policy setting, you can alter this behavior. + +If you enable this policy setting Windows will not check the permissions for the folder in the case where the folder exists. + +If you disable or do not configure this policy setting AND the roaming profile folder exists AND the user or administrators group are not the owner of the folder, Windows will not copy files to or from the roaming folder. The user will be shown an error message and an entry will be written to the event log. The user's cached profile will be used, or a temporary profile issued if no cached profile exists. + +> [!NOTE] +> The policy setting must be configured on the client computer not the server for it to have any effect because the client computer sets the file share permissions for the roaming profile at creation time. +> +> The behavior when this policy setting is enabled is exactly the same behavior as in Windows 2000 Professional pre-SP4 and Windows XP Professional. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not check for user ownership of Roaming Profile Folders* +- GP name: *CompatibleRUPSecurity* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/Connect_HomeDir_ToRoot** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting restores the definitions of the %HOMESHARE% and %HOMEPATH% environment variables to those used in Windows NT 4.0 and earlier. Along with %HOMEDRIVE%, these variables define the home directory of a user profile. The home directory is a persistent mapping of a drive letter on the local computer to a local or remote directory. + +If you enable this policy setting, the system uses the Windows NT 4.0 definitions. %HOMESHARE% stores only the network share (such as \\\server\share). %HOMEPATH% stores the remainder of the fully qualified path to the home directory (such as \dir1\dir2\homedir). As a result, users can access any directory on the home share by using the home directory drive letter. + +If you disable or do not configure this policy setting, the system uses the definitions introduced with Windows 2000. %HOMESHARE% stores the fully qualified path to the home directory (such as \\\\server\share\dir1\dir2\homedir). Users can access the home directory and any of its subdirectories from the home drive letter, but they cannot see or access its parent directories. %HOMEPATH% stores a final backslash and is included for compatibility with earlier systems. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Connect home directory to root of the share* +- GP name: *Connect_HomeDir_ToRoot* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/CscSuspendDirectories** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify which network directories will be synchronized only at logon and logoff via Offline Files. This policy setting is meant to be used in conjunction with Folder Redirection, to help resolve issues with applications that do not work well with Offline Files while the user is online. + +If you enable this policy setting, the network paths specified in this policy setting will be synchronized only by Offline Files during user logon and logoff, and will be taken offline while the user is logged on. + +If you disable or do not configure this policy setting, the paths specified in this policy setting will behave like any other cached data via Offline Files and continue to remain online while the user is logged on, if the network paths are accessible. + +> [!NOTE] +> You should not use this policy setting to suspend any of the root redirected folders such as Appdata\Roaming, Start Menu, and Documents. You should suspend only the subfolders of these parent folders. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify network directories to sync at logon/logoff time only* +- GP name: *CscSuspendDirectories* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/DeleteRoamingCachedProfiles** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether Windows keeps a copy of a user's roaming profile on the local computer's hard drive when the user logs off. + +Roaming profiles reside on a network server. By default, when users with roaming profiles log off, the system also saves a copy of their roaming profile on the hard drive of the computer they are using in case the server that stores the roaming profile is unavailable when the user logs on again. The local copy is also used when the remote copy of the roaming user profile is slow to load. + +If you enable this policy setting, any local copies of the user's roaming profile are deleted when the user logs off. The roaming profile still remains on the network server that stores it. + +If you disable or do not configure this policy setting, Windows keeps a copy of a user's roaming profile on the local computer's hard drive when the user logs off. + +> [!IMPORTANT] +> Do not enable this policy setting if you are using the slow link detection feature. To respond to a slow link, the system requires a local copy of the user's roaming profile. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Delete cached copies of roaming profiles* +- GP name: *DeleteRoamingCachedProfiles* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/DontForceUnloadHive** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether Windows forcefully unloads the user's registry at logoff, even if there are open handles to the per-user registry keys. + +Note: This policy setting should only be used for cases where you may be running into application compatibility issues due to this specific Windows behavior. It is not recommended to enable this policy by default as it may prevent users from getting an updated version of their roaming user profile. + +If you enable this policy setting, Windows will not forcefully unload the users registry at logoff, but will unload the registry when all open handles to the per-user registry keys are closed. + +If you disable or do not configure this policy setting, Windows will always unload the users registry at logoff, even if there are any open handles to the per-user registry keys at user logoff. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not forcefully unload the users registry at user logoff* +- GP name: *DontForceUnloadHive* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/EnableSlowLinkDetect** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting disables the detection of slow network connections. + +Slow link detection measures the speed of the connection between a user's computer and the remote server that stores the roaming user profile. When the system detects a slow link, the related policy settings in this folder tell the computer how to respond. + +If you enable this policy setting, the system does not detect slow connections or recognize any connections as being slow. As a result, the system does not respond to slow connections to user profiles, and it ignores the policy settings that tell the system how to respond to a slow connection. + +If you disable this policy setting or do not configure it, slow link detection is enabled. The system measures the speed of the connection between the user's computer and profile server. If the connection is slow (as defined by the "Slow network connection timeout for user profiles" policy setting), the system applies the other policy settings set in this folder to determine how to proceed. By default, when the connection is slow, the system loads the local copy of the user profile. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disable detection of slow network connections* +- GP name: *EnableSlowLinkDetect* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/EnableSlowLinkUI** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting provides users with the ability to download their roaming profile, even when a slow network connection with their roaming profile server is detected. + +If you enable this policy setting, users will be allowed to define whether they want their roaming profile to be downloaded when a slow link with their roaming profile server is detected. + +In operating systems earlier than Microsoft Windows Vista, a dialog box will be shown to the user during logon if a slow network connection is detected. The user then is able to choose to download the remote copy of the user profile. In Microsoft Windows Vista, a check box appears on the logon screen and the user must choose whether to download the remote user profile before Windows detects the network connection speed. + +If you disable or do not configure this policy setting, the system does not consult the user. Instead, the system uses the local copy of the user profile. If you have enabled the "Wait for remote user profile" policy setting, the system downloads the remote copy of the user profile without consulting the user. In Microsoft Windows Vista, the system will ignore the user choice made on the logon screen. + +> [!NOTE] +> This policy setting and related policy settings in this folder define the system's response when roaming user profiles are slow to download. To adjust the time within which the user must respond to this notice in operating systems earlier than Microsoft Windows Vista, use the "Timeout for dialog boxes" policy setting. + +> [!IMPORTANT] +> If the "Do not detect slow network connections" setting is enabled, this policy setting is ignored. Also, if the "Delete cached copies of roaming profiles" policy setting is enabled, there is no local copy of the roaming profile to load when the system detects a slow connection. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prompt user when a slow network connection is detected* +- GP name: *EnableSlowLinkUI* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/ExcludeDirectories** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting lets you exclude folders that are normally included in the user's profile. As a result, these folders do not need to be stored by the network server on which the profile resides and do not follow users to other computers. + +> [!NOTE] +> When excluding content from the profile you should try to exclude the narrowest set of data that will address your needs. For example, if there is one application with data that should not be roamed then add only that application's specific folder under the AppData\Roaming folder rather than all of the AppData\Roaming folder to the exclusion list. + +By default, the Appdata\Local and Appdata\LocalLow folders and all their subfolders such as the History, Temp, and Temporary Internet Files folders are excluded from the user's roaming profile. + +In operating systems earlier than Microsoft Windows Vista, only the History, Local Settings, Temp, and Temporary Internet Files folders are excluded from the user's roaming profile by default. + +If you enable this policy setting, you can exclude additional folders. + +If you disable this policy setting or do not configure it, only the default folders are excluded. + +> [!NOTE] +> You cannot use this policy setting to include the default folders in a roaming user profile. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Exclude directories in roaming profile* +- GP name: *ExcludeDirectories* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/LeaveAppMgmtData** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether the system retains a roaming user's Windows Installer and Group Policy based software installation data on their profile deletion. + +By default Windows deletes all information related to a roaming user (which includes the user's settings, data, Windows Installer related data, and the like) when their profile is deleted. As a result, the next time a roaming user whose profile was previously deleted on that client logs on, they will need to reinstall all apps published via policy at logon increasing logon time. You can use this policy setting to change this behavior. + +If you enable this policy setting, Windows will not delete Windows Installer or Group Policy software installation data for roaming users when profiles are deleted from the machine. This will improve the performance of Group Policy based Software Installation during user logon when a user profile is deleted and that user subsequently logs on to the machine. + +If you disable or do not configure this policy setting, Windows will delete the entire profile for roaming users, including the Windows Installer and Group Policy software installation data when those profiles are deleted. + +> [!NOTE] +> If this policy setting is enabled for a machine, local administrator action is required to remove the Windows Installer or Group Policy software installation data stored in the registry and file system of roaming users' profiles on the machine. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Leave Windows Installer and Group Policy Software Installation Data* +- GP name: *LeaveAppMgmtData* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/LimitSize** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting sets the maximum size of each user profile and determines the system's response when a user profile reaches the maximum size. This policy setting affects both local and roaming profiles. + +If you disable this policy setting or do not configure it, the system does not limit the size of user profiles. + +If you enable this policy setting, you can: + +- Set a maximum permitted user profile size. +- Determine whether the registry files are included in the calculation of the profile size. +- Determine whether users are notified when the profile exceeds the permitted maximum size. +- Specify a customized message notifying users of the oversized profile. +- Determine how often the customized message is displayed. + +> [!NOTE] +> In operating systems earlier than Microsoft Windows Vista, Windows will not allow users to log off until the profile size has been reduced to within the allowable limit. In Microsoft Windows Vista, Windows will not block users from logging off. Instead, if the user has a roaming user profile, Windows will not synchronize the user's profile with the roaming profile server if the maximum profile size limit specified here is exceeded. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Limit profile size* +- GP name: *LimitSize* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/LocalProfile** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This setting determines if roaming user profiles are available on a particular computer. By default, when roaming profile users log on to a computer, their roaming profile is copied down to the local computer. If they have already logged on to this computer in the past, the roaming profile is merged with the local profile. Similarly, when the user logs off this computer, the local copy of their profile, including any changes they have made, is merged with the server copy of their profile. + +Using the setting, you can prevent users configured to use roaming profiles from receiving their profile on a specific computer. + +If you enable this setting, the following occurs on the affected computer: At first logon, the user receives a new local profile, rather than the roaming profile. At logoff, changes are saved to the local profile. All subsequent logons use the local profile. + +If you disable this setting or do not configure it, the default behavior occurs, as indicated above. + +If you enable both the "Prevent Roaming Profile changes from propagating to the server" setting and the "Only allow local user profiles" setting, roaming profiles are disabled. + +> [!NOTE] +> This setting only affects roaming profile users. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Only allow local user profiles* +- GP name: *LocalProfile* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/MachineProfilePath** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows should use the specified network path as the roaming user profile path for all users logging onto this computer. + +To use this policy setting, type the path to the network share in the form \\\\Computername\Sharename\. It is recommended to use a path such as \\\\Computername\Sharename\%USERNAME% to give each user an individual profile folder. If not specified, all users logging onto this computer will use the same roaming profile folder as specified by this policy. You need to ensure that you have set the appropriate security on the folder to allow all users to access the profile. + +If you enable this policy setting, all users logging on this computer will use the roaming profile path specified in this policy. + +If you disable or do not configure this policy setting, users logging on this computer will use their local profile or standard roaming user profile. + +> [!NOTE] +> There are four ways to configure a roaming profile for a user. Windows reads profile configuration in the following order and uses the first configured policy setting it reads. + +1. Terminal Services roaming profile path specified by Terminal Services policy +2. Terminal Services roaming profile path specified by the user object +3. A per-computer roaming profile path specified in this policy +4. A per-user roaming profile path specified in the user object + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set roaming profile path for all users logging onto this computer* +- GP name: *MachineProfilePath* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/PrimaryComputer_RUP** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls on a per-computer basis whether roaming profiles are downloaded on a user's primary computers only. This policy setting is useful to improve logon performance and to increase security for user data on computers where the user might not want to download private data, such as on a meeting room computer or on a computer in a remote office. + +To designate a user's primary computers, an administrator must use management software or a script to add primary computer attributes to the user's account in Active Directory Domain Services (AD DS). This policy setting also requires the Windows Server 2012 version of the Active Directory schema to function. + +If you enable this policy setting and the user has a roaming profile, the roaming profile is downloaded on the user's primary computer only. + +If you disable or do not configure this policy setting and the user has a roaming profile, the roaming profile is downloaded on every computer that the user logs on to. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Download roaming profiles on primary computers only* +- GP name: *PrimaryComputer_RUP* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/ProfileDlgTimeOut** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls how long Windows waits for a user response before it uses a default user profile for roaming user profiles. + +The default user profile is applied when the user does not respond to messages explaining that any of the following events has occurred: + +- The system detects a slow connection between the user's computer and the server that stores users' roaming user profiles. +- The system cannot access users' server-based profiles when users log on or off. +- Users' local profiles are newer than their server-based profiles. + +If you enable this policy setting, you can override the amount of time Windows waits for user input before using a default user profile for roaming user profiles. The default timeout value is 30 seconds. To use this policy setting, type the number of seconds Windows should wait for user input. The minumum value is 0 seconds, and the maximum is 600 seconds. + +If you disable or do not configure this policy setting, Windows waits 30 seconds for user input before applying the default user profile . + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Establish timeout value for dialog boxes* +- GP name: *ProfileDlgTimeOut* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/ProfileErrorAction** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting will automatically log off a user when Windows cannot load their profile. + +If Windows cannot access the user profile folder or the profile contains errors that prevent it from loading, Windows logs on the user with a temporary profile. This policy setting allows the administrator to disable this behavior, preventing Windows from loggin on the user with a temporary profile. + +If you enable this policy setting, Windows will not log on a user with a temporary profile. Windows logs the user off if their profile cannot be loaded. + +If you disable this policy setting or do not configure it, Windows logs on the user with a temporary profile when Windows cannot load their user profile. + +Also, see the "Delete cached copies of roaming profiles" policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not log users on with temporary profiles* +- GP name: *ProfileErrorAction* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/ProfileUnloadTimeout** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines how many times the system tries to unload and update the registry portion of a user profile. When the number of trials specified by this policy setting is exhausted, the system stops trying. As a result, the user profile might not be current, and local and roaming user profiles might not match. + +When a user logs off of the computer, the system unloads the user-specific section of the registry (HKEY_CURRENT_USER) into a file (NTUSER.DAT) and updates it. However, if another program or service is reading or editing the registry, the system cannot unload it. The system tries repeatedly (at a rate of once per second) to unload and update the registry settings. By default, the system repeats its periodic attempts 60 times (over the course of one minute). + +If you enable this policy setting, you can adjust the number of times the system tries to unload and update the user's registry settings. (You cannot adjust the retry rate.) + +If you disable this policy setting or do not configure it, the system repeats its attempt 60 times. + +If you set the number of retries to 0, the system tries just once to unload and update the user's registry settings. It does not try again. + +> [!NOTE] +> This policy setting is particularly important to servers running Remote Desktop Services. Because Remote Desktop Services edits the users' registry settings when they log off, the system's first few attempts to unload the user settings are more likely to fail. + +This policy setting does not affect the system's attempts to update the files in the user profile. + +> [!TIP] +> Consider increasing the number of retries specified in this policy setting if there are many user profiles stored in the computer's memory. This indicates that the system has not been able to unload the profile. + +Also, check the Application Log in Event Viewer for events generated by Userenv. The system records an event whenever it tries to unload the registry portion of the user profile. The system also records an event when it fails to update the files in a user profile. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Maximum retries to unload and update user profile* +- GP name: *ProfileUnloadTimeout* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/Readonlyuserprofile** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines if the changes a user makes to their roaming profile are merged with the server copy of their profile. + +By default, when a user with a roaming profile logs on to a computer, the roaming profile is copied down to the local computer. If the user has logged on to the computer in the past, the roaming profile is merged with the local profile. Similarly, when the user logs off the computer, the local copy of their profile, including any changes, is merged with the server copy of the profile. + +Using this policy setting, you can prevent changes made to a roaming profile on a particular computer from being persisted. + +If you enable this policy setting, changes a user makes to their roaming profile aren't merged with the server (roaming) copy when the user logs off. + +If you disable or not configure this policy setting, the default behavior occurs, as indicated above. + +> [!NOTE] +> This policy setting only affects roaming profile users. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent Roaming Profile changes from propagating to the server* +- GP name: *Readonlyuserprofile* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/SlowLinkDefault** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting directs the system to wait for the remote copy of the roaming user profile to load, even when loading is slow. Also, the system waits for the remote copy when the user is notified about a slow connection, but does not respond in the time allowed. + +This policy setting and related policy settings in this folder together define the system's response when roaming user profiles are slow to load. + +If you enable this policy setting, the system waits for the remote copy of the roaming user profile to load, even when loading is slow. + +If you disable this policy setting or do not configure it, when a remote profile is slow to load, the system loads the local copy of the roaming user profile. The local copy is also used when the user is consulted (as set in the "Prompt user when slow link is detected" policy setting), but does not respond in the time allowed (as set in the "Timeout for dialog boxes" policy setting). + +Waiting for the remote profile is appropriate when users move between computers frequently and the local copy of their profile is not always current. Using the local copy is desirable when quick logging on is a priority. + +> [!IMPORTANT] +> If the "Do not detect slow network connections" policy setting is enabled, this policy setting is ignored. Also, if the "Delete cached copies of roaming profiles" policy setting is enabled, there is no local copy of the roaming profile to load when the system detects a slow connection. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Wait for remote user profile* +- GP name: *SlowLinkDefault* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/SlowLinkTimeOut** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting defines a slow connection for roaming user profiles and establishes thresholds for two tests of network speed. + +To determine the network performance characteristics, a connection is made to the file share storing the user's profile and 64 kilobytes of data is transfered. From that connection and data transfer, the network's latency and connection speed are determined. + +This policy setting and related policy settings in this folder together define the system's response when roaming user profiles are slow to load. + +If you enable this policy setting, you can change how long Windows waits for a response from the server before considering the connection to be slow. + +If you disable or do not configure this policy setting, Windows considers the network connection to be slow if the server returns less than 500 kilobits of data per second or take 120 milliseconds to respond.Consider increasing this value for clients using DHCP Service-assigned addresses or for computers accessing profiles across dial-up connections.Important: If the "Do not detect slow network connections" policy setting is enabled, this policy setting is ignored. Also, if the "Delete cached copies of roaming profiles" policy setting is enabled, there is no local copy of the roaming profile to load when the system detects a slow connection. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Control slow network connection timeout for user profiles* +- GP name: *SlowLinkTimeOut* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/USER_HOME** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the location and root (file share or local path) of a user's home folder for a logon session. + +If you enable this policy setting, the user's home folder is configured to the specified local or network location, creating a new folder for each user name. + +To use this policy setting, in the Location list, choose the location for the home folder. If you choose “On the network,” enter the path to a file share in the Path box (for example, \\\\ComputerName\ShareName), and then choose the drive letter to assign to the file share. If you choose “On the local computer,” enter a local path (for example, C:\HomeFolder) in the Path box. + +Do not specify environment variables or ellipses in the path. Also, do not specify a placeholder for the user name because the user name will be appended at logon. + +> [!NOTE] +> The Drive letter box is ignored if you choose “On the local computer” from the Location list. If you choose “On the local computer” and enter a file share, the user's home folder will be placed in the network location without mapping the file share to a drive letter. + +If you disable or do not configure this policy setting, the user's home folder is configured as specified in the user's Active Directory Domain Services account. + +If the "Set Remote Desktop Services User Home Directory" policy setting is enabled, the “Set user home folder” policy setting has no effect. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set user home folder* +- GP name: *USER_HOME* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/UploadHive** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting sets the schedule for background uploading of a roaming user profile's registry file (ntuser.dat). This policy setting controls only the uploading of a roaming user profile's registry file (other user data and regular profiles are not be uploaded) and uploads it only if the user is logged on. This policy setting does not stop the roaming user profile's registry file from being uploaded at user logoff. + +If "Run at set interval" is chosen, then an interval must be set, with a value of 1-720 hours. Once set, Windows uploads the profile's registry file at the specified interval after the user logs on. For example, with a value of 6 hours, the registry file of the roaming user profile is uploaded to the server every six hours while the user is logged on. + +If "Run at specified time of day" is chosen, then a time of day must be specified. Once set, Windows uploads the registry file at the same time every day, as long as the user is logged on. + +For both scheduling options, there is a random one hour delay attached per-trigger to avoid overloading the server with simultaneous uploads. For example, if the settings dictate that the user's registry file is to be uploaded at 6pm, it will actually upload at a random time between 6pm and 7pm. + +> [!NOTE] +> If "Run at set interval" is selected, the "Time of day" option is disregarded. Likewise, if "Run at set time of day" is chosen, the "Interval (hours)" option is disregarded. + +If you enable this policy setting, Windows uploads the registry file of the user's roaming user profile in the background according to the schedule set here while the user is logged on. Regular profiles are not affected. + +If this setting is disabled or not configured, the registry file for a roaming user profile will not be uploaded in the background while the user is logged on. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set the schedule for background upload of a roaming user profile's registry file while user is logged on* +- GP name: *UploadHive* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/UserInfoAccessAction** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This setting prevents users from managing the ability to allow apps to access the user name, account picture, and domain information. + +If you enable this policy setting, sharing of user name, picture and domain information may be controlled by setting one of the following options: + +- "Always on" - users will not be able to change this setting and the user's name and account picture will be shared with apps (not desktop apps). In addition apps (not desktop apps) that have the enterprise authentication capability will also be able to retrieve the user's UPN, SIP/URI, and DNS. + +- "Always off" - users will not be able to change this setting and the user's name and account picture will not be shared with apps (not desktop apps). In addition apps (not desktop apps) that have the enterprise authentication capability will not be able to retrieve the user's UPN, SIP/URI, and DNS. Selecting this option may have a negative impact on certain enterprise software and/or line of business apps that depend on the domain information protected by this setting to connect with network resources. + +If you do not configure or disable this policy the user will have full control over this setting and can turn it off and on. Selecting this option may have a negative impact on certain enterprise software and/or line of business apps that depend on the domain information protected by this setting to connect with network resources if users choose to turn the setting off. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *User management of sharing user name, account picture, and domain information with apps (not desktop apps)* +- GP name: *UserInfoAccessAction* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ + +**ADMX_UserProfiles/WaitForNetwork** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls how long Windows waits for a response from the network before logging on a user without a remote home directory and withou synchronizing roaming user profiles. This policy setting is useful for the cases in which a network might take typically longer to initialize, such as with a wireless network. + +> [!NOTE] +> Windows doesn't wait for the network if the physical network connection is not available on the computer (if the media is disconnected or the network adapter is not available). + +If you enable this policy setting, Windows waits for the network to become available up to the maximum wait time specified in this policy setting. Setting the value to zero causes Windows to proceed without waiting for the network. + +If you disable or do not configure this policy setting, Windows waits for the network for a maximum of 30 seconds. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set maximum wait time for the network if a user has a roaming user profile or remote home directory* +- GP name: *WaitForNetwork* +- GP path: *System\User Profiles* +- GP ADMX file name: *UserProfiles.admx* + + + +
+ +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + From 9ee9623a80d2a872729912d4147bd4b646edacf7 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Tue, 17 Nov 2020 22:25:09 +0530 Subject: [PATCH 11/75] updated link for november admx link as per the user report #8655, i so i updated the link --- ...roll-a-windows-10-device-automatically-using-group-policy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md b/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md index a6ac91e10f..a8ec2a4ff2 100644 --- a/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md +++ b/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md @@ -178,7 +178,7 @@ Requirements: - 1903 --> [Administrative Templates (.admx) for Windows 10 May 2019 Update (1903)](https://www.microsoft.com/download/details.aspx?id=58495) - 1909 --> [Administrative Templates (.admx) for Windows 10 November 2019 Update (1909)]( -https://www.microsoft.com/download/confirmation.aspx?id=1005915) +https://www.microsoft.com/download/confirmation.aspx?id=100591) - 2004 --> [Administrative Templates (.admx) for Windows 10 May 2020 Update (2004)](https://www.microsoft.com/download/confirmation.aspx?id=101445) From ae9fef9a50cc12f8f638d20fd466510fcf90f472 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Thu, 19 Nov 2020 01:04:18 +0100 Subject: [PATCH 12/75] Defender SmartScreen: typo correction & URL update As reported in issue ticket #8665 (Correction To Microsoft Defender SmartScreen "login", replace with "log in"), there is a typo where the phrase "Debug log in Event Viewer" has lost its required spacing between "log" and "in". Thanks to secdev-01 for finding and reporting this typo. Additional update: the URL to the [Event 1035 - Anti-Phishing] page has been changed to reflect its permanent redirect from - https://technet.microsoft.com/scriptcenter/dd565657(v=msdn.10).aspx - to - - https://docs.microsoft.com/previous-versions/windows/internet-explorer/ie-developer/compatibility/dd565657(v=vs.85) Closes #8665 --- .../microsoft-defender-smartscreen-overview.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview.md b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview.md index 56d43dafc5..0c20744eee 100644 --- a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview.md +++ b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview.md @@ -67,12 +67,12 @@ When submitting Microsoft Defender SmartScreen products, make sure to select **M ## Viewing Microsoft Defender SmartScreen anti-phishing events > [!NOTE] -> No Smartscreen events will be logged when using Microsoft Edge version 77 or later. +> No SmartScreen events will be logged when using Microsoft Edge version 77 or later. -When Microsoft Defender SmartScreen warns or blocks a user from a website, it's logged as [Event 1035 - Anti-Phishing](https://technet.microsoft.com/scriptcenter/dd565657(v=msdn.10).aspx). +When Microsoft Defender SmartScreen warns or blocks a user from a website, it's logged as [Event 1035 - Anti-Phishing](https://docs.microsoft.com/previous-versions/windows/internet-explorer/ie-developer/compatibility/dd565657(v=vs.85)). ## Viewing Windows event logs for Microsoft Defender SmartScreen -Microsoft Defender SmartScreen events appear in the Microsoft-Windows-SmartScreen/Debug login Event Viewer. +Microsoft Defender SmartScreen events appear in the Microsoft-Windows-SmartScreen/Debug log, in the Event Viewer. Windows event log for SmartScreen is disabled by default, users can use Event Viewer UI to enable the log or use the command line to enable it: From 728f0982e4e384c4c3b0086233017f8c0d52c7ef Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Fri, 20 Nov 2020 01:47:05 +0100 Subject: [PATCH 13/75] Typo correction & metadata description update As reported in issue ticket #8669 (Check Grammar), there is a typo in the following sentence: > Before you get started, see the main MIcrosoft Defender for EndpointP for Mac page for a description of prerequisites and system requirements for the current software version. The word "EndpointP" has received an unneeded letter at the end right before commit https://github.com/MicrosoftDocs/windows-itpro-docs/commit/5eb8d432da413dd0447b14e1b6763dc73dae3758 . Thanks to matambanadzo for noticing and reporting this typo. Additional change: metadata description updated from - Install Microsoft Defender ATP for Mac, using Microsoft Intune. -- to -- - Install Microsoft Defender for Endpoint for Mac, using Microsoft Intune. Closes #8669 --- .../microsoft-defender-atp/mac-install-with-intune.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md b/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md index 87c1b96104..cb1c7d7be7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md @@ -1,6 +1,6 @@ --- title: Intune-based deployment for Microsoft Defender ATP for Mac -description: Install Microsoft Defender ATP for Mac, using Microsoft Intune. +description: Install Microsoft Defender for Endpoint for Mac, using Microsoft Intune. keywords: microsoft, defender, atp, mac, installation, deploy, uninstallation, intune, jamf, macos, catalina, mojave, high sierra search.product: eADQiWindows 10XVcnh search.appverid: met150 @@ -42,7 +42,7 @@ This topic describes how to deploy Microsoft Defender for Endpoint for Mac throu ## Prerequisites and system requirements -Before you get started, see [the main MIcrosoft Defender for EndpointP for Mac page](microsoft-defender-atp-mac.md) for a description of prerequisites and system requirements for the current software version. +Before you get started, see [the main Microsoft Defender for Endpoint for Mac page](microsoft-defender-atp-mac.md) for a description of prerequisites and system requirements for the current software version. ## Overview From e871dc083061804f5f65d459e6587c99648c6066 Mon Sep 17 00:00:00 2001 From: Max Stein Date: Thu, 19 Nov 2020 17:02:55 -0800 Subject: [PATCH 14/75] Updating MDM section Microsoft Intune ends support for Windows Phone 8.1 and Windows 10 Mobile. See: https://docs.microsoft.com/mem/intune/fundamentals/whats-new#microsoft-intune-ends-support-for-windows-phone-81-and-windows-10-mobile to learn more. --- .../mdm/mdm-enrollment-of-windows-devices.md | 27 ------------------- 1 file changed, 27 deletions(-) diff --git a/windows/client-management/mdm/mdm-enrollment-of-windows-devices.md b/windows/client-management/mdm/mdm-enrollment-of-windows-devices.md index 1c9ca9aba5..5693d6c5f1 100644 --- a/windows/client-management/mdm/mdm-enrollment-of-windows-devices.md +++ b/windows/client-management/mdm/mdm-enrollment-of-windows-devices.md @@ -248,33 +248,6 @@ To create a local account and connect the device: After you complete the flow, your device will be connected to your organization’s MDM. - -### Connect to MDM on a phone (enroll in device management) - -1. Launch the Settings app, and then select **Accounts**. - - ![phone settings](images/unifiedenrollment-rs1-38.png) - -2. Select **Access work or school**. - - ![phone settings](images/unifiedenrollment-rs1-39.png) - -3. Select the **Enroll only in device management** link. This is only available in the servicing build 14393.82 (KB3176934). For older builds, see [Connect your Windows 10-based device to work using a deep link](mdm-enrollment-of-windows-devices.md#connect-your-windows-10-based-device-to-work-using-a-deep-link). - - ![access work or school page](images/unifiedenrollment-rs1-40.png) - -4. Enter your work email address. - - ![enter your email address](images/unifiedenrollment-rs1-41.png) - -5. If the device finds an endpoint that only supports on-premises authentication, this page will change and ask you for your password. If the device finds an MDM endpoint that supports federated authentication, you’ll be presented with a new window that will ask you for additional authentication information. - - Based on IT policy, you may also be prompted to provide a second factor of authentication at this point. - -6. After you complete the flow, your device will be connected to your organization’s MDM. - - ![completed mdm enrollment](images/unifiedenrollment-rs1-42.png) - ### Help with connecting personally-owned devices There are a few instances where your device may not be able to connect to work. From 4c2f410aedc4aeca348a8c65baa5a2567897fc97 Mon Sep 17 00:00:00 2001 From: Max Stein Date: Thu, 19 Nov 2020 17:08:07 -0800 Subject: [PATCH 15/75] Updating MDM section --- .../mdm/images/unifiedenrollment-rs1-38.png | Bin 76784 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/client-management/mdm/images/unifiedenrollment-rs1-38.png diff --git a/windows/client-management/mdm/images/unifiedenrollment-rs1-38.png b/windows/client-management/mdm/images/unifiedenrollment-rs1-38.png deleted file mode 100644 index 7ee23eda5dc58b05b3b283879ecb321103a64679..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 76784 zcmXt91yCGKx5eFp26uOYySux)ySs#-8{FL`B*EQ1$YNn}NFaC!?hbGG{(4ijwKaFg zw)=MXIp>}MsjJGNqY$A$K|!G_$V+QNK|yOkLBaSVApntIB0njCFK91KIZ3G6X_5nA z2hL7HMFI+{Aqn-#0v^~$c9%Esf`Y;re)~XYFk=t{K}2r_6&b`oNci|nXq!7V7XO80 z^t~l~yzSjQp}y8m$^#)ZZy+RX<7MUP;O_0<<_d*_Oi2yIQQqQGZtek|4tDn5P}P`| zf(_|G|36I1&BevW)f?(&GP4he zA-o-??cnWf166ebp@)Kc=~a-H(DpYydPe+6I_k3*S2QlLACKHmu`i81DS?Jv21CoV zYG^c*+GFZge|!8=)bkkDb#u}i(&)V6Gyzd;Y^)Mz;#9Jvli11Ui~!EP`sa62W3j!p zE=2Ht5{lvGhpt)4!<<&1Hr>8T!yM@OmC)0O!tkIhyZ7ooVFj_Ue z1}bqF#Pl9e!{z_sAraG``LQiOM91O$C1-OXww;6Dv<}a}%&L`P$Po{7TQ&9HtyZR? znEo*a>y|IS6*OU!6n^_;34ux(Mx~1|s}DX7VDR6Da_crffF{OA8Mw$-THnJ{Wy8|t z)ea3mFc5I-?tg-rYutR2T*Se_QLO6e>4B`SG7Sw4DORSXr7_t_FztUKf#Uic7pFB? zU0t1?nu@(3Xk}%^laJPuW8_YvKXyNu*GteE{)s1@pjFtE5NJPlET-S;7Xw&K=vZvd z4dO4YB_!YQ zTP0D02x9x&2Ouc;2uC3ncpRr4dWlwfx*RrB;J|JF@VrVl5n&xm{bqarG)(t7 z%yy*W1l4j!R08=wKQ?{BywG-jT?Dw1ruu-OaI@mRTj6=mKf<`xENtp*9Hed!_$kA2 zaN!&dU@|OSL*d^v>}S($K36yf7p=XT(54@OSYmusj#Q|>qeUeNloFglZ;1!3B=q;S@*!qSnGL$koNF^ zAh%$w_pUS43LD_%yOd#M1mc;!WBAa4rwAYuzda2+Ne<-M)%y=z#A;8Y=3(}&Z;QJk zMVr&$WAKVRI-OduoB4-D{654FzfIvoCnk@9Sy^9a8%-i#GP5*RXXg4S-sbw7>2Rq| zPl(|re0EmjnN|V`SFW_xqZ_`ye`7E@=o!Xh$T^VzaMYtp_6EGXZH|OLN~LeieEQr{ z4?IRsy{9Q07>XH(t#^u9o$lvGUXfnrc0Wgc&)4q8%|AUDyl(8yqFxntLoSA!JFqs; zq5N)7?wb^6zfcFMB#KE60-pC2M~P1oCfwQ^;iHYj%;%8N+V*uZ{I?@vJ;NP7^*471 zz)fKOaeJ=L*ITE`R%U<$hM?0ktFu49!Q&yVMq-bLgr8pH4 zHR~UNN2ejy*Uf4OCkKZ+C5Q{Q&+-RK$K|vTEj6_jFBRc(B&)MzGK*BOH7u&*JFpnm zz)p9pKhr>_50uCE;~V2n^gtF3{gj^(4UE( z4T6`wkL&pA#0lg2FZ2bls#Q%54(*a8>b>0Z-P_-H^asOiUKf2w8-O%dR3sp*z`Ccz=%DnOR)V4*_5eohI#i**;LF(mc6^Nzi+$2G%sk9Z8uTJ6VlkxieDngLd}y?aOpj2iRq($01-FZeoJiuJ&p_6*=?9 zI3Qq1qPR~bV#6KNmfe{o2yL)n?TQs`n#2aAv#nB+wZ8-3% zH_SG)8~+(t-+!(diH-ot?ImR_2Il;rjzYVrb#tr{8#K$er%VSq##Uv96Jf z%}SXj$M?%ULNGg4mIVT~t;!wn7_IVhzG2{=~z>Lz~-^-;kd_i&v`_ zG)YNFYE_qeiIJ4Z);XAo?+&995S_F6YRo-=WH}^9VkU^aze7wzMnla1pe@%>{q0-o zzkiMkiapYfS%KJEA?B+Y%zEHNQXy|%vgHb;k7guNw@ao$Dxh?|GAfz+L3Vt}-4KBZ zZvhBO=17KfTU5W~{Jv*}fS%y`+4tv8w1fg24*6L#2>U<0iF@E8bKpm;%hi)ipf_%V!-INLQG& zcAUTnqd<2PO!>t(aM1#+dg1QJUJVWb?-UH!`MLw5!5a^l7#QG#xi8lXYNWlyVI*aK zK1??K3c0NW|8l_( zN$%RcV|!M=ZYgjQwYeN=8BM8-G3H+}x8PN+@(+J0*7XP(4GZ1R&bk+&tQTcOYPe`{bFhw`8Fc4-mmEn|mn+Kc=tKcp-^wKK8@yorpY&rcb3*$x!<>3F$KQY)mKQ5g0 zi%21JSe$zRf)b+iKg7ZNHI7H(Zz^Y)I-zmq9z94IqZJg|s~@ifFw@TmGof?TcafEc z3WK(%;jN`A$k9^DJFt*4PIuWb4-5!U!jJJ32w`ksW_p$=Qx7e6dm6nm9zFZ>$Vbht0u6jLgMohfC7X$Ql3I z9z(l?XyFbIXq{=VU?em`;qdzt`-=^?L@)xU8q7KWiQ$?&0v^ep+DG7R~zb zYJSg#3rw$5)S4aYx5ia>DV0thoHo7MlRAil5v;rUv>KJCl(Xvaw53_%)Dl&az$A^= zp&$8Oiyv!-*su2*L=#%9T-9hqahia`l+^D{#fXYTPr!28&zpx@0%JWShbp2t5qr7 z+V#y5_a=$5ec6H1sT)5skptXFg2DL|(+b=5hkswup?p;*jwtzp**$JmA zb|vq!vu^XP4nMX%rF`NiNUlWscHv-iJ5^6A+#N;E%b-xK`|R|1X|a}~X{q^ZA;{4A!|nSN@yI-FMsq)d`}`@GX; z0?;r@jF@G9;;R-s8g3CO8s#}Aj?_^RtZ}Sr{BX=p^;|1gFhf-1+m_~Ymz6>r!h=7G z)K*h6eQMp~)IGgO*UW-gd${oL0(N^wP2mcI-YG9WtaJlym_jl`P;N8Vv|GPla?$M3 zy^8@4pj#wm>QrvlWORDB2_P{nyfQwJz)WnaIMs3?P}P(0zT^)DF#B`n7)Wd0$E9>E zb4jQAau`o{20r&3tXd7Sx8#>_=-m(P+HJ4Wv!1DPz-$H0^fa1=CA#QWSz-ArxBK9) zdj-W;>#dWmT~+t_;FGNJo<*NK%{8BmTs|O@1|K2m8iItrzTU6LoBV3UZQWU#_z+thIt->V`b ztliU?X)n#TzI`4xjE*262;K6JJ^{{SQcWKp8Ue#--F4fjuM=lz&nN)uPCbgdRffo@ zhun(eRj8La`}moio_ntMmh)`Qv#;BBY0wX6IA7Y;Z!up|){QpB3&U>Ns`o#a{=SmkcHRz?jXrmfJ-z+-2vOItw<% z7Y8p`Bf({}gV$30FNjrz7$~^i$uuhY(4a3tA$)_jszwJ!NWD&4a%(@Tx zeMu1H=jVUF6(5=XUI5Y?jz}Io zFC9*;`gVu2kEC|X-sSD>`ipgDb>!7neECO5&LJygFg9`QqFGOeX0L|R`2uC+PM_g? z^EifnhZaRel?1(}e4VG-J^1s-{TRA7yD%s7;A;n8f(FKiRr)-x8iOWTM<*w{=Re>} zdGFtyK8mGP-!5r2(CU!Kk+F-g!U_eui#b-7yGu(8ZjS!^!6Mo&+vegGr28*?8Ii@^M^{x$QUmj3H3MU~cVGj*< z)CPt6uK-?+NEbNcKlhf3k%FxlEaj}<7tLz<%5l%s<%mQFlFO2v9gxfveZJi(mZEGZvXmSeX0EN zgx%}yVhqV?Swbj>uV$IXc4e^JB_UZyMe^G)Vggy2{YtPP zOcbA7^_7bGgVJZzI6J>DWQ2sXci|2;wzl8OOe8z!xfK*tQvPP!6BfN+5_T2@5`u_@ z(1ZMY)9+t}h+d(D#~XY3y|$0yM&XGBPTbGXPRwyKDW292n!O;~`FaH32 z?!iE_ySob(vpbA$T>M@3Ong#o{6pr)YM6#T0wQ8XZLezBcv*L~Ftpz8U|! zTvh25K#99o2HLVChayO3$i;=$`z)=crCHI~s0l)0)qI{J_tgN)cKpOxTV0!`7VGEq z86bDTsY&~SE9H-rl=E0))Cy+h`%Q(ni>Eju%oFer8xxCzpqoj9oLo@6G_)=6!_AA-V?{%QMyvC0stDK!Fwd1=CbML1 zOcF_ER_J9aiHNT@&qC@JcE`a;-p(CpyYce4KroP$h;x`2I{edpa#a>P+fP3!oA@(J z$)$kYuw=Z*oBj~YF;c%@C2EAxXaj}b`D@^FZKg@)^vQT-fhBiU&{atc86@symAGyk zmA$vvu!8rK*ffi>PR-|{v^;7jy}E^6v%|&ev}>oOiD(~U>xIucig&|iN39<2`V7VQ z6830^2Y&W}B_x-)EfY>UUgc(7*itL<%8L13vCa}=B1l=2-KTAS}N=$JXPWyp24wTqNDJM-n%yVm!6bn%wu!~TTts>6bw*(hes+p%dZ z#zFL3IOHLcx-4dtAtE7~hQ{9_N8E+;Whd)l*6hRF`mD=s#zJm?eeu;k`kKr-*!?Q;^8^0m-oDnmB%shKC}LS9+w%LV6${$@=v$Mv|Q$@pNcEm@-5FEL(GDpwi;7O@J z(FoDj*8b9S=#{urhy(vNuZ7t8VBEveYSrRoEPa~Ava$aQ$~z&BKS4qz~~_O^Ki zkC);s=PU-;uh;8CBiPKSM3qGK4F}w#P`g~#c)yzHGV}28Xlj|1sqI9>V1Sp~^9uah zeI>|kI^Hp>KOjC-eD6|v4C0S@_O$kv=7N0iuCf2UB53mc>w(NN=HCwu9`TUtHR+LRdk zV*5K=DnEM++ufJF%QzqRNN^h38w|!@b0W@Zv@hc0A~>Q)5eibkMFhR<@%0&;ndCE6 z)3OmIZi-~=%tWX8a=^5RBgl2|uoBHbHHCiAdJ!%S5z=;OM;x2w->KvH%vYD@y3uM< z6dZJOk`i75ZI;c5Z?lbnq&y0Y9oT0{g&(L=H^t-) z&lAIkvj@3P_q`2~MHi7~surk$wBsMUdBQH$T$m9ui``SI4s`MDi18)!edt6c(FTxk zm;D2&H!Y<*1G{!s2nsXwHvDxEVh}gbr6zyz4?sNJ+ZX#o+#W|{gmBzydkJwX58*0h z!Wy4{z61`j@MG-tWw#fPWXiMFN)Om`96G;*?|Th^&kq6p*Q>(jGS4U4-{5TG=b)%d z&osac9){t2Hk1VW9V<7H_5;JIl>r(c&M*5$PqGoI=rm5THUI)KFc5Po&;2X8fJ3hQ zjXW^J?8mW8Q_q^iOyj@N7Wd8Ilpg?V{u1)WJ|d&@^gZABjdXF&v_ff#wmv{EfPR(5 zLFZ=V$B6*IdIs#_j~dSaGLWec(HGZG{cRg7CmSauKe~GMf^!ov_SRLvZ@k5m!rgbh z5OG0TN`;P+9D@?CLpXfDGZ|FE)cB zsE<9=v1$8JmA;jXT{jL{W%y0s%hGUukgE46l$!4sam6D_>w?(FKy4C4Lur*E{o`yw z#Yw2gpQ=KFtt~U8W6ld`-3M{8zK_yF@4%ASL-EptT*{n=_O0XeI+b)W8O`)^#5V0g zZD`G+R)dx{<#t(Utxt+{(KGLBe2n>I3UWWERQ+WEfmHYyIh&KJ^XFqu8_x=y4%y^L zS771zOGtO80!$&pu%IQ>7@cLYQj zo)g4UT47%$I@MmwloMK%l+lW~vN?$yqpfv>nF1zW^&7v7-JbjuRsNA7Y!|#UPLFuu zb#dLL6kN1EFX~(-k&Ja(J?IoFutYilvU{NgsFy`(NoeT~Hm=oM<{<5dR3)DBG)Zw= z_v_x>Ncr%Kj*NVfxSMYJohU{Ui!&SZPuVot)N+q#-0*@ClsJ{#UM>kL%t;^EGaIu% z4c(=r%eAyjYjIvyv9n!X3{&3HVv7IHZJoymI+(BtY&08rP#sg&zB?t=hyhsQ^Pg9G z(R1X0*T;=I^1&_UPr)>C?YUVS4u-hHPvWVHl`rGf<&iWQn~%%R%iY2Ep7%rSPbCip zqF#pMx&8#@`!TeC%s1ET-LE}>e&UyYC=rZPC;ujtB>nDBkP;jm^=xOS;Pc?dE{(=w zpzM!wg}@bRY@8xyQn^>dhrBSBA=19gl=U7uVOh-!w~WcpqqIDyx(d@PbeswSw)`6` z+fsJc>6;;IN?bp0GKcAG6)a_I&eyD(heE?-W@fTFXWi{Tzy3>l&G_XpN(z~urvV_; z19aB|pkN&_`NS8VvsNvf_GL#WCM0H%@|`3bx%SHZn^{x}GwTa|I%yasoBPrB+vN8H zrBH9?SX;Bg_pcoam2~w>4`UpwPY0tl&CYZy4n+##H=EnWtuDxI7Qw@D?N2KlKv&&c zNXXBJatYvqOkdRK@*u>YK7T0BHh9Q>_c>#;kk2~!tXetI&q+WN#g%X9Y6g5Y{1L77 zb+xM8Bh}P9W>#Ozruj8iIk)6_ez^EtHKY89N0zuIWwuv}%T-?23tf^QCk^M}>$Y0h z)|}_RdB*$Ex~DSX*TKt1zYS9dC%3t}h&|hV@Xhg>&F=@F2jr#oLeuB$js4J9FVCd{ zKLs_nB+6HYj`L{ZU9F;r^iZ92wRXwK;eFH!yTci#ceO@cs*n$J72m!oF4h=*AwS*L zYKp9&`vQJIKfHciHO}8EwVbL0%JoywdAu&EQ$~DB3Lc=Vn_I_D3jH2Hh@l$YeXzce zN%^}=KD|9r9{|y|SH^~9Dt(^iPEfVwo(j~;bRPfq)JzF>JrKQD4 z@NPjZ&6dLfXat>-o%X;@YWthml){POI~J>5d3D2ThXbMb*;)`BS*_ za=iqv>#wRkc+q=fzfM)M;4=wYm)=3J->DjjSV@upUf@dHUtk$)t{kQ-SE!!lh!G5>-ln#TXURC>-me><-1#_6uNOOP zok#hSkec18{4gDA6gd4NPB$W`LTmL*n2(7Rizp){6%qV=Xr@>5?r}Hl3G-E>)pdpG zfbl@F)^FY8OZO9a;-aN4M5PZa@U`dGDZfC-Pw}}U@E)w!M`iZ9x3rtL@laVPcKhUY z(Q_K2);EO-uwfcTf$?-P-Oq}jX;^twdS9PUCzkroea3-t#PfZLfzS%Y-pwuR^&#t3 zr|@Yu4KS0G7THaM!Kq!RoklGSVRvS)6lPC{>`W^`eN)Fk8|-@Q29;ZQ4*AQ*v83;G zUt^ONxi9Di;0mi$afBmOs9dPXV-0Cf15uToz z4*tjUU8l<$X&S2wP!e29VlYTFr_TP)mI=Po(KDmpCz`&GJ}{)uDexyEBgUpMWW9oDDr-0t$|_@cg~UJG z`@~?9XVyKR){XPM+!Lo}6woSVvFaRq1UnlWt{LuLeVx15{u0U}_Hdq5Ue~7%v?VPj1?#F=rpwWFER5Ne5c1}*$ACOmFVOU&}Yl5cvm;hvL(hz{XU(8m}2<)J#60P};y(+Zo^A+18O*2*7XbOPV+~*O0>y7qy zb{G^a?ZTa*37|jiWN`#_`^}gVl8~euxpv63I?G`{oLc)0-zWR5nG_|OJf}lPj(K`k{(~0S1a*F?1$AoI)$nAV&9pD%_goz zKm8FzRq(w2mw4}9#^))uiMv0HAQgt>Nr)V6#ToC1_`1~eqbV*&Yeb_kC+q@_ZjvX$ z0ry-G1s#Yi@GoVHh~%fb-ivS35UrW+C*hR_tC(NG6H|?r_b38>C;9n;A&NZewh+Rb z58iIh&gq{oPz?H9d#0=B678!ObQT)zX2@u_RfzeSa46M z0ZwfTsUV!+pm*pZFESF2mXMo?>ZgT=a%lGzL`jijd2bKK16vE*XE}ZkH&guW*xOq+dYx{5qgn#plc7B3!<6a9`-xYVgPVG^E3kzxq^gHog4^74Iwc#1v++v9ZZTAV74vnlO85>^>Vr zQ)V;_%yF$YsV&703TkZ+MNg*2 zXLb%J|D&fVyW$MtNe_|zVy9^x_^G8>mX+KsWA;Ugi_3j1c{>*L8JUth9EJ#5vlQO8 z6n*o@L#F7gInhX@Mzw?RAR6JfY6VF2rke2%XtW`kuyl6`yQRdxU4uO!*<8;>v+&)kHXoBRrrq_8h#@4efCaVQNf zhMrb_KRA|}UlGOtl6|yRvDY^KOjF64wf=Cbr1-*$?J_MFh#{{yt()f9JS+XGID(M) z7<0CSG5eG5tHak$esbk_HF-6^B*)@R?>E+i5LXH^RB@aw&NZy2guElP4_ddcl%uV= zV;g7akQ;eO95a6u;+lWyq_L^atp1#ojid$Hc*6O;z?hGIXLc> z)kCfrU@b_0zvz{$MvHhTjv%W26)nXXN{FTrx)KTSwI?DMq{Wfik2lMTzadLcSr6HB z;HWweJ|X(V$R-se3uC&EG(WJpDxr@pV{+a31A3L+ciNQDIY0s!Q+x-)H?)KYp>y_m zR$Ky_^uNEnW}UyXLriW>2>ECxhUZ%u8ACF#; zGLX2WLu`{h0rNCa+ola$kaKj-Zr`W){T(!gCR?=68{a~x_9WzdWC=v%+j)=oL%GdF zQCedv{QUA=;(gBuT`B<7)`McR!|~nt$&rxe)QUs@c2KJUYXCDEuHdLNa0QIZkJK7( zq?H4S7v*-^Vp5@0clke7?Czgs9Fba;6;PM|zuFp@T0I<1n}wQaTB zKb#T3QR}|l{1Dxg6}LaNDUYkptk0CsW={(**b1bk)8F16^*enMTg0 zi-6?2JO5{4q$2q1&?;98d0d!Xr6QSB-HT-D(cNsxsb>M(w=)f@*70Z?IH~5WNV$0Z zWuv>+lXJdmY^b_Xo~={N<~Urs8K*Y#Dvsaur5t@y9GAZkkr>pQ0RHX(BEm_U?Cn3o z{N(jkIzsyZlTOuOjY@h!bkN8{}=32bZ|w;PkIWH?lC zYr8*6!}84jpqOosXKfr#{yR!mo0+u1nwsPIDW3^YE3lB!TAIB4_LG_R5Qh*tf*O z5EX4!v{lFM!AG7GrDVge+G+oed=kF<=ZvlLOQlV4u<;1}NS(cz&LH>Doj4rr?Dv4b zq5?dOQc_Y}KgEh&{r&aLFy0f9rEZpN#yMIa5k7}J=VFZNVc$@4aB)$Ih={yfDIg_T zpC}fKPe@SE^UG>(ZkBga`hMkoTeY!JZXdZIU03-D2C1>FOYi1*g}%%0I8&tSc5Hl` zK0{l`P^dYDJvzAk{TJ2z)HHh4f9IA^)Hip_cPtK<=`ENrPlAAUeYQEo#n0`((9#z% zWC?TJR8}KJilFu&r=^v~&Bx=kobictWKPV(f@k)-3U!pUT(q3EXRxLoPP$&YQm8~P zo5EZw4FWMrJ(ehJ-ndr+$q?NF}|$u`U19R-FgT4qQc z16r8+-F&k)BLmA%gsG{C1zLS9Y^e~W#*Pky>4l=SXfJfnqh(G9XM63za_FBAME{6) zhR<;zkY7|*+g6VINY%u{OY_S#^oa%PDjAf%e`F%sJG(k}ug2#*pO!t|5Rtc^-{aU^ zvZIw%8HrG+vTA`~1p%4YP|lnkcMlG|s(g@L7dHC0Vj~&` z2HR@SiH`9nN=xjPqaYaze>OoT!=dZVgg>{wgaDt)!6J%iDGN?8HFet3Bl3)xYj?raI|3*Pzs`xi$ap{ zEE=PflhgO%A3qe#%!+c+e=72jZ#T0(PYEdf*~=F+FD|F@L9J=Tq}+^rB&9RRJqa(9#OX%*EigC|9zbdz@<;8ZrUJ z98GoYVodb0>=?;F*-nh-EN!+~?v@bz*L9$ij?BHs;shD60pq-AQ-(&NdZ2nPAk}Mo z7@+x&|C+%0SdS_{kAh(Jiy7SrI@WICn@*$eZ$ksk7U`|6?fDJIfLYGj)bwl`5Hd*7 zJtrq8P$PSQoQN>>>dKqeU=Xn2v+K8hv_;u0RVnR|>|Y(%l8#gw2m{c#6N4UFg5i+c*X)&J9Ye+85yG z#=LxZ&2e0IvOL7JwYydcMBC(SPOAg7OSBWWJveUxEw`k3mg|IO=T{r=abYCe#vg!L zpW>6|z4MnIqD^{iBT6I2Czb&yS_-kV81J9UTwGk`B_$GeLtUMn)_~6d1V-KQk#~tj z&!cYDL(=)Wvca3oVaPfZa8&8=)qyC6_@jlquWG9*+6o?&t`e>2&S*J)pMAM~vhOqT zAIjollv7=)!(nnF<^b{KW!WyluG+gsOh6|46l#Zzd#MMgM>{)v_C-IMbq#fy91a}f zc;nm7E)+S8#Y?68O%kNRSeZGU@zrQ8UWVf3STrB}ma!=7Ct1o$hzOgtqc6EdH!~J8 zxCA-Beb_@=AxyLyy)u0tJ#C+C9}ARXh*0BDeE5%D2;}1|5QrF>p6m;a?b#jx3yF@B zHGZLr5rwk&eN$u8d?hj{O)tQpLse9RY!WpfDnPOJ9CYq@TaGcGVxzWVu)-8kleMc3 zlxTogCrYj(CILHzPO zN^6v1@%tMiro)^s7FlC6<+)D|f{VqNrb{M*ugjO~GLe*BV?A_b)w^2Q;}1O44IaJ1 zUxjuze~px=P`Dq-4A+>Le(#zB=%AB%b1YSO2Wp;Oxs)%ijIYPT>BhB7R9kWve~n4k z&8LE6f}+KJ*dY)5EUb81b#Yn;_c8cEMS113@%LdQa1O{gr51k^d_UiO){POiFcr@< z9*duhHxOVChsoe1qHrkL)kL_UXC)#O8~mwEDQ`r^hVZhi-O^oIJ$9xZ-1XTK#1S?`=9j@6BY4ow3t{WC!AbniI^xv>70x- z+6A74&h-p4(=Zt)fFqGLBvbzvMVb=@A4g4z1tjJiP; zsPgF`WclB{Ph4+EhZ5>L$LOyW_KWXrvO8x3 zT9DsoMh9Xc_kB0xV>6*vj4YsNh%^A50-{n*r|Ys(SzqhQcUe-(`9}+Zvr}Mg!x3Xf z=&g&>PN(}QMd+ zya8n92qjt#ZjC$i!r>_*G^|F7{-6^P-?t)IAvC$6>dvk3cV;rIDtI&!kRjl5`{UkY znJLX`QChiGjp9VO^oEoN5GPW=IiY<9{-8M&z>mgnT!&OCZzvYZPNAWcYfAYaBfuNL zRX7|yg{MJ*0sUv~3zXp?8=iSUB%SUWrv(l{BnN6uyE1oNJMLus7v8`V_!A5?LyCt2 zYzsf?7(~dth1%E6@s!x<5oq5y4r0t0hf-;#K~L@%(%UYJp11!S^^q9xGyTt8NHxR) z3RIX|5r4z9!P#+`QmfKELl4Xd7fY-cYy%x3*FYQ}T0-IK-%siL7f7VXcGga%iZKMZ zk$X1g9+wN?FdWEeij&-$#m+KjLMHr9!|ByRBmGyK*Q#QeZs##$Rw<0)j05=>{?E6P z30c_vy1W7F>yGA@&BHx_tU+eihF+SknP-7w2okB(WE1leyAUght0C+L}&R1u6q zSqtc2O)KdFl@0Fbf_5Y03dQfg^ll*9^i-(eDvvy8)zQSlidS4adTCc!*z!Q@0k53(HsP#eHm#X;py23 zXhBS<+rX=RJCivdAZu&H?{cu{c|~Qe58B?%paROv=?RSc8~seU4~q)cit(hJF*bR3f1|Fj}c#SH!f z+h{$G{Xc~1{b1|~BpLVwi+5u+lnCnznWaAu+BYNyh0@@*48ZldxA$s*8 z0qPGQtV!VDXJ=*wp^Mi6KytBMmNZ_LB+5juT991yyk*xI_8LmN)V|FBT;Rg|%JFey zxk_I_MOh~Xe**qn?YGRCmlL}RUxS)d_5-P^@-&hn=Vt5eQTkE`r*Oy)18tKI)}*8$r>r^N9I;h4mIy^2VAAd(Nc>@_1^ZJj(@M~X8NL9 zkh+s@ZP4Hug@%SPc6L?|pxALR9y9F+YAwq$tKCc^x0E%vE)$>(!qCyt0a$vd0o^Sr z_)dyk*GLf{KHfgQUqOG?Z+|lzwYg*fDy)N(OIrIK|4L&(oVJecIQp7fGLO?zRZV4g zxA9!nx7yU3L|;N8UQ8rdBRyaYDvkbdEWHZg=TgThpw&2aFZ`IEp3cmhk9eB;_uU6& zJ{qRpO?UllPdOQS1;bg|)GCnL@5aVPYXBk!PDT<%#%_EOJ!f?3p8KMzBoP|^v~Cxs zM(lh2ZNYO6oo{L+DJdyyWJGqQ*(1$)rBMa}5n*>Mg&LaxhrZ}#@=HZ$ry=$h4!0_R z+v5`x!TYa&E*pKX4QsX+S&eo9_g@BJnjBZ0NhNmc)To$3*ms9PI2YqdVVW@)ZpXn& z7oL~p)z!*`>4ixB>qj=m?d-#$dUE21E?o?axS0NT z^`v0fhpi)nV)H-u*O7Pa{tLpG>K!?D^@MvLjt_{y>G&g_KRrUu8P22mh%e)O>m3{ee57`J+czIzC zWAAzHArj>gsko;W6Xj*IvQkdJXUoNY@(ES}W=7mWM%JsTOKy$BT0IW!N)2AOb(W-% zGtQ2K%)D}6nHt9o`+}O98qd2ii+~N0Q>{{w(4%%58oH|IbWkx+X#>B&KI&L010Kgj!2d~6S~)Q@i!s~ye<;7J5FDezPD&A;CU6R3P%cX(}%}LT1Ei{ z*I%J!!FyUoDQaOCbB!LqWd;2I6q5)AD*u~a92e?Z*U+@(ayUKdxd2R9V>NBRn2Mf; z>365sPUcraxTk?C{K3hAZVkbO$db3J?5Ld2ovJ9>C8g1ui=Kt8J7k(E*Vnpg^sWpZ z4-aqr;rh_WHYaM+Ug^$&wW_AZ#l!URid|BTJ){q}`hE!#@E`~A+4@d*bC=%)`5>DX z|9L!fE8$fITPsUpVqGkKbNzQ^qemqzmA`3rutPc^GK8S>0)mB0CfYz(XBQ16o5V@` zB}Tx}=ID;w%Zb|#;OG73gO7)Qz(F>Zva80b!U~yNE6b%$lZ|X^X**CBbI8<7KWwD8 zeWsLKMKn76^RpPB`~P^%Q$(35?VU37XzA&c)XZj%N<)Ad=6+Mt^l@k5F1aqGGtogD z=ly6S^-+m^O3=+|N^KzUpE%G>?%Sv&CqM=w)u^?@SqYp$|<(im%Btl?vJ5 zN0;22_hG~%T5;YUBu&1VX3Tca0@1@R!o(wWDnmfRfIo%W-(&NuaKlls`DlnrN(nvf zvWGElyxg=^RMhMWYc@&S?e<<{#Fsh@pj#Z$pEnc8M6Ds-KbZ zP9fT>S*BUjIgenDS2y!cnTnOy`Q^zoWHwWvl~?yB*#_n(*ci=O$YFIaNstY$*?5n9 zH=#LxEP&j&H6H_m;Qx4f>#!#O|NUD6M9D!6(0URPx+R z9mvZBd0Bt=Qfjq-eb}hXXC%-l(*iN{Gw4v3>wVRW6mPuiy$}R|Fsv5803(2oUbz8a zpd;rM&rZ*@)?lBssFz9p72r0F0vgHJAyKqrCrY! zENkQ$9E*6vQKJAB*EVR@(4Ih!mp zrZ&a4d@%T$!g`c>oRD&g{*{GOAaatWECDF$EK`)_lNG-?wHQB5O8-Wo2Tx>CRoQI$ zQ2zBoG^@(5VEby#QIL&sqsu{?Q%GNP34f zvAEalMYQR2!Wsh4-{f(~Gn|~NgrhEzg>vK%n@LxsIUF*Pn0fjm7U7!AgS!TnwOs| zL1PoBNO^20PL6Q@0(swvn$g2(71b}G zr0&~JiMyKQ+6npsQi;+1<+pd@dMeKYk0N!K)^JO-?+}|m8u*l(nvjyWE_%9-$u!W< zuU$txI5Ki+R}76QJkQ>Ld-_&gh9HH`+S16^n2P;SgW`mK>T9Kf zMiG3u;29mCkZ46bLm$lTXDiyroki9~MLzdm4FhMDC!gm|U%0nezEAVjXpg30rlXeJ zOCjk_`=4mUGqCX5|1{kgTOeU7xR69-S{W4Du8+%^nBuc)YTW|w`if_gV=hHEV#6qy z2v(0*-wOV49(j)7nW00uM^RBW$O51aF|>o-!?*;v<^c2rG`B6;E16&k%;suOvt!?( zZo9a+ZNcPSG^XOkes%rKJ&OdzvCRLgWO1={lup!OO-L;!v9hyKugYg;Al)C1Az)4s zq(am0TOP}2eNj&??~C8VT6 zHWbNDzMpvnJS(fEUzWN8UW3k(bGsx3qqFu$_4U!NS1k z+nFpe8`|M+!Xt1+W{uB}Gs@Z|76<;Kk_6jj4JTIc(q^jHmek0_W0u9EEr=|CXVSM` z)nryzF|GMS^8r1lA9h~9hZn9fprADo>oc1lgN8Ltx*r$v+9B3%xkVpn)YX1YWYz!e zS>cxK{hg!gBFW|pj9;(0A-?R$<7#cMcC!t`lMrXiRTBeQHp`it8o$-x0u<)h8RpJ< zRT@^%p#~mFR5Knq+HB2xap?|LR0P4fF%mV`Ce-Ex3*WGm#d3+Qh-K7TRNHM1SwJ$j zMJ~qt0`oKb3$>~OjN%3)=`Pp1TRSm$7K&SJBp<(^o6+kj>ts1qG9rqol&JkEMrl18 zM0=Q4r83T@OSP$IQ)a8aT`G8Prn|@E9BoDxa=Ka|w<>cG%j4xFOxSXDM>Y;N)0(Q$ z6rYP_8`$`e>zmt*#XwPOVAr9QrB{(cQ;Z+LDWWp@Sfb>HED1UZ)})bS=z<` zb9(+k$;{EZAF&7gv&rC0J7EOP!_JGAZW+VMo3$%nw(b-lGl^h3UH z#n|SmtgFY)D6WNNMU(YCBrwu-WJ;XOl`WRIw<-%bg3oy`wC%U9`)>t*hG_uJpkWnI z+gusqRKl%^8!@?q{rWwGrPQSbx_*>vRG^lm^arsv! zv?%O3@t%jc*RDZaTN962?q-af;&GYho=)GNY|DZ8dtA68?n4OL1zYeAhJI^Zb!_ar z{WG5z62hhyq0d);Mr@7lm+kM&1mYvANrb=yD(}zQQ_etD}Ga0=_jJ z)L7?Pp3Sh0sX<`%)%*hdt_A+&pJ4DVl)SMN?G`Xsc#FBUaG8wf$@q;F*tgLwCv4GyAUIK9eh|an-7|8k<=}R zE*1oLxMJQ<|0}_U(#W-iG%4EF6$VemU$G!w^u7QNRn}1HM>&$1_eNwTc4IWJ-iiI_ zFY34Mm4nEPt?u|3JR``0-eMv|GO zRr{Gsm8^4jl2Nl{5x1bCJ~uW`o<6ROIyYk9`OE%WUq>=wC%uqm9nGDs^5&_rtIAt~ zEy}HF{l*x7@9Fs}?`3;pV)EnKFsF$?w3j;U*qN?2(+pJNrSZDE2ab#4hm4QMua2M$ z{{%-JvP3RZiLBy^j+Oh1edGol?uz4yHJk1kRm}Car`i*sLx%BCW`AbT{DZ-O!_hT0 zaGL|>?C;oPpjQOUa#c8aZoe!X=}1uz+um)+!(83HUqe^eQi;hahR_ir-^5_bk-b-I z$>);Pa{%*TJKrQO9N?Sd_q!@e5g;@NG|@xDHMUrj7P#Sf0y;Qs>x_~ql~{s z$_9{NDU;&s&~_I@B_7eU=A#a?n~iR$zgHJ>zC^(_F?+6yZ9HO%|7Vm!UT1#M^3oES z8^VPBc_7pc77xwc??ho@=TpX_5G-`o3mo`Qrj}b3EJt`VdYTklm$zqGdZ!}nkU~Z# zroiMWtR}_FGoCHSM9eP!K40|`K8S4SqQOr&NnT0kGoKN%s|mCk?=OX|ECi=0u$jCz zuGtJdOS^80xS+gPCs~m%r!m`6kQ!V0J?1DQ5S5E#K~g)GCw`&s^@mEZ1XMebiu7A6Qz&c)T$4 z@1)2;--*N&XDX@m*fqvywzFv3?7NCY)o1au3R8|FWCEUY;~f|sF==&K!!gX8z*WQd zFqyJ2mT_7uGvis^cxFXp_MQFS$c`1mX= zd*7-v#s4B8E7JVIh5kPcOMYsSH&`8J4bd9|dpzW+`iCJs!D>_1EM#%C?ber^R%^WG zm}@=fr0U)a%?{-^SyWC-Jfj7ksh>JJ=sC{MTDeOxVQz27m}~2aCWU$9MB;u7 zIy%zyq~4WJ;-7P#;d(uNQE6xYa8%$|DvoK3Hf+~4k$%Qo5Yg4yGeCnM)M7Kj()y5^ z(a9YRuY6B&DKFuU($Ub3lHL>3HBm^M$kTTgL6sdk4;EW zMbr3q$E&tRQ`-abO``7~?vyFylL~fgsFc3h-uJ~-&D>~NWVd?T?tFz8oCGs@$l!&1 z`_m}Yh{=^*09yU}igP}<+G3_<^zX70#;Q#!T>p}2RYrPA{ZXWI?< zJZDL0A-ps%$g+}}=cBfwMxRUS$0hfQz6oBMi-PGc4jQ1*SyfTvJ=pn zf6&DH?6CE#zxc(42xk2214$j;hPqb%l>_e(5syQ(C~A$A(w+aoH?5uU5Gn{)jNQ|K zo@^LRf+Uu9hf4{#+*}yOrYnr-cfVvl_NK+s( zR3aS}cqGTxk28)-@G!!>u;6M;Ab{X)A$%tn)?z6?(P8z({Qx$CkGQp^yVCzB6=(>1 z3LHW_KLCn?-a8ExSMdKTQ>X8s5{sjYK%ik{|Nq~`7}xdX)4?9GFwp@AFe9G+e>EsH zpc@0Fx81D)4j0HSoKR0zfEVQH;DMh$jEV@g6o%!!dX@Qcik02Kd{c4!>0zlHU1JI} zk4%FP;k||i7KjP7knw!r$rC)oIM}>1{k&0a!?Cl~V)e0r9x$ z*odT0$smsFU-4Qa8Ek~`>5Q&u+@b?3}f29GeToVxRjZlxle~0aKjWke=45_r7mz$Mdmb#>038awh zetfR#v6m8qWoq?$5Pwd}a*QJfBo)r>yy0N(g>bh;azz!1tGN`LstZ$D{p69}ZF_9T zsA;i8e8Iy|$WGk*@4xU|fW@~=0+yxQdwcOfm4uj#Bz`N|ymF<<%VXP-J_2T+eWHqT_N0=|qk9T!7q}s2~ z`2hGgF?)vX)p(RG?edqOwg0C7Bfn6uWpq31Y(l$5@alW0!A%8n@&O$pSCW{!UU-w@r)|K6Zl0%Bpg#LDaOg=t12eXmU&; ziLH)xs;RlDHA&(fE-o$&0MC<q~4WR0o6=uAf2Jw`Y4s?;fG{vJ z$Nl*6;vAN7@{W^6Pgx_&v#0AO;|K6((!{F6=766Nx@h!?3KSa3%R?YzQRr*9LcF|% z;@24&6qBhNFOH4ZOlmuK8?T#j@^Q?!$dlAQT7fR%xm3-6>yjc+J!N`sF5p*3#FIk3 zH;Mx@e;87@de=~fIQSjsEOR7n$ZZoVm#8`T=04$d_OxGqkBFW~IR&T70sT@Fgk?U_P8#&=>llAUrga!{Ck3uN-n@P0=VF*89Q85t>)2IFx^e4=8HMk^Lt z*37Swc$x7}c@3cZ%xkYVbX%wqe_9_(=(zV-cIBtMo<8f5Gy~F+Cw*lcUR>%_ukeFY zcfUVfA0JeYmh@-O!1kCYFiA!g$}@*F}!EX>TzDtanRl=q`j>nkCYiNK<{Kc(7Y zq6_Cr0?1TD$>^CQ_BK?0+ftfvyomy4Dw@J2^gkyhTGL&e_)GdtdN6cDbTP)xWNlU2 zqF**&$f(&Cugt$8-kB*%T^~di%3;){-jG%)FmZLw(y8K6<61;<+m?=85hgp+rB?Wb zMad>5=e~%0rH(ajebn^$Mm*i~^;h)8#%~1}*jVsXbsN*Qo=E3QeRuc@b;x?{v|-#3 z3=E&EwE?kEDbx<29e9fXc@YisXZbq&rBA@9Po|V~%5F4dJQ$M{S>1lBO-w=rHGEi2 za=schnlxB;KfKK~*N$vC+f735%~m@<-e1B~Yi*EW(Lz~0dlnhKl5TC)sy)3u^4w$r zz$u79%f9O;NEu!;#mrk_)?+TKFmx!}Kg9|;?rDd{-@!majT0E#k7cGT*YQ-*5;-gK z(qcN1`1V)jDpl)@DmBN4xgMv>(#QGj;9f&$w!9%%?_)XNgYN0A8TF~VO5MJVdEcWH z?Y$b_vY>CrJB9`PKZ=626(#^D0ZgrzLD#RY5#!T2B>Z#UU%vc&$^aly8qA*{L8Fr3w~)=Mhg8dh53hn;G7w9fI@#Y@5)4euAzh zD-V&0ooUb_-lB}rKiq=?5|6O34DX^uAol9`b3)Z_1i@$eU1xHVN|69mpgBfQsxa!> ziaO7>`>BWz=JLePwo{z)+LNzbApQE*#&V?lXWZ1cEf{s5={nQP`=u{gh^-&XAZx^H z8A-sI2scyhQ&`F_=3fx|02X%K^E&C%EjCY5V;+Bi`grmRYa51-eBU>xZewc*fAShTZPbX5J(tu z9ofHu3CqhbmQ={(XSPttjCJtc)&2C?ujr?eaW#Vn%}nxNLM8yuaFt3aD+2Hja1nK6 zWRS22HOP7m->G=*WW-ha?Pa$jmTmhgcN?g(FsKttSI1RNg1MFxf3GcrPZWz5xjxZ~ zuC7+gH%gfmo-%LqUz6iq*rgCz=8BQ9GGR=Mx`c&=6~7VFVzT<0?`P>D{Zy>Hx$)9x zg+t2^eJ%w~$_{;G4gB`awzu|_V4Hsf(ad)9%c|Cb$(_%(l(!ELHLIV^QM+l*xeTRp ztElLFd~^K9TGi|$`VS$;qwj*}XR0UZ4*pVYw~L1ZV+Ol7hA^Yw5*s$yzuEBEGf zqDYm$bh*i{WbQMS?(28BU6|O|C9Nk9-iJv+T`#XU>f0Fru7rQhu(?zN5X=;re}~yO zL28Ev2jz-@-c#I{J_mqTe^UkMABUdX?c4G5sq5;N)J=9|i_JD$lq+~REw&H>3n?mR zy`3)HQ;I2Umb7oYhus}+TCXQ7k~KnoeC&J5ovxkzrVRsV%?IM4?SEqq0y%^bbY*A{ zFs{QJY=rM!CMKVSjN5rHNT^mUUwcMa%4SGnXp8Aa*P$H*kn&@aJ&D&(?ghg3voCxu z$e0MlNceC4W+ZT;t(@aYaoQ9+JG4<}m{cAXyGXouUr*L#?s`9q7{(#w;d8LGhgAFS|IA zb`PlVZqO7q#x)I`t{#~Jhst*cePs^3tOU-4O|7l9a5**ll;%mH25#lKNek4U3)&sH z#zG>q`OIElJjV2onX3x9MKo2&;kfD9rsdM)Tath115^Pi$!SVusXZpr!=r-SAoc7> zNdd4BEwu@Cb^okm z7sl)|EAhI!jE_tf13K-iHMx{*V`v1y9Q9gYIyAm^7-!QwEKHF@{5~f*8H0-SgnQ_h z=g_O2(BPTzW$N_L=?H;Q8|Rd%StsdOM}zyc)D-B_gTeOBJ~Znc7<}A4=_u?Or5MFX zEarjp?<%OMAi&qP#-ZYH@#+fZVcD_hyNH;a&eLJlVR{)(X>W@VRFcyJt`)kUn{NNy z-y|UXk{u8>L@Fa#$-%zxq4iv`f1>MqE^?9H>We$6d(z1JC5EC`J@0RZRZs1wT(hb{ z>~ni(6ER(R8xXM#4qxH6{ZU~OyKfTEZw}Bcts2eKn&WV(7t&Y-aiTriCuc8&J3eTZ zWDR$ao#b{nl^W2daqW9nT=AZBQlq2|X^x-VdXEF2*;+n-0;jCnFK*FZy+B8gYa_l; zkjIi9NpaXxYBsy1B)WXHCgk5Xf9i?pAaF%#+F&tayRe<|hWNlkR{mKdT!_x7sQ&w^m~SJ49kizbG*!zs>7I zHKl^`A15}Z=E?fg$&!Jb>O|JwQccm1amPdn3-2@IJ0c$y5ODjrmEY7oj}B(eg~P~q z3#cR*6QsAft^t0UB$~2(z%`51pI3>b*R363W%M|Emo#OjwM`dgb|=Y;JLf^UOKHP3 zRYc3?vg~cFgY;!lrp$amd%_gTBSf+Zo9IpOpIG%tFbkEs6og zhOAFh(;q|dRANEv{@o%F5QJj z%lj)Fn3Nr)ts&jGPwuiWr?zN)x)7$+O>TLD?&`XT`UI`&{?Sx`ypgB`3 zYXjn;)0C8yazTmpK4_6zo0osG!>Q*3KC|f!D2tAnk!V(_PNNLrl!?#>?2C7;*FCWF z`YL?%Kc3p zzL^o4UyU7?;e|k6!~(kSy|0eLPXBHNV^aBqYgcKU2}H|Py|!m$cr{_3c+nz(r>dbK z#%PG~C~@TPij1+4?#dYUv&*JK`WJc$Jnam)NHWkdZl?8Xs%nY$oC)^>O?kdAhBIh0Afw8NvXux9HO#I8$ zpY(j@u`I~$qeO(50g$7rIsc&Nv75>Dv$d}BJ$38vA5f0;0BB4ZV?DO=x)9Vbjnve% zPmQyURaT3%lX9&jnF&85cpMf=b+})S82jyha6nj$XL_?@R?AW46+yD;1=3S3dfirv?DVPpy3Vv zI>R`Di-&wRmdY8~>8Q&+a{}Vu8y*~(cy$)UTBcpBSTS{>Q6#KcE+F`x5Px?!&DQ4f zLf4^$V8Abnbjm^Lc2_`PIo5s2Qwop)6(G9>uDd=v?F0eD5PgxGtLwHo2rZf-KE4JY z#C%dcjb0XC-|eA~&kSY0aoe8-$ur9%geO>mw6lrwnX7n7{+;dL`olj$L$LI`VeYgz z-`fj_p+hE=0UN8vlmb6K^B$jLoD;+hl9xvZGIM9-*1N^x^2$c#uZImhxd^9N?W7PzF}(Q*0+2bE)RwSDD6WbSIX;U;Y1fgip-|FJrh zjS_<0=V16y)>3^-uD&u$FY)(VSA(Vhxcu!Sue_Yh#2b39-#~^-Ohgs~_|dkN5?!ps zgK==a0j;-#gDxc!u^)p(zwxlHMO=JFvG#F=5jAs6y)7leyljQ#5v!Esw+DF>Hf9f^ zww4jeFWIP$!1#5et~OJUN$4keG|c(7m(QGx{fJ1&5zgnA=kPy&zPBM{uB}kONgGBo zQHj`GcJU<8sa_li?rYZtwal4nQG^{(rZKX2);e&Qdp`f6UNd{18ffKzRF_P3&X$L7!vN<=XS0z;+7KkMMzh z1bM=!mU<73O+Pk=@h$)B;Bs%QGt8}0ez18c!AU?edbqp~C%!pjOK>pi;#+JnMtUZt zdHOo-rMQrw3h!*YxyzmRF^%nVWI24|dUgNdkdWB8xz*w0zb}l8bL|ThG7onSR}b%>RA(VY6MVmy`L%dp0;UuP_RB{OXPJmguz_Wq0BD4fe9?%}+axD{`s z?xeQvrC}20S(frhW|VutSgULm3$=`xfv^ia<1#@=d9RCmTMol1jh zZoEEtkEGH@SWs$kY1;P4c}-4EUvn8f-Xs4x<~cFo$qt6FA*uw6(u_L94pvRu1r$G` zSA~z~iJ%MR8D7aTK78+@F(qz)rc$6h43CPV7tby*tyoXu;N&xXyG8BJx~Gad#PNCZ zGPZ4H%&3+DK`W?b=@R-H@rNRmwl^l3NhY96~#m)^PGetL2*U;Djd*ZYv74B(D7om7M zF@KO8rZOFnr&yrLh477f6cNHJM+a(`*4l;?>Cvy9B8d-j0ywj}6g1sXGppt%U*(FY zP`NrZ0&ja77FR;Ly7C~-#?12!Fvm1OSZdAH_m=WGpUemST7EL07MaGOIE$z#xy~!< zWXk0^DQVeE{)dK|*fKnh3C-vPr0;om=Bkz6;~<~&)rbKvRAi8nQXY3}_vqZY3&6PkV?#9a z9((&#y1RR4X@iIdwccm8b>$bK3n`CxPMw{)h7Rc{(SiNnPdfw$@#zJ;{rt|f{mYq- zZc?c4Um19k9(<{&Q1TqQ>3T?^)Lq$Uorc^~i=v^f>MOmuonh_MW?0J(ti z_af)4sHg~AHR-0+K4{5{X2RW;hIX?4Q5Ab9k`@V1Wh)l&k(Y0Gh z3dWv#lyT6Lzg>F)C&cKJCz01*zlMnmk=eGzZrF*!#@xONT>~JI0)Wc)Bayj{qW2V3 zUk_&+8hF?H?(Xiig>S^9ae;xavT#ReMKVpX_~kZ3j@<@Pc8j`mqMt%liI7p$VNCqO zI_)A&3dufadl6KpLPg~SEUj`uAf7KkBb29RPTOnhT%(z9At}!%eQbP^5u3b46c+Vg zB7-XGPC)g8m+iw9=FgurmG-n=m)7U`^143<0#8QdMx=F|Q)znWo>0^Q)p}V` zAF&o1T9Ay2G4yaF{8>B?7_7m;$#G8cuctK>zVff)Yl9jtGd;bM0dgq=q#V>jBlC>r zKiapi4ViG&n+vw@-dMpgJpClAl6+NGBNF*Ov)gkaUJz4SCjK^g{Gd@p9G)@eE<|rF&kpW&jQ$IUNja3nk~- zi-{x!KN&;JJWRFBUaa@e-@K~_kX66S@pi_ieT^J{i&Bb#7f7)^)=*_f7=QYarM0fd;1Xos4|!OMIch+b-Q^;u9?-+&KdGvK-yd1vl33b7B;l=_ z2i{2Z%*P)K?uWk6_^&lfVGIyiNL;V*UBiO!^kVU(C{{zEmH0{f}&O1WiU{C##j?*qZSwmv1N&h_8E7QE=d} zJV(C78ItF7)=8PLH)xx1Kbk`c1+B|+DVj2IVFU9LarNqBy9e;%-z?E>ppOQC7R=}? zmi4La5QQ~j|G7Z^!UzcA_$V;=&aL=0S`c|N9+k>|ewOq~O5axR_fKX*EbZORe-+8E z-A4X~Px%i!EoLv)@CRik2A!=#n^z5GoexO1OZ*`^m-m_}L{_m~dzc&uT{_>$cDD3l z*=&py38`L~(JkM0*=+_@<#R~i98;iObDr5@Cfu=?y}z_U(K+!xN`elbm>DZOtdynF zsS=t5^r>4PskCdo65I^3^MMMearPM75T*ES>JCZc?(b&P+lzf@Mxs3lr%n||H6Sr} zhdaNf@1_lZlG&D4QoFhWi?GHocPYJ^A zGi99*(HNd=BvkaAoT{fLS6Bn^fxOZdxu&KjriB@Zb-$ZCVzr~?V$jHe=XbEBFwMrzAMK6fg}?B}0qu2M;M-c%#3Q4}05X1N-0TSF8wjUKJ** z^_Si>n5r)^i0|L#u5C@5mOhr|5-c)Vf$IB2#vM#6&g*IOAYlmSV+;}1lo(_wpc&H! z1@4y*SWf$K)*Qxn0Zr7jR<#~f5;=YgIV!Pv?B}L$AY%WmtpPTA_Wbn6(ZAv{I4%bV z2llf-=7LX12=AqQY*_GumsNS4Tc;3Z#sE9KF??czqAfrEvYoH9ON<8`a&(L7iyVSn zOizNcg^GJrKDWJOfVv(4IH}^?;MsrFlsBOZ-=;rT8Qr65*SVym6$wxS0{m18onyd8 zEZ-VQYr(Y(T)leUpHG`v4XJn{W2JHd!B=W3?2eng%s7;md&u%TZQ1Z|1yFZQ1lRSD zgFiL-KDo?4J>1abU7y3-19il~&KC5k+)oWeT678-qj!f5`&b~Wz67*h;5s!IVEi@8 zbU>HO-t7xsr)2<_1L}etq{P5b#DE_n5DLi{{**A1j5L0j5BP@1t|(Y2?!@Et6~&|aIyJ&t}SL*owTQCBN@N5w3nB+`JpVp zI(7R1eit%S!r`JY7OY>f#K0$6Qf?`C{@1u*4EKJ^$2Y2hmSKuz;P>x{DFw|!?Yk(u zaT=GGct5k7cI*JYPlHv}h$%ik7V1Sb;M5hv;x99x$2wNY;CFq*j5>Qd4TO46L>Hi% zVqp5Drpusg#Z@z~Q*7No+@BZ_@Z8Q+8k;$;2k2xM0IUB=tt3{?IdiKpTo*tn1*$78 zW%?YF#)kb5n<@$;nm!9Z3BLr~qtpQ4Kw*pku0h+Y-C?E!#}U$Dl}JoX&G%d_cV$~& zX#liCqDi7Y{cYPG- zej2aF4dM7F5Z93oRXipS%0&{rAm&L&@Z0_r=a{QsR>~w!%`Zt~d^I8hqt-%92xI&7?a3LW@8#4JZXzBi zesbymczM#@{*a9Y85~E8+v(RH(z@fALnKCNm@bSqPF=uu%hCNSZF*u(1HkSHHQ2&HM4*i_+?m!19}db zJB*?nlWf--Xd0AB*mtMkB>m7&N~2UOE9mx2RS}Mzd6zY?Gu zhirf`d_q23s&~m7_v_}>P+-Z)N+0|C`^Tt+b^h7aFXx*krX*~0`V%=@Sve@5qIK>9 z+>_^i?X=qXCuYV;qua3@sk~nmA|ZvA@faz@pW0hb?LZ0CQqg^~tgT2=XhFfJ=ljd; zhHh=Gs(|%7A!77s>G994*!jKtf-RW{QsWs1O-7KxRBSA}k5v~S<{56ZgUJ>P7# zMRW~Uec^>(TdtnlLW{V4+q${0^e^U9rEC_<+!--;*-`WQWxwWBG_Bv9R?*{=ThHYNZgy;ICvv@e-{+(0x0h?`Z9SV^cRb&Mz-l%<$dN28q+k zd>{;^~R~XiQs-fri^O3tN9SSo0?0W91qOV={(rxdG9V8pP2{`@D z9<%N_*m!?w{^%z;rBD7$kx4RL^?j^TnV6hh{YMwJSnpC=W>Wba$C#s@fGzAvm#1sr z`o-X8NcMkVU>L#4-NK>2LVtPtNc|alNS)Wl9&!KhK%#(syLcD{W>a>JSnbg_%*_eg z0QuMR70h_sE|)I5fj^zcX=9kp1J`<^;q`6j%-2iUZFD(nIdc@q?k)o78E?f5-XfB1 z&JjWCCqa<^U5J0YezW`bPN@I!tbZ1s&+^p<4`4tf(iwOW=h z)J5KonfGN>cEqS=M_}`$U~w=gvsdP?bpunS$zdXDuw+047|#Sb;;w8yGf?4TKH#Fk zi4h4I#O-7=*P^tOc98A~;l~ItC*F4ngHS67_(&&z%Hb>0u;5~Q9c0Ak1_|D?OqIh; z7jo6HD8b$n{zdXJ?vrJhIEuK8OMFNc@5Oj^!ALPdcdC5wwOj?0c9q0_2!{GtM+LQ5 z)yx;0Pd3Opn1gEb%F(}yhwSIhpFg+{k3DM#xKbH2vpk=xPD+iydff03xiD2dtx~Y! z>u{bV=TqmrqC5yC>cn{d?A$`J*?g00iGsvrdYP)cORv0uns}FnEG(wJhtof8cQm!1 zC5}SeZYO~G`kcogDg7|njotLEm00LMK*f3U55QihL*9@$`ii#-B^$3APv{+Qz#L>; zU2CTpK7nPHJWesMCpp_y_W5}Prr#BIz87axFx?SElFGV#6zO`UZCjr1hrpPI(|B)h z$}LC7PTfBixMW^8o$)-V0aG(hnpA2hND;s&G9o;YkL(Y^u@CtLTs~9WcQbtt2xJ2N zo9$V|x1G$qwLX7NBVniz9+=%nL*DF^@|zHM$_5H(G4upBx;WNyag{#toW4Ol5aEBt8n>R~NVj+yOav ze31X~so_?W?8(={X8U{oNH~*lRm?1)Fm)xm9Tqq&MAgyOFDgOtJBiDb{w78fpq@AUiKsL<78{_UcM=E%G_IO*4+&vz`9;^S(CR`To3q8fYp!4e-d+s zD7e|zE%@#3lSB>SF?&0EsR-SNDZ-1_OI-R1CE$B^Ar!YUb1vGnlEenyYut8>JEVKT zZjPb&Nj7dm^kFY(KORv(?-)yDc_fwf!{sJ1)>scQ^QqAG8uk(IL5qSiUqre6eJoqvof*PH)tm=({=91MH49)pPtdEM1TgD8qCaOpscjLhS=biwe2!BW@v z-Iu1!BrUzKw&x{UTZ_#^4H{6;u=2h3KfM?U|U z4S0gJOSfmi{C+15T(w{ZQQV|Eg*4tQY_vpXWw${}rbn-hYl|9kdQ$k%@Kk!jrh$jT zJY1fMPY+9v1sCKJY(!bzW2wfZxneGfV~1u$R?goBG`i=Wj|Trg%jaKk=jOjudi1?s zjAOglRc3!iYVzCM^M8*ZRXlykIZKi;ZIy-xVTjBDt<~&l0msb4f5+&1B21e`RrCr~ zNj?(JnhzO(^0MhH?IG$736D`6G`UUXKc4&aqUl1e)>Chp-(zDKtgK9UxnlPL`=wXg zU9UaAT!TNXr1e-pu>Sakl_vD!|Iry_Pz6UG`X9}NsC}gfTB|5<780^TaGF|nKD(a# zhL8wU)6HcF&o@Cb+h$;_6aR=??m7$V$)f1<8X~!(DtAEravL^jxLHVK*rda{78KTzATZFRc^D^I5+7;u5?o*E?l+ zzcP*QJ>{hE>_}5eAm#0D=8xe2eql|Jt5kHc?OFgG$Zrwioxyq^XwxEjZqdWG>U`QR z&hm*pu=e@^w&S9!j9hcoulpiQOEy zeTHW6=;+j10l=^Uo8Zske;iqDiH4UjvXGlHJQWlHCw~~%FxO^)|CD|$3$ws$K3+ZM z?-s*{&qXVaczzS3Dqz5oeZM5=2uMFNaY!Uvkil3tiOT3SfRjAt8xB>Q4&&-b_(_A@ zd3Y3aVsenm_$(0?9f>f4?bzgPgns}ZVG7xA&II$s<)lNOfJCn8z%OQZ{se@#YzVXt zP*)>CMa=qH-MrqlhZ)ckd4cVUo{SWP(eFMZ-VCV<<8X4EwarGg3?E~+0(Ka9)n9lQ zgHd}3?XMIP51M(qM#JY1qse_w@`%DQ=g-0W=yXb&C^tOI6qW+wnDCVD@lwS3`Xir) zs#XoRx;WSO(NIQlZA7jKgHv2sc(g0Pj(+}c3#NrxseeTXrqRqL)7}xV>t^HkA<6mC zu1I7SL1~L7H9fWYt9h0rygJP9cBe}F?ioz97=Gdl)`4C;+KX90ASA&0}%0t7Da%>xc6t-;U(tV|U zk2KN~WSSj9-W=tSAuo;se`$Q*$obG~ z)D67X9Vuj{A)o=<{s(K6{Q>#@DW8k?6Yy7vA1^&UKX86lEeB19U0@IP4s5J%Kom5h zaQS7r)|sL^y|Ep?w@UqBar!v=8?W|d(}!INOz8~bv+W{f$iQ5w+t6>5@?Zo|IZL&xE9ATbJOB9GR(hJok=7F>TiUpqu9+q8oESoDb3qRibf{n zrkP1@yjsiPNnzjJXH@-ANO*48Y+V+g5D&4@Epel-^DfcXDRH&9R!|m=Wr^QRca;9s zT&_!)gEHTc+wIj0b7;^m{#5J|$oDqO z<{6)GK7fX@5@2?Aqs((RgOB=y0!9|+S~6`VbmNvxhh?_1{`>;--}yM;BG89&!}6)T z(H$r>n-dS&cs8oL`fr?s)7eIG0gJAKQZArXH_LE*SA7qUjQKMFlXD;EA72+Tv zV8f6&vVPi>FinKn65sqkPwcdM+pVuSxB{KkYq)TCnQ&Rx91}S*sVMTXNO4Qfd3zU* z3}S6!?P5#{AwR7P%BAvMKJCB(9oeZk)H=@N4^I3-F!~a}2(UHdis|b0_synp_M7Uz zui=Gio!m~NB8^mX5Fgocxf4Cbz6?k1vSh*67M|~p%}?1Mk||=ObbFjibN^<(nQq7* z?2BucS3PCZ0bM_n<%$nEn+>H&7Cs@vqg>4?YdIGIe3Mo z$vXfhklN1?WY=02yJEcire@4D0s&Pq83uH56n2unMc5=Z6(@XphX0n7gtg@fYTIED4M7c=o8K(dvG|SuqGuwY@3j83N%~YcY{uDCngt0a}$)%XU z#w=fwJgSTUhy zR+zZ=`hNDniOeLuwnX&o_pFV7e}36hhXi-;M%yaZ`|W!%Fno$F2C1tUsQeB;r4p~v zG(i2TNqezL(^8YGHZHzqtT=)|s4TvE`xteA<;#)dRIb;kvO6-b%k*DCnvT$EZx2XN zDJG}11=6*_0547|avN?Pn;$QkU$xV!7p?WEaU~dxBUqnnGi$b=8C1}i*hex9GI16& zLs`~E+x&kS&Tq7U|4SWfRhuo3-@k2OX?dw+pu+;d$73$nZ=c(B&#UVRcX-|>B)y;~ z?DRP>0sl0*6|PY=7|VNz5c(hk7S*n_{TWjxw|cM<;}!Y`t)0NBF-Rl z=g46=spJfYCnoggYD;ZbFbzD3Wf~1@4lk&?BpnAdg0VWb6+`45itrq>pRhHiU+0k?T*!G>W>BlsAIVdSi;HKvzf-$Y-l-HPNW$vyAc7Uc z{QpsPmO*W`ZQCtStZ1Pv?pEC0rMMJmaV_rdRxG#$_X5G8xLa{|hvLDdxXZV>pZCwl z3^RmD$Yc|__H`b|S{2@6#I5g!(p6j4v{LkoJgRg_yt1#I(-DI#;9QG;G|&zq^KOy~ z8oTpwaBzI)742!Imd)zfpw_N&jPg|rZb)LGt$YxKO5aVq^YAKe=ujUXYT7YbN*~p` zr9?UY(z1kD&nWIHS#Pb;BDyw7a}4lfIAbbr=z2h!Z`ha_u8*nyWJkr&2D(Dp&Cg;P zB}VFM<^!z$bYo%xndEHiovy5cTB0)xxeCoc8~5<@F9K>++$C)}44<|o{nsN+2i@ZN zVth0uJ;!9#MiKK3MoI9<73MV`dYto2KCIY)mhnIzXpH+BQ*Kpc=zZjKe_%(A41+Uj zwBB()zEI|y*IaV9GU(EDn1UV@Op(m82;a{HHs=~nC{HxYMtCm~*jY|4E`$bgi7ihl z%4(Ys( zZ11$FUACAcgZ*t-Qg125TDq$=1+%FSrl8roG;D(#I%c1&Uu*1RGL89JpZ*U6%-NxM zSESHFSXL{U3BLql&sI!xty{gEmv+m^+_;*rf`Y<59UTTP5@Hvh^JT29B&=bz52*K)>h!Ca6x&XRo=7l1 z|L|*u>o-`R1`o642_b{a`;@IkD}yCD?(DM{WsIdrtGL*NUs@;_5r8nWE{Y$vO^C(I z@3zyWVLq$!v}BRIyP?cN62!L_TOauH9U;6mdFVU68i3tl9OI%Uz|RvU;_()_CR(B?JXAci|DbXNVEWr0u7|P$y&wQYil0v8 z0+dkIZPCv~lr}b$EHF7jN?F^v7)JUM44JN>Wrs%gK`OG-{O0;BrZ;g^{1;fK4MM)i zQTPpww4Ann4>F4XNJX&azDu;s*z?$zZnsy}X2@WUIJykY+ofhE!dJK*f)5oZBBPp` zHH?Spwj27X3ua@Nn8I_w&OWcw@9gYG+&*qtQ^Q8K*%-|>A~Ye*;=AZyMHjerk8OS4 zIc$FT6+>o17yj)WyeqSYO^WSaFEeV(>4`BLa6 zI|RNf0-hu;9B+yw?mAB&d>!aVgDtLrm8@o(@j38N!z8 zMe_p8@l1{Q>*_xp#gCvbU*$s3-siIBR^{Gl+90WjMo7dDjf{P>LG^nu+wuzgc=4u% zkx_f&ft1))cqp7OsF&%{Ji$CkzDEQ%t-wK+v;h5483EJ{#Yh!rN%>UP7d$O+$L{d4 zZ@8eBl?{_#T$g&6lpLuT&@(J!Izn^0DpT6NotYKVUQ-;C9HxT^oAF+N$yin!jGzWfuOpz z=XY!cO48$6UbOY4{s2X?p7m8IBWUZzKNsj9stbD^`jH#?NGTlmIiK(U00eR90dt~) zRZ3ZcZffIXilA}xG;B5XB8TfC zqT;NB^w9=)8NktgFt2ttwhn`i?@Fg!1_Y4`g7%IoA(WQT%F}zG%*8DUZ4HVFd&k{-Mw;4@a!{1bw(be3iV^^D;sfg-szeu*o~-asCJ!=|DhYYegui&o-%Rt0Qpq^d@3 z0FbhfjosQZGTg_Z`{ox58vpXw0@P2pnkpN(W+ZfK#Gfs4_XwC18#)kb;opYuxZExn zw#C-s?4PD%Ca)9J6ZnlT_fSO_40iY4ioWw+I4-c^9*pSlRp#eq59ZT0pPF!-bfrdL z!rOJNP=4fT*cQz)nlko?WnyJBI7dKR8agkXpVY@8+=hYX=VW;|B{w!SYTB$0{Ia;H z+!4whOG_eSHAWUEHjv#wDe?XRzu>ruyF;Obhi4nlyj>sw{n&VJSRY+rZN4V}G1osR z+@L1za0NVC+cY*y!7Trf{uCVBA8$IgRzZB`ncWft6bHw|%@drn45uylBGo)+%nSbw z*x%UVk?>HdZmmepq4JYq)HkLBNZV;C2HMHc`svSxY2wS3{u`e%2uh~QPh%T=5A68Z z)(rUoQa8gsjIRvIG2*cbf35KEVumWpDg=n2M_L*sK$rYeOIERf|q?K zxSUz|a&H7aa0npfU?T?P1|rmR8`e`Sw_c7jn_cvTjm!@fWj7_QR*LvZf2^)~d)!-A=1|Y@==oHZ!RN=n z7f17(FFyOKf6;w+5H}=y6c8gspm>G}HC0%qq-*fEjqBQO>M%?c+n9BHm`F{%?EHj` zH%?Pt`f-MKL3{ux5(lj2=xsVHEmBRQlU7nAy*|JNf}K~#LKSCA;+LI8}TKw)nNgJDzJrh_})Lyeyq(K5ZZeN^VXku z2G0H|Z%ONHm^i+fIR58tI1MDwkkFaq5QxUG-Ff-85`$@lT^fTtMMwccdd-Pr-1Ig` zuh61{y}xFA#t%nbPg_`FI{V}@l0pSB#Nbzq20Z)cFobEL3fia{=jZ)>WPsw}W@_8@I?zbL2=XXwU8kp`?;GCOFUJmy{ z4u6%FmNvy9YG|1As!~%?QJHzMECKR`i4rWtk*p`o3k1vnP@Z22;8eQe^I`f*bfKZ6 z52do3K?)1a>T81G9DtfF6?GEBNYkA*>d4pnB4A`b5Wmm^8y2k)ms-q9HD!Rd4ljX6 zg2RmAyDoaSutgGIXEiqjjQ4AG0l!oonmIw~ljgeFat}yV_bSBushZ2rSo|&|vOBPI z3!}-Tz+~v3&-D!ipxkR|X+fVbTJ<@10SZuR8W%LAj5g`U6TSdr@qFd}veuczP;qpi zKp`Ev>h&)XyI)Bfu<9js_En(^|FvEj3_thk0-kxMK(x%lFI8@%^2Sj|Cxea_9v-Cr z_z>ne4(L1sH?;O}Wl`Cyz!^>vAIcx-X&3J~X;)7hz-pI2X}wyJ)5R$`C*!fe#!pLE z;M6SIiuUUg4lb@C3JhU#jP@5%nMkE?V9`T4IT=+CX`q;|wfSR{(vw>2N8S%ARx$@J z)TYQ<)LDGq?2NPoKs9hBCwG;f^VX#6Qq*WHEITXBHp`y1rbl+Ukh;)P;5?U5X8g)bT4nNn5(z&y%#KuKCKIwESicFSm!6Rk@cXOjU4c}S6Xe6viRI}nF1 zR2iL5XFmfDd%il&&-#u(s_T)XjUE|z0gjQSra8`e*BXeIr*;0l3O2BYP6YV1$Ar%7 zIXO9{TG*MaX*hFXGp*?mgR5*A6}3d51S~CPSw{(BPTUx4Ft#k~z9B_AWBC~rj}>nW zjFTY1SkdOfNHx+AEPt`zw^PhkbPy9rtL!-hH>+89w+OG)a z06iN0Ht3jp;9>PfNJdr`?6f{~CoTHrAW&8p< zia?ab*w`3w%Ii{N2;Ww|IxDMv9$bryf5(kwDemu|D8sgI)$>D|hiW^C+$@Oz!#$+5 zP;OakdAW0gt|#9-_p(iHO2URb_E5~Q4^Ea$Jk`?B&xy^M~bC~q}3M88)ci-W=)}|L8Vf){phy(L8$yRn2}(pe&>u21@6a$+63?nI1|mPS$+! zy|t&zweRE--GM>UBuxp>4<4IFN&|p}{2M#K;1O7$g`Y&A<9=W zzZ70Fv-WT3!paKc;e18%D>hX{Z|l}->2GQi`rxJjE0h%U)^phxYZ1J zeST;i67A`}3-<2_OpWGZH{wuZ|FG-E6q2D7#uXy_%K;2_D}`3v-2e-IQX(2Z@|8kA z@~W_6a7vRJHK@h-NA35ER20n5L5^Ed+(RTUXC%Y_UY`FA12gy5i!px3{&Kgy*yrPh z)udO+IZ!-L_=?LW{)xHuGQj)lP(QIS+gD2_sc>!;&TD&D_@xPGm`l+meH(}-;)mWP zXC+toJXxJ5R(OAjCK9A>IBNV-&0gaITUwX@-S>Pedw{#+PGOdK@^ND4=6JbqzvFC< z!14EUhOrre2m58cNPIBm8Nbs(r1uuVS}cy9x9F>ZB~@RLf<`GLVJuql?nNPuh>=)|M?1J6XI(fF|~CE1%|5?Qf6ELx2#JIWz@o16WL z!P~EG`$s!H7jKc_RjtCJB4#%(f#fJ~SbPD3od6|Z*C-ieooRoXTmH^}3^b)-15Xt* z1ai0r0c@+RN{j2U%JJzFiF*e=L@rz|!9C8()@rVntQ-QRq#9~}7J7x*q310xFTYxc zXl?-lIEPYgHxM)Z%8p{J#LL(yBu~Aeq$zE8I9EOeC~d}t9?C2$W0ymO9?2M|0mmIB zkZRaQCLki1eM}V)uQ5r9Ps#XPS64R$Bv{eV(AZcwNPXaZRNU$nw`Q1169Ll{P^JH> z`o+ww@Dk%vPV7g(Ysyf5rsXCEIC$`Xr`52xxycm(t_JL&qLQqRV;r>NzV(C6BRj3u zOMl;!+>0G%!$u5c%K>Xx*f7`GmJ3pL$EFe`8K)Frm0H8xi3f=c18=1rtWZMcOsNhA zxX})-YDuH-{F1lLEHXg|SABPKj-p~mAhd@Yc_G_~!jJymTiR=}9e3wz z1Hau|i+92)m|SI#r~o<5f3DEFAs}B0J?ke??*fv36FF{TIsr?WRpMevmfEam$CUB# zK_CRLX$9`VleU)cR%QI^g|q9hV(UHA5&JK}M|LewT(p3EDEsAncWQPvpE@9f#8V^W zQ0WOu`k z=`*@)t{%)X?FUd&!wMSPUk}N9d_8dI9Kah% zVCJ3eppenzoLaj~yUciMA{#Rw)V=ls$Ldl0TnU5y=hWq?0GFX@O6$&V6v*2}!*MGc zn?#`T8x|d=b}mj4cu8GA{p~P7esgn;ia0b_AF0^XA}S#vanJbg#Az%5B`8uu%2{!l z*DXQ*4P>TlJDyxEtZiqIiH}l%Zhjhqg$nwV7=@yoQv7PW9@T0T0r!DC4jlIF@7UiH(%=jv%+u~YYrd20fQc^+*L}Rz{#12c~r>$cNjJr=$!)UBy zFio7CYF?ShgOQp}*5R0IfZJ*2L^cbPqjLM_$g2+vFbo02QWq=~mCO_l!`j83#-TXw zQux^M@$q@UM>utLI5)gA3ILqv%@0;|o8KAD4t-ZqQz;0t3VGq7jv102cE%L~T%!AP zv-5*M)2wf?)uIN=T|ptLwzhsx96@2xa_Xo4rn2t<;NfdSH#HMusyD+e)CzV$eR{^|5vzHA1j}JXybaPRK~?<00GMt0X{|0fhhHh~2(QdR`BikHe%A?t^Dq6#$S8 zM${)QI`K>?NW)1oI9AR2vE5*bD0$52+pC%J zEEU+^lTh76&eRd>j=P=o^C>yzeN>^Ih=OoJ69#%_)rY+e@emiD_FUKCqzmX^yyN+d zjD@XrQfsRK)h@t>lr~i>m;v6RJ;ZWjHEs2ND~cHw3VQ97f$f2YYf?N90CbTec^Y8mH;REB{vA0>_ zQiKf6H!q+(Av0nYhAn{nO>-SbAtEfs<#4W;bO}BH6F&1zzgFLFwx3=|q4QXiNJdYB zL}r@_Eam4gd`5Fq&k^$kZHW8u+JN)}|CHyRaJr#S1D+Z?+`lMx6Hs(~AC0EUd4t^Z zfpB8ajBG0IK1-TvE7?jLNFq7SJ=b;OxnQ@>!7<5Ct(u+$*p<^yXx}k2e}BOYf&IO0 zJRqNXOd$L2!YCO_RQ^{(gZkQ@q4}^1HFR=4*5q?mdU`3BbZD4M-aG81#8fIxUQNCa zwsuy@8*zqhpBXeaVS;xCg9CpxPM8NUs1J>e&XHYD{E4;90qO|&A&xnN=j(x$gX!C< z5dWRX`b7X>o7bHOPR=geVE9gsHW#ddPTk-x5-Vh3NWDjLlpI!ttUCqYxlHwarX_Es zVJAt3@;v|KFHQ;!3)*Sr`d=WyG#g$O$I6*ES{EMVmGY4Fo-}Wm(`s&S?}M;34`mn| zWlyxJOhV2w3Ug~^CFN4pa_pWTTelMj8AcfS?z~3)g)KOvL`hC%jBTIy0%gD4Pt8&N zF$ZZSklWs3Rf;$e@WI7MV<#aq#i34P-h|#w-Mqgf;O(VQnz{^mc;`ZoBoLB2m*as6JG5 z6a+SPiw~%cB?VqAdOLt3!_1y+cuiySe0Bv;9ptgjA_SgmOxS!0vB%Tf)zSTaW`p9n z$C#xW(NJ7p8})F;;TPo4%#)9`{q?Gh)T9%88tjj{=MH(nw%~Tqn)LE>M?y|g167?t z`iHV7_IK3BQr`GQBOJ)DlUd*wzLmc;$sI4coOSrkU z!!p0m0VoLM(U>#dSQX=W1_ zm*q6&aI`$-a?n5Ja(^gks!>1_0(pQ67a{OD!T9U(714KV{1uyjP&uzOapEDlZUzoI zQ_w;B+=~EK9k+o2M1)OON2iI+&08bwB;A=G#5~s zLvcD=+cwM`hG%z<2^&o+OIwT2Rd`VVGD3+7*3TVO4c8Zd`G%a<19;(YWy|i@zmPW# z3p1V%QuEb-8mHf~3z--L3WG!zQcx;&UDc+9>$xWE!q;mnFI>&CX)x?GXQmYIOaY0}TnfJGE zxqx&g{&H#-tXC~L6&ay43?4jV3RA?~YM6@MSHU~30M@MfiIb}o)X|djG7wFvyE^nZ zH`3+zWMj*A?Yfp$mM(2HRvenm-PO!Vh@-CZqno-@RsF7W=#}!3P%d0opRy>3?n%@X-Y61^1Ti7pc&SM-I<8pVN?_X0x>zpvI zX}5LyVlx}N<@4yy_D#d_zRNAyZeqVhTY-1Q=+5rWAqpI!*D}WLI*b0F7`@Sihj52+ zkBH-A?7vL)4cN$Ka5@vc*8rsqYM+i;+s3#h-fz-qRB_4OVF^0u~}fLwLG?NW(jpm?BcNiB{QeVmC86~91LR{T7L1^=9-?Q*q(Olm{$ zLO`^D^|Q{K`aglFiw(7frBc&ItU^{YWH2oqW@?g2_fDClSyNz@OxoSFN~ZX$G=^~X zE*8I|y`EgpDe)|I!Nm_j$A^wij)~ry=)nkO6%~EGsfe=>rUV*dX3SXbbm^MfJb*n< zLhY%98?cE+H`jmAtQns*JEvLruGL09la_=Tr_wd4RZ~yQThH2HSzxYs3RFwAUnTUZ z(1m@wfUuU)B!A?H?aQ4x1y>3a6WyGvSuyc`%?D;)Ud`n&wu>buX2qc9YxH>%CX=c* zH#4tet4`?zfNXdZl^;w!c?r}QsmY{%L>A!0r{~4inhatv zu6smC@1ZqDzf~5ub&F_N$e50%a`FBdmy(%Vp`F8TVLvM6m*p>LQE2#P(;$WR$B1`{ z93F=uh)bi~D`j>x4n7(a7;&*e^Cqvz2kMo!l^TqI*YZ-h3BB_mww<_WEWtcp$I{1U ziFc!D)y+3qURQh=Xy^b=`fsIjSe$}tqiK(Bop<7i$d{%f<{l{mk>}RHak$`lX|kia zXf+??KiX15gY@~{DDO6*)#CN7l3H~T*}-UanXv9C&%oHdX&$6>LSxpzRBZk-zEZk|+(tdmuZ&|7!-M0FF7s6_6T&lLC+J%e2SK7u|f z0H0oq(<`Ss{o`@ZYEdower_k2*@Z{jO-&z*Oy6g1EmpXq{ydz)E^3mi{ul_?iRUKK zGi}uy#Q+)ge>@n%^DLsnmCO-=?W=i=n9839qUMb8< z9PE6bil3SEJH8{~x_d1y+DJGydP_KIY)hE)Ec?7^OG##z^}-A4C3)h-_RfDQjAL#6 z=N{fBn~vXMc>{EoTW@xQA{#|iE~ph(j4k5}O7C3Q9H<`Aa03JRbP<(9X;o&IeB;&{ zvA*44oqYd9YA41}kTM!!BrqaEO;fX2>%$VBoyIRT)%W$yMz^}^>V?#Z=QKp1Ua#xp zNiuFbbp`;oEg_!)DnOVWI{He)7Ia(WruijxE`H?%d26GyGAr|n>?|M`Rz^ln*~7IU zS1%SHWA3@#w;ZuL1>-0%36WzvIK_jsQdO9n?B6nWHpWqv63l)jEhk&gwju0DTtUB& zbQ`JDP=1<|WphGug4J?O_orRmi3b-0rcLIUk~br=ZLDYwB$qd zfcdyD-oCe7vy%79078$j@n$+li;|x%H%XYWswtmfQ0HOE(Yx{0%!Q-9AoE#g4N&bX zqGhAguvl1|8ED_(W4P&gDGNJA_w~eLiFLUaDX~(26JRr!fy99N)CKMskk3fJA$7K6 zU=033!wPvqB~_}Q6?dZ44_!!*Xjt)j$ZSX?T;$EZg~~L0%SWG!G-5JuOO}FuO<={4 z2>(uxsXRl*_&|(c?ra@#GxpmJx;?L_#+cstQ#ZQ^@oo#TDF|0=ybI8UIT9g-0RS3*`}oO}r$VrcXThh75P>hxVKl|i z$TI4~?`KtjAtowA&lVJ`LJgp3O{F{Z*oOZlKr%Sl{x(TbgUDpL-tq_&z2B1Z<2E@r z!6h7dR#A6l`0;tvEh@#>;?P{x2ICl;pFF6$2jf5x+N+ms9(yZZjjD|ooqH_$`Ae^9 zitSP)&%$1%(~=DOX3hL(d~(VzOq^q^77F~25$1 zV>XTg^nn@+qe`8?;!F#8KScr(kO zke-XI69M(kh{?cw9P+*ZzSazB89j&0-nwiCSpmoIoKmP>9<**9*`=t8wu{d}vP7hc zq{WI){WiwKKkD1WP@I&upvyr*J-tNOaRTGZXE+-W+9&Xif9LP-DJ*Y}PuA^=yFE_S z|JgsoV%7QUVf8YihH2fNBkhEK!cJy#7)&fM>Ko|!+7NleJ+SZx$RqBv+KTicETe|C z)2eQnYFI9Szue$Ju(@6?{L$jMM7j;TcK6Qm_y&9I!JrV1(~yyr5ndn~k1j`sC|#Ie z{^d9u6Df_{7n1?{XX29$##g5EpOp6ANWTlmF*imM3W6CcN*mP9&mQ=2hlhk5ztedPd>)duZ2gj*1a6-Yva_ z6;ySTLA;Jlc(QHs^?e}gj3>^BxZLa5gvq$S@ zEwzinyLgZTmmvSqJP$RKLdE`>lukV2u6bDsqx*!2s}{mVf5)OgXh_FPvNM^e!P6OF zIUrbgl;>Gb>Cp5bvb=@T#&dq#P+H<5K}3v@TkH*snpr#^1AnIU?$qs#GNte!s^mV+ z6}#ZjnrNKNm0UJ|}#;U&>p* zfe+%6|LK3VTO6VmI`{UprlX|%Zflc)EHk-4SeOd=r3tOuBgc1Ve3h{N@rVn)Ru5(y z;X1|sd~;z)M57sLl|=o5lvr8NBFC`AqD$%5&+0eJSqb9Xg4?35^%+pJ^IavAfxhhQ zdD^On%%Np2_T#YZFrjoVfZm)8ds1qTCoP&GE=wxcUCRuO}Kp{cj*~+=zF_9|scjJW``2IKjCMau~Ce}B=zC!Ta0NuX+3TG2Gy@*Ol zD(&^cu2aso6tj{ZOGd+?1kryG6dfMAn}EtnY`G2c|Ay;tQ#H;@O3m{gwSYlAaPQBU zFR)l>gncbJuWr>qj3kt{aFc-z?_UT9p|8X3PDJ-f#~;#Ib@)XTO8RJ6rnX zoLO3O5DqI@WhPEj^YME*AJ4tMp%Zt{#xu+%ob3!p$weL%wDZDTKOI5PF7Z70|Jhj%nq6j;` zTVr$Lua6}3P&38-U1F97c1~n;ypt|x1?kHlUR2UtpQ>t)?u;yiZ>a$9r#9G0U3&6f zIKC`AM*5q464}&U911juo}NA)?T|}aOsorD!m@70;H_16Di$AI_}Nb+y}+%F4Fbx3XV6S>y1>EPyNw4}J&e4Z+3dy|pEISN z)ex4~z@NqM{`p4D?AChs*_oPlnHSnn>s3Q=?2-oKL;>2Ou`%`2c^n*A7QjFw61$6R zwF4dNS73Tz2!^bmU&ovUfCfLW>KCSdr8`(_bcil3EkO!fq<~rF_Nv!OVvH{|&vEOT zpiWmQQ-BHxjC_ASY5A8#VArVp4&~jp&I)f>L{vO5d;h5=r)m@rJ`?=cB1PRtL&+qh zDD=`aJ`98`i~*uR8k5B0>Jn4KU+)Nk$J1^V6&-TmJauY$h5lyEuS4L{Kg1ZoBfmn* zfhw`=YHcd;LbN=MK(ia~-eJZK(dB=ph*isg2vKm2^D~E80hm#&lkGwx@ z(s+@8>T=BK%u6uTDpj-cghG~g_a#m1C|YSE^64AL_OCko9<;+>rpFGBj&UqXcf(10C1eZU#>T zTeh=1p2n-KZkPrKhvQ!H5u00E+W;`bU*P5MMYYNBC#tqrit+E?Nv#XH8>TK1Ziny!sWvA8w%AA4i7kgPm2)|GLbNaOT4eQt?InFm>|!~)x6<7q3M(! zGBh^*I*#ViLoN4BKKHD-5fR21L~AtM#|X~MEbso;PwXWRl$cG9m+HXD$%U3aa#j(} zt}a8hcLdpl$&EogRJxnB^$oHB!Er=>bO3q_u}oOtc|f=~wsw?9KtO~5UTJ9l`DPxfz4nykefO`uOl$wZrPRdP`x{*;UB0VFIixVZl*rlghio*V zAUVLPtaj{`omHDwnW6-cv`fI?+t^(KFy=AA^TGo=0c6V!w(}cpnGiZ!TIF;OEi02R z`Tt;YufkOLIXh%4S)UQpJ9tUG&qWUZcKCI8-?XeH0_hfy+s+Uwp!P-6@_Qz<3&_3w z$uMgB^6#g)q4G2!`LLF@R{=ZK%jh`%rbWaz-K#d|jglKGN$Qbj|4VEOF0K-a&nhN| zV8cjL(2~i}INsksKvT`K;{X-d;3S3A_PT%I)WXE)Lp5N>^;+@OY^UVA8E<*`c-t?` z1pfv8JVO6j%ok`=7x`Sc3174v`1NPHNsIdgwq7q;S<*l4NeR;dN@WLHTE@7BH4kkd zJ>#t5dz0xlEG2aL{_c+t$ya__=sTEP9{>h+i}G1^4)r1=B;+-)U+r?CmI>8TtC1JF z?Zl8h4%bR$!^mlNask}Szk^C4hd>OGG{wm^i{2Vgzhj}ynU4uf{Q)kXrE#eSHLWhr~@T#nQ-apDt@ z#9yQ5DMv>a5uFcgP*?`a%PCFcJ>>OAmk?p)niP%od;?Hmz-(_g&PeJ%!xeT)VkVUl zh0%GbnO}a*GaLmR5I-oWxil~6S0YT#Y;im2nE<|C=2yLbF1qO6v{@}>u0Ei$1g;{q z1-?O!{iPuhPX0wENm^6Qn#L6?nX-QChHC5q%Cp^8xcfPbs1*7o+U8@aMlNNI^an3? zWK7b~)x*oxhmqwDmw)X%PWJ!)^24DHjXYy;o$$7l>5i?w)VK;ReWz&$^&v2J1GpJp zzq3}$1^~p~d=xHIzLR8nJaj<_Yy>ck3%+F3*471uAOcxU>K}YH7u(z0^CM$heCRUk z11TiL4hCFlw&gZKK$znEBKt*$fE#7d$lu-~)k2nXi7^v43_-~fKluo(t5U!5lCa@V zZ1H#+li%?KN6`z_Xt_}ry~!4raisf~4CZ{%0<|1Mp4Ul+zOLP^2hDuglx!WlBp?qF z*;gy&yeZIu9V|ex-4vITM}g3GP9;hncE{jfBqx3%oX$Ut;lK0$j2!rP)nAWM{kT3R z`tU6_`^Bvkm(N?D_o>7wn+c{G1L6<$^HuLiB+p01mHV#wpTEz?Nnhrq<~WYu<7 z@#>4=5mtNvb7s~vu}cj*bV1zp6-T~ILiyE4^bBzk9bH;UKc{d?w1mvewZb08ZgU^AP%PZiWowGvXmLz7QHlN>jGyC^R%E*;XKzyx#ChG=h?|e z%O;VgdKU!Qo|U#-eJ3-jYj`v-_nbRU0Q*!3PSK$x!f9vrVSI>uD=r}v#i=Lajw}44 z#a0{C_cfSvwW~L~u3d+qzVPNq*AEIHi zKgYHW5s@ND-e~vSw-6wu2s{R{%uBm&3-%pxnJO(9fB#ES%qwS7v>R~A`Hy?aoSzqC z5MYnnr|?QpDf1(k`PsFbinsRgG6k-v8&^IxPBvpjQa7uHt9y%vt3Riu<(eqTnJPy` z#-I(0JUn#bc}xqUgWMWb*DLJM(cRwVf{T(l?BM;+7h{5g?> z+rg+?H=h2GO#q9Qw%V6$Qh5QPq!e!^pvrS^Ae$hYZtF1jeGq5%=h@;m>Cwp31HD7d zJ&Tqb`*cb;NU@Fma?w;p>Z@4!!vkmj)wIj>(vua~9VOW+m%;G*t)!w(Gb>@|ONEYQ zuHyI`%6v;jt91vDM|_ZQkMYcG!FOLcwR{g76;TJlKGzRt2im7fX=cf7Fln+px0q_?&XAi7k#ZC`> zO8hanLtB)^e`{jLQWc5$uEbsynNjqFT+nfX*F>e}j9Gv-|}c12SBT{p%x z7t<{Ds4zXEdxZ>KbsX|yY@y9^{XPh0#TQ>|IGk*hD}!WVD_YpD{mpe6H5?-|cD9d| zk#vVbLsVW}`FA(lxa*7~LPmZ1@c=LAqI;bg=J^kkEmKZQ->~FvV~!3o@yD{OItxep zly}ydRUI=;%Z2A+$XKNJt59%~s$BDXp4SF%N)Thlk(CrRB5Q?qi{j1D zE-K-#ZQcrrf$thlW}MHvTfl_bcXo3ruxcys&UhO?+P?7=|VUQk5a0)VWqhd*z^Iu z+)fk=B<`w44u>)E;BMB_z!}J--)|B6!+%F{PN&-zU$ocYbP$0MWfCm~@50O6gg-hp zqL^4^7e^(p=+zUFntc*>x^M#(j^&NNw*lM30k$eK0nS;y~`fmuja6#kSoy@5ip8xP16RQSm;P zvD=&Q5iSjw#vi1S2d0AM63fijfzABM!1xERhb#X@$Kba-sl^oyN(A136)5XhhtII< zO54oTR4zv9^woTYuF}}$TN>gt;&L-2)Z9Q+G9hWdjjmvonp{Z|mUA)!Bz!h1BJ;^X z+CjP)oVS#Nuzq961EYh9oSat94#E)VT5k?Bj`%qQE;r~8?=9XBF+D@QoY%?IxR{9) zK{ctxxq;H9lAO#m4qQ-QjYgAoJ~0?}f0Q}90>4R!LcgvX9ULU0&Y+#cj7+6}vAK(P ziid+f30m+VKAbOC&xM*uFV2^hO^W~EG5g8NIDq|Q8-8n@<>SKj;WoJFD2Rr@pwDpg zo$qXoM78X{WHQye76N@Pw0X-IRTvA!gt#2)ecRinCPlC{1v@Qoe-HM92G21y{>CUeg{pEuVpHOy-$2XG$1 zs!#QY*cOOE^Qgmk5KE9eHc(|@e%zn&>guYK9X^^QnW8^>?|Ll=`c^QQWK&T=E^!n5 zgUW6w%-K`ado^6vlUAMlI-!T`b!7CD6n~bxojRpR`h|Kz2=!;tExhz?DwrA=Ms$EyqSHYoOuz_DfqD z&BDaQte9jfzeEC<>6yuL5+e87>Ymsg$wz6XfRG-)G^IG>@ zoz6R=lAZHh95=svnYDcTt}bKgS(1b&P9NEs`*fa57U`3-nEZC>e&I9)y^W={Glip) z*&g^PHavv%La^no#a$Z5k9x3HN`4xDvYW3FX*tx7&&j%=gJWkjr;ev=Gf0GNt4aGE zisBu#SYtURPEf<`f7ycdRB5vaGIuiYC1@BkSajBcOvi{kkVLHo98h3jEW+aa@$0u<&j`O=x;2x7V|8`#4hLppuuzf z#ZMWZgLSBz_O9dAy1<_fFr|>imZ0f47!sZvL-4a7CX3=kJsgVO(UZG-kYQkE;lLT? z4ivPyr=D)VY0nyRXO+SMsE$JeQ`L4hcC*arU)$9!D~bd_1& zhZ0xY)*@cNuJ@GP<*iS1I0ZI;N|`#H$y14M-7b#%a*0cA#6?KRj25$+R*|*(@OA&* z%9*BC?t80%e?BK|IY+*4=d~8Q*ZXTkX4>(ixeqkZmfr*xZz9oj3W3~ElGqEsU3c)0 zcuuKJ_d1A3!Z2@}>Pss7C)p+uF>}}3ZemUIsMf}bM^Zu4N|+@QT}PqJNTL+DnE`?L*9U~U5aCl`z|7{@X~(tGi$Nm8G0w*k|~EK4zjkd1zk%K{fTu&4H}Ga zn|Zu)y(zIySJze(a66&JK}tCh_AoRLx+N1){6${zlWp@$FxRLto>{4*ZAo*wAFz=M zPE9OkOFg3SL*@Tlb4dL3d-g28Kk#a-N3?07krje*oWdqPZR!}21?v9$rB!NU(KBYV z#;_Yf@ZC6F`V6b3UC)KYr0mmf*cf40fWa0=F>5g~+Wq{qTbcdjPliN%a9H2_>KIjO zqcHcvv;8(&90emJ=z9$>ukku6qUK#KP&*H2el=weoL%|9ex|B zZMv!7{cW%CyqF|Vw+d+`>otX;B)fb|3oZm$a=-;gVq$I5_ zy%Zp0&mlF_O@I3K$cCq01AS}mJacyjFa zi&39#fX~z{$CCZ0g+*YU`1}J&YWruxw%mn@E&{tkEgI(ZM4Pa^OF5s{u%~MuvGs2-M(7QcK;9zrW6xhW2YIt>| z16fzy2#xC2(0TMCpNzY!p-^X=e-va%UK~BxOld9L3`Tz#IE}2?iBn1S{Ls0T3T9mMI3K*X^Z7j;vx6;oxDho#g2x-)VXjR{6CJ) zI;_dQ4Z|t|BBg+I!{|-{X#_?~H!t0dba%(-uF>7n64E&u3F!tIoqiABpB!-PSg}37 z`#!Jp`s1({Nad!Dw&d*rRa_$^QeOL!9l@oK)%52}0<%u@iV!uw5!&AVqnUD>4I8yg zs_$l~2(Xh9K#8{qvmE^A3^llpLzjh6O=r$zPjb+V|KMW=*!2nI5v5eivBLb_Q|U_@ zViBw?&9*0CvO`R~`8sN{q}COVYgBGr;EUCSE&J_4=4a+>vvcL>e8xY~oD(YtyA$M7 z2S2+N)|^acAMX)f7G`5#`!{>R+~3{^yzIErMr#R6y4~zr9h;K#lb z1kkr|h@Q-&_IRT8+0!_pW9DTv#^~by(AyvqyI3XQwXj2$o06cAtMKp~zAWzTFEO$7 z#a4lXKvl}hu)Q$3B5EY~ITqacB95t!H8nH9eX}+F;H6FsSEk?tjn`^to}tkhP%XN^ z`KEEQ&Jc`&BjdW{quh4C4&Irsk^Qw>Q@YXSGEOF|aEAbaXjl5iSP{PW-ujuNIf49_ z@Or4A%GermlI4ZlNb5{VJWJ};+H-6 z?%t1a>5~BUbU)vshb~fEEV%bJ+$7bG$Ig%LSH*KO)U1ZhFq+3RD1u8+P!G7{FHKWU z4Nh15v;tBPWe7Dd>q{qbjmNZcsJlexJ%l2Y+_|fav*d z^Zmh!xM&|Otge;CWB-ZOqj_Anf`^B#nFBEm(sS)gdri=hDLA1Km zU}zB--?Nhw0tWI@yt6Ynv`Ox|z4lh&=Yv8lFM4Zcot7a$;r%jehE1d zDkadGZpE#lj>osVO*4%IngZ69ogqy+Z6;-3&Tp~*Z}@+_yC|wF`^GOI0HQdzn)Gjk zkLBDKl|b3Lm2%Ow8UK#9^dEDt{h(?^c(8u*T&-=mneT@X&rQbI+Ot?c_~Pix*`K{!c|TTg%(_WpK^mYA2Q^^3 zUn~dqzwM7%s5A#c1?2Jm)xYInh?#Gb5A{4Utvy16^==E3P}96!XSw=*<#fEyUS?me z5$L`vH96#U)=7Ipaso-oDK`IbeSJ9s`6UYlS{9mSf%XLkl#fEf!Um_mopYIVn&tTU z1(N*hO1#gy9_*HW4Bv8F*jmovy|Wz1b~0W3vnF^m@-o98N}#HDpEjEFf1$sOb1e#A zbps*t`itsp*!(gL5JpJ}?0xehKDJr;@r|Q_L#->HU#re2M0LCZ=3=*6uXduHp`$A4 zs@|NF@Wc24gPxux0bcI}mgV#y#*hCMg~#aO=H@2rq+HLW-6+j4!q^yld39~M=61Hm zOvGaoKPysR9F+QQA^zW~m#eJD*VgTwJ+Quhj*E-SK5E!y`~)H@uC$wC3!#JH3X*1|W2ABXO+=mwG4DP9G^P1@FEeoP93cz{chTRXhrz zn5cu@R-;0hSP34ezY`H1K+dN{fl;CLDFSSvZF0pe(>m$sfLGF_Fy;#LS{6v*jOFqg ztO@_^a&dK&@ziefKAw&n29R55ewV1wQ<gE#)*$1$-l{`-+BFfnnuAG7o!_;S5( z%B}lhRSSy7=)#P{;)VgC&`u&yvRl5VHVQ;1lcXoJ1gZ4&^fvIC zgZjorI;gESK;Lu}n@$dsU-KsXcVZ58BASj4DK=4)HXCLkI6X=UsKy>J+_v(j@y*sW zMACl3B;s{89Q*HvPrOnd@~u(yjn#XF3)s`PeLvd%Wzaz#FK4$V#wf0EP&JSd78mI^G>9OTfSqvbusVrr?VFSK9@J}QHzhWn=M4By9T+Yrq&-6j* zfEo*gmkCr#Okd+;>S=Z=b^UuftJs~Cm=C=o+8(COnf;6A^QvM=M>%A1%8tzU)^MrW zC-a(`+&mN&e@oEsv_rScTMOOs6V9i7=qJH=@i5E-rE%cj{X5p^Zk)k8#oYG0uuvf^ z?Y=1WE?~2Hw+|GeRQ+y|ku(cko~+5KS$)2_?xqDY&$CXSeGVI~GFtCi>pe!zPA2@e zsmP`cQS~W-g9X3u@gE0T%5oaQ7*%uJXv#|BvItG3b=Xli08xUvsA&PcQ*muin4Q4j{v*3Gs23REct4Fp+4rWSeA`b&d*Lx=1$$f-y*Eq@K_C!E~8zNk(WM_{kJc+#dXtF6s$LO{=20UeNce7g;#Gp=F+!}e(1U|(XQHO8vcsFWgUB*EQ7`b zeYj9fzssU=l`(baRL{-&N6~2NNCAk3S<=}S$Od8xKPt_v&rU&?S+VV*J@cHv-sV#y z=V2G#td90Jo}f7_-;1l@02|>Ng0>Q&`3PLCs_RF`n%=w4`WV+`g!Qly;wrU#%_ai}K zmSq8o-KQ(OV6tXW&gVf*(hTf|IVO4|bXsjH*E!Vkty z{k^&FENM9TfUdXrQrPgcBb)l&DB@CNe(aW)m-`6qzPjCYcz3)9oMq7Qh?<=?JTeAD zf%YVbzE{wAKU-Oza3AV9_eEo&QoVqY9{pqOL5{f72Qtn_Aj&$mSLbnL20C|J^OOQV zPB3q-W7@I~}3B#WVpZ^Zk?v?>fCooKFbd5EgSI($M?5tiBZCYV^`_8A7$3G9kQ>nV+hlG0dFHPs?5E}hbrW>PD!}H!> zgk-KiczJjaSs2Y$(`S4CnG0WNSz1{^SpT)KGFldbIA4G5{BI?d;&p|Vz~>bv-AT8- zjaPZL(~qIxq$T4sw>?Yh6bXvZbnsLxw<-Ki~6dXgQ&!5D%!NqjIQR^sLDze~QtyOdFQZ@~l z)=uvcc7&*5A<;xJ^g&Z^!)dd~E@&2RZ&9xl$c-CS-jTwkwpKc=TOP00ADcR^cddIG z(`95o%Qv)2^?@*u!!iNy2VJN9A*UeQA@6rm7N}YX-ftb|sDa*2w`@AXe)O{m#y}Qh zs#Ok-MV5fdWJ&8|&gE^dP>`Is?1;J+Q%ImH`CxP)H$<%s+;+GQxpwxWM>s)-cKdXr zG)z8rkv-aS-c+4|6}K3R8Oh>j0sOVx3mh5~`aXb?6W3;~bHHA4N&W}Vs+0BJO@*r_ zQ4pD|mA>3xbN63Za+*lkq7PXyp`ZoSEro1!B)=YVYPc^YMFGNx?LW=T=|L7ru_CB(4pylwjvK|hb#`_ND; zuGzIvjqeevp66zke9z`E^LIQH6d@@!(-Ys>(0ZUalOFCCnhTu;B$AZ3?uMrDp+U)k z7tm0HJ})15*Rq6bU>Dhnq%{kiElBh+yvm^oIvE+qk9MWoqT)B>n{}SBfT}_4+fKfY z3en%GDN4&|gXv<5zwvZaG$H?saanlIuKpC_B87esi`FzUB+@{QR8QUR9RPL;r} zuGqkXIqb)o);>V7zB386kaubBI2Af@Zk-SOTC`AcPOQeXJ+hd=TT?|z8o>e6Y~>w~ z5E2r+x61j(Hsc{BWa;9Nh5`&v2t~EMMh7_GhtKvW0!5?;Ap$OCFo%EPZ=F(PJbP%i zDE=G!K{3h$oY2kQ-K524&!7GiEc5zjAbU~A3Y;!DIhGA*#aH)=uKEqYzn8j`o@4t4 z&KwEYC5Xl*x0z&w2&AAJ?6`b0=<&Ce>0k@uM~}@wHjfIU{Sdh(Yug>o)}O2@VJ?(7 z9-jqw?Thm)-$%3@I0KvEj;n#u#Cd%kG~N`tO4{SfR*!cB$v8s^mn+{nU<*vPv|V;> z*PXz}H39K4i=W^0>e(Jp* ziN*4 zhkp02_x>UjG2z&MVdCCUWBvs)nD&FR0b@o=<)`$Ybna=DA9Vt=+0!oB5hequEbm55 zYA+gH<~k|FeX1lmS6PP3ie-gUn9@OBMcx;FsgcYEsUyq=$sRi0lo!p9c=Vd^I8c1M z$PY1jNvgYY=##~x2x3gqHx3dI20oMZ# z(niLCD^*TzOK6sj){;{L60-3u<@jxl>vACo5KY#8_CapK~-Q4Oq8eL6sZ&x&7zYdf-9JomGZ41<6HM+Qew(Xhi zjnw}dRn@r~uzqsy)AFhwW}SRv{B-VJDSU+u8O)!vww|}*^V<3RdF7p4)frD8oBZU5 zrh_+TNwP-DftO7kpeH>%muA5wuKA>BtgWc?wzpszw$*-#w%lPW$bM+X06WGs`gcMy zs?ghLGAh=6T2N_S#*Ij$#%uKGr5!a!jf2z7pfHS)9!!kGH|{C-B3Sr(T_(>qg+=*q z8aakiB+Jnkxg6dl?8tQZlj9#5G<`1g*$`&G98^t1k2{u*S%pwK#Sfo_d(ba_4p-db z3H=M5gP{8^?HOnolms0>k(Dt9Eqkr*|60S#EHQQ{l(m_Lcx6-KEe&usZUyV{S&&Rzc%bez{pFzp9}w* z*+nGcWu>MwXcc(@3#X=OF@vOl>WgCQZV`^Cg%Oblc4t3HEEO2~aPg3XK{ncrK38|D z{6hEIVv&rKWEYw%adN=CxRw2QID3#@NnoPvRv(S%LYMFm@16PHM|2k;g4Pz7P4M~M zEBR0-dM2h>>=@0l*Z{QYzwh6_ZzLu_-cF+0{uT<9qw!O}s@relP+432hy*i(g*fx4 z#~TI+pQE8Ss9iD8zXBnux&T;xl}=Q`{*L>>85ItIcf{1z&hh1r$li-H0@@~!> zdmwJNe2Bi$<`3wnY98t~eaZXwXxIDd=xc-d$>7DSye!c2f~)Qu%cX%cv4f6F6-$8& zLE{?*i&Z+`>(T!v9Sc#=C8(7|x~8K)r=`LFtNT3aj1-EL^zJiil34IxTs2l$uf4T( zB5YGxa5@~$$V@+HYnZkFcD_ch=3$y33fj{!gKYE%n`$V)Uu(b1qK6WM+{>!_L#aj7 z^}A~s+6YXDO*-(`(Jh6qtK5r$ATH6^9BZ;UXVmtDDPr3vYdRfJB*Q^j0T{aLRz7X@d+3hp5qXd==-$PQ{QYBv7D%V)#;d_yw zb84T;s&tHg%Z?qkL-D6qo+YqLj9&%MW?K zK}mjjLx*rgTH@)dBVN04iko->ySW{u#DKtjBA-7~uR#I>5`0+*G3etc1+wxAFGM%k z)~AX|r(P~13eb{>$Np+}cn;j&+m;<4Aq4S;`!gpJ3%#)vkpZeMVTq~NWGk#dN%<`D zuq-N^&*?JUD#6-neqWSg4G(uR6u?;Ctr}ggO;)6pB+?vPn)7`$(dMgBzS+a3^$37c zxJzR&r{KLckF59m_gHjMf0pM#aCKwtNnsg|8EB#?@F@ll3H1VuN_h7+*p81c*GXhX zd_E;cNA+Ucg|-Vrr0td~^68dz=Vxo>2i}8#&jkDdm8s0=DU8U{4YuF^`CechAI#uk z`cjN@?oIBqTAG~+Nkq7g(5l^gJ(&K2eBwvz^LS0{Er#IGf8Zb(uI@)!VS@CwcGt|m zIW0b(;lP84nx0w8Gc&IAz*>MxFeVJzo!nG-0b(v0xJARCJT7J*=8X|x_6x#cx=n+o zu9(_!euR$D=zRT7jAJYv%a+))o6H?s({)~+_1Q-(g+-6S&9p@c@qH+&9dbFlxKQouk74;txC8X+eqR@oD5eFa z3vW{dHNs(^z3wYd^M&1>vzBL^{bwo26|^a97Ps)QigZYQr!&Zo@dFo|Z8Pcj-mabm z3$!QSN}wz=Jx?(ugh;;I$fvL8NybBdcvQ?0D%-1dIxSukgu4;Xh2S+Pa$WB&~``c$KvtH z3yGChE~g0WW#-_YqL(LoMlSO?Gmtsy@-rOkhU^v^aGYaScq!LY$Xq+k@Q-(I&x#GF z-{idoCR^PVqM;9jF>>NUGZt)I99%qY?Zgb;yDJ1F7sj~hkK$RD0bIkO$0}h!r!UsIEesP-R z+TGE3Vasz~?{HLz1ks$hBtJj*Y2jeph}Ri%H{w?SrJHUfRK8NIj79@6rng>?B0rm> z-q7hhaXP+wmpzAoU)}e;C)^}D89^(YRe)CKgxoz;oKCpWa40^p@N-#Yx|2SG#$mOE zJ{=~SW$ji^664@|4qg9iO!`1TwR+NA*vcWfKC@8RN4*`w(QmOVN2tm7YPi_E*ji}# z-`JdC*ixh>>sl$b6=UWnw!-Aea7jo>!6+VtXrcqVyAKcX?_NA{J1qS5pr0TX>3 zuyyA2uL4aK_E;tvZ->cJyXM`X=R%o>f!J&DVHX)q7(Fdq0WTf1=UgiaGuAsVCe=qLhMt1xWw+}=kyN(?X!tH^pq-J7mJ9=V#h%C4hH zOb`>!oyhfb1mDWz5y_`-yq3odi%9F9-uO1hPk{R>p3`_BUYHf<=PjsT@+mN$0GA@W z1LvhmB@K-;W7|AqK^h*|o)Z&DU zRD);jKmzHIH;9tr+!8{BS*;jtMDBwa+$)zKn3Dc@%D1Z`7Z^v30chw>9~GGu!a_Bd zgwZCYpNrH9YEWoo52;cyaX^@#wDg71wm9AGR*^*3ys)JRDfSl&KuLU{S?qyfp*>V@ zYULM!@YlwD(ZVktJ%fAwOJL)=`vdxk*-?Zn4Z|jgcrwyqMJEuYWblznpC*tTG@wq9 zLmtyisnxwbI*%u-o*~sJQK-g&?NLV z?FmU9S6?N4dL}YXyP?K|?+&$Thp(wSrl?3l+#Y5bW-uf}wM|MN8l&UVPA$?z0xWq# zrv^fok^iH0JQvuK@)_a=l*uI*jWb+})& z&#(wu{0HM~3n>}pfmjDF-$w@aG+~f9)ga-@!99$*`E5DJcrJ+LIH`ZUGlt0H17^h= zp32{O*7{lqo`+*|eOchdQ0@crs$g*dj)@jr;1R@OUr4Rih1pZEKU5vO`v|$`^}7wq z0#_8L?tSIU_)JfvPFShgCf4L3v@kXmkV58&|3_nV=y7@L+#%>ypQ-sVTYngd>Dx*) zW<2MZeBB|UbK^4rJn1hNo)rQ>o{9)%!zbF`oJYg?W1Phi401+b2UW_()1gSIwHQP_ zahj+COJQEZ>kWBYmbRajbgx{dDVW(-UA!1!E+!&YE(;zuF5^|j0IE^JmYsN_71I0o z`aQC3U~0#_kzHlo4+3gOX1T0yC^(uoIte_}C^&QVcFId1CSA4yOK-2SjFY1S;5Ie1 zt31pz$)c_73Zt5Ja||TJr(EuQSPp*j^4DH(7Jk1nM?Hmd_(SnS|14zapts#Z`{qDl zOK%S0!6_kMq3>g}sbB(85+@CfyRJV^l5hbcj$JFeQxf|ZC4}bv2b}S7AQEj@O=(6p z`Tw}K_y={yE2|Qj0?oxbhNFFuqSp!fK9H+s!}}0{+8JIN;VHGBelri4Jss3Q?a z6>fjIb1SoUyndl(cHea9TJTLdQPY&u9D-D$0YW3FPwh=pIA7g%$cs-Lz&z5hBHB(n zUQmt?&4Z+g5>--vxV{0uXvGkw)fX>l?vAS?eYq{-z}iO(NAw6uN(G{y3FW{I=?10V zbZlGJtoB1*ZkPHmoHW=f=2w#ROR(Fpx~C>W+n61Mb@d*IuR5fm{ei{{yG!b#?UIj zN8tXf(N&0$u#aQ^7JEXJQ0FN0`wORp%xg!kJnokJ9Z|yDeur5X{3D%gN#wAl_rhmO zIc?k@!AVFFbvaCSdg39Vfj~(JHK=MfO(u~D;%7V~K}x~YMLT}BKU5kWgXK2VCy(^j zDksncY8u@A{RDZvhm3%m6?ba^cvNPFchecx(zA+LEjXcEgK9*?>=7h9-9ZqXq10Yb zH`Oo3e=*cWIQZ>EB?%0o>6NKCsYB(-6(--utzPn=fRkF*$*JB~;K}R_TtOC`=ylp9 zCG?O!IZ|IVI;%fZhSzg+d~5@3PiMJ8SAi$p?5%Gs@XS~SPZMsAQ)>)4uUKfJK#UqE zoWSE+6vLLEB=6)B8?%xj>a_!OMX$evis=eZZNnfl+vjn@EPj{v&(gjZyuK>FPYb?! zq(A<>9v&N0Jy9L6omP$swHl2uIIU~3OIb+Z`|_m{X`Bbk#=St#euWc(B^SHzsIv71fHzJ! zeN4m}lLdl;bn@)+4y5G|r*hZxzZ8$(&vI})Zv`xDPIUWNe8qv$7`qlpeJgUc6c+vR z{_{SvXQk)eOh2lc&hw1RYrx`b1Tir;lNI$1Fex@KFSbC5d+2=>qi3Q^svKiF3Eav_ zi>G@@FQ)0x4M#|3UZJDYm)X-^0Vs=C7!Y z+IU>O+m$TcCFdJbtrpkpmChr(;gO;D?bsSJP9tiq^c^l^-Rx8Xeb5CcH!q{cOgM=z zD*QdQFs*Qwubeiy{Dpdw0X3f%-yxY-rWqX1wiI|K22t6guR#qo;1qks0=Yz(k7E4W#iZQ^)nE>--r|tcZT1uTF3fV$Mh6J8;OiW2( zq@L13&x?a|ihwP@v9WOo{%Le)crZ8V;bx6>G=({FG?g{8#j@bI)82lOb+Q5ozXOJJ zZap%e+roP1J%w~20|Ue!Wo3*ay-m)fwiBet5&(;?jEYJk7Y}baaZV=yo?+mCJijfc zY>JS7h#wh|p{J)uX%;oFEMV0jXA5`|fxXkP^AFLCjkaE;N)9z$FTi1MGNDCq(&n6zF) z`V3njp@orC3Up^74T+DbiuPYB7x8Ti%<1r7;&bzjY3aYn1F`E2F8nhUaA<7$zP54jqd;M zhY>#C?d59JZ=w%5E1@?-rPZr->4DHcY-x@j2w}V==;uT<0P{k-+gZw<-*d;~j=@ur z_nv)sp+tBw>YXnDOu&A0-E^J}0}Xms>8q=&PWQ)_bMAZNnY2LfeM?d*AhyUA^itRN zKL6_R)U;4kQ6W3RI0|B>lD~LdwyqhzyV&cq1jgo7dA?pppBFxYXFV^G)7bGhWu&E3 zDkH<7-hJJPmw_>`nai9@?ry5BLcQX4QZ{t1xkmu!*hFSU7+{JSnIN|!Chv|PX#e-O z`f)h-F~a+N-S68V6(yPtm7 zUz}zyqlbp?s*NRfdR>nQ0(twjQ+-hO$3)V$&WNoD8F#={;IsjmhA(SF^UFl9Pu6L( zSF`y~!>@-}S3RT`isMc%mou8$oL$(oBd^Cosvm-Z?oqrIH8Td9%XC%HSs zAz~L|tpIs@E4P!XljSGr!IKf>! zJ{iMq14<(XV|!k4sSZ>e*optB>9~&ccGyR_JCF0LTs_efa2p1M!IxK8U`ueB0uOsx zfB#3|iabg-62wQZMO%YkXlrMia)a5yy8e9KvhyO=_de+M24B4N)87sJdk+0_F=OsR zj1MzmYHF|0pT6x1xe2NwBQafs@cKPk3N69j~HNeeB;wgxoJ1F983q8*8WEYji8>QV1=ifh6^*~I*6=TK?% zgYp&Y8RK=94-$@!btZfGVqB{y`S}zcK#c^ny+nt{p39PLRg1=1A&0*#xZd~4bE(!a zh)KUubM%aC?FrfAtn;Q(AS)+;;|0>KI>oxkk9J*PwJGa z<28^(TE!7XKe&qJk8#{fj^cP^OI3glojdjk80n9lrs zQGNFfL_W7uUH24sjt?x%obrQzrg|wMrB>16kd$_9h8AC~0m*@#5wCv|p`NU11NdyD zTpmV?QdnryyR7$8%C(Cwcbto@iA+=od(aD56wLLS2x~}}4pad|v*9DjE^0j43;kl* zJ7feMOyg4BR*%n35!lSU(x(eQB~nvzXwogy2Nac1$p}f63n-fQZ=fSEo=4jT)C zIKr}CsQ>KQpLhthA)QI1$N&w>D4Kva{m&YZ?ND;{7ibJg!^03r&dRFXwJ*JBuT?Wp z%(&RSw#26DOAg2~pK)?qL%}R|1jMAh`{z&I{Wu`CcU*Z6@ReuHe5)xSqn!|B5X!{? z_eFdK2&NE1W?brO*M5A&v=rm;mA<)5Ms(xWvo zDdpbh$`{32E}a;#%{!`WRZI>z9fi3bGIC7a<)a8Qi3{#QOEydo%Dlix{1~zZN1^~1 zz8a6PRc;J(IvxeSnwt{@topSAyKwtuJ^rIZMO)DKI>H@ZBRr-G>6wVLHo+Hb_+`3t z+qc9veO#rZSv<&+(b;J>#tT_BF%8Im`3ycfm{2);t?O=W{t8WNMokf%OA90cl-{R2 zs(|H&+2@(S@SU*_24Y5$(U%5E^Voh?ZM*;UkpwWUw~C%(G2Mpt|0}erYgNl-*ZXI{ ze(eLBxka_)hl36*eFxtWa5-&`Iw_qtz1{6@3Ey6z%;+Rb49R`}_)In2m{Fs8~kB`Eo<8_298Y}2Y3YGL>S zVbv}B%3)=HlNSfGYlV6pLQ9?z!D!UdR;Mz?cx)(`cjtYgN|52U*HGg0n@{BQu9Z_IRP4{C&zlqHE$f5_RP zkdyN`!o7A$u+fr;L>8b~(!B8OJP1eTrR?Sv3++2WJ^Y*0cEPDkfc7yq?rKD2@FBEZ z64U}Ogh13kMlx!9vlXV|P_(n7KsEL^sQZGR0LrL7I_?_ZUh?5G{=|e_;ax)qR9C%5 zm)TmQO0Dm^hh^)%;pPAq^>e3bZxc^Oog;~OqpQBAusTu&<)RXcHzLbpK* z-Vgb|L<|BoBm>J@US22Naog*VoQ1Xf2G^ff3;F{8?bLn@;C!2QXD%1XftZBInfrms zkX|a;xam7~=jl|rekry|5+0ngXP{<7EZoF=#wDgR;&<1Vi1pj|59eX$p%=@B?(F-h zd;@5;eJ4@FIN-ycBxx6#MrDb5)za>#v`cO>$k^r_M5}S`2X%U+)K;Y0om>ddGZvOI zsKF%_x~B$K?9<^`bd)g-TNZs}d)E40c0}%W{EnrKm42>B=9qYHz?kq8`nvwbs37P3 z%HGc2aC6mf7f}Ip6t}!*@f$1iXHiNf^ZJ`*O>vGp^oPMUs!>#;0m%DjO`aVfd?yC& zZ<6o6BJ0Au0}*q8$-05`d%e{igO+NOblhcMcg!TK_!h4rmn|t=sTIj))1OU?Ml8Mj zpOX7#1BcY0I9yKOflB_)Mf6Vxs&ci*E>9YTI8gY}c55jj3*$Q~Q`x?~o=aqL<;~N-C1W$sthlt}Qy|dU#*D zg}OLN+Th_E!GU>7j*R63v;gIN)UWx?*2FS+hFfkdwXrf}z)F>W;$IBfjUI>Vxplrj z7gbAPgSZ>=^pqCM<+XtQ(MOk0pFZ&m3|3R8AUP^y2?T3e4-?8VH)MU$>TsybagyMx ztJMR;9;f5!w#q%!JTd5G%Pz_HrvI>%0y+VppoFIASJ85nsUAI0h+b--ssuGLN~K=H zBRtq4yeSYfj*LvYOwNiic!xTUE@rMrCtEvpsTmwcqGvo`aJY8YD<*Gl=UPqb5%y)f zR>$)9u5G>JiR9HFgnmAyel()-U|u=#23Spv8*5pn-;Yj?FVu^MGV7q7i;Z-+3>kQO zdb(4+-bj#7%?)|{Wco>a4Vti{-T!M?W0nyf`Nck6#1)!~-SWBJzsaYwv$O3wwNX7u zeP3I%S1AV?LSlBw^_er7Ysp#rtbI>t9Qi81@GUIbZzzES$}9QCBu+p48ok zVDP983l+i%2mgw7R!peT^DOPQCG6*-CAm*Pj$lSg_q;_tD!2* zziGnbX36W||lc1#*ai0&yMreR3} zo>gkTZlf*;A~kx1zq=UbRH^`cGBh5LfY}B4zPtCe)CPLQ0K?S;5$yE6ndAi@!|~k32?YY zDfz}+u1`IR%R1w5e6{yW#j8mD<}pz}=OZh3cw=?G!f@PxNRB#-0ll?GjhYxK0h-l4 z8kva0EJZAzi8F$UykgJ>&Ldp5>qN||xxr|CYB4XkV=qV0Q_&;d{#`O2N(PODY}aRl zpB?XC6kjv3Xd;3ZXKc1o2KR}Lh+&zbM_QZPpy{%PF|+`!n_%|BWON?FQ_i<)ZQ_wu zzIr3`zTe*CdTZB5x&e$_#IStt7X=QEcsN#gRe7U z?M6DZgI7h+;?jUDR=rjzAsuzhZb|!)96|OMM`g?`NpaICdP6>k^xLKN$2)4BNx^0jA+bp*4e}jVBEMGfq z?}%yr6$=aIgPi^83G$rcqJ6rcq*;fa^!1UI`)E0)cbV9vW{{XxXjIMHw%T+H0&3zm zjTH66p1Fscvjy8~i`?Vwf=3-4Z8g$KRNKb#0vX9rNv>St^M#e!O7!qh=k42%f*J7* z1{7ZUI3M_SL|48TPiP7{J_gS&%pV!frCQ4`rCz>*sV;yL;^6>>J={l_cwXHKSa2rwDc5sR1i%=euNiDQGJ^Y6v%1zFFIQUH6+r!b0;_ zoUvL`sY4`c}=fU$GO27O9sS%>OP)u6w z7e@J@yRSze4A`I&+IAcnY!mSYf9Umi19^)GckObhHi!j?T!@mMi+eb@zRIA|X0~$~ z1xJyrgV01~jJ>B&Glle(w^yec^b+ptO!S^IuxWkAS88fUtLwl7YBleGTZb17Ipcn%q;um?77X zOS08rercgLC~vhsyk51#`0MXK%~23t6Wh{jtRha(`7EYnZT1jIT zpi3x3UA+BPbSf=|_h^B~E>rQ80)0~j3*}=tRyLTbe&32Sr!XNl#K_LDP5U{pt4H@D364IazCh1gp;s2zA;O5?tzn8>Q zBlJ=Ox?n~-G|p0W`(AC2ZIzjyxzl0?zKOokDdIz{-~IQ7ShwXICbH(N6LDZQ)>`9a zj{6i`e61UJQGMCyI_AtY*_xa9Ja7KQ;&M_+ZF~(xA<|v9WH^=1rBIxSu@$fYO2&>7 z09OXbl&c6*d+QlbGB$d=-D6A{bQ{2)Mxk}*$@1_q8^J`B=zx4jQz%mVQi(zi4Bnt; zhCvnZ`SWVTDfg<42?wcGL%k$zTKr(ZpvA0(ic4lXTmHvoXI+8^k|X5r_~szBugi;m>+GR;i~=?GZz3i!@i*F zNMmc|M2{2pl^+=wZhHvrKM{1Yhay?!5r!q8gB{ROAY?<>Z~Xu6kDPm84tz=1^>?5% z8R)_vq+(jN9C+M^Bq9@X#XvX=(J%<2_om-XJ56U)4h*3vMDeMRxbfhvN!}r`r zrt1$6mpLvQ>sGSyJka+&f8YGK5;sXMo&wEuAI1)rYXb|*HidVW)JXL~Bth8XDbd!H ziJqeTN?fVlZ9e-B=VDbt^fb(Lc7PUdBIyLxd1a6zcSKOQMk0C+Q>Y z$psdrPdtfs9m^`mZWFJ83VH&Un9Z1fqA&~vO!0en-0CQ)5cDmSAw1Pv9Ns@nTZl56 z#<(%WOT7xn>;;kGl^MrB^ROs)q(0{`vy!Qk{!t*5W_%vThK^Zk4&_B_M);H1j&5B4 zjNyOJ%7XRvUBf^Y?fZyjmft2n*r`3O4H-L_C8Ax2#Z2u^0@~8OezF?gT`g-7_#2E2 z>3j7p!r{wWe(|q@(F0)q6dL}*y$2T@ei^P1LWq0@_e8wk5nibQ!s$6eK4p+~O=q&{ zjPcf=oJfmRn+$@(|ID&Jy>V&iy!++8r9m)&5l9&)xANDiCwAv+hr>0=e>PuATQ7)J zV`CO()Fg9~Cu^9INBnC&ZT~aHajAi6s>#9OHBn6Xn*W6W0HO97LRK4G+?7;`F=4RO}5w`)i;WKB{78 zHP)no>l;%w0LJgc99H7PXux$8)~h0RMr-cTT$J2sx_Q3;UrXm5Pu2g&aUmmQ6(M_X zZn%|Q_KcE!5wgn8c4d?7z4uHu8TV#Jm&&*#vaTy5>zdcN_?_GL=fC@K#y#(IKKFb+ z@AvEdd~K&sKEg6Mv!~dgs7iMV+ymI1V}8ze`lCL5n#P&=C(kMKfI}2Q;n-PDSwrZS ze0Tdf3hNeXHCUsU|B$yHcKHs5`#a*f6izfNnwU|c(W7A4$yG50Di2)FxvqQD{kZZ{ic+&f~mnuk=kMO`Rc*eXAVfX&J zu}Gy#NuBI2AcZh4j@V!^3!_K>{c)a+H&yTDjA@rP_~*UuMcYRDLtI#ufVuk5Ko*a) zZ%BI`pmpfCh%gR)KY1_lgRC2hdJ8Y8$fVIMey>@wK%mF+9~vX4Dw6_TVB%@^&){99 zC(c7(1W)Avlnq2|hh8>wwk7{<8iz@#C?xfWGyez2$coF-@gMm9pDp~Yr74}tve>hs zYj^?0DzgZ6Kr6Cc(;Jlj6R&z`>-(V87Y-5gp7+N~F$4)79bt!UQ>r!x@z+UATdfZ0 zF)YD=RlSW^|43+Z+OTY`Y@(375c=-BWy#g@oP42)s7=ay$74U+}!H( z9(bt%)Z+e1S$&fKz!%v9-{7aYLWA*VPF3bj?|d{6If`j5dHxe`PF0;`FQ_)!fzl=N zB#hEK59D!+88pu)$YcbhNOaUlf9v8_FKEzI%cQ4#-9R!u!_s#*<+kv14NcA1arYs- z^L*d6DH>t> zPNFC1mrr!lGgH$Cq5K<>deyQaUM!7>>~VqAr|)zbFEe>~KPZ{$hnSlsTtps9!GyRk z7y)u=9_Q3r*&gPK+p^WIDk|scUX`Z9%dDgd!mmQ|(w1x&>!tgX4uvUG(m?k&(0Xol zxzn8n&XHudmroE>`Ug9XVo{U$lADP~t!lH2ZGz zA1wg!PyffrLZXiD;31WCB6?nUk=g{sw1)nL!bUshF%wfwW&}?uD?cC0N69a^ca+Bf zLZo>Sz-ag&gn&M!CZY7VR7BNP?KUueeqL<=bZ;RSV(|HNdNFM`XiYYyFjE{4WKRQ1 z3P1}^S!a#e&suZt(8;$j>}86T0qn-Murg} z6=gS+z-kCFbp3_I-HXVPDBv(U_+YnYDQka_@m(lzZ~03Kvxd%BGJQpXPOyeps+7gkx8Z9Ng8lI|?h&dkat zHGjdIV$^6x(j}JbdZ~$ir7?_M&7wrxqEiYo#C&&Q=B<615PwY)Qc`<>a9_ief?YiQ zxS0Gg_tS6_??_okxoO+0IW9a5-fKvYx36geBwCqVOxpnz;r|qL?Iw42KAZvC3FY>` za%-h&XNsi9Wr}I(8z;V+?=`n42S{d8v_IHb2NE52Om98$ zcy^G~u6?c6U^jqAk{9_)dEsfC@qxziH+=y6SZmb{Y1{oJ29(M?mruxp1=BLpwE*6Q z+(D{CS#`ChG;-_PD<@!ycU#-|tL5+Al%{=9@HORH$DH~6dC$L-f~SL4(8o|rIQ!SI z>lAj|IjuFJ3a7FB_}cjAoXI+6})lOdYge$4~4LE&;tH2%+EH z^15zJAKw)2NlWXd1yz=pBh+`UVp1#|)GLW6h_u4+$mufsG6WG;k)!_eWlbKCJ!t)j zuiFCB3-9G^R5V-0?@`1-yTgFzwMhqer9Ky!6X=_$~kXB^bz|sL;`lgW8z{Yyhxuo&d z8Hr+*sd}qL{F!aqt;1foa4uh=>Nenp5*$- zv*LZ?VU8Rnv1nz{1MX-k2m6S|RiHgJFAX|+H6gAmx z*}15w=rob-@IKZ+9Faz5G2NizwH>BxCasL%;NaQFrR*j3ew|NpzzC}2noM{>Tg3>W z)78`a+2D~Z5YK#%^`8MtI}$aelHG3tbbe;>kK5TM#Ma2*J!K@+QB%(^f?~|)=(T|d z^`;jsbh*sIHTL$WES|siHoJgX3H}vZNLo3W?`s)|f46ZkzF7YILv|a9e?5}{lY9zr z;|g#n8h#OWkl2lOU)vJ=kv#fFL+83A4Web)d_2GK6cy^ZBl(sQ|_G7$|u*{l|Mi^C7<^V}ptE`#LbiW(Z+XU*TU)?K$p6oZYX zi~^zt07q&2y^=40fka8yn^ih4!Ni|>v1yA49}$!q!6#cmvf*&_&bxPUD}ARFonMgW z6`olNRSrpI#+xVsC7;M!w{BIDmtD650I30V3Rpfo3n!qYsVa3$$fR%T4h|PHS9u*W; z9}IN3Aq#QOM(+R*mw^6{o{N>#!e=Rdo7+pM`**L$?)N0eUyr=LkMkNGLG?!;S;Wpz z)(>v*8{8)l%QFm_)XwqBR@zvFU7l?M0x??8H|-F2zmd{J1)=Vv(Gcx|%Q@sf$%ewk zhW-dJwyQ`X4)zX$h!^!Wh^}1yVvA)rO*LrizXq} z>80uk!_A`#ANbScPsYLnR?x2il;_$DkNGsMo+c0mGU{VO7<__?=H&;gLk~;YH%^PZ z{7ukm;cQO;-+?sawCKRcW}!pxnOLWZy!*?XI-e|zRt-EIXMI7mUDMuT(!GKi9;qkp z+9C=^HI;91P8wSU8d;f)7>i7^^;(eF-`k%4YEj(+p-K~5O@um<9hPyAWfQ#7iXEqO z{3@|NKuRzkz{Pa#(X+wUut`HaKLuEhZ)Uz``W*Lc$lqUDMryd2`lhD8seik%1WWN7 zAv?bQw5|iQ>NPTsCkmt(K+CYcW>|1>?hsyhDUp-ZPZd@D+!3rKT*s?+z9~tskv7^N zvBg?P{a*UVe^ zQ{&p`vDOD-=g!PT`Qt2T0lL-L3OO2zSuL-9!KBwv`N6g;|7L3Vz8bQ!AYV36??=G{ zVIcF8iAT{yvqJ?e^DSrHJxbX?y|Kk3v5VoP)Fg`L+Yomo$?JS^VNCHLdMI(TIfnSF z*U{|ML)p=WpFK+J1c#-iWI}oQXt0^4V)w=byK!)e3PXxbyd4j>PeJ=38cSMb$Ic^44QNq2Pmn` z{ZGp?=O2!5sz9Ni0exiQSlbnv{mSIGtcupWI=wCQZT(N@>=3Nmn+mp1Gi2HY4DNl$ z+rQIQ;M#c=DkWY{jq+~x8OW{A4xeg&H|Q~X9(X)tej}G21q#1k{Wfj-)kjD0jieQ~ z%R#qcB5HXWFA*R#SoOn}Wbu~NvXE$UY>zcp*=IuVD$u1Te zn&Im5*f!i}(}2)~S2@t+6Ey$u2#fFvxyp0CYBoKnWHTFsmO7QxJV!BwtFw$<{+Jrn zzt-B?is;&fe~?Y}*_o?G54Dz}Ketr3iG~D0%i<(-?ZlEyHA)*+Fa_~eg zN1EyuF(l8{Wm@#MWZwUNeazk5%*=a;gt*gt!|>vWv84Yf+{5k?RzxWLVBdw(ju~O1 znDDrgda!K#(TwouU4pLUgu?rEBiZZ0#oMKK8eoZ%mmO_?yg&l6vs%ve=w1s>I-wC1 zHTB5(`9h{H3wUGA@E!rsZg$*U7ldDq(AO_IY%e!CPl_BFcvn4gbLfPh8a#VC=1>lG>QzhB7n1n-_`#+sH zVUk2r?^@V8Y}WQqDl?UYD(nr=gJk6R6i+Uxy~&wugB^=Rzl(N8Y^@+tABy)i@y`xe zC`lz8cyg;v#~Lb|PW0Q+P5ZrT(`$jlEh#+2jLe2hySuHZSrA{p;Z?ehM3u#(ksigl z*E9|%{%G$5?n!?;h-=Sbo*VCEELsZd>gpsy4f&Z|UbcT(XbuRgTYaTSgH{V;q$NH> z=m$?YQgDS}`@4~`wjucym+IVUGnCpX3~AFa|ARg`@~Uup4M2%21&fhli2WfQ5!+I2 zI)R)h4^VDRpz7e229s=su6KX7#;XVOt}|V}<;FX3WkLMsarhr87WE=9H^q9%U?J){R zXV(dvw}9wLz33^yI~rTuC~lo;+vXu*KHH%^Tc=MJmqj={SV`3A2heOG$wX=v*bXY;dq=8WJ1&u(i=W`U3eDUUX*46M<22Z$ zq1Ze7*X1A@Q)baA3G`0@9MgsfCT$x)yni9WLiOLj+v!o;P3Ne5ljn4;1)>Lo;U-)7 zacq_Zr$#g-yHR z-{3cpt~d1Jet=H&7A-d4WJKIw5P(B1*e;FMb+owJWJ?r2x+_0ZxwK3+xq zkr|0TUhphqr>~kyagx$m1w>9u5-c?FYg~KWWe+#9s@RiF@JSdOF% zAdlmoMb#j;{zs|%< zF#9#F-|Gtj(o#TBtUJDs20}sCf2r~qu>2b7!=Kda8sx{p0XsGoaAR*+*>HIAFFp~7 z`(v}}JO;a4u<84c@cF0htoLi~;q0RPVdOmTNV^Ht^YD8cql^Xkld9~EcL!4J%@woF z{>`mt$VQ@}J&`}(#?1TIlT!TW)u=3Xs3&HL%*Xa?S0!iw-+c8UPHRt*EtXdDOJ6=Ks!jE~bC;w_qM&tl+B z33N1>@O&GlviTBj)#ziwF#x3aqF@vCMwy8Wi1@CiF)kC}hCC+A`I8{I|`; zO;W#k9Hwg~5ST{6u?iW%BJ}$ADZ1zFc2cve&)}>}`l(ojoQ`}N!QiLTzBjnaFJ9h> z({N2?a=Sy(9Sj@n3slU8W7$sTLkmsdd1QQl%N0(zG5t519`WCUhK%os!d#QL@K25y zADW~djs>UWUmSG-7s9Dil1ym5CjUo)u6U4zwgFT^d+!+P5A9Bk#5+c^V7!#1F88_U zGW|l7c^)*Ltma4>5T5LYPXCBAq4nzzq}^acr?0`=E-z5Ph+36-;SrW8Te3%HK_5E; zvk}2T`)x}eKYk1Xfl4wsQk2ABbf|~v((n~v7ATh%AwaOdy;fN!RIF54&eHIKn6|6$ zqocv^Q`Xnls}8Z)5e%lm41|ct_Z43txDq*9(srV=*lr9BC|}FsY&qo$BV+`a0RYEkG^r?c)=*s|@6ZCMPGWicH9{ zT|>DBxsBDs_?s8lVD}Qm`$?l`fmwVjme!jzW}eiZcf+7EFO@$eeK9KKKv zBLW*w{hqY6Tky&c)V-k6-P?BrZ7#_~U%hyJ=L#MvnuJ&eu+3Sr4MEnYTny|czAS?j zEDQT_i{j`a$09tN)&F4C68*z1OQl136TlrmC*shINe_Iv>Y@Iz)iR*-JW13>5_qX^U4c4J)X=xEb*B#0@ z#(=J(kq)o5!^~oW5AZV^?q(IBSk&FKyVKp);ImLn0(e|exy=(FFIcg|8!q_|(2>Rp zG2l6i>vQN3lH}pJ&7s{8&@a=IzP?AiKY-Q`Z7B4TmgiphB7DaK-v&}{teq6d6Y z6^mv9cA;<9+<(DE9JfKbu-|OMhdkp(#NYZkoUfC?zTkcBO1@$5WE<{80L7Zb+)^;J z0Diq-Svm!g;2<8XMhrtG7zR&R1vBG7BFpK2uxM)VZ6+C32r&5V)w>cHW!_T_iLcDe z&wuoK(e<}}k}uT}LdfYMoPK46Z<+E-$R4Bid-6`|6E{jEzPOsWz` zWCE_Yl*2?fZ!}{U?pF%Qvi&;2#iS)@Oe2*=viH7XyXXhw98rylE7LBF!aEz*ouJpV zbzqpP$OGurIE`)sIHezgS0$>xB@9##c{73NPLz(ua)O8fZ}Hw4rX~x)u1r$$dK#oD7+ZA&g;cd$QGf z-6whH;`nJOxK3lK*AMxq;|oisl}}lFZ9dkw6BBh*!E|E(`$Vb5k9+0|k=y8II+LD3aMCC8jV7?V`2$#&wZam)_`BOjK6^Zm7==>YgjIQ@t{N*0>UT zJcC5i7pSObY%g1Nc&h3ZDzN6OTr1!l2J-4oV78`~`M^2@Cnm)n_xRq+mv5zh^~I9z z-6~>i6pDD0_(z!27t0Q5Xj`sHRxMMI8 z60z%TbKrnRF9dE!e!{_^FdJNhE5vksB{0;yZ2!|fZkiz#aoBejm$u_)e}c+H$PYM? zPqGaU$T!Rl%F!?jka+SQmI)SFkI89ky(@3>ELh3ek-u|~HX(sa&cu(0*jBhhwWN`o zF#c=Ap4!WKk*_1aOjbx=_4D)WzYX@`yedPObL`0oF$lho*XNO0(vP-c*fB;A5zp7p z>cR>rAtBG}*puySGPA7rHv~0V7IqhhTYQq|F82AutroryJVP>*gCD8!SR~Gw6yxk& z3m^KLT^$YL+;qY^u$@GGwv2+ozf4b$86(j9Gal?2E|fkt=TGhg_eRVCh3BQ30h4y- z)IWE$U5)1}qMp#{284H8&tcv&mdOeZxb;Up0oJ}NeUTIs3kz%z{=}@TQzZg3!A(_8 zBn}pY818(?$1G++>`bx^my{{L5%TQwH!l|rDaY5B+_m6nJ~^k}zcuvPV+5-=;+CYz z&ZwfWo$jxzA={5Hld64C5(T1`sFOOv-Jds@j&Ft>GqAjQ%D*W=+dHiKH+)Z32h0WQ z{oWcp2Ydf&c{1cHa!PKGy==HO9rfMI?&>E*c`3<)B3F&Y>JBYVsANW;DCfD@vjXvt z43f(SYgcNV0=@wt+sGRkCn_N_*o8B8-2^J?Fq^u*h4XE0&K&l7O6!XOZZE@#>lUKs z=2wTDXOX{&2Z*e=TII7@UPrIicZVp=%Fd?W&&@S|Mi19o8gzK6T&;LkwM0eWQE?|V zy}!*v$&OgEsxs-$AY;<*JhD|V`M}AJkBdJ#yMjo!6 zSJza+%ZEJ5xu}Y-!iy|v*qDt@gq?KKgQ z`m;pEsC{$ivf+6RybV>q%Dql!=_BzvdEQkHXYcd6vxQAnLr>~FmtrEM6)x~frXtkc zry@n1J~JbS{BakHH1UJ6MRD%_{t3nV0;1cNp!<%U$EBqeSXMc!fw&0PZk)P@`cVIb zRg0?EN9Vc?$i1iOIXMhG2DyNXK@~=s!9cKAC2&sei7$G3GrL#Pp0g7B znm6Y{^le+_SZm*3X?mqc{9GmAI2X8j^zBD?kUJdX1q(nkKliW|04-Gu)iDg2R`5-} ZVmDn@5}d9H!Vv&}nyPv#b&ssW{s%X*Ad&z8 From bd5b22a0bed797a940e968c5ef5aad18f435c465 Mon Sep 17 00:00:00 2001 From: Max Stein Date: Thu, 19 Nov 2020 17:08:12 -0800 Subject: [PATCH 16/75] Updating MDM section --- .../mdm/images/unifiedenrollment-rs1-39.png | Bin 46188 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/client-management/mdm/images/unifiedenrollment-rs1-39.png diff --git a/windows/client-management/mdm/images/unifiedenrollment-rs1-39.png b/windows/client-management/mdm/images/unifiedenrollment-rs1-39.png deleted file mode 100644 index a1ca65c3f4f503528f2378a3e28965da39ffa164..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 46188 zcmXtgbv)hQF(*8?#}6P#dJ4g!}QeEOy`)3YkInS7+2rvVY>Mp@6Yf1 z2Ojs_*L~e{&g;apj&L;W$DLDPhPxWXBJ5PtNLG&w4U1=cQUH?(q`K|xT8{a>jI)a>q3N;eyODB9~& zod2qD_l~BcrJJXj3lz=B>GtmOXaC*Y#?{=;3|#7hR`;_e78F0ZE7mo0ajDc0N9L~ItXzM5+G9bNHG1hdON-Cj+W z^;Bu}+`XRLJI``$k$wB!H0a|qNKczH#11JFPjhg1$jHhnJ;5VPj#F(pB%w|~Bj2xw z{lOktWj-c6wwD`N#H1LXuf9loleu|z9)aSQAEDoGC>Wri)fU+AK@CI)5Ses)r9^Q( zNRTb{eJ^}IkwiEdYte(cjlG3bKL2uYqXOd-jb$0A8X5Dz#KDA&Cf^M zq*Wcw7~((e-HKsjWHeiD4@pc+RMXP>RA|Gf`V$NP`uPa$OwH?=p;g|%!lTVjHcg@2 zAJ0)6&nAWhECsVI+za0u(9xy!DBpAv$*%0hmF&7r&nY+e%|3?;pQ@K0;F%=OWW}a0 zQX+}0=r}!mu}iXY&Ug^^_)i{e?Cllh<$dh#?k;y9to=NkEtZ|ctgE4;6WW6c*Du(2 zjO^rVw|FA+u0HQ&c2{gldASAEdSQ$mdA=Pvab13cK71%yFO)_;?-O_CSsxstNP3Ix zYTZd#Rc2ZD^A1wsCF-wleBNZS$<>^q@zkWjSH#GuWL$PaW^euGCO{=ybSNC3{>h_{ zHX|ZB*d$UsVq)3RqPGJg zRp>QpNX$4#@pwfMdQLM%B$CB;UH|vM%0)ZhXQr^a93@|~p*i1L(xNz(Wu2O8T)gQc z8NO=eTUoIE916$gUZyi@;BknCZ>(?JM&zQ6B9V$lMr7ZFbXe zN#5#lb=8DMru&stgs1y$&Y|}?@bXPHA`vmC4HjGb7QXX6zHH&g^@Qqt_TlV&RatKC z1qx!5n{fZ<4Ye;4R-F%(Vq~RIvCI(?{E)S?eH2943wHpnfnYB9Je>8bG8KwZP1sFeau%x<@l4%9UMczY7k!Ch$ipl- z0etT^sOGSj$x664eOdENVdR45{_Tg9M`U6F8TTJ!n-a^6U&%|?z~S+}d(Fw9YHmic z+5}|H3U+$DM&5jm^mXX#g^`JU3cW{aMYffsk#0>>%I_Ama4HN2oZ#iGbv@OrR>C&b zBJ_O034cQ}?FAg7L(h)JM#9hIMTAm!D?2Y2l;``#=^AhGCW>sW;3xTld*KMN`C}Cw zT|XphLaN8x4jDtHNf1IU8{@R}Gbn$xEc|hkF+1O!)BU8Rq`U__&OcuKn@vNx1bre7g~r_TmAyJ^9PUzIwA$KQH+Og1 zD3ch30vCz@|c z`2rgd1x(bF(frSuIgCi>E_m=Ktl-}@3*=A4>-|4ZB;j}Q3~@R{YW;XVrnQMTL3ep+ z_+__6@fc73q&3|S-zG2p(oV3#M0nGUs>LWGcWK{?frTYMH#fMwU4lS5d{g(=Mbs7y zs?QM7zBO4!LQHJx<>jR{lP6VEQr# zI}?TlRjx#})1)-?QJX%T;hPi3Qt`D9sYL!REExOv`fhG*y&Fna`AG`~)zXf> zwny^1t`8T0j%{me)2ruve(ck%rK^jN`KZdCR9gLAOHgt4PdLlT-r`7EWs3p>fx_&l zmQwOVzRBYT_xl#?sUeY44>-@gqw$ z+tJ78AKR9SW#rG95prWPAh7bb+6`<>4ihIJzH`^B=jG>sxl zsElUDw(pn7TG8j(@2~G7h~kEe{&rVpl;0@zXiSP3Na+4c4wSuW!#X2!(UcC)-V?NwjEpRASXw<%U1IC-JU+4* z#a~sTpiUd}78lOK&A}mVWo4zKW6|VeWy@*N;Z+`zs;0`sOnK87j<6Bl=?~pc6nQ@2 z51;5+Pv3CljPohNsDl>4d#k_EPu^}GKn)h9D)iyx>Q}d+W}{Hid5@c8S@@h(37bNx$B%EWR1Tp^^YxvG0vGom zwYVBdB7{ago#qaW&6`(teOuvmdZ^oBDFkd(3nL}{0xr@T{wt~6n9pXSK=En_zH?1m zeN?pKsglgT-vR;s$q|*Gw#q+D{5%?q<^1|aJvuhFWSt+o&D3eo;=+#NU_Za_XbI|~ zQPeM{Z?vz)j==}bDBC@i8c>=Zmf{@JQYl>Ijtlp=p08oNxplLlt8VEu*Q8xTxhF$? zhi85WbsJ1seEEA5+4?wF z1IlFlz9g&Y>@bQCeFe$UPcN97@B5^%KNdDz^g8Qc<&eHnzZ>P4CYPqQ$&D2tzO_jn zZnH8FNv?R}GBlN|G_|W_F>xKsE;e5)cRU(K6EW1$HbON;Y&% zg80u-eLlS7A_Mr>M%=5aw&5~js$Iy=osU9U4k)iKORf>_mifN&pM3`;J=_cF0!Bi4 z+4z}zo8%34jpHTb4K~wWTO%h~D!L06`rrE+`X(kPQhQyK|5hXY9E?01J}(sEa|(0S z-^(rDC*krRhPjD#dIeC{-SG1T)VSTetrN4PTSR(YhnA#R>z9-tZCI?F&116;yd>P> zXu$jpX93F{neJpSt3{fn-QG9rH0z~D+S=v=Yq{A$>h7hbFVl7KM99C1UFgT>>ow+P z=V|UMO-N1fK*kzzv#svcj2V1 z2U6vuO5G9-2V75oTl|RY-hLE*%a(v!7ETh+N&dZam+Wij-jj7nHT)Rq}3kD7)x)f_%3bZSh0yseL1EuJix;>v&VLu3C{Bsn zB%d3}Jt?mFR#EHjYMpqj8@hl{79EzSirSR8hQ(1eaC-3Z2gNA+$4n!0Y-0G^2CKfHc_=SWIb=x33%+wIc5>jBkQQ$ z#@)49<>`a2O24@Kk8z@&kDZ~ls|VVb{wNvy*ofG^|G4Rpa5fpgo8sxSzUF-HUKM} zu5X+caF4MZ=Dx@E_bWVl^ysWBp|w}=PXUd*SM!3iO)yk{BQ%Ce7BjDt%gv|<&g%4; zM75#9T!!%isKLT1v9LxB-bQltxqOZhmxpGO(SY9wQ0!)RbU6D)g(7Wb^hx{YeL zew#etuyN4|zE4wnU|CHl{R$WJ-)~f`8S$gKIk#ue*4V$^n2I3G^O%?vZId;Ojbm)m zj*gGVrWg5`1bq_K7&?{t7CMLc=9LT#3+|gO+u1tXak85nwC|+PX4w?D}u?4Pb^{U0q%x#svCp?~WdsBkVQR)!Tk9 zp|$#LB@>5oTACznxEB`}FSR|U$S?kGZAcx6-d5j@uy?r*l~jv^Hc8rSrLN zv(}BfBO=q%((=2d37&?l@qe;MvgkK_k_|j#u(!9bV3j~3_AjsI{7^%KS={Nuf#gWz z`R=J519O840wSWrrTaJB-ke<0Okq0g_$`HxUkE8SoM&7yZ|QqZU{!sLYs3Wf>h`60 zn~wSw?PkA+tNLBx-?eDAmg~8Eyq<6%XL7}l#H0Zo`1={ADPuT{dD^gVZmT}8FyQHf z_51NOuln#>&-WJ5{FHbXta zCKK&kT3X7F*pMPNk0^i(jue;@hrZcad8@->^5#0n$4@{s>ta%~=~QHI^}@Dty{{-s zX{*c$@;J6fQrR6#HkP6Qfq>PuUhnvAH!e~^Fb+pdZmm3aXZ!ZDFGc3(=NVbYiW4p^ zQ1YSoJM>^7Hfc4UHK^a%%B;$qRzJj@L~|J8+R}6pEfSupeCH3(h5!A$|7UIO9kEQm zvGG-nxPIIw5UpBT$n*a;{A#GsZ2SR3E_w)s#X#O|BfiN+NZI-_$J696V2A}=^(_6Q zEn{2mCUyK%plkfj$@&Xa5vH!C*V%Ia((;#h#dg=udjCuJjNZ4?S66$c zk0!)6$s$dW4?5n+1XF)%e-$bd`uk?qXv;z-Or&p`%*s_W=8*9RJUR%sT(_vag&-^3%n($?Hp7&KsUsm`gyq88M3qBI8u-UjU@%%><9J*tKBe$?i&}!xb|I#xoAA1V|t@ zVG^Oubt!tAl9W1uppa0NeYz9BlBy~Wb}CkWaU56Ud*0~i=%Z6BtLID+5@1+dp6ul{ zG`y5nfAT1phlghrxv0oM++L#;5fNEjT)t#?s*h+zkRieLeNjZJs#?#^gCtDDTk3@m zc1M$@ium$|ntf%!0K!Sn`e7H{&)tRQbX{Zb5OK<-Qd4cs>WCE!ByW9v{V%o(S|FC@ ziDc56p`DR<=Mfbmh`uq zYEH&Ef@t{Qz=hXw0WucPcMu}+s(sn1yr{wV)FCZBJ%|Tp4X4f4v1%2y4G*ilefyS5 zj0ziOGdA~Ya4kChJlpCf>}2>vow-n$Joawp$u{A*G>sg49h8&`c0Y-yVMItg|6IR? zH;^s=CPd@EI&S_u?t@2-Y?HbxX-}5>vF``JxaM3r^le^9^v<(&!QU40zM$!eq3A&E ze@SM3myf~5GJIT}Rnn5mHT;E*!}V&tW{aTJ`UKe;Xpdf}y zKf((#e&M-Or>y(9EjY74=-K##%~AX%d9!yk!D4ypGh{L|o6+_ySx-A}*cVzt{gYsG z{HG_3c?ce73-9b!pBpkyB^^GPSCm$P}=pY%H0J+hx77) zLeqPb&)EW}Ub`;dz(a)Gk(M@6>_s?!!@rJS<+pqoWqas7QhNEI0=fBHHdZe)J;}_6 zl~bEj? zE)mk+QS=>?tfz`3_QNcKYzBP_PS@2R1EUAel$~w`p=2AL^~|K$KJ4FWrYU$FukJojB#qc!ptM^26(@%&t62xz1(ij{2%jkvLaY}A?T9HS>f7PR!{nK39_ zj1a1HcW+_N{Q-h2ffLJ;77Ia=`p!Z};-Y--7{S2=Sk)K>w)q>_E}gfCEsOClCHzG+CF1e*8#2MSartG-p5flfrVI5e&xv-du$wQ}w;{`5w~3eXC%-gxg#c&?!EVkRl`Yei*W5cuaEx z$HGKhlZXGJdWju&2cK8R_Qd+DLe1^w5lI5BYfh65WnRl6M4$olqtxh(@_+vP>EvC# zxLOw-nfhkny}6p~1PL>6XbBmZHXg2PIb?-Eupz=fXDX^WbEe$MlqZ05gZAglRgI9a z$C(53qZ-2}8pYy>h@IbOO`-(SZ>HTPa&U2HIvD3+bYQ@_q{Q!D{aRW2P3K)Oo#SH} zlpkFFHEe`Ro(T?9J&#~tVV{=*O*Ib{Oszem)~Yzi-nkT2@j82eAn!)Bd(}ul42r%V z*kgJM$D;J)#($H&$y@Ol7^?e{o<6V`xUyGLSw>$+ncQEhpruVqfKg?7gRWC)tW1e( z+A~b{0R3J?^V-{%f4BZYCN~Gkz#;^^4@cw-H=WmhWhv+5-}$;^fA`B#t>~-;^0krd zk@9$b0QcdRLodM=3+_-gk8L%S)|I4d7;Z)ksXBfI;o(Hm@WMB4W*M`qU z)QuvxucMCsipLX3h=A#S9H_y+PCiWT{a}VWGWUEh&#UbtF}2l(%@yMkrF_ZbR15vJ z!Bp-)Ykv-gFBkj%{o`Q$#tJHn{(ZR=%MTS8_%Wg%!$Nv((<*CizlUNy=P?DaUUwU| z*$xg5o<6ug=Y~@Lv%0#!6L`amBYcLo=fCG$Qc|&Ozvo5Dx9G;5?SEEncRuiRSz-^-p~B`kdYD?xbw zkpArVVn7tp?GY8l%~F^;K}ftlt>5yYi7CLN+l~!cs(~jHbB8g$#i^Pd$*mVq;BB1u zsRp!nWc#O#Tu-cfZB45>AN-PEIR7am;Bw6~cNo|OTPa>(qkD#K! zTb|Q-UkU&Yny&2~*Vob=*K%+~I!)#;ba^tYzcv)UM8fs`H{Uxn?aSOOj46rp~YHOcg#$Jom0n{F9#^HMqZv#RI|H}fL*a1v1=AMZ_@V->#9sl)P z%F2p9$n=AxEH=<-f`NCysFGGXHa9*v5^%#E!v`sLs}*$ z_wAm};`qgjF9y(b^*HTeTd>9+5SoY|4#~tf6R@9AKCE8sSDS|QUig@QKKW>3`s0#4 zk?mHtALfVmWg&$x?WMN%)36TV>qS-9k?Yg%JGJ&rs2EQ*L&GS0WKC`D*y!lb7&0NR zKY?QHwnD}od#BXQj>c^Ak$SbbnX7^?kX7mg5C8NY(M#*}_Vu-8ulH1C{+3{V`V<0Q zn(ehT&-vaq-}UE+|C+1cb(x85JPqfq7G;VA-3rryf)qWH9s>_CgA*?mh-&3>@!*RQ zh3Q{Be#)sF?P7HMDC_JVY~iDM^b-H0 zlC({J?1l>0(@am-X)@0$yH&2Ka$`w-eUguoA9-HCcHa8KxHgp8!;Cau9$~*qMV#<9 zG&WLGAEkxO($=z+8+|Smmjb-s zX#_hWOjTWYPsGcWXoaNw@6QX9H*J5B zqa9Xpgkljoz2eA;xHxZN#_bxGXR$pUV*WST3`{KT9(G$Nll$yqH$-;>C7I%!Yw>KB z@Au7t2j;}mYO={1&^V4xjt|loZ$eL7_pZT`7KU>@6y|lFly-zn^-Jo=D+m5GAM(|_B+QJj)@8kq)r_W9dg9obv z=Uw=%lmN{GH<!nR1*?{A1z<_eCZfgp4T!-o>y&>j&BZX9EO}nAn&uOH22H+bC_P%L~9fClm5i zQ`7n|vW+?mM``J3X&CDaSD|{IY@59=wPj#rTL%39;_`wqRl9vlQDs?Oac=jOpFWBaDT5_UL82g$T{r&wv*3xVln3y8! z$ABWZ?8N`#rQ_-DJP#k=eYRwO6(d~@37G$b3y-me^;c0&LJ>Oc8D+QllVYUEDRp65 zf{~W{U7GD`J%<}XGHTbwHv$#B#p3>Zv!}C#|Xd_<_GXvg$*6genau70F zKOCDHlhJh5q{%ED`!y$p+LS??D%bD0KAlt5^&|os$JMca;Lw19N#VD=Xj6vX>Oj92 zJszVxSe4Vvg}gxfN!i$<L9%oj?E(w^Re)~b?M34;$6B0ppdHoF;YHzsW?Ic<>geX>}8?FYwU&`)V|j{AixK^ zO43Pk?q8NmE-Tm5()7v26G0wpGj~@76O8!smDYWV@1lTyJ+FJ<>!DF~g5021wic*X z*Ak2PE3I=S2k$?}do;3ls#(_>W3U)tJ2*mu5%QgtbSS~6z7*IMg5%%xT$(*ZHJ8`X z<@a$R#YK5H)dVAfII9CD581_Rff%I@^&dibc|t9c5kJ3mO*V zm}|sGLf*vJ9BN3>%HuuHdJs$!MQUQ5n5cT-Hl&zHLy`z_vO~Xik281a6tnq+9Q&v& z2Val=k@M~+fa*%3`!W`ATyNAY`JW8@k?7zq^$JqS3D*&5ptZ z2*5$&PMq-ym)*7MnZ&6?pcYJhN34Qfj5EK#l=Yp2yXKFFjDX_cXGuy%{<=B;3XO$B z8Ucm07^vsm;u=cutQG0~^=kR|D+n@W#Rm|nkkIl!AM&~8W%P7j#nI_%kwFaT>sBnU zpy?d$z|WDY1Hm#Ibqf-GII;B&;l;nc-nB$cIlB4usUI#eWOS_uFPPY`IqJzr6E_2j z?)o9>!6!`OmqFrt4(%Vq3bmx>qn<$t#!7a^6^TPtT5v@F@#-03Szcr+gQiJGJm|%1 zGJLFhJ=2C@r7PRsvUDua%GoazX|F*+tCMjD*<{Z<{_b;(=Ax|x}r%Z1tEA6~PfDXd=e#aWDDI8J1-D}85 zji${P9T!_NLF6eT0Rcuqv=hhR7_}@&^!(gAbwymVJU*c?wXm>gNQXIJB&2Ock`PTU z1l=qI^fUJ}R^uTOX*@TGP13>%4C7jb_6{D}tS zwBGor>1}Csf_$0;_s18H`CZpAmz`4d3##>gSTCoz0pxy>It>U-8*2Z%+qs6HF@>b0 zB-knNFhWucxRXm~w0ZbmyPox$5$M0N`^3o1jOq->-)K+?FcXb@!S>F}D1QQkYOywHnhvH)GzytzA}~vI^;+%P^V%Q@piI`b_U1h&WS=CL zT@Ofs3mn4IXMWTTQn6NR>}G>Z5fe2Lr3BBvUVJ>}$%^^B1_nWXQxil#;Lzx6FGl1G z_S~jiNbH)~-fr_JNi&r!{%|U0!}=Qq8hI*u`Y;#_##u&ABmZvmpnx+FD(m~WNF_7Z za$#dt%l?}^VDV~=`Me%>V9y4!_S82MFpV&AFkL~-cpVnxOjIc%%D=zs!a!3{R0Oyh zNVUQ+F&}b}8Umv0fG!J=H;w)Fr7s>|jPXP-WEu0?&E84(LE;~l%HG)dt}R-lzhR=0 zZ{I$2Svw+uv75w{_x?sGqe^5jA~8n#emV-;59Iq!Krlu`Vo(6J*|Hf)LfvT*<_X!! zu{PbT?k+!3$6vjv3j>V<$iXI^0+R@Oet^t5b3tOe&gH>XuK)zrjI z0x5tkX+B%+v-2LCLU`~n&@ZcC0H(oR8EQ%?2hvBEC%gBb9(_@n{9CGbi84ZuK`nJM zd(G|TGrmmHPD1OAh$^)Cbj(p`rlGG*VjH`-S5#9@(32(5njrp#)kn|D%Q_`4E-s~v zl>p<_09PatYnHmm3PZ*8Fuj8s-?!YY4>XDd$po=@wWdx-#Z8}h`WvFM%1eu@Hq~+W z3$_|W*B-xju(7;tyS7_sN`=F@lsaf|pG4WHfVoS!N(jViwZQLLO~Jwz(uE)e=)OG- z9 zZcTJD{bJq|GX_>4eSyjVnIN>!Pd3`_KL$%-xn3>0e)x|nor<^K!w=nrgJg3v_~yMo z0HdVIc(2$T&Y}sj*}(G`CTA*RGN<-7j!lM-b6MyYTB>0AH~assTvT;7<2*kA}hG zf2qQtV2xk6G9Y8th$xLxz*j9TNH>lps_aQWa?}o}W({8_xfUYE)G#qomG*uJ2#){d ziTc~O3U315j9&m)5>Z;3n3SaK$t}Z4JAa;v@VI#gA}0!#Nu!Hks|pTzriXAVcW1+W z0yn1;ahMiW=Ol8z0FQCDt2PxM<3VtF?-YF+PnLDzU^^br`GcRx7x6>!`br?C@n}0u z2gBf!O{%`p-Wo2MhWK-F)F~v@&O)Ec;%AKH=mPign>D|Z9jC#NVahH}x5)w?Yl*Cch94&Hb;Q4) z&sio?2FcU_dU_baA}<%O?DdZ!p37b6O@4Z6qPFl@iBvpKuz%xIH^+}O&LVf%k}!Tt zHlByh{QgCFC%*DbrWhZ;9Gpo0#8L(1jvkn&WZc*?%|{YVYe@)MMrblUE=ySfYY7`& zZd$VZrHrz(0&PAw^tuV4NTr9HJZuxCLp2=+RNsM(1z;@g7YCoEyoST@wKBaeM)0vm zR%iL>9?ks!S~E0PW@^D6PX^>M11Y>*WATM7*DqN^pp&BLC}WBJ!hDx6dZ-CBzsA-j@t4W4akyT zJb8HjFr`p{E*h$D&Z3P(RI%6&J~e=aKx0LAzg)Hdjv=!RgBs+uWQ%!w*15v3VgGC5{Q2ffakyP%@D;ian@Qi_{+V*a7MDc5w8C(x0WjlN_I=*9Lx~@i zmd2;2lUAFu4zwfez~U2-9hmq}A^wxpT%Y1W@dyG6_~Jir|0=;|a`w8`V-GfcZ+Rsi ztd5`C`zxoHU0>71o$jH!GfTSZRg%q^y1-5DzHam%E_>4v`W;kT-_883(#gb=bR{O{j3B9suYj4&8Mbi*ts8yx;ifq1IFRZcZd6mFqV5u|CT$N8V&SfY%>NTir_N&DA*p z;fowOjLMyWXhj|4_Ss3>{q>6(;N@fgq7YY4WNZ`#F2NRwVUD|C>;s0!Ma`G>-6-OTS!xHtHp|l;LTc-}v4PVGtlnzO>v|g|q56YQ-0`4_$ zIa1s)kR6F|%=7Vh?b&jzBG@Rnxw}h;`($(;scaxi3V?{+!uQmRj$?opDc(~Eus_hV!QSWwc!Zd^y>A8Tn#!=OCc9jL?631o)};x>f2@<%*WF}ceAl2;`|@KwVh zdYiYBpDLHZ4k=-xK$h#+>sou#z?kgX-tauu;+8s7Dqi%cdCP^njq#6II*zN z5F^&3DzDy`!kSCFK%A5yizBWN3o#c;DeOBTL!P(A2K*GiMf03@CL)iO9dsmoGHgzl z>zT(g=DITh0w#(&Cc*Z|zrSlg0*lCkmP=t_adG4|Y2~t2>)D-(I~O=|-BhzmYpFX@ zSpO|mx9Fg&&|iZk;mTIP=wN{3rK1;=GQp_;_1UpP>erY)FH+5>%Ma75eMbm#bU^p@ zx%3VBfboEcWdCgmnhA_1JT2`d*q;Gw(T6cIG6F8wIXDL*f5RC9AI*p>nBoXYVn-5q zqfz`IPBlJ{917Q@SJNhxR{ug1elqLS- zC4Ou;OSS8|igCa>6g}ueS!h|Bg0Y!#x7(O^Mp|LC$nI}o$3kV-0%T;{K&A(iu9@>( z#OGe_ij}@jzR*p#dnAVIk&r&j*~#f|?;x6d{3sTgwz~N{>ohtzRZqhK!oH`!iiH^w z5&?)11rzR|8l=ap*pZ=Z;T^!C(-z-WV1>tPNEO*O;({+uQGt^^c6lwx z{wVoQ0aN0=_n9&h?7b2w!0_8bB$)gaiDuXo-ae1Uc}Dv`6tZGDaHbWU<`$s|k7F_m z2WanElG_EW@3RsKhT|Yx%737c=$=Evzjrer-i_PI2>^Ko%s)6~?G8&Bj_;Ht%3pRy zfFVXndCXI&1S{FzZTk1W8-;JAm+dxvm$?)BqMnFTfi6o>%5@j4=sOvU%4NQ5gvFfQ zuhjmpZiK2whCnSq*i*~n0XjGL1O|kpXg#rUnP*djHbD}FQ0{V6qiPnws@z35^42O z9(#?EH}N!D+Cv*RU{-^?FarY`B{8PTd!YyDZ%&jf>QFXB>JvPSOe`xXic5a5-GK$I zRqTAP>1-u(&I=Vi7r1!65sHmX8PtPXE-?}5nzA?O+h3(&op6SLBwN=3Aux}}k<*c- zrFyWg(xkE{Ard^V`IOTLi7~?TTsL2m-*k5P9dDbg0=)-Bvh#P~ERjNcKN5U*>%$hs z4t)c_dqZ*qZvohII=m`SNO0NlODuutMR+Vy`22f?fq~)mr!4lnGfL)WEvGdnulXae z+N~WN0;;hz^6l^6zb`M%)M7XQ_xcy~m=h~u#P5dtLGV4;6x-^p-}UW3RQ6R0iaw^t z@DYecS$>n5e+-V5K9740maPe{xG$iuVL0M23qWbYVj*law?QpZ?ujqFF@z@})#vQsOFz zs!`%DO}C!E);08gm|WQm5y?M{K`y=l!L~r38&v>ER&Cj>4hx5X{r(&y1Q;&>3Ie_8 z-Tr-r2t|fWZEysdfQSG!vVSMW)JEExPlMCbX$EQDfA@Pfz<#`Unvk3xR`|Z$q%Lc9 zAQ@yF0nr0V2cFpOe@h%`rDhwC@bJpmjfM)b(tAe+=popueaGPRL!Ue^-k#2Be422$ z`c6^*OKpOX>@!w{pgg-~dQ|%rx0>-#Ol)W}OS@X@&d9#cPfZsqIoo=n%gF*T6|FQrjDO0QoSRJOD@dbCO{k3rVtfkYD>#T=|FaEXR z_NlF;YrPr))7c!i=k@5sLSFumOc5}0f) z_DFE{1LQ*|weF6MR*#4%PHfV7{GDr)6}@_{V3p+Z^#%>d&%Y>2i$G$rb#X+M;+E0f z-QBcfVnldoB=ExZE~T?8(m3|3FY_+dMVD+t+6H9t4i2w9-vvdW^xq|wi%a{rl`He! zGg0_#NJ7M%GYS-8F)>u%O6`2zNo8Znqp|+xOTeh_i(>V>w6?b?SoXR<0AtB3Z^9HQ z&+{Sx=#|eMgoNF*SqCC8Rc3VTOd0!od!MA07VNwqh*ttx>L63Jt}>}{!Oll1x$dj$ zt9fDWg0n*ZyhMJ-fPX;%ew7yUf1Z4Y-sZMKCzVyknoty6{8jie%<8;vBp|p4)wX@C zp{Lio;O~3Bd)gXlMhp(Zm-ouSKb7~!jp)}X$5RJrf#|}(07|ce(_?40OUNPcF&OhO zo2r}sV_?g=p8Yce=dsJCD*y<`IKW8Z^E57J(T8cOfFuJWZ!S(;Tj2&l=>~c*Lqs{{ z0N3^XYwNV`OL8v?^4Q0keEN+Ztj+$-HMMn5nL+BoQe(#_!`b&sC#GgdF2mosde>in zJmurTsBLHv1i_;qbv^Gm0Z{Zvy3djlP#eg@?<;~c?6>ri=n#F_%y+Z< z+S=MFh2gmjAPW7Y_3pnwfavdVrVu!g@hnLEr*@u}GHoS?5^3G?oe7vT9A;Ek}g3)LFq;s zL_$EiJETDrghO{ocQ<_N+;{xHcii!gdzCn6pS_=Ft+{@4J_;#vx$XrT1Meg zeWFMdC9^1eoBfabm{Zn=|JMI3;G#GL`UN%y)Ifm%LzPy zz41uz5qV2#ewVH~IvpL9%Wpq)FYJbJY$_t?$gyRz^yFTXzR6cWaHD^g_y;Z_REekc zl(ugZ%=yW~Dx_2%)KeD0So1YrJSOg4@GwK$+otPS=enI$Q$r$)NJ;JbO3M|vg7^32 zv5JcK+tTKTa#5j^ub%{kM4OjiCO4KsdODKcQo!VpUA{S=dwUY?;g0l6mHc% zaLW7@YD9L*c_LydEmnHcm_i@UP9nNnT(J2Df0m3?(5*H?Z*QKXorS zMnPp;>ZLQ3m;KSbuN4SG=<-6>0HK|I))~6asbRwS5DDl;_(}FFI62?LMe0K$V^=}*LKBDyV){3aiDwM13z?-n2|!B3{KP|EfRy*E+7}1W3h@f}%=#j zZrtI1S(b<;KXyg@PJ5sm^hP58U8gqehlS_9yxwsf-+F_PeME|>cUv_xi2Lb%f(Lh{ zm|qrArxVrD_)w>h9{R`R=}R_L=B1C`mC8J}#1jmpyE!oNX2POLY*;Tk;?p-D{rFBC zsQZ5_2QtQf2m+ z{s5?Uad9EBW}L_Xu*b>CJCMNqOlR%*ul^o}^R-}K);7w2oHbVyiCOh-!2_`XiV_yS znU?C3g_FG=wz23MRP88x!4!=!5Emg8z#k#R{;umag9v}1cf%Fi{QSHn^8~lzqzzw& zbQsM;j++SXWZzKP{y`|e`-mBBQ893{_)Kv!iGgI>`$q8#{D6BMf+ zt?U88!3*R4BLgMIGEm!|%(mim^>$xLjEGGG&LX8*{C2&lFi89bTW;`%q4yt|iRaFO z$@zL!giyOPu`cA-g5`3{3 z^V!EkvSFA^1fmBL#1K-eNir?rdg`3R36}JZ0Nso~j z(`bTMDI4Fv^`k{1SnXszTRhXr1l?a0sfIE4faDTNVQ;nKzCxUhAju_5+vdEF`RxZO zYg{l4%22RK+g2ZE?~juer3vt;OSNww!$+Q*OLcwCk>-I#`O~%aBD>mTUBL_0-VHB?y5o&EOVM1bBUMzpSo4wpYS#fd z0S_LP*U3lQ#w(PuhYNOs<^wtCkF&F0sA@hd`r6Rd)3?x5)Rd{#sf0<&9{}FPvbXJ= z052oBd)HklDTJKpSXe?A^I{>%0d7n1u`>6xl>d(S{)$A%>5_8FJt8KiUCY2jYPmOs z#9=EUfL&AILQBS_sqvD(tTW-FbeqUa_ktEIv2>|X3IpA8pxE>Z?lXh5^0NFL?&tQ; zbSYmXe_1>R^3>tYG1pBP#Xr1z_pV01-b86&aBzlq(^dJ~u_$`^*kZT!H{AZxKdGo! z|IzhQIf(As?=qiR;Qp}q!OxA_@ct;vtmrFwm%z{T_TVn2t_%xRHIx*t00zZGWJU_F z^%xWs<>u43w4=u28en)NCnxu?gQ7JywdyZ(4T<}U<;-a1`He<1SFTn5;t@xFY63hP_fBpThfRIc)zo(P7G*Q8j-}B2Hwb?jdy4h?N8*_bH%Fds$Kr+dBM5wN~Sc)5G|0bNP=KABg0DNk~!iR<~8>1hKT4W|Ft&z7=)s#J1 zcB+@)cKs?Q??C>&eFHe{}3zyrY6$v!`i``g2T z!NBwU!RAEe@@^+3BZDAHPkGmLs-mU)6W3{bMqgB{tjy{=f6^iwX;Z4J`M_8*KVx*EHqmZ=y+ehD(=>j3qrf}?R z*VltxDj})tU)5fv{`z_Ic3@!WT$cBwq_!Igk%1FOD;uQ}{OeVvCKs}UwBPI z+AoRFMv)MAkU*9L6ZLtR&5)i#@V4vAt8r zQ=z#(La6w@vYI*FM2EU2AUrsmm1TrG6y7x{-`n3`P_uV_W}?Plk9kPz^7_QGyy86G ztP#)I27_wfw8*5;uD*%Xo6*m$)w35Ec6F1IH5umP<&UeBs$*jEG##X~x!!H9E?4hd zU_AA!KH;B!w~y6$cE+SrY2LkFX0YtD&-Qw2!m*zlOFI^D*uKV-5CPjiV3B{*B%CxC zhq;{nU5vwYkKo8;V-DQ6sOV7K!iTdIWf;e9@rw=#QA})htRL=;(uUguqM4C@M-hfvw#fO3Gu@l7bH+=i(~k*QGt&I4fVmFe$7(Nu{Fh%807&6tt+!#!sGcc*uajEzgIU!mp9vSqXO9Nd>bC<++#_jJh3 zO@HzPf>!`~xb=`j^_Mx?rA4D54A2Ib2xRq z=$Ph?h0k^t)&Z`Q$!6vYuZM6QIw&?FfF*z*R1sAK9V>;`<3G_!_(W7h&x51r-cGzR z7#4NeoR*>{re+brQtV&x)U=H)(2;g?6R?;V0Pl;5$(z^2C{u#2#$h6i{}_tt0W4Ka z;$6&Iw`o~)h;(wmn{auXq0ysxAecu~HSNU&SV&u2+wAeVMeJlqh1E!@%cjo%Ja?JV z(dO`HBiEOLF!6wC&cJv11P*Hyk-m+5zg#K7D#KNZ&wf|UL>`m zf)ghGmB7dHa_*%oGuF-V%8cu=OPuxKyI_6<7`nu8A7#l~Fx9jtj>B`@X*%(o(Db{h zF#qCHWSB^~?2X0BS2nb>I6HfJYzXcjk28uWDR5!QrcEb3qK%7F<;jj}zZ&z>?M#2qhU zQ}e)88txDF!Kg%rIft5OqVwMZP080fG2?zby60yhS!k@2CZ062y_|6U-tRDJ*zvMr zWd9&qnaiu?9T38j(!R4fs;PI*$HRVbC?CAk&H%aH5P{TcXc_H6INo76Gan`aVZ3yer~#Ott3A++3YbA zzrNX4ZTxcQ@)m(c;LB3jPbKRzv|*!b{16UXd$E8s7qX=Iv&Mr-#hVNt<_&m4$7&oI ztHSDHRJ1~jrh#%E%V0#srhMHK%YwAk0EQNqd?|q3I4_dVxR^8xzvgYie#p4z!o~`T2kUszp9}{P-c8Sa{St zo@Rl5yXWy_C$eRZs|YXM<0Mc_%gp>VIjQ@0V(InPQ-~wWJxD+-{>!s%q@kz(OoG$* z?c28xpFZ8$YPi-HbY5vYDOqs4SnZTpe0&d}kM>|9F82fE=N>}ClxZuE^Zo7^FHDeh z-!*?eSe@{PC4O(WK76dq3MZv+1@q@OM-+SaI)nwH7Av*)8ZfEhxxdfkEVHi=6vp39>QYk{{rn@z{+&iqz+0~HepB2wp_fdmsAv4?io%iEb|)B6E5tA$ z0tIlzmswGCDxk_VkNSdE5?k=9dTyL79@ZHH?_-`;e;l*H92Gil+1UkUQ3fU^`Il)v z#!7m%t^u>RDw%r@RuTT0nRHHiG8!66B8TdeHm)Y`s@xAPVblx+W`Pzxh!G5;S^6;| zs%fH=AwB?9ad6;PO@uOcM^ZVuX$xSHa(~M#|0K>XUM@shHK7Q#nmI8QJ_Id5I7UX! zJ(k3Z8|X06eW89gbwtL=i90tJ!X>3WbcM4lRJR@%m6}^o-=`K7OnlS*2f%sAra0P| zk}!HkqnOA&_j;@O#np0AtEqOB1zZ-WEg%vGB)U_#Q>3$NlJ|=DisOhXl6+)i<8A!| zeQ7<>ps}LfHz%g8$bn+zTTbup5X^H38IXc?4qh5y?EqSplsrEEg1>_*t00?cfyk0A zmE3C91$*{Szc+spafzt>I~N}E@eu*-ub_b0-Q5k!T(d7~cTZ32q63H-=;-L&ik3m0 z3u)!$1b=YXWL(S1-qIW^!58PItLkV5nQB8N_&3Lp7E(p+Ym?zW?qi~KcXb6|Uf=bZ z@wJ}#LKJ7L?X0|%v$6da%F5-h?^)r8Ms6g*ItR{+Qs#_D_tu9CjAt4>#aUv_tBZ}B zBb7>WZ4svAPKikWpzFZ5^ zuMWyFE|4-Hb@npW6dF{}4uek=%F4=UmqA1zXIjg1^T%TT%+lHKPMJ0+6l_aD=!qdP6JSoo{>Sj zC_teEcUG%BThpiPNeL$frV1j@>t#E~25Q$sgIO??7#gJ-3NM=M6pwMo=qI?) z_+*SG^E~w9_iN{yBKiRiQYBuO?wSQUpAoD1H0;nCmLG6aChyJK4*w9RK2bv_BXAB} ze<;6nMv z?st9-={sLQ5c>9{LVCHCN_~b2$%5UfST~fEv?>++Ob?Qd(j80uu3s2*LzT69DXnh* z4I=SBj$?L=-%^U15i;TTu8s!%W>)fFfZx6$zUE7$N@e%R8GCtsJOVfT#w%_T3GcQg^-o8bn9uBSm9qC;^;%1r6%cKe*4&EV{{An@cGjitdhqDv((CQp zbX^s1%bLSxb}Y=+pNmcu`&JltuGa@+L)BBi)#{%9G`8MctySuy6d`e+exdKZ;GE3L z2xX`#kka)#0~qzE!%4`7P)T5sz)4SRe(!ekjabwES`Dl5ufx0t`qbhhg?c3R-2q}l z%T|dDxBE!C+^?f8ENK#F5_<7RxUo8;npZSM!K+wWGd z_2=jODc_uxuZA>OFvDVf<$3Nn#WV5{R)+{vZNgYn3L`gv1Anoi3KqZS&k}6^pqn*( zbW45O&ATlvhdE)&E1xnO7Qu%JM{(%M+( zO@Z|TG$lGq&hp&#G#vzL=P#NVdJ-r!ppARP%KGNOIb+woK~hFW#_JzFJ$>@{lKR`c ztJB=t!sz&jF5hTMll8t=ZcC?Tf5}NpI7+IgY?d0i;*P~UsCr5xOag&~$g;QrgCUSt zG=>8B{q%0mZQN8uU?mm6Rqs3;xvKNP3e0>SmdXUDuP7e%wlr3g9|ZcW&Z6owLaE*WPj^T?@C&OE-zaH}|IXy+FP!exvzUdJo~ z0s=6F$;}1*DmRx~(dO59g%$eRQ{BR|({tt?nqL%BJxeU7JFPf!*8&tg&)d@kZV>ao zrbhNO3vN`#qzs;YYdt(8x)N?u0(n|R(kcXv7iaQ`3_RcEmsw%s`@8QS6`9bSS7z|N zJfEAUR@_9^6YhgFpxqh`e$IaM-F+ugZZ#3+<#|?O*Z&MAT~v6(2A{d#qGOA?vJ-vv zehB@WcBu)vf!8HHC>pvB{q)?Hg8{I0_+gSFU7~EgUJ!m%ecbz=MED)MeThBuiQ&zp zs<&BEWrX>uk-J*qDL+-(O9xqPml7 z93MSlrC|{CLn?^+BJU#;61scJ46*>D*C^n^SE4>i&8~Eou*9g<%Ib*OWa`rw)QJtC zlY=)(WZ?C*s&Hz>?Ts=#t+j=K64HwP)yUJbAJ#VOPxC~DDMiCCO^uiqpJ$DyM`RtL z6rC(p)6bsy-cdl%5o0>^OA&F*rNXj(%V~Q&1?q~qU3cUx>}#S^ zxrjwmOt}7SGVr!ZwG%33hGFrKoSdI(bIqVC5~F0WQne3h>0$kBZ)II-Mx~^K;wXKd zX6s@(#c6F6-TNoi>Z_^0B%X)nTXn~xQ0$IYSP_B!=U;4+Z8Nu`9~N1MnzFD|xQ&SH z%-3Fv?34~)d@4Gq+UVeZl~Ri^O#l&Q7W9JGD<}=UYwcXh!oG+(lb&G~On$Q)$Psv~ zb$_MxD@xCQDrZNlJzIKpBrbF8TXpB6FjOlP+M4%CBPurSAq4!cl*VO{FgbpZ=Ti}f za=BnkhWg>|@})kY8dHAGzpvklMl&eQXM~FxK{fLz_u2K;rOJaCv#;JL+OY`&#taCm z1f}uH@>c1g|1$2_FH2T+1=gMyHZ8d$TX(KEy{{MdV#FW8B;Y}Nby8=E!{PHRg%lqW zcDLD&sMWh2WZq1S_h&1-o218wx$gzttKKd=kLPm5hOODfdICHWV`F3Bbs$MHxb5_b z@;*$?mVcO~LWT6zV?$2Rb?x`~p%tw%Z+2@pNL2C1tHS#3tMu%11CeoiqamFqI}13G zCV|#MmAfnW;i`7UAE?}~e%9GG^>prwF3pkP;BSU4b!VrVfcB>AIW!cxy*V%!R|*2+ zR*DmwyLh%$Rbl<*(gd=pVn(Ew*MG@QeV;h^=f}xyFFym$weLp=)cuNG`e1&*!Hvcl4&OcRc+tDO(WXVt+z@a8;YHNF8hq zB{761?VKf#Xg3-OAhH#+J?oCt-!WmosswaBE{^NGVocX{!FdBhgqBm?zVc>Q1ilR8 z;NUpen2yfRhaF1N`3E`wyAM7sK7ZdnMlUTZg>{o!f_*2csT?@YWXB@`Oj7oMBkKuZ zhq6fSb$y}|g*h9F&|qpieS2GHC#`%F*5ZQE!XwrvOP%dv^Fa=2QWoUDMFP?vahv}I z1^&?^=AR3@vjHwIH1&}>3q0VsRJm%7>E_SdzQdLnXnVhJ??I1*g)WB;RDe)q_2-&0 zVIqJVy2S3A{67}JkJ%Fos(Cs-F(SQ@1W{u_=+vh@&-FUO$jJ865@iVg;-g&={YXx6 zsL=XxyglVgKhstb#6>ZcTuej7#AOmp)ks`de5 zyRZKNS{Q0>@S6s|{Z3Nt*ubD5@IsY>I!{MOAZ7TwnnNL#Gv$?S%>yZocV5H$zdcMC zh;ZuSm*0qJD;N8uU+TIvp#$uA78=& zVd7^XOg{A&YW=vL&uL`Hk_$)dfL#ivg?c4ltP1P>2FukOU!72Bh1LeGtgLkTs;Cf< zC;H~(Jn9G|>FL!I0uuClbq=uwZO-Z&5f%#n_#G<#9Kl_(kTh#Av^F3?H$pt!l zAWM-9R%!W~>|~_w4$MlWwdm;qKFR@=IH*`cu3ILXXBGU(*n}QUA68b(ks7_VvTg9l z`r?>&-~91ucW?I+qEEDa{c!#-IdUm@z@&wgGbeL6MBX3W!EZddz=&miMOvZ@bds%l z;OuRrZUC8Vpc`PeimMR7!(mr91v!4{kC6H9pr-g=_#T4hZZvOvWoLSMQ*5_nSNQyQ z8D#As3s%wVdBbH);Sqq zk=TT_{4lCcXJSot?vAr|ENx?dz>wwGXcWb6pdSYdeouKoP|&j|dJlaAbEA(~+n38C zM(M`Y8$msG0(#I-JaNmNOICuCswQ>LDk+Pk#1CGOpAC#?u`MJH4~<$oPcE-yuhH&Y z=YeMIW`AnP7_RQJ*0PmD{?(9X0Aj9< zYKLooHvxM5Pks&Oj@V>raS=3LeZ@HHj^?-+!i+|r_J%0 zZZ$@z6li=@zfaCgP~q|D^a1c9|L~#z%qJ0DGf2Wvz<|U(xfYxe36(Eh_Az&bHn#I8 zU0}9pM%L2I-X!+L=fRN%#vR66JbzM(x`}kuLUKAx&YRSp%U3@TrT@_j8vr-`wY5DTA}Oc!}QECMOv5R&M8EMZR~R- zs%84gpR+7AK9v>jukCB=S>tJD&q^-J5*ZbGT+GlEt5ZFBrRq(Xm=&1hvZwr#7~6%ZW=uC{7aRc$ zMDwnsULOCDGxH#IdIkL`1_lHxllKks3H@;QlTQ&~X*q+Q4=&Glw&A0*;#hOjPlw<% zQsTDcq73i)k91(fi@7bs6KJZZnH$gxXb1k+)<4qu!L2&!Lqs{yMEfj+is2~~aR?e* z9+v3iDZ`7nvdm@MP$N6s3%mye67u)SELaL<>31I)@dJ+$W`?b8m`R@;vf=2TEJ3oU+5^BG5!a!=L!m=RB-Ykr49k@5s0K z-jZZPml|?M-sAe)@B?=kRgx$vqvq8o0z02~fzUVNjAqb_Z5@}Nd(BlRgnZip5?_AQ zYQHbP%!u(U22#gC=N=L#-Fn0q#f(%Iy{FG{z)%>D_M_{S$d^`urf_DI(oA=Mi21!u9{`A}?c|+YSeu zDO%aXRGF^anS0JA%9Tf)6%ZF{+wh0%iu=k;%G5c*iFe9)eM|L?|7Fl;!sJLLE6PAKA=VFSi}@Ia%e7WI%CJrMmh zGP$PI!-Itc20KviN`d};YBJ5}oxnCx$_y3lmeBSav2m3E&rRrl2dzm#lVH%d2LjSU{4}i~O=7c}Wo83SLz#{TZ1-F3JiXb~K4uQlADpI{soY_dJ6K z9cQqV*-1j?*)tfeq(Vz)s;$veYzO|>5nwVZ4w!R(m&-}^|X|- zs4rGo(SBs^epv~d;b^7aVq%u54}~D_eN2$#pKX`9b8REsUdBEsy<_@VHSQNYsQ^%v zhUDf(R+40Wl*|z=rJ-`LS={GV46diD#It^zjLjIQ>wyjN$Uw|J}2n!TBfJo zpL*>ce<6(V^Lak^%7WDfYMSa1BpS))OB=MkJgS4K(`ZLK*%Jdd=LW?}!d zm^oN2@vG0$->%+Xz_RD<_yZiI)5ru9b8)Gt!VA|yw4pwjl~quX1UcX{RR`4${z6!q z+y0XJyC+?Lda(2iR06_+7~qP>$IG(cZ(HA&?!`j!1zkah+ZI^%H0YfNykX$V{rs(@ zq5VUs;J~c=tEVRrUc7)n0#eo{MoG+qh!7CLHCbN4??ygy0dCayVT;w_wGA}YHd!{2 zxfOEtA@w!;3FD;mt>*28;{Ma7TXIqGRx`7*9eO`F61$zs#xmTp6rc#)YFhSkKUjInPHZw9Tz2xNnGdthju`M3i3RCUZJBM5nAn=4 z0E7}f*+#uMFYtC83+Smn3(Aud6bQ5>^6J@V6Q(M?&k`L?mi$|hZ?bLDb*U8WFNL*x zPtKBu{Qark1MooXwkoTtrZ!gTNam_g?d#Yp;BT(Q-J`|295Yt50||C^Qxzlq6^>d_ z(a}g#PwNs^d~6_GW>_O8-))BeP7v}}6titf6ZjBu-+AM2i$a zkVzGrt(tvGAglChUFO>33{0+;_wDPZ()=X{9xK$l(ohJx%+5CZA|KKwlgpNfrxMks z8!X()Hodi2>+yod$T_!Y!`V(-hVtJA8COt++cDUhel}0~BEKfZby_Y?Ne?u6!U9!4Piemf-+4mgF$$A z5FfB@m&rw|*FI-1~ev*04Xur8)rQKu*5#Ww&TvVxY5QhNfFFHm>$L*=( zy(`r1GPnIV1pYpB^0Jkmn7cuBwLe?UMu5WMvNb9Pgb^{113_QYi7*URGi1V-u28p@ zmpJ$kRmui$8rU%;_=x#j$dSxOw;BVoqAnzMzRQ)G*qx=AWIj?z0cahoUhPhsvGUGl z)y$sbcpom&)0b$eZWkoOwz_>*w)N5=6eh5H-Kue`$;`^)G-^Y0*&J20(U#py?9>&;18Qm**8vY=Zm(u}?nsAJ+maQN)q)wS|iUuPZg=*(p?WXPZ$5-zsJv*nkt%gH7Q{9uHu13luLGr=K zEJ`o31W=nltZ6?Vx~&i+byy5bqTew{65`Z9VF+5{{>Ks-yfM=#l4Y~EwxQ)V7efT& z&E`sLKwlevVUC>78xlopMfhj8NQ@tG7m|2lnH}**!wj%<%q;Z}-;8G~2wh+)k>FcF zWa9vQwD9$O>md&dv~k7ONv<lv_2I}>PgGQNe&X;y0^)DMD?S}Ii_o4`8Wxezo0q5&Wn%s?VS~}s zRISSbya-b`qVBaXWP5cpre;cXVuMr*?MhLv*8?u|fu%uSC-a$)ompZX@OC-Q562!- z73E8}S--yi2-8qX&kGf(s9)|O@WxZ8zn1WYEq;8A0~0dsauZyt`s17ZyZwOq%1YMf z=ZC;!^>7T&!0V7cDBZ60kS`)8x*cw1iog!gb{CukwE;p)_1b$}Xint${*WFR2^+oI ze!#x?LhAy{2f2%>IUYu0`0L9WK7BY<=WGU$%V@bh{>#^QunL=w+(oZW7Mc{7KF*#j z+o2dcs}#7#pP8fo_^+Hb)v4BHg*2ap(?NwRw`H-K!=qPjyF)}st!~l5knEvhzOs|v zh_gI#B{J5U1_QlmqKkVC@u1`3$|c zyvS9s$!$;{G~NTCG$1@2P)OAmFF*7wwye4UjAN}+m1bR6iNrn)KC>BpzD3>qxI6pB z)?+|OaLLFp?!i_SmBf%?K?)Rp>WDw#_cRNg%p&Wz49ZErbBFTYt?g#VA8s&{w((K( zvc`f>D1w@S0VS^IK}`*F&n+Hqm2_BnAn(V)fwS-t5v&}NQZf%M@IXMK~d zVj0auyW^8OirQ~5(5vJa>Js{VYF&g8*z{K=;yh9u`iqtF z7?Jh2K%Vcb=aTlgtGV)UBXh0ms*;mBHzc&1yE^^Tk2Dq7s{#m@92+DUWvCV)B!1z1 zy9wegYMr)PmInVYYd3zv@YDbK!&=D{UKo63ugJ14a)f$y`@CO$GiTEG)>G%)V3WnW z>sA9Tq*CP$4`pC-DTfD>pQ>rM;8+$N&Csq9``+Qf0%QPD)r8)L(x4^ogD_lkr-Ab50trKP%EgGMv$jic1Gy z5FE_Dib;IC^YUzaE!Pb{5z3-}f)<&O40LcDYu2P%Z-tg#Pw9gm^Raq*c$ScOPttZ% z0?Vtazl{*gw>b{@SAbJvZY}``2MgB}NWi}!(Hz!}a z$*XyehXxdzHm5+dN&TIxVb~GVB*RlKWRN zzj|J2^IA{0rPBvjFBiTyM`U5aR+WsnCP)4as7%=Y8P5~Hh}-4oe0^u2hx6cdEu9>4 z>lz&$m2EU>^~0jANsOX{US1LG8|M1&MIs)M_~+SNe`oF{ctBKQ)OAH6bd2NVsO>t;o}7chtu-$#ewPsTY%j2=jl(4Zo9mlX@>U>iOAnp zA1hiosNy>uEwe8d2*CM*=|6P-^+3H|e<3_DfIyPy|H+}nsRgg9O5xK~mof$R0j5E6 z(b0*sc7iX9U*DWzxxkiE1HT&3J&asj_}a11E}NK|MgkK3YlsPby5Y_ zU%HM}ThPK|ld9&O1xGYO@%>td;o5Cm3}jD~Y=qqBDjz^~qvGORClzDwlk53h&Ek^y z^!N88yCpd8BjD;TGOy9Q4ew8PcUpcv=E=}iv}wY0!+XcQZpQztmjGuyb8>QOW2>|r zdg67lD^ovx_B{!BHU*F0+ZOw&kQV^JH?)Alm@RiMZqf;S`Ada{LK8Ss$}F=dbNi$C z3OPFTg}J%&I42UFzwq!L%8yrW%3?p_1&|-8+~s2_W-FMG;(E&6t6^+8jWdkoQsgo+ zov4IQF(A_zj)pDif|uCkeldhYg6Zd=0L@se>D>Ogoq3qVxDBy%jEB62n!S0L;5o*# zn(R6EM?pS_)jQ8@qV4{I-3bQZUa4XZz_Y--wChgL&LOR4Zmu)~ZhY41tEOvr3K*BJ zCfSkPdg=*v&EEW8SHml^m;&UP3Xaom%YXwAqsPa_!~hOJN^1J}|Kl|jqW#y-*U@xx z8f`h8N^$#DO%zJW*k&<(rrL#j1oz@p5G6PIw^k&k9c60PleO`cN^yd%_|co($t)9j zwJ%5Qv}4w(3K0*L>@=h_h9uTBwY+auD9vELI*IAQ=%d4k!zUD-s8k{N-jVQT&fnQO zRb!hB&;r#Nk(IRA6%SLfmB9L6msFk+7b#Sd-Y!#Dy)fAh`_#JlS(8uPa?=6}(k zX@6Gsc`!Kip}IOXf37TE8#OwI$S-x={&APFi!#3>-q$zym{bm8c`jNg;kVwyraKyA zU?bMQ`1EE7ZH=LR+Sb}#D~WR0GLSOV(4)HTV~}rTX|w~_n3`3ZKey>m{KG={k5s<+ zB%))BUA1rT9A;74pdc%|eJ^%DUj5_CI2mew!AIhe)+zy^40jH49Da}BYkb6eyJuY@ znkjC_t%8QNe%F85?)6Ud!|4SqdC>jS~Vnjh~W# zQoWBhu>@&u@|npI#S$fN$5C6DJl#S6PdZZ-Ncq9wZC-#8q0VRUAJLMD^UVtSq3jx0=zF6=}E6dPjxZ7@wr?!neNg#@-F2{1cM|g7NIOto5ow%x!s@FY|Pt zK;%o79gL;biN@9>Qk%m^Uhe1WRg$fPZ(a^RN*}61!xaS{#!gsGk2>6hTR)FpM?l^H z6Z}xkfzPbhpNvSSz9Et6lmgz z+17B;O!%9S8hcD+F8%sQQ8vsrPvM1Zx{PR78WIC$r^`wdMK^bR4(2At%opl2<@+O@VUVcgrmwwoI$b}(RIcG3kU3| zfuW&`0NrE(gbE;iX=&NX+bc5&YM|4GPYSd38-x$3DlIk^K+gi2l+Oo^!p&WBhcKiP zt&MMW7&v@**7r<9!(rdi&9is?i`y?d!4!XTd`gE{f|z0p1Ow7D`YVPh&_QNMr_dsi zj-H;wY2^iF%IPE9hEu{^dHQh*Mc}B-bEOSc9tNdJtcJGfi znoF5$T~?n56S5#jf-qr}QKiEprTfdC_HayK?9RarbS%7p;80p%v0-_KF`QCdG*q3X zaEKN7@L=O=s|DQ)i6$Rxu5L_J;pmMBtY${9^f#cw5qJ4|O@whhQmOi$)n~u*9y75R zw`O6L+s=GV>YP@vm*ap0Ef5mRX3y_J5rj)d5e&Wxc1$EV4w)E9RW>NkXh`t!TR&Xg z2AUpJhk2JeNa&;i4e-ksNw5?>dh*x^_IcQ@@CTe}_)Bu)ln=}=@2hK=B9;_EuFA6H zv5|Yy!|7+Zv*o{Sq)k|94J{V7zwda63WPzNdcZx;`ET+evhNT;b;#M#{0kJy+2LlV zv9d7oa^F6~nk}5zHu^=YMht)k^2!{QSC(5$`O){pu{)os!~G|1z>~OM*oY0LH$zfk zFoopnHsJX$iEF4+Rv+JNG&m5kZP+Kw&E?!1h=eYT6Poo&@9oQj?GYfM?98znPxdgr zdRAYo#=mI77{J=bYum?F3}Xn$DXDT`fm zJI*A^Lzk(>sQleAyB9t_$ZM5_C`KHSi~DBBLP^LoLO!9Oe|i5a;q*kI@}mBG2Wp1+ zj%$XfpON*)@9w9tjs8_QI~40FUpvqMtv$=4tCZYQl0rjOBL$VcyXy)&A zUTrmA+K8TCa1}OQSzftyijCD+F)GP)9lp@f{Iyn*C$K%a5BGG2VXL1m=LViCLQTMS z$L(Mf5qHiw)i*Sv_a{Hjj014>TGw@@FHAuQB@rwQwGzc7lwBEmamqiB35?BNQX%eYDo()5H-D&AzW1ru{tv^`{P9FS6x7Bp+1r~&s6)Wle$^7N& z^`koTh`%3xge#b~2R#rz*pU!E9&r5aW`+%d^zztp>f-)sDrk)oI#m{-OMhQbJkb+$ zH3WZ`1#rv%$fx7K6ehQ_INq)bqZ0^Ogq(ZZcPrF|T89XzBrrH69;+Yg;KSE~tL`B)Z1aH^G? z_xnhrheAS$+2XI5$=yDolhy3hmmr4TkdI@PO3La7y%L7cZHz$#dl_p_MfM^_&-OKk z^Iu7T0~AVhS=BD*2q5SntfqR^FKOr0lljVm1F5-y-NHOk8g5sxzVhoS0j&oO79bUH z;F-LV3-<2rE_B9TW5*b#^ro-<8!;v-`_)53lX&+weQdko_3TEqJ8g_cf}V*_hTp?T z<=q0=V3BlzuG8NByL{n*^dmDEz+y+@h#(eycYPasiGuEzMqQ5-^+}yWrjO3@6D1iK z#q+=5dOOO_pp-1@@l4py;)8nG;yM5T)A<5gdTtLA-A~ZoS0h8V^xY00Y$Z8SY3bQN z029w*XR22w9JY=LoFA<9sj*j*Uxb3h*&#PW$~iaE5GMIBW$Ii2gC1=A+EICf{i{x; zjw4D)mIUl?HM2e#qvdY+HK>mLJ89LZ3_;03-eq0)a?`K8-@8&W zN_j40U8rdpAbw+Fw*JYv&B^W%Dx-@j{bEq~Yha(T0yo2X{qP|Jsj(AJVzHZ(RvCjy z^r4DyDW#Ru0xpk3&Ih9DXLp2K9)4qoAMl%9rtd&S<6K5f%2`pv+4=Y<`&8=jx@n8T z$nN^rEn9DI*V-}*G3{7j<49e3=QE2^KdCK$4SHuwZY&-C)Y-XWteG~5X7Ec8k-q!Q zeWfJ-Zs+Kd`NIbvP&UjbKVq=e-{;Ee6SvJL>f|B!w_^`!vOXb$V;}}no(|FC2Hdf0 zL1%=b<5q6gv-@|Tnie%MlFrr!wsfoU+(!89B;(|4qv*CE@<5&j>-YBC4af6yV!|Of z)7LjrC{pfA-lUZd5rxOGwpUxF}Z^vyU&VYyp>!-l7SL{ZT6WixR63#nlRU5{ArK$ z1MTM8iuIi(GTV6{4A!3_O|_`u!dGa#*5jXEx?*K_%witj{{fZq-Hr9(A_)j~*KDY`XO`;53v%_{mDS~mq?JF! zSp@5WfS%RwZwZ}DH8iz`iZ$Xg_KA|fb#BhMK72$otGa)XLy)6^eFg?A!vZ3 z^=@1=i@3s*CrwiLyEB4H-*5WG5>XD(pQLZ^5ZzI6{5MR1Q)}* z>3%^$!OF&38=Lp8JhQtUZfrv>rfvN$N@2|&Y5A6gR6e8M)=NGoMgQC%D~jaRMOhZB zzqRl0WSd=o67qIq+`2q|Ut-*e4bPIu`(tr6p5*sOH7DaEjehW--+t7fv$1#urab31 z=igkhSgzCyxFJp?gPUp;OCm(z1L zH|R`}{wTe&k`ONPM>;ukTiecYXDi(BPWT5oBQqYzl&d~9na1$o~9g9RUXZmw)> zd}8j2=QpH*l{YwRiQ&f260A<6wgB9fjg_|SRPP{&sw~qh7a9(o(`enDQNG|K6sbm2 z7P%z&<^P2?QkGhWP)b7LHcccNsg55T3B{^s>uL?`i8@m91mv5Lqo$aZOi5Ul>%><2sxRy*ynY}C(b{Isx;&N$$+ z;pIrHhaRga?M3Lw3? zI^{aEc}#te+}x2HrFMiu&%dlskgWNIyZch(k>|VJ??fda&4FKEOPEr*ijPK*MT6jO zv-o{PmQpL5&G}uzE3b#3Ci<9j>-9>~+>}$&T6flyv9&D{c=D5&y~u*}j*9prVn_x0 zn)(l5AC27}YhQU1MVN7K-VR8>Pm zIYXhzV6H7pGL59`{tZVo-MvHo?G8u?zn>llO43}C-tm>C!-IcTT@>XwvpY%4l0ug7 zjQ=)03gUM=>i&T3adw(bEacAY>WGo#p+&6oA|95U(OqKvL9?a6n8r9}wCaW{o4-*_#5PY4ebwf?!;C@UyK`>w}cP=50{@M(o zbm7t52PMqSZ#yw5bSlrDE6&ZyP)ZBq%9xp%rHb>8qWgS!O&y>W+vEeO-ALUL&Tw8? zQE2kBY5r0^urDLzL%|-@iq?kw5Ci$6frXm6X#U5lA5~ss6-4ky?*0cb_y(SyEjg z|09BBNjv(v!7B!?cX%p4y6Be{%S%OWKgNx@b)NoPAA{?BEyb)84>yKXOv639QzUO6 zGfPta-i1@NygN1&`{n&1XA0Oa;tX5_l!SLBAz1Ml!O`|1^F8F+0^Rph&X`X(ZYCBQ9^~|o zf~xNL)VKRy!g|8;cT@l?KVSVbgz6hiha$~<=EP)g|}A*;-cjO@LNbIc-pc6_sv z8On^ZS0V?;K1Rsi`*)vTfAzt6&+|U-^E~f;-S>507pmTIF{x5aW=iIiuq~ZZqJBo< zVxr3?U(NQutsc#`R}?3dzkgAo2nz7viE3_Ex5HOZgCNNrYvK2A+Ka1QWh)%U zqn0A^A6h9viM6-C|8-SWRq6`BX44WDU`!y`mv`nS1>R|L^`?9WIs~0?_%rB)q9Z*O zhGj36phGRE#@w#d`>VjHl*pQQr2}{~u*0wdK()AoB~?SwJvtF3(s@vtt?8lR;si=Kn}5{4H;)-D5Kgquh2GyiYICE&}-d@;mb{?)OZV; z77Q5DsWk*d8j75^C6YS#hQUT}ci`K2BggsW@6{{y;lzzrSSSXG@y8->9*dCOWXiOi zub@#wfmUry8{eZmCL{^~5m41jd3ZBP;gT_J|Lr{$4g-o%r*|{KiCt;!#o=uFc;>e} zR;{CXVR$4FtV(CY3P?`B)#U$>{dfZ;%DTkEVbO5NXF}3{-|u_iJ1X!Ur=uVV*kh*x zO&zRI@=Tu;btzBI$~|PAek@B7=C*H8E^agXI9rvRG!tIF+Bx^t5KJNYc@$)-EXqEJ z1%W>wu%)L<-`g{$JybaL?hc=CI&E_HhbxalfI>AHt#u49x2XTWboat$;Auf412Lwn zlCO5$x6T2_UkL3#|bcw(DuaOf+eZcjZM2HD7-%uIFmgROjih|XkcS$D&K zRT{g~eOkrl^9)}qE6w0tndsIj^VB{g8gWoicHOBF2@>7iyXLIgi#fNBR77B9|E^t?e+Zs$w7UKj z_y728bqX?^)67c=3Sp)G3LSt>?f|h8IPm zV?U|g@RxI?S9p^&r&@WVkPzAUd2ML*_Voorvr&XZB&QtPdH-5EEZ0=WlF3x{_?}oc zha`37h}-!n#q~Q^4!3Uk><{I&({wEVypjKYQ2=Y!*SA z%~BOeNO;Wr(WS#6!Tl1b(0*P7t+feNTC9^*)(}0IPd>_fto~;x5*4R(^rdfYZ8&;u z*4BZCor*BvU-kb$X(*(J?rJ!;yqvjyf2(M9%|xXcOvIKJFi@e)tR!JsC@B(d@tgrebC8vR@ic9W9r zad-GuBOQFs&;^JV)}HR_>Pj?}W!*VmhMIO)S#gosWs%S)Q#&UoJ9^ve5}K*k=;7cf z_GmLzTwOhrC}BbAw-;_=dTWW4-L)T;2)jk4`p9aq_v;yzs@dCL7uG+mc6+a6+ITPz z_?L3(cGXihJiC_VgPiUX4yfYi4sE*8f#eB<9q^Oj1P4BBwN9DdF^~P7ZxtAu zot-vV>~!YzT@vr%?TPTKCYfFy(obqCPQ#w?Sgj*>YI7G4M0Yw|)zQ9g(=YV+y)IYM zUCZ~v3{k|8)%fWl1Dm@P4?7J3K6>LllITeSQZY_eymiCJI`X0k=3tIFnH8-J0p4J_ z_eD4bnQ%SrQM1BGsQy}-e+`bXD<``w*u2Yd_Uo;q{1 zaS=KnpXTc3`A@AOYIr+@!OFf&DBx4~Z}Xp-x(jx_nM zV9YsW2Nsb(D^!-H&eY^0_)r4Fts0VP=|c^*mn!MS)t!^o9fb2(($~El*({j!<=Pcv zShGN71~(d)9T&5O{ye?I-=;s~5TrM+72)fOIDX`ZoI2gvS(TGR4$T*@g~EWS6~mXr zTFFIW$*lU0nF1T|J{ewrdK)mjZ+!k_xqq~aDAoU)8k;Y(rNt64(O5QIx#~t|BozMm9P-AOTYg7c_XZy zJrUt)HIen_^5ntzfwG&_@^?_Vy1tc|m&ecgK(MF^_B-A zKb~tUdhsx{A&qf=q^MOzLrwMmTvI$4Df^ZAy!9>jLtYUXyODsLbU#W)8$n>rXMz-~ zV44dTp+ z^S=O3rPK|+ZsGK&`tY#Trwiok;%jP1p(Qk|qv*!bv=@N1*QdFOeTBrd;j)Q~O1H|2 zPpZch22eaPL~g!lQ2+hw8lf0GnPDSB8Vur@9_16N(GvSRkE*CW;jAT2|H7Y7Yaq!t zHML?CA(zv6Q~y7zaL%W%0f#*s-FF?VGgC01FV3~2qh=eDe|A7>KvE?XmMCp|K|PX< z`2N?AN9pQ@f;^pb@w~!HO>ms3F3*MVJrQ(4EBXmiDO!V%A<=zUu~XSvh5_?h&P4;o zBvmOzz^Et(dMKtlyN)HAvSN_G@O>%i{`Dtn*Yn#+iYF?_5)n>3V%6&sRIC!DMn*<2 z#&JcRw)gYH^i;-CnyvJPOW}(1>9~e|8KYykk9Ub)zp`EXaf+GlO ze8?;mL~;-!Ef?D7R@u-vQ@&CCyRdKzyhP14WLokdAlZm!r67H)DbQtyV^K)H^IyF= zw6B7X)a&$gPC%_BcgSCvbqb^Mpkv_wkd#qn3e9`Xec2Ek0ibLJmj}mGVr3_Y3j!&h z-O141g-=B!yQw8E#rdxrp3xPF`7?t`&C;bkGA?$?xj&pD6sI9Lh2tUP;|4^GB5}7s z@fvyr_4Sije=_Oc1ip2REREU|x=3~UMa%~?6LKcCz$+c|dHHJya3((WAO3z?vk6;6 z(Wg)6)6&vrSNJr7`0oB9V zPqmIg_JS9l69c>gjTGMV|&@|FT zI!kHh=2-RbUy6j=Wl%gK%-@#xg@*92ID{dyl>wCyjAopL*XxhDP6g zW57I?uSMr-bH?HVfUrikGe@0c{}_>y7w%XBD&rS2n2U+CavghV;=+S9oe~`IjAHDP ziNKtCj}A-Hjwqwuals#b?fIgWbKbc?2#{B0;+*`0ey@P*?&*QC=(~Zw71`QbW9V@G zP=p24NYQsAi?|;c>$shL$RlE*{%U?$V8NA#9wqEVnW!&`S`2u!IJUBVDu*~?>wsGN zOU`V9?fk3g-1mEt{^_cziGcw8oKnPl;0Ce50iO``^h49XQ|INEVu^q;{}sm5GUY{~ zAb`M_f=hpfN+`9E)5@cLZ%bNYe1qkAu#X6px?>Zz!iwn%m>B#{>^R%-Lk)gg`b4w=zJXpbk0_&sH}UCt`@e;|9sMeu%|Or0Tg2vJ%yEw@ z6ZtqS)oU&-=u?sAdvtF9bd5#nB}**w@xRmyhNUOnFGmzZ|Nk6f6fM(AkjTe(Bj(eN zo}>u^<|kWG0O)S>Pcr_Mz9ipb1V7A8%wqf<_9-ON{COAh$oxN8`n-V4wf;77HCG09AZjSi^$b&Ekz+dN1&r}_z zF_YsNQEdu;VTB_<7Gzpy6tpvFC@Ad&{-V$zl!2aF z{Xt+%wJ!txRp3pe*2~6Mp5#& zl_-A8T*wTiPNf;xxfFC?dN;VTzKcW#>vL=H$ma9%lsd8{z3&_Gto(4F3jUBXm7z5? zzR_7Bk+@sP$Y`BTC%Q7AtlRhMWzf6k#t6%F zT1LKYCxTx^ke;4dG-ogYhH~}+?0@5wKYNA5=PFwHarKZdu23=_CJOt=iuAE9c`V!( z56?nMn#p*dDdsf}xx7K!@#_j;Do6z;)K zkOBocVL%vOrb?Gk?VuZp;)VH_MXhw?FSO{qFWEcw3~@YYD^>otglghNRfnovU_RY77^zLpYKt zwI14&P06_{|ip5&9F<_7=U1nNc-rJEsBUmL@8^|wvaPELW zZYG3}i~^bnB)`JuVSnA{77LCkB)MjqJTuYGGG0tS?Bl%z8W*RqC_WAFd;!#8siOq` zDJ)dCVh)roA%23N^6T<0XaO|9W@ii7=Af=z2o?&<LQ?cVU^0rrC zLH2F@t(M>K+q4}=U2&5$2`0@OJt``{nuPCOt$s?>AcoL&<41uIW!>TWJ;*MZg7FN5 z_FH?IfQ!IoiZ2EeDCCBM3)>M+DUU?JIu(qeRqaMT^#ZSdLWj= zqdzgSf!0#R0QzSxZ9g&baf-M|<0q zbwtrvFf~;*Y*cMYXPT`l3;pL3Q2wc&>5MgG?VYtHLuf9ADZTXmHPm}fzgt=SCLJl1 zmVm8(t8b_~p^G>p;P#OT$vPX6w3latPWeC|m&d%g_~hlH-P@1fU-syvqc~d(nYEGK z*h{_8$4sXtPWkD{=f;}8*-3?qzT`d18+IA=v^i;RY_pw7!Efq~D2zmF5fi$`FR@LW zdLUpG?tkom5|J^o%lNa(OwZ*68z}Y&6=T6VGcyBJ=GGUCS4BmGu|mF_lF-uu526Bd zA@{lE8ORuQrb%9eMe@C!S+sX_lv+RL`r?23iJ%3N?zJv_=-OpMUX@F3#CO^#L?Rp?EQ{wc+tbANoNUY4 zSIrARjrAeo^%|i$>%)gr00)Vvbj*W5t*KzirXI~o{r@DitTz|kwKCmxATRYa?TGDj za(e%}e#M{y&VA>>)s3cq%#1@N(|v_T)sDFOu{W1bc3Tn^+{Hj;Qt_7>+a@Hhp>o=l zA?q+4fiqSp7Hi1K@Cm~(3Yd=UIsqvlIs3U!mq+S)r1r1g0aVP&4e@@#n3%(lo{W}Q2aM|=6{bdpOAR#*vQnhByD<(e2YUm*Jvfd6!oSh>; zDi%q5D&mJrcEu0ZD>wQstazg=yYqJsiU^&W!F5t+G7{7`xcQ#vm2W1WyBJ+pX@#mZqj1i8(3 zkxf6fF6H8@vg*A5A7rrXy`*)$LmAjIRl(v>o|Ch~Jn+i#Vb_ z-wT#+YN#1TCdDzJN?PL;pAxXzZVTS2LT3aaP_6_gaFeYur%J7y;IdJOk@fT|?`-dL zd}oD-t+3$Us!nek{>|EVAWwU06vim$D()ML>BU2x0?`Gf-C^rdu)b%$0 zIyp%%5)A z4%7`JhrG1_Sy+FoHrxfU1tES|B#th}a5JylHn}+pYG$l{Qw9T0*nx#Ad_yM$BYGC$ z4*EN3l_mvm&%;Fpz6qe~hzKAq%y2uYvO^SIY6DmNDV)7$Jxl5n1@XMdlW#Iwv*k(@ zk`U|3*x#G9NV%7>qwWeJ`G56pi>++Pq&G0JWe%DN;mSArtuvKErRY&5Yr|-&4Q@oIaTChj5#uM&hjOvQsnQ zD5?66fGUmz*JcLqIY39#c*Xh0l5>DUL^Qr_H(o03)>|+06_V8EVe5P~M8k)FkXhG^ z8RnISpNL%WBP8{HnNP&9U3?y*f&BQLjp`^W-2Hq70{Y6M6^Uu>G693$36CAn6T_$Pb;>3 zdXLX5EZPYa(Zi2|bqY01AJlIA(}Vc4FT*y_+(@h6i+Axi>cJl$u!rL;yKGyZzQr!O z=vosc>E|F0<_0|*A{n~hD23-HH$PgOD408ceP64RoI#T?H)X+}x*u#@Oi zhgG4e7T%W%bI=dvz@}rja=5v~K5n+lQ-Zm|;&cWA88S2ie7!7q_YBwyD*TO+9%P zwlj~Nw>G>FuKRUNej~y3Y3x0|SQ@FYC3*V0@P@^~75X91CTd&t1tzO~vxpkG!7*Vr zJYHrrD8t}XL=YaYy)-g>acRymkr`#(QIVIbG_V_~?{{Eec#*5ul>^uX27A8D&EeYk ze0+G!=P+2H;u%qTIc%S#GiRS>bq!dGUZQn#aWNl3_DOAwLlO)1J{4O&o_@V(n{u%{ z!vErL5=~@qXoj0+PTfUIZIopYnKrWBqP`D7oXTdHAFHn7T=!uX>`U#y( zw2GF8W?z4U;vh8P|m?qt-?V^WV|$H+O)KI=@p zUYDL(ehQ~N(q>$27{W`3vUa@GW)>}Ke?PQ&B{iAj^PEUn5IEJFHAk@0sr7Cp!@UC6 zn-%wt-j<}+Z4B}!Q{Kvo*c zk0iu;EASbKyfMHe^&j%`&Ouh4q*PpFLPoJ6{OFPpXSC!!evwz;KTELkwp;u0nfGqI z1;kbT{r%5?4#gsE!^EW4#u8`F7Zn8d!1Ev=**i3phw^eq@y6pnZwMgW-Oi~*&p$2e0?srs0g5o zoYi&~s|J1Ta}J41skhQU^~w1uxYyBgegv}AE*b88#Y z1QvJP{ET^v>>3wqjvxNL_+N(E(V>{Z-a2(n^HD^v)SFg*^uEU3b?V0Lo{I92nSPDw z?Y+v&i<@QH)-Y)>FeFreAps8CN{S7L1})Is0X&LnJ+~Gv8^f=4b)2_3T$xA`1A*8D z``Z*S`E0A7ZBG^M(%eH`+K2WC?T^BIzp82{YsS9X?`(Q) z>|YJlWj#FZ8mVL25H|5QFW)=%eU%qEy+89p1-BHgkbqOnAUI!5;l>@XoHG@PlejI& z+V#3wss{=MJLCRDc{#V*bXz*I->mas;)yaaAd-R~i&$iTS68^n$8b}K3HpNyHx>`H z#l{B*2$9Ysb#i4#4M%59E63;9ibuzGjb{+=rGst-Wo;eW{W%HlrP9t-^;D^srmy_h z?qHd+r1XC2{P5EGo_S8c4#MVv&tQ=i=>w>*MYp^of@~2NqfntR@J9jw28$k;9BSU) z)pJ`)!MV@>{`!DeZ{@viKZ4kZHiImR*UQT@v>xtsa!NPr#a|y?CnVd?*JapNlZob( zdh1N?6XZNO2yW@M?Sv-+m39NshEYonM@}opV*cE?j*koJpRKtPGGp&W@*6zr&5+Kt zvse<}?xApe)=Q6KB9`2{Qe@3wiQf^39qORCe6#&I{rqsj@d# zFq%G^33=-jw6*fWx0m!l+zuxrHZrG5asww_)`=}XDaZR4WG~KY7hh=dF(TzY@>(QM z_uXfk7rgSXKE3WlzN+qI?WiSO?4}e!TDIN6voN{PD%DnHeE;y7@V#bRGyfyIRL-(^ z{L^OTx&7VJ`}Ixx@xqsr3snQ|(TPq}+0)ecEf+OpTKPY%YB3`lnf@N8IbWAnQTy`6 zXkS>GLQ1J+Mv`tjH=3=zk-NV?;x>Xkq(BHAA9s_9A8k5Yz^kHTT1H{XBpH;8mo>4R zf1|9`AgsE$aY;{kwn8=wU!JPWuz!pY9`ut*&)OO@UWwQwBnDV2YO`MR_Q%$dJxz8?>z&{PO2gt%(&w~C3 D>I7Vz From 30551a7b11cf67f16bfc068ebb8b29d8392e995e Mon Sep 17 00:00:00 2001 From: Max Stein Date: Thu, 19 Nov 2020 17:08:26 -0800 Subject: [PATCH 17/75] Updating MDM section --- .../mdm/images/unifiedenrollment-rs1-40.png | Bin 73763 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/client-management/mdm/images/unifiedenrollment-rs1-40.png diff --git a/windows/client-management/mdm/images/unifiedenrollment-rs1-40.png b/windows/client-management/mdm/images/unifiedenrollment-rs1-40.png deleted file mode 100644 index 87f685d460e3d96c14e561f578c97c134b81ba14..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 73763 zcmX_o1z1&0xHXCbigZbfw3Kv%9=bugySp1iy1P3Bq`SL2M7pFKq?>bx@Ba5c&m+j3 zeTLbyXWm)wTI(fPR$2tM{9goYY{r-6W)ctoH3_LWe06j%v9^QxRW>3Dn%+5pCP71c zeLGVd2UBY+7>qY0q@exnbGv}GjjNrhv55mr3Cai;Xhr_7)y`1&`O*&#rj~{R@3AQ+WKF5(ef2jF{k8 z1(&qLbmufop}U66)%F8@2i-L$fU7aK8TgZMMo97(*p#SA=atWvp6O?XmM zsF19pPfca|OvyPj_~@v$4gxpR&X0pA!5()6G4A0V7uO!d!e)|d{p%7JoZlrp;Kx2V)%K26>2{jX9>N3 z2&X4`)l@b$G4Va$l!E{nnTSVJQ4y=CC_s`D6^%wtHDPdc^r!pv@#glnUaeX***Nz zyEd*^pR{vGG>G8E*%i{?I>=NUL=Rxnhs$2S`UG1#`QqrY4YoD_OQ>_t!R~Lz3#Y@m zuZD((E}U<&1+j!k`1vy#_4`n9a6~jU37wh=6Nmj#Ukb^|V!l>QX!VZv;Ds34)x7$o zVkuV0pj}w;v=ec8+ohPVAG~;7PZ_Qs&i&gVQqc>cROe%GJKeBs1rzG12ujy5(NNX- zBVqW+8sF90`nzcblz6KOn^H@p+diD&7i-0m{-^_0VL4O;yl!!&>h<4bWl`0Te^ANA z4)!D)XABm~pDqPFP^09UBD?X4prNiakTw;2-rtFd`9oKm^ zSJ=TdZ~EWHK>;>zb84^aDJ*Jc)#b}Ricv1uwCVazE00^th$QUP7c{o(_an1eE?~Cg zhQf#|$YD}Qrw!~*=AuDZ4m!`MIJC)ejzdvPeh0c0$|jgMIOHgzKAj52NV9}|SYUbS zAHF?IL?ub}lQ{emUFt5|AULkh%?tW@atOT?{Y^Z4XIQZ4RA`<@y|8Uyad&jybb@0U zYY6wmt;tXrD*xrl4W50o)6se$u@^$2sFcq~A})u**_YESrOE9b+GuWL{!FRr`i_3N zwG5vY-eQUw25o1^p4|*%4*WRFI&c$oJ+^LqU4+^%9~>Z&TWS!@c37F>FBWNIf;r|+uJE+FYx#Saz&t*hx4&bOic|{R>uhhIO?dZtr)V$2i^I<^}Nl7KAR=68&Ff_DI z4DXknmE}2wZ0ve^SmB~(o(|VU`E54Dd&OPY>yD^%R@2Ggscv)S+Me3gr+O?IeqvD(zx;{yi-typ_u>%|N2JD7 z1TWItBiirWkB){$|9pG&&+IIF>Zg6&{Y_PNGEUCqo12@=GIwMqCZ;IES#}?t=o( z0)_8hAY=EnzpL$YKJX?GeIb~GO6pnAW=lj9?a=}Gxu@>s+e+;1(GA~>EuB#JDKfeb zqf`SPg~(vF&2#ju-&wSv?4YN&H##O}y|sRR#G_y;c-g9;vJy=!riD4mKs7%*do9T$ zt4+JI?nyjQp6F=p#;Ujr^%H+i?Vkwaa~kxIm9M(dOjTsmO6j!QY+rHBCb%wQ+X~Uh zH&jqUC`?-UOpds(WX9W{cALh0VBt+nO#Xe62KzcUn&(Nbdj7DrJQ;nO1u1cOOLKoL zHi%5@&!0cC^70!}v`fA>saMf#wu`=X3NCA9BE=sb&PmmNz86cUnSB2ETl3?0BPPZE1L+*p*!-f?>?E*7ehsHo>l@<|-Fe>=r3MYZ3B7SS?}U zht4JIL{rYwL5$nDJF*As!Fcdh)w>Ag^EH>h>RF2)+dqz`ZcOt;CTLGJTgrHi-eUfm z#Mrx(C3YxBzpRIN(iqev6OP0n7?TswbhiD-PT7uT`x?0wx=18Wk#>0ydBW^h{rh9B z&f?JTH^Szc^x2zl4Gjq;jD-r#J0BvmOV&*^1i=XJzg{FVBt7_~thQaYwH`F_ubnZe zA#!R+uw6aQIp>Q@rZ%88=L=ju&W@9h& zoq}}Esoe9qpq6(WKZ735Jy<{HZ_akVf?>(!Q&!vOxQ@@3q+ZJE*vi^OnTGgr;ch>( z{K>K7n!|=PGXZxgL#ocEX6B=nC6}d8)=RGv@F1CgmL7+0=b{!t{6Z z_k;DCv@$LyenW+uj!J@Ii4x6U zqNi<6Yo_GSsiO#MMBfkhvMvbR*FS?u{W&BD=2%nTGm^J8Gedv8warc}#{Ddi(ob+|zXW9E7CM8=D`D20ZQTgv?aw%P>L`f<1f00TsZJ*$Mm?=BI7&C68|Hc27adG?hK&3+wa%z;gExch4sY{ zY8Y$5F6Ov(+JT>HdHw_?%@dqqhiRtIOT72sRYPXb|6limVb-BMbFc8{*=@2A-hr1i z8_(mHHuE63)a5@T=twM{OcRyQ<0wah?rpX~1Alv?vF{)i{{d&O0qF$Gc^08WX8etB?YFCNz2 z>3ObNsnQ4qbCE>vp3RRn|IeR4M=j*@Q|?Fn#F!2y^Scj4+hv&htq&32EF>viJX=#b04`%LE7h%POOo%USm?{Ini?7i*j z;ZX=J@?oZ?e$RXB@Mn75y^)@tmyC8(;?!<6VlAF6%Qx3jK7-$>b{#g7q`*ii)2*Hx zIEWK5GNMoljfZoGZFV~8+Or@6htx-A=2#zCIK6L@T0%q!Z{8$s>zyZz#>L0i${xeP z@jJ6fnb$oEvAC!Olu}=(vxT+A!pcfQV;B1JuMNk0 z4xJCN3>hO;hQl_$$~xK<2}{^$3c~rppg3IqePCo{JW3aWgR}fW?|`YgR`n|}IzCy* z($Z4!z{pL_Q>i%q=Efy~UVW(P@}R|$6`e(jl$6(3%vk0lCu_2yL}I1my^^)&AIJ13 z&wFOuE9KD
ADMX_CredentialProviders/AllowDomainDelayLock
-
- ADMX_CredentialProviders/AllowSecurityKeySignIn -
ADMX_CredentialProviders/DefaultCredentialProvider
-
- ADMX_CredentialProviders/DefaultLogonDomain -
ADMX_CredentialProviders/ExcludedCredentialProviders
@@ -2546,81 +2540,30 @@ The following diagram shows the Policy configuration service provider in tree fo ### ADMX_UserProfiles policies
-
- ADMX_UserProfiles/AddAdminGroupToRUP -
ADMX_UserProfiles/CleanupProfiles
-
- ADMX_UserProfiles/CompatibleRUPSecurity -
-
- ADMX_UserProfiles/Connect_HomeDir_ToRoot -
-
- ADMX_UserProfiles/CscSuspendDirectories -
-
- ADMX_UserProfiles/DeleteRoamingCachedProfiles -
ADMX_UserProfiles/DontForceUnloadHive
-
- ADMX_UserProfiles/EnableSlowLinkDetect -
-
- ADMX_UserProfiles/EnableSlowLinkUI -
-
- ADMX_UserProfiles/ExcludeDirectories -
ADMX_UserProfiles/LeaveAppMgmtData
ADMX_UserProfiles/LimitSize
-
- ADMX_UserProfiles/LocalProfile -
-
- ADMX_UserProfiles/MachineProfilePath -
-
- ADMX_UserProfiles/PrimaryComputer_RUP -
-
- ADMX_UserProfiles/ProfileDlgTimeOut -
ADMX_UserProfiles/ProfileErrorAction
-
- ADMX_UserProfiles/ProfileUnloadTimeout -
-
- ADMX_UserProfiles/Readonlyuserprofile -
-
- ADMX_UserProfiles/SlowLinkDefault -
ADMX_UserProfiles/SlowLinkTimeOut
ADMX_UserProfiles/USER_HOME
-
- ADMX_UserProfiles/UploadHive -
ADMX_UserProfiles/UserInfoAccessAction
-
- ADMX_UserProfiles/WaitForNetwork -
### ADMX_W32Time policies diff --git a/windows/client-management/mdm/policy-csp-admx-credentialproviders.md b/windows/client-management/mdm/policy-csp-admx-credentialproviders.md index f01336f9ad..1dcc21ec35 100644 --- a/windows/client-management/mdm/policy-csp-admx-credentialproviders.md +++ b/windows/client-management/mdm/policy-csp-admx-credentialproviders.md @@ -25,15 +25,9 @@ manager: dansimp
ADMX_CredentialProviders/AllowDomainDelayLock
-
- ADMX_CredentialProviders/AllowSecurityKeySignIn -
ADMX_CredentialProviders/DefaultCredentialProvider
-
- ADMX_CredentialProviders/DefaultLogonDomain -
ADMX_CredentialProviders/ExcludedCredentialProviders
@@ -115,75 +109,6 @@ ADMX Info:
- -**ADMX_CredentialProviders/AllowSecurityKeySignIn** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to control whether users can sign in using external security keys. - -If you enable this policy setting, users can sign in with external security keys. - -If you disable or don't configure this policy setting, users can't sign in with external security keys. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Turn on security key sign-in* -- GP name: *AllowSecurityKeySignIn* -- GP path: *System\Logon* -- GP ADMX file name: *CredentialProviders.admx* - - - -
- **ADMX_CredentialProviders/DefaultCredentialProvider** @@ -256,74 +181,6 @@ ADMX Info:
- -**ADMX_CredentialProviders/DefaultLogonDomain** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting specifies a default logon domain, which might be a different domain than the domain to which the computer is joined. Without this policy setting, at logon, if a user does not specify a domain for logon, the domain to which the computer belongs is assumed as the default domain. For example if the computer belongs to the Fabrikam domain, the default domain for user logon is Fabrikam. - -If you enable this policy setting, the default logon domain is set to the specified domain, which might be different than the domain to which the computer is joined. - -If you disable or do not configure this policy setting, the default logon domain is always set to the domain to which the computer is joined. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Assign a default domain for logon* -- GP name: *DefaultLogonDomain* -- GP path: *System\Logon* -- GP ADMX file name: *CredentialProviders.admx* - - - -
**ADMX_CredentialProviders/ExcludedCredentialProviders** diff --git a/windows/client-management/mdm/policy-csp-admx-userprofiles.md b/windows/client-management/mdm/policy-csp-admx-userprofiles.md index 66677dde93..f435439049 100644 --- a/windows/client-management/mdm/policy-csp-admx-userprofiles.md +++ b/windows/client-management/mdm/policy-csp-admx-userprofiles.md @@ -22,170 +22,35 @@ manager: dansimp ## ADMX_UserProfiles policies
-
- ADMX_UserProfiles/AddAdminGroupToRUP -
ADMX_UserProfiles/CleanupProfiles
-
- ADMX_UserProfiles/CompatibleRUPSecurity -
-
- ADMX_UserProfiles/Connect_HomeDir_ToRoot -
-
- ADMX_UserProfiles/CscSuspendDirectories -
-
- ADMX_UserProfiles/DeleteRoamingCachedProfiles -
ADMX_UserProfiles/DontForceUnloadHive
-
- ADMX_UserProfiles/EnableSlowLinkDetect -
-
- ADMX_UserProfiles/EnableSlowLinkUI -
-
- ADMX_UserProfiles/ExcludeDirectories -
ADMX_UserProfiles/LeaveAppMgmtData
ADMX_UserProfiles/LimitSize
-
- ADMX_UserProfiles/LocalProfile -
-
- ADMX_UserProfiles/MachineProfilePath -
-
- ADMX_UserProfiles/PrimaryComputer_RUP -
-
- ADMX_UserProfiles/ProfileDlgTimeOut -
ADMX_UserProfiles/ProfileErrorAction
-
- ADMX_UserProfiles/ProfileUnloadTimeout -
-
- ADMX_UserProfiles/Readonlyuserprofile -
-
- ADMX_UserProfiles/SlowLinkDefault -
ADMX_UserProfiles/SlowLinkTimeOut
ADMX_UserProfiles/USER_HOME
-
- ADMX_UserProfiles/UploadHive -
ADMX_UserProfiles/UserInfoAccessAction
-
- ADMX_UserProfiles/WaitForNetwork -
- -**ADMX_UserProfiles/AddAdminGroupToRUP** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting adds the Administrator security group to the roaming user profile share. - -Once an administrator has configured a user's roaming profile, the profile will be created at the user's next login. The profile is created at the location that is specified by the administrator. - -For the Windows XP Professional and Windows 2000 Professional operating systems, the default file permissions for the newly generated profile are full control, or read and write access for the user, and no file access for the administrators group. - -By configuring this policy setting, you can alter this behavior. - -If you enable this policy setting, the administrator group is also given full control to the user's profile folder. - -If you disable or do not configure this policy setting, only the user is given full control of their user profile, and the administrators group has no file system access to this folder. - -> [!NOTE] -> If the policy setting is enabled after the profile is created, the policy setting has no effect. -> -> The policy setting must be configured on the client computer, not the server, for it to have any effect, because the client computer sets the file share permissions for the roaming profile at creation time. -> -> In the default case, administrators have no file access to the user's profile, but they may still take ownership of this folder to grant themselves file permissions. -> -> The behavior when this policy setting is enabled is exactly the same behavior as in Windows NT 4.0. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Add the Administrators security group to roaming user profiles* -- GP name: *AddAdminGroupToRUP* -- GP path: *System\User Profiles* -- GP ADMX file name: *UserProfiles.admx* - - - -
- **ADMX_UserProfiles/CleanupProfiles** @@ -255,301 +120,6 @@ ADMX Info:
- -**ADMX_UserProfiles/CompatibleRUPSecurity** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting disables the more secure default setting for the user's roaming user profile folder. - -After an administrator has configured a user's roaming profile, the profile will be created at the user's next login. The profile is created at the location that is specified by the administrator. - -For Windows 2000 Professional pre-SP4 and Windows XP pre-SP1 operating systems, the default file permissions for the newly generated profile are full control access for the user and no file access for the administrators group. No checks are made for the correct permissions if the profile folder already exists. For Windows Server 2003 family, Windows 2000 Professional SP4 and Windows XP SP1, the default behavior is to check the folder for the correct permissions if the profile folder already exists, and not copy files to or from the roaming folder if the permissions are not correct. - -By configuring this policy setting, you can alter this behavior. - -If you enable this policy setting Windows will not check the permissions for the folder in the case where the folder exists. - -If you disable or do not configure this policy setting AND the roaming profile folder exists AND the user or administrators group are not the owner of the folder, Windows will not copy files to or from the roaming folder. The user will be shown an error message and an entry will be written to the event log. The user's cached profile will be used, or a temporary profile issued if no cached profile exists. - -> [!NOTE] -> The policy setting must be configured on the client computer not the server for it to have any effect because the client computer sets the file share permissions for the roaming profile at creation time. -> -> The behavior when this policy setting is enabled is exactly the same behavior as in Windows 2000 Professional pre-SP4 and Windows XP Professional. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Do not check for user ownership of Roaming Profile Folders* -- GP name: *CompatibleRUPSecurity* -- GP path: *System\User Profiles* -- GP ADMX file name: *UserProfiles.admx* - - - -
- - -**ADMX_UserProfiles/Connect_HomeDir_ToRoot** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * User - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting restores the definitions of the %HOMESHARE% and %HOMEPATH% environment variables to those used in Windows NT 4.0 and earlier. Along with %HOMEDRIVE%, these variables define the home directory of a user profile. The home directory is a persistent mapping of a drive letter on the local computer to a local or remote directory. - -If you enable this policy setting, the system uses the Windows NT 4.0 definitions. %HOMESHARE% stores only the network share (such as \\\server\share). %HOMEPATH% stores the remainder of the fully qualified path to the home directory (such as \dir1\dir2\homedir). As a result, users can access any directory on the home share by using the home directory drive letter. - -If you disable or do not configure this policy setting, the system uses the definitions introduced with Windows 2000. %HOMESHARE% stores the fully qualified path to the home directory (such as \\\\server\share\dir1\dir2\homedir). Users can access the home directory and any of its subdirectories from the home drive letter, but they cannot see or access its parent directories. %HOMEPATH% stores a final backslash and is included for compatibility with earlier systems. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Connect home directory to root of the share* -- GP name: *Connect_HomeDir_ToRoot* -- GP path: *System\User Profiles* -- GP ADMX file name: *UserProfiles.admx* - - - -
- - -**ADMX_UserProfiles/CscSuspendDirectories** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * User - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify which network directories will be synchronized only at logon and logoff via Offline Files. This policy setting is meant to be used in conjunction with Folder Redirection, to help resolve issues with applications that do not work well with Offline Files while the user is online. - -If you enable this policy setting, the network paths specified in this policy setting will be synchronized only by Offline Files during user logon and logoff, and will be taken offline while the user is logged on. - -If you disable or do not configure this policy setting, the paths specified in this policy setting will behave like any other cached data via Offline Files and continue to remain online while the user is logged on, if the network paths are accessible. - -> [!NOTE] -> You should not use this policy setting to suspend any of the root redirected folders such as Appdata\Roaming, Start Menu, and Documents. You should suspend only the subfolders of these parent folders. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Specify network directories to sync at logon/logoff time only* -- GP name: *CscSuspendDirectories* -- GP path: *System\User Profiles* -- GP ADMX file name: *UserProfiles.admx* - - - -
- - -**ADMX_UserProfiles/DeleteRoamingCachedProfiles** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether Windows keeps a copy of a user's roaming profile on the local computer's hard drive when the user logs off. - -Roaming profiles reside on a network server. By default, when users with roaming profiles log off, the system also saves a copy of their roaming profile on the hard drive of the computer they are using in case the server that stores the roaming profile is unavailable when the user logs on again. The local copy is also used when the remote copy of the roaming user profile is slow to load. - -If you enable this policy setting, any local copies of the user's roaming profile are deleted when the user logs off. The roaming profile still remains on the network server that stores it. - -If you disable or do not configure this policy setting, Windows keeps a copy of a user's roaming profile on the local computer's hard drive when the user logs off. - -> [!IMPORTANT] -> Do not enable this policy setting if you are using the slow link detection feature. To respond to a slow link, the system requires a local copy of the user's roaming profile. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Delete cached copies of roaming profiles* -- GP name: *DeleteRoamingCachedProfiles* -- GP path: *System\User Profiles* -- GP ADMX file name: *UserProfiles.admx* - - - -
- **ADMX_UserProfiles/DontForceUnloadHive** @@ -621,233 +191,6 @@ ADMX Info:
- -**ADMX_UserProfiles/EnableSlowLinkDetect** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting disables the detection of slow network connections. - -Slow link detection measures the speed of the connection between a user's computer and the remote server that stores the roaming user profile. When the system detects a slow link, the related policy settings in this folder tell the computer how to respond. - -If you enable this policy setting, the system does not detect slow connections or recognize any connections as being slow. As a result, the system does not respond to slow connections to user profiles, and it ignores the policy settings that tell the system how to respond to a slow connection. - -If you disable this policy setting or do not configure it, slow link detection is enabled. The system measures the speed of the connection between the user's computer and profile server. If the connection is slow (as defined by the "Slow network connection timeout for user profiles" policy setting), the system applies the other policy settings set in this folder to determine how to proceed. By default, when the connection is slow, the system loads the local copy of the user profile. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Disable detection of slow network connections* -- GP name: *EnableSlowLinkDetect* -- GP path: *System\User Profiles* -- GP ADMX file name: *UserProfiles.admx* - - - -
- - -**ADMX_UserProfiles/EnableSlowLinkUI** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting provides users with the ability to download their roaming profile, even when a slow network connection with their roaming profile server is detected. - -If you enable this policy setting, users will be allowed to define whether they want their roaming profile to be downloaded when a slow link with their roaming profile server is detected. - -In operating systems earlier than Microsoft Windows Vista, a dialog box will be shown to the user during logon if a slow network connection is detected. The user then is able to choose to download the remote copy of the user profile. In Microsoft Windows Vista, a check box appears on the logon screen and the user must choose whether to download the remote user profile before Windows detects the network connection speed. - -If you disable or do not configure this policy setting, the system does not consult the user. Instead, the system uses the local copy of the user profile. If you have enabled the "Wait for remote user profile" policy setting, the system downloads the remote copy of the user profile without consulting the user. In Microsoft Windows Vista, the system will ignore the user choice made on the logon screen. - -> [!NOTE] -> This policy setting and related policy settings in this folder define the system's response when roaming user profiles are slow to download. To adjust the time within which the user must respond to this notice in operating systems earlier than Microsoft Windows Vista, use the "Timeout for dialog boxes" policy setting. - -> [!IMPORTANT] -> If the "Do not detect slow network connections" setting is enabled, this policy setting is ignored. Also, if the "Delete cached copies of roaming profiles" policy setting is enabled, there is no local copy of the roaming profile to load when the system detects a slow connection. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Prompt user when a slow network connection is detected* -- GP name: *EnableSlowLinkUI* -- GP path: *System\User Profiles* -- GP ADMX file name: *UserProfiles.admx* - - - -
- - -**ADMX_UserProfiles/ExcludeDirectories** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * User - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting lets you exclude folders that are normally included in the user's profile. As a result, these folders do not need to be stored by the network server on which the profile resides and do not follow users to other computers. - -> [!NOTE] -> When excluding content from the profile you should try to exclude the narrowest set of data that will address your needs. For example, if there is one application with data that should not be roamed then add only that application's specific folder under the AppData\Roaming folder rather than all of the AppData\Roaming folder to the exclusion list. - -By default, the Appdata\Local and Appdata\LocalLow folders and all their subfolders such as the History, Temp, and Temporary Internet Files folders are excluded from the user's roaming profile. - -In operating systems earlier than Microsoft Windows Vista, only the History, Local Settings, Temp, and Temporary Internet Files folders are excluded from the user's roaming profile by default. - -If you enable this policy setting, you can exclude additional folders. - -If you disable this policy setting or do not configure it, only the default folders are excluded. - -> [!NOTE] -> You cannot use this policy setting to include the default folders in a roaming user profile. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Exclude directories in roaming profile* -- GP name: *ExcludeDirectories* -- GP path: *System\User Profiles* -- GP ADMX file name: *UserProfiles.admx* - - - -
- **ADMX_UserProfiles/LeaveAppMgmtData** @@ -1000,307 +343,6 @@ ADMX Info:
- -**ADMX_UserProfiles/LocalProfile** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Available in the latest Windows 10 Insider Preview Build. This setting determines if roaming user profiles are available on a particular computer. By default, when roaming profile users log on to a computer, their roaming profile is copied down to the local computer. If they have already logged on to this computer in the past, the roaming profile is merged with the local profile. Similarly, when the user logs off this computer, the local copy of their profile, including any changes they have made, is merged with the server copy of their profile. - -Using the setting, you can prevent users configured to use roaming profiles from receiving their profile on a specific computer. - -If you enable this setting, the following occurs on the affected computer: At first logon, the user receives a new local profile, rather than the roaming profile. At logoff, changes are saved to the local profile. All subsequent logons use the local profile. - -If you disable this setting or do not configure it, the default behavior occurs, as indicated above. - -If you enable both the "Prevent Roaming Profile changes from propagating to the server" setting and the "Only allow local user profiles" setting, roaming profiles are disabled. - -> [!NOTE] -> This setting only affects roaming profile users. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Only allow local user profiles* -- GP name: *LocalProfile* -- GP path: *System\User Profiles* -- GP ADMX file name: *UserProfiles.admx* - - - -
- - -**ADMX_UserProfiles/MachineProfilePath** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows should use the specified network path as the roaming user profile path for all users logging onto this computer. - -To use this policy setting, type the path to the network share in the form \\\\Computername\Sharename\. It is recommended to use a path such as \\\\Computername\Sharename\%USERNAME% to give each user an individual profile folder. If not specified, all users logging onto this computer will use the same roaming profile folder as specified by this policy. You need to ensure that you have set the appropriate security on the folder to allow all users to access the profile. - -If you enable this policy setting, all users logging on this computer will use the roaming profile path specified in this policy. - -If you disable or do not configure this policy setting, users logging on this computer will use their local profile or standard roaming user profile. - -> [!NOTE] -> There are four ways to configure a roaming profile for a user. Windows reads profile configuration in the following order and uses the first configured policy setting it reads. - -1. Terminal Services roaming profile path specified by Terminal Services policy -2. Terminal Services roaming profile path specified by the user object -3. A per-computer roaming profile path specified in this policy -4. A per-user roaming profile path specified in the user object - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Set roaming profile path for all users logging onto this computer* -- GP name: *MachineProfilePath* -- GP path: *System\User Profiles* -- GP ADMX file name: *UserProfiles.admx* - - - -
- - -**ADMX_UserProfiles/PrimaryComputer_RUP** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting controls on a per-computer basis whether roaming profiles are downloaded on a user's primary computers only. This policy setting is useful to improve logon performance and to increase security for user data on computers where the user might not want to download private data, such as on a meeting room computer or on a computer in a remote office. - -To designate a user's primary computers, an administrator must use management software or a script to add primary computer attributes to the user's account in Active Directory Domain Services (AD DS). This policy setting also requires the Windows Server 2012 version of the Active Directory schema to function. - -If you enable this policy setting and the user has a roaming profile, the roaming profile is downloaded on the user's primary computer only. - -If you disable or do not configure this policy setting and the user has a roaming profile, the roaming profile is downloaded on every computer that the user logs on to. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Download roaming profiles on primary computers only* -- GP name: *PrimaryComputer_RUP* -- GP path: *System\User Profiles* -- GP ADMX file name: *UserProfiles.admx* - - - -
- - -**ADMX_UserProfiles/ProfileDlgTimeOut** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting controls how long Windows waits for a user response before it uses a default user profile for roaming user profiles. - -The default user profile is applied when the user does not respond to messages explaining that any of the following events has occurred: - -- The system detects a slow connection between the user's computer and the server that stores users' roaming user profiles. -- The system cannot access users' server-based profiles when users log on or off. -- Users' local profiles are newer than their server-based profiles. - -If you enable this policy setting, you can override the amount of time Windows waits for user input before using a default user profile for roaming user profiles. The default timeout value is 30 seconds. To use this policy setting, type the number of seconds Windows should wait for user input. The minumum value is 0 seconds, and the maximum is 600 seconds. - -If you disable or do not configure this policy setting, Windows waits 30 seconds for user input before applying the default user profile . - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Establish timeout value for dialog boxes* -- GP name: *ProfileDlgTimeOut* -- GP path: *System\User Profiles* -- GP ADMX file name: *UserProfiles.admx* - - - -
- **ADMX_UserProfiles/ProfileErrorAction** @@ -1374,241 +416,6 @@ ADMX Info:
- -**ADMX_UserProfiles/ProfileUnloadTimeout** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting determines how many times the system tries to unload and update the registry portion of a user profile. When the number of trials specified by this policy setting is exhausted, the system stops trying. As a result, the user profile might not be current, and local and roaming user profiles might not match. - -When a user logs off of the computer, the system unloads the user-specific section of the registry (HKEY_CURRENT_USER) into a file (NTUSER.DAT) and updates it. However, if another program or service is reading or editing the registry, the system cannot unload it. The system tries repeatedly (at a rate of once per second) to unload and update the registry settings. By default, the system repeats its periodic attempts 60 times (over the course of one minute). - -If you enable this policy setting, you can adjust the number of times the system tries to unload and update the user's registry settings. (You cannot adjust the retry rate.) - -If you disable this policy setting or do not configure it, the system repeats its attempt 60 times. - -If you set the number of retries to 0, the system tries just once to unload and update the user's registry settings. It does not try again. - -> [!NOTE] -> This policy setting is particularly important to servers running Remote Desktop Services. Because Remote Desktop Services edits the users' registry settings when they log off, the system's first few attempts to unload the user settings are more likely to fail. - -This policy setting does not affect the system's attempts to update the files in the user profile. - -> [!TIP] -> Consider increasing the number of retries specified in this policy setting if there are many user profiles stored in the computer's memory. This indicates that the system has not been able to unload the profile. - -Also, check the Application Log in Event Viewer for events generated by Userenv. The system records an event whenever it tries to unload the registry portion of the user profile. The system also records an event when it fails to update the files in a user profile. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Maximum retries to unload and update user profile* -- GP name: *ProfileUnloadTimeout* -- GP path: *System\User Profiles* -- GP ADMX file name: *UserProfiles.admx* - - - -
- - -**ADMX_UserProfiles/Readonlyuserprofile** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting determines if the changes a user makes to their roaming profile are merged with the server copy of their profile. - -By default, when a user with a roaming profile logs on to a computer, the roaming profile is copied down to the local computer. If the user has logged on to the computer in the past, the roaming profile is merged with the local profile. Similarly, when the user logs off the computer, the local copy of their profile, including any changes, is merged with the server copy of the profile. - -Using this policy setting, you can prevent changes made to a roaming profile on a particular computer from being persisted. - -If you enable this policy setting, changes a user makes to their roaming profile aren't merged with the server (roaming) copy when the user logs off. - -If you disable or not configure this policy setting, the default behavior occurs, as indicated above. - -> [!NOTE] -> This policy setting only affects roaming profile users. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Prevent Roaming Profile changes from propagating to the server* -- GP name: *Readonlyuserprofile* -- GP path: *System\User Profiles* -- GP ADMX file name: *UserProfiles.admx* - - - -
- - -**ADMX_UserProfiles/SlowLinkDefault** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting directs the system to wait for the remote copy of the roaming user profile to load, even when loading is slow. Also, the system waits for the remote copy when the user is notified about a slow connection, but does not respond in the time allowed. - -This policy setting and related policy settings in this folder together define the system's response when roaming user profiles are slow to load. - -If you enable this policy setting, the system waits for the remote copy of the roaming user profile to load, even when loading is slow. - -If you disable this policy setting or do not configure it, when a remote profile is slow to load, the system loads the local copy of the roaming user profile. The local copy is also used when the user is consulted (as set in the "Prompt user when slow link is detected" policy setting), but does not respond in the time allowed (as set in the "Timeout for dialog boxes" policy setting). - -Waiting for the remote profile is appropriate when users move between computers frequently and the local copy of their profile is not always current. Using the local copy is desirable when quick logging on is a priority. - -> [!IMPORTANT] -> If the "Do not detect slow network connections" policy setting is enabled, this policy setting is ignored. Also, if the "Delete cached copies of roaming profiles" policy setting is enabled, there is no local copy of the roaming profile to load when the system detects a slow connection. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Wait for remote user profile* -- GP name: *SlowLinkDefault* -- GP path: *System\User Profiles* -- GP ADMX file name: *UserProfiles.admx* - - - -
- **ADMX_UserProfiles/SlowLinkTimeOut** @@ -1760,84 +567,6 @@ ADMX Info:
- -**ADMX_UserProfiles/UploadHive** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting sets the schedule for background uploading of a roaming user profile's registry file (ntuser.dat). This policy setting controls only the uploading of a roaming user profile's registry file (other user data and regular profiles are not be uploaded) and uploads it only if the user is logged on. This policy setting does not stop the roaming user profile's registry file from being uploaded at user logoff. - -If "Run at set interval" is chosen, then an interval must be set, with a value of 1-720 hours. Once set, Windows uploads the profile's registry file at the specified interval after the user logs on. For example, with a value of 6 hours, the registry file of the roaming user profile is uploaded to the server every six hours while the user is logged on. - -If "Run at specified time of day" is chosen, then a time of day must be specified. Once set, Windows uploads the registry file at the same time every day, as long as the user is logged on. - -For both scheduling options, there is a random one hour delay attached per-trigger to avoid overloading the server with simultaneous uploads. For example, if the settings dictate that the user's registry file is to be uploaded at 6pm, it will actually upload at a random time between 6pm and 7pm. - -> [!NOTE] -> If "Run at set interval" is selected, the "Time of day" option is disregarded. Likewise, if "Run at set time of day" is chosen, the "Interval (hours)" option is disregarded. - -If you enable this policy setting, Windows uploads the registry file of the user's roaming user profile in the background according to the schedule set here while the user is logged on. Regular profiles are not affected. - -If this setting is disabled or not configured, the registry file for a roaming user profile will not be uploaded in the background while the user is logged on. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Set the schedule for background upload of a roaming user profile's registry file while user is logged on* -- GP name: *UploadHive* -- GP path: *System\User Profiles* -- GP ADMX file name: *UserProfiles.admx* - - - -
- **ADMX_UserProfiles/UserInfoAccessAction** @@ -1909,78 +638,7 @@ ADMX Info: -
- -**ADMX_UserProfiles/WaitForNetwork** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Windows EditionSupported?
Homecross mark
Procross mark
Businesscross mark
Enterprisecheck mark
Educationcross mark
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Available in the latest Windows 10 Insider Preview Build. This policy setting controls how long Windows waits for a response from the network before logging on a user without a remote home directory and withou synchronizing roaming user profiles. This policy setting is useful for the cases in which a network might take typically longer to initialize, such as with a wireless network. - -> [!NOTE] -> Windows doesn't wait for the network if the physical network connection is not available on the computer (if the media is disconnected or the network adapter is not available). - -If you enable this policy setting, Windows waits for the network to become available up to the maximum wait time specified in this policy setting. Setting the value to zero causes Windows to proceed without waiting for the network. - -If you disable or do not configure this policy setting, Windows waits for the network for a maximum of 30 seconds. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Set maximum wait time for the network if a user has a roaming user profile or remote home directory* -- GP name: *WaitForNetwork* -- GP path: *System\User Profiles* -- GP ADMX file name: *UserProfiles.admx* - - -
Footnotes: From 2300d2685d03f0f95835c36f5b8bf8c505bcee40 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Sat, 21 Nov 2020 11:30:56 +0530 Subject: [PATCH 22/75] fixed typo error as per the user report #8683, so I replaced grin to erin and hagens to havens. --- .../password-must-meet-complexity-requirements.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements.md b/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements.md index 54140d60f7..d9e0d8d50b 100644 --- a/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements.md +++ b/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements.md @@ -30,7 +30,7 @@ The **Passwords must meet complexity requirements** policy setting determines wh 1. Passwords may not contain the user's samAccountName (Account Name) value or entire displayName (Full Name value). Both checks are not case sensitive. The samAccountName is checked in its entirety only to determine whether it is part of the password. If the samAccountName is fewer than three characters long, this check is skipped. - The displayName is parsed for delimiters: commas, periods, dashes or hyphens, underscores, spaces, pound signs, and tabs. If any of these delimiters are found, the displayName is split and all parsed sections (tokens) are confirmed not to be included in the password. Tokens that are shorter than three characters are ignored, and substrings of the tokens are not checked. For example, the name "Erin M. Hagens" is split into three tokens: "Erin", "M", and "Havens". Because the second token is only one character long, it is ignored. Therefore, this user could not have a password that included either "grin" or "hagens" as a substring anywhere in the password. + The displayName is parsed for delimiters: commas, periods, dashes or hyphens, underscores, spaces, pound signs, and tabs. If any of these delimiters are found, the displayName is split and all parsed sections (tokens) are confirmed not to be included in the password. Tokens that are shorter than three characters are ignored, and substrings of the tokens are not checked. For example, the name "Erin M. Hagens" is split into three tokens: "Erin", "M", and "Havens". Because the second token is only one character long, it is ignored. Therefore, this user could not have a password that included either "erin" or "havens" as a substring anywhere in the password. 2. The password contains characters from three of the following categories: From 41951448fa0304188a0e30cfffcced9b4e5d689b Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Mon, 23 Nov 2020 01:25:45 +0100 Subject: [PATCH 23/75] Update block-untrusted-fonts-in-enterprise.md MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit As reported in issue ticket #8687 (Dead link to Dropping the “Untrusted Font Blocking” setting), the outdated link to blogs.technet.microsoft.com just leads to a 404 error and no proper redirect to the existing article. Thanks to KalleOlaviNiemitalo for noticing, reporting the issue and suggesting the link to the correct page. Proposed change: - replace the blogs.technet.microsoft.com URL with a working techcommunity.microsoft.com URL Whitespace changes: - add missing MarkDown indent marker compatibility spacing - normalize bullet point list spacing (from 3 down to 1) - remove any end-of-line blank space Closes #8687 --- .../block-untrusted-fonts-in-enterprise.md | 66 +++++++++---------- 1 file changed, 30 insertions(+), 36 deletions(-) diff --git a/windows/security/threat-protection/block-untrusted-fonts-in-enterprise.md b/windows/security/threat-protection/block-untrusted-fonts-in-enterprise.md index 70362c9d1c..a26f59d1ed 100644 --- a/windows/security/threat-protection/block-untrusted-fonts-in-enterprise.md +++ b/windows/security/threat-protection/block-untrusted-fonts-in-enterprise.md @@ -2,7 +2,7 @@ title: Block untrusted fonts in an enterprise (Windows 10) description: To help protect your company from attacks which may originate from untrusted or attacker controlled font files, we’ve created the Blocking Untrusted Fonts feature. ms.assetid: a3354c8e-4208-4be6-bc19-56a572c361b4 -ms.reviewer: +ms.reviewer: manager: dansimp keywords: font blocking, untrusted font blocking, block fonts, untrusted fonts ms.prod: w10 @@ -19,9 +19,9 @@ ms.localizationpriority: medium **Applies to:** -- Windows 10 +- Windows 10 ->Learn more about what features and functionality are supported in each Windows edition at [Compare Windows 10 Editions](https://www.microsoft.com/WindowsForBusiness/Compare). +> Learn more about what features and functionality are supported in each Windows edition at [Compare Windows 10 Editions](https://www.microsoft.com/WindowsForBusiness/Compare). To help protect your company from attacks which may originate from untrusted or attacker controlled font files, we’ve created the Blocking Untrusted Fonts feature. Using this feature, you can turn on a global setting that stops your employees from loading untrusted fonts processed using the Graphics Device Interface (GDI) onto your network. Untrusted fonts are any font installed outside of the `%windir%/Fonts` directory. Blocking untrusted fonts helps prevent both remote (web-based or email-based) and local EOP attacks that can happen during the font file-parsing process. @@ -31,24 +31,24 @@ Blocking untrusted fonts helps improve your network and employee protection agai ## How does this feature work? There are 3 ways to use this feature: -- **On.** Helps stop any font processed using GDI from loading outside of the `%windir%/Fonts` directory. It also turns on event logging. +- **On.** Helps stop any font processed using GDI from loading outside of the `%windir%/Fonts` directory. It also turns on event logging. -- **Audit.** Turns on event logging, but doesn’t block fonts from loading, regardless of location. The name of the apps that use untrusted fonts appear in your event log.

**Note**
If you aren’t quite ready to deploy this feature into your organization, you can run it in Audit mode to see if not loading untrusted fonts causes any usability or compatibility issues. +- **Audit.** Turns on event logging, but doesn’t block fonts from loading, regardless of location. The name of the apps that use untrusted fonts appear in your event log.

**Note**
If you aren’t quite ready to deploy this feature into your organization, you can run it in Audit mode to see if not loading untrusted fonts causes any usability or compatibility issues. -- **Exclude apps to load untrusted fonts.** You can exclude specific apps, allowing them to load untrusted fonts, even while this feature is turned on. For instructions, see [Fix apps having problems because of blocked fonts](#fix-apps-having-problems-because-of-blocked-fonts). +- **Exclude apps to load untrusted fonts.** You can exclude specific apps, allowing them to load untrusted fonts, even while this feature is turned on. For instructions, see [Fix apps having problems because of blocked fonts](#fix-apps-having-problems-because-of-blocked-fonts). ## Potential reductions in functionality After you turn this feature on, your employees might experience reduced functionality when: -- Sending a print job to a remote printer server that uses this feature and where the spooler process hasn’t been specifically excluded. In this situation, any fonts that aren’t already available in the server’s %windir%/Fonts folder won’t be used. +- Sending a print job to a remote printer server that uses this feature and where the spooler process hasn’t been specifically excluded. In this situation, any fonts that aren’t already available in the server’s %windir%/Fonts folder won’t be used. -- Printing using fonts provided by the installed printer’s graphics .dll file, outside of the %windir%/Fonts folder. For more information, see [Introduction to Printer Graphics DLLs](https://go.microsoft.com/fwlink/p/?LinkId=522302). +- Printing using fonts provided by the installed printer’s graphics .dll file, outside of the %windir%/Fonts folder. For more information, see [Introduction to Printer Graphics DLLs](https://go.microsoft.com/fwlink/p/?LinkId=522302). -- Using first or third-party apps that use memory-based fonts. +- Using first or third-party apps that use memory-based fonts. -- Using Internet Explorer to look at websites that use embedded fonts. In this situation, the feature blocks the embedded font, causing the website to use a default font. However, not all fonts have all of the characters, so the website might render differently. +- Using Internet Explorer to look at websites that use embedded fonts. In this situation, the feature blocks the embedded font, causing the website to use a default font. However, not all fonts have all of the characters, so the website might render differently. -- Using desktop Office to look at documents with embedded fonts. In this situation, content shows up using a default font picked by Office. +- Using desktop Office to look at documents with embedded fonts. In this situation, content shows up using a default font picked by Office. ## Turn on and use the Blocking Untrusted Fonts feature Use Group Policy or the registry to turn this feature on, off, or to use audit mode. @@ -58,7 +58,7 @@ Use Group Policy or the registry to turn this feature on, off, or to use audit m 2. Click **Enabled** to turn the feature on, and then click one of the following **Migitation Options**: - - **Block untrusted fonts and log events.** Turns the feature on, blocking untrusted fonts and logging installation attempts to the event log. + - **Block untrusted fonts and log events.** Turns the feature on, blocking untrusted fonts and logging installation attempts to the event log. - **Do not block untrusted fonts.** Turns the feature on, but doesn't block untrusted fonts nor does it log installation attempts to the event log. @@ -73,9 +73,9 @@ To turn this feature on, off, or to use audit mode: 2. If the **MitigationOptions** key isn't there, right-click and add a new **QWORD (64-bit) Value**, renaming it to **MitigationOptions**. -3. Right click on the **MitigationOptions** key, and then click **Modify**. +3. Right click on the **MitigationOptions** key, and then click **Modify**. - The **Edit QWORD (64-bit) Value** box opens. + The **Edit QWORD (64-bit) Value** box opens. 4. Make sure the **Base** option is **Hexadecimal**, and then update the **Value data**, making sure you keep your existing value, like in the important note below: @@ -85,8 +85,8 @@ To turn this feature on, off, or to use audit mode: - **To audit with this feature.** Type **3000000000000**. - >[!Important] - >Your existing **MitigationOptions** values should be saved during your update. For example, if the current value is *1000*, your updated value should be *1000000001000*. + > [!Important] + > Your existing **MitigationOptions** values should be saved during your update. For example, if the current value is *1000*, your updated value should be *1000000001000*. 5. Restart your computer. @@ -104,27 +104,27 @@ After you turn this feature on, or start using Audit mode, you can look at your FontType: Memory
FontPath:
Blocked: true - - >[!NOTE] - >Because the **FontType** is *Memory*, there’s no associated **FontPath**. + + > [!NOTE] + > Because the **FontType** is *Memory*, there’s no associated **FontPath**. **Event Example 2 - Winlogon**
Winlogon.exe attempted loading a font that is restricted by font-loading policy.
FontType: File
FontPath: `\??\C:\PROGRAM FILES (X86)\COMMON FILES\MICROSOFT SHARED\EQUATION\MTEXTRA.TTF`
Blocked: true - - >[!NOTE] - >Because the **FontType** is *File*, there’s also an associated **FontPath**. + + > [!NOTE] + > Because the **FontType** is *File*, there’s also an associated **FontPath**. **Event Example 3 - Internet Explorer running in Audit mode**
Iexplore.exe attempted loading a font that is restricted by font-loading policy.
FontType: Memory
FontPath:
Blocked: false - - >[!NOTE] - >In Audit mode, the problem is recorded, but the font isn’t blocked. + + > [!NOTE] + > In Audit mode, the problem is recorded, but the font isn’t blocked. ## Fix apps having problems because of blocked fonts Your company may still need apps that are having problems because of blocked fonts, so we suggest that you first run this feature in Audit mode to determine which fonts are causing the problems. @@ -133,21 +133,15 @@ After you figure out the problematic fonts, you can try to fix your apps in 2 wa **To fix your apps by installing the problematic fonts (recommended)** -- On each computer with the app installed, right-click on the font name and click **Install**.

The font should automatically install into your `%windir%/Fonts` directory. If it doesn’t, you’ll need to manually copy the font files into the **Fonts** directory and run the installation from there. +- On each computer with the app installed, right-click on the font name and click **Install**.

The font should automatically install into your `%windir%/Fonts` directory. If it doesn’t, you’ll need to manually copy the font files into the **Fonts** directory and run the installation from there. **To fix your apps by excluding processes** -1. On each computer with the app installed, open regedit.exe and go to `HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\`.

For example, if you want to exclude Microsoft Word processes, you’d use `HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Winword.exe`. +1. On each computer with the app installed, open regedit.exe and go to `HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\`.

For example, if you want to exclude Microsoft Word processes, you’d use `HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Winword.exe`. + +2. Add any additional processes that need to be excluded here, and then turn the Blocking untrusted fonts feature on, using the steps in the [Turn on and use the Blocking Untrusted Fonts feature](#turn-on-and-use-the-blocking-untrusted-fonts-feature) section of this topic. -2. Add any additional processes that need to be excluded here, and then turn the Blocking untrusted fonts feature on, using the steps in the [Turn on and use the Blocking Untrusted Fonts feature](#turn-on-and-use-the-blocking-untrusted-fonts-feature) section of this topic. - ## Related content -- [Dropping the “Untrusted Font Blocking” setting](https://blogs.technet.microsoft.com/secguide/2017/06/15/dropping-the-untrusted-font-blocking-setting/) - - - - - - +- [Dropping the “Untrusted Font Blocking” setting](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/dropping-the-quot-untrusted-font-blocking-quot-setting/ba-p/701068/) From 3ce9d29020d43cec8f85f734293c61e7d4e54453 Mon Sep 17 00:00:00 2001 From: Alekhya Jupudi Date: Tue, 24 Nov 2020 11:39:12 +0530 Subject: [PATCH 24/75] Add DISM command 4610206 As per the PR (#8680) suggestion, I am creating this new branch to solve the issue. --- .../symantec-to-microsoft-defender-atp-setup.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index f36e72d95c..72f73b2448 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -68,6 +68,12 @@ Now that you're moving from Symantec to Microsoft Defender for Endpoint, you'll `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
`Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
+> [!NOTE] +> When using the DISM command within a task sequence running PS, the following path to cmd.exe is required. +> Example:
+> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
+> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
+ 3. To verify Microsoft Defender Antivirus is running, use the following PowerShell cmdlet:
`Get-Service -Name windefend` From 2015a7ce2829bbc4b29f754f7d34411494ddc263 Mon Sep 17 00:00:00 2001 From: schmurky Date: Tue, 24 Nov 2020 15:28:16 +0800 Subject: [PATCH 25/75] New updates --- .../linux-support-perf.md | 42 +++++++++++++------ 1 file changed, 29 insertions(+), 13 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md index d0a4e97401..86995376ac 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md @@ -78,32 +78,48 @@ The following steps can be used to troubleshoot and mitigate these issues: To collect current statistics, run: ```bash - mdatp diagnostic real-time-protection-statistics --output json > real_time_protection_logs + mdatp diagnostic real-time-protection-statistics --output json > real_time_protection.json ``` > [!NOTE] > Using ```--output json``` (note the double dash) ensures that the output format is ready for parsing. The output of this command will show all processes and their associated scan activity. -3. You can then run a script to parse the output. - - To do this, in your Windows system, create a folder in ```C:\temp\High_CPU_util_parser_for_Linux```. +3. On your Linux system, download the sample Python parser **high_cpu_parser.py**. + ```bash + wget -c https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/diagnostic/high_cpu_parser.py + ``` + The output of this command should be something similar to: - Save the output file ```real_time_protection_logs``` from your Linux system to the created folder. + ```Output + --2020-11-14 11:27:27-- https://raw.githubusercontent.com/microsoft.mdatp-xplat/master/linus/diagnostic/high_cpu_parser.py + Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 151.101.196.133 + Connecting to raw.githubusercontent.com (raw.githubusercontent.com)| 151.101.196.133| :443... connected. + HTTP request sent, awaiting response... 200 OK + Length: 1020 [text/plain] + Saving to: 'high_cpu_parser.py' - You can then use this sample PowerShell script to parse the```real_time_protection_logs```. Save this script as ```MDATP_Linux_High_CPU_parser.ps1``` in ```C:\temp\High_CPU_util_parser_for_Linux```. - The output of this command will show all processes and their associated scan activity. To improve the performance of Defender for Endpoint for Linux, locate the one with the highest number under the `Total files scanned` row and add an exclusion for it. For more information, see [Configure and validate exclusions for Defender for Endpoint for Linux](linux-exclusions.md). + 100%[===========================================>] 1,020 --.-K/s in 0s + ``` +4. Next, type the following commands: + ```bash + chmod +x high_cpu_parser.py + ``` + ```bash + cat real_time_protection.json | python high_cpu_parser.py > real_time_protection.log + ``` - Run the PowerShell script as admin. The script launches a Microsoft Excel file. The Excel file shows the list of processes with the most activity arranged in descending order. From here you can analyze which processes to exclude. + The output of the above command displays all the processes and their associated scan activity. + + To improve the performance of Defender for Endpoint for Linux, locate the one with the highest number under the `Total files scanned` row and add an exclusion for it. For more information, see [Configure and validate exclusions for Defender for Endpoint for Linux](linux-exclusions.md). + + > [!NOTE] > The application stores statistics in memory and only keeps track of file activity since it was started and real-time protection was enabled. Processes that were launched before or during periods when real time protection was off are not counted. Additionally, only events which triggered scans are counted. -4. Configure Microsoft Defender ATP for Linux with exclusions for the processes or disk locations that contribute to the performance issues. For more information, see [Configure and validate exclusions for Microsoft Defender ATP for Linux](linux-exclusions.md). +5. Configure Microsoft Defender ATP for Linux with exclusions for the processes or disk locations that contribute to the performance issues and re-enable real-time protection. -5. Re-enable real-time protection. + For more information, see [Configure and validate exclusions for Microsoft Defender ATP for Linux](linux-exclusions.md). - -4. Configure Defender for Endpoint for Linux with exclusions for the processes or disk locations that contribute to the performance issues and re-enable real-time protection. - For more details, see [Configure and validate exclusions for Defender for Endpoint for Linux](linux-exclusions.md). From 8d26222842313aa52ee93cccace65e370ac416f3 Mon Sep 17 00:00:00 2001 From: schmurky Date: Tue, 24 Nov 2020 15:30:46 +0800 Subject: [PATCH 26/75] added link to parser --- .../microsoft-defender-atp/linux-support-perf.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md index 86995376ac..808117dc1e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md @@ -85,7 +85,7 @@ The following steps can be used to troubleshoot and mitigate these issues: The output of this command will show all processes and their associated scan activity. -3. On your Linux system, download the sample Python parser **high_cpu_parser.py**. +3. On your Linux system, download the sample Python parser [**high_cpu_parser.py**](https://github.com/microsoft/mdatp-xplat/blob/master/linux/diagnostic/high_cpu_parser.py). ```bash wget -c https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/diagnostic/high_cpu_parser.py ``` From d99b6ae0b04b5d9d45c0262d567917403fc5b6e9 Mon Sep 17 00:00:00 2001 From: schmurky Date: Tue, 24 Nov 2020 15:35:05 +0800 Subject: [PATCH 27/75] add link --- .../microsoft-defender-atp/linux-support-perf.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md index 808117dc1e..da1c943252 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md @@ -85,7 +85,7 @@ The following steps can be used to troubleshoot and mitigate these issues: The output of this command will show all processes and their associated scan activity. -3. On your Linux system, download the sample Python parser [**high_cpu_parser.py**](https://github.com/microsoft/mdatp-xplat/blob/master/linux/diagnostic/high_cpu_parser.py). +3. On your Linux system, download the sample Python parser **high_cpu_parser.py**. You can also download it from this link: [**high_cpu_parser.py**](https://github.com/microsoft/mdatp-xplat/blob/master/linux/diagnostic/high_cpu_parser.py). ```bash wget -c https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/diagnostic/high_cpu_parser.py ``` From 00d43db17b9cb9e18d07cb202469d4b22423d064 Mon Sep 17 00:00:00 2001 From: schmurky Date: Tue, 24 Nov 2020 15:36:03 +0800 Subject: [PATCH 28/75] removed link --- .../microsoft-defender-atp/linux-support-perf.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md index da1c943252..17e0183fc5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md @@ -85,7 +85,8 @@ The following steps can be used to troubleshoot and mitigate these issues: The output of this command will show all processes and their associated scan activity. -3. On your Linux system, download the sample Python parser **high_cpu_parser.py**. You can also download it from this link: [**high_cpu_parser.py**](https://github.com/microsoft/mdatp-xplat/blob/master/linux/diagnostic/high_cpu_parser.py). +3. On your Linux system, download the sample Python parser **high_cpu_parser.py** using the following command: + ```bash wget -c https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/diagnostic/high_cpu_parser.py ``` From 88dfd49ccae54e3fe2e2fd28204e3abfda98555d Mon Sep 17 00:00:00 2001 From: schmurky Date: Tue, 24 Nov 2020 15:37:46 +0800 Subject: [PATCH 29/75] removed pii --- .../microsoft-defender-atp/linux-support-perf.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md index 17e0183fc5..b8eacdcd6e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md @@ -94,8 +94,8 @@ The following steps can be used to troubleshoot and mitigate these issues: ```Output --2020-11-14 11:27:27-- https://raw.githubusercontent.com/microsoft.mdatp-xplat/master/linus/diagnostic/high_cpu_parser.py - Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 151.101.196.133 - Connecting to raw.githubusercontent.com (raw.githubusercontent.com)| 151.101.196.133| :443... connected. + Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 151.101.xxx.xxx + Connecting to raw.githubusercontent.com (raw.githubusercontent.com)| 151.101.xxx.xxx| :443... connected. HTTP request sent, awaiting response... 200 OK Length: 1020 [text/plain] Saving to: 'high_cpu_parser.py' From 1432a9f501442e76608446f05e082c66aff6c028 Mon Sep 17 00:00:00 2001 From: schmurky Date: Tue, 24 Nov 2020 15:56:25 +0800 Subject: [PATCH 30/75] minor edits --- .../microsoft-defender-atp/linux-support-perf.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md index b8eacdcd6e..9f58beceba 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md @@ -85,12 +85,12 @@ The following steps can be used to troubleshoot and mitigate these issues: The output of this command will show all processes and their associated scan activity. -3. On your Linux system, download the sample Python parser **high_cpu_parser.py** using the following command: +3. On your Linux system, download the sample Python parser **high_cpu_parser.py** using the command: ```bash wget -c https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/diagnostic/high_cpu_parser.py ``` - The output of this command should be something similar to: + The output of this command should be similar to the following: ```Output --2020-11-14 11:27:27-- https://raw.githubusercontent.com/microsoft.mdatp-xplat/master/linus/diagnostic/high_cpu_parser.py From 91345fac6f052b0894d5c4ba9827658b9397eb44 Mon Sep 17 00:00:00 2001 From: rogersoMS <44718379+rogersoMS@users.noreply.github.com> Date: Wed, 25 Nov 2020 17:18:01 +1100 Subject: [PATCH 31/75] Removing Intune/MEM specific details (not within scope of CSP docs) Adding clarification on examples regarding Azure AD. Removing Intune specific reporting issues as CSP documentation should be generic. --- windows/client-management/mdm/policy-csp-userrights.md | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-userrights.md b/windows/client-management/mdm/policy-csp-userrights.md index b6f2c4f536..b1a0a67245 100644 --- a/windows/client-management/mdm/policy-csp-userrights.md +++ b/windows/client-management/mdm/policy-csp-userrights.md @@ -75,9 +75,6 @@ Here are examples of data fields. The encoded 0xF000 is the standard delimiter/s If you use Intune custom profiles to assign UserRights policies, you must use the CDATA tag (``) to wrap the data fields. You can specify one or more user groups within the CDATA tag by using 0xF000 as the delimiter/separator. -> [!NOTE] -> There is currently a reporting issue in the Microsoft Endpoint Manager (MEM) console which results in the setting reporting back a 'Remediation failed' (0x87d1fde8) error, even when the setting is successfully applied. To verify whether the setting has applied successfully, check the local Windows 10 device: Event Viewer>Applications and Services LogsWindows>DeviceManagement-Enterprise-Diagnostics-Provider>Admin>Event ID 814. This issue is the result of the use of the CDATA tags, which are neccesary when more than a single entry is required. If there is only a single entry, the CDATA tags can be omitted - which will resolve the reporting false positive. - > [!NOTE] > `` is the entity encoding of 0xF000. @@ -87,7 +84,7 @@ For example, the following syntax grants user rights to Authenticated Users and ``` -For example, the following syntax grants user rights to two specific users from Contoso, user1 and user2: +For example, the following syntax grants user rights to two specific Azure Active Directory (AAD) users from Contoso, user1 and user2: ```xml From 7183c615911842a6dd96b8a45b1f1030c3691f25 Mon Sep 17 00:00:00 2001 From: alons8 <61512160+alons8@users.noreply.github.com> Date: Thu, 26 Nov 2020 14:55:45 +0200 Subject: [PATCH 32/75] Update indicator-certificates.md Adjusting the requirements for specific encoding based certificates types. --- .../microsoft-defender-atp/indicator-certificates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md b/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md index feab52dd1a..6948f7a392 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md +++ b/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md @@ -43,7 +43,7 @@ It's important to understand the following requirements prior to creating indica - The Antimalware client version must be 4.18.1901.x or later. - Supported on machines on Windows 10, version 1703 or later, Windows server 2016 and 2019. - The virus and threat protection definitions must be up-to-date. -- This feature currently supports entering .CER or .PEM file extensions. +- This feature currently supports entering .CER or .PEM (Base64 ASCII) encoding based certificates. >[!IMPORTANT] > - A valid leaf certificate is a signing certificate that has a valid certification path and must be chained to the Root Certificate Authority (CA) trusted by Microsoft. Alternatively, a custom (self-signed) certificate can be used as long as it's trusted by the client (Root CA certificate is installed under the Local Machine 'Trusted Root Certification Authorities'). From 8a7931d2561dad5f7ffa2ec61008a9b7377e9f20 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Thu, 26 Nov 2020 22:08:59 +0100 Subject: [PATCH 33/75] Client Management/MDM: URL & text correction As outlined in issue ticket #8682 (3rd bullet point in Requirements section is confusing, and linked page is unrelated to the link's text), "The linked page contains basically no information about registering your "enterprise AD" with Azure AD. Instead, that page is a somewhat convoluted set of sections that are sort of unrelated to anything specific." Thanks to Jeremy T. Bradshaw (JeremyTBradshaw) for identifying and reporting this issue. Changes proposed: - change the MDM page link URL to a more precise Azure AD page link - change the 3rd bullet point text to refer to the new page link Whitespace changes: - remove end-of-line redundant whitespace (blanks) Closes #8682 --- ...device-automatically-using-group-policy.md | 78 +++++++++---------- 1 file changed, 39 insertions(+), 39 deletions(-) diff --git a/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md b/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md index cb162899d3..0d225aa26a 100644 --- a/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md +++ b/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy.md @@ -7,20 +7,20 @@ ms.prod: w10 ms.technology: windows author: manikadhiman ms.date: -ms.reviewer: +ms.reviewer: manager: dansimp --- # Enroll a Windows 10 device automatically using Group Policy -Starting in Windows 10, version 1709, you can use a Group Policy to trigger auto-enrollment to MDM for Active Directory (AD) domain-joined devices. +Starting in Windows 10, version 1709, you can use a Group Policy to trigger auto-enrollment to MDM for Active Directory (AD) domain-joined devices. The enrollment into Intune is triggered by a group policy created on your local AD and happens without any user interaction. This means you can automatically mass-enroll a large number of domain-joined corporate devices into Microsoft Intune. The enrollment process starts in the background once you sign in to the device with your Azure AD account. Requirements: - AD-joined PC running Windows 10, version 1709 or later -- The enterprise has configured a mobile device management (MDM) service -- The enterprise AD must be [registered with Azure Active Directory (Azure AD)](azure-active-directory-integration-with-mdm.md) +- The enterprise has configured a mobile device management (MDM) service +- The on-premises AD must be [integrated with Azure AD (via Azure AD Connect)](https://docs.microsoft.com/azure/architecture/reference-architectures/identity/azure-ad) - The device should not already be enrolled in Intune using the classic agents (devices managed using agents will fail enrollment with `error 0x80180026`) - The minimum Windows Server version requirement is based on the Hybrid Azure AD join requirement. See [How to plan your hybrid Azure Active Directory join implementation](https://docs.microsoft.com/azure/active-directory/devices/hybrid-azuread-join-plan) for more information. @@ -33,7 +33,7 @@ Requirements: The auto-enrollment relies on the presence of an MDM service and the Azure Active Directory registration for the PC. Starting in Windows 10, version 1607, once the enterprise has registered its AD with Azure AD, a Windows PC that is domain joined is automatically Azure AD–registered. > [!NOTE] -> In Windows 10, version 1709, the enrollment protocol was updated to check whether the device is domain-joined. For details, see [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2](https://msdn.microsoft.com/library/mt221945.aspx). For examples, see section 4.3.1 RequestSecurityToken of the MS-MDE2 protocol documentation. +> In Windows 10, version 1709, the enrollment protocol was updated to check whether the device is domain-joined. For details, see [\[MS-MDE2\]: Mobile Device Enrollment Protocol Version 2](https://msdn.microsoft.com/library/mt221945.aspx). For examples, see section 4.3.1 RequestSecurityToken of the MS-MDE2 protocol documentation. When the auto-enrollment Group Policy is enabled, a task is created in the background that initiates the MDM enrollment. The task will use the existing MDM service configuration from the Azure Active Directory information of the user. If multi-factor authentication is required, the user will get a prompt to complete the authentication. Once the enrollment is configured, the user can check the status in the Settings page. @@ -42,13 +42,13 @@ In Windows 10, version 1709 or later, when the same policy is configured in GP a For this policy to work, you must verify that the MDM service provider allows the GP triggered MDM enrollment for domain joined devices. ## Verify auto-enrollment requirements and settings -To ensure that the auto-enrollment feature is working as expected, you must verify that various requirements and settings are configured correctly. +To ensure that the auto-enrollment feature is working as expected, you must verify that various requirements and settings are configured correctly. The following steps demonstrate required settings using the Intune service: 1. Verify that the user who is going to enroll the device has a valid Intune license. ![Intune license verification](images/auto-enrollment-intune-license-verification.png) -2. Verify that auto-enrollment is activated for those users who are going to enroll the devices into Intune. For additional details, see [Azure AD and Microsoft Intune: Automatic MDM enrollment in the new Portal](https://docs.microsoft.com/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal). +2. Verify that auto-enrollment is activated for those users who are going to enroll the devices into Intune. For additional details, see [Azure AD and Microsoft Intune: Automatic MDM enrollment in the new Portal](https://docs.microsoft.com/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal). ![Auto-enrollment activation verification](images/auto-enrollment-activation-verification.png) @@ -80,7 +80,7 @@ The following steps demonstrate required settings using the Intune service: ![Mobility setting MDM intune](images/auto-enrollment-microsoft-intune-setting.png) -7. Verify that the *Enable Automatic MDM enrollment using default Azure AD credentials* group policy (**Local Group Policy Editor > Computer Configuration > Policies > Administrative Templates > Windows Components > MDM**) is properly deployed to all devices which should be enrolled into Intune. +7. Verify that the *Enable Automatic MDM enrollment using default Azure AD credentials* group policy (**Local Group Policy Editor > Computer Configuration > Policies > Administrative Templates > Windows Components > MDM**) is properly deployed to all devices which should be enrolled into Intune. You may contact your domain administrators to verify if the group policy has been deployed successfully. 8. Verify that the device is not enrolled with the old Intune client used on the Intune Silverlight Portal (this is the Intune portal used before the Azure portal). @@ -95,12 +95,12 @@ This procedure is only for illustration purposes to show how the new auto-enroll Requirements: - AD-joined PC running Windows 10, version 1709 or later -- Enterprise has MDM service already configured +- Enterprise has MDM service already configured - Enterprise AD must be registered with Azure AD 1. Run GPEdit.msc - Click Start, then in the text box type gpedit. + Click Start, then in the text box type gpedit. ![GPEdit desktop app search result](images/autoenrollment-gpedit.png) @@ -110,7 +110,7 @@ Requirements: ![MDM policies](images/autoenrollment-mdm-policies.png) -4. Double-click **Enable automatic MDM enrollment using default Azure AD credentials** (previously called **Auto MDM Enrollment with AAD Token** in Windows 10, version 1709). For ADMX files in Windows 10, version 1903 and later, select **User Credential** as the Selected Credential Type to use. +4. Double-click **Enable automatic MDM enrollment using default Azure AD credentials** (previously called **Auto MDM Enrollment with AAD Token** in Windows 10, version 1709). For ADMX files in Windows 10, version 1903 and later, select **User Credential** as the Selected Credential Type to use. > [!NOTE] > **Device Credential** Credential Type will also work, however, it is not yet supported for MDM solutions (including Intune). We don't recommend using this option until support is announced. @@ -120,11 +120,11 @@ Requirements: 5. Click **Enable**, and select **User Credential** from the dropdown **Select Credential Type to Use**, then click **OK**. > [!NOTE] - > In Windows 10, version 1903, the MDM.admx file was updated to include an option to select which credential is used to enroll the device. **Device Credential** is a new option that will only have an effect on clients that have installed Windows 10, version 1903 or later. - > The default behavior for older releases is to revert to **User Credential**. - > **Device Credential** is not supported for enrollment type when you have a ConfigMgr Agent on your device. + > In Windows 10, version 1903, the MDM.admx file was updated to include an option to select which credential is used to enroll the device. **Device Credential** is a new option that will only have an effect on clients that have installed Windows 10, version 1903 or later. + > The default behavior for older releases is to revert to **User Credential**. + > **Device Credential** is not supported for enrollment type when you have a ConfigMgr Agent on your device. - When a group policy refresh occurs on the client, a task is created and scheduled to run every 5 minutes for the duration of one day. The task is called " Schedule created by enrollment client for automatically enrolling in MDM from AAD." + When a group policy refresh occurs on the client, a task is created and scheduled to run every 5 minutes for the duration of one day. The task is called " Schedule created by enrollment client for automatically enrolling in MDM from AAD." To see the scheduled task, launch the [Task Scheduler app](#task-scheduler-app). @@ -153,11 +153,11 @@ Requirements: 2. Under **Best match**, click **Task Scheduler** to launch it. -3. In **Task Scheduler Library**, open **Microsoft > Windows** , then click **EnterpriseMgmt**. +3. In **Task Scheduler Library**, open **Microsoft > Windows** , then click **EnterpriseMgmt**. ![Auto-enrollment scheduled task](images/autoenrollment-scheduled-task.png) - To see the result of the task, move the scroll bar to the right to see the **Last Run Result**. Note that **0x80180026** is a failure message (MENROLL\_E_DEVICE\_MANAGEMENT_BLOCKED). You can see the logs in the **History** tab. + To see the result of the task, move the scroll bar to the right to see the **Last Run Result**. Note that **0x80180026** is a failure message (MENROLL\_E_DEVICE\_MANAGEMENT_BLOCKED). You can see the logs in the **History** tab. If the device enrollment is blocked, your IT admin may have enabled the **Disable MDM Enrollment** policy. Note that the GPEdit console does not reflect the status of policies set by your IT admin on your device. It is only used by the user to set policies. @@ -172,39 +172,39 @@ Requirements: > [!IMPORTANT] > If you do not see the policy, it may be because you don't have the ADMX for Windows 10, version 1803, version 1809, or version 1903 installed. To fix the issue, use the following procedures. Note that the latest MDM.admx is backwards compatible. -1. Download: - +1. Download: + - 1803 --> [Administrative Templates (.admx) for Windows 10 April 2018 Update (1803)](https://www.microsoft.com/download/details.aspx?id=56880) - + - 1809 --> [Administrative Templates (.admx) for Windows 10 October 2018 Update (1809)](https://www.microsoft.com/download/details.aspx?id=57576) - + - 1903 --> [Administrative Templates (.admx) for Windows 10 May 2019 Update (1903)](https://www.microsoft.com/download/details.aspx?id=58495) - + - 1909 --> [Administrative Templates (.admx) for Windows 10 November 2019 Update (1909)]( https://www.microsoft.com/download/confirmation.aspx?id=1005915) - + - 2004 --> [Administrative Templates (.admx) for Windows 10 May 2020 Update (2004)](https://www.microsoft.com/download/confirmation.aspx?id=101445) - + 2. Install the package on the Domain Controller. - + 3. Navigate, depending on the version to the folder: - + - 1803 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 April 2018 Update (1803) v2** - + - 1809 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 October 2018 Update (1809) v2** - + - 1903 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 May 2019 Update (1903) v3** - + - 1909 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 November 2019 Update (1909)** - - - 2004 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 May 2020 Update (2004)** - + + - 2004 --> **C:\Program Files (x86)\Microsoft Group Policy\Windows 10 May 2020 Update (2004)** + 4. Rename the extracted Policy Definitions folder to **PolicyDefinitions**. - -5. Copy PolicyDefinitions folder to **C:\Windows\SYSVOL\domain\Policies**. - + +5. Copy PolicyDefinitions folder to **C:\Windows\SYSVOL\domain\Policies**. + If this folder does not exist, then be aware that you will be switching to a [central policy store](https://support.microsoft.com/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra) for your entire domain. - + 6. Restart the Domain Controller for the policy to be available. This procedure will work for any future version as well. @@ -218,7 +218,7 @@ This procedure will work for any future version as well. 4. Filter using Security Groups. ## Troubleshoot auto-enrollment of devices -Investigate the log file if you have issues even after performing all the mandatory verification steps. The first log file to investigate is the event log on the target Windows 10 device. +Investigate the log file if you have issues even after performing all the mandatory verification steps. The first log file to investigate is the event log on the target Windows 10 device. To collect Event Viewer logs: @@ -254,12 +254,12 @@ To collect Event Viewer logs: Note that the task scheduler log displays event ID 102 (task completed) regardless of the auto-enrollment success or failure. This means that the task scheduler log is only useful to confirm if the auto-enrollment task is triggered or not. It does not indicate the success or failure of auto-enrollment. - If you cannot see from the log that task Schedule created by enrollment client for automatically enrolling in MDM from AAD is initiated, there is possibly issue with the group policy. Immediately run the command `gpupdate /force` in command prompt to get the GPO applied. If this still does not help, further troubleshooting on the Active Directory is required. + If you cannot see from the log that task Schedule created by enrollment client for automatically enrolling in MDM from AAD is initiated, there is possibly issue with the group policy. Immediately run the command `gpupdate /force` in command prompt to get the GPO applied. If this still does not help, further troubleshooting on the Active Directory is required. One frequently seen error is related to some outdated enrollment entries in the registry on the target client device (**HKLM > Software > Microsoft > Enrollments**). If a device has been enrolled (can be any MDM solution and not only Intune), some enrollment information added into the registry is seen: ![Outdated enrollment entries](images/auto-enrollment-outdated-enrollment-entries.png) - By default, these entries are removed when the device is un-enrolled, but occasionally the registry key remains even after un-enrollment. In this case, `gpupdate /force` fails to initiate the auto-enrollment task and error code 2149056522 is displayed in the **Applications and Services Logs > Microsoft > Windows > Task Scheduler > Operational** event log file under event ID 7016. + By default, these entries are removed when the device is un-enrolled, but occasionally the registry key remains even after un-enrollment. In this case, `gpupdate /force` fails to initiate the auto-enrollment task and error code 2149056522 is displayed in the **Applications and Services Logs > Microsoft > Windows > Task Scheduler > Operational** event log file under event ID 7016. A resolution to this issue is to remove the registry key manually. If you do not know which registry key to remove, go for the key which displays most entries as the screenshot above. All other keys will display fewer entries as shown in the following screenshot: ![Manually deleted entries](images/auto-enrollment-activation-verification-less-entries.png) From 9bff12a18bed12a9274e378d8111ef966888bbd1 Mon Sep 17 00:00:00 2001 From: schmurky Date: Fri, 27 Nov 2020 15:31:10 +0800 Subject: [PATCH 34/75] Update with sample --- .../linux-support-perf.md | 26 ++++++++++++++++--- 1 file changed, 22 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md index 9f58beceba..c2520ac1b7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md @@ -113,11 +113,29 @@ The following steps can be used to troubleshoot and mitigate these issues: The output of the above command displays all the processes and their associated scan activity. To improve the performance of Defender for Endpoint for Linux, locate the one with the highest number under the `Total files scanned` row and add an exclusion for it. For more information, see [Configure and validate exclusions for Defender for Endpoint for Linux](linux-exclusions.md). - - - > [!NOTE] - > The application stores statistics in memory and only keeps track of file activity since it was started and real-time protection was enabled. Processes that were launched before or during periods when real time protection was off are not counted. Additionally, only events which triggered scans are counted. + The output is list of the top contributors to the performance issues. The 1st column is the process identifier (PID), the 2nd column is te process name, and the last column is the number of scanned files, sorted by impact. + + For example, the output of the command will be something like the below: + + ```Output + mavel@mavel-mac:/Users/mavel > python ~/repo/mdatp-xplat/linux/diagnostic/high_cpu_parser.py <~Downloads/output.json | head -n 10 + 27432 None 76703 + 73467 actool     1249 + 73914 xcodebuild 1081 + 73873 bash 1050 + 27475 None 836 + 1    launchd    407 + 73468 ibtool     344 + 549  telemetryd_v1   325 + 4764 None 228 + 125  CrashPlanService 164 + ``` +  + + +>[!NOTE] +> The application stores statistics in memory and only keeps track of file activity since it was started and real-time protection was enabled. Processes that were launched before or during periods when real time protection was off are not counted. Additionally, only events which triggered scans are counted. 5. Configure Microsoft Defender ATP for Linux with exclusions for the processes or disk locations that contribute to the performance issues and re-enable real-time protection. From e91b4091a2d86a3ffc7e2ccafdf6c6bd152d2c85 Mon Sep 17 00:00:00 2001 From: Office Content Publishing <34616516+officedocspr@users.noreply.github.com> Date: Sat, 28 Nov 2020 23:33:26 -0800 Subject: [PATCH 35/75] Uploaded file: store-for-business-content-updates.md - 2020-11-28 23:33:25.9013 --- .../includes/store-for-business-content-updates.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/store-for-business/includes/store-for-business-content-updates.md b/store-for-business/includes/store-for-business-content-updates.md index 168974c2fa..a69df6d2ff 100644 --- a/store-for-business/includes/store-for-business-content-updates.md +++ b/store-for-business/includes/store-for-business-content-updates.md @@ -2,6 +2,15 @@ +## Week of November 23, 2020 + + +| Published On |Topic title | Change | +|------|------------|--------| +| 11/23/2020 | [Microsoft Store for Business and Microsoft Store for Education overview (Windows 10)](/microsoft-store/microsoft-store-for-business-overview) | modified | +| 11/23/2020 | [Prerequisites for Microsoft Store for Business and Education (Windows 10)](/microsoft-store/prerequisites-microsoft-store-for-business) | modified | + + ## Week of October 26, 2020 From 26c6086ffb1ba016c80bc6abb4203b5d51bc07bb Mon Sep 17 00:00:00 2001 From: Sunayana Singh Date: Sun, 29 Nov 2020 17:21:03 +0530 Subject: [PATCH 36/75] Adding Compliance Policy config for jailbreak scenario --- .../images/ios-jb-actions.png | Bin 0 -> 103944 bytes .../images/ios-jb-policy.png | Bin 0 -> 98982 bytes .../images/ios-jb-settings.png | Bin 0 -> 109856 bytes .../ios-configure-features.md | 29 +++++++++++++++++- 4 files changed, 28 insertions(+), 1 deletion(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/ios-jb-actions.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/ios-jb-policy.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/ios-jb-settings.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/ios-jb-actions.png b/windows/security/threat-protection/microsoft-defender-atp/images/ios-jb-actions.png new file mode 100644 index 0000000000000000000000000000000000000000..46a71a3ab6a69e004f52d401ca6d5b0dba157dbb GIT binary patch literal 103944 zcmdqIXHZjJ^e=2hK>-y3rK+e%6A=kDprRrmReC5=LrLgG2t`FeK|ra}dndF&LJJ58 zkuC%RAtVuL0trD{gb;Xn9{luiskdy}qsnI~yO{kt0Xg zHJ?5*JaU9Z;mDEW!KYacf0@5f(0q70>SL(!@JQ8=z|!I51o(l@gCj?3YvZi`1#+CM~)m6X+C;j^wOF_WX+8AJ2?0q5B-*KPkhwQBGgFUuuM`+ zWcB+s?ugNc{Nq;j(&Cza1;)h30Zr;f2|T`{;_~=tPw)=vgEHRkA(zbAgO!l16+ZBg zC3s;jZE{iA`b_Mp)j_Gd-;2?7Piu*|C`+Jyz=Gff0GLw zM>+l*fAl=<`QP}}TlH7R|C?MFI41Dl_{z+=AODSyutps@_21;F!ihsN{XOn?Uj2V? zi8$tTxp4)B7Ix4AB_Ic3CwHdMy*EGn8R{dpk3~umX3%EHPr6!7w9tBQx{{0cp94r1 z-S8VA0~lI1?zfMF_3+T-k^l&dB4$YON$RtBg(tsnyWy(qNSvWyKjDKB9;cw{8|V72 z{!7GjWk#nIa5^?ZMWeUV{QzdP0HN^q4eN*535kiszWfj?m!uF#fr^Dn?O0HIw$m(6 z5n;iK6r~ljNrqCShuT}{ldmE&9#$uN-ALB;#-qD%AqO$&-CZ^}hS|`)=K((q-IVuW zuorzw1PWTPov;}Jn_k}-ua?J{#pRE^^D#%Pw!pW`pJ!L~Pr4_z)2*LfDJm8?_V3<` zSbz%KKE@R$4a&4utkrFu@7)@BsbXq`9IfbXs7 z4&GHRY=)y}e_aw^919mA3VEgotpp|z!wi2J&kcKUOO)R?d~E0y9RvxW)eM3H@Wp;0 z$aW_j;ICP%vmNAFDBzW=)3Wqb`>Ld=-L{_+Yj0h>bZ8CofaK^BWKsKO%fo;elxf*- z=xU4%FHb^HK`6pD8HG3P4@LEE3Xol7F?_LQ-aBboDe$ zx}lgZo-dZ>efr;xCp|IZ?lN|@=t-%DoEk5662l0)6I+Bl5?O?76Lr}d?&~q;15g^6 z?eEG4$F#0xRc6%6H+~8-lmaQ&^0$)#f3>ig-0x3Gz!0Q93#6 zEwR{XiH36gWdF+Nj1xz`Joxz6f>3gNJRRKY@UmFycwibJq(A$6(%-Yzl1*X5*E42gOgDNRypyvB$E$D28C=Q1}785 z6MmNcz~CgIecsAWksE32#*mI5_V6-#5C=)-GDACM5H~GI@}d&*s{9m-Eq(#(t_|u2 zhGa<9vjMi_B5}-fv@Od_-}SFbE9h=Yv#tiA)MPws0y)_@({2{ezEgBr+XK;IwuYO zyhJ$+%G4yBuDGZswww{z5>LAydIf#ij#>-Zbs<&EB^aEr_QkWP(u z{JWaXDmvXc(WZ${($u`3DW9=N^X0F-g1yNghdpv!2^hMHV-^OtslBjSo(%9(4b!Zc zGEfs{Ug|c(QKsw=V906JlC0;LDrL?26#K3NO2SOo zYDnlL$?m6qhrOZf4)(;F+4^BT5a-M1{M%ZZHt>FFFv|FicEWqTy%*J0lKUp*MYWEQ zKCfi;2eCwDD4vC0bf-lUy33~Q)Tc4Fs%0YVSo8LTU+T|DJcc)NCl-bTe)?8a@PwAf?0g zF;q&XtQiCDGOf{+gNyjcHNS%H5A5tXz8<-IQtz(sj*K>(d?<}_K7g2B1F0nI5 zoRnE147QRFmzz6+sy*Z4eFPffD0G#U(GWdf0%ZFSw|{5*LxRirLqg+itYWrLCNy~Y zR7Q=e#3oK*Qsn@)7*LJS^|=duBaZ08mLW}7`jaO*ss8IkPXEqtWFi$l+kFm;T&+8G zlj$nBkuD3Siu13%?fa&m9uWT3dN&Jw70WWP(*=kkEqV3P9_uzSzE=CcPbEEXWfssY zETO-v<&gL@2^V{ER!q%l9d1OX3|>>DFZ?b+Og-qsPWMz?{5C9e9lSutU9+<(Ufvk0 z&8hKjVeIgTgw@txgV?y|`Apr2S0Gb!u$iVAQ8`#1=1iOH&C71k8lPuLZGNP6tooEm zQ9HS^>N$rF`C{6BpTFXXe~qn{e6?%nK@GDd8TZ?U09kiOjLlXM-oW@KvpYob^`~^b z_klyW?Ml~)GH>aS48P#{un~#;y9f10XZ_7KhN1{LLyKX2bHV$cx}c-1d4bn@beQ9j zI%XbOp?6!_wSNJ%g-2k^Q!va+T3SjrvCpqs3NX{%fKyKod zOk06Y)(Pfun$;BnSR0<@w9e6QaeJC0J$rMI-_2d8HoxdQI<_J46x2SrWWWnKLQc`( zo63G5I%Vpvq&Uh`uO00?ZvAbx%|Cg|XR+iKN;?( zoRt@$oQ&{D(9yPCP#xOy?M55X9Pq=Y z0%9q2^lkM%nzZX=?9(6DF!b9}x$rf#8JX@k@q45d9n}7Ws;J*BvxLZCNG;zDdVQv_CM>lznAbas`*$a9= z^wW~#u6QPCcURY(U+!t`PJ6pWybG)jMVCk}3XelpryHL>DV|bDus_38;dNpjRASDw z6Kc*be!gy6>w*&ESGwuG3w;qr3aVj;CvI%khon6ZZEqkJE4QQVvEf9f@RS-XzJubJ zQAs=d`1%>!fMRz3ofaveE3K(xFg!f2#zjZH9lYD=%fDvq@Z}3W3Y)bKHY^_W&-POs z#{)cUbbZvq>ZPbgc*BMeHE69+;K>lSZ)znv`gayCfm>)wL&W%1FVDUb*PcmA`lc{7B7!`8&v$K@8y32jLMXIS~MQ1R=J8Mn>Pgu z=h<2xqmo{TkjSeh_nQ*AZD93s@XG+)lbt@3#lnmHNT=YjbGFHm6eM5Lsz$+kV$T5X4t@K7T~<# z1RZ|QRzFT*!(QfoGr&Y$3`%qtS>Vn!b{Bw5H;#;Av1ss(xsQGR(WuW|+j0Qk<=d!H z_(9PYHDavB*2~v2qiAx{=%noSA0P}+|jhtD>^&Dhr(Dq zF2v4tQEOu=8k2WdOdtryJX4>vHbB3UpPKmMwn?S?V9Qv8Evd#MoHt@C)0=6VD7rs0 z1UD>k_hT%_*-JIJzvO=TxWW)swM7dpYzduM_2p+6lEs2mHF!Iwd#O zAbsTtPrpQtq>B98p7jDI>8jFfVNPS)%1V9~^xZBo$? zGJ>WJ4$J($tdKE=j^=mHLOUR0*~LBB#D8W2(D4XjLuZhZq9geMMi{ED>`3cYaWJ16 z8_Wwf?APQ{y4h>X$X&SVPux01U=G<@pa5MxRg?TDBvU7`o^TB zYDm0QI>wzu+X*)r{k?>PP>c#j4ljO$%M88zQz`0K( z8?C1c?q~QW-H3-*+%a~>l{yHwUd-A}Z;e5!2?gVy4%z98ol4;6nF;huRBrlcuu z^M~gLn_&nSThcUn>9m^=H6}A;nptg3jGpxC->+E;<$M1z$O8U_rts^JIIbJCI-2kQ z1tvbpiZSLep7iML!yi+9mc`{d<+s%(p3*g5={6DQh<$f}x^WwQWci-*X!@xk<(~@m z`3>LOU#oWp#+BNJ9LEOgXal<$g6-4+a}#FkNF;ph;bZ=h6=&`D^OE%t1Tc4imPBR} zZbVtf=oe|~tmHA&Zmr$&i8QJyhPu5ymOn(7{(}!0X;{rrgS<7} zS4rX1Ux1Zo`hI3#>&rNg*btyg+$8Y2BabST7?-({8M-rGBIyQL`-natI4?xvu&uLDj zrC0hf`%)k{R#t6lE{6`S7Q%}zIb@{J-fgp~$cLMrW#%`O{|J;i`Dy#vOTZv_mUcRkv@W_;$hVWkH4g7) z&D-dDC~C!{q|;IdnW@vi<~mi{EGM;`rlOo5N6MVV#B*-hHLD=POrnH7g0c+9liuiHCAlSXPY|HgEYz zEF$r5Y3kKY$UWEDiKn1p_A@e*1I|5 zf{mRldNzx?T2|B1%2|bDzu!b$ZaHIc`%UYG|#HHRfFdq3aE%R!clpuW5D9 zgtoX!4MCyyTr5Nnyz_@_lOLXGiJlstiKhgOA`T;tl}ta-i;uZ%O;QLijerVI=5w>Z-V<}*?u2-B=E z`y5M^lD*}!*&;3GF2ME22(n(=cm?#Foe_XP{u~Qm6_KF4_6VhuxWgFNvc?qe-Ya=H z_wl}`kyvMqm1l9OwTpClaU7*FJ<4AW1L{U=!290AcFRCF`tI1> z$km!pAg9z>{*RuILfctAjmj>#?x=)3PpY-;WHw8TJ-;H9{I0g#u!H|$Sw33+it``% zH%#s7+lJqBraYQu6_OV1Lr-4H3X;Qiui8qrOH4f=Wlj?hf*iht_Awg|3coYd#m%tT z3X5_?{aOp0H1`z*SyyQ|BK>9VXF|wX1jOpQ!_@~ry{6^fdm%2uX0ju<7s(0GF&SM8 zG8)6u&WK@WsP0RZ(#@3=krvLnC$V#DZfq0wVr9X%p4K_0!uwGpdpRi!+edDJjem0A zk3snHw`Q|8>|LE;ljwKSJEOBn+$;=-E(v1H=}vx>w{x!k`ZA^@-crf!KRIRCdx}@| z=0aO}S0+tQ{w(D5D9>(gXniPJxu?m1f}F2%uHazk?Q-K=KbwkPtPG~+==GV_o;=Es zotTX)@S(4YRs6@~@$HNw7*;XOJhn7P5Hu)z%axCya<45YD@ok{O-nuJn8KIzWrJO){f=nzrgI677a%iVJ0BLVZ%vpnCL+BO$|Z_Nqpj1N=KknlCplPRv?&lna<(s#biG(2KfGt(eH$n?02G zi6QB_eZsE5AvSi_2KR0!{%xzPakLTR$^uXywMH{$FOVzW>~{&eB&=W599uv%-ELZv z@X_;cpAg<256C;Bv0Q7sA*?E{7iN|&-!pzgXNAQSd4N>LOke)(-8n+KqqCFJ4co~v zr)!^IuuGWAuR94r6BKBxAv;RU^~0rwkTwggNbr&Yy}_=1_z0N=bGm^Ao! zx^Ocs$n)RC$v6qPMzfKGm#WwE-gj^`7%%s_gaulUPD~!}!cvb8Ubbw@XJ7GuSrtu8 zdR}g!u}JpQ1`ryzB3Lg7KvL`VE4F}u%?x%VqyvyaQHcrk{tfBHEp2|6$yD)C|3EMl zz@VGu;KJp5mZtB@PUnlg_cdJ1?1EGhjBVqAcbtlVchvgkxJRxFx~4X&e@tV~-i#TH zOZgq(QRj6)aypaMy-GiQ7$H{b zYg{UTcYr|?aLTNyYVR&mL1EMGd|{@w)IC!p)sUOB*rE)LH+7*pmi~;Ke_pJRLHBjS?N}MB|14Oq<-wM5Y52C&Cl(9+5X zr^v7?*UfOc$?R!l>}?3=sr~VXqWsjVYtKu=KY+UJ4-G-zv{Qy`D9SNrAKYba;p!LV zUe|GXXyq_r9)%z3Ue~cWO`b5Zr2tFET~y$|Hb3&JEosF zT#d%zg_iV?$k;z#@rl-KcbZ;)rm*cCCfb-YWI|0uh9o8!la>M5PNMlhG;HG;%{wlD zhwXBhM{VZF5GEgNoP9Kn81|;Q_@dSOqQv!vO2$@i9@8EMS$k_k`8=aG+4y(~dAqAR z(l5@V$Ar-8AFh+VU$6!HsgXftb_>3t?1ii6kei9kXAej{A;N884edBZhJWnV_h$>^ z<&!mW`_E<>*4V-r zn+P(~sq7GaqimfAW@pwZQd9}c%0$QO=*`0Jryjoz zv%_ao==ZdcKw>!R<#r>jvikz~>M!6w2oi57%Cu{_%&xhRlDke?6(!=e? z%Z;~jAP;kLTL|67(O^3?`T>Sz9QtcsgTNZ-SAsvR61CR%-1Y)B!o*V$W9u;Qv*BEs zw+}({g9%QYf10`AV&eof=$%yKy{SEZ5M+AIrV$)hp@o2SLNlu(FnPDi|VB&C2s@?nX9^I&>HsD_U>I0bs_5*}=q+4mjH~QO< zuv7;`*-#xSYp_Cb{;?T;Z0~bAV7pmF@M2W%4i_%Z)Ov!9hB=nNnL_p*QO01@pEx8-0+IRNM6GhC|9dt$}c|~Z}vfVLb zP^f*hS@Nv*@uTwr*@TN%S}hNjlc=~^a?A8R1JSa~@hR?zY z8MyeaS5-~v+J@$w7ry#G(OG_El9=qpEm_q48$iugr=p8BagX860a4-@qclIOa92Q? zM@R-vHo((9N0IWBUvBMm2Cliz%CrlAd$Fh<4tvJF|J==_ejo0JABDvY8Os=(@wK$p zH@qFMeG1I4Lw{d=v4{fHXqql^O@BPpc5N~X66q$l681<@`2ohmwA9;x+kLebz4Yr= zGS(1paj%@RO7m;!H;=!0^0TFiVX`{>KoB!O#bYcWuXepR5~=Nv6y3x@A{16nW%=gD zy6TS@CdUc(-`$?f8ERWGY>!3ipV~uZx&c_#SZ@PBPW!&mH5N z6O}JQ^vW0Zwx^mlFt!?#-(kyyQC;Io+SR;a*RZ0pH`AJK15$lJ7PPP=AQCb)YTX~cB?u+mGoq=S0a|9z6d2~FUZM> zhQEB<_p`dQ-wtz^Y27ZlYN0IIc-0slIKhIf9DWU`4~_T^fX$=cyw;-IXVt+diV-xS zPu@db$S*tln9N|4w3v3MEl-_X;j(JUX+xcX*)x``G zR5i=J8iT{_#3&xaB9G#xY;_J zWc9y=u`w~zbeQLn`*>b$&hr;j*MtOWw=Vw0aqqjFuSS0P_p*P!7-#>FtK~`mSf>9~ zZa)V6f4oTkf3KS$QQ>IZz}f!E%q8H_nqdb=r9kPfyNK4sFZ*#Se;J@J{x3JQODe|! zA>WR)gmrrRbn&0ca+g=zX|$S<#4}}IO-hC$%dBLlU_adyzpI9{As+YZRFtUN1*qN~ zF@azad^k#R9^lUuR;uX@1AHa#ljvXRxBwEPb$oJ(v1#gF-3;fi3(Q8p>=FcoCesD( z*M76S+v(mysQ#9GHsfHF9q^*lm8Mt|c2)21y-Bx=RKCf_|TkO{N1B;>T{|(2Lyu ziyzMe_7l5Pka)(G8cxZaoye05ZI?IT&P|+8pUtuUyWp$QqNGy_36<*)NOpytXHO+0 zyT_;rxTE|Pu<16w5yag!PkvdKY`EE{HdNF*x2U3OGxrTqw5^_6aJbdf>RIKIi4cI3 zu0VNB-CanxXe}h%-X|Sy);wL@F58#gTAgZ@9#l-+VI6m#lovOxqDnn3)yIR5Y)k)d z>+@N-4)>6}KbH$u`t-jU?D(V#P9jdOTDC0A$U|_uf~1PtezUvX*=;+P%8LsIfG{-O z?g2dAE<6Z{Sfz8j^Iv?4H&Dsad}Ya3XzkMEW8w^G7)l zN&OmAEt~;}9(TRCzLe?aYUV5&BPC}s9QV|G3E(!#?Y}=L0tpp}eA)L|w$r_Jjt%A& z8cElJ+)a(EbE|3`zFBqa*^A@1j&8N!`)5yCOgxdBF42r?sLQa)bOkE8uULJNt4+Ik6F&nY49WaCTtA!Dspzo>1&lDO~ zE~=612zqgUJUP+;Zcp7>wz6_*rM83aLDQ?N-pxhVHFn}EpK0634HviG?R*kkH=Tai zLU7d}?abVx?7x!x6jBuWuDnw#XN>Irj%Qk-6i#F=7%?`}lq>(K1M?>s6=ch`t#QCs zXUhPqGeapq(b><_V*@u&f-*IR&w|wOB#yK0g=WL4qIk94`e>o)k8GMLmhH(~!FxK4 z&B53HN+NlGmpXDp|H*NIj1v6XRaq%#)zv~4G_@f<%3^{=<_VklSPcs=N4?hp11@i3BPIdHrav;D|?a!xfS5($f5Ha~pCN$TKwy0nPeWdO6y-+xiG zDJrvkf~Lb*o0@(Q^Mfi62Jt8negegc?wSlCTx^EwcYGEJ(epEj)loMc)D{|@Ql{z( z8lFL&x7cbxvREu+q%sY_?C(Y1f;Pa-ngaN?D7`pBrlTMT*}xLTJNHrwS)#Y(Xx|EM z`}Q6$YcfI6#sS@#|Aza?zQpyE;jof3y@-?CP#HpE2 zmcWle`&i8uQJCKPrzY2?K^q0~!eGGY2&dXAligcCTF!a$yCO~y?$ctD;{A~xq-r-6 zV4j8y>UCgT`Dr#@N~^3k2d@N2B)YHgdbOe|&uV9=4LS{`gJpSdqvo}-nHM?>?2Qi0 zv|Z9&!G6w;W$er5h9_wrJH3|B7_~I_=Sgarv`rLIZS^G4CgQ?M?eJ5Cc}^?zu-C{T z#^g52SH7llJ@37o8?i$vz}amux-}=uzNr&G{CwXY%Ug`s!>@eeOYyb?YAg0CWd4UEVbrsFU>;X?~I{N+8X!>poUph=;bJSgO@NJ$wGQ=(=*1P zWVV#N9NsRUaH~hdK(k+juHKLe8M+0V`(zOKtV*aXnLT^AH7iw*YS9xd23W>l1vm|n zUOfqQ&BRZzkYULUDtA+W$$GEsLFqaIp*cWB+rY7_-A0OpMzX}VWp$6DgccS&g=Ml# ze&!COCGt^MYbRLz5lO*8tn(RFvOI*(Eet$%XSISaC5R@mt)CjXV?tR)^i5Zu1>t?!5wPLfbh+!L{3#(t_>9v3-Swa2z0~B=JugwJ;>oC zFblwu#`TK@TeI6svV!YXul(ETsx2EufiQ{Yg3)cVeK_q`riX<@(q0_e=L2v2&UhCd{`4~T=FOVr=`$#-iq+~MMjP5fYiQ7TKs0+7ar4%D)Ev_AnyH=EQmNB=A z^FJ`6Z9$;Wwaq+#>&ge!A6)zo@W&;=!3Ehwl?D5j)kie3zpOcS%U<2cadPkSp@AxI zTq4SHbg(PdhHpXUq@qBwgFNufl&&#_HqENss7fJbP3#{)kR0s&WQx-)%^gbh5Hffb zz4VdV(i(B)ulG1~$PBiN(;q)5icoMdLk-Gg&3=(v=fj~f)TL}Ih<p4JmU;6tYz;uF#r~2JuRa+u0!?^;{%FAXyc(G+8-&*E`{PnJ4&Zf?)%lF{UD<3j^ z8HHhPVBuDSFZb%ZOrA9k-=@lnZ}(A-q>(vLt5(9jqK#KA$VXc0!#d)O7dSl#S=6Bh zejD-o^Ysq%2%zqc%&)s49+DmGBim|rsoTL{i>rTIPnrJfp8V?E>`uGC%McCXhA1QG z8;Fyq-M=B{0bWm~mD?9RGm=-)Ceasx%(0r3MgO&wE*-?dKs*{U_*qu!TH}mDE24o- z$^36BL}8?KDq_uzrWpf#u57C}`;FV2@=* zG-E!+fKR;mP#hD1Et84Q?W?cHya!zlswFA`+P^%sewh5{xa!&L;p;Xnq4n?SRvz}p zj_HpS#Em5(~v)vw({vMD^=GPsHwp#cgO6k?Jt6WcfRiI0d#@ zP2KC3V2&xYApF>WHEi@Q*0NykLiQJ%VBCP!@eaO=_3~VQWsg+?bTn?u4HAL+tX_hJ z+X_gy8^*C`tJwFJ=d%5ASedS_E_yla&1O7}qLpQ{S4bfWj|r9=(R^ZJ<4rn(^zD_a zF+jkd?o_HUX|^efR#OEvTwmf&3~+RgeIi)7h>iz`Evi`uPp`IBCf_*4(S+!70tUwb zt=?HnOJG!N^@dJ2ywY|3-r*h=Oxtx=tF}$D?ew4gW4iBHt;)}Hsch=|P|F~hv`Fnx z6|8)aH1nFLeGNG%y;kfrnY6a$(oVnZJiNnLOndEbRnlWX51jfIMUDM(R^K~;!_Cnu z%YJX_?Jy-K?F=>JUsP=ZlfsX&aw` za($}*IC=eVx%v;7GTnI20w!9&i!Wdq%Bjk=osp$7qA+zwQ$hn@V4nih%l8a7G6?!@ zq=QUJC7wsBCaa^VtxpWLYY{f?w_H8S72dn;YAO+x=;ez*){Wl1&&QsoG<{oGbUpoj zQYrKDTGn4@Uu4;ISMC%B)kPh1Bd=vs#woAkslrx2%>ofl`NWs|A^w^!|;}984`DM_z6Ru-CWy_1VMj^{#cG2Tpe>lZ?!QW=1bYl)Y-$J~jkHhq(W)#&J9^lq8l5O*Oz0aQ%JG5=F~=8w ztQBnr;jLE!f~v>~GGUEYKI*Dc2P-x%2bV&k zC))aOjl({G&0TEx;(0SQY<8=d!jK%~Ye>dJw5DsfK7XXwvax$C6jtOiiMa?Ob4?JZ z7|(k1p26N9&byTx&`*cGpi_IcR+OIF^RGwB;gr>hDD#QgH|ic8jLKRfv%`5MsE}S? znlAve8SO<=o34hy%^zhSw!)8Y)q==u;?I>P$!ej~hT(6nn7aV>r*3c0U7!Vi-dp(n z&FpTUJKE*Zi}+ZI;>%-{L=^*pCDA@heXE=tw*b@ttnFHI|6rE4Vw8V8fmhG}w50rB zwrU~nj)#kc_<3^s8P1E73^R>9+pwSk+j+hiz@!fPOb#kQcnBu+abQapIuK$ysYngN zCkn3?(EmTC<3I<)~6f=Ubw54=8VO`^t8TRg=VAl$d}U(y-I@a zDmcIdCvQ;z#!8V$2Tf7Q~0(( zc)zAM{Bg!KLd>TQcDno{PWPvyy#bRyGOl4)?D%CHJeS~KmTg?5+t1x-yvm&bcRV;W z5xAo}0fdVg3L=e31DP90py0Xbr>?;7J*wIC>+^DaTgVA(&eK84PUwU%&a9tClK*mp z3mlRGK1am&1Hzs>^6c^=HNj82|I3J1Z;g5ueyr`sel(Omh{hc&3wfDzwPf9d)|t0G zl0iR#vgSYq*2adJshhgg%{??)z(`^j;=`tRV242y#42Z?B|*+co5WdJ2??IK)54s) z)P{PPVd#LYoLsZ2YKF1z3w(z zhd>E9d8Ko|T&4JjzylDibjvaOt*+%Cue26a_zxbg3fLL9;J;&9%(Z^hnAV#A?&WXV zus+-VfUmwk%i2`WCMiI=u<>baM%1)z>;{9#y==Y+qt)gvML7-b0AARX5av*Cf?zIc zi^&090s%!ttaPq}wQS$bQ%R2*k7|o@f^gdj(>rP#U1>;_>KAbcpe*@!O2`n>S2bhp zpVwB79C`Ze&_UN$8{G#S(XA50Hosi^8>w^YSK}3 zobRK2BaO@^Fv@UxENq8fr+lhWt7l$xxq@b- zR^_m(9*dNc=XQaaZsFdKPoxl*2T67^E}qXiMg!6IZyv_z9*ez&8J%E>_y98RI(CYq zVD7!J3E_!{7g?-lb5^U)3F?o}@oC?7sHwZrJ2inUjvL6LH$SaeqGBbOIIb zrVzejs%jR>tSGpv9+RRzDWITMm@t)#UlMrhD(3Ue^$V7H?d_kzF6}`v+2by<=%PEu zZf3C$PaJa<;Q78%@I^hlTm5&Du#F*N2&a7aR6)&S^;JBd4d8o^&Sj{4j=&xITM_8oos7ml znBgPkyT^{HNyW3Cz4cW+?$fF@P_MHy)n4J5vTpwod~WyPzK?KYk7L)%vRXRE?X@qT==^GHR+=>cfXh zhpGI_pSm37kR0HIzcBrMyMID-K8#sn?hIfo->(d1=}-aPPs)`UdJeY@@u)3zy@ytNH7*>0clA_R9?DW2i>47WgO-yO+ju($T=L5 zvK^I!nz$M4Wb-V?jVx*AZ1e0Twg>&Ekr=AUMGJXvJKw`jGHe~MN#f$S2*0Mn@!spr zZo>EghuRouK>KQcKDFiNI0pXmt1|PRb3oDK$kV35D$-!-<^d1rZq)e@vneZg!SyVg zzwZ_0`byX*ekd_Z9Lp^yjsuow19yWB zb%UHMOT70~#se3T;;%#g;=AW;93{Wl;;wA0_`Y9Q|MOnbC)}}-S>TwNSHK8dSQbQoJ z^-Q+3a{*H*=ki3%ur7`K*h7Km=VV+L3IR(d6lIDR^i4-Aq}zKVk^XMf%s29(i9qa8jW%RHLOl3zgYr2V0Mu zK{lRF6s+D~Q*Aj&d{ySk**;qJOsBOke{MGYgwZY>$?0^_?{uYorL9AZUD`b?5BHtU z+Mk3alHup_!AjdS0gIv++|6lcoTeUmC|WM|9EH!sfP&Jc`sB#>%jM4S-M#&=-emuV zG~ST!)RuR2*T;a@8z-euX))TqL4Se=4{DEK#5X`0ioGC?iL&>Pi@)<>ZKyuNpmxuX%qoakl4nFJBI>1H^%#LSZtd5(g@f z3>Pkq#i}3Anro8fp1o^gVRH>Ux?tK{vqWnb{3xVshH!pgt3YKtz1Qu~paYZ6O%4+q z`7to``oR~2>WftZy(Y5`Zan8sWNz&;kol$RU%3mo?TfoxLoQ=6gg>udtp}FK^$J2t z$zP{fk{-w8gowP*P5m{h8rbh0^@tx-QOs!5OS}l$eV^o8S7d!j<{t47ybVKa&=Q8P z#i;{Vh*kBv6wZICp?}Bm&X*Zy&t%}3#GS9UX|h7K+At23`3jnMJu%rfMuYr9^tLqS0`N#%8tZ;cvVqYJP3)1250iVuiW2d%SALX_p zI2}TDAL_Ut|DqbsQihr=F82Q{i6nd$wp;4?0+Kel9#i=n1&}`I@=Cn^8x4)PT9iB=&*NR1%M<|LM$$YlqH!`^&HS zqeqL)ZV=3=7J>b?CUG?k8#Bwdhi!jucGGQ}V%uNsv8|%E<^D({nB~TIXU7r3_8dZ1 z3Yb#oGx+GR`)~S&(`cY+^0dQLcS`8B8|H`&n8u0c#rUuV<;7}g%%bJ+OcvbuEU@CQ zl3aLzKkHd~>OuQIDM?476u9bTmpk?QR8`;_dq%@u;@#uo!*?f2@Ozw5gji}O9jH8f zOxe~5>Uf++g>0>_=+r=)bb|k|DVJDDw}fpz)7Bntv5>Hze+H`^z5#H4qF?dnVoRyx zUgVYXi88$xSFUXk&iilq#ZP|a-tkq#w@#}D`ZtDLxO_)Ti5NuY)_?6LOI@m9Ovd=E zUy2r$AUXm4nurR3TzZdVz-01+#LA@0E`Va2F#a4&s9w(Rw?t2J(yP9aiz^|I2?=Qm zjjpk;wsa8&1qG&&;DLbAN#X;vzE)xoZfDp1=+OqjLo}*_x{SGL5o&(je(54?7cZ7K z^QQB9PJrVJk~V(`+6pMyqs2S~ZGZQA!gdow9$!F#Cm<8U^`eYvaL$PnPoGy& zokpH)R0J4=ty~@}pk#q4kq-iCiyyc>2yiQ5*3Z=?wZza6)_GRb-$gl=x)3*@$T41Q zsxGp7!zWvVkG_0PLGSOYxA(7!qcAg4sai|IBs;2boIvM-77W@U*umu)MLIPv3$DH~hByLz>aH{3k9-?ym6O0k-u;1M2q$>>N z0vCdc6&ZHX2qh2qECNN33 z>Dv6w1kYD`Y_AoGtMmdY-?49yI&lA_bKv)Li-kDi0jvo_pFZ?#Dz2# zvItW8B$O-KVzIHuAp(lkZJjonwF-5H|6-KnA1;Grd{RtncEd1De$37M@80pv$w6@LT53r2Vj z&qJJf+qJ!d+U*f8fj?6e3T80Q9G8;I`4Ks1^GUF!Fp)8}BE5-Z2{by#gL4HdOZy>Z zYx3o60*%tSuYXHQ{d`R8z0i-wQK8@~gDgOkcbf?wYbAdqd}NDBU@DDc**qbt{4gxR zBvNqg=o$2nm~2dp#m$S$8#^af*17%E7EN~qGeWq3{Mz|)UmGS#`=U{EQIyy^Uzo9{ zj(98)v#sT|zN#QfTWIJB;rikEkKwKfj3%Z9*?dvCp8Xd(6nq@ZMKSGtNgc5vc~4sQ0X0`Jcuju!cJHW$ zvn!eUuEwR{tSB@%T>3)*$B1W;2(?LweRfKsVp0H$XHg}?U(CPl`;n@Fxj20;`LVEC znB)1r=6`BCZ-c}68AgY=!Rb>Cbx3OK{E@{hLiCTniO8+zeW9<^4=buYXltZ&al1=6 ztf6l1m}#cV=}*cOVd3E#FHYZYVMDQZdb5O(Vbh0MoG_1y@KcgF$a_Tsx|Z?$Oe?9g zG=Ov;7SPx4@3S&@%;>D^ts)cuhf*|`kL6;xt=?e@5mR07gjcWm`Xjdow>2YA#mWSj z^(z2$rN_mugZlRi?9YB1uW^z`Lxkg(Kw39>^pG1uVQR&FyM-)S)Q$;_DL>Jhj~YS` z<5z!D7Z(M~%dqHwGq+fN=;(0l1;Tpt&+RV4yqmDcT>#={E0N?xcKkS(LZ5UipuH25 zc6(VD)=DoXT7Ef^KE2MtPw(jWX9S*P-79VN#mPHHGMRNrqr7*-t2PtW*|pIM&O@9U z!3*b$KTYY8&v8PuSvqWhrRv6)T#yfEGa1u6G90x@#by2`1S}l? zUMxi*YN~GF!*~kPvu*Iey-8{`2n9!SOVHy?a{ev+tA024kZ{9QrpYP8^Ts9eOm@ax6c-gm&~gsZ@+;kOidAVvNQ$!*h}V;!8KO3?1^{{woevO7vR7xI)g}Hv z_TIazsqSkV#e&>|hy_GJzzzg~TWQio1O%iLdQp*1Kq0gQg2FAR2&fQHdJjF)5(tFY zQCjGsC84*FgdRd5Iq_GX=ZtYaz&pk}&i*4K8A$h!&-|gvjC%>PZ}Wp- zLfgu+LVG8a*tPp%O*s&dEO&(OQ{z39 z)#y2db7eig?wZjx(Z5r^%cOhcaT`jcv7SMip5OO=u;~O<)u$abwv>ohHadeT`Y(3p zm9um`O3gUIb@C>ij$XrM#8fPBvh*l`fq$<`STB1%7u5H)hG*Y z;y&(@_Y1ULSU7S({x|eLsDJohzp%P~&Xb^Z>+7|i58fLKT@9}kiQa?;O)`!1cQ-T+ zS=Sh~BT2bW7yQ@IE#puAIjhyD3xfL~_C{>+GJ^sYmmj-tBhe}%eI6AV313SO$C*@$m0YHo)N*@aOi-G
_Jmkhvc+UQyp^)T*LvGo=;^EM|SD&Z};Q_r=q0zD!#o9ddN<#%{q0(-|*V#^? z)u~oU6{O363Qi)m4NfBJ~Xf-m3c=axp4!#x1J-Ou$o;4X$20 zB1pPYT(W0$DyrSJCp-WN@^>Au33adfUS-7jeeg8UGl4Xe9-E=5gnsp6Y`={P5zK zD0O&#ihM#ALVuN$#Z5&mB#a^|yDD;r$hp{x0!BteXAz%~>=@!dGV#nxAAmjysQ-9b zUt|qvK>_JYE{Ry3RD@T}-=I=U5t5BPMwwI>^*+Ps_x0q@JxK4dSdf>>_%@1kQe@4# zoOEtjj{JH@UNxMA?}=}yQ}vz|nfT>g;v`6|JAl3aFbP!eHTJ%@lV$1q|GK6kcU_z* zxi*|l*~^+B1yVx{Ng;M=NdKI`=C0)6Gcjxi0(B+8p(H6w6~nQsb{g78TiQkYucXL6%{9oYMVDJETqX7`<&oMZKt)PH8lZc@=uE%p}ZYz>wCTLgp;8DSrK=F=5cS49f0J#}r}KwH>(6n)@Tlmd z1FLewVhCf0_F9BH*j7l2-Sq7&{UpX%Zy)m%BKlPyR~bh|6$*+!sn_1zz0XqrX~L9O zy7Ns*#RTNRJCat0>Shgk1qPqV%zo%?dmQUE=kNS2ad*5o!>!?BIQcOaNd>79wFh&t zElEQtkSZhfW4cF(T67?O-=k(@%xaiT^QQigrqyOm;E&ac=3$0<99q7oLxYHwn=3Z| zmXn9)5&Xe{_taV>qd?XiTDvs_3+frDh^XHr2CcCQj^k(@Yedy!{!%T zd7tK_%o?P^vm`>7s>4Q~p4@ma2!>HYsqzFFhqhDX|523h3O5d&#|3qbhFsL85DfE# zilWT?M`+ieo1+E8oI*ppf$B6VPXb?7(pyk-^J+;+Fte_&@d^R z{@_9U{pApR^M7t(KF_J^pRES`Di^+@2_0JUthu#G-fC$I$Q7_SPdNTgQOI(gX0@<%aYz$p?O+p?QTf; z2gCvW+pD6s7MR=+|s7h#BcmTvQ(#L}^to2v(X zA7gXH{PeNyap)~nXOG6PpJ6h%(c@K;m_|>!_aI71m?!dSaZ=P5X4i%8%BLT5g7X<| z_uv3^T*C#EFaJ9w&rSuttgvxH1L>KzhAe88#NypL+_}?YT{aD) zE@vOQ;c1~j!T`U_SILykg@9;MUO?yVI#Tn&3(f&EbkZY~iJh_02BC2~q+!2K^VTz~ z{{L0zSd%86g#8k1qi#PloOlKLX!c-dh)F_@F4xwQYx8n`7-qP62@0(Gqd@}EAylWS zf#CL_;I+Lf*OF@0%E%|T&(0yPqO=G?K|X>OgE)bJ8pwykBdXAv4Fbu&_^T>i=r==zRRg_>2S9L)RCI~P}3HH$^51F`E142#a35}Z8H`)Lkhjs<4t%wyU z5cQOETQFh>+k_p0#aM5GWS;+TaPaWT1EJ#P5Eu^$@nOAvAQBd4e$CzyIdJQyUd zsX7`k-oZ5l+Xq>FVonQe{gp4t1#TCusFeSe^&)&)@_b2WdU;&H=bfbCWt4X{!M#=V zzfa8VSNA3)&$H6Fx+NR-TJzn1x-fWnWQ-5rdQ>YUEy@i`|9vn$UIPC6{_T^+l>ff} zKM_~{_uBtIH6k}w{lAjn@&DY~mH*4hHvhW_>V$X9%HLc%NmMjqw1!wf0Hmu`TK}#x z6scc^>mv{Fy!~}kNeQ&jlY{anD2!t@!C&Rv+ggED4t)S%#baY*W12tDwr-jb&+F5F zfcLXo&YYG}r-e2D_z-<`C-lba;@4gY!+%#o^G6@{{K2oapmEi4OlT!5$j*)n>_72~ z035ihHLIN({b)Fz4%H4m9v1((7W2(?h} z9CPgn^Ms>wS^!PRR}k=doAH%jP9y;?u)cHd+&PqI=NU8*g*1T!0_6f4f7yAKlv&%z zqqf?pf>$ou^_V5@0-{MM!_oerzx33TA#Ug_ICLvkM`p%Dw@24*UdSdH}mY! z@h5T@ho+srbo2>C2Izj%jamJ|=RDW(hVa)F4em&hdj z8|79Q)n`vQ`5!v^X8piz<4d2d?!%aKqUbE*jrQ|1*n?Lj`)}~fQjHdL0!J~u!CQxJ zRy)D5u4{>pDBD+9Gx*-eiPD2NG`CNLpX7OVsy1@N3+;(2GuYDOlbBTy1wM^dd={PX z=ggNsTOG5NjT(0JZuU6JUeM*#?ru?_F$YfZEuH0APe=8wv@{mXWe%a7;l)v2rxo+5 zA4Nc&!vNa4acH--UrQnn&x(zhsjjv*(N$;V)3*uZXEVmBCy?$qlB>D7d00D%@9kL` zDW0?=kwUQv2c6M@IgP#pKkaHU_1wVD$h^kgP~c}*zrB^Ox9 zJ7o+X<@wxJd}D3DgUhb8{2jY)y_vHc*oSE_=P8kzJM^qSmdEIPxwV5lDQ0JikHI`? zbp9a{$HufAyTboxdO(E0dQQzzc`1j`1YnIYXENS`TpjvyxIFX_&nHEnesYqy8m3e1 zko##~QPF7h@I@!YuwedXVHA&L=84IdslQAf8hki6%=aoDe2j;{nAh%_8WM{_H!w0ZqxWK}?>T2LpfxXf509e~xZ1;8W+#pGm(>m?L6P2j1#Iqtqp)Tl<*BSBJvYXcdK}R z5hV4?!*ggtJ!Hb8B8E`2buHp{c_B}nZDrj+N5=SRNS%<6s}o{p{FCAy182HYRqy1P z@jFFl{oX5*C2gX4!0=7Pmv}9m5lLvkTW!{g63w3#Cl#~T2Vu1J7$%+ft+Ypmxeo}k z*=J_;me5|^Vl8wMbfOhvifh}R%W#i~(Ys{Dyu>E~ehVzK{NhRyZBVGT*#nJ;+EqC` z48m@uvwDM#ZANKAKZ>*rJQYk*>zs7<*4m}E*(~~aR#4lyoezIMj1`X<+;{Sw%n%%- zxyS4eK}AM%Pfp4l#92o$*XL*<2B|>ViBAvp8Ii_2-2V}?_9?8*FlTdk+PCAHT|KvE zj+vU9qt3`XLy(2afF*EMVtC`KCeB70Iy;pB+Fn5hyHq{)qJ0wSK`nXB;K=&~sK{(> z-O?K+JUFGCUG0pnVE{~0-CMU0@t(_Eer4RbvT3B-z1Fnf&AYwObDb_xyGB?F(tkQ$ z@0}ukkBADbWV{|llNGM_iOV$l2nH3DdSdOktz@2wf>JtNYzB_gj8D;8zt^(6>_1_& zwfsZ(`eDlxnqezXNJmxy!fn)N(>~2UWv%rV^a3t=}_5^Jhg$qjok2EQsqD7Eg`} z{H@5sME!->$m)2F*I{*?QFL3uItB056+pI@!xjq?AjpF(>4WEA6yM-{m3zTW`un;^ zt^Lpu3|uVT&f*myw(lWvwdFRt^$ACggXMk0ffFet+cHA|18Lb(ftQ;1wUmww?FUsvt~v7N@cMqb9x-rrPaxPQ3#YPJajo z0M~Vnt~)H%MKN!R>jZpAikcIl!zWOIL_ewModRO$0uSS-`mZHK9!+w9Pb%tHg>CsX z*AP6~r+c;3-8mi8J_em(ZJkq%cBH*h@`}dwL6WjPaG)ftK`GaE`HMHm|1iVqd2_8b zss04;6P~>+M|X@Wk2O|n@@P-49S>|#`8!X>-DQILNOR?rM&MPBXND`veHNbA5355i z;KMUgw6`6g55FgdbylM>DJal526?FDhn10pr)c=nBV%JYbs~)VM}wd-dWF4~Wq{O5 zE)n(O@My*1L2ciMJ~>Wkl-{`Y#Gn|I>#b;8jRytzb19L={W`s?Ux=8{`fFyH5y(gG zmVcX9Zz9aH4Dla%UdT!bufDPW1a*fCVH8`YU&~FjbJZ$P)aA+ZoZt>wS}0<;S|g2n zok+UExlE<4_ofO@(bb>6_*_vf`LZ;CXz?6oC-WFxEVJIp4(a)AC0liPsLbjzS5uy} z>)ba-B`PcjFmzX+0Ymwth=0Z4-|D<9EFP#G=KT702-LGO8tBAWXjk2dt{ zmzVlCQEDil`h~7q>AWbvykvax&T2xN&5M|aWmXA*gv77zjJC7!7T;nk4%%s7Q{GET z7w9iM@0l1I0y#19m)+p{)Itx}>Qrd)Vb~OuA*!EAxf$x?R~VBF^_i1yGl>qToUPOA1gD zM%6!Cark!ax?Gr?ea#Bn*|OfN8?b(Mi;YQadGDBHGkDNW@JOh8VM4mfn;7AAW~ zI^QY3`2s?drUN$w6yJP0a$rNY%%HnCMHj{O`e@A?%}z&#EA8<)hYFktfwU*~dc#$Y z9;dIhdgrlOWE#X)FPiJSoLjc3T$j;V-~PqUKSM80veBaS{?i4Em#Rk3E|F{yFh42S zYC$xE7~bjkP*SQi{8vY}z zhv_+hrA`;B}sPGJ#_*Kt)I;<`@IrbiW9mvR+OUk zXd!fQvM2IwZd;!ll&X@oJ?c$cm6KKjEg!G#t#VXChre=C_7C{hXU^V80QEs@o~}4Y7w2-&WLT%ft^w01kKR|5kQ3>(;UXWr(P6}#yOAWY z`%Or9M02KnoExCjZBSlG=lT#8a9^oT;>|j)VA6b=EN7p7ilLdMF|Ha!bAfgoX8_Y&XxDc&L1-+HF4(%O0bQ=2?9N|2*eCHbig%35qFq(R_v5 zaIro*#S1w%Bi5!30yPq^wO(foyve&3*J0b;2%dT&I{I3qli0eM$LRtyGUBV3BIkh5 z+f}n+oMZCqCBf-DK?_Jw2f{nWt&4S^aT?NumWi zsxooA97)aD{MaO+lE_=TZEKAn5{hx{{+FbfO+PO_d$|bHJ;AI>b&jI91m_gQ?L3>B z24oPSDJ>J|Al;U23}piRbiholIW<|$KMbS2HE0v|pgWTWE$nNCvRflnpHAO(Zdi0y zvtW8!AcyLo-z6EC$ZKWi z6ZhCK^u+YM8e9Nip^|0?W12-8e5;qi!x+REB7SEMAGwg@Evn&Z3B&&Vbt77t%{0)j z*s+yGFdJfriEJd5I3)>uCu$6TkKUwE>=v1G86?I^J^t3h58vUkKKFpd-iJ)djeL6F z***RX^!Yqmf_L-?Cu;o*pVX|0g$8md6G-{Xenk0fWT2JfUIuRO$2GIvk)N7`&trkE zGd{@z-4>g-&NKvfR;`AF6@QhqfqQ5q?0V`o z`2TYkF;ht{jIui+mTW_C1srM#qb?u$KJ?ba*V1D|6da)~Au3TBd)(dTgpzj;82Y5_ z3;gGV=+|ixlwOzlS z(SaB+*OWJMvvI7^Dt-90P{nWnB}b*`Sj?5wfPjXJ`(vsxE@8w&eiAys^ED2&U$tX= z6r@2d9Zo7wR&hpjUFK{m5iDuG5SBBOCfx`E=-R3-u?^eZaK`$_DU2QXCuqg}BF)Q->d z{uX1SyxX=KAIYnp?rHq6gHO;I@!F4C|HPy+bLLKnpRn!IG@*A((q$J*dwBC=*v-x) zS&51@pDUn@{+#s>uoicPvSV+$Y+&bR7k>CG8Gb7*53nX_u~zDdZdW=iI%Y7aKthe{ z+P1kDZVY_dUWqZHH=x#Y;r;cEMc8)!PG^l4#EbH*&-5`;f`a9 z?8e4eIk8-O#@tx@SVBk+vKh*x!6sQ)9BY=niF%YmLP1JTDN>E`2W)PqeyhG?t`Bnl!&8 zW=>|+hImB23Q^h`)8#Ckff$`Xi8(nKem_rD+i#w~kZ$uZ^v4`=LA z;29lG6efC3_>GR|_wgW37Lkp{HHWAUmRS*rULqy~2#XK_Y+Y$psR!^)`Bwwm&!ShG z3Q||oey39VO)<0g@ECRAm?cjUIwY?0C}Trh(M`JCzou>MTC~>heYczs$|*^KB;DOb z{qU9qAt|qYdJ{2S(S0h{XOH1?b0S5T{mYEdSC+++=<$|FRWSWYocZ@sb1@4L}x&<)E;Ye-f?CHpP$DCES$T?5SIKzt-W6m})uaOv_ z4|RX}pho(oAP1f*Z(Yu~k%_n?`eX|HTzRq2h!`pxV_$APDnTJDra~CUfmLVzLAmEq zN&EcaQjZ_+P0D)1U!JahQhI|9!*+! zhH{B9C?!@rK~ik_QuQX%gN2W26KhI>sn?JZGx__KGlc@p7COxDH7(njTGA z*QNAP6C;z;m|Fyf407pUOVxPw6)6O!@@p6FUH9mbaOc;rI^xeMwShBKw1$?v{{ciP z@69cBXEt|o{b2V-iE{ZKlv0guTJYnP+Iha}e;fN3fBes^^_mV__;V8q>_^GY(pH5W z^d~sbvhAa??|bnPpnAT)@NYRBGtzTXUubM))ZH`Yr(%rG?qX3BoH5lIRiD?ZjuImc|$YovBpx(cShqJ1}Q*Bca^7`JMd>bWLxp0F zlja0`Mg9;L8xvGOxWiZ)Akv3}2BHzP1DjZ<1dgQc%hPw~$Z4`R6FkY=NF79U)qY7- zC9eF~o1bJ=l?(l-rTQ^l0KNgMA^AcC@A1)x-&yByj#1hXw}>fTG`k|dLGXv8&fTKh zaVTes5MUwA4z8L;vpre8SKL}2tQTn#Dc{;=_WV+G2A~V*eIlv9wZ8!{87d^27(07$ zzdOhwKg79rtslCjeF{uRfRXrRH6y#4j58g`dT)GB4^Bg2Od8_j$Ryy>Ul-p5dZxpQ z`g1v}BB(Cw(K6N{j>|OS96SSp>*z1seAK5}(Pa~NC_1nIUB`87&ARKtN!JkH=vP%= zza0;1?&>vO=~UELn-`mLf8op8rVKLPz9xb`tc*$PFx^mnjMYBgj&Q1PsXsplJX4;Cfyx+UZ=qlyX+W8<{5iV8wNONSN zQA#e2;`gJezj@LL$F@gr75C#vAwxjy%Ii+#6UFq5>y829*{MWFZUXQniSkeRYoEqb zPP;_waPiz|T4c*ivgQP+^(S*5^Rb_Iz0e@B3evbdJj?a&r!!~aDeJpg=3UF()~vVs zD{JiuBUlEJK2PvRVuwMVD(%c_KVW{Y{1np=XCMy?o$lGu{+2V#_>Eu(9-_4lP(x3$ zp&1%^_Q=%LL^&$b-d)0TIj3mKnmA{XpD zkh__I8~OC`n?8jys>C|m_2I@hJ5Jr0yyzw80>dKmt=Y9NG`0kLb092lTaO_*jKFUN zRz59>j@vx%|`B@cfVz>Uoc>3#AVNJg(@lnv~_mIn~RrKh9pfEYu>J>qP%F z^^Le!=uwnj#|4Kdt0KeZc6U+jsU;K9rkI#zSq5v1%}o)1sd?I;I$SwZkv@eP8J^(r z92FvI8#MxWDaZ3%uywAZmwxPKM^|kHSdpoHwaaLbDk~u=Z1MnnMR99A@T8RQ`1Tca z_N}%L^B;%J<}1yedY{^NR+?sSTFJ`(j^0aWXF<)a#jI|t?>Sw}R`^P9X4S0lJ8oUD zG`+O76R>P{jElIpu309QDrKpm>+$OCY%<4rDz`o@m)1&AKyO7LHt^w4-`#5B9_7MO z+?i9Ljb5DY-1ga%a~I(fG1~Ojm8}|Q(TaOk_;>js`a2BHE(L-%Xm#=mUmpA|tCn?Z zT%zK{X;(EBKQ3Fyqx&N0I7#uxre_qx@+je3R03Y1dDfb7zJ}Zwxp6IAx9r&O#N@T9 z1VV^(gzhco1Lu`&>AR^_6fq0zZKs@}j_8z*n{#VWdb1|0^#1clTXqAg=VvCKQQ}?H z9LDGx3yaVOZ5`mW?1uteW%k(e9>qQ3We1gO2xeP|Q{F>pJa9(AoLCPh&c!#W#@0ZV{A{a-wNcd?i1)#f-7#!Rnbb zieMeSfC)0XK7Qh3?%iq_*J&N}pD&K)XoAo0*}X9^id}v18Fz;t_XW=Jf>!CPVZc zx$^ZhUV$@Sh{RQJP5YRN|Ad>)RFW@0^nM;>{U~}}Z!lyTHO`*jmbCsc$W1>ix*;kj zEdAF!IzIPS!b)Jh*vBXKVYpC~)9A98;oSTFve-5Z+SZ~t7S(U(`EJKojs$MA`SIRK zo8t5n&+*f%etk~@T0+m4JYtekA>0qOeTT?T?m4-evwSX}ZaFqS-su;*-E2Vb)9J@S z%1Y{Mw!lf}Nf2j|M;#tqs&e?$rt5ACRC}_@qPkjKEpP=!ewZLJZ`bdegYmX*1NL5P z4Mis>C1qsjmYmHPk(in$611;s=->B4*n%Gil{jIbMzkNLqpz z;~WWROrRP<{$yF*CAx-Ug$mA{RMi`#C;BbvX? zUyO;3E}8m8a@L?P?>pt849GKljJxf38I@zl=RW#iMIOy%*i5w-$~1KI2kx-$`k2_u{XwF3rbmE)s~bSUfj^gy&<9G8BC_iI`ghW^po?S)wO0Tp%A?bn>KLt_AIM zysyhl22N5&DkrPlK4)b=(fD2VqjUmF#s+%&M_jB)EkF1uMG!WjeZwM(6U}&Z^`$~D zvb7?k#bU3anvU7d^d~-a82tKZZwF1?)};MflPqDn*)xI_?2^M3Z`oaUr?p8M=OJCx ze;*Nqbai{foCvkOZ{-+d&a*7K@TXTs{$4r7wimZI2k=dLhhn(P`r}=DKb^(+IM2>i zUf{6ECeX<*2@|J_b)-{_+p;U zT%%DShlwk^R;GTy?AL+(VC)7rYvhRxpDnYZh3%*XaEmaZLAFJGNkC*J5|!Z|`D4E| z{+rm^bmHhYYFT)m6NKV*4`#xWZ3!5pORn#nP-|Ku4QfWBxMhg#E+srhO^0d49zLPB z8xSF&$8{CA7DM4dfJ*Rr!?yLhtoFGIH|)y(tJB1-CA3_x_F9|}aorXi@H6?`>Bj2= z^kJCokV|nY(YbIQv!f?i=nD8#xC6J4Vy&^YLxmV(Gb$WpR#{( zkZM1hD1>ky=+9feGR#Tr7j^_f4;ZmGGiN_R9bRycTDlruCY1+RMr*3IDeljBwha8X zf#5^%x_Qx6bCr%_9e?jenosp25lcHo|i`8?CXPsfeiQQmZ+^ z5^q8L&LBB27kx;$>}I)*Oh~C-HOi}ov6LCOB1?MGM}}hcAh}je@hdG3ky5W2_CB4FY1_a z@F9*J;W$Z?Hi;F#1|Z<*(~_-2bul$Ik>|jm;*JZz-il*ZSFIv0pN}RX2iKRJOgyvt zO&(ts=hag#wyHXC0T|DeCjl=aLacW}s}COIZ(4+IXvXv3SwsVPCOJo36Dw~HOPw;r z4e8?U_OA`@H^l;U#qVYev$TyBJDZ>sN8eI~;a5 zprMZJj_i2EVc%gnj9229BV+`HZM9N7F9Cd*Cz6)odq0CUl6jkP+};em!9v&P&f3bG zxyzQek;qWMV(9!w?|CQOvbgQh8j1t2L@1qZlj+aJ$yqQsYG12r{i~uJc)uDfZv6ZL zTn)pQcr47&=7Ux-AvCEXn!@)sYD@vHz5Avg-4V*`_m%5Cl6RB)Kk%iIf#kwE<4`ex z=H*Tpw&v#L_Z=qD=3kogDN}`Mj!wun`=!fKxTO~1mEK50mZp<>wy1=WZgsiKFnt3V z4Tp&=T1FzdE=vO3W-82O3B9Nvf9$uFdR1T$K~r?8_RLqzgJFZ`?%Y~m{tYM73hP^T z0PtWnE7QN`sdJjlJHvjn+JpRhwo6q4+3q>1VGxIh+{UA_oBk9jXOA|SBttcEv3Nr@ zHW9g)OE)%-LE34j{T5jn$xE99SEa(ywQ;u?e(p!y4Omb^b#gIYaiS2gZTZoZ zu98;-a=tjxKj+CMTv2?;9p8vMi`Sgt_q}t5Gzd_?A&n6+)nl&N2+o-axE0Iwi+WCe z?BXTo>T99X#)+r?k^PG}xfl!BGi*mt8H)KZ$9>aD-n6nG4NkWV`VAIk5&roSh+4pOR@_f&+*?yTh6)^C4s?bM z&gdTilpt(cUw1wk3)(fScs!Ub2Ac~q{)-o6zMV@g5x899G1}^BnjBrie+iB?Y4?*C zx1}vN;@DfQE8@FPOiXuSt|Lp+kQm@lr?sQw)o|u4a-5tVF%Y@Ep{Ns{0Y3xoK4Jd+ z$d<#2#%XKJ>tccz!~<3tJo}tas_SW-G)B)-UBr!PV>=cm`1~RuJgBWXDEV21jAA9c ze7^Q1FsjlU*sxJi1H`yYTs6w=6HM&5mj{T3t6kd9U2EBI)*ejK%|2+zbY%&rK@RRN zK(&Iv z!%2G$z6GzXax}R`reqgA1**OTAAG#f?y|jHkZxdO?EdP2a#kIvXcP6_!1Oc(#u~S#uIu3eNMAtNrUUF88M{cx~kmt^&84JS_Ckjankrz1H>hPDf;%9FFu+4qFg-f`S zsv6KYWMuSiR(~=L?NR<=D<+}FG|}mK@p=dH?&gN+6<2h*%U^hcUW4m$wJ_MN-?DnQ z1*JZw9k;G;`OPFpZl7E=mv7?8(SAopMj=e@fm#5h*be@j0Whqeoicp;{gkO!RK{L)Jwzh@?DX+kH1<=w8~kLIe2(@EF@jVeL1Mm zUqW|ZCTAI4#=ch9Y9&TccOX|PBk8{^9&WttP?mkyg`hC=S{A(u66E7J?Rk7zo^;jRMNsJ~w z)81RXjfUDpJQS6yX86Iq}s(A3ndrp{&f3Gkud&AzQe&I8Mb=g^r$Pwc0vhog64F%G#P=QueSJRDq@ zcuni=DRo@~D<9o*cq~9n<=j@zp(765Y-LWA@(9!jT=Dr$tIvjno1${pcgz;0F33>1 zH36U!x`9l$?$Z%BS9`;qkxwUuZC9D1378Wv!$L%izujM)H}I(RcQ|U+CMJ*n2O-V- zS7C`XubJ?QE8XQ6Xw0^$L0o7Vc$#`7-#n++Y(lXz_z1F%6GLthF{t?GRn>>1h{T%w z+o^8$4@@KNJaYVVi}U%3bv32o)tC_b75D%?W}7o{u{>(IdTn}>UN3!KcVlEM5Sje1 zI`~!6;CfeHrEJvV)x7nD_`o&awyIyjK>4YCaaF<2)6`gP5?FtyKID)LAY3KeCCIJi3a`^hiQKVDAJ>ge_^%rBoe=$+8{K`exh_Lq>}J65Jw7rMDG zl{y^=?Td8KS2ZZ&UvKR}*7gcMiI|JJMck8+yb4-8G8zOb-Dr*16D*`|9BL`7bMb@} z`;5OMs4lh^P+a?T215N|uP+N8$w?V%n*OA(?=e_@KM1l;nv#zOp!e5x{O#=qnKt0) zkye9^&mCqZm*)<+Yay-fs!^8r%O9$!G;;*iT!J#d%_G|3EL30;tQ#qL{~gX*L@2aS zc^0sI1L%3rY8il?c;>93) z*9dHWDU!l_&i)u`70>z#eRFr6P7$8`MQP%F^+)ypAjt(V&c4(_FnB-Ly~C9EsGV>) z^8y#49t3L-UUK(*0f>Scrmb4uuZm(f54EQQwDwDu>IptWQ+5Ksfu1dT7^uGN>e#FKE>?l_l(lhaWj>~Iv&YV9EH0_1m(n0i6m=)W(Lh*@o0 zAhA~1e3DPx1(s`&cJ#~$`UI++R-Bai#9Hr=>ni1Y;n(Z$17Gs#?7f86Z@&mRMJRq{ z?*eOv4!FI25O)(xUT2m)3v|~5&rJ8&KcO}TekpixUvuHCAY}919X_X1W{xK9nCHE- z-%pKFZ`fhZSqX%`nwy=qzf0{14qQFdZ_4B^_`SJqz41Ad=>}%1iN6B?O*%HFO(`{& zI^d0yR89UnIIC(w#ao=Hmc_3E6UJI9it*Q&LlNt2Hr^DbrvENYEmR9QRror?VR5!R z@q(bx&{mykeZoXyR9SW~nPU`yy>Zu7UMh0aicxC%?V?M>7v5n+cn~92dHs==mbUix zNd9L~ZxP5(eBkjyMQiWlma7I!jrn^thQ>CpHmY#5GV*Xwcz+t;@R3bA{di&-e|c-H zk*8T5;Q^$*XM`~|Ea5mjGdCKxTa<@MsZY3H??_HqkK7*{sv;VH5qaA8r=#a;F8KV= zTRmSFTd(Y)3eTF>)y2yxO)(k2+;}j3tL@Z`BM(C^39Io=?iq^p9VF-g*}H1);%cSN zr8dXE#|1{E+3$sCV>U$MnWROU!nV4!61OY~`8WUl*;P7JtdVIWE*>+8|jA zk*^cAH~}*1&g@H&)LdS~Vv*BNlP+lpQ6x*SsfvT2O->j1FS-iS&qR_>Sr}-S@{>@$ zA?7tVt%N{0#j^fOeLL{KF$fu1HfA66N*bQUemZmm*4`|dT%|SOzniu5?b|;gadF*Q zEeusa_+YP*2pBVbtV539uuSb!O*weKQhol~{ST9Nk41__pZCU|q3hUtmfNo}o6HV!!` zeD`U(klx-yvhc_t1~?_@I4tK5kY5gkAJX%+6N4L#1xez1F8=(BAbpEeCR@(6f-A2+^lIch)?p35_gczCHHS>OrC_pz~kX`64A_d%JyZMCM=@l)6X%}eEjL@2n0TsXmfudirfdJ)au^Qh2K>L*IHJqP zo1T18YevPy*nda`-I~+int&{R;hT6C7eCv(L$=Y)@(P*nsmJ4X`U9KRj?jr~2!Z{* zgLtLJoVEuTN7J9k zfiW&owc@u2cwHUCKZI1f)yBpi6CpCZIa3^@mIn5s0B3ZY^C@t{J;O$}p(0;V+-DP#g z)n}{XT4tZzT|_)fh?zss1S^?kmDe&<-1e9*mD{foB6kFMw9sx}KR4p5o7BD{D_{&v z=_^7oXgkv%ewvHej_GnY32H0-S4;VH*>?i7=0eh@?eF4_(tFFi`K%glklP{x!yG3> zT8T7QOuh+lt$K)5K3ert&wehSUGw@nP{DU^JNC8RX#BJ&-Q(juejA;|y_3RkEPL}W zXtxwMbtd?vkq2LzZ^>13rKsY(ANt-?+0R{FH(Zd1%kEY$V+&#uvtWqWvzSswLbkQg zDfmZzSlL=U%EmLdA1ifuEuq2M;(4oB_z|n!-U$~`O$K~QC}zh@(C8dfO|Zr71B7qr z^kJ1{1=)(uK_(X=GSu&>!6BUA?LcWL79mJ|0=pKD?@A2FxK$K$3O5MuAQKWFL zdPphDg*Smz^i}nwFRK$O|8;*j5;NI<_&GnMOzr#XltqgYtA*G1joS4N2Qek*)Dy79 z>{bi~fz2kDD3S_{4drK1dTLOj3B%h=M(xT|G4Mfh}8lNNEccv$zgvHWj#v0`5b28!a2@YZOqPg(q(Ewh){w0F(g)@hdAO2^`{pNA$af|A8W8R<(UeJ9;c?S&WxFqgVKQb8nrYKS%_CpX0WwZjf&6Md1S zT>L&h@nmD^Kx6E+bH^cNm2DRCeS7I%0Po}c;>*+R+@`?v*LfX$y7~DRk8S`G!89)K zc7>6CYtVVy?XvgVmlwo5C$fT?XZ8{UZHRskS**CRUx>0X^biY#^;w^6GkX3g~Y{a_+byuo)c*X!)bk~;Lu}HYN zq+?FgqpP#uw8rkqQn*gtUYS!`X}@s24JC58XUUQA`svR`1sPA8l#+dz9d~SE*V@yv z$UC?Ho=^OiH?b8#Kl}N&D%Z(N3(?1vC_O+io#pm#;A<3%IeyQ(2-f{d>uTOGe&zVG z;!fT-%9Qm}x@A~ZM}OsCoDb*DuNCkgY~6ExZHJ!~pYE(E=e~kFs7Gmf^o&jPX(#4g z(72?kOuw(Nt)|?6C9=bOk#}A2hjAavP?|8zrG4_~-Uky&hrxikCrm!Cc5@Y9=AH@P zU+3rS5#y+tjlWiQR-yzQs59=a*}G-{n=iVf@TrPE>V&T0Drd9{RdIYP*YYK4iC*ez z+|!q%d62oz&}22r_t&;jvfn@WS1t1t3A_{wegHqR zAWuzfCceb~xK0BMNt_gs@A0lC9S7T22&v+t=H}&=ou(Vz3=pco-4;sNhU%X9u=qi7 z_EVhF9f$q|n=yI}ipIS=eP8*U zeX!Kt7?-@?K(b8+Vr8<=Dx5pkpD1|2^7Jh}`JN^K#65K4PW$GPhsn z1g>kFQ+YjKr!Y~rJiAeaXzHgUGclrA_UuOC-fyarXHIMt2ED5Gs-`u1AJ^gIRR`PL zck*?fNM1k3xF%eVEp?7J;vP{mv5L06&kb9W57M)ESW?*UXzqL{e=PzZrAOh`x+5}I zHlJO|D0MyqY*7I!~oAHhAk+^hY#sM=3`<*`fp!C}!OG~sBe%>AH)^fZw_uir|)I@FM= z^Jon=k*`ccF#a`qd9Myp1P`qUG9|x>`0#F7M*FSMe7jFw4<Xf*uK-2F4y!z&lex}^q2eAz)o6y5F`^VB{C`S`tm=@4(qB9>7&5JY9qbW= zTRqi=awr%)Fv;e;EP)H&-BNzb!QNhUuh8>)dDb0zXDMbOPWut+L=#O-_kF)M&XK7j zpd4Hh#WK?BvbD%~ET<05)h@LAU^!psz#a=>8oTF`ehaJ%t=Q?&MrW(1zLfo8^fmig znvnSP5FdS!TH=)4p&~7gAina(Xu#bPx)R`ZFMaYsqpiwbf9{#CEa|0<7#C7yL(YHg zW4>3adi5}`#+qYW8KbyDg$`?0;d0V9jy=8BN{elqD5IZKP7Zox-4m51>|v7L^$b^q z8+)tnbH;Jq0k#`PA7h;F!EYLuxxQxsDt6%PXo@ zy1eNbe3|)jK&7?BoJyyJ;qCBmjJoEqte_)0eC_^^NLGtK8R-ps^uIP6(Fd|o&8^^w z>&>es-v7GY{(_Y48ot(}UVh1WPPjM@1M7ZQWAG6Nf40^p z+w#Y~m441Y_1$4lO;%p)3892Pa}8T(n#~%HNflro99=V4bCUGLpuBOy*=H~MJDBQE zlzh^Y){^pPzIBO-r873`28%2E3|6QWQvXcb`D(JZ#&}N{)Ql;xyozPyCs015B_*ZaJQ2pJd-Kk)%o-J z%i#Ug;<<>dcVVzJVUHry>(?#*C`C{ZoEyO3G%lT*4a7wl%WZ?sAZRNkY=rTQJTuF$ zYc4l1aNSg+1wZFs9;4W?eoNYfd0Hy2C&gOXc+C5fLVsT&zu?cSz(keq+PQE|bkpG} zkY5p&4cb;0S1qruTAF_k+!+!Td9|v2DrzFZADUZ20cKL09sSL;oC~@dz|wpoBRaR= zw%xzcR$axZ1zmeJpsOV_zbu^HNc?e~b=GB4Wow(e^5OP{x0>bfYUGcJDSqqPouut( z|A>bvx2h&8VrLqh37StUsLl*|<)$D1j;{%-+HPQ9+iy_O@M>jWH<}9|NaKIJ@RgZd z5#}TSt(Q@b!Ov5>7Ft3ikemyxp2}=iBdvbFskKdci9g871frhykEo=~p2Y3UOi_4i` zf%jMqzqosfY*3R)x~^%vY~rG?8=S-8#UqT6YDV&RP|oL$wNN7;>uKbu1%acD-Zv+LVy zJVE||oq3F*@=#Ay=57A{ZR1Q{rJ;nSXRe0^v7mJbsJ69msMe-BngFHDW?7xmJPVv2 z&vT-pnt!mgiM?C>*@=c^ys#%v{(9~2ez?Q&M{b>^&%v1Ig+*aGAFukB#;Fn)O_Gtd z*$_RILJtL-!s1FkFPD;S)>ZmPABO8@*em3tTE20Q%?5ZDZ;ZCL?ps?(>#1_P)cJoc zd1**enmiNR-mbq@mem6sPgJjrv~NkcN-)ER^#}HzZAm3Xl$R&cTo?r|(Wa(%$SmZ$ zV9R2Q*8ZKc^wC2-d5uu4Wa+VXdlGvQjnk(RY*Bqa;$d~pwnC@=+mLr3l$nv<4|!n3 zDtxK%uAZ-7o(n()vh`E*U3e>~?E{^z=3i7kl0KU2ADAcJpTTlXk^}OLZrcWvR_R5P8g?u1(fR;5U5`uve06(J0m7s8v6->E+S8V59ZS~r83U$w^&RZopvO;lZdE&>RA$GjghedMX zllFSiv4f<9mjssS=p_;V2(?)6GLvCFgpfkyR^b5|%i68R4K20Ygy zbS8SDl7K>YM=_-5*Uo4ur&&MUovt&@PGp77`Vgdt6-QXSC+B=x341%=I*R7=@T;<4 zTCP)Ohn#1Wr0d)JdsJKLmpR&MtE)Y~bu1zWX0Ke+=i-8d?mJ#-1p;I5Un(5p!F*X( z1G|!XVGdc$=FO#XKL-Uh5nBP_SN&$aH>Lufjw{9nwQ^n4qw@t)``JLu(y!qOVD_Fv z5LYpC%Y&)9Iha4-ciSjOGWZq!#*#s&pk+Gm%y`j>N^^U%Ym2aQXdKt$N_bhaWLRZ? zRx6(IXVE=bX~%R4Z!tuc2h#aqpL9Hdip)qKjAoK(Mq>f!=uuyWiYmd@61TpFQ~*4Y z2rWB!Cn;rx&Hl@Y%l$}S*s7T{`A7QwpG23$xroll$PUx>zW^i>EqdXtJ;feE z^F%)grf3kPXLl%?;^aoQglq?$_%8s_d|$_^0UWj0*K26uhKi#%R(K9~j-Q#}=~P(y zfPwX}1b_ElDBtv(6&EdIj2j$ea%GE|fQ9$d748)j^#Aa7)&9J*H)-K9@Fg7rA3fUJ zT)(K?z+*zdQualCSb9v0H8VFxl+iQ zjHLHYJ4ox5FHto`YPww-9nwJ@Zo?@!hY_G-fg z8>q$Gfp40;7NB0b`2C29>U+uY2vHFkuuJxj@qhL`fI@xY>TdfMSLd!d&}e(cWUnRZ zd9S5B3|`OOHkAwOU4LVA%RAUvfw8k~6x+Zw!+v6x_aZG?UPzVisP*jqGSTs)dS0kO zy);~DVy|=}SE=f#bz%XME>lbj`*w^+7TBnT-YDv~nzQLgX~}|YJJ0ymj9yQH@d7Yl zhLnZ&e;y&8;d)0o%75ISh+Dw?#kCNTCA%=IuvWzS0baNsu;<6-Z$8N6{>;UP5*6IB z4>zA|^{Mn)QY4J;J4)`g&$!N=DN~FRIG`4tO)z}^_VHMu){!f4!Bku23%mG# zG^H!vQ%2*-a`%g^&Hq|$?vSQ11?*3+JQ8lGNWT*(5eotsw(#pQQW6ha-KUB@3wC$# z0R+2Z){JlNO8kOQY7s)y{|l<`{1=YHQL>|Q;Gf)Oin&dzqvHPYtHL705vy! zzrGr1*X$wvEBQj+cH3Q1^&s)x{$3sY_a8wpQD}B!z8HcUoV7ti7joO~lU}yxSr>Wq zwGuR54;=l5Rzh<;a6sJ%K}eqjMtit8de_&-Ys6a$> z4&4dkdR$MvVQiY@CkiAVbuJU$+rv4NT>fed%?2iPEpApQUf=Z8hwH4h2AvFF?Y?51f zX&$g(Yd_|jJ{tPv>QH-DUgl#_KzI>g$8;6^vBQe+7`+)J z>B@5h#Zy)UOLiISlq3FpAmL)!cm?CSPIW7!q*5zP1^UEo@^tRVMHmh>UbdLD7L z{pgbnj4Tb1^&IuVD4cc@`Y2};Mu z$2$moLuS~c(bwGcapxauo__fo@_K(f;kWw0mB4O|0dwO?b$*d|rmd+W**DWAeWImF zgM#>}v9xUK-Ua!MFV$}O*IV_|2ZLrDl4|AxzUq{|Owuo}Msp=#t(OKud0V{+oc6}8 z1Jjk|+pbT#4D&xu^EX_6b>^YWRh>}Zk@L-Io@f>yi!rq)pff&(1YbKFoB?Uqx}7A` zuC?<_+s*j(OtQ!FU=2vgYFVfYC&&*O<{X{@`8>1Gs;%j9lx5HPDMJt;wBdYS>`YF| zUq7EXZnwo>1er0y1mnjV{@#doqOA|V@_fa~+^dS61L3Ym9?8U)w^VKqUGu_Y*O-k0 zZ$_MZ6LaR$FBNJwz0%5HedAPGeJ3a8KdDo{2mTdW-2W47t}TAzeDEyi>Dodx74yT( zr?FYLL2Q<``k$|JgjBS&d|bn1>*y?ps|g*XDl$lID?=i@U6S){2&1>@!Xwh%4eZ9{<1r0kdoqV zYRf7k;yUZVZBSlK%^=dugC#pLZQ5&e&*sRTlRW<2HFvM<4e||$sdBsj<=E6;}|9;~CL;`}u;{WHn2HuqaUjJ|3sDw8S&XY5z;vtYN;M_^xPbWHQ zp00DyWxY6UM~B7QQ=tO3ABo9O=bh!DiS;trY#mQ_4Zz`d$ql& zf`Og+1_c*s3S`j+i|qU?IVtC^VOgo%O>cb-tafba=lAp zjjyI(#z;wx_*?p90*Fh&wB5gfNLz;uKA8hqCNBV~UXv*ajOXlO2?@6(K>!ZvWMl49 zTht!Qm#wPz#k>B9gB-88p?t+Lz63aJ(0 zkr99wCuVsNmM|Vbh&}0-xgte6l-@b+KoE!ld*g;0O)%i<>7^00OCiL_P_hGMq3}RK zuQa_%vmf-VPUdh=mF^e@4zQOdj$iuoD$S8u#0TkseX&X_vJDYGXOJCmgI)DODAnz_ z2P$#TV(%+1*7Pvfg`N3R%ZNC7X%jdaw#h{7KyPezcmH5;<$vx$%A@X!Vy@T@9%~tr zI{1O_`fV>JR&``ON^g3V=z{i1L3C@R+ae7u)skrIjC9XO11p{dzz_KHWf@re;@Ikr zE|S)(Iv1yE@|QJs&05@5GQ`}nBNDJIT78#+vX zqY(tlnM(Mq*}#>f>Dhb;v#~hAqJdwEk?IW0eeoR0H`r8FckT?a>6eY!N%_oFA6A-6 zF112B6NQ~8`Zv){4_s#IpV!&(lv?D6NgWofyoqFA8f8^hH=hM%m(V~Yi|pIQp=3j+ z$x2o>wIrcJ?b%74l_n5O>4+|Bz^(8qM`s`#%_VW;uwtA36rHe`1HCMOM>#t@gAZp1 zZp-#Gw=XsL@0E7|!^ERW(^dw!R6u)M;Y!AIod$_1jn`{!LKvO=*y^cZRx2kil|uH}29G=~sAXp{_Rf%LZ=`YUv*aeM2zkTv`OJt*Pm@INK#Ru! zi4gp=#wNCrEuVT>)Mv0bKe4jXvjr^i&)@{_8)lMR1h+T-)pV^&`_UelpS_)noXWyp zf|67loW^YdX(BK`uw|FoU?X4iQjrOVRH_x5m}Uq#DR+NWWnjF&njh1z#@GHpzf4cq z@s?~*p!48|Vtb_t_@vjrH!4UFzYOEW2tJc&1Z5~lD;#TFVA;{+kTCa?T33g z4|&4|Qw7x;*2cS}vNoXw>#Yzh=C7U?`ASg_{65}V&X{iXi4j(OR!PEmoq)_P)UJou z&a#GaM_}s0Y%0NMLM9%wU%NJ5wK7#@ET1WxH9QR##lWv0kr^xH2BH8*Fjx6}_bnY_ zJUiOW4w1?u%VWuVx~cB?jtG^S6{>!S^PJ!E!E*5=3cmOfUhBM~sY@OKz0-;qO{Zv2 z36#1@zqL{5)zmYvW-mLJ{ZpkC)*H8SMA)(6;Z_k0MFuiAQ<0w!rTAnujDjt!F4mMieLko;04 zU$-ijM&>b{YFf)@b{7+sII)Q1qji~xoo9?Y%4ULB%qMGrJd2(67$M7-I+(@59Q^Ir zEqHg-H;&W8u5Lq*Q&$Bfl`R43=Q2%DhoMC*t%dJbb;8=(I849|snD`%l$=yyk}7+G zVSHUskrb!0@l03aCX=C{oKU8x-;c=K@#mxW+|4HkQw3DOhHgWwG~b@xL8LnhTR##F9Mq(dReSeXu+gOAGPos60X5+4D#qQ(X^wxS0i2P?3&4hV3q+O zsn6*70L47=$td=haWrA89X|Oze48{yJ+QxtF7&G_sx~ z)FGjxt%iK5i(-i3Owydq{u+Pz+Y*4XJ!?$1h`Sn1ZX9rnmRg?DN=vOs9l{|C1qVjR zd4Iq_lveuTG^t9VFD`mr-vEUuLYMqeC+@MFBGiaNTO`?CmJEZF>&+q?6<@zLN%{y7GxSPzQ=Q@aC}$1T9`TaRUsGm8`>$s& zFikdT*-n&C$35~BsIw4dnk;P(Aojmwp-mAQ9Soc#eI<0B@XAueWXFV2UQqL@E~kx^ z>;dhbhTns!b#`P=@fh)FOY`AcTeTqqt>xg2m*Ur3lGdc>eR^bSsuXAbY{DRRI|}%0 zZ}C~o7T+~9A~LosacE{tEl4XLdSs7Vt5xlQh&~a7?#zqk;vM6d>vQ%R=^}}3huf(^ zR_3t#?w`EF0;b*0LL?IbR>(W>q#c9M>m@9k-eB45)Zw$jhEina9$6n$ zTiK=Jz45bjdLV)}heAFIHR`N>H3uIb)J1*28DOrK^pIIE-(R?nX2Wk?q|&l;_$tcN z7^Ds3An4AM$s8)sv#Z`DV;Y>3r<%C@b^bt#Xc4>8dCSx3%H_YI+A|4zn9EWx`yQ@L2vN{GhiWwkYu$(Nq2SU?IlN z4?YakH~eUOl+tU_Rqv3t4!|s z={kF#5mDVDu_gq#9|SoUlO}-yvyQ-)anUKTWxbnea9QW47J}~nZCU5vFwT*Jw`a0M z2x@JRi?Nlv86zHDsI8oVnf8Dtk7m5GA%3NN7~Ns9TE8z2o1|*Do2s;EcZ$BpRJ72{ zY%lQ&#Cy`%V4a$>PNuOk+ku>zuxr$A z7@X8@$McdGavn14ew+Ph>3$1KvO^PhyFrC{tH>(Yk_@sxJDL}J^Yrlh&CuT%l%ZvH z=h<7DAw;dW{K94B6Q#}VnedLLY;x)% zwFS`^D-NRPv?K2f4ehVhIPLsUi0Bf$!FhqAf50ea?GqRN8q$U3dH$wuAg2V1MHt=IZ#NL*lhch`Ex&yrHG=z*Gk` z-ERSvXlNR54AUv|)2;SZ#>3o)mi&JO9OAp{8T}65-3ZYRDD{5kRwvH@fDvq!mtoxO#4v#%gVZ{-iE1p z=h+KXssl+CPtCgasDnw2W}TWal~xxJR|bJAOj5Kdj2=1-S#aiYCL#BfRw6;mP8WSErScK_B*4s}ijAAf}Za%%BXMKqIqhK~eIdzFLZAMHwx z`hKx{U{_5?Uan-T_B8b**N??8udED*S|~3O8iZ=UwXQe_yTS?55xr0mMNmCURFW)U za-Kx=d{^{J-e%EaSklGIF`YdnNh4yvjKU1^aY0y>c=o7z*SYS5DWh87SWerL;}+t% z(>QfNfGOwSQj zvA2lc8ToXjf>!~SIC53mCyldUe853zs1#LP(eYB?no!*n!5cykJvtpsZgCsT>J8<2 z*|Z{^+JL#zLEyE!4Z?LVN+K-_Y(>`+v(nz?>U)={1zW@gpO7a#ox={6htkzQtDtqZ z9-!5xAL#u0?!LHseZ|vCC0-=z5CgY`l~ULrU7t%%`|2QYP&WBz;$eknKtr@&#eLSY z)h+u=#k1a<$ z;hPdt*EO^t8!i*|mAXXXc-(RXK4g1oAe<^^PODV+lHrLr{#aa>IvQE#Yd~)6*Q1+g zR?)3%Cq^20HF^)x$2%6kW!35lL4FDvDwpH{aGQgZSsbgSf1( znBDq;IiJ29k;NK5F8V+^sDWzOx+g|*awt1M_H>>6oWHqnj#2gG^SY^jc8~;;ZdJ@{ zEy2@wN5i=Jb#Bimu?lMv&OWOqD0Cm>3a7~)(5F-j_G)H{Id(MM8w&K>@jd=Tx06bz z%rT&ziG^Zk9BUH+CU9j~VYj%=v?6sCwA)Zs!B&u^S9BHtIi~?Nw09 z;jNTrr#cNWb5d&RSSs@>p!I90?x}w@QD53O<(A3&2)qQssat?3N|;=mNaT#?NPm;e z0hUNHB142OHtp?N)I=#|F+PjIFXm5aicp16z99o@uf8&r>ds^8)_?)2u`qJ0b4eWWVT- zcYGs{EtphSbV)7*dF#tAP|INrL!AbQaJ(`4#%~4mxzXoLlU3%#0P?X$^6Cr=h52-M zNi*IoC9{)E^8WbC#qw*Wg)(!%U_ih_Oi`Wmo}Pf;gd1X_yOvCC;+IEM=4p8xOp!Va z9Q+$MR+>LnYOdBnIpTJ{ia2ghQc|)Zh+l6DVMK z+kO8}cuc!#e-h`W8x&>;b5fmZ&O%dWN&legG}&+dd_A@Cr04fMtNPwWVA+Y~>ki`W ziD7B#ZeEF1{uNeo^u_$!`v~=gmMn*mFGt>1M%mvZ@cQvNS-!_^qZd^OqAmpnf-Ln; z5m#t=Q-acB^TBgZK{~yg#kNIhrs*tmlFelM;@N0CET?xhe#ho3sfAyI^bMtp+AQ{J z6}lIGL{?c^#z5}FK5VEBiH%Fjc^Izd5=x`~2lV7<(`6OiH!v{kSZvEw&2b z9R!MDJl5@-+mP>0l<45rj%IR`ZTW&kUewaM%%3oY$Ra~uh_LeQA@yZt*vYIi zM9;W}Ae%;-AZYfg4wDDn=|Yom+2KDrR!(=ld6Zx-p)7hnAOt9+QRnet>zBg=LDV<<`bK924VRM!-?Of|4H z@D)OqSrgM@jjLJH#2zz=y?#?#1cQ=9ZAO3nsP!8#Fm62NsH4nyzZC^wU)1Yy4a(8V zvPRGLH;k-3B10HUpAtbuzc?bX(-X86I(V|B>^M>0vT)=shuK7#cKj_lQFT|@a|2D{ zl-Lj7CZmhf9*?+bMQ~(aWnhOHkRO>gxqzBu zrMKB_q44#*VFkZ+bT7u^zI%29de@}RJF3*FKS<{(3HLboAmEcztKdRs#!oltO~mJ1 zdHM6k$L;?;HJSgQ`>B1TJQqZo)wRw|<~0{eWy3H^_>KhH4}Km!T+TH&JjO@|3^wt3 z&TudVe-k!x2SR8VfxP!oU%9!lC6_MRoAhVanqmyE$_)+?h`qBkVX`vR(l)kpH);|r zwEpCq>?ukr!XtZKgDe^2-ikJsPDN>Ud8-}Ag}9q#AcqO+ic zgljP9dPO^jl@;g2h`fS9m{_EIe|8u~z2sAixllpCGPL?LR50_EolB=*9SQp?>4kr! z+i}=EXo;wj4}VvcZWS>M4Uh#T&~NY%F862{34Jc?c`s`6?P=8l4pkWWnnBc`Y}xp# z^m4hQ_1a8PtX&+skbcj^XGP|GF)LRsF{5|ZzTpoymuG=73u!^WzPt5EobP-XE9t}R z$Np(e+FWt>Z}Mi7ycP2mtILG{z61x~r_O|nD3tEm2juU4&#qsK-q)K8qu}Q19pifj zO@|zeDJb_HWzy1YOGU>Fvz%r;ZU^--TRkj>8PWmWLXZHy>h2lr-%Pm)`tRnqd;kh&=8Qk+YOH&U!XFAvi7*LKG5&i z%PsRjkz4(}R-py@UltLTUu=3ozF$6;&GH*nBYelpc;@dq5$z0aLtd4gr(=duHUkNq z@s6aP$;L~09#{;`XoKvr^zzFYw*}2}#z0H4+ic-qG45Q+Ea>low0?Ns6XVY^f_yzw z^r`g8W%kOp;`nF0WfQL z8QOT#YCVZZU?-fVT;{9$$}rDuZUZ6e?Q4Jkwkp91t_qlG@3XGy8ixrAOv) zJ~W5Qvxhrsx!*!HS})}*M_uKwK-xMl|NMBH zyIdwV{+|5BQV?h$-gHDH*hk-+^c=rC0H)Yvkl6EZbV;C_P%Z3F9P$&i`JJQv_NGRN zRhLX`6obe!@}#AxTw6(w*C;nNdke3wnmn*Wq0U2R9mAaW=!FLv2mp(*k*VwnV-7!J zuV-ec-0*lFqhl%f)6;lns;T{v^s*U)`2@LOfd02t@Qx`gcDuME5V9*#NctunVjvjW zpz}g{S@`ey$kmx9qP*uOO>j)hs)?2*PTCLC<|i=j=HgkgrrxAd)!;wGV^W^d_c-QZ z>+WY}$N=Mxhj}!!$Fkoy`E>JG+hlby|HWq|&epzxEi0>yz7oXy0oh=or;8JJF>wDq zr)&n=ro(_wYm`!*{G#b3H_K1L)L&W+1B%(?iZs%l@ERh)c=Bl(`X*fK6ZPwYXIu4B z`$lI|r4F5YSPs&j-#y`u|D&2tjKP$9WdAilXg^o zP%RZYqS&8zT1c1bmFD$58{xX<*-VjZa{QU&((28gZ+!CEu*zUas2YY6c{TOq;~mcX zn==iJjd z)(+H&Hxjs=**L@A!P0cXWQKi$K<{=~Otapk^ zrpAd;(~EfG5r6@bPJ;UoT%&o0jF4gK=|ZkHGH^=TJyeCMPfSmS^Tm8-Yrw|v4F6u+*<$z9E0;3En*xR}vFs)aIZ7FF+yNV5lKW^*oWXSQSEXPE zT0;tRzBnVP1-8I^gph4o?4pn}d)`G`wwvg4T2_`10$h?_GDY^kP-+(kV1GZ};=B)N z?)a>B|5WvHfSIRI(k^QkIOyO`=Fc4BNjP>7OghzV?tXh~ndDc1aqDC{(uih}wR?9q z4hcL?!Ef^X?mtG(Ran)z{Y5V5CoSS9q`ov;0gB<$c7>!smtk6H~Fp zB#RI(3ClUznUV5LnKb^ne0#)S5Nc&1>8@Y?7>9*UlOx5I!%55Fv^8DNIZq~56OK*} z|2ABQZ=L)lza!i&JCg8eHuSxcPd3<(==WOu*CF&6+wU<>P+O+ouC&?F(8aJ zS<2r0JT^G2%b}G961V5!<)7#Tdti_8?rijllihgG00k2K=<@L$RnF0F38Q1i(gO@ zmD#b0tjd~)-}w1>^c}GtzkURaNeQm1Q4<$5f~EQD|JVqlW=O^QBSvUx0^3&rF!iM4 z=*Zb4`Y-?yF$gt?d7G#BG0j?~O08wbH#mzbQnsgrx6Wz2Ou%De@GrD;Ocg@ay7O;) zi(A!)0slRt&3>J4Nji+VP`@a*qM4~q?A6Jan&@I;SanSoa?A^qvHNtDSzye@X#T6O zQ8fRV508ctCdwEZOnOJNqxip?p6pJE=k*-{|9l+$!VE^+ zogD*G2=#_**Ims16*awiqV$IK40#_75jb40(pbp4&87D#2|o6(V(Wt@_-F4MNh5oi zyr9{tO%e{$&_dizWDDKprJX-_{XnUF}KC4&Xc5to|r!F!<~WCH|IDS z^6y__R&smCSPo=}|GD10d2$(O4F7Ze_4?1(|Nj2XoBx^qd7kl~!I1xa?(Wb3(O~`Y zKN_q*#r{W4^yS|Ftv@?^?NrA2pX>j8i8E*Z|8b+<7(qbT;b{@EGu`NtJ`TE;9fa&Q zz7;wsp-wJUOns^Q@qwH3hhBiCa)i^Iu%B{qd9p7nfk0*e6xK^1)I81y?wxpx^SP1y&wn&f zwAMZS0G=2m^e4i4dt>tpPQuSUu=@7CDEnd@a$qPx>&q4Fhn@mT2KQ-PoW07aT(R-ccl+hb#!4V1km#cI07c#ed%Kx#s3`mD=^{n zl!N~Yn2IEWDQA)G0Y03dY}BhT(YNr&v7t^tjL3HB!YmG3l?~(oRqQ|i`B}eoeE`zO zyCxg6ExJjMj9H-7V~+36Z<$D&?$XD1=2SeU);M8BkS5NKiFWkpfufV z6=Kturq88c`M~Yh_nNRTEKLxs$Yx#1B4^wwKdkr-{qz5Wc~%#6se$mctlnlg zW7@M7slE+rB7erP6nV9UDK@wM1Ws0j)J{3>KYLJf_UZnSmuWDN52+-r1K_%d=^Y?C zRpy^w&{$Y3R89KaB;onF!Fj^SIZ9u0^GN)UBsOcTdu)!I-Pp-Oo92^;tD`@;G7~PE!hP25!q$B;$mLxe%I;7C6HX>c z62pV4z{n}_u#LUlr4;uSgamg$_GE=F+K-XfxXtKeo5|E}FmX=C9c2AF0$dhX+?5aw zL#>J(xnV7WW6*v(%V8;#d+U=Ltz7=cPF-6jx9R?QN%${-&GJdTFRpN78%%FZ$A?~_ zO;MlvEdVzMQ|G&cG%Gj%a zVHMgVnB9S{4TVS?wiGN?jy@g}k4lo620UgPy0~c1jDXv>^N!fc%yKYI zs3nL*B#5E{#e>>rJC>w--8vo4yqK!iQrC7k+_tqtj{|gEeWVz)v9+GK=bbZNQ*{9` zv&})~0-XnW1?q|YYXLFC&hy_wkgwwg(reZatop$YQ>d)o6?DfDVVXUAe<$GxLT&3M091dn)rn zO|KVVt(bJP4(f)9Y6{V&hG6~1#byU_fzfK#(OA>yg}q9ao(uonN+QEQx3c&1y^uD8 zsw^omQ-vMnwK0Xz`0`ZE#;g@k6$5pk9!ybR1%jzm?5X@vF683Cigo8_ME9py&^oB) zeUBJ??2~5IYSncSH&M|_X9=b|Xt{=Mf>z-U7_x!(WzrM3916-FJu zBwO)$+GAN2(D*|~C!oy`Ad?6h+FgylTQ5@|&#TqBr1@dWjXmmI!Il>1G!7g1M2E6n z>c2fPMH5yDW{Siwkq8}v>lN!&=v;I@x)5EQdI;L&1aPLC>V|3vcF-_RLExxjHT$zy z@r@8HZva`OeNsH17=VUT09(CKz z-_f})?P~5QDIS@8KKa%^JJ?d(JR+8??4a;RW)9M*JNByt&)Jpi(?gm0miiH(~xDgd{s;Cza_n9&nWeo8O&%AtFb zP&o%TmH*L(bLBG>{8p@y>4e#xyb6e9bM%!_bz5=;O272^_$OH5y^XTa)7|`3QOMq$ zn~G#rj!M$ZluY;H1{?71CRz&vB}ms%Xporp0C12v7PTr4Bt_Q~Y#Zg9l$&6uhXSDD z>?DN_eyMRr2Lsj7n&;~V0|2^@(ah=ktQc z<4M!wO1N$Cy;#o#joKD!W|{z4+E%7x+b1&{NHaa8mizZ=A5_!dncPD@3EQ81qWJyIRK&!X}aHgVG(1XSC zS<0YXP$FEaNe>-Wv!ou*!~os!cCW1{qP9}XR@3ei8&2GmVFuverts+t{o zWE{2*>u~1vRJ4{G*QUJqV4nD&%AKG3pWQ_*RiJPezf<|hsJS=cQMH<<1H)N!c$-TZ zy2i1|&V+mD7O{BdZX!Tla|Nb=Uv%T(K~2zHKHbPZdNVtQjwc*YtNIL%e}@pIPQZq&Q) zmjE?e6zjVOSjJR{VWndVkEuwEz7dWx5qHUI)G49sBvkF2aX4#{3eQX!6YaBv(W8OO0_j`e+< zuFw1Z{e1t1uOF`Kc3rpYIytY`b37jR_2|swWr(;XRMq1U55spFO6Y*%($!EeLy4nu z`pu0!2jg_v1uUwb=;D3%=!L7SQl7G|CrFAH6}@BbKMz|zQ~>reB}&-*rwNARzYFUq z<2i(+y1cGgHdKpK7}?vHtXP(6M+hN#>@4czLa#JeH^cq)L;lvpxfc`;7JU^JYtp=5 zTgWCc>p3>u`yJdsw&+_gcgi3aZjk5NzJ7H;(_#gh#jk%xH$`71?{Dv5gJxWklGmk= zlCUF}I7?8FI~yd1!WI4f^b#WsMKYFph|Cp&Mmd*wSh(z;U&9AY$f!jHahJ{%P5;+< zJP>14hiCY;ZPb2*)gRIju;3uhXMGqGS(`CE2vCL&Rg9&EwW#quXUgIM-F327zQ>*SVn` z5QGr3U&}7QC)sl_icPT@2K4#?gk2ivVOCYZ!QqL^v>y-U%6xlbI=@T3ydzw`Z|JY* zp#SV&Eh(1gWH|Wl{vEDU5OsR}l3$F*dGfq>f5jsInSG3heH|vV!m;^2Nh7-1WOW)V9@i4J zg;qr=Wv4Wo9tYW@TW$6!;k*ZhwI6SM-ygBYebOC2|9g+oWgDYiqXM@&F19$$M+X?? zTd>?^iNh|_x)YwhjBaRCZ7U{3L+c+e-u?7@V&%YUjf2$)RAdnVmdj$ZI<{o`BhqmFD#8*%8W=;UYFmt|VpA+jpGh z>-&7aI$NNj`kZaXW_P~jZ1a*%luR+APExZwH*@!MWZAuEAj|n_#dJ;p3JwiM;X$w{aafq~?ojxLK2W zXn&2L?;acZC2?;!7`}LXdksCNi*G2srnts|e5ryvDf9sh&_?`>_XEH64(hn-{+ zHR|^}Y$&z!W%uCb7{|0WW&oN0q~POC-e<{gr*>XZ)|hL8AneM+Zw^+VIU3^-S#dguPM)``pK?tryCWx!%OAYrlzwvkcYPQ? zNX*`i)Q2`!tu1O58zL$1Is{%Y#I{6poHyFmKwHu&`2k3tZRoa1UWU*RShI_e>=TcD zzkOD5yXw~!8q7}mMBQ@b<57W@6&d&5y_~EoAheY1QkbR`8Xc3N zo6{F>o0Pa`hipRZ={1)ad)L8CLV{%6_2=updKYgC?`7qR1o%(3dqnEET>F|r^wreH zD$=NvagBxF-}?c78WZcYeBR{M7o^p5F7{p7&$W2@?#Gw6q!MOC2u}yAydu^{%6xmp z%3U`D`dKOj`8ih$^YQW4&xMdDJHeaOES^VB^Or^sRN(k;Cxv&4q%SfVDM;O5PR6-*g+KDVMRofs~uqHDu-biilFpc;SDpu zq549(%9T1|_{uYn>AItYcju)=9$Nj{qV~x^(F_)$vyz`%^XEr?GPJ#`w6z<_gYn|d z7wZBrzn|pETn253s{#jVKc&Q}ufY=v0e_jK2&l79{N58i_dT=fBqqR-RDwIi2^5n1 zffMXcV#QrQF3nJy^jQ-WFy4*tMAIb1AD{QhWeV!OR6D$va3seZoB5|Hq28BI=fe>p z7Zv-TFC~3*#OqWMRZM5^P$isdpYK^1{X0LF=6`i%cF-jNwXBvX<0-jgZ-U{xUWSGN zwY@NlEsw22F(1iGsqm2Sza!&0bJ5a&IjT`5>;Qu@U`eL&?8Z&nF8s;QFldU_&2wbS z2BN@Zpa`Wm+Kuziz5JY134Dd_r$>)2kSg9<{q(izzD?3Y#K3?KOrwJV=8w)UPI!y1 zHt7zZ$0(lbu~f7ILox9BGaJj9AyW7k0q|4PFPHkBTm6(QX68k5zAM!zD3 zN6kX*Mll2S=edCKm2UE zTLH_^{`o53MO)asLj3!ZjAEh))6iD%WiM{L4Ac{a7qR#&qnf6uyav-?lcgVtBmAKW z&YNMj+x#I1-pd<4hyaL1gDi>5xc6*B40JLY-WLqdejVP6!FJ)-E)(v2=BR$F;hjn; za!vDUa%=zi%5c!<3y^|h_@dV=PD}xgmsi_tQrP^6q&4nN?TGU$rgfIkRYHZat`U3-)1`xP4*9e%MV0PU zF&o)_#DreD`nhCZF|7e=Usqf&j;+I+k|g64e?maNVQEp7jQRVZ|H);eyegOln7{oZ z@KBVbQ(wIO>+|Pv7cf7sjgd*NVeRhSONR7BfRiC?vU-U&Xqhy3glUe?EmOpBrbJgOv>i4Eu#R0)37KpLczA6{-+@{@by1r0{PWKITzaNws!bQ5y zKmEea_7}evg9I4LuIU`=Vl@8F2z_I+>6-e0M)OAzudW=ECjFz>^~~2J{txu`(~N_K zhetOltn@Dpw#jcLd65<{y1YtyqG_AsZ04JhvWeq4i_a{c(Ea9~W!rqujN5-ff$MU< zcf+ON5P&9r0mP9o1D#zIyTtQB?>$UsGr!E5_o@C0I(ng*CnEO7pz2iTywGBx`D}Kz z_o@f82a}5Y=3;I}ZPBEnQMLE7{o!@FJWuD9Em$`x0i z2TpT#Ue{+p^ZT7<;+~z8S=d_Ib4=(YRs_SsGoPK^cPfYlPNWMstnWzX+f36md|wal zR9qp=U@z0q{mj*$8*2w+Rd)cG$eH$9hU{`-GI{CC=&z&wOx$PJg|v!YN0=8~SfKq^3C z;tqkk6KR1d4x$cJJ$$pa;qmwL+H^2J729QUnI*)ILyYO^`Wrdcvn%9Em*lCQ0!o#f zZjs&HoXi`!H=fq*?PCg)yoUwu-)gd2*sv&e4d?RG8Cn|mz?<727-P{<`o;Q<$1-d4 zzP&o2K{Letft!LrwnsYZt&?wdMtYE0e5sEzZn7pwIN8&^93IUBKs)xW3p^_f){f1H zq9`91xwHH9&EL_2jj-P*vbv!VKN#m|Q@iUZ) z#%H_EafmN39m*f1o6<5pGuU1tqkjE$9cf0CD)?09wYI0J;Y5{*wzU1n@$L$4G%@DG zocDGr(6#b5m#nsV9%Z$z&_lMpH@$7-%st+W5v&25RoELmwSDHMh0s*4g;tDZsgBe5 z0@~cHmr6{nOK2&|wZP?saIKfuZy%i5mTP{6Jb9?>MZE9Y7q*#S zm;o79iXY{4-)+)u+As+-<#Jg$kpvWevp<5O;Bzg0AbtkQ>*AljSE>6{iW|nfCa$6X z%-wgRe94dU9++Iij=MgYqJ60u$6B~y4YM6HU0X%wM>&h?yZr7ZmOdDtouE^_C($=J zoJz-2$N!QnF{2WgmSjcSj@D(13>0>?(p=V)j^SGTDbM1LVPHkev@Qf0m6fV($=xBz zIpvU=mtavT>D+U#;}?eyPo+!P`ex@Qa^{!3HaaP9b>I2`mAW-cHFiDS>l2^9X1n6? zGG;Yv3cWCT?cx>W0ZmOS6!q=5R|gZu#m-8e`#QXfaApnYDQ(YZJNIZ=Wz$c6!oSb# z&NFeC#4e3}pC4Hm<8b+B*^Co5$}`E*w%KU=Tny+yURs_D;@OlNI6N}uK!<)2HC zbP-(^bWoDWAmY`34DA!o26J$a0?Q-fb6Zy9a1${8c|3NyDWr$1i_4%Ac(_@C&a`yDI&OR74{o9`+k#(#2l4Y7t9-p$ z827`DdU+>sM4s!y8X&0S-uWHwo$Kb%DgLSF8CNrTSJ#yU^=t*V!bU=Gi)pD#+*ZYv z>MTk7p6mE{@kTG9PBhUWhI!9Y(iBy?eHu0Ay?JNVg2H`!RnO8czG6_>-Ou~bBzl0j zDS736^{K(I4Fu`Gg-PGpm%qLeHzVh@c&oq6Ra@$a>5-v*ffk*Hd1k1J;xk6~v937q zNGdHO@2SW1=_-njW@PtB`Te}TP#3v+sIG%niw z0qub*_w@2KV8|D5C-om9PAmxsnlmv4-GV0S-gEZ8ZdJeztrsFM>*A2;*Y|g|UsQU& zJ9CpmUSv7Vf1@}(K(=ynH{p(;MU_hIcy2Tk{MTQ6w<(@BNf5am1#t7Pg=E86TMLXK z>CjVP1PzPmiP+`OBr1m zT;gHS{y2~^Y4uw2+WzrcAc z8l3pCw#@RUEmH2ge!sC>`dg}02m_^c7Rp(JIf}8))$b;FL^5tp7dL$ISu)#JnIP0| z)j`YwB5r{or3<$5%f_Em*2L{Qd*pIy8)7!UtmzrIlLtcbi^$wYfq`l~e@;VkMFjx2 zlVw!jb0-B2#E3Bh2FL(bp8L+PHMY&{-O1!+uEoG#qWEe&h`SgAuq&p zbY#2PX8$SkyF`#Hz(#h2Ohe-k%UJ)aFD}qsGe$r_@T zM?oPK;Iy(9qeZP3Rw}%>9V>kc09f0AN@DYOlwMZ6t+#ooLMg4pfqjC(MrZ)dVYwGqv2)?rtqa{I72f~~}vOqK$#?P0d zvEw;Tzh%ede-m#LR!#|T*at0d0;Ah3Dt7Pd^@x@Vh7P8YY+eyNY+pK36I8k_iagmk z(fU(5t9W}awcw+;kT1qW6TxQb=17zZE$YTR;6c!%eR%3i$S!5HgaRq9`kog$YG=Qk zj~GuS84xH79!jXZLC44DidZT+e2|!`5?H71H^QDTsMLS|9 zj={&Vsl|BpyW-wxcyrpJ4r2VE`o%hu@yhm{pHMp&`L56Qv{oo6E7BXxb}b`6wf17T zXdnsLfe8EY=9KKNHE&-#35%8acC3*Lo0MM_f@|pvikz2NWZ%^nGAoF=Hssu9ju2TL z$++?AfDNa7iLcP`k&~nc{tKpyXxY+&F`@_dR-P1zOq`#a;QQ zF8>bsB8ZFWz@J4?JZI1%NwS_gK*c*$K=6#rAk59X3B4u_doA^&9b41u_TUAq^szxP$ z^+0QAaD46xaEyvxdE_5}&R}yy5~6I_QL296g}h-N=6>dXDQpLfu2Dn$_Bl?-q8HYFNBB+EtfKKD#h#KXL6 z-KJC-R6yXu%2ZyQAbJvSvw5IVLhlQhE>j28ySIfz#{GKT9aLkx6Sz;BZM)fh&9M#+ zPkr7Xg8%!m&~J8g-Jd0@MI-E$ZBn@rOI%+5*5DV^u1|EHUs24VNtl&u#Ld;wCJXFZ zmy|i0%Z$3!!SuS?!h6FDyFL(=XfjDxY-6~gWJ%+{e`r1?huH_F32;4Yc&(KbXi>S` zqtAZmvT2Fgrx9s5F!|07>4d?w_tH2mBf@UyfsYx8v-gP(52j_%+F$8PkL4B9&bxqk z)#hA@Ht|x}1#|I7sV#|$w$Uh}k8!*>D%Wy#LQEop>_Kh)B-EQhn=`Br9ivZqhpkV~ z-M7VE^uGOg@V0jt$tOj|YaxB(zCnF@hToE3{?b5RhEM-&;!%T|Em{jmvR2>cC3ETb z(0cfX&85;Nk(^y?w(&Y!3V|<2S8zi)KYw3qnN>@(<6#orza#Xj-Gw_?zr)UUnjA8| zYokMo`y}7`+PfQ|Fi{?u_mV7+CdkSf7lK{*vDqIL{D*Fcu5hO+KeXoq~%e}73UHp6Ci_`Klv=JNZdx&PfdufU?A`0=f^$jdm(RlCb2pDmttH9N9cJCJ$2 z-_C-`3-#BO99wBAZk*<2G^3NO@Nni;&h1%?)I0-v!K_=KbOqNwqHctDjS>5wg)EJX z&vx-P3%Yf|%x|Z{(Rj1}dDBNRhv!wXtw!vh+O1fFoZy&H+WugNd8Xkqc2Y2s)%CsL zyX})}kn=`(R6S%j?@1~R690N%GwJshvs9!cJBTD6rJM1bU3xwdJfNTC_Qu`kn8ABA zgUs31r)3!z{2nW%^pyFG{2mZna>|PXM&^)<(DeN9(`PNE3KE4n9P&a&B_Y{8BoVy?{hqpO(b9DO*?ttT@)L?81sO^Ow!tfr3lR(Q<_-Lc` zmzxGMJKrBo^x~$gmM5YhS?O5)cx`mYK27~GoZNysr(Rd0qWIOe5^aubXof*e(o|$p zY&m@E#;BrFT}Lp`TP#%{~-0&-+3Ui(qb~bOYs$Q_c3^6Pwp(W*7#|} zT(%l$CMixrAF+&ebXK ziDrm``j9m(Jl#ILP(L^?Fq#h(#)XcsM>)OBAAYW$LRVd)RMxH=VFeG0C~K@X0tlpiq24>hu5xFcny)>3vU#Bm z4mH)~+}UmU>_cb}*GHLF<$SBHHisd-?qZWx&DBZIk9zK7IJ^BpAd_nCKV5w4h?5pQ zA)DB|sY3qI_OoL)rv4aTq?(-B>0-j(1WDl;D*GtCfE@Z|wpxRH$@|Fj{KeW;J>2ih zRWx5M{HgUt&STu`qeodLo?r)#?z7%4T~+pE{-a~x88f4lQ&F9&(F#24uj<1nLGL&D z37P&KQ!*z@W$2ZsF=6&$*S4m5S)Nb3ZQPX`$w)F63h?eI$P;*LMgHca$>3Xq1d#qu zQlG!lTFr^VS_4`<)=J0bpPEPB3>IWjzo>cY1Dk9AycSkzk3ZZ+HeV+YTahlAGBMb< zl)f(M9`Q>bmt7o=46jp(iEL8;OB*uSM|(l>M`Y8->oo!RXE?Sw*5@?;!!9%~N>!9|yVcDwwkQR2nXoQu zS;w}E2W6`7=?qgnUI@sb>^#-gVu!EaEuXy$4WfKJ-+F;Tfvy~`G7l8rR?@s!<|A$) zr-x2CKttv=6={0QU22ajg<-rdd5En}h>L9>>49aE^0$afu5+6+lTm`ZrH=^0 z)_6e5GtUgl?0B#Q-a~QpZEw0h&XD4zXIW{3Lp-P7h!@XPlF49sOy%LT6rN~|pa}M5 zvvT1Ff7S;8UHjeJ0wyK_2_5l%MbN7Nbx2Y;+H#>Y7M zy#WJ;n>#NTUmL;iGMDUwSv1BTteC0eXrOCNQ(5jieW-jo5@$gz{1Q6iWQOb0(2Tpp z@~gi(VZ7KcalXBnD*QosOQCs5;N%Dcz?&U4lt&P2>%;vkm>(jh_ z&WK)PM_(O`vr^rzJb4*;rC-Vi?Qd3ds>%ff6@NBbZP(F*3fI7BzATvD^FMD6g3(%- zH ztadF?YYlQxcgCVN*0ep1KQ1CU4F{5ITF(u)pUq6FixJ*LX}B^KfNX?y=|Kr2VF7oV zX|wQTcU?aImCazMgaBsAZjQX4K0Xb>Y9DSk1RUl9uT4o5@0-(248%}-3wtZ#U!>B< zx00mNvt!LkLSPsc-*K$EEg(y)_siJy`QopxyS&mcKI02ZwZ9WRD;i=(>Jx_9mvKm3 zychP+zcX~|=T9fRxbRHQ^{ovCVKx>K&E&=K0VDFG@ol9t%i6!oA!bPRTJc-f479=O zRC}GZI`v84zMO8J?K)P)h7MlMW@$j*&VnZy;pFQ3=ZVKQZ1CoUdYL>M1%}BCzr7`k z$jjR_g+v9x%&1ld4#t3cR%a&qlxV|8c~AR21B}R-2t(%^}u+LB$Wp2 z23s8DNBV|5z=}rLW+s&RWNDrzel8a_B`KHQ-Bv!tBiURvN)DD&gO zwn{%E7JeChx~K8!6M(#tfM7R5I^%;5y;2{zB%njo*E1@kZGYH13eu+tNt|ii_T7q> zzMq;|ps5)dqgKb=k1BlnikCIjQmR{fd4SXI>@1zMFguS9|y z!kvcxF#6jm5j43Ra))8Gq`t^~wTkT56AK*-Lo25+gEx&-kOD z%T4ly0+7dbh)j+lVck;(}6QJ8pr6AIziM==G&wG6B|p&Y|?VF5l+nMJayS3f4wsItSKX1 z<=`QFP@aRUv6nxiP92A6GErXpBKIbcxaQ(l?LMm~pFVJ^K?KAi`|jT0`&jpMZ!lBf zUhi6q8il_$`BJXcae+5Q`smkFmVRcRwwGPVdAoCYdrn!;^J9nii9t+h*vM^TABM|+ zZK|++VchbZ2oqa}?IYFr;!8G==@kQ-9xtbqwy0Bj{@X8DKS=$Cv?u8p63)TMtw3L< z%B5yY|2C*JpYClbE^r;y9QmDBloR?N1zYQ4-q%_skz<5l36OH>)@MHS_s(G+h4Y@~ z13^`fhMyne7HE*~woqh-t@( z#d7@D&b&>IaB#IE@=63B>~)0LO-J^$l6wDQ^`jBdW@t81M`i&>u*kI19PiDD`kK+hK&g3VhlWJ=bB2l=0V zEw&xn^j@ZE65?x}HhM_s2(-2lbIl3#RA*z6(@=2IE(#~jUfO z`sj0NPyWwZe6hJACShetGRfb|H3$q{k=<~rcGfy!pfz90?w+56gpPMu2Ms&Gv#gMf z0!Fy%NEZ*)9T@2-Zh4>h^$!+m5@+uZj=Ph^cMT3oI!N4GQ5y7H7zcx^1IaTT9ED@v zE=F#d8SjxLjwfx}S`6IH-_$j&L)mvx&N~zp%wBA@UUG+5wb&^UzHcmMiMTL&ZYSy} z7qguDZfUuma;v~X^}>Pgb(MFiH%+%wdR^J#WZz;!(n~np8&f(SN8z83o z7>36c`}XRt*@3iiPE{7wo*TSoSGq#HFLU^ax;U}c+0hIk;EOWrhu)cL-Cs7}0q!Rd zF6JZD?-}`gjBDMbuS&552?&{+#XiJEe-HVNm%eYcp*yTp z!?-M|TWp)XXKaxZ3LRR+)}Ow@Cj|_PelA>TBOWa<(g$?3xY#y-U@ShP{&UBoNc5_aS${=A-&*$_jC6UKeVzNf4zSB7>QSw?b`Mg%XjAiEf+)U65WUtplQf}gF);)3-S!!SI zKOUzjcUf0%`iuwVkfPV`^!_TgjqU`SvaU}ivcCq-?mmLBD?SMsf>$X#htJrF^&jo4 z@^TvmtE2YnUlD$3j{AFfF*Sa|)LeqV+|A)In zO;Yu`dQz1ap$s$VPl}viIwEUlJ_rd85)}HFJCaA!9llRlhprSTTf{PiitcU$yl<@h z^s5@!RG3tP@HeBt&y$VJcpUU|vS^?uS|~n&{-}6|YUMM_zcw=;dcg_s zhna$6L13x*TkaavxL9>nZ=T$UjD&^6&mB*cCidKiZM(A3xKh;jrGRdJ^pZ zF6`$*w0zDW4_FQKUt55>c47Fb(tT#herj3rA)fo0U27A2uQzA1q_oB%)Ih@O#E$F= z@L4W&?A4|A%nPxBS)2GMD|*1LyDF}5hdUHG{wPxcE?Kl>m-NGA8$jF?0=dGE-oHC3NQDg_(k*#Eiq5b@{D;-eh^Hzo|iuW&SD zdKqPE0DRF2u#?0>vOwHnJ<+g0t;!m5xh z$B=Zu@7Wg~b*SZlzqDyvVN3nMN#QHX%&ha}GHkeR4UUtfpWlk*-+n&CCD!2UaO>@7 zt-p_}KtibcGlc7OYR6f|r!#$bj~s%(1?{AJpn?131yA)CbknI`&@4z?^d-X*9lZJG zl+@t;_OGf>YFP~MH}))6W5|+=ER6sAx+BAFctmJxYu$xmmjOAM+5l7;;GIx>48;yZ zQ+q;KzfHWS|DzXzky6-S?L&$e5KnB4Y>dc&kUSgqM9a0u54AT(Wj!2Mr5RqHbo;1Z zHfBPvQd|aTWn3~BCw--P?iPJPGoY#oRDVOFkr3+(5X{;gyIPi2hchj; zUYRmESKT=1Vf-eQSz$vDy3j#&CR9#Eh^A7fx1AJ2x#46{pb`3E{cO19t2T00}iusJ}Arl@lvEFGD+UM z0o)KMy4S}hXf9KW>;}vXbB%`&+1XX#!My~ymwGI9LNIYQ<=HN+3l;1|kF?*w^ghB= zQ{Jq*sDY#x%+f)#$=Rjs*DrG(@5~-l&$p15*P+cS5Q`?KV~rSYqWV{f+%k!owqT#r zy3?FkA{EZ>^61@f5@!8IGvW%MSCQfb_74p^53KVF6_E~%^0R@ z$X%ryZioMPGYX74pOxRTNR4{I?;ja;30&!r*SpY)^Vj-W82$BcooMJ`%@5KA62-A! zl^IFDE))l=T%Z!(Lmr}fmwgv6WURwVKdKjhAKp*+S-+i-b6W~P+aoi}ER!m`_YA*M z!Nwv0{LI;=s}cwdh!(V&*UH^$5_ES;x%7*79scp=bgLGYjlzCCRslj4o%^mkzF=m_ zKqm}6JS}9X?|kiNBlxZ5*8W6*T!?FJ5_>BXcYte~VOuJd@rYz*;kdQ7Fv@GO@#OK6 z`do!`?-vuWA@E+-%M@?Y-OI}T&XN z5Qf$K{*;iZMz^EM!(^*nF;0*nY--59W2)g-tRBKX4!@0yd`rJu~Du+{6-L*93sUwlBH zB08rtT;9h6k+)O=rsy~;O;SD>d(uq`#};l(p4N(=D1q2GB!m>O=U@)9 zoWfaD_w82Jh`w^URerTf;(KMBV)LVPC&@vLN4YG*)u7V++hs!alb!h6nQK6v{Aa1T zKBWW(>+40t=HGqj$p#1}zbDqSOsv@s)cvA=8Lo3QxUT>4 zB55r=-*Zr-$q;8fb$Ue0bRV$CahY_%+YIAU#NB}cJ$?j+AsT2KQVRd^tAW%!wK(3I z;9QKR8R{)uul^ugs+G8cb3>YYtSy|h9{Q@p*YHvN>p#8}$2M`CPbVCNjPb5$+4Yra z{#pEL(tf6i6^5q3LQ~`W?RVEzed*cyx%!P)@*PTNU^yEgv`Vdj0%K5*g_|A>m1LWQ`vP+J3%4>7+r^M&GCGcjPLh-x2*R>7rhM5noQeBRmvn;_-NzfWV+Io zCp)vX@1$OTwzDJaHV=dlWD%Yq>BE^Z?rmp(d>+2=f!dRDU%7C=2eyk^SBFM=LYmsBtlKVuKy!De7aye&e`OH7Y_qM5DLAWZ%evhSZ4 z@M+KMf5xVVjo~*T^4=zU@WDsp3py z7P#2xm0R?`BblZzT=8usV!{?nRf89lUp$ogFD~H0g@2yv7)d7?J;M7+m0)?>X8X@| z&MwMW_s1+DWgS{B35L5y8zJgN{YI%kfV*Fqd^8BFTEUnyTB=+VHv?|r_?-9OJ{l;a zo~odhbv%NPdB)Et37dO^^qt$w!T)^I8_kGKx(qV|JaZMF*GIvVL z%P35KC05RM4;LufPUoDP3F-*(#OZ3131@&aLJ@C}^*|>TCK2GtW}egg1@-l!MOB;9 zasSmgW@+*3AB%o{hE*%WaiLTZP3!cSF=A1r`gvsRIP6pNvMV|WyWV9OV0e4ffz18y zP~Xk|@9VCr_p9A_*dKV4!@8v0X08$d=(t5~AD7<>$4KK3E%Cl4TU)Ya?RMsQ6yZRr zytq+ti|=m_2$HoFOQq}*#m`00&$cAH2OV-^wE}WQJ+31o9W?8i!?SUU8~1V=Is(37 zhJ{i_gKO5cIQG=IH!BNTdj6w>HB^Wx!I9eSxe5& zP(F5XpQ7>aw=E7UQ@vsjzCVgM)z@7=cQpCex0`Ps65@*)q9DBtLw(p{^7G%1x1_|C z5DI|7=qxX52JGzp&i#+4q$YbE3VcLDckD&SKW zlm%6iAEuE)29R+6rQ*Est>52Uj-7)I8WEB8?XZR&HQ2iGIie{{x_fkPxGs}yK9{gw zyQl%~K~x)EN!D}AEGVGd$td6K{jPP^*qPJ1S%=%1gK8jlcg%6{26^Mm+%Oa48tAoP zNwOOm_Qc)O(4U82KKkr4D~@DQ3S3ol<@&*bPO>WGBX=A1E=mm!x0jf_J|V(1L> zdP1%J;|~J=6`3$Da%qBBMd|v#kssF`l^8|nqc7G30TGiOZ@`+omP^rRg)?*gd+_mvk&U(c(N*&*FV1@?&jav!507d8eAkM2_OF^Ub3#gt6msFF z;=n|a3~Qnh0a=X0|69-B6&O;39csInmMvZGi8bV#m7ixM_usvs_A7ve_7KV*G1PAr zfQw}#lyD>B&K)YST^?$4U1LP_`>s7FiyK$CXNy1CM6WU6-N(ymJ7QJ`e2gG~$N6Vt zf>geKjv1&0&Ss*q(PEI&jF{<@a7g#x_G47l$C=ty8)&j)S-gte;yA->Py>oVrThi- zb;mo;$XI_q#3t8ph$Nn`Umk8bZCOS{!8XeKf&zhM=)<=XZ*ypBG3!99#@)Y57{nMt zzi|A7-f=$P%alsb2ur`Un+)6FPW=j=EbRn=3u=Co1)WW^wyp8Zy_-UBBQD)N&uE(w z*N+;$tK%S{9J+IEQvX}2xvGq}{0>Y^7v;ftT+4*11DRa@DDE)VAA(dLoczggr4#7b zP_U+SU2?c?iU?U>p}A-vE)g2Iq3JWp^P{iQ_+>q(u4eE=mbA8IG|B1~+Z!ydgUl3M z_-7H$<1L_3-@)Q+7eIgd?8OH*8Y>d~v>A6H`)#-h2#i z1LzgZF2^!r*hYUDeBedmH$CDZMw{Skqm?WS4 z=$Zp3XDtJ&;HX?}0&GnK5G_r>Z$EUQsDF_HgYDBmhSB)Hj|nZQ7KHC)!TlO zu>UEg-_Kj>y!)4Z^6w+QZl1V+{X}2P$bUcAzox!- z{hxn0^61k4J9+K@XGuQ=%_UCci(L>8E_uL&2T$1`ZmdIW464(sg9|y!-A$SUgD0E4U1&8|l=c*1`V+c(U zy5h<=6+wGmOs9{*zD}G=o=`BHHL3gYI8q@pBdp>g4Bb%)(vnYs} zqj*LrGjN7~pe_9Z=G4c_lLij|EW}LL?}4!^4SYsYN(U_=Qbf-Xa0dFTbt;H}V|??g z&VyVnvcG&0e&J82BSIxGWWTzA<&M(Xy^(xMFXa{*F6e%~r^Fa|ll~<5cepr8*FpWe ztJ%LB^dF1F3YQ2khm=z!P(Db^H;?rdr{hPwmfF<_dsmG>jAq@IQY$tR7#A+-gv5#* zS$@z_umV=>U(oAl1s}s4=LrgeB)z8JyqXyX*zRLe&SqGb|L-4g;H1EnQWr`%5Tgl0 zH=lr~P^8HpDGa@UsEhZ%stH!-(@!_S9fK6o1`FE5O*(qmuspTPE!V8zn>)xJ@w-+2 zX9Yj?-}mV6S(628-R#G_YoM*v>e6HXJ~uYeo(2&o$1dxCerMhAPHAgxoX0_39f___ zRSsl$TXaDuWotE-Ps-urPLvzhzxX9f zjvllpKuZjYP8V-xf^g0b=Y=+K$73*<)N~Lq6nA<2)}&yeV`6@bKjfk?k_5U>r1nxt zVE!4WPrx+bxy&o3C7o7Bgao3oN^Cy;aH+gHVAAfm>X8dOA z8jk#l+*j_#KQ7}fQ}140v2i~Cl;n7I<}Hd$abiNk0`iglW1*H338)LB1zZn4v24Et+$Z)E^46=E5 zm`kk3A#JSU1ElygfZ(o)VfSW?9s{p~iL$)x<3B;ZFe>=*STh@yk`<<(t$XwL_h2g) z7BYZem#cl2Bf$a^4RnM0PpvrcNyvKZ!xaU&EJ;G1v)+g4c6^--v}|R%uMs>|7cl{c zY)tdbEBT-v5`c;$@_2n%f@^WQ7I5yUGwB+UqM}Z0CI?HV?5p}Dc>`yLHLWqL* z>pbLgySdMz^Iq6IwWlY`pntI=q@ARk`Y$o8u=#x2VsB?A%fK3iAos#}8j})7lb}Pk zmMB$I+xiuqq>W-Z=pDi@>)Axif1(l#)mS51W+3x*rl*xB{%Z*H{;6dcxqx$|eEG5a zc!j%{DI|8-X&*(ZL}S?!z^=;&fgA5&QcIj)UXwXMoY@Y8r%uw=$S#5DV3x^D?}R3^ zfgvXlyE`~Jm+9!*tQ%aEn(CrxEM63A0bcP28yl2(S+{+uWlIWcMoFCjc zO&M{;pk1Gq{^^lmMNdmru1a#)3YxkGLh8kghi}Fn_qobV%1q)riimEG@Tj_DAM`EX ziV?0Z=avVoWvp~Y&pgTR82^GF#mktIZ>1ULBk#wE=)A>QUp2G0`sbv31fO;!OvY&d zdy@9tP{GUng!vTGXNE&bA(ZyH)XlG9sJ3Htx^%Ry_Qk@-5#u%tZn4Xu$7ePmNhd5B zGL$m|@l>(0SgraV7Pl$agNI^S8 z$~aJN1biph6pXw%Y4cNlT4WlHYW$}88g3DezWZ&@cJ2K@`$XPeixq8gdX(&9Ok23> zTCG#*eWc#7ILF|*0=ta(L|?H(W{plM&@+g)egm+Z%2$%4UB4YN%Bz2|Uaitvy}dbW z6-E-A?nZY~mn^J#_%*^Fnv)|Bf8e zgNxD4-}U5xYc_G+$MQ~6_aeiJS2bT07O9iJdO)6eX#hmc@biF2xtUk1&@} z!sV0Y!ky}dfMpsX;VUw+Yvi`v{pIB=j8T+jw<7M0$ge|QbB4VEv3i?iNhp=Yi9yUC zOS)abgMU>*zAgQy@3tT2;ov}Z2jl{08{*>S7J_Cg%{jCztE>x72$&gHcuey(hVz#O z1jXHM49`ekB%9|doTGBoBQpI(AQn3ulJf#%4F~bS>BnDwRbbzxp~tQ=+K@yk@?=bR zLsSda&kF!|7tKM+Z^GVu9qaXS6gtt&&R2M)K`@~#-ip1NDgiz7n-fCz1JZ_c!}$;@ z;HG%!Wtlz?sq=tzx1btVnm?Qm=%5v_GVO=~bX-?`t5bwmqWQA ztias_>N7C|)k%qeGai{3*vLkT!6j7PaJ*6_0OnYitAu;)^md8GTiC+aA)VQlR|m&i zk`Y~(%83u{(A>lA_CW!x>nc#E@iIsb0P|mR9C0lL9bbeJSkYL*loE!T^W-vr@puA_ zEW!2y*q9hlsTpHtZ$(~uZw)#S{nE#iODLiUbtFu4Yv-E0jWO!8DmJWR+J9{{28SO& z{UkGHgZ_p0#NtVwZvG7A_=6nezrjCR0e|18sok*FqTe9a>fPZp?<>ljj8x<#d(sRa z8Cd1jauN=8g~;7@PX>YifPP&OjP%61sBc{{LP3FJ`QjSGg+li}RZKHE->IN6CGE@@ zoKvA0dFklnna=4i2;qFo8XG)?3ZV=>y~&{?w|8;XhjFd;oYK_aKl`Bt&>rjNBUOq2 z4|{JN6!rVRjbedCC@Rt_AOZqPHz?iG4Iu6q_S>{n<-EVIh=S6mc`KJEGS%tp zSK3eRA@j2Lw4tx?^r#ifW$I6g=HR~Kskq!}ULcjE;F6f1*c@UyBn!5oGl2kOcKm8M zQ^6m3q@;mD@8QLcWB3cs7ix~iTuYecQ+9E3aum0z4cXoSSe`-T5=!;iJtijVyfgrO z4ETUMLAhbIn|PZ^T!iKN2gT;(4^!Db>sm}~l8yIrBhm8Hz#{Wg($7r=_IHYDyf$oq zI7GY2ZJ4HkX*+Pla@zSVy=%jLb#*yoUEmr2m6!RqnF@%{z#Om;qGte7`6!M)mzZ9+ zY<}y`Au7+_SpHtu<{1ik#AP))kRN5$oXN_;6WcCIB-NxC-Vj|_>APO-luBmb>vDs2 zJtoDY@VH%YcYJDoWsj`3?@=hO(=Xzf)!gIp6soc?!3QS~YN#-&v@#T~&5+pfE!QKPS@FZgjv0Yq`pS7+hb)G$ET0oMh$OPfhZo)#Lm)!l95M4*&C+ zB+KWvjo2CJaiz^$ilA#5ddz$xk$dC08_WDyhS!2@Sx`*&hXn)2-!YwtA5fR0Ok>S& z;M>S~XQQ7U#dO5UFN6^wxy1!d+^dkds#D&x_&}BZM=f&RhLnHbX{6XNz~Y4(RN_Vl zahUL(AMHen516%|0pR^*g4cX|>@I)hj0`)d4VE9}KlN+Uwd|--xaI(!qXX**wvfhA ze19w4lWLgN9ME%RyF_HrKfEC8Sp~%8s#;u}v9yY@0%DvmFhQ&qML(}i^e8QVYoU(& z{jHJUN0lehDruk5K}6*wCMwl#=GrZv`w32DeN1eqmg3(&w1oyJ#`#GeI9&0=)yJ|X z7R65);i9t9U?U(0(r(V}Y^=z5(s&#`fXvHL4xYlnT=CEKm}_<%Qn{F`_~zD=qZyj!spHq0<$>G+VCZN}K&E|`3{)b7 zTy~YqMlPeQ5P7JAj^I98DCT-rND9@ildAXi=^|e^r?`E#fgPnz^`yd%KJT}DxPQ|^G?MK}fzikT_Q}tK9A@6zddsFy4lx?e3la^${>Vd#}neQh> zD5U>$C#U%#aOsmzdNeBWO^-~xhaNu%i06U1ZAkz>E|1SGG#%=smJ>WqT^eie0FKEm^0RBHe zTAXhfKt9T&eppx|=T~(QiFdLhpUN}BtOmIzfW}^gixui~PL?$LZx`}%D$lOs`YDch zm0U-YvZ>FvsqQhdZ}rH=83R>c?^2vwEo<2&ZJ^Tp^yz4XDGkZK7iyJd-B=PI2oT7&*(X06-EWwzJN|_~ z{dfU+7w_CD6EM>wffhlcQ%j7#lSY9y0}z5KKKgn?MAcr`49#;e)k2+A5wvFXsvb7? zSv_rGGRH$xS2k)1J%O&yUF87$`Xai^jr=S$P6pS5^hzDUSh$dyZo_-um(y|3{O=~h zKRygc@~VXkrAd4A%ZbF?A8L$;Ah}w1!A7Nvs8B28Ghn%joC~0x6T%1e&`W(tGImRI z-1;FmTRh&Qy^VRNa8c-}$MHH#){G6lsri-m>cXR3&GgzEWZqk^48WSzx#l6+)_HPq zTQO4PHQI78Q(;{j7@887b%_VnGJ@a?e#G{g4D>l!&SDQMP)B+> zLA}3e*RP4vL!|?>x4+6Mo9I;%pp?r3rGQSrz!>PW&IpB4r>Mh!+LFxqBAcD~fxZ;T z`H2P~&`897O!BhExj)O?Fv+b4&%;sV9QJ!wrXOA_y$Xx#4)rPQaGA2J9tYUq7k4jy zFyv@3C&KM1xWnSnL+CzqKXw$b?%8XB@&dSIeir`^sy*HU4$Ad@cAC$GQGkuc-7(Ow zeqGMfV0jdlWZW6AWZIo<(M@?AKe+j)DKK$%h=7H$?x}i_{>0VgaCSa(YWh(_U;$F4dK!ngy|9h68 z=BB?D=gtELs;kUO;ewI`Dta-dg$FY1CAhaKp4quBy`7{&aclK}RU3K*6_+k59BGys z;;w@;xpV|5?jy#G7Ei6G5Yz`0bG`kH20mEWK%rhsZ3+}npV28V41XB6Cy$V^b1*xA za7i|s`4&;s4ez5p3l+VgCgIcYAL2o6IZ7E2wbh}a;l~zyG0&8K884Xhq)yaEtg?2U zAhGQ0W1DhbwAwPFD1$MDzVDq4?*m?6&E{}Y7<&^hU=j$hp2-36qE)M~sX8x0QX%h; zT5!BqV^>N4@H{_48o9#)9n6W_Vl)^)hwOm3HmMxm8G1r$@bx+thmal6OGTX+j@K6q|ED%I;G zIyHbYS$P@S5Ce>oTF{H+9@$nJNP>tBjpK2sG9-@|2rlFqhfvD(FyX(e(Kkasl$+ss z08$@yM=Na1E)$&gN_5sg+90H$aYRyMv ze!~6ir%o+x{}-S4|8nIo7q=HM4QavH )`S9yU{ox4~7n(W&N zgpba7=yMEi$8B>}JhSfU#q<_`t}*ZLUuNF-+M>TQLKRpMJe5082H`$Svi&e(`p|z2 zF}|)}oJf3+b_Xn76E}cifppQN4=u2hU$~IDcjx(i!?F0nKj8f0moNWkkn8_f4i@wZ z;Q@n`M!Ge?$o22W==^;mB50Rq)iu^$|EI;rJL4On!mRqm)#qoNA0o!IvfIIf_iNsK z_&0U}_$KF-aB=)k7=9=uKf;6ZHy@lw5}E!er1H_#xNbzByAgt|b3Ovc|Em-rtegYJ zJB}OUkqe(l@(~eE+keDIfDa#_-KvAQzc7>)r-3?5=qM*sEi`m%GEvGi6C$^w>JV9?o}?FM}g+wGh|{IukxP1h`X5o z?4>~9!Uh8F(I9P3YWpr7ompWV9cT|jL^vX1fQT)+zcxt+0A(%EkV((sBTm|Pv8)Cx zK=3n~g4anJAV##0Q5HB~!;?Z+0sXKjvd+s@7HAD*0{$wv2skR~D{y(tw6=Tg-WXxj2Yw&M86v9RFWAusl+~e)DD|&=Qjg+nC6-Pk;T_ zUaZbnFagNGjaR#Lko^-fF8OO<&`<*cnsPw0)?%z8s;CRx;yz$QCyD@IWy4b38yygj$CFpZ3QWN^t*m1O6SDO^9hg? znVqD3LD|CjN(p+o2#zJNDk(Sb`*no2M@Eu@%|ujos;7+S-jbn=-EgY!k%b4;h~5LB zwk9K`kR8whG(|7Uk7()q_x^p;&2w#0^I)8K+B#zoXt*Pl78$iimUr61A7>0=QUSB$ z+^ueY`e%S+>-GhBDY7O4h$NT4QjWWWboIIUI0Nw8t+Di}IpClj39Ki+Q41r$ZvjG; zV7PJ)6I_ILao&dkF5=besOe@v!M7H=$}0xM32YF^OnEDWpmfU7wOyZmOxX^Ii6+`! zJmpm`&>e|z#skPfoH!OBC_Cwdj(@rFz=-+W*5Z7pvO=CnfON2(1eCCi@shtC1&pKN zpsn~n>{hXFlnAE*vc)%O5wo));KYC4AM6&u_s{dEKZiW}>uCa-qy%7tJo;Q3Ku%UU z3|1>G=if;VgYePn!PWDgc770%|NUVrXJz{PAb=TZiPm~O44?pl{xN`?)(##X*i0X0 z4|11-aF-6iU+5Kuu^eh@7iIVR?%!KD5Zang|I#4T38w*?au(OF>cFx3U8-!Co) z#^a!|{NqT1bNSrN;p?j>#N)++)~`a(S&ZIi)plv)Ac_EtNqqU9gFsy5VN)lVj{Y83 z`OeEsR7~8yasS0N-oKaGG;=Da4W!NzihxrcCX3Vu*hSS%5v)a0W7vv0~ruYW*MD(d{>-#%<5=ZHILO zDClIOi;tRFMzbW)D}xZzu0&HEU>$rO=6XTBu3zI?0O&gE06jC8zbF#_VSmspe&c9= zFaq=;C9?72WdR^I96T%|Yr3~KsDq17bsm}z55Oa61ro-Ynk7HjJlgMB0AKsxA>=5s ze;QZGIq5_spGer(I~SaCP5?d^)#0)pe@1<_Nese-NeuJ<-tiN-<3GoL+mwjs>a}az zGmStOSIGPF+(qyGP8EprCA;$u3V^HEDN;A)3#tEJcFX=N7`NE?!079~eKDalG(J|p z#?#sgzTa>c`g_(R*TDOiLcbd84kG~_5L|dlm`kzoc2)P++%9_2F+*s(k`3>2cHEU0WXIOE%m)b>zWfVhJW? z9QWZAey>r|Y4^DZudXnUo90Awf9vtLL{M*+lv(jqZ0_tyo zWW<6qhIP{jYXvWQn}5T(_4)=W;UxRh5C2>MlZr1OEIRHLdwt>bqAUECdkI>L6>dOi z)~qEit_KhhX^0UbzbZ^)j#gFgvH$0(A1&OGR(JxHbb`{`G`%TF5a=zsnwI1U3vByzZ$-{5p{pZ7EpxIErn z?ps6Pd8b*P^biSL45LI&*Su+F+fj1hLR(umRukSYUXaNyYlv{OZG@hGK7FI-f?D)j z=n^%kwCAmr;C_ZP34hHuy|K;G$}X_?xQ#Yv}okH4gwU^xIS5;yHon;F^4|amZ-k#@+2BT0ZE^67PC+}gr{+nW zx&+5F+E3(i;S=xz-)7O|r%Hj&7cYrJB=}C;f7ZADlZVBk?%@g6wZB;Taa)`QyAx&F z4-<&ttnE(UuPb+-Oi{dSU-z*xS^25scs%`3Ya2R9jI-7IWA5VBOYrD;emTy@cP?q^ zw!_z0iAii@0~YPHu29(OMh4UuhLg$?w5mZ#-lZOl1j)=kzd`F8OQ5_!2Q{PB!>V1; z?=t>F1^sv6oqkW#Ff*v8#asN|yZj{YcaO5lWZF@b^>C?Zg$-OthpX)*H(#PqsD6tg)df__v0^A3};t1a_gUkvC+^e@n<88ox8h zJydr5M$PRWeuo>8>6sf@zM?A~sZ;mw4;lhq`8Ouj_q4vkvh0)^%Nrm4`;Gs@4>(`A z9f-f?_L)zx@Y*--ZTF-=9j(#aJGLFA%EOlNwZ`kVZ0}BOtLAboGg2A@$XThY#!hNI z?F+s4Ol=q}vY2V-b@n52byyM%Cv``cG*g|(tUP2x#SwS*pe@D|b3*;UMp```a>raM zJ13Ssd|0|R&6`&_re2Om5a2Bmx+v&WDzhJ&pI)l6%>J1oTiWC@39*tre(W^=J?^u- zZQ2C0Q_FtDKK=&8YDNY>^SHH1KWl`UrqjKVQZK@=hd!)4o?_h0vSWH`!Dt;$l<#~C zRw$a)5xYCYb7y9;BGwtN(-J+ zP+9Wq4oN+7sly*XcVD)29UB>^z?}s*d2A(IqpBeV+d;804>tX1Rztn`%wJQn!wLDj zn@pR!oIiQ7#1{9w{-;0*Z-T1PXQTnJNsI3CkXbeAwp-XnazvF+p40^VOGl*WlVyW; zMlFi80}}Pt0bhV6Cf#uCwd$Rt=4G$Xh_>rBc#tOhh=CFb@!N^j9j(%oD2F~tdEnWq z@ABNvq<&QS6!^t+rN$g+eTa+OS=|CV`YE`_yx- zKOG5bQ?357YMD)$S0>r3&iJ3mQY`mwA-f!zs*FaTx5-QF2K(Y?HksATS7fQ682f$a zw5#$O4P;oQ&xD@p_%5;HCxt{zY_JP$4wI-QwfVD>bQIR7xn^1QL-CB~=Y&EnK6h+< zy_(^@R}QP)Q^Y+}NMt#HA8KN)HQ>P!pJP5CZ8~zjT14`6LS3+iIpsyFy49=#Mj`88 zq$qVXj4@Jz3Qt>EZYb2xeJgB#*@EzfPp*U%tlowUx|M2lM+-ks3|Jswn@Alz*7rJ{0rr!WC*i!!V(&%kE%Qw`YxT(!w`Q0e- z!>cagse6tmXDqk{*qqn|gOqQ_1*x%=jUVDvpz3c@l=T7@C~8db?GH9(dKVM}vO9F< zJHB7BUA2GvZmalp5#cRuukIC#D#z(#ud(pOg73Vxjg8Je^1W|TDx{F#Uy`$E3oBAV+KCJBN-E$r_@hMt6Wy`73ipzR6;mI>pGZY@a>TROZ zYtKG4{;JC?xx!PsoB1Z$>GF^7S4i~wC9rOM<_c!=PAzN`NKSK&Ui-3I!%!9tl7NL; z2o@_x{6#Mfw`gjMQk~EZ4{2i;tz zmIv2tPP>i_`S*Rcw$-5qy~$S|!@H|a#Xa!~?B$6UOTS#j$L7RKuOd&^p5nX=6(V0^ z{~*M)#2z5Tzr_AgNOp<+laS7E59v|o%qhj+xdZ3jQyKe@bSCnooOa2zTF-J@L$0v7 zNwG5+{CI!+;HNC7$_k2Mr;iX$duo-|TFHG=YKI6viazd%9VXKAn^>q1m&T9>P?3#ljR_}CNrjW&-qpcz3U4q{I_k*2x8 z@z(rFZvNCM506bwXJv%Qiq9T|27f$J*{>qUd0ENePshtc?|tns2v7G(!K`YeDvL!p zhndwf`g38Itya}ZMJ;c!Myrd0wum;I*@(|=ljqUno81CB($&s|v|5ohnIVBmGL~FL zW_kDcXXBrGLW!ywWuJyPWXfD-=(j7cH4uc-x(MP@M3VSPHlquS`)&WwJN;gCq=*ox z=+sWrD!G4xeZ(Cc0y`hXZqrY8DfXnEjUDJq~4x;n1UNOKUqa zHmRk`6Nl`G7L$%NdlR<@dIW$M;z8<8QdG49bGnKcr7+TWrc)2=*# ze7R$+-e$Mo_>$MDZ|~*CSjqhxx&3(5{5tA|5$uy6g1Nj5?&Z>%$hkPBL)z6kubLBV z2$8YHn|_QK`e%Ol0rUx|>AIAqt1EH&PA8w!B&s=BNzO!42>-OF<&ctO5W<@*|JmpUk*tPW@Hz``1kSRTQ1FB>~xqhQZOm5 z^QeXHRON`$vHIB6TKx4+sZFK>U(3tl>UvdHl-y)Wt$HZd2H)9iGsp!CscqSF^d<|w zLGab%c2-PmoFMhDe~RKA&SeVUn*`1$wCr9>NfR0-^T(nl8y;5QRW3{0ayC;8EiMT~t-hXnFQJW++yt!y@D7=8chw*>Nj`HKtn{tFKk;{czg;xv z`CX0f6I0*pOzmNsF5AZ(g*J_nrQyJ@VpW+Pgu-nkcK2fD;BFm}5tIq z10Loc{gxEM`8{Qip+z@iUn{$>T&(JG9!WfExbt|M4!arvvEyCWXObPN(g@rut>s9JccNwHU8&3UAMTt#a86|#onKO4=~~<% z+b+^A^WB4p0NKy7$9!GJ%??%+8fu;%av4NvnD(zaOzi)bDbHn!JF%+DmKjq7HQi$& z&uC+^Tl4-YxgY!%9@h4gSskie{zUn_sxBzsu7JH0z1=*gyL4+Mr-q&02C#(~Wf+)~n_ZAHcS=>tj~ zme7>Few?=Tt;=Er4pA~kf8>pO2j+Lg%l4jdyLL#Z*SnuFT_k&-0g?#9b{ok21D23)zr~Je(u*fGMN}T zVSB$vZm>NSJAVFHPw%j<(|)b!;C_dcZ(81~K=GDX(LA}IA)kuI5K~5vW>?y)5Ix+s z%57)b$Z3fMy|I2NOlfrA_i!VFPCXKuUl)5OATC4%R(gfDv2IrP;`V74+c#7+<||}B z@2tz>8E-UzC3D!Uboa0B6awJDsRm%^bAC5fj_c$Pxwu|A~)>CGf$Pci%>Wyj9Gif-v;y5U%0;rp% z8yz#Hzjem&l-hjB{kpl?P|RD-7BHFuVSaPAS?Z6OJ*J#fOz@4JaNaZ-OINFPDY#B) zp@Af6@to#YBS}4NLETZb!E-qA{g_m{7>CSqyLUY$bddrYebbg*3xsiZprVDFgM!4F z$QCQXjUM*Z2OU3U(^asY)%Tw^+&}vi&9a=Jw&GGa7vIC2&{r1XjdD48@iPsLTC!hhwRi{0PQY8lCddyQkg|1;e|FT= zdFB{-gdVPzQlwSS-;|jUs>y6MYs@T>U_6O|z=A2hlWw&b+t%YMmx_%{ulFiKUPl%= z+bnbJ$G2t-9biq=!oKE!(qFa3L6^ShhL=?Q=}dyAkx=0u$EJ(J^G>EqGxGqzFEB>+W=%^$aU+g-CfpDl%$x%2g)F=}XY^n1| z>@BTDl`mVNy!tmkBeL2a0eTg z*G|8)`^TXlB6CTa`YduJG@za;Do7FW{QlTpOwog|*g(QemxWB_BP{QZ+U60ae_*m% zD+6LmW>tD2lqL1~=Bkj#LIwLop@5DEqbrro zXV{MO+DG~!3Y~2_6!}y~=TG@e=LaoEsi<`x8aNUa{c4K0zd#k&sy4izzaQq1n;*HN zzU7KX9V8CX-*hNl`=TFtCT%4~uh;EXx>obkw0dsT^lQRKu+dmMPZrXrZ{`w5m(5XM2#a8o4gyv;8C zG(iM+iZyS2!>k&3KBZ=l4eX|D`~w7u{Q8f0^WFcb!tnpB!jJ#aN@)KxMmqzdG5;Pn zzWf)qCdG4}*?V#Pw{I~^o-RFKw$YmsV48b!i+|bE;m2D#)`NwEj;!yhrpxYmvK%j2C5hpvw$-UpGYgkoYY9Ze)L~xjlCi|b(=Te1}86`$bUn^KjTWGLbO#!|8nBPr59Y;wdsjG7KkCLyv>A^rb>k>wPW=V zf#!OnFO$gok3-er?TaA;D&$P6sK~tF(}eaVBj0JYiETYgb6cgxA-I~I&3GfnP|lw# zVa^*l1bz?c-2d%WAcSUP;hJl0i1;jwc+F2Rm@^af;P{HDQxus3rJ9yWoq+4zUKjl; zD8_QVwn-`Vos`Oc&QC|Ovzro=8Ta@(8+2-9t-{FH_x7ufnj*N-M;n5k*e;9qNKviB zsF*%}EmB27wX8bq;9z$Zgh1UeRAq%-jBxzEuc@Gtm&-+b3FkW?$9`?kFcM}Q8l|D) zWeY5K#*BH^?;BwkXuR^UZ}8lT`h)H0$HuN~Pb;mHTdD4cO8S+k{DKIV%GaMRRq9hX zm=HC%Uz<(t_pu=WwOFDQ2(9~yU< zHPCUo_#sZEK6vhhWF7nk0XKg(FCB(|KF9g~1+0MOl}pb!g$C)>rmP{qvj%BU+j`nN z2X7{92<3dI;txmdixuPx_PKs4L?7U>PHCDIc#^flT$>+Gn5`#e%!IKHZH!jn>DwMP z@JvE{)@IeJ^EDp0wBPs0>;3G}M3zc&aJsBrT9zfcNGv@eafay>dN@-nfX*AQ)>I5> z!}x`1;Wn)ku59!eX;%64e!B#neM7xdsal8R`SPd3W_sh-J7&!~4cLqkm$y>k$Pkw( ztaMZ^r@#I6nb3^MfU~{2rgl`j*&#fs8kweC=e-nj?D}0{PdufayBqa;%W+DBgl{N# z5Ye?wAIMqJ;FrvgH*d8Te0_dm#_3ja%kvmXa^#a(HvF%WdbmO9g)GZ*2>xHElewRG z_qRj%;x&Hk5Jz;==X>jbt}>Cc+JLxbRQ}fJldjFgX0WGS&hx$xvWtD+c5d~(=c`wp zqzfEyOcL6HH#YdR34~?G+N!%mZ(8vwQ8|abSTziEpoT^=^}m&QY}3Mo`pKDS3Byn@ z=d7*qUNrMZ`q%BnkbYmY(Cj4boPOK-oWI#3-Jv@3L6VkhPIP%EZVYvPS!}^=+u0dl zn;j@2sFn9QC*`YO#PRfVd{+JRz@DfW%eA=4Y;k#d#&W|WsV<>==_*}3lO^*;9NwQD zY6;2aTeqlL(NM;9eE|t#ZbbH33HLe$jiRKwx#jk|n3PD{4Kr^)i9qe{fgHzK=a9s5 zEtixVm&IoUOSFh@1;LEHKCQ%I|Cn4)yKm zg}Y^!)5DAr(9w@a=DEU$l#7gxhn8}Gc{B6ei_RubscxEl+T{7}nHGbqU?P%vsfGES*qz&Z0~U=mqUeEcV&%Y+A_qbK?kZ>N#djf`MT=7WTqvuSs74NlZ5B$aEygas zFy{&9W|sPZ>~;L2yR!(5suxq0o22VojjUKeWL8|3kS!2Y%}W#>9lKWUsagZm%%Czz zpV&+u?221S@2(8%>K|rca?bCY+`nl$mXQ6e1CzIrTs8S4RzWiKVl_>~ji6cr5(|%2 ztgN7$Am3_e59B}`*XkD)K_E?-K@Ee$#H1u2s<0N!qVU-W2GA9b#%Iq zUhX9VqxO{Pb9i&ksu=reEDLyvQeVJAP`cH))r_VeiS$M=Wu)`@j(tDrudk4dd1Nmd#)>L)P8hY1b@ zXO7b?i83tL>uI(AeT>?WVaV8s=wf<2@O}wl1Sr zk&CTf(bh3PLwxXKhQ=&nMSLZXsHl9xiiRtNKg}&-;x^rOnSL>C z)^0BCo?2liscUC$Av)#Eru1ymvUv*#EtqUpMM!;Z=a_zBQiUtVEz5X&HZa)7wUpHa z$Cjs!`XwooyE!rSU*gsYyXyOJS1<=-e%-rvjAHIOGQZ2OM&LJcNHd8VqRoat!|@3vkctQS!9G4rPw-|2BWI+qhd^p z++<*~%j6ZS-`-2`UR_Pf=4EA8E-YD^Jp7#Z&ZC_!kyRnD`Pmf)MbXm6&_yYgA*@ye zo{R9Tnr$0nNXPY2`pWUd4mB(Myt^5itD;nDhzczhIwrS6CheoQS;;?b8p0!mHO6A^ zw;Ni+j3#_t{=kp7=L?jUR~S8F3Z;`O$kzq)KZdv_VfWlkMxa^we%cUeUW@cAo8-wO zDjaRrM0ve!XXTN99x0fRIqA8oVPKy=rxht_Ih8gSguF3Wa5)Uv1}tI^WIoE?wu(JY z3zHpwGOnFT;>+_}TR>e4627RVus$do!>n9yR&F!se$Bu%EBZuy^q^6|YkkFjFh*xF zR?j}H|JRsd{c97yG5wdMm^NnN!YEsVOp>?Xd#s5q2#x11p?ufbPPiAQq(O~_Ka z$TF55`i%e2h?LKl9P^J=Z_=aC>N2Qt@1%ZUGMN| zFNeM$c=8%0gFRL_1lidgX@>5|}2D37*M_=9S(TMYlT0hl`;p|!WOX3WBE}!c* z9F*c9=@~7MkSudtQNKHcZsBn@r#G<}C+wUKm#xVrL~bp1UW%I7sX)FbtsBprBggJe zJFXT#Tov^bV73}x9`AfcnOl*`0nu?$hA0Y`DHoEWa&KDc+qbwq!JGeKfzDf&OUWbL z=#MR+(`L&UCQBB0(d#k(8!Bg1&{4QjSYf|k?)PYGK`$|pa+%6V4$~b6OiTpq#zTJ1 zGt7=DSsv-MRgWZpSu-0)DI{1Ww08&Jdr$&-xM;|#kIx{QHjwEXi8;6_$kR#nY@CdG zR>n5&Oo&wA!1sW|A?i$@ssw+I(7cA=Vgj<42XyWT;oj{EUqhE)Ue4CbWHEk*e(uss z-y8d~bp8w*E*uC?9IXBUc>?-h*X)kO&RjgrG6fF;ePLz^%@Z4MkPc1_b4t}-!_GD@ z@E+Q+_V%glA#zjR{+y?$^bAb0v&h)x3qEcolc#iz`y7_=W28g2+~}A^&Ck}m*Q>bH z4r52`c0)5OcB9>GGx{qgrg!;)*Q|S`Rwx0%bw9Pe?*3#SyH$F{MTRCT!h8DRM))7} zy_y6^dMpUVCWr1h^d2MNV%~rLS*fEQTnbfic;@qqk(u0-MI*PA@1*PS3WpJvst!@J zZlNr||DnEO@eWq}j{a|IZuzu9pa}&3Lt^Y;de35}d)D);AVr(cq&RuevfRs|BmQA}2o)v$@$l5OimQDIGZ%UZPUn%o9{`Ik=$NXTg%a<%`G8{S166 z6svwB^bV=AsL8ifPxrv~C&7^I-rb1yXU^Ju&;L9Vz8E!@-e0$OPE^TVX!!j(%HXPg z*W3WJx^{@ApO;JZOjOEgHofH;dwYddSVpvO!qvAjE0F zr*0>{XvE?R4X3Plk1eu@@VSbu-K_cXP){uo5&sH@R z$koV3?=Ba5^W#1nqZ;-@rE^_Qa+n?Pr#SPUG_j)yW%~}-fYpyffPe%;b%9?gO!auI zb+O-`_VcE^Bja&|WQ+}qmq1)(vWao?)afngcD>Wr{v`%ksH&Z$Vgz zu1lK7Yuu`Ru0iODJdJBPdJ=#1g=*ld#&%>s2&|Gw= zXcAiPxNtM(3%7QW4os&@Lpgy(7*g(KAiosJlVog+mMUKnfPX0hpA%`~NO zU(TbsdUC~AK#_@1;$hN4vh3iPtSYI=^FU3=ZOS5t1+=!!xZ=sy^nQz1&MMp#Iu+Tb7BFgz;;buZSL2^B)sT@U{w1 z2%#C9!W zdLGWR(jN<)9Lu3LnvLg$>UG88qhtGTLdVkjnqlJ2RW+&z_uvhL^M*vqz47#!o`ia- zp8jAB6m%)DAxd-v69(sVUiH=W&Ru`bdoSBxQ;Z;kz@RUPkPPOMrOOl)vakP8b)Pq5 zZ(zTH_&ULSXae;1u8Sdm_A0{A=wvLx=6Ld548*R#S_*Bsd{X6d-gS-_kv50j@mV2E zUH)IU>pFr$R%drGiKvB?YepPiP}%CfNd(k$(V{!c;?$F{Dm7%6Yl9aUElJPU-B^oK5ELt$ds3M?-1GICA~mTM&<7Z&;~3bc8)B-i%-=EG=_18go6Xx+i{I zqRF;cwz6BDk8tq5{ZnA_y`ZOIJCVsAy4{2VI@1~FxX?YQ$T&HW{GNM++;zx?QL|d5 zh?TlXuBrg2$Df3-ZKUOs>{Ik9Quo|mk*e)n8~3TRj(IwfmV1v=>zI>kD(j2-dY@t( z!Ak_^hx)D|_p)&|3df|Dm)Q~w$Y0h7t79-pHSm=wz+R`*r| zZ4%iXi~A{0S36E7%Y1One@AufApP!R_3w!N-E8{5;t2l}2yu2?&s$c^!x=3$)D?^OCQjAB z`;F7i#s(H!r(eVg$;#3m19K(^7gzg?y(SW$d;EK5CN1ExcW84hzHhr%OF@LVNJsI+ zO`X1&L%`qvW#IXu*ua(k-@~^5_bvXraRyZPx4RR(O9T^DCEW^3Pc>F~Y%G-zpVJUt zLAti7fIt4vumGwkE1)djt92~^wWQmlW+Cbjy1~MtmV#3Fr}!_0 zRt(s1@b5p7=Oxn@(35plZ<{aS#`U+m4Y!=ii)cA;TkG|zJ{6@v#bV%UqZ7SP>>5oe z1x@HLR&xG0l8fazx#A1!qbboG8muWLpz)rHIqHs)nZ?F&D3eR9!=!KzqnV+W2-3KJqo z@Wn1LLK~$QLoM5Oz2+<6bu3u7g8jltsL`VK+SR@51Gfs(_arNpQPh;EAeurKcTq=5 zt#rySE6#{Ph04jjHe|9O^%7PP89iT&ytuxIe@0m{_9o{dM7*6-Ludrjj>|-P@f8k^ z?zO8t)j#YiZkBdkgLnIxK>q#09|~SL&V9hRE{RdAO&Y8W)x&gK+$`E=MP1;6B8NUk z3s#Lk`8dTrW7@ynJ$tl3zM4OnMJNM%D~Av+cpLn{y6DDe50i#T+kDUNXUjje%7ea! zeiY)!Z;m$c8u=yHPEW>ppBWgLJs*l~_w@L+13>XuzocLH^SFrfG|VeuVZ2?+9tS1w z1gDtXRjYdIr`7^&f*EHD`n7kDcZYI@tg>B{p3ggeVqH;1I3S+luKXhV=!+QIfU?Ci@Sgd2&Sx?Widm3Sxm?sTpOB%-H*cT$f>T-FsAo_k$@MQu|z{~R>Okk7Lf ziOti$qejz&Z;DK4uh;POssj-Au%?1(z$r_nCQbqMTlVlqw9DS^*A@q(f?1YDWMwQF zL1C5ZhN)hG;KP9jAzUitx~$FEncTs7%dgQ1#m9l!>Ax&j8+SXs6HrTg`(v-J&dif_ zj+sZJhMGKAlzEdD-{fB-XL_=z_TlpZ^rRdbFk zju{#ZXu7yAQ@x#Z3OT7Bt)gP4tW!{kS$Va)D=;gN5ewHCgkn83-;h4bFW&h^+sw66 zzZlZzGgR@OtuT`5-8qdP9D8!0x*K%7H1RqwHLGOn@oriDKLPcWW{YZY01hwIKX%*X zFsgUv?E#?kDgfCvSlpl*F68v)Yk$~Md`dUZrKZiM(T4= zd0^F=+Rv8_%;0`+(kX+2IK7oM7mwh!6>#YY^eASM;nc;dT8n$a+-4pH*~Pcdd%Nep zsySHi&A(FlG}Vm|+8NJJ^}N@=5D|u8pLhJGQRuVlVlZ>BVBA9$e{pSRC5_RpQ7NXt zSBJ%`V=1_Ld@s|q-q3o)uC!v^T|%pFJ?zIfh`u#*$b6!nWO#hJ}4Pu3q<@`v@2%qI%BKPy_l&*#x?&}~Y}BZ%g!a4LytiR20+ zHit5Wd6T9Wd?v{83&Kt;`<$#Q>?W_3-{vo%>2xI3;hD%|cPp*)o7&A|+u?Ur{x)d^ zMGD8RW}Xqrvz;0A>1Jj0;fi5uvm1|tJvO(=G^Y2mVYyB=&e1MC{LrNJ9T}^a9qzHs z3R>w#Hu{nmZAzWeEE*+Lgj%(-u-NuN4{9J57EIGxX1B42 zJ%0N>Kz~XIK4#-5i%Rjf_-@xrdBvxUAQ`4&P11d=P+!xA(JVYXG&g8#Vcy5P#Ei&O zb0bZgnD?^o_;MaAFh+hVL*&6S3O0S*Te4k$tk0s=kG@CH_z)^iZ18(bDsW>@i|w|h zcHP|$O|fsYSn1ue?CgAcaY;_6$IkLSI^QFbVbo;2*Ig&w_B@Wua+AC{)5h8^EefO8 zu|EY*d(s5gZt?4+ZSG2A8B~`VoLQIh;7@JQAH0P{ z8XrhKENYZ^nJ2a|reg#i?D?Xe8>2L}fN30S)iUUc<@SyXb032HWhHDTAh2e0;LH zaky~hL{cYLh3yBu&?ImAMg<5{OGrWJY_#I;k%8+l=F4<--q?m$=Xg&g%feX$PxI0s zB5!)%^HkK}n;QKUpRgG0PlfVpqi3B72(4z1XkUt0)(j!prw1L=)FD>196Im0%7x|x z+O`J5Ct8rpKf-i zOfz|KujzJriG25Yh`hfz`fYWN&?HQI%4ObXbkn;@V0G8eo3k=_H0R61v883f(^=tK z>w4DAZ)9f%Q23@KZ%@5X6D)kGvmU>*{!VB8{my#Q&U(tu`p2F1be;7Ko%PI@{mkP1 zoIajWUd-g4PgAFt{8#2h*EM{HRa_CxLK=BTIzi>mJqlf<5BDGb{67UBrcoMnkY|`G zaWd5ZXzx42n%dTGQB-VzZWQULhzLmUU1dv^-lVJ4&Ch!p8P z5K8DJ0Rn^oA(Xoi&)(;J&vWlN&-rtI+`E1ztIRdayXG9@9b+1T?K$)y8K#CJS=JLW zYFfG*;ZR4ep|m*JkoVL&%(ANYk4L9+FZtT& zc1Rf!xpJoGS*RgC&vIK}*En^6GVSP`WLZ&?BX8S_n<{+0X{tAw|8)N_7n~04X7U9k zt5$K|Y*lZ_|7nepv)LdS_ zkOs{S#E5kB2ZR#U;`Wyc!pS%IKvIsK^DcCuV0R#NS{Z|kiRm3Q zLjedSf~9PwmNS;~o=!n#Zj+DWe>9eO$KeT|H+@>uyq4(m&}hz}eQKMY^7kDIm%j1D zTO5vxVscrkBHB1j?JW2^9Eb8fH=A6=?pEqlDWO6)hqdgta<*XIts0R+ug3D@BbjyE zMx>@KRFq(dX4ge=MS9^T8^&Qnik zP{fmX>(5%hSrCM7Ox|or;_2F>&;R=La>h0vW;=NDx;P&>L|$n@x2*N%BEj^|jlbEB zz&}UJ3Z{9ls0fn@&I=b*>CC_6_uOTwiWW8 zQ{vnB-~x_3lJ8a7@Etv9O2_K@)fwq}6dg1zW$z5z@4?Z8)7vt(aV4i;iK0)H%GwnfPfa~Gzxn6Ib>mtYcgYBU)z;Tf$25A< zvDa>f^4{Wb<*)3N5kB4(wn)IC2S;Gg%x9sT0TZRnqQ{>qkvb|mM}8oHv7uXosKd!@ z+uO~(SQV^_Bc(m)_`AM{#9~I}Ukc&J#>HPuO?QzL9b2NZdMf)TK7Qno620c57=K~H zc1j-u*^-&n?Ku4oO@1JeC!6Q?HEbX(o7n=OxV`7A7iC6{JqQ^t3LoY=(@53ho~t|+ z?x@Vus=1LjmL+A5KtFnL&wsbZ@y79Lrh3@1+0ty7 zE5XqGOXK04cx$5m2@P~yG`DZoR(w?HF6AKPt)5y|m;kfDd#ilaE|{SlC!LeO2`@Ae zKej&ewP$Zt%l9={Al-G3n3<_BM4dN?P<&C4N*xW?q5^ZTQ&JfE2S5e=#>a#`TeJcn z5B^X&(p@2NIAs3XeSoCT{-V>5_6YIk0>bb-#lw5O5jPE-9~fA@DAVL$ZL%5v;s8q5 z;^O$Yjo5kBHu#Rmg9-{WR$SV{z#KTi`fPIr0mrq9jZjIZdMES*p)z;8Xeo7$h&o6nZ}z^rdCa& zwi6V)2|6~`_-r8to>)Urys(Yak_1a}UkjLkOoBeIq+TDjJl{SclU&$VInshfEN|{i z#(DBRVf>(aga|YypE|bB&WN8lLXhCspAqe4Lm=MWTVqdu6GOFNh)}Ng%Ti&6W9H0o z{fuNL(V|^jnGwglsY+z0S`u@iH6@j?)~%ygJb&)QUa=nnSrtVpn~|>#&p_Ao9*>=w zs9=8@v~#~S=apSLr4%!JcHzWN-_ovU+6qavl=rY#Ulh+(gS2Gdpgnhu)ce0{?=t3-&t7N&;jADH^yky;r0 zpeuyJ(dBA~Z*mU0swID3w`DZV_jVh_B7u#}mGQb+{6f>ruY5Sz6`EheE$eaY&1qe8U4{h^@p-hElKnoU{6 z$dbI9fc1(EgV!2E7A59bK!tjQ-mcy9Ym#whc5f=usgcyEr)Vq>%lJuU?zQJT#jz%t z^AFv%1-ewftBqJUb!>6^PL87^Fz&g++O1Z+s2x#o(oorf`AQeJO0s@l?S`I>2O5|# z5s_dyrQ|ZBNP*RDzeb*Ddeq?0i;NkQZuN(UjDG8+I!GP3o(XyX-b-E8*)-(^Fvhw& z?lZTL9%!NKCI_Vq=!AXQH6XnpA8n8UNx0wXIXo85G_vZ?cR>u98{6ZO_acaJSvYsS z4Og-C0xmi8Cf|iy$B{>4;nt2Pl)rQTXQzd+$Nd79TA1Q6rlFWMnhQM7GY~@4#uLCX zB3`dcSj{6x<1VLjBXUYjGl;5s#gT&K9-_Tp^m5#m z#yzuZ=KO=q6jGKxaIYDg{LgU8}@QUskCTk#7c;;Le}01^aQ9 zSD(e~{;*Wxs+Qdiz0}bQZ!z%tk-kla0L^t3a7x@}^w;5SV&F+pwPhoR?HYR53>J;| zAl6CjCJMM@M9Qusnp#wVY0Aek%lfoi%+Ey7^#FZ>gFsW^*bKf}9;>J%0 zCcfPi;D_OS?foWj*Qc$5_C|myO^tSa-Sgc^Ti*t;n~TdmZ~5Zk!>p6mj;O+rvZJGg zG86vAqQ0^oro1tk;@At)>B)s0ng&)E*25p1wnmCP^~(E#NP{hPbqNvlR{g9{o`b4z z58f(1a=c|jwt-A=?QwQP^I>Y|?wit9n2>j=VWjXw%}O{(@_dr{#(F~L%uY?{xDazK_ng)_I%8O(fD7N$v=v zf0HkZQpMV8H!r}>=Z8-H59-Ae5JVYAN9F#+9Tbb_aqGL(xQP9Gibc=)8e%HW^A+*> z;cR9NT|^{%Tk-(`v^RS{6D2d&(aRG<891nn{3^9FTB_l2$8-&b)_R`R*8^x*`*7O%4e00i z$6>FyM2Grs%afrquMEf)4Hk1&f_mDUl%RVJ4Kq>7R>Z4)0c^1=**A-=e+=7ve`%38 z@+uY|hg0fiANm>_(p#yfCHJ-G@bh!bp20%7tb2PV4&MNnB zI-A}jS0J8&&{NTU3?zMa9TvJJWs4bxV2;NgPMSN?DaIB>O3P|*2h7_$M9ejvC0~Aa z{s&Ud%L>%G&hm1Je)KiKn%Hj>8Eafl42bBtzGaAi|+U7Gur!7hPMuv)2Z75Pt@ zlx^#E7RTi;e7*6S3a18jK=5?BbcSNvXi7YKO%RpNjA}Y{Ed>4u1pJ#kvvk94s<;vB za_l~ff}sJJ>DkkGOXBw@u-Ueh(qL*!ylC!ovyTgy+(d4%tys`p)H9;i?~_OlE;^-r z+{~HLh8rpAH4Tn$kL=&gs0?O!q7^4C+fF8^DmN%?6ibml8d z^bCxCT+A=)R}CZW%>~=*i$9f+E~R>s!R|HmLM+txJPTGMDACj2V*#L7U^r@AzJrkk zg~fuJt{m3fLQ+aQ&J7J4*nxR5Dlis&XUHD13Sg?vx0>)dE&4|HiH-yu+faz|-ga)^ z#)#;FH08?hwu`L2*y!=8%6uarJ-sbeJkb$G^*!S+F-5pGUd9AE^%>1tFBY5Dwp!l@QfjZTJK;j9^-E;_o49BzsO&{O4G)x{HZHhLOuc zq;Z~I$>-A$2AJ{a089_(zGeRHaU&`co~?k2Fk09e9QeD{necHoejPn z;vE|!DXk41CyhdhSk?AB|@kHierX)6ocGSP{_LNMMoX}S8=9!?EHAk77eqco%PLZ6Q|7O*(= z%;@)vwZ64?ea{rCxc+?pZk{kw^xmduk%k+DOu6EP=8J~Twn7OjN2-Su1iSqd?JKSG z#KEpwqzRSwqMSs&;1<=Mq+`zg9?sCM$v46#0I_nS-4HdU@<%plDMO$3>IuFikk3Hq z7hw9zmN#tOlRQ=*F#*{&rA{YVkL7z27wrHw`wSR27fHPp=hCoxffC%{0n(;d`L@CgBr_>4i6t1 zLZENfd1#A>^DKyER>gfPhzjZSs9!J~(M^?vAUE38rC@M5F80<^0nK^QrGZkQEuEDD z(NDy~?D=BM+Ts=jm79b0a%OSnnRKYQf01a^$d74#1LPHl3wnTF;vfSygc+?D^33Bk zy+Q#Kx~sethB=%x;i3`N){4arlxkT)Tt=P4lS)M@AX3Ty!YQF##ky;e;>PKV(VdfM zoypcqbl<9@6+NEdFi5cP^{4EltB{7p?UA`>ag+FIX& z1gFVzl`yJsB#Qu?h^EenPi_J!A`<5tBDp^Bd6pg7H{yKO9+I8dmQpG1Hefk?evPi! z7U7krt#u_7JO*$`T)9Vw#L0WH`rMS=ngoznv%;$y)%~j){Va=5qQiV>xWKO}A}1|h zuqa2$x!UdRsKWX`W?N@E*IN-s7w}NIZ~Q&b9U7KHg*rLm)242ObRtNN>)iRwZS3vw zz<%;g@%2ahw#f(#9#&DYSHF+uG<9()@15J+J33gBA=V#kDJPGwRW@W|RO ztdUPyx{~VqS1DcraFVo%V9>AvC!3wXfChZ*1kG*1bj#x*nwaif!a#y+@Y--2s-f za{R|)ZHaJy^xW&$qul8i7hZ@GkM5(U#JyT>gnNexqHWP`sGm5u+LhgpKEd+)I6e%S zfR9*>fR7i(U$}aM40UAHy-&B?sZUJR@M==sS1OR~-tLYEeQgViOeOGRTqe(%hCx>G z^^tcZs`^{c5`0!N60bRp=xq*onzlIhnm98a%*4t~70%IE*k=>o!*tRMWVdLBbeHtb z-3l=ULU6(n(H`{*^9{S%&2uHcJf)I}U}V;yYA|KG#^W!K+IVjYi9tE+9;OorloUkn zWDq_6nk_v9KI7GOaMa)FL-Zg2G~<0pe}wJu0Vt-1wLepW{|k=duvqQVvy(NNQ7+n% zYhXZ1LdYtmd1}B7Z3=TU4Q2>07_7`D<7C~#>nO5!_&7wg;$w^wI&>Jrne)lU^|%Ws zifF|^;CFE0{Fx^4w)sFr7t(@Vv+QL+Ql2t5P$|c$|gRV0)Q{1y7d38x+!8RduKv8#nORr+P z>6ut_hX|{0Q6(2=MTb*c?O`je{5702Ja4k*$#A#kew1GELo!*V9sxS&H~1gL-omF$ zO3a{%$fQBeQ-SVU8x4E}$HJjgbgRWV`%h6>X;?L__|j!56Dx18dphESSPOeENlrmi zOP`+cjQ5K`%`KtT@f4-;nmuQI4ih9TDppuJuy&U3%rn%7!X*yO%r+ zYnk6@lv5NwAT}v9cV9B4q$H>%E}G4@UTJYY@{qj%KDERwE4g^%y$G=@_xB`vWpW4DB0L+-q>7fLq8s{O4UM~Vd5d#`#m)um zNtge{O>p_{wB_gAeuCJo60k^=oAa1^cK7E{#z!)FvG5z@9wmJSc?HCwcxW)72td8$ z*8Yi?=Ulk_lm#0&TI#!U(2TS}46WpN*xLkTg$8bkKVa$I4QVgedjdg=D|Tp4$yyR~ zv|7ks-r;r(<=7#N8}-B2K8lD>%DKqfD!dc6RO+m4yBsAnlt`Wa+Z^^bupv6*r*8-L zhl}aqg)4_ul`Da7euCj*rpFc4cfS``C%EoIEfEgN%P*SmXaS1gcwqmcBTg44c>-w^ z(+&pIIW~CI6p;W0*|=p$(w+e67MwOqu6pw)>VsP8&;x_ycMMetoqR+IrK(%9V)KF$ zN90MxZ<($T=0N&pxl5LE+$g`49-JD>0l)O(+|iPvZ{oZaXZd83nQYzG*s*ZFKjAV; zX{38mQbMbVGSz6dIyaGG-7XVl!y`9+;6<#qqMO6Ldxv1z&85>>A1~lCL|8Xvyi$3{ z0HO?GR-v~Sayr_qldBgk^u!@olP4FyFtURp3{;njBSWr7Mq6}YD74?76NED}YSly} z10Zb2x=$G_E}3p=mec)l7oBvDe6vwxN??(51c_U5~5OUqbc*##r(Z4 zL(m90z4)?Q#Y#-2c&bD?mdn0DGYhKp!~2~ofR*o_L*y`|uS}Ydy$*69R>Eo2)`o4X z*L$)z7kuq`S~+S8Yr#_waovi>OFGRx`gA6ripkhi5TA!Lk)?1WHp9^Hf%52^$^JhO zsQZ}vUVLte)v6BNTB!tNj@CjRT#%$%4~AV8IvU?>YT*flh3;%p@}d@pM6w)DeGwZ) zuAT|&0a6;p@{=`c4Yc8&@UX=4LD{Q)A$YIt{q@Rh#n>rj-)L`WmPyE`a6l8)xt^5z zG1?4AaC@yWl_7^&+W2V?oo_>bH(h;CQ40WZc`}K*g@~p0j?u|TI-z?%l-InTi|r`l!r?E%)Lu!SzowFJn0%B_qn^_BVD8F~ zdrlKj^bjybAuZC8mgveHyiT^W<1%bGLvCR{Nj*MDatEz*WE0KTJNP{|1~k!FpsMiN+c9-SCGCC16sv*M0_+$mD^_~Kjm?F==QZt;s!tn< zMS@gZUSE-HX;}N@bwEMj{W-IIRx8YTkVoz5Vlj$d8AebaP3d|p**2xFUmig`(HewT zVO%$=V~qer{&_S-9aZL`5F*FBig537Ez_O}fIe@az0<|i^x}nH$bAuzW4haNdG_9- zEkaCvY@~hF3$|PM00Ic-ze6^~ou|^%F8!4AV%O7=jSOQF=Wr?6aE`d}Dg6GTu=pd{ zu9T2c9}kFHkl^V;=ypEE}5+i@jf^ zok+$t?Q`nD2NYJO$6nZQ0Fo6wZlB0~%f4s}%cy1U9qjPOZ@q(lNOH;b^a|t{-+O-; zeYW8?6iD>nyP#UD8MYall|~pmC}uU3R_5e1-ue)2I=K0VimApON30~*SFwz_20zD0 z=LxY$9%hlcDFCVUEz!3~9>pLYCNoAC?5oHT^RHqq?hfVKZQ89lL@|VS4OerAn$2n( z__~;68Iyev!##~2>6uK~|HLLfn~p;`1TlT#o$_SW!-rdf);3Fayo*#NEPHfeEa1Lu zTSTDjSaTcgF$811pgOGE##_C|T3XrvEYz#APt-EFgIYS5i`giS$I&dY<8_5HWCt)w zJ~^&kIupjNz;0mb8w+)-vwr-`Ew;UX^0TK(6-ZOiK^Tl9ubA3w-cDU-{sb-P30K?Nyl z-l7+J;NBA@p7au{+)|?H+UqI&)xg02;%rb2_EY6%vVe(jnpzr985Y3W3`1Oe#MX}S?TRiQwi+*@8nF*uBw-ysw1wk9JdcDQzl`hOw2B?2t<5}RX)y;U_p zGhBsFPtVG@E*pt9!Zb_h^C32F)Ap98B;hgLG<0oO517>2iL%R0|>w!F} zcxrz4ZCIz3{DfOWf6vat!RlwZ{at#^$L(=5GU2B7$yp(ylEyQFVVj+a!Ghdu#y?H> zdJpZACA-JK3Oq7<$E$_21Uj0H@y#mPB0)T7vim2w8 zba{W~ge+2fIQl-SDW%|c2rdlW@7>k&(gh71#wl&qKB;8hts9d|E%X2|eZ+g=fAeg`Jrem1PPQ%!lgGg2Z{HvLG@?$?CL`ve1UAv- z0^knzGmfW(R1wc5+UbBD<*rAyfC6FU3`wI%0zu^Q28#Sm4ZG+mWPC4)iFVpLzdRM* zdr}=jA|m5}-^X-9*Fi$#!FUR%ui>vU`6aR6NtzBAsdo?Xg?HJ%iIQx9s6bxVi%l|09XZMd}mvbBZJbLqiCF zaRY1f$ELoAFrm24H`@xtbM>6h_kc^PcfONSzQI2#x$DkPN((^UwVSQh^jr+-+t@QCk9z-LunV{mb@5@s zch57w zC8cUQ6VfDaNx2H$-jsPNh#^ZmqFA47n9n` z?1CzR`LSo^^t9|A_ys(@^Pfs1!0HN==DF}vQ|B8G_jqEgyt(2ksS*kbq>22%I zGk={Iy#bu(S&%Jdl#yx%sQA8ey?O_w!TGr%=PR3j-~& zf1UkNzitYPU*jos9Jo?@$?4p+(UT#?HFEpHZ?~>Lw4PiLJ&Wx0G)$)21{k1C2&>cM z7r!VIzaKGuz?0?6)gF@oX?IF~4U9(oLhWUzcP!HOGy|4-6JyaUH%EzuUeEN_{zP8ve-sp_9a IPhPzJU-+pE*8l(j literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/ios-jb-policy.png b/windows/security/threat-protection/microsoft-defender-atp/images/ios-jb-policy.png new file mode 100644 index 0000000000000000000000000000000000000000..efd5173cfb7c53e40cb45954e2f074d6cc552fa4 GIT binary patch literal 98982 zcmce+1y>!>5;cgsySrO(cMT4~-7UDg1PHDHf;)lW?(Qx@g1fuBO_TTD%&hMRd@Czi zx!ryHo>Qk}?_CwHq#%U|hX)4&0)i<0S^NtK2m}NO2jTwoHr-K=ZnTM4*2#Cj0d8(C@2|b$Rdu@b1*l@<^HwZE>==K*uPs&!^ zijsSMsXEMt9X?PVA8@#Rq4$nWgBJ{G%ETq9nZIO05|M?&p{NEzPcKQDS)G;HS1a70N1ojio3gr}pE2G;E1_kmWm;L46b?;?FCTUE*@i0Dhfz1} zM@C$K;AdOgZSv%vr=rAV|Gd8>+MWk_C3v|nx)6AJ6=*&0R=oC=c*7dKi$Nv!^A>9Y=-XuwcSl=I52O%}y4()*U~l|FFD(^_pj# zkSz7i*yarnw&%c{1%E>KkWLdjEHb*?<2L=v-0=G@<{1Zaya%&%dmCCtTSaP!#l*W4 zCT#rkgpM!R%cWP5kRL6BOcKIh>aifmi6;G6O*Ow+b-$~O=8Ctjz^VIZ(BQCY`h;A_ zh(4-jnS=$EBeFinxSZiJ6(*~A&|(f-s#KW?#_w5@SJll$qt3P^#gsw_obfPEH11CM zoxw%;u2ocp?*I`1e;658Idgv1m} zv*BpgTg~T|I2SVGT3(e6-zJdLm$!|Sl$Li4OmjqERU6Nxx#Aacx-WTxqqm-R4E_~} z4F>;`;dEqGlNhyYCscbkarCM3oz(hjLfeaVcm8&=%#oeH>XKiS zK%rzmD(V-RX`43`&A|>&q?n9!7SE*CthmZ-A4TatmCa>Te2){w9DR24b9}RZVx!Wa z(1^}c>lmcs>N~mfx7pXU#&uI$zRAUeY7J~JIg`TYCi9;-9(TW(cNL7jsC+W}b2jbd z#z|(vbtgfylv?cW73jt}E~%b4Ve}_-t2+1_2-emU$^qFD^fWl z83kYL);NzE+Rn{OT&p)6V5e~zZ6!M}stRk=S@KD7hPf>*`c`6|a9NZXsy|~j3>vx0 z?%8_Jp}1z%S`fA1`dE_s&RUz<%4;@go&}mN*2ha1&dXHmHXg$tiPXjPGC1Qr@A!BN zsgm}h7^bF?%I=RQe-Y^NN8O22~#rFgw6W*LSB7f zT^@+6E2EmwnvR?0rW_wFmjIW7`VXhiaI48Ktr9IJ8drrstmbMJ?Tay~AlBS-&Fk^B z;hcUE-plQ1%(-dZXuy^6qG4a*3J@~8yJd15-2BmIA(G_978o*>YIX^ZmVEQnbqs6C z8P=jN6C=bCE|i?&l1RkjLcXqH{EqVt#zg`;a5VEER^)5z4S)2SjB0n@sqtqyaT-DK zo|)!HI>x2*uVCDaAfG+F@H?&uuZOoaEj~+e{^AwY8yT8;>4BuL~n&Rp(g@`f`VM z{{hViES1U{MRDT{rxcDNOl}5^JZbGW&48;hv&Pj?g8778xk|xJuvjSjMxc`nV~mgU zG1DGcd}b-_uH@cQfg!EAy7P=AArG8ckMpsU07~evGF9a?W|Uqrkz~G(q_Bv@&<02d zh5(1+zH3!{)QM~H-@_KNU5*mOL;?vIo^rjX5ZoBmDO5SDZwhj@J;ttZmj$KY7ZsnP zDtHvUZanf+M(!SAF5oM$q_$#TvKs z^$!sxbcOMndd@rH;t-YTKJ`}z)=aqLZl<4pr5bQ5xs|<-N=2;fL1-u9bQ}OX1rOD? zr{Y%X4d9B=T}?e6eDY%K{H-b=VSwyx`#XDnG%DWY+6R zxJ1!X6f&hmrz`!lnHVMGev*I=?&mCQr(hC#Y|Zd|?!8%f4_qQQjefcxsWw8p4f;(91H7hZFYKxe4_X z`_MSFObbwq_>)onJqb@Kewy8dlkrqa1Y4ZpN+3{$47rj=8#5M z&Woh$p`Zc=?fVLQ5-bUFQ|#hjhns0lT9?5Ygj36hXp@f?F_L2t+IaeF?sotL6uJ5_ zi%w~f@rC0tTAR)vU-)+A2=<|DH%W~xq7C9LtplINJy-2Lp1Gf+g2)D<+ux3DH>JMN z9C^VJvWzm>5fYvYKe%H4+DjWj{mqWCmB~2a3!(%b^_%6U>WkN*@Ndw9U{^$l?VB4h zrjUnDM9l9WkxMM+K?IQblDUNaLlr$!4=0Zm%lZe&`4WGB{CM|^-R zM<%(+!XN3BPmVxx_!RfdOccMe4b91#+A;9iSm5)%o}woh3CSl{(BbWv6oQfwNJhV3 zf3~N>^Rz6bI! z*Ac=mTUdNLuLX9A-Tj(l!JZxW8}WMwQwZ@P>!YlH-$A=5E9Brf1zqrAksY1o4UIv< z%XH*-Z(N#ji(xGLB|NL}IYA8{Ko;w)E?vk9)5D5S2Hw$*7+@)uSVyaWUmk$RAy6Q`8I8syVb+^D3f_)$>1<_y0y^_; zXH0efHzm915mO6cBHU?zL@_e+By+QC|4v>+mWdtjvSxW+Qv4R|Yl;u=1BZtQn3BIH z{FE5B?a)CnWg97(-*i_1GF?mvC_E)21})vH9!1qGyp0PN+1*W7&$*L;!0u zkSBedMiuOtOS>P$ygBy1L#uX48i;lta5$TmQUTc5%;KPvIx4l;uKX)W#NZFdrycTM zzdOGdgQ10^UO<=UE9u3kizv^nd|6?FjVu0XCKTd`H3peb_S<+YCdD)qX(R(>MHth- z8Qc*Q-GOL9#T_L_RNN@RihGDqFrhD`i*lI5w=|!0W!Hn?v#_Sd@2%6n4EBcwwS~dB zJKY<;Bbrl4@CDtqeT_sJTata5PF`Jmf0eo~w8=?u_%4NSL|}BwFbws5vQft@9&Y5a zIrFWcufWHZCL{<*F;S>-^=&{6Ldz^;va*c9gmt$_*gK$2JF@xHu@TYGOg5b0=1;qV zSt%hC*BxXKeq)iqw4W#->%Wv+5KEI>A;p@6qk;V4cd#@}gb+^>Lq|QEn0`6wc=-yXvU7gP1cv^G)55+DzOqkt4@+ zFpB~3vkfIWs1dA8=m(AIkXuXDWGs8i+GEjvCPBex9~oS5&)ozX3x%D2z4j|nSO&8i zb6<#*=g{y%HRQH%^!!JW)NTB!BqxXMh1JNNZVV`|I-7;rQ^PyBduUrlq#;V&)c_`% z8K2Y}8C8DAv~&W_cO>2N%kbBtc$GMl4|s)8ca)CHlF}i|+i~*3G1SI!dkx z)cFi}BsA80UP!^;#-d;);L40*ixAsPTgj}*F1tYuGI;0K#pt6-FG@jrvpTJ^lHj=y zOjrb-aYi(k(KI9NL?sllUcT-Me-w^EkE7-!$e*a7xa9{o6upa<5Ph4h^0yOcx#2`n z^OkvUI5>i0rCtmnz6q_9_FjdvLooiBAuylfNgQ^F!_)r@r99_4Ax{m7fhmgk!&#p@ zwx@#%)eM$Kz%cTO{4t!i_lvj*w}H!92lW;%15`}Ry>=RC0BJ+ zFv#$Zk)bO;iE;0HF&C`c_>^>9^=@i?Y>}$6`ke?-y+Bha7+i8x|`9eQ>RtQN5 zyD#zU@+z{%2e=Bpxi=Yz@7=P3VH)-E_|!HD1$JM?Qe&;NsW=X*^VUn4fzwb>3Hf!H zNOUcN#$)npLyBAfk`7+Thix%rR@IX{jeQQN_@F*mopWE@e-=#tJ}F9pnmbq)Let;jvPo8AL+ zm8lT!Co)1XM*IWwZ)3Lc@C>w*8(0{3DJ$h7BK9x=1UgHR-}H5x7!VYwuundAU4>I? z)k|)!@C(25mck^l-_4JjYMYV@OY4f4#a*0ja>-}Ua;oT!iDV(b^eXyBriu5;k~ky# z%T>ceRS;(=xc-<63kSc^F&MHDe2u*jpF-S?f3^PWa(v(3G3map7ex$OL!A8;W!?Jn zdbIOPz~t-Cr_I54&XMdtNXYsR?sCP;-Q5CcoS=g=C>qB7?&>g_j%qE{M^_hV-_XE&O?UB51!WWW-KG`=PpU)dv}L5TKGyA(Izpmav}vSQA9?Ex zuQo?oDCI~4q=fHQVq!|tVq*VO4*<;|!#7^wbFUJ{cSRM6KM_Hg;ux%|)bM!{1ivCA zs+5-C%6U`TZjjU1DQKBu0V|ouojhj+zKZaq`v`nRxxYhkx{WExS~4 zI2GX{yw6#Vi(w0KD^*^0zfF?%w2>;5LOt?+ z@gEcUL~lle*(Aww6=*m-SW4gEhA)HOyU!QX9uH}`Xi*?}4Q!rG5Du0g@i>;>1RG8V zU^o1sD(ZfAet|X@lCG?;n?jxHMAX%7WcNgFS^*8oav6>z7*?d*x$b(#^;N;bX@d0n zyVA@t>G%XvV5L6F)zwYPte*=}ct=5;BF}9XAxs`R+m;E;E1^XR9 zGA(h)muq}Ikn0$?o&3$jI*?GUsdBPi`ml+`#MHGhg z;~z(L^!t@| zgi7)a1o%y~|Lo)e6AA?B&0gi4kN_uc{{C%vdo;)B1-=1G@U)MJbMQ2&tcjOCkL~;(_=@2fU7OeT z9oT1fYpy?FAG;UgH+#~)_;up!$8qxcBlpY%YJ#KW!dL5qn@P8V-Izo(Y6^npRTYztcYR}l9xyJ z_B7v0!${k`e|?$UxiTEhwR&ShFFybHbX@t^Ij>KN0>iu+g5PvGkY1(9@Wn$E3`~f+ zQn6?xKc5Smb;_k=1yBEV?9{x|xsp)PzMd+oY(yGSa&^Xc&g^x=<8m-10;l*{cw@hSCcx>&Om#OUGJ_>Uff}7!!E~w4 z>Y&AMM6m)<%}lP*!A{2Y=MOoe9<+q&-&d_ck9 zH%B@5XfKF4l)s7OIA**RBmF^!hu;ptwW&VO`TQQ2a>@X8wJ&<@@!%^A-+)g}~I#ZhqyRgMC&K zaYe*NE#$AZq+MzhZO>S>x!bHV8z9!u&}VCyu5hHr7^t8kw3PK8|){$m~RaFA89{*vKU#mPe@OXEVMdE zV@kSXFU(7=a?-RBR;9 zFl>*WN&JtVg8iUL(m}mVzuPmVI?Bx?;**b;UOjx8Q|rgvdXEXkK(+^8kh{@$_9N|` z9%t@vGx(U(G(tjA>?}?9=9E&fOZZNyb1G}PDQubyws7Fu;4sGOyU@-r~Vu$xEL6-FlujxMK5w_*IC z{r&wu@2~g2BLXXqEqsVTdzqCmAX`^sCinUB?nAf*cnFYaAxJ^L8T=@rQPNjTmgY;- z7v`EOqwB77ZAmU(|H<09Hh|q&$V|5>Y#;Es;@D=t@jZDmpT0!XM}k28S2ev}yFx5! z_{w5F%hi0Z=wW2@i-noMd;2d&cNbfa*AgZ;T*ZAh>(EFc7snhtP;&;xP5SI;O!tCm zuCmS0qeg*KkGIxXY7JG#!&}$|g-tK}YRxJ3=pR4O*yVdoS?diC>H4_G`;L^(?LExo zy-+95r#w&ZkXGWBxWPr%naO;-n@tY=?2fS&Cf^hW7|YBi>?UJDLC1T?Zg_tz2Rr-K zAi@Mp$E|M$M3k|fz2;_>4m9r7v;64}dA5I+K%c_oj=5^{5d||_WD+d>lIo;Jz~ye) z_PI#H_@F3DcB|+=&VO>VSd?93*d1udoMXG(!2d8Mgd^zVQF}~5LE*5Qr13@<2nyoX zx*fM2XLI{er3s*WnMuY*YO(v#=ETWjr(fXo^$$0@#&RW-VsSkMr=KWTS#c07+b#yg zooute*vVCr-gA{7SSn8;g7?_!PVMH{2{$M`QI#6jT&GV!x7#7-8?=o?;SuBIcpay- zGImMyZXe+0y`&U%?d14N(SNdYOTcD6u;ghrFPT3!8%d-U7Z-Q9ozr-yh@Rn%l_W$l zx3-M?w4@zd>&u;7pou)vYG|wkjbE-YUz@8-P1!w+xhm^H(jGC*65p5FrJ_E0k_WP% zg)btPP(L`C7hP{zZM4F{d{hwI!GHkTvcmc(8=(JGY4Mp1$(kY^hZ=oE1e zCnV(w|53=(S5|b*Co*tPa#7IHdwXN~N8(7uVys_#gFw?cZMPz|YNuQfi)My{VbMR! z$P_j;r8GO6CnO|{#^s7NZ3M!{J}}O+M@OA5Yqfh}LPCBADJUpl_UVJ+bwBeNE4s65 zOxJ65`_bXa=IQC_(Wc+i({u2*9A7LHiJXb)ENn8J!i8N4&WL&~E<9Uou3{F)Kg-MXT7SO0@PjPX+YU|{^&TwMTSsQ(kBrE$ zva&9;xWWUGWSJ&uYKmcHWraY%9d~h&kR5+?aqaqgi~dJ?pGA$y@VRU@Mk_lI{>H*HHN`3C zOLDZ1Pfw#2wh2JGx8p-LT^6Pvt~A%`YW8Vipny1}q;NAw{H9v_1XpZwbf2|R7kq06 zo=hy+r<3lZy}~mgnkSWiw4v{;{ynajH(iGjE@DQ!kJLK7N*mLyiQ^^U=t|{lR|#f+ zu%Cg?0wgI&NoHEYN#?#=tLJ(9Jq$9kMNcqn%D7NJ?VrUT`}s6|qWd_)_g|F3Au;PI zUg)pma&f$bsSRmnTku9U13MJ5*46tp7J+~@G}^9^aXWU?mxbrMGD!>x5SEk(_#1CT z5zO&wf)7Mx*)+lub>GD%rXP{6_IML^skAlmK&FW{OM@N^HLmw#>OaK8{mh`>meMm& z_S910{J7gGaAqj1Qd3)-%ChYY_6_9n@>195k}@$dk@YZqaIw|``S#ZC3jPY0ZBJKJ zR5b9|R$6iYcHY1OIKA2V`R(gRytBtL^)EYtl3fLb+aw$^mV9@&dlt%Sa2vBnUTc3$01nyT7j*9=xKGrOjwQ+m0 z$|f`Y>gXWqT#qd&SvX+}x1Ng-TEE0*YJM=58()cieD(YJNoQcT_`KTt{>*TZfSZ^z zJsMcnK!!I{Egm}|9WmqmY=8DVha0we=aq{{vt@+8;WdyCo)^2R{D65k9_&)Q)e|3 zl5UqpgN^Cv1_^;A4!HsvL~|WqF5up^v60A70*9xxV@szTDQecP@Lh{15C47h^v*nV z5jTgcqcRO+j5q2Oe|(PcB-BO>lz|Gpcn{q^*NdM>@a3X+BjG5!%u!pVx6D=$%Eej& zI~}YgumrD89(F%oWP%)vs~C=a8$YH) zvOgI%i{JUB9UWOB@&Hus$W4F~@(l>`U8icpZm^M&k%vhY#rVWTpP?t6Mw`uXuC=aR zC!@yYYHizvQ^e!vS3kh7laesou0}>v7|p5Vnn;@}dN;ccU5q)?gLWNql+PWw13|y_ zo(p}Pb%AuOimtBHfgreGC3f;?f19U)ijrp6^<<~;@!xXACWcPE3q&B4iQHNV)5k+r zH%TZcAbOcEyxJdL{hXYfJe;P{0f@#5&=nOy15C`_w#z4ftvX9oQc_aQa`iEDwr|29 zV)L|gbXyN?+#ps(aN_WmXu(75K6P<-C*{u$-tof6705MaPNkB*KWjQ8XkY*z=I zCxxVn6sX@+UxicYBLc_Gt(|Zy=ST7F+a{!l{leyt5&g~yVnRsCphs%j+6XG=rRFR2 za5%nVIPZmA%r3kdQEo|lTMrjbir0hr5+IH)^O*?yo!-q zx;g~uURSaA%8GuaD5iqsu0N@eX$s1UuNpTtGJYSzTJ#4jBSq{hZfs1Jtm`BlNs(do z6+Wairbv)}FFhdXlcc1P8pxc&Jq7xV3_`^*@$jE%Qo39>yCc*6dvCq6@e7vDk-k-d zn4i9LBVB(vvlcW5OTdV+>#K<#gHW-YM0bmWd2tf<4COvi8&#ffW?R!Ywn=_@X=z%jgm6%B zsEbe?`+TWbqJx%+2u%8ibsfa)W=erfT9v|!SpS#p;A=FT76ls{`U!k*B0x9D_r51u zICcB*jlJ~8HX&EKdRN!PEPV4Ia>OS6Ec3|{N=zC-QHQKMWxK%3upB6@87y{Slv6tX1W5UDanKVKhTVOgo_Gt()9G9 z^Lcsj=tEOCUwgwBG`m&STdFCEKT|FEB;g4%q$wXhuCU|>+*it(ehx&$jP`vlaggYn zYMi@FvT#*KOic@~>q8lX^EiG<^h9XsUskXj>QYquaOb|msRtoKRdv-3r)DJ#Of?Pw zA9b78HV!qYsr_mxi8%lH$zo?He#Lv;x6XQg%A@S}@2;=)Ten`RoVIw7(PCInx5w_{ zy%#@ZnJC%Wqx=Q$a5y;T81!m_fl_o9cllV&!oq(u)f+{~br%M;NSUl3GH$oO{{Do` zlpNX9BkFdtA`Ji~5ann@U%h!24!3451aOO{grx>2yn4Qmr0$z9gxxCZ$I_^}8Sz}@Gr)l3(tY>?dfvz^jY1Guz zQt(3|Z_Z{y0hMF1!xz7$qT20Ldmz&vlxijyG0|41@r$Zza7hV85yecWzkhR6cW z4djE38LKl3`FX?@eM0{WqfVJn(DKwH&WCwqOoRnp=@i@}#Gobz`q7hrnO$V=?7r={s1{aBS5SwvTROVklyjP^QcU3%vE44~dZwv85hsuNyChJL z1*VZ+*WZrS1WEfZ7IFVAtQmiu-gY%US-4Oc2NBFc)2k2?YE{4Z<=HLhS*FSWqWx(u zT9SIiH-WJ}S@b;6-KLQl4Yk2+3)QOSN;GSAC4|fd>CHA@yBkwncKz2sr{3-QKYsjZdjAF;6n+Gfm!JPFB-jl|MgT7b>T&boUbwshEr)OpsGn2jpTz#P`3-$~@ zu$cslQCr;4PY^2-GJSkt^?t?qGxG*WXm7Wz{|h-l#!P{NgA>y2KAP+ZkXbZ5yd^SM z#d+7giLBnY*JqaW@!;>@uYv4Oh>E~X!g@8hRtXr$xNiv6)YL|59kMJk40oP*F(H2I?ty6V{ zYW`RNPNe8$A_}jBj^cr(iLtSEog>~VQyOvwa{qeDJqUP)`uB=zb*~0kE3XK_{=TkU zTg_?GKuk!#2r!hdA$E>#UiH<)Eiqq>ditgN?zy-tpEphJ)t(R)HhvLNA!VJAR{PQy zzOzKBdAFaq;M0_dW_!@LYnKk{WmOXzKOUr^aQ?;fK(s{vYOEQ`oS}Y;{ZA+mC5ZlJ zbimjmAwPrT{`Mdi2nsE`-j-TZ!>X$G%k>y&fG#BolQ`@|S1x|gKdoAG#FmPLT0pko*3Z2J*RG5>}!Y@&+XKmui&d|lenuk z9ff^;e{as_(gDt^q?QCA2s(N?7+6?9Z;!9`<%^hReklOz@s0fP@{6y73%ghdlG*c} zZOS;--Px+Fv^2}|*PHG`xc__NhL06VnbK+a{`ML=e(VB=sM$-x&Ynml z;Kkl52gIaF;e80x!Mwh=d_r~wjgrB6w+-j^{c~|i83hUq!L$P-1H(@1`On&|*7JpC zXKKN0;?DKZ`Q!fWO8~zIN$)7QVdNR%?CkF59z&VerUEqIuFXhvhO#iAsDmi7Uz7wT zr=+ChvR3h=x3H74O5%E@I{&1=OSoyda zrE}{)ZK_~y6$vRRbUZv6Gc(GTidy$`!4*5MTvF1aHe0=USVTnI2K;&>9AGIB_?mv5 z+0)b0=B-D>pW)mM{{{px8gxWy==-IPjmd!kkQ7KZYHH!pwh{oQ=HXcc3S;&(i&dJW zt*vd9kw4wD4}W*)2R3srY?D`3Mipk>?p(B?qNNQ#IIyg#sR6WnA)QPf?wrm0=Sweq z!DYaa_wp@MB*^IKo>G>bcr!K2IbZy+K?JiK`|oNC3-R>kgV^Bu`unq|o&Zt{2qRa$ z_w<04IG)a_tfLb-b0|LV`nOE``}+By4JVs%9}FNF?F5qjw>L;SLEz|k**8cX2k6wp zrp5r%I2jtVsot?HDItmvJB`C%8lZj&G5Qd*4*uk`5R=Qc7Fq!T&A7lkJ~p&5ES*3@ zM@I(u)!C{y^IPEM&G~$G%7W&J8z0cOSaClW0N`x)^i6+69>hE#Y^j%PvpDV0lyM%j z+&5dJn;gcPcXO>@Y(*wqdbW#8O0qgkkqkr=0uWjtEGnYMyuOCs8XI}VU&yZU*`k!~ zZJ-zevA4^v79DG83WYOOE(I^)iV!A{Ko-aa6z)Nbvrh6E;38?@pb^3weWBq9MEt>t zi5Pb$i@j&7t&7bj(BROBdB3Z|#?!g-k9h%|BnpQ|hKUO3rTy!}Z9U-87DWO|I1~a- zR|w*CQdN2H+dQ^uFxM-TjY1q+Cl3NAtAn5~ZIx0r1RFKVEOw0U0BFfmE0 zsX-wUjm;_2pYvM`{br4`&m3Ge9v zTd~6~S&CC-rJ^eAkLdw!UPI5$d(#Yk;@-5Sprrg$Y2XiRI|z_PdqWTr2-w5M2vadI zIBhE513&>yaj0MZKthI)Kg>*iZ(P?87eUBV?5EW4FK)%f zfQpDAK`JDaO~~h-HT49rjZ8jwsB09!ygOlrAi|!WJOKQnW)Ep=4zX#Sojsp?%KzUi zz{bo4(A#u7U0U4Q1$tBp%F3kw6aZWvr#{qfkO1H&5TrU33%Mn9b8~Y$dz{%XRZYLc zqE2zUuMQV-#T*90fCE`-u#K!Z{#`QilTinNlKfvCjAXrdTkLX!q}Q2}xh4GkU5 zYNkcr1Q{ZT*zW-}dDOMXjP>m0`lCgI0#jx8%KMQG8toWe>+1n-?>NC@lE%;Vzs|g9 z#vQNQ$xxDpKITbFxiznS$0Jl_``r=C;EINtS~WS_br|h)44`whTVmn^O9A@C0D}Dk z%dv#eOOgW__KzlPHPf1H_xG394)R!&W zyT(P{Iwk9=%h5B2K!+FxLbJ*clqvZ*7>rN~KEQ*Y2=KTBAbCOdLJdHRVL&(Q!yz|*bZx9gfP8-*+b_%E$s!gB;vp+RutP_)PQHN@=nOAvS=4~8f zMW%)g4DfXId|$6|+#c9?2E0Hn`;Fzi<9UMRzTd7E6%P;Zg!Zx*S*Xg}9ZSD5xuk>+ zpv)i#Q@P+K15tnwWzM4sNHYmk@?>mm=7 zyE<8x$~HVcj@V(KtJ^pFseP!&z7vsiNGEX7#{Bk3jsJGmf1%#mqAK~bv?J_Hp}g5r zT`^9`pSZzX9e2rC!Tq?~!6@9`u5UqrszXyULOmn2_qd;Bvfk1Dp`+e|L!lc(iw%)U3y)r9~840aC?>)^j~6Fj%42>M%FAdF$oatP99x zLGJ6mq3z!H1l5E&0Hw4ZMK>v0vo@BVVxPbp40?0gLu~w`7E2V(?}Kg;Qg8I$`+?Z1`t7aDBwF)=ZVbfFQ%sL9A8 zkO=vh{nz+8?G}X3*V?N!%TJbDlY!OeB}Qwj;iW@He6 z0J17LkX~e3-HKD>=yrE^PnPOSS#onE0mbIc?S2(VtMwl3XF$Kjzxi5$=>5Lav2_&y zDr^4!c-Q-rMJ9ttKy~)SHsdL%Z-(brs2RuM`=Yz+Re>41{M}DwloYV zMe`Gx+yqD!*$!e3i?g$;ME)}6@Y|V?@y?lrKr9I5Vx*&Gj_g%1H#xAF|q*0OPdM+83C}eZ1+rFTwLt)G)z5~ z$;ZV#4gf$1Fwi9m%FD*ix9IBqSZgOfz%6!~_p|nsGz^T!kLEyj_V)qm5NY(1k}jgA z_H>KiMd-fLy+JCL2K$Ael?Za(+B_BhQyWY#AjJA4thUwyaRXowWo>OVevOt2bbS0} zn;!#rr+ibb?)DLI@X7%Jg#gt=ZgD-P!bbYe{HJogqY9&Zv97n>Zxfl>?LiK#~WCDhcNR=4AU$WI-8K&wpa@)Zsk z(2+Egpae(zy!l8VXd@)&HV+e8rTl)c3{Vw?x^G!WC0hRjplSNtNpcQB@f% zEctrTG?%{<+H{Z?c`#Q?4K#1efYkeu{?gL$%GBv;X=!iHg#tu^pgH(-061g@+yZ1U z2>BV{D5D5C(&ErlP{qQ27UC2ww{iT#Z5Hu+cKt|gei#1f&ok_d4|S{i*GBc)Ixa`` zD!-0-Z|%4QJB7HvXDr$b*fnzTxxIEZoq!`YR8>`>r}Z$Sz-+j+!m=YtFsF|LYJv^t zGRyp}2Y)w&KhPZr?M3B}X=%|017*Z{s9HW9w*%B-p#0$B`IkhHQ|$a!dC43RBt}ji z{XV%bp{y#3w3H0ALG<+W#DZ{P;E{zkGr#~R*}L?Aj|8sk>JohFxIqJYrGjPrh-H66 z2;iw@W;j-uxV{B+R@*QH2L}_db>~+ccW=@fZa4%(OzwjM<5b4 z2%$iJ&!bteY1sa{@JX{OK#J%MsIIXE1*ZDGryKy1p}`itjEw&`H3-bHQ2#2S%QZ5} z_{?^pir-^ii(53~`Q>=&^o|PusiXvI@QxTcVR&}u=DSe8AaU%})D#u|HbClt8j*eC zoK8Q9ZuCW-n!`Jwq-2o)pV`(b=DrGibtq~k=>bY;KVWVgDBq_WDh>`cCY1ldX;GL< z>ju|jbxxZFloMr#wT0@zlTDI7MfpNPjDP0_%;PBmEa=_)Se}k<1b{Dfb?iX3p@Ss% zbDS3YHx~&!r>z9EoPcHx6VQB71+bXqCfU{XHAq-&?0#(H`(Z%{9nAmY78st4rj6(+ zj850A-r@tY5Fl(F^C}c2@SV3s0;-NIDeQlT31LVle4r=elne~kQ|8`J%)h9)=t<4H z=H=ymG}O_78hL?AUeFUZ6C%e)^8u1C;d$|ab$9yl@bK7Zb`q^lIW7<)5OPKx930d( z@Vn?)Y=cE!emfGyK1{_(w7Pv{*;~%|`x%-B>^V%RoOc`2X?Y zV+eDLVW*PG`1p)p$>dn(fl)44_Q7ZsnL&UX1}bD zcr|OZvN?nZHka}4@mo!%5A&&WjkP>N%L5)0!NObAk&{~Ut*l-9D=z!9{ew$Cy$ho9 z#KBY5{`2I6&myO)w*l4LZPhUtR5L!-#bV>~f#X}f?t)P9uHb^kz)S49MJrdTHI=S} zQ;HAQhv*2LmLo>}t^`K%&+U?X6lUS>U~>M9umknF@aQ-&UKwG-`rd7~S>g4Dw&r=Z-geio4HnUpOkZ2o@kF-WBALaq zTlCxf#0@%a)$7MPa!^fM<_Ud;m|7C~TCXWN8ChE24rlNiLMJ<<4%YRXw==VpZoip3 zfsYo=Ji%jI}DudmTOK2|@+4*wPhz5!h$Ak!l@TA8rqf z$8w8z^$(aCRByCKpRBfru0CHC|1R&Z{FayEI52>=UPzd^+-P#~eg3KyRZqEKHm0l! z3m@?Q1x6_K!A(Tm=#156nwzvR80U?Oa!U7YL7(}133H#Xb^O@ZG z+zLbLWf?tg(H`N_B9~RByJv*FamI`B5=OJp4uY4TC_N`o_1@P*!>bY+ zuy2B9gl?sG=G)Q&{Ym*+wp@Wb%&CYv&9N_i`*>ie3&Kw&^zg z!lFfxGR8{-mz4&0r*=l|e98)!+5R{lR^jBNkjHzE?}*yFZ)>6UEpn(~mHYncZK1$$ zLPmL2(m`TfOU@wsyHVtB#_{B@^8D{THu1%}f=(DZz_>!6S?;xGFYavZxR%BMRU~HX zxTK~g%_b^p3T8Vg4v5DpN8+BDQc7)5l5FR0x|zoHLB4;!z46ebzu9MkAwvHS{OdBr zg4a7FD5^SL)4WMDcgH~@q4c9==jUvu9#R8=k0=CYso7zw_O7v0Z>C*pN?$b@s2I%I zLh^Fx=pstcj-n*5Rh7>{)i{*YFxBEaK&k1?4(j=@CDGQ4uoGsjX~bF^<3)L7Q^{JK z)<-Mj8+-`ghM1yoQ$yN+b!dOZ**^10Owkt`Dsf@rvaKF25a4I4Tm*1w8#6G zVA?O8G~Yz5&Lj31qf*c`o=4T4QyUQp;AjEIerf1coE<{QUr!l5bZ;;?LLij2gvj)A zqk61Lg`0+o-r0hm+`jc+AAgp;tFai?7<)PseRIn75&7p96eJEQc(EdWNl=nA+k70` zLyfAxHqXP-RlD-&Tq4-6W%(UGX+HA2d)iXXfx@e+4VnbAUL6Ttb`j41=}4sxhn41H zc?qN+rY(_50y60q0vsH~i!izhwstS<4U(mGq;6PAXv5wwWAOsZJtW^y4W>D~Swh$!3FV&^cN1}p{{kyZz9AkIPXg`+F_W7&J5YI-8;UefAJdge$ zVy3T(xcH!jvlMarr|VC4l=BtOx-h%+Y^nS|+`V;Q72)>(O(Wgi(hbtJ0V$Oh>Fx#z z>F(ar-LgTtyHmQP8>G7%exv7{`}KVc_kZNf?73pawLb5)pMdK$!oPH$*r9OWF7hX7 z&VT`7XM#b{c~5LlITUi3fcNL~XT9h-icS;P38q}uGUJ$v*Vc`){2Y$#h%^tFw3xx2 zPNJCz-t)4`G=)=&w6HPn{n?+a+7T|w^<3GGqBJ~Cn&r&QG!?a|-~o(cB2Nt(+c*`4 z{btP40laT1Mk;%W#J(e`cu&`=xPJ&f>#BoYa`fnE;t9R??x$9^ZB`Nk%}5^sO@S-$ z+EhM7FGU*FuSb2P6kv?m8n((&QBIL{aHl2j@Lw>Ze=8U>Yim^XU*QHK9Fwk~UADib zNHx8f7~kI1r-C{h?&pEI1`kv#5t$oorNj_Q@#ulO1u(T|pEJH)MXya&-eYSmxsM3O zst;+G-^fZOE%v?< zI-zKNN9$P)_)d=;%(5VF@VGg<*>sG^mzJlXKDu~bH=4N>7ewRce%|`}$h(Ub#u2^x zh+|EG-)_$D^RV}pJ)zX)pKv-zrX=T%idppB?p)eew8F7DIG--)-ERw+ziyXq1!9OA zo)1MIjj?wfhMuKJHeVkMxF_omeA~Sh`Z?r&cm8}F4gcgWxr~LjOSU$?mEL#wYdOB} zB*Q!5#Qqn$9aV*O!+z{dNs#-_#SddBh|2?IxmpFUG7K*Ux1 z2*yQ5m{A&x7@$9g=#MR(w#x~r^Je?rQC%jNzBP6w=OL%4KO+=$IUQZEO1=!W9>Dn) zg`?4IOk2~QF|cz?WMa0htgIagDG3tHthHPVByU6bx-g^8)o4622)`rT)cO#be&0M6 zxp~X6UOy=3xffw}I1`@O0XD5r*v!`V0h{rL9q?rFt$DSNvPqQ)B+*Cr>+3VN1kppF=U-yd}jU9OH+ zBiGh0DciObw@49^FyoGLQ*bFOVAMOIN~TQi?U$;fM_X=`bdRAUGs7BbJZ?^UzGH1Q z9TYocEZg{_UEdYBAAZ%lW>=GIFIyl-_AmDKx?VtSUrHIfDO+M()(=+X!otV;xHQ(b z@B4DSEaYHw=D9bjH$-9Q5kx%NC1UTr)O!tyRqKl*qTup8N9MJimo_vdD;^a$YO%W_ z;!jx9aiZS63A4X>6H(8ykw3m$Z8%Nmax|RZZ)||^ZHlf*L|0mWB(q`lL$U=D%3p2A zCMx;Jo9$31Z-Qtx?88rj`D5NFBcDUoM@h)gtQE?}P$`;K3Q>_FI zC_~5Q*!Vg>-{Hy#Uc1LgI$i}sQmRtqfF%1<-Qz-~Gdjs!sfqc?mN2&iiy^&+1O^Dy zXEU(e>lPK$40;Bgw^`a&KrSUE=zLFZP+l>1PF7D z;ZSi&=Vt`ly&pNreXp569rBC-=TjwQ@h8Tv4~{N2OTAeU^mpSF16vkM41X$imTvX_ z%-rr)Hgrc1nutpws!DM>A6N|!>U1P{doVSuxmk#Ho~fQ6w~U{UcwRD;od+1@9HNPH z*xSOVk|fpGK4X+V7;=H1cMTB=GAwxc;A>_UzqWpYYN3WJb7mh`eBhc+I_WC}_R4-> ztGhd#Z}MT(<|{RnH3Pl6-B4j4E#TB}zz zvDNF#lUj2e)hFMsP`?rlk4y~cvl}2+Qj#;^;hT%x{xh^@V#z=-YGY8Nl}_3mq&9v) z#C};ZXQrgI0fWokMwPekG*eCQO{+O~>(6ZbE8~N*{{Z%xEz`ln~1GjoS>cy;gSN!;Mvg%T`gQZK{ zQeC0Fl_JaD?=OkpYuu??>Rg`oAr!DMMRdUN8K`Xk5Y4Z`h~8f0oE^ftET-Bi{>YX| zv`CG*qAf3eqp%~tHdJg{ayN{l$hDC%7CQ4y^bq78OaCgA8TFoE^5gOTqAQ_GytJ(; zk-I1FyJ6FMTvU(!rH|KZj(SQ> zRTk}1o9H8_#kPPA+b`OjH039dR>3#J4{P;>&8kVhXEfk8-gK>=kU^Q;i!_p8eh-%Ho7iwC1xOsL02+ky%_MV!gJup~Sn22)lG)h@K!t^~#|{7NvYUiUj(wZ{`# zOZ~O>=T2YLb*0_qMPgFMq6mf3K*vkiRw|PRB^qseC`tB=-F7OBi~Pxat7P4Oe05ew zroG{7XgkvcDyptqw&519HV+J8!|N?g3Mve)>xD z9WVCezShusk$CBSa!@!(D+pYr>WJ@I=?;dRG;g1gZ_(lY3v$pjsMtTdhIJHL%PzuM_ zm7V47f~B0QJP$w3+OT&TacwX!^|g#YyCGDD-Z}%5M%Ty?6_Q5On>44n+79wbFF9MEK_E5%*!# znaEqDVbzT&@ZpAr>K)vQO3!NPG0Ur!Aca@e_p(UPI;TG2>*J{|P5sxWe4Ak#a*scZ zv*vTyOLmwz_KjH%JqQy`x^H=D#Wc_L>g{v}FKO-Q`j@{;PHRf~M=DER z`m^m?6KczCt4g4mA{`gnEor&tOpUpmoAR-MXsS1r3{#0X5C)ozdz3PV2(1bF%7CAe z5Q>9%0GIUMr^mXB^)l zz3ddF*vZiQ7_>0rC+=-an~vW){v&xUw`eS6b7(7bFrH|6*VIFb@7AO?>stw5tV^GS zu;+MPt;?eLrNi{Bz1vCM`8+x2;#$b1?@Bl0|3}4ypt-dzt2LW(U}< zX3S>x&=kHLk;5UcnMvMfmN|l2Tt1uB%YqxOKkCD~Jtn-Lf#krj@2k7$Df?33%#Rw& zV?G=9_LMI9F>SkU8@BBhso<;DJvQ?8UFqiDP~*>?D(M4J1mxxy1lCHUYPD0WUYE~; zW2Y~#M=Rd|0qRTV`S?i2{7IgsLGlUyM;tsjysE9mu*{U(165^IB^yp3Jset8OiR?y zX$3CHTJt9>(_EL2#(}y9uo|&2A*REe3G8>>`oO| zy-x|gQa<{F-&c>_HundQSb~0wcC1HA0UG0bR`9WjVV#4)A#q#-9M|RxU*l<7S8oVH z9?Z$qdtUat6eJu`x?$6<@y#7DyQuk0nEzEtoXca<_<9|NnNr@OvOK$g+4xQ@68Nj$ zToPQ;>2P@*jN0qF=bjJ~KQv`VDZd616f9B($ul5>vCJagMs)o4#J$P8^C+$L}S+Wv(+X8VCy6 z{;w9G3(>xHbWub~vi4{|#a_PEi)tRb)6 zz%#qtMw-tkMivfi{+{sq=a*^jh$&BU!;Sj2yNl2@{==+|Z36Q^G!*>GmI?W<%T2=X z423h_W0b47ZK-9fG~zvvITyx!M5A&n*9AL+rAfrY{RQ z1znCC*JW@Zd^#z9k%p3O4ieo zj0ijA($hK7uj4TuA4N8g-5?`VH_tH7pS{gkfYz2gdA|ARwtcQ`u~h280o940^=p(* z=e?gUv}ys3Na%{CI}f|OtFg5cx*~`(2HnB53ks@Z-AqU5g||6q{*1_=YOi!HNzQU6 z)GZ5krp?YmzCg}uCOeXUQ&W-Wh)kQu6eV-LMw7hw?~^FXX6D zm53ozms2h71|v{MC)H!?8Sv>T4UThN>?E`-Dd((0pI9_h$zTK>*J{SOiWSo@48#`N zj|gzbI+;(lCeuT5i1fH4GXrdyQ*L*6LRRo%fMxK_CzRb*IbIz6cwY zVQCh!BJKDbrl)b9M^s>={lt~JjhCLWfXKhjH90XEt>JOIr_V|Vm2(e2o%{NxneY5j zW_%^0*ht98{kOr~(0=RHi|dgqkt8kp`ev>!)0h~`>$Udm@g?SBwb1RFt9G4%*f*E4 z<^w(HtFW#!+-k>FmZ=Q1h8Llv=aJT#pDBi;O$WJ1p>VM13xHy{E=yvLFnH!;bPC?XK{8zI zzY`b^?trbB(Nyt49#>9<@l{)IewSf2Iq`8Q5SpI%?fSRJvu4JUz8pr4?q~2JW0LW! zhZ?~0J@B&5G zgo1OPvFv^)7R8|Mkp-2fGZaS%iGZ=6*RP(+Q0~8ZqPw8nEi=LPuXf|DY#lV{A3a8j z^4fPz*zCDSGwFvSBWX0E%123c@=dwV9unG=;fo` z0&NaUJ~j~l@@>+op40xAw>1K!mZCx+uF*Gj%P67Shy~IY5`l$vr+*W9O&AF~oJ+`VEW_JIM~kat9WpE@n?^>qk-7h)40ejzaLq!jC+P*#$(;qdW-V~nGj^e6^=eSBTb0m}P zQZ>Y%KKV%U*o7GW@rM{d@Ra`WSemeE+a2t5Fr42jO`IVB$0s@D*XZQiCkqk^X#}I6 z)xIy+T*>OKScw|l4JXD1GoKls3R7(1V6-r8FzF`AVFSGVf*nK|1QMa{4QE^QEFL6C(MuVOXDGIjzg`l6Z zt~l%Frb|zj%WZt&PKanG^T7lY%$zqr!uG7xgaowJ&nD1hIY)|jop1nQNgZag8?P%! z(7(z%O-Glc@id5xv85IvySOcl=mZ#M#$FIKYwj}QtUR@;`~L~@e6hyDmZ2r3>i>IxwEyW z%Wk{kXyMZvDvG7vU!y|*iSswZ88*#C2}LLEPSsw@VV~rRtyGYsnSBe`RVF?9&q^kQ z;>rkS?EzLEzlN6;+8wAk2i$hmzGr^Sm6bS0ERo9B)FG3ov=r|}3^Cx5N5#{zqfj6q z{kakVDVBso_>Gw%Kq$w_gQoo_7R8^}lflK45TdC8URJHLda1*QDdQDV^VDo-1d-jg zdo7DesD+Km>y3HZ%bRZKGveanDeD|a^2y;!^^ucGn|!5ID6GlqqG9Hh9o7E9IBSJf z5lDr=uGvDG0)kiJsqB-QVxTL1fgfwti4Z2Xf?@~(&xm@DQ9Q(|YfP5jEtMG%H?|6r zXFHUJ(z}#|l-;08)+{mzIeYVqcz$h$22`Omi8JpwSW|qkdL?J8+CD*TL=zjQ2@S;@ zj=ar~AuKzgFg4oh?;e-HmMh;d`BpF35x&`nKW86(nc$v0^6!=E%VRY4*HEp& zCM1+I_`od^67y$BS;CT7>zQGetnZJZfwHO*^+EED_(m?A6hmdn_vKcYoCSx9cD)Q4 z>2QCey7jqM!$6jTF{2DMW}ha{)bsN%Rzg>}qXF5Y0fx$hY+u!~YLDd+&PFcB&xQ_9 zt8KQ>&3pxe*Ly_vfNh#L)hphJ~qsD3$8${iLSi)Am60(m%1X-pL+Xq^yk|-? z`0c^2FUljrs*a0W@KO-lJX^Tfnij$HHb>lb>M21=*l8RN|CCW$r4t*wr_&I2Z?&E$ zw#x-3j~HuvdBhk;v}=R&utBPh&PaaRSqB~gf(|jlHmJe0s3Gn1F-+jAVjK<(gRml1 zGSn58jR!I_k+!%TAxe8&osbG6@Yp1MVB#H~@cvS}&H2nS|8%gZ2VcT^X7E6428(bP z!~T3IN8e_%kdU1iu%$IIuP5_DsHfu}d#8zkf6}dm@#kK>aLT@4-AmLMJ^jXW5;t?I zTZfk|bBx+L$>C)beE!F_2kALzQPSDisN358q#{Mt zvDs%AQ&m-YSdg>JqR2xc#6S19Lza*lG9ifFM}E;^+m_lAyGY4Xc&ztJnX|oSo3cVp zd-D0g(uxMhExp-j%IFXo;(W6+{`gbVcLi9sKjr7QjtaZ{|4zRY_Wi`9&Ie0BcUI`# zDHXS>$0+5nW|u2z4zEj2=V?urm@>b7SPV02*jTO$*Su77m@Ny8*}vhTqoFt> zLO{Gg&aIb*HAAwDG4hH)hA4d3hZ29GS3#e9c`9S*@XHg1SB2J9t?CcrSyr%0I@^*_ z(WoxOZIPlb9{!+rH~#Ewg)c6aIJOz}dkTkxKR7st0Z$56Rhf~6g{rU!*XU3keo>Tz z&{yt49!IyvX~Edu$$R{lAO@RC9VV&Q(KTy=V1%8tGH5K%3s<%4x9Za|=a(xdLd-=% zsXD)(Irw<-$-1b$v(@cv7hJBnMNBCm3w-e$DFMc*jncts4}N*NQ7IAg&n?14NMs8Cy5l}5$OA}_ekpvpRf+!@1*au=(T47Ii<@#FE+o` z={ak43IDo&m}u&PkB9-#2s?&6@G;xpD)+mPAVE$iQqN}%sf3UKT_?`h64yHi;}cF+ zHWs#+?+j$qP(8t{M(`zH1n0wk`h4F$as+@+>e8vn6hnVex!x z@Ds?D?lI$ay=jU2%pH6pRKK@V+n{;YD15YB8UMg-GPuwH9THowc!5v z@Y$e9^xre}zpH9H4BAxjHk!#B`U|Rz+nG1(bP3BAg$0jT4fGsGy*?KzSWj*K*Wxc` zMbZAK#Fm395SAbd6xXs~dN2RScpkIryM58o3 z(+tX>xwo!50LtNlW(Ikd9fhV-xa>i+YRnP)J@|`({>S+wN4ID)SbgO1QkNplN)`YA9HiQfsGdeygFRVfl2Mq(#bq8XRNe+Y{*wI~sYw%k9 zXQQXG!xGKXKQ?P)afyRGiR+qz=4?W;HX67%C9F{|u!3J)eiIO`1w*sKobBak%Bzj0 z3`U?TMt3wApN~JqZgl4ny45itxExO9*lz!Ihp;F3WAErjyLNjbB7e}X)$mR)Dal~l zBI*yY_6QkrwlXmB>%ikCXJ`>nu-5XlJxJxcXC7(1a4lUP?1`?iY=GAY;&Qbt7KHtK z>CkZYzdWT)RoSDIHb;^j?p9HiZCD|3E7(ZnoB0$GEos~=H6yf>-%svd_;NPOYL~hJ zvJV2OcX0my8zm`En`ssbmx)qr8iv=>YJ4%>>ETCAj#vNheynNf{VTEq7AOi}j2Wv! znrp?E$6q4C_lpB8ORX5ER3)a3vLEysf-v+vg61Hv$^yDbmZS412wQ~@Vl|&LnnULF zGrDI-dhE5hc%Md?PZjBVYV+=v;p)hGd3vxF(wlZxNM*`L^9zst4+gkbF;?Jq{pF`*j63hR=BzDFbNl5+uQT5&uy|u zV<_|<-{fkQ{wdGyyJT;d|J;uiB5;-Xz1EO~cD4F_2Xgb zcjal7O^J5jD59{wwsfHAjy8#Im*U;za7gMYhwZF>5id%}oV-bLB!8jzU6p|i*qQXKE)xf`FWf7js&sM71NELRq6(~5 znC2K1Qqz=~-XDikgpU!eA}x=!o`}}itt+^-%b7c1xj-eFPkq_~ZMnK6b$}PuZ{G6un zqf>X_Qzg6%4%r)bfrUn4!I-%B)$iWzJ1l8hByJl-m#Z&#N0+FbPX>J9Zi)UQ`ZAFD zsx_K($@W8in1O?ors5^A&zHqq(H{dvZ{$0Al<%3{B3!nxYZ&AwHZi&ULo<8R*3Kv@ z1!siMF^O`uuh8X=&p>s@jelRjh67Fte~{1sYR{}+M@4Y`4_zb5;W@lb^V^F@0`?0( z>P+U)Z+#SqAAO%j=+{`@BO%duW`W0d@6)MipmjVRdrB7_L_6$Q`_~{p;J~{#&%eL{d%fT77Axm;!-`p~}JbC3;(Y^1*vA(9pF|js*!q%(^Gymxm z7V6#rVKU z9xn}EJmxr%zJPJ#LgP~u3v#amUB5+C@*dXY^3Cmvmp`}c`a4*zRId82pt5w{{xz5! zm6Uj(f^F@5r-hwq#vu+ej#e& zLV-i4&zWKYE+9*ONDy(`BIA&W19q&t3mgOt#!N<9?WeJQpo)?7>XM0&4Nli4w zX_ZeN56~{9PvH&iE4^rnZM_APxrzSSQm4LS{_`%Vdox*$jTTSCkCR`McVe%WoPBf} zkdkQwh7qo)B>SoUR@V0ZB*o+yiHJoQ8G2>@bZ0gb2CcNZyN*@Jj0X*UnQg_bq(*5W zawfRy!IQy9*VgqUkI11^S;RCJKuQV^WqDL=v134JI!cLqe5Ut!EZ?{t{?To8;NE5u z9hLjyhKBPnpT;avMpO>+8=mcUo@v7N2YhJaJQFaGhvvaQ*Go%La5tm zAXaztizTmHA8ansDJ48SRaO$)ZVqQ>ZEp3oM?&C~+3QsWHqB`mXIy37GvpNCwyUt{ zPl4@ji{;Y&$#?GsZux-CMaN-db_dlp2)*vZ9FhGSo1QygQQ4Os#mmEbmI-dhIKH#( zv1>2GBtENmLze?*n-r_$bq5!C3?uV>o2e8v&a(rEzAeJhLxOg-6E0^OCoT6dPl{bA z-;KgIixIP_L~c1j`j!5{*=@fbf~WTvYM7&YBqlPOXzbU1Eu#H&<0c_vZ%qsbFMp7f z&~N&U$=1I6@m&N^#p@}+Y%XW`9Cx}uS;A*))T4|>kLYr0ay*2W;L@JBVa#59o0sny zz1@W9a(OnaU&(HX^x9-ktM9t6Sm+{;G$n^zb5muwCHVQqY{PmvG`%?b@Mm0dZPc!w zTWTZv%Kj8%Y~vZ`mlgS)cH2_DswC2i#2bROkx>E{38sHU+RX&?Hz_HJnb1jK1(#nO zf!AIYe$a&UUA#Q|4xH>h^PyOm?b}P)zQ*=ibei|~3AjST^{Q3tyXN%V!fC(4KBU#3 z4$mZG>`aU`!x}9)z5Y<#yP660;@Wj}q4-7Dkn^Tt4lyk_Cx@fk*vN9pn2>MP8Ldr= ztZBeq;&zke+d8oOM}{|qR2|Cqgbr&)^cb#BJ1_G@Cz=vB>MD?;BU*r#SJOzUfG~7} zpznH1@2wot&a01BSNjMlDI0s*N_N;U4J}uJ^z_r_$gbmChA`y`tn_XnKw2yRl>&s2}H)CCX|a6D>=YhaNG3! zM!;ksY+o>rPt>Nr)^*KvviZxqnra57Z@DBnTF-A#QQr!`OG`0B(s4ZAmLwgYaEAEL z)lR=YIMjwIr9LcR*eDMFX#5>)xcCMg{KN7+UwNY?sXFS%ACTSqn>}=4&_3CN*R4SI zYh~2)KG7ds+>ML9qBQu9^{<HKfezo=~GZ5zks-vbVm1jsXy>{)^mOYUa!UBLYy5WYzo|RCG#~w;?HX z=csL02%FCs`1>|kqx;i!TrJa1zs6WQHyjO9au%N6Ac5(4>5}vaRy%FyGGuK!MOARG z+;sp_(57<}_}PnubiA!XuHe!&`|=(`cA9r%c_#--j)7Cj!r9smDQ{1`i1Ug^gU01#$ zalR1$i|S-#IpwE?HPv=HE|F6^Rt9w?-tRAtNROJz7PL0{{z*5GQoeKWMvAN#Y%>4) zCfNm~nU%S3^25ed_Q0;13*{`84q`^jPZLDPiv7VRQ_MnaMV3>?-DagR^-tSAuF#4> z6%Ni))GV3MbaRa1H1e&T;d$N+t~R$4i!+H}#8@vm4C2p;2im{y8 z4N^mCe0HtgRZ_kp;?Wi~LyKKH#KK*hKkesRnw14meT9?0y}2vd$W{j z^e%b!4U$h^&bDbUSJ;`)hy-fdzp`|` zO5;=Lh)=_dOQHSsIo1PX+>t-qLOx{PuMe9qxH>Hy&nTm2ro@;#=~eL7xnz8Py}FHU zwZUTkjA2l00JiC>G?WN0-u|MJRtHEV=W6Kl-+=A%7Gc67VshNQ%oqD*$lTkmuy0Q0 zyJr8i{lUl2Pd7kA1wK!`^Wl7q(kq~0HhI0LN?yGrZeFAH0{LQx%aDCxSn5c&T~>6P z<^^OYVG~$p3{sjMDsTO+!6M&g>1*+XC-Z*Cx7`!%~m^th%&Su456_M z8?D-~Z!KI^v{%~^{$$qRkQU_mW_J-Gm*c_-Q-g+koTWT8GQn?jbVVLrEk|Beq+r9` z$4csKd-Q%Qw|XwyuYTeF zD(6!yv%}>^LYJQpPNGK4-S)9uIimxXhV=gCG5-b%fMkcBml7(((ufH$6zvOcL90`3 zM1W`xL*nE`#D0#_-s))oh%1L2MOyI$i?pHs&%u*~X5XbUAq&!Fwf~X?fC~ZD?Ri8A zU^at<+gAJcQg~1`Rx18X&;bWMs6`eL6vdmcxTvsS;C~aRX{4nPnk}^Q9u-B@_Wj3y zQ&cr2{RBKqp@vvzDK;+0a0^D!VyS}vP*y9m3>k}W1$ilhn71@BH>a`^;o_zmu9TtA zflxKyzd)z<4FWDM?)Rjmkm66Tl)!stI-IYXCc?$!7#&)K#uN81hWD!ZWRl|%?SHW@ z*5*6V2^Uh^ni{z%{Nd9J6F#J!-E(Oz{^wmQxiC3KgksMj7md6^8LH&1`?;HNN(4s5 zTqt9>qsO1p+^uuB3DrRrDg{13?kg3Ef6*I+ba(%ez4Gr(mzr%KQ*kjFNaW58?3;5^ zX7J@_YW`OX01Nf$J}fZt+^=~05DSlkQ{3N4YjrHR?39+rmuHPmBzpYn*XoUHCBjs( zE`i7VCne{^pt}!0u(uc!{d?=|WNvjxAbB|HnBZ)a_5IiyDuDgFiqnG+?)dW)vk(se z+W{hNAQy0I>dgvZ_Av|Ji*@FdhWLqVqCxkRzH2s^QGf??5F5_yz|ql#Y)Ghb<4Tob zf92rdB$~RwXS4BU_e9}4n@JiNbUjXffqh{EU_N`n7&K%GE2t*Fd)VK7!rrXKSvAF- zeo=H(3!9F$OoM}i!^Fa(3J30%r$#^Hlp7HXFQ@WzRxZa%6b7Q%hTWMv-PK$C5Q{lU zAu5X*@>3lFNohUfPN=bQH1Nkx#ZII=`1`4_A7tJ{@$W?JwZ!|&-KSFc2^8xEjB_(v zBYtTw+IW=!aY3*Aw!~VD7V_{Jp+y4cFycE;hgzng+Pzc^r9tc4r;3$Zv!_`lw*5~* z*Gshf$LgIy8X+XylAP3~aux(z^seoROLg)C^J+Jw^#01yQ6S{!<@A`kK*_?4&hH)Q z&nRk_qe=9GPA4)d1!n)BW)1001}-$TzB`B5Plh9vo1F68e9hrR$@HMCTVdpJkn2 zo0+tsU`h==Pce3iAw88uCTJLxu9x82FivIM30xEfd(Jib=g{S($NBF9p`^QdEZC_3 zUF*R6E%y^!cmqTCh|)#~At+K4hpK?iH0C}zz!6ic8m#RgHAy74KqiC)OB;f;dP#M% zAXK!W1ity9+O)59aG~vu3_;PXnO+B;Q z^~F8{AtdJGwYnxpZmBv<&u?q@`=Q;xof`g=m-nStMe|p~QrmpbGG7;=n84KM4!^>^ zpl@?AmG>EWg${&69BjdWoC5ij;!7Dp1b+twuj&t#uGI$HP3(4UU{joZ^!If4-^Iq> zL|CTLj~btU27lD@zx_^stxAICXUKFHRqX@AVx^gr6JY4!aOVPxK!=JwT@c^s#TLsc9Vm{m$=$AH`Id7Ah7b zPQu4ewqi1as{gq+F#pkuY5wKg{yvMtPVE1YIU@XD&Ex-Xzu~6>6sm*2epyVI;^X1P zW@O0O*_G2&V!kJ(jr{MM;U^D}qwDFBK{8U&ybF~>rU4{6qor!SART>mW9zX9Kr92_3r+OnMf+MEH07@EUi zkc0@;A5Ah)=`<#;jLR)AFkN1(UJmrYB)@w%5ls0vbBHckUM?CZ?ujm(?gJ zDEH@~6ki2(XF%)#35bs`)UanP7hrq^g@(#X1GDkJoj-a-#pkYvUI8Ix<4Xt$fEA&k zKP|l$+TY**@q;G5-kw6QqQOy1K>;0*e*+B;{xY{deL@EK(|{$bbQ(YhERpB!5iJi7 zUTBZ9Z7L!ht5Rx^_jxK7imI*mm5wcAKy9cCo&n8$%LLE?mG-B4&e;_g zEvczQ0QKg3axy&;TM+;D|32b*!`Wp`elb&sA-RKxnHj=gBy5RV>5pDzWXK?ZTyfj$ z3Vj0(Tlal^%&6#iz}Dq+JMSZ?)M637xq}0SIQ6NYgfL_*fzcilmvp2f`My6~ZYf;mY=C{{wOu52c*)B%5_CNn zsRPi>9llTiq`UQOZTJ2my`t%`++o>ydi3hl7r#QmBY5ewF&>?45eFYX#*pwY$$0nW zlH%pM!gsPkU-a$Uw;yC>w^9qUA(qp0a#WG>O%b{QbMw`|hq7m~?K-?ulFpfT2JQa2WxpP#Ul8Uzjx; zTMV6in%dY>t)+?$FEb}+6}ROSoS(i=YGhyD`S0oRFNY>)=SYfQ=Q3TZo%gZXTAq+` z;g{J63^xpQysvo@FHOzO^GOf@_JjGa?^ICS*0WJ~!|Ig=8!%a(C+9nJiG61*QNVjh{1V(MyZCXBY8lbvqR2lUdLWe%EaJ_w-vC`r~*1p!1 zakS8uE*^-G%wBP`O}>BmP#Opj@2pJb|278#>`gaOi2v|@?}_VKIKXm#*D;o^e)FL{ z17MTyJI7^as_woU7diEstAZMem?j2CTZaVYI)1Y6n1+909A~;0^si!jsapB7R6e`$jHdhsic$?z_^#u%j6CRh^LOn zb#o50e$Xip_j&u9!#OaCU28aos9Sa_S35lruy1Z+3)>O6f;&P1;tY(b;-fCxoZ+GN z^e*0^w+6tr>*hdRfd1PgiJzRjA{0=At0*Z^+SUNQZu+?80eMK-5)Ht4VncchtOGGO zNw_(EUswQVRyQ`+V6U&$V274ax6yH3zhtqND`NesCHuu0mq3p{!~5|j4uBBNSiu8m zp!3c^jCbZ^qyPmaJev7%TNJ>!9hP^rFWOtB^#l8ZEP&3rzXXdiFfdR8Yb3WP1WOwv z2qk7LkntGt-CJSzbrn~Z5rL!h$8b;jizS!n|v1IeBD4$)&qySU+%=UI??mC zkRc%g-K&@>q4q#zuTZ|y(aoh=;E6n!^5973P_nB>o4hM3N)u5b<=ryD#VYk@?P=LL zKyTBzd%1D$R=HpUyyzix`oE6#s~ejCGvZB+_Y$vkbbH3E?c#?R;L_R-%2;bYmw485 zFMam}It+hb3^16zSWjD-$j!q`dUY0)?;R!HOi~6&ya#a5g+-N0*b@I1VOTs5rIL7v zBi4Iv?)`Yl|NJa%urd(%f8yUye?EIC$aifdW;OiNEGwA(!(>h7IFbok-|}<**i8O+ zqmT0cB0u7r?mQ@b%kuxs#Oj)i1CsTdR2BtRQ_p&m&^a2=@=(ql6mh5qt?R$b0Z$n= z%}H6wGd$Yk^lo1NPrf;hC`=jCrAxxuqJ5JbA#vYc3{{5Rco6`MD<~)ctZIHSy*)gJ z?i?cv10^K~rl_c>z!YG%;Q%-wE*>5h9$qlS5}*frdB z;o;`kb$RLd@?N9Hj7KdJuVPMOT(7N4s{lU?)4Ul#`OQ{n%lL>xtCa-rjHXSu$zXKH zoIl+ueo|1_0gL(!>|XjK0iYCMRsejQwS3T8nMPFx2I$U@Z_O(bKrAM)XpS6Kbd2?e z;{X`QrH@U|RpR(;79?<5qrt8%QsOF!#%Zq_>ndSKGc#%1yG@(vxLpcQ+QO5*$BF#EHjz&z&=-+x$svU8xybab(!Ut%Wj+ znAm&%D)u-Ksgh}#hdI+}5iS%{CP9X6jQL*5d#@?H*SFHoB>ztKdUHlJPVzCNHDyg6DOO=3+a z5;%`14?f-?0Hxw$Et~A%(c?pt(Nu-o3fd*P`Tk<*rE=Oza=nzZ50)9sA zF_^D39B6ArBjG)Ju&%%&A_|9CChm>{oWILGWAG&4E*Q6~0h2WzFuqDkXCKoGSBUR9 zO}}h)*uLbS&*@vc?H)G_4i0v0oo`;cPjaKYK)(QNe;RCTY=!x6kH7iJYc%R@7(rkH zsl=0?|2$pan#?A%2zdU4aI9OkLvp^HIoK;2o>Feixrh71;8;Ia=w-bd9D4 zd|If#E+bI2%F4C_nEPzshggvJBd}c~L&;b&W_t-olL^&3?HAS#o@JIeQKBi{cM~~gJ|CCDdVE{6ron8Lp0R_ ze|R-REK?xi<%fICFJO48IM<_IvpUCfspNHaFd_o5?iI)jO~eegL5O5VHnkB&&x5ZM zYS2$j1DX}49?NzBVoe?(2QmdhLjlmPprGEK-CH*X7M4!#;o?~eEzi#0AC)R#H+DQ~HWooCow0kTEb&YJ=gB3J!*YN1W5VekaNfP?1=pTAgvB z&danWt4)QOlh^?rYWiO5*CIy8)5$Xqd`R!o9Oy)n1oiS4wQvRAfgU8Mu zA9y@%3xyN|PAZe~(3< z=+SLNL<9p93!D@c@GAWLprCZv==b-DfPVmfG2dd2;VCd`*f=d&~`U2?*VA>&zkQC=Wf5o$En}FD_*RF z%K;h*0r6Y4^+z{;wUR`DW(QE_(6x8tHnB6<=#`a~>7}@uJE-TcX0=uR;{0z{UG?kU z1GU%A#~yboX%Vdx-k<=903;NY3NChJ) zpb-NA`-Oo4ve^;c-0}b`H#IdC7#R~28s2oYf4#NZu{TZ^kQw?9?Ktgh>1YwG!gb~wvveZ$fp)fBhC<|Cn|Mu#E#KzO`Z zN6%_YA^HN~ywZ6$Tw1CYY;?X|*P#*%H(o$!cz6=~BJtyDO;G^Hss;hoU?kDlx(SOD zXo(<#gcL5BWUmdx$sMmRBtR(lSZN>zAm)tpJZ-V}5vP=K-A+WuG4Y7{U@=4jIyyw{ zTVI$YLNj|#bX!s$FBNrMd(Z$pXVhX`M-FB7-+;YtPFE4=Yhyi{UU&G?ZFie*JWze5 ziW|(P+k7#+ERc|tfJul;BU8Y=G}J1T?h(S|nhgAdp%O&$71i zT4KAd^2EG)zxbAF)kO@(7jjsf86cw|->nB?XtcUf_4Uz8N=pBASKoPDnF65~fESxC z^d0^S${ZW(-#Y*P{rfLi43Jndn=SxPB~z435d#`Nl&F;%_1~^Jth(=BUU7{ZRB8N; zxmH})3@>*^_dpbYQ2}~So;#mTJ{L_3b8x(w=4SByIs#zo?tthpJ|iw*{E+tDyErUr z8OKqcxmiMI0O80y4!T6G=-_O6=eO(|{S6+bq0rd6gKCmj{j7uT*Kp z4#(f-W)6`a0a)E#$2f>uK!B)c0tp4f{AzFVuk&hpwzn?-aY4{#p*mPyFY8xtvVJa* z(oUSKbMJWS1{{b{&r@G9faD9{PuHgvK^r^i_GULnngHi7WPP2I+-)7& zbI&<@?{oH4p~Gn(h5rY2ZP^vSM~~G&gm5-7K$7Y96oF?0?z3{gXUF%Up#R>9cl$GQ zv4unD{2w-RKFf}z{ISVMn8CU{5Cfw*o%RYQfbq~`^F^mW5w8~y7_Tq*Z`n{A-4Nd|Cv4j#}U}|_|B+X+x6vTJu6R7ALjsrsxQ4uNIC@Et5U;>JmH@CMd z9XrZVNrk@;^+kOgI}-7^+vCa3F(u@^tE92d=vv!s4}3%=a{8ldD=iHV+BJZ+Mb=C; z5;F2SMWnHJrV;O&u=jZ06tG1+{@6j*`yp74e}UPVpdE-+Q7=DA;(|6&{l1`#WZ z-i83U#n5Yy4jKkV`GDufT8~rAo~5Y4(!ITuV9G&xR{xmjvWxwF{cx?Js;qbUPW49xP?H2bHI$@U7 z^HH(3v($TF2!KU`6RA9VyW544%;m|Y2Jwjm@Z9M{bu2)G4tQ)KL15p;BqR*$F`=TP z`x1_0WU|^Gxa9x*7|@w2Aa=fBTYfh9TaL$mseb0%WconK(2yL3V3>ikf)!vWFNPoC z?8;_fQNCbIJc^*yB5OXsTJ%^VKdL_;rNKADD1B@Hi=M*&fm3Way$8H=ilH%SVAo6& zasxG?(zD;APKA#Eu;WrR4|px|_)1PrkI?=4rY%=scvK(5fn})Bbt*u-snfuh=8yHD z%9s%Wh;hA&Bzs_>u8NB58(w`dO}D&R_}l9;!mbS*a+ygMfYEWApP7Nhwb8rm+ik0_ zIDL!ps6WYrPC7SMY5u+eIMX&u+yyg9>A`0Kb8Oce56T$0xr4!c^e^SDck!ni z$Axw_neuvmFHp`W@yu@&DuMW-Mq2Hr!LdFQh6&qdw}uE97&eB-TeUXJzd$||X0$!J zmJlmuag-_mW)Vaoc;wOvC}7=;N*-V^t7%q z&k%8>1kh9On&ZpE$QJ+n84FleyUX$5@S;UZ?s-q*S{$iDHXM205bwh`RF~UiEdb-OV)BT82j2+nJ-f7+o^V7mM zEh`z?vjHe5l@jEqmg$~f!T4hhO)^NOIZB4#9h2DO#iTU_>Z_k_o;dZ*a;4`!bq!&h zM*mEYH^Oi9h-*K@C;tc^0fuYkLSewYL!hCd`d~Z|0ElG|KJ%64V0di`6X+PWveLnO zNMzlZZ{!U(+J5W=kT4Y`Wk7LxYu>_HS>qjZy5Bw%aL#m_OddOa@wj(mKTzGLabRQjCdTtNackF=sk)h?1_~u`# zvo?pnsF2&gOfdLeT!%XuU~^vAPu_RbgcEE(OP;Hr7q`nJ`!=X(XkI3yPLY+kHT--! ze53EN_GQUy@zeBK=guXk>%LwTDR}VoEPccw%{S}scPFYCPCzrcyASU4Li_28-O2?7 zI1*8XV8=nE;5s1UJ#JF%5WE)S+m5w0l%)eBaZ{Nx}G|lsEJ<<%s z(;+FIz>BPmF<@I-T3C+SS&VsZr|z`>mP@#?n4bmXUcfkAYE*a_fbK<+Ka#YS+`)x* zoyOKH{f zYU_^YMz1>Gf&rTI8v0Rra*QJb0X!NsjEq04x6PzjqoX@N>FsHZH+8Y~6%~PD+S0nZ zjbmqVaUb09j=MKbt4T0V>P2K_wRJVJM=aFNMW?%%Ni;NCkfL>=p~o+9a}GWVgMpUT zG|nsj7>b{WY4lW7MqgJMcG^`?dkaSidh&E($PQngkG&q){rfWKHe*XV2g_f~{}?ws z=tK+5Y+dp?C~bbcS_IJ~K0RFtcnk;}lvH_aCtLpHH2wM$9p^)eLv)1Kzw1vm+7mp7 ze~$EiZCDDSqp`ntzQ{}bj!uWVQa2K2d<8Z-!uw!TW zooC@6%c_%@Vv%FbyS;MgR#jCHcDRVrV0OO!xPtwwx3=@`T^;f(iUK-@p->9HfC(#V zPNr`aroCJi|Fi+61-y(bjKHI4JB#33+}_^KezVKOI`69u6^M2)ivzA^rPX)QR|KrU z%_&^X5^W_g2|ms|8BCfF6!lfMS;TvCc$+`DwzIS2EFz=|OhSNN4GaRh&AG0d8=rK} zxApZje`ZR6h68w+7C2E^6aUKl$VChgkX&y+QNb2+P(XDUTM=*1HOEjQ22nm7!ax_h z3wc~L$GbS|Dez%WdaK zp$v>2OE}3h|0)7VxV)}3{QZ6R`->w3aZNY1*?TmSne&+xhnM-lb_y&=r%1B00Jc9a zFMtM9VI$|))jX$pqBGkwB{g-?eY_^B4?ApnM~I^IKH(GLMd#UogcU%j&KExzJC9O@%ELma>Z=5x*8^ zpf>5xUtk|zp&hr?l>!3+R)jTou0LT%jX5|>ZV>U=bi(l5myRVzYX`<( zo*?CwRaV{^6*}IW08AC=F@G7uk)7ZEIexa31Pcqxhr^w1xp9kZM*9lpSQ%8opi~DC zN)MTRo7Dt0@D>B>puiou9iU5p%uX#uqaR?dKXDLp5J!Xf;kcKZ5VKDzwEwuevlD7q zZn-mRa(3q9E%N=xVV8X!2wtAr$5`0J@`{SQ(;6DxeRX26zmMe@PS=_-zf^_e;D% z)55Uu2TjedlY6v{)0izVB)4d2Xmf|Hlcs{C=(tiMCG#ZjlwV0;!meoxWO0p_%pb0< zH{_;HvWDGDOHs*T9_8=+TcS)C5c#^(+vB8jJWhiSFRn)L42QB^0l3}_`FUW0byB|! z+?A>2uy1cgZr1Mc>>$kpmiHi+0=2aGq@!T!PgZ<~;LOIxU&mT3VlFPd#+hSszPGnK zKT32Si`^SohQPG#hr&t}MAUAZOVi`@Wr(>~OZw-HvCN6R%`XJ$mP6YkqKiB{Jb%Er z`eQYwoQZdmk|Ii>8_GuS!4||a1SzXSuqi0FJY3+#y%0fi7Eq#WfCC8T5hCWwNKEX`hHqL2T#W z6-BZ=rk;^;w`=D;Xhu{Pd$IN0h*$X2!;nHEn^F;8jqs-K z`Mljim0~esIfs1uE;L6uLp0TGfiT_g&RX=wm<>E>(Q=2y+GsGM9282si`TReuY1-E zh`(D(wEIe$;_PtQr*f%tOIBb8pEJ=Pv2}j{2P_Os2jY7aC*i5nFDQ_75_KBR7yv?g z87nl}+bf+|u00A~R2)f0I0=3m1_g{jBY86Ys}6g%VT|n+8k*SKrxAPfr-@|$s_z}O2AVs+2b@9*lJETWd`(Q_zqrm ze$pPsSD@$qxVAPmHRJUh$NgcQcI6GXf&~h?49(*`#_Hxo zex}=>f*U?8Vq68LgH+V(0Z>&{>1<| z3nY7ot%iUf(u}N8w1<+od7b7o$OJ%R?>_bS@!h~TWORSJIM%jnFT;NB&)U-cG10@0 z*jSa#H2cl%ZI(5$R|~nuB>(l&IiR8?C)HDxEK}~yK^>}P;E4ykTbPFuS!sl+p~13V z+%h@ioyEi=8i>p4sy}W`))(DV?WCcO`$giUSvVt~K92#o6%62PR>b#p-T?EOJ4BP}j&{@kP zaiFE*!~)A!M@N9FLt;tfk^ERhLj^a(x6npSr}{z^a8Db(Dfa7y3>lk)uh|#`>EU$} zPtVUS?=JR0CJDBm?yztA{>wGMuT#Y_H6F<;*p3M5!NoQySoC!EpuOBvGmysM*>M*Q zKF`3LmA)!G$#TTx=>GW4GwXZ8DERT!*85`yz~l|FwWYS)UpaMM&SGW61q_&FS7ryb zXHp(DpR*lgmMtnXy_)AO*P1{*3XD6lNnImoE|aI3Rjb81*Xm5DQ- zXFx1u9F#bKP5ZKVxSo{ZzXpCjueli&Y#tV~3P5P0Y-P3k@l7=-S=7FwlD}0|{mUuD zr#K0=1j6WEQztR8g$;ELyt>6N^LD3uBC2|NT>$D*vX*1&pz3fLJ3cxbp+yXGq`ly_ z98JA#6AmaEl&`g$S7-yxhRthb^M}TrORA$IDBFP(DvAd8v78A5??65l9uwYS#eoU9 zZE0zOQGsjWy9<#4ZyewYg?q6l>EXd2QG|(!DQ;n*C7t19qoztBm;K&?o|BW)Lzo<- zd_=zcg&?cIAp}1%%L4NEUq$N_tI8l{_^N3TdFchSe14viH+|lJbASIWElm>aM8L(M zfXptRnRyL_KmgG`sY{L!J!<*1r2D7u96nZP?@l)b#KqN?gCX`ow_sf> z=VxXrHindvo~!;0^9s~^eV4xL>+3$ydSHhKXTotBWN)xyILj{o z735|a-5KZRvfTCNd(+Rlvh=1<8S<-#W0|+{w7}Y(P{@r%WkNA1nEKz9NM8bC#aPwr7Oa)bf< z+XUd$@R3h%cfN`ta6|;5(Pi)LJ2P7Hx=@f+0IxL8q{Ah66G-uKi6Fg>)Y@a8E^}!`j=$fxjQ9 zCaiu%%-g-}9gxbfSY=~isj6t6%Sg+>;0y|i_;DKx5`TaHMBkPu026WP?(#*h0ZzMie5~x_Bm81u-x(6Q3tV5Wb)$%RBYyrQ z1n71k6cjK7uVgBivRUYyneDXV0pVH1>jEIjU_~q1>9Y_R@B}W|FC!wO(*r^yXCe&v zm{c#6Z8d4Ar~}W-@R*pZZSu2zE-I=lpqiqR!v^&}sK1xIZg~^Bxw(ms zBSK*T&SxYi1Bb+c1zy|wgQLBdNCwz}9)dPXL>aB}zfXNI6Sa1b z?mi0Eb+8w8%rQH+)S2jPuLoVr^S^!*Mnpry8Aj{mzdyA5Lx&wO$~^)*X)D&T&IbTd z<~pFuQ%IB6^;&#@I(WJXhCAQ+Jo3HpU0-(?%Ij*|r%;MlF8gC%mKzUuB&i8UcE}4Y zmyC(ux?*j_C`yWVf&}PzmXZ_$uW;)U;xFwp!Zya5leIKV)UrEOZ-u|h(wV3A;y}O~YZ``Ag zPf%+fGGHUXu1@(=u{@SAIj|8c*4qvRLnL4`Re|D!i+8$TT<$o;T1W2Yxb8u^1G1DM zWwFQZGS=gj2WGt9f$g|z4QHctQ%DQbTuqiTDtD0MMbb;&D4G4h+ zrG-?YRILrOA$zOWR8k)|deLx?S$f4N1IR_rkkCFY{#gNLOF;70PmX~U9`16u@FNFQLuu>y-eT6)^J#nO~9wa2S6 zkg5sI11n7Q{NREDE1+%z9;kq<@_V|q1dy$wxfC1<0UIU271Bk#D?fIDsYZG-;G2>7 zY?SnTF#y-{fRU7vl6tXqs#}x-PA4G8zf~YGFf^3@xaJ1DjTAqA1c)ddDk(o^ewPIJ zq6GyR*lmFc0(SI*g1;WfML3C3fmzRa-*Fo-1_o#yjVP7G!zpqQA|k230gZx7G)MSr z*C<+AI!@2C?{40vF8Bfh%l!k^V%i@stDGjJaO7@qoP|(=9DSmXu-jv2^GyL{2*p61 zKiN^DQ>A@5#5`<)!)*a^AD51%B#mYxN@g**!^`kHL&}dPnp|@!1^%R_Aec_hS@jun zoGiPetE#H~y4U{m(b@STSeS*XI+(bkM3uuTud<(ZPH1dl7EAQ*0Px8ZiF2Jc# z(l3@=;TI25WbUJn+=~CRh>=e#Y>QHCgtWmYR$I*-uD!~k4`#^#p{p>J!9ouWo^C6n z2VovKrp%PDv>*Ld)n|JHSQ%ijD=xRTs|JorGQcuv`;})NA7K`Tnb;8D?qDC~=ljQJFoxlLH*^3_ z>#2b-2u?FPmRL9>uaTwrw?Xmk{B*l>4oMYw@l~4ajRICFqN2Clz*EQLxJ3Z>g3TC+ zBO&JCC1e4L9yE}mI8+%)sp!-@QpNO2A0_)?1dfDXZ4Y}U#p1J4U*_=utAZE26tve3 zP8Ck>#wR23Y}IfPMyI+%JTLyuCjjau_@J!mDU+Lc&jmaF_eNb!+vkZ8Bs0EaTVRg( z0Mxd(fU+UtG%;&hq^GBMaxSJq0t;FA{6einuPz2mQ0Dryz|(qbK_vEkhEliW6Io}M zr;ywk1b6;IiB0COY@p5gK1|4fHTG*Dq5O2av7oGM4R{G|w+J}@hmXpm7k0oKAa^IL!Ceu~0E%NaW%Hvx|HEbiV?0lqUe=IoYL& z{nIjiF$Ty?Az%`2zkFU$P>`9O4L!d>#mbr%ox(>wRH?lE2pZlRUH!-Fj^*l??2p|5 zoeTWL0BI}%e0gm(p9gg;GY-+h!NRg6tgXd5vb2G$nt9gY-kX02e`npTqdz-<0DVU}k0L zy@iJgPb2vil?o6MzE4 zQHBMyt8k_a%LNlqUNL`j~|E(u>>vI)-YrYcIrx0X59#K5vDB;;n4a%*P? z2r^!w)xy7`rtT~(ETiV&IQf(Rgo2DLt$_<9ZAfHh9T-SR5`XvRD$Tipf{~1ju9Agf z#(S`G7_e%)%T4W;^E0J-fL-pk;#qeQ^sNOU3W1lGcggkI<(LBi?SYeP;%7|7dD2f= zK?I;Iy}8$$2m1CmpG_h`E~zesSH+DKG%f%G{rU4}pr);~T7!lThQ@k?1*=63PqF>b zDT@&qy4zd4r5+rBqcPft$(t^z>s)|NT2g7Ui9mC*L! zf4sjmUF-Y;3lIOd##W054g40sGpU)Gkt2H|y4H+A00QL(fK+_3$!p_ik&pmeOD88c z001{|C?o$zJOFs70$K54dRvc4R>edIz`^^0kZQ~6bh&OtRa0~Od=s*=l5uwC6cOnT z=$pul45KE4%V202B0)QTlx=oO7M3XBT?evQuzW4ng5WNWSDrHmu;3&xp#qnR z0s%>yk)X7XAnquOsAcF$N8!Vf7q+A++WTBS)JPt;D49uIx`P+ zQ1738vF2$^Yqfz|#Q5J{zIR4-tjMDasH>eJzDWQo0c&+)LPek3ocUEnMFlSI#oFbp zAz(PdZ1WVX-6KT)vxa;5b{~b`YV@oT=mo$cBOA$0QljSNty$hsc&}`^ni<%9dS@#e z9}^aa_!W&r8rb96$1XN0x@qFeh06)ww8PNSF#wO#Hvpjw%x3)LgaiCG0eH{_Tw4Kg z>pXsN0pt;g~aZMw+q z{VEI;6K-I`2C*3IF%}8of5H%hpkWpb90258udnp*@BnIxUXuzBk_xaIVBz3uh=TrD zj*)|a!buzr%F9|$GO*7F?e8_ z)BvgyfFlRx*?=tm=3j9ODAs>0H@TbEEdn7EkQhY(i|rCWO)%A|d693njlZY57G}K&wcU)6OfGIK_c&{N$C_=grmD`!= z>A&N~G;C~2z*i0I+?+!JFLVchz>~OBMrg^TpBSs=6?AoVo67fG8qu#`I97fAC5dY? zA|km>D70;S`h>kdmefG>4@}0TrIWfumC}@COiZ%JDq)@}C^;wt+BMaPp+iDt##NeM zfDqtjhaSrdC{OUG>*W&Q5kfIZNvTDDdN*fozOTafYmFVO6!qWSS03tv9}hOfx829JQ#d{7<4r*|CUm?1dvU?qct ze(JaN>tl+L;8)6E?a-1@_Sa3MP*UwkbfuL$dwTeS73gm-wO~w{>q!rVg$a%es$L23 z+Yv=YKz9Xd@fqLyKh-=7>E0O0*YBW^`ZNw(efc9Io=&$M>#I;*aB*KP40C}%3+%1t zK8rzMU@)G$r7I9&0hS^hP6Y$5p!4%%JV@h#TVRJ7HXQXsE-HP3`yD?PCclgLs<8+R z;P~K!q0*FgxYL%5K9{iKX>!7)fnP(?B$z_SngMou-{ZlT&zV_INp81rn+A0Ki^x)I zDEj7g7lL<8Vcxmy3T>tm@NHt%rwi|=(*v#BA;YS)P zvK&C-VQJyLUPxH*Hxv)ms-?udAgFHx>&pw;6of7Ea=Tydco#aTNz^6G<_SOq{v1yJ za%k|kQzG~kSqpu5wc4fqz!NUlV)pfSLI3)_ z%>RD-eUMGFv{X^KEiGUPtPmUJ5aB;t%M&2Gw8y?B<-?jaB z%NX3mUx^2$^1~RITzGtc?1JLC!l3vNSZaQT#HlVGPfIKJR^vK0czn-AW~$~$b{5=l zaHgC02aee>ApAPMJ>aQAE%^1dBuEcF7P@lbBBy}z^~jLf2i(JYIM@p>5zR=r;+nla zK+f?He~ZZ$3R*nOD=QndOf`^{gaMhul_>CDA&-^ukq6-nR$^Bj?HPv-bJdOK!}98? zHd$$2y>&rd7O72Wk%FWzD|($5t^@Vt2ZPYAQqo0RMj`7z^D56&v+vy&tgT!gS%>5> zpK76?q^3XAf^^$CPw}dHL=YZBmc>pFUC~ebLr{uK%e7@T6EDy>?T5kBw6(E zt>Jy)Lx1c-MYOkaL#lfc0mbBBZL#N%y~_3J6z&3od--eHhU_Hg6zRR)BS z36!LIX%-6-8j~M*3z-lzp=GVCWPfe8$N^2}!fCRBc=_x(Fe^U4*--u;$tIIO`2tSP z(`49|B`bJ%gp6SZ1VjGvj93~3cZfSWa^Od9#i_U|PL3a30>EKoXNN&F_rI6OrFDCe zvmmb2=nlRPa*E%OB;4^DBQ^4wQ%o99N5l?6K$wejf<>Q<&#UY%(derAT zI3whyBskUnaDxB`s~ZHZ*!Jd|?j^j{oxwCuj1~j0;$;8e;Cctb5d$+9wvLK+ix=;h z@IC2qvq%c)dl?lfYon71xW2)_W(1DCfcr@I-L^h{uAA{PVhs!dSp&J}O;(rgb36N{ zWDDE>-bXQpW79oLTOzMsZ9a#mUt;pT6JirS!zvTV>B4fa-)06&@aqxcld%lKDoSB1l@ZCiehI+Fz*v z#0S78n1_$ggoAK=PmoPXL&Mt2s{PRIo@Xgq8V2MRAXNZ=n#+reB1SB_ww!KD95@I; z8zT)cknd_`z@V>-@$;KtgR?$suMMmpc@# zO!M;8mW~au5%0@?|AznnYXMHGJ<)$pXd6jtXz;q_LrZsI@z~YmU6+(}ZmY(jk~thy zPpfF?NTn@rsYTY#YMMCLjtJ#?q)w^7p|s8PBAw!$i(B;ky7gyT%|JuyQ%g%4!vz;w zjfT3$^!V-s`h6<#Cs*(pRn;u-CudP!#Rl&KH~B;R4AbKB!o0@37???34^lp2J9G!O zSBh>bYAXRtUQG*LO9-i|GFzMA+|!LwJYT+oyJu(5Bb8fQ8D9kc7ddlaZvViMIbb`h zEbnWt=B$hxUz)qCD{G9Vc~L#tl;(HS>s=L6G<8i4)lWhk`9V>oWn0_}ZrZ_Pp5U5i zrq;hpNyBEDrsaoNG z%AY(v*q`>{xQ3~*Mg(Ou z`rK}*ir!wRfv~Ki@dN7d-g((|HhXgK<~oW9WV@+Vqr#IZ`i?+81}wuf4Cv?pB_$nA zI&iy_A!B95`08NR0qBOs%z)MH90>_Pqt|Nn9H;~Z8x@sd{ufH0(Fle_Z@;dx!7%mj z#aO;0j`cZX)!4bBZ=OE?vA$K+Z~#$UdYF-Vc(^O}IUUj+O!Y$*^hT~T^2Prw(YwvN zY^PHZMqua_TGOMk`v^oV>Q$*q5T{45uNo^M>`BIwJg8_2@)f_llFt z=d+`DiUP;NcfT(;iq1o`2roiWk?U3GaTRcX;hFGq3dN#l0I!0fX;tDU; zaxNIzwi1A!-t}GRXrlz0o8n;wXZZ0>i+SJNNk(yXRF8g=u4GTd&*PEJaOHcC+H9wo6Xw^<_Vo(ZRZqqlg#3R3paHw*6DyrWRa&CtK z!%j;TdpwuEx%n6B%EOPV0HtyvcIi|0(}lb+OR;aoDV^J)DJa@Ow0rTj z8|Pu$`+6_&@AZd>X+o5lRy=fg>b&YT=J65(48fUsg}`DUuh2@g3(1N^f?uB169!D5 ztYlHs(HI!a(2V~c2cjUO*kg5keum#K(Cx_eaUC|w3+BsW9k=(D9Y9cV7?gHzNb!1v zmR=b{9&TScah%5lLhY9u0aMDzx*R>U)oD}XHS2)H>~nd^1@V9O9pyI_HsERmHq(7V zRhH*RP2^>1d_VSo5rd9UTQkOK#iQY97{3oJ8lg-=AWK>@Z9rdIru6mkbbS;KJ5*pg2Uy6PMGU6 zGOu3Sb}K^0=JaouCtp8@S8h)np+ZM~(e?x@gU^@Bk_37-rqeqjqFt zIX32+lD{0c48&e4oi)#{jI3)}oUIsL=mT)&x6ChV7Q>!|XJ6Dxe1 zo}#feuKu(>zj$P>wNSY9JjL^XMqcZ8F3JvZXYZ&oG`D(t-zBv4Lx>Thf8%a%2W#K5 zSEKctC52CF{##Rz{lTo=m{l*iU++wpbsoIlojXQSe|II*kH|Uxp@kq+B{VyBqbUD5Hi(^KCpTm5PS2i- zZ#?6>ERr3w;B?0?c2VlrTeRu^m(bahP8}*eGsw|u<;@A!oD!>r8$&v=C;d2M31=4y zCSGZsFy$7fYgGwM3Qh4TWB(#W8HuZ4%l=X{+~0Xy%ZmM2q-cn6jKtFF;e*_@J#QSf zxTUu~Gn>YIat=XLb&!lBhTF+r?zZ&tjxi$F!Q8(92dHen-S|Ay_>6v@5h0c{aa66tRd#=RF5qaZ;`ul~TCsNynl zWBzjgnCa-on=LPVCDA4UEOYW_-Ky_9GpspFzRYrYdBuk~YLkJw8`%fDk@YV6t=Cm9 zUE3KRPM2@p=0g*XR*FX1pyssO^1?FbDx!#{P}I(MvZYj&*veQtv}Yvk$Bt-gyVr=@ zt=&~glH1$LnqVEm-lJ>{zAnEKX!}>V!?_bPrqh-mxLG#gGJ?Ut2Fq+Zxtl(FX2{l> z{>V(173^`EwJ3XKu`)~}q%=04G`fDCA>(`-XEuKDvCsaYccphT9Hs|Nlb;hBnpja1 z9#_Nmm&u1qUr2dEJJYP1`Z=eUB%V3Bi1$#6p}Gc9F()BUKQg&O$#*mvB1}*-scUMU zEgU!)^CgGHgy#VZ!6?yN;6|tR!j6JO9$<6=vhkZ_D|&LIWJ*%5I_lo4FBt&z6(x%{x`h5G71Zt6PJ`wh}syOg;v> z8Fjq;Njbx7AHWU^?I0DqvOJq`Vg;AcFB!ZqC5bCR9gN*5cEGR7GC^&jMjJ8DH0E@- zH1FSqaR;L{7fCr7~w7N@{(ee4yAoe7|$en?HvG@ z7*{Rq<$j5_6k>jrnX)H&Ja^raqFI^W8aIz&)b}=c-}kxqELxq!sjw`xJB(C%JOBL2 z-AL8f4gaGc!-`+U*NY{U3xz+mYIvm^eRzwze>e2+=xW~7Ns1gi&yBQ>=ruSGn*B~} zhK^S_{pw`$cJMPyBKqivj^1dk;=x>fZd{tTTa}+VR^FS#wU>;amgh0oa_V9qZV*6t~*0Khs3C72*01B4#-*6U- z*PTHgL~Y0%XEcYB8|!^B{&yM837(UBsN(Bjcxja6;JafCcpfR@4f3{bmT=A~$YfR&QK5ZxE!w)QD!CuWR2l@u3ia~|HNrn2`iqdUtkb0D z*Zj#Ut=jqqWCkViSHHXv8Anu(^V&17l>_q11(DLs-gbqd!w8Zw{tD%I552P^++Wm! zqEaJvjk^R|1LNcW@(hWq;{qu=51*6?o|HtQ`Gr@Z^?o}{Ykw&|ibd5tgY{|$5D|dp zEC54>PHQKb69Ms-bP^jZ0-WdTSMjtHZAN09oo_2Zo4MCeDU0Emz)-7B?-GXSYV-N1 z`O=;#C$SSY_ypt=;54fNzN;C&R zw?$RMWO{jy72JC*jXxu|99?1_^%_DNy;;(yT}7WRh$o9UX>>S=7m$*wzeo0c8Cr=A z2&mmDnN3-=%TF*tM6tqqm=dmE@`Jsr;kHbjm;XJVVPbiIDU{R~&cO0Vu}k|e(Ki=* zep$cQ`D&rlxPe>ki)Bio4bzy~b;VF^?UY~w5LBvh<4;YnWX6+q{6(S}ig zkAjy>IsCO@cNn+pb$2-&p}4c`8R>cPb?D?+FjeTNKHV@}0^u?B;L^*a>#c9%{LsvK z2GMopUvfnyC)}CL4~@Tj&Znw@*za2av#$J7Z{Dq(3sW$e94tnSr z(cu3E4Sny7z-aScRbpTVLsBEx=enh>7ihJj)a3 z2~Yui%DX&@U3PpqlY4~R+dRl#*H`f508Ru=7cPQ;O984cdVLQl)4tSR(E2t4vTYm^ zoUTlX;N~3wEUvcHF(U)L3n~#GsTza5_5CkBhrV zB<||6U?vv-YbbobE3yQoA$r*bBX>dVY5B?<)6(Ls=4>cLhs%h!)2-OF26cR{oEeXM z4~WRt#s;V4nW4u;m(%}>%4m70^3rDLZjv844j0}>BUh9XmyUjQ+P5vn5QNbP$dFc) zGQTEh z?(T~@YJOZ={{4obXsUK}<3}#VO?pn=?a{=hO!aS5%QZH2C*Sf=TXsFZFW5rNcL5&B z9+-@z=}KIOnIZWNq2faqK}9n>J(<_;;GrR|PDPO*a>-y?A)A`iG0d4Rb}}rcx92p* z%fL35oMsYeoeB|HD|IuXyb1jHTNN#U(Vgcq)&&#_Nw{fYV0h$^J1>IDo{4s)tqN47;J{-XMEnV*b7W6Bv9EijJ+}w^>fNTu>NZpVF zP=qpM2uGa!;V3G$#Y_tTx@&d17n;CB&6cmqcuTM`sy^hiBm$S?>Qe?3%vVQ9@{(~gBoP4;@7 z))U2uL#9;j`u9yK7Tam>6!vzSA1A(QhQr%xbGei2xgT(l)7F`~wSBBd);c{}uPI%p z(_l%x7hO!VcNuZ*=uXf7re71DwDOQTlS?gBG_RrA<{!uz^UYLgeU=@+YPXnT&uyP@ zUGWf)SRAu!lsVJxvZ=Yr<^4g6s*XmeJSL3tP}c5_`;DV{;n?<7rGdJDphy2^t(vtv z7ETJ#4%ZL*?c}igcUz59q#Rr(IjK3gdo8|3N)F~XwIaScqy9G{iGwQrdioN5ALI7h zG*F@SlH$JCcjkE2@YNFqe`5Eny6FD>ZWO-TkD8)35)*!Bb#f`A*5OX0>pRkw!Rr+> z*AL`0cjgf!QI6_@iWpEj)8lg3Up1YhdFaHf2dRw5_rmyXmL~ zk_423wEjieFZ?o|mVQShduuz841~wV_8mHXuj`2`Et8zYI|zFnVC`prXkWDv>Z#PE(9b>pTT=Aa}5nn zLexX0E@s3|vBgA+R%73+a6R(FiK7E1k+1PsyeXc?{(Xh+8ORX``CUDMHH1B2T=*GJ z57(tcD)+60U*m>K+3hS_W3E)ztliw!hsKMMkELBTVw4j{Pqbb!X`NG-b*G(avnQ^G z1f9^RbIjKts++z!JNSPO+8%!V#k}Dp*b-ivbFRELh&1GJmVCgZKM^@6PE-38p4wDZ zP7V^*HGTShOrjy*c~WQPbk5nm($Oi*%oO;j!vcxMa%gKO45bGzTqS3L~%lR3qbN7~4+5B~ZZx!PU^!!24-w5AuhY)=(&I@e03o^>wNK@XqjiwX+S){J6D zX`9oq@Iz>wa*hcMBj^@+}MHX0J!=i{LFk7W+BrLr|2Fq0Fo zC0Y7sO8@xGZ$KJX^~YLh=gH|b5$6?OtIw%*;-_*3VS2(IYs z5t-9{e8HC$|a*DpANhy`JZeSs=Kcai3 z2aRJr4kvS4lH0+_ESo_U($IG~U4cN;0kk!TF^97}(O{|o z!1qJi+9-Z#{3s}r2g_8;z?BZL>HU@e6!{Bg55U;RE;BBmUx|@M5D=IT`SK;Jh?$9L zV5AC)zp&^(fgo7v$=^54aHTpdswU`YfOXu1Q++6l~qA~W{_iQ&4nFk0gzGw)eea1WY^d6 z=0sKVz+}cHOb9*q%Yn55X-A0K*`MljO6?sA>EB9kXOah4`+GNSx+NG}LR}d?v^{5i zE3QBfQYF$I$E!kr$l)duX~vLW7A>+R3GXKzo}Sg0wkU{T;P~;;lWCXkgMKvs;(UhL z1%v;MwpTv9YD0MxeEvH#Y5%-sAB3FqEB78v5%hoLuRR};!>V`19rA43R4$Y%R9l-! z^VtHP@{L9{EH8RCT)zD+rP#wFgO#DfF@TTxt*lCUe|40lf^2p|l*G9g^;9seq1>LsXtr4&$?q?#6;(=}m)zOO*<^0Q75aJMgeBwQRncOM zB7t;<;Vo( z^URD{@c?#YoChtoZ^L)lj_-bx)5_s7aaIq~WyRyQLvEk!^dX80I|QfPgn|(FEGcU5 zx_(*sepoF^Y(t^Zg3MET9k4K<`|+h)E*Kt-nt=fU5T-y9GnB**LW@Wgg;+Y39kz=;vN=5|pgXsHQSG{Xs$;@vPT7R(8N=>!V5jFx!#ia zwW)7o&yh?@#fSKbRT3WkcacrgP#}$=(PVX3`W6r*tc_Iyc|g{8{4ezXqyC|xOGzq>r#hB{hY=LEWSkA5V6--avvb$t zkKaj#>R@;+2i~iI{Vrk~OG^Wsfc=lptrHky_y*!Z0|faWRPx$kcWJG0KQ(Qu%TlOcPUTnOidDFjW$r1rEfT#^Za4 z97ISwdz||hyC;tm@1<$G`H5bn89^*VFO#0W(a5+FqFPO~`TK(bO*&vG&&R{2qN0fD zV*jmsydj|L#IswduINfv@vpgS6eRaLfto4PaqeF9yBp|hzUe%t9w`1F1Nt?qiZpEd zajato%XAH>3x`N1G4Jc2a@t4pt%K884^`=bk>dv=|Fa~R|ipgyI4!m zT|2w;>9%Hn(H-Sw7~y{-N4qmL&CTi3)6*@}WQY6uLbJ0c845?{8WP6D?!Qw>hJuMp z9H9Lc(8H;zc0NA7>_0z=&1+p83zfdiI0RBaaG-}ZAm{~A1N0pR#l>;EYiaB1di5S5 zR8{(Q%+4lpn)YQmjElDUqO?$eEQ(YqziDw=O@K58M-fdO^=t2Pc41LOk4Xo3u_mkv zN=v26XWtO_SyX+joBzN=93`F8gplRc=w+Hi&?d2AwKfKpN>r6i_LpySuwf zDFFciC8QLjySoLXyBnmt8{V;e-sk=E{r!II47SU%w(k(#bjVK8PV;U}@jR#KvG@@pSr@6+Xs>tD0)cHCLE=Pex1adsZ+&Mr$s z!$ZZz4Kwt)M-YsVhAL*;$P8LnD-8Sf8#lopDINz0(RTb@ru2u!E%3)ISRd(^Pfkzo zyghb7T%~^u$7>PjR_q-e89;Xo%((H6Q_0Cs0Cy4l+@Qmx?cjKC8Jf(0^$o&-5)!;P zJTz2bx@0?Yy^8{hI)szibjbMpuy$zrDcEJyP94W(F~aZxy922Q`s?_EQyTP&it@Yr zInhL%y0-&xDD;-S|qHqUU86;CH;6-SReH zQy`ZA2;=f{J%UG3L2>VBRI9+_!Z9m5tIxFbu(pJ9u@%rPsD<|JTz{7-z>E8V;cVH= z7MJ`96H}sDemzA>|L>17g1WOaweZaWtgd6sW|0(CpVMmMPf@A_Fdso=GFWaUBo;y( zlAoWX&JB0iZ&a}`53Ys()dE}qnT_A3>V8)#M-c#j7n}^)zxSMn9NaW5*%#R?qCJ=_ zr{U)Qo0C3h%x+w&3UnYTQ`2>mhnSwg&H}0do6G*+LBnNS9Gu5AG;zb(inr*(b5p+8 zU_0?9xbN>F%u_5j`*`O^q{70&ND_4_lCNLWg8CC?3XbM7G=&}ye9&;ylvJ%SFvAML z^SCyZib+91q0C4C@K|wpF0ZeVKa&VR0=IrmZO!Rrv5ZQsD?T{s^jCN1!HI*74>m4n zYZQ4-tJ>P(-Y0v|^yTME#H&n}Sw4n`7>>ML7ig4^>}~`d4fGL;@!mueEFzXK;IRW@ z)EgBQ;)H7Z#?Hw&j#)1mYwJ4}6D2k>)t*`wwi|ZuQvqvke$p!XJ{g&$y}iaG{bv89v-RMc0jmaK zvCl+r+N7W5+}MzdwuOdAOsIU9j2DN6A&U-XEa`)RirFoLg9kOtosgKsPNK%Y1H@DH zv0wgxgZni53mkliWqG{V$nI!ZDKb8OYV`sHuXQ&db+VlLL+&(X)4F{OYfa_WF)_pS zI(?Ma1!J~SuHn#X|KZjs?qHzEZsK$`-0pyy+NPnUCGtLg^9B!}d@-GJbg)u_5DcAg zkB;ci^xkZ!?1%jYqzD-Elo<>^Q&Y*MNjnhApBNb;Zli0*?o#lHbP9Nwni?VH5MXk~ z0V{iYv8!?$>J~aD5-#zyBuv zE1u)_nDhq1>79jvJ9~_ zH8p?#Zhb&Hnbu#z!@~n;<6y)RI&2DPK~wh6L_9%#eJn_at|+}%8^p45)hzC(caT7B zI}ZFnpq_)XOCmEPLwjj|=`%T3qM!$}L$8)q-@*LF&U^b!BAr~-c0Yi+|L^jz0*;QI zx(lYdx;jt^?;cNDLB~W&MC2B{4S)-VfBWVKQ1}rwD*?UYkFGN_GwNsM^{m=+!k(u( z*hyZ;&n`}kY+*r~-`MDE^g-v*bc}bpxxyh?((kQ26F&eIc(Y+K7&bq2E-e^)3W99~ zkAULo&1(oTh5mltg$O>Z9^lpFay6@U+My6>Zdx6BmO6eUr+{CpDc&Ymhl_&&x2+Cm zoZ1v;bf>7iBv!7PI0wm0niMI>=TK4o;B5~8_EqqF&I5s6{A}JmKlSo!G-bL(G*fy) zc~TOkh0NN~V{YykxWGE4%6t3!A}@ZXrTP2t@R0G^e}Sd^*vN2UY0KeBx;Me_QnG{m zSH8Jha~m5H@O%XZ(!|*sv#VaB+_L6LK!Up|<<~FYojSGdR&3HKSnEgL0fNRr;oJXE z?f>z!Pua4wvUIO6&%g&@1Fj{69=F_bdaTBU4Jh@(DgD~dV~N;}?}5Fvsk3uKi5Zm9 z5%l@zq#9NB^QEK91(sVRt)I!mnswR+2O|Nu@f8jE!jp zd)@twLt_VC^}MQ&4wJrRpjj;fp8gXmwPFDeKGuHLS7NUc4QCvX0fPSgYt_zr_11Ky z9Sx??8F+3VU0z=8?d~@8_CgSrX9w@vcln*s^^#TWb2%f}c)9!6*?oO|IeC|VV*FQT z<<;PclMnGlp^&3`rCiC{~lV{KF1~ktz zy-UP=(@t*ukWd^*IY?-=$UBD#H*v@ZDCCJZPbz4@RP&+CjesW z>hkz?ROg$MqeUdBd%NS=2VbpXO_Gq0 zRc&!X&B&qZk3%Uf;{H+n4`P$jdi+S6{f*NLkvn^Q;6#SajA}3NEx4YIA=z+0=8m%GNSWAJAkDo3T z@65?gf{l*5Tp-{m*-Y?l0 zeg`CH_eQe5@e#d~m2E0xRAWheT;Dtn#||1=?wF^u49m-L>D3P>0LlTQ^E((A5x+hn zK6(=4qq(g`dbc-s9y8gdk6;-y5$)C!L~Faet~l@i8pmaozs?+QR9hi}sb$ zzt!bI$eZ`jYcx10$Z+$tQ~7dOiHzGC3Gm_Oilp!)fM;n&MuBu%maW@GsQgRMkwC)jt=kAyDm&A&2Q}?2w!JZ*O@tpjB8)(Q=s)o2l_MzP*Ht}fla1%`$Y*C~Q#Nhn zAyv(M(G%q|PnZM~L4FA5Ai=si^@)6;$aKk;(Q+p4Tw07b?d@Rcmz7oj48?NWWPrrQ zk<%!{9c=8Uf`T6+B6Q*6!1}Q?;CWRrx%pq2%zrE__oB08H8eyg%eEjB&_3TMnf7-} zOXSo~DudLgL-M1r#EI8?UfspUgsvC|UqZ8Gn_+3h)K3(_x^DCVGgDKT0s{-P5c)QV zMNZzH-K%<8Rabf~R`@+0Sb@f?ow(%kVn%d#ZXLl}cB~Hh_4lusMt5wtA#Anqeq$u5 zBlzrv^SR)j`kWueOeGfjOCkFX94NrQ1ofGznc42~@lOri%}*f&!k?&fi&kot^Ukgvp8+510|rxj76CJ2x3XzsVa7mvu%rH4|m|41rsjI zaMjG$GkU-@pxWCK&H_YOph!uGJmPgwIeLNK7APE^pU+G|G4NX+zO>K3qW?us;1d$I z`QCj9rCe0P9v_c8cQo*`ty@Y={%?lR|D1}Dx$Y)}0>H05^fck`U;Sd!77Uyvie$OB zG_taMoznk;dH((8r+Qx0f^mz(jnO2~m?af&ll}w2|I02DQE!;|-NLrmQ*9s)>nK#b zKf^WtUuu%N`@dfzZKk zrF1GTz$2-kATO`Z1Zi4+ol6LBdeWB$V8IxyAijr(=(p9SX=jkzaJ^HpO2l@}P+qjp z;WLTLz@-z%=&P2YguUZWPe)T~m45o2y=w8>s&#@J7*|I(@87+D|Ly#PLnE@N!aEKo zJUsR+G|?1c%u-A!R6dEFkd&qt98%`$b8Wh!V{rMD-olfb?v{DqAcQj^<$tU+f{kF+ z`&K9~pm(zqTk|HshXb1wu!n&+Q(u2`Qxm@&wPITdKLKh0n1i9%advk8^Wnb8C!wF1 z#r_TR90hwOEQBA#aI54jpW{~+T;J!8!tqE#O?VUf3vpSmOHeP_@c*b`+-4`d2h<(L zWlF^VCW#o`K>TUMzyB6pZNj|s)u=gYrBPirnr&`~8ae1zsA@)gKzF`ytC}s||Ks}$ zIS30Y%r`vA;Ju~lF}Q<|tsMHYrLoG_2We8vZ$C$93z^$~^j3?)B&7r{+$i51CEzjkQx{m*gE{XFJ!iqdvNL|ZSJj9x=LsLG3xZU@5ot?71O_1 zKGMfmW18^T$>8pY%H^XieqE&c7&11>)E&9Ya+kEdkGSQRKMuaVnt2XV{9i%WAdU&P#a)<&&P+!i~k zO88=Tsh>4Wy2rBKJASEJy3;b0{n_4f%i;V!KDJmSy6cun1YZ`x^AScvJJBc84^%6C zh_X6|b(Ov{+LEmdo-Et2n?5)RHFkPIHeK+$QQg6Un_Lg&uRI}iF>X*qB0jH`Uwkraw+GKnY#9mp0k z;@ESk#Q&h!xxygx=aU`;?gHX7BAFdXR_cq)M?@zhSX!S&|2IrhTb+&pCt*32ht zY>}6j?ohBp9uE8w4%KK#tV%IvFEN{p@^Cw`{qN=u_`?B5)?X`qR8(BdZBI*>tN2nq zjvM+qe@zitkW5bkMm@Tjd&>xAEHujWh{+rK-rjn~aBbN64p9c5ZA`A&T>Sy~-5^npCH>#fnsdvx+@`=?Fi zmYPvT{KuOYegmfHiO4$tIc&cAveNFNOuyeg_D#n8gu*vQS}-PyqeXvnN=m0R^2_Rf zRle)}@k@5ugO)EX9=pG2%A@E`EYjO;23Ss30vM(&A%7H=S1D5 zMo$=gkI+C^xZgXqB+t-${c@UM!Meqy#>rsW-2UX{#L#Sgd9?fG%KLbIC1aHHKisyq1*I2X^e{WOW$VayJ#t z$|I|~GwK#mQG_(lZImgmcH6b7naUZE;6$9}L~`kx$U_`2ly}={7&I?A42x0mSctJ| zxHk+I78g}uytdPo6gF)M=WFO<0uLOI&9JM%yli(qfU*cEo92r2`Sp9e(7pQI(x&%3 z)_J?q3qeU|b>6-AgQ;;oo+rNuD1$=}8<8XX|13SEwmupjt+?R5zC7qHRAqnw7rmCC zZxBcV>wGiBqf}mn60aV)g2-a0{)8zTx=A|a@FR&ZifNbqOfT>i{SEqed!m{0bSha; zRSmK~cqx)e9MwADN6+JYr9BbPkS+V=nz6TMs&Q6}_)i#Sbhw=T*QN-JTM=!$y);Gx zj2+dMuiT!^)^G$nMVY4&F!CmZkNM7&U>E!}d-t6A^-Yw~&TLCa{^5L_ik*rUdH2D= zGHadQJvXJBIHj4hpc)J|k`T1&Za*(cC(BAF>X#8d$QgfBdhKwT|BlGqbbk3$)wa5b zKEk@8Wj7YD^r1E5#Y%tBb@cI%2U{wrs3p8FgLi7^Y(4*`iVNu-UU6AluZcVlB}*yD zAlu2P<3H{7VxeXAZJL&dWpg4HH8A`-fZC;+PGhjEVgEYhce6r!)>-~;Pf^I%NnwZa z-8-gj-E5S4_M_HFj!d2jUOOR1>%vq!-EPsh#P-%ER(LMENxLS8{j=MA3pRyjt$%fh zD2U<<_D@${+$3thyJ)C-;<>H5?e2(=JIn1al~mJyo&G-4! zX!7^4-T9oAGuKHSI07gr81mv&eM?V@d5h$o;@hj`_8ryic_EMdCMSM<#r72IfgoB5 zW`vp8r(m$s8viW2orQCg*XZpkogRGmAq`M`&}QPf!XU5bL2cdHu@S^>=+1wXao%kV zc)gL}pKQ!+`}dBF;2yW#a@Txe8zlgCrXqH2o&Og#G&ZgcOSSu`SNeVtOg%n?MiJpKn41vTO795(TgQ9jl!xQoZZ~ zmPGgcHwz1k{l@IT-jAh8a{ibo;5q<7R+=6TI9it{^@v8Hl3{P_;NZhrO&N%1ppI;> z^)xJwB~0`R4GMaznQ%Y?a}ltbkK}1|(lhry0ZLJSiZ}}N9nW;SNqFry8{({L{eTt< z*)w~s8~KA?4Z=VwYXW$Ja+UqFUj74yt;h&#ZZe1){PT?#_G|T5S)SufGJL_r=L^F2 z!nPAEB0{dd`CdIM+b_bgF*>Q$L&+J&W4bhCdQvqq0>4isRh%rx)|8$;n5pp~BGEob zR_Qw55!`n66x5TYYFK(?HcfLmD@U1J`zzhelO*B3x=T(E?cBLiy^f=q)o1F5;#^*> z%`){8>1IjGm6^4BBhR?A_s@3yV)?ID?OxSh@CSOT;)UQu1_YiDA%zA>YI?5UEo#o6 z%Z<*XZc=M}@8BC|B+#_&k*c07bTw%aA|}yzZQ*`09k`+~>?bxFL=o-Sq=p$Zf)uJ= zcgEy%vE$;0p5ks3wYeOwmUb}Fv{UhSkNy*-txyuUr|POHeSgZZn(4aX<>CkwYzZ;% zE${1YJ71$P1!5wV2JL9N`6?OKOJ7dWnCxV?%+0?T|7l;QD5X1+jQ#3#mDS|Ytp0-X zNZ4hJ7vo9&@!k6~uI8!rEGzvNE^DbypOV~!SgBDx zBvElA!_VK6#C9(4T`xbN@H#_r6?a=G8nMnf<#wg{QCMVqE$3b`=_9_v@XPKOSJoDH zlAseIb8UsUv{lce*K`Q+$f+I0tlnp8<|-#%k9S{s*F$^g^2lR=3B{D2)W4h!LPh$C$Z<9 z4&3{Gef|v=aow|Wb*Jg0kf^wrnAea{gOr)T2j^`R>d3oro65>Q|EZ&M8F7S3ivb?{ zTFo8Jv_@^~`ZX(KKwu+g4+qz=pjm^K6JP}q?z_g9{src156n5$G#<6gKVr(mMsOve z3riFt=8sMJ0SKSpQx&*Vaa}Xt=wP&JbC&j-0gO|F{mq#)W z#eDAf{@}KZx1sEhN>Ztqw=SLxueHHf!%VK&X^b;@`1b=0-{`qNWariU|GtOr*tS-T zvVJJ$$awMP!f2-Lifu=4*~96ekBZW|q)zQNzB(@rO55z~Uf+9?VpN*p(=og*_r$rj zllyQ;a<6~erF|5$%5cjYG--_JB&4)Rp8UquPt$`ty!1*zU`@z|Kh4K&JW56V#CfAg zHk0eQ>EZ1MO*MOm?8(UT>G)3z@a58_e@VTYwo8zCCB9vCKxb-KUMP@#`5PrCD7)ds zCr8=7gnAzq`VRGWUPM=9Hh<X z4-TF&J$roejtS%h=L(%2eC{!GU+yKR#Fg#INWZ0qTs%5@`a3u{ko&r@_>ko3v!RV6 zqR(Q`d_i6v&L%W5sja-ot6mk-MuKFC)RzIF-Drpb!JR!qeSxN|)Y*qbZm4{9H$7Ka z83(|=(R}IJ^9}3s0YB?h;ESYJwvx>`*L2jgNMF}UHt8xlaEj`AzjpGqBosYD`N_JM z;YK1TSH(iYJD8&3({&QMsDCBB7Os z!Wa_j2i&_cSvW?eTo@sWnGMyqPq#eu5x$|4mAd|E=^>LQNlfwCsU{vYos6V^^ zC5w>M$M2g)f)A?q867tcIZDIYZ~Xfby1IuZ<)w>%;)qMDTxyALs=frKriW ztNuu?fB>Q=1cENuT4o9-Raw$}oT5Idt;l~msUBaSBO?#rRXF=m)#G-n5qgOoco4(Y zg}zhY+s!rYE0$tn&6jm!U{O^RBpc16_`b*EDONPJ?blSzTiyB7j?LgOwvY7^V(U6~M z?VWK1TFdO}Kh_%z?-)&Wmk$WdNTjB#joj_Z#u=4%2+DS$e;n=z14Jn*Dr4-L5y%{_X(# zy2JaF;eP54TEftKgrdU2JE-w@(BdtK<&Y244$9uv)p9 zY#cIwp%-ext^w;dnWI~ZuWwdXVxfP-IP^hp<3B&yqT=K%Yd?W_2E=NdU&kA;x>{wN zJ8mv!*AcRBK0?F5@D(fwp?{b9%QO}}El##3C6txv-90?KrgcU()+SG6&yQ=rTGeZ` z0^tn-?t?Rkj=) z<89Tjh_lZ7uPtKS^MW>OFZzu6xENcx+%NmjA5f&~yg6s;QnF9g@pvb$!&E6Q@un_W zD$)h%_9^OOsTD5I@Rv=G{mB6;6+8;YRG;N8?Ac+vV!e%9_pmiDjXhqPq<+;q`t%=T z?jUixkb^)83A&#FI&J1h?WD-&;OAw#5*fIoExzm+HSyhSdAb;BD?jcYl5vMZ3Vl-u zWxdoaa_t&1k?%|jNr2K56O%^U1ej}7J+i%%A}TWUalEA4WlGimc&-i%AOp}|7%X?W_Nsvc62GovI?)M~A-velA zCv&|dWb5Drpu}~zI%O*r9|x3vrsSfiz23~W#wQ?nCok^{ef@dsxvi~`^mL`y+oSk-snUPu)3 zkts7SnV9DiVBSbvTxYRHFE9THRns)R-_9@As7bRN6M;|AqAg{p;#r^*b9o1t3c_KHSN z{$$FQnF)P!Pq*kLf)+D#_(GWC6kw2aCK!F8?m zv(!>W`0GmnWxGvr!Jl?`KW^s=cque2j5Ye;eH+zw;4aG(5Q;MqEPlzUAKeU(6kP>4hfOl zf!^OJ!EQY+six*hQY#_K2}jD7jQ#|dwI56R^VNQ5rE4c#iFM`iN`kIIcPTStKJ#wk zeA_+MK&syuy$d zcjj-lNxBL)D5=UXQ4MFWxD4YYW3XJ+gV1aJryD+N(wwBWm|DrcY?yzy+GlgergSpK zW|&l-FJVaj<;HgO!Jh=BxfHv6tWpB{9yuq|lz9yCa?g&G9fmfO-IfgGmcMPoTvOsF ziWsz>>TC!1I}$xZjjR$rH4maQ``mIKIO%X(o8)-mdE1v;>xA&=Rz-0}R`B{2y^U(e zdubE;xh!S0HX-zoOeUha=Pw&xv3u%~_Ck;{eIB#xO~z~ug^P>JUvfdo^6hC>lDIO3 zj_&TIhU+W)?Wx!=eSKoH1_oCm5I@h99=RH$91$5AC%I!^IToHMJzpq-nAHgiCc@}A zBPS;r?oEe9?gT^w@W&5rNGzRdF0+!MVaQQPp}vD)x;{PWdu;D20Gq@%^(}~FgkY|B z>arr{<_uet6S7e;s8b`oK$~|t{F$ijF}gsKZdT)n*D+`cOQo_rn;tP z=&mU(W3Ee*&4H#Ii%r_+tOZU1kq3noMi*sUWQ@6uT+ahFH6CVk zy)oLb(eihc5XO`zG%T!*JsYNH{-ZlO!$8MCC-}49er*bQ7VTMF&XUV7Dc(`GNvZ7y?nqVl5qvMpQarX$ZEJk)mXfZOp4CTJ$T$5^ zL{(kWWrm_`r?k)FHJAIe)LFN_<@77X7mW9}ss~dwRs+ve+b8Nma#B(&>?wR(N>b%? zvHTwv^EqnM^L(qb-am#H_?tcGsRPQ%owLF$S| zco7q&e7Q9xfRj>)E^r&Q#E{7DBl7qp^)}UG!&{Ci+4MNoifTpqX;5QahOd6aV$&B2 zbidPJ^xM*%b)-jgcm+$tSGi%Y0xz%*Gi?vyAcrfjqS6lPrVUe`gx9uP^EyxRq{!ej zS?}uE8N~!4rHL!BR_P99ya$#I>p`7cdwaXiNM}AcGHqwdmY_AGZ)CK%wIvFvjdB0+ zKy%sn9>RAl9u8Z&npZ% zqxPB(diNSoaG$SpS;{rHJr{k??YK#le&?X21ztlHoc-oSm|S&xQ?cT@O7CY%a_yuAv1(CsR2u4AF&2#!9R zN_A+R!%7;6@jGNIDvp(MUZHda$ZV0XIq0#0Z@FPzbsUC zb~rXC00gH`0M=tVUJ_B;ZNwll%bbXuIk6CyT0k91Vl0ip_3W5|FBT zaXeZu4+StJ7^IR;4t^{hybMlHr}4VEz&_lVO=@bo1?2ADh^MpGn@OTwi2?x?6`WE% z^TkJ?@npOB7Jb%671sCcX^X(sUeWV1%W09frgSobM=~Ig0Hwq>zYumb)eAbCywa~~ z!Vnsc7?LM5QAT9}4Rx-^X8>X}bd&X*|Au>kNdyD>7Bd<5G;WsV(+3kAcAlu_j$E~t z^fzY>LW01n_joWH0rgb*WWQ;tRMzFFlGVt@Q8!b0orR;RDG4ARmLpLq;e%Znm3kfx zmwcc`M$ChzEuEOlJriWedku?!_8WiCImtXQv7EfdB4ASg1K_e=xUbjxQ_w-&2t7gQ zlP)Eqsh=e*&L6`872VWoX zKv+-?=AC#$3dd@4keRHK0Y*w=tFEr2e%Mqrdl+=N9Hph89dRnYojttX^9)8qg_Bz_ zx^*hjtJR#P-7CCz6D*x#HD4#;u@|ZFe@E}1qA(@0_`*qqVa_-sDEL)Lehw_G3g5OS z2hTPKWq@A$5OBgUP-J!K(D%n84r(8AZ(drt!0ad&5#|4 zs+TJVy>BEWQmker)TXwxvgjb#ta0G!?3dWsK+XJgD9RB9n8{=rBN8y$m+RbimVn*y z7-nN2)L(%P1@s`6d#bm8n{yuQcQO~-G^44OhyJYsk^zJ$ZTs58<_AuPgQOdGX^7Q; zJxtxEg}pVDG$1UjH))v+@g0F2F^|uB$T|r{GLb(P0x1w9xP)twweMv*I%eJixvxP5h#;1a*SI_!9!A{qc1z!sSoK%m!ECQ$YecQRYbro2W!`TkX(cv2X&H2( zD0rHQM-NCs{I}NDuqfESl+4s3;<-T;sJjwM?!LD~cv;~o0F4%q%CNfse(j$GW{!n& z42jJbF`H;GI7g^2;(Ic!a!~ZG1nqCyZ`wk1O_JoY0%bz28zFFDKYiLYY%3o(cZc|4VET5KPl*_aK27qtCYIsf zBZ82xUulkpkZOu(b|uz@XquRSw!W{<<3Uie_1RK1=mkJ*eo4e_%mRpCXm~;^<##i# z0JvTZPCwmuc5~T-t~&PJWb-YnL)yi#E83Q^+4I)XHryor(2YKby$^Fbi#- z|0QM401*o-ndyo8jZLVa@cL}n77`dZ-(5cQIz;0oaE_Q3o=j5%q5`SP4iT z8pc7~#<2W463#t*@StL=Y;p~bUU8fj;D8Fq&O49eBSN}IOx)h^0VS62grlgqsOJ<- zC8ZxEkjmwjjG$YFJWu>>ZKQa2yUAj4T#!W-f>b-Nc9{e!>y6QTDu}Iv?t{@x#zTcM z@eqn;T%jC;Mw%pWGX5~k)<(a5Tf2O69PlZi!JX@CBzw+w;*+IYraZOClOXMSyb5ur z8f_XNF20XP1`@mZ0f~!BA9ARI;QoB4riR&&r$PL0P|2c=L z>w85-H1BTH)a2wT0e))gD95b_pa}mKx$DF~i7z^z7H5S(+kjjP!f3#Y!fg@JHZUN2 zeYDADJ{ctqo1tc6;@5BFPDv>Brr6TAvq1z{plW_Q!1u?XDO89VS*p=RL9rly8^c4>JTio5UF1o0iISt;j{H6v=LI&RLn z>3Cr>*)TdXl00ncRj!G?jw=U|n~-m5lsNZF#S6STD#eD_CsTIJ(HfqJF^~C7Ni4uQ za>w>3XpCflUUH z2O0s&|8es)5X{yz2TTuVPr`|pgX5clM0BC^o-Tx-ynZWvEj7t$v+#D0}xA-&_ z#dLJ$O?>VWR-JDjeV;^wq&`?bra1lsMyY}*R0&HHy*8EaL$noWnW2*d zwV4iFGPryuU+)b}PGUkm1QvwMoSa|4(Q7e-9VP9YHq8l3DIwoj?n^dng!D$avZis*S>pa|`;I1d* z7S?{p;xucQUrkp(xb|DOumZF0T{Ht&7#3tVFmzK8k?4@dezZimIaZhepWG^MEoKZwB4jdYJ+$Gcz-< z!&{yHK3x!g_C|6HLC7O#c`EQWMpLJ@^>=` zl;=Ujr2hWxNF+ra6iS}5lNxP%vE_7W(whK#mK|gru}^+(?(Gd*T{Q-U5e(U3g+p?% z>IKCwxAhzn>_EPLSDxg_rS_ij9UeGI+%uV(&k&U%B=n}M)SQ}`JM!`7;()la+t5yi zkTS`;yqpV@kYO&J(o28gSG!~aFTR2T@O!pxAbJUIW6Am>PRNjPfx{B)m>}s!sITCe zIho;#TwPsd%iG|&V*JDR@#)T|OWL3`)R3~ftH~+)pm_bae|T|tdU`@6K@#Yn2Nh+u z5jCR6E;5{Z4K|_}k*1zsDT;*=FZT4|f~dQ3?(s`lN|4sGq@32jehdrC=lk#j-d~u& zG51R}T*I>s^;11==dsJb2Y+S*!L}8`mDb%b7gmTo{EJ;ib1XFc6w*a z*GwfuqItjZFVLTDuOVa%gT4Hn5W`-mlKcCWILh4od}C_#F;$L2OtsjD!L>)vo&{Fs z*EeQ;qaTL^RCr*YK`6KRm^GBzKxL{o!$#(yNAK(oYY$5{ZaQqVgOl9Ct@I4pbV-EW zp$l@MD$mkLV_9sT;PUVOC`rGLq+?7#T2ujLdmfD&~K?e;#?C|njDSh;4b1w zwBK;PSE`zOadAF{dBlN%h1RUHw8A~;I(##U=qmj`d9LQ9Z1ff?JkKMsv$X|7<)wsE@z~TwtiRu`+%RFs zMt%N{=Ps^SL5&$nRbHm;zUFVTH9nh~D#Xjehl1tOQwY|Vn!^Q5^Vve5hy~qkuQ_B; zt$!guAiRSCGdNCD&Bsi0=$(0)`(me0jF8C?o6J9-&%Ju8$aY^a7$xvJ!hQcn-S!RT z_%pBj=^G#4Aw;?VUf(AC0Q$(3VV6mpi2o<@src9bSHX>_T0vmq`#-0P|G)l&slwa4 zb15R_3B2~d*NitJlox&kiPe*q)ge^kp?|{vsn8KW?V*~cti1&q2AF4|QBqQF*Pdu5 zr=;v19>TNg17HjE;_=VPv_>4v(1TG`CE=R3k0et;yz9$n@mqF1vCI9t%{(#b@LG58 z#5+N#7ytQc3Iu!)WGgWvniJrlg_Rk)ndr5eH`%vt!7;nu1>n-63d3T}?BDH_14R^6 ziuCXD)`s4v5=)G}QmMyISF?)lblCqe|KtR!IqS_aRtQ-FXfZ^=MuWQNxlYq<*avP3 zj!g5`x_AT#;|jq-hM2hi4vd8EeYjQ|q6I%RB5%_nlLXrNI-Gxcf0`tPAu%t$1Zn7v zz}N&#Cei7ms8yxXj``=Gu?^-W;2n3o|+^ar#u6Mq2cx$+8oJ zs#pBps5JG!P*bf^{|_GVu(t{>lc(nWicGcF)DNyW7-ueqAD&#WF)Ow#$!@eNu|K%E zF9OQeTVU4I>51oo4oh6Lrt965{yW0Z0+tat8rrF1qF2iM3+L2k-NK=1bUZ((I@lmU z0u7tuv$WH3H8f)1tE+zw3k&0W4RSwlBr&rP9b!@N->%j4>M7T01dZ0>(P-sfYh1VxIWDDO*Fy-qyTaucmX+NX^+JZkm@k!9lyYg3$l8moAvH(KkdL`$*MoA4DLNP& zBv2y3F_?GDXC4O8&HGmM4nnurk6a;9^3>~in~gtc-Q)DssVto)?(OQ+!hbiA?Bx#?5Jx`y&n|zz4+yKI5S!1qIsJ@M5ItacDvVM@8fiP z*EpMzQ%~heyxT;Hg+z7P7Ohg?llme~Y9BMTCfD8{5A$lR=C6@$XtffY$jzqh|ni633mHZjg<}uo>Zeqf2_dCX{5U=B4ZA>U)Tq^6xfG0iCf^O+HwJ4SQmGVC9$CnkYqPAqx3S&PM=h z?)=**NVayiaFm&ckkz#Ji>*WO^!&Mio&bc!L4ab(H9g8!_6u5X2w0M>b#>^7V!Q~W zq=!wSeAYFR#vdoe^Xj~Oij$EegzoWUII=Ik4MPUYsYSa*s|v;}P~EGIYZzG-qVt3vBuDF~ac9)alLy7BVSVKWk^Kqpw$;2M@*rOna~>aVoDgYDIs6b=KTA@1zDDe5@8Z9f|9NhmTZnm^XeWfS`TBAK z%hevQRuY4o;nGGhv8#lE_VFX@&FYX>RbSH#KT+1zHOFchB4JBtWzqzMeErJab>zyD z^HS&CRCsJdx!KC@RHI&(7I#RN;6(j(AqTG{6LrbxY)GiQ4zr@A4waKL(92~4oRkFe3c-Bd%DI_EW z#=xB#zNz$HD&-tSPV*^Yx&qAIr6pTF)9- z1YFP$&*(g%g+CpmBEveZ&I`-#dLRUZNxsB{zRhlwP93o@8=kJ*D6iiBFbZ#Ex z%sNGg3C#Y?LB5mq#<&lAl9soFV^w&zt~(*W)J#68U(aYy^z>eupTZ4k(m7h0IcHZ= z)4(0Sy#v8inZbS0vbEt96iO-Q@XW|rqnR46jP2a!2M%A(v_x5-z4E&GUoC*~KAGmK zX3C%KO~ts|D8Bbj426;A{)AH@kR=Fqx68pY$U+cReS0DNIm0dknc^!^9&#}eEUaATChwL?f-sQQC$r+%UGQSY5ny%CKFSh z{pL_O5C*2o^r-~+tIvfI4%PEHG0=$zM``FKEX&_$G3c`Z<9qXY^n*N0cz!j z8)dm<0=9TsT5JNY$H}@aL0q{3#YVlhyA8-_SVZ0%-%PGxIRS5a90W8Y^_8fwfz4qR zOTOjzs{;rf>-TCvVgmRZEQE^%e5*s1Y#}5ZbPT;wjOMdtA&~qF!R}$;tgCHmGKL^; z#>s;aI4%;gIWn|`QR>0f6uor|yze0X^?OJYs&~vfm};h!rH~Da-D0Og_U_3^io~d; z=&{r3t_&HE?N=zh9}v3)?(SNjpHRO0FF+WQtkudrWng!$Gt}aBT9eg(18&d%pqs{c zcW+NVTQR|Mx_WVO(Qd0c;#>3NA2k+#mjL-t~XXlsaPEjC>tN2c&%vV-Z$t(zi;=9AVXTS!{vBu zqBGx!DSU-Rwpi4tiI=nS$iM&etXXZW;)-SUW=p zu`||T_5IaKSkd(O?twD1RPEuBNuh}DrpXI8VxneZOWEkU!$85mhvJ8PrYwV2T|BG^ zEV{q%FlpAjuC!eOH?J;q=Wk{^Q~HgqZET)BALFss7TTI9v#X;ZCGE_KWrL;^6$|Yr z5Nz*G`0nvvb+Lg(1>ht>!-f#c0p~%^Z0yNz&(81P4+w(zLQ1|?5L;J}Im9*#k*C=% zy#;^s>&NlBV)MQrvoRRm8cgFpsa*V4tx*XozaY`Iw@j9IW7n8 z$k2-JiV;j0`l?SSpYti%_|$Mq71rY4;KfKlS%sH)V6%E}r6-As^)a&O`>~ocKAcV5 zl`Gtpdqnr<$b@^p^F($=Q)Mb=KES{L!p|?&()FP%gG$z&&V{^|6T8{CiWo!yJgxHBsY zeg~gjP1&I>_4TX#h?TMoD3!oBw2JKtHTQU#2Ptd{sW3+!Ggma{G@G}VuEx&pR$cJE zk#=@-J9xJ-a=Cxd3&r)q`ubZ*dpsBfa8~k+-$p~V*}mjy4fFa&s7dq^vJ0R$0^l_Q z3e&3swy~vxNtLT5)0!Io{*9wo8lk$KQH;>6#l*$Mh3VjIjz(w4H?4PB^3S>qwWJey z1A~Jx6|xmY-{T!`&U8mS4c>n8 z!T)-ZTI%}fzd$%tY)iivcPw7gmvR*(2nwKzB}ZqLt+b>hQK~p&=&HhXNFG=p9dlv` zH6-tNm##uvDwxnn%BHm2x+*A-d0cgdJWS?jHT70_b#Q2(X;UawoI-DqP~7Co3x(Dp zco;wQ@YQoUw%sFKB#sb;9T`2ZBEA=O+uZvRr~A`4d(CTmHGE}k)Tjl9dshP{?gjHs zbR#(*!(Kdg-@3Te?h6l|aUr}pp%QwiXVGql<#flD8$dJ*kMCaP-E{dEcf+GM(|bQ_tm;N!6RX`w-DyClHe3fPTF8vT4dZW zB0t=C>4yn>BKjjLfrLOSNw8x0A-cSve`@@(ve1IbKT*!iTzmK&$*A|bCsc`G8qUp#x`y{{B8yYyFIubi(yH5U>v=0Zc$M>hh4f^;E?y~Jb^$Gg<5 zZrKM{@CP&}YK}%GD=I6)6BBzPsl5MF9zclm!+j>7+tZJWA#l1&dm*w{o(UYZTJY|awySYG5LO@ zF-oljaFh<_x*sqR1=l&k%x8NpKhJ$?rsqQX$0w%kS>vumX;C_0qO4UzH|GYbM8I= zamW39zc?f|dp~&6nF*G{-o2p13WgNx`U7upGkY8h;M@{}RCvFnA z?78{1TQ%p~Ics0poRn>w{nNG_1E;rBDzO9QQ|*FIw+U0pq@pV)T|HL_g;hizH#~jv z!GrIv?dhJ8j_0l%AoZF0Vq?ZcT-wnV}f?H1(^Ely_;kD zWx$vCE9A_>jR<=A1k#Q$hdx}Gj5^n8g9xBO!le-n%_k8h=`iKKO-Lc3rNsh}0;B}1 zsJ7{sP4Iqzs4HpM@q@Km@h(qjt^QUnj+W8(NpFJ%9CrF@*WEcQKWYdk8d)d1JQ%9G z7?g#md*6o3vp9`wMup@z7bh5f%>r-Zs`!8-nMtXdhC$E)GBHe0*5zr{aDG-t8%2T> z>x*VZzE-s@@>@VtA^h^r{*OB*97s*QMLV265CJ3RR0kLRtMIg++{B=Z? zoN!iOU!SL4OY$&pL{JPGvA-1-gGb-pc@pG=2alDEd*i_}y1^QUtCc;np3?jlAVWAm zOEs+)mY1WGqn_BV4#IT+_^~?1+>>Aclb;76T?S&35EPMd`DyrgE7i@$7fRfinkljI z@prs057p0()^)Sw$q&$=bA$IW!+bbjrC8Y?Qv1L@OZb8amr@v!dIhxs)9xM6q-8s& z{1yINVoHqyy$O;xziVXOgjOg6DO@EIaacw(T#7+QgkIJ7Elg}WE?U3K*>kh8d}1~> zHpy6jz?)o~1SsL&3%0LKM#seTFCQ;<)|2>)tLHY!Yk6%7g662jNs!ga8|Dcc!o_#k$`tsQQXtTLeV!TY(?aBKVYm_ke zaTUDa49SY|8h4MLayeRtp6kS|S&LUkr+jjED*TrsgnO^0j@zbHji)f~Z8g7rTTp%hV_& z2JqRH39Un3r9h{=tgJ-IkW!g)m*3`Vni9vddB_H zJzcqNtN0|b7x*$YwLd91b*eE?c9a=(I7dZAm1?joEG`iz)IfmO*4CD*o5v)+97lRS z?gqUP-&qoycJ+taTA||NVi403(9rbn8OefZXXI}PLiqDGKOfL-YU@i53f@9SE-pe+ zb#?FH59!*b=lT&aApl0*f(@IFE{jRfs!NP8;Z?#@X=yI6zrXK~MX3ynw*-WhYHkWo zEa_z!WVk_qEPzD9li!^)K}~sQn?nGA#t-MoNsLoy>iPylrAT~9^=WZ2Pju867K>4{ zQw*#e1l+?CWdc)kPM4zb;<>JTRzx*g(_@V==W)z(#`aohzPawHdh%4&%@{bC=Kc~6 zZQjh+=cu{;;ydRd#qU;m57ug1*ZrKrX@^fIt*Br3s7CjOo|jpa^l+DcOmy^>sdyJ6 zzsTqAHoufTXPf&L*Tw5W!H0mK`OFB>44df&ZkwrOu%h24Cl3bdZ79a9^IA-R5*J2m z0DF`Ujv;I+-cU$pOa{gDi#%l`A|mJu6HeOcV2e>P#Ls_#2_HrqntD~{uxW^84xlg8 zsdZ;-uH?MtDjRpchzZ26LBkq|OQpX$M~@K6J^KYoC~qn>A9nV$d++vkw*bD*ofwSm zZPOD_n4e#M0d`u|n@L3r;yXnVaURkgwPzcP6y3I&QPf58F$w-^In2(f!8Lns;Bg0` z1D31)3Lz9P*y=z)>(q5-@iCC#JkE7d`yymTSQQl++4NaL48pqle;_r*_+Ed?8_HGA z{wY6h7!u3+s(i^pAz9eBDh>}izi-x)XG>zZS49*ITk*F?1vpDq2u zvG4q<%POEItztEtn-Fm%;|a(~QtfDKd)!yE8R~OMWvR|qPac-)X|XFBnRyq_qhSs^ zUA<)Jz4GaH`QaOG)$zE80+hC=($3U>@C84sb@|?|=VLvq>!f&?W|(ZtR8vzUe6iCKO2HQnfLa+;a}cZ}cCmw^R&W@O{sImPh@2!+2)YV%T>s;z z4Jwe;U}CvMVgIJ|#~Zlljo01*?uToWYkt~p)H`X7LJ&|pGp9ed&=n1p*pZD78i)&5 z1~T0Y=AKqsO=>RGr#Ib2#6{s!(`A_twDO9(FAi{>Xo zr3x0o1ir9fC=|zx1et3yn~P2z5hS4>_@4q|=yovB&^O|Jx@cnQe6CAA`nu?kQ0k)> zgL07v2aZ!-$5a4YPJSmAeRQ{Jng%Fg8k7FP^yc2QCy>GStT(ZO-*x6Lbt<(=zE%Q= z4{kR`LvUA_veA#07BaxB;(M3$$77gv!=2Vgpmfxkt7+IBRm7%}ImKK|xSX;Cndn3H z;^d1PSn$dBKki0G!I;_;GiKN9zTiWfb81Ps2o-bY^ypH^KTeT}zAM6C*s2@enr%s3 zSKO##&b>m3%W}kAe)5~!+45G7a@DSiZB6;$#K|Y$^?+r{sS85i7@FBr>2X05q%29g z$f&$@C6%UUZ^pcmtQhSv3aHTpZuH0U4tP(2c|K zjzCzU%w6n`TZXs3Cq*c3Vq!upMj{=O?XFE9H%(540r2t2Y>)yZB9QVU1iG#^h|*Mg z3#bw7*`(|`Ot z!BUy{gj5pdn&f(VdOl}c<^bEQj+8WVy_y|vHU_zfAGJrQBo=AL@B?n^K_W?|lg$y` zSB>5%?4fSR?Cd2%q6$z!prGUG4`leimDxA$Rq}OMzDkGaN|j=*MH-PQd6XOEIFNmT z7?p=hC8!VGjQha@NVhTS86^#ok8VtuQEs-JsP?@)Z`nQGXB1=zu;H^}(rP(joJWQN z4}@e>BDHpQb~Q#xfRsZY?|pS@Vp6&uQEmb+go>@0O)g2ah3xkZMD$}lswq!K*%*U@K|crlvHGLC1C1>0)k7yZo75W zes{kZA^r@z8zLQ-zedfp|94O(nV1o;1RIs!NhHTl_ciefLI-;qX3_EYvVP5VSB4!w z!V7K?SWL}Ea~Vqs{|R}+j>3=0-(W#+ah>~PU$N>3k|EV~D%C^Zy5FB?#a_sW7!@Q1 zO;pFo&mQJ3mPC?y1mLV6e=Hc%UcGHx36J zf5*m`yHXKpPkXNA-}FQ>-nlq1O;qE}6sKoDyuS{aziBVu#h*;w$@d_UBKgX`F*oLN z{L5_yKhYmGJ(nqO*~jpTG{2e925N#R*H4^N@oPWQWp*%iZ z8%9X7aRcYWw_Ee`HT9QH#4@uCc;I|Pypwa$i`=Ha-ik+v1VDiw!rlOqHZm6%m!EMZ zO{KFf$tWyPaiZapcS<`fmAdV_)E%8Y6?9y&?daG5?w?#zuPujJqwd5&OI!P)_IK-@QD@;I#I zaBB$NZ=flzK&{MjRar|*3mVRQ@PS^dhpXSN?UfpL{``qqJ$&_LPE_QlXKx z!!lddL|VoJt$KYBTPA@XfFU&PZI|J~EU(qdSOIC=ecIW8ywfTnQV^qK-{Jpoy1%pw z1>++~c3c@PTQGWrmg!qW(P%Q#m!h7UIxCJ?V*8!6j;n*i38UNj;(lm)_K(Uy{5Uu` zWanh}8NgStf@eGG=qtvHqBt~KveYKnmr^9u7UnIsj)Ms8rWjv_*aA;x1Y083f zdrE(*AhR?rZ8=1&f+FpuN|y;@ z2AeTi@BBlX<>Su=Jb8V}V{r2&^*07o`yE;$VW3AVtF7b zZf9?g$$6PuOe_tGY={aI)YhY<7ZQT_Yb}JlE;W^YszOm#7D89%78k>s-`qWy;S_?s zHJ!sZebTsPpTVUKgb1BoT{ThaP4ktfC=e5k$fI;~i{XFP3n(gRB!FIDUVgBrqsIHd z-=*9JyBLr>{qnKk$;sZH9+qU{*)1JQA4p0CPg|X^$iVaqF`q?OIQn}+u|Y-`j4EYa zIFi8iCG!DhNxkSt=o>Ki_U#;8*m=2T+Rv(>Xa`^rlqr@d5LF8VAAozt?QYyE^Pj!LT6c~$=b)O6b09eiCHZF`nOp{_4k@d-Wd=CNa|R# zCBFXFRahvOUMiy9umA8aBV(0@8w}rJWyJvqIH{nZJiH_>F)?`9yv>xG#LNSpcVoj6 z-c8_C0I(#rZ~-vz$_)ftCue6@MP6E)_jP)s9S+l4l;Sx?jLSd9#RZPDOP7l9U?2_U z*yx#0Z^fRoc6Qwz`O?zeUG%==>Q&cIm?#@qGB7u{6jZxvJc1+iii~XG^@gb<+Jvz1 zBkhD}n;_9ntp5J2wsl>O!sokVu1D{*I5~@4&)kR==G8ZW{C+z{#a{Kg=ZB-lGe!BF z$HQ|*M{QXe&t$us78V0Twlo{N6XPV^)!0nsjU4>k7N z9~DP@6t-~(skOD}TU*ps6FCtPiUW-`dK^x*dF$5J)-J;JRG4XhZ42JJLG#=v{opF$ zxOl6UjxXuTtM>9TX5Oqq(^DqiSacQ=;xZQGhMYaBF*GVyOxnGgTuaq1rX z)a&T#Cs_YU-CEc>(M?g_o}E>)OxN{HiaNI9xbx^vFghiXWX-01TvC0>fa%V`!6*6~ z@UbL^TI)=3*A=bo?(ojrNqY>=&8iMoGBs|F%Y?d6eCK01Jb6&4W@h-HBnG@PSL~Qr^oiVtu%ekCR7KgB%M z#Sj0#nManPo8-J=nXgkhg1FcBd&Yi*!IPZo+vXR zP;!E=hX0-${{P+;sS6w7pMl55Jyd1VJ3C;_yQSorPM|Cauk*jIIVXGnZ7Uo{YKf9+(i9T_^Jhb7(YO<-2~BmCyQ~q5bBBW zBuG|TOw|cM8DlVLmWX80{YMeL>iC(6--{w_WtVascq`ZkCJy~FVa z31N)+j38xEQHfYfr6i^syaYUsSU@bTQmFAUhFKkE+Vw#Lf2AfcI5^1fb0y51v{@|t zDnI`#M7@B5<6bjDlKN!gs|~$1yBKYd?6QKxUMq$|nuxUhQqj3O+4F&95wGBAMg{w& z3AZS&eWh%2sKiQZ?^8@i(aU!B^khLv25EO8P@{s3r~?FCV9DTfuAQtY%6I@mM);%= zLSw)q!EXgDI3#29)_WXZbw5XQv7GKx*DW%h&4>uOdH*V;`FeFI2QVhcA|a}2l9rSN z_!Cl62j3yy0j1Euz(AEBMHBJh0Y7E<+|7|yL^hMJuP@+LFpCH%GfGjk*6C~jP z$hOSL07to-!}1`sM#}ZJww&wt6@R(`cO?GL?I)(K9gkl zcffi!jd^QA9!4>ViP408S;@zRirB0Iv2d#CRbzrS=*#!lM`+4i6>qcG)qlEI)J^PG z)sxGY`?`oo@oGAdrQ~&VoW~#EcikI04(}`bSq)uB+DELk0%Vjw|9ep)aQ+$^84Uo~ zyZmNEzYMHtP(2^W=WGG*5d#9%``hQ|=MG>M@u{c-8!`+(`A9YH68Z5XGDz~X2$>WS34Y%++5;DEs6 zOnC1Wm7t?->?-iYEUzm+nWVbKrg;a?)Y>%C^YO(=pC2s_NS}j7ZI0!*I7JBIi-PVD z6cM`<`~5FrXvJyezkS_C=wOVfp++Skhq|DvJsWG(g*%qBmwNWP9XmVYp07wn6^A*gZH9*JOsP$-W^-j)4;%;r{@(ty5%XelWQ{tE05wg zTBUR{-nQRaB*Fwg*-k$U(xK(SUU%=ZQA!?^L78W{MMv2sRVUvY3#MSl7O0!TOs z?N@$9aGU@Ba6}~-6`S~TZCLlC?u({eB}Jud8Df~l@#81EnsSac6*-T&Tw5@4$)|f^ zu;ML{V-^fSaw!LX&&gVs4tUy=YJ_&9qsGB!=VG5dec1eADUt2ggg`8-_7huMGmtR# z177i}`i-b&SS&PnXicQLo_*n);}}@$VM(Lj}r{6k-_` z9tvlpr+$u=g=e90Ul<0O*%O``$fMy}JswODVM*bpt{>MAsAR+A=RaPz_O30=)b1B| zy>oBtgl$Ql8r?xG$H$6mW~L|BzizKjUBz@H?Mm@|M!({sr#)xh*i4jd@cU1Of1OPI zufEW852j1L)?!Rs&Tj@{GGS<8)mM690`Eo1OG;z0iXD48U3DsIluc zLGPlYC9JPd(gqhDkH9eHhcB0OALiueBgP{`WjvK4k_5m--?8~fes7XZUj_)Ypv8>@ zMT+;uE;?-Y3N2D$$>Xnz)L?;wSp0c(4$*UOQ(8tT58W{KPvpKrh+Y5=x)ZtLIi zrBn4O<7V86_Yc47&7(!Vj5-B%Ex1(#bW3zH(QN7kLO=we-01Da9UQPx$npeO0?*c4 z%g!}50w9hJgjE5&z4ys1x@Lv@hYo6=i5mIm0+jy_(JSTUmj<+5dY@IVb5_-gI7Y-X zl`$2=z0xwhOv+|_^whV0RM9S~nEdb&Y@hkFIFRw8XmVa|)ABnn#ofZ213saK9Y?eW z1ysSTMu2n(g>bkUYP z>L6;WrSa)1A0PRZe|$>{dqXA$>G{-y_mOX#reS!Gor}vdZ1kW?Lw}$pR+7(zP((O> zzmGClu$?087B!eH3$rP_jNT;4!h8xmk%M22$_n6UYE>ivbvy|M8WOkV?^{qf1kE#= z{z|_GnvERL@<_fzMsly8BCAIF5E3%~!yl`)z1{YplK>(2=J59J0t*y z95D$;CXP+MLm>q!YnIrK{}huYU&qpwv)#FK?OAvA9*^07Vk^jW>);)c?>hb>Q(;fp z%Ur!@Dt6Pa88uv(ElosL#Swcsqo0r}F7OW{F}m$)r}+Js`MXOq>u?RhxG5x#?yQ1- z!TD2yzTehL=WTOGs2}D&8cgqS@Vv6ctMsb%Rn_(EjI^5GUppW>u-4F2$Vb%3KB{A1 zjS#sfK*+-wl79p#_EUaNxk&3UDN#$b#~duIOkpb0{YL9TJC_e5?jq8{2dV1uxojOx0hlze=@^h{(2z zvo4I^V=A9^j|<+P%G7zQpiublt@4kHBZUCoWPZDM@BtHos{-t%bFD#+8>1fsX}qg7 z9^ZvJw=0@)e<4~?Ia3M;(DUuaYf*7=aaiv&uqQ|wda(QN7w#dzpd%kguhjckmv=~r{A=8MC&

ekvJ$ShQQ0*xtQIXaKY1oD8b7}S15 z>IwG~DmpsU#p2gjmu?rk9cClNVBQ~uiE5w{e6gSl0wI9jj3AW)Vc!Aj0_M0iK?;*+ zcO8n0$~~ZW=C2Or*x0zu{(efSbtaM3as`DU++e1^O79^76=r;WWed!Xl4Ydz!v{0= z3r282EnuU8pB|T*f2HSg}3%(U=;2TvF(oajEtJ(b;o;u zUO|@q`LJ^PEbLR=x&xB{|MmIyjQNj|4ta%e{JB&o^&T6{TeoH^Ms()E8k_-;A0p%t zW&(i*&0VvKZj@4>6BkS5w2c~4^HcOD_Ah)+FkDiMK3>~zNu z&(?`K*<#6-AC8XuP>wA@83d{@vHeDMoiAR2xS%^FB&Fy8>zbSX$_uFSkq|meC=Xn% zez*!cZH10)$a-o~f)5*eMeHr;4?uau-qqCy&P{?ed_{X1PV%rhN>_?7DF^{*t(x|R zA-lf|m7OC^vMym|6~t zmmXFpM!y;Rnw|cxDuOS8EaBqdB`R=R=PzZ+{+&nGkRz;DF&5H?|AK0?kc4tAY+SQU znLnxN#dqo=?WMilq?aG8UlPh&qhUOXdszB?&b)jcNsGC1uI6LCn^7NgohMspfGUcT zeRNIy=j`cU%eiDQu6&WO?%16iOqtE4y3PZY-t>-|O&|NW1CMM489&4s%V!&9|9J1K zDNSNw9B!ny7-;&co=EfN#+cp4xZT@8_r@PBs$L6OnD@3`{e1|CKn(?^a*-wvFtG>` z6&xg)z`X`F2WDOP!j^(aau&jeVBfj%kD^nA{CQ~;G8{CNB5LbT_hzjN z*5sWJ22Zm!bBDh(;*GF|UCFpGq?>bncXGdVJkkC1Vuvf|ieFJ5mwW5cyIpoM*^r+N zeS79wH_ZNK+&c@EeM%|Vy1lG#=lUsgdkBIk2P$33v+6~Y)6@ZZ*t#x4swa0Rdx=!=-wC;bv1ynd%-<6bX zPjAI((;!ug;=idP?bGOiQekMQymc`awreQ*<3Ka9+l)?A>TzrhJm13y51OW@(*QLE zych!;J4-5z9672+U|CwoE_q?;2$S6p5HNs|KOqh4=e^${R0G?Hdpyy{xiEYfxU4X zWej+Pwd{XkY{v=76PEu6E(XC85C6|^0UYxWyhC7l|JL^w7X;P(AAgIic9QLXJtN|U z3%~t;*x&wt_r=!Vw_u~XU7%jFRI{8)%gK2gNmUi$?SRzvyYQ8&>LT|40A0rtkM9B| z6(M@|0XBnOnCRrN^6MTGFSyNB?55~D$-;T54FCG{~MP=M@2$}R>N8U z11uz`u*o1&3%2WzsS%kH@Z<*20`{bdrGXL`pNfjrMCsq>4*#4)JG#8~1x<(<5Lu8p z4B3ki(L=^#P6Xz%EFfWp_j@4B3+={@8@5hP**f*^_9Xw1tm4cE!7A_I{u=+zY%-f$q-3NyU$DtI00TLKT=NVW2)ijsOvS`q_AS9(ARW*X!3tAfps*@P{ zBCkZ`4-qn;pAhgo;eg^4Y7Kw;#h(MEdJIJV*y-I(($moJ&2nt;)E#7r6nvI5pZ^pgjzuI;zRScg8~j@T zWx9Zo0q+8RtadCT7V%|Eocy>kf;g-c%lNjEMxX}do)s`OSmX6c}K-9y{t zQ4(v&^qb6M2kgy#e4T72<=Ox&W4=qV-)6rc7ox_4^wsEd+3KdP;gIS*j^{F>!!(4(ve3>^grKRLuvA;9KXm`3?XGlgl58x3|4uc8WtgEOOxp-FS%4sf7mOD z-TEgdQvg;XJx}`fO$7!Z4VZJsdwGRS#wf}^7aw?VauWX>MhEiop^J(6EIR{j3V~ga zQUlf~mfN<^pgzbX;k)Ya96dj*s+(4m8_A;dB%;iEXj#US$~7pz0j9hlDEWtc)Y4Rt*!GXeq0 z&!5}g-WHaEA&G#LXcVadOjP5#3zIwj%eBFaV8>4hlFIqDwSdM(F{m=3Cq;VGuy=aB z;U))&BP}foDJdxguRH^_s47+8C2_lo3gEe5^=TO%1_H)&d>?2Rpfa7t7AM$37>l-x5{fjzh~-ZU=vNa5lE8OG`M1etux_9_x@YfQ_ipZN{$Q{H)Lm>7qv9M z5(b4eJoQ!e|MY-Oi(_VOOZv^*K!;dgTCwQrRw5Q$s;R5&9lKgJWc6{yH+e`KWI=Ss zL^Gr+XzG4+b40iCPZSZ-VlXm1g1slzeeEIaGLJ!d0$HN>?%zjLsV^%nUm*z#3xmCZ zbQA`4f^rFQFakiF>Nu+;F~BiQ7I|CK=mw*%O^dP zRYV^aKgA>_d!$bX0$?X=KA&b!N@pRbwLeC^BNm{RzX6`?xv=NaT|a-$ff;`$LhS0X z((G=tADO8Bdxz2r(}DYsv%zPH@WedT>B9I`<3O6~y+j6UPlo07)7E>US0@HbeJL=I zO$?S7i)M8sjW_=@O?N@uq%acJ*PKV!6)w}WO2i=)9gVNQu7+_(MIvEf;6Hg1_=`a0 zCybYR{8+N&ZSJk30DIz_Z2|RfF_|7bV9K!fFG#;%{~QDPN#KjygX6~C+Y#^SF_53u z9|ta63gh8*#g;oPZCD#madDYkxZbB-R~0tlp{ctTg^pGTi^Q`JV$~inF=f~^`q)Bi zr<~Kb`q`{trLw?)%9-PHRu4g3NmT^AqU70k>dw&!6Wm7 z6{fHPvwlU$c-mQrj_$vO3j60Yi)L$`+djYN3BIJHYdu&1;H()2BTUoY->!vQ=MC5-uW-P67P0ZD!k z_&K;ub3Jo7qJ#2gZeCIAm)$qbqMq}EmrK3ppEi;$FFY?-r?1U%DfvGH=AcK2@Rrs2 z#(r#uQmZ3aR}K8mAyrkR5yEG8pmH6m%K7j?i^I=_JC3KgyFe(`p}LwKM+75OW_;ozGs>@$$dF1FD@u%o#vkx>WZ3kIUKTBdke)Z>w1Nd+EOh3Y&8V8n=@6Cze}BLETX+zhg|kCM%ur6=&KiYiDzlFALHixfIq(AA*ZvM?FJ`AydHR6^kk=V}AGsqg_A`POwZS%{iF9c|#R_gkSJE8^~q zDXEE3HS?r89)~>MqjfZa%})%KUC<71iFwS}lZ3xR@jRI8_AGP8dL2JEyxrOVD z?*N_j$yb*#<_S?Jf>U}l>{>?70}SkW zsv(GJkFF-*5DAp4u*!6wefjq7)5gXI*B1({+)OfQ0s9k<%aSdhsgA#!&N@Dus(-+S zc!F_^PdJ31G}$+}9mly@V*&!I;?rpoKEBu@4RJX+mgqEZa+u)BJfyn>!>%&KFVQC4 z*TsTDLk)qgueU371pxbw(xRg08E2Kiq z7m(+M;9Wv0)U1hu-hvc?z(E{li=~~xb;D)6{Gv@ZjrWCb0+7CQ?G(=~W1rkK8^wja+`qNAsO3A2=qjlZm$ z<3VF4%(p23TVuP|@ig9@6XSvVI^L&7U*tVfws-5;yJ zI~%_rhSr{2lk-_`VEX09%^y>DfL9?jLhLM3s3R=XZJ$m?R`&EL$>wCYgJxyAv9TZ= zl;PUp)V(upaXLQ`vzt32bPv`!K78nG>v^)CYSne-c5@tnO^#-~pW$EioY1U_ZRDe~ zNV(`c@ z5IcL25GK8|R+x&Km}0o8-7Qp7*HS$3jE#=4l-NWscO;>sghG~z#%04l&~poXpyjV29C2VEt&K*4vTl?cOBK?x+)`bsD{$8Gs5L*i4n@Wef6cjfo zZ(-0m023#WU&%Ln`UskUYTyHw79mId zT|`O08%?c&G!wI0;mkk>b*9((PzjIu!2|FJcAD%j4}6wD2cQf$Ct6Tk9Q*s0ps+}H zbjK{Mwc(GGT8M~#&&+=d3(H_NYWw+kSqt&4Q7c~Pefh8{mN10?Z13vrHaIH8gEe>y zXk8H-H{jpN+*@!|t=Gp(Xmr`Np6Tg*E*LT^A45z6fq)3~bnnYEptTaA4SZxd$^rg( zhvh!VMDn+DiEyzh@OE^Y)6~-HS>9jfvYokmcC@+t-DhJ|D4s)4Sjc6o(C)9~X$>+5 zInIRR{xkJkL{wDr5JV5BV?`DKmh{9zmAuYAQ%fsR>uY%d^Xt!@5UR(;#}HC{sth1CSBQ`7r_M zbUfsX*8YSlcFzQrZ(C+PLvgg!itqBarc#{=F|&h24RhJORD$N#K*_ILaq<`C5{j63 zS@tWV&%ZkDo+&`ob}*mq z5qMj9;6`{cjo;;rIRh(uc3rKNNpDX1*xFS1NNQc2t2!EW@8!#@ws2&ZQrj^eI$U%4 zh^;cu(?zDEMZ7OT?3R~C0>~*PIUYyku{MG--Kif9w-a)#t+jVX>Ja(Dn%bJ*w_L}vX+ttX+(p%j3%4fRCT_Aj;NV8o_zB7j z&9%Gf@`_Tp8{(&T{+vw+o=Nde9OEQKOiA{;8~q$LO%wWk`KRO~5s_~Fv zBIWdLyFD01Q1z|QQI=>#cid0N*m7Jp;@HAKybu(LswfL_&5mYsq69i&BCKpJVy1{V(Q zvxC<%J^e0apN#G}8VX49g$x!DXqN2_$OXC9_C;!f*D+e@#0}siu+=5%p{xOpb0i192!W)lLBN7Ug-1WKa;ms8ueI;*qeNOgPn66o!J_ z8Q}JQP0`v(1!d(yGTJBPeBmAD74~zj7*PI#iu+#n;M#c(s6>`Qjmrkufcs$-?)*qr9ZuUSX?l^JpMN#HbL4Eg%)s2HJBg`EAm?f!jg=_H70 z!-affX>iCD2)6?i0*)6-;*!m!rS{>=^ZmZpHqlAZEluKnrc-rpF%^v9%wqf0%$|xn zc^O}>$6UFtS>~|GUM0r%YWp*=Te5O@;cs9?< zzo-h0h<~L1G$#At>kT96QzKn!0&R8&f8@o`Rz8aWqs6UY1qsrqy{g^1`y7Ra-g%gMsYnydIdrS9dF{XI@kKqs zezP;b=gYUdUr^%E9W;qe;mx{vTi;x3dFI{P&@F|)`OxsjmbE5Bq#*&4)=J_OLzgvY zUYp6Esh8;d-`K+rJQW4wKE;Z`ur44S?Q3IIbVNFtIf!(xvA^zbzV*}2WB#xy8st8l zcxyH+5udu6`242MjYr#~qLnt6VVmR5UzbOfj;votlu^;p`=kjmt6uu^+Q!N0z9LSTi-SYU_;?a{J1#%lCu?T0I-NUzciFb< z>wp-diHRN_w!x*%O~2+hjyQzq`PkDXC(dn#-1^+ZDwhFV?}FDtr3lfmFQ%}l0sf0M z>sO%vszWqzxK2n)6VYYKU?r^?^AI%tHA`)n%ngcGFrB*B7+}i&z2nh@e~a+IrDAHzL}8jEK~8n5R$X^84Wf{CAa-|W zM*<;aU)g2YZflveb@88XnSD#91@bxv7&?r!TyvPa&|L@D1+@Hxk3kj*}dqoR0ov|FebSx=#Jg{;wS z$&Xy+&iXv4$9Vov{Q(ZEk*vbqD&B~DiBFB|8e>}|)xUbR0G77Z(XY{9!+Ivxw0`*d z(RG21+u_!1HKT5eA71EZ)p{{Os{XKa_sA-t6fJaDwfuL49YYwq_L;>#y;fAOj}*R$ zp4_6q^fODExRq8a<#-D!^mb871&Ns0ybdxe9TWw>%#7fa(IWa2_wQ+TtB*6g-tOKQ zAr}66^pe_p&8p{7%ClUWr!Cb_f5_E96jQ1lS|4X&c4{kw%Th22fhulevn|gf)}M;4 z0+b4#b;7&*zqye=hTO;BIXqlUv?!hh%Mm?0dju3L;I8OEOumA+7r+@rpgv(_2KR@e z;)v%K5RTODEBAm7Ky2*@QVN&^pA#k&fIYIZ92aWaLTbLc(CF*y_nnOb3JSSc000RZ zD0l*@+t47YTFh(vC&s(K{6^`}DjnB8DsEurPpw@TN$`f_vF(c;fixR#@=`+5<)v zDi|84+MQo{o!eGv+`_Q<%vU2H^?7%rN7~79;@pL~C955qU(brOqu4F;Qb6%ZzYs#0HiuJI)&4OaMhd z%5n8I*|JANPLA|x3^peh2)}&SodYMEVJHgokK`d>SU{y?+@C6PVKGSPxpQ?c=Xqi0 z(6uJe02w%BPICqLti@@meKMAt}w61icRA` zUGKvXZnUEv_YAR<;?6Fkab!O^>>t>{ zwR(x>$-C=*HF_dM7^c}CRb$Q<$hrC3iIv*aq+_Z6H-@$Bd!OF^iM`&}g+DRoSNU}4 z1gh%-sL*}htg5HI@Tz&|P{kVRdJ+)nJ@dfmg%O?j(MO47VYAi~k3aYvH^MVLccvKm zg~H}5JkV!e4ZIvXJ4Gh(jDEFQDp-JqFU9V8@zXZKviHMmTv|z4tEBrq+>h4+^KCCa zKwR@sx;P5pMvq}G4bqabu^^4`NXo#1~V65$Ofo_ zo<*%hr&qB%uGU(}?t(w9Cq;JskJT+4ETL(gSw}$x6F)gQNsINOBY-& zTR}>YIt^873mJRuh(Uc)) znem~y_th!mh!sGdo)^2)bXBI}@BmP-f3ukOeN`^{#->g6R=OuuFmT0CCMANI;Jo%I zM>2#2qG$JxUfU?W&{+9?3EfZeO=dqoKg6B4>oQ$t*W&)&d0lN@|6LA@7<*G5Q}eEP z@9-Wr5iv1LqX4B37GiSq<(ZReY89mH$jHcObxas?M%i&^n%kRjf{I_jdE+Dv7Yov= zFd{y@IVyYwkz)TJ}gE0l%8VCT;ZtP3^hupj_5g)GS0>g1sK#5rBFc7cJ=gi>@r>zN>$Yc zJY8oKO>9K9XtQz?y6&AYVthvSJFTglTN@K=uPmv4_ptcGYsynkE+1+$GLi}J?N?qo zgr&bSE*FzE_8vK?(TLVxh8B5pUweetB%DtAp(bZ95NSTDahum6K-1u=dbC`Sy--t= zvQ-`5;~FFIVALZ^xn(R4chbG=aKGxret$rQqQYUNNrw~bw=+Rrm!w^cFU(Ow3?CYq z*vJDvX-v!_d0&HZFL^A>t0ypL2BZKtK}8S+f-mdZ%}VmXt!o01A^rT;>P{_9oK9CUtwMH!Tq2xH~_#{KmmESzxWI{&FAI zkdmgR`QLnvbI$^(cHSYv9*TUOa#0i$5d zw9f81=$-_;FYe5DOv}4IMFrN0h=hpKc|!w|O32*0S%nW5qC=^9f;&5Jv21NEEG-~V z^!5qw^H=Lr(0;=CPvUb-mDY2KifzkH>jwao{eCa4_O?G%RtYekmh)=M?!EL=n7q{a zv*&)P!d*O(lSt+dc@1L2>%t(I!#JL3DSw$`zuuXIfrFFXV@%7z5eYE#G_mO6%77m_ zjq6+Y!wl1*FTDcOVnF|!{6XKI-==vxV7ky6H1D|jHwI`Eq~h;uOqDj{Kj#Sr-FdhAI_H~TWc=8SYKq3?|`Oe$S0LDY8{guTw3OYy6K<9&sVLjG3p)iCeVU7k3hqc)v7O&MnD%C8pK>5fYvXR}C<^72 z75VFA*70|^rg(Y8N-PT9Mzr;Sk4As!-FMUz4?X6dr4>6uKGBOi+RUtM_@fVk@Q>q8 z-95af8rZK?GQ>k-!(1;vN-`eAea@(OBhzm0`?AR%{X07Q!`qAL!TPrp3 ztmPKXM)eR!KAV#S=0moET&*0x!6^No8>-{P3V~r!bN4NY(Law7)846Y7uptcWbP)H zoL|>#-`e@|yrB5EqOL^VB_&x?-n<#Q+(#`BBO!+Rb8J4#H0jbD3KCg-y@B4HzZ&lg zVk|Lo6l+}>yg2>!gc{Pls`Nq|YG{kjBaDB?cDU|eee@)udj7V`f38leXO=bIcH0Z} z{P)fkLEfSq#EB(3DqU#ju5^N)U&now9>{zd*l(d>)B`AMW1=Ryr12^d#9JU(4}**` z2!evV#O8{ObKQGzLjpQ9@XZW}+SK;}@9_yKx{X9U>^Cb=wBxiwVDza;zmBWB>l=Z^mi`7M`DRepQ}~IHPoAS zBh_~QS8>-F6-Bdchb$r>5+sYDAV?G>!x+e6P*DLvGDwyjB`3)uIjaaG8Ob>fFyx#@ zau{+(G7PWy{O-H=uJ`BNwcc8<{>VET-*eaKvD7W z>PFl^=im;Qd5yah^#o`^dgyP!Iw>g`{c;pY8#&i8Rcks}#`TA5#9coJ6noC!GHj*R zy4pBgVBVz^kZup|8UadwV0G(c7>Exx6tqDZNzk|<8D1Ui53R|{$N)i(E8BbUQFJY} zgzGg25O7%3-Ele(=-Hp*$0lAa&Ca5ceVv0uY%s8hqv4&QT^$a|-gO21OAw3S15$&n z)HKE>wfHoeFx?UG!a-c$ZV1F4`YILG zKs-Pz$Y92sG`T#GK?HoR8m*q)hqN~mS*^!^^xwH7Fen87*e0D{QE`+TcXD0~UfD1> zc_0Fi;SrOQwXF_bJ>8E|`j|o`BSAn@VC(EFWa;TBVKW=AmtzV+U!A;M>Fqp{F3i5k za1CKyY%qTGyDJ-?lgM7W+^8M&mX#CFOJtid$4Ym*p5m$vv-sryASt15Y-HkhFQ0w* zAwhxlo77*ajY>*6oy)`A_;7?bYEBtJ^|r!c0@wAfzZ!c;ICEQe*+S5STI&Vo1--ZxjSkTmH!&24Tzefh*qCY(mL*N@j@$yu4+d7#3bh}l;> zXM%jFka%*u#o#_i(>h&yj8Lf2@BNe>8i5J|q@9MsgUxV#C2c+XGo*EZc0aZX=`C6| z2PTff8p};y7qYam;N?e$97cR@c#&h-IC_$-p;jIx>oy|YO||zNs0oA3TEA$v+DeC5 zE5$+*OBKHLXb`C$JJV*x4Fw6>+*Z$XTpcoREftzlh+}PZJ{nDb71-*Wbj>RWpX=9k z^!sM3-iTWhUgi$4qzX z2EZQh9JGLc4oK%K)Y8&oFboq*u+Gd%s1nh>V zq|guT^<-(OXB3bKNx_|O9HSu2CtegylbR@=0Pery2{m{Sc~{FkZ8dsRCqC@Sxr+sV zJPQMmL5fYxH|W4l0X^g;2{xFsL5vsJ&jIm9*{L(v$s+5C=UZNX0n<64bRpaiCuM=N z1ya{CM1Wv8EG#U*`ym11JRq^L0@ybO!2tbt>F`0SC?IMKlINNJ67U`yQ(O`)g~6jF z+y(&D?lfs!8oS%*wiOA&`2kbdVOtvDL{es0doAksfFo#CF^i8+Oxq0RD=k%QfE-+s z4*3$4JVp00Vn0mJu{PE`bxcj!-`DNn12$7D5}EXq{1$Xc-^Ww-;<(rI=y0wDgy85o z@<)LMv4=LJ)0D$an=o1c?SgU@7o(%W8OxvV#7Il~#+(EOmilJhb&eY&8{gPN+6_S! zA4Z8P{+UE`p31{yK)Ah}O~GOa&|3j*21F5OD#qn|uDH_wbvoO~L*nErk9Z*R(RNqb z{0jKk(tAk>4lm1)ZDlhcgZ_(2k%~Ybd+KiW`{O`QgB?!~wBd?QaqTyR z=8}aBg%Mquo%rH*Y?^w}2O?2=aEpQ6QVXPQ-QBfU6piMQq-?h1 z3o7jn$u3*r{ye+~{p=RKMQYW^#$XjzyYWH0d$=!d*0vnUW)>NHVsup1#A10j@=)|$ z^}-QG8jtabrd>Ywmrpe3r6YGX)$X&GhfOHT&f`}5Wrmx?8yu-XA@iW>{#qFOYzWTRjfbvmfpKS z1f}BmDQ_|y zK&AXt{b0mb$$8VDsE6-KlSU$9(P*02rAbak;z3FtQjt6OoUgKS9=+)}g>8F|YexA@X1*GT(IRoq86GGxn&&*LMHmMsJ= zP>qGra%zEnu7>3Go1{zGeDc)ZUos_V21^`=MpG%LcM%72tUS&MBzoxXgS9t-)*Igo zG(@&JF#SXI0RmtA3Z|($?}rqv^zA+Pd?Td6hA&ylz=xo#mq26>mKt`}2I* z^6lnNCmTDYqpB9zuAYWARL>pMYK}(fS+stcn*DIpXgw#_0sa*q5?p8WS%IY|ZJ;`AzZq3( zOjfO|yfRr8X`Uo2$n{PW21%)An6kL2kNZnDfU$bdk<`0h;T z?>hGOiQX#ZdYc(%Mk~q25|inSx&8I^V1_O7=Pe=|qopB>CQt@ng11m}odHyK!Z_4o6B<}lH; zJSCc(0WC1r>9J14qlVDc=bhrEg$woPSdxU)ANl0TBKsdUU85+%EKN!UmVT9&a)FBo zIS}^NR;H}TqrD%YW`~tr(VDGBn=J18wj?R{?wl?^4mL(wAF3AED%&!s5jdc7mt6J+ z)9&qVHzM>6X3L?2l2ZYV7TFY6h2`F!G4gbs1$W&b-<-0Fro6d3)y0%gClpCGInVd2 zIN`MC{?U@)tpC^U`+}YyQBjP#&u8R*b$fU*kw0Rb?*8Cwgz;S&kw{>nquO2XEEZOu z3&6XNLb2jcK@*;<3FQB*qIFn(TK+y29X49OaL~wJv2@FDYFy{~WX3J_uru>~gD8SL z9su6j?by)Q^It18vNZnX+gp6QfI=wUd(Ou~!I($4%Rt52GHI80@o2=T=Ac=$s4FY? z++V?J8Ui7mk(YY>(iJbkpG_pu<{C0NTwDZgBPztPVl2+Y>f*Be1BSEig)k$?KaCNE}G|mTg-LVIdmSMoW3$dBQnuM zsFfAiXrG{cFkwTar`Mr&a;s3%fkBD7^_!5RWdsk+UYo&hD>D2?s{^D7KOZIZnl5uo&Du-_stJw>*9}#9lr__4QiB@#XHV_HjR&$mOIkS zopAKaC+iosJKP!kdhMI5)7^@>&O}i)jHUD0j?hQa{qO6|j;S?voM~Mr z$(@;#0ri9rUe_R_6FMtSzQ$G5zUL1W7O6aCOZAw+x~gO;;*il=!=SS}7ENj*u786k zVm&CL9bzQH>2gYl*&i}om9B&JR~a>|W_lo!MMz43eNjq0m%QXSv}&GJac zu->22VuA*5xo-)^w|-5fhA7Hmj~>97ww6W1DIh&sRPJTTeJ~*##c5+oVqF{uT8H_} zHL*D>&h)b;f(*_ykdL{-oCaE?=0Xjbp=v;w$Ak!^o@8X*;)GN$Aji(_51 z1J?<{Ag`P}{JA&y>l{KqUF+W!_1s?J3RZ(*iR$M#MVQBNuou;|Zj&!g&o3rujSW@= z?A(vUNwSxK{~hoAIcmZ!;nra4htJaw6fOql=N3ml9awfEAl0SOXHRg#ZfNRG#KUCd zkMH5Y2ff=R;;}}j<&;u(vu>o4ZB%5dJgB!+W|=08UZ1U2DeK#hbpuTyzLEG01xqK| z%Iw7`o*!D9ddkZKHR9I_H5A);_E@>I*a-#>Bh`MgkFEzP4BlHu3h`b*Wh>TyN#csw zirCEIvK1+qPS#3@1eO);KWcHfMt?W@DKBAH6^}WUOE{zSRXO(*3UmrbCfV} z@ffB85{brpJmyzO%w^`S`KixV21+G$+>1XWGH}{|{q*m5-F)FzV-9I&~|HLO!Qm2-X3N1!m?Eba!<(n{5s1U zVwp8feYbN~_`lq8cRkFvN%7r1??5Ld6ju(R&c&ly0 zf39Wmbv)av-C`6-3=c$CLYyO%1uUls(|ATB9i5?_Wej(JbazwQZGP3ufq@MKi)nYi_376) zhS82qz13np{Hs4#3j%`K@!vV7b*{gLIo)hr7MLkPnNzoJH5)tWKA^L~4rs`bE!1b#mI%4c&LN?wu|ii75EjwxCmlkw zzg%BY=YGzwu*liY+#~UKG zM$rmDhqp~#B=F`Gd-L-=Mta!0m@0eGlxHhlRagdL4jY9i?rp^Lt^udi+2a<13bQtA zt7RL?y1FTg^UYVUb{ktZD=Jv{!r)a47_zT3Isj_!wu%N4@b6(sSSJuxJuJF-@V@G~#FU-d`Sbqvq*4_PhO4HUYD8 z!;Jpy{Xr}APTEi{LH1;1FXs0(W}owprJ)N-1=8L2@|=&fN7RRtw!|r_qMs(j$)M#g zf|GBK=4^=vEou zHil-H3Yd>(pDESJ;^vXNYn<&YE%@K*=dAkh*$44j?pG_9VR9G9<&!p%tEIq4wy>pX z;5(rkw9s+e9d+J9S93gxUu0+3-VXFS_}Tb*9(s98sPf|ARo5*AA=8W|y_=xgvaC+n zlcDsJMUm&I$^~@t9rumVE{rR&ARxILB$MzSHQTj#2?McI7pnYm6)SB?lt!TXZez|_ z(YULg8jbZ{L#N?FL*_o1z*vOXLb#wF&1}$2y)1jer^Rtl63*P|690)B@vDlK@lQX~ zjIsGt^1v3Wi3!@eJK1=IlAewW?WS#ws(z37DtEjj`|8qpX1-8u6}49}ZOGY+d+s?= zVWx^5dZ%-7DNC9>vsNsHgna9E?zd7)fw3b8jB1xwq<70YU@Ir| zEynS!#7Yi{voy(dd?GkjTQTqYuw!K`VTsg#FvmdE%S8(9{^Ga~X+zZqY*BG%JTCZJ z5_BNRLj3cMVxwcK%ju$Zz_crlTV`GNOwPOcCC$Lhyn-)o1)J;6{N$P$RXkijU$~n) zCdJGR6b0|C8@om%xAjl3*YJAW8&qOE^7re{AJxsTWs zqXu+Wow>voo>_ABI4XAcmEmFro_tQ5lu@Bk<(VpNiG-6?6YdM%;KoChrK$V+%bugE z3)DI@{)A6mXo;q*j3;oIm)*~Ct44mi0?)tEr7Xz&uQ^WVaQe+trhE66dDzwVM{R}a zK@gUOARR!p0KIs2WyPg&yd3?m(B|~<6Iy|AVROK&o&7%bTk*n}m`%_sW3pI=TDIJni_vOuQ< z)Id`G1IO$OKUD;8R5EHiz{FzA6?%vEYjQCp*!u3pr9Dv-X>xd%qR2MT!I>S%srw#eE^#ia3Sk2B-{6a zIh`>`Ypjo@Nx!t9uN&r(UcP7i?icqDa>Wnvhb}s7Tg%#xo6umyWLhgBq5AG&F-vXq z(a4T-(wCzJJ;x1hrZNYEn)_jAP#0&m>SC@ElM#p-nT7QFRAp3GGIPyS+5t}P4z z1);+A^QhmI=g-Ks+1IF>TeVN2_h}{m@;4i$PxMn4A>2P z0s*kNhDHL1jMT#Wj$DpQge=m|9|D69?t7wj8w?*@3Q_i(fLt%>tz(S*!{WJMgHb3?5n04XSdifTLtu>{Xc3-;rOg#{i|g`fso<%V*ACJxc}XWqA<0vCh|gy1($;A zpIsMnB3P)!L3oBc53Rf>ja|&}$D+>q+&$X^BD`#qfB-!^}92c0gaVLm~0bBc- zk^Do7vW2wy+_8FAjc9dtD9DFv76if9<##f$*o&4_C2RW9Y3bsPA(_|UXf}xaJ?>fP z!8btc4Z|>BPK?CE3Lw^%K%&@LJOXbg%9caI*2C(#NnM#Rq95Ro_3Tn`2wwx4yeV*P z(UVUzvb*c~cRDCs6tFP6{#;i5;F)?D<-s@|AoA?y0LUZ1YVir6;QQT(%%{j;5FVpX{mrZcpJS0Ult1{6@O+L#J{*wiXBom>owQ0yf^k+xai8E`yRd%o(TQ zlUO8G)tTYuQ~oY^h=_-oEzZy{PhQ2q9wuhRRFpL0gDI#I!vsoA#2#y=O=0>ercTlC zpIV#qp)sgH`WYxJKSOFLQ@?~ba5Q5?n$k-oXO5)oQbGSpY0Wg7U|2l*el`o5!2PEkKDQ3)4coGP&F^+q zcf4z7Wrqgd=T%_QClV(b_S#s%wIkD5fx_&KADl~jFQbXLTHn1=HMDg7;&{TY6Pabo zxsN%`K&|s|bncsWV3GTUEu5m6N|_4Yb3s=!>+_;yRe`(4`Dy+e7Mtlx|HsFW$}r2N zoynBkWkCI~+VYxBq>^9L)&v|+xsVn>f4X%3TQs1bMh87A@CK<;{Y_XBc2|eTq#6mDHfgegCC3BDP9;1 z?0+wi-Rbrsh5g|JP)j*6bd@3dm7j4xtCsbh7FwG+r%@42R&wAEnfly@wBuna5Bg-T z6;xaZR1}dc7)tMYRwvI8Z@Zk!ey4klu3g{RBSeS}YWWX%LXzOiQe_=Nmlq>fi~++C zKS30q;(eo14r6#~peb_^Wm~T?r|9}8o$w%AU8!g_(b?}@-?-WPt%oBnSqFHfIG1P! zh4S0w49kS3*$4O_o1;*U)0=g3S42l-BBo!HB z%vdo?Xf#Lx&oBV|-bv`|1^jkWAzM{>nZCIi+ZsinJ^-+m)$_SVMdlXY6E~OSjVX(rWKekmeP888ZmD2HEu(jy+8$3 zrbOmLszK?(@g%%POwFR@!iwOAcd;@=i zs-&jmjWYod?5k%WY)8nBEn@Fvy|IQ4 z0jzaZ0&FYCl#Z^7iMx%So{9U6(BWSd2!c*LbTe&T212hu`Bng}M0fNw|0-wp{Th79JXINH}e9+AB^SVtMUj-%4Z}+sgT$*59ziF)Tx$r%}}rN;OfKt3#)Tzt(l!=Ac zONKKfud*6)75^+UG8QQ(6mlWRL~FXw<}dyC&ctZbE`=&UM(>uu52-)JQUg)+y?^t& zFvJJ$qh>k|3PxlYFO+?cB{zCBE^DF(MD}of*13Wmszj+QE$O$YH0m45M{x;;F~v{Z zyYydw(HceMjN+Y#Vlb2(!?>L?6U3>vpp?UsiK~zvAcfnx`^ZA8f0VA zpVS7i$Yl%V_a$Gxb%Ss=-vuYgd2-aFp(OeWRKN7Sqo3`V+|b>d!f;Sr-Z~YyID^a z7MmFw-6b9)pgBohMJ^Ykq%bc-s%w!7n0AVR6Z9}fn6{?H1f)ch7&rw5eI-Hk2vH)x z`|-kI2tKdC6j!>MycP~rzhM_TuDnwJQxRy`p!maLs9VvD0XLa3=n%TXS$NUm{WVm; zxM93}0+7G($T&RrDvpx_;bo&im1{sQ#s07 z(t>6%+4oq}tOGlwI;m}ohOcRcgr$Bc)J`tV7fH=iQInKd%?vY%o#680lqK`zMh zBVaUv)>AzQF_4s*qbpqu*g zf)@ond9TOnAH`R@dUV!9yye#Q%q~vRS>g7%Kp>oG=ZJfsYRGT(TIV-Ix<1omrGLpM z*^s&g&|q_MfkhZ#Fwl5^l@o;=LVQrv9xgZbNw;SGu7#Ea3C3C`^Rojf$m9v6G)Je(#$eVOD69nnff}7ZntPmjrF^Il5YceIw_!&x`IZBD1 zyxJ}^c6umZ2qwL!4C8&h6CzSh+);7F3c9B;cg#6&O$^m}T3*xFW@*gme1;9+BiZ%N4*Idf|I)OYmv_sv zpNX8H(kCuEgU7X>=Iu=!oRg5pPW9Nk{5&sl*)=SMU_A4H^9Lc-V|;2;P{sdG{^*x_ z*xEZ|jZhB8z&jUAYm-NTgYes@T`!{RSzUi?ZsDm1SC1|ggnf!02(`0Zh)p`{b|5#$ zwV&ZW>7sXlg7+EqJ`;I?f@klpLtkOPen=aBC?roz4p&v+R?!~fTxls1Hl`LIVPiq_ zWdOq0dLNnaoF!7tz|jps8Ip@xd!BCv+jT*h7eK!$z#*^l?~rd9Ff)17kf#;YRL@T4 z-rw1N6bmqsWy#8K`cEY8;tJ*%N$rcSOAb=HSLCH~BKIig1^ehM zk^3suo|Ty+Yi?)$8_*@eS5({QDli<88^3Ld7*qyV?!_!^UY@-Is zkbSupR7;SUAuU`i2?r{nHaNzZ#Z3X9lqZoV_*$Xc?)UIo;fnS)R+L`Q3V1*NQIZ=n zr~kAhF2mk|7L=3)Kyf7tN0Pvtbfw~BwRffxPG^-X;<_>2HXhk$g@ZebQCFuw6W3Ln z3PG_XKW5=va@E~}kH>yhN!R4?=Z8QDgugu+%`ml=0_ZVzgUYMtY4S0ZG<%aHS}ABI%}y>w!dNe znSaXxSjql#>1r-{4wg*`spCR|$xxl_)><8NsZqJYL)Ow)LH`hr@`%8c94SuxyaHq< zmusnQr2x(L^JNhbq@v-o6+4G#{czbR-vPskqFz$gsyYS^pyP2=@1o!)k%> zhyG)Q=Iuw(67y+M20IfD4JABOYJVnbVDC!XW1YDtwq%+B06=V(^w5^BT;jad(Hvt^ z?_4jy3TQ-+*vFrjDz~AZEDE^ z$7^rW5wOpNOMmz@dg{XVPd2wm7}{~uRPQ&oxBQA0sS>6RwRK-Wz#jd6!4(x|&-sV4 z_uSx{_m5eWy;`}Vf==iNNZ0jhR!{7Q=Cp=t(Fw;^TaMNh`M;r$#P>hv8s2`Wt~iyn z7Pvv35t6n)uNnUJW-qnNS_}Dh#?&7$Aqh|65ach(<(nI9Hlry1%cvJ@|Ch>W5Op3x z0_))93I|W6Zlr=AL49tsX^bA<2TkBii9E()AXr_}xNDvw=mNrWY%L+c%I5j;z1)*3=J!N?@j&u@;{@t{bXU92+ zqPHmLTGN7LuQwXugoe`{J1V}p7{I4?zC~fh{J9u>Y``Z=le->d7udKlvgPRpgRrH2 z#(=E-!;sD>DWwiw6Bmm^5!(@(W0YqoRMl;nbW9ert~O4GBX&wuB112zRl`9RCHrT@ zdGxbMH2R8p|B!Utd1uHGn$hj7#U57xpN)|!1D+3abFqjHQiYmPX@ImVq!O~Mjd{?5 zUsdn%STpQtq*+UxxhMvtiW52ovq$$cPdKjpG=aoyEUj79k&c+%q0FK?lU+nY7A{zD zrpNczGQTxn?{nkcA8BBH}ej!+n3_FgL> zpg$sE6Nq;CwDNimQS*Plwgdk4ioNk673_Omg`neAt`A~uifLk@AXfygN>J4zaKfm~ zv#TQSYVWRGMjPD)J8bf9d~4`(ex}1Zg1zeFaZ`b7+>~pu|MAxj9rafd&y^59%&4xq=lwHk$%g; zX1}-t<@0CxEu}KBkobL*0EL@pv7cTR6MV6`A><{0g~oPYtnVjzXIlt847w_vSiZ9EFtj^;61lfER$q3G(}FsV(}z~P4XZGffOWc=)L!XL?Y&F-#*e$z6xcadYL_Yhq(KS z4Pstr+>;`&Z*hmlY9#`};Hs(CuVX*;Ya=pFMd5vYvOz7ddCUH-3nJBF%x|}2s`%~X zhL6XR;9Vv${iE)VYkETmN3pKU^&s|a%Xw?iJH)^iHT}389Zc~6y|Z^zbVNl9NXPj;_^@>?I^}cd2=oj5!p60DmI0$a$(dAFnlV}( ztzUCA^l6cT3XAK`)0zWy`pylV9C*<$JpK&GuTUM$M7fL_bW!GG-a*~T{H%1?sY+rd zqd+N2pT}M*u_ISK&f4R|%Flc`QIM!Ig$*AyBuPAOHxV7KNJ5FmP%ir@Icy$wgJ;>K zXFe(Vhzu=YM?2(JjyYHx%8!LXSs0BqR*O-rPdy}^G*w9UW;~Klk*-{gMIeCpB?xKs zD&)QIVm0gWn1PQ016I(`_SqEWXbqN#XZ=mI`Ft30D*&##F|Fq-yoH!TO;h6x=1dQ& zo?Z*L7kcXkWO$zI=ueVSRocCq-e*F;Z+HZ)u-;1>Z9LOXPY^{`n&W)EeU$751!ryv z9v&^z=Rl#!$5)760_S1F8|}3ZBpJ>`NlqH#{a?R=u9D;r38JICjtc|?X~e%C$b|hX z^A91stHNg)_&sD&WJ>IxOZOcR5EKv!(h};PYiFB2+No~c@9*?m%m^}df1;B1>tBMs zqh?V+IL=5e&0A+CwT;5D-@bn~zMGWtI;j9H*j}@zE~L!G?*6K$vQF5FrT&aoq~PeaoLIAz(fmh5MK+59{~ra+tBn7b1}({dnwK6lRpgKS zuQHP2i1A;_2@Km5|K0Sreu@857A_7A`7d2hWyJr#qg@KmW0NW1NcCSRCG;!&x6W+}pGMt4u!Zg%^5l z-svexqvO3kW`fEw`}kGc;>yZcEd#GG0hfcVi;DoO(`L+p4lj;RM}ofxI1wlS1}&c0kacT9KklBIR8g&8$TYic00TMik5_6okXjr!l2y=`o4JG- z4D}L8THqxAkJGM&Yq`0(-K9DfW^Fqj=LFc`w9+`l^L}qRWcr3JRo8=g(+~0X=67df&NY|0 zZ=z55LKnLghy|r5jq%`PVtG?LI5ZXI>V3u`WzQlWX8EqwT={V2BS<3t`JN&Uq-8~D z(t}Ag2SX@mK~ut+h^SroTD#deTjDcssde`=lz-VpZ_({@Q}SmYU{Nq7yhP=vLW%BQx!ipD`8`-2SDk@XsPnjF&`&w^AQL*?Hi4=_9MW zg)X(&2VHQFZ)g3W$1N(!H69lz@Ui3-BM8lpHjoy)y-58Zr~KO_cL6V?S|>E1GG{=4 zTvDNb+V3OfN^VGp){*BV)|Dq7(x@Eb2Y)uA@N&r=1=LLRL4$MWOT4`3k|$VeI>0tx zsgG~4l@nMe`64|jQ0PEG*;(e+&crY#IyN`$PtmmE79c^#HXIJaek%6F&fZ(1A9Lu7 zahR%Qu>J8I6WEyf0L5QwlP3TgGKo#GdK4Q+omqmbzLn9NsraWnl*N2kuR?~x)7HE9 zVyTI7=-HOxoOPC_hPL!pGMMwK1C4cj4Wi}9j#(@f2^?junO%}+GPaMWR!Q-C8(aK; z_lC4%#OD1M6Sgjx(RUk07&oFbwNq#Y;SEyVB{7ZZcIvCb4MIFAoPA+;| zRM|;a`8sX*E^BD9v6vhclHJxVp))rc^FZuJh`(6)IL+5-G(Ma)Hh%`tuzksP*TR^G z^Ki=5dO_XQ%%>$3>-H>5{4+AO*m$9ji|^mUoa+}!Iu{pa>cb~GaAZyTziUKi`4T09 zQPJ5hR{!hYNK#yy-0I;2)Y;r1m!JNX!N;Q`gsp3`?p!r9`GSraY89%S)IHJHSy+=I z`)0#Fa+xXqNK?5~Zu+9H$>R#n;vV0sT$;&Ta!re_X>_rwZUNtAP3lhH!m|th>U^Gi z<3joF6j}6g9}v?(-7R32_CT(HOS6Dy8 zx0DTarTvv%@!9q*KRGU-><%TW1k&Nd+fV1}iAA&&@9Dj64XrHa-m=W3=-I+O%FE-BQegi6MUkALed~$fEQT7DO=o*gDr=5= zen-~%pf#R zBp_RkuoF9v&*$3`mO1emA*sqqBtTYZQUR zLRb#GwTxQh8SBCC;=CASfF=Wdp5oZe3%`NL*G0!SgWuKkGwL^Ktv4vEg!B*n9jGU- z4{8=KO<2SR%#jy; z4wl1vb2*8pBfIJO|IR2vKcC>&96A#t{{x0*Z`QOCjQa_m>>Yg z=t!|GS&k-}GH*Di4bCYJS3Re(9qJ-Dge*9<6(VJ~pd*`1Ops|-JRC5jrD`Vq zbkA8a1oPS|(Y^yclm*o$W3T*J0S@~*?g8Gh50#AW7cC9k9YRV2r?jyuz5_)~maEQa z!4v+rc{s|h7dOB!3XfMNSYj2GJ~eHRgWZQjJ*ERS^bBt=>-SA36kr_04#9>;RwMVxFDleVo3w&~K$&r~Wj5|CgYLd;`^;EhqELMz-Na)HSruwbHSon0Dy#cMWiX8=Cd1v*t{$3+;hF=;@C`4xy~FrhP8 zucg}l6t$W#i4Ih5Y%4}l!B1}77AhvMF`65etj`DeI1Tq}h@wUPPneazsqQ318?rnW zxqvX3e4B1!j{4;?MB}fAok3_~u};lri1G>2^BIeKrT>XgKjR2hW@I|4v8Mmwdr8G* zM+Kh}^%T4WHU`h1{eLDK4bxyjDa)1jW~ONuxa#FWO*_8!pP`1>6x;s~SzwvZ)y zD}igb<14@xgqV_++zLLUtqQ*Ac_-`G^!HkqP&KsY6EraRJCaothX*ga52JJ}BB=+>( zlKhitW`f~>3mkB8Oh}J7zXT*Se?$yac+_C_z174EU9Ot$edBAmFSDodg#KerbIxFw zjf8wOf$sue%Uy0D!~-@yu6aQSMpnuoR1h;5T8ZLY>;kIj6OaM3HFyyF%%9Kh#%`F) z7V2*fy|D)2pj5h9CcxQZ&cabTuYapd}4=Scuy_zR;{z zWy%_Nv%YU;?)s|bBZinU*b75aQy*mA+RC3*Y0+w zr<>CkFO^Z&D!CoLi*um!!M)8VzM^T|<*9h1HlVnV=5SZ4><74Q`iKH7OY3B)eS z@?^P*T7${ooA8hoFp_X&>==&@?QrJ?JEN-Awsg;j!Cgx{|HQ+ISf%SwycqjA>fNXP zGp`DI^wId`@O^0OFKp_9MA`}K4Fd6CW1$P#+w%|1;(Darbg>24z(`(z9rew@eicB{ zM$0U`Pt;=>$4i{I!`Dch{1SLgE-$u`HFs%z+yk~Un?@w>mxFD^O4%2?+;3?b&JW0? zt+RO1A=>Pkt$0QS4V`6O(K&h4jksy$>Gz*~?VZk-R^?L{)0#+Q(^CkQ1uI>hPPS4S zi1TEl>*KJjAK$~BabodqX<Ql(Ei%Iz*xcKj|cj4kD`BRlUZa#3R{f+a)#^kT^vB)s3j`~ z?{%g6)WqZO*5vWc^qI_;-p3GJl9wgiPci5h7PZV@;{sJ$uZ6{ud??q}!&We>DIA~t z<+`pbw_^ONdAaPQ6NYPa*V~edboIe}RzHv}r9Hn~1clVNbY1zkr_}X`DW9}hvU#QI zCAoi9pZyWotur#FAO_E}22ZsoINZhA`O&HyE#_F?mZ+C zYB<>83m zyO3usmhW6*n22J-@BFUoI}oT zQ{>ri3hwfk>R{g;K*GyorGB)@;Mwx^^Buus0@>l&c`PxD++f4OHC_G^E(6>1)nCsl zjwLH9FtS>nWdkwHP6lK1Jxsr=Pq&Y^>jj+;V(mdcSM)l??}~r1VcjWphHdG1ElQ*@ zwp%tnM#O=R>n!urFF6=n$OcSSzpKm4TAiFpI2(BMSR_&9c3Q8+*`$RI%}a{qiB z)t+2#&FQP3Afom>3p!%ec+qDER9-8B$NTpdCt5*% zl=>H0xd*zIFNo;Y{y7LIci06;j3T*6j!R7msO(gwsP_!~K-E&C!C>gge8cZ-cVRp$2UgPmc! zp&CQ6CARj=kgGQu*AOa8T4axv9d#BfL;yhLVm3UN} zh5RXD%if(N$=OW!79&~eZ^aHze({xyy3o%R+~ph)?fvYQ)7h1OvEP$k;q_l>Ycdzf z%Zr}G{_VG^1J$?cxjQ;PU6{M?z9FJKN^h<^g{zc<*=&AkejiQH2#vTdfl}&N4A*A=q>dk^YbOaW=A-?P2hCus*3&b1WgZT{dk2=hQZ$= z;H^`SSXL(@e7&mHSJ!xpd*la5U5-F}|KfOocwF4&&Nkrd3zl(}#t9wDmoh3h9K~EJA7Agf zuyYc-y5Ai)Z)vnoKCE#2Ukh32e^?0ayK*(HjABZA`9GYzr6;4mi zlP^%wIi{S|>u~`MFp8}qvqFUERz{eX?Z5W|p`*yu&Ug|;q;tk7jKAZh;BpYb0X@PIpc0TwFN4I&5 z^c7D>N!zUe_s*w*ybb_?YrC#Bd)u}|{(#WCF8wf>UQ$+axSsuRs?*KCrN}Q0+)1!B z1~;r&FDVk?1LW(s_uAZ7=`FS<#hhLXSL<50Eu-T#JX^sM*wMKpuDtW2*7wka{z_F> zhjd!RpQl7OmA!KJWAwDh6S_uwhQ<{LJNQ97?_Dg%^xe`@^TeTs75@toa-U`?^FN@T zkJ*ZC>A@n4FMRa`-%;rrU=@Tl|h_htfiR_eNQ7Q_|wS3*mcvdm}B` zISXUfv$Hg2*xHQJz<%OJX#8#urpNoVX4s#GU4^)2INgew`(cQ;ii{1marvRR$=^1M z+bhP^g36Ph?62y!|A!2Mf6d_JpPz3`eZ zGZ|LzTw3gqo9KKPEI{0e!3Lb#^zB$kr)dCS`;0)e5{B8d7GW-JSqz!OXm0#eCR^kG z>#g%MO>8S*x1$N=RM{7~yT$xOS0kgSuK`BO@`T@x`@w__nFqTs9oNEiV*OH2oHj#RI;+k?V_Z8fFE0^3(ZhJH2|^ zw_7{PD2Ia<9g5lkSce?*6#l879T&u!U0y!{OsaJgkgmLS=f}F4E8_(!-oW1ekARJv zZ19|AuH&wF0@KRK(6X-ZI_PbzQ~U%K@xX=p>1j=3XWJV5;gkE4fiHTr$xHr|t9*s zqa#N>PZ+xQs|?O5hLwhL474LL3ZKO$VsRr@{kEY*L*K8xmk*W3qYPhpbh|}$YdWLl zeH(r%j08>jS4N+Et!4$Z9?QvAReB_R0H|YvgDWiiXK>*W@SJ5WCBTLK{^8T8<1iZX z3ZCa(R}S5zc&^h}t<$t6t9XV;ox72pZ@6wxHlr>;BjzX{rVNLWO2{Asch93LRP2g9>4# zzVN3L`O>rRzK$~&>k@EKO(gPs32uMoMpkp_*+AFp71-!&;b1eGgJJmlBTi#?Q9k!7 z{9fK~c$St4satj5B2HVZPPZ}t-`$1ItzDCR_(fj z>DnU}X%!+DA#g>sqHb=ol&??cx}S7_sCB*XzlgAQX6t+fjo{nern+~K zegNNCSXiv8m&FgvU5BJUu2WWivR3+DTEOvsr+h;RsO2NiWi;EUW5lDwuVZgR5cI-4 z*VngPP5aZr>l|gz$L_R6nB<)6>-zgHTc!hQPt4iZj-%mRV*>E~?^#vY%xKKEdP4^t zS?g^vZ>fhIESEbD2lXoM8!^F_Ok3eo|25<6wgq1Jv%%x}AX_ACLqM?kIHHB0{znQE ztZ>1DD}87BHN;bPawSwA4y&9aq_5?bv=G6>CrB!=1?-%unY!uAx89 z^-H2i#@}SJxf63B*L-VdyAmNz`$OB#Ru=C-*isU`7m!QyXh@Gbl5a&FqD{Qn6{lEt z;G@({%UiJoUUJ}*deL4@8oz7LEQ*R?So^B-l=xNl9mH6iKp8vnl;w73)3 zbJ2G6G)(9ffufAPMl9aVRpEQ2Q}eM~%?ZwfBR?TiGSP4*JMM!vOxP#k7z?9KK!K+4Y_ zsYDlU5uR4^X(mFkIhG^dJcC>SJKb)fB z0Xsl7!F#;qk;~T?p-qg5#!8NXoV3EklZ_5t)rggM7t&-| zSgwtYC9$5j&=K@ryhqaP`Kf>!rd7u)AD_m~Y}D?sT$j@~(F4J9{nv_T)yOWEKm|3C z(}i&!o_`}Qk(3{7>xngPNTj^nm%(~3cRVO1dUT6Eqtw5&EU&l1-WR38dHVdKHx}r8 zyLkT)UTycD6$t-Dnht*Z|H8N)Xz1(fSDE}bN2~fH{QqZR|BJK!KR|dRC%oeP`!2x$ z61rsnC&_Oui~hdjUbP+d^C&%Q4HXhvv>XjaB+NU+e+H7+E~u~Op{pVOq|~7EGbaL@ z!jV9=yEDfM(_*nGlGxb*^>7>Y4o#MI$Dw9qR@;Gbr7l!J>1%BoBn-yYpkkT`CrU%Y z*tZ4x1^R#cUUexUnu;^PKU&~085M%o$7}a0(^jNB8pmoG&?1&-nI}fB4eR*x?qGL9 zh4ssJ|!sZ2GaRtC5*WzsWd@z+6h@Su0_BvjfF z>p;VxL>WI}H)QxmL{R==gkK^(mG^CG^MO#b)mG~DW>2_9UxMzIW&;j0nc^%Z-5;K= zL$iCjtdD4gQJ-L+VE=o1dvTkJzJ8ib9v~vSPoQL->niB*oA&k>dLkn;=&XAb?|~e7 z<6aW>LiZ49%d5n$^35r<>g4z0#y)HTkrf0ZooBP8%gf*55Z#L!4#&pLWpDfz{Uu8I zPxDZEYKZW)!maV>_^K4l7`^y6e_`G(XPtlRwl{uB&7IIdzZ$2<9%a0G@h9=YdOUB9 z@T4B!UOLQyU%t7Nx>2apEQK9Q{RM;pthGm8NkKud-$n0?@-^4lx(1HP{n%b}X510rFCz9*45p0Cf`Ns~1nU}2kk(TIrRj+~x)cGGgPs1$KL z*GW5%WqFPn{L*H|qY8)FMgC$!z1xe4gudojIyts~;@2{K^%BmXr==EIs``&#L=qgi z+6fmY=QOGEB-&mM2|Ej`zF9yO!ogyHaZvqHQW)4d4RA2&fhX3@_r{qQy0|*CE2g`k zzR9IEBcdaQiu5!Qm>xmr+DLg)2xO$cFZ5CH5lS39_pO)v!c54X?{tg$v>#griz^W8ozro8Q zA|odQ*M`Z-;y9Ig^|nm=H`t;_$AS9}7px{3nxOw|rHN=eC#w7@XJ&Uwgaqd`wn&*% z{l>~<fL~Q0m-xDzVRnC~sjf4UuA4p~AVG-6;8DGqMd4aUXyW37anN~R_Uzn1xat*M53 z3j1LDfMtv+tOptgs-g~E&!bSCh@Akgb`0Kz@qqeI1(^y3gw4mGLJ`YSYLVLYdH!{j;Lp z_T-7ifTTRT-M?WMkO;k;p9sdcw5cxQP1HlfAo9_^u%0ja$9GQ;fU77<-kPZJuUeLO ze>}eM!5`nqaa#Ip78b(;O~5V#w}uM;O!Q7#h4=iAk-Xd@ViLYMue4)KI`kSc@!P#) z7zfoNf5k!y0q9feU!e={fYaCzyL`VyDM@L9Vl?gWdy!L}dNV)jY;$OJqm~2XmV?A5 zJ8F!fdeR!M;>;iE16jjQT81X`WO9Xv{HlA#B8d@hszlj=fkIf?ycf&T_jVykj17tP z-lA;uhdkO)<6cw=x2Q_;z}nziLWi5Rh1&KYB_B8&iwTS5rvA&khUWc`4n%s$MbgDs zvjT^J^WixI#fO%)!=;sDXWHN*Z`@7&yAD? zgW+xolN!rxk62heky-~s7-!oq{OEr!uaTMLIZB!2{K<|VndIM%P${p*JF@&z0~L$fP9HYb}J1}-|h zTvIpAOJjmltK8WohCJ=dNM}o3wk;s@=XP3{*t~IFWO@v&nP_J~V>Hj{TrF?AYCQCM zpRg_b%}3unY)=tb;0fWpSoDE2sgXT}=VRjW&{?Lxt7;c76DakHI|TD{G%2QRLM_W; z1QWN0jH~~?B?sz=PFHvS*<@4FcV$$pN+y%ti6HtZd{hc09v@_8=sz$32_4QWFA0HT ztF64FH5ISnYtGv&Dwbp@oVns!up;hdjvY{0pWJpr>3=ozLYIsh&eKkxSaQ)3Awa%z zS=u<}tj#5mhmV?s>Zb9t!JQGkrmBfe&KOA*2u?As|JC;j((W64WWZ7Pa;yonnrL$< zcdG9zm@MhJ#X#?Aoo~3X<#KPHCK?@lB;K@@!qrYbba^j4%|>A5n|@rhri(W;$*}$L z;MdR=kmlpIFMKQNA`2XF0NPS%+pfT8wdMEcc0TlqyfoLDg>1jFZNH5w$+LA1YUpY7 z-andpJuIeeR+x?;(W$syh_a>JR9JzUBI<>|8f1;J(bv$;1Frmk2|I{EN&~P>9s5<@ zG8eDw7V9kOQLj<`b|R5x11SC>HzS{`0ijYFtk2EFB;W+P-;+=bebR#jEV(Ho-8HCC zqOTxh-=bMJTU+lvvIF0r5rxz+(dUGn!UB2e9{g*qDo87$?^?oL0@ER(K}@Bh&-1}c zex29s3^(Ma-~7kLOx7<6Y&dhPrH4LlfwyClxPrd-_oLfZbu8DDEKOvndPn(?H~0x= zTLPwjQ5V&YiTs$Js=>-^sCJuHQ_JW-BP4bz*~{(Fyu7|olPNyWWXj<84_kMeuk6Rk zBNNL`dC~Oc6$=yK(oFv5US_?lFtt{qy#?Y=%Yq_^fq*d#wFG&67(x0dfA7CFPTgRo?FuZ z&Ui^pyQa+M6fu__kd;k}hs7nq`3c8h#ydf4|@Q3u}{`3~weD9uFGueUWj~zWr;()%a=ujvN67&cKkMa_y;a0?Mis!cvOoMSD2!&K77IN_K#iyP+_WlXxQQX`D2sY zpnAK|E_^1G-Rt`12{5L<=}JI_-kO?N6z=Y`@Z207U%o#38_u*Qw}CnEaEP?>w)2ho zq4CYq&h~q2n%XEAqD!G9^0oeQow8qy*c5^0p$-)&^233u4z@>70kOdRzr@crZ<`KC z0W0juk%4RZaa8usBsRsOfZCU_uYdXZ(-B&DlRg`t!b5b2iaZf9krOW&kv>HxItdF< zhotATD`Ko__ZZXfrnk&q8|NMIMO)@)kL(GdxU*bxV9tz7?iD&*wL~r|`xg1H9{x2cB-%`miu$~q?|co@SQtPz!)iN z_i>0Tifg5SVkiF7PVv-GVt(I}DvA$+j>DA0iu+5U=bLH;L4eJstUV{6fklH?fcyOXdmvA&%to0;94_( z^`C29-EB$V+NN$0rA1`qbpDD-^^IRzN`2b8cMo}e(eo40hou^2=jS zFK!W#2~gvvtyzIMW?a_oZY=eirZ~2`s%ek3l(Xq7SBMRFt74V#T6GplQGa9?n}5qF%C!h}r;pXFSvi`lE%WxOTz zdDdCmvd8aXDd+qw5uDpCMrPUj>=e&aJ(f%cy|e7KJ2yAvZTQJq4f%cU#^u`49^$Vr zdQ@4~%bgC!yh&zd>7PRijN@q?zEthqBS`lw;5uE$ef>wK*>}}{zO-c(wnVmGuhH;0 zYa9C<4Zqy*<f4`ErxS@g{ZkyJ!YF4())#6T(=p>KwJhs8*8JPEh4+-C z2$&sd8k6PEV?AL)J@ttV(EN9I=AGA;yi3~zuO&b9|4Kw^utA9|k~B<;71d1dF0rns zowAib_s3msXdx79fr}qBZ5!kDT2npK{Mtsz-uv55v-_PX9lP+a6T>jESHr z;CT<~=y$sA92Tlv>M9{95x8VSO_o~or6DUKe&70E=$_bky-};Nv7EV7KSqP1&LXXz z_CNEQnQQW961*OhYya+HovypKIoM@-`+Y!2hxlt%>ck})&esQA)w;$YS(-)upgImT zsm=ED?86qh#mvPy1=g%?uKmX$1&-bV^BZq=VN+KYI}w%ozYh$k4{N+$p-!I~PDDaV zYGn|37@|xIZC{Wp?K6{K?Fy0Nu=|8?ap5X4eT~19uFNSY?2fG<Tc-Q% z9=b}`b!Et+T?89%^L@s_=iPTXLkLzy$7uN0T3rbzE#_@XO2V0Fq!zXdtE}3G`~8ke zXz^EJ+KIZn9i5RB?L+A3JYtkSHmC_5yF4+WH$51K9aBqnIiu0+%|AT?&q!XU=)rQy zM9f@%Nt->MSjo4u{^rm-qeJ?PPhDibcb&R=aSk(4x*JF9QFm6^nLAdKP5oV;qYbBo z{9g-QImeY?d(~VUnPvMTim2tyLaubbe~_>-4TV=~%g?5MRLnpwND@k6a{5|A#Zr&* zR5!fAAUj%c74P@6oXc<1ZFgjx$tg zzH7}d$Wh8_eC%bV=~$q@_En^zL5rf~U)w~BkFX$pv zUWU$0(KZ6j6!!i5wgHrxfCQ3S6aR6WjWHJx>r$k<=BXpBIoZDPTD{e}pTjkZh^Ac-U1YY5 zcz=l;XKMLgy*6JYR*{8BO-w8nHn?)%96NqxO60e^(DtbRxF@WC8>`_#6xPk9-PWD% z4d##4!;N?JM@Z!5ol=`o(Qob4hfqts1j zCQLIT^TE{U!HhQ)E4JMwoE+tZ*5_X8=^v6_@p>W#l*q_`f4e`eV^L&R#s3W0A zEj%cv=NTcnbxBgjzGq0=yAM_Mm#ujp$wev~@#InkK}kntnBe&v_p?&Rl&Bb|BokiV zQyH}ztd6X8x0|1lmdoQyeZdz>5sOnd+@pBwP`6e3EY(N5==s$V!MWFnSR8bVq}916eB33Rvy}&D4D8XC z=&Xh2^|BlTSTYGPm($PLa4%YEsPB?0a&N+4*kZ4RynYPqt%+R5ycIjkwvs6W7l6hf*=3E?A30Dy5)=9V= zKQM-ZX+5cG$Q!U>ZY3g|DcLpMq75xjVTFEZv|N1CFA#+75HeT(&rWqc1ne8;`+!Cc zH;*|bpq(h*-L?~0**As_Z}^kAD3)B_w58fTiZ!R`770>l*H~Nd;8FKPO+8oA;`6y^ zR?9W>W3#EZ@r~&L%LZQ@iutx_7n2mT!cC+7pvMCzRDx! zoW-L|$aJ;6kzq?E+eiJV#_%kl^X&CMBBIkk#ikt^RU#_@gi<`0sH%?%O>)E&2+0N% zat7nx0qa>u&wilSgtfj%tW_I6?JKVLd*4z_(Pk9yat6sO3l{?2Sb=)EZ({{N)qvDGVHTq2qveeK}NPd$46<;&5|Bzd-t zx=k&Y?b+f1R^yHUR!5gHd-MoFgVNcyQRR^+KVOJoV`)C35E{40Q2E@#vd`K)?KyV@ z0#X-_rxSDK$M+lEeM6dsNeEq(I0HYU)wW_|HAQO42I6E(CcxuI3jQ`+ybB1jmBdFp z5FryX@V#z`a?4V=bNMpHwVuoMS z_MN;oLU@VLv)(Swa$huWwQo_X?Zt`Bq}p9rRH?-_GeSIaNmXlEmRjnoicl9C{h$zMug?>cZ*FA8!Wn3|RMh~4xYkyiEq4q%pe zR#yJw8zrOemNYSWwUqc_D2LqdBA*7Q_1-SMU2Yn*FZM}3H$)bndaN?1LF=-w5cVa$*Uv4>?wstK= z0b+$1j5o#fN~DHw%5stMcxJqugYB2|O_TuNpFum9=Q?3)#;)>o|BJ@QH|>P?7}l7=sBZK!aR))?+H%IOUrkwhitu(dRMCezkv z+?pMKmAtceZ~D^>(w+^fEl815ORfUh`+&chh8c&7PdhZO9*6c;P;7Vd7Jm_`8^7^0 z%$CyF0Z)N<0lM*!z{o-c70CQ3Ey$Oeh~6n3N9&I^^7U3OUfovqn4%oAbtRu;xS=|Q z#9+32z5w4>#D&*`S&e16VLuIi?HfKEig`E8>ND~CuQrbU0V!4m zZtnBu(~svoxML+RhS~)!pEK1q`{1!ydZn@*T83(T>9|ly*S{?g%?OGSz9%LzvxD#W zjndm!ZTAdh<1#iwY|O>B9KUN&ASqO?%rba=Hi#^p5=Zhhiy zsrVAx?Dtj6IYsiMJpi4>ib5cPa10&ig%RH~Ava8okWN-_O-5{<6wIF4GNXsMN-MKJ zM3Z7IFB{M0@Ko-{){Tf8??z0Oy5;ol65mS(!jDhB7hUr6%J%u*J0%n)JI=j;jrDtk zy0mG@5`I27|E~ReYx$P}2xEb;bM!OD?FS49^7jx3DZ02aVspl8i`5rX5=EN9fHXn%g7ZJTk43CgkTVRF#cTb?pB?qNBHgjVmvBG<8GA1 z`87_RE8qI9*3W}nXw=xtptiQ~3c(c0Lh7=iqc?b$k!XLP8_#BPsy9xX5Q#A1X_B2L zZdr{i`HpNFKU+p&xvJ5AzvgOmK=b3))z;=YcOm$)wxlqxXYx}?Gripil&cy1Gug#` z$g_|ILv}kpQz;TDf2duXlpSs0L-OW!T*mypmefi6TvFh*&LFxo3JYW9$=VoN2F%{Y zd1I}Y7wY^Uym(Igvx}&TZ6Y!?sDRu-&CTZc)1o)YS^Fp^&b`u5mlxyjSG)1++p1FM;(xhE z-c9F&!XD-CN+*G7^YD!-i+}C$*oo?Xul{Po?Ogrf!2Jd zH`^ev@US$6L{SlnIli>k7i-J|@JB0lJBzvR*-UKauQ%wQq=wG{A%{0g-InNC+~({qEXGY2^7YT$zN599gDb;xwnjL2!PfN4P$rGLTE`L;Fn+Hx@VIYfYXZrW4rMy569<(-~1Bj5be z`uzd1;YNy&x6S~yMA(%YXW6=b*#4H7@4R3HsFxd^I&hae8^t`hy}Gq@>KX9$&O9qa zdw#Js`adT<>WzWXi{++?KY2K+$Y0VH%|X-;WBq#oVr;YVS3yC+Cp4Ob==<^9tFE;O zcj?^Y9u^avoVD2g14$Hxp4toZJgZZISwWBF&$$u~hZ`H)J+taBRbT zb2!G#<3BIOh%Jbw^|EL(gk?2F8GXzBcRvWce|ky9pI;wD=Nbe^$zZQgC!J zzuRDD)w5X>|5jkY0$*H^^))=)9}=P{VqJvIW^bPr&+mTFe$a4U!VfP)lCC{B@2@?V zruV#_)XgZBUaMbd=(fJYjm2F>DI^@V)crlpcte0LVm$E6r5Cd`CIq?5^fL zKWr<{7#H&QCouo#Cs3uCnrDx(xE+@^NKuck=4N9!g8umtQ>-^haNsJmimL*(d$_2| zI((>M_6+9HUO~e(UXi#(smnyZ*TX`7T;RFae{e7$0veHq=0|LAW=|OT(Ryc;i@T>r z@3-N#*}Ym9*nh?tU6?r^{JdiHfaBs8{781YE8ae3imkj!iASZ``_!*oW?myrWoD7vs7(C zpZpB(dev3ci*$TWN9t$-DKnUVhc}UzS>f3D3Kc`*ZiY{_+#Q}E0)6kAmw@ZEWg$2< zDV-se3fz5LeNO0?%c%E;U({KIDH2CDd6nd;522!Gdh>MdIx& zY905{SiQCBhH1S1lT2@lXlRF8dhsB@`r`fO2?7|N%e9UcD~YzUB3I)q426=tiCCML zty9x3KjyF_`CLRkS3!QPo}*V?U)eSsHsw2C3@@j8*JXp9X0?T<#OL_ud0$^yds`n`t#`6uxpbWztN-q)^hB$C^Lhd9c zef6Q^2V&1}3HxZqY#{~~u?Ve+$pP)M{QsVZY@%7{kn#D_gJ-^Z_^ww=d_qTVR8c*@ zLae25e0OaGjA?4k)H$J`g2YE39r9&mO6+4Nj zJ$O^*4f(9mr);k51|QdG;aOpNulh)`&vN2K^pTb2mV;fQwy3tQ)C~u=UHOFBD11qF z{bBM-c9xrwgBlz%#5k1)WciNV(sek0WI<23Hg8(Mnh@g|aFp(L3zX6fUTzLncY9iT zxFDVuOt8*D!Aa5@Es-oZG#sfBb-es{WBw4eEw-BDB@jVpQyG}sB(Q#=c924V%4n>- z>q*EhY5hzO^)wkQ0*VXMMeu=xKN1`*2@Y!PKdQipa<zS#&X3(r&7@Kgl!)zpG1(aPv)7frJ4u%Z3Si^T_ET=7fZG+=N zQOo6oCHF0!+cAOo(ITIdU$`<_Wixb6sc1_KvA+B8Uo;?5lX?*6$sG0C`x6~`*;E-z z18c!!*`8HnNTY2W!0*DqEqK8oSn-^aL_mPit9&A3ofOHhSU_QKA7xY z2R@$Ml-KH1?i*jcEeW)Id5)TD_WH}86<#f7seYTe#^l}}BFL(3Bnsj(&kHZecV)bcefdv7Nc$zxs?0t~R6$dU&LzU9BqwZIfT8N7v_&Kw%N=&=%TNV|8hH zyONBJL1#c+yET94N=%6M*Gu^K4U{5}Cn4))yJd(m#Arm(jbTp7E*Z5yA-!Itj=3(n zkb3l)_ptQF!oD7x9xR;M4;S*5LW)aeHexU8*Q~B=YcQ}(bcf`kTig4ZdPiYKQEw~M z94UP^5~J>^C$6uTDliT6oGTx&`Ddxn^hX#8!`G|Gl%y zvS}X(>Dfb{Emp4|Q*f7`j;Ic@{s;=Z&{*!a)(Q5sLUq+YE2lm-xv?rd(=E z4S5{jFh=liGeULhB|1C`C9ao+*^60YM98%N^0p#alqN1HHI@@Dw{Tub3W3CaN%JqQ zw#Ng&6kmrR3rhGJNB7vX5ml-JC1f_6_y+Sg(xnELBcu2`pLn_jjN3;9Xa~@hMU+hwYbK{HRq%)ROHP_1Y9syJ+LEed4OpQ44J zXKyL>drr*1QjUufqy$DJr?t*8;LqGTR!3vLjB&e^vP@}2Kk`fqIQ=dDN9A`0QL-Ob z^pYRG*@i1*xr6@SyF(Heh%myqOdH2#t5$<_)6$jL7X5>dIsbZ_TWsQ+5tYNi9~`ks zLlghfV=zRv+YQtUjNktY#-`aTU;ZTofXs>-eeqv({C}$8{+~(5|NqAST_B0)uWPjPq7qh&CGiA73SmKsffu(9qy7ljcE##sQ1gA>*^LY~fw{GC!4i z4cU7)?CF5uD{G{s*~FCO)CWevG1hDZ)?8?00zq|OsD(!qr85xfBvaIqempAFl$9t_ ziU{LV`jMX}5fE0du}pYickrXqc!tE6P-X;f&U2-avQ&Hq@G(O#8tw3JCGt9VMC zxHsf6Z&PAIwXnkZDV%a;;X*#ZHAtW(Ytc0FJcA;lM2`qFRL8+a53H`{-ge|yEmB^s zYHbw-Ed))Kc}DJ5+Og^j+7CK1Ye}%gkkF4!KoA@ggGER8-wx2Qt^ldDBiFj)E;{dB zEE>;`MWic{F#sK#x79PhfzxIg*J>Ht=FWVDg^!lq1Fa_}r$O`Mp;VR8)Y>|@&kzO* z4j!KR*)uqlAQ*kS;dv9j)OVn>l~q-4Uc&6`IMC40a+)+W`fk#a1C*hrs=!H^!WEby zL`^&2waD#?+GgO}CuQj@8&$m-v5rTrpvZY)Uk!`>UZ<+6Dlzz{@Gill{!!R8bq(-$9IJ+4qOeD#}xzSa&< zi*o+ZLnm)$*BVHa!-f6crn0*FM_nB;6c#aY*zxhP-hC6GJjSEY&}&$1bWQ{^grv7W z+uMUs^=jtrR$8GW$OYoV#JvRypx+e;Jc!7dNo6buXDr)Pzs=-;gMk`b7r1byqWN*S zKrPBj7^dUPdRk6RH*p{NwCrCn`%zIKi8Mj7B>$J$6`y*JhD>gqywT}OfX z`u6$S+8Pv;dJ%zCRxGl@f4d-n#*6ml=Ej{-vlh$9$Oy`JG)vl`Kb}dB=rnv0Ii+y# z>QONW9-93&gPcLsSURsACSyI(`Nep8XdXxIIC7*EY=(inT97!KX^#>;UTD~k>ejog z(bgTqZn^*7gazEhf2b|Eww9MUR}%I|Ed}eWFI6477<9Fmh_<3Hx|ltwTs7roI2amA zE*_o^>l)f;&kSX_OC2bCtZPvBX8yIAG-c8}4(qlO(O`4I%%c)8V)>)9v9a|I4mM@; zL~xTty1K2)x}F3P#t0jsfCpS%v(6-viFu1*BxwlSB?hpEkaL|E1{QX7Y6_uZ7VW1Ja+suj-%l?vY0dW+8ebCFT+f!&!e|oBCFm=)HUdZUVprc z*8>w57yh(n1oJ9)T0TJ?Fjpc@+>PhxHC=9D?Ri9)w-@8}4rjHQj0!J?pu+T1kW zKEI*vN7c~KC^H$R0FU={c6aNataV9D06UHOjhjg zRS|7@$vm-k{Oj?a28PhbO+`t`-=HT78p?Pe(eF(hoz}=1Pm)~w7#n!2W}=`Q`yYEg z8#(<4*3fGS4-bK6@B~TXpmDknCK8gUoE#cxBsM;N*J)xNF4)7N0yB!5nrKj9;5)(G z#Ky-vw+-c2R^s{G@A(+qUa*{;rfb*fRxs)t7_gZPk&*G*LM05R4=4Xj|HwrCc+ju( zb`XK#aM_*c8%eGh-hvhl7(2p0*Ur6vqux%Bq(5zeA4B1z+Fhx4&ZCc<9Cg(Pe zz-9zr(ioIdwzjOwCE6XNSs!ld7(CsZDCpwC!rCq50`i)g$f0gNW-iw`QWDZNR#v0n;J{I-UQ`-1blpatT0I#S=o-WopHW~u;3us12sdp=@tyezPjSVCely<9{ z#i_kpqr83ru*tu@eGccsz`zjuyf@XB=)FxxTrB6vs46bqojcm> znJ6AsOcSOVxDYg}+$gng%?LJg&X{pn2kbJJJ&W+_yI06GD)W^eKdjH#uiq_~UE2h|u!DaP5re>TxH(*VK#vlo~LM#NmX+pgN17zG=yl(dV-O;3& z4T~7xegzX+1&*a^aJ{BG@M;yKPFM-h8G?N8vfcQ~8xeU(B&0E~@836fd*nc=!PCl6 z3p7#V`DF`gTkyz;V&idpxa;|(d?KfrQbH_Frk-ByVg00PwI#6)8cn_KLVxqQkwo?T zEGgtR1gMxk!=^O$!|>ag=J*U!Q-Cm~vzDQek@&``RW&sdS)<3sMB*v4qLQ?kjgYU& z$qf5F+zb5z6|)iFzmtS^>4QP0<>MpPFCzkcx>&sauJaC>&@o^wvk=pTfPjDwj#i#- z9G(yH$LeS35bslb%b6;R=~5JKN4jsnU00>(*X!(MY3wd;IL5mJX}PLzo$zpJ{jr`M z-B+4kmPNv91{2`pukP726Fl7a+IWW-6gS`aTS>l^oFF~K-twAt$>a!Vqbk%P#mArA z`bo6dxS2oxzpjHyU`@7m0(epFTAi}oz#K9Kyn z%M=h36Kli{78MhN7QWfe@@5&9mN@#Ns${lU??ir!BzS-3>zV#87lOh~kB729SJhwg zc0!kp2#u9!4jYJ39849v!iJ7oNb_ zcDm7jPtrEKv=rrad$F2a($by(;YH^39(6)Lo6+x&g{pNhPdcWptxcFz67&8>EN{}h zv!`eMoaX^?baeFUPn^#xWZ!aPYKjJ|BA!K0jwdLGgM(|`u+PlSCem11^uN0c7}-0Q zk(cjM@VU`Zb({R8HFb4&2eH&MO9ktJL_y>pEdl}d;k>Wq_-I%-K)K-c$B%f$wfby_ zjeGB&(M26PWEDefj>&`$?CTU&RKio24<)Uwi;q+KHtY?JjaH{LY`PZeAnr~}>O}}o zcYM4vp#=KrOI)1Yx;)QnFsb!^*_aU+y{i#wLlcwrs}stMN%N=4NK1?QR8ZWdP~1@5 zkCZeurR;ffy>+!)Kn~Cr9x6L0XYIwbmdnz*Q_qg$8u)L=8=$z+8{3h`twK-y_bfnB z5&TG*PVe0{>amW-AnwYK2=aH)JQhr?rJ}+UtriJQpe|jYxVZ15yE_TlNnOKkQMhrq1)$ve@lC7 zk3r;Nze3>zG$I4YBl|kCimidRRF|c&%E~_1)gbhC8_2hkn(FGcr(JKSd$>FgXf~t+I#wnS zc<5)(pRbnpGYi=0EM?zjV!l?V;Q60PM%{qB=VtcqsS%NAg}m3drR z0}HA@mi-2RyrjH5`nwcfKS1%dn#^F4Q$2qU{~03-Qa2dK}$uJ%@-<`@rJq-|$k_$%; zM88gp%gb@z<>CVOC$7N_ob%-5BoHt{M}?9)*THgh5;8JK<>lq|3ni&X3b8V9b(&E? zSq-G{jTfX<+bjzMD5182{LIOb>g6HFKzxRS3;;bQDG3>jB`hKa6ckWPp|!QO)(|8> zSCrmY(C6pp?U$WhT~E_4VQOj`eSHW7Qsb!?SP(!gflGhb)&v%mo}OM5xWDwYoo3Fd|8 zt-7p8*X?=lv+4yu@bU5G<>#OLg53O2%8yA-Mh%nnXDF_P0o`u;MS6KbY|o!MQ)81} zDj2$(uKC5=DF-N}HlRG*q@VMF7PCJ1DK8 zk$n7p>wbQjKd9uUQIZCnR)7PBYW15!T1gYtx3>*{u0^GN?`O&k#06e65&%~YM@&o% zTg^H1n$lLa#+qE)``RcI`*^pY&YER!0mcAy<^)u*`<`rwxBa4% z423{-zsJSFJb3O~kXi2Do@WVA(#g=gjlofxkgLn0>^8pq`Fn=03q4j z&rBz#r?c|%kZ{8A3RFsV&Ph7Jb$g=7J8rhpCFJFM$`t?*fzP%G22spXlSfQS3ZtW` z87GP0?LG%@V#1cw5b#+*rgr-Wp)%L|28_dBajYyGI;=!Lx{%fVB$w40P>Aey;=s9m zKaZF)vw2eHQ>Yi(;31ifzwCfuC?|6@?a0hiDzq(zvG=bX>P4D|H@(+Wgiuq2J&qBSAEETDx3$2(p!49~~= zO8_iE{Tu!=&-}p^K;+wJC=Mj~zVofGi!cayvNAG6YbiVR*|L@LOZnEz40?b&i+UYS zK>aNHmN@1~FnZtdrfj7-B=k>~G;!Xx}g{)=}hqIPy=G1fR?a6mP4C!-Gz{%0?PUA8%# zzHC5VS6GPlLLn`1d?yez7c_d*v=hX7Ae{<6J9GR40HLgGv>i(lT)-{(jA@*IINhs zxPXfb=aNeeMgl+|KQc3+L6S$ry>VyDe1wJo+kCZ#nkYvH{1MrDcO-;ig%xij6=b9! z-T*L-gX?4Y;`xgg5qw-(%dfpV^Q0Z0=3XE<%Ewks3)A9z0~(R|EV@;MSB8|d%&{f*&dep%>MVUkJ3tS!h^dC4xq z4}}TBq0StZ2gZWA1+N~kD@m-xOILp;=UkdOcSQ3{*EtYVfwdzZ;xC?mR?x9?yxMWK zUhgEH#m&u)0W$CacGa->P2>HAI$VHE=2ax5QzbnG$=og;f~nfk@+HkE4U2vPhgUB_ z#%6DCuc$o5R{xM}(=29cO4NL7{i40S-L?ar2gY~Wqj}-sxw5tsevU%=VS_C1>SeuXCO=mehTK#|9d7Pcwr(ozvdWmF)Cj0buHt&Zq&30s#}{24U_wWhgmYbaObP$Jp4SWoJhbx$biUdXJud8)*}&6_9Og(zl?= zf@#McB#+bRy}*^vn#?^L2|7^|VYsV~yu*?9N-lLd3W6uKtg;&y^GB_PvlY7B$+4-a zktwiL(^n>u)0y6m+6<+mqYTRM){0~ZH6 zYh8rePcav8P}U6x&T>io_)LR?SKC?9wx@>F7@HfbMJ2>(AaqLoO*^Tp})*=mK|s{gy4&) z_l!Q*{pk(l_#i_o-I-JgOkz+eR`q*w44I1UrkuLV&0ejq%aKcEp5gEl-0Dx{y?4D@ z4GFUEZ!$XrrUoiwSPao6_m8fbmDOtl0|P)vzzuYEc8Zov14yFg;+ixG$(*(9_IZF% zf-Fw-)i?d!iF{x{@eip3+I)eZ5(ioeXm=32X-Pf1sIoj3%#owRjoK;hdBR{JcRUc+ z)4zHpuBaHpYTsA^Fbu%6ruX%R%-gq590Z_HTblyVIruEEV8DhYl`k0>aE(QcjEzxf zyS11J!M8G$^4*;V{R0B*?$4)D$+tjmwHU?Dz{K<#L=K?HuCK4p>aZ!7Y4^vL_i3Kn z+r`1n0X;kg^1^#TfLQ=JiHVED7!RfFOtVAZziIGmbO!8Ds$NvPU)~>h1pe>@n&#%_ zPaX|uZRR$17xjA5Q#Ca;p!KoF%5!qM8Hm;nE$tDxzkK-u#P!SU)JgN#c6Mx^!^1~s zW+5Tf?E(4zwZQLaL<0!nF2%7 z&4iWccvPBFtYDJn`SXoNzqVDSrTmYtKzIzCl&jOqYiVg(ko*CN0ro;Toe6l2tS#fk zo~|yv!-YC=3a}gBYil1m4L?x?aNRVqNWkggry04V2i)2;ZKRbw!wHK4sSfD$sw*Hh zUdL@LFbD^eJCj;5$J?V>PjTFDC}1w0Jeh#A9FjM)cH@jmQi)PN6qIZ{qZlYdLIHAw zc5`zB124|^94D+42 z2NDy5^wt{_sR6Lzu+SwLBSAQ8zaFS*C+Yo@k1UJ*&8T;9>=Hkvg zzB)^MT#^1r=CbU>gSRLrD=R0{`S`F-85(&W#Y+d$gEmB;NF5 zFBFi2*6!{WG)d)umZSlwvI5eR?Q^$1Cw|MtdU*Gyr7cqpU;%+@MaG{5QNW$8b?0>? z&mtonsc+P%4J;ptrz-qVwr?MuKkD{)`CG*PD%Y!kto9blrdQ}SL+^HV+E7||aHvh8 zYGBN)tqF{21A~Ia^Y@qc5kMebvwYKlWqEZyS5^D?fY=BV)#83UeKp=sdU8;+{NvXz z6v{hDx~u*oe>%QWR-5m{#7E18+V`&9Q%i0y(tHlp_UCIb!OMl8+%mv}y91j?S~ybU!S9hG!q?e~tM)25mq*Jic-v{y zpe(d@4N65D-xvZRX&ffSwgUlfZoLAoSb!b`eT-yFdLCeJgQ%tuK@qutDYk4pM_K!L{J9GF}MhW}! zf( zcwq*kUdrIQbkvCeeM`Wk9tgYtyD-3y9|Jm0jNYHE&DtQeSC%gRLWvA z=)T(b1=+Gzvqb*KCnGykVS)*EE*N8#0L3EZjtzTIL7ZbyrN;?lHJ`|Xws9mzL(nt4 z2ME&OXe|2-M=pgIo0^(hT;eA%##@DWfH$wMuAqrmm(nXqdo4^jNdV#Rd%sMk5#}G$G>@C zU|>pZSH<;qp2~LF+1Y2j^JO*U@1LU5>^E_Zr*HB$||DE?Ea z4UDp|@Y0?)1g%u%)2D0A?_l;mB?fW0of?+hzF=j=dg3&9A7Eqw)PYj{(^!;vc9Uc6 zGYt#Ub8%JmHwl?f&;uK$S?l8g7`Fb87oZ1 z|3hxz;I6>5-4hk8V`u>AXsho3`&Lctcrp#?Wn`3e9bsz4h_= zwPdR5#2F3{wpd4L3b3Np>;|I%!x@wOR5ShtP+%qw-A7(Zzmk@|lsvXb}5aAf>Fs~17&oa99KMp*97~S+r zJ&sVKOS%pTh2Mrdz<$ui5IaO_Y46pm9&s=fSFT+<9Sx5o@*6IvRMghS1!U!S{q|0U!f$-Qo3^BYwC!9T!{h)i z9^8NkcaoS`H-89Xv#Yy=kx|B%8^!bPH2~O%WFtFYQuub>)Y* zPJ!5@qB3i1jc}*x#?p*Tz+|2N)>;e0NVw;K4Ptx3}x0 zirU$6LV5`9khj8xtgDTcF7jt|e;&%%rYSRczx)D|+pTj6RLUEqTa6Y=xT{5|ymcN} z_HdrhIFf5Y?dW2?Y>{Ui+>52fW7sZuCbd;AuS)m!{^x1Ho-g&Jmljg*Fl7J zV~M>+LBV`92e&wWzw%HZw$>vdt_u@7@8%?U{+9-u$6mqFY8%tnx=t!*-mclUh(o4% z7z_pm1{lnHz$EAEy_vUJT>X)spHH+JzqjX@7}WQm)|xl=`-V`QOe~%_$?Y&{@0uXs z5%V!(xvDs@?PO%!0mTugt<)|r{xroy`2t5rJAvKwyzcUo7f2e?H#y1QCP3U1F*T+4 z%&!}><*TZ!{Ox%GH62~bmP;c)`vWC640!j;uy4}|CaHaHFf%+Fn zJSlN>9KPHX64G^C5Io*e(y|*+sbAV1cbeCBY}VI^>d_N6*QUT&j@<@Awh`@qNXEb4 zue8@9pNHCTfou=LFp?$#51Ck1MV>An`x=-`oqV+7y-IE<;nEWV%iPnWjfh?S?{6=< zb&5gu7ev0Y@Htw*#Xdh=^dcT!mgJ7nn$Qy=tX_uk{a)tYbfW#rcP^2?!~SPuxKZ-IUqBd1mye*2VXl8w^aQ+jnr z=f)>wfRzWPAQBO%L2c>JQWoT+eXc)q56m1?gahi+uCV6s^)xL!=@R!JpI+GEhN)$z z`Js$&uHVG2$sqT&T zL<2}gTl`sZQPDRe4iWh4&7038^8$K|-nP8BHW;^3V1|qHMln;&)RYl6JJ<8Q{1SQx zSs`V7clhI-b}5w+ns0Zt;bnw2SB7Z~FohuX!5Xz2X)i2<*$<>L92fR4+eJsb%a^xC z?yLsaq>T&fRswXg;2Ru|-8Cp2L5-HTeStsd1U7E|WMbpxt!VP8Rc3euyAxz$Kr7Sd z1h3w`b0=f0ij9fsGDI^lF$$99vq28;?m!_Vo%*$@I8LB%pn7gi_{-P|cq>GJ$VEOo zI(jLf;nf5lL*(PZl|tH(mMd4TV1=}t1$np1;vR8A-y&$mF4c>P5K%TZ;#LJ5D#$LM z2Pxzsg)HBvwn{LZO|Lgmp*Id7^911p(J`k>#w<{MX8Cn2Xo!t^g(KkIU1Z099~2}G z8#;We0z85$RY`!KpFA-!5nv*cF9W!O6nb=JzY&%?S!QLMA0+4Qfma+HB;#1|FX72xV%*k7P2d= zukpl_dl-kQKT57G0<&9z$|KvURY_E)0m?)^=a4q-ajZX)uHz}q2{)q1$fr6as!mQ1 zblheM$zd;-Nxs9v(m8)26K>zk$b1}HUB>{evpiNw1jOR6^pkBRChdxxq1clf0gu$r zaAy)Fzw`={{I%ln)5~6z4`F}Je(qi4vYdEpnpb|lbi&@H_B0jk!_aFy*{7Je;F;^4 zLeAen>C@W}?pf=YB+%dFZqPxKkmde3(d5JV*gEmD^+vQ9PlOj3h5eh~T_DCi&%x0z zIvyM-+F`)HM7HGZk-m3E|gvkrYD^w<2T!}mH3K_U(CrE)qOt>Z=r z+RSbF8^3xc?abobJ2;1?5JKJ0FPYWf^#SBPys>hhdw-72PlF9&JGM*Wk==;ditEpp zMM9|M-IR(74Wq5f-Ome|*4^FRQv>S|NWk!(sLbHYH1&cj8nJYQv~+4xSqFcyFgIV> ziCmG7Mf^CR4gti3_5R&q(#;p~Qb1M**#q&~`2s#YLUMA~iA@!Tun*Fy;}&O`Lt4(~ zTrbWyc1X+zj*yVFbROsDh5hPrmb0jO=lfQT$8i{oA1j!Z`AYHez+OAc?$L;&2C7v7 zVlewvYTX92rJq=@e*IIrYun|0oq7wz9H1Y&RKI=G@cgQQbXkP&azW>Pk+%IrCiMAH zy>JJE!lxIwxVX9X$4blvY9^~={0z(KL2O zenCNvIZq3%K-mJWba}Ft3ivSC&QV|Klq@%Mr|*49=H74H?=0NRNrfPQogJ)~kT;te zE`%7k49D4k^98<*M0I<*lb2P=exds&)6=g%vd!#=jF;_Qnkenv$}Ah6-v`WqaHAmc z01*c2J@A|b1qIa;Or!CJcOY(E@)l8NyGutWMl1#a(-Ytjg=!7=|CJjO-`||nGgGLU@HQFpgqp z$#{iwAjACu`3XYhDyu4AIOPk3WUqQ)A%^?wM+N9B=O} z_jRp}7{=4^@sW*;jFjz+nyyz$P@z8>u$=gARCf9A3uJSn-QBiEk&~R{iMFd?$Ob!Zm<`Uf7n{6GTsF6 zqF$CkYe~#be=#?g+40wUlUwJLHPnPP@3Y;7#~*g5pHeZwu^bmu1Jw%+a51~FCxl#8 zER2i|As$-3f3$J@rFXxlo2RWVh53I=pni8)km4^%_uZe6@xHz|eTmz~#S-&FG2%c( zbjhzdKn$%Ms<|4Rza-r65?lh4Wa9VH=u|aDB_(g%b$({unyRkoM{ql#WC*x}hl?+O zh}7n46qqd3QBs<*NhuejDZhh#X6prT>BPW(B32||V1dAxX$nT16reILea#`qWhJT? zWGCXq<>%H9m81i0K}1pU8UXF9#Kaf;#AwVcc+|}kWL}>CZUsxG#GS2dHdZ`&vF|-4 z9LmSXhb1}S&6_s`uV$qo0hs>X5@KX*e09gnFCd^E6sA>`ba^-;xLI3UTdn5WNq}ww zYfC~-&f{T%8rFk~aBkcfV33JiFi`4rm4KlC7LOn~s$M|A68P;$h`tdWjlfz68rI)x zgjiVcE_r`vtSuN@0aWBR%H&M#ZU~(4ma_ol{~y8i(f<0qzyGz@kKuki$y7$fBH*yT zoK=ENEdG!!R66yGapmpZ^Q-Iz?Q1UVGt(Ms-HWz=S!YIeAngEEmHP4o@8oju^xUT$ zZ#z6**Q50&C}J8eF((6#{fb$0OUtS5tJMd4Gr@=|8Q45Ic0VeUcE%xi!M)VSRH|@{XsV zokwzHuov=^3~)bzL##SIiu@3Yx6O%u8KV z6fXm}o$Po1Ydy_RTCCx|?Zwq7kmqGS^I7V2?Z-&Iof3SX^-+@UGdKEGdn_M5K+cg9 z3^!&y_{1B61vovbP9|I&_dZG>p$fR581Nf@`Esvnqc!`pRU9Yft!q*d0%GE)yKZ%6 zWoNzhmowywmi-(w68rh2Ya+HuLS^!h%A@O3%L`vRVUg3PPK$`#d3Ld~HHli}k!7*H zQlg5pX3pq@i>78aMq?$d+D9!;JYkCo)UsvLJd$h^(z zxHh#J$5<$E2^Tl4ZB`M4l7LID@y1bpIMeZ^g}G@2?QLyJj~;nLe$8pO)L-ac3-vrE z;LYZ>{`D5zgn{!1^F=%Iv9Ip)iXO#3)zw8F-&M#`I<~^aVn3Gj1~y?yT8W_kcUNg` zkM^vQQviBTT3%kw%E~I+I|}pCvV~$1^K8t^%WH+@Y(+n+69nnn7UmUK{>h=ebc}KS zO)YKhSnw>oEKq+;o&b2W;kp@yuryXfdO0&!w>c{wpm=gXUqzguO3m_5!#D;-Gzqo<94mKQ!D$fduG6V5L~~W3|5Yn$y!}&YwO0H#YqdW zdfGM+s>KWuyiycRcgfeOw*B3FH96ypM^+zTlFg{J=4CB6vQAX!Elj?ByUhWWotYvAvYe*5QkF?u-fz zO@ZWy%W^)?u5#qA94p=NY9)FpE!yH!+pGxzmn3d7HLuC=RPCMYY}18=Ab&GrdlgMh z)1L|)?niG8_yiz>YmK^_G5XU_PD`uGeZNiDxHASd`>Oo?>4NzRVL9^d50Blq2h@o8 zZTarqdjeuo9~EZr_Br3TMo>dzZeQA;8hT~l&hVkEXH`vrgW;DULxq>J!pSdrj&F}YY22J?_h^Fz=4 zrZM1@tOIA#)Rdc|1kX3lW|gFgHw7J6CZMM3M5DCKUc59cmG)}x8!;;pFJ>9c(`FpH zYr|anB6g0lOGQlVZG|1mzR_da@H2bKtua_G0=7*@`v+tC!6e0O;6{Ll$-jcK&W462 z5{gHUbSI0gOFW>Ikz!-@cy*k10EG(qp0jL5!E2i_GEec~l~|>Hu^AQag$v!_@ZI{Y zByS8vf%xryh+Mo4)+0hNd(wC+4=e0{*JNed$ZxKot@!BD02mEPk2|`v{mzp zJvYM?+10Cw5ai0oR|8aEaB^@c%cUz(2B(jR45l+MGAcpI4wPvq-22MB$Cr@yI5G+3 z#blmWrU2!_8=fmjNwqu(sNC-gK3eIY;ALW&ttcE@X}mD<`t|D@;{pbyV}SwvHr0(n z=e+vwJ*rDBOU|pPILMhF188_}j)H3}4`ap1!BI3~)iJYP)Dnm{Uq}(_o>S3H^IrR* z;c+$0LT(dk4z)Ja*6}!1%>I0zU^L)humO@dloH*z5oZ_G5AaPE1PIu*#Geg^#~ALT zmspsX_)%L#K$)XID0$iaINlT)yw&8p<0Rc3f>RJWY z2#UJO)2GId?M8c__v9AigRl%0bdoT+8JL*|fT0ATpLF06fG?;jd;%V_`wgm3o;-<; z)74$J@eb&jz)Xg*52$D4<<(5NE%$F~6*eSjRt4M6UQZV~UX(xRuyofyI)My91%g5H zmucAJ2X|{vj`0pDs&(>#x4Mq3SkO0?h8{nQoLg1S&C2TKJJEP<>s<1-e)`_3y7{7( z?o4B_nweRS;E8K4d?W-Xu1nQKQswYRlf$T!N_~uC?VXnS!i=P)Ux5=D8Lyh*wXSkK zTTuyEcaNvSHQ(c)mzT}Ptq)h6p~mz5cLjIBczGaPozc}VHHuBb)^|aqAxmtC8pz%r z9a2h-b)P=mjnL)d)r2_MpE5PpP~?EtVSZXw*77PXJsq_@q{Hq`KrdJEbE|vXIbUrc z-S+h!YtGRnXiS}dD`0H7GOohCw~u>qe?H#wRo(2ib1|4NXRuGmCW$S6a)Ny+-*{!T zxPy`kvXJ7fafdFF=P}ODozrGC939`@ua54p2-!weHp1*SJ$vnxu+UJBr}G`USd|*ZdWJGv3q7Kfd*Y&r3t6qw)my)C7Y(&EbLI>g;g^yzz9!pSP(KQUFho@IYs0Zpa8Ijr@Y=Y@E67);VyBw&l*( z#m)WD*jV$JGa!sJ^73lHn1PQs@KR+7VS1l2fk#_Q%Yzx*3qakpHaCN9J+{ID?LPSY zQ|_%hcbd!EGC8}Hp!x_Bwj8jf!R4af6VYHY1;986#M#)mcHYXf@mq9s%@(EERaII* zIhpsE9yLsKZAZ1YKMo5IZ=JR>`sR5mA|=q&)YNY3o0kDqc4lS|*Z^Qa15cObCPH28 z26Sddv|c6Yiw z)w%QMvr0-z8e)}U0YQ$#N!nm&pm7 zaN2YL6Q!)K?xvY_<3Aa%Z2|s>#eN|^-U}EZ*VXa93us{-PmVU4iz^XjIZq)wy ze&eYh^P6{X^J&Jr9{2$S5D%mrPnumG%8#Er*=steug6EpdmJUp-H7WC3mc`jbwe0Y>dcfP@ikh)vJ?{s z&(q5jHwZs)C0B3>53FLHJICQ_uL+Pjiqo{DRl03!t52S!!7R=L^FZL_$Ofc25I3rp zs&!scK6q|BD7ZHDCJ-;Cbb?C_{}|)2;mGg2m`b$Wa+{IU`WKz|Tc3=tNs8I3xoo`h z5`m;6$SkX*Me# zUbfwEo1cpg+*Vf9$_Zms%TmkNA?1JZZpZKihf}ahw%~x!#GY?n`5Y;(6e&&iKpJnU zW_;d(a+}bBq@pNKOiavA#a0s{k*$8PVsh)&~Z%Ezd!kIOdpFBx`O+PgyrD$n< z4gs5x>K$yO46E|H=9N@c!@+g*qHsiGn;*gw6u(N1R@h~Ox3w6)I*?LebYTGu07KLD zzEDlb0`Anipp$3J4@_t+*%1MX1b+}jfp4FE`M}I~!5{L=u*k?vI1$*mrA#iEVqYfi zUf=}4&XI;|S2>OZO>uD_SHbv$U9?Aw$yqS;f)x+qk}4=5T;T-}gUGndp1|b;S0Hfgzx>%%P&Yu7 z%R@pDoV&7ymf8GFF;hQ!~M1ao{Ql-)Mvy%>6pHlE$0G5++ma0gZo~pBH2# zC5Zq)GTJyCi9&sv5k2IkvaqJ=_;8cg{iqDtCt(YgjpC4kS@8xNUsXpZ4pO9TppQ*{ zyt}$IURiqo+JtV%O?GxAs3bOF+YTDHKrjOU9Ei86U>A5KE?!cmZfm+K3cOfrSC<;3 zI*?HHgUlm755^#E2<)KxDZrlRx2aFe}@ zKi4qMNdq>0NYgl0e|+Y1(5d%J>`EtOR9(pTa4SlrWo3{C{0mNkPbn~okAJ5NnU_js zJ+;pc?bVd-3fEHc`l{h}>GE1pi{ZfF$ZVEL*%)7{L%m_??7203i}FWjuyOl!F-P;_ z4wuWd@@|a3_+0KHHARJkTgzwRvf1n4OU!*~PzEw7!Q#I+sDS?~ic%A}h|*cQQkxCb_!?P|2gHs(c{{8} zOo|x*X+chrKOBXNp z6dCt*j(nW5<%JzoELXEs4ir@wxo9NLczSw@CsTvq4idjcH7%6L8lPZ}fn?zJ?{VU% z1nBdW=>{$(f7w9#78!@p2awN-piT~;4{VRKjas=FJbI7xCb0jr8c$8c4aL&oQVD7S zJb=VZRZcDlOz`iw7cATQgi6bY_D~!#qZshc^nmf_?(s9-0u#{$lkRQ61})oL7H5h?G;> z&(ANng5`l=QT$B(KJfBt&z~m&OO7W|IImmnyxp59>Z|lKqH2+T8=PP*F~5!vw)x+-1-;n?b-w6A%)nj-ks$ zxjhc&*as~oWhoNT9w*obV0MGMg8**eos72@INVT;WRN7;>R>?pU#yn(kHaT+)qkbncBl2-hE{}xG~-AZvGi&R}g zK&Dz*C^_RwM~F0IjQ@qqk9|EAiK2mHd0$(7f>wVI`*fL^!p1PuB;T!R$*OvgCaY0m z7P*7&y7!&Vw?46rg)FDXIGNLFBb44j63Ul4KHnFGO@7dq$~6H33bK&`rbMo9x?af+ z?7@uY?Vs(f)uI|q2JCF+GIVR*HOh<({s23%eH4 zthG5X*r2#eLNa|Y7|6XOgqhJ~j^q8_F165Znm@2m#KEjtqHL;~&ow9y^AzfZ($TK- ze1W`4u)0@23+W<+5|pB329j|TkBK5v8J{uR>OgLtAs7+}T48`7GuG@i(Y_!* zDE5B1c`zS+(w`+Sgb=E5h6Xw=xv)8Q;5x*42(ge#H3Gv_$DhF_-V8z!988$i}idUJ2mYET;*q@qn9? zTOPbS;e2x*m(7F&j+$9hQ`2MGxtsT+Tfb2LPV;H=Ll6L$3WPMf86> zBY@JpScB8JmyUwpvHJq80A(EC9r|!nwBq-IPv@SC!`6a=eyw19P}t|s#OJWFvms{z z)B$lq3AjR#)8F5X0z?MYvV^3hSzxB1ACraD@4nk~X6<$01t9>L?2I0pL57XwT`MDn z5>V(2+3$UK?!#SlK8!c1Qnh;SpuJjs`Yo0L49T@?Nl^AI0(}i2!mvI)q@vcaayj@gOh&0^r;8CJgi zCDN@~=%u2$c`m4=(baJQ{{D&(z5(Mv;g*KmI6fKI<9eUs)psXIG;Q0#!@=o;3ZnN4 zZ5X6an>3*R(7wffB#Q1u0^W?`F#ZHi1T!sPC@JASxSZaX3E_{Mw`&Jm55f?DiXnja znzK=Lzu4K0-ESjVkgV}^Kl!&*+l(izd(O_=-PENbF{`RhldYt_3|VA&lA_O3yaWJZ ze>EFX)VJ;CWH(%b3cH05w~rP^A;C&?S*?+Q(L$2yIM*fPzItZ903}l@F@VP!Wxc9s zoCMQhNPKqClld0o6~#uOSH7XO=WW)e9-2>7Jq3St#Zp!_@5+0usXeR&H@&y@#uv!C z6)rE|JU5y`QLgx?ShU!V%bR!n)mbg|o6HWevV@#?15Tu?os^WfxBXILPjQsEAFDMM z$y=|lN4QS(@1#H~CVn&T*RSUYrw&9=Bmd%jHlP>)(T!h5C`2 z@GoAR_PK54iq$=Lf!q@>M?Qssl5V9V!k@v6A@jngdL33nz1Wyj+h5f?1w9d7Fs(B! zY80!y7LPPZB=tA(U7B}0=PIHgh0Z-$V(h@oaYtWX*>v{eRVO|Xm*)dDK3;5HM01)=k<7m#KOw)qFB%xq+;kdTZRC^chYAwv}w5|Rv} zY1{LHJA#6kPhC#po*Fr8IcTNdpzG6)B({6i}W0XMEgoI!c#Up zY84J^INHcX`=Ld9G*co>lMIx<~}V<8)?d~I50V0 zQrl%Xq9H6?%|OQR#*H)pwkoQsklITFAP8hhl7li#7~34++UL~HBd2AvLG%S!`(2Xw zK494pd|}V0EsRXNm37lIwrtgM7x7z7Q>06kXT$j?@*SMB36?*IkSh}RIh^Ks1i=$? z6j5t5+r(IGJtGd7wsmG*@)N+~bl|m(58f|I%Tcyk9c^AACpXh#f+2w0+%mJ?j56oB zrHRuz&h9{a}asqc|o@xoZeK@ zm%XD}ajbuSh~AA|KlSGqPvf)DCF1X&Zycww|9P!P>IHtRzklupe*5R`Sf9nG{`oW3 zV_K{Kc%62Y=RaQeT_FGG_5bqW4bm@q?sRRS1UOE6$~Ek!Cvu$r>sYauY5&IujcS)&G@oRJ6 zmE&K(zq$H<)fD;fUEBYr8TdbU_-+80J;!|@04yWig6n}C!$cDy@MY?_WoC71)mA|p^m0Jm~p z{JAp=!WYQ9SuT_9;6i~F!gMZ8)(YYNy&ABvC@y=6VmoxSM^-?I+izQ5zO7y2dwQM| zI#q88Fa0?J1p()OwPv)rkcctRn<}Gu>=wbIodw3I5~hEqK}7G%Grp+&S{-O7_y%gL z`c2T~&^crrs=q5R2dI&+f8L0tEggYNPU&%E4UfPyny7Nhy~YcbQ<6~Ef`BIYhjshI z>Ii1dECpJLg_=Y6@Bp%mvDs zp#w|zA-Xmll&WJWtIIw)Xy^+2_%RV6ELm6i;cDep9X6V*?yWA^BHZ_dPIC7he&#`j zr26z}B#23flJ@M_dE9MRTcd0Z4Mk^$=s(NGQ|`w^SZ$S%Ej04{I@b|>TPg~Gu2Z#y z1TGoS)kxZMyfmR}3ic+*P$4JphU_u}_;re5sZ`N}QPRH>s$m0fC@n zS-qWhqxQI@F*rT}KnO7!weD!U@#14%wSBln?Xms#;+Pt+krt(zG7&Y|C&wsVL?*BU z%Yg|%;bpIXMoDV8()rBiixi`x!(X27zsgmwsTyfgRP>$88wt=(Dd1}u-yNIea+Y%xdutKx5?x|8k_7vriHEp&^0zvZ z0wc`PKB>^N*Exe8_zBiPX028{7%kBEMYt|tQ?C58RS4gHo_dkR%sDlP_iLTy+Eg6^ zC9cx#d3*bsO7>onQiNJ0mf9nK`mV(Z0Yy=t%i(l{ghZUqO#Cz=*Kf;$iD3_s>$m(r z(osBc{fvwM=Ms6Z^2v5jxr*}^rGJ@@ie$GtImT~Zw2d1=UAuO07aC!-OfugH0G^vw zN}8PK38X=?aWgFzEcRYFK-Hh`t*Q6+<(5~=4oH0 zB0AfJ1zNJB94^z4k2vW87lNM%3x9hWZv(eg{KTPhT%&5w95m1XXnGw;iJU{4hLyN?ajc_{<8U1BzoUvo3KigLPe1C&oFzyrEV|o7l6!2yY&b9THTIzO0+Eo7~w{7=_I77<~ zLQpe~j$EaBV;wM$!HnxX6F4*iWs!gVB!oPBdqyL$!=NwNqE;Ko*&OloRH;uJo10<0 z&)>#5{*rP#!4`tsf`xnT&qrcE{C}MA_fY&Bnky{bJ@>QJlFIbrpKTV%@SYd<=Z&0NP`>(trvQq$MFePw|wrB`Duj zUV3*GD$UHe+jKxhgrp005J_FP{Zuf+4Ok2vE6EFHLgyxv)t^oWBiatJoBJS@9gM`{ zkm?+6u_H)=@5B-`C6>t6vtZvyzwntD*d;hiXPUnifsfW1FgzKj4@m9J}54T}g zuM3(vWNgKPsBI`)jTNDMp`$?5J!={==;8R+kL~IARy;T!!&CA82CboYHL9KMDoGcu z{)JI)Nr5>dD<|VgXAimC_N*FW4nRCAl_$F=@W^BP;~|feU}*Niy2yr&jg0~d@5LEY zY&N!?#bkUTMd*+LtYG~4Kd8#8j(FPYJmyOsxWd5vu2E){2t4oDu_ShMN7~xE3#loW z`;Mqi)K8q}DLP{LPv#R&#q~ddq#4M}UD}YZky8P!F(ys7u%=`y# z82DLk!}oZ>DhupR$F_B+I}WGuZ%J8J@25dB+9v%^qEW%LeX5oE5oov9#c?Bpwsa~LlZ0BQf2(D7*rN_C8 zgPF>5$0nPB5%#;<0bmEWnuLy@f>ZbjxJ@XX7j`uYT+4MF*KY+v+3?5^rI5Q8w8&)5 z#VoT!HY)WAlm!l_4FbfX^p^_Rwd-6xT4bH9<8sVtKK}I)APa;T2YW)r{unnS8$*_M zP5_Q}Cyb~0WR14W4c5VM=4hZ75t8|1viM>+)z75+`c17S0uDav8X8%Z=n9!i2Q(X| z#HdGvS)=I5C*ZVP8ts;Jcf4V;9+sGYN&)Ys+kE9@pNg9Ht>}(MuRq((LK5-xT5B*BkAn`$r zK|~)Q29bTo4(v_h`I$L6{jk2PZ!qm;a^>i<0#Bw>{Tx~YXGiF`DwIxQlEo>OBU-&# z4F4P8$Tb)|gc^Wu-gZ##Zan?Hwsf%>+4if~zMmM^y^c3QPgK7;dmfkpqxsI*gN}Uk zKmcpax8^@Umen>GV2CH#dFaHzMHxY7K3XIN1edH}7p$PoIa?JKRg;a-yZ%8z zg7a*HAmpPxJe~#%>~I6b8b1-P|C)33TPYX$|L~WL0JvT*UA868hi;oa$-#n2pi`zL z-o5L*T|Bfsvc!2{1i21%zOSxnQRrb-KA4;E|MMbj&4aK)RMAt z5sV(`adiT3F6R zUa=Sy0EE;=K9$RENZQ|=H$8fLF)&RQ5sLpETXQ_c&%MRRClid>_5fPj=!hAx^2vVu zNhWZ;cLdx*?9C?gV2uUk{2lRxiTYC|cs?Ve(kqD#hOi1=hmcxJAm0wz*$}(3$qV*v z0%#WldTW2JhsVm#a#4U_pHjfa!N6(v7Rm~vV^xiT@*Aym$X8U7$dI3`nb)d;Ii0JH z`3Ow3yHy)AL}tEuQ$&k(ZFmJT?YPx3ZXoaaG0aL%yHS--DO+2zNCnh_xuyMsdRiI| z>)sRtQw|;g_pZn85_nV=h3I>xJ7$Qbqh%6#gX^A^lwzIVX%Kw>t4nz)!BZqYJT;^s z&I>L1T4!I~1(7H5=FLx}y!-gB0=S)TFJ1>u@8`0qC^+D*UCW}4lu%Yw%mHI2xL368 zwg(QNk8P2YO$8W`lBbj=cH3A7frDGf%FY*@IgHDK!Vg5Ru#$WSdevCc)vGKKGLaHN z8EW~T4eGDeLf$B2az{*CNhukG>P@Yt&8@=9Ro?kcHg@*yLO!CRkynEttlYj0Lcs{H z)s!cqqy7ZDUDBwz@$eVR80*-rAQZC{$nDBN>O&7d3AMlPQ$oPvSFd`3-Jg97&)!UC zCL%ABIZX$PD$y}6%b#H$b2zT)f%Pl2zuQY&LzQ028Tx%~!PUfWx|x`s2uRaFiy|=H zj)unN!BvL>>iz`9*6G`*p?EL_0y_&?K!#dZ+|q==*GKv5zIV=@+dtTm<&HbtCk%^7 z`BE@4Yy0mBO&p3fLt9z7KW!3rJ?kHTBDIw`Fbzl>Rp_0gVMq5J_RxV`O>THpLHW4b zB+QFc4}lehjqb$8*ewIV{Iam%v|v#Cq1^;0Xk#$fkWoP_Wwv#%Zx99uhSg8=ps!wt zjja8!6Tn)P044=yb*uD7V3_yHc)()U3Y%``?Rfrt((8Zr@$S(Iv#D8EI>_* zWyB;mBfCy`U>khjj5lv4YM0bT&O!su9&B`NKD09f zW;_Iv%MY|ff1i@4eUtQcTX$$`3Eq?qL&WhgS3JZO_3IAEY<_31-I9uolwir2vW%~B z3yb0vaoJf_Fi;H-q7=wtj^-{cQ!mopwHOcm@FC&#YggEfXRCBVKrn<-fRZsgJ%a}U zU@U^$Ih~p59}sN0Q8u=s3e8Q(c>jF6jQ_X95U|MhSfVSTjkcKr#4wBU*+KeqZW8IK znIJ79;2;PJS|{S6)pHIs71vM+3qyP_sp*!ApmqfWJR(D1M+B@Y#ZOyZ9vD$y%`Z%K zH*b=1TT}s`f+>Dc0POkbtg}(zEYsb)P@=32kpzH2wwgy{;~xrf>JyFC!V8E5%34}E zfn;0@rM1=a+~a%9@GZUFp#%au!!sZvnr%d#I&*#j+D1WJw>apc#DdgufS}np0|g#n z>2jV8dxR7Y6vp#`6%8B`M)e2VAeqe1t1ulXtLX}8gLbA0-l@Objzp+I&ZQUmz_NU5 z2q0r_3e8mFgr+cVAp0L|!yXIfwBI0UHbI+@(2oW3T>^(WTDnBdH3TfS4`^v=k(3&4 z0!mjVoEVi>Q=_AsqnR!NcM+6kt!}n$StDYvujYqbgap3}&-}rsWqS5e3Hq8asK9!- zH#UK&U2|BCUJT-!V}z&Kjm$$Q>Tze3IRn472m(x5Pv&cHNdcw?y|%TZgEQ{%djKov zAte|^z{1M7H5Yvn3RWt7kFDfQmK)5R@59Ru@1-1ZMp4 zL)7HLgzm8-a;9J&3Za7`%79!R;?*Z)?N1(0?6QnhRCLcmx2ycQ_HrF~bV^K|^O6(< zmO^;$l!Cjvs4zU?L@+j?mT%uk9B=f^y9zrg80A3d8Yicna*aA7~{JW>t1gJ)hqn)wFuh7;ukW5I2 z-B2eRie1I?Nq_*=aoXmrKEb$XV0t8w9SOW%gp`zd04PjGi?VIEw-%QMbH{FJa}#}y zfdC*>acqxl>^MZs{X6Dkhy>q%m6pSDl|PV#Pqho4U~rCE9+XK+r>%VFoyhcJaK!+g zF@=7LvT5UgkcFpB!5&MB^u0f^2kYD2jOl+~|EGu~;#2?69Db0}`qn>v0kHm;)ujJT z0~HlZzd+3YKw|cR<2#=}L+{DbDrl6j>~>f*Ijc`-cRB8jud>ZpHOD{nn5{ym8s;a^ zooUK{rU@2S+Wqf|w0T99wTy?&)Bk$stGHag-%h{cDV{&QNX|ySe>(kWX+qy#@bG&QvQ_2VLJeOX|UuqcggM1oxRB48$n zfEl2dFO3wYJMXUMx*s3hrJ;G<_yFfGDN*thVwKi!!dscB)`Sd-;{trnlLboK;6E@k zhyg3nI63p{S14E%!O6_X!}HmP7Z;Hpg^AQuRnwr9SelI6f&+8o%9RAz5i-DUjRdFN z)p4-&(figve1n|I!q!iVQjo+|6cv+zDWni^RtA%vf`vsMSgf|8yN2oVZ~>6Zr;{n= z9!??W?wzY$sS2&wxiCV2n-C8mU?UD>lY-L&Z51*;h{X_@64rMSY8$HW5MLda#m@|2 zTTFo8sMu&_H0JnAbh4EKuj`O6mAld7SPrw{d$OPJJ%qUZ*Ws{Y9s-LE)$qvfj9gBo z{Yo$RQV?Dl)Cn0l_-gNp=wBz*0B0$Rt~t!3%QWnYixPBmPUf?RQ^LYBB!Vr-(ha4F zmmAcrXWG;Wd^qmcMjd?Pk!Ekqegj1fJ?lR9@xk`>qZltqeC5-ePkJ z`7FhqC)PTVCJZLCn+HacSoi9l7dMlTW;739XwVsyIU~NM(mQ*GFl6`*+~R~cByjy; zAk2U&RyUtV)_Kpc+&xp7Pb-S~Z>7DaxuZz%QQuN5@O~6A=OA&2e$)e#$M0|T5QGqi z3|A6!a=pWq`Qbx&ickBjmT<+_FKyrBsNM!Ls?4b%rA9ZCjVTo36VmKXhdcy5GIi!E%Zu ze{`-vk`bO1{P=tx#)$%Js=I@`wBR@pYS^r|42D=9S{C4 z#w=`WTl6c<0W^mNNYzq}X+$ljyX9|xyb)68dG%`b*>$y$s~(&rx4C2LKj0sHbMwS` zBLc^JyR|%W9eSA{En~rQbCckb=Fc_hEPmv{7w@7KMxpTFwUHIx%PBudat;UTW(~t2A-}J7)A8rB;g?cF8-c5Cxy0>S5vsYlZ zN4n6arq=!Vk)r6eaPA~E$R=f*+Y;qkbSJDNB#KmW9U)k16|uo zKd%^kherdw%ZLOsdJ{loEG!_D^0$r;b{$?_xCQ4-%}jp=H96TLjC}Kb!melVbPf@B zclUr{gByYLG$u5F_@Q@*cXP8O_>_d1Zk)k-D{_;GnR$A3HHbyK;@j}>=QlCn#M%rS3bQy{8Cl$oACS_I1xYicVYMrXf}ll7pV^_R)>3Z zq!qmPH}rCW6xK)4Wyzt)%|C$L1(K-)lQwDaZRhLAWU17yHtDuC9<}#lhQF?C99#cRn`c)SE9QZB(UWH=jGUO? z3Ca~b!|6pzf6PHj`9|9`CJy)8_U(u^Yil&;*$y0^tf))vv18#U+RP!M1o3{uIDS~3 zTYHZeNJrT8#8@G2lf=ZvUcG+(4V(t7SPs<6OI+*&wO9d{^KZ`Mee=OZDFEZQ#}Dm< zuQvuay@lQc5CHe8%F2l2-MH{YeJ_hEDk>(A#Vrk1J}|y~m{2j3R*nOK0Q%e}jNXwHVBKTPx_b&LV z9(n6$cX6Q9iCzePUo?;CZk5EQLPz;Kd364$5;FXr7|q#E{&?!QJ~olZ?a#bxXa)s+ zg>@~}^_amN^m=(^COz&*f)2E>1`rR`9@h=!;_JXmORV?HS}72wC-S@z;D^+|=sgVd z^GScIq45h$tzN0Aw>sm6@`?TZ-f0BEmIVv;Aw0_gdhaS9ut1DE|4t{Wa{A)uXS zKk3iWkELyu5PyDyTp*Y67U5-PjhXs{7Dvmzw>N}ht|{n4m7fIkbf9Hs&K)5NhNX|G zej}?w2u`hg_wPSsJ<;hN7QU6U*!g9#Tg3CS}^%DXsA;-B340fh>Q(ASIj6LRhl z$4+4_FE57*%F8=8i}dto{Dgj35c?cI$DDzDq{!5=HQ~y@!=r&0DYyAwP-iGC@|Im^ z(r&+6!*|-D>-Ifr)(?+qM6DCgGGt{zi;ri*@1oxM&lmd77ti@$gc-HJzy1AVaw6#H zmp~ICz5?Uw4F%!Qeq0~s2PZw5396c!;L_zP?UX`Y#uW!^t>P5Bv$WP3to>Bg$P_pO4n>5ZM4VzCJHZ^P-l6oL! zORB2gfI8HkR2d>3KE5Fy^S{CtWXhbF`@}Ts3&3h}ZIjDsWfc51QNE?7kw*5+SO1=h4!*E&2W|fknJu zwml}On!Lv{iz1j(H()uAb%J)ky(Up?z=eccEC*#>xsG(C>R{O#PCG8V! z6w)XDKbj9Od|s#*ev;f<5J7u1x$#{$`n&bcE+g@gJC^c5+_AQrpSr)PuO;-Slt!k;zPCwX4Pd zRq<6~-d#^o2hF{}?YEk>c+z8ZtRb{FX-LvbwZ)cGUG6yUN#3tUn`-x@dSGAR2#uah zd30-7&_U=L&8Kxtn%}*9LlVP-I6S+DgfCKmi{uBgI0r5IoIKw0?!1noz(|}eIkt@d zb)qJcWPOW{6l;oP!N*!gLRdpfQD4C#QrTzBaOP^sHq9^A+lgW{Z^E+A9muX+jF^zy zJKns~;2g>htwBEQu;gVEn>UdUD1c*1|%9Toj?jeL;A!yK=vfYVSxQR_AS zYx?@mdg=S-_9iTy$L{B*UGfsArfDy17f;`BCOmcBO>fRf@ntX`d~0*}*oCoIr&@;k zu&{RG28lTexn1NHlNHxpRoANqweJ5Fvmqj%&UoPW1X&z*2OWTZZ$fJ$NL1|(v}sHZ z7?xN_h>7pGvG~6%Ffws*NF@J&fFQMnW8XrG?Y)5YvJKC+Z7eFi&q926zA2W zaD0zL%q|2OeD%VpAoDvVE6so6x~tW^7QdW%IhG++B?DQy=_h+`3NnM0*LPU1FGZdH z%==kbHo?E?f%kaSU#$+4T9%P{v1u*D>%D&5kGNAoXBVH01GSG zJ{QHm{6xz7B3?ef_YA5tQCanpzRa27vSLyA<8xNJq%f~5EEu`&ZWdjOb^VL>th{e= zTxcNk*)i8M%FF+Z=^Wv)U9r4;GzRFMXy8z}(+gYNEB zIt2t2q`OPHyJ7bKoacGocV<4$m$|OtIvzhD{C{!Z``&x)wb#n(cf500-q+TF%b3U5 z%V~X!U?{Fqg*s|JTr$ws^H?qC_MoA;4WT z?~|RKvSs#o?@9Db?cW}~*rm89*u# zL_E@!DhQ6}UPY%{0`Xa6Y^V zXi4wDfNyj(FKvS`UU&B<)0Bizb)A!G_fJ4Bb|#7&K_m(TgNU{H#}nTO&-0UA6ZG5I zO#rKcJebkTmwrjYm+WVUeQH;pa=?7p?fRC9j)m05+B zi#>9e*~d?>SL<<|7;cMx)Wg}OWsy z{$QQMIw@F5mhEdtiOraj?kGO;2$E@CgCYILLQH}gqL;#LSFfb)>7? z&55AVWIvuvBNN_>{HX@~^`5zlt$f>~(iTz!tiYhq&(syW(c4D*bZ(!%Mxlv^472?m zts+Vc)>RS_nL5XYxWw@2nX+|I$*UuM;<)vNDTjr7rO};>&w^!}hR59OPNG#x94!KQ zyxO&BBjFuTnbS%FqPiE>ccc$I#QGaf$O$M&pH($xHX z40r~_BqYYy4IVL%Up)re0r*5GXqa?Xc$dZC-%R1>)KX0d#|(3z_O?WOdc3xMu|30xxxGI8b60tcw(B#< zG|Sk3Z$A%}`ft8X0VgOIH}}q5ASD%4xUOes!9ARh`*%+-P7xM57p|x2&`3JekCLEn z0_<$=?_a;(UX$R(=b6fWH_=Q^_qI!2hiq)^?0gEX7PsPlAAiNeC-q(I^zsgeYJXx2 zSPCbW)4HHW0Gj(wyGvDe!Mu};Z~3jK>w;QC2#qh#9N0N|+d=T(LT?0mlJhX-L@eZt zE^;|Tmiba#N=g8j9yg3jiAAsL?us-t1W#ka%4?4{VEqAI%ih*0@LBj=;`_P&cQ~QOR`7Sn~kW> zMVOXGZP4Ah1xR7OAQUMCm z-!Zqm@Cqly}UPZ2IYehUT>U_t@{h2?#2b-cPL33fZ#U#r|7 zoD4K zkry+3E<|v4AGoHwmA5=vEgP1qOii?1wj{etz17k>liSagcwSblx`2!{K7L<(is{El2%Z?>)Y=S2bhz5K+es>Z=*30OTuJ%)z zC+O7K}p$JYiU@QgH*9$Ls zT~+tTA3}gznXKk~?RCcBClFcND3htYFU^ur1g!6X&S;1xpV+z?T@(BU$?6;>=5(#~&OR{Hqo3R?hU zKxj^oXZ&73;>U~)64LYiehfuMCf|x8!jI#TyhSmiBn)l&4aZJKziaxr2b+G}zv?y5 z42s#2DDXITq9t9)oa0U;5mY(nA?Ewe`_Nz6uZZ6_O}dp^{+dtvW8Ft6*~)V5&}p%( z9EfAq(^b`j|6~-PYH64$-KO~Y`soX4eD$KGa(M$~W^qSt3j0v|-r?@5HZvxY+V5M- zV%n-{2Z^bY7Q{O0Q^Z9@x!6!I-4l%h7wm%RiIdswo3)wwF6Awf`4)HdM{Q-047Xk? zn`ts2IY(R)^P9O;-Mt&C#cIGf#iV+1?)cXnlHUh-FO+DRe9LlfY8}5bpF$HT^nddz zrv?8DiT|2w8ZWObUoS>qk)BJ7rK^+xjMb9<y6=56Et)O`%j-@Qiz9tLC75* z9DpME1D{aQyrsePeK!H9uCJ1(vr%`Vmoc{=>hVA7~|&$4`xNx zwm@A*r={A%Eh8g~n)7=ddU9$i71TYp%SToKlh^IM0}Eq>05H~7Ez~D!!&wi~mU5}b zz($?swlJe-dsJ?GqhB~BZuHc=Jf zemMs1ASZJSD`6IRvk&%GSP+Y9o;xw_M);GW6_H7-zIN+{`G#KtScMs>g-W?ua|7_0 z8$TTqR160=G8GCa6c=S;JIEc9WcP8KA3i1BO^)1pVd*|%k*>3T%wxT2esOGXw^6f! zlGc_se<~}T?LybYmvMLKg_hQRa5nh>^iFD49zq6&V>}|taL{i-)svs7$YSR#zG4B< zH}NuV4hSVUAhpiOT`(@lm!g)h9=QYxP%ZEX=QcJl#Zi3Cy$oKwz{s+aqXGvFa9m;4 zn@kQCXMn=8^mUhcRduz|T(cxQ4^NS!3!G6N=NH*+R>OT}YOiq6=uDRxNjues22(N% zvFwbf9)76_y%inv2?@#8@omu&78;hETuf{%6(^1O>OM%+f)_aaM<)C>qiqpZVJdjj z!NfN^C#P?+0UKCvVR1NZgF?pM))zSZquC4sAhx(Ck(lQ)g0{o6XR_Xk(rDxYjyd&D zo>Ke#W2}ov(AU^KTrfdejop5fy+EgyaAAfd5bk>6ki%qdc2;p+Zf76zZdaX0x4m)72b)RDAL=6+ckg4pRxJJs_3Bl zkO)KEIEY^h{Q2RWuk?y6!DGYR%07zlxstm2KIx?vLp2f-_mdWpufIG0I>-d8(lf9= z3ChT5Gox4z`kcIrZhk{8Ghi<|Gi&-T6gGR`zC~A9>$lVz{!Bm~s!*V(qXMKzA7~7QPDEDm&gjGC~#+A!25G{BQnN5x3W&j3JGpVH(%-(YI zY=Qc~$jMPfLz2kgP=1fIg_(tTd6X-%`tT6Z9(V#us*-$A`7am1*q9njz)*4SYp)Yu zxVpN&87U%HH6Nt~dxD(23qf9*akT@o-27k<{ROT7so=}(tSnSE8=H;EQ$bc;bdABm zXVqSmAYcSp-m}DD$?NYnhbid;d0RxnK1e(~6}^Lb)jm&Qh_AE(2GyjY3AMW)OaP*K zNZ4e2NE##Zp!kVenpYNq_>YejDpEwGvpOr$Nqd%zucGt%z7g8V(6stigdNDX9VKs89a}?|pXUtsf@A zCKwO};0yW%%zAlVPabnJU_h$`5XK@W@&H%i<7;8e3EvpZvg1NmKku~n#u;?OLb5|G z=lr$@c|sjNfZzumoCfPyl=u6=QdQpmpm_1@hE@HzTWro9)l`N-u_AiPvE1sRt?zXQ z?tg`T%xm8FGoinaG(4LNA`T8)9VL2kz&N8 zl}dFklz4c3DYpY_3QVo7SqlmZEm*j8Bj?koBh>ohXP@KrQ$!?lz3&JLIocGQor>i| z0AVMu$CS};-oU*7IAgq^uCfxRL9-;K57SOXyQQLYaZkqPrij_jC#o3kbzgycAH}Aj z)>~U!6jk=Ccl!qh;C%1_JTG07I#;E1g)TDkw}r>~;&UmfwiDOYe(gX*<(kh*YLcKN zJG-#p3+4qIqj-KafjB0^1=sTn3L;Gw#i5>Ao5ex3wStI#C2*k-T??$e_~o8tjSC*U za!djT&!jDmp{5=m0G)D2;`QH{=uPA9uvZ_Y-dbRr@pUl80HoIN$47nit1IVBGs`KK zxxae)_>3&H;vDY%Q#&{9DW`AMND1tC6y~R`nCea436borL%DuPF0$d3-_VHb;J1FR``OStMO{wbD+l4=0zmCHGJqX3Ak zPPU2By3sBC_&j{<`8sMzqd5WL{oLH<%u4+3n|f`r_K`}q2$8sCsq&#(n-y$OD8@ME6lX^Am{|{Wucwh6$^n$+oPZDBes}APv7p<%OqF! z_xZqK58k7@pv`WoU6j-y0;;58AYccqShQQGr&aE!k97rVehjx|$v1+4XxQ-C8CUC}~KWXRU1Y8~g`IKiq=_!t^Gx4s^-v$LZesJ?f2 z=x@W)q5y(|pzU!7bXL@`_a!B|zIM%w^#9Bb;NvQ{K?$@T#>C|&LCrcN<~My1;4w%v zUZah>Of-}`Cjw|Cw8@~^Bes28g!szLE0fnq@aQc9gJ{mtv-tb!-mGlzqgJQNW@Ec^ zS+c*c-txIj%qNyF7_MI_6hDR5hO8DpYO#k%#`xk4Gy(ezS`<|kF;P@J>Kbf`bzKGR z0{a`=pt~WvIl+!Q`0~vi?p~WX%7clu`Cr9G&+5PGpSrw|BM@$LPAe?r2)lA5X&*_H ze7-B%LI6E?s2dF@5%Reva@+joG?c>N2qcXfzo3&A!(BIDgC(_1QrbP1+Mn+-O?VK~V6( z-a9jdAHi0E-t(=XljOO~7r`%V-KVs4g`LTtdJJ=Bw586U{>cinGLR#1<5MgL$5=Q~ zZbCXUUb&s3`lP<3#`;TE!Vs{or-Ha= zzklGKRk;9V`t0f$`9!5nOOvk`csZM?byE@%1@7!G_d%JZsii*SPz}Y?$lqp&|L%(E+h{XXPt;E@yf1ODDqX4$A;U*dMms$1ubEFkbyLQ21dF8NPD zlIK+L3_vug(h8youS&P$3m@>P9v)38f>YZmylAxg9bFh1KcD4PdR@DlCd8?e*B3rX@N<5wRnkjga}(B4H(=5ITnHXgY0}=4qo|#v$M03 zk`gfh8m(sZ2INdtN)kPy4$^w9QZm!P7VmIT}T?GR38n%ZQ5E%*jelOFGJaX?Yu{FlYk*SIJ4j@Ow`)6d1h;p1sF{iKSp2mz zAz~RrNx@_szyE;paW3XUqXz+Ap!EYP>gtZmW!_OyF!C#WO9y``f0ws7sQ^4WdzWkHhQB!E%FI|<1HM@riOfOXq;xo zwEvK$1l;gv7S8pLT?bP;==+tGp4GPhy(C*9S(`0m>Q_(i9^R8G|N!k+}utM*D??4KO4D(zNeAKrlDC#=EVm?OBn0(6-UG2 zSviAs4H8Hu=SNmDp@_0f6OIueeDw|V;3OqYC9gUS4Gyv!|9z$jc+)^zC;~cr_{FPc z5OK-@y(ff-lgyH1ux-zkD@tH~9p-9@n!|DgnkjqE{tk{A1UcMvB_n!EkDsECd{?g|TGk=ZAcz zk-C8d8VSMs%iRoERu7{)p;;D;MLL}RK(w*{0%#|Qde(ZT#vlA`H8nK{b2ZEQv7Se> z67vCxikiB_d6yc9CyXA~J9FYU(J002>`wW5ri6v(HWz$LRI*F$)G z59R}WI4#dR7LQeB(0#8$MztYMnKg9fLyvupr_H`c>74@4F ziW0`(wY57)AHvirlBa=|$DE+`CV~VFYGeR5s@z17*I!?Si8Ed0?bpG%vO7RZYU??o z_SaP8eO?@6nLQVRd%#zW4td1SJhO>BSwp}bcGmwEj$X^r1IkR##NwN!hyu&{*-vEz z^JEc42^!+DDV^vOuE>vCA0awzq#*`I3TUo#%n1|Ca0w_+)F*_q(;b)VzV8fN4EC?J=INeP4f=7&&jr?_$eA1>{3#`7*-XE>jUq^hmX&Y^Jz+*dQ{gXW4@`#RE zS?wx&DMvE^Q;1WV@zC6C+ai3-OIEz66xxyKpWJD%s#kBV2v3tzZpPi&Kgtq1%~8s6 zX3ck&w-_FAbCJuO%AD6p6nf9AZ5n^eztz;Fi<7}&J{mQ_eG0U z!&4rJQiA66t?ndY6zIB)j*mS7J`sdDNp$gl>4>Xc z0QZRE_2uO?f#`KX&ai%|e4mmMG4B=&xN{?e_7 z&-1KZ6hc1M1@tWU1U`GHY#A>0Kuq776(-hFvajvaeHVv29h&e!aCor*cFMr9Ap`5FXyc)a+TvTk);tRlht})&4{(r6U*+`9mk*e$A zBAsx=`DE5eM@wtmeJz5}cIvOl4w0Z|U}$>JMl=uo`43^i%^e1w{)L;Ot%%9wQo9z^ z0)s|ua1_k-wy$~S2Ln!34y*5zJuh-QB;>%>ui?a9qPGS4hmZC&33>j z5LX5oRY(y|F9ytp?tC%6y*2gXDFC4nVNGm%6AW~|e9Wv}cM~Ksl(dh&p642C z!~IEy5ViCak6`d`J8eyZ#+1Am{XK+{wF4`4BJi!B@j%mnN0SAe+FTpxlns|hI!Heb zRtF+o^CSbNo5$}95+F8I74eA*|%W)XObPcEeaL$juHxB z&IsQqq}c%lQID*-S*8n8s}?MOVX~EE-zRDWt~IW>=r_UPL@ZgvqXb4x8AB-7SJzE; zzdUkwT9O5|S5!b*z_JM?-N1{yGs*+yYX#QzQbu$oFOStUCJ-i}qes28r3bNg0l>aC zm~3WxM4IGZTZ>kKw)vw#i}J_xG{x=R-71HDTIj>>9%Vd7AKw*3#Uxf-o#5j06?65(fB|BjhPxq1?=gMHl`qm8u)|YAtD!usda*!CvbIOrYUd8BH{}c+n2;d zau_J}h3bLv=vBw%`O4yU_~w%*J4Z)Fj`|=JCL1e2pi^Nj2{L6$%F6F`0AmLD3mTm< z!sjX%J1yZuM|bR;oB{#&2E3xKu0A<`wi0TBDAsdS(W?XeIuCc?AfrsyxZq1l8s9{1 zcn_cMla-a#e`GyYgGK3a!C`4-g-1!59pm}yQ>td85eh06Nk+_cTN^4s`8UPI#U~p) zbT~HGi^H3aQc{SbERi|_)m_1t6{O2c!QcA=(zOr4c~@4QpbQDv{%xR<_yLa+Y(u+V zLU^XVcV})`Ej3fTq{%Y|5mZ=jlp$!7{L5CHU;Wx3$-1bKpuGJOxgp(e{Y+ z&PbN+P0vXjl$k@XTyDCcxDcqb0h=R7Li7tooGt^h26_JcL)l9xE#;tMgdGF0H%gf8#!kd6f93M*}Bc-@F+}j%|LBQb-aQpKkY-7H?#Z;G{{8$!) zi5l`D2k*PBbqIuYcDRyBAhhu{95HVQ7tYO^q4=DM(qP^LGDIo?ogMAUV<0om3HK-d zMomL~yP@gQw+FMIuML=MZXmeka(-}4z~&7Eau^4(gsSP))zt?8vmpHh7Y1Bn;+zxt z#zKne86i9bw>k-aBs4;t*8)*WLC=a9lR7W@V+J#suH9Yp8{9GDq~dxn$Xml7JyUQ- zPpQi}h&QOefx_v58j^zy3Y8Clfl5e7xO04L!!glCg5Y^ebWMWfB@)s|kzPynyXA<6 z0h|25a3=*5IW+1tsbAZnTPM!PT(qPga;68%Z=zr1umyClp+NKOnZmE;`W02UQ7JgQ zVss_$36@TbKaw_Xf@ z);5S&NJyZ2>s?*#@;`38HWDu{FOa+u=H5VV0@KA67(D6c+CtHV5Os^_NLT!1E1&Fj z(1#U+rT@QCfG0rRzX_yK`OlW1l7(OlYwKdh{F4KjQ@OjlBO$@?HCRaB1S!-Aa{>A+ z(naKCB?@@P9|TPoJ`=l8rj26${jjHWp?Sk4HlgVubsidl8Uf_ZeyOn{fYvs5Pu(HE zATu;>4vIA5tx2f*!!jombi@R%HEd}m^B`eT#{c}HW&pucLAV)V`wGV#LcPO& zZSXdf`~Y2>cq7ILK725z0>3v3iZGa;K|%sAEeL|22sOUXnE}}eURSvoysj7l2Sx;e z1X^fw(8)$Lp@G&tx3m-hbW$wBm*gqD_;otHN-G!)B?bMXB?S3sR70asvcZ4Dn`!v4=K ze8`bky?+C)?!RAoZ2yjL{QF(lO#eQg|9m^m6(G+4d<*f{+P}B`4Ls7{JZKME~d6_r0LSMTgcSn#~LaJ2$sg)I<(7Fx4i95Rbo0+SOIS z6KA|l0x`D(tB~d)E;{>BS7qF*ejnj~XMtiv=9ZxgHanin>3WRqU7`3Z1@UPxq4ZMH z7_vh7xuwu`#K*QsH;ivoeCGbokHJ<#GW_=Mip#<4BfQgB>*U@4PUl_Ae};rqI3n&M zCX*0fp)XqBX}=@C5&iFC|IZ4`q{Zr+!*5|=CVcNvD6HQkVjkE-PDBEJJdoB zf5rVgTUuN+YChSGVfPe*-FQTlFKzCd#qAKLZR zEzaGF1W>!!%{}D<{Q13bBuSIUk2X0{pfg_e4^x40t;I+|?q2JMrH7Df!Ds}6o?B|V zEn+!UgVpJEf(Oqh06b@FTwI$+Mu@=UN{IcRaFf$#2rZw3*7vtQR1xN$I4zpreDAp7 zoo(v$@Zm$lA)Cf0%!IsSoBR9g{xs6!9H2^+lbg#O>~KfW;SLp56VzFA$fHPL9peup zl_a&-qXYDAyf0tBHa@Q?{PpM0-|l&S@gYPt1~@sM-612;vxz@N{~8`9gi^y8^rG0T z=$irVM9`j`Rd;f<+RwHU1!3c^j1AxbDkC!kr!IW6T=TTEcw-7NiYRg5*A>s(GBtJS zkNG_|IvUN%$;ooMF4m_A83^E(Xdm+!0iN}~?utd>LS(m)i! zA)TEy)NODNLU!?i2i>_{Kj>U5kNC~1py6wTFiHnoV_#ZwSilIMQINR+$!CsU?pb_H zVImb36*%JW&o@7X5*O7E4$)h1*0h4o%_f2~Totb@4(H|1m8s z&D@KZPLMQT{W9Q(k$4|$H01ir(wD!D;pl~xcLV-$>E3d3_s)Vj}QS-Ds&}>eq*Y3xjIl?S!BD;LU^08JJ3ue`{MFJ>2o_~ z)r7#FJ*V|Qu>;OFOR_f)jx@9#pSru3d*v^6$ENd{y4Tfnyj!XTf>l|^{^hELguEk< z=fxaa>jlJKsJfnfdiF5bh4JdOu#1&WnXOT#$<^vik@a~;@#=K&0zdGc!@=ojZ`)Y! zN?$$Us~XGs>M8KFL=rD=+sb67{+9~?58HTrkb&NLemw1>a;CQXnEJ4K29ZalMWs`H z#g^p}5=0gk>seUp`X|GkoDw!Pwa7luGcuxTxZV;3Ltk+P1stdkkvd2}5h= zewwU7@{aHE9*Ib@C?yb0q@<(}lxqmJslI4-F#Z6-Xq%aq7Vf%a4OeGOlBxa1K@xo_ zM|BftTxtXaG4b)@*!=yH)Gtje|ef!kh zoKZeWD2Pd;Xg1!aQ5>e*nS^s}rps=V@)QIDIl^*t;{h)EC)T@0t-;B*^M7yu1AX!E zID{$4%VRfaeN$h_Rh2~OOEtlZ4rlnAX0ne8t6)zCyO^A5JLqgZbtt8eML*7lMNgs z^jYD+KsViAqNbukhB6cJI5ITf!}Rb1gb?TL`s3ZUc$;BudD^Q@gR9B;8i+BT>%orGpFa2NwXgAmf?L z5D5gaD~+0F_ml{O-F~H4W*4h?02UfHL(xI3kqn53jSZ_LdYyVC=zcz6cO>oOHpR9XN8u{-U5 zv@u?d4}FBb@&J>pqkVb&3df4_Bq!H1S9qk7a|`WNPTLe8KYlbce~pTSs7B1mi%yXc zliCnM=Q<)ggH8VQcgU1lRg~jcB3@J9niSKU}0g&$;)g0RdPX*Ge7dz*z@!kmY0?%Zncqmtx&FOS zt#4qYz5i7wQbc1@waY&3pL0vkP%J(KiQCxtz39;fj8{Zbt9M4Rwt_arPW#rBt%HLa z*InrGfM^a5=Mk6OLk1QoGET|)8fSAq*$GFi- zZz@nst~aKf#D*5<+jo2LB>0HwTY|jPa=kmy>E3h`b~|dBjVM*dW0A%&Nsm`e9hD5$ zWxc*EP<%cRKyNJ}hb5_cQ}RK;v&XM4uGqUHN6FaBkJs6Rmj#peFGZGj+#7oKg{;P3 z1F5OP^7cRi_}s+CGT3ahW)2s2?H=65M5s=bv$)5DJAiT)@&$O^3)ruGLd7A`Exetk zkSLIOe;}Iyl&t=kYJwF`qM&2U6&omqJqNfo3uJT-!96-xV|&`XcUBoE8L$cPG-GDb z`lbnd_%*2fGtViwoJ&x#C<+kjSEt2vgI(>?AU+vUUhWY4R=e8RpOE!JQ-6Beb+?sa z@8Ez-PXPuzv=3IZwHq$p)nAQU#5KZ#dZSpl6}y+f|4wQ^ zKQ0d##g9jREWRpv)0b@yHg>UX=Xq;EXBB1xQs7vr+9_gC1QwY}sJ>6Y?M%Dw&1XWE zGu71f;anR<#oRq1@R!loV>bY)ph3_Ul!kUUr-$RJnc3NK;|x6kx^DMm&*ex2qn>jP9GG6K4J$JnS~DT@GHG5Ctw_>-NvT{X`<+Z zRl4LHE3CDo@oA@Up~q5)Kagg}v3n-Ka9b7~om^g@U3PYMd~<-P*YQ0NaR!N!<^F*e z9zFH@M-$q$j-fYv-ybw%u;n;dL|1YHblC&^GBP{6hHn(Pza-l6U&x=V#Q!@uV>JX0~ z8F}ikzsxM_JOzA6V5(=JAeJ*CCMGA!%a8le=+Y_G931EMV;jY~ySra|9LJx#A=FR3 z43_+`{jkd0Kgr|_E>4|XUb+v}YADq2T)YE4>&)rvS#j{Th|s0DMCFC z`jkV~Y zW1t}K+HnwA^ANc041CTxV6~pz74N0K@%!tLKmh0`zG*oo9sI7rCYN-fn`_1MrdN!2 zX3{`G_)@kSw5y%#>g)cluV=$K1JYQjgGW$85l}R!jcIAEO=T-Y`aCx>N^Q7YB1PDO zZKQ`sonnGRU5bd04`Mf1iGl$yT^QvEIM)x+v6rZt#rb9cawC$Yl-BMYWd}1EZ;9@GQ*og-L zpc6j6z<4}9ZVuv~XP3t_>*dUK^|fyf#Bn0c$)Yosx^z~;L`lfPB_xN&gza6XRHnHV zl~FlgcYo=7GZ>xUK!2=XRFITo1JA~Fu9abJv^0J7`}c3(`h9Uka=g8_KpiJpzU^w; zv%9Bfq;kd`A>aoJH6b3v&g$s*jYzbge zBqR?Oc;e(=9BtB|LaRY5|6b0NAkEgvFWm`<2``UQwC!HNrDsI`5fJLZM zyL_Vk*`NE+U;FlO_4to0LM#`+L=rA%+iHbykQCBHLB*__Up6;0)7q*YJkniPhIWz+ z_rnNiovOBnB}RB|C3s#74;;9@{HqVECl`jH7I}h6LZuwGCba-~67X1(Ee|tlKicf* z?&vQuYU$*<8_i`6{k@LX*33U{<@`yc8yoj}g~b>c7z9eZymA+zo-B78VRdnJ%>xWW zjlxY?`Adb(3@xw~ra+ff4g35n7$I1JG55hiM0BN7bthoXxqvwb3p>aFTis!gKRRLn z&=&&i=$By61IET`KsW#=F2%@qXc0~<)fziLogvj6g0+_zEc`02XTF#ogD9FOTBP#t z!^Neg;pbyf34!tP@vFHDdysBDsXsqJ_$o$xvdtPl{22)|%5>pxi!dhILKo-ycQ2;Rs91KIase$nGkd-A?@MqBRKoW9sHB?&_8hvq`!+yK zu0Ai^tRBuJ6?9~-OhsIuk0i<~(^rw>HtxE0887P9m;NN_tyX;h#;RI<4b<|)=X^A1 zXlT_MkKI4l*Vo5!F`QRJ;KD@pMZ~)6^ED=zEK_lsvP1(#lF@$x|M@sAD-z?-3Kf ziQ7&SD%7sbi+1~wo+uqV_xh@%X4gEYv)BQqzFiL}7r30dEm`!=Vqfm`A3kUE${~{ea1B1r5?VOG7@0&Zg%vEci434)+VKEmK z1zlNMk#<&mF+wwUEAqE5YOnFh2l0O@o}T!~mxM)FI}8 zQ+v+lMDq|d*v%CPt;|zOz85Q@geN8@n!Q~P9(=jizxFM6{`n*b?sW9^<*H9u8}_C2 zThyhswbZbNRH@S?_7gg4*zG8O2c}!P~Fy8b_3)#RexC` zr;GneZDVuerNu;5w^vBazo|kFv;70hoR-E?h8u%^U%!4$N;rt16+UHSIp0=3JvoV3 zZP;2_$vDLzR6ViRkqo{Q!bpByU6e#z{GwcVq_IClB}<(zLdFV~6?kXnd^rw*{$dU) z7W3L)=Z{k9i1aks>*_i1AT{6-A)Ew(0g~^uEix3xTr=pPrkVpenR(zn#9{GA>$^-S zzvrXBsvOLHAi5m+*-joRQU?;pzl)2AMJuH<@i?^5L5mQE+d$2|2$80?Q@H821mM7x zf6rACdi?m?^o_vD1Tq3OrN#s~KDX5u1K(1M(A4yfCH*Beri8`xJP*HBR1Ayb2p9M^ zUZgE1v#I=mKvo)@^qRYNd+li1T&?5-8@&H5vQ%H_a2tt}8)Ksl#z4Xd2@-1}pWRc?zBM{auP|x}FgLa-{`>cZ_>gKe z6gYrO6A(Fda4}f9$difcuR1c4OaQ}FvAUYyK^qnEP?dkPiwA=1@YhW(P0e3zZBkGa z$OySrG%qT9p36a8aBvlxo}NZzen(PUL)(qlMF@5^n8ypd9u*uZJ`J_9T7*77U`=bs zfBrB=SArl0EJI`CFa}}a%V00-zV3a{d1NLFYRtWT)Z#)6AF7U{ zplk5ECSQq$>AsbfgMdgwGj2ZITYGrBF88sRM-AcnUcMTrZgIT^DtAW4o85Uyg6=8h z+Vk#0`R&t{m2^PA^N$XpNm-;~XBWvzN<@?mp$Mc5N8UWEJm>x86d8;37OVpKo9gtFLxGj2(EV5plDd&Xm_}Bm#X&S z+n%ic-rbqPv#gE3%xLx@HPTq_Dg;#^SpFg#wKysD<7yeQz`I z-bUQOZ(AVAmxB_dq_lKC^c=FN1lH1-W!l!Pr}7+Pv$vocDR)?p5@<9fBPS=o?bQQG zlsi~@8b&#Yt~2nK^Py6CYo+4k(_*0HRBpYQc0@rjj*pjWfPJOB^*Gzuq#S6!OrAKZ z?WceKn0Il!;~rY{B7(FJ8pp$hmD732o@dWzY(`<^zuC2ZyW2FWxKE;UXzF-zL^}D$ z1JLDKTOYd4hAGy!(VaqG`he^J`6uzlS_ztwmHqzi=giDZ&y!s=SS703#n-WLF6n9; ztd+YStbBfa>I^F-0 zv4xDhHkKdV%wsd`w%w3^AS(PM29AFyIffNPFICrYCc)lH4w5R@<;}`_gca4Q(Wig^ zKCG`X^z?6^-`FT1wb{r4p#7kg$bg=1*-PPOc1FfZVdYi&U)LDoQdkn?j})%qL}-*x zUTfHG3#-{2p19|6kh9d2TP#==#`eXc~?~;h|C$I;+VlrDXSSC8}c} z8ne3pshnw1q%A02H(J6t%+=1Qdi1CHh5#H3IQKTXG`UJa7O+}(0J&^Sau2AL$;2q$L3 z3a#zB%P62Oa2x+bSNWtw`D$*(*39x6HdM5^9|#(bj2ILTJEf*Nc=o_;y!o4>1Sk7| z>5HfpxJ4P^Y8{ZHhQiHkE8zuxyvW`!;<2%bkul*@jX^y~;rm!Br?WN+nCpT2F5tYA zvg!(sZ^OF_9Ehk-63Hp=>M?~fq_mge0>uS3WdE^Bmoo%kuE5c=>5> zU24#WFPJ=haU-Nyqj(tHXl0MJ0Uc_XDS2X0r2T3bSEKxLi+A}L6_OLh&tH0dN>Z&k z0#VFc4cS+YCahJQPt-TZt5rm8rV9Z7>g=A@|4JvC&A`@>0=BvU2K?m0Gu5|Fl1~g) z17Gr`KZzRVZuPFm!;M#m8Pi_Z!os{R-?S^O3u)!zlP)AR6n#!C7A%?+E`s8r>l)1%6JTO3(nw{(^ zHIQAenz!+2^-nA(fGxSNyAv`YEh+8}&lW#Ff>L7On3U(&bi?ydx{#<0poPiBo_#?8 zKJQ-l419JBWskc}-wY8MtW3LYaZFK0M-O!I&J-XF zT-r#mvmZVW7rOZ1dAjKRe!FVQ9xFPb5yB9nc81lXYMuzG8E{V->2r#kTPn?e?#!7_ z6eTi~aP>m|3t=1$QFDWGtajoICnUUa9PhGT%O)4W&1zr}c@|V`j{k=4xjluWqhs9T z!$*L+44RSe!77JHiLiM7Q~CxZecx=vNXs7U4f|t&NI(QU?*~w3b$KmDK3*Sb7gmI@ z5(ie*+BTQVavtYhyx+c==YU_FSmlgoyP8(?wO;xDPH)vNzO2s^Kn?xj3a!ewYrjyK zi(X%Rr63X3X3?&Q`2O|l>puyZK-W`sb*G@9fL(CV7pPt5Y!~a%lfd0sRtF)LR?bzX z(eyR=A;?09Bg<`RZ+)TRe0!t?41v~vkFLwWYd-vmf8D=&;*5w~@w|bt-E8oxh}iT8 z3!+We11Wh{qeWeF^ot%EYE?Q~<(^S3O!9+t4XmB^vV-rB4o`F*s-K>^ylOb_I;}^D z39AOAq;BEyr3`OuY&u+f99!5(_?g`>gLW_Qg5|IEj;b3@mn;z3EeA(*+YK8qCElu{ z(G(BFQmeEU$*fT8&sket&3%>3Hjp$`8wra2-HC!0M+wy=pihpi_ISFuv9VD^|0GC6 z=bHp{K@gsB0!~{6T5LVTpt(@Cvk<+4UuF2$NIZf@$CpF%tP^z1A`0H(EHI6(d0)Fe(IWS;|Fd9_Uw7_sS1 zzdnK4nBaRPHS%x@>>VGo9r{(nQStY8j~R%$o~?Bj-@9L}(MTb}EGQ^=dOnlkwpA|; zsdwIC)m(R1!r>X|^>B2)`YI@9BBJeEdwURGcQXGo%3(e=o;mp~zw=uOlPL3+p%q_PVelw62iqMUQI5jyn#eLK#4f_9y+-I^D z^Tj!}5T*4K9;+cwxy5V=KHu9t9NO<`OxY54eFN{7V4Bmx14mT@dSzTDOMrOS{jv`o zR-4kKbU2-fY%=Txu%OKJm=%^^ss5HA9D$~E3V=yRjo0zZF85GIcK+}g^4z=H^C&jB zPK4{@)@wPQc1i|aWmR(*sFPWo54jO#H`sSYdR`uuK$GMV0GPlXR6L$^3$Jn5uV$nT zVXaOQy>d=%_&?Zt^KdNJwtcv@S`Dj#S|vqj5FwNdnJcA`A!C{DCNgBmkj#~&k`$Rk zGS4ZqkW^+emsy#G%roD9#(IYD{e9c^e%tr^{&=_FW82>M(ZYRS_j#SyaURFM@5g@3 z^~o5W%hj$t@E&(d|fbm@|Gd_b^c zW!$@vzM+M8>vI3z)c0ApA0mbE5 z#au+tya-vf(Js#Yzowg7K7L28D4mMepyu@AT(@{8lDP+DnFeNY>N{D5a{YGi} zZSQWsPD%=S_3ORhV6J%>;zpVb6Y*7e1qCXnycc!xTD%v(osjiC^7MD|s-_=tV3J=a zUkB;`WoGh!`Tm{dr>c=EUM<0|U$>GEu|o5t^nx76bk=~)FZXZLK+G`%S9(@GV`szIRmET z?^=%<7{p8rxz^+qo(A&IHtWtB$c%}IPm^njEtc^1%@r z#yei_bEV~AW$oq`W~2{2i_of!6SEcwQS6>;NA*dz`NM}&2bC1tBb!vSkKuy!pWK2K z^iM0O46Q;aW8=;a1CSrDne_b5()i4yUOnx%q|2W3$>h7Z?;lskazc|kK9JV>YXVD~ z)8u%6q6?qV%m%?DM>K~o^KRde**}J3$QPHVSHPUc)NXw})T#hNIs`|1g#T6jQ zTHIED_6ufvfXTY!Le&`&a|+CELk_2Aj)MbcahZpg7&oS>cx>IiRk@ufA;FkzCg5A+ z@0>z=JD2XrE$Pbq-}rPfItk~PeqEf;c<;-PNc2Hq`NB^i4t4grwNtJ?T$?zg)@}Hq z(fJw+Tm3A$I!4pDkTY#AY2fs_?MpA^wa4^m{EiK)Ee9G@lp=DNaX_J1$C$sI3x z8fn?+=|ksY4pE=BWW9UC($dq-?JRC^_^qYQp@8`2TUJnTYJQelL030o&%_TlD?ix6 z^nrV+ev;?ZG1MKqATU||*4o_i+thVXaWZ6RDc{wJYtysS24((F)=ko)Rs%m9Rlp*r z{HtQ*Gd#|&#f|J1kbPxt(9PrXCWEYw;*^a$L{5`b^}+Xok^{lO?R6IC6D8et?#9o? z`@TwWi!45eDnAls2Z#12Lc1ni%ILj$Zv$hPyV#5Zh|EsL*}c@_aiv6ZL-|fg;SW&U&cXsz0SP#@0A@Zp0Np3g3;=y~uqu zGa8ZN)zByAvfzrzNvb-V@z=NS-#Yuc)Z=y1j2aE-RHNAwj1zG~4@I&q*aTVSNDmMx=?SkzGwqj4CNls<@^~KMCJ289c z07y=v&i6=$E&ybNcUCUUPB}zHwJ@OgSzxxkSAh>QHz~}~yc*=7zIn54P272NYirvQ z0N93gcYA&&y2x-c0h_=F>kYJOQAKL;_HA}&Uta{LMru#egDqsdEr*arjY;l&L?nx7 z^vPfcb`1@U6qD9tFn_3jDKB38jE$R}k1yrDrF+2#y#^U2n$6eQ))tqQ9A3o&?n3>b zV@{Cuj6Q?w<2uML_Jf)sgN`OjxD98LeNaDY8`uJ!sh^*0j-_!tv*$XuCAvP{9 zxkc+yS>OaYINi8axK=wMC)-EXK}bm20|`)P=Kv@Ei5j<7!>_iZNhsMQ5oiQ*wW=ad z){@>)=WbGMm!bPGYbYbKG?SLQ%W%A}HgkSL*rIiQG8Wyg5tC4Ej$>pWDY3_2`z;DaBApRgx})EO@1OQQpkVgVbUWr>q(uhy*ZI zgpztaMt*yYwSboDt*RKSO70y={A4QL71f&o#Ip9yRc?TV`f%|Z86JM>?0hoX2rf(K zFkFPN-G!K0636p)8z`2uMN4t#g)|OYp z-ldDCn1|hi$9Y|=jlLc&D=TYrQ*JKY_$@Guf@k)Dpo1p1m1l5nE*VkUd3}EDyF1~Q zk?)I+j~$M971FUCbFbox&2)4zTMFC_A+170)>}uTBf)3<;%EIb@D zD=aVe@JUM}g}XticNh#(31=%<5*Cd6|I{?PY92w3@$Q6_>R*)sZ$HztVImWjdAb2 zLHSJ#xE`q9yIVj&4bk!`HYgH~gIf71ocS|XE?-tQFlZh^{-VLpFUh__P1v0xH9X% zyLB6E^TqJlMa1|N!E0{_9yJr4)qkxh-MNve$`NFQ={9c@s%+2j*Ft5Jq# z!OOZ8j(j*n_KzkzAhx0AXBX#AY?|B`E#=A5_a)j>E?6+M)j=kq?s{f=@>3`~Syhhg zRJD&C$RH1(m{<;A17A`Ga5@4rBTre7s7;KPu)7VXgn4bf=6X~Ts<@+g z)pr86JkXFM`05(iaawa?<`hfPz{;4ZwGmU@2XX+S~F+O;K{T{p_C3 z{(e>y?nHKXwtsMHA>b>OGwdWK?_rA(t;n&JYm_rV9ewAh$`1i*YcTLlanKf{G!>jy zuh!8jWS>0OkgTsXXbl9C4eyOS7cv-4uYxB&YMGNK0AZ26I@WXc<4)m->d5aj=5y(n zID8k|q+}oEoZ`IiXIW`cr$5 z7h%w2e|NBB6{ez}xh+9n3853pjaa_(77uX3sD7pY2737hK%u80$38OLLI4h5tv2mD zmzwIPV`!)`TxO!rW;K~=aHTn_Y5+F`DsMkBnv0S^Gej1%iJGSVw0vD=)R^j@ zx;(62`QE$VbP1>p86Ls0XZ~32wL`mWLU{1AlDw!^sFbRqH$2L6&w_S5@(vv}iIQCSg=;`n`=zEUc_otGgL? z?69u=gNjd7px1HK#cnEZ4S`Kb=c;ECYYOY0T;0V@9X9 zw5{MDt0&^kY=?)hH{_ZGlWVnISh_RsI(_qh)5SDiB4vXrVXmS{MT@*=Pir)7;!VR&DpkkAaGqzcg`Dl5iPi{(P}@{Aj2}#Ekr#-5EJ_sG#`F zPCHRd;0*Eq(#RnwD1`u9t8Icly@oWCV8)%I>fb-Plaf-}Sw`*B{pcAXf!-?SZwM$) z5Ldt-DLXjikONaHvp3?F;%z^{*=Q4Lkt6B|F4?IU9KuH*{jqwLAIlkTc?3mmje`{Y zz-_zW!{X(!h$1|C1Y z3-6A0c6aJm42nK{)D#N^^F}%mw4v0}2YrHHCsbNUC?h|Awp8K2F93a8khV6+dzG6v zZ@Sr>)RaLtV8?91%{j=66K`yP=4Gj$Q5Uc7(;JT|+fk^El{4JX->K!*t@;v?LT1$E zM{6ReD5Le%Y88y4c=la{n&s_z=-lW89PY3kj4JEs@<|j1x@#k_bf;dZ;~CluARo!y zbJFYU#v~w@m^~BoV_;ysq2Gi+OX1$xWO`MfJ8LM#-tsn_IUu-$&~+_5XUz;8+73x+qLw<5{*=q(}`dQ}!Mj^lU#yu9d9oRG=ZqZKol zC2}TFQ0RzsX3e{x=g+U$h$82vIA*K2I^R=G&-GZ{zjDn)y{-KHhUXf8A{@MXarEP- zPkjYU4xfj&uu98r(^A6*a9CKN6Y1E7>brNksA9iZ&P;uOXFpM5KG84^|F(o198Eds zvXY&o{bhclS??!JphK$=n~hUXyTLX&zp!$(UQ_z8dUB7FtpC`R=s&|e|Js5%Y!Sv{ zVwtlEStW6eVNzQN0pRJpUPoU)8en&Xq~}Q)4-AC@yc!KnXFujM*L?fvT9c|J48VjP z_$NstyW-CO8<6dP*fy2SWvu?AYF|kf3|J2y?D1dF9QZN7XFX!>Kk{uoCc3Aful0;4 z6K0e5!b}7z6}|E%>j+CY`C&$S&N}MWn9cbvu|`=pUPBy*){?WRFo`D70B29<;84V^ z6+{){>cx>_UO@Gg-#G5YyIrU^=O4JCODgR4${Dq(1=e6LkKA0x`0@d>g#`g3)N8ey zb!%#FDh@o5nW}ShABIosK{=t{`LNTU?{X%dbeip7)N*K^V^ZUDhcC%zQKjo#zFZ^z zNjA!&5aR>MS6c_ zwRL~xsl^ZtldSlrU3nJ{?tdl!Le+lQnLIz=`!!-OPk=fYq2WlmQAQWPgzkAEzCr}_ zf>1OlCD>CcmS9r7-m5YxIx@c4;%7?Mtf5x<`8mX(Hl~(u@qFrkft3$=gn=;Ze=K~5 z&*F=MWq;RbZbeIrwt071wHn1f8idJ1F&kx|y_wxDww6Pplk5{U(d#B_bL?%)Y^HVW ze=f|D5)NZ|Eb=!BX!3R6$bd~uj9Q{L&LOY4xjE4B3fw5MAQ?qvebpHYoNBVZ9$1l- zBFqkTlKG1Dc-i^(sUQkRg!mu`Lr8VXr!jUJ?2396GG)UM#kk^vhrfS}{Zrc%6G|BB zH7`$dwhN{fX248h=jMz(f^)@>E&quD0d$tXeBGo%|Nh6VuWJd2`0MLG-~VSF{<8=E zckF=!i4!YD%sSQv|6^vT!hTl;;y#LrG;6Mu+n>LUW$I1|0Z&LH%-RH#gTJ%dS)uh zq}2gbl1iwgTY~>(^l8q2H4bR2`^PTI^>u-*npb)v(2% zOVXqkG0hd5@9>O`uuD{_FZuf==d>#G+v%(b=>h#A1ZdvO&;_ygzhCt+_;LN?0pYE1 za)H*Q%wbw*-mL8wi}>W*N0Q$uHl>oGXCVsDj3~A)^-Y2@I!sY#r)}ReZ_e37B4k1C z8hd`U3u8);h%&I7;@Br_Rd>bJo+2rEzl5)b(|@nrPw_F+^m2$X3W0*OwEW^#?B~k_ z=nm_~fzF`81?ZG4#1hChhN?In*`Lk)xBxGxyM0oW#0By2hzP}_G+)xV6$!EZXtbMc zc>r~r&{*2Wo$wgOXHe{J#BkBG@M~2u4?-&eK}~$=KIUqsNQ05ooVNUc*SBig9Eal( zlJ?8UJtabxZ|#)EOyg=QSde@!e7ZNqqPI$@u?u}Jd}bY|-L@b479*ra_M$E$Is&G*A;mm0=;pWJzS=h~`qN7Yu^P)-wCEk47v|wn1j1|6 z(eB~}NCPq=oA&8$0t_?STg34!@+K>w%>iyse3r#qm8K_q7+)k^W~_|i&WU=}T^c;; z35AoTVZFha6SZ&ZAy}?Ja~59wAilb~YK-7&Up`+TpA&V4&9?`R;8Ox&vdI31zz2-h zQx~hR`T=VLsS%5nAn%H*OJ^poyEKSXYQ`ad^>}Y{$(WzF=E~Y^t{7W4Z7x>UQ+P}& zzZ`OpIyJeXI^_^DZKS_HWtZrxa_X#mJA=Er^c0 zV??^kgOC=b)S46(Nz2Il1ZHRVX1{#7$N64D^_}Taui#*Au;3X;o581v&%Kfg5Lk@s z4zkq_9ek^VR>{84IoX+O{@4#8gYDiufV3LTCU*e0m^g8wu)12w!NH+cs2naO_T!yC zGayl9H+CSs^9Vy_M;_yO|cMo%Mam|1fN;d44BO)Sd@sazCwm+_ec8_YZ@9yg8 zNdd=;)=Ak!1fJUSg7sr`oYzM>q-3p!R}s0YN6lO7^_?A8H~_~%U6Z-@$T<|IUCS8F zii4h=t;T>P4G@(;e9MD?4qLC%BNpB%-dx1m;^1cWigG$Sz6!;2y_J^ zsH-e6lv;f5=zxew$IuWrpgjy14uAFP;K0{6r>y>1o>10Aa8>iM9j!` zB2Pr`yZuZNDf-HteOrjw$trkK>YV+N#9^yoG5C#1oX(P$4g|LQ} zOY`%~lfiwEnvE^k4jC@oS!HHw8uf;!49AKZB|#B*8_de0_!AOzyfbbdq5#T?h6;&u zu0sj+l8=ozz%{>APlXo_`qniA?1(sH zeHKiu&D^kKUtVP>>Znj`a|V$qSM(CZdvT~1=7(nAadIl*bOpr3Hdw>PIX}cxJuIUL z>xc1Tj?old+56;IQ8dXexBs~nXGYZP6?KnRx-j(tced$ici}T`x{3e$GS-4)@rt2g zN5Jv}8MSib!r&@}zl3UZZ-yJPU3;=1Q2#D?AG-TGi)lQZ#32gTWITO7hHH!ix$EKSNIk0tmI+h3M6T4^Nyt*;}F#OTdA8 zZAS^j_x&_iw!2AU2KY;5dFSlSn;Tv^WE1f%5H|_Z$!Cx2Jhz4AObusR)64t!MIXX^ z!Si(~0xJ+;-rgcs8bIJUKn&pgsdJoG>fz(Z-lzhDY-ap;E`qmDI$j^2#d`ont+xFD zAGEk1YtEUVDJwI@H9|Hx1oa_NJP!Etb(ZIC25ckg7RPHfD1s8#zxW+QHy~O+L&Q(Y zdmuVOwi9vs*@REVdK8zI)*P;os}uj^1_H7yeBH}qE1{C_o2J!%g3M!`R$4--g2Fx` z6`L8`5&k$gp=N?k7P-jNy=M)+z79t(%Efi`(h1=U^J}7%BFpWzEZ+so7r&iU$okx_ zzMeizMuJA`?YSEp7PYc&u+8+G9Uo|vcW@Nh;UEY_1h#34QKRY_>V=n(C`&26(Jkxv z{yi4o4{%2AUc}J}Xw<{q-6TVPVevfafNOoFjovJ}`OgyT)~<~*3q)Uv(UgM|&P!gi z52yJ|T3(j&Aj?>}n#zM2?FW^>f($ipfMVD6H-CrY%HC$O>btva4W>MkmcTOGP8z_^ z(M^`3`N?u18OYw>~y1Z|3BA`4_#>XQ1kQJcp*FbzX1}eXVZoM(hITkW6 z;MfVKSw6y!3vXc)v!6sTpyBb1o3XABMXeRf0@C)U?an*_9n3y0|NBA$0`))eD#^<5 zfE)kzj7>e~QaFsUI5bm{tAHNon9OeV@U%ooN7G6a=1Y4GRs(h!Xh^N@t&a5aP`pv~ zBPR8_Qy|0zIa?n-7qf2|n@Q@?1O8LE7!km}L4=O~S`=V!c3}<~DXF4PuIg~ZdPQ^A z8XEJ2vxt!(5ec#?kq-^Kc}iU__9mt&#UG8f%ua#$kpOq zhcM&uCC|e4Jy!wff)p|KYAh<5rEouhpsoa=)ppMw3!aHE{ism1Obq}j1o9Ou?x>Bf zGo?}8vYKT5@vigx|2&JCS{4<}Rw~(Z&T(cgdt-{xg+JaACY8c&rP285_59wp={M-} z1Ieg{6_VYpa1t7g&Zu@(+3R)t!EYA3hjF^$I(9I(64gIF1Tc%Rz;LdPl?`j-heqVaX z6!>h8%t`5pG9+}q3V~dX*YS3wk6Iufm4JTLiQC7HkzPIoM-{NuQfP3eAmLLRD0<0# z743HSHqx6Ns@vPh{@$(s0pzH<*&-U0xEV!+GX+R8yt(Gjgi1cHS;O>J-hEjg^5XI5 z{E(fU;}%aW%Iz@k47cS;d z7RNrEw++m$*Y2JYnKiGQVU&|my3!$pnx@&_>i+cY9E|eFIQp}+UN@SO>!8wCj|dki zY*{Bjag4t^^#@6)U#Gmm)}@bCKA=8hpF3Y2S8(4- zN7&w-I~gpIH_&X|R@}~W>?mmX$BcsPYfhcQDW*D&nRE}~o8#O7?qNZ@|J$XhpC7h_ zj@S4e;xm49ATYGb`CC1Tr}~n_Gxc}7gX&|vIL7nV3>oIlO~(wJ({O*hvq*Y*{oWmq zGmZMdq$bo1I*jUEzd2bsNS%9be(gIo?QV0($`bA zo)hc?KQA%}nw@yin5t!&)Z^OMY!i#rgy*olp6#VeUXKN@e>>r4bjNrrI56ccq3GKv zLOboEPGdx5WWPegZoWfw90wlT|2TJ#hhsmBeI+>h6x&H-qz19kK0eb!_y9i43}r{u zImbC;G%QOiWoi?&G$zG=-eQpr+9TDlHCrmTt7{~D`GcIh|E`^fYa@ek&8v2hSaq0K z;{|gM;Mk`ackH&co#ioVn4K*FiyNz&P!m#9!=CHn*~Zz+Kju|JWywIeex{s7IXw9SHS@UBId|Z+OBl>;rHQ<} zMNs5>Fy*MBQTF(88|8Fa6*;-bswd*2UP+#WgW8@ws{4`1X>O`{sUu@;Yio$@(2#W5 z)@>)NOt;=i|Ltxd*HophKal3!aA^6&+H^#-^5f@r$v^2y<%J?4{`z%)exn%1bjMeJ z{q@cAYJZ(gcc4|LWf6BHH)$uwC|!%Wsq1b`;&P~rbS6?@I-!CzVjI_n>LAf94!c(2 zp|?snEv_deAxl#7dU%o&bG1U7I1C_R3vx8RbLnNM<-(lxXg{}SH;`#U~Q`w7nijlmaH$fg6Fn{p#4cWG7 z({r*co;*B{4JP91w{G6N8>4rfCx$5P6XH~lAFIEyNm-cw)DJf+_QSeN4nJ>iD-Grb zf4^~uQ1Y2g%DE2qz{Z`}*$>n_EAkwlw`%SE@wIimM8FxA`H>QC^&C4t6lRIj>dnpc zCE&3gg{?@wEM1`8zq73HNX$^~tQ`1L9aYKaqPD6WYVpdrD_|KTp#uN8th!lo?miur zS_sRUjbwA+apACUuB%gp`nkHNQa%Q{E1FcWXO;IiyR-LqNIAQ>^nZN7ecA&x!xa;g z#7B=dm^aFc&BwhLqvJCO!(4+th3?vuvAl*7TU z%;4*Mgxz5mV_4O}hP85i_~5bX8H;4*B0b(dABw}-L6gQ#xHn4TI%2O+BLAQ97qaw+ zK@T7Lr?mDmG3<8A+XV?X>1aiT>%r`}xFUP5n8WLFY@|!%Ju3Q$v{oA>q|o*mhs@0Y zYZNIJuR2D=MfKdueylv>U#|umz^KGu*y=HKFv^gO^0dF>sE(wJTJjqo>#77=?KlnT=~t~@t!=(p8>jEQc}qY;s!>3W#@jD;TyRQQ z*Z29D{mhtGTAG#LWw2{0rj@jW7*kys^MqLzltn0;Sy5@QGl#hljtq@ADUvORFMG1g z{0w#9N|SO7ovzgrA5IYB7s?yR^WGr9GB4g*@wGua=bVLt!jo-xo%QqXta_-KCWpd^ zi0~3yvMpQfoh;!^tY)(qv|UtPEAvL>HxpV878Z4UCO{P`u#mT?*BYqd=B;`8vn<+J zD|@DIgZ)G=E3t(DrgMdtuCwQ+WuviH$G`1mih z#DDAixHBxC4=yf8qZKQ>FE}qJfGbwK+Wt>v@c)?aeM2IG+aPdAm-+iMDLWy5(MroX z-~RW1S#dyD2Zl}?{`pD&;Q0Trg#T}s{D02xD?~$xMx>aD+5Acf4;u<;e9y29U`ipz z9-h5$EBE)6b14R$#ku2rSFh}>Mfk4SyL`5trcV3q`W6i9iY9PK`|jk~TtvBHZvo5!BO3+KAVaU`NL z!6d^Y4B`%&Xu8>8w-39P^x}PeqZ^%`{$+0R{mb_Tw(h7oL`TQY;n&{2uMgnW-y<*2 zZMmLG6?|^Tw{K=ziGpHc+T7Vk&f?k5rI=jY?b$9=SX^9Xz9oqC@ZO_#JORmskDHsU zSJx>WuK6F7ne35MaJ?{SZK2E$4J2j_8n7A~jumD!(=l`!K= zWXI><%)B-NM+q&d8A$GEw7YK@)46ixN>47uZnuW8a5m4p%6M;ex4h#n+bJYj2uJ<( zr-()?XLhyWSWl%{4ppASpx6kwrhHvA8bK$MPb=*zpnGvj@$Vg%RhcR*}ZOEvKWsd5Gk(7 z*zV$Mjj6I|DffZu3^9uR+Lle5Uho;#A1YM42n`8rD^yHPUuCXY9NDer zKB}yr9P16mad~oLVnWTXLZ%VTrF}mVbJ<5br0f@)FX6N{oF36JiynFz8ANAZ+bXzp zd!}YD%Ri#m%$Iait}lYPGa$i+12nQ7X@YX2ltAb{F?h9CP$AgH@0By3|zC zbO~e>tybY49#sbRCLq*nqm@oUB~N!m?}^y-m{Rt5T_b6mL#KjvurQgj7gIM0Ze0;+ z;iFG1F-nnCTiS$#tVhCb3^s+ZFv`}%T5+S0Aa9Gr(y?6puev(37!9K9sm6)TYhA1? zrTF0?4G8#60?U#%T>+yu!b9M*soCbXx3>%7=nKBVfa~@^BRMJhet2`LS)P%We)ui* zQ?v?)Ns3;}9rF_h~q;@c6|nW?ze29O<9W za&3Nn5P-eTws3HDrVo=))U2Ns0yv(?CSwnY@Y)nnkSu|p^Ht! z)l6-jlO?7#Q+wS{d+ga;uQJQNM$>WH+8WfJ7rL@xrma#?B(?C{0#q_*OS^pg|JtKf zM3Ah;<|bw-KUO(Y&!wxmaHD!P)lklCLSJ2cES@wKnVwDCwngB(Xk>LZlg(C(HHHw? z``!87DH)FAfd2+w8&y|Vqw`u9pi^;uh5V{j-RwpIC?>=yOtOJOClTprQi)&-<=pt# zm!v*MnEmI7^=;Z31)P09xP*QC_IYr{?YFl0uy%TSh7|v(-mB*-#MLI-jMr`W2?9X4 zcuWH=DRA*E3*wWRoS^m!PIL!U&f5{PX1u6?sUO6RPj)#1X)oN~jKug4zN6$bF-ADA z&u7o}Mj~l|J#F)CxS)0^q>_t(BK|FZ!3S7GM4g$HN!0Ipv?I67X;qiGJuZZF65=Y? zAsj%3%qeAKHnydU--liUQ%=uE8`c|}!3PeiGUVy1U%2*ukJ7F157!p8^-Z*{lHt~0 zT(H++)T4zs1|;0b=y;`PXz&x}c=Zg$K%pB?aP7xu$5k*xE@L{$pqAZ@ZaNCVzijen z3HM^Gd3SL|woL2gudhx0a6Yu=%5%%v<=M&K6BjuXs~XR4CC-Hd_nFPl3x55Cp20g? z)@rz`j5oy!6(mX)=Q%x;Kdq2;L(Bl>Cu%gs3m0CXLiXAe{DNX`zF0L>X>$z|n#tEK znWp615)iME@w=QM`QaBO(20n2e=<_r6@E>q_t>O-nj4$1@aUs`4n+sSi;2)~rqs{S zp|z$)+0D9-P4?!*`H!EBK}6<2S&q*Ylm6vgJcTJ5a}#}p6WW>tvxh(R6HdbmtzOVx z@mOwz&T6ddtu>uc$8OH^BTmbCT}MY4U_*N#&tpGdg+Og&nL)XU+U4Yl6M8@Gosuss z*y-r%`n&cIHm1q<@2!W$iwV{OkK=A?(Wo7XIWY{vsU;xOP_rS{H@v!-{mIQ%(vvki z3=ayuL6E?;FA720+R!wr!sFMk9_9`y7{J#oe)E<0f$3w=D?QE1%0kvoqNk|PrMtu( z)Lc(l#m|qG_u~6E{z5vhNiz?gX80c&2d>StVw$kgpDddnMe}r}z%SNL#zoG9n zY@U3M3*9t98mMU(W=G1LOrp zjovR%YNI>1usy9|R}f>+x}THvj~NfQ^O z{>FWeDlab&=gBi>{f@$?Dt+G*spz@T;f!QI4dIR0mOw$Tmch>|ugi|-4{OCBbR)TE z9@7Z;Ac6OS)kV2hW>3bS6(p1w0?#ChrjgN#hV<)~oeMsF_^^Ne=S62u%`j3P*VW~A zYaEIyC_X>tiRWn_dNO7GMb487DLy_Plf>|V zgr83=t8rm+*d@=+jgMP|U53C?`QxiO*?+93#6xUn#wts=bN3MZ#J;X2<#+)>c8Ipfh!8 z?Dr;afr7+3099L4E;?bO)Rq?%%vk{#TeZqk0Z%%A!3mCo2S3kEr?=oUCR_9>GKl!@ zF)_jM_tnGkKp z%&tk)>{Z15ZEVcK`QANL%=J3gsy@sq)M6ifVv*(jR(XoUZaY0gwp4XQb{xM^!!z4W zSvsS-xDV3UilkXY$f{Sd>tYP}MB;vT)?G9L41s+b`od`#q@-+dnuepx1)oc<>oRPk zFbx0phbef4baB$6@stV&Ve+MnE#62n% z_aIR~xp8HODs{SSz)FyS;1Tv`g=i#TAedv6i>w(;|4x-X(Qv@BzfKmMQ2oHtJ-j_X z>-FpzbMC}IEhcolZq*PIBPYHtRehU*y&6u<1!y6FoKr>j^5fOzban|LNmci@7Hf%MtWOeFQtR-z+NKmXo1QTEPv zh?i<)YsNo$!f5cV{p{cn&hmy$DaUYKbV3%sXaHds!4x9NkdS#DUOF1&?&#d{r-$VPR)ui+&|{N>lSW z6%@t^T3JPDcWSo*bwRJV4-~9724;c@&^RNCtsY++tBTBC?`PXAvFtH3B6~VR=_+*4 zY)KxOdz-Ubwc5Lhm;xYA=1=Xb<79Cz{G#;=Js^}XbwKu(CZb2g>c3l%NdKrpk=je%|_Zr2u8 z=mdaPjEs*e!J#I`&MqL;h{NtxFwV$i36~DIyC7fGP9>OEEMoV_=*TmNBGqH)Eqey) z_hqO+Z>?G+r0VCx!@Y(AgYDXGVNq+*UI|oKt)U#C`apx$m%6UcAreArQh|^ByXK}x zyM!3<2>V#I@3;NBtMu#FjQ5mowMID1 z6(p)+lYjf31|?}A9hRgxjHlR)_i0`9UBVG= z1q9sQJ=I)WV-Xd7(P^wv^~mns>aQ&xI6OKR^5n@T5TnH5L&oR8Q|56D0IG6HSL^So z4D|?Wq;F1u!c}E@%9U@`0zBO13G{?VCA&mq&ZpRzMp<)ib|nQkpsb_iJ>9oLT4(9` z_Z#G|h6n5!YHG)GR;>(*gS7pqL}mukKdIRrg@iUv(v2=UEd4~d<9<~wC9MtDnf=l_ zGkEX9&X*59oDDRyYzN-XaC((@b+SQif}7g+b#KSRfr>!kNT6wE=0yz=2G)9@KCSoN z>o-{y5gU_Pp8Z|084sa}CPMJ=9VDrGDsv(sC{phNWSXu0tCN5|Y64U^oxOiUC6 z^_L_!nq9q-(4{4Db5mKuIDK*6cec0hrk1Y==*kRy{@nPBc|}EulBVW0*atRejz{>{ zFI`5I-??^$+YeQRPR9&`!EEOqA zomC4PmiVKQo07#Ci&4wY&~1=e8>S`HRymG#mF<%Pp_S+Kg;5)0r$RD9se%OvNtAti^hWzRHBvnCE~I};Ay`pUhJ;5=ocy;IKI z7$QZ!=EB$RUmFQqHkMtIP^TD zDrKjT#c6TL6X`mPFiM1O`WWwF~?TSrI427}sSFCpckBb14R zmkxhx0XWbqIz79l2YlVkaKU|p04BBkM0;DoBSHo^@5rg>Y((yk{!|s6)nJwLE+a$D z=gb64R(pOGw$IAgXyo)B@88RD;KFiW)!g~DI}_S2^_Yg<-AHTM^X06zwsvu0;S-48 z5$9BmG?*X=(;M?#e1aY)P&J7H-DOI;U4M>pcS0=Y_569<$@R2ooOmH^Zv}@o%pfCu zuA>#Q3TG@V{9JNSCfE#RJL)3~#EER9SNMeIaY$hvcAJ^FApwgysB5 z9Ey#>ZO8!kj_P1>y5ba_sfnYrGv^bqe!4mQGV`;o8iOsiHZ}%rFOCU0%%y*FXNrUt z3Cb;h%D=N_u@+*WAu_Grtw5H+=_^iw==iMUr%E0UHbTp#8wFq;D4l|4f}HBf3aBSR z4DgwMiq+|ohr9)1zIY6Ni%IbGe9p1|%z|1_7Bj<_TnaYN$i#%It2bw&LEK8GJCHFY ziyk@)xr3el(vi`|EwRxh)^zWxjkI`>q9;Wsd-AEp6kwj4U_f(JWeNxhm?Ine!JVAi zbMf1_7gV9kB6i+*JHk~Wdyh8DrJ|xD2_Lv*65r^=9iIP#U;?SmTvSpbQ%won&CQ+2 zQxIG%7VdXgSJSs?wG#?o*s~r&8c_u3@d2wO66;q@DQALsPMVYlT+P`AIt89t@<<1| zawJ73d@gSz? zvfj`CiKIUmoNPS1T{9A|y^C6a0v+(N<074<<3rDR!I)?$3_286M&_RXfWYMWM37g(R=H0vfFVAOgD_ztiE|Nf@YEtlod<_CFCq+&hY?&H3P+H%# z@y;q2C#BXh`&RlL{k)uzJVEHfcJQD=$oy<9fRTC&x!->K4L(UGC69V>Nu97~^p01L z#ub2qN>Kb_#s`C?M6hx)M2K3oPlmXTVm>0tim5m5h{+nt$vT7MxLg#t^YE|+I_1$? zZBaY=txm&4rJG9&lQ6i@L>5cY({oEav?Lz6mCMSZWU2OOnYvoBLV&^GpTd6Ef6?pz zANTzZgPA{p5V>dlv9vQ+9OctPqm^ZU0L^l@B}{ZKsj_$$eK@%M8!J}Gyn4S>@Z!Im zd-TsvrT^2vzjYGL`eAFB(kT@pqN>PkH!Q>Irk*?p{}4!pWdp<+Zcrw;5egQSx|9df z3=t90+B6f2=-B5?wJ|ELc`>@k4Wy+TV)KWK-5Hb@l5fTRjh zb4l)85m~52AOKBbw4J+-vp@$c_Cu$PUE9Ei+f-zO9V5L;?rT0?hcALR=et9s2z&GD8v*pZsCG~ z#x3K+1&fuU_A_$>pTzmO9bHAZP(VE4bp7e4|X=e!9~U4GjBN zFR$wqeU`qfB;1PBL5$S4nB2UXj!fNNt3p(m^%Ok0&tkb?LXpUGab-eo$I3O#QkcKt z85zmCa#_Q+BJ;sYm)k4X0M0xH1$}I)SpNI>yx=pSmwe*)cXUdR2GpF7Ko<+>6bkUO zwSNggS+9@p;69(w0-&YeW)N!*wY4G=Bnb2iukdK4W&_%SLWza233lzP@Hx~P_<^Ch zZ*V*}IW`y$xOlXcP$C%P;l>~=$#CcQPSoju;`P3*=hg!d?-2%<8Nx&W&;P}d>LWYs zt4VSKf6#$n{qW&~*^r-SU_9w^Sf&<){#a#z)BK^Un+mwrj0wnd2#O!NSF#6Vj=H|v zj{n$=E86II)0Y5w9v**F_u>z7t#_NR-BKK49-u$Yl4OfI5$Y-M6f^khAp*vq&L z=P7#qPaJJX7sqp6H$okfeOR)i0F=~&$eBR}_kde8@N(n?Vh^Mn%_FOIQ;*9j$Qrprh z3V$CJSqt762OL=eeDE=d!UHO@VEx6G8EM5W$}Q;eNiRE(ZvQ6H|bs-jjn`NPwe~2NoA5#gY2M zuOk&1o+mSbb+@pH#Qs?!7K@yN5P>K%2s(^sL+EGYHVGB*8p(WIfXYO|D#YfM@#uDC zZo!786Tb0iVSZ>5+Wm9-Oo$CLxr?(d@3$QwlVO#g$J#?|eryY|HU=>qvN&5H zz7=X5oAKvmMiFv;anqyXxj&o+A6g(s2g(TAw;nQdFMoga@b8C_^}oM+740fl;KC7J{~J_?+U#=<7=fC+9nKV+YO@Dsh?z6z_U#MbHhw-%v@V`XP$jjT$o4B%(OM$XA`fRe2%fPN_+Mcp>;ds#^<;Q~##8=Ymyivfh3*qVZ1 zVnYVqBqO7kCV*l!JfjVWg+t9i@ocQ%k zx8B4L!M~AoM3^3Q8ewRFea2*Cj(rx4Ii*m7*z`povbi~B+H6+B$5ju= zwLX;MlGy0u5)vg0!G6}qM;E5=4bt1?5|NOwurO{E>~6w|ukjdO7H)2%>LdBo{s2*R z8tmq4)n02&0#NRoDYa8DHuvMd}R&iPA0nJV??#(V3ppqhFL^IdQ6* z;+Jsu?oG?Vs*~I~Q!ksExb7YRSx4T1Nb&4vdRhH>_09aQ!(_bn18tBR6np@hUv{&I zM1Hbr+HGiPh~B)u!U}N=mvO7tDgXF?=Q(^T*x|UT%Bh)r+GA{JvPJ3Km*3rX3QAWz zqE|}@1iM0tX&8;D9dRI)6yy<5>}3iw-}T?ObaRhx)LF*T7aqQ9-vgE*n^*sJMD9!s z>8JU5;UTH2ARsdUa?qK&2h0f6$j!`Bjj8)kU?*w@K18J7D2fQNH017C1 z@FLqT7TJ`5^8feWe}@Td0ekQwLQvjuHP?&8CDjbX2`-m|JfeV}1l@0%-k zab3CGW)9W;lcj!U_L$)jZSKQm({_6eS|eDcNSh17a-_rjaj#&X$XBb@kHP7(vta|) z9mX1GvA7N1PZT;wsn@RkeCO4{RaQd@kRaIO=4GZiMzz?P2f@COL*x_KLzMH(M5RlQPDN>+63CIe9I%eyJ<$P|+{QTiR>bD8ad0osu3Go}|5&X*5`A{Yku-s{l z67Qg2Buoy%%xs%yF){^t`S72A3O&0KrRmuC*Iz^=ice>ppmYI@RzbsK53ak^wVgou zfn$2(#-lXB>Zv5i_SYE^h;2Z&AvV~3PIJ%_;yYr3-o)Kv1T!c6h*(0o)nrYIb~e-? z1R{VwvA9?gWr&H}3D%=6&}-X8)x|gZI=SqYV61|=vcy@85LbOF94HHTZ~mN*K@&!X znASg`@9T~Hqpj62^1HXOA3!|cOp#+@US7L=pyBS_qBS4#LmOtZEwT~;1CZ7m9c^wl zw#o=MdVm?%v@Ms@fET)Zma*$i{F=pIKb{0R^~gK%{$~vLVMfJciH5x&zLDsu8Ol2j zpq!>D8#L)iGJ++~#|VrjAoHjQv$T4(|H@k^4>{h6ANAn9I&lE15-ZZN^0E8*5=7lu zpOY=vG!+V%Hd;H|hEPe6*ti}h+-yQxvub-1P`<83)w;z2<1`tMb?eGiG9Eikue@Ru z|ALBv*D>$+`F_e!G`zUT;W5^m*fUxo#!)>~RCowA#SY2z7MQD zw`ZB2C^ct#a9z{b68z)^%q}o*$8RTD!iG-4bMA zhhf8|?r$-75UHzZa|gy91+A?+C8!Jy12}T5FpWkTAV5i~pncaPP{<~gD=opDlF;Wc z(AfXoeKC~$-PK_G7|8Yf(l!VM_(TFhMRFW<)%^*_g!N#P^R6)bOvq*|in(_}GL159 zli)%S__Q2sRGRHu!*ojCr{FL~Lhgffo>?E$I)yL_km$OAnsmr4C(u!O=h}a+@zLm2 z@XWvG`m6cbNTbYm+8>1b)-4QL5!;TUA!zH??O~wiIe@ZC(HgARjO$mZOyxrgPbWN~ z&v`ym8MC!K0205?&*!r!l<*(!vj~iSk@LQ+&s)Q|63rTX*!Vzu>xxx4R1_2x;^!9` z{L*G0w#Gp6DMj0-dd^c?Tf?J{+`;4HCC1>CfG;suA*a4_?nDi{x%(&C$8v5yf!yW(0}_^no(BYo_fSYa@K&Kc(`so$2HF-25Mm>Dd`{b5t=Ow zp^$qGG$lzO?)No?AO84qDZJjIUvWEMN0UydChXO2P+9?(FDXOXq8}h?J81xb#mv+K ze3hDCJ&``Z*_bd^n7dp{Dx#D(N%xZFY8wel-ik z+w=GQwtz4onTX)muU@I7bpR2DS*pxm;BcaxDIB(P9dA9xpjalyM^TC)eX6vjJBC+}R>zbeO+tXg<9G{$e?W>}0NqnwHWTX#KGucjZ4ai7W-HY0Y z>S<)uu)=5a@@87O%QXFtYlwub`d2ci(v5!dQ4s8)zya3*IkbTIA4vRu*vPdyP6kHE z1|sv&9M6b!N4L`1uA6u)n;HJv1EJ!{xN{-RSvS-&jbx!lB>cVwgtkljsKpm->~NSeRuczw!F#S)}ic3QQI5+=$i2= zxmD=`j@{*)w5wxS{okc@?Bkt>lB#Up>E?@fgmnbwF7%$-;% zaz^PKf2bBApLpo9iIEYft*|h1dv>V#-@o6c{Dp`?tF;}@6D8=V6*o6Glp`mrBjgCq zmuyk=7cL(vGNMpJLFmEU47?;mY<_;8Pk&@va;M4Oq9cj8XnAy*Da&F3#0H`R&lO0>d5I)ci5+${T8s|5A zvZEuJh*?)h!+j}Zs(%uWx8#-3Ay1QLZu(h5f>AM$sb6oXMHC0HHx37M64pYONxDLb zB-QFUPCT3O+8r}Ls^yb)%jlrjE!5*Jt{k4c@E)+W{3FJAF0CxR;WSs8EnDIt^Ch(s z+zg@nz0pTYrylw{6XX}NenPS<*EC0_z`Px^t%U535Jd!0i*Cgr_&@214BFn zE;vlQvc!5PjUuUb9(l0>>t@*Sj9TRHW9Svn{PoLLO#3K*m=HOR%KY zx^i^sJ#Nvjy`3)$qy(Cc{oqM*t1eZ(3y%LqscnW{@8v(vl9ey-<;zB(1C(AsviJL< z9fqa;Y8rY^{vaB2N7~zE#+$!=B*G7iR{OZjzc1t<0I~<@t`rrVdC+R|Ht$7rbwp8p zy-!{qMHd>yvge2L=N8cc;?HaS5CzuzwxuguA+Y^-mw--5`V9oa2eX5Qvi=9GK}4Ad zLB}Q2pFT-%Qatl6Ji(9$G~Fh!N{X|g%XanZrN2-A?L4@xE&0o@wqnJBW0iV;|Kq}; zU*7S*{`o)WdkIzluUny2vR0hT>&*=>7Y+=+^Map`14a`d@|eBHWaz7U z3RYF*#?%f?qbS662q&$G^@a8pM7 z%@fQMMzb99nY#1GXa8Kn^N(JclZ+vPb@Z-x#VnkkUU|Ldg~G3okWA-Fh#L12g{KQgq$_p5Z?m_<#TIRBd69GlSs9 zZ@e)7{OgWsUIBqDgC9A$rk!T@Hhks&{)x#8g3BLclL2Y35BZ3`;-5SaBlF!`mG)L( zgkiU$99_#^TG=0-hnzC$HesjSqKc|%XvmatT%UmoxykPP#^Wo8_IH{IR*P9o$hlFC zs`7XFI;!vC{psD;knzl=oPLiG*YAzao86R|rqf87TAGsQQ!~xf;4xDp6V&pQ`ZH|9)N&F+#U0pMmXN4~Ei&-!0QP3*XZnwnU#IHW$;kv`M5j1K%Umf?f( z*Y-b*MbE^8lf^)r(0Qo`N3>(v2f1oKg|l6+dUt2Q377s`C%HU1(R5`w^v~&;*HeE@ ztNr6bzMb~p_W0~X`#%=w7OOt}XPxN)2&Gi& z$ery!UTywjchZZ}(qpQ40o8V?I>PpoqI^y%7eY^Lf6u6`Kf2L70VthK>B~b~+**3l z#zw1LSXA=Z&Ta*#k~eS$pBv@6(3is}>O%pL^Dl%%L`M(cwz_b0zwY-;$WED>kv>R+ zM%<7>U|?u0hV^d#=~7_w43F%1lZ6l~@AADyj1t}b#RXIF`E=RRK8X6lTlZ-lA5MYB z=Ar52Sr%&4Z#cf+5?)?W5kYVq1Cz&due?27RmvR}*WdgP1I_$K>j~1M;wkZTb*iaN zEh{>%HDhJQ(%CLCs8}{s=b)55H~m(9+LaT+*m2m+n>R%htTa=g_ThH!Tv~Cekk(h= zXej16=W)5*t-0o

j_SF|JdazD&}{ID$=6FpIQ$*6#VlVWZo9&N+UJ53Lc<+88m`ug%`%F+17{(S$djg8JpBbwMJWaYY{ zwoPnMZS!W~^2;tg89Nsa7I=jPD6d7id&n&jQVCZ@}PA;H{2Li+2{`Qj*p;y~B zK4icKb@jLhaa_p&-F5RQvce6JyXSz!q759oqCZpxr$h}@P^p$a__^0wOuT(f zOR1JAr7w@6o%{)WblcMdI*kxmZSu+;jIg^fq4q>5%Jo*Oc#109Y%!y@4Rm9DX@cc6 z3x;RtRsWn+Rh{_(l8ZnG*(OP;A?UBFoVxOe(BM$LD~Off)Guk>RD4Ec-=1Z%{E94l=?8j-4npeLfWo2cNGm{4mxh&jCedVB^Oes|z{rACBE<*>+ ziZP-djG$^5s`!NxGSi$0!vmR@@U4v!F#LXnVPnQv{WEFB7w%tV+rWds&Og>Icw2Iz zt%4=mm=!|>ebD$G>(*?USihIs9~CG9Z8coL&(@>Ga>f;*WUg15qLF2RtGSr9EwOl^ zBDLI8B7U)llDfYS)%8hl!aVcaGY@*YhQbV)Q2rIkq&M#zJ6j zW&BjJap|Q?!!_UO>run?Hr}+RNLAwoFwrA<0CV|3R9i>xfl?y&VxnY4%<&S$bd7|x z6%N4g2dMrc66dOwx?Xwbar+UCn3smdnC}{RuhM93Dy2Mp@L3Cbg8_>7VWTBk(NZy> z5aQLln)O%uR*7oSEhd3Bsx964?&lR%RlV-kN(VqJ;twSXh_z`G z2kU=$aS0kDoCZf9onmnDrLGOD{QEHc>|)|}@!{$;0MkeYb+Cm*Gt5EGbhlhdY{SU!olaqykN|7pz+gAX?gN#AH zb~v#Bq=3Uf{fWjC(m~<(IzI6<+L3N<-N$)irax>Co(3c4$1KcNT>vdwXcDuyQRS(f zpCjcM0Are{t2ox=h$P5W7s=B}{ZZ z3MC9=n8WI8pO-2$wv)i)$S*ZwvYVTm9Yoy*w2yQgIeoJ+)cd%*-L;HBA;quZc+)_B zb_2`Ski7ARHW8fFi1TYn5p$_ux$i~Qs0niGU zm%7qoxMDy5bh$;!wq1R_0~*r(wyuH2xYO zyMM6HHtvcP6S7{+M|d$KcCUBW?6I0-7~HIfXAML|xnrAN9fdo*OG0<3WYR`ep!{yj zc6=YtJ(ER9X~#7dJ~|E12@ zf#>Fe-&!raHEErKb*#Ef-Ko|q+WB$LbJI9ZT18Dwe<&dU zzl4(v6K^j@q^vwO;)Ar*m!o%QJ}q}ni{{cL`$*2o7ZZiJd+zzWrImeEHOnoyk&?9i zydxFWCqmC=sgx#SKA|wazdDhIiEmq9zLY(zS?ht1ycym9DXWHsWJM=<0gL!-;o|g% zx*VWmJh!A3NYqy@=ufGN;+ERDV`z4+X4*mr?u-@q_IDsOGNr%(7lo6^bdz6yu5DQv z1zms>F1p|++Q_8z&CR`f4mQD^x{|VhB`WVNowbDP;ehRWT{y!tv#SNeaLKiQh*Gt! zss$dIYGaXeR2dB3j3LjSqfD}j91jvD22o}PX&k+I;DOi^^;AnR$BW+By6gDRa!kMf zDq%M{W}F+o=W-0QDe4=wH$S_3P9uZ#du63DsD%EUzE@ime#D=4?_2ZO_W=T2E6_HL z2Zhs^P0LgtIB(TJgGID$Xo&srXEkQ+FSVHhx8RP~MfLrheWcJ zX+oKsC#dQJ8F?K;7+rl!HZ-H;g6J zXB$Ue(8t~p?rVO0;5voKs22;&T{*UiU3-$PTQhOCJZz5?2KU+ zfOXbkP z=72~I0s~v*aI5~Cs^VnPgT7*DI9&>=lrzye3lKgBclNlOjTLNa*T|_;R*Qm#GLC{= zp!!$_fvrRzsNgrw=1azz?h(^NR)Oc&tC;uq%Uk)0dJ+D^#t|)i!XV6gI{{BT~X=|

4g3sZoJnaxvah$d zcPo1S008h5UFfwRK;I7ugeZMQ)@Dt>%i%*--?#HQZEZb6?IV^^{Ri4oZO4cftBGKL z*jkV-iQ4Z~qQ=?C;Zg*X@K{LNpDxJG$a@#gX1dF&T64AEQjCKEOrVe}dO2+N!7eAu z#^dFg%h?Y-O4U(DQStZ_KeIF3X4;atrbjWP+_QCPBMAiTNz71V!6itg25zd1ECFWNx^# zoS(#!Z~mpVvbtf=mBj+&wGELI_0<4&fMjd`^OEz59-cW^HbgwXRK^V@%!7WT0SXZ8 zZEK!=9AyZn5!KK{Uq0T|W?8fT#EibHC=|Gw^kZ6`8Uk)ib#E5`q$7T7o*MQuh3S)EJl~zx3_kc=sy|}8mpLgl&u6mV z$H!-`Bb-bsif*>`F2@EHnT_oRg+)-XoTtMP*#Pn|I%efy60lYG53a-V1hpX*la zU|V{r=f|TkfaGiYy;T$I7s#lw1|8_yWGO9az{JmYY`S&M3$M1J(50q15Y?juL^vLz z<+(W4`gXlJJx@YzTb#6|gdopNwL(;?As6t7`o>m}IXkPYscoL((NV^$m&X#_^ZrYn z{s@v@zNzrG`aD@@OMy1^#Ba^O%jj1b!Hfgq<}+!}?{cGtZ_7U4rA~}IyBC-7AI>NX zMD5QJriQS?I)@Rb*k1>bdMN_}Qt2%ozMUI&O{l($1UEV+_K-zL8>FYNK=Yx-vIHD# zf#Tkq>JyOWfB)dP*Cu8UN{s@a1sks{8rno}d8zYV4%GKO-~)qaqC3q3XvDbLtjUU% zxVLYdXyIPS!%eRa$FePu_Jnxwn_X((_H2hSwXsns;+(GyXt7ggtX%UP$Xsq1{L##1 z8e-tdQF$on*s%zDeTSsPs`Fj-yGOs$TuxA*WN1~7cH=rZQ~TZD*&vYi`stsfQc@J@ npC+t}Pv3*F` [!NOTE] > Defender for Endpoint for iOS would use a VPN in order to provide the Web Protection feature. This is not a regular VPN and is a local/self-looping VPN that does not take traffic outside the device. +## Configure compliance policy against jailbroken devices + +To protect corporate data from being accessed on jailbroken iOS devices, we recommend that you setup the following compliance policy on Intune. + +> [!NOTE] +> Currently Defender for Endpoint for iOS does not provide protection against jailbreak scenarios. Some data like your corporate email id and corporate profile picture (if available) will be exposed to the attacker on the jailbroken device. + +Follow the steps below to create a compliance policy against jailbroken devices. + +1. In [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431), go to **Devices** -> **Compliance policies** -> click on **Create Policy**. Select "iOS/iPadOS" as platform and click **Create**. + + > [!div class="mx-imgBorder"] + > ![Image of Microsoft Endpoint Manager Admin Center](images/ios-jb-policy.png) + +1. Specify a name of the policy, example "Compliance Policy for Jailbreak". +1. In the compliance settings page, click to expand **Device Health** section and click **Block** for **Jailbroken devices** field. + + > [!div class="mx-imgBorder"] + > ![Image of Microsoft Endpoint Manager Admin Center](images/ios-jb-settings.png) + +1. In the *Action for noncompliance* section, select the actions as per your requirements and click **Next**. + + > [!div class="mx-imgBorder"] + > ![Image of Microsoft Endpoint Manager Admin Center](images/ios-jb-actions.png) + +1. In the *Assignments* section, select the user groups that you want to include for this policy and then click **Next**. +1. In the **Review+Create** section, verify that all the information entered is correct and then select **Create**. + ## Configure custom indicators Defender for Endpoint for iOS enables admins to configure custom indicators on iOS devices as well. Refer to [Manage indicators](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/manage-indicators) on how to configure custom indicators. @@ -37,4 +65,3 @@ Defender for Endpoint for iOS enables admins to configure custom indicators on i ## Web Protection By default, Defender for Endpoint for iOS includes and enables the web protection feature. [Web protection](web-protection-overview.md) helps to secure devices against web threats and protect users from phishing attacks. - From 206d7f9c671593322f176d8dc11af30a01b8c46e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 30 Nov 2020 10:24:34 -0800 Subject: [PATCH 37/75] ASR content updates --- .../attack-surface-reduction.md | 34 ++++++++++++------ .../images/asrrecommendation.png | Bin 0 -> 122996 bytes 2 files changed, 24 insertions(+), 10 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/asrrecommendation.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index d2c6d68716..510d619956 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -14,7 +14,7 @@ ms.author: deniseb ms.reviewer: sugamar, jcedola manager: dansimp ms.custom: asr -ms.date: 10/08/2020 +ms.date: 11/30/2020 --- # Reduce attack surfaces with attack surface reduction rules @@ -26,21 +26,35 @@ ms.date: 10/08/2020 * [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -Your attack surface is the total number of places where an attacker could compromise your organization's devices or networks. Reducing your attack surface means offering attackers fewer ways to perform attacks. +## Overview -Attack surface reduction rules target software behaviors that are often abused by attackers, such as: +Your attack surface includes all the places where an attacker could compromise your organization's devices or networks. Reducing your attack surface means protecting your organization's devices and network, which leaves attackers with fewer ways to perform attacks. -- Launching executable files and scripts that attempt to download or run files -- Running obfuscated or otherwise suspicious scripts -- Performing behaviors that apps don't usually initiate during normal day-to-day work +Attack surface reduction rules target certain software behaviors that are often abused by attackers. Such behaviors include: -Such behaviors are sometimes seen in legitimate applications; however, they are considered risky because they are commonly abused by malware. Attack surface reduction rules can constrain these kinds of risky behaviors and help keep your organization safe. +- Launching executable files and scripts that attempt to download or run files; +- Running obfuscated or otherwise suspicious scripts; and +- Performing behaviors that apps don't usually initiate during normal day-to-day work. + +Such software behaviors are sometimes seen in legitimate applications; however, these behaviors are often considered risky because they are commonly abused by malware. Attack surface reduction rules can constrain risky behaviors and help keep your organization safe. + +For more information about configuring attack surface reduction rules, see [Enable attack surface reduction rules](enable-attack-surface-reduction.md). + +## Assess rule impact before deployment + +You can assess how an attack surface reduction rule might impact your network by opening the security recommendation for that rule in [threat and vulnerability management](https://docs.microsoft.com/windows/security/threat-protection/#tvm). + +:::image type="content" source="images/asrrecommendation.png" alt-text="Security recommendation for ASR rule"::: + +In the recommendation details pane, check the user impact to determine what percentage of your devices can accept a new policy enabling the rule in blocking mode without adverse impact to user productivity. + +## Audit mode Use [audit mode](audit-windows-defender.md) to evaluate how attack surface reduction rules would impact your organization if they were enabled. It's best to run all rules in audit mode first so you can understand their impact on your line-of-business applications. Many line-of-business applications are written with limited security concerns, and they may perform tasks in ways that seem similar to malware. By monitoring audit data and [adding exclusions](enable-attack-surface-reduction.md#exclude-files-and-folders-from-asr-rules) for necessary applications, you can deploy attack surface reduction rules without impacting productivity. -Whenever a rule is triggered, a notification will be displayed on the device. You can [customize the notification](customize-attack-surface-reduction.md#customize-the-notification) with your company details and contact information. The notification also displays within the Microsoft Defender Security Center and the Microsoft 365 security center. +## Notifications -For more information about configuring attack surface reduction rules, see [Enable attack surface reduction rules](enable-attack-surface-reduction.md). +Whenever a rule is triggered, a notification will be displayed on the device. You can [customize the notification](customize-attack-surface-reduction.md#customize-the-notification) with your company details and contact information. The notification also displays within the Microsoft Defender Security Center and the Microsoft 365 security center. ## Attack surface reduction features across Windows versions @@ -54,7 +68,7 @@ To use the entire feature-set of attack surface reduction rules, you need a [Win ## Review attack surface reduction events in the Microsoft Defender Security Center -Defender for Endpoint provides detailed reporting for events and blocks, as part of its alert investigation scenarios. +Defender for Endpoint provides detailed reporting for events and blocks as part of alert investigation scenarios. You can query Defender for Endpoint data by using [advanced hunting](advanced-hunting-query-language.md). If you're running [audit mode](audit-windows-defender.md), you can use advanced hunting to understand how attack surface reduction rules could affect your environment. diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/asrrecommendation.png b/windows/security/threat-protection/microsoft-defender-atp/images/asrrecommendation.png new file mode 100644 index 0000000000000000000000000000000000000000..1ce1089fbf4389e8a00ab98469496eb5c2a37d38 GIT binary patch literal 122996 zcmZU)WmH_jwl0d(I1Rzw-QC>+0TMh&a1RpP-QC?GxVuB+?(P!YgX`<;eb0E~-ZSb~ zuU29T4}Vto5HyFo^3!QdRj<;*~zpGb?cRnHxu zaX9(*KAF|Z5t;oaD98cgGrN4d@bd0;V6}d71%qTI~EN zUbj}#f6eXuuP~315HgRg6Fp@AZCA}?SK6&cx9y8LzkgFVymNAM=jY}5z0EHyzoOdt;F|g1>a8v6TD!p|k(bL%y~G>;gZg1`<5*Lm>XsdM-t`KgeGz3v&dY8yg$XLS#jN-ZvLY z>72(dw}ZN)|Lwqtya)JB;;_-GZP=q@ldg}2R@c->o1RXN^>H``lih%v!&qYxGecVfqBw+pT z_YVR8;^j2%n}Wdcrk(#qThk@5G5!|~98c(9yo;373{vp@q6DJg;rOW!Y$5yaJiM0t z`;#)dZZ@0$?)IUA+QQmlarY#M*;F;SCxmo79e&Z+9lpDZ0(5|{@>~c@KZq5unGG5{ zK0}YGK0hPaY_fn7R~)9BJq~RNAzkqP^`b5QuNMohmfC;4cvb^mZ9pH-E6_S!jtCDV zLQ-BFBydr<(7gllY|fe=-B<;qJP-Q0d4T~Uok5Kr=+^W7UHE8TrB_#1ua!po{P44$ zJbmUFB-CY-n{gGX*d8HApeay z9JU_;)W1Pb*7HfIAr8+sm?;V3q^m>HBVo(aaVC~r&X%_BiMUp@< z+5f?08n~tIMKrA$GDZ`#J)Jg|+VKtlTf}d#2c*?Sn$!bZr22EnR9cI`etj3@S2)m* zmpm95w1d6THw;+@OZ}5!Vg0}@WoTfUS+3y;6bX&c)ms)pO(pbHRE$J!)W6q*yNz|d zh8Knxri%flEA0wrs~f_}#7W0PEy@J68=HVG{cu0Q>vI6ZkD39GB;?lck%6EwGA84y zqZ4$@@w>o5fS5C}E3hsVz<%+mPe>R(V{zi63i~pLH?3m(C#%!d5DWrzKWv*f=8liM zFf_(5OWF%=BEBcsRGu>UjOUP9jmIZ%AoZ6VzieIpSInL5!Ev&yK8k< zg#~zW>~v?6Kr7eqNli>r8l}Kpy?1H| zhbB5l+5(!@Vo{JWRfuRW20*Xw|cCxl|SyNfGQaoJ71 zt{D(fjAVbXiclExp!i8p|0}4whzPeRIaK9r#>@{Ji)nBA!b@Ol_ zLZu$u+5VG5MoJEyXAw{hp?G_?1SwTJBxcBm)rD=& zmel>br=YhkTrXGtqvHoUx9!8gvXgu0+G)5SQM&T&74u}KP{66nML@9x+Bl|8SYtWN zj2~Kyr=tjnBH!-)`6s8#MFgLNslh#nYC1Ma)Ib_zQphv-cx*|`=1<4eUe~WG^x`SK z{hW17UMG%HQ6BeM3q^?tB)=e{8ils{SS8SHAzG;@&t9#Q!F}4>Uhp>erZRV!!Zo zWDk%-Iw^;lEL?r7@)ut~PSzDbPTZk*^Jp^1VxpK{A)O+ofKM#ciPgW>jJ6-SnVf7IFERMIegmCbAfQG^4@paI zhn7DB@~hj=+#%x%U2Z%JHUr#lbrd>pZT&*Vhz_Lc9U>Lqg@RGC%3MgtU74lmbLHzQ z7$Ipzzo2Ns*UYBf$q-_I(kguGpSfw}C#aLUcv-#|4DZ@wR?Y5PhH?6w_29AwPDFW2 zGG@A9kB~Y0c5mLvEFnKVlN1AEYrk@|EraP?Z`U8MaBqW?LCrZL*kAC%S4RyWFIIzx zZ=q?c%V0@tF;9A9avzb0E7Aia?O0l#g7^Nk|7x&WLcK#lIhquK`EGh&Gp!qQKe4c! zR|SZPG)is%4tOINwLh43;=H;tST0g%3aN1;zgGR<&Ac^&E2|0<|q5a9ocwr};k^tAM zkeAcOSI#>!OU@{++Un450Zhv#aOZa?aPuihd4)KT)`N*t zErnv*2;P5>U0Gc%z}d5-#MWB;V+YfqaRZA!AL+VwU)XqYYgvW2w9W-U-HHf%6Cj;mAod`i^Nrq^skegfpey&6mnHwCKDi_O^jS+ zccG=H2VL#-&9u8*ZVA2c*luqByw;8+=D^=*b9&i$Xl^9P7WN8{At`6IS$B0jx^i;7 zyE|Q?rK9UTVl$eqWZ;|c>I8?ufj|pJA%JtAj3txk85#@mc(}~>cp%1QGwg2`ITO** zQd0|pM1HrOIQWAU(-&;~$J=7P1w$g(^HyHqY~ohT)QOi2sXIcU@0+5~OaTC&OG%m6ajIDkM76fyuogsl-rrMsT)0h{ z&;$4Dj#-yfhT<4(ceb%0H}3x0m0ppq6J^>p?qjNspXD|y_ltY|fixx}*bWcvgrej5hMLvxICRGMm({xr;!}SLXiOSD ztT-Dq=!T}CCTU08OCX)GQKQ+5jqu(yjQq>LHGsuEDiuzMLIR+G?^owylFDfXiNC4i z>z|LRxAYL$RLdusGTFc30KfeQCz5@$7a%7a9NJ^J*LSU6jq0a!<%il^FUQwwf9mm!Xl0h>9>cGL&YoVzgt?Q;*}JX z?xT8o2H1TJ2q=6~7xxThXzTO|Ji3J%N7spXQW@Hwe1gI~A=svpCZ{kX8GNvj7PF*u zc7w}r8`501*?{WRN?_~Iz~McyBt3g{v#z-o_YJ~OEPR%j8wV1>D+ZSa!5%2$`tGgB zF_O=loEa8U(&&rFe50i=+1{Nv#O1SRj#Rkq`FoG;d4D!gP)B`+tmt=^IT@?N6fUE- zv2#Fx3_G*Z;{Aub4V5qkfdcNmH%8*Z85I)Mj|FJX5GcaS3ouj6fr~1xtwq43Rt$WV zc2h{_MF>Mcuv@->u(c(Tm6d(HfW5uGm)6vzC8waM)!)hA^7{DU)>o{QGu`TN_#r!= zo}R96Y3VdML6oNUKErg=N;h?Fh`5rgaSn9!}txd+ll2bXd zPnYn~RNLwGf{jSGPLSggNcm`pt?ze23y)6;gm6W_N77*sSM-d$!(NPNc+$=2whS6C&~;6-x%5B&86Ez7Gc+@-J6(4l?4Lx_(QN*zeZxlaYH7)Pe}&brHc@L<49ou) z(nawyAU~N8-{VVQX&T!g>WQCAOtpSWI}d;4_uzeAv@9>qVA+){UC(DVc}n*cD0ANcKSKZ6 zNpa~h)ZPnI2uuA^(ufwLl-&9Woc2f_@&z9xM&}@d6GJV^BA5am67(H?)R4~F)K*34 z(iuI{kBFQA?97LYkditf^3KTZpQZjAax|p$)d*b2$xh=jYY|uD39JvYzH#%eB|l?( z7efBnT}1?T-TvZK6%L+-<0I@=hmF}*9iBV|xY5bIsxAVn{A!i4(nk)m8;0-~+d*tv z-$-h^%^%Ad!tJj?RO>#kFiONCJ;#_s*JW))&LPx>Zy-5WPj3?L68yZn2Zh4IVuQt+ z3sE&b>qb?e+b;Qj^CM`>S|}5R2SoD+X8((eesuxxw7Th$Srtpo?sd|`Rhm-5Z2>?l zJGR}gG^O9lfS$oc>HFL~t(GWdy5q3iIwUG%$eY+dV0SS>1Bj>&X(*&kX8I8=to!kb zR@J@FbjZJhZr%rIzyehl7e}4F@x{i*N~)+(L=*G*%c=Y(6()m(b$hC5SP$&!A+1P> zd)hE>YilDlztp3orZTwRrRsip@7@hgPscx7-wA|-h6Bw}Uz}+TkBo||E26qTKbMqON`3y!{s}8-y1)z# zfP`f5Cp-zTPH_8W>O~3XXZ==q>M|~`z$K{8Wb7j`w3h^bI>*&PU7fn>?G_UmIf@lr z6h*E_x-Y-(+ovR=n=KF0Q09AiV3>WlozIUXgocOrCo?(Y@^}jlr{3S+i;EkQCo}8b zA3EKNc+ZySlk@WNiK!}lijV*HvA6l1_~Qle!6IQ<_7Uh16jHM!0%69y)$dzs6^DHg zj0;a8ne&GCD%6(W_Kb<2k-lQ6p|K$5P|pMNk|eg)gB*YzK`ulF_ZG_KWAg>j$Q2@C z&bWB8NT?ZViF$pwB&$)9#^Qo7#Z8{eo?jj%^eY-LNc1-S zsyf)CJD+_kyS}m}p$;jA;Jp(2GF~PUL`VyP7wUH?co4bmqqp| zjT!6_At0qCqn&YRdFY!TB5f+ZZd+7HebE(ieO!e`X*?2fBkRbj*tYr|6rfbTjTMJH zfW^_3UY*m5>O5d74w?t{M*n8~EIu*x4U73JpQi1fXmkOhN8Iv0CMpv0;QLT#OR@*W z1Iw!j0R&wKr4}0%!@<;mbasEVoZx$IpB7wOQAD8kp)#OiQPjGD#=QxCw@JHiQG{@8 zfeEJ7%;{3`HoR!roXJLQpkYx=pa-=@_ZBv}AwQrd#r?Vxw$79=D543hZ>_ak!wk>y?h1k1R7~YJLpaNF z)?cac`BU{uWlOt+@DD8#)h2r#91P}lxhIS!67kCx@(@=y6}s4H5228W+1Vcv*VNWB zh^ZziEd1V;Dfe4qHu++st=7CJC3}2!_M4#lE#Q2uxvxJg0sT`0jt4X}5GSWc_NviJ zB(JIpmBV!0SZ|a?TT6@1=EE~XE`(Ys&HuU0UFYqX{xszM%lW}XMoD@3Kqep5*_MmV zmb8Ty-D$Z}j&Kgi!^N9`p!aR+2m|$(%uw*AcJHoSBbC4Q*ha4#h*^)cfMNoS1qkxO8x+N6jLBNG_;paw=;^x@yk_SUHqHP?EVNN{dVmd z5ikxI8Wm+Wl`oBfAFmq=bF^ffxc`l;w>K1kW~Arh_7rurTFH2k26=rzE!md461y-xgRv}6Y3ukVDcq}X|7wfIi!otD| zsjQGw*+NFMgwG!|O4+%kwby^0IGbbC)Xr>Uj%~kuN#%6IaCLKCN!7kAuPEs$7>ZeO zYUm1ld%VUJ9vd;&^?83X<3{ra_vv<%DreZWF3=!iyJgcFym-Dh6oc#l3itMYf5P@4 z#tRMnxh3qy>e&yVKFoIs*|+^V!*jG}!F^s26kQT-@gX7NckVBg zOVIp*g@x7P^1z&)p0SL7f3k4;7r)E>4l#PInSzA{O&}|ajGo*-G7|am>4}V=8t(1+ z&S(y6hjiQ*~w-!=zZ7manG=mf$;H?k5giO1Lf09UMcbRo`jJX^y3R!?-+8mKp%AzJQX|9(luzO&>-7*Z=QHmKUa zZ)#Nk7#KY9YfM|%5u9AKrtl}ceuFk=fKYqSc}-olMS{jJinz<2cn9eOabCw*j@CNc zZE{cLPT^ZWAsL!w$1xT}ty|EZXUtT-utg>&#W|kAF}j2plsCb2M5^w@eTN_u66oi( zg;M%UW6h%`qrXdMp4!se_Z7wb5#Ygv6-dkno%Qp5`7Z4$#NhrjR=?znZ{p_})Z}G+ z^spj&)6gp?7})rG{*0a(8U(}9HS`M;2p0~jGdU4hdlL!G6FUFuFyu7nlIluWpYFWv zN*@F#Dy((S?+AyvfRYGi8K)H^^HTbqqd(tVgNr17@sqMJ1!${f)sBhamxs68r0kb3 zV!quXp_!N?x?P@BO{;75EVmLNsGvS0o@@~xKh*P8gP0r=3LD~!i{ar>P`O5RUTM{6 z*U@=1pXVRQPRDC<=l1rzj(jK-6qND5#kTqo4Dv{X{Eh&=*4DF!Z{Oml7Z?4Kim>j_ zRsvo-1b?qxtQ61?HrWo{;&Circ610TtKNpk5#Ybvo${cgqx;T-hbfZ}b5L5k#q$q4 z6g2eC#YMC>kF9S^H4%k^u*W?qKR-S=1xY%nV5ZL?d%XM{=ddv}j6^z|;)pppo-4+M zoM zKU)}9)6fv;BMMYXOiA~Cy*jG6%Dw?kJaOoeS>2W($-2ZbZ zrm2~F-di{O&3e-s$q5Bz*?KdQLI$C{kB`q0F%8$l z5|jR(4!o_o0<5>#L$jY2G8Th zqXQ?!o#T2lb4zRg9v#TDADyqv=poO_H3?Ew8m|uH40l%Yp%wRCJb#1+oN3gLm_-*V3V@%7QcPPj!*`$VDRw*3bZSF~(#e0KM z0e#LgO+JW7O8P&fsR_C_u(b)n1@IW}h1FeEeg<=uybkGt0}~}bM&tv}t60Z> zG^09DM~g{~s2H1F^sS6Fv+BxX;jwMDWD`J9y;U9w*+6n@*??Y43$F9_VZ-T#4WdGE z)8&alvJxn*ha`rJhGew1iJ}_w`Md$e3%_Z)kcD#=~Q#Z46YlFouzLYHgUJEfgni>s*|xF;xbxruo`*>jV*-z zK{!S`bzHbJ%>ox$BmQk&Tqgo|l4>jPv|8;38QHhC{&Imoen{bk|p37U5c-2-*@*#VLv}0TG{UoAo{mX{zwU*5TcPD1m^g8WI=9!NTMA9;s z3iSR8tKARteb4oT*gTatZ|YIXn&|Kgo?rMbc?X?s|Eg2DvX&!JIHF~X6c~lU!0$%) z{(>bX{kQ>*kw?acn!#xTblK)NWx@7u8--I9Y>iwF^rB@h2f>hGQHEUf=rM4)N)q?G zGhrT$A?-LSV&o@06yytuWXd8oSR-b?B}So)2GdsUg=FSqs8{HOo6HUNEy!Z_%1lXY z4ifk!f96fVLjGa|&v{1-`Q<0kIKBuv&9863l=O(1h{8BRf^f(VDdkuVYqHnuUe=GG zD*{V84v_67F|5+2bb`(A4XAIvH) z)X$)+1Y;TxA8z?iMJ#5VJQ5ljB=luvvhwml8_7%n1eAf{xB^lps<7iZGgfxRu-}ri z3JMB&g@rJ9D|h1rwp}Ao9UV-1YaJarfk8pNGc!Qo&d$+%DTlv=c&bcYV^UIzn3fzu zp%V4wpEwGc)I*OS(r|w}Mu&&>M|KCmTkxTB4XMzGn4xQ(&An zrT@_auydHuOk~)u!kAD=-JUPu{Qhmay|ZJIZAng1cHQnP2ykGAS>~Out zpdJj4EY!AbGQqbdU;6T8qNMB@;-ykMjSL-&2q|MiJyI~?)pW691%QImJH=y5F2I8Z zk4EV0<4baHVw_iTD>SdFh8KLgSQ!u%g~IQ27CPVHDBV#Sr@_z84)yNs&B{iFoMivH z{53TrgMyPWGAcx{6`XPgon>fBO3PTu4|h+(Rf-kaBE`k~(6O;Wp}OXpynoeI5)b4r zujY!CYD~tk4}Lz}-VEMa%+-t-VuBe(L===SfNHG45HvMb&iRmOd@@>E`knRG`m2q4 z_$nJ4%`Q(^?T0R}mpa-05s-NQptOYew{W~5PVe}7V^dQ$B^N6JyIhFpwzhG3rMGb) zx^F@O1+idDOy;_vCL~Gx`h|grgcO&N5+l%j>6@=5`5T8> zCouKMJd;+?ucxQ;2j+V|xvX5c(Q3mnBS`?DJMfYJ==iwaiJXy^->7*3)x_kFwc_9) zwe`ATem*YWFG>&vd1|fu>!ZD^tGl1z#@gBW&hBnFhnXVBrC{Yog;xFYcc49Zq4gV_t_GRA`Kp=`ngaxPc_?VGi z94<3B7%ovwHO+7SWXHCodMF49ht8+-&qn=P_%-HWedtJa!oJVc&=U{lJNzMHZdqPT z$YpuY+<1T~ajw;aUMi;-WJUAOzEM8RX-(~D{c0jW^hp0&xRN#WlA4-+#rF69A!#E! z9KH2+N5EQ^j@`wokY`z`)R!+@rU+%EEG(Z;q?Qbf^&=COh;!STh@s@wjbx`xjnBt| zd-zR^sY42mbl@caaDE-&fkSxtR{J?u%3tN_nfMd8?9OnKiyf-0Z{u%t24FhjQ6Q0r zq4G`DCtbKGnQw~1*il5Grp|T=*cfQpGE)X~=!BRd1DHMnWc4>AL?u-z;_rJ8HE0Tf z0d>=6k+zwWz1%W5I$d{w4kG>nd3a(~PDfuAWx-p?gS@UfTs`JBV2(XHRT0Vbv?>^% zkpL#wpnYSY-c$Y#(CNJ2eV@}Pu`-AG@e+;8WX~E{*678^mfK78sMnzAHGMYjzm(1mc%n!}0GT@@ zzNORG=5(4?I3z%g=l;#=s`Qp@zlh52>J^N^{07PX#Iwm63rRY6*6DsgUf@DW<#b{D zjcgH<`Syg{s*dIs=5ckSi5SU5WcQ(l*LHgnLN%70`?%?r>7|T%`DkrkogV#M)@)bD zCgJH!_TrmHQxxU(K54fQAL7!>qUPRYnb+EdZ||{zjvg0zSiMzHTZ(Wl;M_akDqlNb z53fFsA5j+n606-!EK@DmH`$}PY%W{yw8v0ln<)M2=dnzbh%nG7L`qE=HG6`3G*d)W zR%XR&nNI3__RDX3UPO;-_n{+qy%DUV5%^aFGE#AO=0{Y<$M}tplv`TcNV&O_GW}aY^V!YH0nkvWU2c$2bBE*3<>=-3T#pBBUZ z3=G=d-5ty)bYucbkst0KpDi`Bh+4$WhmGROHwZJYzSk8d}zNofd}n3&vppTia9zXT;EQTh7^;NgAJ zZO6_BA0${A=;>Ljc`Jc&c^XpHnvO+HP07Hz&DTycCMpyxH7;t6r#d`5{N0;B^1OCe ztnLpN1M%_}3M+hkk*XfX13B7W|;V zkL4ELGsjiG%ysL1oKN~k(+1P?(>-A5q=tn9b2D3Scw)lDhoVnaMI}HAg}wgX=)uN? zkl!^{%CG82J0vu;kn78%{+m0Vsq*>iab#kHD*B@1M{ht#YHwOr0*VR+#pCl+J*}t} zg^saFVVYPo4=t|C;#=k7h-vw&!O?kmP<-+wXKd*H!*D1)F=50v9?;&VO6_ z@l-ytKgq=Nt`LH*$|wHBMK5R%rQ7D* zTd6HlpmC{p=CHTq@%-Q^0u~b4mQ)S~yfoW?^h$KN|3y9LckaFVx|f=w5AlIxGMIj9 z|92Etr_~uLiR6@3{|KOv!v~K!i2SCr*V*yNH~FI_bZF{Ffl+gIDw`RZsS?4^`}^}T z5uuPbVq=F8DPtXWl9Win_AnlD4lne#T~LYp9mMepY{}s=5nx_oGt{57B9 zk&1HHn2rhs!K#v8(86hr`LD5h?X~tLCA;@mDM7b)e4@5HP@tR&o7KUs4-wpga#VQ= z^Y(M4$K(8TAke5-+^$#W_F^-i#q;`+oB2mqxW<6Vk$@}A!ML_>ZQpm!OI5TFYcb-< z4evlU2N<$O|M=XKudezc%p2~}cn%r{6Lol^DnikhQ~e7=EUX@-0QK>#$Q%};zB~{E zE~h(OA!U#z%G+sBi2d2F5-!_M;r=CNqq@?uV$|HL*DsM-iGhMH2_auyxIoD9J7}`NL9X;n`G+$lc@!ip~0C`w{?T%fUZ8{$z z$Ply?2xfL6UzDHm!RPMY`uLdCPCHm^MWP_knSzenGlmLG5NTcR-KRg)f-O#1DOH=I z7A7dc(fA=xNZ9(yImy3topMHFvyy_$Y#C~d8*vZ55W&xDkcrSBHIsA?#j9bY3V5+H z=LiK^HD7G2{N#|1&VulJLSk$9G3NI}XAi6-ef*0KriQncmjPx|nPN8HkZ@@D{lhsC z5gfa_m^171!vG6ST(7SIZk0q?nYjf8W3n)E?8EJ}%w(u2PEH5M4GndMJFeuYkdW`B zd{86o-{RwI%&!ew+ArTfKZ~{fxjQXl^SCF})Y4+>4++!e(Y6)(?035qYbhKT(ueSfqPGue7zb4Q!RsDP9f9 z$s-j`PER>(A6u?5HM1e*0*48}RSo_2VqmJ{_osp7cAnS~JMN!#kCp`|$0v0quu%!f zsIahZ9X=1lbabUh6H`<4bbK~0qRPquN=mBhIVFu+F~wv#Q`r-#Q$})fs6$=mTuQC6 zFW7cl=a5=_TD;b4gWfW!o@pAQ@l?=WLe^^+5MNN3s7J^z*)5jp>l~I>hi#XA4f=xF z(U>dg@Gw6Gkwvxq4(87m@)^9L5_IukWf8`+ZeR($67hIWd|UHs7CE&xN!tkv&ue0cLqJo+gS3}daNyW>+^@X+wc z{eN+$QVqcS^^r*5ECH9@pZ07wNH=NrZN?+tB&DUi?y_T%L&-nSUxI>=@OEer)EyNF zv6;RP7iv?M%PT4drKI3Y<_I9UprIiXa1-94I2|n%;EZ*WD$usEIWDtOBZWtVNi4B^ zK4?PsW)gINjKwoeoLBrBmBwLeU~7k-plxAc(K})RpMg0t+qC?1;O5VmmTHAe%!R_J z3|vNPD(>waN>ATdK=3nMWDcvJRE(;cYATtz@%%UA!bTGlliuNJi0EiV>+U!)@k#s7 z{_nPb3o!Z;+c}vuF=csGzWjh@f{Gt@4UW{lMovRyi0dt@uFS zjyWhOhctzQ_= zksS6Zyc+Yv@^AmZK<{vmuiI@B7?MXP8S2=f)XwkUFOr8Lqin#2^z&n!VWXo1ii51Q zvOd84oJ7v>xlPQEc;PXzK#StP%(S$$o(pJh86$m4VJrJ&I6r8@cX@2%GIFNKIUABC zC+Q%Q7jGuB))Zd8#1XMGt5<(Vprf-myS_6C4(iG#hJu1xNgW|2KgJnxlqH^B{q?IZ z?LNnt(HQWJf`tq32l#tyLdvalVK4r_$(Z((EU$TeGHf=lykK&jb=UQ3+Ti!;X154Z zNDOh`GMf=84b5151{w+9vpl;Mb94@^aWI)wgt^k}GVN~NMz7x=ziBLBkh9b2^TMpA(_PlVVn|^yhFWG2U3pC z!g{R<1$@y+&3zc13;}P#>3Vm7kzPXXXpowET(qLJ5>|;LHZy)4SrdQl?d4&*`G<(4 zl(Yeucv6V|Yr@W8U~OX=p4S&#PtOxWEaE@sEMtn!q}_!~Jt)20?IRMM!|V6*aA7p} z`%5aj6Z>z4Y|wp9UM*XKL>x{wGVbT2qE4`+=kJ1EUM(%XwK2j1jpC=e+F8Pp8tQ_S zUv$ID4o*%%%WY1`D(r(`bamv{_ag_xg|Y?4tv~B&9OytSBlcc!?}iCMR2+{-UIm4g z?9_D4MGF9C+T5FccXXYOmOmTv@+L2oR7`Kx*H<5WB#r!1aOZ=f{8*7z{}t8FEf|X;dU+{_Z zp}!vn8zHX)f}Q$1!&ZY$!lpvMlpXsEuVUi_%Wk50rc=W~5i)5*oN(LZC>w#bCMv2jjirV>_?!4Oim zv~6O)(igi|R;|TM2Zdi9&+!v@W*j8^19GdXdao!;r@Fk3$6X7!A(9)lT?e2po+nufZ;mxm%dr;UL~jxxhP zbz^w1UeBz1zL^!RZmq*pQ)b3FmVX$O*^($i(p+*Vg%Yhq5l$!*$nbO}jD)aR^hR&g zhg09`W(34FRVc%1iY)~#jxEM>iwG0IRUp%x<5z@_nAX+xiVqtY+9@$@?F5Tix_B<*EB)k4QrgG8;dCY@ zCUg>MsXqt9|FsJJ|K_A8AyUx=%aYyMIU1$Z3X8$3?1uSNoQ{e@b~zo_|XD zcCF7gf%*T{AhfV*#3;)kYFs^~}&mUxy9G?OB=iK?fqk-dH0$z^-yUWVL zlhO z2FBZ42s&!6kyzX!r$cAeU-_uTKU2KfJ-j>pd(7&-^wY5a<1gFR_}5X6WgiU{HE3xn zh3KTO(N-e&4t>J5{duh_zc0Bpjb@UBo8F9<*Ez2@cNF zey};yr{=#)w%qynz^7VxZ-&VL@MlebrqVt}Z&<{??{?AS?25o)?wOzegrA;1JvaB# zoxA=1j`q(K_2DbE8~lIfrIY-s0Mpyd%nSzpT*}gt9{WwS2>7w~_WJtdAQ>1UreIBU zFp=}IC45l+GW^>WYkRg8&avE+k&%)3?k;3Hk$yK}^mrp)R(x4AK@8UFFE@?_W$6%nYIty& zipZ8r@;p-AyE`=@?Y7_Z;Ud2H-4p~ieXT9J+ZFuRF87#+ZjKa~6FLLlZ>1Lg_W5|v z4RAYB9bd%cJFX$W>6jfUc08eb%dUF6%8TFNF&n zG`vCN$GdxLcX55VAbR=G>-4C1+C0CA4h^;I?;osV_nSYWTx_PI!WA~;<*z^F%q=Mi zy_+dkB5}rN%tC(oLs!TNkIzGNAhlx+FqW@cv7w}#I$nj(Mx;PRcUJ?9-_V|7aE>Iw8vu_=l&hqQJ|w z=A*S{mW;jL0QkJ}f(gYh8`egBiwSm=9A>LcXNF)5`!A;qE+3hH%5&(2{BMNUqR zyXglH`E8)q5GoOy>o9s#6&S!r?!F2CSxh>W0?Pb3|3^cc}teMk2=G^R+ zfU5_<;qf}Mb7V=%(_r#^)P1Zq+QxKwJ?A&v3bi?(4ziMaet*!Ckf6}(@{D#qUo|?K z&a-yCeV-NRS&BvjpG1sb5*H)x>6TWp!E4x7`?NPI_&=*@J48H}3Eey1_~`UBueB5} zfksK%*_r$C$)k62GMi|!-mRX?W}_nvZ_aFYwXqz4fHX9Q!?JyT9@I=_%jUYRzr3=> zfnj1|5%v=mH8L_=*a?H0n!2W@!4OW;SQ1y*yF&WmVng53G<64}b(0tkMfWM1nf;SQfmz{TFd5AJ zqpcs1Iv1T4$vL|t4n{H=W%N(xEoy2TO&&gqlT%}TCEL2%(t$eoFRP8@3U#~3f5Ivv zkrmQ8!xoskJsz0BdhuQ`2NEaxMoIlTJEgk3Y~33g_t8p1KHSwM%=_yRKyd&rXTd>9 zSicq0K*O(KD=M4Ig^mud59FqYC+p8uNACRsnHbROECxyxin+C=KiFB?zT}-Dq+X%v zce+$1p{|Y%RyqxVg<0q%Im1`V>gtBeu<$|pKF-*?yM|wHnqa_(o4oSsp=`N0Xgy+L z002NrN((rg$_~oO5dq_Ac&5qfi>Z7L)EAqr(BY%&ZEny|e-GI9%8iN@L!%;IctDqj zhY?80G37c#hjijk|@=8hqEAQ`rFwLcL z6a%*}rxw#AdpgC$T0XXgUp>8Q-S6;q+B^}YrKN{QCZ%8QiS$ivP&rgEW8fmKc1WmcBc-9LO(y-R%K!x1x^1jOaFk?`@;tv}|% z8bsb4lklR;)vJTS2V@R_qhkYD$p`7j2Q@rCDtW2bS-UZVfP~HXm?u28`fSVx+FH~I zCHQZR>T!t_)h2zF>`+ZivcKHam9~LHChQqr@P&Mfi;st+p^>4are?okAg2%iS|Huq zzYGAge<4lL%fU7ao_AGFl_B9W^j87_=||8wcE3&Pf>S*rK}poC?1%G6S42 zmzFlg27$zZ4K6I-=H_~b`jFh*++<}xvsPDRRWb>{&JQeL(T{$nb$f_DE{)jgkkZry zR8;)TEh>UlQ^OK;dj+_=!$o?6_4*lZ7APpl%XdiF%z>q0bl3>Y{?*l6KJ%d@LhgZ7 zmiMPiITNj2Rj7QeZsX>5>tGP$3sWSX0CpS@=&JpSZSitnTM``I#C>~r2X+{cTZ4Jo zkBz<4myEaA6!-c@uDbdMjsX9T{jM$#R>x&!%6=Nq#6%QumrGn+v(=DlF|68XFHf41 zi`I^1ch?BdjoQ%jaPlWE9zHv?thhK7gL+lJjf;k$$2-*16Rg5wouWcw+&z&%78w;? zZ^xW~^M&!(pdAWnQWhSZ3os)}Ned7X^7^GMAupeRXH2lq1L`#(aCg4+o4&HMX6G3I zyBZ8kyAVjqgh`pH;lRsNO4V^(BZLF)!)BHRy&6zSM9&ZyY^yQx!Jg)ubRV5w&8mJ$EZDx4e*hYg8hVr1+EzpXPG)p z=%{N=WK>jme0*-9p~y1cdc+h*V8&G9+c)yFW}Du#6{yHajAP0IG9e1+nXg}I!H9RM z#W5=nheYvY7CI4802tsS<=}wkTHtDNI7A&C8;ea$92b0sgoIpfW`W)xaB^|!%a@8s z)p$HvC}#vF%C?n;Aw1t*hJZ1>4mxjWwzx)x%TC8*cChmcG&6(neRVa5CoXFPyYP3R zsNJ=pGC473hJhb$9T*f$PQ?}FmROKq0QRheGG_^JT)s||NyH__gD7RYZT9VxG*D$&~I;XX^lBmTmkoA~f8;=4y2+^=yLxz@wo7 zbAjUD(!$HJxX(SD?=UnuKJ9w5k8qk2sd+k)vEp6R*w}l<=a5R1bMTf|N4T>ScLip@ z{vJ-nrlrApzYFtvpW$-2Hwo|=>;{I#CTXF8rE}ABOJ;9iJJ4QlAH1x*Qb=PXmtMDf zP)7$;ETgQZIo9+2c}UA+ply8ITWXG{&szl_=wr!f^6tO8%pS5Uq<@Ef20D7yr=hNK zM#qz7;GlFcuiFjf%?;9a`w)EbRHkX5&sA=(0=-0kSjVA!GBYg64}pV~OfC;@u*AT? zsvd83m495nrmiWt#~KoBVbC9`Gnt;A7S*vv2B)&IVV;o?+3u_^7U*I{Y|z327It#7 zf-q=o>_MwpDJ}pEbCR;trym!ZEXsr5aYX+J*u0Y59$6f>EbWYmg9%xs|Bth`jH~hq z`~{`EySr2A?h+&f=|&pq?hffjBm_iIq`ON>q`O(D#+```Q7z58nSC7$CmdFGk< z)~JL4rQLxjG0hgRD{B$^O=P^3y*+z(IPIHu`vC=oimEDUM|s5QQXI?BTvQg1>!n#r4vg_*^_ssQ z6kZ}DqrX~ePx(qaSVCzQb+O+UM=s+j&EM~mlbIQZPA0?&91lNwh3E6~@@5;mqXx?U z4&xaoezafGjiIH3gNuwR4~d9iIFEBkNH!bG{Pp!~Iju;WsL$&53iU2kmx>zvtA4u= z^_(ga&bw?=n##MUsqO+f$6n? zF!s`^y%C`SqrDyBIT%8u!KKw1oCE(^_>(SXkYTZorYWfLHcJaBk~kA^L;Fb|RL5x( zNnTUZtwZEUL=@%pQ0ncM-oKB==B=)(((XxH$}t?Bn(q3r=W)|jEKs6Kcc%#x7rd%kJdv($&W?ZMao^9d{4^WwYM#jLv z0CLI##q_dS#&)Oz+1T(4Z>E%#mhSv8l$R#!(m-E=z0n(I77pb#5EeFF@mM$S5CZT_ zc0=J2L`SX{3P=jBJF{4Vx|tb54x-bDrJX=%Ls@4}CL2SD&Zotf_L-8F_JXL1WTsq7 zSrZ@H1+Kz%&Y6~h?v<&o<0|E|cGt&8=%-;Vyi^2Qci8#1s-aHM?5rpKyYW$tzTg{_ zN{b=lw2nq)Nm3fQnD4#7gOY_Md7!Z68q)Q z@!l8M3Qt$ku67b>RJF9su*t`#0AS1+-&mARaQ=Scync4xx6E^*(S_k)p&mmqjWz6{ z?!zC|PrQDD&Mq#Fo1;`;4+o70TCn%0^S;%=%gXj<&~PHihRg1N{qgi*e{hoTcjsY1 zALuwAf0`)zwE3g1j2r>^jML(P|LeDJeyN*E*i^qq_+25KH1~sP>?Yw^4Gpjp$0J!h zIBJQBo{&{2bTWb8&eZa}T;_YY-_Fw$6CZ@H8C1xt_e76hzow+74hG9cv32prS&yR9 zU2ay=?}{SEg(qznB7^M}bEbpBkL#wUtRo>;$QXe< zC0cn;fl%^_Baqx&p%b~42Z~*PFlFUS0I&S--0~%sYE)DBUV8O&W@e>lC8ctAnawJKrZQL*y0&PL`AEp(_n>lcIK>eB(ZyUO~~uZe{gVca(iiO zmyjys$e3D(d)Gpe;lU@0zI!(gBn!|dXD6?)_x>IYCxv%+OR51OFN;>``*3l4W%T4+ z)h>oa%Oru+v^101(Y%T!(+IwDBPj_J8la>2WdATIJC5@@OT=;Y1@Yc~rEd?iEaO1n z`RP?}p(24!E%9$7h#O70VCpC>Q{rMc8taes^#fEGDXGZF$g07C+4+r)Sgmp+E(|`p zr>n!6_$?w&FYk(^WR0-M*UDu$1eVueA3;q|k8IW#6IN8uXTR9c>3WI#<|g2v6~QxQ z!R`7k-GY0sU|FcRKsFH*TKc#(`>$E9X&;@FsnCu6I>+_$c5j=zvzU<4`Y-TLqM~H{ zVaw65l9Zva&~8*nm&${9)2zYO>=|Y$n5t1_ujTS!#A0?)(S|uFK;3OAWY!Q^$AXA zZJUn4g)HDnEZ|RcYwp9r_CdIGv+!}-9lJ$n*c!pp{YdfmHn@3Ue)ihm>upBA@SU&B zuY}x)J>rby-QWA(UoePu&a|JRwOouV{#na@dUV({95AmhW7Df!OVu)3TZ(_W*`Sar z7+WQ1zo+9!vn~oArn|o=dOF70#?3IMP*=|vpoSFv;(W~z8iYtF5-5Z1+Y<;(GWnmtLsms~isnI5pSD&Zbd70TCoZGy{@BPkg-#CiYj zXWz2Q;U?@mO-)8&^7uqIatmY^2VTDT3d%37KKQD_x++eZDVb?loOF= zseP;5ECin&_i1#6_3$NOOilV#kH0lHspy0=T5Y@qFB$c>_Ay_E-pS?4G9COQ51sg6 z4|prvDE)%sQQ?|DQv)~Oxq0;1f&*;gN-ka_B0^DdG9fC#c8-)`e&(%ApiYNJ&J%d2 zXktQza()w^ShM%%6PKO9x7oeT9BCoql-Vf#6mpGzN#*FYKCfX7bM^;pXq=!x#K$O3 z<=+p}Fm142U%C9!!$r zh)U$p)DVUdZ3V@!=do6g>yXC0S4aQhD*s$HM+_*e`&V@Trh%mKB4Xq!1>eP)F(~F6 z7Wibss-mz2JOnW)N>&{9Nty)9I{x_~iJ(5;`G1Tv{HqTw6=iTh5^4&!I{2c(8}P-i zmU?S!kTIc@Y&<*A{z{}TMi7DDKFS_o66bbt{DLs|3KUEhMp^i9!H6u1{Gf9qG>@)w-x`v@8RU?w7bR2C6_o_ zlM8yN|0MLzpN88=>HKoiz;7M-=mSb@;&?B-@-RD2+yairTYFq+^^6W0B!6$S&x|z7 zxbRd4IMDyva7t%fdG(}ll03`jB&+r@RYgahDY{6r2(Bl*=udgI#gO-&EXLKfM9Gvd zl@uG@+W0yb7v=)2uUX)pP#s(f%NP_a@hAc^*7_M{_C_1W?1r>h?S)!vazu-m8FNgpvUIm zT=z5u*8`;mxOh2~$v4#|aJzF|oAt zn30M4^^%Ra*gs6N^J%>H!sAD@VZrtf4dzFZR@wFmTiF66@TB_yQ|Xy;E;cva9I>lo zS22+Y|DEHD@-6Sd^Y83~D?3kVx7I=C-*a!J+duER6`qyt)GwB}yWw;`O>(I+V?vMQ zf@!loqMh?^$T6WYC^@n6FJkcSX~S!E+2Y7WKBls0RrQN`9FYRG33RI_M!^80ii(P> zo12t%L1;-dN_a%X4S8)e3aU2@Q0|9>Xfsa4g|>#k$c9Hqpx|PUhDb?q5~H46UGopaS6yy5 z5J>)yCS+h()NZxGs}GxJ2sT{Zldd7k1KZ(-@buFmW_?oBeW8dSjo zJ9q!!NJMfn&7RGEVnRm8^x0X}t2*yKX}N-mV$4p7&I}!hJ8(D@8yKh>>i%}~^73BqjU{R6&vQoB z*RL_Lv7s3l7;yF5{k0mBg_I$Gh*}~+V9ej_h>8j#MmDxJxX91VLdWcz+uIvcT83*q z=xn0WCo13T^IR>6F+t1G;B}f9|FygrmOg)#q0{%^7t&9IYGQPE^!_GCs2oFb-~sK- z5~xnhO&`H`I@?t%G2qN6>O3EF@L1~#i#|C${Tmk48bYI+`I*z@FY4svw1kOy z><&2I#|z}9h5=&|H!n|Kb4fJY{^{wde3l47PuR@Z_;h%WwY9HfV`C!`Pi<|3j#{U^ zl5TdK2Z2@kDmcr_%PUFy`N8Pw>8<|V>pi5gZS9&z=CU0ARci|eT>Rz)Ib}!Wu&@vi zQiFVY>I9m*#f5cs5DaU$$%s2Gub?0Sd|?2_;1uQ#ot)HIW~yi~R5Mr~=TckI8E2Kv?D02c;JmrjBGM=_l}C?rIrso5tXI~(oU?l-y# zEtTe8wK~Jc-SM8gQ`WpYKT}$?aRYLDS5Q`$_V5@bq2!7RemANb8liZD>D4Tw0~19z z%ST7{kefRyAc-Qf9HC}nio(E7*GlOe8KGbsVgqM(X;oFs8eOvCT(S6*6Gu-kpN-c? z=8zkN4w=J0?9#PvZou^{XRSjNK#+{0qQA(>_!F);M=<4L8*?_jDTYSBN-NsF7Gl%2Agi+&*%d5)5Y-z6Ac;B@F zvR-G^wD~vw_qgW86%~;MsBj4I)XajJ?I^q6&Z&9FQqBnZ+TxWjUpDCIAQ@3mxDQa} z85tN1<#D#Qwv3LAIW27U4#oOCwEDGRVUxyGRXOim2ujOJpRDZqOalq><>lo;oz&y) zujFCq1eNycYAy~dVc|tJ{kL5xSzkIRuMV#-E>>X%U6ljfVRlwuP0_K7oQdK=C&zc7 z5Zu3~%EREBultH|R#o*XF7%|Onl7m@(ig`X<;)AWdhQoOq21vDz0%?)!*0|2RwFf>AqeR?6t|Hnk=SQme(unvA4&%EH=I+Sw5){k%~_$Ti4 zc()w|?TO`-A7YpFWZ|0}TPqMBh;c0F3MqdrY(*t3HDscM31Xfm2C29{b=!|)xUK2R zz+hurbX!a!rn235D7U?JzofokmyrL6cq6$HD@*nhw~lbnMpj0O!(t>ZWbfu@Ha#wP z)$|wvx8K}YOJP!adPHZZ#Mi>YrR+YOA7kT$RGghi84-6U!yNt?`$Tz&C|98h4uNCB z$Z%m_C(+h@C0=SCdEzJ*JiO%Ohb7VT*@^H`bu4`m;%y7LyX*W)Ve)iiX~GK5ts%1K zJ^c6AQu0`kzP|;H*VhpyMVF`%X94nFs;y>#B7Hi~-%u86-^)bcSyQ`vk9Ch7@nllK zRE`o9C9xWY{8(1T?!K+l;JCK5oa{!$z<_`RqJ*4o@-rxSP}d-dG=X|AT9&fbC`jX8 zcvzxdxJ#J5?dY38<0KiIn?hnCVeo7c=(ZX?N8rP)b9C3pE3L(2mLo{nGzuPAMyT$3 zSle5JOI=qPP)D6NalN?co|-_2V}@%Int!3k;Mu_MBy{H^_|mi{xVZ!+K-WbQKO0{Y zneHbi@=#K2^-m!yR?+x@~ekgu2(ZfIzBq>zE#cJ7QNRBs!2e{*uP^dY(~s&Lb6H;cB={HM4eygcmd- zn@ern{dDvMQGZe73)xPPf(Zs+EzNaaeKU-#t&nHqcLDlp!;;P~vIsy}$_RSj9(Ktu zgmGjf{1qoU%0~C-*fJalJ1i!%OK`eZ-wmRMmiH_jQI9)uN}75!Hp# zkdSIF-UDx(?_>V=v;D<{ue`MrfQ({@Z(P04A>q5ltMvBRMhYpufI zf{DWsnSc9wJ7^A#ljMeW&r@oE@Cn$wNd57Hxu(AUeD}!*<0KP}hTq*$>}LygrMCjI zhNifl8BZC0s+n|=jP|6y^xYg)`zpMkw_8SfTKHqrem|47%SV$b?6>G8WTxgmwm;3{K>-2z#m;Q!lcIV;Ze@RnhpUSjuq? zsS-2ROyYafL|Jv}FlVZUyLkAq{oc?u=uU++oM7&}<2}(Na)R`Gv1+#>XD-{*au}eM z41aFWT!?-*h%X`VL#lUxhS6b~lFbYKB2$^W{<33w0Acrh!*Sy^FR>3=rHz24a+E`HS<&h(kXYAqXzazw}vS_KbI5cU4B3EUP0N&sbYCjUUdz z`l($HrRj&(p!*iCbUCnL?);^y(Z_jvw4ZOfPY~a922^ClS5{&Rnz<_P zZG}{|uLPPj#%9UaqFgK;jBn~L`Q7fh7-6l zXZ^ss$-*OpNjbTy?+01$^8nR=~BbsmY9&8Fup}xn4L=JzFxWk ztDo&XCIi9+NhT9oaLGQTruvutOdopE-q_CC1ngdzpbEg6oU#TS2xSDh33+treTaCx zvhnraWL=-oqyd4IxknGUM^rC4FX}pamneGkM1Rq9NW2de%CyI)e6k>@b1(>rW(wVAjm9Hafz*zY68Y>cxi?E8^MF0vHb23PGOpD8iC&=eet9r5$PN@dh->| zm(2PC{x8a2Dq>kJMdp*U{BhP=-77WuX_OP`mwVX#gN&n~juFEVQC!81J!TJc7PVet zjSO~5mE+)k19KZC>(6&-=>!~I1U&6_R=l}Bj4pO=s7k2e;^MO2RF*L9DtnTPQms6v zc&V=;@Z05elz)tZ?2~DxS+gQobc*t7okH@;@!8b|v0mxM5ArOXxK>CS6hW1wed}Hs zycAH`+Sc=vkboL_ck5ixZGZlED4C;aJ6hi+w+j~aVTu3Di9W5h62;scVbq%JW2uW} z!C5bz#-w}K)C|R1;@HW#s@c~tL;yCa+n;{krJ#mVqmN3+W2?MBtcRShEEK9$Bf)PlYB1aC^E)Am zIKqSzn^0iJ>rfe1xK&7*40~xe!%3|egiu8oH|SkDJH6L_$0VYkpk{t4l_laCq8??dWIoI$Yag1xVM8|L8lh{SNC@J~N4hCc?W{C=mz zDRG9R!+(|}kaiFpcYY!L(QSbW|IO0>oxEeu{CrO2Ywb7KDTCJsiw%UD1;ht;2QRw* zmUU%)%Hj9h#5|Zh+L^MhFr9PWw9E?Dx-bRlh)#tv(To@*lWr`P-V(Uz6hdKJBz*a2 zy6oYxaXZBvfewqNe@G9UebV-HP5se(^xLh+7NS10~l>+{;SNvP~rEDy@|`g|ek1))a8OLR)(D`ZcM z^o`M4cst!{;x}}S4R6OjUVg6YTsgdIj2+OhQhRNhyI2ftcXL&_si{5rx%fY@HQisu zeyefI#~i(OGg+ZfFH^b0%f80jsR|A7)<|Y5Bxl)aHHpih7vshnRtdLh^>? zN9I7$GD?(!%cx;aM9I4kh)D4g>q-Io!U4qeLRuF!uBKyETRZmb5qi?hk_Werkhe^l z9B<^V1|BNVa-!Y7S3)-9+r!_<6C3I}^&uBhbVXGcy)-*QhFyqTg?w^R>p}-p{M2G%F9h<@+f@4qa{)FwxISKx=Xr!aC93wfudjnAx>mdI2G$_B+IoDN5}9n zyRaUVx2jGL$oG~U5$WHEw_odFViCto_jiFT^!ykx>PG&QBBSS*yZ z7s36&%*q-gwfJvO@)C)V8*-0vocF^4Q7V&{anaIL@l1(S%p2;FD_C`EG>qbYX{EC- zu4{|YY40JRQ{{1=GOf%2#S#H;eIx&Lx%?5yiN&Z}<>}}y{>HIU{~wb1fY^fBsglPx zFcU9HB5F@`urIA=iIKJBySneS!1lGe6e&cI3;G@=ujk5W9b`0(lLp{ zgV41g@(WwpwIf(kA%EoRw^}sx{pap8azh8i`86(qrEj4QRXH-}o57A3Mn%h#uqMRH z%06O#3Bk~Qc<0bgVk7|ysI)%g&#`g6xm` z9*(Z-A&mvo%(Dy34H!*oc=sUgecamQgBe2VCF9I?zI&Hr0D<5wx1)<&SV1z)pLwd9 z>x=UsR!as3QO?EbX(%5Co|NfnM`!0%m>xDVk&_Fwz>)&8@CbMlvt!so9gNsc*kp<5 zxH3`CJGfU*1KRx_PZ9{@ZF{u?vs%{Gn4XESH8deRyN3~ydBKv_Xb5r$DVsTxSGBUN zdd*l!l_s2fHKeT(qV+Drq`hnEa}`b~9pP{G$KEAIA3?z^-yU7_>lZ!4i_a)5XAl83 zgw4snXhxhc(QA)U_5h~R{Zu$El;(dxR`S>vG7qobDtQ(p%CyJEB3mQ_sdNhgQHUrga{v&S$<t- z*cRof;|0JeG4Y57c;XHC5$*mxxrW{tjuH2@ww~Tf4`eE)%-o0AB>Poadf`r7?y}EiFZSMB-&0C;jg+bSGbf+uPeIj*gBZqoO|59emw* zZgr3x9VPyw939=v|MV)?b4xzaq$2+#LyV{?gN^9J{_BSr640v~;fCa_pbT#CNdPfg zo$I@Q%ib6uMslras1Lzm&zSjn*zn}u-O|E>Udo^agQJoZlw^SnMaB6Yj9TtwH$yDJ zbJr@_KXWhF5QTkETn6d$7vr3gG{G02>58BzN(jeP?3WgG1U))9NX>f2qbBabgbgm( zc&$GiB#>H((cP$ADDzwpIks64PUC7V&VPL3iHC-tV8o9Qp#1ZOXRMi%X`zTKj=EkV zq)Al74p$SzD9U8TFMU0T=Dy{9o+dc|rpfc*#?-IQ5Xzob|3Pnvi$iEcHC;Iku$je?;S1+$_CJ=`Y;q>r5A0wU-z94Wb z6qlDs$;%_&!$9ZU6{n=61Uh4~>NlJ;itSrdbO_O@G`<$p<_)B3B|3*8bF8$7&F+?M z5MnkistEqvicONA-8T6LVC9P~UO4DiR~dK&2w{?^H3mTg?{&+DlF{^)vkbzK0v;s}#%ozK=2GTl~-)&UbXf}Wo6R_4P8Haj~zOdKJUICONC@lcK>b%5UkpbjYRMUroiO5a;q zAx=$AW$@VI*ZVOOVBM>GxfVM7o2^L7#w~D9Uxs5m$}dgjvWTHZG00fDL8`@n5=;4Mlm%x4J&jt32_UCcK~W zG?Na`?GZ z7wOn)I5N^uKe}&GeN!g?ZF}O_tS4dFIM61B-&<8|r|rk@*8majTw2;VDiEAs7!%_R z1oxsuup^?Upi7!@R^KUmHKW&vyHsj@F&lkhDFnyc#~<(=<5>!2ZH+W(Lja&>lZkIb z!uZ!$b5`81Cbz%q`U-_K zhWpARN5Lf5466WxV`8TO9>7KLj&dS zeU*`dTQSckzl#f3GYe0Cd{+79a`73P+CLwAyR5jy^C0VsHGgPKb+kQUn3>W@h?` zYIiLUd^*S7f5?5muTm{C5J(=a@NZY(}&^)<_Z#FJu zq0n%1Dxf}r@#g)pq1|FlRFCAFH)udy7XmW(zWn@&D-|L&YQ-~KVM3!PG?G0i4U)#w z*!98zs;Qy5EUjh90Jw|9w6xyKB+B2zZGm-l?mvy%3!E8G1+yT*#@WAw+h{p~){=GS4+Ku98KZcYdODIp^TR!d83 zb90ljV}-&Rg`kR&`lajXx(t4b$kGx}?#UUeV!q;f1^CK1I>j_fAo~VB@%5Pxhju#m zx_UYrlA8FW*`$@8PJ&rkZB|YWc6QQk@940TEnF-%uj+VHQq!m{rdjJ2MSqgAl1R5t zN5XZ+HBA4MIF3X*LPs8L@Zx8zczG)t{51Qru0#ESBH$j&@NRy8G5oB``H!M<_~*|g zR+YT@L~BnIjcBIL9~O8G1G5JIgvxRSn-8XU_saJ8P22Dg?of1m8~WUcF;-d0$i!?~ zhB7{`ee!hG{)n^kIP9_Z_b*^J7>cu}`2B8i0k@La_8zIFwe^$GOL`|@hoPTcSP>-| zpBoDTcR!gJJ7Pu?aQwA(adBxRqjjAr(}}(o^Q7RZw>fD&eh~2XZU*7ikwC_rf=kdj zxbS(~(925zxZoSxK#*YQP)6tZ_?HjCPDVzg?F=%f<*=Rp@W5Jj;*{-l zhh||{G|piLuv!*TBSSM}{ZM)y6}CYH7lUsfp%UEhlBh*bIB zIM4pDOAO$l09!ssC#RmhDcd9V{2c)hFbH!P3f#w}HUvD*>;~%s%I9u3A5$Uq0e5)O zcgMclLRJnAazH0uX3!iC5`g`Ue(F}k^C2TcY5|`8mBRp<14AWih<`9Y0Ngy`==sY4 z^%XoWK0dWuCv@9(@8v#W52M9MPWOkFBp)KD)6{;(l*imMnZpWdqtGHRwnsnkf1b@_UG%5(Utp!=|}EQ ztDP_>mzQRhm1cM78k+Aq!P_8A{=*x#fB_)^f%7Y$ zw(lz37I@vU1c4&TVmJc|K@J;1<|;%eM03kMAaH3P&u}7CluRbSzhE-4O|yO@aHAD7I#1FvUlBESmn-g4}$38=7uB z(b~Gg(tW?qo+t_v6fqig5?9-o^Cfb7QTcpqtzrrs>$Qw0{8;bh;>l&UhCZKMoJi|S z3hUW(ad82+O?Pza*RQmj+gm2x-(n&6)gwBy$$HZE$&V zO___kFJb;^@H5u6B5=xE|L<@dS~psjYjpkaBbGv?hsvdv}|Vzz|L$Lizly*8Q`a&moc=7EX*DoP=0k$mWc^EV4Kruh1= z-f*~^)s7b^)K$01=4q^Jo8FR|mOm`};<68HPUnhpD*~y5ggHmS+#<(+ZDNvV_et1o zj~2zxxfSRm$nE5D5#XvFn~kW(q^8y9O}=c4*a)Z!c0?4WhYI9ZDaJ!(BiZP|=>m68 z?Y2L=NMAgel&vj_EH^R!I@{1t3nVi)sf$z|b7p$dxNkW7*{Kf#_J4~$y^msOtKkwC zqUA1|K`t{HOe<|+sqz392>j|RC~nB;Yiw(aW9v;#eb<7>(&7YD-g3(v2ePF5;7X#s zl30dvM0`B&qc)~X^(3ODbnnNYgNNUb?yo?4`DUS&gyd-N(co$HlC0Nc{r}cTNk)eN z$IJR?Cyb+;OGH5djb2Oi$7oeG!{I|9c$L()Vw_R9PESd#S~YBTN8|8r`|*C6IJ{H% zBM(-+hfVmUMOF!sg$Mckdeu8^6Nw6#<1%ezot5jOIT#=j_$4jJC4_x286R*n6VUVM zcgM-XP7X8;EtEG)4grHg^0doQJZzbOu7?M_neW9~#DRtSJA(m~VVFCN6J>SaL~47y zEI&s_ol+E1&_uTVX;e>s-2Oz)p=*6AJ`I6ExY`(bJXly1Zc1Brso{E#NUU3*Kz}i$ z#mDDif1Fq#m-lwAqq{rA1K1>xfjW8c+{gVb_QAnnBbkuL;U*lCh}mJ2oA1MWW^h`X zuu{F`AH$A+{I?)TK`*n~DPkMUYB&mIypfER+`EwFB4tjWv^{AcNFSQF;32oH0vtr zq*?kI3TG+D3J(w(U6qw1<`Eah9Hm=zaJ<-v@^tfgrD8!!LxWrNc1P-dXyqP*RKz*7 zM+5i>?;oJS524QVxk(Wyqh3fvzoN5tR$CkSJ#AYp16;k(4AmC zcYOt27VCg(N8)0@j)(3dzo5WrFb(yqB)0XDsspA2Ij7I))>Kz^CiI<_VQTutW0b=) z_~mqdb23{ec~W+BR~V?jzzbdKy)>=;)Z%&@96|)ArE}$Mtu4XT@k#_({=YOdgvtoA zHOZ$8BYy6DpfYlBZat&hKTj35TWQOdp?Oel#;x(3j?oeb4QWaCID!TFaw1p|CT8h=DMKL`))h zpVmdAZJi+L9N$tXoX5e#id0rDDnJ$VVkZ(MFBgsOUmnv z2L3wJ>#NKBmX=_)LDA)9R{DW3bAOvXu2^EJpC!$g{Dv?4v65ILY!o1g6qkGQ4AS2I zHz%|@yHN;@W~0Fo^V3U9J(|Arv6L+QHwVBcm%PLel3sLhlf?^RdN=J0_y{Yl#;6S; zqcGq-TRgAm7|3Qw06$gw2u0(kL5RU7+xVjIT41l3nVZ;=V2T0PQ2>VN&f+Pkuo)Elxq5rGu_YNrqco8F|X1V#wWc$*p6bFZ~ipyJ_Lv?wGA1b{V^<=qf03 zr_?M=yFNHkXDzs*f^T)}l_D=Y@)?IMxG_Ntqw!3vyG8Hfks;T+>Pn2UymR6zUjJ+V zo=TbW|EtXJ^pHNHB4NYl-=d=tfZxnb{{t;M8lKgd_B&gh&%hiFbh6}0ay&t{w-zIw zZ~mRr#C!D^{nyLl5&87ad5$(BA|j;phs%-?^*e#cWboee8e2G@f@LcGWr)^N_8)sQ%NyW*_V!8_{qR zgYaMA4t}DBuBokcN`d|H*|7d1-M=Vzz}?i>_gjlFz$b&Eq(P0OiP5a1L5o!!iIYi)hUEtfy^bl0A$0#C7vH*qEL- zVRQ2ZsW#f3B8!yFsh}bOj{hMSeQA_y_mARosy;f2OhhB2D{*0ya%MKr*xqfG8>Zn1D+9hb zS_T_N7M3tW2XPNAzVUQcSsfh#23taMV%dYAI$4n5q_^DMyvCP%JO|X$CV5uZAZ8{j zK3_fZ)sN(#2Pwl@`2-0kMM_};0s^FUKdY-lHk#ggUjmb%6Eyb6cS=Y~N)}u-nONWw z5|_I6oFn$x+2UEYh^`E^AFdzYDLNTuXORjR9*&N3&g(Alm%7>?nb*|RnJV03161j} z7WZ2;ww|gxKd^!hU&+1Pj6`A6?4M%r8%P=uA}QQ@o~T05D$Ee3Gk7}gkC8E}Bc08O z(%;A=b}ODY_p9X4nyW4FW(FM$EvpP#1jul*_!rfdBUL1WtKeWd^f3gu%zym&QAzm$ zD#BIJ|DLeu{kQit=;(2(jHy}t8>Uxq#RijK2)j@S*w^3VZdX@TIBy|K%gMOBivAOW zN?Y`ml7{~RGGmSQ`Gyw#!umrZ3U=ue9ljJBk3A%%Zj4i7){kF0;JCC`U_qiz1K_hdz`gPY$bR#rx=tC(2G4oOEp z78kUJESUq})3d*fsazpYy;u0-{`}-*|8A4RQd3Ww2lkp^YmU0`L|4eGF10$*-yaF_ z@Ols;FX3UDS5yVv=kdVFxX)fpBfd73$1=RYAK2xbksW{66lu&mE)3k3PwX|k*&N^a zsab71)_-zHhWd{}3mTAIRRDrn&53P6KXOGtJUsIm<@B6uZ1y~F8{V3FJht9Kt6-k?heA%Ro# z0_!#Y9?fMZc94~wSTWm0p_NxG`oZ`}NK!%n*Z;T+{AccBP+mdknY;J{OCPoxkQS(* zom>bmH6*O7Gs0gUIn#NY{@*Fnm*<&lkow0pjO2FI;M|W;d>58@UWF-P$x{Ip^}k7& zoGkDcgC&Erub+|9>U{6~(a3qn^j18?pf3d(eH52sx(yLIOf zP`im|U(PQ7-niwzz65k(ggZmOxI7nlV#fG0{j|H5I{Y6I`b-Yt`1pQx1CLii17ls( z%m13=U(v});4umUcH>syG4w>>i^+B!UmO25>-+P&MuYgx?(@3_=XqeG1YZHgI~c7F zZpvrU47JKt4a`(0z_bM{Mu-!GPeAEy&!w+arsq8Kzw3yHy$qlKmlhy$HNffTmcoC{ z{J$HL{!eZb13cg8Tln)Ztlr>&d2&xQi1V+;lH#!ci>qwF%D@c{a5R3w%ZvvskzZ!^ zZ~6uXc7sMi^vLM!Y$SNmNq*N5#a{$ictVdtspd*+d3iYoaAQ~%mxn}`kN_Z;qGY(d z2?B6OuuewC$3Kmm4-F0NSUE&g>&60CCnGL$+qbf^xCIa*cdmU1a(bje+y;09uI>E| z2V9fI1-CgMdEDG;fsj5tHg?ENi-(i*#h&H+_nS+PBJOk^_6;DSEdFzP`b@GW)ioH9 zlVBtzT$HCBMq|#Mytm(TG6Q9~pu;3@Qr(DRWgpoKMx0q#N{alyY5eO=2=nvyoHbw&CfS1tCv!Stjxf2}n$n^{7?80knFQqIA{qmNMVX{N-fTOy? z|G^s-4O}ABjRWkC`YR_Voc`AfD_y!Kv5_Z;KMh+m2}Cr&!4ewytDl9_*K^lCh5$Nv z#l-~`)77_tK$VwQTw2-#{NWVykL68)_*z3lZ!!e9?h~~a^$4Oa&bNoxF3SVR>gwuL zrqcZGu1>qGhO-1z-o-CI6SC1X!1ERmU?e7b3!%BVzUtCBjOp3ky%#zCx&_iZ?{)m! z1)G`#K}JJ(-L$5DTUN-BUY+Qr1OZxWh--55jh^eWm z+9^44K#hNKbyZPp1Wt8=LPF25U=1;w?8}b^&4$oAqx<{&H!xYh9(|5mBiio=+a)#L z(+*o^Z<7VeMB{gkonFOB$o3K)tkhEkT!v6kGczND)wc`WhIg92@+2w?RY$(Sn9A>V z%dM|JnZd_F1Prbn;Qc&4j(_%~r>C3HWDFHOGAJMbF!H`V9$U|#gv3Osf-zuDo}s*x z62@Q}hvoFpo7mCaOGGpjDRAA;`uaK+xhT%N zcT;vcGdA3jALC?!p%I+)#zs{~Sc^eDztq&A4xDe(yrNz|5{hv*MW+xAUHxLbgXRqm zAm}xNNq%e4iz189R8J-`N#f_v(X%?0@=8kU?mUw-H0F=Ku&}TvwcJ-9K77!wbcQoE zvwV~5QE{PxsN@WdBXKe_Il0RBbZUDr+n6lI5l=1C*9H}BNuAuNzNfrk?If>JT zcSG>-H#6?N(4iwfuD+C&JmVxg`_93^3*(+#6T@Xg;FQ>~wJPGJ=f#H)fqL41x?^}8 zR?urmh-DubVDf#q42Fgvz*G8K@CW3eVPNDpmyqP;nVg(lWNj9(4uRLCaSM_Xa_3Vg z!Z8gyJ30Wk&DV5{v=AI99O|?k=4+5Z+z%o~ytu6kN{gT0m#JMPq&NwHw<|}90%n+`Q=0YO-<)7hu89_g&gs_#)&Y*Te0B|*~dV((~l z`2<`}Ycfz#ejwBU@EV^M65Jk17e$1{@gMk>Jz+XKsemg=M#1T&q5oED^LZ@(8$jE3 z{diZ>Fme$C?og@BDB>uuI(zj;Av1P8$@Ee0ojD!=D8|6%%E+dM5meJcBF9AlfvS_L zMX}Pq8{W6d1NbpMh5V_u#3I7$F%!2}ta)K$XZ7ofY(dSy01ad^6>HQ%PM%rG2@Ct` z@!oI`cHmTV-1=<}C`)V^nXr?yi*-xQm8LL&b*%1eA`V5uSFf*oijJmp9PWYSA7~_` zsEvoVr0wUoP$VpU@M?MK_fCKvnM+~#{cXEmrU0b*OWSEy{gw>0`2i(`9E@1m5E8yJ zvw`u#$f)cv5sCoVSlMWv{pl)`-N`7N*+yG}fHXQ<`n)|0IBh3Pwc`*?{i#y7n z4z;u!tf)XEFRMz2ht9z0cKwMS9L$^>zg&Z6zT-{%^f}+vzg15^psVDu?K#V!HMdoW6K7L+4jU zijOJp=?p8Kd43NnR@y(n-`|z{he1L;>%QIH-O${|ZGB!;w6jauIo!8|Qe3E_bsR7+ z{Qf=aVRE-|#d8BKT)yk(Hg@0hrZD}q&trKl4CWB};O^c976GB!@p$)8LRuOYxeRZ$ zw0`C9o%``4p+u0xJ(NmxTD<5j;=sT_ONn@xew653H3A?^?ReS^9nowodGOhFL#r)^ z#m#L8qv4%DQ~`!zty|9698E*(or%P}q*X2P->tuYdxP)vE$GD-)`K++4dc$vUID}s zMlPPz1V!XB9-o4nsb9C<;!xKxAtf!PLI|t29Bjx5gh_ZmbUi-&UyQwFP+Za0wTn9; zxVu9WEVx_nAi-S&1b4UK?iM__ySoN=cPF?zG~doS@43J4KPalY=&s#s%{k_n&v|)Af)b@Cbf*M*@<0mg+pYT0L8*Hy8h8D{(Rq3ci?JZ29f< zQnX*MSb|1uH`>Fxo=D%}p*`Q1s)x!ok7SCcW>g>%l&$&4gG3ooaJSOWk}L=&Z7`lE0cZI@@n$0Dt1^ zgxf=h>(wslyTZRz2V5eP5=6ugUx0xr5fQPbNqkUOaWMi=da$(>PLYE!o|Cv3@)g> z15xiR7m@mp#~Pumpuqe^a@?!XPbcNCZ9Vco5OXs5sE9r<(LFFD>NfvOPQmuG;uu(N zvkF?dn~{CIomE(FC~9ee1)dafTLm zdS?JgTNy;a&s(AkuvW{h*g-*D)mF<68&K*DSirJqe;DSUw4{nNYfDvQF=+4!Fdzp8 zCcdU@XjMgiOrz_eB2>bk6I`?e$j0ST!Wm~=j}1Lrb2ZtcWP zOCF#(E6Rs@AgR`(2sXMb$t+YU) zC58apXtta&*NqICC&SOO=d@I{!!oC5`vaZvB_+s9U723z!xUn1PC!Sm3GwX~ww7ix zlP^Vr%G-R_a*sf4wJ8FJsgp3N=wN}#g^`@`twMX=s)r^8@42I>DJEMIoKCfKWLs1B zJ-4hbp<=9lT~;4PtWQj*2pD_4oVK;JI-~=bXlF1#vd0Pr4I`&Sac&T_=A!f*AbD%1 zO66w@dWTnRP+6&O)SxuD*7wZzC3xSKfFqWdS<>X&1FoXDHefW*Wo5(B`52=ms`sl| z8ltiQkvUkirmp#YT|l5cHdg}6n;sSAgVA6lz7Dfyu8gcK3p+p2@J+n^&3D+>S11-X z{(kVAldh>LHjqlyg2p;MJ=Eb4G^qmY(qDg-u(V_p6%~C%fj$FGrB2~mT3Mk;R_CyN z<_`Qx2#fdk;xGuIWpC<}gu4Xn+>gVyJH=9bYIkGx-H0VTtf7=#4zfFIy=!mtq~=P& zg*4&jb$+JGX3Ps{dVBMp`q5zJwA5zCML|KaOdN-TzqhHt*FeZ+12F920q~Yz!D#Z% z;2q&ojU(>YEbi#|-$rgv&vw;eYok1`0uq~=p7&mnh`&uwjOTYGzBd`(z7{wTaAV>OLxTl(N9+*DvEP_<0G zjywbj))()TbSu<$&Q%sqQOjxSEBm~d*+hAH#Zt4la~yiOi|K!X5m|}d`Pi@P>+7%E zvgh2h4Y8(~A6WSS4%+=%OSL!LRbCOJ>`@cYCj#>9ZvZ(k{Q^W~lCzM7qWzWmkB|~c z>o3jt_y_YBzxIE7YhV|q1oW7VN?!6Gsp<0epX?wYR`P!eMpo=U%>stD=|8A7wPp`EW6_8C=!w5%&ASOj_3!^l)lPsco<^#HR?XlwTGyZ-0@haq!re<$K{g_x%~4 zu;#@6F;(shkQ5?xXV$aJe`B~9zU7NY?ymcPp9-OW7}ev=_4U^7Syb$l;(1k%xnI-_ z-1j=f?!KT`00xzTo*6G5&4jg*;4tju;^Kh8JhBE>-3N}#j4SW`5!IOSOow>I+M&)3 z!3j#SVFFSWx_omVA3=a&I=n63RT>*hF)c35;{EnY!YG>cwMa~UoM}Q{cvn7*8508o z2$X|Lm=4VtP2rKI*(c8FPfCniH<%*laTh#{ECCD#87wgrGW7Zis;blrmAVg#_K!<; z7i$KF_Fyj@U@7t=33z_@DStBeg~U`z1pjZ95=pk{sNK`G>4XBX?7s#tm^^4O$1n4Z z;K|)R<6>}r{LJE)`=%$;&f8iG3KjLZdp;3QQ)$`s+*%-DSKFvyXQzZFsDK0V1$~SC zfNMXvt7~)p0gsw>d~9s%0b{%g9^1nfqYXgN)(u_!HJ9|(B?hK(LO8giYdMopvR{Ay zDcxfIMANB4GT#k6Gpt)91^<;jF0KAm6bkq&@0TI(UmnNotTt+40iXm~ZjJHbSDXQ@ z3b=Gm>tMYqAmowj=TE3yl?|L>Dk=IFwS_0g3}-GTYw}+suwUHB|mM5XD%?P*@g4OlhlM+5Di%QFAnb#~SgR#Tc6`bSd>xzm( zFp0Eebak0NoCh|MFjvVgauyy8D7SjAe0Cc(l z8#4k;$SeD1a4ek*4G6>84vbC27i1xetsBuF>hybjbR&T_(o@k0t;RPDjgH>tJ<>Eu zBO$@x7F61i!uj(BQ)X0#hw+W8>#2hIDmO5y{xQdH11C=WtpMe^KjHZI6&Vn}XhZaz z9xn|C{~pHN5Ek!p4y4lpR0#g${>{nBm^2{c7=TA0i}dukW{Xh7X36d(RMLLE)$yRg z{^dE>7`tWA*f{GLCeV=u^s62oo;B__-)%^-Jtn94b6Nol!_{WjJ2Bt^Lj)Af*kaF@ zvnF?x=D29<-_-~~Da z>|7lWVXrQyKGOE*i@xOzSQ{9S(SGUh0RrKf`Cg!6h#Lmtg>4KBVkJ0g@>(P>Fn^r@ z6r9s%0I=HpbwsVh?198;y%l?!bvom30#X$DMPO9qWvWuI{EtJxDF(Q@0{kF+NfLnG z(Ce`W-tA_bYkTKlFzhmvaKAlA)El1wFL2rffa?`q9i-c``Udq9zy-v)Vu!*;(eLl% zJmk7NB_?EIuzO@~ps75vQ?duN%w)Ja+YbO!psf>6Pn(Z~GIJhXEh0Br8|k;8*65Xq ziw=>Uxt?LLxsIDneSPG}51^(Y%lD9v3SRdCiuQ-dVY31;&*4K9u_XPqfvF@92PfUi9Nvov=KtY z(W;J}%3q8Dj2if>0Y3xm$WNes=A+13738-Xl|ep^A7!vX2U4T&%fN11>6ApXHn@%Ts2-tY&xw@VFL~TlyXf+ z$DaBE33=f5mfCgTCW??tQAY=ckIyr|h;u53~Q!t`qUS(@)o zJCF8w@?V;Zb*oK|l=aMKDlwRd6f*dS+bD&er(-m@XI}hq2yU&k#3!=&LRK;H(T8zf zfV69`!?sN^<8PQYs;XB+T6N!1WkyF7_0$HDOP+&00GsjFi|>^;Fv05;zUiKhW0#xF z$Q@8O_NHX+my)W|Y)d}0_SEM4K*SGW*1*oZ_4)=4NWepP34SzXoQQLQfj|@<$L?H7 z!kW#mra2oe?oT@P2$24e-0nO5)*@$nfvD-6sv3)r$NxDP0 z=@#G`@V7(qhSSssDI;_K@%3i%BMwF|ahnU9(Y`s%#+&ie3Q6(-ZMY%LG8#UoXX9(u{U>WD+C4=`x=IKFA1jE32(Q zull8Bz}MKsLCKCu>ib9zey(~aaCUY!|6y|w1ZY|aI3SHs01Eq0InvA08%tb~jUf8L zesyw0Ug!fva`(30ojlnB5k^62Y<_%v#z*l5+}TM3*&+4cq#WZ8o@0C-xx6;}MktYe zMi+Ye7!nu%W4{9KC4L6T5q?Yh2i(^$jcYS0uN^R@?7>0m&$s ziF^qH#nMI-OIm6p14bM#z#~Y;>4Jk?4ww-2RJ?AqH+L+hi)~gLqXtwY+<9ztx+bhC zYJ^3D#CHI6zWvDpQ)6LcQ^Qq<$v&n1)63?2bUi7c`7I@F1GfR%SSl-~z`8ET1`Zw` zP_E$`hvFl?y1BtHLvaF(SRlQpj;>Qv$-m)b;rd+E+L~B=>mv5gQ{SBO>}G={a`$F*?0FThvC{R4jj0`H@V z+ddKy{EUpOvl`fJwqR$D-SB-EXcTAGN{j}uRzGV$CLk1M;_k>n#fvWy+P3%f#=&$| zWD-~I9T)-88lXn3g@xiy)$yN^<>w;){s5q6SSKv4AeIkBGpXwR{T~WZeKGC)gOM1laZN&L3!q>t~CU zVSXs>6?VK-?nR3>@USXP>eai&sg`RO_YqY7{Biy0#-!i*lbV)RJAoz&d*P?U(8k4LRdz56!W+=@R=7uK z&{O$2CB}Q)oyfYpRx0h%KxK{p;+W+o_-sx#iTo1Z{xOkZ0V#*q_FTtut~ib#Zd|*5 zst&RQFmpBmmNY(BaJzgauWI;O&<(ED{32sPhP^(pSI_{ym4`h}Z?ciK5Yx1nXP5vG zV@3e+wGp4aP#gF{ob?3oYxZdNg<~_y)O_!nR@@0eBej7?qgmdUO|jl9R(ck&>;mq4 z_W(}oH3L9QZOZU`u!7E zkB9Tk6v^Bvqy{bkY-J04;pV!&ea)`@f=Z~pXrpT_yYqc?qLWdgnW{qEFFWPdMy;@( zu&UKny8l>rSGqgFj}}q^iaO5ED2%kh778rtso@vYg}3Ed zEk>);tHqC$bW1M=bS@J)HjX`{*<_Q+j|pUrt2J5``z?fHkIs``^%@UGV;jJaxg5_8 zV_;x_I5`*Y4bm#rbPa{hH340HnjKI>>2o9>;ni%q5uczmG;4NT|4u1Qb{pxnIH&?| zFwcHVL>NFSJGODy%*}n$;bs<&YT#~-Mr)5DVP60`Zc}-^I*$f|7J_$-R03j|h}UiE{&d~g zdZk`<3DzB|lQk0EV6)ynZ&30PMh1zTS!3vMEUV%$k>Skj<^D7Y%I)~pg3$|WbFIKq zozb)aRI3xXClbkpM376Rp^m9mUJW>{R~xOQwnab_6I+_`{XX#SJab*N4x?yiK z52f%x9Al_ee$3gmbz^;fla{-y6ZH1b_5q6pB|~IE{)}{=`#arew=HV9+1VlNuyVHQ z!p9_!<9twU&;#Xfwa0EdK}3(C@fT6|c(bc(fv^SA1ac;jZF^rvqh-cO`!jr(j5~Re zpEH4=QT}~xJIBlYGT*nNA2AOkdA^8s!HMIbfyyyMO-3e5_^=d;M0HNda1^*=GO*Gm4qfiY@E;M3D1h6X` zd^dfD^KI7gA}rSjfylKIS13Ckn>Fs$8soM^G=A|9m$pmQBG=M#a`nRrG|TH5MA?$% zKU5j%=;qoE2-v9BqHD&}xztD2pO6nLlm}#zy}7irnEkx2!!T=aUC$QeJ+}v=((i4% z-lr%iD6LlJEVOX3C{2c&<3<6(95zEzmdh%QTm}^y9unn+KiXyXLfc&)X@@NU%${@i zr;UB8Q#(Z+4CgA6DPTBwi0WV+!TF?Na7E0k;o%Xi+vzl1>sVW%*U>uS3vszviD`{W z__^NQ@lZ1})f^cKWq~L3w_d!OQFnHl{VEa(PJ1m?YCOt9+u(n{URf|c8W@lFcwkXY zB*<4k+VTJm-Uw))^7)EYFHhwk($ozu<3ErQ5E6rMp%-7>Z(!;XJW407767`UTd?-~6G(l3+?-I;@=4D@Fa67DXTi-3weTWM_S&VisV zGzt^PH(zg!0`*Z!Mq?qYH`!L96*KF9VkA!%0bLgW6UtD5v&n?f9G+|2s`mMTIBG1VR*-Ny|jFOic-N zyU(Z&(~8I3O&rT(&^(In_oG%&EE z0%|Itv7|DUM)smfEid@q+DhpKhz$7(x}*^Bj85xdbtnhFne_qk*fb! zcUZ5tj{hE!&|3E>moAUY*Ghnfx0>4OQSL;zlTnaOdC2pKB0$=vSmqPfi<&?hCI8Y6 z%&?RR6lEYv`)3aiHkwRjQbjnoA3hxndjP^$LjAN=}5HW`*N7cb1Iw#!PT{ac# z?as2fs!0s$$<#!Q+&FJG>#f7TqbRO`)hXH0)&$@+KuTi*8>IXaL&Rhs5WYNh*Uhxb z6S{}R(j(DsAoM0_HCkDiiiug@m!~aMc%lv0>b5m1BMjsB^ohA4Z$NCc0fXq}m4*`& zdxgoNYKA06+@N7H6j& zS*?R{sI2CK72puY|JYnrP8nfDh)65fYtqUxpAe!T;v*k0MGN^3qwTx{x58q}7@ zrzDR=IRZMnFn*;|omwiSL4RoYasY?vZ%J@%mZcLQSDmvi+GetO{=%J zT4y)R4l(@}Hb?x6MiD;y8wFY-ImBj#Hdn>h%v4({2{xL_UHs_ZSk-^B3_28l#Uj@J zW+fdQbAt?XlP3`bO=;bf1GM_psC2G!k$_;RSUTT8D#+tCy=}b|JJeX(L=YPVFxRcB z^d4D?lZZQAN-6q!L{dI>8nm~U5bj9}i3JIGWg9E9b64F>*nOmI!QNDyaZWAwZP%^HVG8IQ=V>S z%U*%6!ROUi)VgNNXR8(j@QbakeqH3+iS}7yVqyMJT&-X0BazDSje&y~^qbKXC2+Jx zKaKXy4wYQsR>3^ovR$$r-VKTy8R2BqBM~NAZdhU4TY_eV(A}Na*o$qvHa3=RGnSrh zM-!ERGgf*0QIiW8Ly{6`sUc0w{(^tZrXjz$$b#WVbi=r$x*VapH?FE-qTfpDC(R86~iMB!tLnA%AlzpD{eS+B+-@qZA1{<&c_aBSJ`g=ytR00N?wbGtIN`WN$|-x)#u&dCS3-W_2wNn0)6xuwwQhF zy2_*On?H&{iGrG)Vg+FKaIe{(5MK`k+if4N&$|%W9tQvZ?=8hpZ9#%*ZDIY8ZiBpb zrA`BmFWY`Ghh0`XUu?WhcH8T1K-c7YsZ*vo0jpRG4YDb=u#(l;v8RX^Z=>ebd#5WM z+T}b{U4kV_Xb|0Sb)#iAO*Wf2=^x5D{1oFI6|#AZf$Q%LPLb(|8$x49;8Uflw5|J& zbG2|B6)N{Zmu*5)Tbhw-=H%zwL81#1B>Q zwGrw`hcCS^GBQ$~BmSZF`q5po6Vou8Lmh~XdreE#!ovIbzJ@n$+J*KZdLQ>-^!b8A z0qVcchFb^qWh;b_AC^QDT^39PawJjpxNy*rE6SIT8gh?qF^II(B&-UvpEjC$~IO4GkFV7pp~YAyeT#8j57|I2Iyt&qqh&sPiOo8LIn32EP~t z=CXd(_>yChZ?L#jV?0oZsazQ8CzKd!H-d(D*~q;Cxr~O4^jU2svmB(_5o8VjtcXM< zksMK9?4Trp9i599XdlYjn+ny3`1*{WmS)tHD}{qX8@Z|~d9XPYbCSk~x?H{S;a0cB zOVcTtO33{w1WrZjpY-EqVDtrRme-KUBo@YGPjK+bW#)EJX_8*s`H^EH>)FW3uQjSC z>;~XrLo}=+aBws$b(Gq5;;J@P+;}|0S@vG^P<28HTPEO!8_Zk@` zO#fgI9@k0#GrJzaNjHfZ=?%yyi`_DLK0F#ng5J?2lWrxLVpQ-TO-E9{oCzc|ghoSj z@KeVEaLE}#?)YRK5j#q}dvw^Yc^i;JZ?>tkV@9#wPNZZ*n$ zDg2(^h~IJL@$YQQR)DI4-h#JNqC5P$Kzwxs9}-w>WCQLCVc41d?Ox8LS*y_vGbMGW zhP2x)>GL+|Y##xgO0EkZ+nw|koynXD?No?tYpvX!9a5Kj5fY1MnWuGd+Jc17Lq*j~ z_T^=?_jNmjRIB0_hx6ubRcGz+w+*GFN!>Qr<;-%q6E1_CZeEF;9}A@x4VIE+zl#|> zvUp7c;Ly7*4oTsf`URc0mmOK5+L+ZOf8nV>SLqxIXuSt_-H7a z3wgYIPt*T~AmMWvJMQl5~@& zbqt}<1~A;E-?-0y-@*NT&F}O#=LsHWrQ07mBHY4|sfdNxfWRP1RG34bj+q{7vC(=} za<1S(bqke6;VmE>n_(%rLK{?XRlF}aq#700;pu|>H?KY@NV1p!gjzK^D4(7mm}{k0 zuA{PIVNwYmL;^MX! zYK&=DeYgDXok!J}RQb!a8VDE)L)ZeKkj&m&*v-ndV@Q5cB4MhA(;Ga{P#@#G|8D=d zb(r%31*x|BQjyQ@D%!h-vCl={Jtyd|64#i|3iSvB+@8k4`r0AfTi{6`e9)?-r%+>; z=8bGyw(I5yOmYn;$ErrPZ}nMQ{iMUS!>I@u8W}`v-gWj~b?0zXO^YL4?Kmd7~`u$cGAl2i?u(K1MhG3HN2JxS}zat8I5N~ zocasg8DI2tvL~LRB zK!2~{Q$lZ+s5@vhzoPI2ygJrTwfj)*z`Fl8Q+c=Ani*bX0aax{q06I?`lJFY440Zm zHr*eV(BFjS7HI1`yfeV*vc|310U4pqWvg~Y13Kl0H}HB};qW(ucuAc$9(YoKR>>=8 z;X3HmgriHKZgsNoXDUrKIy2n>q_tYWk%oM`e}I9sSM_5MF@^z3ztc-XM#jx8wIL>^ zDUH2QR+HOjrx}avz`p>C8mU^l(kl@HbM0`kQdiyZQzC|$Qi1aMoW-mYu$9p^wz>Hy z{c8>RjSTmVfXDNn z{K#porCrv{y{Q?S0<0co)hA-U<}ZQ&W*uL1i(wikNXQ>}Ja zKOeVh4)XQ@68>Q8!(a0KI04x+n1!Oy_qQHsKKJXuOl}`hRflEh!^zBq2Lo_>ODUq? z46DB0C3XNqsg=HVFZvPOZ_FcQ zB0aneRJ#_!tdx;Rr@eYbsW>l?SswT7K_efCc|pvu^VT=lH!4`D5=kzPQzF`3J^@)5 z>ZOV85+?qxO0IxI=aWY5;bl7m)}Ab z_&R@%rz|_2XP54vR#<1 z2+@M;K+g{(Yju}fcG|oyan8l~wmh&8<(J!HnsSfDb{aD}{^7JyL1G9~qj#Im>va>m z(u;f_FEBit4_3377nK!b!|h)s$vyO|KGBB;WcucL^ZJeC-hJL0Y-p~p{@UD2&1~#5 zITMo3b>lQ3leG`FZCk)LbYE%pU41J@KMC-9)W<%^^?72nflBi6IUw~bdu1*PywW)+ z6$MS+^mZDx@K<;?T_DnfhVA>jln%pcrZ8dA%5l~3zOTT?sguH}~g-}*uHzhStx>%`52le@xlm-NgVo;9G?c#^T=ftX$q3-;0!BgV*Z`d2`QCdJNO87^O8?x@ ztX5&7q~GdP!eOy8$7%bu-XD4sXQ{syrCPV%F1I`p=+7E{sFopqR4Y-|6m9^*vX!YI zq)6YcD9;KIF=FMBpHX_7qLFNHt53s#ScB0UUG7Jps}SRrR8&L1qvo@}3@AUlA`y~(w0!tAZwUnN9=Plc8J?_EoKT)T2)Ii_JYh*_ zb=h>t`$-Hoc3S0iH5JR-5}?-j>?+E!g}d#K(^ zpv5}=e0kOc`$&3#Yo6(GcT{jeG=gfV0%5PNg3OHO*DBKY+~|4uiICT+*?J@19MC*j zjBeQ3*_b-TJhf|0!Z>UZ$iq~x>sHAhgq zbC+sdKM)I=RP1VDZ-tNB>cC~J=X#+=;Cu5mKCEXkpd zrL%x(8cr8`jm<#!ijby^V7<0fv*O$C8mNp;G6Q7XRGhWD-&Fia8oBO8Az|xxIa?{Q z-)4GzK2c5fIEt6|HY;7o>QwrCg;2vaYXey1;Kyub*77@ifNe;6N5CI5)uvo%g|E$G z+j$M=aK1kj(9;R~_onlTzf_66t7+rd4F1Du6R>F@J1y)_89C|AzLD>kTqDS}br>6s zfZVX^UQm7^iF2EGJ}gavY`WVcqBQ7ZI?? z{Vukz>1@Jxq|?PJjZL5RhsFB@389*@GDJZ&EbAjR5|c^i6-Xd=7w4N z+nyhh0&3{=_Bh$kpN{z^xAX{PY%|d6b@>Po6KRA@6;7Mur$9SIhVeANWX{`3i2l@Z z@9=o2g?OK-J>`x?LD<$L0@JylKM@hUZum1En$n%CZtGPVgZWnl(6)BkkzSdN_h9>a zgZ7c|c_MggT~7L(BiG&e)*>Dr9f>aUVpR2gtpNfm!~A(7W0peDpPU?nY|u4{hLmFU zeKGXIt-KdV=3@v;GQvGNsV0}t0A766wK*vn+8>&p)Kq4nHlAxQ2&k6;Pn|V-$9&QU z_P0w?(s3lEeQM)BB;>9X-TYilQfYlg{zeh;!gx>*tsNs>#0dL5156`hO5t*fv3r?W zSpWrvxhYG)V<_mN()q^0!4xc5fVW?pxZW1R|JGU4MB=+>zs){qJC@Yot3n(PP9=OF z<%oe6X>vVU9MIu)fo~!yN4;=tap-JbvppSn^*S>=lUUfF?%Wd_zHrmmfNmo$)%-i*X6tMGB>HGs0sE&eTE94~ri9Ht)bw_; zeni$Km(DjG2Sgap5$J`oRM;&Ik9?ivI3m0#vsjBldzo)K9|2a z%~zRxt_TLnF{L?<&XXGgoL-N1+HEcs4d&BpGc#;3@tUp^2ECGvHtR+}joz?7nt~Jw z`5iD&Ro+FGVCFH@;eN_!0>8oYLv6~#I4uPLS<}_mO8Z#7!rZWaFH1FfoK}wrvQir4 zrv8c~6Lg}k)vc0&l1mHL+NS$eN*%$vWbowta%xJwK|0i1__JNLtAJp z3@6t~W$IRdQMdMbm%3Yv-(X8PNW{b>pK&Dl?D+-QGffvvINp5u@%mspU|mwNa@!S`8wLDvsNF5qR{ zX!SKw9o7=uQg`T7sC0#k%wyoWTwAbE0#x9&&SerwjI^>&qiXgN(ghmnTvls2b?J48 z1rVB0jeJh0`NyRxp9+pW2{v;Bu;R+pD@&nRuw#lkUa}Uj8DIV1UR3w7CgC~{iawPdHuoC)L!YAmIN$hR*;9|q+a8YytG zm?k)%C4fWo!@PTsR*r#$#8W9W5GVR2E0sjRb7if?5!)d^f>6w0BS2>#h8tNZm)-A2 zV&VR1G9t??DI9C5ka1j>_etYD)?HNXg#`T> z+7Xpla7+-qOUm&*(Je6rxZ`TZGX=CS_}EUS>r$}#A0I#TB4(fl-hBSCv@{}-l)#2T zO8V|ioHqFev@WmwtfgLo@S zOV=*UCzbm`0fs7{{`j%E(4W+z{t}p*D9ly``Km}IzAbjX&wszjwqC5OT;03}Yrm`? zY%WiqNHVd}&D4^t)dXW7Yxnk>CO1<||0e9GLl4221A_}1+F=BeZ*Al(2K%2(FgTyJyD65{xwh72%&*BHB#<3tDSZM=Eb zUS8G|%8(s@P=om3TKWFt*~#?X^=M7=Txcz&riRJtFgnv^|5(-HjOcrNdA2t=D2jwb z`TdK159&Z2q@~y8`|VND%-1&OBMR4fz(ts70&BNx0P)wre`kNkZwt0xbu42_4`^`A zfU9YiJYYV&Q`$?=`#G^v49@(;;s}4nfk!G%LN2l@zfE=yipMiI-J}yS$4CFiaOa{ zLIz3rz4e8J_BFXj93(rD4XaU=*V8A^YM-q%d?wB6(KA#Sm@D~~-)*wlVd+|1cXkk! z4s~3PmW;JGI5`%Cx9o9ueC!$*x9=2d4^a#MX@ub000kw5^>btzr_+#uHv({x+NhSP zOnde;DiD$*X;$Hq1+^#H6aRd7Y*Fb2@d#o3 zX4qcNM~XMt*Eurz9#c)x4eI_Vkqp;u_=bnc*0VD725bd1&dHW=`mAw#n^&*Ya=tQs z293?k&Vc67c#Qrct*ggFdc zEUlgzPH=7@PH=7L9^To9QzH>y;FA$5j%FE*bK7bnm#1WSKU{3ia+K3w)Z`)W>6#F0 z`hs`U0D=$Z(3h(&&%??If(e9Pi)y>NrsY59#CDtH_cVtwvh7q#DK&8rC^_36!h*Y$ zAAWTW%vF@xA|7&XelGg_J3r4LzFH1}*)LUK^hGxE8SMRHie6xQFtWDP2Ek>t#q<7@ zeAW5;)NWxHJ@*P_f^skf>ceFbt0Y$R^Bv((_-NaysBRp)rGKQ&=2!N38N>n+dy1y+ z27n7OgfHvBwzclBzd@hn33wNWNhCtE!(`E7LZ_AkQ8HZdBr=?L_;+n%s?sM4Fln7W z%~hx?Adxr9gHG1Up4K}Hob&ZfB9;FNSs|>?9_K>$f%OSs&GnBER(>qo7e^dEZ8iP(H!0Prlz#QoX7Y9c# z(UzibBmkcG+w#c}HSM8Z96CVYs?#zy6OXf}c<@g`Wh!&-uk$PCd5B|NtTA)9$qPnp zn2aTU`#3x4BQrVlk<*a5#Wna1{?k?)@)t<8+l^+E6<%OmuNE=F&xZOK0JgzdgvK2T0n-yrqk zKakA)!BJ#&yIh4Dvih)d4Uz6QT|Nf#)~SiFlMa*J6{MRfRl9F-4rLN|q@@q(`xV2^ z{C#u78?=8*|5oW9f#b03@K@Nq(O_GY`VK-Iu$CBS^17(hBG#m7pmGOt*(?>CFzo<* z%@c;>+KEiQ<(j-d1$V!l+6C-#=8KiS!5`CRd;P{Gr{Iqtf%#?jRDA96-9aY28%d4+ z!^}_7x`XjwBR?d5FZ<_1H=2{PW>ErrdT&s*z{Dla6gC3)Q)|=neGSm}F@E@1!A-?2 zt`{ck>q{u;l?sAyhw*)V#7s&XY{e(Su=4hJXau&IG}9NX6F=rdvoq;_Hf?YBqZici zQnc{5%Ko1h0OHW|{v7*JeyvtB2hTu^;$xURg!A4oIk(LzH}TNaP{C%W^&9+$`XFRn zt=U2ixyHY-v?YkL2!6jF1vQUjNalH=A2rKPGdvesoij}H3r0@IHOv)sBUCB->~f3yEH+ zH7&p2UMy3WMF-Ys;?|p8)>~apC@u+AJKIehwqIe1y>3TepM-BX_}%{I0F{xP%x2UH zS2;i$Y_xnJ0o3cfXUZ?Beds(!h~+vZwYr@S10GH%h0nNDDH4leHG@$EBg#MFqfGd8 zHi<$fWIj-@`Uk+D&6Uim)fmCjw=$|xX(atnJsaAlTp4XaJC`*a8fgb;r{hVf`=F=O zDrW!;Yek;DGTl&6%%o90wX@okB0)z-H`Vz|P)z0-5Sp;qb!$W=%9Q&4M9(xSkZQMD zrR}&YJwhG=*VuA$zj!9k1etjy4#p6cb<`U#e)4z4 z(mciU%N-lz1Kexc73e3NcbW81?&XvI`T3H`ovmuLt&L22wc?&wvWyNeb~%6F|4Lra z|08f~6F?98WwyDT@b7qUbwpclh$fFKZWOFGZ*n zbL0&9T25-q8`JCVLc*51Edm;R28U!nY^SmC?)l?`?!1(oQR^i=*X?JIDM3i!n zg570JgOQMc=95M@7oyHo#T7ZNQ^=SDNJJVw!K6d{q#w%T4KRwc+q73`0bCD)*nm6i z0Y7d95UqfRQ%VF%weYDaz~|n>hln)}qNNIdY-C6(TY6iASF8AeZLtlZVsrt~K*wf2 zPsnL?IY2v+mggq6BYE_2)+1)UzA_KRG{z*fBXAPp4hB{~L|RGxIfr+d{oc2j`4HX8Gv`7fXAH zH*}^_g}y>HyVDzx$t)Y4M>$&(3FoSc-Xc&A$I@tp)jp3#yGuamzR6w?EE@x^K zXb>dAK4-@qn(9i`v6vh93l`%m4Yf0q`pt@J#Srfh?q6dso{(`(IsAek>@u7mqE)NZ zbVs1udjfyR;|b{{BVZAglO0ZEH;KU~z|<=>%3%Mh&}dQacKBP3-e@u{dS<3m*`JIt z)9*uZpJK=ENAr%1F!-xyCD#h05vsZ?(?uI68=zsyNQ)2mj)YO$_an3$OJXbgNg}C5 z2S=r^Y^?KH562haEb@K@5$m?OB=M!VhS(cQ^tAO7Jc3lGSA08O?(3dz4y4c_b@B{$ zfBsqZi;t!bdx4zRn5g#4gMmmzTJ zpKb1M_fV*JiHPwzGYohwKuE?&YzBPV($aJ2uW%Yq z0^RT5DKR%BBZb_O-{Yga`syvGzT193&?2pGd3U8}GX`Lpt8egvZ~P3PDWmwj{pjP%Bl~}yFm(yyAF81oYZT6Pk0EuxtHdoC0?$7u<)P>e$F3t0u|&!0y5 zuZaY$n$Ol6WWxuRrt@GPr8Rh+gYi0=tj{x+fl(klpUZ2r-?Bfnba)?fOej`PoAWHL z%(p5Zftwq~3UOYxr?iuLi*EyD{;GJ?1=72N%C&`)spK@M5NvXA(9aJ|X~6y67oeKK zkM?(YiBeh`-Wo9KEYyfeM#R`weZ&$bLzJNEWm3=}KLN2GG^a0rgV+HySZxEpt|d5x zyQxWV0XAFkp~Xnzuo_K%WH;fip>K8NnBiJ;jYpYUr53eacx@w)!x)sG^BRROpe1ce z=c|~hL>=(P<~cz$ARE8fySc~BjyclQZunTPQd^7jACL3@E{L6e3fHR^I0qE zpT&4V)P~As?NjWRNt)RJ?Mrf4CG-x0yX;t1k)}I4Jh3<>DA6s?GkDaBY$BH^w3>dH za{QQ&Rqo#q4?e}jl8c`M_LeGR5%`f$kvBwAxt3xyo^q7?D1#`XINmdd6YhL+H&>^?dn4y)=$oWXJ(L7P_9Q&Zg*pwl1nr|Ndy^j?I1-DukQpI0`V z>T=C5n;h!0 zDAD`m;%hIs`X)w=`ggcQu(;NbFQw(rUHF%TZT5%3sFs4jcbcbs2jSgu_Pzcq2j9{k zO2I}=N3+lb?2j>{q-4VFOk|D#7C`3Id@d)~`FL)6p<**fqoKLES(0o;VH*(w67-~T zSKSTifuL%^h*XBG#@Lz+YV*nnvkfs$!BdR4v)kra&d%G?K)?Ak9ckt?AeCr9x|gRZvd`qB|(c&l!D`dK<@&R`io%bf|4# zy5D?!Aeo=gDFsBTJRz56m7W0XF@&i`(94~tto;Tu&Zlc?c|k9_2rd$o_-cq+T;@WC zBB-e^6c`x;ek7s>p*-+TzjYv1Vo4EIzfJ?JpComE9=1+ke_Y6jnW6eqW*c2H0RvmF z*x!(T;)5`1&)Gt8`v1q&TZY9IY+JjHyK4w8!9BP`a0u@1?!n#N-QC?G!QBZ24esvl z-^xB`pL>7ur|D;PRjpZbj`0r4F8fRbm-AJ3YL_550)DS=*jmqFG&t1yp)mgS1^DP5 zGhI47{#Hq}KCv*tOG163aiajMN6XXo?^o)0(2sri4aO}JfP9~-2Irm!tA8dZpQ85*Cg{@xpwO})z(Udf)zSfj zHKtZqqw_0l8RD32+m;$PNE{MX>XmlgzgnxcJPht;&$|d!%Fj2CS8O+9Q^9};1GrW& ze1|6sH>w$dkASus;Q8i*bZuJIVZ|Vsjynk$*|n^1_Qy01*E=(JTkO$1>yv~I*Yb@z z(AzK1QN_f*t2|@RU7lw5#Pijf$(@EEHn?9xU$Ga`A7mw?(}P-|XkAh^ipfjO zFRo+qvQWF`i-8Lt|0x^Yg`2m0(sE`T3=^{9y9Q$dySo6VtNJ+Je5FPA*;@C;-&Pwd z4cCi^J`@wjyT8pTPK)BsBlsK?U!+V&3@*C7;o}Wua)LiB^wRAT)%ct zZ`?GlQ7hIdK7UZMACOSpmoTh58f-{DdI8teh z?EKE+bZu|s@#>pvN741huns0Zb=Bc5VA0Jlrx*LsKfMdV*%y0obR+rD5p~rS#jiW$ zr3-t>^P5P6{kP+ru=U0~@2_kn{k;Hbt>{a|{Z!ZKKJaUL(C-ICxL<>m*m#(hl(t!Q zBu*hK!MBmv=(vXd@BZ6s7x;fPwzwBBv~lRon!}D=*mfGcnNL}*6x!2Gb|1H6!6q5X z6S}~NUkTNSL2$?>J<#FIb?6{e3v2wE{=Shf2fmW%y$MoYgsOTq6eu8Cq6J<-#>Fcc z8kEwt?`q&E`hO_m+KwaeHwX5?Q*;hR9Pnh*NF`9QXnzN4Yw&$Ks9v#v*8^q!MDcKF zYNGP-G52=MaMkZ6``5jCaRgS8@ksLN#Yfq(Nlebp?$$Ha zI^)TAPPhmxRmH0Qpl48=&b(ls489JHHX-htIH&1?mdeMX8*K0oXOQ03Hr9z z>UmUbEGbKng&*z@jvPhhAqFZsJc!I>d%oekq?Do8fV+NbGsmOa&p_qv-m3$eujOV?&0!jxBUHj zx={(uoWuqM%drg0v-Nabj8I1YU}QYQt#Sm7sVhWL@h|R_>6vZiS0l;PWKarDUbo29 z4lImvo}Y?!ld_qFu{=|C*$&-55#?^{7e98dX(-6cmjwymGn>&J#LCsQ8@3yMDAy>? zYqnav^!4{j_z8zc0i4+Ris~Rcw}~~p-icjU#2i@O8+dCY$Df0XaIM!S5Of^fJqr}2 zEA_Ol)#7iCs;$CdlYI6f-4`=?S)c2pyBP;B`U^AC zb8G>dK>QX3^^u>jtPa-p1s>-GUw-9$g&Ly+EbJjF z9#1u9;`Q3CyF2>x@EPvs^tED>hVe1x++hQH=<=R_cE=2YJMM)47$5evhEt%m z(0|u;RVgb4qmtd=YYg|SMc=uZE8`muGjS4w&Nq$GCH&x$Lt5%vW%;}fF!ohG+pNLJ zH%{!t;a-+$$K{WxWd$Q_#_c`7qQa>k`t$z$rMR4bg@%r*LT$CrUB7>MJq58CxoOu^ zA&)%$I{6&jXF!vKFk)0iPA{?tr6d@8zD6{Y`wX9m1+%R=F7D|0O18C-Xx4Z>Xd)yq z0!Q;rFvKcIInS7@?qs3wt!lu=*LM$J-+P!QD!G*tm%d9bBG8A@Zm1W3?GYc#^y=y- z-^dcdQE!2wd_vL7tYo<)yc&QA6h0f{0G#ix>FE@;Frfl(4oEv7%(iBFB4rBnT6CbPoeV41d(#LFn4s~LaI}Cu(*XpKpc~) zHJn|jWjB6QJF%UtQH|}NcH5fStv6!Ni&P60v!rCiTfvFjYJ{f2uDCOd`^*%U%tyf| zlo9UY{O#-rRfO&fc%>)*J?(gdQ2m3taigkRpS~jaZ`?i>9ot*i(@Szg1zOjOIjt&P zV}prEwPa!m__&+?mcqwoAkj(Iu5|$0_@@kcOodtI{kU$Hvo+V`2T=-@q#sEJJx*7A z$V(#bqC)$+&%%=Xr&|Q1uSlDxT`*bmO#TkBo~0T}=(FXlf@M?#$U)ErO)OJKz%&*R zOjseu>7%l=d#|vobnaNS|ZhwyUtp>_&|9 z>`ceDJ1sabsX&(mUDNw3j9J*-J4*=n85}&R8(IlnigFC|fY)yc%g^zG+g*w3C`O4$ zj-kOL0le=MEJHqejZw6N@`~336QL0ICay)!?f3eWqa%wJr(Gk|zPkZ)wk&w;n$EJrb!QrDciveu>L#bm z#S~ErMb0MtlqE%LjT1t@ALbb1Fo=b>^H%J;e~Jk%UVc^?b5^Km*2MzbNK~P$U<`4M z$6=er7(hx{8rB}){%47!3MvRirBa0!kB6mFw=)D0YFE$sWW72JD&i##!3@@Dm(MZj z_v_2Ag*T0<#qGr|%pSQ={3)Ju9>z2zb1z>#$?IQEFa~K zJHI_%EWhnyNKX-QM1>Eo&W_W=2|S4If?40nss)#s*ewOW zA|LLh4uktpqtjjD0S_7`6OTRggwf+Qa_d0*GTH_=FCzz$)lGrGaYqCwpDi)I$h@-t z4igsoPDqX%)cm}E-wdKOf?VC6FW$t=&kRB-h|5Fte%!kFX8gNFr^Dv^D&02J{uC?0 z&F62hL6ZquVQMkF%#P<&uwuHOfbvzCWc1^2gL`9An2+6^(iVedl)k>ma$sldPt<}T zM8rBYGBNnCg+&VFQ5##!J%#xAm{oDc@L@uY5sJ`OpL?JYmUEzD=TG1+M(v~ z_0eC2RBJSfeVtTZNhVEBG1d9$@~5laaj)SX*%@nulKl3w5wSs){4XVa#AOn>Bq2t1I<)+`LEN>W|5TSObaxj_=N_`D(5mZJG9;{@E3fV=@SLF9R&)0bjY={VBUf_U??*H}~2>zAwJzW?hF)Sx{H9VXVG0?H&)lzaVvSdgNkM4Y$8! zvg{Fn9VS<*($r^+mG9Dm-O{Smkmn&N;R()aY}IVI>wh$z2RK)%O)X?eG=3C%B1M*? z8amzUG``_n{7rhKabc|O;a^R%G=Y%T${kW*uW{Zh&`kQcymPO_#Mbx56J4(IUOfBo zru~ckWvz|{EU1dVj%LfhWkZ7&crt15X{)?oVp8DWyvGlEXkWG}Y((f@1Q8;%{ zhXU$E@STE5>MKdr36NMrsX+v=0ZQF%R$3-QVsT02C(;7~F0Y1(PVjoD2BSdR%I5@+ z_rw&x?N)xuvgy}d_wUIq(Iy9EtKeQvxP31srwxT=iIfC9%zy)ro`Oqb^c|G~NX?P) ztyOKVs8+8RX89r>n&Lug5Y*gJ*hm5*K~rD z;s}FO;t&zZijfe}SoRz#FXNS<$JhZu;N=Y-dey3;~G%K^I9JF%S2~R3lraB}7_Brec zJ*o_c>lHV(2cjiL7aoakdDLH85eLKhTDh2K*1a#p8?FmSu4|OqtO4;lX(FfFrC-F~ z-jT3jND4paZl{BqwJv9+I|}nE>X!^*(>ukZl?e1Xge>ty2RSL-?X3-aU&g|G5q z<3aL2uBvzy+;Y@K(w=~;fRX3JDOz}ll8oMd>rOQ2b&wK&m&m-gIMBHVZXPG40i3qZ z)BRzf|NrOXaw7ld<4PNUG?&Zfmi&{1iq>~O zFbImnpu$$D-z#(Qt#9S7RU+B;nRt5h;8Lj#14^G-__@}&2ZL71Gasr z(~aPmJ{xRP489L1q110sl>FW3#G>ES%eVH^=}xrT8-rZRL2#|odXuR9^vM`Y1fp8= zTi$uF2BH=304xIbM5@VGzO$C#kl=Cj?}w18B2{O8+*J?im{*3cTN@vfmJ8sQa&amw z)E3=gICT=j%Al~f>&WS9wF`a^XcFezo8j2^)XtZ6Pts;VTRzWQWh#U_`jPHWyl!EA z%=+emy~hAY*5&;4lm9s|3La%aUaH#2>vGH`M$co?0k)M1+!ud>9_b}y!LY8p?7={P zl~01fEDb;;5ZD~j$)d*161L0hp@Yg{ahPgu>$9f5Uo2b_NW8*9xws65BwP73#%!P+B$7|J zEmp*^+$m*qs>0xjjMSYy)d85m*$$M;6%F+;Ib9X(B`ZhOqk7NL#YlX= zBHdCZz2*S?BEeFt93j?q{qw^Kfc_8K3oL4!-zXP`Tk>#-IUy9Wb|Kzx`eoWq{4tewqX#&%o8hvQ$3(n zt35J`Dtb(*7Q=Hb zx(bH9OV;Ei6$z(W%(yOk8R8@Uzghq*9ZB#H^Ai&*U3%q+KD&jSRFV@%)f%Me>asR( zy65xueauw=1g(+L+P;xniviIiYSnN-x%P^>=KTl{O}k&W5%@N6y75U7XhAT?+IslSxpX-}!h%{W zEbI#aawrc{QP>-#{T1}lU^1R$7N3?@wjqMD+N|XoJRUcq+ilCIg87}>O;8`jiY@lc$Sd#k_?MF_J!ABs#sb191(6GnD@ZGF+z3GU(cMIr}UMz_;ZwEhvW0wr#LbAw-p z;>7|C1=QqFP?7ee>zQjju9{B~Sk6SFi^?d_`YfUBHY?#Bf-1i!m8FB!J?O^FzAJ(1 z3l^+aRH;S^ixCYpU<5I~G&v5!Q=}`7rb4HQUYXbd0fj1r6iI}b;(cauDC_VGSj3SJ z!SeJQPGoy%g-mWFDh7=17qNh6S?J94vWBwbm(5otqDEO<@X4P}B`aSOb&G`<;g zO@_b0IpINJg1w@O&sC@>gB#NgHn3QUhc(n$1c=OfLIO>n^XB;1opFi`NHYK&F&8$oGe9%B{-Tj|C+t(eg zgTZfu*)*OQ_HqC`d_HqPM3|>;!jK-46Z{es>(~1l8tg(ryI3I#Nu8hKLcywbN0nf= zt1jV}+gwdx>*`4K_pJlG5*H6pkP0-dEW2attPjJw?tIUwK|o-zIpT76+189vfkSB+ z+X72TeEA&!A*E$*Z?WRUue5%)bevB*mS+M z8PuN)yM=^^yYTWbu<>YmkRi}9$Dx8zpga_n7_qQEl&&u(wZMP+Df?! ze1GMQzWkiChc2hUt&w919KQ3Q-nQ{ zLLwH0ISA8vDDX&zd*c3nTOr%Ne&+j5n>{|GgqGIg?R{(v%gN1K-0M2`&{BAQxd+#T zV6W-4g1M-SdTXEcs1T=J!dG#CVZNh+!nGqY*}jaI02G%6s=45tKcY4v1oP`Dh4A<) zC+HRo%>UXekBJHTp3SLPZ(YfF@Mpods86gdRMgqth4>-VWhc|#9! zd0ZD7SQ;S@8!y&XIMv@mkm!55n*hvnVzmv(Pv;YO8bg@ovF-;P!x8enVBG&f-9)9>VPzpC*oQB*>U!yQbwG$lR0JRp77 zUQqU>0stZCB^!78{NGt$j(!RHP!iqM`45HwK>~CENr=M>H(0K$mp7j3K^x3?#mhN8 zBz@MQZbrE2tCDc{eD|Mk=11vY`VV~|hZXPY|Bp761F5SHP67Rz{;9QkGru;dWAT5; z1^@Zr@wlEyaGwMWJr^>cMXYxx?_b+y0zr0pg&glK@GXp5Ikgo6YKg_Qv|N<`mPu_ zRdBApy8~8#w+%nJA<JfznxrWk@@S^<-%UhIwq`9;j zM?1-9*TpuebBfMkwY8suj;}3Zj;>Nt4Qb|7yrRO#3`SfywNu)}J@{FSs5!F+>8_RiS1yd^QW$HK1b+-Q! zE`Zm#DETIT5waJj^e>c40aQ=qk6!4$;hZ#Wah^xg={;RKcaV1k0-u*U@jg2G7iuv! z^WVf*KK-lUo8mJ)6|h?Hh$Qosi>O9$0!mTvF}5J+6j5A21uqXyRlXnohS&BB))k?oC}{$5C=DZ?mx2>an6Lq|p=QL4=SI3v zOflxx4}-756si&2K+j93zWz65cd5X6VTSqBHC9A|hNSJF2Li8u1%YF^)o1V2RK5Jpv&h(bImChX6fG zs;kxL{jxp#+lrBhu-GqsktjM?Kq?b+2IWF%&at)ZY7}r4a?-wWhBQ<$uu{hq9e+SP zzP(8_rUsvrp9C(Y6UYUOe{~8_isjTJnO6H|`#If0vkrRrQVR@#B#j0VkRac==YltrtgX>Y8zcId+^#9a$RII*xu#z@YsPg9Y@eTow zZ@(X@=Kb*9o#k(9WNUIIy7Jx~j_*yYC}t*L2XTk2u+;=uW6tzg3YlMRt1MdqNlLt0 z9sp_tkEEi>Y_)F5^AprTp!5NxUIVNsmjH>i7Vzv*9VRZU=~D`DaV*Cuke)QIGv#nILA)Ww055&d3f}0#%w04`;|08qFB3{**-T!%TDQ zW18Z-?Zj^+kEa%+vRN*TWVD*+JA+oQc@GTyors`drN+N!^Q^>^i6cpg*T5_>uQT$0 zOssoeh^sbxu&uP3#ezJ5(hX`B)P0I^NJ3qa?#g zY;}>Qrdg#*UPvV%o&spi@Z@<-9?w@?BGmHxLdf(pUR2aI45_y%;FouUQuzTeUUJ3H z*Y1zoQap~Pg3A#RN+}z#W4toQtNF?l4{8-pQi{E#>i1`>m*r_+1`zTa#X1EI6d5DD zj1Z9&ky44wjMHTelNx*q*fw=haMhJ=&*jasS*{dUo^G&`{nkzC$F+jO!a;TGSJgw7 zt)5bStfo?`#i&egVHN%LWazuk5r4XT0-;+R`k|>Qss;fK(k;(D;o!mHh8j8jydvW> z=X>M%YCMa4yCMaaPaseCcNv|xX!y3dz_#oh+x}3bMNgSPwo?6;3uD_aXpK-jii0BcMg-{4u^j%4B!-mq4NJ{zb&JJh16G!FI-ZW?))LSX+Ioe z!|rnGruEY;Tr@eh;pg44#&*d!ED~;q>mYbYu#Swc7N#!`XZ5b@=`>b6AS7C*lwLqA zT~0ioTktL=Kz<|Z-LYwt7Q*7`Ok_yGnnhm&`HGcBM5 zrE^ACk@=`Ydk$N z%9Do?oODIB$DLS#hPF0#Y!wE@!O61wpVm(-m8#7dnBUGZ%H$;LlXi_ymMc@eudjwx zYkj<{*$As|qY%Na0lRg%#8OarViP6UtNIhz9%gnQYp@}c*ML11zE+EII=p1NCe(N; z;~#$E7-{*KN@azsincb@g2HbtR6)wEC23evsE);`gwq6U9#Kg|n40%Y>ji+Ry3CL{ z2Oe_{0Dfpr;<23x&ia5k?+@h|qnMhk)j!{zoOA;QYpuYLI~4=>i9_ZVlND@t!6hU9 zp6(^fg(?Fa2JIwtK?nAAqkB9om-xxDnXZa%JEki z_qXTq=Gfr$Z4vc4xTAC?gMex&bqnUZWB4pez-80}@>Ow%k--qQKbkd>mhIFh6N{qL zr0C&O9fL+Xu4JLjL!$6IE>~};XEMZsiUNUlcm^s#m^lbJ(#hI=%301ow)%qEosW4M zZf#fVW?XH8sZ`qE*6cn?lOX!SVTlULP=bpyIP6H|pa$!y#+;9?O{~_qr+@^wN?}p; z`f_}!-V%WD7yR+#Vy3_A`B*wSI<6RCrCK5Cd0n;ld`BmXy5REeRehAlO@%IaTDhK8)F zKS8|!I#@^lvx)wEg~~#+7RO4PLtr!k&lLa1DeG1GVhw@K)|Nqw&A95Itx>p6oxXok zyODT|rpy|y^lBCrRJEJe{q^3s$yIRx?F%?XkfAhh;M1%;EU+-k<37<07F6XE)1?W> zLFK`U_XaAA)h79|CHs|!th7mDPfDwkeB0>-6BSfUmv5VTW==1OVdL1>bE} zr+>9*m`rEY%BLAIHxUl_XQe5yG5emY*u3>`#OZH`((t>%#F+>lYD>@W{0-)Qxkyr} z>D)~dnLtXBZ3jr@Tdv#cw~6KD5wBJ{VDJbPi^fyIyl1gn*T(XkrUi>yd_TScfhuU_pEQ(h*T)Z|n&2@aEZ$opx` zBGmuxK1{G=PPWu^v4g5tOp$yom?ZO%7d&U5& zcMa;1$N88}`Z4>LE2b`lIrwk2S_KhD!}YJ{T3y!Z`w^viTCL|PNl8UCwG6N1Y-}ov zb1^m55fvcXie7X}Fngnz=99U4pp9dR9JC1%wg_?s$yBP;mi#8`i;*7!e|-Z~y=)Po zX4$Y11>9DEw+C3`TAPGcJVu~P2o@uw%$1lko;zN2dC!NV%7{ikZevN6jUX)A-C`1s z0<8x^F>o`0b5ylo*k&jE!%f#*y-cNAQI-ouedu61(@ZvlJvkXqBR|f82>YS7>v_!Q zzA+bT@Gr)gVzZ`-)!(M{9!k-SO4Z6QC;Wt?_qi4>pVwqOB_5r_?w$8!p*b^~ z%TpE0OkrVLvsJZiq0^Jg0U!a5CVG?bDW~!|?#2mT7SBn;*9$uU{Jx)er}Hc9 z6t)cj@q#91L+y-R6#EH&Z(K_#Uy|L=Gr>;>8GP(Mfg%!W?g(cOMh@I}dTKOYxXI?l zB{&sq6%M06^4kc`VBeBihL&v&MQK)otN&QbNYW)u5>5phM#Dmd3N1A{)pis@F_s*3 z^h459BhknV2~p_pFY8$M7!4PHJ2Q;~`n1tY$}V1DA3z@uo#5*?|9c?ks{d!&{0b@u zDq3n@|8J7$to2hySdh5!r{NSiA0UczJ9S%=J5R`xNSu3;tJF5zRQr*QHk?Xs5SaZp zbr^WCMe3Lp83PgW8yaNZijJJKBy>j@z~x!x@}tS{z`~F88ow>KD;?s^5k(5oJD1;C ziuu`=5Ogy#;t1{wC=FD*eIV|j^r3O{H}$=tSHbn`dwwpNgDCvEt(i?R(X+zq_m>B1 zZdi#cIZ;VZ1DMHpjD;lNjsA&@a^_nvv>GrmoT6nezqExY3Zj1@M!7sp(28e%GcbWc z1s?)k`*F}s@4`Snzi0`{$HgP`yaGpag@ba1@-i|3uengK(AcPbbf=$qfEhD`kJ!-Q zLEq9R40li)YoD-)GXV%gn%QX6&Tp`&2qJ-Gw3-2OfFgngrH9XIm=}~@g>wPLGQf@G zR;(u+etkoPjTLLCm&50&Y9x}wz?I<+QkLXDcsLapn#y>-R;HmPNxjq0<*=NS&k3K4 z#BnAt;AdL7oH*om_KFa4Y*DhxM4$s_>bF|P>r*oRF%#jd61b%^{CU>ujCg@IFz;-$DtSQKC692 zu214i$nchMhIl~(0L2q~KEph6Wc}4gKxV8XQ;S{7esQJa%sk22}*U6 zFLfoh!eq!-0>fUg-j?e}DV|&(-O6}RfkmJ7n}hq>!1p_to$FTvYgRk#|Lq4g0H1kr zhWJ0Y#tsj-4m3aC(Rd1W(`Q_b>v8Dh=I)a_SC@-kzVWtP1KEnN^?J2$&1(}~gc4e+}^Z z{4_72W>%Bifv+Z(lac zOd5y2p7mfVj3IK&KWTevWCGLd!j;V}M3UUmt7@<|7~2vc0@GZ|cc{Ze3;`ILuHN~R z^FX2$ct`K&TleD##VCjvLqUts7=nROty!^Tfw9Wrp%$-WdQ3t8Zr7zSG;Cbd$GH=| zdnk~dAJ?4YD5YElW^18_=YpBdYMVmq?dj3@mj0P~>FX=+KQjVn;Fd-S;GB|~bG*Fp zm;|f@{ug@Sz>axe?D_0Z>Hm@2`2ecCmTDcwnH7z=jhPj#`YJjQ0Z+3eZ5V0cDrNd5 zJu|)iVQTf@q5BU@VtTt$f<-zeh9~0^k0@#qX(u)DtmnmR?p;EE+Nz8px~$-X4y%4{kJ1KQ7Y+%YX~46Z_%+=q2%`Pb z*I6GJII(wfPG$uM66_RrlGj}#ip>84?vc2Rga9~x3{-R$t?wI3BmT}h7s<&6cNs#- zgF#kTiYuWL* za=g#E(9VEdSF|mR1;~BxN%~13qFLRiRLa1{nN3PcS~NV)IgT2(u-5J}Kj_(}ymnl3 zrs`tixuN^I*VmqS&A)d@U1qpGRvIhm7G=uEs}tngw2^7`gVZ zkeYJ_v;u?h=D!)5kWf(JRc@loe2~E0lFc$4!%9WT!hX7Dtt~k|=A!d8;+v9;tZWfG zBN7;PUYHR=x!}`uQ{XwXQ^W<nZEUjRBqDg|5E1&5 zX;Vdoq74zrom($f<8O)4St^F>nUVIl2N4QJ#OskOm=fd_B?2Jhf?U>~@4_%BgkdB} zSlF1+miGYEFv;TRsAL+CYfhNv?=mXdU$nEQ%2`H*9nXH)`j& zDpdneJRGT`6EZB$yvQEe8ZP`7z{-be`RY8V;TkGFGL4pBcgzz9qQo7t=3T* zn-w+lkgqy@<%}WqvwT-S2yhOzebY(6S0b@!wQjd@lW|FdTE`@q>>;2TWZg%5Wp5roLa^ zUZ;2qJIjnMSjEnUEUUAkvBBw~Gd$+^&vHQ)*BgJ=iUDa2SFT3wM5NBNOrxqd}k>CU{o7=yW<_0WH`RD%kLj8FMm)xI%6BA3vIKWwQ!H zOGDlIKf%S{mNZ-Kwu_321`^)MW?oM5*cEoy5=}8oB~0NV;D7nA7JyvJ&DnWmbQJ4O zn1@G8SyhG9dW-aQy%C|SD^XO%5n!R{M<7p2%I7oESO&XIJe;qQ2{=_H;Y^Q@5C4%9 zpufrg%DV!*lIlGdzehPai;iZa%cOIE;%aaIJ+t87n3(8xL|r{40ev+)Quv2wI;kKK z2Dxu`Rv7b{s#*5v7778oXJ!-*$d^fg1^d(1M@G8q4rH@40O|A0>+`a+1wfE&ykKC@ zsK&z0@jNYyi&TfWc&=Y}t^oHh?m_*ccy&z=HAMWHWXpf+0$3%vbIEEqs<2d$T~d%C zd|P(s*4TYSYPc|RT5`MsJMJAmPtM95Dm&r^0(dmNTt=&iyDA4;W@bLn99A4z?(bh? z&IBT^Y-ne+c>s0ML{u zAWQ6Y%PT5UuDQCu zPdV&6{k>dPQyxzRLW-IZ6HDWCAO$jAVu2Khtx$!0>D^C^eSz};D6^-T30IcDEJ)9%SfhoxADt8LMu;*!4gUP9?q`b11Lj~7Ya z=^U=;n3yRcl*&*TTa(qkyP$6*;kQGqc3F$-T{=Ock=WATy}hjQfk;i}p(S!~Dsj~z2;7zF01*y!Ns>}*t(Nq?1+ znz*!;zkef2S0?9?xZ1g9VMaMoi1nhw(JnfZlZ)e~|CGv&YJjUA0%N@KM3(HJn>03B z$S3!w%lrF2b*Gzrn~AT)c)T)4BnlK@2L@X~K~_wxpJ^?=PrR5pe=aFvLKjq=#>5t5 zm1tU)xSr19M>4{|kW4hV4OsUr+0No}f<8O5N$4ABPn2h68=dTj$RQ-;blB$PEJlfb2Q==>hD5Y2ADTqpxnfby7vN>7b#`^y#O>tcE-w!gc zcWTk>wA;UTMEPTdyL}0CBA!|5w#)6PsV)rM+)S^ltHUe|wouK2P;%g;ECI5EWxiQj zRuq{$Jw5fVc!E#m3WTQYV+T#8v%2MwF$?iNPBAcqwL3zE6e3ZC=9+!0(T$G(k(bv) ztS#O4<$-xI_eFs%xF<2fkMvdUc&yT$77`O&j{=-5;PS@){FtB;EfI&z;)~42(fLV8 zWpL&0cbr8W5j8EGeUE+nmLEe?r7nFQ6Z&uyKp3m}iG23S2YbS|NfP<@WNND4cs*qb zxn6Ij^oZR}=cznqKf_8ei}t%dZaUt5+7E<`XOCpfED=|Rb195ImTugTKD@mUbDP`w zEmm`#Q9gV=9?!eq-?@AhH{RaxcPPgPSc!6m{$#JT?jZ`#MI;kxFy70a68?xG@&ztz z%7J2mrKJbmrw2PHLmQtIHrEsR78Yrtmxdi4Ilp-2n07v~t^~%s2`vcf6r$pW!&3DL zpsUG7Ymnrj;#$B)!S>0?H_|j-_W9%3S0CavIX4@WS%uYfF~}!H77_CKeYp9ax><(K z?W@`BlG(r9+gz3Xp(R3RktU@=X^b~#s_4c1EGD9?^zX>^fW+MTIA&IpQwILZ;e`}K z+&Y*|;z-?ze&i^kk+U!=FS^G)#O+z0_@t0na9ORf5s+QKme?9$IRp;|lzRF>q)dvi zA8%+s#i8!(qh7sd$}S4~B>r6BL>memwx!LEJE`lbcq-qxtH0bE+})^bJ!wpTin(Z> z#=A*Q*=mTVWPQ1T@uUZVF@H`adDWXWxk&mcsY88M+T}aMxJp$reSnyU`VWaU%n~U z0Rd5mCnwSrEm2X3)D*9xL1^gKuv zB&6ec`M5uQeZq8VGHDHNadcbEsEm@0aN6t5hysEiD}t@Cpd zGiJNuQiPf+a4y$%Uh3wYlni!GRZ2=~o9~kZU7_mr7bn(a375Xve&uHWHVE)5_4JGA zbE5iSL+L}YsUAi|L?t-sxwpHkcNm8&o07qmQV}CS%3oy*BnsB62bR?P_4Wt~(9u^H zZ9u?B)R+1h%GojE;eFP(GNL7q{7bKx;;s+c$Hty5 zHI;SC-8b9ze7rQ6$RVJy8ovI`tX5l4SBARMDnN@Hr|o!};c_r#Lp{@BxF=QqsH&ty zZ`PD{Kk9&?X4qRF&vea}GO};g5z?2K^(&_y_j)1YDZ%>Y;PljbZhk=u4J9Tz zTKz`z97)yjGwYCfnLO0Rj*rm>1c+vQyjUGtNjLmcu1TI9vBlJDw$(txjI8YBEKH?fYiv zHE#+>Yh6>)Hbtds?Yjg#!v@D`ruQ`$o`_0gjn|i#-Hv57QPJSdwLfdoK8QVDRZp9q zrJV#WM0my8Mk$n~L&zIi58cBW%drRd?{D)&62SvJgM(BIU4cU(&{Z10z9VX57-4*6 zV>cADzsxgDh>lKDGYb}^rLBBs za@mfCiyV|2Xd3Sqi8HlRUdjPrfKwz&TEslXDHp1A$#M)MF6%usoG0@_=K`OpK(l}T z6c60EwK}A6k>SE!T~RSmV+#q;6f|z*VYQnSk$Qek2weF4hK8`srgP9{=T{a(%SNz7G8nK^u+f>fHin~J zgHuaO;|{E@uD0t-CCF)q0Y>ZhFb25YvE<5c;vq#5LrK-u*_i5^eB{YMdb1)|tVy1h zrj}@A@C!9NyBH#c$5ku=56vLI#Aci68sA!*(+e^-y)IqaOq{;Em7x&$w5LYr*%OX# zl6!G+aY1dXIAZa7mybs1Rm~2XWWT(YR+xo>PgmUKj96hXqNPC+s#1jXdWQpqsnM|E zXo9_looZU)Ln`^5reQ#wc}%R45e1Jc3gf`wpj0vU@okk}H=&7%NdPNSELVQMVtcIT z+{T99(Dwp~>NFsiERy-p>|EF<)sfz(-NL?^t%;_gIz%u1T5so3OB{ZyAC!= z60kXBzN+Z`-{wHYWeCdEm8(d$Tl@{258X-Sh5Hs+aC&QYK|p;yDXJl5jmwt z1HHY9=tyWkUB|>Z&HSg&cMf(E?QKmGNo$iywRmT%3|VE9ASpf&NbdQ?CH`{m9&q~dNR1XgD|W#uh_MkqcHghxT|zfqv0qu0ItEpoy$ zN#O&(bk@jGZw;UVQhTfp zejGG+*@DXGOP%QRd!d|Pso>1prPJ`!Z* z_Wsl1sj{1>^7Y{~Rt>{f>=wU!r(eo)&N=>k%0l_ZKwSn=hIWRp8`$jPLCg>IWyr1N zVhe-iSL=vyrEC>1uTWACHd@0MI#2Dr4lcR9yuIG7}go|*EJ*R021fl~~|KNV^tG@)4d=HxnWk5Yw( zv8PUMpPV=+KN%437VlA%HhKPmv>md%xNbnBI!rVmg}C+S%X0r(Uks$FtfK>`z;z3K zmhg|oS7+5Css1|EEFQA2!e6C7RD6?ZeR6%Xd4E{V5jE@F&gY}^3=aR=u=D2+K^#MA z#8)BFb&!vDoW~`lR9&OrVKnUhYhix)Z??QlO#gX0&i7E)Vv=UzorSYK5lE~R7u zX1{rC--qH8J#DQRZ;Y*&iBWekx8tYj?8Y4XU4y8(hUGAfZMwKGe_;^E*E*VjA+fm{I3Mc?P~-)w4ch38+~UJn zC{*sfx3a81l$CLICtO@$OYdDSiu-!RT+++oR(Q&E8|&#k%jWEAuo}9=I6ZT|^(jp3 zjXl>dRPF}cy)L~E6aNfCyZDV}`sb~-|m z`Hz9<2{*~r;%DLm3WyL6M)}n31WI8#7R?gRBc)JA7H+)t{sfY-FY>f`8t5laIQ2sP zZ(v=s{qlqCXiRa~hbZ#oDk`d>IzRIG>m12q|j-X~J|@mZbs88NqzP2>3YKp>I86PO_{2@7r& zJ6Ur5P0C%sUF$OQv0!pt<%jon?w7hZ^E}hj)5A+qvC;UP!dUt=`GK#^AjEvHy>a5C z$u(8V%pf7Q(y`g&FUr2;?~jUi!cbtU3clY~q>3VrsO0}%1{(Uet*9f$|I}26PDN7D zqy5VFe|>=!ck>t%^w1&WLv8Hs<-9I6fy7dQj)SlKYn}?jdu~_8#l^)J0Ft3Z11CMCt_3`S5(d$PVoG&n#Yb{BO6i+B$WT6Go0M7WK*Iw!5o0H^@%>R(yWO}6W7 zS5=Aa`+gugp*_i~=#^s8g>-m{bAh;RUOakqU7k_wW>-wm_8R=sND+1aNUd@P60TDr|e6tNVjJ$E9_!6KpP zc(;6at=)Q_dxV+G`@vMsStgk+nGT(lXLDexM=KIGY56@VIh(FOyeX}TxmNu&Hx$6W z__iOUp5rUCz4`NoYhpkfm1es~CJTckeAQ}LwJTemP<)DSF#3oP1Fxv;{gQR`GkjjG z&(6-y(gG~h&>7#nuOGJCDk~{+bE(YEZOEatu8movgft`(z@;sR}GC^dsNPk_6r^dYy1hG5@Mt7pE=B z4jEGkyb8R(B|y4FG3)!7cG*J{fJ5cr;J5#aGYXcs&5$|T^O6ofKt30a2zS01(G@oN zzC!}z&X;rfamE6&4+y&NZzSPHU>Pcv#4~R)QNtgpe?xP3tl%ObP4H^Px30GK5hG(Mev7@X=5}MjVHgp!Hy#>zqq&k14r5~U){Hi(b&i6b zo>4**JB6!?1zM#S#bsqd4E^3uOf`PeWzjEVFclT`)vmOXny%l}6sO8BoQ}aq;Dsd2 z-S=`yS}>OX&aD~pCe643KIpqyU+O;N9XTp1e^0a%>^RR-SDjS(d)VF{aKdAUUGw_Y zYjj#GYBAR$sK=#fn>WM{qBF8>wf88{x&=!-780E-GBLx@8!mk2my3ez>QdiJ@56eV z&g`D@ZgE+0NwIX7+Zz3mmiZ3%Y@(o#*_8+sRs8t8bZc`9{bYq#vGwPUrS$@)YnL!h zvS0FCS4i4#n{vlQF$;1&;;pTtWxZ4M4p zY@nFoeI{`)A1C=U!lI2VWO*jOh#+C&A3@VyG97>MElu>uuw;DppuL|yq2L(u zYWAUG-*iakhU>Us=Frb2sy0MGYonqlOAn7|{5pRAR76)-R&F@|@wGmX`dt}q`ANSk zr5`p-bS}YsJ@090dpp7A!VQe5W}CEmw72YXl)HpCM9BwQWcW#6CsO|trR zFx@yCI`VUdbr#941ffczd>FhdGI%oc<-eyQn`wD|HAZ~@xQu(~`Eeyx!9UcDniv5` z<&tI=@&C=%A8^N?f{zR+{VTQ`nor6l`2PMM0!WCEPXb67NlvppAAsjQ9JRb`P%%-u z#}Ge@y%g24O7W?=f8&39J05@pd5v z9!)e!-QHM-UDfuFXY^uhCf^VGi?g8rUepV^`?=}UQMt3?rh1=TNDk?UI zJNm7^m;TIhF7sE7nyy4|7v#!qBtEV5c=0A?Mn2Q77qRyZY&(Y+B^M+W2X}vDY>n?$ ztD5;S8Th6OxBE04=z|mO=piR;t6uE1k2zb9gHhj6Nw|@A+$`Ux*)hF@S)jd;nCpC( z=D1L-g#I0?o?9}{`?QKk9gm(Is|vGs`z$Lqo(m-phU+MgcFBt)c`EYS&Xk`}U^ZgA z)#1;<3J|%!3e>p@N06>E=#fX(dp&DCguBnCRlsi|;k92=ql0 zii(P%#MgBuQlyiUjpRCG`$>mZDSs}d8so}ZSMg)mg`2yw?Lh1ZCQF8{@$$RP?{ubo{fc(Q zDZLGFh&@azl!cvNwVzMa?K5*i{SzOL*Xgo&r8ieGv|T6laN4j89f8ESLh07Pp8m4l z&JWyD1=aPwu$9$A+D+7wi`J$%T*ukZ*8Uzw>%7i%np$t8C%}IdAL*Yf8TgpZvwVVW z{NP}nDLy8sQv?PIXk_i}F+jR|OdLgivdB3hPm$uxOeX31`Gv{Q8pGwvEmbD3XI`r4 zD^;-2FZ}?tet&hWsr^5sR7UpU`X%p8PZL%de|fB{o296tLKrrcn21Yz1 ztQnj=zk8_C(q8d+%+>_@OfgOne3;AK$ba&fo`SG+Et^Lbs;*7q?*5lYAzowZErcm1 zLXz1gJQ4!pR*2pIx))})+*%nzj6&@!3X)UfO1S8O*(y7x>=M^}BEnBU_ zo$8vOmBq3lz|5uSaWavB#}XtYg1)uxhgK>`FVMRWkyp9pzfuU^fx z0m;_oNjtY5!XP~8C4~sN)3-x`>~GnoA05%PF|;$uvaz%xXKMc;_&`!)Ov^=yDyik8 z`1zgK(%S#D09ndoZp2$T;CVF%+U83D!r+nfPyouG;MMD`CiPqaqK86ZzRdVhHI2(+ zX~woKkX+q&>AWr%~Qk=b};s#z>8q!WG$embNT=O<*rvdy(s3+6})PxDNvw zD>@-B;(*ijd;A1(@s)2LhoRphBFeMFBO+pySY|8-5Boj_Y(U)H zJ;0SEF)}hbKEvs(F}h*sCgzY3S!81-w?o?uJGK=hT6Ll2E)tpWUeSfx3X6Cu9SE_oJBES%?_cfmNcQu^1^xN=inl za_@J^1D+s&Kp%Z9=q|8&6csqorH`WVQa?044?A{(Cgfymz0PWqypADumOlc@PcB3)NB3r|`JASS#74edV*TnK!B?ywT#c+D*GT z79EX#^5V=$i|Z}qyi*-e0)u9ZIP8RT(7d8pd6i@pQpC({vmOn40_D>rBRU_Z+qBI z%4lgxru#L(yP25>L#pGeH#S^zh=?|s+1prm#YTQ@OBuum#Tnf#Em3<5P{d)!ClLj- zwD@q@rOv((!I{feYKbM~vK*S3Q5|LAic>NU#MKs%m+~slGKW~r&+CrQO@+XaXoLwz ztVM){{d0f47T2fcTEivf4(({HBOE&lq~3NJeXQazjqIkdTUb_OT^p@OgDb&J8EAat zDU>Y|-yHS=@j>Z9h@ejQKx~-&-Shu*{Lp!zIG3j$Z?vUns?7D0qi3J!4O}Z_BZ-M zN&X06H+OOR(%wdmAx6A%*)ZVj1vBOQBA|@5G4CoZw-VwV#H#%%8By2px1o#~eQ1(2 z-Fc(YxAdo`3ji?_ZY>$Afos1=Y2Mx2d#-FxSZx?HurndA>8Z0X<4mvwgSzZgMX2DB za3Hv{`}_NE;{EwUMJn#|0x2xcbR9&pE8T6iUSUX_iVO(wwFh;{Xk0(JzHcq9#K_>t z$q3P^GKSm6!IFR4xBj4{!O`UBo0ie{B?L(S_|z0@8u9u09dtoBFkXsR;i6~R_Csym z2*sI#aKw!LEOuJp6g-V6Ugg$?`og>jIq4)HZ{0{umm!d7A#|!my5X-WHPmhVs*^VcZGRBvtI8Z#k-L#mR zzX_Qd%auP&Gtd#$DJU>Keuwit;Dkmw6&#GHfJ33M==$-LTk{+|4|AnD* zJJ`L!=YNhR)xaf~VTb(E%0hL6LNIw^c7gF(w5h47*X>+K_(UeRm&c83bC!$DN1ocM zc`t44io@rf{){S#&#=UP65*1Dg2-}h)H`KPe-uE34~~u|i43td$>U}ETEcqw#ei(I zVzE7Aq4Pqn+7 z>@^SL&UnAn_FlPeztGhUs;!k9pP1+emNB_DZis~dItGSpT=M!Rt>E2{(OF`Ek4K`$ z%aSkxTFAMMn|tlnsL`tq_fPzV2YiD`lGqY@@q@hGxhP08itv`$2H@&dq?YRy5HaaTZG+h@g@!K+Ep}5wwuguIt z5m9v&sg&P5YgEK~e;XP~x8&sHIA2XNAR%4S^Ydc?tWQ&ojg^%GZ4NwF=5dLMvo_^!2iW*=X(r{S z(C>vy@meXhJb_*ak&v)7_1A4|ZkQaxuY`OrFoDpC%lG2VeB(FIqptJasbciL5)6`+ z^?la<$J@GE%GM&tIyhi$aVr&+gaKuxA~NQkLw6{e^l)2iD>twe0xg7bA*5>6;N?q*Mb7?f z4I>Vu>_VYM91ac+e5#e7OTI9w=C5Bdge810*wQ)lqZ_P8&6eO-^&TuNEQ(4k98I56 zl9R#1%(0i)n!kCntSc{T#P=1XXc>hQ?Unr=YNJCMj6`M(cX(U%r zyY)b2+xBP&7cuc~voIt2f)kC?n}<#rbvQ8L;(hfKE-X@4v?Hfy`Q-3Pr_Cp>iV3Ue zG#b6is7=pkJI}&!ADAh6`+DhwgmlF2M3zLj{IidkV2hq8wr^>#%j1I1?z0a%J1 zYUeWzL=U=P6=61izWqHperP^ix>FJ4=F< zy|%AKofGS8E1; z%R?~R5OW%~Fe7D|L9pZFx%jx=g%lxDQc}vHhE)hxosI1Der>Qe5%Osii*ZzkEp;PbrK57+Uc;lvLxB3(=L@<|}{xFaY!% z?uV^BS~v3hVEhF%t3WEld7l`-2(=)p?!+qwuhE{QR3(cp&p*9k-Dter2)k5ZcgP28 zwu6IkP2#s>%i?!lY{L2ZM(>8mpE`OvsH>7rCX%J9?>QJQ%dw&A{t61;B9CiNehj46 zfpEI0m5~Q^!w*+ruBHp^A*7VY-?Q7Vv-|rj2Qch*b_5u+LsoH40_2)k$jD}~xDmI$ zFeT%cbC6Nri-Rus)fof2EN0XYXeO$4-=8)0&s&3D;RZ}@SD@afv?ET#AJ$q8!oyno z=JT!AZs1wYun@ARzGtX+xT)vx+eVMiYu0#@i1uf^HOrHO_?B^&morz!T|Kji1Np-7 zzmJZB+Y5p=Tv9sg>)JVoD4-wOa>YN|f9yR|Ewr+?XF|$IdQ@tg_=YFWe5v)y#qrI^ ztBtLV?$M>kUycY(=j%7k6dxP~gOynoS&2$MC0PMIgau{!0eYCI(OH11qXz8sM$`4R z2$Y~eI~ysxLJ*R}&8;0ay|Az_nDs7YVnUh?=)1^VhMQ9$$)pPlKMRT*Ndb45oS=5Z zHzbM16Gb)U@RO+sjZk7j7GKce#yw1iPBT-sQOZ7tS!Ea}3X2w?YXTFW%A|Bhuyv;_LmGpgfbTcNhh2kU&@0c5< z0+WJ}=(otau12=#A6&0Wikp$VufArAxRbvvDKjsusVV0@&HMEwCeckC+Pc&m6=&o{ z9uD-vX0e|PzT$&e34)^X=3>&k!^3)`B#l_Y-zheav8c$22(xLiK`}@Q^K(0;XE}yB zmNjhp?FO-r5AozRe0;yvx$U}mGmar}%|ty>GB98hc(cN|psEFWWWhDc?>#a|+ zEGy&{P;ui;6(kM1Q3)K*02Ve%iFroK77{v=7YFKkp}$%TUo!V=NK3DMaIQoqC5ua9 z?qtekzj`L&HO)(iKn}!{+P+f%*l97Je}ZJBZ(5$_Q`M?m)BJ>W*i;TwLo@dmRgNJ~ zg4&|mivKq2wwNkRV#8sD_x;58>}$H4k|-#?L;lvIVnaMLh+yM}q=nk~LxNtVrAd#l zuyvqS_4M?V0kB6- zPA>QOT*N+fZu0|IpT45l?huW+Mdxv$CyFP-P zw`Ro2inH=+p|Zp!2L%O?lE)LP2SAAu{;aN! zTbkK=B$GD6+B-3el=mobQHUg#yoB9GKX! z)v8Dt=~40SrV{6}sAuEjrm5jih~`pk0nyv0sH7(EsznfNHG&%wJX3lpNIkN7rkHrC zQk_v+=UDnGD}gE|tE<7n2%cLrwPW4_gj|#kpB%X8g}fAPwkHBd%9)sv?)ZUzz4G^e z@pcKs;MuX@i5gs#i;E9;ZCP-f>DjmQXWD$)gZJ0t1M>HAm+Qll-OmTW>;MZD zFZl4(Sdoc{#GC6C!PO-l7tp&Xk>hBE9@fa8$z5y09_DKL2QXjZaG@gU0n(&L3Br@Q zM6-6)<~527AQG(x5!Vvpt&m$4qOM1>Py8yEU&A@}Jh=q8sD)X%g5`&mq^5ZQT8LuV z5v%jkQJquqn*CE%cFz3e##9k`}{&`u~UX7`l$49W`p1Brg z`SQw}EVD#=T8R0?wO4M0y{ct%RKBY(jV7hm+p9OMaB{=#h%4wt@OT2cy z@iO-|eckSp*l&gz{v=!zb#?29g{&;wO{9;Y^0R!QuF2l9!LHjI3T3_qGYUCe-JrO* z=uO9tzn&Ew0^Y;ZC}hDc^8cQEOmIm$7BK$-@L)=B`Ulhv!2qG^%VL<5>_U*jsGh{r zhkSK4E;ybs*-`ZZM7(md)G43Hz3$vQ*uf=ow{w579yZgUlNFP91^ij6&AwiATu*U5 zkJ8bh)+NpTrSdF&zTb8PmacD>k9+Pf)$yc?74l&X(R$k2WiRi{$jn|Jd@Qd@eCBX} z^KIGe>QvFoTRm}KheeGa+_e7>Iso@E=_!B{12r^gv1x>ZweN3VX-IGaPaHXmtt|`K zW%@u)=L+jm?d<&qj?i*N>KgIG=Kkf%5#InanB}W13!x&ocj=ywxQGAMRa+_Om!4VN?hO*1m9$wl5IAA%`bnw68)%*t=(LV`VeSXPO z3cIceM7FnojWyLJn;)g9s@w-Nx|2XhKXuwVx2@9oiVtE72Y7$w_vJ79A?lIhwk2tZ zh}3?rm$tP<`z(IOb_et9=mHIpaz`P0R4)}J-F6Z3yNp<-=cPvk#j0JWIBBa2 zBhr;Y|CS;vc;Ev+9al#DV;6#$DE|HKRWJZthJpgv=vta7o4bp-j1iFA3%t6iDXg!j6kYPgah2Zw z@PUg4XxLG+sG|Ap=lnNRI#b$WrVk#j`It0#M#rQTZw>z~Z{W2dd%)_na^aUJ=3aMU zBqes(XS)fMBB3Kym?z_$hQuu1unzBA?c`T~c zIACLtmd&6U6*@;y;)qUVWl?N?nrhpej+=nCL{Q81W`bUyWTx(6d3(_wcZS~I;cO0I zAn;TCTk?S2X~Dg$4_zJ@*jC1A`|?E_dnulb_el{5aM?>B@+e1o3zm9KQzKtdTN|Q) zfPl-R3}HApw`+Pd)YNEe`dyMAnM%HT^@@v|yT9{M@zKHp`6E59wdJO!iJ2MxbCrvU z$w|7724}HrA0K8;&WO4wG&VN2V#m8&ymzzd#5y{90W6PuIk9r~9ynD}Zd5U@)v^JZ z|2&WndNwf?q;}L*CJie&iqh`mca?Vk+d+08epLJUf2nEku$s~z%b`jtYuceox~{!? z@NGQoY;u<~)c9U-yTkl0sb|REnP!Z`r#Mdda#>}kSJoQ|GWKSqo`tUL-Ws8J8mj(#YXqb zwk}ps{S19WUX{DKxyj;@>*;s~XQa_V(=0_}TCKrBj`2z@JgsR45vQc6L94e1gu0jt`J6K?mFa4;v$J1`va%X> z1TIplM794Exp5a-UMYZ9liRzPh^0vZ+6>q@?tm-}-K8ej+HU zyC{@UYTIrtleW1eD+EBR|TI%#%Rq4b!6P$XJdrqNkwX&fYGapdilc^mNjr zJ#>BjUj?EcpRrnY++5uRmKKO`jpML?3QVuIWXeBZuvXnVGxHA&{POm9a&i-Z=JWrO zYSeDEm&MD=$sw1j=S%Pnq^1&1bUL}a-zrLG*ZpQ?m63bJ0KbJxo(aQ@xyF}qKHUu8 z1i-BV@|@H|Lqq+l13C`+z^0;$G;{mEs~Uy}WWgP6MTmjkXR2PlzUI62mWt}?3RYH6 zfZ9wd_@o!-lK&82SST{F z5z_0gIFYbdBst-0bzCAJk0hxp*n0fy*1l)Cs7M{PB3I(KI_eVBUw_Fh$YhqTE-DUA z#GAasicBU=~rOx-b zl2~^J#_ddezBxzD7oT4nw7ZcpmX@MoVWn|DjxEQMXTKCZDl+Y}w|S>U>$~0`$3skR z*jidtM72Gd7gCf$0EffF`M56OV7RPpXdozx+lPezdNlrX8g;EuwYB=))C#SM>1k%!>`-a?1^2UlEZQfK`Ez36w+xDi zh`?pUx4(b)sJFkjb9jL~@b-H?x8?B5D*Z3ibNJN-t#E3qF>E5*+V_IVrk0k-z#I(T zM1Vfn{*jxomCjgPR)PjaM@8)gOX-ENal*=qNpnlfkkE3#jYIKbYY-@SWPliTU?U>> z1Ib`akZiICFxb-OyKevJDF{JvJ~ARRy1MJYFr{<$1@ty;6L4ngw0dy^+ZA98y=mpz z+uNn7djM-HW%@Y#eYT0MCEBRIf;J9_+soL&fPJqsALvcAwR_XM`1Q=>$Rq(+TL6m- zMO~~~F@Ya!OQv`S?CW!O4chQk8?=YkZEaWQ-K$4^Z}zyn{8Lc(rDS1kBO zgA}}Hfbosv(y-kRjrx$wQHiK&pq4E47sJ(%*$!qQ4h^ z=yb;>!o$sqzkU7MJ@bQVdn~tSWW}T_DJd10d5anvWUe1H#_PNi5^Aw)U~XOU?6_qI zp!p`5``^E)sF;cTYuh37I<8l2E3Nwa`jB9*z$JKrO%EW8oPcGb^?DD-A`TREGRj|! zWOZfo*(Q(hOG+A7lWngB_m?sruXe5ePYb|(VPn&4&=#FO`x+=6I;W=g3;g@-M94Kl zC7Z;EI$F+I4Td{Hv(w2x(2P$`1^>0NA34j6pc%cVEnQIe-+5Yr4NiX#p3aqtr(6c8 z_lJhxLd#PLGf;O+Gvbhb&bW&KV#E~K0RLzdh3e#s`o4~=jIYK9a^$e*Y;ii#zMGrU z)QX=kC5Ijj9RVZyB$HP7j#PY190BJJ@bn;0gP_0<=ZA(T@Y%UJH1Abjl^-g2V!Wg% zIMkuvo1Fnq9}XB+THy!5uo6B2ft~DJv-m6dhnpl$Krp32bGDw3mI; z7yH&GE-vko5gJicSV&n{=lrwYl9!x<{DIjpvafao`Q2VHadB}Asz2be55{xzNGlAO z^p@0rMBksSPIG56_1~)~b3Xs6p_0c(1_DpO%#(b(v9-qt8%52F3UBc#E-f+L|Ljmt z0w5Fb648O{{P|3FRM#y~G|Xu7L(8*oWza40D3UuwVlPQBW`=EckN zHY%vMk%ru6(fsi6ZSo!g5m6Z84Nhbow8#8(W61179TCZLQd^_{jR$zKVLCWa)vH0q z_vaj+<70)lOK@9Jyw46>bde}i%S%;69{4dkJsk@G9D{GfI3Q+)8?^t#2F1k09N?Hi zWo#za`h?t1Q&*Hjf|uZJzA!pwW?W!~H#2yzuk)0jLGEJfbWo9NvMUlP&gViQ#0O+H z3wfL~m#V@-LPErOczF7BqV(zzz+h!I?J7BGLMFKcqHl=I43aPP^>m?)VJt6lFt`J* zcgrmEdHtE$`CrAFT#Uga2fR+!ki~ANrwX%wNbHLJ{QQTkxO9>5?;()aH#U6+$`%|E z0KwiJG~nDKdiLVpDTieoFSc(xm2F{vz!Hjc56+9HR-#ZUKxUt(tbSeXWqm7}xh}9> zfLJ2(;Ie)=p+_VhUFd78pD>RVdS!Q7D?lAn^oe$@t%Dr#)(JyWii(X_R*3+@kR zbaVS0qb^Jj;9vB4Mi!IK>K=;;*O&IE)EZ|q9)j&?PW9QiyI z1YWGpbzBos=2F&rISVcMZ&QT=4`680Mi6XDba)!UCmpyGOO|n#0*w`Mjf*^!L%(r# zJRfv*RmRB4%^jbgXRu{f`SC%ap{|bX+NWi3bf~{jE~cQe2*aAhI(7M5gmMN4nm3b% zg?Y!!t5-Uo{e&<6{9+1?FNVL>B~yuw>+>}<(!jQ7wT}{WbMr9i3J!DOoD#;S5n-dA znfz8_rjnG%tJM7xO+cPOQAtq|TCbR?czk~DX6ktKl=Spl0GJ9QBXyo7Jx;dt8D~;C z#={?OT5ZUx`LXD3HY^{q4zRzSqy4@O7OlQVCeQHOW)3pKiP7%E@9<-&B@8hotc>|6B4O2wX?Z2I5e8%?ffY?IM^bPo36jDo0rX?BT<*u#baRV zJI3v;e=ybnk5415G%#U~NffD%Oju(}(4&i?G+2Ho_Lc-)0JNf_TKz-i!vGm61Wt;h zBQNz>Zt}meluOOdTC=G~AwaLi$1jNS7LK`Qa7A`p`z!J(+;i{f>DnjMjn`YzO;p0% z_(>8;q~qkz&7A2xAV=@2KXYU+WOGftrBjm##OE+Kyu*1N^3}-eoeT@kmtlmC@k`o1 zr#bCcU!}G_mM|D=;uML$Et}!b#AVXk%!fIV%%#{@3_09FVy`v_IK$PyZJAcZ?a9z` zB|jL8??D~U&h8(g$q})&B8B+Qg?_!ky0$hd;5X#9oP62a+uu1mE8l*sU8Bp&!gl`T z?R*PXO~;+R*nKyKjjdh(pI=}4z7Kv)(&6%XJ~?tMfu`aNtxHtgdfo85*%=X_6n#C1 zo15%NEp1Iie{yr3oSlhr=)?onu;ZnlkL61;A(?`=m9(GYQf_W;QbtC?C;iXEt3Q|8 zjf4|*Jie$zvbX(&*q+omXF^z5(sb$}(u$r=lmcwX697E`6Q(04Gb#HHdXpL3Yg+V-v7aV$d=Hk-#Ykp#h z!#@KoUVn6~H|Z~@ZNf?}hnCqjFXRPqlwi|w5p zvir)LlX60V%{%#<_*M@uA>{jsbKPaaJ)DzP4>|;uuHU(3I9Y6RWui-$SF9H8pxDVR zd%V7OKo|a)9>E~y^DOZQc5cYd&ie6t>UUKKY~CI|dLq)>BV-0OOVqIflwL z;8n|@y=Wbbb9#0LphrY&CTs4WudDUKKz{6VRMt55JeC5fUT^O;Y z9EOQ%l{TvxWUT1Y4vzhhv({$X+b3Vy+(cutw!YGrl?}x`o~LcVBcWlcFo`|jVvjNk z;JKC36vIQC!(Rd1#5y?Xru{8;?rWs-Y2M{`EUy{JZnC%RcyZ!05D$YOXlZF-+1pdh z7t#0~x5IPCvc$acb11(`x@s6|#R27rkTYDURPBBA%8HbE@~(!MV0U9x-Ih5+SY$XK zJrx8FL@vF3${7$WMs{}9LR7xD^O^D&3!H&0c&Md6L0dd(^}6Bafo$)j<(fOwsx{KH zr(7>ITl(W@67+X>GX(?NTSv>~uRpo5q3c8THH?gC=Tb8=qUyTK5vDGiJGMr0>BEU( zHim|6q{KjdOiV4cZaS9tn@2%jG7?Ap!tK#9|LK#p+Ov>cv+1<-R5LI@uGyFrhvA_H zJQ1r4y_ZzGMKKb+&wfMA#LEPygOgnT4Kprkt)T2MywZpBuhv9HXr}F5J|&% z#~skJQC81FTDtb0kF?<|66Rd0sxl0Xjg#3H8tN3M?^CE^~KvlQ*Z-} z>aT1=CMl2CNKm5~CE2Lui%^1%La#80{d#RyDdLRL;atU1DcRYK-mW=JXGRKflhW?) z{0ImL;n-x{D9Py}JrRHZVx2O;YRNk=`A|%#i`4_>PtGM^gWI+S>hbxse-i|KTq2Pr zaW5Yq9l!(Q#>URr+&@XLILkk1xqWzcUrkZIEGBu6^gf^Aoa5}~9a3)bCm@R#yFI7l zbqLN6QlW2l-HtCt`s?QY9TvOg#C}u7%t=y1heqGlcrY+IsTtW&y1B9Sq2M$2l7z&X z;np_B&6YJelpbd!J1Y*z#0dIQ)PmIzMxr?(?j!Du^W>1ZKRnc1b}4>5w;@kr+uMT@ z#o|L`Gx|}sM}2K}#?60tPkODuo_6FbrXG6gZCF^FH%{2lHt^Yb(MXScG!3=6+6^KxO}gfIy3O0N(xqB@Zce{V85e zd3k6_N!a<&G(kXsYaV19G9`B3$xlya^(->{c%aunPF0ot!N^xT<*Upox;;27r4mLv zHttn3AE;+XevNXyNuDfR&7c*Y88L>K%}3ZQ0r51T87%;jTJ12Q0CLNN2o~1!suz$syVEV|bpv1CEg_*vll0&h#F8~q`#QBU1z067UUaeDpi zq9c$6o0xEUHD|e&k>oeK#x+;RW+oy6vFsDZsCL)w&$9BD#`Hz{ zH@)FUQf5Q^Rz{M6TM|sz*&)Lr=FI8aXZ++027wqDu9@%kF{uVOeU96P8z`{i;)3yt zpmA}kr|laO>pDY2HiKuv@T@s*I|anan3;?>4x8}MtsE?8>yGSxe+ByY#p0V=sy6#O zis#W0Q}fL*Z^<~8LwD-nt@aN=-7wLwYqzexI{EiKOFhQFUdJ4N>F$F2i#v#)EZ%Pi z-}kDk-65r^rg@qFrudoCg7Tnctq5Wv7bVAAp?s$`me*Z@$Yd%ut0S?<=;dAXtxTJ3 ziilNvcx!!)w@gE(+4dDLX9|rQrs%}SP19#sP^PRcD{GGIurvnDbCgQVV-p;~=Kh<` zxPBb2w^kA%G>_nBD~#Lr@GQrl1QSdqAlzwe6$L?3rP=l}e6{c_ZV0Q!TS5>8$9h7) z6BkdMFMD4YJKp_XBK(iEg^CzyzZ0Wi$yVI=$pM@A7zp;52 z$G_Yd_w$Qqg3iP_hpiq^Q2F@YnAn=qMkHLyZ}`XhQ%bn#RM`gnT==;#2o1dG!Jz@) zz14u^ZcI#rddJ?;p1|>`GwH~jLyA*VTS$nPm0FGvt#{735gs6P@Fc@gu7ZZ0U1@;& zRQYbF$je-^3I}y2L3%}l9uQ^sMS1i$+rGd6#6QDt<6uvK(^UFqUHb&ibW1j}3@qRT z>LMK}0GSuFeTYEK*GvyCapaUUw=TlHOCKeMbDVl+nh7Ga8?u+b`P2(b2%w?5rQ#ar z##LSfBIL4s(YWBstDTv>l$6t;$3bQq+OSTY-OsA0X6El!bK$Ee8+_a|C^7{CC zKMF^AOIm1QI0y4+Ws*%^74{k1ov-~|hxh$@vLr^cw5qN^syhepjYpD20UyZ9h;q-b*`*SDzlTK>by^N@%F1J%K(0%3A7NGp(Zq)i=xUfl1JYir~^DdQ4#W_)vUGt9E7YfGE7JT{+Luay|43tQar z{k|M6R}5D)nfr?`9bMTo_8Xm;6x)4>dh7jP72g`z+D1{DtaVYGm|0p4232Y-0Ar)U zm*$_O+|fE;gTZN9Jw*w_SE}D&H#9;H<`c z)Gc#jzA(0`2GRfT$m+Y!S|&KO1S);0|4pBP$@%Zb4C)zb&u-P!4&_d-bV8WT{#%gs z#{I?o#oTKY40?>5fK|Rz&dq|)b=W{t3TZ0&6!$fl{nRnJrY3c>P$B2aj!nORQ5s)3 zd=eyvzw0F9t+hBwF1Y^2_GNnRSHz}<2AF~eBWS|ht6PmOo^&O;Sv zpA3#j6s+VsNl5@lk5%&C+D;_m4U8Vb_fkpzWE@SsehOCyZfeBTQ;6Be4N*?;FjQrK z()g673bHnzHGe84`r9#^GQfN%YleyPfQsS&c>3zFu7a&=r9-;ABoqXZ?vj@7?r!Ps zZjtUry1S&iL%Kn_rQsXyeed_of4}FzIcLtqp1syy>wWY0osX^z6Io3jJ7F%*$@3x+ zxP!XV1l?BLM_*+)PK_L4@M)RRyAlHo!13vO)~=g=&bE!j07gvr*KZs-Rlonf>CP#A zXL~gu7vW4q4U-yPQ$x7P`F%Si#ugtsqWSM3-ui9mmTHSrS?OCOSY^UL&5o&r&*aI4 zzrRq>h>@df3MI7Xl8ypg-0t8?JQU&cW9w(SZ++d|{F$Ntvk)%pk-=__45}Q0uM%}3 zopFM8k6o4KQy>-XD2 zR^8D^<)Dh36=m~VuOGsNtl_E{b?IX5=k&APPdOfro{l~L-97VA-uVHeX)|mHk0sK@ zTj8;Ew((_)GvTYt>pIh0=T+CGi^I)0m?o+g2my&aGL2@#(8!9cN`9t-@z2?B-oDXa zX^_zo?w^_M&!m%$KH(Yp!D#W%a@cH`ol1K?CwIl`p{zlQLS`2(terog<9yV+k{|Q4 z`BZIk0==4L-tst9*tg4T(Koj8(*k3IG(Nq7Z|IkU#8#9%e*O85MzI|L6?F13I^Y^{6-K|hvpketr%VxW~ui`A-d3CZ< zuiG-R$Ldd3{qbT7R-l8~I$~_Yn*w+YX76VYL}K#BC^65+v(EU={9-}s={mPj^I2p> z7H=_LCY4N&$51u2i;EKZQ!+U6D^G1r@#}>z%NdPu%NkIcT`!3)t7hcB?p(Ci7B>*S z59vpn%Aw*X&Lq}-NNno*V%B@N#Sd;=o~46(itb(G5H641{VdKmnk|!gu*Nbxxo5dBXAg%Zz|WQ_goHxf9bI z=i_BPUv9JwG<;^4nEW_$D?B_b($F2OorFtlob184LR>YWr6^-;0bjx)Q(rr1zla9Y zxh_rVGkeiD{Ff0e@Xz;JEspcQ0-zq!eMqJ^Z;lP8$?z;}Tt1~azLz5Ct~0RdTV82i&Vt|P@-q3-Ax&*RF)-MFrY6E6x}dUIY+Ydfhibp) z@^n3~`2E+{wdXPCTJs%=OQokf1~0R>YK7xzQ-9?Qu0S!cwmor5ZfU6{#bch9P&Xd{ zi7bLnZ3z$%;p@cQ=_ujY@+$B9y&v24qTd8cB3a90PV%4m*v4I$|2ac5ri4R6WI^Jx zce?0-m!wcuRL#@t4mO`I7{zAH%!svyKrEMndcVbsr9?fX=^RDKtMB<6=_47V+#pUd z!VlEhV_bLlPazq3&AWCakCV%Fb33y2S0myEB#Ho^{e5k$f}g;7Z=o)1 zFMcC38@Zp)-8T(Pda~g+ADTm+sjsosAZ>-Rz3IGiPWNGZ6;a>g5_AP)OiE`q@tv@v zIu`bD{O*uOtx~{F$3kQXDLAz z4sfM~AR$!R=fkVv>Tf?2Q&Ihg(F7*BXHX59pG>EDm~hZ^BPEgECoxvqO~71s31oH# zcnM*qO@yr%{HwpeQ33EEBxrHc09WJLg=OYh?Hu|1gzV?5;U0B=?6&jOEc8hr!vl;=iYWg4Tp_(q{{t=4z=!?Ir! zfKscPmUGf5>Sz}h#daj>u|pWlgym4PAGf$Md84MHs(j-vHQB}aZ#C8Bi(@8=>()82 zr<4i`-lzVEx$E2zY`rsHEnx}x{nZaDAYBbZ3?GSx9@2U z-<3kIHk5ui5#Xbb|5@au`X`b%D^2*fD?<$tuS<*NY=}A3Mqw_4jh7mq>OaUOL%}DZ z(Rj$}@%K7(O{PlDZ5FPFY;oSXr$~3JiC=VXD{Jt8C)k#xSqCRem`KVSHRATDbWUZn z#+5Aw)b;#8)R47y0*6C-WE@{Ep)5{RuM8su^lVvD+{}+HsB#w-nNpl3tYsP+=M*6$ zm3l&-uqYC~g&?L(U*e3VrqY;Yxr&!*we(#$dIM%5OZdkGX>`g7f$1T%o9(FY#m0ewwPp10UJUZDRIKQvvZ0P=S-wMKgN&5Qmcgo$vEO>< zBd(Z-N0H_F(22CD7r#dte8`_N0hQ(>&2QlORkL1HvBazeO3{_&e|~$9-AM^q!t_4% zV-4PZva%5_C484uu+woJuzNc^y)t9^HV94jewB`L$4{Tjp_KeUrDBm?Rzd(@yA{X8l41BC5m%!$@ z%o@V%o2TJ$t|5PmQs<0UlR*9X)R*hTyhsDmrk>r{LW5Qvs!vJz%aU3(_r+ImXzl$SGU{6AbX*tMG zD2%xZokuO~I>a5T7|^7PuDc%T1hMrFGG@O#G%W!sh?t-ER5^6>c7 z(1+?3bg?)#e^t_`voE+BSR5-?AJZ+FP=1*y`dFj=_oizv`W|_FJ-@Td>4J7mkBMdT zOD&}3qouL*8_USQx1L9N3bK(%W3%+jqU$RfJhE_#uw5v4YIWxEO~mUk?4YWUh|{67 z*c9CYqk&PnuG}@bgu2J?_ETv?<2S(pGU8~y^MGF4?B8FftsD*T+3GjtwrBf1Cx3MT zxNRA|WV=U@qoTH9&21PRdxClZtsEcF9}>Da*x&aQr{&mr?aZpMeD4vn$NRnV0}2r} z$0Wm5SuI&@vCg8ftz-ZX*)D_CF-5Ho$D_6rogzjT;)__ImKedpMjGa54-FCt?=k|E zR*T!Q+tHK@?UAq_;^%de@*EQH$Jl1aL%rUi5S#B8|Ke)(f%TgCY<2ujS|*Q4Jv_Op zoSn)0OMFlNWkKZ0&b{63Bz^%pWi|0%`I4L^`Zfqa2yJ46r3rFU=%#xU=ZUGIwCerjU6xW7GDOK%6;(22@ zcDoQ&B2ZIwfkSTuSLPA@M)cisU!+|^2!!N#Y_8}C5$pblnq*ZZ0eu%dF*b-Incn)f zQ&YV+U%ovzrsPi&$XaP6llFYLR?_9qI!D_5d6$y_v2ZUEjaQP+<@ATiC<9u%dYkG! zayG6;*C3Qs2KS(5&a(5_UI(^0=7tG-=t8Kvo5wG)c{N#O-KLuswuAByLSM1&OITq1!Cs&?dkcryk46D&!;a>9d0|(6}YZ`X|c+9Y_Z~T zRBBH2VU%TBHR>|F*R_;9S@kdoaRVW6cenQ`teAc>N2vI&wd;z1R_d)!|hCA^0)+uu+4+$qn8f^WI-d*ZL4`XH%D-{;y4sAr)wG~^IDzg7jD?W+FF&&RZa zZ=QJUxL476*E69$yx(E^nr3OxlWHf+fl147EnfMKki$tan)klQY+KyNcL}C9o%9io zIZwQg{2iL3CNI#2HN{)1H0STL)pFgso{#8xISYOE+)=VV;Ue6R-N~pG0ILujfNbCc8C-#e8YqkxiT14P%Yr{Aw zJUH#feL=<0UY|GPo-dv?5VAWshX`HxhIlxbr39*Eeh~iP95$>ef`&OjI`Ei1Dnc=S z`#Z*|>I?VPnb2aRU0kfO`Jrw)SzqKkPgU4TbXBG0!*bbDo=VbqR{CbsXHfZP(uH)w z6p#_fy3f>5bF!CK|0YTk)zfo)cb)??d}Eq|3K9yi)+I(ono78+WA zwFjpR_gxwFcvHB>Ya=eY1OuC>RD^J*Sb$09EnPLCJRxF(3EWFgV5WLUo2Q4AtiBdm zC3%GG`|w-#UGJ^{@dO7*#EBm9xOUs~5%Ze2tNl?k>|Lj!NQm#4GTj^D{@Z50K@~%8 z^kYFaAOjOh=SY}@KSTq1z}5`t&P4v%a`U5w$6vkO>Yw>#Ky80V%7kZle6;ZX`fzDp zKfb6<00I^riNC%Ga;iv9h$6-`M~3qKVjUa~9K5ub3j&tlI;lD8BT$|lzJS@_a?$ND zvnM++ItVGKNiyo@+jzs_gkv^pl4~gqs-ya5rwK`aarOFI=v(_h3 zZq@>uNHfC}$hGU2$MKiXNVJQ`D7&LfqjY%FpjgRL$#K3y$Aq3VhVjd^oMh0?fhYnv z2*^Q7;0bMpw_v;SyUky<(#`P@HkR-L*zt3takR~|he8@>M5rpcw=?UEm^4=@g z`bP1s18;mpjj7IPSXnBSa~3MC@!HOOwjds#&0Ig}`?~byYRjp59}68~a+wdk=HsZCkEd?@Lo_>&RmxS-Htr z8mph54eJSaV^S6wRU=Lr-3bpW4Rdvjp{5@yjqMg`{^zd=kiQ}1C6vDVX{Co9H^!_( zYAJgBDmLd(4j2%lZ~=ZY$|54oO(p^Jo%X?(i5BsQkUR%wY?e{Rh`D-Ze-p zuI!x(ZZ#Si;b)j-{ad6%C@5qBhz$fOCa+B*eS=RSnCOy~ACt#A7k{bi1pfYDlvha5 z6dg*o;yC-eRdA6k{x)aJVy#Isk)Y=@AH&+R*kZj+;Y5sV&9-hVKO8ylo44WT0^H&> zlZ^Gbqa=qADxWktlM(N`m(_eOb|lgzIZYrS6JW-E^Mut-T@lUaeVnh5M`Zu>AwOs= z*zIq2@aXrhxAierXFIDiA!Lj&jIi&kNV^IB5a}Cgd+&6|38!?RJ|oXDT@G?jnP`R& zd=4gf_oS<3&!hbAhuM0)@R7t8Riuq>hz7dqS5aXNV?NFKO6I_zpyY6*69YK=Mshvq zTrtW1LB@9Lo=) zT<87oPN^vUJl)PG_HlSz=bJwrBAt|vC&jjC|82KJs73SvFC}l@e2J=H${UNL@y7DB zJArrY#o;Nij+o`Ut46L~@Muu(A*ZffFg61^4%cbj##Ue0Lx&#K6M2KUH=@qEDEq>2gmP8jm& zaO*PP5iR^p%1*^1G-QdCoLqMP=ckVW^tF%sczDVK=Ov9VIO*#jTf;s@byvZmb^Dx! zg~z%p>VWi_j^|$Aaq@q5^iIfVAIV#i+Ye5#f63R$Wsy*A;k{Xspc)YAAzqtz1zcmm z%ceqIL11?z8LjCXMI=m1KQn%;h-%)Vh{$KNT5B1q= zfxb9>+;V>myc6XVtd3dNIeDaTiFwC>8S($G^c@#jM?~|Ik%~Yp{l9R-C%m)m>$(#> zU$P;%D?_aF(s$7NE)!^tR$VVykQ-6s!kzzV>(3PH%~#9bBP(3Z;3*%U$kx%HJ32U= zMUVdTkg`^KxO@Q`grHp!x5m^bk6D5VO8#D$2^u z0WY)~Z%-m$mz5Jr2vkoU9i7CpHA&f(`v0yo;AiC5e=Pp6Z+?4fO}tX_dTB8%1gaMa zNhWOgna(te>pp`N_AI1z1JIZGZ)@-eAIt`p@`ms~9qhX#wC+pxI0!wc?)km$AJwUn zmv}q5ANfp+olT?_n{uQ%TQd*ya?Ss4Squ%{y#jlB-Kp#KE#3;O`;tD|qm0c~%)LlZ ze~}j3`B5%@5!dR`I>TGg=EZ%{@7B1~jWY1Fsr$bJ-{lO=7XHPbum1$@KW|0?!IE+I zVz)fryr zT-57-BNE!vejR>bIH|zRn09p>cF{|@82HgAXe;{Y__VK{9u`b8v}qPg#wT8-Hm((2 znCD9jODb_?)hly12zsVmp)vgU@k1UO8e09V3+OexO9Bdnt_&UoJ|sXZ}o;4#^!6DGG+;CRwsaYp5xhs085dM4hFT<6c8G4{MD$M+aGZ^ zg0}|Fb)W}W%x8)^IBn+3wah27d{daszAu$f0fKcZtJM^6g_|i+VF1h2S;9Q_G<}y0^DiB#U&s!5!!_n;p)5!e=*)=@RUAIC*r;D;RoH*0^E1Du zF^SRaT2`J*E`jTX)%))t>ULg+!TC}Vp*NBBdk)#~MNvP8(|P}bEii4oc_WHwNlDFB zO(^JHQ?3{I;AQ~3OX0BJ-9yM8Ljq!mh26o(W=F62UY7jEMrKEb>PxBPILn>u zaZAUVHGMtgQ zI?s-dSNr+v^xZ?0SHqoi*mwk6myV)x-oNWbi&>_UTE{!=I@1+-)8yR4uc--WNY{CT zaq&q>Ma#>Yjz@ncYsd5RjYR5mb93W={IJY?xH+u=rYkIKVc}u%$??D5czf5GEh&?D-Db-x$X|`rjIWYDEnohPrMN&jQvvac zltpH2tRDXQoYf-kg6m-!+iZ=A%=O<%1t3OL?;al?k4Hw=C_Od#c{(wcLUeF^US;yp z={yGz56VR%Q*req01Ta}eyI`NKIY>(V32aGX?; zmKUG5VbRelhF=3f%$*Imm^G~Yo5MpASnDLD0kpOje=4)VXf`<};c@HPrQ+dPv9$&! zUbu!+};3bduJ#4EFmc-E2-I$#qy6W zB^4D78{7D9s{5BjRQ<)sUj(_!X_^lsDZqG9u_WP>lDcv+@KDl&F1n4%JPi`?cGU3+=>?sg{8A~*;^N|a5tv(F>~GJ=DC{l&Z1qRaH(wtrY0H&^ zqtCwlASFdqOr6{H!O8?&jV&o*41CCCMw|O9{sm4B3K9}wR5BSkz~T@$+5Zm_aN;-y zzkUUam(6P4Mt4wZrO$5MC8>&5ixbl^pCRIZD^Y>^#BI*+@^@lyZ6a?^W?pPIu}9t&S)kx|&Hn=SUFwZx?70Dk+^_96fV z8Q-$&RV}RaQ|*aVDvJtmYc(EA$&a+N``D~ln!)3Cp#Lmov{kf!Vy?YN!iCl*8XwQ_$_ua%8;JfJz>7Qa58*NKfq zTdXmOh8L`BZN)^#H|~Nuk+ZWSxcZYDy+4sH)a-VgGDb;>xABRAfr%SPo#hDl!z|px z!6VCw7#D~{6MrHhu{mCASc7}q{t)K~>?Sc#aUu7R2zWIKwpjlH9Ht)I{p!ffpiHHs z9GQey|CY?d7C02Bz{69Iv>|nA$!U|pu{PG(tVy5uN0;O^s_tOLCtEWVI$ox6jOs5D!j?=4bTt(tjY*9V&kc|8L3obP8ouvkxhy>o3kSSgH-bO$N2 z#d^mQ9v$I8;S^4*6nKo%KuXDkqMX)|3`nS*r-y$Z0U<=S1=LZh=$4FNR6 z;yrU`_Z{-H9ST_k_?PFOPbp_}P& zS#_xsNpcn3Z(P@1EW~rR?fiW7dx~ter6<5Q_7dv~iOr30pu7D`0iBy&Q95z8&r}RI z)!ydzG&|4i+4l~}sh%(xn@n~EnlBW``}z6*Oo}P;bicuE@>3Lguka&ow$Mh0GF?jE z<5AB3&Sn2lhwb?2-tlnM6RLr{R+vI0s#@an6bJDjUf0BHHgPoE|MUSMsSOXdi)%s!W~;BVkD znc#zA3xh5OAxKG4uR94ySJc6}o$>ds?2!9SYHrK010#b__o z1zqIb@$BRsfG9?4`~H3HkROv-_3G1f=C|ZAPqX@{kY4P!fVz1`1n+(-}@cIjgFUs zyQ|zzGYIt&HK5Y4OtVU`TO?xQ!bpVP>uAwHSZ?(e!DMxQF%@87EW_o z%XFXMJR&}P`lJNZ3zTb&M@Q6afI%_O_0=>h-{tP8LNxKpY`K)$RL)7IPrn|nhwC~N5C6`oUq0enY1Yf}xZQlVBE!E(O2S3Ef^+qw zsk5A%8jzj_9guJIcne=ZDPj>yRjAi3vb*ay&I_ylk`ERar94bQbrh z6@#6yodP9Z?~_(E@gD2C3oD{j_*~Fzz zvE8a9!{y?`^caI`B|njY!4A&4jk=y@TBYB*69l7Bmbj!;-RZ(DpVn=t+rPg?Csd%M z!1w-YKbL69*>vtmtpJ{Z{$p`7FPrFefy#CC7BFj;3&;NC$jG+_h3e6==gqD&T_DAD zIOq!rJJK7xt`d;f8;)Z(SGoWy6PX&)y`DEn7zjRMXuoqb1+-K zv4Y(xxYrQ^XE#UL)?`7P=m_8=u<`0{qkVbh7f{T3yX~ca?DF351L@l$u%#z=!ano1 zw+{^uPJ-SUi461NeY%>y_;=1I#asRXu&*YnjU+9j7_fA{I48}OX;_@+^x|_`7R^;? zn5a91oB`zN>WXRnucBa%UbpI+=Z)4OmvSW7c?pt<_^i{Mj#tY-DKdsWX$|njR!*HO zi%(27NhkujzujiY zvOw?>Q;Ax=#rb$9AT(|y{T)s=*jE-fyW8O3hBz*O6u6aY$M3nNenj4>f!N&F@R7x4 zQuD*$2Pb;_0M_pVG1%^p`7X?(SgmN zmeb5Qd9d0R4BrmoLss9=J#-w3QW6kKOfTfsP`#UqhL594j)ABWOiE+*OxcX?CD;Jg z?O%M6HjbS9M=Vz7v@hK?SKvDo3cSFq4GV!|6O7Q%S9YpDUdk}ca10VIYpj&*7L8)Q zVJ`h)&>zX7mjp>ZYQOp3X5H=Ci4GDD0q$%#fu8YZ==lkDImxix9-Y%R-NX;tYs=NS z-JW-vdJi8H&&a4TQ)Hp3^-$JBShW8Slb@jP=|U653A50 zcBAak(v{X*T>y}1GQLFRXIz}ci6E+5$ODE9ui5<3pLQ)!-RR^sO(oSc>^E+?nj}T$ z+xUdakKh{YlZz)}-*X3!u2rKMQaCs8%<-9C7gZur_*OkXAg!357flbyysiR~h>(8n z`BFIo@uK@awhpr!eldYJf=l7`@rl2S<7tm5r)x|YrW10~MeW025Or+sBRT^#U~hEV z%a;!a8!)wNr+EKR)X+Ig58b6 zMG1i2q;OFy*KE?H8CYyM&3X$7gR9s3eFiY!JlS6$!8X7|MdQPQ4Gp3B8(x7^-E~9c?Ohaj?RoFq3M#A_av(~@1d1O}K0DJbr;}ba z`efe~o(x}Kjdv&BZdkER>W$BR}1qm6U|&rKx9g7l>C*GHfB zamrOK=E~)aTmzfx98V{^Z98{90D1;|USpG5!i!T!^_K__C)8Wp@j$wlQo((T zAklM<=udgv)F^cCO^oDsq<)MbK~MJ}1IPVQCBt-@nkn9kGm2u3ii|RYU_yK1gpc~7 z?N2K}xaXAtdVQ($*j2l)dR&7GJ5W{tkvz^pt>7W ztk&bK|HD=)jA~OLbnfJ`6TYvW4_|5rTVbaOg={Xox4u(OUmJ(CNzM4j2?p8c_UDA? z4)2=hdI4ihg|ZjwAyfJXdEnjeB&OJoMD^VVb@24X=mn8)66@9QMTXer8NKJ0^AsO@7BaI z2DE3z8#A#XMIHKO*ozncSs}s0~B<68KJz{bf@EPR6vWda?v4a z*=w#mRaKeye@bJVmg(lAUaFn-DDdtv4hRZZRaJ0xZ8F{`(}-93#89KWkrCvSW}$jo zDh`&&@t>s;us79J0;uc#16-3dx%t?Qm7i_T$PhW*OigZMJep5~BKYB5)o zt5ga+-OU7uGF?yPSa=~8O6KC?>ZdQ8w%h_*i*cjLYjkaW{2SQlkxYdv_*y6vEqS1z z6xHHQqnpY&8_WTEayM!*rg2 zN&OMR; zTWNqK@bHpF+^C%{CMIjE>jOQIv+wi@jrh7pzfR$peUO$*l9hSG*~4oslxFTa|E2d0 z0#vE(^YdFOTQ6qsb|ZdwpgBe-=6$lq(Dc2{1a zuY#xLCTT*N5arz9 z_F21RvRm+cF{kVeLLHhfl2$T{ z%gFP7>_1H{c-kI>dipEMH?>e>ay>-r4g4N}=5tD_UgDV6$j((6+gfdwJ30${!lusS zqs}KsI}x{_1GXX?wJL4zW0t2!oQ@d+n^wJZ0a0WU<(l15I^F~SrppmZ*b)MIr=HC$ z=EXMmMD6=~wr^%tdfl8vf4uo$uEt+HC>%f2`$R}P5=(ZM~2 zBt-Qc$9aB_InsqR|D1JTMLKnUyM<6fRA7?fIdU8{CVAO?x)5v(xy5Apas?6F6eb(0ZHGix!KjcbHH%G&orOtYm~>QF?dD zC)?(B{mB~0VPsTW&?JcoLT^GoAMPZ6YD`~u8}nV~I!Uk=s7g5>X>4;qy9Gj%xLv2x zHUEdZb^81BOOZZim~vI|NiQShEifq$4u%OSGfu%{APQL`oG?jq;~i&*_WuZJiHd`m z4%OIn9)En0=0;xQuoHTWw3z7hg=9AT`#HQ}qjPj%kZ$`bFbRU1Dp>XNvSZq9HLM9` z6NMds^4&_((*{ldEaX<^XA)@>wJ1gG?Lnfn4Sr0s5S$EnfLP}|9#$>?FCXGO~#z#?@!4xmp~*Z%JwS#G4@9&3XZC>y6B z-=u}I?F83h;`?#@Dn;jNS2|3ZI&v4M?Rl8@#Rg5Ax{cZq_T(zd>e+P;w{g1O+L5RZ zjn{&{sUc4OS~;yRd8;LzVBGEp6;|MW8}a2@*Oa{{qjF&pzGq|n=A8Js8=HjI$yQ#Z zk#-VfaGE#vs*b~nOR?@EJcM{3x^|mscb0SgcqCrm$QbbR zW6OE}=4_n>&fWdp3aMYl2Ua3-h~IXLPMptbH@4+l-oc$K%fT8e!S(49U2K`BnD;~D z!_z>H2&4~epkb7i>YVRI_=w0)uQrr#Zs_oL*LO7cJPNc-q$bL#Va7bu+__ZQ-`j)8 zQdz1|yUk5Gu@g<35JFL1KBqevr9>)~H7q2eHFj!-tVFZM&L9n+#k^EHopa&#cJHd2 ztU8lL`(A!{NrShp)p6$l>v*ANsrdagwWw-y6HhQ9*Pls}@w@fYR6Z4W2JM`7KmSB~ zPXH6-THF`LS_VG4- zkD`;0-)gbG&I$PUIe@GsNG(e}KR?gOzzUi0a9Q}Brr%u=R!~zdTL6*iW~b|7KOw;x zaNMQUbhhtEXW8CS3ZGT1LvC$7;w)@TzdZW>BH7!^>2{R#0fi=N&vcz*uO>sdd$KZwO2adldg+sMQN0Ua;^LUsD9x<)BJxa4vlagW^gl5T_|$F zNAx=N-y-qZsuTa^M)MkP`wZ19HaUtxWd710W_bm|*nx1zJ3h@=pmS4ey`nyv%+oK1 zmyrjgTpiIJO0(!0;un z$F5hDar5>RWq0gW-Msd+&)X+(hEgJ{=0hY=QBqd^$j9exWSCc?z2bIpd7~gFhZTh? zw7AsnnTmY0RuN2cmvR93ZkNJqxI${KOM8r zY(Lgq%&MT4PMe_he$;u|F65hTvfr!I>vpR%n^yO{zhcRT97(UI*J{qA3{NbQoTsNk z{ajdzAu9X*K2TS{(fA%hd+hhUE+H_PJy>aJ_;_c)8$g<&_`+n|Rkk&=6@{A-gH4na(Vv-4{u zVb`XOp0-AmCw7;!tm>NTGId9QzUb@gzdPjP3x8&9SpWTJKerI|?+DIKmN(o_Rbtar za_1k38{Lkj1Y>)5CM3z6j>Srw$huOR3JCC-nra2K_t|1fK&uu6W_m+ILyFeYo`H#tyntS|*O@;F$arhPA|ELXE0@jW z*`Uw8PAXf}FfmE93+I!&d(m2*#CSC{_d)7>Fj-UEL8Gh~Ee*LNYS5B)SKoLQgkk(mGD+Bz8hJ|vLc@69etolwH zUC?Bf*?}Uusb7qWf!+$zQsu;FBs@+<(P+X+kjpw)^Y*E?T+QQg|91e(_vj1q1xC@> z+pYk%0FGv@+AbTy$9%S(aJxT0D10;ZI}(JFl%O{Q*=7;_nlDT&_H&j1B~;RAu&k>? z1t(&7Y~5}TSN8{i5~~142|lAofd0W;-JNeG#h=IfHE*j+B3#rgK(NI7ZM{@bw&?sf z3pk?yQiRiDlSSeNhxrT*1}WYp2!HE7&`Zb4$>DRD{{(Vh26?`@E(j%^QHPSo?wqP?{$8R zy2;-{u-DfW-dasft_PF3!7KiIlhG!IQ}5IHoTY(GJeBG+w#5M1sb-7& z9zDh`r{hVfl}1BRQIRT0e9bpq?m6s^m|@{ym1sRU;j`PujLKp=I$JMFRQm$i>j`5TXAP@TmW^qUc;@f2nB zoQChc2vRBB;(+8Jr|eYFTJDOsf4I_;nD9xX0Ju-|iJ`y0Yja+k?GeYAEmpENP(YJZnJqm7-KkPq?&Ah>TU^#}* zWLyeXvWRy%0=&-8fNf>*0igL{YN$*#)ub@nRRc6-tpp^is3v-PttM{IF>0Mg%`p-t z;Dl&o(s|2(njo%S3a>#y>;lkL#C5ftDT;l~TnoXXn1NlW;F>4#XC9~~m5`L0ESfZ^ zbsWZ~u%?#Dm;l0dz|SooFydv)H0q|J(z#e%FAOOxO!fCq!4l(ezA0>R0|+I|CSyXJ zwr5%D%r=0pK|mmWGSQw6B$IMKC=?!SMdO$btdk9m4E;=OJ>o)M4stqK*6W&V1w@o) zB@1Y%+ryFlY4hd0WMH?W>n9BW+V;Cq@6Q{k0+uU_b#52G3hNw~SOcM8OGIyo0l^}~ z>3BK2{ptSjY(q#y0?oMIde!psqE3{gMGxsuqg}393XpM{t#M|cxY8iaMqQ50wbT-X zQ7O~Z^ZV=b7V>%{_%bp}-^z#dbg4#^$L(5P**Kvuf~c&qF_J2vN}5V0*|IBkEAdn{ zV%7V_Q!1Tv^gcLds=|g3EW2a(p>rK-HM^YHBsLZ(zJ7cmb(5rD%_1IrrbWzR|}MazLt@b<}u^ zO3Lxq_K$zZ3nc)Y7U=C2zQ5gy9?hp_rW+Z!0phOL+X^yT&Npf%h818lDPZxqj^{I< zJK}g{SD9s#Re*A5xj5s|TANdCP#7kZw{U(_>Z^4c%Lkr;xiGDZn0aXEAKlpo_dvWgBr)f=o0wm(wvXeFzu;d42a!qdK< zw*?@jXjKIVL?iLdptw0W7HV%y-6yXoP~WF<|5B?lu>f<^n1wWfl;-om0C|_tMIhqA zLQNt(mZ?v2?psJ$JZb7ElKD>XUk;;L@+ymDm+CE9ZZJw&m7X^=q-s{$Jz;@Uj40sa zOabixi<=%#DBlVvRjcW|+$XJOhfp)?@l46;I!4d?Z|=$y2d8TtGAMkHA!hcI2wNh= z4P?^1tGvwxC17PPEZ1x^H^jj~^*F|mNuL4}y4HJ*H=WmWQ8ONO6-+o&LmWwT!#0a~ zYbsPbncX;(5Dw3+$ayI)kF!nzik!H@Z&lCy?QwDAhoGjaZagBC9TRE-WpA7-g@AxKQz<7@XSULp@k_Z( zW6c(=HEwjC^3mBZ#Xa(Wn^R&KKL`j-ttNYNDR+cd0O{^{wQX2?N~6J=C9)&Yum`f* zOKSdST)M#tHlWI|Sk-JXp>RCRHFQ{gtytd_{-j#jx%@s1+^ba>5z#3?Hz(cWcvfY! zknqI<(U0465w0A%Kv@y@+@~-x2;WHk;MbUDE~vRz+Fcm{;y36uy3hyO2K&Ql#Z(6tm~O!>8N7 zLXmh((twqt@Z9SG4Fh#BvcLr5f%I4<=4aG2xm?lIIk%%mJCSA}JN?Uf)k|ZX_a-e? zJPLz4DpiE&6FrpeLG3S2x7!fo(PV?IfFzxd^ztA8aQr)=heXIev8-i_rEoyM(~;8VWRd~o$^de^JBk*r}o@=cd-LgTu=FT6UJ^T`Z_&O^#vxwcgoq8}{& z<-cPC$G_`ur7{_X0FQ7g>$krYMtXd@kzovEHC!w)i`!4Lh{?Pyb*TTx)jP)5^?lvj zZIU*2V>Pzzq_OQZwrw}IZQHhO+iYwn&+hkk|KB|C^Euh)?6vorYtAvQ;d{2(koJJb zVY1h2jO{n+v6EVBFhT&-@G?cn$iPlvjl*HX2aCnbKq*6ry+@k|Do9tE+EY|LPTMFkh1fnhA82qZ2(7 z+6Ks8+dz1VYs@HZ(%9CJcFsqRHW>7y=Ks_CoB91~9wIP6pkPXlzXC-xP)%KMJwKzN z{4R<_bP~l%wW*(Y61-gRocjn$MxR-2nS+pX5%kAou`m&gy2ZaSu=fqm8wsF$d3`Q* za`B%e&QR(Tj))MF6; zRNoRGdq+JkB}LckU>!6G0wOi0x)%i5e|j4rv#*0eh`v~9`e3rM=z^Sr=3lA4(SHN~ zRwl7j$tth1YsH_|+{8BysIK)eR39$ZjBnw0zzE-VQ@lZZPOu)k9n1Lpgju%6DVtxP zUXr7Dd$CTj-+H1P|8SzGy1i%!J?%|UfUT5iunq?A2HYN5ddSVpl%gT$)rpB6Qp}dA z;C*{~#YjZ3_Gh58_p_}5hziF?_=jC;jD&xM2}X#N$`T<>!Qu%V=uqi6y?5FPdI=@_ z#?xukS_P-LU(++dYX%(yuBWH|VNJx0GlMaPhldpbo4Q5DZmVAzrj^M!w{P`0vCHnS zZ>UP<6_T9JXNr6}K9FXb_Gib44dz>$nu}N0;GB~}jFVdfLPCp2`|&@_0SxQXBH@Ki zIlmse)5S6k@8=glpuXjw7lw8_Aq7*0K*OJdpA(4H`2h}xO=s>?Rn^6f_OyOWb;IR+ zxw&x&sgibe1wou4!Jr#-O=tYHzP4&MKfKCo_Y{rj3AkQ?z)%GfljH&BpYiz3Kac5n z`&a2IH#^)kvVoqQ`}hF3?hpK3tJ!=WI)87=U3F@QZN?+{?8;1CClzoLg zw`ZNLrgdD;Hs{n%H~_8IfaZOl2ZMR*}2H8bmcnQH+rL5UfJ4$xCYLYg#l(E>M?Y3DY_uC_`y z?nOqMIvNuL9c_{3O}9s^5B3}$8&h#}OC5~Dvi8e3+R@xI(7YMf+^gR!7dcvKdscIp z4dIv~$l}h@II26k{hgqGpITsae|z6?4P!q!u{@`J)bhQoZRTQ5IfC@9Afe#px)ks9 zKBKCvIbW6F76~5Y)s&jNpH`6e-dl_p@74a>lkzvK|5RB2S(fjGf%D|Y-w3^lGn{?! zN3!~n=C^gr9YUt1`Xu+L)i&*7juUG90#%<y!%gOT<-c#bnj8@;P1&w8{-K zy?a;H_0z4c(4#}fn(N+HRe{?pZ?`*z30LpP_KtRxGrV$djAvR38cJm^(@qZNPILNQH?<_*+~rgD1FM-l5%ruD^9~lFEW!$a3#$;2%*>b~_4a zNJwU0-jlu~9a?0wZPkYy>-GbV5B8a{+(=kOMM_M$(q2fPb*bAGcu-fdc zp`4<>e(f6Jxv9Y@dq-WCUXi|OU@^s4K2&<#EnI-rS3$!#&~dY^VK*2}s1j!Ek@{PI+~!S}l6)CionWpq{yxxoTVmMoWf*<$;M~wLl!Ag1YRy*g|7iinkFxUGYu^IPV6q}qUH9Pj z4bP)*)Bmt=i7hRRsRZ~2o9>>}=HWbA9S=B_9!r|nuG&$yLVQZSUb zN`j=ps?3XdO~}phD3^c|e^ODjHG2~`*08^fv;bFL@wV$Bb;=$#4VNLY2?W4I0Ch~G z)rtiMHulc8^u>wR9>LWkP$m$(Ma#j-WO)qHW>E3uBjs-=D9E9JpZ$4-2kb+$Ae7u< zT}8YNaZBl!>7^x^{K=7cb#)|G7vQumgkmaHsnb1QQ~tTa;={M#~qAy>d)m<#4Q#2 z60o@kyj@}o56f|BY0JDFLincdtpx66^t9ANwj6mE;aznzvK!Yko0b_lW*VNZ_Qcwo zBr#h|%{l^!@p_tM5zlE`>{EzTFjc4e4`*ehsG39f9^l^>154koS+iEk-)cRiPUr>} z^XK4Y&eCmD38p1hQ|jkzFqb{DzYVRuTwgCV=373TJyhASCa6y4m-I zNZk8q^1LzlpMSx0N-tNRYR*@|G$No$r$+<|3aZhgSCI>#3c0%AcTZ?ADfoD29~64t zlo&g-)Xp-HUGd3h`zczhehEgRrJ|Dm^m?Zb`wETdyW0 zSqw=Tttc;fEvo>M4g+^=3S`7YL~C{0sR3}wx}P~fGECXJ$j8d($NMF<0*Ks^DxPSY z5CuJ5&MG06DnR2fG&W8V%G3Vz`lp3M(Kd<3gze0mN=KLz$;3OG5yaF62&=p?aSMSC`k|%WCAz{MZg;bwIf0ZMQ=wDK5NZ$dzLFoaLE>m zQ(ChdHo^JF97qF~NpuZ3T7fii3@+Up?Ae5~)$t}?gYJ(tcMXJm)0c4wrri=)Hp#lp z@R2AFJHtzSnJY_-Inyrx4A^Ddy`L1gES7U2G(<64aW=M_GT9`&bznQMR?gHcQD85+ zJH75&Bo*PUaVGQ51DXlnqt;Dt%IA8kCmtWJ$VkmY_MTacvo|l5ODJbp75+6+hDqwi0vL~faP1g!>$16omo1fn*5=U{gvRStEipTO9r2H#uEM zuA-dLaKY!XbSCH@+tYA%ifdzk9#Wjf#;99gVqv&92N}kVjMaH{L&wHWu5$YQCUmWw{kQ|6Z3^2_Us z3Z#+N(*E9o{vwfAS+lyXK?ZYRLP>q@d@aqdOf~%|C-3^w^HBM3FJQ_MRmut52+kan zi+k%qhoz0)mP%R`Og%n49Epx;pOh$0*4~$;p^L;x51p?bJn@%70+Jn)rIG%85WU8Eu!%#rp%~@ni-!3bTO8Kt5)WeHuxiRFqNJOHI^9 zNvTVb@GaVr=Slw8L|Ni|Xgfy$#X&483B_O!bd`Wp=K#4|z+x@;i7aig&G|$WMDm4`uQ+uyj z&XYy72p!NaRH>HM&!Qpo>ScFP@ z#j7H2%|MSHQ&-4cT3SQg;C5R!)op3=xAJ7hdec63A?<#F)ka|iBVE}7dcNA;a=GT1 z7+Ik!kPxrjkqu0PEXV8dwAvaE@P&)Bldu~(9)Vn$w|rI^^&@SxWXTto+QZMu-=1X2&n_G{l0oOtE%dl zE&~y5=Il`!4mt}lXDyy~|5>kgeP{Jv8!d%*f%~hwpt#bsEU`j3k~F0?p*36wA(oeo z;tp+{#l zfBEw!4ezo~#;Z>giCI)a!wG`46N?MAj`>SsLjE8H_|rds@Qw>QX-^6QXipACXir@Z zZO=KH#)7#(_>NvOqZ@)fZcujda_f7Un4>JL^1sj4vglSIwq}KYgm@f4m(`9| z21Q}Bgpm*ACQ@lxK+*mEkv-10vbT3`St4BmJzdQYTGldM=LBKvY> zy%)%KaCo4)=`?p{wQ3<$U;H-8=_@{n;Jyhu#r2x5HqwIU2z_iV?bNvH9NaJ;qc|`z zHlc7tlX2cL+o9on+7`EpLW~4OR63w{j?QEfjUq>=WZZPIQ9<*?{F~k6D}1Ispnoxk zJ_UgiyVOY)^J~3;&TbJfA=k=x?rFSYELr%m03@nBqPXMn} z%muk)`BDf+ls(%u=&&R|w|};_i~UsU+v~TqLGPZOZ*HBJw}sClvL#sRDwpT(Q&cK4 z_io~p(&f{Mbs9|d2eKM@-s{&QSbGA$@#L2Re@lhD9bT|X*=MPxmt4ZXcXES<7m4KI z{#`21+FW^!oQ0mf7i|(@YJ6Ai=(_Yg7u(cduQT4uJoNR;rfVM1>1a8U>f7lZ02nV1 zyv6#GB6}6Qzdse;ZHD2cTxh5$>x~WcfILPgG|`ZKe@e*#E2Nt>sK zZ0of;d;Cwo%;Woh*we*|&7Z)z$D8Oqc(99ID@7;;HUBjYvTG*gjPb>C-Fktku;d?v zLih!=1GIs{HenH4JC8(8s{TLs;dy*&lT}V=sGY{$K1)FNp?13oyTQmeNp?f3Y>VUg zl|!HMj}Parxjh-K61lvO^uKZIEnJc&u`^726oRf6`L;n;P!* z5x@N;i4Wfl04}5?;iu8z_2#7%o4nTkysx!%=tq!^bidlhf8ZVvTV@IthX>538OJ7L zjL?wUfU){{ov@ti<7tlshU)DOnJ^kZNB04QkMI{%eM+4X1rggk%U2c!CiM8ULJB-3 zJOCSHIw0rq?%`0A%~xkM**Fm)zju$tQq8at9+gW-PwyyY?{(8JR+q?z>E(}Af38U1 z-w{ILvF($H3Cyo2906OYk*#hY92~6N*dg^9YpBN0_M9DYG3lCImcWBtA(CWf(^bK) z*YiszlPf+YWlfeP94IZ#Rz-_~X*{oE{4ruFUo<-YYTFxyJ+IrHAUp~xs(F773KIDg zgwsC%5ae?n`z`M&D$bgk8WJJ~r_niu`U4e>y2CJ2Ms{PAO|HY%BBHM#mZ*I92l zx45|V42@=S3wXcg0i#L88zEQ>VKVln;enyqTxkPh#CEif2Je0bpqlpm8~jf*9mzQe z=sY4U-tw}zFR|ZyImKHusw|#U7uW#We zSmm{N>pQiMKmA%4K0nWYgDWZ-FK&eTq2xn~HvI7+qgY1y;Xcuy$YvByUzjpZG?-jC z_ygxQO$;kSOp+!R)P^}+Hr zy>5#AexQtl*QzrbFE(37#XHo$9PE0&mSZ!TM1aoeUNz=b7K$l*=gasqi$JE~?zc{w z$76-6C>MENja!UONLO$g78+3rsev05%KUT!9OiPEzDE)q?%!?Bj2Kv)&f*&{ES7!# z{dFm5dH3P@{y|kp@-muF;~TBa-_dBaeiT7X!Dfwk9L-ki>C?hkJSNg*y=`;0_ zyo7(E3mFBeI8hnpu`K!&F$Q01Ix!k;I4^EgsaLe7n^Qm@ckf`wA;smBD>alZ5dW3w z8*T_Kvw>u>-@9M#5RtJZy1|j^iwOi9iErh864(YDJhgf~djBuv} zlEy}5>)EI5BtDD@-Iu&Rk+5|OiB;6QyYrCqpeAVDBFS*#)uM-#P$)wR9gRVja7}t7 z1vi&=mz`X&w4l5o_ZFj&_X3DF)HXdIXEt2C z9&UTd9}O?!^rz>fW4Sv|T_o4J5Sekza}x!q$5(lvH$2)x$}g@>>cXs>0h% z4dj%SkFVp4tBX|1O&*g(&QL&zY`g6V#?PGmq|{7YxJFfyor0mj2zHmb*lzh%0a|9f zg6W;FI^NiX2M6=DRXfc( zR@KJkl_zA{kA@yAl_=E}xy>QRzv8YK33?x9(?Righ~D~R5WmGb@VKmmL{*4SIdXk-Fh-m!@Qe(}iBduGXKKFt&xFEL^&xZ;Z2;|ESh)zhLu1#Ii_7*st zf*7CAD#{fIdf4UP4Z|arfUt_Eu0ioEORUJR%Ra`FP#*?OK3{$2gssZn{>jG9Ip(^3 z9ZcGW{BSm-z(H60if=CpP}>P`1v}@Ta`Byr$TK(`W53gK`~X0gd~&33{o#)c5wAe$ zj(=%E^Y)HzxkmelaS$%^_?H?Ej)NN**ON~v3R9jKw*9rI6@b?J}|EV?)n!#@&NW_pt3@BsDKL`XS?vE4lu8mGv zh4lJOm~qsm9xiEPZj^S)^4G{5ubBMUnk15F^-p34n%xdC+e_WVj&wLY(d7zl6YT%y z3)TPvnm@zTX)#&eTB-bU7lI`e;2Hc|9=8qc`X^xe^iVuqTVC$yS{~Oz`1638vELpP zeAmT@(zz_V9?tR;s+k#9nls@RN@t*GC)^?XG~koiWe?~**Br*(oDxN6c_2T*kh4-D((G7b8E;Jci*~Pz zk}{WUWx6t-tj3%Puy$KT@3bvnO0o08g)ls@o~b+kexRh6OU2YR6WTtpz3G#``~uZK zY)r9futm9f7q3&fny)X~Uo`>>`ZNAqB7EAn+M}c=_Cw?AeT7ydjX_jT&{w^u*d2K( zyVXY1dcF)qy;tLt zeVjXb=Kx{Si*P3m(Nb76ma4(W0)c-v&h;$WESR9_t(#EM7a;WLfCy)6*Bi5si6c{Lw%dr8#& z#!GE$w(Ux2=j~y0{rT%9jWwt)3|hHD6W_l>XiS;)?(8lQ2#O5tj2?shi{JzT}`f~D|9n?F$OYa+^YvWcsrka2V&n}QobV@%XcXf3YpM>pgB-lGz8jcQe z_K}pB8mJBoqfMatZb#V}YWYoJI_|kxj;4a4I#{tisw*QQl8Pblx&zZg*m3UGYfu`M zOeIz#*=F_x)zGy`9^l|i0A=O)r;9S`;Zz2tH6hX5`ET4&`15ZR+C4_m7!WwWtU3{OXb$j4e&H(a|)$AQE3yt zS>(Y}#UKLNABc27TEP)*o=Nx({UrrCIb!9-1%c(+*5_q#WT@~Efbm-KW}&?lc3uls zD%)17NZnU`-#W^Y_{EzA?;&H;<_`*a^HEc25)oTKB}g&)7zPZ@hp91aFV>o}5ZEwr z#u4-EcW(;9Y#bb7Mb7}mbOGJKV_a99CMA!C*ppcJ@dO?U3l#J&YId47>$Oqre3TU{ zCcP)-b*=m`QSdVxHvgx1(APHLyr@uGAkcH8-B6Wd3dBxX8!X@)Up zu)JYmdrEPtlP3)N-QW2I`FeYWus51VoPl;fcut=#bc$3lVZxIYjD$$hL&&OXo^KC< z_(!+%{-hT9d7Z2YPD(8YaXu+mBN1Zx3Coj=B9V-l9~=tk6Gd{$c}B1!HG8i)>i1^F zYJV6i?{|auUQ;d$y*utvN0TT?G|Mjk#Hc~r0L`J6nYM?Jb8)uB0WC;n9 zn)&uJpo26&MLrR6OgNbS6@o7DT-WKLfSWSuk{o(Jkv)POS_p@yAegfp#Zmd#{; zMzk4Kj1H@q=iu>2!OP(oZ=YRhWkMO9OPPLS691-NW%zBZ@yHn_(&dJgRyb6VUp+` zFV`#jZw&nj{Zr#n(-Zz7xWSRp*eW@+n`h6d-kEI5FPc~BW6opth9YzY`|smD#VC2Q zC7Q%B-)0c-mQ2$HQCmOOQ99n-LuM=$hgvso*UKS!`xs35O>h#2w=ziA@4H4!x6;50MJ(Eo)gdJYFY%7btg4 zS-x}cFF`q2w7U*5Nj6VR*mrDzeNfOeak35`2@@olUKBoD4K_bN`q>kFXVNO3$!CfE z9(6s<)Y#VYx|PA#u~75mmmM>ATT;}|*1FLA%(2fRiD~T2GlwZ1}xNXvclZ658Fz*NqLqdr9w>xcAsE!4xrx$q^^oeSUtn0|c7qPfu(}WzG;4 zd%)3$js#~kG{7$ZFaxA{E{7{0Hq}i@?n(ZM{+XFKKgGs72(}KcO^V~{XCVdjeQObU zK$FJ|V*?fWZ1zZEqs2(SaKDEW#7c^X9GmlP25|M`MWN;PiF3>|&M}JhN>6YXAhbnZ zAW1o8Yy5OFJd35^oZq^&&RGx`SQ{SY$rAMNduUh-b57iJkEQTd@s1G+#DhtCq$`VO zTVcb07i`_$KG_agu2-EAWR!b6h1HhOv+nBl`lT+ek%%gi&eoTnaqwH%7}1d3Asb_) zem>25s|E)YoQHO>@8XH=+G5Uh?_vjEFns_`b=@bDmM|tsIQBZ6NchfR?pAwkO=FZa zjbgT7XMM%qj}b@gfFfRGZ(AqkWtJ@aPY@g`$2dB3B82N7zU$n&Y05ZWt1n;h;=}~` z6~TGop`cJ3yG1#1H>Cqp86Go8hqkKb~Mf+A@qrSiGN#E^FI zdvxg`M8HLCYiH<~nBEkB0!?TEY*o#m>yMp#J`9-&b><8K9*sUPb^vd>@_ot{C}pDLG;`oJ7O z6qi2dl7HxJcW2U#zXQGyDhjixATj0lMkH-6$;Wuk_7UpAj)@cSYzCZHmysdr=WwqOf zOedqWA0>$QPdo{p{rZ!aaVCuLezCa1eXWZp6n2Dv|32cbQEJAm$z682T<&5mxL{Lo z48Paj4oio`D^<#>JxKH=i#5D)PczHf=$X2@9i&W8dZ3}E+cw!J4J-a$Y7LeQ`+*@J zEfTFG%_9-PYslMQp?si@&gTA8*grg)E2NDXjnTY!Dl9xF+SmR&0Rue}Y9eZEgXhlZ zx39`p7h!y|4L>ElomzcviC}mHMG2n2>}*F!{3h2H6=n=2{TlT8n-CV>?dYlY>fsud zR$Ld}?J7BX4E&}8Q!s!Vd?SlMHXe}zc2{(Kz_ zY0$p3sjM9X`bjJaa|J{`*e)G~FYaC{H~-==cQom3Xk9A9q1eBBu&O{X@N~Iqzikx1 z^;?D)4^F^!`z@u*Eex@F^%NQoI+~poZ95w37_-4aYgG+;q+E@bvIp`HmNLrw&Gzn# z?p+eq4AMoA_q4zX7&Ix)1(YVfxL{m~>|2#iaR@VVGWlkQh+8lc8t{a6){DvS2^H-tu*8 zLVUjGip}!%%AEYL8i*$Qv1|Q}(suRciazJI~3Mel08a+uc*$5vV=;g|hUGtu6^MCv9fm&U)Wf z^)(rT{XzTWepb)L_y$r+bZoB5$2$0q(^CD4(`tt+|9qSryzo0uT`>lT-m*XtK{f;# zNT`o1zU(?A@6>ngb&s!Tcb#cVYHnP02Mzq|qHoY{HPH4fg?f;moV?->(BQw_Zc=VZ z?~iG``D=PO}}z>EqQhZ?z7UsJPw&>@ogo{rLLd?+^+F za`@{>=&x+8KT|%%IQ|CjB~mW!_})n;@CVs0gxUUGE?L^YGyc0IqYxi<1TV8SwTM6^ zF;xxCLyr#qVwWp9c~MU7`ay5`fR9xrG5>wu4~y~yqOIvkiN|qD63dPsA=5ekzEC&l z&ustCuibN16u`FwK9LI>Y~1%sLAh6);B0VZuB(U$sg@&xhyfGQPdK4ko>)pO3>CE& zR*Wm+E6Ec^mi@$AR792P_Za5Bm9tVEhW$Q%jmJ{plLv6V62A?+!<@eS_pRsz{(bCR zUl+S0<8n*l0)r|`^a8VH#c#RE+H|I5y+>7+hFvEM^b@%efmWMJ8BJQpziOB^HhVp@ zJ|?q=VpmQ#i8q0SeImQ}MpgPQWjl5c;eVNpTqqnzfy+7Mn}-5DMso{I=bIk+*c>)iw}?_uC@VOX(P zOB5!*E8^8Zf9X1Zf#tv8H_>Wfmp;gfoxHZtS(vXYDG`ewb-P2A1N-3%&c_G&3F=d% ztpu!F;I_H2K_o-(d=fvP;Xhc2{zyX%qdy-KWlWDb7Zx{`cG@xUbVYjbZumeGro#E! zR_nA|V@xQ@f(2E97#cBxb*-O;H_(=qoDp1us80`c0apUoYFS)*goEM19XHB=`|?8t zEdB~@iLvZd{@*|B4o4(gCKIbaU;4bZC#l2yT#i5N4S)tH?a#Nfwu_UKa6CLb@a->c z31j&|-r{#Zs$*n{PV`LdGu$cvpN zP-H?<@u5{_G4m^L#LvbevpLX#1mkTutDOE~bEGn~Rag;OxGuV_p#Q%A zE`p0r?^ICbVv*-=CD!li|5hhFim&_i)$O}IWv{ihHN3X=7I@~?1_Up%jo9{z>0)O& zckQH6&(;baJqG=i;|bqdjeL$|KA7XTb5q|MBdh8c$`q2|c@lW(o$lhC*)+Mtl0|N*#haohtaGwm}$G zdbRUq@}#Bzt$JTlWZ&IiPhxi`8^!_^y%&S823iVK?i}Hn;NCj>A}X{J`Q5HA`s~#2&C&m@&6tmegrZg9)X{3`ZARiq(DMrciR^X z@XLP3&CEP(fyii3!;el(rTE>_(Oyci!&=5z6!+hQunj2!JQv7bUz4wI#Gc}i;Qca^ zJ4%(A_Y#ihC%*Z{?;FIEsexo>YKcEh9OR#H{of6d94Q@qDidoH66>ovx)~AJmiEsw z)K`#~-@dqjQ;wrBBP1jQ1&w*AAyT>x9c z08dF-_8LfOcWabBG9d&Ick!CD23qW&RcrLv+dDcgTb=YA&X(!Hz`?g{FV+J;0g5yw z$6FUi{MDyYzk~b#b|PN_Umv6o0$WT6q(|Rw;8p@jdyLlq7 zt~zUN`@Z{&`0Hx*FAAa+1W9)KaO~hH}k+(>rL&oU&)>d*zJu7S)3>V76D*2jN-ho zb`%6-u~_zr8VqmQa|!{6C!oLn30RF?w7-V{+!CIO{~p4Bt6=Egl@Iy0;?~h2G^6Yk z8GrtH+!8TKV>zBLL0+uVjv@|2+euK-?gPek(P>FxjO<0%lAp$MBZWvnqbMYQpUB~C z8nL{$R)5GTeR9P2&!0R56$R!*bJYej6gV7l5k5X{#S-~%5{XoSVPVj{y{o$Se<9Mj zT#?XdH3b1`O*K0Ml2@nWbfIPP8K=hqMRTh%f6?S`n{7UjUX_a86Gmg%(cB-I=bu!u zNO9B6V#xkML4@q&kQr?b{F5ixFz%<+Z+m!C_+-WOH+J?jWMmM4yE%rP#dKA2_&F4X z(&ohhE)s`36vzq8ak9L`niduo9$hb0sfyIy5D+GNevkd$SsC_E~81FCKVe#<>XR9p=hrkMojKtw2AR)n&)5x8! zRWfI?SmujlH=PxvQg24c}Zcf z`@cT`NOeGcy+gT1(|1Qu5U``BppF3G@AU7EqrhGPgb3vKo}LKn==<}vCf&Wjh+5h* z24(b*2OEo!(B8&n)q0Z^B=#biJiUQX2pE|D8^bXjg^}+`G{1#`Xyahb-4on;l zCx7paRt9Hb`BukEnu%{{wCZ3(qY1#%0Ur}#OSVHB&Z+YF-xlvfa5ao5+xt0;zXXbk z1kyzC1|S}uu7~jGoYuPv{0We$w!9y?=gYLU_wfN5i-6`j4bXb*o>)LJUn~!-$jCq# zbo+W=4PZJPPFAIcx2Bi0(a0e$V^}}$zgt*XTmyb>9e@K`UDqTcKg(Zliu~Q}^!@GK zpDv5t6Eh->X&{k0#^w1yh3-Aclz<$-F9?PuRzz2O^S-^mMceMv-Pqkum%G~I=U#Sw z^6WYd;S&&m085Fl%Q$m@Rogp&pB4tSH^Y$&y1{&D5MV7&=bI|5R618}CbN3uu4`@x zs(Ag~CvSiJcts*#Zm}mV{Jen%a_@quV`3mIroRAE7h!RE1`db6{(vD@x7+6k40*E3 zweB#P-JZnli{gqln)fT&NTAugJR8Q~D&*|S4+}to%0~`82Bk-cWe!9Tnn9;Q2(>!1N`VUjI8+2UkpLsviKHsj*2ym*cYT>~xH-=KY$JlVfKgEal<( zUTrsEXJBNsJ9{u@Q|;UhjOC-<4`BeIcT{SF*+y_DuqN`;RGjnvt78eSO#ZD2lk3Gi z6x@GnV*cFwWrWlP$dT$F^VlCo^!Rvo!S4j@#Jkjma@BUvcKE^bA*=v;lxvW^$WBn^ zb9Figo$-+H8U%nSt7B4oavc&noUg(vY5pF#mF)9fp`DzZ{H2+N#{|)~x67wC7L8B4 zQ&!dGZ;hi(rP++I;qD+Z5{t^_enHh}y%9Jy7&!niZ~ZOiG&*eeghPaFw32AGdp|s1 zuWl%-c9+x`uOF^ znJ{>GcxPK(c$eN+UmLA9C=fyLtnqpP+PU^%u^iz{iGuO znHLMtfV^_x>3WYCZ~G5C4<8VZTn$iK!(ASK$I}>^1vhY`K!b*US6?0xtC-J63j^tWAvl(Dj^>EmL`gWu<8XF`kpw|l^X zJ4#K+p6}Ckd91t;`@el15jZ}4B7#;1Q8Iy90p*YFW6;Q!{$-~N{v4;%*^eq3F>*2Y zqREVaHx>wsFA@?G-^h8Lrru-*3Ya1T=6(ESOe|25p;08m6s~8^5HdQ*v|HNWtxUjv6KbnJ zBz{Lg%?wLSEgrgVvN)b%GMir_2nGOZgT;_PDG_5XNxY)~{){d#&eqd;e^{%6DA&g0 z?}?~!I#*90p8VDE;%nD#Z#)&sL}n&IBpiuJ?f94l(JOP>XfT3ACfDn*3-lb^)-3Em zdQs1S><^@|W3Srm7WltcE}F`|+fy)2*MhvIJ&w4O!#)ua5&rQPj+&hwLU#@c6iP41 z!tJ`nuzPOdF>!H!pin5*rvu+FZx!@BQTrp4kwGt1{&zMG2mtDi-e2;Mx5bFfzh^7O z?7QT-4(98d%(t|Nm_OeiG?+}LzbvvW?p7ReCK@mjvwy?K$KQ>Z9G(27qXR1YDSb)j z3cl5q#%k#oR1_4iFDWH80Dy00S4J=Z%EKVQQVt+8GB(6#rG@wM`Us8)`K9wGaCmYO z)ihKhf#O&E+}v!n*E>gZYime+U@e-smWRh*pOB(EB9+<-BL4))hH^52=h5d|H2>qu z-*w-w-FJy^y2TmqiWTg78|XxQwcG`)r5QSO-#O?J$aJ4|Zw#=fCS#cws_-DZy}e`b zE3}*707G(Y|MvD^gphh)@vjB5h5q3j#C{5%dr(ls2E(vu?a|y})73^;6hNY%YPlhy{)h&b2GVz!{vei%%u4rFSw&K zGigrqI(eN=mGSSGT1~>`0tL@`s*(U^8Gxn00hUvZs8{$Nio4iU=)qXQAT|Gyo`Sr> z!EVb2@B{V&Ti$h37q=%NOs^$IWJ8;LGr-U7tt#^ zGB_IvkM1ylBKDVqCJg?}UwtEHNG4{}`9gXa;nM{5N*}j-E0;dj@+}{LP*+oJ@{J*0 zxGe3}$cQ7tcPX%wCXw~?VL?S(e14~4DNvlqXN^tC>DPPri=J96mBQSR4Q2>y1rQ}p zsSg0zs%sj3y?=W{QeNXxUjbc7=$b;qN&VH;mEF|^bEMK--5EAE^rM?w;`n|?S2ve` z<1f32In@ykFKoln#DQL3)NG>(^<3sWLkWR^y~nL1!g9-GgKJi+b@Uo~`m5VVv^Nvi zS-R{7F+V&61RnrdPRPQdTy7KCpZr7MT`S>KjA7vYaQ2=Y=>GHx0jIUT0hPy(D}6%G?K>P7@L!b`Ybo^AJUGv# z(^z0Ty*f>nv+*A;RtR?x&{R~&i~hmpW^@|N7Uazav^pKcTBByhKG(aCVyeCI9{PvI zV3j+Br4;POZl{2qr$c`5ufYSP%Tfv9L4oM7@kA>5Dn(-dYONtO7dLlwh9?LlB&1EL zCPo^o^&s>ga0&GA*etxxPh7*X1b!1yEPoNf?zujJSR>JWELJN5`xJWp*5gOfR!68d9oycndEGzPouk_m?z%XI zbG2?S|1g5i#8n)i|G)|ht53&K>$Jf!Vq@$|p4dX6ozrfxx29Z5)cN`s z!cvtj9Z6hXjFZl6kJ{d09tNld{?`Br1y(P(kZjjyGlC9tYMrYqz(Dhn+>u7o`-qqn zpa4%Ue|UT;lI_j)XR}WsSC7Ubg!Q4M!4@6dW4b>eO_h z%gWdO3JDGeQNt4-gKwA$M0C=uQjN(MOc!bM;x96NFAk9qU5*-; zR4}dsz#@>(m&+~4oo~Cm1c-VY8nG)RQmNY>UOa_U$&mmUF4xXbWIUZ784$J#1EVGR z#85Hjc|AFJBN&o?x_FV6X#PY~>}p|Pu+78A5*E5ju=y!pATCkJk_RRk-U0+6_!}0V z=kD~DTbnf(#}#FUtFv$ZoS%GjKg3Aqbe0b0BK*p=G9LqA_b)4>bPK6W`Mb8w76*v7_DL#_VHmGFM0qkaqlm7lx$2_oC#; zo3Wzc|NkduL;QJCq#sp4m10~hfaszMaiunr?k8VBWhL?8YEeh>Ml}|1O9qOclM@TG zqdD;H!O3a2z(@cDX^*1PN|ZOAM()es^T)Fl%7S!x`8c^eH%CDsk+jC&ZKwcvtS6RO zVq0Mde4$i1prT?UqTDj}8gRsqL>f=1iu;q166hKcz#=PVo^NRfbAp?XBvQ%An^iIp zblb@>@rhml#nsQX=;}IrurX>m+RwGBF7b!Xvb3_ZqsQml=~BmFqFg#T{gYYZSmS7C z7MXCL{e2?*eI`sYR=q_w2@7WHO&B1AAj9SV+r!9z-9if@H>Yv_OgFPVZS~P{%H-mx zZzpRFk_umi^gRLYHNO`NTn{u=TRW7gFI{$e)xJ60_RDon9=++hNZMwd${CkDK~MjK zPwuyu7QU_nj=wDU0UA;MG5_(SeNI*H^S><<`)>OBmmEJ+`1-iRTeG)+dn0XZlzqtm z{5Rn33`_a6h0|_MeUtFWaZUVoIX=E`D+2a4rOY>;JbRM#so)tduirjy=9Rw2t(cyB zb=%uR8**L>Sy=D(0G_^+ef_|(V^V9Q+r73~v2z-EhfI91`G`=erOMMYN%=Q4Jhpt) ziFdWNW-onjqI9cuK;T;y?l z=ZUkkUHgulU|uY21s>_u-~o-qvUTm^2agr`aLh1$Xzr(Ed&BK-$fVG$2RFlRWdP@S zJqo<1>#52W@Tpx3(hdJr6`iy%#$%di%}V9R@28x-V*|W#m80n3{y^i>pQl74;`Cpq zNO0bn7G~EgTy^cenT7v6k#mb5JSbebcbDbL_S>H&+;*T}|HXnw2CE%`#r)m{z;$k* zLH>e#4iWA{@dYc}`IdUehP`@K3Km|#F+-gRI4t*h&&xHSWRam1@P?!QVoPNDQfQYk z95~AUKm5X_T=1yf4r8F|uUx>vaL}NtMiB?FgIToPMSTfSby`n@P@S<|rBx|7jJmX$ zTpK?ahrcW{UE8hwZkHZN!#rShZv6d{&g&22=Ytom1`lfkg}GYh`-;53q8fUB61W6? z*22)eN8_RSa^q#i;338ZGn4~FIO+}CBc?A0IgH`VqRZ>%se>&NX?)ZPEN~xH#+8PG z<^{HZ<^{H#Yd_}(86o8YPD=P+d3o(9aJJ(>vJ)^=l9}T8S3~^QV4wNi^Ivbh&!VN< z=Kc5SW!Co!cKnxIeBknO|HF_Gb*{x=H+3C|71)t}XuT-UmnfLKb6DOTKkR=gU*I3` z95<0~Q%dT=^C=?MEblr$d~RF=T% Date: Mon, 30 Nov 2020 10:25:18 -0800 Subject: [PATCH 38/75] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 510d619956..f5e542e2f6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -48,11 +48,11 @@ You can assess how an attack surface reduction rule might impact your network by In the recommendation details pane, check the user impact to determine what percentage of your devices can accept a new policy enabling the rule in blocking mode without adverse impact to user productivity. -## Audit mode +## Audit mode for evaluation Use [audit mode](audit-windows-defender.md) to evaluate how attack surface reduction rules would impact your organization if they were enabled. It's best to run all rules in audit mode first so you can understand their impact on your line-of-business applications. Many line-of-business applications are written with limited security concerns, and they may perform tasks in ways that seem similar to malware. By monitoring audit data and [adding exclusions](enable-attack-surface-reduction.md#exclude-files-and-folders-from-asr-rules) for necessary applications, you can deploy attack surface reduction rules without impacting productivity. -## Notifications +## Notifications when a rule is triggered Whenever a rule is triggered, a notification will be displayed on the device. You can [customize the notification](customize-attack-surface-reduction.md#customize-the-notification) with your company details and contact information. The notification also displays within the Microsoft Defender Security Center and the Microsoft 365 security center. From 7d9785c1e8efa280ef925821dafc8720e8b32390 Mon Sep 17 00:00:00 2001 From: Tina Burden Date: Mon, 30 Nov 2020 10:39:33 -0800 Subject: [PATCH 39/75] fix for publish pr --- .../microsoft-defender-atp/exploit-protection-reference.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md b/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md index ba855cf88a..83538214ec 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md @@ -10,7 +10,7 @@ ms.sitesec: library ms.localizationpriority: medium audience: ITPro author: appcompatguy -ms.author: cjacks +ms.author: saudm ms.date: 07/20/2020 ms.reviewer: manager: saudm From c8124eb185aae0b90eaac6dc6129d9508465a2d0 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 30 Nov 2020 10:40:47 -0800 Subject: [PATCH 40/75] Update exploit-protection-reference.md --- .../exploit-protection-reference.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md b/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md index ba855cf88a..99f4521685 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exploit-protection-reference.md @@ -9,11 +9,11 @@ ms.mktglfcycl: manage ms.sitesec: library ms.localizationpriority: medium audience: ITPro -author: appcompatguy -ms.author: cjacks +author: denisebmsft +ms.author: deniseb ms.date: 07/20/2020 -ms.reviewer: -manager: saudm +ms.reviewer: cjacks +manager: dansimp ms.custom: asr --- From c92bc14057c6412da78f95568ff8154db7a0fe94 Mon Sep 17 00:00:00 2001 From: Thomas Date: Mon, 30 Nov 2020 12:04:00 -0800 Subject: [PATCH 41/75] Update .openpublishing.redirection.json --- .openpublishing.redirection.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 4b75b026fc..2d320c9e8d 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -2381,7 +2381,7 @@ "redirect_document_id": true }, { - "source_path": "windows/threat-protection/windows-defender-antivirus/detect-block-potentially-unwanted-apps-windows-defender-antivirus.md", + "source_path": "windows/security/threat-protection/windows-defender-antivirus/detect-block-potentially-unwanted-apps-windows-defender-antivirus.md", "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-windows-microsoft-antivirus", "redirect_document_id": true }, From 3099fee6aee4ae3d31c5485a22d7a32207d4bfbe Mon Sep 17 00:00:00 2001 From: Thomas Date: Mon, 30 Nov 2020 12:16:08 -0800 Subject: [PATCH 42/75] remove dup redirect entry --- .openpublishing.redirection.json | 5 ----- 1 file changed, 5 deletions(-) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 2d320c9e8d..0ec111686a 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -16220,11 +16220,6 @@ "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/deployment-vdi-microsoft-defender-antivirus", "redirect_document_id": true }, - { - "source_path": "windows/security/threat-protection/windows-defender-antivirus/detect-block-potentially-unwanted-apps-windows-defender-antivirus.md", - "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus", - "redirect_document_id": true - }, { "source_path": "windows/security/threat-protection/windows-defender-antivirus/enable-cloud-protection-windows-defender-antivirus.md", "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus", From 46802f11b2220420037b66425ef37465af33ae90 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 30 Nov 2020 12:26:57 -0800 Subject: [PATCH 43/75] Update symantec-to-microsoft-defender-atp-setup.md --- .../symantec-to-microsoft-defender-atp-setup.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index 72f73b2448..53f1a5d9d1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -18,7 +18,7 @@ ms.collection: - M365-security-compliance - m365solution-symantecmigrate ms.topic: article -ms.date: 09/24/2020 +ms.date: 11/30/2020 ms.custom: migrationguides ms.reviewer: depicker, yongrhee, chriggs --- From 133e7465a0c4fa82171529dd556d82ec737e3836 Mon Sep 17 00:00:00 2001 From: Thomas Date: Mon, 30 Nov 2020 13:05:00 -0800 Subject: [PATCH 44/75] resolve incorrect redirect_url value --- .openpublishing.redirection.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 0ec111686a..1fd763463c 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -2382,7 +2382,7 @@ }, { "source_path": "windows/security/threat-protection/windows-defender-antivirus/detect-block-potentially-unwanted-apps-windows-defender-antivirus.md", - "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-windows-microsoft-antivirus", + "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-antivirus", "redirect_document_id": true }, { From 0885741bfc59c3827dc8014da27383bbead7f961 Mon Sep 17 00:00:00 2001 From: Sunayana Singh <57405155+sunasing@users.noreply.github.com> Date: Tue, 1 Dec 2020 02:42:56 +0530 Subject: [PATCH 45/75] Update ios-configure-features.md --- .../microsoft-defender-atp/ios-configure-features.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md b/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md index 3e7006411b..68c6dfd43f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md +++ b/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md @@ -27,6 +27,14 @@ ms.topic: conceptual > [!NOTE] > Defender for Endpoint for iOS would use a VPN in order to provide the Web Protection feature. This is not a regular VPN and is a local/self-looping VPN that does not take traffic outside the device. +> [!IMPORTANT] +> **PUBLIC PREVIEW EDITION** +> +> This documentation is for a pre-release solution. The guidelines and the solution are subject to change between now and its general availability. +> +> As with any pre-release solution, remember to exercise caution when determining the target population for your deployments. + + ## Configure compliance policy against jailbroken devices To protect corporate data from being accessed on jailbroken iOS devices, we recommend that you setup the following compliance policy on Intune. From 4ecb00e6e2cbfdbdee8ad6ff9e15c1ed76b978c2 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 30 Nov 2020 13:18:40 -0800 Subject: [PATCH 46/75] previous version --- .../microsoft-defender-atp-ios.md | 43 +++++++++---------- 1 file changed, 20 insertions(+), 23 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-ios.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-ios.md index 63eee7a042..46b7669ddf 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-ios.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-ios.md @@ -24,33 +24,38 @@ ms.topic: conceptual [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Microsoft Defender for Endpoint for iOS** will offer protection against phishing and unsafe network connections from websites, emails, and apps. All alerts will be available through a single pane of glass in the Microsoft Defender Security Center. The portal gives security teams a centralized view of threats on -iOS devices along with other platforms. -> [!CAUTION] -> Running other third-party endpoint protection products alongside Defender for Endpoint for iOS is likely to cause performance problems and unpredictable system errors. +> [!IMPORTANT] +> **PUBLIC PREVIEW EDITION** +> +> This documentation is for a pre-release solution. The guidelines and the solution are subject to change between now and its general availability. +> +> As with any pre-release solution, remember to exercise caution when determining the target population for your deployments. + + +The public preview of Defender for Endpoint for iOS will offer protection +against phishing and unsafe network connections from websites, emails, and apps. +All alerts will be available through a single pane of glass in the Microsoft +Defender Security Center. The portal gives security teams a centralized view of threats on +iOS devices along with other platforms. ## Pre-requisites + **For End Users** -- Microsoft Defender for Endpoint license assigned to the end user(s) of the app. See [Microsoft Defender for Endpoint licensing requirements](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements#licensing-requirements) - -- Device(s) are [enrolled](https://docs.microsoft.com/mem/intune/user-help/enroll-your-device-in-intune-ios) via the Intune Company Portal app to enforce Intune device compliance policies. This requires the end user to be assigned a Microsoft Intune license. - - Intune Company Portal app can be downloaded from [Apple App Store](https://apps.apple.com/us/app/intune-company-portal/id719171358). - -- For more information on how to assign licenses, see [Assign licenses to users](https://docs.microsoft.com/azure/active-directory/users-groups-roles/licensing-groups-assign). - +- Defender for Endpoint license assigned to the end user(s) of the app. Refer + [Assign licenses to + users](https://docs.microsoft.com/azure/active-directory/users-groups-roles/licensing-groups-assign) + for instructions on how to assign licenses. **For Administrators** - Access to the Microsoft Defender Security Center portal - - > [!NOTE] - > Microsoft Intune is the only supported Mobile Device Management (MDM) solution for deploying Microsoft Defender for Endpoint for iOS. Currently only enrolled devices are supported for enforcing Defender for Endpoint for iOS related device compliance policies in Intune. - Access to [Microsoft Endpoint Manager admin - center](https://go.microsoft.com/fwlink/?linkid=2109431), to deploy the app to enrolled user groups in your organization + center](https://go.microsoft.com/fwlink/?linkid=2109431), to deploy the app + to enrolled user groups in your organization **System Requirements** @@ -59,14 +64,6 @@ iOS devices along with other platforms. - Device is enrolled with Intune Company Portal [app](https://apps.apple.com/us/app/intune-company-portal/id719171358) -> [!NOTE] -> **Microsoft Defender ATP (Microsoft Defender for Endpoint) for iOS is now available on [Apple App Store](https://aka.ms/mdatpiosappstore).** - -## Installation instructions - -Deployment of Microsoft Defender for Endpoint for iOS is via Microsoft Intune (MDM) and both supervised and unsupervised devices are supported. -For more information, see [Deploy Microsoft Defender for Endpoint for iOS](ios-install.md). - ## Resources - Stay informed about upcoming releases by visiting our [blog](https://techcommunity.microsoft.com/t5/microsoft-defender-atp/bg-p/MicrosoftDefenderATPBlog/label-name/iOS) From 60ad21b8b8aa241432f319a207599c74fefe6b41 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 30 Nov 2020 14:26:05 -0800 Subject: [PATCH 47/75] "later" instead of "above" for newer versions of software "Later" is preferable to "above" when referring to subsequent versions of software. https://styleguides.azurewebsites.net/Styleguide/Read?id=2700&topicid=32560 --- .../microsoft-defender-atp/microsoft-defender-atp-ios.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-ios.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-ios.md index 46b7669ddf..1a4cbac837 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-ios.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-ios.md @@ -59,7 +59,7 @@ iOS devices along with other platforms. **System Requirements** -- iOS devices running iOS 11.0 and above +- iOS devices running iOS 11.0 and later - Device is enrolled with Intune Company Portal [app](https://apps.apple.com/us/app/intune-company-portal/id719171358) @@ -75,4 +75,4 @@ iOS devices along with other platforms. ## Next steps - [Deploy Microsoft Defender for Endpoint for iOS](ios-install.md) -- [Configure Microsoft Defender for Endpoint for iOS features](ios-configure-features.md) \ No newline at end of file +- [Configure Microsoft Defender for Endpoint for iOS features](ios-configure-features.md) From c3b172ad575c07c9d9949cf9987319e4273141f9 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Mon, 30 Nov 2020 15:23:02 -0800 Subject: [PATCH 48/75] adding server as supported OS --- ...ck-potentially-unwanted-apps-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md index 4c9c47828e..77a4285b90 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md @@ -73,7 +73,7 @@ Although Microsoft Defender for Endpoint has its own block list, based upon a da The potentially unwanted application (PUA) protection feature in Microsoft Defender Antivirus can detect and block PUAs on endpoints in your network. > [!NOTE] -> This feature is only available in Windows 10. +> This feature is available in Windows 10, Windows Server 2016 and Windows Server 2019. Microsoft Defender Antivirus blocks detected PUA files and any attempts to download, move, run, or install them. Blocked PUA files are then moved to quarantine. From 299e0e089cee101edb3f1345506e3bb748009358 Mon Sep 17 00:00:00 2001 From: Thomas Date: Mon, 30 Nov 2020 15:32:39 -0800 Subject: [PATCH 49/75] Update .openpublishing.redirection.json --- .openpublishing.redirection.json | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 1fd763463c..9e3480430e 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -2381,10 +2381,15 @@ "redirect_document_id": true }, { - "source_path": "windows/security/threat-protection/windows-defender-antivirus/detect-block-potentially-unwanted-apps-windows-defender-antivirus.md", - "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-antivirus", + "source_path": "windows/threat-protection/windows-defender-antivirus/detect-block-potentially-unwanted-apps-windows-defender-antivirus.md", + "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus", "redirect_document_id": true }, + { + "source_path": "windows/security/threat-protection/windows-defender-antivirus/detect-block-potentially-unwanted-apps-windows-defender-antivirus.md", + "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus", + "redirect_document_id": true + }, { "source_path": "windows/threat-protection/windows-defender-antivirus/enable-cloud-protection-windows-defender-antivirus.md", "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus", From b5d0b41e62fbbcbead877dbcd5385a7ae8533cdd Mon Sep 17 00:00:00 2001 From: Ben M Schorr <43045782+Beschorr@users.noreply.github.com> Date: Mon, 30 Nov 2020 16:37:54 -0800 Subject: [PATCH 50/75] Update respond-file-alerts.md Text says "Cloud-based protection..." but the in-product UI and other docs refer to it as "Cloud-delivered protection...". Updating text to standardize. --- .../microsoft-defender-atp/respond-file-alerts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md index 336099ffa7..691d1f29c5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md @@ -139,7 +139,7 @@ You can prevent further propagation of an attack in your organization by banning >[!IMPORTANT] > ->- This feature is available if your organization uses Microsoft Defender Antivirus and Cloud–based protection is enabled. For more information, see [Manage cloud–based protection](../microsoft-defender-antivirus/deploy-manage-report-microsoft-defender-antivirus.md). +>- This feature is available if your organization uses Microsoft Defender Antivirus and Cloud–delivered protection is enabled. For more information, see [Manage cloud–delivered protection](../microsoft-defender-antivirus/deploy-manage-report-microsoft-defender-antivirus.md). > >- The Antimalware client version must be 4.18.1901.x or later. >- This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web. It currently supports portable executable (PE) files, including _.exe_ and _.dll_ files. The coverage will be extended over time. From 2bf88f17813e0fc39f5e9b9419737a2cc0565f2e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 30 Nov 2020 17:47:33 -0800 Subject: [PATCH 51/75] Update detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md --- ...anted-apps-microsoft-defender-antivirus.md | 40 +++++++++---------- 1 file changed, 20 insertions(+), 20 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md index 77a4285b90..caf97b9841 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md @@ -11,7 +11,7 @@ author: denisebmsft ms.author: deniseb ms.custom: nextgen audience: ITPro -ms.date: +ms.date: 11/30/2020 ms.reviewer: manager: dansimp --- @@ -31,23 +31,23 @@ manager: dansimp Potentially unwanted applications (PUA) are not considered viruses, malware, or other types of threats, but they might perform actions on endpoints which adversely affect endpoint performance or use. _PUA_ can also refer to an application that has a poor reputation, as assessed by Microsoft Defender for Endpoint, due to certain kinds of undesirable behavior. -For example: +Here are some examples: -* **Advertising software**: Software that displays advertisements or promotions, including software that inserts advertisements to webpages. -* **Bundling software**: Software that offers to install other software that is not digitally signed by the same entity. Also, software that offers to install other software that qualify as PUA. -* **Evasion software**: Software that actively tries to evade detection by security products, including software that behaves differently in the presence of security products. +- **Advertising software** that displays advertisements or promotions, including software that inserts advertisements to webpages. +- **Bundling software** that offers to install other software that is not digitally signed by the same entity. Also, software that offers to install other software that qualify as PUA. +- **Evasion software** that actively tries to evade detection by security products, including software that behaves differently in the presence of security products. For more examples and a discussion of the criteria we use to label applications for special attention from security features, see [How Microsoft identifies malware and potentially unwanted applications](../intelligence/criteria.md). Potentially unwanted applications can increase the risk of your network being infected with actual malware, make malware infections harder to identify, or waste IT resources in cleaning them up. -## How it works +PUA protection is supported on Windows 10, Windows Server 2019, and Windows Server 2016. -### Microsoft Edge +## Microsoft Edge The next major version of Microsoft Edge, which is Chromium-based, blocks potentially unwanted application downloads and associated resource URLs. This feature is provided via [Microsoft Defender SmartScreen](../microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview.md). -#### Enable PUA protection in Chromium-based Microsoft Edge +### Enable PUA protection in Chromium-based Microsoft Edge Although potentially unwanted application protection in Microsoft Edge (Chromium-based, version 80.0.361.50) is turned off by default, it can easily be turned on from within the browser. @@ -58,7 +58,7 @@ Although potentially unwanted application protection in Microsoft Edge (Chromium > [!TIP] > If you are running Microsoft Edge (Chromium-based), you can safely explore the URL-blocking feature of PUA protection by testing it out on one of our Windows Defender SmartScreen [demo pages](https://demo.smartscreen.msft.net/). -#### Blocking URLs with Windows Defender SmartScreen +### Blocking URLs with Windows Defender SmartScreen In Chromium-based Edge with PUA protection turned on, Windows Defender SmartScreen will protect you from PUA-associated URLs. @@ -68,7 +68,7 @@ Defender SmartScreen available, including [one for blocking PUA](https://docs.mi Although Microsoft Defender for Endpoint has its own block list, based upon a data set managed by Microsoft, you can customize this list based on your own threat intelligence. If you [create and manage indicators](../microsoft-defender-atp/manage-indicators.md) in the Microsoft Defender for Endpoint portal, Windows Defender SmartScreen will respect the new settings. -### Microsoft Defender Antivirus +## Microsoft Defender Antivirus The potentially unwanted application (PUA) protection feature in Microsoft Defender Antivirus can detect and block PUAs on endpoints in your network. @@ -81,7 +81,7 @@ When a PUA file is detected on an endpoint, Microsoft Defender Antivirus sends a The notification appears in the usual [quarantine list within the Windows Security app](microsoft-defender-security-center-antivirus.md#detection-history). -#### Configure PUA protection in Microsoft Defender Antivirus +### Configure PUA protection in Microsoft Defender Antivirus You can enable PUA protection with Microsoft Intune, Microsoft Endpoint Configuration Manager, Group Policy, or via PowerShell cmdlets. @@ -92,11 +92,11 @@ You can also use the PUA audit mode to detect PUAs without blocking them. The de PUA audit mode is useful if your company is conducting an internal software security compliance check and you'd like to avoid any false positives. -##### Use Intune to configure PUA protection +#### Use Intune to configure PUA protection See [Configure device restriction settings in Microsoft Intune](https://docs.microsoft.com/intune/device-restrictions-configure) and [Microsoft Defender Antivirus device restriction settings for Windows 10 in Intune](https://docs.microsoft.com/intune/device-restrictions-windows-10#microsoft-defender-antivirus) for more details. -##### Use Configuration Manager to configure PUA protection +#### Use Configuration Manager to configure PUA protection PUA protection is enabled by default in the Microsoft Endpoint Configuration Manager (Current Branch). @@ -107,7 +107,7 @@ For System Center 2012 Configuration Manager, see [How to Deploy Potentially Unw > [!NOTE] > PUA events blocked by Microsoft Defender Antivirus are reported in the Windows Event Viewer and not in Microsoft Endpoint Configuration Manager. -##### Use Group Policy to configure PUA protection +#### Use Group Policy to configure PUA protection 1. On your Group Policy management computer, open the [Group Policy Management Console](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)), right-click the Group Policy Object you want to configure, and select **Edit**. @@ -121,23 +121,23 @@ For System Center 2012 Configuration Manager, see [How to Deploy Potentially Unw 6. In **Options**, select **Block** to block potentially unwanted applications, or select **Audit Mode** to test how the setting will work in your environment. Select **OK**. -##### Use PowerShell cmdlets to configure PUA protection +#### Use PowerShell cmdlets to configure PUA protection -###### To enable PUA protection +##### To enable PUA protection ```PowerShell Set-MpPreference -PUAProtection enable ``` Setting the value for this cmdlet to `Enabled` will turn the feature on if it has been disabled. -###### To set PUA protection to audit mode +##### To set PUA protection to audit mode ```PowerShell Set-MpPreference -PUAProtection auditmode ``` Setting `AuditMode` will detect PUAs without blocking them. -###### To disable PUA protection +##### To disable PUA protection We recommend keeping PUA protection turned on. However, you can turn it off by using the following cmdlet: @@ -148,7 +148,7 @@ Setting the value for this cmdlet to `Disabled` will turn the feature off if it See [Use PowerShell cmdlets to configure and run Microsoft Defender Antivirus](use-powershell-cmdlets-microsoft-defender-antivirus.md) and [Defender cmdlets](https://docs.microsoft.com/powershell/module/defender/index) for more information on how to use PowerShell with Microsoft Defender Antivirus. -#### View PUA events +### View PUA events PUA events are reported in the Windows Event Viewer, but not in Microsoft Endpoint Configuration Manager or in Intune. @@ -156,7 +156,7 @@ You can turn on email notifications to receive mail about PUA detections. See [Troubleshoot event IDs](troubleshoot-microsoft-defender-antivirus.md) for details on viewing Microsoft Defender Antivirus events. PUA events are recorded under event ID **1160**. -#### Allow-listing apps +### Allow-listing apps Sometimes a file is erroneously blocked by PUA protection, or a feature of a PUA is required to complete a task. In these cases, a file can be allow-listed. See [How to Configure Endpoint Protection in Configuration Manager](https://docs.microsoft.com/previous-versions/system-center/system-center-2012-R2/hh508770(v=technet.10)#to-exclude-specific-files-or-folders) for information on allowing files which are currently blocked by PUA protection in Microsoft Defender Antivirus. From 0e11dd7a8d90b05ff76f2343773270843170e450 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 30 Nov 2020 17:51:05 -0800 Subject: [PATCH 52/75] Update detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md --- ...potentially-unwanted-apps-microsoft-defender-antivirus.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md index caf97b9841..cc8d638985 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md @@ -37,7 +37,8 @@ Here are some examples: - **Bundling software** that offers to install other software that is not digitally signed by the same entity. Also, software that offers to install other software that qualify as PUA. - **Evasion software** that actively tries to evade detection by security products, including software that behaves differently in the presence of security products. -For more examples and a discussion of the criteria we use to label applications for special attention from security features, see [How Microsoft identifies malware and potentially unwanted applications](../intelligence/criteria.md). +> [!TIP] +> For more examples and a discussion of the criteria we use to label applications for special attention from security features, see [How Microsoft identifies malware and potentially unwanted applications](../intelligence/criteria.md). Potentially unwanted applications can increase the risk of your network being infected with actual malware, make malware infections harder to identify, or waste IT resources in cleaning them up. @@ -45,7 +46,7 @@ PUA protection is supported on Windows 10, Windows Server 2019, and Windows Serv ## Microsoft Edge -The next major version of Microsoft Edge, which is Chromium-based, blocks potentially unwanted application downloads and associated resource URLs. This feature is provided via [Microsoft Defender SmartScreen](../microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview.md). +The [new Microsoft Edge](https://support.microsoft.com/microsoft-edge/get-to-know-microsoft-edge-3f4bb0ff-58de-2188-55c0-f560b7e20bea), which is Chromium-based, blocks potentially unwanted application downloads and associated resource URLs. This feature is provided via [Microsoft Defender SmartScreen](../microsoft-defender-smartscreen/microsoft-defender-smartscreen-overview.md). ### Enable PUA protection in Chromium-based Microsoft Edge From b16dfd9bea897667dd380506b4e487b4cbe366ff Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 30 Nov 2020 17:52:26 -0800 Subject: [PATCH 53/75] Update detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md --- ...-potentially-unwanted-apps-microsoft-defender-antivirus.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md index cc8d638985..a3f6d01c30 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md @@ -53,8 +53,8 @@ The [new Microsoft Edge](https://support.microsoft.com/microsoft-edge/get-to-kno Although potentially unwanted application protection in Microsoft Edge (Chromium-based, version 80.0.361.50) is turned off by default, it can easily be turned on from within the browser. 1. Select the ellipses, and then choose **Settings**. -2. Select **Privacy and services**. -3. Under the **Services** section, turn on **Block potentially unwanted apps**. +2. Select **Privacy, search, and services**. +3. Under the **Security** section, turn on **Block potentially unwanted apps**. > [!TIP] > If you are running Microsoft Edge (Chromium-based), you can safely explore the URL-blocking feature of PUA protection by testing it out on one of our Windows Defender SmartScreen [demo pages](https://demo.smartscreen.msft.net/). From bbabd50e30c149f5df744cd306e4b9044ccd976c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 30 Nov 2020 17:54:19 -0800 Subject: [PATCH 54/75] Update detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md --- ...lly-unwanted-apps-microsoft-defender-antivirus.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md index a3f6d01c30..446eb85451 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md @@ -57,17 +57,17 @@ Although potentially unwanted application protection in Microsoft Edge (Chromium 3. Under the **Security** section, turn on **Block potentially unwanted apps**. > [!TIP] -> If you are running Microsoft Edge (Chromium-based), you can safely explore the URL-blocking feature of PUA protection by testing it out on one of our Windows Defender SmartScreen [demo pages](https://demo.smartscreen.msft.net/). +> If you are running Microsoft Edge (Chromium-based), you can safely explore the URL-blocking feature of PUA protection by testing it out on one of our [Microsoft Defender SmartScreen demo pages](https://demo.smartscreen.msft.net/). -### Blocking URLs with Windows Defender SmartScreen +### Blocking URLs with Microsoft Defender SmartScreen -In Chromium-based Edge with PUA protection turned on, Windows Defender SmartScreen will protect you from PUA-associated URLs. +In Chromium-based Edge with PUA protection turned on, Microsoft Defender SmartScreen will protect you from PUA-associated URLs. -Admins can [configure](https://docs.microsoft.com/DeployEdge/configure-microsoft-edge) how Microsoft Edge and Windows Defender SmartScreen work together to protect groups of users from PUA-associated URLs. There are several group policy [settings](https://docs.microsoft.com/DeployEdge/microsoft-edge-policies#smartscreen-settings) explicitly for Windows +Admins can [configure](https://docs.microsoft.com/DeployEdge/configure-microsoft-edge) how Microsoft Edge and Microsoft Defender SmartScreen work together to protect groups of users from PUA-associated URLs. There are several group policy [settings](https://docs.microsoft.com/DeployEdge/microsoft-edge-policies#smartscreen-settings) explicitly for Windows Defender SmartScreen available, including [one for blocking PUA](https://docs.microsoft.com/DeployEdge/microsoft-edge-policies#smartscreenpuaenabled). In addition, admins can -[configure Windows Defender SmartScreen](https://docs.microsoft.com/microsoft-edge/deploy/available-policies?source=docs#configure-windows-defender-smartscreen) as a whole, using group policy settings to turn Windows Defender SmartScreen on or off. +[configure Microsoft Defender SmartScreen](https://docs.microsoft.com/microsoft-edge/deploy/available-policies?source=docs#configure-windows-defender-smartscreen) as a whole, using group policy settings to turn Microsoft Defender SmartScreen on or off. -Although Microsoft Defender for Endpoint has its own block list, based upon a data set managed by Microsoft, you can customize this list based on your own threat intelligence. If you [create and manage indicators](../microsoft-defender-atp/manage-indicators.md) in the Microsoft Defender for Endpoint portal, Windows Defender SmartScreen will respect the new settings. +Although Microsoft Defender for Endpoint has its own block list, based upon a data set managed by Microsoft, you can customize this list based on your own threat intelligence. If you [create and manage indicators](../microsoft-defender-atp/manage-indicators.md) in the Microsoft Defender for Endpoint portal, Microsoft Defender SmartScreen will respect the new settings. ## Microsoft Defender Antivirus From 71315724d3355c82e013ef7b4c9ed6dd8c9db445 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 30 Nov 2020 17:55:57 -0800 Subject: [PATCH 55/75] Update detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md --- ...otentially-unwanted-apps-microsoft-defender-antivirus.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md index 446eb85451..cb1802350e 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md @@ -63,18 +63,18 @@ Although potentially unwanted application protection in Microsoft Edge (Chromium In Chromium-based Edge with PUA protection turned on, Microsoft Defender SmartScreen will protect you from PUA-associated URLs. -Admins can [configure](https://docs.microsoft.com/DeployEdge/configure-microsoft-edge) how Microsoft Edge and Microsoft Defender SmartScreen work together to protect groups of users from PUA-associated URLs. There are several group policy [settings](https://docs.microsoft.com/DeployEdge/microsoft-edge-policies#smartscreen-settings) explicitly for Windows +Admins can [configure](https://docs.microsoft.com/DeployEdge/configure-microsoft-edge) how Microsoft Edge and Microsoft Defender SmartScreen work together to protect groups of users from PUA-associated URLs. There are several [group policy settings](https://docs.microsoft.com/DeployEdge/microsoft-edge-policies#smartscreen-settings) explicitly for Microsoft Defender SmartScreen available, including [one for blocking PUA](https://docs.microsoft.com/DeployEdge/microsoft-edge-policies#smartscreenpuaenabled). In addition, admins can [configure Microsoft Defender SmartScreen](https://docs.microsoft.com/microsoft-edge/deploy/available-policies?source=docs#configure-windows-defender-smartscreen) as a whole, using group policy settings to turn Microsoft Defender SmartScreen on or off. -Although Microsoft Defender for Endpoint has its own block list, based upon a data set managed by Microsoft, you can customize this list based on your own threat intelligence. If you [create and manage indicators](../microsoft-defender-atp/manage-indicators.md) in the Microsoft Defender for Endpoint portal, Microsoft Defender SmartScreen will respect the new settings. +Although Microsoft Defender for Endpoint has its own block list based upon a data set managed by Microsoft, you can customize this list based on your own threat intelligence. If you [create and manage indicators](../microsoft-defender-atp/manage-indicators.md) in the Microsoft Defender for Endpoint portal, Microsoft Defender SmartScreen will respect the new settings. ## Microsoft Defender Antivirus The potentially unwanted application (PUA) protection feature in Microsoft Defender Antivirus can detect and block PUAs on endpoints in your network. > [!NOTE] -> This feature is available in Windows 10, Windows Server 2016 and Windows Server 2019. +> This feature is available in Windows 10, Windows Server 2019, and Windows Server 2016. Microsoft Defender Antivirus blocks detected PUA files and any attempts to download, move, run, or install them. Blocked PUA files are then moved to quarantine. From 52dd1c5cdca64ef02096b02842f22488a8fe07d0 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 30 Nov 2020 18:00:16 -0800 Subject: [PATCH 56/75] Update detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md --- ...ially-unwanted-apps-microsoft-defender-antivirus.md | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md index cb1802350e..4f07727faf 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md @@ -78,7 +78,7 @@ The potentially unwanted application (PUA) protection feature in Microsoft Defen Microsoft Defender Antivirus blocks detected PUA files and any attempts to download, move, run, or install them. Blocked PUA files are then moved to quarantine. -When a PUA file is detected on an endpoint, Microsoft Defender Antivirus sends a notification to the user ([unless notifications have been disabled](configure-notifications-microsoft-defender-antivirus.md)) in the same format as other threat detections. The notification will be prefaced with _PUA:_ to indicate its content. +When a PUA file is detected on an endpoint, Microsoft Defender Antivirus sends a notification to the user ([unless notifications have been disabled](configure-notifications-microsoft-defender-antivirus.md)) in the same format as other threat detections. The notification is prefaced with `PUA:` to indicate its content. The notification appears in the usual [quarantine list within the Windows Security app](microsoft-defender-security-center-antivirus.md#detection-history). @@ -91,7 +91,7 @@ You can also use the PUA audit mode to detect PUAs without blocking them. The de > [!TIP] > You can visit the Microsoft Defender for Endpoint demo website at [demo.wd.microsoft.com](https://demo.wd.microsoft.com/Page/UrlRep) to confirm that the feature is working, and see it in action. -PUA audit mode is useful if your company is conducting an internal software security compliance check and you'd like to avoid any false positives. +PUA protection in audit mode is useful if your company is conducting an internal software security compliance check and you'd like to avoid any false positives. #### Use Intune to configure PUA protection @@ -114,14 +114,16 @@ For System Center 2012 Configuration Manager, see [How to Deploy Potentially Unw 2. In the **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. -3. Expand the tree to **Windows components > Microsoft Defender Antivirus**. +3. Expand the tree to **Windows Components** > **Microsoft Defender Antivirus**. -4. Double-click **Configure protection for potentially unwanted applications**. +4. Double-click **Configure detection for potentially unwanted applications**. 5. Select **Enabled** to enable PUA protection. 6. In **Options**, select **Block** to block potentially unwanted applications, or select **Audit Mode** to test how the setting will work in your environment. Select **OK**. +7. Deploy your Group Policy object as you normally do. + #### Use PowerShell cmdlets to configure PUA protection ##### To enable PUA protection From f5b81edeb6c204d2edc41c9926ff68bd593cb363 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 30 Nov 2020 18:11:59 -0800 Subject: [PATCH 57/75] Update detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md --- ...otentially-unwanted-apps-microsoft-defender-antivirus.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md index 4f07727faf..8a4c1bedf3 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md @@ -122,7 +122,7 @@ For System Center 2012 Configuration Manager, see [How to Deploy Potentially Unw 6. In **Options**, select **Block** to block potentially unwanted applications, or select **Audit Mode** to test how the setting will work in your environment. Select **OK**. -7. Deploy your Group Policy object as you normally do. +7. Deploy your Group Policy object as you usually do. #### Use PowerShell cmdlets to configure PUA protection @@ -161,7 +161,9 @@ See [Troubleshoot event IDs](troubleshoot-microsoft-defender-antivirus.md) for d ### Allow-listing apps -Sometimes a file is erroneously blocked by PUA protection, or a feature of a PUA is required to complete a task. In these cases, a file can be allow-listed. See [How to Configure Endpoint Protection in Configuration Manager](https://docs.microsoft.com/previous-versions/system-center/system-center-2012-R2/hh508770(v=technet.10)#to-exclude-specific-files-or-folders) for information on allowing files which are currently blocked by PUA protection in Microsoft Defender Antivirus. +Sometimes a file is erroneously blocked by PUA protection, or a feature of a PUA is required to complete a task. In these cases, a file can be allow-listed. + +For more information, see [Recommended antivirus exclusions for Configuration Manager site servers, site systems, and clients](https://docs.microsoft.com/troubleshoot/mem/configmgr/recommended-antivirus-exclusions#exclusions). ## Related articles From 2c040a199e742ea9108bfeff6a0e031d349bdb64 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 30 Nov 2020 18:17:05 -0800 Subject: [PATCH 58/75] Update detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md --- ...otentially-unwanted-apps-microsoft-defender-antivirus.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md index 8a4c1bedf3..efd4782497 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md @@ -84,12 +84,12 @@ The notification appears in the usual [quarantine list within the Windows Securi ### Configure PUA protection in Microsoft Defender Antivirus -You can enable PUA protection with Microsoft Intune, Microsoft Endpoint Configuration Manager, Group Policy, or via PowerShell cmdlets. +You can enable PUA protection with [Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect), [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/en-us/mem/configmgr/protect/deploy-use/endpoint-protection), [Group Policy](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy), or via [PowerShell cmdlets](https://docs.microsoft.com/powershell/module/defender/?view=win10-ps). -You can also use the PUA audit mode to detect PUAs without blocking them. The detections will be captured in the Windows event log. +You can also use PUA protection in audit mode to detect potentially unwanted applications without blocking them. The detections will be captured in the Windows event log. > [!TIP] -> You can visit the Microsoft Defender for Endpoint demo website at [demo.wd.microsoft.com](https://demo.wd.microsoft.com/Page/UrlRep) to confirm that the feature is working, and see it in action. +> Visit the Microsoft Defender for Endpoint demo website at [demo.wd.microsoft.com](https://demo.wd.microsoft.com/Page/UrlRep) to confirm that the feature is working, and see it in action. PUA protection in audit mode is useful if your company is conducting an internal software security compliance check and you'd like to avoid any false positives. From 38a67b4d009e032b8b831bc5ba1871bc1763983a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 30 Nov 2020 18:34:35 -0800 Subject: [PATCH 59/75] Update detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md --- ...ck-potentially-unwanted-apps-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md index efd4782497..bd0e3070aa 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md @@ -84,7 +84,7 @@ The notification appears in the usual [quarantine list within the Windows Securi ### Configure PUA protection in Microsoft Defender Antivirus -You can enable PUA protection with [Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect), [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/en-us/mem/configmgr/protect/deploy-use/endpoint-protection), [Group Policy](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy), or via [PowerShell cmdlets](https://docs.microsoft.com/powershell/module/defender/?view=win10-ps). +You can enable PUA protection with [Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect), [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection), [Group Policy](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy), or via [PowerShell cmdlets](https://docs.microsoft.com/powershell/module/defender/?view=win10-ps). You can also use PUA protection in audit mode to detect potentially unwanted applications without blocking them. The detections will be captured in the Windows event log. From c9261008570f2864b9ea23305915320365185aff Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 30 Nov 2020 18:36:59 -0800 Subject: [PATCH 60/75] Update detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md --- ...ck-potentially-unwanted-apps-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md index bd0e3070aa..cb05c08abe 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md @@ -84,7 +84,7 @@ The notification appears in the usual [quarantine list within the Windows Securi ### Configure PUA protection in Microsoft Defender Antivirus -You can enable PUA protection with [Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect), [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection), [Group Policy](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy), or via [PowerShell cmdlets](https://docs.microsoft.com/powershell/module/defender/?view=win10-ps). +You can enable PUA protection with [Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/device-protect), [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection), [Group Policy](https://docs.microsoft.com/azure/active-directory-domain-services/manage-group-policy), or via [PowerShell cmdlets](https://docs.microsoft.com/powershell/module/defender/?view=win10-ps&preserve-view=true). You can also use PUA protection in audit mode to detect potentially unwanted applications without blocking them. The detections will be captured in the Windows event log. From d04f96611266cc8384051c6ae179a42754d0cdb1 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 30 Nov 2020 19:19:09 -0800 Subject: [PATCH 61/75] Applied `> [NOTE]`, fixed "Migitation", corrected ref link --- .../block-untrusted-fonts-in-enterprise.md | 15 +++++++++------ 1 file changed, 9 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/block-untrusted-fonts-in-enterprise.md b/windows/security/threat-protection/block-untrusted-fonts-in-enterprise.md index 70362c9d1c..c53dbda7a1 100644 --- a/windows/security/threat-protection/block-untrusted-fonts-in-enterprise.md +++ b/windows/security/threat-protection/block-untrusted-fonts-in-enterprise.md @@ -1,6 +1,6 @@ --- title: Block untrusted fonts in an enterprise (Windows 10) -description: To help protect your company from attacks which may originate from untrusted or attacker controlled font files, we’ve created the Blocking Untrusted Fonts feature. +description: To help protect your company from attacks which may originate from untrusted or attacker controlled font files, we've created the Blocking Untrusted Fonts feature. ms.assetid: a3354c8e-4208-4be6-bc19-56a572c361b4 ms.reviewer: manager: dansimp @@ -31,11 +31,14 @@ Blocking untrusted fonts helps improve your network and employee protection agai ## How does this feature work? There are 3 ways to use this feature: -- **On.** Helps stop any font processed using GDI from loading outside of the `%windir%/Fonts` directory. It also turns on event logging. +- **On.** Helps stop any font processed using GDI from loading outside of the `%windir%/Fonts` directory. It also turns on event logging. -- **Audit.** Turns on event logging, but doesn’t block fonts from loading, regardless of location. The name of the apps that use untrusted fonts appear in your event log.

**Note**
If you aren’t quite ready to deploy this feature into your organization, you can run it in Audit mode to see if not loading untrusted fonts causes any usability or compatibility issues. +- **Audit.** Turns on event logging, but doesn’t block fonts from loading, regardless of location. The name of the apps that use untrusted fonts appear in your event log. -- **Exclude apps to load untrusted fonts.** You can exclude specific apps, allowing them to load untrusted fonts, even while this feature is turned on. For instructions, see [Fix apps having problems because of blocked fonts](#fix-apps-having-problems-because-of-blocked-fonts). + > [!NOTE] + > If you aren’t quite ready to deploy this feature into your organization, you can run it in Audit mode to see if not loading untrusted fonts causes any usability or compatibility issues. + +- **Exclude apps to load untrusted fonts.** You can exclude specific apps, allowing them to load untrusted fonts, even while this feature is turned on. For instructions, see [Fix apps having problems because of blocked fonts](#fix-apps-having-problems-because-of-blocked-fonts). ## Potential reductions in functionality After you turn this feature on, your employees might experience reduced functionality when: @@ -56,7 +59,7 @@ Use Group Policy or the registry to turn this feature on, off, or to use audit m **To turn on and use the Blocking Untrusted Fonts feature through Group Policy** 1. Open the Group Policy editor (gpedit.msc) and go to `Computer Configuration\Administrative Templates\System\Mitigation Options\Untrusted Font Blocking`. -2. Click **Enabled** to turn the feature on, and then click one of the following **Migitation Options**: +2. Click **Enabled** to turn the feature on, and then click one of the following **Mitigation Options**: - **Block untrusted fonts and log events.** Turns the feature on, blocking untrusted fonts and logging installation attempts to the event log. @@ -139,7 +142,7 @@ After you figure out the problematic fonts, you can try to fix your apps in 2 wa 1. On each computer with the app installed, open regedit.exe and go to `HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\`.

For example, if you want to exclude Microsoft Word processes, you’d use `HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Winword.exe`. -2. Add any additional processes that need to be excluded here, and then turn the Blocking untrusted fonts feature on, using the steps in the [Turn on and use the Blocking Untrusted Fonts feature](#turn-on-and-use-the-blocking-untrusted-fonts-feature) section of this topic. +2. Add any additional processes that need to be excluded here, and then turn the Blocking untrusted fonts feature on, using the steps in [Turn on and use the Blocking Untrusted Fonts feature](#turn-on-and-use-the-blocking-untrusted-fonts-feature), earlier in this article. ## Related content From e38d45ee986b79719dfc20fb4c76a49f136611fb Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Mon, 30 Nov 2020 19:20:17 -0800 Subject: [PATCH 62/75] Hyphenated compound adjective --- .../threat-protection/block-untrusted-fonts-in-enterprise.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/block-untrusted-fonts-in-enterprise.md b/windows/security/threat-protection/block-untrusted-fonts-in-enterprise.md index c53dbda7a1..df9fb54db4 100644 --- a/windows/security/threat-protection/block-untrusted-fonts-in-enterprise.md +++ b/windows/security/threat-protection/block-untrusted-fonts-in-enterprise.md @@ -23,7 +23,7 @@ ms.localizationpriority: medium >Learn more about what features and functionality are supported in each Windows edition at [Compare Windows 10 Editions](https://www.microsoft.com/WindowsForBusiness/Compare). -To help protect your company from attacks which may originate from untrusted or attacker controlled font files, we’ve created the Blocking Untrusted Fonts feature. Using this feature, you can turn on a global setting that stops your employees from loading untrusted fonts processed using the Graphics Device Interface (GDI) onto your network. Untrusted fonts are any font installed outside of the `%windir%/Fonts` directory. Blocking untrusted fonts helps prevent both remote (web-based or email-based) and local EOP attacks that can happen during the font file-parsing process. +To help protect your company from attacks which may originate from untrusted or attacker-controlled font files, we’ve created the Blocking Untrusted Fonts feature. Using this feature, you can turn on a global setting that stops your employees from loading untrusted fonts processed using the Graphics Device Interface (GDI) onto your network. Untrusted fonts are any font installed outside of the `%windir%/Fonts` directory. Blocking untrusted fonts helps prevent both remote (web-based or email-based) and local EOP attacks that can happen during the font file-parsing process. ## What does this mean for me? Blocking untrusted fonts helps improve your network and employee protection against font-processing-related attacks. By default, this feature is not turned on. From f56a7dd035017370ef5ff97c8ad8a265ebe7fa65 Mon Sep 17 00:00:00 2001 From: Alekhya Jupudi Date: Tue, 1 Dec 2020 12:41:16 +0530 Subject: [PATCH 63/75] Add DISM command to 2 more migration articles as per PR #8700 Added DISM command in these two articles as per: https://github.com/MicrosoftDocs/windows-itpro-docs/pull/8700#pullrequestreview-541269350 (The two articles are this one: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup and this one: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup) --- .../mcafee-to-microsoft-defender-setup.md | 6 ++++++ .../switch-to-microsoft-defender-setup.md | 6 ++++++ 2 files changed, 12 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md index 858c7f0d06..6e55918615 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md @@ -91,6 +91,12 @@ The [DisableAntiSpyware](https://docs.microsoft.com/windows-hardware/customize/d `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
+> [!NOTE] +> When using the DISM command within a task sequence running PS, the following path to cmd.exe is required. +> Example:
+> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
+> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
+ 3. To verify Microsoft Defender Antivirus is running, use the following PowerShell cmdlet:
`Get-Service -Name windefend` diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md index b8c66898af..28403de16e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md @@ -87,6 +87,12 @@ The [DisableAntiSpyware](https://docs.microsoft.com/windows-hardware/customize/d `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
+> [!NOTE] +> When using the DISM command within a task sequence running PS, the following path to cmd.exe is required. +> Example:
+> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
+> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
+ 3. To verify Microsoft Defender Antivirus is running, use the following PowerShell cmdlet:
`Get-Service -Name windefend` From d41fb45e8593df1da4da6bef8a7391b66253c5ab Mon Sep 17 00:00:00 2001 From: Ben Date: Tue, 1 Dec 2020 12:13:34 +0200 Subject: [PATCH 64/75] Update get-started-partner-integration.md --- .../get-started-partner-integration.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-started-partner-integration.md b/windows/security/threat-protection/microsoft-defender-atp/get-started-partner-integration.md index 3ab82897fa..fd7da12f88 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-started-partner-integration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-started-partner-integration.md @@ -50,14 +50,14 @@ To have your company listed as a partner in the in-product partner page, you wil 4. Link to the landing page for the customer to complete the integration or blog post that will include sufficient information for customers. Any press release including the Microsoft Defender ATP product name should be reviewed by the marketing and engineering teams. Wait for at least 10 days for the review process to be done. 5. If you use a multi-tenant Azure AD approach, we will need the Azure AD application name to track usage of the application. 6. Include the User-Agent field in each API call made to Microsoft Defender for Endpoint public set of APIs or Graph Security APIs. This will be used for statistical purposes, troubleshooting, and partner recognition. In addition, this step is a requirement for membership in Microsoft Intelligent Security Association (MISA). - Follow these steps: - 1. Identify a name adhering to the following nomenclature that includes your company name and the Microsoft Defender ATP-integrated product with the version of the product that includes this integration. - - ISV Nomenclature: `MdatpPartner-{CompanyName}-{ProductName}/{Version}` - - Security partner Nomenclature: `MdatpPartner-{CompanyName}-{ProductName}/{TenantID}` - 2. Set the User-Agent field in each HTTP request header to the name based on the above nomenclature. - For more information, see [RFC 2616 section-14.43](https://tools.ietf.org/html/rfc2616#section-14.43). For example, User-Agent: `MdatpPartner-Contoso-ContosoCognito/1.0.0` + - Set the User-Agent field in each HTTP request header to the name based on the Following nomenclature. + - `MsdePartner-{CompanyName}-{ProductName}/{Version}` + + - For example, User-Agent: `MdatpPartner-Contoso-ContosoCognito/1.0.0` + + - For more information, see [RFC 2616 section-14.43](https://tools.ietf.org/html/rfc2616#section-14.43). Partnerships with Microsoft Defender for Endpoint help our mutual customers to further streamline, integrate, and orchestrate defenses. We are happy that you chose to become a Microsoft Defender for Endpoint partner and to achieve our common goal of effectively protecting customers and their assets by preventing and responding to modern threats together. From a86bdcca8dda061766281db5f04efe271a66dc6b Mon Sep 17 00:00:00 2001 From: schmurky Date: Tue, 1 Dec 2020 19:58:59 +0800 Subject: [PATCH 65/75] remove alias --- .../microsoft-defender-atp/linux-support-perf.md | 16 ++++++---------- 1 file changed, 6 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md index c2520ac1b7..2281e692f9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md @@ -110,16 +110,12 @@ The following steps can be used to troubleshoot and mitigate these issues: cat real_time_protection.json | python high_cpu_parser.py > real_time_protection.log ``` - The output of the above command displays all the processes and their associated scan activity. - - To improve the performance of Defender for Endpoint for Linux, locate the one with the highest number under the `Total files scanned` row and add an exclusion for it. For more information, see [Configure and validate exclusions for Defender for Endpoint for Linux](linux-exclusions.md). - - The output is list of the top contributors to the performance issues. The 1st column is the process identifier (PID), the 2nd column is te process name, and the last column is the number of scanned files, sorted by impact. + The output of the above is a list of the top contributors to performance issues. The first column is the process identifier (PID), the second column is te process name, and the last column is the number of scanned files, sorted by impact. For example, the output of the command will be something like the below: ```Output - mavel@mavel-mac:/Users/mavel > python ~/repo/mdatp-xplat/linux/diagnostic/high_cpu_parser.py <~Downloads/output.json | head -n 10 + ... > python ~/repo/mdatp-xplat/linux/diagnostic/high_cpu_parser.py <~Downloads/output.json | head -n 10 27432 None 76703 73467 actool     1249 73914 xcodebuild 1081 @@ -131,11 +127,11 @@ The following steps can be used to troubleshoot and mitigate these issues: 4764 None 228 125  CrashPlanService 164 ``` -  - +   + To improve the performance of Defender for Endpoint for Linux, locate the one with the highest number under the `Total files scanned` row and add an exclusion for it. For more information, see [Configure and validate exclusions for Defender for Endpoint for Linux](linux-exclusions.md). ->[!NOTE] -> The application stores statistics in memory and only keeps track of file activity since it was started and real-time protection was enabled. Processes that were launched before or during periods when real time protection was off are not counted. Additionally, only events which triggered scans are counted. + >[!NOTE] + > The application stores statistics in memory and only keeps track of file activity since it was started and real-time protection was enabled. Processes that were launched before or during periods when real time protection was off are not counted. Additionally, only events which triggered scans are counted. 5. Configure Microsoft Defender ATP for Linux with exclusions for the processes or disk locations that contribute to the performance issues and re-enable real-time protection. From e15a00e7e5a328e635cc204396a9373abfbc0d93 Mon Sep 17 00:00:00 2001 From: schmurky Date: Tue, 1 Dec 2020 20:02:54 +0800 Subject: [PATCH 66/75] removed indent --- .../microsoft-defender-atp/linux-support-perf.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md index 2281e692f9..e6585fc97f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-perf.md @@ -128,7 +128,7 @@ The following steps can be used to troubleshoot and mitigate these issues: 125  CrashPlanService 164 ```   - To improve the performance of Defender for Endpoint for Linux, locate the one with the highest number under the `Total files scanned` row and add an exclusion for it. For more information, see [Configure and validate exclusions for Defender for Endpoint for Linux](linux-exclusions.md). + To improve the performance of Defender for Endpoint for Linux, locate the one with the highest number under the `Total files scanned` row and add an exclusion for it. For more information, see [Configure and validate exclusions for Defender for Endpoint for Linux](linux-exclusions.md). >[!NOTE] > The application stores statistics in memory and only keeps track of file activity since it was started and real-time protection was enabled. Processes that were launched before or during periods when real time protection was off are not counted. Additionally, only events which triggered scans are counted. From d9cbe353e85a8f0e1679c1e9d1a2334ffa0d0132 Mon Sep 17 00:00:00 2001 From: Obi Eze Ajoku <62227226+linque1@users.noreply.github.com> Date: Tue, 1 Dec 2020 09:10:44 -0800 Subject: [PATCH 67/75] Updated new ownership to robsize Updated new ownership to robsize --- ...windows-operating-system-components-to-microsoft-services.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index c72bdf03e9..1e031a8873 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -14,7 +14,7 @@ ms.author: obezeajo manager: robsize ms.collection: M365-security-compliance ms.topic: article -ms.date: 7/7/2020 +ms.date: 12/1/2020 --- # Manage connections from Windows 10 operating system components to Microsoft services From 98fa7e0b1080189875ad55c5cc872a4a5a32c04f Mon Sep 17 00:00:00 2001 From: Obi Eze Ajoku <62227226+linque1@users.noreply.github.com> Date: Tue, 1 Dec 2020 10:08:34 -0800 Subject: [PATCH 68/75] Updated msauthor to robsize Updated msauthor to robsize ; obezeajo moving to another project --- ...ndows-operating-system-components-to-microsoft-services.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index 1e031a8873..8cb3b4d424 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -10,11 +10,11 @@ ms.sitesec: library ms.localizationpriority: high audience: ITPro author: linque1 -ms.author: obezeajo +ms.author: robsize manager: robsize ms.collection: M365-security-compliance ms.topic: article -ms.date: 12/1/2020 +ms.date: 12/1/2020 --- # Manage connections from Windows 10 operating system components to Microsoft services From 9f0769a350cde5972f9eb280d0c27e58a35f7a94 Mon Sep 17 00:00:00 2001 From: Obi Eze Ajoku <62227226+linque1@users.noreply.github.com> Date: Tue, 1 Dec 2020 10:43:33 -0800 Subject: [PATCH 69/75] Removing space after date Removing space after date --- ...windows-operating-system-components-to-microsoft-services.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index 8cb3b4d424..4c6e0b8880 100644 --- a/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -14,7 +14,7 @@ ms.author: robsize manager: robsize ms.collection: M365-security-compliance ms.topic: article -ms.date: 12/1/2020 +ms.date: 12/1/2020 --- # Manage connections from Windows 10 operating system components to Microsoft services From 05868908dfc5a42def9104331b4ad36498eeae25 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Tue, 1 Dec 2020 14:01:32 -0800 Subject: [PATCH 70/75] Various minor fixes, mostly Acrolinx --- .../microsoft-defender-atp/indicator-certificates.md | 2 +- .../microsoft-defender-atp/ios-configure-features.md | 2 +- .../microsoft-defender-atp/mac-install-with-intune.md | 2 +- .../password-must-meet-complexity-requirements.md | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md b/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md index 6948f7a392..f0439ebf7f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md +++ b/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md @@ -42,7 +42,7 @@ It's important to understand the following requirements prior to creating indica - This feature is available if your organization uses Windows Defender Antivirus and Cloud-based protection is enabled. For more information, see [Manage cloud-based protection](../windows-defender-antivirus/deploy-manage-report-windows-defender-antivirus.md). - The Antimalware client version must be 4.18.1901.x or later. - Supported on machines on Windows 10, version 1703 or later, Windows server 2016 and 2019. -- The virus and threat protection definitions must be up-to-date. +- The virus and threat protection definitions must be up to date. - This feature currently supports entering .CER or .PEM (Base64 ASCII) encoding based certificates. >[!IMPORTANT] diff --git a/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md b/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md index 68c6dfd43f..733c2fdbd1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md +++ b/windows/security/threat-protection/microsoft-defender-atp/ios-configure-features.md @@ -37,7 +37,7 @@ ms.topic: conceptual ## Configure compliance policy against jailbroken devices -To protect corporate data from being accessed on jailbroken iOS devices, we recommend that you setup the following compliance policy on Intune. +To protect corporate data from being accessed on jailbroken iOS devices, we recommend that you set up the following compliance policy on Intune. > [!NOTE] > Currently Defender for Endpoint for iOS does not provide protection against jailbreak scenarios. Some data like your corporate email id and corporate profile picture (if available) will be exposed to the attacker on the jailbroken device. diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md b/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md index cb1c7d7be7..319d2756e1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune.md @@ -56,7 +56,7 @@ The following table summarizes the steps you would need to take to deploy and ma | [Grant full disk access to Microsoft Defender for Endpoint](#create-system-configuration-profiles-step-8) | MDATP_tcc_Catalina_or_newer.xml | com.microsoft.wdav.tcc | | [Network Extension policy](#create-system-configuration-profiles-step-9) | MDATP_NetExt.xml | N/A | | [Configure Microsoft AutoUpdate (MAU)](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/mac-updates#intune) | MDATP_Microsoft_AutoUpdate.xml | com.microsoft.autoupdate2 | -| [Microsoft Defender for Endpoint configuration settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#intune-profile-1)

**Note:** If you are planning to run a third party AV for macOS, set `passiveMode` to `true`. | MDATP_WDAV_and_exclusion_settings_Preferences.xml | com.microsoft.wdav | +| [Microsoft Defender for Endpoint configuration settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/mac-preferences#intune-profile-1)

**Note:** If you are planning to run a third-party AV for macOS, set `passiveMode` to `true`. | MDATP_WDAV_and_exclusion_settings_Preferences.xml | com.microsoft.wdav | | [Configure Microsoft Defender for Endpoint and MS AutoUpdate (MAU) notifications](#create-system-configuration-profiles-step-10) | MDATP_MDAV_Tray_and_AutoUpdate2.mobileconfig | com.microsoft.autoupdate2 or com.microsoft.wdav.tray | ## Download installation and onboarding packages diff --git a/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements.md b/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements.md index d9e0d8d50b..c1ccd042f6 100644 --- a/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements.md +++ b/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements.md @@ -27,7 +27,7 @@ Describes the best practices, location, values, and security considerations for The **Passwords must meet complexity requirements** policy setting determines whether passwords must meet a series of strong-password guidelines. When enabled, this setting requires passwords to meet the following requirements: -1. Passwords may not contain the user's samAccountName (Account Name) value or entire displayName (Full Name value). Both checks are not case sensitive. +1. Passwords may not contain the user's samAccountName (Account Name) value or entire displayName (Full Name value). Both checks are not case-sensitive. The samAccountName is checked in its entirety only to determine whether it is part of the password. If the samAccountName is fewer than three characters long, this check is skipped. The displayName is parsed for delimiters: commas, periods, dashes or hyphens, underscores, spaces, pound signs, and tabs. If any of these delimiters are found, the displayName is split and all parsed sections (tokens) are confirmed not to be included in the password. Tokens that are shorter than three characters are ignored, and substrings of the tokens are not checked. For example, the name "Erin M. Hagens" is split into three tokens: "Erin", "M", and "Havens". Because the second token is only one character long, it is ignored. Therefore, this user could not have a password that included either "erin" or "havens" as a substring anywhere in the password. From 13803f2d5c754fbfaf0722e7b69295cb3abdec53 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Tue, 1 Dec 2020 15:10:56 -0700 Subject: [PATCH 71/75] safety commit --- .../update/feature-update-mission-critical.md | 4 +- .../update/how-windows-update-works.md | 63 +++++++++---------- .../update/waas-manage-updates-wufb.md | 22 +++---- windows/deployment/update/waas-restart.md | 25 ++++---- .../update/windows-update-errors.md | 19 +++--- .../update/windows-update-troubleshooting.md | 16 ++--- 6 files changed, 74 insertions(+), 75 deletions(-) diff --git a/windows/deployment/update/feature-update-mission-critical.md b/windows/deployment/update/feature-update-mission-critical.md index a36563477b..c44569853e 100644 --- a/windows/deployment/update/feature-update-mission-critical.md +++ b/windows/deployment/update/feature-update-mission-critical.md @@ -31,10 +31,10 @@ Devices and shared workstations that are online and available 24 hours a day, 7 You can use Configuration Manager to deploy feature updates to Windows 10 devices in two ways. The first option is to use the software updates feature. The second option is to use a task sequence to deploy feature updates. There are times when deploying a Windows 10 feature update requires the use of a task sequence—for example: - **Upgrade to the next LTSC release.** With the LTSC servicing branch, feature updates are never provided to the Windows clients themselves. Instead, feature updates must be installed like a traditional in-place upgrade. -- **Additional required tasks.** When deploying a feature update requires additional steps (e.g., suspending disk encryption, updating applications), you can use task sequences to orchestrate the additional steps. Software updates do not have the ability to add steps to their deployments. +- **Additional required tasks.** When deploying a feature update requires additional steps (for example, suspending disk encryption, updating applications), you can use task sequences to orchestrate the additional steps. Software updates do not have the ability to add steps to their deployments. - **Language pack installations.** When deploying a feature update requires the installation of additional language packs, you can use task sequences to orchestrate the installation. Software updates do not have the ability to natively install language packs. -If you need to use a task sequence to deploy feature updates, see [Manage Windows as a service using Configuration Manager](https://docs.microsoft.com/configmgr/osd/deploy-use/manage-windows-as-a-service) for more information. If you find that your requirement for a task sequence is based solely on the need to run additional tasks preformed pre-install or pre-commit, see the new [run custom actions](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-setup-enable-custom-actions) functionality first introduced with Windows 10, version 1803. You might find this useful in deploying software updates. +If you need to use a task sequence to deploy feature updates, see [Manage Windows as a service using Configuration Manager](https://docs.microsoft.com/configmgr/osd/deploy-use/manage-windows-as-a-service) for more information. If you find that your requirement for a task sequence is based solely on the need to run additional tasks performed pre-install or pre-commit, see the new [run custom actions](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-setup-enable-custom-actions) functionality first introduced with Windows 10, version 1803. You might find this option useful in deploying software updates. Use the following information: diff --git a/windows/deployment/update/how-windows-update-works.md b/windows/deployment/update/how-windows-update-works.md index 6bab8477a5..44bbae9ebf 100644 --- a/windows/deployment/update/how-windows-update-works.md +++ b/windows/deployment/update/how-windows-update-works.md @@ -28,7 +28,7 @@ The Windows Update workflow has four core areas of functionality: ### Download -1. Orchestrator initiates downloads. +1. Orchestrator starts downloads. 2. Windows Update downloads manifest files and provides them to the arbiter. 3. The arbiter evaluates the manifest and tells the Windows Update client to download files. 4. Windows Update client downloads files in a temporary folder. @@ -36,54 +36,54 @@ The Windows Update workflow has four core areas of functionality: ### Install -1. Orchestrator initiates the installation. +1. Orchestrator starts the installation. 2. The arbiter calls the installer to install the package. ### Commit -1. Orchestrator initiates a restart. +1. Orchestrator starts a restart. 2. The arbiter finalizes before the restart. ## How updating works -During the updating process, the Windows Update Orchestrator operates in the background to scan, download, and install updates. It does this automatically, according to your settings, and in a silent manner that doesn't disrupt your computer usage. +During the updating process, the Windows Update Orchestrator operates in the background to scan, download, and install updates. It does these actions automatically, according to your settings, and silently so that doesn't disrupt your computer usage. ## Scanning updates ![Windows Update scanning step](images/update-scan-step.png) The Windows Update Orchestrator on your PC checks the Microsoft Update server or your WSUS endpoint for new updates at random intervals. The randomization ensures that the Windows Update server isn't overloaded with requests all at the same time. The Update Orchestrator searches only for updates that have been added since the last time updates were searched, allowing it to find updates quickly and efficiently. -When checking for updates, the Windows Update Orchestrator evaluates whether the update is appropriate for your computer using guidelines defined by the publisher of the update, for example, Microsoft Office including enterprise group policies. +When checking for updates, the Windows Update Orchestrator evaluates whether the update is appropriate for your device. It uses guidelines defined by the publisher of the update, for example, Microsoft Office including enterprise group policies. Make sure you're familiar with the following terminology related to Windows Update scan: |Term|Definition| |----|----------| -|Update|We use this term to mean a lot of different things, but in this context it's the actual patch or change.| +|Update|We use this term to mean several different things, but in this context it's the actual updated code or change.| |Bundle update|An update that contains 1-N child updates; doesn't contain payload itself.| |Child update|Leaf update that's bundled by another update; contains payload.| -|Detectoid update|A special 'update' that contains "IsInstalled" applicability rule only and no payload. Used for prereq evaluation.| -|Category update|A special 'detectoid' that has always true IsInstalled rule. Used for grouping updates and for client to filter updates. | +|Detector update|A special "update" that contains "IsInstalled" applicability rule only and no payload. Used for prereq evaluation.| +|Category update|A special "detectoid" that has an **IsInstalled** rule that is always true. Used for grouping updates and to allow the device to filter updates. | |Full scan|Scan with empty datastore.| |Delta scan|Scan with updates from previous scan already cached in datastore.| -|Online scan|Scan that hits network and goes against server on cloud. | -|Offline scan|Scan that doesn't hit network and goes against local datastore. Only useful if online scan has been performed before. | -|CatScan|Category scan where caller can specify a categoryId to get updates published under the categoryId.| -|AppCatScan|Category scan where caller can specify an AppCategoryId to get apps published under the appCategoryId.| -|Software sync|Part of the scan that looks at software updates only (OS and apps).| -|Driver sync|Part of the scan that looks at Driver updates only. This is run after Software sync and is optional.| -|ProductSync|Attributes based sync, where client provides a list of device, product and caller attributes ahead of time to allow service to evaluate applicability in the cloud. | +|Online scan|Scan that uses the network and to check an update server. | +|Offline scan|Scan that doesn't use the network and instead checks the local datastore. Only useful if online scan has been performed before. | +|CatScan|Category scan where caller can specify a **categoryId** to get updates published under that **categoryId**.| +|AppCatScan|Category scan where caller can specify an **AppCategoryId** to get apps published under that **appCategoryId**.| +|Software sync|Part of the scan that only checks for software updates (both the apps and the operating system).| +|Driver sync|Part of the scan that checks driver updates only. This sync is optional and runs after the software sync.| +|ProductSync|A sync based on attributes, in which the client provides a list of device, product, and caller attributes ahead of time to allow service to check applicability in the cloud. | ### How Windows Update scanning works -Windows Update takes the following sets of actions when it runs a scan. +Windows Update does the following actions when it runs a scan. #### Starts the scan for updates When users start scanning in Windows Update through the Settings panel, the following occurs: -- The scan first generates a “ComApi” message. The caller (Microsoft Defender Antivirus) tells the WU engine to scan for updates. +- The scan first generates a “ComApi” message. The caller (Microsoft Defender Antivirus) tells the Windows Update engine to scan for updates. - "Agent" messages: queueing the scan, then actually starting the work: - - Updates are identified by the different IDs ("Id = 10", "Id = 11") and from the different thread ID numbers. + - Updates are identified by the different IDs ("ID = 10", "ID = 11") and from the different thread ID numbers. - Windows Update uses the thread ID filtering to concentrate on one particular task. ![Windows Update scan log 1](images/update-scan-log-1.png) @@ -91,20 +91,19 @@ When users start scanning in Windows Update through the Settings panel, the foll #### Identifies service IDs - Service IDs indicate which update source is being scanned. - Note The next screen shot shows Microsoft Update and the Flighting service. - The Windows Update engine treats every service as a separate entity, even though multiple services may contain the same updates. ![Windows Update scan log 2](images/update-scan-log-2.png) - Common service IDs > [!IMPORTANT] - > ServiceId here identifies a client abstraction, not any specific service in the cloud. No assumption should be made of which server a serviceId is pointing to, it's totally controlled by the SLS responses. + > ServiceId here identifies a client abstraction, not any specific service in the cloud. No assumption should be made of which server a serviceId is pointing to. It's totally controlled by responses from the Service Locator Service. |Service|ServiceId| |-------|---------| -|Unspecified / Default|WU, MU or WSUS
00000000-0000-0000-0000-000000000000 | -|WU|9482F4B4-E343-43B6-B170-9A65BC822C77| -|MU|7971f918-a847-4430-9279-4a52d1efe18d| +|Unspecified / Default|WU, MU, or WSUS
00000000-0000-0000-0000-000000000000 | +|Windows Update|9482F4B4-E343-43B6-B170-9A65BC822C77| +|Microsoft Update|7971f918-a847-4430-9279-4a52d1efe18d| |Store|855E8A7C-ECB4-4CA3-B045-1DFA50104289| |OS Flighting|8B24B027-1DEE-BABB-9A95-3517DFB9C552| |WSUS or Configuration Manager|Via ServerSelection::ssManagedServer
3DA21691-E39D-4da6-8A4B-B43877BCB1B7 | @@ -115,33 +114,33 @@ Common update failure is caused due to network issues. To find the root of the i - Look for "ProtocolTalker" messages to see client-server sync network traffic. - "SOAP faults" can be either client- or server-side issues; read the message. -- The WU client uses SLS (Service Locator Service) to discover the configurations and endpoints of Microsoft network update sources – WU, MU, Flighting. +- The Windows Update client uses the Service Locator Service to discover the configurations and endpoints of Microsoft network update sources: Windows update, Microsoft Update, or Flighting. > [!NOTE] - > Warning messages for SLS can be ignored if the search is against WSUS or Configuration Manager. + > If the search is against WSUS or Configuration Manager, you can ignore warning messages for the Service Locator Service. -- On sites that only use WSUS or Configuration Manager, the SLS may be blocked at the firewall. In this case the SLS request will fail, and can’t scan against Windows Update or Microsoft Update but can still scan against WSUS or Configuration Manager, since it’s locally configured. +- On sites that only use WSUS or Configuration Manager, the Service Locator Service might be blocked at the firewall. In this case the request will fail, and though the service can’t scan against Windows Update or Microsoft Update, it can still scan against WSUS or Configuration Manager, since it’s locally configured. ![Windows Update scan log 3](images/update-scan-log-3.png) ## Downloading updates ![Windows Update download step](images/update-download-step.png) -Once the Windows Update Orchestrator determines which updates apply to your computer, it will begin downloading the updates, if you have selected the option to automatically download updates. It does this in the background without interrupting your normal use of the computer. +Once the Windows Update Orchestrator determines which updates apply to your computer, it will begin downloading the updates, if you have selected the option to automatically download updates. It does operation in the background without interrupting your normal use of the device. -To ensure that your other downloads aren't affected or slowed down because updates are downloading, Windows Update uses the Delivery Optimization technology which downloads updates and reduces bandwidth consumption. +To ensure that your other downloads aren't affected or slowed down because updates are downloading, Windows Update uses Delivery Optimization, which downloads updates and reduces bandwidth consumption. -For more information see [Configure Delivery Optimization for Windows 10 updates](waas-delivery-optimization.md). +For more information, see [Configure Delivery Optimization for Windows 10 updates](waas-delivery-optimization.md). ## Installing updates ![Windows Update install step](images/update-install-step.png) When an update is applicable, the "Arbiter" and metadata are downloaded. Depending on your Windows Update settings, when downloading is complete, the Arbiter will gather details from the device, and compare that with the downloaded metadata to create an "action list". -The action list describes all the files needed from WU, and what the install agent (such as CBS or Setup) should do with them. The action list is provided to the install agent along with the payload to begin the installation. +The action list describes all the files needed from Windows Update, and what the installation agent (such as CBS or Setup) should do with them. The action list is provided to the installation agent along with the payload to begin the installation. ## Committing Updates ![Windows Update commit step](images/update-commit-step.png) -When the option to automatically install updates is configured, the Windows Update Orchestrator, in most cases, automatically restarts the PC for you after installing the updates. This is necessary because your PC may be insecure, or not fully updated, until a restart is completed. You can use Group Policy settings, mobile device management (MDM), or the registry (not recommended) to configure when devices will restart after a Windows 10 update is installed. +When the option to automatically install updates is configured, the Windows Update Orchestrator, in most cases, automatically restarts the device for you after installing the updates. It has to restart the device because it might be insecure, or not fully updated, until it restarts. You can use Group Policy settings, mobile device management (MDM), or the registry (not recommended) to configure when devices will restart after a Windows 10 update is installed. -For more information see [Manage device restarts after updates](waas-restart.md). +For more information, see [Manage device restarts after updates](waas-restart.md). diff --git a/windows/deployment/update/waas-manage-updates-wufb.md b/windows/deployment/update/waas-manage-updates-wufb.md index d1f41bc2bd..00fb15eb81 100644 --- a/windows/deployment/update/waas-manage-updates-wufb.md +++ b/windows/deployment/update/waas-manage-updates-wufb.md @@ -27,7 +27,7 @@ Windows Update for Business is a free service that is available for all premium Windows Update for Business enables IT administrators to keep the Windows 10 devices in their organization always up to date with the latest security defenses and Windows features by directly connecting these systems to Windows Update service. You can use Group Policy or Mobile Device Management (MDM) solutions such as Microsoft Intune to configure the Windows Update for Business settings that control how and when Windows 10 devices are updated. -Specifically, Windows Update for Business allows for control over update offerings and experiences to allow for reliability and performance testing on a subset of devices before deploying updates across the organization as well as a positive update experience for those in your organization. +Specifically, Windows Update for Business lets you control update offerings and experiences to allow for reliability and performance testing on a subset of devices before deploying updates across the organization. It also provides a positive update experience for people in your organization. ## What can I do with Windows Update for Business? @@ -47,9 +47,9 @@ Windows Update for Business enables an IT administrator to receive and manage a Windows Update for Business provides management policies for several types of updates to Windows 10 devices: - **Feature updates:** Previously referred to as "upgrades," feature updates contain not only security and quality revisions, but also significant feature additions and changes. Feature updates are released semi-annually in the fall and in the spring. -- **Quality updates:** These are traditional operating system updates, typically released on the second Tuesday of each month (though they can be released at any time). These include security, critical, and driver updates. Windows Update for Business also treats non-Windows updates (such as those for Microsoft Office or Visual Studio) as quality updates. These non-Windows Updates are known as "Microsoft updates" and you can set devices to receive such updates (or not) along with their Windows updates. -- **Driver updates:** These are non-Microsoft drivers that are applicable to your devices. Driver updates are on by default, but you can use Windows Update for Business policies to turn them off if you prefer. -- **Microsoft product updates**: These are updates for other Microsoft products, such as Office. Product updates are off by default. You can turn them on by using Windows Update for Business policies. +- **Quality updates:** Quality updates are traditional operating system updates, typically released on the second Tuesday of each month (though they can be released at any time). These include security, critical, and driver updates. Windows Update for Business also treats non-Windows updates (such as updates for Microsoft Office or Visual Studio) as quality updates. These non-Windows Updates are known as "Microsoft updates" and you can set devices to receive such updates (or not) along with their Windows updates. +- **Driver updates:** Updates for non-Microsoft drivers that are relevant to your devices. Driver updates are on by default, but you can use Windows Update for Business policies to turn them off if you prefer. +- **Microsoft product updates**: Updates for other Microsoft products, such as Office. Product updates are off by default. You can turn them on by using Windows Update for Business policies. ## Offering @@ -71,7 +71,7 @@ Prior to Windows 10, version 1903, there are two channels for released updates: #### Defer an update -A Windows Update for Business administrator can defer the installation of both feature and quality updates from deploying to devices within a bounded range of time from when those updates are first made available on the Windows Update service. You can use this deferral to allow time to validate deployments as they are pushed to devices. Deferrals work by allowing you to specify the number of days after an update is released before it is offered to a device. That is, if you set a feature update deferral period of 365 days, the device will not install a feature update that has been released for less than 365 days. To defer feature updates use the **Select when Preview Builds and Feature Updates are Received** policy. +A Windows Update for Business administrator can defer the installation of both feature and quality updates from deploying to devices within a bounded range of time from when those updates are first made available on the Windows Update service. You can use this deferral to allow time to validate deployments as they are pushed to devices. Deferrals work by allowing you to specify the number of days after an update is released before it is offered to a device. That is, if you set a feature update deferral period of 365 days, the device will not install a feature update that has been released for less than 365 days. To defer feature updates, use the **Select when Preview Builds and Feature Updates are Received** policy. |Category |Maximum deferral period | @@ -88,10 +88,10 @@ A Windows Update for Business administrator can defer the installation of both f If you discover a problem while deploying a feature or quality update, the IT administrator can pause the update for 35 days from a specified start date to prevent other devices from installing it until the issue is mitigated. If you pause a feature update, quality updates are still offered to devices to ensure they stay secure. The pause period for both feature and quality updates is calculated from a start date that you set. -To pause feature updates use the **Select when Preview Builds and Feature Updates are Received** policy and to pause quality updates use the **Select when Quality Updates are Received** policy. For more information, see [Pause feature updates](waas-configure-wufb.md#pause-feature-updates) and [Pause quality updates](waas-configure-wufb.md#pause-quality-updates). +To pause feature updates, use the **Select when Preview Builds and Feature Updates are Received** policy and to pause quality updates use the **Select when Quality Updates are Received** policy. For more information, see [Pause feature updates](waas-configure-wufb.md#pause-feature-updates) and [Pause quality updates](waas-configure-wufb.md#pause-quality-updates). -Built in benefits: -When updating from Windows Update you get the added benefits of built in compatibility checks to prevent against a poor update experience for your device as well as a check to prevent repeated rollbacks. +Built-in benefits: +When updating from Windows Update, you get the added benefits of built-in compatibility checks to prevent against a poor update experience for your device as well as a check to prevent repeated rollbacks. ### Recommendations @@ -104,13 +104,13 @@ For the best experience with Windows Update, follow these guidelines: ### Manage the end-user experience when receiving Windows Updates -Windows Update for Business provides controls to help meet your organization’s security standards as well as provide a great end-user experience. We do this by enabling you to set automatic updates at times that work well for those in your organization and set deadlines for quality and feature updates. Because Windows Update includes built-in intelligence, it's usually better to use fewer controls to manage the end-user experience. +Windows Update for Business provides controls to help meet your organization’s security standards as well as provide a great end-user experience. We do this by enabling you to set automatic updates at times that work well for people in your organization and set deadlines for quality and feature updates. Because Windows Update includes built-in intelligence, it's better to use fewer controls to manage the user experience. #### Recommended experience settings Features like the smart busy check (which ensure updates don't happen when a user is signed in) and active hours help provide the best experience for end users while keeping devices more secure and up to date. Follow these steps to take advantage of these features: -1. Automatically download, install and restart (default if no restart policies are set up or enabled) +1. Automatically download, install, and restart (default if no restart policies are set up or enabled) 2. Use the default notifications 3. Set update deadlines @@ -118,7 +118,7 @@ Features like the smart busy check (which ensure updates don't happen when a use A compliance deadline policy (released in June 2019) enables you to set separate deadlines and grace periods for feature and quality updates. -This policy enables you to specify the number of days from an update's publication date that it must be installed on the device. The policy also includes a configurable grace period that specifies the number of days from when the update is installed on the device until the device is forced to restart. This is extremely beneficial in a vacation scenario as it allows, for example, users who have been away to have a bit of time before being forced to restart their devices when they return from vacation. +This policy enables you to specify the number of days from an update's publication date that it must be installed on the device. The policy also includes a configurable grace period that specifies the number of days from when the update is installed on the device until the device is forced to restart. This approach is useful in a vacation scenario as it allows, for example, users who have been away to have a bit of time before being forced to restart their devices when they return from vacation. #### Update Baseline The large number of different policies offered for Windows 10 can be overwhelming. Update Baseline provides a clear list of recommended Windows update policy settings for IT administrators who want the best user experience while also meeting their update compliance goals. The Update Baseline for Windows 10 includes policy settings recommendations covering deadline configuration, restart behavior, power policies, and more. diff --git a/windows/deployment/update/waas-restart.md b/windows/deployment/update/waas-restart.md index 4f59f66eec..cf357be8c6 100644 --- a/windows/deployment/update/waas-restart.md +++ b/windows/deployment/update/waas-restart.md @@ -1,6 +1,6 @@ --- title: Manage device restarts after updates (Windows 10) -description: Use Group Policy settings, mobile device management (MDM) or Registry to configure when devices will restart after a Windows 10 update is installed. +description: Use Group Policy settings, mobile device management (MDM), or Registry to configure when devices will restart after a Windows 10 update is installed. ms.prod: w10 ms.mktglfcycl: deploy author: jaimeo @@ -23,7 +23,7 @@ ms.custom: > **Looking for consumer information?** See [Windows Update: FAQ](https://support.microsoft.com/help/12373/windows-update-faq) -You can use Group Policy settings, mobile device management (MDM) or Registry (not recommended) to configure when devices will restart after a Windows 10 update is installed. You can schedule update installation and set policies for restart, configure active hours for when restarts will not occur, or you can do both. +You can use Group Policy settings, mobile device management (MDM), or Registry (not recommended) to configure when devices will restart after a Windows 10 update is installed. You can schedule update installation and set policies for restart, configure active hours for when restarts will not occur, or you can do both. ## Schedule update installation @@ -77,11 +77,12 @@ MDM uses the [Update/ActiveHoursStart and Update/ActiveHoursEnd](https://msdn.mi ### Configuring active hours through Registry -This method is not recommended, and should only be used when neither Group Policy or MDM are available. +This method is not recommended, and should only be used when you can't use Group Policy or MDM. Any settings configured through Registry may conflict with any existing configuration that uses any of the methods mentioned above. -You should set a combination of the following registry values, in order to configure active hours. -Under **HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate** use **SetActiveHours** to enable or disable active hours and **ActiveHoursStart**,**ActiveHoursEnd** to specify the range of active hours. +Configure active hours by setting a combination of the following registry values: + +Under **HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate** use **SetActiveHours** to enable or disable active hours and **ActiveHoursStart** and **ActiveHoursEnd** to specify the range of active hours. For a detailed description of these registry keys, see [Registry keys used to manage restart](#registry-keys-used-to-manage-restart). @@ -100,7 +101,7 @@ To configure active hours max range through MDM, use [**Update/ActiveHoursMaxRan ## Limit restart delays -After an update is installed, Windows 10 attempts automatic restart outside of active hours. If the restart does not succeed after 7 days (by default), the user will see a notification that restart is required. You can use the **Specify deadline before auto-restart for update installation** policy to change the delay from 7 days to a number of days between 2 and 14. +After an update is installed, Windows 10 attempts automatic restart outside of active hours. If the restart does not succeed after seven days (by default), the user will see a notification that restart is required. You can use the **Specify deadline before auto-restart for update installation** policy to change the delay from seven days to any number of days between two and 14. ## Control restart notifications @@ -137,7 +138,7 @@ In MDM, the warning reminder is configured using [**Update/ScheduleRestartWarnin ### Engaged restart -Engaged restart is the period of time when users are required to schedule a restart. Initially, Windows will auto-restart outside of working hours. Once the set period ends (7 days by default), Windows transitions to user scheduled restarts. +Engaged restart is the period of time when users are required to schedule a restart. Initially, Windows will auto-restart outside of working hours. Once the set period ends (seven days by default), Windows transitions to user scheduled restarts. The following settings can be adjusted for engaged restart: * Period of time before auto-restart transitions to engaged restart. @@ -183,19 +184,19 @@ The following tables list registry values that correspond to the Group Policy se | Registry key | Key type | Value | | --- | --- | --- | -| AlwaysAutoRebootAtScheduledTime | REG_DWORD | 0: disable automatic reboot after update installation at scheduled time
1: enable automatic reboot after update installation at ascheduled time | +| AlwaysAutoRebootAtScheduledTime | REG_DWORD | 0: disable automatic reboot after update installation at scheduled time
1: enable automatic reboot after update installation at a scheduled time | | AlwaysAutoRebootAtScheduledTimeMinutes | REG_DWORD | 15-180: set automatic reboot to occur after given minutes | | AUOptions | REG_DWORD | 2: notify for download and notify for installation of updates
3: automatically download and notify for installation of updates
4: Automatically download and schedule installation of updates
5: allow the local admin to configure these settings
**Note:** To configure restart behavior, set this value to **4** | -| NoAutoRebootWithLoggedOnUsers | REG_DWORD | 0: disable do not reboot if users are logged on
1: do not reboot after an update installation if a user is logged on
**Note:** If disabled : Automatic Updates will notify the user that the computer will automatically restart in 5 minutes to complete the installation | +| NoAutoRebootWithLoggedOnUsers | REG_DWORD | 0: disable do not reboot if users are logged on
1: do not reboot after an update installation if a user is logged on
**Note:** If disabled: Automatic Updates will notify the user that the computer will automatically restart in 5 minutes to complete the installation | | ScheduledInstallTime | REG_DWORD | 0-23: schedule update installation time to a specific hour
starts with 12 AM (0) and ends with 11 PM (23) | -There are 3 different registry combinations for controlling restart behavior: +There are three different registry combinations for controlling restart behavior: - To set active hours, **SetActiveHours** should be **1**, while **ActiveHoursStart** and **ActiveHoursEnd** should define the time range. -- To schedule a specific installation and reboot time, **AUOptions** should be **4**, **ScheduledInstallTime** should specify the installation time, **AlwaysAutoRebootAtScheduledTime** set to **1** and **AlwaysAutoRebootAtScheduledTimeMinutes** should specify number of minutes to wait before rebooting. +- To schedule a specific installation and reboot time, **AUOptions** should be **4**, **ScheduledInstallTime** should specify the installation time, and **AlwaysAutoRebootAtScheduledTime** set to **1** and **AlwaysAutoRebootAtScheduledTimeMinutes** should specify number of minutes to wait before rebooting. - To delay rebooting if a user is logged on, **AUOptions** should be **4**, while **NoAutoRebootWithLoggedOnUsers** is set to **1**. -## Related topics +## Related articles - [Update Windows 10 in the enterprise](index.md) - [Overview of Windows as a service](waas-overview.md) diff --git a/windows/deployment/update/windows-update-errors.md b/windows/deployment/update/windows-update-errors.md index 11dff0bce0..d2cb1994d5 100644 --- a/windows/deployment/update/windows-update-errors.md +++ b/windows/deployment/update/windows-update-errors.md @@ -7,7 +7,6 @@ audience: itpro itproauthor: jaimeo ms.audience: itpro author: jaimeo -ms.date: 09/18/2018 ms.reviewer: manager: laurawi ms.topic: article @@ -23,18 +22,18 @@ The following table provides information about common errors you might run into | Error Code | Message | Description | Mitigation | |------------------------------------------|-----------------------------------|-----------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| 0x8024402F | WU_E_PT_ECP_SUCCEEDED_WITH_ERRORS | External cab file processing completed with some errors | One of the reasons we see this issue is due to the design of a software called Lightspeed Rocket for Web filtering.
The IP addresses of the computers you want to get updates successfully on, should be added to the exceptions list of Lightspeed | -| 0x80242006 | WU_E_UH_INVALIDMETADATA | A handler operation could not be completed because the update contains invalid metadata. | Rename Software Redistribution Folder and attempt to download the updates again:
Rename the following folders to \*.BAK:
- %systemroot%\system32\catroot2

To do this, type the following commands at a command prompt. Press ENTER after you type each command.
- Ren %systemroot%\SoftwareDistribution\DataStore \*.bak
- Ren %systemroot%\SoftwareDistribution\Download \*.bak
Ren %systemroot%\system32\catroot2 \*.bak | -| 0x80070BC9 | ERROR_FAIL_REBOOT_REQUIRED | The requested operation failed. A system reboot is required to roll back changes made. | Ensure that we do not have any policies that control the start behavior for the Windows Module Installer. This service should not be hardened to any start value and should be managed by the OS. | -| 0x80200053 | BG_E_VALIDATION_FAILED | NA | Ensure that there is no Firewalls that filter downloads. The Firewall filtering may lead to invalid responses being received by the Windows Update Client.

If the issue still persists, run the [WU reset script](https://gallery.technet.microsoft.com/scriptcenter/Reset-Windows-Update-Agent-d824badc). | -| 0x80072EE2 | WININET_E_TIMEOUT | The operation timed out | This error message can be caused if the computer isn't connected to Internet. To fix this issue, following these steps: make sure these URLs are not blocked:
http://.update.microsoft.com
https://.update.microsoft.com


Additionally , you can take a network trace and see what is timing out. \ | +| 0x8024402F | WU_E_PT_ECP_SUCCEEDED_WITH_ERRORS | External cab file processing completed with some errors | One of the reasons we see this issue is due to the design of a software called Lightspeed Rocket for Web filtering.
Add the IP addresses of devices you want to get updates to the exceptions list of Lightspeed | +| 0x80242006 | WU_E_UH_INVALIDMETADATA | A handler operation could not be completed because the update contains invalid metadata. | Rename Software Redistribution Folder and attempt to download the updates again:
Rename the following folders to \*.BAK:
- %systemroot%\system32\catroot2

Type the following commands at a command prompt. Press ENTER after you type each command.
- Ren %systemroot%\SoftwareDistribution\DataStore \*.bak
- Ren %systemroot%\SoftwareDistribution\Download \*.bak
Ren %systemroot%\system32\catroot2 \*.bak | +| 0x80070BC9 | ERROR_FAIL_REBOOT_REQUIRED | The requested operation failed. A system reboot is required to roll back changes made. | Ensure that you don't have any policies that control the start behavior for the Windows Module Installer. This service should be managed by the operating system. | +| 0x80200053 | BG_E_VALIDATION_FAILED | NA | Ensure that there are no firewalls that filter downloads. Such filtering could lead to incorrect responses being received by the Windows Update Client.

If the issue still persists, run the [Windows Update reset script](https://gallery.technet.microsoft.com/scriptcenter/Reset-Windows-Update-Agent-d824badc). | +| 0x80072EE2 | WININET_E_TIMEOUT | The operation timed out | This error message can be caused if the computer isn't connected to the Internet. To fix this issue, follow these steps: make sure these URLs are not blocked:
http://.update.microsoft.com
https://.update.microsoft.com


You can also take a network trace to check what is timing out. \ | | 0x80072EFD
0x80072EFE 
0x80D02002 | TIME_OUT_ERRORS | The operation timed out | Make sure there are no firewall rules or proxy to block Microsoft download URLs.
Take a network monitor trace to understand better. \ | | 0X8007000D | ERROR_INVALID_DATA | Indicates invalid data downloaded or corruption occurred. | Attempt to re-download the update and initiate installation. | -| 0x8024A10A | USO_E_SERVICE_SHUTTING_DOWN | Indicates that the WU Service is shutting down. | This may happen due to a very long period of time of inactivity, a system hang leading to the service being idle and leading to the shutdown of the service. Ensure that the system remains active and the connections remain established to complete the upgrade. | -| 0x80240020 | WU_E_NO_INTERACTIVE_USER | Operation did not complete because there is no logged-on interactive user. | Please login to the system to initiate the installation and allow the system to be rebooted. | -| 0x80242014 | WU_E_UH_POSTREBOOTSTILLPENDING | The post-reboot operation for the update is still in progress. | Some Windows Updates require the system to be restarted. Reboot the system to complete the installation of the Updates. | +| 0x8024A10A | USO_E_SERVICE_SHUTTING_DOWN | Indicates that the WU Service is shutting down. | This can occur after a very long period of time of inactivity, the system failing to respond leading to the service being idle and causing the service to shut down. Ensure that the system remains active and the connections remain established to complete the upgrade. | +| 0x80240020 | WU_E_NO_INTERACTIVE_USER | Operation did not complete because there is no logged-on interactive user. | Sign in to the device to start the installation and allow the to restart. | +| 0x80242014 | WU_E_UH_POSTREBOOTSTILLPENDING | The post-restart operation for the update is still in progress. | Some Windows Updates require the device to be restarted. Restart the device to complete update installation. | | 0x80246017 | WU_E_DM_UNAUTHORIZED_LOCAL_USER | The download failed because the local user was denied authorization to download the content. | Ensure that the user attempting to download and install updates has been provided with sufficient privileges to install updates (Local Administrator). | -| 0x8024000B | WU_E_CALL_CANCELLED | Operation was cancelled. | This indicates that the operation was cancelled by the user/service. You may also encounter this error when we are unable to filter the results. Run the [Decline Superseded PowerShell script](https://gallery.technet.microsoft.com/scriptcenter/Cleanup-WSUS-server-4424c9d6) to allow the filtering process to complete. | +| 0x8024000B | WU_E_CALL_CANCELLED | Operation was canceled. | The operation was canceled by the user orservice. You might also receive this error when we are unable to filter the results. Run the [Decline Superseded PowerShell script](https://gallery.technet.microsoft.com/scriptcenter/Cleanup-WSUS-server-4424c9d6) to allow the filtering process to complete. | | 0x8024000E | WU_E_XML_INVALID | Windows Update Agent found invalid information in the update's XML data. | Certain drivers contain additional metadata information in the update.xml, which could lead Orchestrator to understand it as invalid data. Ensure that you have the latest Windows Update Agent installed on the machine. | | 0x8024D009 | WU_E_SETUP_SKIP_UPDATE | An update to the Windows Update Agent was skipped due to a directive in the wuident.cab file. | You may encounter this error when WSUS is not sending the Self-update to the clients.

Review [KB920659](https://support.microsoft.com/help/920659/the-microsoft-windows-server-update-services-wsus-selfupdate-service-d) for instructions to resolve the issue. | | 0x80244007 | WU_E_PT_SOAPCLIENT_SOAPFAULT | SOAP client failed because there was a SOAP fault for reasons of WU_E_PT_SOAP_\* error codes. | This issue occurs because Windows cannot renew the cookies for Windows Update.

Review [KB2883975](https://support.microsoft.com/help/2883975/0x80244007-error-when-windows-tries-to-scan-for-updates-on-a-wsus-serv) for instructions to resolve the issue. | diff --git a/windows/deployment/update/windows-update-troubleshooting.md b/windows/deployment/update/windows-update-troubleshooting.md index 32a55ed102..92db02e305 100644 --- a/windows/deployment/update/windows-update-troubleshooting.md +++ b/windows/deployment/update/windows-update-troubleshooting.md @@ -53,7 +53,7 @@ The update that is offered to a device depends on several factors. The following If the update you're offered isn't the most current available, it might be because your device is being managed by a WSUS server, and you're being offered the updates available on that server. It's also possible, if your device is part of a deployment group, that your admin is intentionally slowing the rollout of updates. Since the deployment is slow and measured to begin with, all devices will not receive the update on the same day. ## My device is frozen at scan. Why? -The Settings UI communicates with the Update Orchestrator service which in turn communicates with to Windows Update service. If these services stop unexpectedly, then you might see this behavior. In such cases, follow these steps: +The Settings UI communicates with the Update Orchestrator service that in turn communicates with to Windows Update service. If these services stop unexpectedly, then you might see this behavior. In such cases, follow these steps: 1. Close the Settings app and reopen it. @@ -151,7 +151,7 @@ Go to Services.msc and ensure that Windows Firewall Service is enabled. Stopping ## Issues arising from configuration of conflicting policies Windows Update provides a wide range configuration policy to control the behavior of the Windows Update service in a managed environment. While these policies let you configure the settings at a granular level, misconfiguration or setting conflicting policies may lead to unexpected behaviors. -See [How to configure automatic updates by using Group Policy or registry settings](https://support.microsoft.com/help/328010/how-to-configure-automatic-updates-by-using-group-policy-or-registry-s) for more information. +For more information, see [How to configure automatic updates by using Group Policy or registry settings](https://support.microsoft.com/help/328010/how-to-configure-automatic-updates-by-using-group-policy-or-registry-s) for more information. ## Device cannot access update files @@ -183,7 +183,7 @@ Windows 10 devices can receive updates from a variety of sources, including Wind Check the output for the Name and OffersWindowsUPdates parameters, which you can interpret according to this table. -|Output|Interpretation| +|Output|Meaning| |-|-| |- Name: Microsoft Update
-OffersWindowsUpdates: True| - The update source is Microsoft Update, which means that updates for other Microsoft products besides the operating system could also be delivered.
- Indicates that the client is configured to receive updates for all Microsoft Products (Office, etc.) | |- Name: DCat Flighting Prod
- OffersWindowsUpdates: True |- Starting with Windows 10 1709, feature updates are always delivered through the DCAT service.
- Indicates that the client is configured to receive feature updates from Windows Update. | @@ -213,9 +213,9 @@ From Windows Update logs: 2018-08-06 09:33:32:554 480 1118 Agent ** END ** Agent: Finding updates [CallerId = OperationalInsight Id = 49] ``` -In the above log snippet, we see that the Criteria = "IsHidden = 0 AND DeploymentAction=*". "*" means there is nothing specified from the server. So, the scan happens but there is no direction to download or install to the agent. So it just scans the update and provides the results. +In the above log snippet, we see that the `Criteria = "IsHidden = 0 AND DeploymentAction=*"`. "*" means there is nothing specified from the server. So, the scan happens but there is no direction to download or install to the agent. So it just scans the update and provides the results. -Now if you look at the below logs, the Automatic update runs the scan and finds no update approved for it. So it reports there are no updates to install or download. This is due to an incorrect configuration. The WSUS side should approve the updates for Windows Update so that it fetches the updates and installs them at the specified time according to the policy. Since this scenario doesn't include Configuration Manager, there's no way to install unapproved updates. You're expecting the operational insight agent to do the scan and automatically trigger the download and installation but that won’t happen with this configuration. +As shown in the following logs, automatic update runs the scan and finds no update approved for it. So it reports there are no updates to install or download. This is due to an incorrect configuration. The WSUS side should approve the updates for Windows Update so that it fetches the updates and installs them at the specified time according to the policy. Since this scenario doesn't include Configuration Manager, there's no way to install unapproved updates. You're expecting the operational insight agent to do the scan and automatically trigger the download and installation but that won’t happen with this configuration. ```console 2018-08-06 10:58:45:992 480 5d8 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates Id = 57] @@ -231,15 +231,15 @@ Now if you look at the below logs, the Automatic update runs the scan and finds ``` ## High bandwidth usage on Windows 10 by Windows Update -Users may see that Windows 10 is consuming all the bandwidth in the different offices under the system context. This behavior is by design. Components that may consume bandwidth expand beyond Windows Update components. +Users might see that Windows 10 is consuming all the bandwidth in the different offices under the system context. This behavior is by design. Components that might consume bandwidth expand beyond Windows Update components. -The following group policies can help mitigate this: +The following group policies can help mitigate this situation: - Blocking access to Windows Update servers: [Policy Turn off access to all Windows Update features](https://gpsearch.azurewebsites.net/#4728) (Set to enabled) - Driver search: [Policy Specify search order for device driver source locations](https://gpsearch.azurewebsites.net/#183) (Set to "Do not search Windows Update") - Windows Store automatic update: [Policy Turn off Automatic Download and Install of updates](https://gpsearch.azurewebsites.net/#10876) (Set to enabled) -Other components that reach out to the internet: +Other components that connect to the internet: - Windows Spotlight: [Policy Configure Windows spotlight on lock screen](https://gpsearch.azurewebsites.net/#13362) (Set to disabled) - Consumer experiences: [Policy Turn off Microsoft consumer experiences](https://gpsearch.azurewebsites.net/#13329) (Set to enabled) From 07054d11a1db8f179694a651efd228f6cf8e0630 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Tue, 1 Dec 2020 15:31:20 -0700 Subject: [PATCH 72/75] safety commit --- .../update-compliance-configuration-manual.md | 18 +++++----- .../update/windows-update-errors.md | 2 +- .../deployment/update/windows-update-logs.md | 33 +++++++++---------- 3 files changed, 26 insertions(+), 27 deletions(-) diff --git a/windows/deployment/update/update-compliance-configuration-manual.md b/windows/deployment/update/update-compliance-configuration-manual.md index 8911262e12..c03db874bb 100644 --- a/windows/deployment/update/update-compliance-configuration-manual.md +++ b/windows/deployment/update/update-compliance-configuration-manual.md @@ -22,7 +22,7 @@ There are a number of requirements to consider when manually configuring devices The requirements are separated into different categories: 1. Ensuring the [**required policies**](#required-policies) for Update Compliance are correctly configured. -2. Devices in every network topography needs to send data to the [**required endpoints**](#required-endpoints) for Update Compliance, for example both devices in main and satellite offices, which may have different network configurations. +2. Devices in every network topography must send data to the [**required endpoints**](#required-endpoints) for Update Compliance. For example, devices in both main and satellite offices, which might have different network configurations must be able to reach the endpoints. 3. Ensure [**Required Windows services**](#required-services) are running or are scheduled to run. It is recommended all Microsoft and Windows services are set to their out-of-box defaults to ensure proper functionality. 4. [**Run a full Census sync**](#run-a-full-census-sync) on new devices to ensure that all necessary data points are collected. @@ -34,7 +34,7 @@ The requirements are separated into different categories: Update Compliance has a number of policies that must be appropriately configured in order for devices to be processed by Microsoft and visible in Update Compliance. They are enumerated below, separated by whether the policies will be configured via [Mobile Device Management](https://docs.microsoft.com/windows/client-management/mdm/) (MDM) or Group Policy. For both tables: - **Policy** corresponds to the location and name of the policy. -- **Value** Indicates what value the policy must be set to. Update Compliance requires *at least* Basic (or Required) telemetry, but can function off Enhanced or Full (or Optional). +- **Value** Indicates what value the policy must be set to. Update Compliance requires *at least* Basic (or Required) diagnosttic data, but can function off Enhanced or Full (or Optional). - **Function** details why the policy is required and what function it serves for Update Compliance. It will also detail a minimum version the policy is required, if any. ### Mobile Device Management policies @@ -44,8 +44,8 @@ Each MDM Policy links to its documentation in the CSP hierarchy, providing its e | Policy | Value | Function | |---------------------------|-|------------------------------------------------------------| |**Provider/*ProviderID*/**[**CommercialID**](https://docs.microsoft.com/windows/client-management/mdm/dmclient-csp#provider-providerid-commercialid) |[Your CommercialID](update-compliance-get-started.md#get-your-commercialid) |Identifies the device as belonging to your organization. | -|**System/**[**AllowTelemetry**](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-allowtelemetry) | 1- Basic |Configures the maximum allowed diagnostic data to be sent to Microsoft. Individual users can still set this lower than what the policy defines, see the below policy for more information. | -|**System/**[**ConfigureTelemetryOptInSettingsUx**](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-configuretelemetryoptinsettingsux) | 1 - Disable Telemetry opt-in Settings | (in Windows 10, version 1803 and later) Determines whether end-users of the device can adjust diagnostic data to levels lower than the level defined by AllowTelemetry. We recommend that you disable this policy or the effective diagnostic data level on devices might not be sufficient. | +|**System/**[**AllowTelemetry**](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-allowtelemetry) | 1- Basic |Configures the maximum allowed diagnostic data to be sent to Microsoft. Individual users can still set this value lower than what the policy defines. For more information, see the following policy. | +|**System/**[**ConfigureTelemetryOptInSettingsUx**](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-configuretelemetryoptinsettingsux) | 1 - Disable Telemetry opt-in Settings | (in Windows 10, version 1803 and later) Determines whether users of the device can adjust diagnostic data to levels lower than the level defined by AllowTelemetry. We recommend that you disable this policy or the effective diagnostic data level on devices might not be sufficient. | |**System/**[**AllowDeviceNameInDiagnosticData**](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-allowdevicenameindiagnosticdata) | 1 - Allowed | Allows device name to be sent for Windows Diagnostic Data. If this policy is Not Configured or set to 0 (Disabled), Device Name will not be sent and will not be visible in Update Compliance, showing `#` instead. | > [!NOTE] @@ -58,8 +58,8 @@ All Group Policies that need to be configured for Update Compliance are under ** | Policy | Value | Function | |---------------------------|-|-----------------------------------------------------------| |**Configure the Commercial ID** |[Your CommercialID](update-compliance-get-started.md#get-your-commercialid) | Identifies the device as belonging to your organization. | -|**Allow Telemetry** | 1 - Basic |Configures the maximum allowed diagnostic data to be sent to Microsoft. Individual users can still set this lower than what the policy defines. See the following policy for more information. | -|**Configure telemetry opt-in setting user interface** | 1 - Disable telemetry opt-in Settings |(in Windows 10, version 1803 and later) Determines whether end-users of the device can adjust diagnostic data to levels lower than the level defined by AllowTelemetry. We recommend that you disable this policy, otherwise the effective diagnostic data level on devices might not be sufficient. | +|**Allow Telemetry** | 1 - Basic |Configures the maximum allowed diagnostic data to be sent to Microsoft. Individual users can still set this value lower than what the policy defines. See the following policy for more information. | +|**Configure telemetry opt-in setting user interface** | 1 - Disable diagnostic data opt-in Settings |(in Windows 10, version 1803 and later) Determines whether users of the device can adjust diagnostic data to levels lower than the level defined by AllowTelemetry. We recommend that you disable this policy, otherwise the effective diagnostic data level on devices might not be sufficient. | |**Allow device name to be sent in Windows diagnostic data** | 1 - Enabled | Allows device name to be sent for Windows Diagnostic Data. If this policy is Not Configured or Disabled, Device Name will not be sent and will not be visible in Update Compliance, showing `#` instead. | ## Required endpoints @@ -72,9 +72,9 @@ To enable data sharing between devices, your network, and Microsoft's Diagnostic | `https://v10.vortex-win.data.microsoft.com` | Connected User Experience and Diagnostic component endpoint for Windows 10, version 1709 or earlier. | | `https://settings-win.data.microsoft.com` | Required for Windows Update functionality. | | `http://adl.windows.com` | Required for Windows Update functionality. | -| `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER), used to provide more advanced error reporting in the event of certain Feature Update deployment failures. | +| `https://watson.telemetry.microsoft.com` | Windows Error Reporting (WER), used to provide more advanced error reporting if certain Feature Update deployment failures occur. | | `https://oca.telemetry.microsoft.com` | Online Crash Analysis, used to provide device-specific recommendations and detailed errors in the event of certain crashes. | -| `https://login.live.com` | This endpoint facilitates MSA access and is required to create the primary identifier we use for devices. Without this service, devices will not be visible in the solution. This also requires Microsoft Account Sign-in Assistant service to be running (wlidsvc). | +| `https://login.live.com` | This endpoint facilitates MSA access and is required to create the primary identifier we use for devices. Without this service, devices will not be visible in the solution. The Microsoft Account Sign-in Assistant service must also be running (wlidsvc). | ## Required services @@ -83,7 +83,7 @@ Many Windows and Microsoft services are required to ensure that not only the dev ## Run a full Census sync -Census is a service that runs on a regular schedule on Windows devices. A number of key device attributes, like what operating system edition is installed on the device, are included in the Census payload. However, to save network load and system resources, data that tends to be more static (like edition) is sent approximately once per week rather than on every daily run. Because of this, these attributes can take longer to appear in Update Compliance unless you start a full Census sync. The Update Compliance Configuration Script does this. +Census is a service that runs on a regular schedule on Windows devices. A number of key device attributes, like what operating system edition is installed on the device, are included in the Census payload. However, to save network load and system resources, data that tends to be more static (like edition) is sent approximately once per week rather than on every daily run. Because of this behavior, these attributes can take longer to appear in Update Compliance unless you start a full Census sync. The Update Compliance Configuration Script will do a full sync. A full Census sync adds a new registry value to Census's path. When this registry value is added, Census's configuration is overridden to force a full sync. For Census to work normally, this registry value should be enabled, Census should be started manually, and then the registry value should be disabled. Follow these steps: diff --git a/windows/deployment/update/windows-update-errors.md b/windows/deployment/update/windows-update-errors.md index d2cb1994d5..2747e7d1f7 100644 --- a/windows/deployment/update/windows-update-errors.md +++ b/windows/deployment/update/windows-update-errors.md @@ -29,7 +29,7 @@ The following table provides information about common errors you might run into | 0x80072EE2 | WININET_E_TIMEOUT | The operation timed out | This error message can be caused if the computer isn't connected to the Internet. To fix this issue, follow these steps: make sure these URLs are not blocked:
http://.update.microsoft.com
https://.update.microsoft.com


You can also take a network trace to check what is timing out. \ | | 0x80072EFD
0x80072EFE 
0x80D02002 | TIME_OUT_ERRORS | The operation timed out | Make sure there are no firewall rules or proxy to block Microsoft download URLs.
Take a network monitor trace to understand better. \ | | 0X8007000D | ERROR_INVALID_DATA | Indicates invalid data downloaded or corruption occurred. | Attempt to re-download the update and initiate installation. | -| 0x8024A10A | USO_E_SERVICE_SHUTTING_DOWN | Indicates that the WU Service is shutting down. | This can occur after a very long period of time of inactivity, the system failing to respond leading to the service being idle and causing the service to shut down. Ensure that the system remains active and the connections remain established to complete the upgrade. | +| 0x8024A10A | USO_E_SERVICE_SHUTTING_DOWN | Indicates that the Windows Update Service is shutting down. | This can occur after a very long period of time of inactivity, the system failing to respond leading to the service being idle and causing the service to shut down. Ensure that the system remains active and the connections remain established to complete the upgrade. | | 0x80240020 | WU_E_NO_INTERACTIVE_USER | Operation did not complete because there is no logged-on interactive user. | Sign in to the device to start the installation and allow the to restart. | | 0x80242014 | WU_E_UH_POSTREBOOTSTILLPENDING | The post-restart operation for the update is still in progress. | Some Windows Updates require the device to be restarted. Restart the device to complete update installation. | | 0x80246017 | WU_E_DM_UNAUTHORIZED_LOCAL_USER | The download failed because the local user was denied authorization to download the content. | Ensure that the user attempting to download and install updates has been provided with sufficient privileges to install updates (Local Administrator). | diff --git a/windows/deployment/update/windows-update-logs.md b/windows/deployment/update/windows-update-logs.md index 1e40aac62e..983298729f 100644 --- a/windows/deployment/update/windows-update-logs.md +++ b/windows/deployment/update/windows-update-logs.md @@ -1,13 +1,12 @@ --- title: Windows Update log files -description: Learn about the Windows Update log files and how to merge and convert WU trace files (.etl files) into a single readable WindowsUpdate.log file. +description: Learn about the Windows Update log files and how to merge and convert Windows Update trace files (.etl files) into a single readable WindowsUpdate.log file. ms.prod: w10 ms.mktglfcycl: audience: itpro itproauthor: jaimeo ms.audience: itpro author: jaimeo -ms.date: 09/18/2018 ms.reviewer: manager: laurawi ms.topic: article @@ -21,21 +20,21 @@ ms.custom: seo-marvel-apr2020 The following table describes the log files created by Windows Update. -|Log file|Location|Description|When to Use | +|Log file|Location|Description|When to use | |-|-|-|-| -|windowsupdate.log|C:\Windows\Logs\WindowsUpdate|Starting in Windows 8.1 and continuing in Windows 10, Windows Update client uses Event Tracing for Windows (ETW) to generate diagnostic logs.|If you receive an error message when you run Windows Update (WU), you can use the information that is included in the Windowsupdate.log log file to troubleshoot the issue.| -|UpdateSessionOrchestration.etl|C:\ProgramData\USOShared\Logs|Starting Windows 10, the Update Orchestrator is responsible for sequence of downloading and installing various update types from Windows Update. And the events are logged to these etl files.|When you see that the updates are available but download is not getting triggered.
When Updates are downloaded but installation is not triggered.
When Updates are installed but reboot is not triggered. | -|NotificationUxBroker.etl|C:\ProgramData\USOShared\Logs|Starting Windows 10, the notification toast or the banner is triggered by this NotificationUxBroker.exe . And the logs to check its working is this etl. |When you want to check whether the Notification was triggered or not for reboot or update availability etc. | -|CBS.log|%systemroot%\Logs\CBS|This logs provides insight on the update installation part in the servicing stack.|To troubleshoot the issues related to WU installation.| +|windowsupdate.log|C:\Windows\Logs\WindowsUpdate|Starting in Windows 8.1 and continuing in Windows 10, Windows Update client uses Event Tracing for Windows (ETW) to generate diagnostic logs.|If you receive an error message when you run Windows Update, you can use the information that is included in the Windowsupdate.log log file to troubleshoot the issue.| +|UpdateSessionOrchestration.etl|C:\ProgramData\USOShared\Logs|Starting Windows 10, the Update Orchestrator is responsible for sequence of downloading and installing various update types from Windows Update. And the events are logged to these .etl files.|When you see that the updates are available but download is not getting triggered.
When Updates are downloaded but installation is not triggered.
When Updates are installed but reboot is not triggered. | +|NotificationUxBroker.etl|C:\ProgramData\USOShared\Logs|Starting Windows 10, the notification toast or the banner is triggered by NotificationUxBroker.exe. |When you want to check whether the notification was triggered or not. | +|CBS.log|%systemroot%\Logs\CBS|This log provides insight on the update installation part in the servicing stack.|To troubleshoot the issues related to Windows Update installation.| ## Generating WindowsUpdate.log -To merge and convert WU trace files (.etl files) into a single readable WindowsUpdate.log file, see [Get-WindowsUpdateLog](https://docs.microsoft.com/powershell/module/windowsupdate/get-windowsupdatelog?view=win10-ps&preserve-view=tru). +To merge and convert Windows Update trace files (.etl files) into a single readable WindowsUpdate.log file, see [Get-WindowsUpdateLog](https://docs.microsoft.com/powershell/module/windowsupdate/get-windowsupdatelog?view=win10-ps&preserve-view=tru). >[!NOTE] >When you run the **Get-WindowsUpdateLog** cmdlet, an copy of WindowsUpdate.log file is created as a static log file. It does not update as the old WindowsUpate.log unless you run **Get-WindowsUpdateLog** again. ### Windows Update log components -The WU engine has different component names. The following are some of the most common components that appear in the WindowsUpdate.log file: +The Windows Update engine has different component names. The following are some of the most common components that appear in the WindowsUpdate.log file: - AGENT- Windows Update agent - AU - Automatic Updates is performing this task @@ -93,12 +92,12 @@ The time stamp indicates the time at which the logging occurs. The Process IDs and Thread IDs are random, and they can vary from log to log and even from service session to service session within the same log. - The first four hex digits are the process ID. - The next four hex digits are the thread ID. -- Each component, such as the USO, WU engine, COM API callers, and WU installer handlers, has its own process ID. +- Each component, such as the USO, Windows Update engine, COM API callers, and Windows Update installer handlers, has its own process ID. ![Windows Update process and thread IDs](images/update-process-id.png) #### Component name -Search for and identify the components that are associated with the IDs. Different parts of the WU engine have different component names. Some of them are as follows: +Search for and identify the components that are associated with the IDs. Different parts of the Windows Update engine have different component names. Some of them are as follows: - ProtocolTalker - Client-server sync - DownloadManager - Creates and monitors payload downloads @@ -122,15 +121,15 @@ There are different identifiers for the same update in different contexts. It's ##### Revision ID -- A Revision ID (do no confuse this with "revision number") is a serial number that's issued when an update is initially published or revised on a given service. -- An existing update that's revised keeps the same update ID (GUID), has its revision number incremented (for example, from 100 to 101), but gets a completely new revision ID that is not related to the previous ID. +- A Revision ID (don't confuse this value with "revision number") is a serial number that's issued when an update is initially published or revised on a given service. +- An existing update that's revised keeps the same update ID (GUID), has its revision number incremented (for example, from 100 to 101), but gets a new revision ID that is not related to the previous ID. - Revision IDs are unique on a given update source, but not across multiple sources. -- The same update revision may have completely different revision IDs on WU and WSUS. -- The same revision ID may represent different updates on WU and WSUS. +- The same update revision might have different revision IDs on Windows Update and WSUS. +- The same revision ID might represent different updates on Windows Update and WSUS. ##### Local ID -- Local ID is a serial number issued when an update is received from a service by a given WU client -- Usually seen in debug logs, especially involving the local cache for update info (Datastore) +- Local ID is a serial number issued when an update is received from a service by a given Windows Update client +- Typically seen in debug logs, especially involving the local cache for update info (Datastore) - Different client PCs will assign different Local IDs to the same update - You can find the local IDs that a client is using by getting the client's %WINDIR%\SoftwareDistribution\Datastore\Datastore.edb file From 79ba6f31271c1528d32e1330f2d4b73ba1050f14 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Tue, 1 Dec 2020 15:52:48 -0700 Subject: [PATCH 73/75] typos --- .../update/update-compliance-configuration-manual.md | 2 +- windows/deployment/update/waas-manage-updates-wufb.md | 8 ++++---- windows/deployment/update/windows-update-errors.md | 4 ++-- windows/deployment/update/windows-update-logs.md | 2 +- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/deployment/update/update-compliance-configuration-manual.md b/windows/deployment/update/update-compliance-configuration-manual.md index c03db874bb..b96d2edfd6 100644 --- a/windows/deployment/update/update-compliance-configuration-manual.md +++ b/windows/deployment/update/update-compliance-configuration-manual.md @@ -34,7 +34,7 @@ The requirements are separated into different categories: Update Compliance has a number of policies that must be appropriately configured in order for devices to be processed by Microsoft and visible in Update Compliance. They are enumerated below, separated by whether the policies will be configured via [Mobile Device Management](https://docs.microsoft.com/windows/client-management/mdm/) (MDM) or Group Policy. For both tables: - **Policy** corresponds to the location and name of the policy. -- **Value** Indicates what value the policy must be set to. Update Compliance requires *at least* Basic (or Required) diagnosttic data, but can function off Enhanced or Full (or Optional). +- **Value** Indicates what value the policy must be set to. Update Compliance requires *at least* Basic (or Required) diagnostic data, but can function off Enhanced or Full (or Optional). - **Function** details why the policy is required and what function it serves for Update Compliance. It will also detail a minimum version the policy is required, if any. ### Mobile Device Management policies diff --git a/windows/deployment/update/waas-manage-updates-wufb.md b/windows/deployment/update/waas-manage-updates-wufb.md index 00fb15eb81..1a27cda457 100644 --- a/windows/deployment/update/waas-manage-updates-wufb.md +++ b/windows/deployment/update/waas-manage-updates-wufb.md @@ -65,9 +65,9 @@ The branch readiness level enables administrators to specify which channel of fe - Windows Insider Fast - Windows Insider Slow - Windows Insider Release Preview -- Semi-annual Channel +- Semi-Annual Channel -Prior to Windows 10, version 1903, there are two channels for released updates: Semi-annual Channel and Semi-annual Channel (Targeted). Deferral days are calculated against the release date of the chosen channel. Starting with Windows 10, version 1903 there is only the one release channel: Semi-annual Channel. All deferral days are calculated against a release’s Semi-annual Channel release date. For exact release dates, see [Windows Release Information](https://docs.microsoft.com/windows/release-information/). You can set the branch readiness level by using the **Select when Preview Builds and Feature Updates are Received** policy. To use this policy to manage pre-release builds, first enable preview builds by using the **Manage preview Builds** policy. +Prior to Windows 10, version 1903, there are two channels for released updates: Semi-Annual Channel and Semi-Annual Channel (Targeted). Deferral days are calculated against the release date of the chosen channel. Starting with Windows 10, version 1903 there is only the one release channel: Semi-Annual Channel. All deferral days are calculated against a release’s Semi-Annual Channel release date. For exact release dates, see [Windows Release Information](https://docs.microsoft.com/windows/release-information/). You can set the branch readiness level by using the **Select when Preview Builds and Feature Updates are Received** policy. To use this policy to manage pre-release builds, first enable preview builds by using the **Manage preview Builds** policy. #### Defer an update @@ -186,9 +186,9 @@ The branch readiness level enables administrators to specify which channel of fe - Windows Insider Fast - Windows Insider Slow - Windows Insider Release Preview -- Semi-annual Channel for released updates + - Semi-Annual Channel for released updates -Prior to Windows 10, version 1903, there are two channels for released updates: Semi-annual Channel and Semi-annual Channel (Targeted). Deferral days are calculated against the release date of the chosen channel. Starting with Windows 10, version 1903 there is only the one release channel: Semi-annual Channel. All deferral days will be calculated against a release's Semi-annual Channel release date. To see release dates, visit [Windows Release Information](https://docs.microsoft.com/windows/release-information/). You can set the branch readiness level by using the **Select when Preview Builds and Feature Updates are Received** policy. In order to use this to manage pre-release builds, first enable preview builds by using the **Manage preview Builds** policy. +Prior to Windows 10, version 1903, there are two channels for released updates: Semi-Annual Channel and Semi-Annual Channel (Targeted). Deferral days are calculated against the release date of the chosen channel. Starting with Windows 10, version 1903 there is only the one release channel: Semi-Annual Channel. All deferral days will be calculated against a release's Semi-Annual Channel release date. To see release dates, visit [Windows Release Information](https://docs.microsoft.com/windows/release-information/). You can set the branch readiness level by using the **Select when Preview Builds and Feature Updates are Received** policy. In order to use this to manage pre-release builds, first enable preview builds by using the **Manage preview Builds** policy. ### Recommendations diff --git a/windows/deployment/update/windows-update-errors.md b/windows/deployment/update/windows-update-errors.md index 2747e7d1f7..0cad11e031 100644 --- a/windows/deployment/update/windows-update-errors.md +++ b/windows/deployment/update/windows-update-errors.md @@ -30,10 +30,10 @@ The following table provides information about common errors you might run into | 0x80072EFD
0x80072EFE 
0x80D02002 | TIME_OUT_ERRORS | The operation timed out | Make sure there are no firewall rules or proxy to block Microsoft download URLs.
Take a network monitor trace to understand better. \ | | 0X8007000D | ERROR_INVALID_DATA | Indicates invalid data downloaded or corruption occurred. | Attempt to re-download the update and initiate installation. | | 0x8024A10A | USO_E_SERVICE_SHUTTING_DOWN | Indicates that the Windows Update Service is shutting down. | This can occur after a very long period of time of inactivity, the system failing to respond leading to the service being idle and causing the service to shut down. Ensure that the system remains active and the connections remain established to complete the upgrade. | -| 0x80240020 | WU_E_NO_INTERACTIVE_USER | Operation did not complete because there is no logged-on interactive user. | Sign in to the device to start the installation and allow the to restart. | +| 0x80240020 | WU_E_NO_INTERACTIVE_USER | Operation did not complete because there is no logged-on interactive user. | Sign in to the device to start the installation and allow the device to restart. | | 0x80242014 | WU_E_UH_POSTREBOOTSTILLPENDING | The post-restart operation for the update is still in progress. | Some Windows Updates require the device to be restarted. Restart the device to complete update installation. | | 0x80246017 | WU_E_DM_UNAUTHORIZED_LOCAL_USER | The download failed because the local user was denied authorization to download the content. | Ensure that the user attempting to download and install updates has been provided with sufficient privileges to install updates (Local Administrator). | -| 0x8024000B | WU_E_CALL_CANCELLED | Operation was canceled. | The operation was canceled by the user orservice. You might also receive this error when we are unable to filter the results. Run the [Decline Superseded PowerShell script](https://gallery.technet.microsoft.com/scriptcenter/Cleanup-WSUS-server-4424c9d6) to allow the filtering process to complete. | +| 0x8024000B | WU_E_CALL_CANCELLED | Operation was canceled. | The operation was canceled by the user or service. You might also receive this error when we are unable to filter the results. Run the [Decline Superseded PowerShell script](https://gallery.technet.microsoft.com/scriptcenter/Cleanup-WSUS-server-4424c9d6) to allow the filtering process to complete. | | 0x8024000E | WU_E_XML_INVALID | Windows Update Agent found invalid information in the update's XML data. | Certain drivers contain additional metadata information in the update.xml, which could lead Orchestrator to understand it as invalid data. Ensure that you have the latest Windows Update Agent installed on the machine. | | 0x8024D009 | WU_E_SETUP_SKIP_UPDATE | An update to the Windows Update Agent was skipped due to a directive in the wuident.cab file. | You may encounter this error when WSUS is not sending the Self-update to the clients.

Review [KB920659](https://support.microsoft.com/help/920659/the-microsoft-windows-server-update-services-wsus-selfupdate-service-d) for instructions to resolve the issue. | | 0x80244007 | WU_E_PT_SOAPCLIENT_SOAPFAULT | SOAP client failed because there was a SOAP fault for reasons of WU_E_PT_SOAP_\* error codes. | This issue occurs because Windows cannot renew the cookies for Windows Update.

Review [KB2883975](https://support.microsoft.com/help/2883975/0x80244007-error-when-windows-tries-to-scan-for-updates-on-a-wsus-serv) for instructions to resolve the issue. | diff --git a/windows/deployment/update/windows-update-logs.md b/windows/deployment/update/windows-update-logs.md index 983298729f..ed776f86d0 100644 --- a/windows/deployment/update/windows-update-logs.md +++ b/windows/deployment/update/windows-update-logs.md @@ -113,7 +113,7 @@ Search for and identify the components that are associated with the IDs. Differe ##### Update ID and revision number There are different identifiers for the same update in different contexts. It's important to know the identifier schemes. -- Update ID: A GUID (indicated in the previous screen shot) that's assigned to a given update at publication time +- Update ID: A GUID (indicated in the previous screenshot) that's assigned to a given update at publication time - Revision number: A number incremented every time that a given update (that has a given update ID) is modified and republished on a service - Revision numbers are reused from one update to another (not a unique identifier). - The update ID and revision number are often shown together as "{GUID}.revision." From 084cb840b0d326f585e0610562b33564d534f28b Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Wed, 2 Dec 2020 22:08:18 +0500 Subject: [PATCH 74/75] Update enable-exploit-protection.md --- .../microsoft-defender-atp/enable-exploit-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md index 4530161e10..7b1c044a64 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md @@ -226,7 +226,7 @@ This table lists the PowerShell cmdlets (and associated audit mode cmdlet) that |Disable Win32k system calls | App-level only | DisableWin32kSystemCalls | AuditSystemCall |Do not allow child processes | App-level only | DisallowChildProcessCreation | AuditChildProcess |Export address filtering (EAF) | App-level only | EnableExportAddressFilterPlus, EnableExportAddressFilter \[1\] | Audit not available\[2\] | -||Import address filtering (IAF) | App-level only | EnableImportAddressFilter | Audit not available\[2\] | +|Import address filtering (IAF) | App-level only | EnableImportAddressFilter | Audit not available\[2\] | |Simulate execution (SimExec) | App-level only | EnableRopSimExec | Audit not available\[2\] | |Validate API invocation (CallerCheck) | App-level only | EnableRopCallerCheck | Audit not available\[2\] | |Validate handle usage | App-level only | StrictHandle | Audit not available | From 132bc8e0fed87e9c1f0cc44af7d1f23422110396 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 2 Dec 2020 14:36:56 -0800 Subject: [PATCH 75/75] Fixed typo --- windows/client-management/mdm/policy-csp-admx-userprofiles.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-admx-userprofiles.md b/windows/client-management/mdm/policy-csp-admx-userprofiles.md index f435439049..3f00b44db1 100644 --- a/windows/client-management/mdm/policy-csp-admx-userprofiles.md +++ b/windows/client-management/mdm/policy-csp-admx-userprofiles.md @@ -389,7 +389,7 @@ ADMX Info: Available in the latest Windows 10 Insider Preview Build. This policy setting will automatically log off a user when Windows cannot load their profile. -If Windows cannot access the user profile folder or the profile contains errors that prevent it from loading, Windows logs on the user with a temporary profile. This policy setting allows the administrator to disable this behavior, preventing Windows from loggin on the user with a temporary profile. +If Windows cannot access the user profile folder or the profile contains errors that prevent it from loading, Windows logs on the user with a temporary profile. This policy setting allows the administrator to disable this behavior, preventing Windows from logging on the user with a temporary profile. If you enable this policy setting, Windows will not log on a user with a temporary profile. Windows logs the user off if their profile cannot be loaded. @@ -462,7 +462,7 @@ ADMX Info: Available in the latest Windows 10 Insider Preview Build. This policy setting defines a slow connection for roaming user profiles and establishes thresholds for two tests of network speed. -To determine the network performance characteristics, a connection is made to the file share storing the user's profile and 64 kilobytes of data is transfered. From that connection and data transfer, the network's latency and connection speed are determined. +To determine the network performance characteristics, a connection is made to the file share storing the user's profile and 64 kilobytes of data is transferred. From that connection and data transfer, the network's latency and connection speed are determined. This policy setting and related policy settings in this folder together define the system's response when roaming user profiles are slow to load.

zeTzAH`eoKpLD6!?V%9Oes|%9gSsO+}-~3~1mA;^)q(lg%C5MVCq^s^|G0NcDq0~yV zd6K#w13m;rwxK+Vul4@3*OJSK5p!rFeg2INqfu<5Do+({we>3BwigeM)RdY^9y)rF z1bH8}K*3mg6uCax_f7^xlBLvBLnDJK^J{u8r$bQ>4Uajc0sw&%6RQp8(fcylGRD%m zs?A0}l?dhw`lC`+L1tUZ;^GtKzNvM^Cu$D{p7R+zULUkNx~V*UcDvpm9h#EdR?}>_q!JHcfTcb3>9kWRWRJ*^s&p`JSvzsNN+JUoWz91>%UL+23fv=Tj zlkIKX@FXi??0iqck@{Stx$yu_!2y?TrR~MZawcK3a~7B4@xAwTwglHWAC%Vd((!pM z$8v^^%LC{xNm4C9QFLCwXoMZ=Uo`ZIEHCOB|NX-f;6fIu@dksi#>dLAt6!@|Wq^5SKi*eXjJV=Fvgi6%gkyWD^ zsVTq|OZG<)CSR_UWQLc$UEn^sg$kB16q(|QiHT`&-F_2}AQ%jVxC>Y|pxRvey`lvEM&nSuf?wD-rC4-!m(>+;4V{zTD- z?OISYwU?(HsU_L!@M*R5DZ)^j;rx?;qI~5irK{uR;j-ms*;Iun5^#5Pi*-@)(L&=y zytlhkkrVza+n43F!ut1)=Cv=y>`+`M6w^UcCuxL{%5I%sR24FqDA{MhDzB(IZJ}+W z?T1Q6L6&3oNotIuFPyMHWST})Tyi~4Z0GYvJZ=~PV~lxOTYzz5A zwYpz_laqV#opw+`QF(H14&nPpn!c3{xONk8Ak@~@dO*9c!EIP=-=p|Vn;C*dqXpZ? zY)k$P1VToVXbJijza#FtYQ3$u=<66Zru6IU>!LDJ1vj#cV!>hrrMw~3D}q)|^gqde zHYngMH#>_Y7>Gy2`B{7=LV-x%`*oyF6QdMM%sMjtX5L*b=P$~yG9D+gYQ0s$rq>7> zG{~{eY~wjUWG*bilfB(*l2%j0LkNnDED%tG=S#aLDR{@@-}>5}(_t4CC*2th_73H5 zy6Q=V@kz$^DT4EfhnpH#YtwZO2uK2&u!`}DadC+gob}9_+|B@9=|0m1Qq0?X_z&w* zHZq^YL`6S%i}LyV`ybLQ;G90rK3w6sUF{AoIGX3$nVO~uo0)w|Z+3vgwHj)AQ#?8p zf<+^1;2%2H9)zRq6>Y2EH%XEUiyixV^k=2>i57^-APyTX<9+({sX}G3On@5IC!qsT zxVrPohpqTLvZhrQ)Bo}QnmG#!lP{SJ5i@;r-kvmGC@;dO+x5!K%bA0{T| zI`YI~!Py%+4e^lV!DqKJnE3mZWe#6f5lcv^uzprvP0ftzo3A!z743#yW77Sk##qaXe7iTlR0M^dzW#irJ$wwUE)y|74Ga2)+)F<)u`ojJ1Q3bqf5>72t|BNn z_$z`B?XbmMg-?0=Q%XQUKoB}$R(dG=MaV0R_X`U8D}McYqd8kSZ())WFtrzEmH;XI z`3R9RjyIgAgFV(7wjbjPq+w`|x!!K+PYi8y82+~rMy|=6ask&a2`LprdqWXRy^kxA zammOd@CJ>4l*g`70|ZBF;#cTNQby&`>wEK&6jEX_6|;+`Rq$Fe-TWn#Parq|rk%LF z&8AU)wGlwt{MKD#=_q}J zR;K=UZUAgQ+#%$jzf4ClO%R$A0MJ(FpE(J7`pz2++2D-BgaUxAU-)S$|2gMA9JGcwXw@hGsBEbl%lN6(&qGqf46SXAqWy>9TQD zeKSO2^r@DwFzJ=)erZ~hkvy`Xb7_5r#MMYiSTFR)|sP!k!^ z5{rqJ6(cRGUc8NQc$gJ=AV0NVK*wJYAsW|f?~^WpvlOEue1E#0bfk3a7m?Sa7dkB9 z7)SaFAzN4C&_^%Eq)0>J_KIJ>DqmjviWLD#!h%w=4%uYP417(}=O)z%2X`Hvx2v=; z<49Pr-($ff(kgz<0QL@8rz*7Am_nRur1WXhln{iHnF;PPVc#8GEY(g6M!rJ0$;kyS zv~R(6&9C3?x?!A}>JQ-Eyo1C{I#PyEW7q2P$5?#bmHI<)H*mxdKYDDR0$Zy~{EPSa z!_VPMs(g<9VQl%TTeL6m)Ky>MK|%!dqJ^I{TU%Q!ENl-Yw6%2*d(*tU{AYZsRH`Z@ zCN}s+T|*7Qr))2b%MtU9?HiBgGtlt&s66-U6iZBO3@*1DEfyA5iB|nWGxHChuVj9B zW4MI`LM(G_%a7R*kr>RFW-S@{Wv3zMr|^L8Ou5QSMl%VVA7r^n@}gsWkr(u{`VzZH zF=113((^O@zxY3g?&s7O(z^IJgfUl=qkNe?j3$5F&|<*Rc44euO&tXy8_mWHtTyZo8MWW&b)>Mp4nu&d%j3*|_nz=>UWi%B2Oi8$-0R zmRG5r4iM!!90)nRBUxQf8^Qd;hg$e{LB>HVa||E4JTrl6v9zb*Q z>-w6>gQoTbXB|)ad-N)^4(?>|Eq&@;4;9i)=ttel=MSAwIMStAGzFd}x$0DCk9pHr z60g&Yxm8e7@?Gl5uBLqf7 zs|6Pot((|oC9_CU#Ii?vp0Ch!M^!)Vft z`tpIs79l(K_mPpqC6$y&{Rcn9Sk~AQ5{7l2ruZsC@4l@P3dVZ^raS)N1%;u>N9b3j z_0Q_eqQ`D@2@Uinj_%Q9h)p(V(kI*m$YZyooOuO5&(CNW>}PtaZ$|T0|BW@DWc5&I zbq}nOHeM#E4~`5O9PQV({2RxyDMT)7e&C`{_n;R2w=TiJ1P#5tIGRd?UN=KU>dTf@ znw{vNZX4PF8Gd$|(6MT~#pW_{HUK#S&-twJb0+KT{1D*?`|aQ1bA^S{Hv}abwFzok63%LPBjIQ}Fv2|J z$`<~6&waClhTFbWu^^d_6$8p#0l3w&2ke5WJxea=nzQ!@Zkkl@ksEj*cz{#ygu=5s z;N8X;_wh4?2I%MX_edhhODHiYB@KS7#;R0%fzDkRGsmH6GSKT^*WFPuFx3pXP5QbQ@QFW#|@9jaOq4zAt7&x9;b5W@Q*+eHpYMA;pIMUO-)C))!5E2 z@>TZ*1R(&0cx>5uNeW=L#X3vwzr6ZZM)cDi!arYS@v}^iGjL`(?5DytKCmO7c&HF zi6M}J?G6I75aZa1H3x(FfV?>n!!U!BjpZB9ImMlM!cpn-KJ&?G&Y~gEb3k9F6~z`n z&sYEwOk-W61&Fng|L9_O()Xaendm>Ydn+5BXuZXLynAv}XQJb)hWll0Pj8xTtb*>rIYxcg{a*!1Hhr)54-U{8Qdf~KktEw}nA)Ms zC)8ZBfbMY z$uw7(rMR!2i4eK?rCK!w13V9sJAZnICa1lj#q##iUK|ZcLq&4w0u0p{Q#%$$gMX-F z$qvY@BIZeUdzi6TjMPbLTy;03 zDGrFg6MZYn6tR%rLyr7KN$)G0zQmz#s~)Qe%9zlulYu;BPC-$Tyxg8BS0sG9*ibvW zkwvLQrBhK^Q^+mQ;nk1T)kk-{LnICN?%Kn}dK8eBo9fGKT&Y{{)Us=D$jCgrQB9cC zz`I_tXXqArw-eEPqH~l|>u@j=KGm1j=YG;IA}x)a`FO&t<#8(%f`Sax2t=^#2|-TP~0sc6-DT|(Ac)-#njhb zzf@%gKb?UNl8eL1Sl#Xb#`B-aX@(7#fm8um3<9J$7vp=+ydr zula-Yz9n7Fu_$O7t|cP6t~KHe97YApJE}WkSNpS?&)U>%Q|)Bf(;H{FQVh3g3ESB* z$cPyGkp@)YSeG!Di8NBX5IP5?-*S##7{-ZD(6`$-+CZV9LbUu1! zU6DkmMf{UY3{V~AEmv>B4I6bnyl%NWE50~fj%}FZ5EqwFY1idte8V`WXCYd(=-li+ zZsl~i;KMp5J}OtwnjRl7lt`~RSLcZjLP(PSNXcSDL{$|Nz+z%jj_L*Oh*x?MtkvZv z#3JGm@0&lruc4j{)8(raS8ztpWJ`;qSC&`(_x5KhQIA|Zj#%B_!bRz$HJJgt3j)*D zCs9a$=pgPbv1EdQ8S>Z*)vvRJ3Mbx)0tY8w>d2yIjsyT*7v zG27`F_eq7t9+Q^q7FM0r;*fRu9bJkX!?9p{`q$M>Sq3;)%reu+4iM(yR?8lEVEWhXWltwrODvOr;}hPskaSZrso+h zj!avUG4zVIe#rrGR@=R`en&0A5G?)FdMgSV($Ks-vNp|Ix>Ppn9PM_mIOVu%*F~c% ztRn$MMd3^?yjr>5JqISe8w6w`E>R(&*CB(;!DJFu_1!{KtVV5YvHAHF86JmXOw3HS z97|Fl#hskka0!`~o~XkfJKm|u6!r>3Y$2)V zF&5cvdgOyrB2hLdRrNiaA8IHRY6C*jy#?$Q&@=hqR5>w31Q@p#Gjo1z!();o$CAHJ zEXH0d5@PI?Q#^Z}Qj9#0iNhi_{gcUIK(;Rue|)&SWn?6oxw1#iW+DCJXf|js|Lcx-dayKTe=_82+*8hX!1>~%qMz2eTG+3X}Vt+4IM5=kzRU^9ipZoBGv zUFkBfx30G_*X+#Th`8TyaMfI~Q1VO?Hp}xZAB+Xi%Cf#8EzSV@cKpz zA}z7U&5P=lj9!#fFP-H8$Go5Ur;|&OH=D6Cb5)LrAvym}DT(dD)S?j+NA{YnjWCaI zKI4_O3<&sT&l~DBxdam+YM%qQ`D~ftm3y`8#hQrgIy9qW%|VALxv-?j03ex`i!O-~ z7h5>MLvD7RGZ<|2g?l^<_G>uJ8_vpqbShO^B#1y%0s=yKc(@10wSbn((`&8t+fU8TN834w z40^)}bRM-2G$Em(jcWn;F6XuEstqP21({x4j*gBVkE63HbV{^Fh!k6|+<(3E!V=_? z)_RcSc>p>Q6KJ!tvc3mn zP}mJo7gU&SeQMLVAUB^W>(r~VS>fCP4|T9eu~_A4)D8f{@d*+EPRk`zl@V;dr%nAK znxV$KqGHa2l4^k6b}IXc^)H*IB^zDd;%L~s0POX{qksGP)8Tb0(kNO}$IqtSq^W3Y zWsl($NAsY_P)e}9Ux#8>0Kv--wM4D`eup7KDSiM*C<+4YaqjDm$ez)!=+{gFIuK%>gtvi=~d|HQirEnC9A-9QK~?2N0i5 zd!}S$fh3dN4MyvRRgh-)cB3ys|0JW8=VrjSM722pgfestjQJW@419J=!Dy`RPrQSG z#Y&v=AKnU~qHSH1)Y77~p)1gXLbv59y2C5{%Ap!K0 z%ZP6Eb}wFS&r2*MBqX#qKyeR}i9o@Zo+VV#Z;k~aT|&M{b{%~$L5NjE!}br38_;8GV%u&h)ljqUx?d3p5`2?DN`xnT+yj)C>0o25g&IM{UR^Ts|_i) zySzWT&2lvW09E&!Dt~|s>r3_N~*^E0ULWVz}au7<__nJCI1_D?eI=vooZd}Lr zy)#%ShV1atDdkWK&HwUGc{HiW?|N%(>*fDP96AaEGy#r&_>UH2^*bXds&zSRgn0&w z&mhNM5_vG)J9KzDD8I2{E@tqM9ZAB&`P0={*3|^%vA>7|q5CD=C+GGsz2L7gC1}*L zS;^2z9N@qtG~TUzrip%pLB)9kXF4ZQcS| zZI8F~<&9}T#EA{nc*D0y+Ldi?7h}ln>Phr0^M_S$vpm{iKo6BK5edDgLe}OP-*Vvk znlo>IyAz&6wbHdmlL=O{SRD>kRD^ z5_P6RyGIS~l3o6iN0CKI?v}yf(I`c&+((i*@DQ8pX@9DN`rpO)JK*sq9+E%>87X~_ z^M1KuR2^1A-VJwmbYxw=`j+71bpH?4uA=qibM(fZc8mdYL;xhh!tMK9jU3sQmZ1LN zw|#N!tj36MwL6)4POTBS@GAvv4sVKD--{tHyFOE_s7TpyrXRZ0a{ArL3BVw6VD)0kc;0@)qf!2Ar$jnPA>ac@+8WNM^w?6fG2%!^K>-r6w=vX2egS3N zDRea@rr{+0&zHQfAAmC7SZ(*OOxX82OAxOw13?D%l=%|(am*?t zz}0v5=Z+fDN1|BVc8~y(3qc(tUeHS`oaDBCo{%)1sWsTEF_GV-&+}u$v{sIx&a#tB zSo-{~4r(8zTaL0l6X=6OPO#{{%ZV0u)a{vQjuySt8o-s%QF->AP{OZir08-dJQKyz zMlT)lZi(*ehr)mUdv1vE34&Y1Z++6%bIDb6R-GaGzsvk&n@IvK$ME_7^Tho1 zTVk3w8N&xp;y$;JdJ(wgS>|3_9^t5)#JCvtKN1Y-hJnK7JCWo}M0?UM%Gb`&nrv&-#78fqxR6 z%zIRGCpr&@Dd({8$Oa2Frkk6aHaGut$y7hGu_d&$@H{;|thyeQ)<-l;_QR?sfPgPG z_3^EB^}Gqtm5hHy5G!lBl8ZzT+&WUriLHZ_F{`TRtcO}o{hfTiq;BVr*8%9^F``Iy zzyrkmcZE51&&6iNb?5Ytyo@dIS6H`SvOP0JcL8oq&L?Ake#ryJwlvH+0qx1aHBl_-Oy}unkOCIN=E&sX@ zb-Ulb0z+O44Cg0+AB-SwpZV3tAGpIcxd;6gRC9YQBb!-xGHh+R8I6vE(;pkjF9we5 zah`KYh3oCDEk?Z_gmsK{)p{#JZs$XbtLb>MU~pjW@9zW0aHlUkGl%!*`_QXuyI%1$ z=>ql=+Tou5etC6u2?*pRkd!|F#-Vt&#OS{6=mj{JqzwNQ$^qkXh1D`woz*hlXAKVz zp2xdO{lC<()O6H_(?yB^%wrJa$N(J?ctn<#G+3l^D=VX$nwqd}$;il}lH-GOsCp=S zV$;*Zff+SFzYo99sCu%%n)vMeoYU=s%3P^*?Qga($+>KTA+Y%tmX})_u~LUXz<7XE zJKFb-CIkXHkB^UEIS2I`?{@h+9zC{xmZ(=p{QmvhXfH{ULQhYxu(&u^-%3Q9a|@I0 zu_CxT5CuMN*r+->DM?gSRaNx%#j`;M2&g zm@IBSI~^|#mT5Ns=rdK8b;t^0HJ_1{*PNma>($GaS>=0&&lZ-;Dsp?= zd;%QG2rr$}0e>tOvpZFf0=SlfO`A6W>=Oc$INk49!(`AOlShwD2{z5aO!Kfq1><5m zm!lq-S76nxwA~P{vs}C?uG#gDaJkSE%`6POdWu1M&+&ayU)X-yx;*42BQ6dz|CdpynW@Lc>804TovU81%Zr}MHaPGAH9 z5IL6I4oXW@s{{Ipz0-iD*{wUB?TIBH>d3Vf53B+TQAtq)boEPJ=H;z@t~+V{NtODd zl9HPY;}8CKcWx`tlY5Xd74$O8G&;PU)pDi-ihRDvHPOY%VkUGHN(@ri7accK{me&` zrY23os-^%F#Rn35B!Oh<-;VJUfh;5Jroqm?!Gg?xV1u6S6=b@Nqu{Xw)vvgP;#)QN zoU}uUU{qro&&Rm;CUfDhmz{~5%9z0ed>$f5nSf%WVyX0Wb-3zsKFaR;bi31fiZn(% z0(;Hhkszi1p3&}AQPEksGPD<@4eD`~V25aVKRVV~uJ*;s@Vy}k`HPD&_BT6_2!f9O z)9_~!oe`1Ot}Zr%7J$S&8;VM?Ud+MvMi#m^Mx%f8g;=uZ1_ zei5M4$797yj-^OGPP&yf9^>KR~DiMI|WTT*Gbtj5oRr~=^x<4cLnEz2Gi~w0`Ydix z59;%nW4+pjwt7CMei8(Gj}jEh(53=XJQA^(_dF&QN$l1cDpd}_14BdT-$CI5#_QLw zb8NJ;T^@q_g|xIXV0!$RDT01q=Q?EewF*j*9exf{sMDJhXmb3S&}1GHsJ)jf2}U?-?j zzdz)sL}JM7(`Cv4aSQ{O<1rZwqshdF=i&}V^BLO7Vr7OG2$0aLjFt;5 zBqXoH*hxsfdYty+=xvWALlO*6ZuuYgWFQD6M6NezCygZ|w3U_zY_{D<> zd^*yS-d0W5x4=!(v+TS|hm1{(>AdP$f4x$<(H{~MgI;Me`H|6Ti6c5LX_HPq6o&!( zr0u>8M$iM&@;t3Ke|=E|jf{*2>^?ip$;zq7QmuF$SWf1Opq$uidp};T4@8r$pYrn_ zBLUH(9DT9Q8Y8q#gDhV<{S!JmhG1fu=F2{FrsSRyXX9WLzK0HVqcg6ZVBn}Ms{m4& zG4baw77t#zH`l39Y_MIizl%ysW9#=vV6ml2!K_a!Yh!^;wcd-PjS0%Ln`mAoY4~BpSz8;QU9k-xQA_MbMhv^}cqC&B;)V(6x(rYjy+78aN& zyf?CQE*R+Og0{Am4ItdYY9$(~wlJMzfz_H5b>cMBT-^i67$Jxrr1~5@-^{rRUEhJx zQLOI`0L%1dw7U0zJ6G>vG&+1Qr>RKSmw8;)u+blh1NbeyF26T)UC6jhf&^S1qLS%M zir>|L;fu30@oSU2O-Zo_|M#5jM_K9O3YGWP1Fg#+PQm_%)0`sBDCP&j0vJ+mZH@!! z%HreVDm?F5J$++x(G>lfJ<(1(3Zt5O3KxUaL`6Z~~!xyg|R$o~!} zD}>)csCjvOn)?0v!F4C2|LSOQzQPMuY*6fCe>wE>UnbV|S5m@$X7x9F46GWru!qD2?jhVxhXa2}d|l7O*=;!p=*qkSRmZY`&#B*q z`+YG{-6Jb$+FU6x3?~bqv3MF~yZfVh`~3lVb%&O#lhw@XF}_fsyu7=!;uV--D_Q-b zX=$%K^ur%9C_I?FUY{POe$|OvB7qjj5lD3F^KFjY`0c9$9rAE5Kd+6v@c^9xbO6?s zR4Uu^svs1Qb)mg z)^Q}mYj+bgo4G5YuTT2S!zD^L#__M5_hY9+dV|Y9s+|g@D zulohhao@yX0Hw9M1MTYtk-S#zp0+MevL4EbR(Iz*Ym_C#<51dR62s@LMRD3lUjz2j zig(|k%uLwmaxYR#WT#()Fszo-4gD2u~~u2%DyE<*i4slyaAwMuu# zvqY<~-;pkB+{UBGV2uVrAUaXYEtrVc?cX}Tmf#c%8JZhxb!Lo3a+a~3zcuc=t0!Pg zd=vZzI2Ax?Z;^bjQSED~aRVk@>#F8q?<|NFYSb6fxF4G5 zX2Pf*00a~h7yrmg&ieQA1uUGbx-w!-ujY0$gCj^Mypq${HyZ1nT)}~jVb=zYAiEp4zb*(}~a&mGQ z5pT-R&_qzdb9;AC&gs6s_p%P*|GWV6Ac3euNR5i>z%@<-nKa_kDUGhP5c^HE>^1rf55~Q{ zJ&)Q8nk>(_-DBQn)n+TY>xWY!ko~1-N&v$u`|Qz9QDNb;-n-zc0}V^wN|XY zyd+RZ?jFl)u~1Z`$CfN6Eq#^2t>zxbfa5v1DM2|^uHA05W+=1`4)_h=csZP#`HizD zVQb6SG;urH*sj~_Ow+PKd3`wVJG`Yg5JfTqwQF;}Q35+05r@uTD31CaAyoq8pHFJ`Z!=!J2 zu)D%Ow4Amf1{^v_V5{vx(SNT26DY`peEs_3+2!)^1bxgHDM=W5_fkFU$)#jGnPJ@E zZeADPrnQDs*BS2c4Lp0?UXjeI*^f}tAUL)z;I5%Qq_=1t% zG;EtznM5y-u3TF%_kaJCaNS%Jak+>Vd3Mm_&sb&ww=z%}^`%AJE_OS+gb<%S|5Tqo zt)DPFq=OQLxVS%8YO!I%4DgQ&%qtN}{Vm*WEyz0YwCe%S){{F40iHQyX^Z;~{_V)JDYBsUx@ck+h zH&vyMrIaz!UgPt+S%XjTu1*7LW_p|F-Pv}k^;z!&!yF*~34e2cwp|yjva4!1C~G#c z^UE;z28zPAH)Ey* z>n_e%g0*G8a=W8jsp4|nxYIIfCo{z#<&TSxe=xclj?Zp4&U^iQN1*W9Wj&a(u(TA3 z>O3sbXrfibdByAA^4i{dUeHOH4Pz|ri&`Mdal;XE`F#hdb;8HTpXqw-JnynSJ}#@Q z-QQGuASx!kRzLfY&>M;)?~yf^eierMZj^W^jnn>SGgoF#y&}=;@m`lHHR-8-4|q?2 z_x}6L&;Oz6E5oYHy1xxX1XMz4LAtvH38ke=Is^&nlnzH)N<_L_TBSicl$P%9?vi@f z{ao*VJ~1?pZi!X@Kp8S}PK5BrkY`4Ex)bhL0ac|-VeVu`TG3e*VVs`>1T2@ zxQGn}z#?XoY^d6b{C*c=mqq=&WzVLyokF0CplR+p9Z4VB!dLVb>zX&(+3SG2q!@y zixj3x5v)1c{q27B2Oh#N1L&JUC--)(Ka2URVX(oH)cd3@Y0UvHv;WIvmR5H^f zPdr!M{Xb;!z0uv;F1w9)Yj?`4tK(q@{>?XKm4Cj)h2WSUZr&cPHRWZje=jVlr$-77 ztJ3dnZ!OsuojQ!iei}~`YUZmKX9HlhlH^W0~@W()HsxjL-4Hq+Di^;9K|fzqPJdFR1d7wz*pJX34y?Q7GWUm5uf z!`GLI@sW#}0iQ|Hu(Uq-qKMp+qwmi`{}lM>rP8NASw7Mc>8e@u;xF?)*uMNsB#rhN zMFcG~LgJQL=7`G4PWZu+loZ{+65AcYUMR-q$7t%g)M?HKB+ z%5jh274_8Lo5yNUNHB0G4wzpF&D{$U`zXe6rn2xjxHYhK9v|l~mQ2eZBaTD<%M`V- z;8w#-4*HLJE+(-YahSQPpR@|ERI(qpcNsnXAaQxI@;RX$n>^1hJ|<`;T!V>*jxG?M zIMG&^T7Fh#B|(yWfGPtuD{DA>8Mj%#%^xZ}MZ2YS6zmzus{Hp#T5s^pJMM8)z5J2- zQ=Ku>*8Gt*rHy1E)}vyP9Cs(`eaTZn*L3*1wJROb^pOpv{N$7v?{ck3iKBUgTB(1s z0x70rHKuZx9(fL{dkL}*-LkQ4d-Xj7sJZ!85BD>{z-i56(BvC*jh9?eBPn-#XSc;V zMIo|{mrx0pM)soOpwucNg{L)lT;e_V9Yc;}8sz`COs<;9X{R-Z$qu(STg&+>oGF;| zf4{{fd3Y#b<=eBkklcH?G*{}U8G_s9LQ0YPgYcs?dHdh&G$VfwaK28|^G`yTi)AyI z-bnlymS0yNgtMMq)ZUDPpKtM|?6r^*DtUhGev9LOp8_?xV&?*bej-6D>3_c=iza6I z;5a>CWi<$SftG7@Ze}Joj}Mns6Fvfjf&Y6CtV)sQmkVtNW(yL%NB{rFa1<=w3sn)X zVmxHJOmeAoXEXYPWzv(_{>NEDIY&OpoBtKf6>7EPnn>|rg8%Y2|9X~n@_*VVKHl!p3+9DQ5v>@VkK>0V|RD=4MZ!Aj*eao zwEvS?8~lL_FEA7~F*eaxqhRw0{mza1#5|dBGzE&YhMJvCT};=m=zpTU|KNd1TL_^? z#nN-+P-4mmsk~*$1RfU`H-hk2R5(n`%-BKVZP!)>R-dJ_ z0>up%?fGzWech&yLd>GujZjcg`YY|;wtSh{pZfj#uCQ>uxtUFW>AkC~tG4hhJ1(O8 zP`5rHUZ`ft2e(u6RMV7mFOwc6Jn=6!R-|v)*ubch{=04lRo++l#HL z;-iQ_!&i@Ckf>H#kbo=_)hd08h}oSL1<>z={+^#-7=>xaEs69c79BnP%ice zyoJ4qxXq0OXriP-&-%V8QO5I_nG4WH2P(x9_qe*dkHqE(2?><~Xe=YsY1(#wc46{Uz^vtN{QJKhX(ure*uscO2obHL8aYuYhLk5YkwitWL%g=;M~^`>FtHi3X6 z8z~E^PH<%#erH|kx9@?x0rjuIbYSb`WO9BoadvgSL&)_G3pPfE^;GrdR7p(nh1o5}=4R|+AC*VK83!Oy>m+&26*HbP5WwSllH_dn{yjCTaJa6!lihAZqxl&Zkcc{y zI;(?qxDgQ%1$s5{L1gk&m7Z)IK_P6yDYb7h6Z7t3##3%7Z7* z-y4Cj+QrRHSyQPU!Hgo9}T8# zXnZ`N+l8mZ4t+8auX%`k&fB&9EZ;;71CaCpmqg-#;Sfe9+=C3Y`9r@Bwx0t#Lx$mi zQKxnG7;vZjV@v+p2Oq>S@Uij9;NPEPq1;Rww!Nr5nQk5)j*iM#GqkbkJyghEfQ1Q7 zdyUs*>s89JI!1}y1dj*k%POm@zW`07o?k~H#F9MM?7y(S{;4)YaBIA5VYfFRC_H>6 zG|gsqZK)mh67rz;_V*D)u=L&ZEei{aI=yRdcc-1Smp-WABu;_XBMQAPv30UD>Byu% zJwJP!Rywn<31w#K z%Mfv!A#Ih$(GUZ)1V9nyz(h4VKJn9i#2TE|7lWrYN2_g>>GY^tY8VqGRW|ky*A=Ms@-rn7?xWfDwcF}bBnTljDE-F*B&bD zoePV9^|9Au9vvMWwgpRnO2c#dej3X#F)?e@dGJAv7omwH)Zw~~nl`e*=Xi>xU180w z_LcRy!ar%UGpT%nzIdLT>wL*gV-7-lPQHqCo11S;Oe7L`tiJ#JIS-J9n1n<>a1)54 zw%+6-xYXSYp+tdQ{^8bbE}tmyp9ak3}|_gAhfkS1Jc`r$Wetlf{Ga?M}9J>$LVB zJD7AEbXRkSknnwheThX(9IQ&y+SK$BK+6)axl&M2!*=I@h!k%RXuVGf|_B{6aVU8tz%PjbN=K^+S|KCgEkH6;=z?MPT}p5v*sJTMl9hM;nfGc=wrLJt(tJ_Fv9z*m@9HvI|E&`D+=eA% z`blf9N)7>^J(X^?5;s7g1SI&JmS;-#uAPk@@ocEOIxvJ6-2vL^mz~S(2 z@;kdt{UwilSrVIi?Ay0*MIqB`>|)DAK1Imt7Y`I=LAOJsnF09%L3oA5L>O{t!BEA( z!1zt2;z6{uj4H!p&?6kKj`_qsXP=a*3(#Sa%ozS#qizGoZKcDxeAMB$A@d@g+9sd# zhiJ7V&^V!!DV!1HYIMMucoR~qknJE8>XAp-*U=%(;;S=zadvP6r5s(1A)3Sb@Y$k? zy@#jg-pL8A5ILzjzPg*^PGb+5Gkh%I-N^d-`YdPao_v7y&{t-mK27is6?EMquX8!- zY+y!_&Jrmep^R*o`jzk}jLi9S^cRVk9$h+m=DB>~ zsHyx5jY(6HZ$v_Z46NZXXb)j7?`3+x5QQEp@%FS(tq-7bEt3kPv3+AGJcg#GlJL-8 z^-7t-?5`24{kO>KIX{Z?H$$<@%L}{rc3E*YoX}8)E8HgIci!&$S3IJkqti9Ss2&s? zOv%C$_W3iG{FU36mYN_VW7D~bNqlH>K-2l7tZb=}ccv*V`nG(S{4;+3FEKGEgB__f zAmI!T4#u#-bie)l`SZ!iN!$1D#S4`kpe79$YD)q=;*7h4<3|4oK9jY?6ygXg+Ze{d zC%fAK876xL3+-c{OTIpe`3qaNXr@x$+tMJ)ci*(cw5AD_5Irrk zO}CM_jfGA6UtuV7<3tT}>+>2p$2H-M(l6TdVl zddkckYBf=j*7xqzzBLAuSO^o|DIBi;8cZgzn53w1bf$F8ChE3i-iqm$HlAh*dKjdv z>KjXy5iv(cM{`*k?XDp-7Fe^FyHf(x@>{#QFbgGQz(jHEbnN2lV#jyLA-u_UDg#H1 zvgVPle2XFbfT^tMKiUC$CWb|~#rF&yjBq$K_4E{dN<*==b!=#B%hs|`dy$%1iE`Kd zuE3OFmBaaifCo<~7&(L6RcI)mBBWVcI2jDmCOwmU0$tvJ;4F^gc2_GK*G^M>8X@($ z9kcE=bP8Nra#0pgO+!}5a+F^K?iw~HO&k)je8;!y36kEfna%==3Zss14my2*u%Z z^HMldnSOeDny%~7V9{%0)`zS(3%Ef+L38^{ogt*0@ypEdNDd6_2c@m5WO0CAzyB`Rlyr0#p+eP?d`KGNM?95V>Y)+HxVHxCnpuotEl1cdc~3q z>>iN-j(&}bHZU;z?=7<=mEk>>GTmLrlSQ|d_tuk@d*_^o)N@K+0x+YV?$zgMv!dOC zPGSid^!dg1NZ6~l{PET@{(Dp_ub^ayts<2CQL9jb3Wq$3=nG4fbSUel9gHo69PiK& z2{aUxrK79jw^mkifL8-I8RFqiWnf?c#mtC<(C(fc2)PDIU#Vp5NK)Y_X=zFKG?Qe@ zCrG=x^6hFj0*PWcK4^xhqk8c?+Mpo-K+(9Z-h^#2l-#3cPy2Xhs&^{0=5>E|sWMT` zzY6P_bkp!;4Gj%NJ-x7m1mfHJWPkdNW%30hHJEsWDv&xhfa~zw{|sZ9_&_9QfIPC} z^lT;NzIT9^$^2d1u{zJ^oTgow(3nI2^2W?8s4SFQ`1*nqo+;#8A`=VPG{eeB*i|l; zKYf;>Y7+odj)&~m^-b8;(1oy7WdEz!^l%Eup2ulod+}MP>BmmmPc^I0O z$mgE@iFMCTA9+t#(Va`1lU0$@uc?8zH{4%r2PwNER5p;104yE3S53tRV5#_iiL4PmqHYz84Km?Y>%V=ive^ zANk_u@$qugpWBVl&`9_l1B;5CkecJG`=A*LiChBj51Sn! zq4PsdB3`o)Rf?s>+(>{N_s}`=-5#OQ1lcnwB%V z(K?2Dgvahcn#6w|(^+&C{wtRL2Z4rJxKbR48Pa$rmkIG0au(7aSK$aWqzjW~fybuplsnaM?)4K4xh{FtWED_%Znh9w5K#Q z{z#~;VJkW)f5Z#5%3wWlhxO!SW-F>`wL$enh)K7ky78K?uZ;cw>nfbktg@$ueF+qP zJg-Ghe3?b^M%Zc1SuKykEe{5qpxwj6mW~c|Xu&j?+Io5(ROwh3m_h3T;@EY4H3ywK zk2oN?85r+R`3DAq>_oTO=kCLA1qF-H{Qb$~=<4o%Rh`gMW-+3et194e`WaNu9i1Jo z zanT4=uKuBA_dh7*4DV4^&8+9ZIvXV&CU4(wp9CKf1jF?5<0);RAnP0DiA06 zO8P=M1e8su)-4Js3}}quU;ZrFi-?Ny+0MQwTVY_LqXK3InhIqVa$@9%s&aJfFy9JuV*n|X!>nqPD zmH;IkWm#Bw71mS8_>J}vS%q*!!hD?yVLrx}$4L_sBhr7WupW@{$vQf6o!vQuhfE)q**aBK@vPxwLpOldB6&%Sh#K4ekH{Wv4aKX^d&M7U|My2k2`?;l+ z6@)jv*{Ux48vT_hd$0`MsB@S(HZCqADhd&7wRd)k<`1N^sl2ha?m5~RK~6)V`<}Z; zN5&_~Q*DIzZ&X!PA-%elu^hPLg*Q(dPdDL9*12DA?ucz{Vq(A2^JIVj0IeQR{*~Q5 zXhD4g0vzDD0k-j#le|-uY5uowPr11t=gKz3livA1Er7I^IZ-=(`(&k;4;YYPduR0R z&Nkk*CtLpF#2UJq(D$c%vCaMwF781;6R)>w8bHZ_!$Ly-sa4`^gkS;uPG;tATfzUM zYoLt%kFNPxQNfFchu4+>cmSXCcH*2U&<0}M2o=_ffgdWd=2~hqk_^Kz$3^$tBRo7c zzLlMo-k(dIi0rTL$sW^%_P>SY^)}E$UMr5vT?`*YOHrZRxr3aso1tc0L~ngW8KPjG zFeRDwTwlGQtZz8*KtVVQ+u5A;!c9}CzasNfEkyW1kO>$O`}uV8)kSz<9btFq#&wks z7b_+ATJTkoYdWh8?gWq`YTJ`l&7e88*qoxKre=S;9AaJ~p4=AcWrFK1q(DsRw%pLa z5F3(r57(PTD=8YJ>O{S3j@3EIoO>tAkz&&e^>PzFz;ZN+-4~$my5Q17zlj5cMXXDl zYkVD@Ky#pwwcj;<%|4tA><9Xs`cmX8cBFFQyH?9G84{s-T0vYg7&6t)8}b0BU9V-v zx}d@VxX}DixMgzkB1Im(xb~O`e&4t3nK+H>2>MW7V@O|qXIsg>2YE`m8Z9F_4NB6 z6`bFW2a9wQK#eoIx_bIBr=z6==|%u-cBc<{2fKp+#^)6ChqrFsg0ZLhf3L~SO=2-_ zv4+jfa_&LoZ6TwIGKd91K1Cc;831@7lB~Uj-^8@FSEMaCKa|poXt;<%?c!Dr`ceI( zr}Com=@{q@L3c9wsmf1KK zt>C_XAi!EsPZXhHq(iq?(Q?8oG_fF{S(GA{Kcq&S=B=i6z3KoM{h`Q_qkvvHpzrWC zvQmLt-X+;ZFI3{7rbXw9CAn<#V9z4CX7gZ&f{qT&Lfb;eyasEKCJ=nIKfGtWAoVn& z-3ZaQ00R--RUiunf>$7bx{dmvp(2hIS11;lKh63p?~#*}!{InPKi`zEtG_hb_x91F zM}KQ4lz9%TACbt89|H71ZwnxF1sJ@KE!MyTwY#A7~68I@$?}J zJ~I1cAlK9J4-dB{@FO&Q0}}3r5^>LiNt1-n9!2ag$cPKRs+GPQz7?SLU~{Twq>`#M zT7`L%(pmw&mIN4H2Alfs!CVTvdh9^HGb_?&iJ4qD z`+Wpm-kj=05SjM{cCB77bO?QGj+PVUp*2CMPyT~BpA#(EkCxG)pJ{_Y#ha^;)8F{y ztupL|a`q{ur=r9?zPfZ^TM% zTve5of9piuc$1V-(m{bCZ?5Yu+t6o+ii-OI0)l3=iqJDsx5imXNA<#E zVfUfpz;Ju-eD2g4E%UbiSk}%+4q1MkmY)>UJPfGW^2yQ=DsnUSxSgx|{YG1mzQTta zDmk*^0GII6#sI?llhjBFm<`Y=gyhY^yEEus=LSX&pzgLqvw=O^gH+Mq54z&HgMCj? zM0))G0+$%gs{MdKEwDhh7LS;b7%~?BuDyT9tyNG^c)H)oYBrJ0Ebb?+;OWo46Gl!$ z)AsHKnIuCLhgm-r>V1-yAq({?*8`f!99fgaKM_(bI3SPj_*HcPie+kYq5r6ZW3UJa z&~ABD&#JW5^Cpj0YA7o!pI#jFnn8_&9mS;a{RZH1VWiKc-)y`Py4+NO;oqk2jK*Q5 z3;6|%2I_ymaXosB7m*U902z_S)W*;F_}Pv7A5H2^DKbPAXxD^!d7j%{{(H}*bzh(9 z>K0H7Bu_{*f4yUeK~$YZA6a{rz#jMW~{p-7=bu@#o2o6v_+Z99>`m|+ZKU@7LiAX%EXR~KhU%1P!T z6$dBh7-(gV)`v1caW8xIj$?$fm^fxZC`>umX!$U%?PuRFSBK^9xB!tf@Ei!wf^UeH zf#DNONr>QRg7W@3+I=wNqz=Dqv!(Ioieu0CePeg~oAVhwC)d+m@`oH`7kF_uJl#*I z*`8v3XuN&5#BIoY;YtR(8vt8}BB+vCkBoqngs1 z!ZQ!ayM~HDt_4l*Nq z;RUa#bBPdwMo5XQw7t63SCQVg_I`AH{HN`lNcZ zC=CfVwe2lIxK)JjBlFdZIAH8YsGS=ClyiDHd^dTlE0jsYn#k7X*5I&g2s8w-oh{j5$`jnmKVku>T`E3RMMjy58aBlH&d z6do#|J|OrL62}=*C`Btt>yJs;1QS?@UhxVra0oMVhq97yd2b&r zN$od0yfG-%VHf9Uu=bZ?GU{zNW8O}NR0HQwhY-w-KB$rUZ?N#eI4|(WqXD#s_xSLe z0K2xcb$nW>%f=BGvfLey`{YTeT0SD~zc?IFkfK%|udoQOsd>)-GN7!G`<^o{bh>)X za&UkxDX&uhJ6sbLb3uWrZ@%q_7@4-z3blT`+oR}76uSKa*d>f**4b0m-=I}4?yns( zFKe?d(92oT`NQXRTDN}8O`Syz(2#%m*7*L8_cig3+jQc6KBP7K)7eY8?1YKWs*41z zkvwxmhUXi$SM#nsR+D12|Bn8emmzjp*8{lWTL!AeSv5( zL@h}yr{c305OMwu?o*C^sA~Us|DCD;Q5#@9T3u$a__5sGle)TVT z#y>CMr$Eu(IzIj{j-@OnVx>sK?MuDGoq-H%R)Vjl0210c+P3rzhlM5a_rq}wM<$Fl zU5h5DPn2>WF=jp1G(wt$*_S@|tjR*;EmnI<&EAe`)3fqE{Gkz2pCSzFgtHA7hC|rT z25&70UJB#ehkcS3JrT_rP@2f%(bZdPn%MbuDSI2;_Poccv>GB|@uKlEv$Jp2eSOOyxj-NkE&}vB3n4h5g-NL}YShx1*kfI0!fo$m%CJBLmc5@>_Hz6?-0WF?qkCkScExW5U^V1=PI;T=K1Y#g!bhSo%`UR-;(W9|^ki{)F@5;k-tn=-Uku;Ghvcln zy{84h?t;kq>njzS*PN+0uQ5yEh{UlWjd(PiHzXUU}9pT z1_bNF$PU7ClsFxU(Wvj{c58P8!44)NYzFcUP|;;Y;SduiFvQ;ko*GD`U==G`IFIwt zS^$%X1QaxjsSfj3V9MD;E7cQcIXkz*9|HfF@qz*Rr-43TC|`}!zC}u+&T3Te4QQ=3 zw6!U5f(-SRQ z4DF(FiB0S|Vc^$1IpT+lwF2ww>-Tiz3J(D2!ong@G!`w9R8>=(*BwcaxbHoYSzwh= zJ~}p87R;%n#g|?CVKNn4|)+RR_!aptlFzy0DP$E=C%usdad` zyrawSxA;$S3Z>BWu{Vm8GT_(%+p(CWBtq1;D6_-*p;$CT1A+lEg$yhXCajCgk}N1i z5bgS7W_h-+%^(sN(mo}`ZBzJW$FB$_B5o|Mt?kAK5ZnMp)Ax-#kb0iMc-;;_u3n&h z5$)E^tDBgF9KKK-U?LxRMmf7Ty_PWpiv^0Ff$`;pN$8c=)ieHQUm}x4#a+c8i)R8! zHb1wvH`sA%Jilk^`DKQi|61L7<1xB;lv<(=%kQS9r`E(|_`QH4MRYC!AhWQz*aEWz zW?6-F_h)j^(OP$2xcJV<*cdUH0huk~r6-h3n#^@*_Gg|tn4X!@_{hAu%^GNV=s2g{ zHkb`}TGEv)6zLwl7SiDKBZM7id1j4a7!iAagO_dY@*bD@AX@#hS68B7Ne5>l2A`yD zz#A|Yb%4 zF!`TqQ{fl@JpuTb@DFbY6h|HHTw4@3$LAYgD^8dCpW{W~ta?UqS{tB+>| z*Cv7=pRz%8-h)ly7r-0EJ>($dccg>HKLdbO$JNosO4rn?sxy_)FHoHzv=NZ=p9amS zaFrN*1*d1{KWzI%00`7Bw=(Ehq<{1XPf=AvtXQZP;mMh~?}Ji~p=~2#az2dA2|;H2 zS)=#C5l+;Gb`=hX;WO8NR1hPz5b#78IG}cD3V(Xl&Q&onGexvp@cb*T`^NwZK~PF5 z>Z!>iF^;S{i$F5ZcRtqN@7&V|CKyt&fe{1FGTP0 zd2b6KmK6v!3`t>2hBP^88R@laH}9rmKNTI-kg6)zvf4jaW>;K-O78CG3}id{xwLsh z?;wYX&AJcJ!9QJHivXGfYPqnvDSLp|4f?Pp_zT#IDyphtz(>l(bFt^eN{UNH08ShA zoe=`sBF~;iLfZ$gkuk6VQAOezeNe+bB;*s1*yxx7{SK@gd{cmCzV5f(nHFTxtCj-t z8l(eI9$wxklhC!&zWoyG8JRt4gp^oP_50o3!v;9O0i3m#AWqzZRnKM9M?yovM} z8yJ=s!0Bmfz7jL?{V`EAWd2G1-~GY(C-GK z08$2ph0zF7CV{LyRXKn6;Gns+)ejaLO!&D>#hFFUx}T&!0nwBBwElxOdj%aMV@73V z?4Lj>&_rON{FmND0W9WAfK0&m%e80qv9OT&qJU8=>rXSWBJ@Zk`=+qIgJsrk)2&+fTAJFZ7*6eOAm6OMwNj^}O`=#6-e(MgyeP z1*phjq3!I6^bpP10D=$Z3UUgHTOf;n@#01gOOMVo z@Bhf02=+OkRfXDIYCeRn&Z}-cUD@ueT_>79ls>S5=~lMJ9Zq|ZBv4oL5&CH0C3uco zuD>ULgZ5xA8xXL#L$T|-5mMBz#k|~))>~_K>N;b8yww}0XW-szYmEc3lb+z z5LSNt_%W9Kt$+K6cozl*?QgpR>dOwE>Am&^@uxdEncsY6@LBq3z9Hb9<+ayyPzqc- z{?sF=)l&eR`nmU{nU27lrj`R2Z1CCg1u|_~wj*I#ZlhDuNB~9coJVMm4#|!Fdl|iSP-(pU6uv^(xUl@)pgzA_B1j zz&5N?zKiiN+*ejs4r-V{SFWU0TZuE=DF)aqNLmV=bf|C$otrNyfo0g;-~T82#U6?| zu{QC-VOh*QQ_~gve?r%|-*O-STTDD#VVI~7nK}g>2B+yU$>!EpimPskN%u2|O6gAE zy-rX*UO~=3`0w{ER`uGZ_t zd$w=f*1Hyc=?np|FqaR#OHBy?ZFMjni`yC%W|lHN;`ME4xOwfUe8r_#N`6K*gwx&G zx$vhxTv1c=tZM@_X7cj#+}r7^v$GA*YwR8s)}^oXwgKtvhk@V!%`Rg_{{jW*A+PtWXz-zaw~=RSr_bRX;) zizb8J!jHmbSu&zk3W<*HCQGWB;N5*dl3H-M6mL!kCsawrd2c>bO4E*J?wK+s6Mfg? zrvyelMBG*_fQEq%Ck@adP_^4##4NnyB7&^9_V)JN`C_Y?B0*Tb%UxBRUt^*&)basX z1ajHZ(sFe$4VQzHFh?N;H5EulB!li7vH!h|AudsNf^qqz=Y)PVq`AD@7SkagqHl_U z+xW5ZXYEKSD!NDL|C8O7if0Vjt`E|~VF7cV5#;z#(a`MAUfl+8Eu!5R1o3}=X*z%^ zl8%X~rL!~GX=?(>;se1zNTeG#kzA-&BuW)TTDROZ`S^J{DEz)P}xx8MMYPmv56A34Pnw<+1Aj`k~>5q4jTqeTm}V!#&Z~#ZHurzn}IT2*7x^I+{k= z{;FN4)@i8H@+9KxREBX)I1yVo%`mU!=x0D+K7UCRF&3vb42lKk`2fh`<&y<8#c}5m z4SNcz5a^B_HjbG=AV%Cfbdsx(Fl>d$w4r{p{xUw)Z;$NMNm`sYTYR}oNMw!d^O9xffEtb?>X!>Xnn28BMju>`qB2-v*PK5cDn2%gya z3!o%KigZI4n5vc!z{LabiMCDmkV2=9+~`v<^F8?`C=(`yV(C?~XIEB!?^gJ$s49v@ zO2`p#I$>hqvn)29VU(Ip_(L{`?|#2M>9U~Fn#dQ_NM^Zwk(7GkfFs3sT!$~`LlB6H;JS7*tQi-8jI z6ZU*&%G}kX)J<02{LaA;Y6Z#K-MEME`U>uV$D>R-bW*kla+UUScYIRukx2Ff{H`20 zhhyoxMt`-ZdT>E*4H4J72Iwpaxooi*)e6Asp6ADp0f@PSskQ38J_87-A2f^@55gXN3=R&4h*L_$ zR{9ZImA_zJB4-hje>adF`WJSz!NzgnM=1szx8rsC3mCpX)&$gms>$!>?Yn4wycu`k zFoc=p94#lYcwFrL z{@5f-4)ZC7J!jQl80qK0f-VAk0_6o7CgvmgB!22rOiTK~e07CCy}kGVRFgxqmIi>N zNY@rY8XP|#V`5@#fyP8a#y&#XhI5u?vff*tK)~pGsv@0l^cAyT;4WI4eu~#eIB-aw zJn<_r?Ll`i?R|{=8C11%5Y$unMFJF?a}&%n2n#%J^IIIPGnxgLr)Y)_B#AF!DZP~l z#|F4H5auO%5Acp6GG!D6R)t2eqat@M+fr|S0;3gmWla?ZTq})zadC+PVDQ|0Rxn`^ z(c1rM0Yt#kiUL-RIoP3j|00z4zkbd5&(qYli z(n5dkw2igglf-zVsZEa954Ld&R=oz56xA07*Z#csjO0vAvMx(e>L@=nm@2EP?$LS+ z{_pdB%*e>Vdh&#s>D2K*pq6M*P*KrWdQ`KnQadWOaW?CMPy3M&|ZI3iEB?s8k( z0I0r?wY9YXurqFsR*53va-vhqD z2BX8#{}HZ4V~UDKRvR33^gy@Dfk+X{d?=4vY$^~3+Dvt3c~CMpj*V&B<}FcmosM7{ z0J41RDUv}1&cyN?XrNsL^^JE>t?PJ-6ctC?RGp{0!Nuub6Ub$K?H1bZAvspaPELd9 z@ur6VZu`MrAlz}MS50(udtwmN{Kq|35`Y8e$ZZ@VB56%c!n3n8q)}64xIc9${g@*+ zMB+ZN9Xu+8?b|paxja#7qQu-tYNcQ|FB|_R>I#}oxXch97z}%V&EBK>CD1zFfX^WA zq{gFNVVMPzWvIgDQSm?}5D#`lez_4C7&t4x`2=AlG$?35X$0mBkOsgV=t2D=LH*LN zU??Xl^oIla?a01b7c=Oako;SgA{H?*F@&E0K@=kMY#*TA%UgJzA&mdxbuPt{H9DAe zO~J)9=u{L6HkFLF(9v2OUMNHG^A9dP0#T2M{{9e^gcy6NN(+tWx_Wx@U4;ZJy47N@ zUfm-+;RNU|E6ntXz@*^r{-GfNHwZ~i$Z7JoPS-sVG8FePKE43V6+mhb5WsK@@&hVr zT5KYsPeAHyR+T(@M5OhJsH|=D7EW+0@}Ry%Mk?jL1~w%Kj_EW-klOZ~Ow>yjs;NMR zV7TzrJ4^bu=`e&S>`LUrWmPCPuTyvCb%q%dWH=Hlur!*bh^Q&hT% zE&k~#9iC#*o!0!Pa#_KSEe`@eHQc$w^r-l7n*6IGjtKv~HP3$@-d#z}vK;ig_fUS$ ztjv)+^u#$Fn^_!BTNKW$v(S4d1qn2#Hu`|X36bEvHYcqWAl5K@obx>N_2b`puiu@F z8I>jw!xG3+b%gHL*4epYqK6^XkS8JQu1K2V*Du5+5I>T}IXdFO{x;gWw6x2pTtL92 z^EPdaW=OIQO9g@Hf!rF;1m9%(M~Y6>#_Mu%iQF?m&ShoR46Ad5Vy!w@ArNq3gIp|A zNOxF0%Ieaed9Ln6P}+@jKib_j$bsfBpKExlv)Xh9jTC*A1GFGf24r z2~nwPd9&M-!t73+q$g(O>_AmFJ;jc%VUEh=j!QhP7d7*fB*PAzxS^-~ck%YeS?1%prmo;170Jf@> z_civ14ri3|>%3a~DiWXR28a(40RbN%U*I(1I8x{~;UxANdjSFoSc{AKaG`M-dvV&x z+Sa(vev%!Pm=PCY)(#AWj&8cSWWQ!VzmbWHm0@Snsl+1FCnI&AXNTe{6T`Fwk{t+b zO9Zg?VBDe@_VCj8sn6_yea6 z=)O3+V5JtLx@qOhc zNG`KZ7Haw2Ht9?v$F@ld;5b#vFu8wqy6|w>gFgUNMe`sOi^z~9;J2i!^Q!w}Y@h74 zYzBp_1)6p{XNL;7hU&F+4S{5omLKQ{K=1sF?>Wd&8o;am8%XG`ndet5OC)fevWvT` zN{y3M!+z7Z*Sse=igecNfec@rP`ifd=pUi0ng<_%CeR1KjN5=!0yRN!HZNs10q*7R z-~=)0O_mG&Or)IqkP&Ee$9FUT-Mq~-#|=bs*87R!P2unQZpoI^XM^Tt&B=8V889a6 z^A|~H{d8w36mA&yjPEvq1^Df;7DTX(94sgZ_ZOIP)_7W!X~79B7gMAQdrEREGh6$_ z8szX$;YK0#1h8PsQ{&r6$SWu>qNgh$1q~{&bR>`lD{Q0RXgH7hti(FOYQe^~Rf{PiXApsa@1qgx%7z$DW z*!ou1E)*6hFGt#`ngArYRgq0$9(iA^~rXJok0zra_xw3>pnVb&^t%ET0sRO9s1@C+S%pgv8C zQ$QcPfJ~-f3k7hi1gzRn-%Ll~-Q1-)JzWTo6ZRHzJ#z(MT!yt?A|qmP`KN;o!vQ`X z-Z-Bxq?=~By`1sB79{gL#16(|6;UZ5XQx-nqhW(_6V|m-{?O)hjrRV9HZmv=n98p# z#pq{)E(g@OC16axD%lnW8EeGXL@GfH_|^{(9RuW}F;-YL)>Y(^njoAEz;&h}JqsH? za`OKG0aB^=@|?b&^@OMQO*4ar*n8^T$N+ajHv$NPylEGHy*>9a1Auve0pI*kTz7>C zdyt!a0ECAu0_4(-mey7~@P#T5D8t#JQ{^FET@Hb&(Q}u{f{q*0p~(0QAOX})&2mdZ zBwl-MMaGPv538hI7Ni9SLJ7Yi6;{g9l1Va*G-5nQl>r(UO#3(zV2=m0=#VrrAhzz^ zyVsQ<9F7nNaFy`+DNHVqanO6=dJv=#_uE8t@TeWSd73eES$;ei6; zNCr*<6jf5PQY~-TknoIn9;;8_3IS6GT!&RWC|Eu6jNu_P*1sTYvIJ)2=M;V`OG|!Z zmNcxa594J0Q&Lj0FvShXK@s5X?G4U0Hlk2~WIjhG_>37zxfjSi#4Uno0 z4<4{+K*?U@41i1%Salj&+PglDA0i`hp>{z1&G@>4^^}e7^K9yy5D7|pdU_=4NG<;! z21avxJEBB?wWE}!41#1C@GH92l9p+OrlgPoe*>){oQ+2t+7xKO76L;2rKeRI$XQ@h zKpcUbsPOyHvu+9N3&VQaYO(|55hAI9TfYk{7c#kwo+3r;bqOANmIzKRs*FSg$f}`- zQQm2HtG)TFwifWtFO3f{Fe0-hz-F1XWqEJ+;nSyVAK*j5w+MxkoRJZuWGqBFt7&Q~ z36%YllT)^Kfe?r&zWy=nL6iifF zEn@QvolHZJU-ATbN%JzGx3r5gME*;uPZ1CN=k4G&yqoqV%k43`Ush#W32xB6p#DSO z_v_7htNI!mQjjhIdV2y)R3I`K1@R&4+gNA;P+O#q0(7jStK0tPPs2N|`9-53esD;D zb2K8>Rz-UNkO&wL32F1C9Kb9I15lK-xP}G+2ptxemLopLzM;3meMGfpke!*SsG;#E z$3fV*b^kE{XFWw$+!li^BfVc5aLCA5r)==m@tfBD4R{iQg2P2wB4u{!wF;xXM&Y4@ z0lj77H*u1LOsrNba5rr{GU;g-H&i4E%!VC&ZIfe|>&ZYdwAYKM>Pw@s}>l{^#R7^=yh&BlMd{S}K5| zUy|uGLcWz9sPqS_1sMk{y)CwSJQUI3C9f(*WP|?HNiNoIQ#hv^`ceG>!3I16XZ1f{%Zr-GaDvoSL8fa z(=FNE3ES^ENj37)@!Bq5yjob3ip}iseRdD!*2~uoJUr7pOC<%dXZAi@etVD5P=-Q3 zPn zxDNlTjtQGz&RS1h^8Ar^C^jT-4w(!soC-0+Hivshb6M(o=}uGQ#$NSMn?qbZyOJ!^ zMNx&Ge+I?j%+bPh@h`UdJCFn7TAVP41uNL?WV;*EZwMgJ1JI*F#gSvZgUtrhwIdDI zH3um3XY-w`8kM%>z^&$&l4RybWfY8R>Z^A#ouLO)jNFV^HcOaejD6ZXKpT!&SB7P=c5Ndn zu#pfcNm05bq(eX&X=wzJPAO>+0TGezmTu{i5|J(e>5xXcrQuuie8;>0>_hY(X6Bx` zuC>lum`}qfg#m}cmXBj=Gv@}vOSxc2_s@(z$bV$I>q;!)Fku$Mx%QA{2b2hu(_r68 zEh;MVn5pE17pk*2)};n;B2S)UF64U{Wz~i16{gu~x*I?e>faDT=_a9x9oc(P_^1Dp z?0{N4v#Dt;*t_meX^v`jOVIl;p}uzof+n35N!OOXzUS_)&^gJ=hWSb=Jj)ym2e;p# zc{J+K<;5i=oVFXY=;p$ph;V3v>n|K)6F zB%h$5@O!}nO%-)z9SLIFb;9V2S5V7d zG@PxfPSw|b`=Xk^*=+_DFjyX6<=Vg>caIKenYlKaFvKdixOJ*14wwMq?5A~&e!c&o|m3(^8v&sM{x$AlUhm0O-qN)7fhXR_J7N+45WpL z=Np3R&w9qFOKclL@S$dCo9Id~dd>kUcsVePYS(?fH=f@Qgx8Pax{$h0g?O_K8)^=c z^L{Oen;EolV$o^%2$kGHXJ*)A>%WhU9Y|oogVJi~i`dPV_xDg?F@-cGkVHxVXM0zAa?x8W!kn9yb`dRr`u(dqoXf<>{M+z^v@-K|ps?*RKgIV@Qh?d)}Yk z`4}2%3NfDCHbVr^^Fg5i+7+|2$~B0eK<;IG6BiM$CNJm^cmEx({F;|2(yO}%7d`8B ztPeX*x-!%MV)`_TSZZ3oj9A#2+Fjal1*o>5@Ay0gnBv!ZrQwG(@3SDlO@G1Rdbm^y ziJ*yNd0DP?_6kHapYLB>AdQ{mC^{*amjV=Ov=P)y)5HR2{iUeKhH zrg?xp{YNpELwNsCF+9eIk!!oUd438>W7!893#dxQIFbrO%@CQfIz?JrBh0 zZBEn&vd4LK!O-3N+^%<_=!R;x?A0Y2@-+g#3T?Fgv6C4v`^#1s)(qX&dV+aol>i@F1Vb`>Bz%F727}nw1 z40_byGYD<5R~4LJUT#}rj6ymK&=?pw3({Oh6*$m-Ra^MCl_Y|MC|xnoTA@MC3y;r zn{pn3km!Qj+nvci5Sny`HoJ_^dvhtIJ6|2Ea3Jjp~9?uJ@5t8 z(BVl*Jurq2Nu)+Hha>{A0mBaXpDzdI-=+x;|e+aebpDdx}0t1FWo_b=g$bd z0wAxO2S+_5K~3!TpaBRk|LobVFyX8FC=il~WDW!Vj7LE56Ig$gzZ04C1K8f7BcfkT z`#1TyEyq8?@VSNc^=@f3Q84mzfU?1RV)qV+!qeqf+47>9;1r|`4XMDFu@d;eXAXLS zY%s{1h~&b01YTLtVtfZM8QHnPFRA&`D`0!(TZPk_s%c-mq?`jL2q!^#i4fu^xa|O$ zw06H>&i?(p6szQq$BwY~^_B~rQc5rQmRJ*XAxXBAI&8P&fzM;dQ3a^1VPN#LY*mi! zKa1w~2gAX1zdKX&XYa=y_FrGU1O*^wUGVjvR~u=%$P!96YKP4E1Nh?}C1wBVoz;oD z*Yv9csb;4xJ*O)@cD1QaptRaR-32Wl(s2VVkN}T>nPOU*pbJ2l_>HMhfuK?O<(>&k zK5NBjI$LKRy=eFV(m~}4jpv9z9+F2-55hzznrsA91Y8#KuawHpR!5MP9NNefV0nL0 zWr!t=)fK4DMz09(1igfXtl_0V_)!ld8eQy^G^fJcrG{9I4)C766;1 z+-<8mv2xm)je*-&0gpd~vbt4{Wr9ZXkT}#Lt((ZG9tss#mC; zG6Tqca$IGt>#FA8f#L+5FN%@>CLsYegp_9i))E>6CDYmWZdre1=)s9?z;k63Vb7HS z>YxnWFYIymGy^vt8LYPDS4*a&VhoCCBG z_zvuMc1`CW;QM%C*^DcEco!nkmpanCZ-wvoLG~6IukF&bc8^B z`C!9s;cv%ZH2QS(f~(Al0gErSIG|HZ75ML|k@zFloWV%sZ z9P6$;JBuWvEJ}wBuLgDkTwGj(5!r~L3#Kb9zufQ;Gs$JOWBj>hyVtSfqg-gpiVWfgJnD3# zq}lakKG5xNdf-Qa2hgCmn?E-CrMrTe@>>zW+Rt>s>6I(TV+Gp52nIm<0RaP|jn^vV zvK{gm>kL~^LAj@RoqJwkyCneJ7{_{u`KKq5wFpvF=%d40)%x!}69J|yW(kdHRKi6= z(t#}i5dg5lUFNl&E={sx9VO6R$0KWRwiLj#nGpn+LCt@P$e>N`0(gGNCK27c82sR4Rn zBLCe)lO0oxT;x5hUED8uwLdQkKQkF<)EV=sY46Bpizjar!3voRJU8;_LqJOu#9*Ka zalQNIyzT(LcVGzQVpQEvTO2BiaQ&-LCiA&+|4vlUV^fo&@*Xi4CuV6ZIn=c#{(QS+A6XI$Fdo9cc{fbwukH+o0v(%!n5tAO;Bt^x_^<&Ruu>> zZqIQ}(PN_rFFr7jdrSEe8tV4_O9WcUEUS!50n zD(cOw+3FTU!`_Y8Sz3+oaimKHn5MIpJnDeZCDs$GX{;AW&rSUy zY;N_5XocZCYJaM*6~`uL5C7!4bnNe-Du?Y&{?yHL8c@Lxz5V+2D^c;ly>D6YR0A2U zN}YuUiV)M5jN9M)h*k0{$E2!6nE5C8f8QyTh6+5(V=B*{8ipOft_@w)o23&xk%X)N zqH+`$hTYO2KVKa7P(XJXM@$QG@(X+V9+YJ)JPJ+alS`_$$udE9YcTyjI&v?dQQyJ{ z5O0A@Ht?XMlKD(^0(j{k7e_46*sqBA15%e(mccC_sG7gzaA+cu_zw>`v7z6x<4RegRNnVkk=&p4)cXt!?7fp;I;S&ElY9wC{b{>9Y!#{CU3OcDRwPPoC!Fa31nGu3*_x+LDX9CyUlx$O1Tb z?Y?LbuRy0!q}5WrHT8G4STKrC(P)CWr?achq6ief`eCqrYDJEL#_Jx`9+kaY0{pLd zw4+a8$0%vMB5j&&`dw%c#;RK*lNef!xcH9S8#|yj%t~D(Ht=e>7+9%r>QV)=a_v|8 zO;BMz5)ny-+?u`d*I~#QsB*{he9dM`dZkpBsy~2Ws%fcrUIZKj2~h;e6&rzf4iP)0 z4`658x3*XAjHmv16ilO6mNU+l(Za*@BNh~%9MH}YvFUUM7V9?pqQ&BIa zQTGiNIV9c`N=O+l@QK$2gYa=>DR=9L?8G*e4yv6EJq%3%s$%U zwYw6UbvvdI5*Fe}WXXQqbh<(Y+AX;r4OWsTmeDDi)8^c&>RQGnsdkS!z0RDP&K8*e zm!PS`1aN^73=~u)kmxGN(73p~bc3O6j7%&U0E1aiS4Mz88p<$4BnDbH=;0A(Hl0!e z1kmF_-MpMqwllY|WW?B`qSpyh*YR&A%t}WdpJ1fXo1^s?uzElTOAnj>*ACk$=HF{h z@Xc|zk$V5R5CruYoe&E-w4m@z{3$t`y?44NiiwGtRO%T#!5Zxt|?$G_hAN&IYqN0){KyCu~C{)ks!)x%_Y?H#+Ter}{Vh~)wUuvm|ej*!yZ)!h}L381=&8wJ8L3|L2H zEp-{A3`vxU0#VCgSSmp2_I+$1j?99W#e~lISJ`W6h=B|Gb|2_IDq8;Ab`R`8(wXJ( z2!L1!uod`ieRQ;!?H0TOsgU7sg+o9nvADkQY4%IpR~1;5P-J9fLBI1E47oCiDZnrR zx&wVQFhHs=WTsZ7zJ?>Tmgl8cP}99Wm)11SbBm@M{Y;D;{L!^eTEi4j z1DU2h$9a#WD!(ltPLh?ry0?9*HT5qFH4u|L#Ep+Lh6_T985CfxYL}@Q=Mpm{Fpy2+ z#`5|{aG)_TbS`i+Gv(M1xA!JI31n2ueFIIa$Ba-Q?C(fl3w>C;sLxfStzuQ?BWg=R zlj_jOVyVjM`34#v1IZ!L2hX7B0pnvPnAkeQVOj+sP&Yf2$V+zXU%q^)kjkAfH)j~j zrpttthYfogOkew$doCKHN7uo^bpQp5!-Z?x*wIUX*!eyF6}95|&TTKs{OiX%7W$e0 z4XJ;Cr!&7hh=S{a3uQBf=?ouOKi=(VdMWAXOkN98uZgu9mZ~=h!IBMk83=|ys)>t@ z-+=>yZI4NCy4Y5oXG!+{Ak#aTMv56XgX!Mbq`sLqM<1fWP;K;x8w-h( zkHJUInw?*%(7cnx=)Bl#kAY@&DBF=({5{1+FcipY-9QT4zk);p=&JI5zlBR{xEShz z{^9zy4Krj_&4qB-$vh%Ac~u-manFc9m&a!EvD=U_us+*bQ@7ru$9x(}msh1766q1A zi}EFLnjEU@sF4TpWiT--T|?^Y#j#>tUQn^#n(plyBa^eDnuQ<=2r)~_l-}0sO@Gp$ zz{Y&d1H)1{d}cknzUU4gSRW+aMipCT$fwuY--*1|{BOt8)s=4m*MoA2N}?U~WY9IX z00IM6goDDvxpJ&THtX-oAP~fbA9v3@;+lh)7LU z1Ra<|Lh_Z;amUynVt6bCZ|B1k{ro(1YjER8ui;GucC$4VxOb7!WI&whRGI^gZUl*f zV6IAr%>h8{@7;vV0moXq-&GyX%FAPfv)B|Rzg`Fig_Yo1@D81rw6X)Sd;q!^)L74D zoGpR7bHv|)h1uKRH3G#vl^;maxx6Nw%DE~gs!hlM$%BE0SU^1i@VRAqRB1l=9+%$p zqXOIF(6T&~Z4UE4ZbL1&If)0R$&vU%BqIwdI;6D(8&4zURvVZlJ~k5}j!h)ccH4IQ z^R=N6BAI|1-IH%#0%9wBt{TrN{^=D1tAzwJLotOQ9RoO?vHkjj`1kL2(m(JLhsHzq zdR$J$K0?w0J=jpHRSNsm@CW)|>@(H%Ibao`V|%l=Aj#OqS^1X1*>ddFasSLS?vI9} zz1py6!nBS70Co64V*)dT=89|nWB`u?-3yn=KEY(QRnNcX>fsE@JHSl`1?Hk(Uv4xb z4aAsq^A+xlz3-QGm7)F^b!#Roub96Bpm-$KF3& zd2AQ2R29Au^^v17#k^M5~MpD(Fg2vp(9Ivr6 zVB`oJw<=5Kb3=v16#x+d3;k)#xd#JZ?EmgQ#Gw#*1|W|3dx?+1VHLkq1~>Nh4q8U~ zVqgw32H^*p#5oCjq(AKTi?b9R0l~z4wbxV- zfzVkI@w>zz4T4gj&TI$KtgM2JG03tJ=jW5cF^H*D_#MCig2(;q#t~GpnA{@%!ARj@ z)z;HbLaHv2Af(!d;j)fPGBOxQqHUPyH5GX2c1x4`AHt!rOmCv&l7p1;7bKy|CJlibxbBBT0l45};=}Vm)JJp)lOMDlakmmF)*QQ+h@MLq79bL_ ze1`PvJaxmz_hl61mOxmGbh3!U09o2W%D)H+d-Rjcnp%hS*>7;_ihl1(QMrcK&Y0=A zQ}4V`$eS=$Dc%7e!R*Uf2(y;pWJ2@v1zQgyA5ksI9jZ|>VAF5<38|D&xgaTB2>bK% z=d*84TjJ{K1R%!#0{t+z#iYN|s&_YZ8VwfxRG^7o?NY-=_z0dHxC@}I4vNbqMnD2|916qv_W=O30gCYP^XDuWTzR-T z7zN)Km&>*u@VW4o|J;o}HVIRL%ZIi22968d)w__l00@vNL2 zBt8=~Pl#$2ibcI92kjw!78Vv7NZE!~1Q|66&Oy4UpcVnx*yDhZ8OO55_%`m8$nZRX+1ArM7J#Qd5 zY3@36d;WRmb2TqWX7E9r2@^I(k~&Q-*R|G{GWYlBtd(5h_g%Nt)SQq`uFVP}-QD2&yA6awEx=Aa>G0&rk3>q7QhU1X{`LRG3{en?5pOG-*Q z%!WMC85LobjnWzx>aFc<+uTH3NxCSAxm$UYqEp;%%o$U#h!Z>S)8)=X+q{v-qloNH z5D~=CSyTCXx_%M78fK@TmT_uaoSkES57_MO?&g)EeXG*^o7ZPrQKu^EWLZU;Ehnpz zzDT-6sG>o3>-{;QtnxFqTwwWeBonaF{AjuxfEVjEt$4k2Q7pB2jjw*VAjlbMXkn$j z(arVVB*rGM*M;I0C|z%20)%e!YF`Em02v6<&cN z9Oz9{334=?@ZL(S3$mc(2 z-lZ?pFZv~DFcc40CFcBv(|NUrqCZaWRejmxoc~=G>~!Uu28bRdmTe z@WnXI_bfYD{O<f>`&{Cutzsoh4>MN5Q>r}0XxdU z;@*bu*Ky#`u?!q-H|L%mT;vn~8XgrDCE?^$8D9?fjlU)-+alL`hhbvYm~%$uCYS53 zp$H5@QpY63%w7nk$fYr@An|MY{&l9_6?6fx*STzsqe2<ZAa4)|Ro<^{`ccW+F889k{2~4gDY!usV)RX%>h3g8B%U*kj}Py{Gtf7~QpWGN z^5$@SQ1ESXButgk;kNRPsuf;eRtW!K|sBloj-_a zf7Na%*X04if4K`!21B?WNY2b>8%`T-V}DZPii$7Nh3q(UL2rYqE3x+1PM4`jklj5? zxln`Ev^TK@Au*xTdYr^ECXrrC^8AZ3)8FYbF2FzV>6Mh#)o;Cn`UnaqP?6x_;k8V3 zRv4R_peloc8S@V2e-KkhMfDCA2AI8)?S+PpjzA0jDWYJ@_@ti%Jk!U*BxZmL5ox(}3(bNG{X7{*j2?5SxaE>60NgMWbhKgfP-xZXM5J3P$N((L`b#>MA4M+Hz4vcJQ~;S6=AQ;R+&(1ZMfeHv;Z z^O17G2cEk(U}rd9clhrXE_ZdoF)UCEspihobWwXCRdrlBB;h7~o__@2qCzrv1TY}b zH>(4n42hYGt^YmXv^-=0pu*yJ9v(7(3A#s9$c^K+8vP8Z5js`YlF-RP@%ikjAqtcu zt3aTE+A{3;>XH(Y23E#Gn)feuSKYvY#b>{HYbV4bjP&6X*VBn{?j7yX z((!!gBjb%qOmxTn8vS(FP*sI~zlkRUuyCQh6Z~ZGJb>zNd)%JDK{A23+*V7U((MEf z4ToF?++`?;l$O2W1XZr;UZdE+nZc+d;KL|ywT1wz>8|3#X|5nJ2#l(C~6jjmUTfQ_W zV87tJBc5M*5en+{{X6>{_px9?7z%<_BDDfg1%O0S7AppKSwDhk6Lmp#rV)Kv^}869 z>f{rG(zKCGzwue?{0f8~Fhz9%P+RS|JN@6)`IwKzY!N^7mDCXbh{Dd!4mela(eDjV zqwFb%1!iqYHwt0$n(<=k+{6qJ=ZrSwh#j>mP-dWMrH|?Yxg;MyKOPB5SIl4L%@YrF z*qTfRGbEG2DI6V50AjYkg&<`lw|J@7e;fENgFkm@}gi^FD;n@%yYvzLSmy8JfKhJ}+pR7epZEX|6aTv;Z= zLIax_ia<)gZ3;{^$X9oOFAXee1IZJP;~s|W&XyzdPdh>^KYf~L408#R`Bet!yUzCD^2)fgyyQJxl# za5}atKyJVdEf~KG!^Bz#{)DM@DA|ML3I#g4)3JD;!6G*tW-~a&w zXoGh8CGjvQsmQy01>~MGsbLP_y=X-9g6;{*%3=)<&Cs~SM4g<~^X_G4&{Svt-ak2U ztsl@>#s3aw=B(!DbWz54i^&B%JLk(578a3?Qda}O1JED#*fhf`>}4%aKcV^+ub8P3 zz;P*%I>SO1X~Y#GMJ*;K2GHXm3}=P&07?0~?4ls>gLOtwL%zjqPY!HfkQj%PbIzt% zDHTErB$q6SFq+>D5O)EQ0+agSC-Y0jD#npL%b-S%7-PGOai!8tNX2O7SMc~VZ&IK2 zY(w2|2arm`i`WTcf7jkL!gf5(7W!d3G>4BFi=~K3!d)63GKd$?e${~d9b@;9CL8Z~ zQ-N9xHvFKrnQ=hP?z~Qwk?jTl&wQqu=kRYt)s49+M)cpykq#Dowm}R3-!Ta%BFekF zHM>7*j1*-<5!-bBPmoQo_DxCBBX}rDUgS)!UL!brEQ`KFNzz03*^L+nmY9Hem;b3v z%LSqd`-5T$ncYQ?l#z-^gK?mJf{A~EX-b0je+b_ffjI{Me9r%5mPu6x&*4L;9yfJ4 z!>*ce?eAgSdhhdoUm&FVLq(Qfel%XAW}}i-(0sil@S{?hDhk^0ujfW{*_m0pJv&n5 zIOTCJKH^cEk9;F!idpZc*zma@A~iiT{oftjis57Ae2Arus0oi0Ddgr~ymdHA%b;pT zfnD6Hr1`B9X0fD{)TcTFsGyjr^UL4vq{g97R9fI`zW%CXiG5ijutKrw(*a>4Q0L2u z4>Z$>Sw@(UbM=rkk;)3SWSJSOLyELrC6!V0`bX!QIWDs*#!YZL)p_L< z&1S0!QXgj_wNOrj-swKMq6yPf@I&NV;(J>(<^5Ip-A_w}05L+SxHy+dV7!JZ1IkK|lePc{M z&B-$4lHc#=SE2;%b|V)cvsl4I0L#Aok$=Mf%IbzUxpFZIZ)tqlk>d}2iF$x3$2KJsew(Rfv?zs5c04 z|JYe6s`Eu7zi~<9hj7o63=J{UR|?1_X0p(p%dG`X+On+3{_oF1&zB>4%GA@peR|6P z7Y#-KkYI6-yz2a$m&i#l$CUZT?Dq%%|C6v*FYJBO1RXb2K3Z7SSOlE60YrrpB(MtBE;sIKw3TB7>|pIz*-az@zsd9TC9gD9tz90x-(UF7Y8TLrkrxF8i{|dLj}upno)U!N~_j##MEb0TJjD zAC^4cc`#$<#t;)bW%c;J94qLSVfnPse&>S%wbKf$zYTlsWG=-aAdJt-QjH>%ej&Rh>oTJ z(21ua`u@kl57iBT?=8l@rp#~$!t4(4thrPKp|;!~ z$)7NW76SvTRQDyQB>)q@p@r2x;b;bsWYI1kkR?=EQW#R1c<6=0OGO*1$r!yYyWI@s?*gHP^N8mTOnH!x1NpxwR5UcVV6TK_R{@kZ`6`)cC;+yA zHM?BBK8A^Q=G)uW;bHuDAh!uk<5O(?fDMz6XoZFKC#!+({avg^4EnAK>lL_hP_DgL zKf}1?^1k~-(RQLtUA5~}aq%x7;?gJ?i;9V%WhH~`4oF<2YNkqCqz^kVACTsFWdy;E z$-*9^^G*7CdafINHOQPi5P2ns2@K#X35fyAY}b6m13@%cuBIqRxa(9$lDqT9V3nih z)$AVcgU{C}UcRaH?xHP42^F2dDvJNU4O6tl^u);#xe|c&LuD^L=OsZP-+ffMK`!9% z5#$(|BNqP^Qkaenzx7Y5CkrNK%dyhzDVq_VSsTi~1DCl7cM65udOE!A4l!al_4PtG zpD3XHy8Tt*;>{z7AIbusA%xqeefdsxC?yORIS2Oufm_>~MN{E{1}9Yl%*gz$XnA#c z)eJ2bqHG1<)B!|E-`xF)uY~kX$QVQoR$Tz}WVBKq1K<1DWSszLGwLcq8XA8RF0)?{ zO^z_&&^1At;U;7c11)}Vq-jubTGNMeao*^2(4D8r=e@}XDqW$`4Gxj}*Ef8wPR*7n z34G^p<{0Wa6RRxhpLe+pIfR&NM-{pRqhXUizKmMCSQWjVKiOMEfrPYAZSq71!?>ax zb}b0S4;I|=&u)58G+Ox_rUJEKO0wTiw65cCGupPti0;1+~ir`yLn7B!&l-i5r zaFrx^FCUns;kyY$g4jT@EGHh+EQod4%u)39a(7ITPSq#)32+K0F!DW~!wU`El;VXW zL+M`VBIlc28s5#3AQFp=i0}nT415PjvNyyGf0=gNzE<~fKiq7A*pl%oD`Mc#5a(cG zBIZ+s2_#~91Ozz}3k8h*?%_T%^d1?7+i$=(Fi#!0HdD`wOw-cRMS4w!Q39C#G!XQf zKK@{h9HtHT0UmA0nUs}U39}B_nn{jKxk=Z4HQfXg7eMZ@C;qMwSrE_vnl4S@+#ggu z@}jn&naO|_0paSvdHI@~)MBIn@j+)pKrM@YIYH^+KLhg9M}Isov610pKo^6jcl=TY z^VV_VzQd{=S)hM_?yaJpJe z4*bHD+buBUqZhh!xx(0D*Sro1&%-@wnBf4+BMi3EDmA~6#(t^i9t$h>p!t)Fqho`i zLn)Ba14#J8CfjQk8}hx;GLc!Rz42>D=IqE|P+(vg7#L7k()l4-kRHMnK{Q1H=Ctqo z`yOr{^NSl2z@1T$sxZHteR=3!NsPGiz?x1(DWz<9SLCG#1Py~6;WIEFKm1UT970ga zegq&{*RIioSb*T(J@MjSI<9UWH)894!Dr>ret(*WKYlxI~^r{ksVt9sc!r&0w`2pc268k`9Xmm3!_-7CnF#j z8B7pL*?7<|?mMTb`bw#?A#OA6CwNZ*MZkK%LH-WWJVX4^OZQXSSg$69NyW@TWU)a; zXPf;6T{Q#|n^#S8hV88vmT>-0E{Gc5vji+O%JT@ciY`6dk|}VUb4G(hhS?-OBQq0n z-+`hB!cjuZ+qd;{X?6KE_x+wm95d-liXmXQv%6osu%bC<)a_AB6m9D0$OvIY*Jlm2vq`Jqs=uF{ zhmQLCyH`L%^%y)wuxPddi<$7mjEFuos1v27G5e8A+-phxIxoH; zRv+7l&wjbN^hh!wNJCV2+TlxMBP6pF4ushG$J>qey~$6aQhauv6%IzmrAar_pARRL^W!=Y~4{(D((&i23S6%`6$c1!vv zOjX^sGizMAB)gj^;4A9uVQ=g`bKXF33hPtH9?>CF-?_J?Rc_0TqA{^Q>WT9sX~}9p zP!HVnZhKNJ7AaV0VfO??Y-x2hDj~t*ctBum^&^PuXkl!%v(+df0(jX(tM|9=)xiAr zHd_FTcG)F4K7K3IGj4h3NP=XnfGyxO1O_`o8;{!_Fxl+f9KkjT`#YjswD;+ZAc8i$~;yZsg=IS&dX?#J!~OliyMhw+&+KHn`?t>dvM#9lPq;=WCiTSpkDuh-*;q?1lp5D5+frgHz5|g06+vWLhIBhvvO>zD#O<(Cz#M~!b z12L+*bECSpw+&m*urD^vL>KG-oU`SoxeK^VJELE{OAGT}%B-xa*~@14vUpUCWM)J# zi~M+@Y0w6wVeQU?KyVxboC|mGsg`!7Smkh4tslC8(b+t`&KzBS0tKzj80)@xaHa)$79we3p`kc%SRSbl$0eBS8(Wz*C2=dUrrgh8!{Op{xiIYE>P&4F10p@(9i&@t%FOiJ+L|)6Hj0$XL9V{BvF(Ksz~n|#qc*qv z#Na&@b1uBt@b$4D(|6fR9BcXjj;%qhzfFMaPN+n8Pjm9yuz1_jW_s!gLT!V@@qJbR26+@9>bhr@1# z!=vN#L!sKm^>pFL{q$_CssH;NipTLLZH(OD@83TqcWOU^z|66YP_w~U7e#=N+$z+y zZRoJ=7zby#%d}#1ZM>DZc~=r5B=%gBV^@eKYibVCalJaVW0rP5t@vw~E$!~NRoi$U zZ2Z|h_P7omSY>9Le}W|?Ep70teH@-!zcuFA_EkT{wCuz8Z|xo4@R5HA3=FHmz`)=!?t$eqvWCJft>eoD^LE0i>OFP2=MVWOx}O+G|^@; zf_hfT>1@^w2mUK@YWG-(a{lA=dcXABK@?#=9Ne!JkL}!vMHzyq124%3g;a9McHkG3 zrcHc1d2|1!yrSkTkW%TL)@Q%|vs{F~`F@A@KCVD1_o)x^5lzlv`k@Ch#}vQl*PW)2 ztN7GQMCx{-6`3=ciZ317wuYQ-%mm$(Qpa8poEIOtzeK=iA8jU;3ALcj;)KiOdh#}1 zX^!yx);)2I{~mUs*F6=NSr6`gCjJqhOCf%fNdmj_-EgbN1gE|mrA$JqvRZOOw!FE( zRjNt+NE}ffv1A>_>&os0${iUaoD*sxEBLbFX;I@5LW^E>HL5>0Y%F z$4FZY>*l>YoX6kSj;m?%8?73nmQ7t`{nV;rRDE>#Cf;`)hey?!J3s!MGEwoWdC6$& z*}sc_@5bCNLTZIyRHQndTJFZO-Pf&lFQRegBhbl7a~<%~GPNB&Sc}M2;Sy$N3iI@& zmtw>E7etKSyIe@E+=TU0tjInPKhdvEE3pU{H~$%KmRA^0c_Eg;1gF&Tv~1}a%OejT z-sR;tw-fD8$p#%?S%2rO3UVx{A#y1ttO$R4kIj1V>AahX=dygbo>-B1qFxcj6c1kH zr!2GxV_Y^n?9<;Oz2Zi4XR#3yM*SB0N>S0nx!(^rS->^pbGrIe1-P2BI6qieIabcS^>->bdAzOO^j z)48zEJHO9sM8fY-#$!DduOc_1894RlW5~0I!@;Q(@opixq&?l4?gc6hBlqiG?Y}N( z+;*^@5o|PLIHVwb~*)*rtW^j#kbGn++6KiQr$H zjapJTcIFSub5VPKcS=r`vf8lt;LZ+3-7QZNe~Tfn^m<*^x=>jm)9JtRdMshVcd_fq zdkPexBEx=TegBT}0u)4Iqo2Hdmz}#dacHA6(3J4>C?Ttr3RoUlU2qGTk!$6vipc5jrHO!9-5u z@?T%BC+;g*EvXN?U(=$JvYwG?cw;M>i_|UI8Z{oj))jb8?}OjkN#*Z9#T(d<{h;HQ zl!eG8x|S5Bu;{bWGll&<;doP`ho6@3Pr9>~%{DKx>nhH4mt-uXiw(>dYV|3fhjr!( zBsiXht$D9knCB}_x776tpA$O?@9lJcy?eymq(JxWw%vs6(qjGEloO$$Vkc9V$a<_7 z-Y>k!J0oh(kGTw_2L37KhkaX4Ytj9dtYFL~e(zR+qM3O|$j@&(S)Q{d{-piV^3G8> zcHbFj@^t_4PhUyx=Qo}(kA+jXg*LJNG3(DC3;)}kHZNR*@~d{`+&D9dqY{rP@lSgb zc3OtfRd#e=UAVO|S3!wyi_O@*B9WMoyjw(XkPpu?rB1ieZp&fq~WaRkAG=egbwM${D9nr<3QVA4E!x_TC- z)_JJvIMj?^#81XL;#*?$>1`*o}8Neb>2Uu!=Low`s^` z{eV6J8MZF*BTcA|n^B+(+{6Y2+pRP@=r7_)z5h$z9H-aub;X4=Kv! zK0A6XXF88DpU>i!4`$1kd-Xl2_pW>*WjAS*%OVGbuX}#=la&_dkEX1%Ny{+#>6Wna z{LM~luf}puJrhDHHk*-=9VR20IY)s?{9Xh4kjYpZy&9+M^0!>Dg z^mg8P9G)_}*5=nsA23FnL)&8vURNHx_0O7PwMbvh_mKH8rq;YJw;t=0sx>f!(G^fc zNTW{$-_#J7u5MSo6Qxa+BJd zj(^?PhY3{m)!8o?jtZMT+mN}+$0<)b-4Ir~G;rveQD<#-z5MC|Vm4~>1yy&Vq}lpdLg z;2J-aHvJFmd|^x9Gu!;Fqx7sdioEm6M}rxS(HXM--GCLEn#7xYLNhE}eW;A*k+4rI z=fUu|&NexD93chRm}t)PEE{i)XiE3VrhR$aMISLk3#T7JD0+IL7KY|=>oH>91&Gv3(3)|DWb9_pNueP z+1FmjnZyf{*~Su<<`e{x_oOXR~HFrDaO_u#VBn^Jb>LPkSf!jc`g& za_v23)q0{Srf`xOSd_8fc^V0pGk*-%mz1|Fx+-N=9qjw7lcjYW!8#u6OV1bg^vL3; z$F+*JsA+8PE}Au$V8uhsAic_z-@n{Z4yRGvzowO+9hCJ7$$bgr5hHSLm|XqQNxkLWIl_`XCcYL_} zp+DC6yYHO)TCbaOC+??xrS|uyabqxcmkkqwmr^D~C@^-LHT2${G6Nx5G^I=`M@c_Z~w{W3eThVbU<4xIB>%ylGMP=N2+SJ(~?_=s3 zU3Wlv)&Z~j{vVgI#I|2|$4x1<{}Jd*?`7cD*`BWMp6HTHo^tI6=|>NEJP?0NT`zIp z-C@C2@?Qpnx3%@Hdmo5sDJDMBYHn#_7;Xwh3Eaq;z@NX$voG zpl@|r=|)TN`001u@uTlkGKW`wAF|Whehp(xWn`^kGi*Ct5YppY)}lNlz+(LrOYtRZ z-cwzPHZ?K;UVdx~B6;qiQ!^o7DY=5NjM^TkgCt8=p4?xfqv)lKHL6a$|?=v9+%n+pcpXdl=FcT=DNc_8IyOMJ0xWBg*FZF5j@4?S=%Ad=Hv}9J)#8wiK)90*Z9O6gt zSkq>G7=1;eJ$=5)%%+Xghl0ycFPvNM{d4u$j6kWC{*(eC-7e)^^mfqadXhGkI)y} z&-coDl*C|FcWXo~sKn{NmdUYR0oLy7=R)ZLw+fXc?BnnYe1x|nPe1>gmMDG8iW+tJ zYY}R?HnkuckFK`k1y*gD<%Z*oZ_IB_Nk7@5wJANs&pAFV%-8*A!9?sufD%^{VQnNh zF~~}l-*!VqxYc}h>z36(3tZ%gnq=Nuh^suYk*>h07Fj_(sdbXV690Zan?si{{>_&- z9jRRv(K%!>9bP%*q{&J~OWGOwHA<&mZ&tB?mwdZt%zLSO75t6RAjfpp#5i+maH!FE zvA*;()=gcXr;A;GG8(SDIm@>G25`e~=OXZFIJe82wM-nSMbrL&RlNmNmCqY3jG!R! z1L>4*1f-F!LxXfT91xK16p-%jMmnTHTIrII<`7cS-F=7u`o6o?WwBhx!-<)BXWn_9 z{p{IWg<*pVa=9o;+k)GxD#Ox2Je=yo_mQ^4^pEBWZQB{G-ebA;?Z3O43#Ml4H|@lo zqAWET)+WB|;GAo7&*Q|km~Ee39f7jW*Vyl1-7?=eb*w(oxnujq)hXtOF9fbtn3-Jv!IMid(BI zn3Cg+OCIRJz8W9i$CIFVARf20VV>b>7LdG~n}30op6pAg>&jOBz*m3$v5Vif=%Qjz z>&xo8MJefNn4m?PLA^5)f^Jow)vrxXmYcUX^1^r7kDSdt27lsyQ{O&?*_fATUwXuM zU47E}|G5ANF>!A_Gj9uXzSZ7j^@PmE5xC&RNo#G_P6jYU!7C{D0vzEa##x!)X?Mz0hfi&j*Q1Gz42gl#!1i_tW9 z+c)EM4Oy0WR4QJO8j-AfD#1@=z`**Q@Qlw}MIQcajMumoi#-k{tKNY&*ks->i(FKL zun69*e@TP7(U@IqeJgC0k;=}VPRjGNdOcG?Lue4AER9E2%jL2#yIAKd$RcpO+euv};_lAL>9s&2xDT7hZt3r=^Iur!ru)88PEHgvb?=-ap*r^`UeLTeZoF^nvGm3D&k<)htWS~ID4~xHfi)$U=}Ml zQ$%V*5*Z5#b6sJRDNDm?g&EYV@#t8k+x;FI^Hij5NgJ7i8~jiEqI7Jc5oHc1C(f)O z)OCgT;C`gJtu(IKcw@)17N_V|gt`3#tNKX&b&U3|RlLjLJKbo0RwU+W8SP1!l8?f< zpzn0#J@Dt4h70DF<>Yos*Q1z}2P0DT$Ek+>YNibYNWY(e!{11e%+0B_K7<2ZJl%X zh?977J(?-zr?<8HG${wBxd&2EseMMi) za@NTP=L)t4g7z_Q%xO*3BL7Rulpemfymf?8NGJ*3bE=sJWn5?I?*;!A>~K~gp6j{y zv5)P{X}nP7Kjv&QjWUBym=nHq{_sWK)rQn!ek;<0GL7VMUwMWt z4ba|xU(UcZwQM{%CfS<;NTac9CV|{DSQ+vwBD`jUUh5fTrd#TB-TJ^1;6;;@zVz5N;7lt(XvWO?L2gP*SGIKE#p zyLU(VHA=u=%ERW9-8;4q+x`cF%A@Os@#%a157DfvoDmqm8Ke(s`746_3|Y4QNvpU+ z-&hu?Fv}V3_}_;)NB7)jM%LkGgLfl@kjnFIY~TNq%IT*~4i)rjK;Wsjue$?Lzy=2aX zIjI7x1H?;iNI(=*+pS2_z!{`entCNPl)fCij}ixfh{vs}F2kDOp_`OHots_+Hv`JU zW2-$|ucAg{R@`$xQ1-`*Y!ao<=tX7kNJ+EAuhL1Q3vgpPUTINKzsXyullf0D+=eiu zU{}2( za9E52Y1c#X=^@sC*8oL=anQg--z~Zq9$zaNJvo@VwPxhuq#KjnD8L5yNY(o_h3PJb z=`4OL^s-`$dLGU1-JGoU9u0I2#&+6$hg*vAI&b8)=DR=vObXQjTk81;vyE!H-VaE> zrlgP7`%Rxvk!3E82+auc0Y8c;w*`UgKy((YK@MuGq5Y_V-!+AM;Q~#NL{! zl;~)q{c%54hj<;*a9v{*Mu9l8Bl9>q1E9@cpj>`yD0x5Rs+lr=RnF#a-72?VOjX^Z zG$u(UKWyK;MzEPR*^y!VrymT{45&y}9k^TtM!41gOu{BuO&lkMG$O7$_wXs!3)0OW>6)c z3$@WF^3}^H3N0r@t_UGX+8QL)2+U=N2b@B+hV7@n3~3>i#SX8wVxz4Q%l+u;F`7EV zCPtrV7F_7Qi=a+N2uD+kIB3R_&JP@a&u|FAQ{_E+n3E)$2ko65IL=;)e|wEz))}^t z@JK@O62K99&cv%(JOG|dLKT8ob`uZK@heS{Xa9ZcnbR3QvW+K8ye#6eN3*SilTw@x z#ziuM zTC3>eLG9SrG$|E2%%;u|^UZUwMEf>p zARLJT%BtYWV;H3!ns-Z7qJK&To|_zJZ6IiN=dW4zx@zLp!MvgVw#cK@5*ncKt})fCGECyOtYQGCR~a|>eDT33%% z*fJ*EA!m>`JPD@$HkL1~MvH83@JkJExMVZl_e@O|Nb#sNY@15-*8CO6iNC8p$H@!k z!6@@3q4Kgbt3KdsD~u@7IadxW_~X6n76(oG)kwxR^@YTLR}~aGJmBte%js?0QBRhA zG4|SHKtK;5Q^NTN;?tT+>{G4eU^BB){o9<-8vmg9;4`*Us%yrNd9H)LSbHrIzifml zaSaqF88lbXN5vhJFe-%5C`#d^zmxweQ^geP#Z48L*z=mGGnV9k!iS|>DFp3~(WrT$ zQ+e5%IUkW(3f&MVa<^sYfsY~l5)LLIMPMW~j!HnxMAHro(t4B+aLwby5vc*8A>EZI zOFV+bODe}2*D`zqgGBKXkRUNGPkJC-40nQA_F8e!r0kz>sKu7yGm<6d>UWy#2C%o- zrNSwe8ywKR@y;C>NGwWp?0H`k`d%=+{5->6dp8^Dx+MBgR;8ligePt@8yD3u;eMJl zV1?|zFsn4-$+mjHgX2Y5n^DV)?~efzQbMlrk@3sDFaVzc93y0{oNmU4r*xGL!~zl( zR~@B-aSw{G{eqJWK|aVncZrSI^zc&C;zfh$Sj)cx#lOg-rqu^@kjuy9)8vR_&C2YB zL-{DJtEG)~m<+m*tozpQ$o&Tr7DN4$`_w|qG$Q}9$&$<~p)QymSe;EZHVJ=pW54eF}^CSqD9T0SC5ttidR`okYE)v&KMkth;gIB@Pw=wiMxkD3+*|C$v z5hN%Rhho9r`vOUBrGfKU#Y2hN{EdXx>LQm{rh-?L(D#Q%@4zpMBHFjCCe``dj}>Bp z04yU|pa&P3M(CP#`H#e0aA@z43|FcP)@bLv8Z&#!95b;XjyASw* z@&Gcc-iMEGLYdc%(3ZyDxkdo^aoTF}V6-juveSFdFRAC_o=hAO`z+teF4_lb!}*mI zWe#)zI?)Pcsa-3MB{71IF@sy}$@1MmZ{s>zy^#eb$_=Yd3$`k8mi>}^U!y#=CPR2< zvVWy;LF}QZoEz5s9X}(O#7)k~0NnR){5<|=X=4pWXmQ78PQfckaW4O+1y5@D{F|BQ zAWfs`?wuE;(S{;0xAx*0=N;CRtG={87sJuC5K2x0br}ZBA8^`e@gz&9CM$>`>pj*Q z+pF6@yLB#kc_&Q$F;H~8`3Gh6ndx;(Zmw;2Q+%@hZDynOD~z;X)$jl8aY@eZZIp-3 zN7%r$61@E-X(P=FL|<1k|7Y_A=O3#U7)w|2dl1xbBISj_ULZBQM%}$P;Ur#?U6w!Q zdfJdi8n`bWNen33C6~8qAk_qu;*le3Fh42*Y6Sn?vf}EH|%Z z$N$P!X!h;LXQjo>9|6op8Lwq1W<0zmc;5Bk2v;jhAH1*278$z)sNJw?)Edh>ouT;f zq?lOJFNh!|YD6~GD8l$Nrw4V}*AnXCq$QR)F~zMVxQTlZ&hP;J-mUE8KC>wG!7e`c zewk9`DkY~50w zYh!q;&{Yy1xY(!$Rqibk`a|~rn1k0?irZGY z8D7Y4wFOLk@5Gw-BF_FRR)%NrLX3iVMFJpKvADuTaSScgixeWUVK(A&E?DzU#GYT= znPhm3Ct&#w?j5;Q z5}*qxFxm)KYM*|&XCT#fhYshB`%WfGK%Au!&1FIgRMN&QJ}Kv^zyFcxZF045DT`tf z{|C>+SDSi1C`th!JoC6FB@e+eSGZ>KQ35hn8!}cYUxNSqYvPwZ#|=%j$lwsCCz<&9 zr>2XZ`b0CUFLN?trpOEmvO0z7{1|W*rG7l{>3n=*D^#!}by|QW^0X8BTD+(&2L%Ad zr!!4si*M()w|LKSjpdSumO0{};h6oM3tXxv-sGI{P~}#z@)Y~OY#$DBep^bCWmbvr z0OYdzcuQT@ny7Xy1J~91C5V5n>wfm0NDvmHBu5WL9EcW*DJ`zHiMXk{;cDK-Q}Rg- zqHeS?A@Tr|5B)fg9hG4u3=`UFu{3Y0QD|dI#LGk_XLXFpsPq1pF8iB#b^kn?>PV)> zQd0}$%T_G;NHG*p_lRjy=Dm7IRLh1B$JdWB*5!+9?<}rAbQuxe;zk+t`5_(=7f4J2 z#R_S}4Ir;aLrBFp}%CwaNd_YaHk^E=6w)D#=6 zqetQfxyPu};4_SP{6XCOqZ_+#TT%cPmt3kHQ<^#UtY2is!zzMeqR@+31 zwOkj+NsYyPMeA<0rB$j4m#FH*rsDUbc?W4dq$K|Q&A2y3DKK0KVZ+3xj>j=1g{Ds7 zF4NZf|8l$jL#$y!m5DE@sOZ^b)RBy*o|v7Ll9EDd`Ep)thjU7`fkk4G_5~o2r-MEg zI|j8US=4uj2rz1r`M~5DqjX+bD?@STm7MAtOp&MLqXd%AZ8tq1Yfnh7hf|aX&N;>} zscI)|;5JkQ!JT5xTv>ZQ`6I4}8q`!Qq0jM1&tFrpCkE-ILarT9=9je}yqlqP&2z5SR8cmt4J$mJIc34za>8hDX3@tEE@PKLZ z=}Cc6Hv1?2pHSpl>Ceqd^ZGs4Ki!HZy9|rjM2o*PD6@Qx>(AcLjZ(&?(5wd+l$CMv z@TjV*bDgvr6F}>|ej{m6Q!_Z_~#JUJ^9gkS#;+us{Fyb|~=j##l=w zrv`9);6l(--_J&}c1m1&xOn;QvZs(vZ?g%;F*Mfdi;(wTuTU^51T$I^go11=wdQ*6 z9tSP@kD{Bj(CJvE*l9U$76@g}jXp~%hU#ZpN7>&gvegFkv%bktyGC~Wc2Ll@7p*VU zPY9bLuzo`BI8_IbH+$O))d*6%nrM`o!&X|v9I$Snlw%}zac@7`_eJ#u9OMXi_*rIl zFZe+PCa}9G8<qdTyw)qEQSwz#*Ndm{#^Pc0&iZK6DYfHp(wM{fvclt!}r@-xqSgPm@S1^XYp$ zqbwYg{Xu;$Ymo$U(Y4M1vq>HD?+Z85aeFjca`|L52;P=7l6Su1|D7M2+Y+#}55S{i zt5uO(yBYsN1ntadn*Y(@lC+bytw&Y=$3#P@Q!q_$i{Hupb~b4mI>NpBKVT?nVB^;X zf`S|0hQNgQ4dj`jW)StZLQ2Rq99urh%1vNx{F!gpHuaWi^nRo8X!7E31#ztW;pmuo z$Nz`@{C@8_H!Sp~-~)*n_|jw9EhCLBQKV#am(}Z|=iXL9(HnBMjqOC(VTgtQYuK^X zziOZSb^L&DAHWwHWW7Da8KX+KK62iA{%`5Xzo*Pm%p*F!FO$~3WC{TE03m4hxR^j; zgz`faIXc6F@j6SIV(;P=C_Ep=zq&3T{a|G|e25~O!2;2cL*Mh1L0fxg7*z1mz&=~7 zBye}d@7;%^S4&4|%zY%*9=~q*KeS=-jz8v2;!}`Z{`|8+9OIHAq~t@3I@TEwwDpiJ zQFUiXr0M;N!Yjt$HtBO}-EGDIUN$N8{*QwR$Acr3rR^J z>HP;qnG>b`%lfN)AN#>?*XHM@ozSw$hql+|s__YKRs6A}nbUNh zxx_K*ZUz@>@iDe^ZD;0zv49mbXa2ZtMlK^=iwZ|E_w{5||(Bl6KbZ*rU$=+p@HoIOi?0oJ_F@Cjb;>MM3$$o;RiAqCAM zq%3RUha=Mva{Lv5Vb?HpdJZSAGU!G#K^JK%Q*{!-!tI?>eOWdJaY$K5uFo%Q4ZT>7 zXu5|ErN4(05i@~~9gVXu8Nucnc@4;`E42%ie9+WJeTBv7U(buz?^SK&!<5=x)EYZN zyjzIfEJ(x41Kp2=!5;An+`5DJ8H=q}_oUBP6e%W=L;%Au4*GuLJB;o$b_xT~ZbGkw z{f1YhCH816(nJ^iX`x&q^?T@`8o~iROB^X~yIAr=F7nSutf_>D11LHuE<1RX{|a6e z?0g|Z0jM=vSAu>~`zXq6M=EQASGk^_+3H{Gl%YQ3J8LXyNMe-4^N@-yQjqc^1CCj& z9*&A&r1L$gwNJSGV|aqYO@_mbmGZ*{$gD-jr08>;Fr^t!I_?Jl6ZVhQOKfOEwHp+` zV4vUSHd%6`EG>Nb*$`C&-M4q}b+35E))9c0DFVfA7TwkvwBhD9OkiQI4-MCu_fb#bh=tz}qAa2inB;s`yG<*kV~ zomj*ilH!Rxze1jb`*%HGm{lH0zV=s_X05&A9ubTGQ`BUVK?K%4$} zu1$7(K@NQbpo5r=^xb#r0-Jyc^HxUX6N{MaOlI6J8!EGEIn07TmIF_)MkR_)A5f4fsGlFSIWvfBduh>avA1jBk*Da+f_TqF4NSpXS(8@ z-T5L&V^f+xE&a???G)#3A@r9&V_1>U2mlN|TVHHY=@{&HQ|a8`0K7bj0n%N~FF`{d zWaNOB=r6WjRz(Hn0esbzrtI_Mgbi#j3q2ni8ka4~K(Vv*qrWJPu_(g+AY0jtBvVqU zYt+J*dqgnowTcgjp}nc|i%G=8%7rz9Qh;X~i6Pb1XoOLZ8d>wX9KU<8o)zpps$4!-^C@nAOy!X`N{NIss9e%5W4U@p?jsb3Gz#K2@N%L#N=NkEgSggdUEL5@ltNAL^G+q_) z7}eY4kdo{tiu@%v6AL!U%llwwcflJqI_6LJuX|OaZFB+1ZKbS&5TnHQq|$XTi&-M@ zDy1_Hvf`u4QClf<`WofNn9|FZ0(<_Y$R44vsA~{w)JPArS(Kfa%EP(9qurc&w4OB* z&2KyS@ENDvTP8$qUvLhFpUUft_?hL3RQw`XynUKA@nCe+I6DKT#@BJ!+sUb!#Kkql zL8-pzsM#(Sr7CBj>a;-7n22{x-?x{Y3uFn{6~Zw9DG79lAg#7ZP;(aqEXQycEhp}@ zIc^idt9TUQFqmP;+IJB-H_YWPg7Iq-X!U=Qe^Y^1%=a9PpBV?cE=!wVGyI_%8+ZKY z@&mroA}s4an@&>g3w&l_O|VW#{L|}>lbMbCg_r%brDF*_(#vMtOm&H}{|d-vEX&V2 z8Peg~_0#uQ=$w%xieS$no;-$xx~yn3t+&Yy_Ai89ElJTfCZ$V|^=+1S8+rf=1%e>p z{0&QE9&}`!{%gwpAq$pioWC$8nO70upj{6qbF>`A0OX21FP3!K-d$mNHL$m~f@;^F zOkwLUs-!dvfEwAWPckM)=b&p|)s-eZe;UtTn{__1r7WUFMjaw;akQNkJv8Y6cIazG zd(sx}|K7H#s3~%RmQ{~DbcmJ5ie0F^fM-G-$$#r<9xGo#Leb|PFGkKlny>Gsv~bTY zuvvbrnI&p-_{m{CRw?P|1Om!kM)0QuX zQdHTF1l8(05GYy!#ao{FW80QNS&DZ&z-HZL6-_L*#)=1WuZaeG7K-VW{QjhKoFr#K zx`(RBsb2xA2}=hOMd=)HinStye$%CmZjh%NjH7$Oit11=|EAG~vh|$>-%Z9q85t9? z3>przJB9HM;kmP24Ur8tj6Ih6O*|2F)KXYP17WVnpBjlZ>c8x9cxsvDqsayvR!0Ek z(S0BTxBMxldyJxNv3SAl8~c+RWMo0%50`D!_0DgC_UCF!0Wte$qk?x{0$@Joec4RG z@GH0;%zXvJgo7iEmVt<>74wCgH7TH&vS7f$2J-1UYN+*J8-&IztU`<%50233E*C|8 z@+VtQ`bUHrd-lJ`Qiy0o$o4j-?)qT7R>oOjKLeOyo0%NIGY~{nWUJ4a0F*he+Gw~+ z(f6p(OW#9ZDjWk)6Zw1E)_3DwiqT<|2b#9=kr<5FLrT)*P81?7G-bC4sSk6b0$kTgeiJ%5CT?; zB$#*kG*@fL%#sEUnv!YZJkW5t1N;b`uU!Z zL>fLx-|2)S%*^Sa`0bDR~$w-LHV|zBg=jU%?>G_-M{Yo}D>LPvrG__Fk$_O`h$xN-j4K<~T zR5KTyqO`~BsM!33&ceWntMu5@JE?e`AuZ-P_%R1;#);~+a!{Xu#4qI{0wA5kNWtq+ z)eK)uGF~4Lk;G&UK3nKqps~k&id{6bn5O_N(%+}#SH;GA+C#eU0T@jQI3J~SpA3%d z#W;L8AMLjWhX0=fYXH9ipLefLbQq&i8s9t= zX@25&sw5HfQbhJn7G*#j8HHdird=N&Gh`+k!2q$+D~gfdNXvIIfu(v9 z2`)vLK^Zo>z)6?qvXI3ystZEffnM|IS{OK9K_(%0(9O=}xU*d2TsPO~pG-oVGsnhe z^vXz=C~e~R%Q8h8wYub_rUR$kas9X4>?=w$s4y66V z%f>^oCjND5gaxYQmnpxaNkl~M>_KN_uqu!g4gcB3Nm2Us4`-z*4I^?QZRHw)1Y(8} zIo>rh0m|Di{C9`@XE&EVZbiPCpKM(ZJP3>YMzeC4EM>cka3x5eQpYi?-U9zqvN==S!SiKW z7|%qF5i{PK$5*xZF@M(v-n06wk`Fc4(Qm%b|8PNST@LqCvh+hx*X9a^?+JYio^4+| z*A+Sc1v;%{cK`Wx2EExBImZbeAKpr2N1<B{Q@6Q3bELG@%5i4?Hj7IYAe@uM<={VW`>eJ4Ko)Vwp}0 z1UrHrAHVRFBoCX(D=Kz3+7JZ$TXRRm#l@vPz|Ex>tpYp1{#vtPC6*Lp0z_`x#n4x% zcz~V-UZ!d2gX?v5D8Zd!GtI>~aZY^>nazCf&5Q-qhDH_1D@fD}%AZ^-+BQF5|4q6x z57y+0E21&~uE5^M8K?7A)&Z-r%i^UlRRe|wuO^p}<|MySsy;nF?Jmn16Pje%n*}y`?lPB@) z;hYwp(rC0a*RP`=sg)|^i!r(NCfH6|Ex?n1A}Ja0NvZQouq&}C_wueDNm9cQ zU2b@~i&ZS|wLjsXx;X#EP=4U!L_fEer_9?K@QNlzz~o z>R6ZldnNsLwuRYwsL{Rxr{lwG%n9$>?=#WrR;zh(tC*O*{yeA`{T;bP9%r^t2xO|S zElVaJHwy}X#IFd!krI8!%dm8yiYG#-6-HlnpS6RwL>kDE6iRPOqz#*RRf zUs8UB-oLL!Nhx-Ww!6Elg(YF6u@^=k{nf-!q5Z6423vV?n(JdCAw6cV%w$TJDWWVy zxj3DPF$%kK(+>hsE=U)cnc^S&37+1}DV!QN@;Z9);ERnp!KASj7Wy(>C+m|4P5uu{ zD;J?{Hp=`G%OMr_5uq^pQKIjo5$Hdk->3O`zuYnuyZj7-qt4hAf?w%5=8zA8#9krX zgm~RHp|-(_hh#!S^U1flPh4D>JlvqqjnK4<*P4W<{;vpvbA}S^6WeloRzQo6kN<4mB!M zhDYSOZz(V)d2SI3gwgNb*Nnk3ccz9UYLuEy!~7FN^GAHe`Hr5Dm{Ey7^bC5f)4Bp> zsmwr{=+QG-o-$KBS%?ExB4_Zjn?WPh);P9u=Jk3OQ>j{d%}aYeaFsH)JI+O-P-9tR zu`s7=;E>BtAUOD0Fe%)t+pj#H*gf*rA@ii* zv&r|O+#WB{+pbg$`~pMihahPdbKG#V*ff;zjR^2xODuYX%FiJ5Vww(r zTm-A5{6gu`?>{qyxH7#m27};$lPKc&Jjj8<|EBA4vaQB&FqIQu_VOxIrYX&{ZNq`7 zqa?Ss?IS?3_;uSqu@ccWZN>SJzN{E8+{Jl<6OCJX}KQnVf?Mf&SxyA9yPz**) zO47KP>Y55UcqU#n{x@>rH!otn~Of6Smpml=sLHTroHk0N(D=hj)N`~ zk$LFtmd7~|lI=^b)II(q_kMNj>ETQRpAIYey)IAycl|rF(urHDhLT=H5hrbA;th|4 zP71d_Kc?TT=PK+5sG{IB`>E5MJg5QuxN^E$1M;-)0Dm{uPQF_l2%&NZ(Eo8EQb*w3 zQ74(~)?{=cdumEDn zXG`p;NhD8qcLG?WO*c?B2+g^_rmJN6STNTZrBaGhJ{l2|(0bHCT&$RbzMq+qnc4HM zs_m-+G0$()!G9@F*{AvZq)5u7Ya2&t;o{`_onHh=-T%J0-_`8wLVdar13Ln5OA%F) zY;*e|T&y(p;^nBC)P)mzH>(i=qI1^X7N^PPPuaG+<<>mdrX%lv6$GgvSPjV~SArIp zSfB37xRtf>zr01OB<>o`;;(tyd~gSTvql8Lr=Lw=+;#6>r4+NQr+E2>0d2FL!qs47m`g!LTqg8N_tmloA+NcCfyb$=T_X=s-LY#AxJP+ z^|2nxPxOg4uxZh$PBEGB_LOhd#w%h1r*C46e*Yx`ibRW^dzC|izlto^j_uy8hX~(O zI5sbGu~>Qy|EqOhkK!3$nm%Y8v`i0HDGdbj^M9jw%5$77(h-Mi&4bsKmJIHGe}1m& z)Yw{(EDJKA$2ToHqCQI@2;4?VZ8bZe_45l&b^ZwT+;5I;ow<9@u2;|D1opsM5tu=cs;a7v=jL%N0WAoB zAc;|+!mu5TuAlSp-d6bE?|R@p?d@@wa&oC_w+@tsCG(U@Jih>UG}jku4GbL4hi!Gr zZxPH=^@Kv~zMN&u)i@!M-VTXB3##??_37wWH1co@1xu0n;K*=BZALJY+j}^A{ z=Rg>Yx$k93#y&|{q2G#U{>S;Vc#$PMT-^*2+M73~dzY0TPG>Nm4a%MP_Sa<1m@Hyj zX0W47bAN+A-PiO#PqpjwV&SNzR=1`WX`8V|8+iqV<|k4?p75q+&*6uwuywlQ2z+1v z>CYP7oC+X5J!jtS*7xu2RQ$htUsy7)r(2u*{E77$b-p{+D`{U`VS4OJ9h9+F({X1-L~Y7&qIr0E<2tUO zGz)^~AZ-Z3kqTXxC`34zd){*Ys!a#1W%%Zq+j&o!DGq#;gy7KR@2kuRZ~T@f8Cr*! z#b9DKv{t{8hL9+rTV_}&%?w6@aD%dBhkd(4Zq$@ZLCE|$+C|nef^bp}=0qWWrz3J! zq0Fa`>lOAbPH?0h;s)VMKsE7n7++S~`fhVF0Vd{Gd~)Q44y!&DrG6|;5G<9Tq*vlJ z#vJ$psw)1pAA{1SpA zAPpLm97MtKOJ2)2x_D$;^;$wI(7bsxTQ}rX4-A( zMLxkKk)b6dgC^-i_KG|8iePM<_@ciaUY3fbh6OJ<1%{R^4SFt1_)mMtXJt6wXN4h-)rsd;&Y&D}Ppg<3vEhy#W* z45M&Ypzb4OctUO}-LOzQ>|GVzZVtQz1jnq*fu){r%t`>WH_mE*J(7kpydjq&lkpvI z(5O~?C9^DKYE;cM!vekiYUK~;E*)jQEB+KJ8Ev(x%oK4i?jcA9z7{!qHl3i1KqQb% zK4F8)f<2~oWWP^_MWZ*LZ7T5`l-lH9xMq(vD`%C^g}+D&&8M|Mo2af(1JOKJR_NOI znGXaXK5|+xf}jp(+GoW>N~vMF6Ae?j^%PM~+pA=Vc_TNh`27Do&kvM4GjG-sU0_qEl2|2Xu7sVs=LaAp6 zW%Wtnq}XQP9`iIR{$TftGyA+BH68sTO7;3{I)jUTh%v#qOFJWadJ(ezY@9T;5kcSn zW&T%KV-&CrzRd#_TOcyEO}xWMOsTmjN5sfJq;Zm4W>=uOk!_O=Lc<5Y*6bs+%( z=l0IdudlCAjna!++nqyI!KO0A4IDB9fjW}By!=$AS=qT~*wA0!$X|){fXuJ%TV3%< zES6pf$cr)Q{itSKopd4DaVBcCp^B5v)naOawWe7#>jj%>k8`3W$-V+x8rYw~<7BhE z)>dM0s6?7J;jq{JN!8}~qJ!YEv;EtP`}YKx%FGEuYW+E$F#xSWL`1AM`t`N!A(OGg zG9A1=75w;&-k5rOzn!<9K{Ek+^1!B}Ee24Y|8es#!=W3Er$paIL{uW?4kj3INs)hD zTBx}sGXSOXhm5`W2^9KkJkHEhix_O)|Aw*?5EEzkjNDLV{9gN0C`Z8^-}|3#D3vM~Ek%U$n>i&=-ueQh^iG(Tcn7yW*lrlsJ` z;S^w0oTpN1G#F1qKtv?Qm?Q>eePV}F)!IVb$qnFkI^Pzy|6;u|7l%Ql6rw5*Q(dxIw*yqR#> zMWW$l^QqOP7bBm++%@E>@$AANti$)WK-2ae6<^g5TjsKTH)|lWDsw+Jng{!T2w>U) zy*e>BHy*!TKTGXom{g)Pb*yY*?C_@j_3>&M9LhDjaz7f+qTlZf9)#4L1|+{ixfGL& z-D&CK$wOqYjEXD|pT_z_ei7EucD!WQi;AE-P?o6z8;#67o9MeDQ`29M( zc1*ppO7z=N#6Aa=SI6=?w`r$mK*2tjieNNHi&T9McB&dJEcEevlYFfyZ)T&SU6LS} zQ^3p)`1yf63@kM8FB1COpLyaT|K5rdK)4jTfhQ~5hY#D?1GP-&mzO3+MsNTsUO{ZsBpI=p#->>`*ri}Gr&4v$?! z2DzU_FGZ8pSBM#OwYc@(Co#dEC{)`2n1pT=9xhMiFmjc;I6CAVLNYcyhy0_S(UzDp4Cw#`%=} z2<5$$U%qXgQ|S#ePTz0JhC(b0tTvYnajpZFKTY>bY+*lOOy8}KTN`hpdS;#-)xdkg|#8DK!{`8WVsO79{op*jo1hb9saqG6D$6^U$<= za%p_m+d=nrgfBazv`W|DVptLM7t2WA&3LP^c|pp*9i{fbS_jRjNt{MKh)zWACjx zUGVS#eH2*x^aHWn#hO!pvp_KnmkK>zzh{nM3(aiaw{P9;BEz*HyF;|OG|K1s`Cy2a zzQtx^-klb4Zcu-gdDdh{2fH-*xj!>{0@u2`n<>2HWWj+{^XaK#!OE5Y%JJX$U$1Xj zj+TdHe)Qt6j9|%EOzNvIs%=RTVp85MO;%cG2YGv`^pOCPZZ86jICQg#3yWW<|#leAZnmX_19~#4L z&zN#Y18IYRM#^vzQL^wN{qKnSXU^dW16xi%>>uI#==vNkN3;`h`+v^jKuC5*aWpFR zf}C5h0ayfN`7~3a%d%YxlIMTpEEk_hcouFsEUKx1;k(B)3{%rTKe#DMq(9}H`edBEO8ebK zqh3q|ugDDZ&73}MnYkn7JYD`Rb)zGhywu=;VdFVrL!2~ZjnUxXqEl@9V=%4k3F){6 Wm&IK_Xd4dv$VhyId>1qN`hNiQQ47%k From 90d6b4006c0614c5fd8db71f582c5e9da7306a4c Mon Sep 17 00:00:00 2001 From: Max Stein Date: Thu, 19 Nov 2020 17:08:31 -0800 Subject: [PATCH 18/75] Updating MDM section --- .../mdm/images/unifiedenrollment-rs1-41.png | Bin 73781 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/client-management/mdm/images/unifiedenrollment-rs1-41.png diff --git a/windows/client-management/mdm/images/unifiedenrollment-rs1-41.png b/windows/client-management/mdm/images/unifiedenrollment-rs1-41.png deleted file mode 100644 index 1832454fbc14380b0b06e3127ae0eba4dcefdf89..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 73781 zcmYg%byQT}7cVN(A<``(Ac)dAgmg$ZNJw{gj?z8S-QA5e!q5#v_b_w}&Coo){@z>b z{c+b__jC5y`}8?`pU(|bQjo&NAj3dHLc*4j7FR(+dZCPj^wJ&;M2M z5=E*Uqu6`?KsFbV7ePX*0b$-7zJC5jcaYY0Mnb~r`R{p=@Ck?f8ANrFk(WSSMSSz+bomr;@c+cb>}_pL z?Oc$qMiM)pF_izr)GS?WOp%J=Qw&H*j~z1NB5EG`hwZPk>H1yi?*+}wf(<2QXw4FB zzL|Y@JN%#zz)G`mi#zOGz~*;*3y3xj{XA%t7@U%_gZ(UPcH3EXdzI$r4);EnOeGzh zdf2{PhVPfE7Aa)#yOy@JEbdf2?pO7(iA91y#x^!sd3kv!2!zzvuSh;VK5wX~qN}S} zo&D%SgMHCd3sRyJtE#FFM*J&ny{-iHmY}(&Pm73Uuuaq2Il)d|aLQS+N4J{e%AQB= zLB8SIA22e)n!!c~jwr%FZ1nxD>_0$9w770FrWqYX`5jq5v=lk-K%&jT4?4do9Tw4g zNvWtL&CMBtgM;OK^bR_*va*_wGsj&{WMpMiW46OBe*Adn@9!UZ8V`*O4P{MPG;Dm4 zhGR5M6zh8w{b|y%umRI13t$+s^s@fksn5BvZv4pLZdt(`O!_2SZP{d8dXn;2uwu+M zvl0a|S#!(>YwAY??rn^GXeZ{OauYOAl+!$hBhs(BR^GLomskTj^l%>d$7dchc5V}B z=hxOiF)?_?(o0KAQ8Y7`>+9LgRURC_cvHCx*^^@8yG8~ESVP8oBU>G74Glh3U_)`72}1-@=sxc#I7wWX2V;!#Jz{)t;UqL$BVMk0o!0Si5a^v;bdj0O%bv=gnwF-lu5Rjg zcY7;0pO8&aG$NsI=HkM+J(3cjU1vsm3>j1EyfWmdbY@t_bmZ#mM`xfk*LQ2Wt726r zV<^Nx1g1RLT5!7)mn#J z2uCG012&+29qSL2vAu{_wM!6J(QySf?=U_`YG2CPec8lAxD46VNsf*#;=F3$Xa{`0 z^J3zK@j)=J1iK)mU=3a>WH9BamRA2!bcXWu_MkO)f|hu)lLcRp7<>>;ioIdnEaZ2>4ur> z`NxAw`-^bqbVT}|*-J&vWkX2YTSd)owY`-+0Bn?Cte!eBI@^U?U~=ksCVs8GT(xVg zKbYZGK`6b6%rBku(8Vn|qmyF<-CO|S&Aoi=$@HXV`MTG=Td=caEaQ356*WK^M-*Tb zP&C!a+VP@X(~yOot14fMF|}Z|%o3Zd3=lwki@joU*<3?|2;OmLmtRywPR|KsWo7-b zjje`;eQGM6@wzs}$y~pa+r^gSfH|FG%*6rZPRBoHjo?)+sIlCyhM~bv)05$u_+uU% z1-4*SouIvHPq$!2R78{8ZOM8h%Lr%GdgKlke&IJ^LbKRyt6lxi?Ij*_mul=OGE}OD zE%ll3(R}?wcC;2Z+;ik2DBhvK;l0Z|PAJC+zFrWfn}A|9IKxq}i`$O7qGV&ifh8o{ z1;f2iQ`_X2>C>l}tSnGvWhJ_Py3(Oc4twOn!a~z=$6e%$ggM5I+nM~bAHrR=hFJj2 zGG_)c1rH2FPdebx1^&EF@Ku?M&XLYVA2Vj{{n+7)<2(+j^o0j%bF%fkI8M!SHl)}R1N8G z7LsK;xCMF}_T(k{A0Fj~t;qEl(t~FjJ^gJm4l`|~TU%RMhQ&(gMNK^8Vq;HEz_@8N zZD_XT&sgd z!sL$c8;A3TPFTLq{FXBO!bSw`oYu=p> zXLP)KUK?F~E{MYJhV>g+PMeNHV|pcl?@6z=S>TEFhp`WHFo;e?SW~;Zplr6RAK4&5baFc zZVHFFl7WFRR2L(*Rwf5k=6q+o9|jV(%j_Qh7@mxFFwu50bZfull6V`sS^UesqcMv(hK%c}%1_o4+ zz!_R@Zmyh>>ARO#%~-{mV_8DJixiZUl=ywBh;|QP^%g)?*Vc!n?Zn7x{z!)Qw5f@g zS-)-GqtO2-X2`+n;`6}o#Z?PMMG#@(llVI}wn^mO;5K<}ZPR!2L|SpBo}Qk4uM%FU zZ&SMkG$p%-x_>~xXj(d12IefKD37VQ=~s!r zW-6WRsb233u;M3C8UNmul$VVj2b}Pz>Xr#qCY-H?vKxFBICT*uKWO;frN&uV;8R6d z0eYo)tVvy&M72i>vdN&LC}F-bB$opiwEyND#3$VJ9QwNdCVoKSUEbpCteIa`u&1J< zAo@)J+Gaq0JCVcolb;Ff3+O;Olbj|mWgA-ZXdZr`hclVQ1hP)~1E@IAuG|}PsW9Ae z=DJz9b;$E*d%MXx6f<347{|bn#eYb7h-@r=MAK@w7+3PVt_<)GvoGPsnqdH7p9~96 zh4!0>wyxiCE)!06Ji5kIF+8q-D;Yi%;fiUvWzLnA9~a4~p0ZPd+=Px9gb|!PwW}*M zfTEDy#?J)ySB3`G7}FhB30yNDN|seccudr6HPzoJ?*tU4tm~jdWnB*aeY89}Zw#zE z1P2ENK?fztbGZU=PM0IBRwBJW#w^_KkRrErEJ(BMar%v1 zLQzdTdp?Bi(vNHnl`$WGE<76lxJclbc#f9EJ=M+BKt^LuEKy&Vlw;07XYXcCt!KFH zOekAmd9xi=1X_`-9kN!IfAE&S=F6#QA})W;!n)-&)Tm}BV)?$T=0j&R1k0GTqN%LTnE z5I1%<3?a6ov*p|V?r{|tG^bJ%-`UP2=Dfl0;#=TM>BYY1SIG-M6_|7=bPWcKUmjq& z3m3}f8BG3x0AS7Mhi%7^JP_v{8d3$#tT|EY4A)~ncv~h0N0@UvDxwyZl8*;8|nV`@o z@kzi1o}cHCf$8Sc#VrlrX|eC0teV=-j4M3X4dL)%@;h{3z~%M@bWp;_K)#g*1;jQT zW-li@i5%vdLH=KWN*|A{>9Y158a#EQKP;2>3uWym%TSm$^WF3#H%W{Ngnl0pA?RGfgoB-*?J z2R-9gT4PoBCh;4fc1rCh-Iy$G$u_t}T)7G!g38Zp=tkVjqVwIsD@&dJzUS=7S5QA& z;e?C-NCA6y4!y?;c@ENjq3QpTtE`xRi^I& z?Pb7rdS|=DlkmqXve;L(b1Zbs+Pvvm4%*vK$(}i8E~3g8tLl|Ih79j%`>!-Ya0mYA z+F#FTAG;U(Z`tfXH=`JQ>!EUu4h7vyE5fGT@n@2=NajoSfInGQj zE{5y1y5;2O_q2WTqO&j#9vF}g3=EtgYkm2zqIRsik15As%O}ttR<7V#VqI~&7!iwp zjrSf0}#u63@Fw3VKL;<^tRfziMkQL`GVe znbAL9dOwA?9=CfNnSXq4?d}M2bke@YEAIOp;3Gq(@0IrX0-}U911|yUf)JND=n2D5 zinMTYIy04=-U}Prhc7ofZ%cC0;;%ieB2MRxL0xO(Yk+*jbHmwvG{NGkm|t87KL$SC z^@Un}8ZU8Z$SkH9j$=?HqqRc0=YGMk3>N53!AK2JGP~shnsj@6;2uK-?WPTvGQ!qy ze|{?HJgjMpEQrQUt@+nQRe((_FMmi$x`}uZdwQec<$uHA#E6}qRC(#urB}{#HwF=N zfK9=k|J4PP#S91JoC`nkD*D&+cwTRT1tlZHk;M=#uN{%+K8R3cH`@^Kx)47C2j4aP zXCjE0s4yM>5(oOPhbkjUg|*Je)c&>1Fw{{&Erebz;{<2tU+S0s`u}IBu>S+?K4&`r zpLWG1!2egOJH|HOd56xc|H^sYWL)TGFRM5mJm=x{Y$!{-3G}z9HYmw6SC(^TjP9TH zEHyc<0=}&Px~`S~J4a$2X26~dZGDjcROJ6)^5($@@D|`Dyl%w(S1b_6@=-d(W8a70 znE%M(`Bd}YoWUX0LL`CGn+~HHjv)t8|IBfE)COg)Pqz78OF{tDcQG%^z*Au$gLaGL zD`khbJz%-*wYDaXgGv33+2D$yA zeRuyz)ZGC07Ud3ldvc~OVtPWhW{o^MJn)0Xs_fIm@mF(7tZv47T}|zmiyuR+xbpE=AI$;>+2U= zrV`h8z-g>BQ2+>T5SsdD2Ji+g4!@=>kBBr7ZH2?)eG$UsWZ zJ>*O!?EnrJwUx(42}X&u=v`ugcbOO5w1V7>*xO7*nNalMLoBn4h-0)v3JMaQtGhta1lN^1?;36{U%$G2HSkC->H%8$1=*JDE@|i<73vh(+bHWOyJOrftTUSgt5W7i>COeO)&ai zGRHFMIL>(>>EyQKf-ip1jwBC-;jLqzb3ojA@hzUHR7_ zM>VxlmO+9QT>k;|sGyqt@F^wS{ys%e^ zx@>u%V_G-NLrJgw4G@FFP>FgzBr2KTo`-+X2$ygWr+~LQV-t<1gp+ zB*$|rzjLH{fs1vO+g^rkn_;`Vf6&(?o5O2tynC=G>aK{pzrQ~*vl4Z6<#us_-6T*v zxb+s_*f?*OnvC;aZdrquv|z40JJvAm00(q%AvgS%UGT%HYqp~@t)8LCWO+F6!c)oV%h3~U^O zSWR-EH|nkYqe2X}a^u6MVPxCI?@DNbzK(GF+nHYgxlqO>x<$$rN)j@1sNm{W)^6H8 zrK8+qKtQ5GGOy4HY{JpR11&?&ez#hGjMef|Syv&21>;{&aWm*tA^-x5y@x zrvhxGb9L%(!1UC1jrJ10YP2Ggx~TCvj$CeG<}N8;khXA~Y7W@$UBW-v82U35Qna zagJxgdNJ7|`gH9btW=(HR-7`9r$J<Z~p5lLfLRYewis4mBUTr%k zlrH3q!7!E{0{rnYHg<#U@6i1H?68M9%xo19fI~JByWzw+jcYuc?h=TM+7f82o(MW7 zVH(D$-dSht>7k=xdOy94FqHIF8?yymWtZn*Ym*M1nD%B0w%`(%?c=TU1cSZZjdtL^ zyq+7#3YkI?*%J;u{rxSOKfIA{l5$EbnY#+Hj}7NKUhz8LVntH}e&JD{X8rsMG{}43 z=(TT>exonoN^pluEhXnf_8#0F$=uhEqU?4`f|K=0)W(SYy??;q9~Ljhamuu{f^Gy2 z-RA_?{gB&5S(~Mn*GrAZJwfN@j@Kv3)3ZD^BaY0@O>FF7=HoreB_*xz{gRWQ%j1ry zl{*|-R%Vo(9I%`-8e5$mc*s*5t*~qN(57oOw8Z%lQZ>KFO_}nN&l%InGvYeT9pmAQSvf*m)ehr(28uFd7 z%-$R^DWxUu$n+5cmqspQ#Hz1WvlUm%VrsSLxdsJoR9-o;@Y6fDjlqlV2j=!4eV;3$ zc)flQ&)P1Bx7F=9-tXe+ek}d!VS+r2Z@UpHLt6Z0X!oK<%wwnhl7cV;JP7M|yz+Sg zlYGzpC6!xD(haM(x0l!P>;t^@*e}0ktgi$SXQ+pJ)c~D#obq-TRLBsD!tamH&acIB zL=Ou!d}Ju~D zlNbAGf+U}wp;q;jZJZH@Vm{>ZfV+BiOj#3@Q{99$=~&J)n=!+Oy)p6lz$>peHk4zh zgxgceUr<=cZ?jg5_e;buR57yX1!Z?;JE}uRHL@}7tNBJx{Bt4E75>P=M1>FZ3^ebj zsYeq$J$5qOt8K?$OgA)6NnUJh1VzMaGryfzC{OKVS3_lohu~0llP(7Q`t@QiW7u$i z^z}klPmlPA4P^6ahpyv{UNgK@g2lIU$7Vj_rVwz3znbd^{3 zhdSVbTLHcj&NJ68GOkV7mXsOJ;{VdO+I~&pe(mXQj<-)Tch&7ZIcmOI#wC}>L$kq; zheXOlZPYhZZ+~+1HZE5~W`m6Of+Ew2>*Za){ zVkKog>v-FrTY_h+0FS*OgZ17dpu{ULw4ef03k$0Pp7&fe>ZTNeg0}PRzOPn2>}lIC zmC4A52XxKE2V420sGruePM5#gXP0(hvrSI!?%DJNBlN+zz{hK3Omy4*W->5lF^#p{Yqa=y7 zb&$`WctO;Dh~ty)GG?GP;Qf2CNiBn@IL{y(v;fX}zulcs(}UXvkH>*h_H3<5^$;!!wPnQ{yZg$M|yg@2Nr*CoXsaD7X4=%-5`|; zI~k4Xy!@Jpde^&u*DkGpd^bk)IS59UovDDx$%ukbh0i_X=Vs~*+ke#&W1I$!`{8^e z9u@JCi??K*8ll1oaVz)6H&vIv-nV~bvuicQ>-K+eJl|Kp{`2hEX>62T4?jJIT+cpT zla~v4qO9Hh0fOg%FmkOrGi*T^FWG?-Y$cViuxE_uzwUgz{XA=Lz%kdj{6^b!-RyL5^AZ-BwA zeEtW9cbpTrpERrb+@Ijo)kzs$XA*U9hJ*Qrnt};qPcAV<Zkr=!X!f;IBT9l`#!{60qqYki;pl;`4MO996N zc!6hVeiw(IJY0{=?xFUA#+#q2nwz6gAUp(52P{t*ju&qC53ej)-{WnJ=ak9Oy;WgfC@1D-DdBNK*+X_y2^ zvb@e9`CB19P15z#Kf&`<>06;&ijNoLAN#k^uyOv@ZVjJwKHWZTT=J~-#onZZ;+*%# z2$DPeT%8vL`Qj)Fc@W3q!&up;LEc|}@+v*Lu#;Ec^7o^0KZ(RoW zUGA&^o+R30$DvA4Z8U3MrC{qH;|F-2$3_VY6ux9HBI-jy86y&X7=8i<-f7-%?2NyE zsCq&z?(R#YDoo-V3^1dNs_kxR@g5O-kKe=Eg1l>ED<-fs0RgRnOwN`)j%_`*l7xF2 zZNEDpR@{Gd#onFV0aF8iLV+T__AHN^&%U3DsVR*Rf9Ccoe56WnwJIYmHt)cYS5V|8 z-+X(+{c&CKWMoG;Ahj0r8ZP`ueSb|no|D}cdleTI!8NlyA$@%OF>%#}oM_}5EsXY% z6!o{bY0J}WuSEr;$j;w4Zz1e4@#)=$5^q*c#YZv|BBt|8LKX_4X{)Lg=WhurInUm? z+Esc|y(NeSXsm??J%<B&t%)YTRhb1G7qBC8K0FCX z-h*pgdNC++iI-MqY=Z?+qcbGFenm5*gIv!fIC*$ud^^77)L3)DoZ{ug#zmKMl10%d zZ$ba$q{=G}2rRt%0%^X3D7{7v;ecmoHT|HeotnavfAkpyVHLNe!=!LF+D8G^x0R@; zd;Qdgw4n^0aa%>-BSa8ox#^(zXEbTpQX?ZzGIgikkFRk%G3Vm$+?BXn*1doSkoRN`X(GqT6 zC>!9t%bUoYwsL}yu>@$%xNv~?aR)Z(;9%&FqKw$|=#dMxp}{rIi-`e?<*NZm(@`Ur z^wyg%{Ol;s=Hp$t%bZw$5{%-{>}WvtQ|k-`=CHkfc)$NLg?Ny}!~_G>%x!w@v5#2U zAQ99Zi!seJZM?Gh=S^JvuW=xpLyHsmCHMV%JbBvcSf{5A&5mHR=+f|raP1_pMoeLV zI1K-1{f)H);sNoV%)}x&gljHomXp30C@My_8n^HlPxT;M`c?XuSRlJhBI;H=raZ3p}5E5%VqEJmE^Rz z2dqYoSmJ1r=^I!qBh#q#r1jP?Ve&9Q}bIX z(ynnnkX2rlCYuxw!oj_{f zInNXIW9QR3@MQeytZKev2dQ+w<+p)wWQXBsQ8Y=FRUlWnzS9UB!3Ek%hbV!3H0Zb4 zayi|=puE((?+x*yA=_fk#LJ@Uq*9vRuVDMo$kzK}S1Lor`@QKUs z?A&0($MQ4EuHZg2UKL**wRCyn}FOy5(vmAgIU>2_wg>1NFP^tG4f;Dws6^f09rXRJ55=RPS( zS8g-s`wNS$jPC-GG`!3dq$#8%xqk%y2GbpTTX+OwGa#R{<9{?Tm|NyOa4R8-~6~u!QaAHUZBY(GzE%Y^udZmFxnir7m|naRE_*8I?;hq_vtC_(h%O$zt;gE+@M- z$6vjrc<%EcH6Ak+6c`X=Lv`&drKj)akglE|Hv$RD&aQ4SbqNd^bi7ckv!c`WhKROA zq%NMHNs+_hi1@N%wM0TF>eH>@{d!TSxT7{oaII@^lossh0-O#G-?>$FB`46 zGX8h0NMVepoZMfXt#Jj(&qmql=>us}!P<;XjO@6hw$V5)d7Q`Z$Ze8Nu{JEesxzsY z;VK1?=N0k7@q1##2Tadqh9cj2`D0L-P`xd}!Jd1WlBNA<3Km<5tTXKIDT1c0-54*s z_mA?n*aJe=fI&M3o@rtWL|E8Y#@X!{Fev&7I;fiIFGUhWh4FrGbgx6tOeA>PW8v*o zb)@sVdoh(_;&SW0c5#KLnmp)JY6RuhXwK=I>(}CE9ReQTIwP^Ji*RIx)TvdAI7c!dkggu>O^ba6 zQFZ_uf8hMI?ra3rOYI=8`_rr`Hv}YEr6a}B5N*om5ByUs->K9aK|~Cj!Srl{iv36O zh#u27f}e6;dGX7^>^z(cARtLA{{n_+aW~FK9trL_WQ`68SZ>er=Z+Gpndp7MS9(RU z7tUiC6y#JzDj$q5E8I6Gxz3ecd|0r}h!c1y98b}&Xa95rbUw8Ldk~!nU!P;|HIB|F zQTq$~r!$1(!7{Q&%V<>rL1wdNacLl;gn*Vd;Bc=#d##e5`_t6``%AY`ZKrI1*DGah z21KaJP*)|tHp&@km$#LNhA1h$pujHN4!l$)5aCRGc1pf>Pt+a?{44zMAiREHaLZi# zb^)zeyfMd3G~tK*ZNDqjWc`3ze4BA8M?Y~iq4QGcsS-}3 z>u_lQXX91?O2`yiHiB<41e)nI+n@bu`S#h>&42Ira#y_u_eTl}EBn0V{!BE3Rq2LE zLdFhf4d-f-DS))CN})WG7POP;{UXIV3EKGt>Rb;!YP~M&yysZ<9H(>EeN`_A{v|{!BTIYjKgpBrH zmp@s7mmGEHJ7m&;{Jta5`hl8PvY4WtV9k2LT($GvpFyn+s-__!gNgJy>FOrtG@|sD{=8?S$I_O8N{5F1rR4c6s;&K^(RLwFf{(F{*e;Rc zvo0sFDha_Z{}-jpn=ke7*7 zjm-)B!_xGXxF~mCO3E(3aP*Mg@|IsB(k^Te?5qi%x%%qr5ehg@)WBn&C@gj=jZvEDtWwEw@{xNQQ}&LE8Aj>m8sWgiuKU^2(ed`q%@*9jVcK+)c=tQzcXmx! zLf9*j7cZovqa>`Y$*rucCKhM?H*!U7bX)Q08f;05P>luV8Q%~Qg_*`nST7+Bd*js+ zRd63Tih*g_yiaA*JC(v;6_LmAnUji&iD^THq=(X@mh7~HRK0l&?-D7CODnh{Cd;0K zq24=R2xi=&UHzHjDn87F>gR4`eR@KaG*$K<7NM?OfxW|tFyOb8kTVgWZLT+dJlu$Rb@d10xwxz31%J@C;3d>v?p}#(n6w zG|zRH!fXm(X3%IO)>*#K;BOC7JYlS8P(*)H$B8!C2vJ+RCGpv}q3k50)U>b|B2@}GLEYA-+P%IkCTZgt5O3sZ9?y1vJwZtS}8yXGW-y02xlRY_Od za&e;9|7BZ)AMGMP|7ThzY~#s`w(b#og)fCr0|}l^0d%Z0DHT~>uUmd)`F2}NYxeVI zjZt9z-!plAn<`Nc9UB7;$%33*1=FaE!&x3`^Q#3eym)7Q-s#)K2c01^eg|+Q;VC2oQ6|F z4Y;|J(KiWWh{CfiKj=^QY$JZ#a~1|H6P*bO3=Dbq!v_f!=deF0mtAebd;X6#pnb?A z5=C<2XVFGwS|ZyR>ln3gX!L~EwQ358a$f3{ev}w0?hnK-<76?GBXWZqW);id=@_|^ zvYnA)m0x>;QEQ2XC3-)L>tRP7|9Vwi6vE5EL1q}X(DYE45Sp!7=*j4AdJ6rmV&6%S zK5w`^=?AkOf5-7T2zvws731}G;UQ!}Uc0|diV@Arr}0pdCQ*S*O={@{KZM|ry=EyG zxvKS%Qp^IUdQ*c{6$QfQ2c)qsuiiiH8eU9(T=VPC2%X>;-yUWXRrGGx)+80)F)L5a z3ObA=7#UOO&GGeCR$K88!X&2s5`KE*AK{w$>8bwWnMyv#I-W7W@=?-M0{sfU9R8|* ze7$f9-UU$<>Z^|-p`hq#ZWD01bb&!bsB?ITxpJ(NTsPV-E-A%a2l?*r6#ahX6^-S! z<&${39esRXy_>ImrHP6-Eu`9N(kAl4 zm9+hPvlCZsU0n%Y;utQ@747k~<2K<}&*i9r0TQp260{T2?n+94!`X=T^sE|m;?Z}$ z-k4=-o4NZ>$0=5=N~|;(*D-8b`-yFT3WuVIihFuyV;35r^~aLj2;%%49DKyyG|4CR zEjMb9cbs-+*vd>VFHlM%7_fK=xT~&Ky7)8qgIbC(fpCTw2nqgxMxBt5*U3S6X-nT^OfP(`Fw?ZUZo)-N+Jhi< zztkaKvc0W^NFwNl*WsGPOY#+zgWG>;cG+rsvLSb!t70u?dZM)jzg=*lTni8?_CE$!FT#vcBHr8+WN`{{eCR()dTCKuf<^ z5_!sTiGDHS$d|-Y7sX|3C}BIS(rZo2OHM{c4Fx9Z+%!bxvon@K;b+P5^ApS9z`(#? zM8}<=z+(>#ZQ?^4q*Ts76A3pjw|oGr*=kSE&3XRQF_YluII()V`+^(?K6IyPGIDJw zgJKF->|*k}Xev>&F&i8`Vw%METxv{SIABatT^4GYbI(e+Ltn047br$bMj@}vckq)q zwMxKwANdOrk)g#jY6@wJRJgw zN~m7ORq|e{Y67NV}^>DKLM`63t zuT9lraD0f24(mWPWlXjP6_FyAK0iuZA>q+&`8lQH{sI`jvWcI;wzZHIC?g*%5ZqKeCNt zp4g@}G&g#};)*v0#J{D!jg4gk?pZNsq>0(rkiQOkJuo!J71dYCKN^#iNTAXPO9t3? zcs3QKwF^=LK3JFWk=9~n8IStXsV1CHT zuYo|U%@2}k1*T_LrA$L3-^Iy%BkSJA#ZFbb+&GP7Wmsc@C%*EWSyGHY$Fxf;R?2B+ zAYSdw35g{A_db&glm4P!@x{398L^VUjYEAG0#9k)$HO5seg84s&anLPY;lJlvT6`|rJPpXG&@ z!~Qk;rrv;*v^W90^G<&;KrIhn6FJX z9Ahr&{~OL+nSinV;yn%oWZL3lA}J(3;+H2Anrt@mSElf z%}%f)$*F9@PmO?sS*74iQT27ZZ#xMUDVM&@&-!nK+p|;>I-F8cAtSo6+mCXqFGM~V zUGy-&+OxH1mAqJX`1p7RdO}9$6!P5^u?*O2MvXPkyXUTgE76c>3i_`uE1|v_@aYy4 z?foKY@>4fzC}8v*v+?^pGa^_V13(x3V!}Coj}Xo&aEk|`WiojB`Me{1wHFKo>j`h$ zcyK$W1lQj@iNjcPa_KsJFWyO=VrxSjIHd|G8_Oqy3D@war7zr)_vMDi?o)uQ2R&Ig zi>}sACIWF;-$@IRk3o^xq_|?kb@`Y%u?!Hh7A7)Ft3}Dhrzmjjy)+E@(u|9PT@!t;+tS-q zSSg|BDtkjhl^k-Gn!9XMJ_1>k5?QsBb||)1n3?j9P~5Vtu$(O$)=25%{_EpeY^Tl? zhk6qyRiMe!5Gn8a)?`Rz)nlngS({YqlKHWK=hyxZLaD>n>-I{w;1gkN<3Slg?(26E-du{< zpTg}0(q3hgF_UOqeSdXSd1>?tV`60o-!FKVPPz80#t`Ihu@4EqkL0{;#3auny&AT5 zWh~5QC3PL7=VYDliOOeqn~hR@pV8JLmJ+d@jN2{RjeSh>OXT89#brvPiu`A{GCUAR zd&+6Xo5@Ke=ea@5^J_T==D}{n_z+=lQhcXh{2`V5FPkqEE5qB3%xJK z_|0Dw%HG@BO)8rxyYi(ZQl&2GpZB2*&XugM!_0@?$7g0+NCaxPSY3=KR8h`d{4KBg z!R^<})gtXHaCsdNOmU;fx(qs zY}zv2ZEDC(Y$1N(2v*VyLIe6QxO-7l%-`(0E#t9O)OX^jLojk(a5 zoHf4$abqb82qd`ckVX3(wVBI_*&JjZs3;A6J7s`4hP3)r@jo&CPyy^QmGoa=IrnfR zReHGb2|P2{gUwMtr)5g9R?3V~?Z`Ts>)J`J^8dMUSG3)2?#)Q=Pw-4@DVID;0^`jU zZs~skmwivhMmQku?LWl-!77epaQAI+Ouwp;2pPI=I_r;%T z`?XuLn-4OT>$gO<^9V{ONmmAUM3rqF=yZ)Czysf#^lua=T=f)#tWyx;nHeb2U+Mn!hZP+#*#_87s0jUh`FU;SN zzO@RzY}*UpdL~2P^NTf(t!S$)xd$&eH^8r@v37*_f3se?=mM6-gRI1G!bh#Ywx4Vm zzbcDTw1X(T+V>j|duHO=#@Ob|H`5MC5$SDRQ#jrUh^6;k@Kvut_DldS}~-fzxcbc z3w8ODF}7{$oU5O=_Y8QjEtJ$BoIK>O_nx*iU zCZH`DBU3<0@#-X8^5WL3FtZctB9HawdOPdJtcCDv%WM^~KH3z=d4>CdmFV$>x4g>< z8F+9`Dxu#xj9gn%G0&k0T7Pq5@*e|#4)T+%u%K!4EA_yilxdLAqHx@?pf@slXy(l_ zV;?K$@_5@th7C1V6xR71;W62|r20w2&!LBdp5v&$yYpx$lEEHkuGKK1X&EZ9JTa2| zN+s*^P-?>8{cO|`Ws|4MSl_C8>s%4WuM?bSocHEHsL zh7w}=L$Ek}-_k6ZKQpeNWS8%TDzB@&oLS6IM92%(OG!y95=Q)Omn1SpQh-tlGWhVY zoc1LOu&TKle=~9N4(CwV|43>q7etv_r7@HeYWV`1x^Nk?3iz!+URFB{v*D~-&@!D z2qP;Ir|Q9i+^eK2joTia2EeI{BWJbj0Y`NsXMLIX1b}U-3F4rc^QyVH7|IkdB_?Kp zm(Ii^{b70D%DUR$Sh6Ymua3WdpF`Rn&4~J){nhK$t2R5S@8-`MuVu?o00R7>P&S-# znQwD>0@ReS{{zB6J--l#o@irZ6FU0(F+y*nzpoP`G{$3$*xx^h5uQ*T3?BwO_3<4? zZ(ldsI@-|F-)n|=iqFEE`+faACjZXf9uqb`Hi(LXrDRz2er6R`m4s7++RdshsVmobBkRhd$1ZYixX&4Y|Wr_CAwd7@~*N zsko%yKiF?Nxe=DXlO2e{B&RVlVd`CJd`3}TRDhrS{5hO2u0S6fo~Ag4M+QlU^qHo! zr`z(YU3u70{SQ*6J1d~d_h6KX^bags54}3W!$6<$o)kQwv@U*o zdTE$k#$|-%8)0fmK>voR6T@U$=|)Becs)S5^ixjV*6^C)gM)qOpo~n}DKpi+EQsPL ztebKllSSb%#(L_atc^?=*W|)m*1_T8z#zKGk6&O2<}JG&58Qnx!b3yR*Vo6R->L)F zZ7;9Q*B;2T@>hLyP!>bvXI#a$L}g&=$j7Q<#p`j_8_UUUkb95HqABx@@-QMJA`I^XLza5Z>6+xOwk^3^ z(-_@7uDaqq%?<1RDE|#I|L$IwJXyb{zUX*py2N*(EDo{~Mo zS&#jcq1s!!^qP7io(y=>H_(e#jv(9HJJ8$9dSE%F%O5suJLpN?ejHZ+O#~|?B_##^ z{{BWVAt50M4-Yp(ZYAz#qbx5kM;nLTQwh$AsHiAB^x#97J9jSpeEeLYm&4C55TTLb zC^&x_b?t))@%O{#^;@v|t_QH@mQ^%>UD&aG2lnpWi?e6Xps>6ek#PwK3G~6)Bl}U` z*o>sq6pXXNE}q(lmbM;5$HY?M0x)YsBsw0Wtmrpi ze+hdI9>b`A1VR(ikr)%nva(mA%z9}Yw`|{zLkABaFE0?4&gM1&lmFx5fvMY z(9l2>Ud%&tTNmOI;*GI7Mf%lkLx>6i3Xbl;IhOB2{zViPm0-*-2!3q*2X=15p8W@K z_WT8mv3!Y%acHb9r%bov_=yv^SX_g!*d#=R`lH~?VQk&82d7WxVZ_IuI-Z08m-jPF zV|MoR8I(14;GuhN!!UKcuB8ouf&Msj_$Yk*L$Kzi<+yPEJWeuwW=5JR_r5(lu#ZFi z3l|H}hY%zu#UYR~R?{*Mso1%fo;`|fJ1B=!XHZ>Ji}>VZ_yzdl(9zQzVO_-OV~26- z^eGxE4$(^ru$%RncP<~1v2iqzp(wt15t}z{U|1gY{yaN{ASA?wp{3-!8C6Ba#-p^N z8eL<4xOwqhgarngjzQ%z&@T;nQT{o4)!V2)r%_s3ftdJs1O*4-H1+A&@iRDc@;Hv4 zJc0azLQ@B!VIj!RFTe@P<<#*LtjD7`f8iox;$mqJLU4g?aPy`uOn(}!^xiYGvJe~; zJlU`?Z#|2+!1~#=X%qR+BaH(11xFx)^v@nUM)@8>aX~(guq_m^Q%_1sMMOjx8k=gd zQSI>faTHUpj-5P@h}3L6eESMSkZ2Lx&ErU7W$dfI3~zaMG0>OiWBf zLPCONBY4Q}Y1FA-J#&#w)HLDn@bJ{0sFUdRf<&K`oQ8)Vd;s}*$MD|TbwETs?z&?Q z0%+V0?%arX-&=>ss94O(Ovl9&2l3o1Z=;F^<>2;pROp@b68kXF--%;;*Wx%U-7ml& z_uP9Y7Gx$OfDO|}73`>EL6`DIWnh{c8}QFx=aQw`d^GR@R`Yxe0H* z_A1U-G$SWx7J6E$@Y-ANqMb%6H7Nn{u`#A$Mu!GdkeBjNPd^qAj9IhiB514+YhV2( zYS@@+s><=J7hgaVJ?&Yu<{>pT8Dk@T*tcUn-dVdIk&)4uo0EmOh+s6=RpC|U-8UA9 zoa}6zJ9ZH3x9&#Sg*>c%=>=9)0Orq`hopo!w9p%V?x#OTdq+R!%$|+-s0i|74}Zqt zN8=a~8H1ppFeD_Wu#<~K(Sg4=MvmL*D z{#oofmdC~vPp7sQYu|Yp=Su33o0E;+)=CbE-$qGUDK>7~gfjAwJ9`clFdoBH;QhO{ z7~>rgpM+T~Tgk-}c9jB*F&;KHa%DWFAG@h3~8;KtqQa%m%ORv04FS?taX&1I_dI#GM zpG8_`4nlqV@a8+Op|GOXc;*`Qa}N33a`Wt8;_D4=uHZC4NfOj@*Lk0Ee)mLA` zy3IQgpO}R1)*5{8yZ?ZLr;FGIQgDGzz{{`v3XL>QEu9?kgoI-@9f7WhzJSb$gd5f#yP+Kw&-f$?u}kn6^h^<>AHdW1hB_nxO6p=Lw#`a_+i|2-#y5n z2h-l#icK50V9w%|c=*vraNh$D;lA+hu)P&tfFCvHvEyJT;_srov=?_tXaJh z0~|`N-?|5jSKmn4o}H9_&6%mQoIv?hx`YLoCZ35*mf#Gbh;*oTRriXvmGwXqA-} z;(RSfL~+S9@-Z|5LD;=*7dksSs7H~QzwB1rcITb=)Mr0~*pvh;UUN6@zUy{;`mXsH zZ?EDgU=#}%&cQ9KmYb14N8d2=OB>KLI7Hqkm*EkY&R>F&p;ajUTIKSQ=be^?xwA4c zHq?)ifo?Q4)|d`skoB9Gy$JU{zAMo2ZlJx z8b)|TEN;K;R@`yxEm)M|k4BDQYUyO`JA9J-Jd6j((_Q!9iv?^4?^Kv}{U2LeQvG%>S zIGbO>-ZL7sL8fx00gG1O6po~BA1-MbxY>7my*wIVY)ft|`? zJoDeafy%N1{NyJ;#^IBvk&uyv@BGehqQ9%2`Ti7p4jjPX$Pi^imW(J2W9G-tKLDe= z*H&MKM0$5|F*FF|BQ_x!K4I~w=wu@sp~+AZm+Kaho{P+ROAtxf3=EH=t$zfCh3Bw# z-FvuDT#j@a`lQ56Jn{JFFxJt8=YRQMcxTIAdR46$>TX7MY6A0#=8!EKajEpKMnh58 zLj`qte1=aR{(e4}rV@BBk-VkS@=H{MOzf1HO*z)DUyB1rjw2;L(eNleU_$EhFh+WsSa)?eb#N!;vlb2Q z9US4L(ddRElJ%Q4cfQdv4HeU~GU%-)Qoo~+keZ2b8fSH?`?qh#ubzJ%+xHx#0rF=p z1jsCMgy3(<%lx~Q+JXlM}S>`PuEkh^fP z87)LaM6sjJ!mwW`hG{@UsoV=zEksfh@3G^KN#?zPPy{8U;x~T(PZ1LxhUcDr7V9}8 z=w>IW&RWA;!5CD^udlZoJ2tGtubz9(OnD9ag~3--OXSg)Z9FWRZH%L(h{!Our(m{) z0W%WmqOne;tfQl&IC6+W7~6u;->KU3b%t#`#rJe}agq^rCc0r@R?04rl^etg2!12tDk%+q-%$Jy@a=cG1h)yz3xpdjjz3r$3MT?!3dyH{G=o}@#$j`7ZX)p&sb$}E9i=-u}` zjIV#=xA1#^_(%BTKl@{3XQv`(b}s(gx4(`1Z(WWZYu}_yn-HCpf#S+KQ|7j|Ce)T* zKtj+Ea-;k(GUkiQIu2i3+d1-RMst0IsUzhoZ**j2#4K5pf`ms$(11pwsi^jXJy@HDBX80H* zB;9a%ygZ~7y4HiqQC<(T6PYu29u{TAW9yC`C@3i>A7h9NiolYkx8Vz4`5M0SyT6CO z{OiBK-FMt#j5&K`vPs>y)|$7-G_ND0SAOvgIL zdNFzP5O1w*G=3bur)ST>7e4niZe6j6ZG*fr-MHb;@)r6D_? zSA@FyCgZtYIJyh|y{(9ooYQjg%rjrZ!}r{Z0|$1Yvc3WB9jez>!=E}6e-1C2>+7*$ z+fK})PJaHgPh-WxSu}>^m;8@Wwkm^BNtQzoeMczs;E+Isu+3M|BW-PMGc=pqn=mYS znHu|OKs>wSGEelwf_k&y$Vl^qa(r|gvFx><{L~YuD9FQm@2$gz_3N?izzHn5^dsO42Lv0#H~}{NfZ!PRjxGa018wyWszK)I8;G1)Ihdaj ziuc}rjUL7Z?A*Q;)paebXdoso0juXE;q=jcI7b71=Hw|_y(iLNs-8s2&=F#MBI|Sb010PaVa(Yd287>#=V89?Z_2i&T1)DJj_~$~%cIn>Jz3 z&YdV>M`q?DX_Nx!{pbOqc@cwk8beQc&4Z8O%!wm-n>=saupWh_C78Ql4pz;J!=b|m zaqb-XIe7xjU7hIdZo-j6`%qL;f$mXyJFKq|HdK51K#oEn%cIecpS)1!;V=Dg$txvm zE*^aBQ|PNLz^kvnX$;VVt8-CXco=8%@^JRd859=e%KY7TFm6nb%tX1q50T z3;ijhK+31Br5Vq^_!5p@CU&k>PBARQx)&xh?cGRbT6OpWx`{Hu!SHxN*Z;oIaI@_VzY2jpRSl zkBzVW3fp(>=ZH=(Em-+$m>)v@tE?zR3CnPr^&(?$Mvnmj9BBm@`Rnjy+mr#0k7dVv z%W`brNAhR6Opw z^HzEZ%gj?XDWqf~Ws8lE!)y+rVmL&IiH^qX%nXDF2T5xD8$)gvZF{z zj^_}un|v(7;<>XicUCTkcUn@^W9Ex8GIMC8(hwRJ1Aoe9m`azJmW2cwPE~b)e<0FR z6A>2VOWp>Nm6d}#ZodP$IkSWgmyBm?Q$+(}!CNnM7 z424vmGKE?Nk(`!H54xX2?%}Rnk@|l)B7f(L+2-1@iU9xd0m1Gzjg9W+i zhzkv5xxi=G9&3bRayv{lALc6zN%4XCPbL_kP{nNM4_bUsp3(-0dKYF>62qc?!#ZVvew8X6=WdD;F9o6X^3Bu5mr^t9U$MFae)CmzGR+zi+BhB^d4 zgs?0*Ogn%6EEFR15q|!*|GEOwpW~HYhaHP|8Ah)eqgY={X zQ+FCgY5E{FA&Nt54!HwEv1ZLJSas7a#yL61&Nd(>8M(Y#wekw|3AmiNu}vK4hj@Hg4ICxhrmA9b_6OLeq1h z93^JwWU&l=rbAk`>L%Q@Y6az=MUR~Ak#d|fdzN{|5E>SZtl5h&XZ}L-u+^6pBzqIj zHgL-=x8mmIi!nPR*-V*PlNd9{)jXXS>=C%?Q+CAI64rqryQin~Y8Q&pOpfTUIWm0o6KDHd+abW-^2d@6X;- zX|(`aQwYJqp){!Ka75Ii+dt4pdc*WU15MBCJMQXCv?i5GGD2SDX@vv^i(!^?h-n5* zlpvNffIMqSl-7r8xTE28XmFUi2eX#WgfV@1NVpji_R-jyFs2Km7h+Z=On~R)X>6Rb zWaS6aO9&u6HMc$v?Z!BS4q#ZAc~BtHO-?IbRX!s(^6Ep+pr82}nJ^%P>HK(KPlE?o zAM(^gLnsq)&d(np*1V=`p_wlS6sp#0k@uCwZc}DI%fl#k5XTgmql6b)q(;B=)?U z(I=ybR-x1Yf>e<_bZ$q`kA}{=XN(jZljux9ad@p^kGW)gdstw{GnLleg5BHKV>5>& zT2FZ9Vi|ki+i~CRw;-H~CB;x>>On@3D%QoLYDq>=4N1d6cLdN-1d}%zaCydpWUF%O zo*w3if14ZesrVX(>s(Cg~R-QotG|)UOUX+S)*p>`m;?)&js|4oGnTsfT(zYxtdX|1mR#tsj?L#kWl$Mnv zG&%ummT_bg7VhE$G>{{xtgc1?hxMx#@?L1Tr7LU$B5CQgOUB}nGS8)_9?Q|9$=3xH z$2ekozm6vHQQNB8S&~>6S^+c^0F4%F5OnqGPDlM35Reo-V;5--X>j`_KJSOSGrMMqeOfJ0x zA2sG(BKCl(?_3%54B6wQWzE7Jcie^h@4W{rmM%hkWP}7TiSk4xUxxR`nP+;QQ+SH& zF>Kl#ZM@%fm*Z-AnCjltvYi^9Qp{9N9~3i{*Y(KT2}7NF>b~k^GA8pN&nhD|66E9^$KN_&{eLke^)%dH}a^yrv1pEA?V!NemUnxE0q80**nn)3ER zaH-C$4nk`L6*R-*d2xeboCUQk8A)AFQ%~M1ygE!doL9q`X@mbjV8b(Si}28MpT53M zT)21+J$>5Ug#kCHRhp;5%I_L>uVP)pr{Vr?oIAP?<>i&i$aQyWNZ}@|xg7SNTyIh1%LWG4AG39ZpQX zrvRY4yA6#k4dyKn_cZpkrF71FHjPV%#gJ?GuFk>V7d_og*#748IC1Q>*}hESm*QRy z-bGhOGj?uSi@*Q7|A!y^`w#GMKlmQL`;%u;-q5N?+7mP`9yJ^J3L1^b1=w~=j3q1mKRgciMlJHeSNLqqK=l9M!fpY zTI@Yti1zLtn029j`W-a;5NeI+h)Z|K1`pmJ=tYm#1+sTlm^*9Qp;CKO_G`g&e=pC6 z+1Oo?XnY3f;dL{Q{-FV0`e2yX=gu9+roB7S+|f!ys(niJDyP!$OuI7ipR`Ger%gq4 zE>BFa9_kfN?TcvE7cw8JIL3Hi{AsVo!GU3Px3`*oD)n?zpQRWcRUU4P>ze7bE7i93 zZ{xMKTaml)CVbr{cE`UmQ@H3w3aoEu}oSUsl4@`ym>sUsSqCGcVMW`$jH9O zyVe>#-!b&*9{JUW7Zg5G7L!Kw1`Rp!Bl&9mr}mHRrQEeUenWEuo`2&l96VQ!uKr;p zre@>*d+tG2QVdzp>xe4ffZ?xyNU!M{VkRHm6JL_o5M`j@rByYTWFZ-k`>HJ3SY^o2 zF?#{9L)F?`rC0bwLuP#K$0}J!Uz|GIH`r&wRo6;y3dBQl8gS9lJMjv(JnM1l4bxB# z1MDm&ASD|c$H*|fZABJT9-|GcNy(lPm5dC3d;=GM&6{WeR3toLGrA%t=(*2t!->u zOy{e0rsUCH9diVOLL=;|9nd_p{e0=3S}DzMhUoj!9OXD{TVRwr8J;EZQ(A(OKciw#y$Ij*>G%N}uJ#A=hZbEEgqFFn4^vDsjMm8=! z8hvebC@v~MM07M7YHP4>?;i4a0R;s`l+yqbwFTVpFwR^k!ui576kRNa?@$jaE*wPs ztkpgt=#n^FP(KrzEgD=Lx4 z@H1!fXk3PooSX=4cv4edf&=^Z;_P|SYiKfiNNPcK2RoI62lnCQsnaMguP|H|ojrrs z*ztAu4W#QKVv?*5fK@U=*UP6(Ku;=^5G*#QA%26 zr8Q`5>OoRc9P7|pr>gef+uMnY7cZiU-mYGKJbCJr*-B3DTo;@>WA^E6YHBt06C4zT z)|O`MKX3qN$X7{88G^`nR7?a~Xzcgy-EUsm)jpgd5s?TB3qegy4bD+c7tWqT-kHVds)Zd36tr zAtYc7`FW>t;K(uL=jR(4Ml-Fp6+CnH0vcL7kr*F~aT=iWr;ebxr5oW<;gnM;@{3B@ ziC?7N_)>pjS&x3`VyAohn6`EdrH+Q6zP1vl^2^MNFk>`|CypPZ=~bsNhNFj%;3VZ* zP*jN8rVePo*5Dw2)Rh;Zu(%WjJO+k+P*z-qhNfY*%~j}VYs4{*jN-IcXjqtO_r_SW zwN;lDVb8vUICuV>sdK%K9TgFZcFOJa$>S)iC`L_P6A}`W5JdT#iu(vc9nS|{Cu)aJ zw@&mjBdW++Y%e8IWEndpxRyp#(EOv6p}aUB`%j%mcuYJN%*sS06=vPWt!V8XL3pqq z@=hMYxzZ{uUpya;l?8a=)mJba7y%!8nFkK+M?h2xGSZUG8y%wA+SZI8{`0?J`>w-C zNlrj}Yc<~8x*MspmLb${7;nAyGR_uOBQ`1wr>Te+Dm%<;hJ^*^(cGmyDQ97@yT!cY zt?j=0yF2i=fBz3CuByY5`Ezh`_cmQ)-@YB0v*sCP z{O%9`gM9OzWE&NT%KT%9O<#(hwpzTqX){tXbC8>zHOYv|U(~B|d$ghR(LDUtH@}9t zjHCCNrKeh)KSFPD@7DM5#`-M?jEJKG4`cVvE$EOzVgTy!h--QPbRRUW3&;@J&5~NKS~u zuFdPQe)CrIT4pdip@^s$v^B8-=AEMvOT)bEO!y6VVD08DlwCF|PMyTR{_Lmdhd;uC z1F(PZ4iwb1W5L{P6rDegpFjT!J2SmK#JYIp4IDmRi+k_C32`yuW*wt8u&Ajm#6SGY z4^UCxMvs$T7dzXXo7Q3f!J}rQ3cc0x-aG3N6q&+wp;-Uk+t`2nEcuP4kv)Z@C(mQy z;sx{yJCRpVM%@_4(S6%dLLJVXm5YPyM1TI=iwF*9$2`zJ#~l+koXOZo&}j_2)0Xj--riloy<0eXm1wY#hd^ zJ3DvoLQB6NbvhDU4t)Y+{P+Jgy~_gC@HDLc@`}{ASEwybQP9{UBDXTFC}Rmnk?5t8c#tpZ?5K z`0^LO$ew-}we4*<%HFoHWgPS8Ex_#g3(&yc{?)fOpsl0RHH6`CV`LOPy?sc^nTrP= zdmQ&a@+tImwBg*zqbR;`7Q6NxKyGdhY0O4uv=8!+ZbVR6Anv&5POQA?CfsrR8q8a? zoE}vJJ-T8vSC+t+WAnD=4)e-fMQb;b<}5=OmAsWaeep|QG`r+{_6wg!dPV|vpD937 zdncOP+A(+Dd_4NteaOhoSHX5#bAAS^TZeGpCZS8M40rEdWxwLlbb<%Kz z1qQKWaMgk0jr*Xpr<23zi^yGZH=cg#DSVE{L-*Z}eMj=xKsqqcKS<*mkNY2b2oFE< zI1)kvaBSZZvzfyXz3QBKOYz`CkKprP{5+Bq!|9ncp{}9`c_mfIS+D~0Dc87!WNbQ4 zkG8NF#}4kn-48x#%J;;lp2YIyOR)5oTiC%Y!R_}wjO8mAv7?mt*lTv^F|UITjWGX* z@%Uqp;r3_l#6CKfH2hh+=W&{BII zot>y!XpnqfX6=dX=JnG+_C2z8XMctSYL;b z=mevaw=Q3VNE&U`$;j|1jZrLe=gq;XlZVmRP)m>eEPDG#5y{T}?JWlon6eO0Q5QbP zLpQcYn5gZYX z`1EX?DXc_ub1N$9+Bh`#LuE}Z8fyv>9}|X93}DB)^;mJ!9nAN$_{>wE!9#22q2lab z^mMkF*K#9LvT)yhcVphHGQbi%3R5ZV+WJJwbf!L%J#Kf{^_Z`DXufE&TMZ??5Vay@CMQ`m~ zc{Ng#V@JUu+ z(-=1-nC$Zb#5q zFDh!P&G31_q7{gaibn5f02Z#kogHb0*@kb<>>T*^cVmd<*6vGssl$LeqgNXxKdlIf z;D~SevPB#<(bK2?sjgM&VPWA|IyVPB)fZ7&bO8Yo>9}>_e4IRd!hG5zDLt2Z?TgyB z9%Rm*Z+6F*Tvy(*9MREw9d!)Bfq_`La2C=yYSJFP0e<83rZ1qfu7;i51DHE!Hq2|o zroHQd;V9eLFmhI`MixgEvC(m6lbQ^lK6ExW81|z`Gb1s9iQoC%-@~8(ufM?`{`vnl zpKFk3(9<_a&tixTFpNX31=zQH7fzhX$KsW@A&Wzo9fwY#X($94=}Cy@(6OH$hCI%J z;X!n<=O5^-$E?%{gmU<2-Xjmv)_gR4^1A)Pux9m52tXe;?>~v^)((b`&|_*h^R5=} z+Wa5{D^@N?LSh*99yyB2+FJ9FY-nTv?b^+1G=#=A0OyM;=?Qny1MH#a+ltWGD0)pC z?vvIit&+;F>KtcUeL&7or;H{%2j0^|1;zCbVkeN6P0#-`MlOHx=l>ml|LxCW)!Y=y zB9I<#6MA~IF~op**rA7GgG0l{>y_6ezOB~*tvvW2%Vx4Li@MbjXv5{`FnV6?_2^+a z#CLmFtGVygEK^rv+|2k<7fh(aEV?#SLV0yEJlf#+kw+fGx4!)y{NW${Iez!|{*0Y+ z5MJH92ca1Y@s+Q96}K)~2yH_sJ<%f|WAk0Qq0x&vncz^?(S48O_kZvAuqZto@4Uic zZA~3~1FQ~WoLZTXmV@+!C~V%c6NUA?Sh;F7jcXXj26|9g$WE4{6>U^eFAp>%j2%u8 zLPrPC&pMK~-qqcUrcTwT=vn2|cb_znGR1ZwfS&lAWvk)O4tUe26`HPkyIxd!V9*oweMs)XdqpPC>r58)k*QJl_S#@G|Ng!>NdvJJ+9&9d_&Q8UF z!v|4PQDGi{>Or0!sA*~`nAbJ=7wEAzm91OKq z;bLJahg}UQFDayUjIhDj^R70p{B<=rYZH$UkSx-&voL>lg85KaU2PpI%PUY%g&wD> z1^We};PgctI>sT|&=_(SF2HbqA6h%Qk<3OjpPo=_V;w!!ctpj-BWv-^2=e!%N4pmL z_8-8mom){}--bJuEkI;wh%p4(T}drtY*Zd(ES9gj3txNUb`&1jf{okvqp+Y5FTd~t zic8BW2utpYn?7q19((Lb9N4uT&prP#4(vaOUE8?N&TSh;i&Vxl5w=tfL~v0-&2RyE7xv!rT4jY2VF(`F-rGCY3jJnHKkQA!W1y{;N5 zSvgp?YBAQm^E!6y*n$0fcA=u8OjZX$BYil&cc*z+F*>R@zGT)^pP<)cWhvDeXQpFg z{)nen`ss)6K-t-&*u85HjvhHoSsz7@IuI9s28KN)RKw?CXjq5!pCFpP7^K$}lbC|# zOXjmq&!CP5ucopR7fV|)G&G7p4AN*fptYq1$MY_ttxKyTEHdV)w2PVySTM`q+c$v2 zr!JzQrHfevAdF#tsuw#A8PfN@Rxe$Nio7F;jETgooFt^g$Kc^x7ozO=E^Obr1AAB} zo3`%6;+t+mdU_geT9|>}h9Z{v7>=-GtZ(n7Vb*q!5)%Jd&WWNCI@J*o9);u(U+QX& z*$6zAW$o)~Mt%1PQt9byba49}H(}5Ab=1FI*t2^#JNh%!&07%`VL2A2oXUg$X~(MA zq(x5}b zPTqVOz{&8(7`9EE&JIrbV99}8doFNa?X*%Rkxq#`D89F2A~@_D_YcNW?VXsLVZP^+N)M=!L!%1v(mxE`b>E|A|HBYk675bjKQ|kRk@QAs z=rw7dHGdiA&*yNK>Og5pVe5k*JU8m()A=h%rqb^DQaqN;ZQvW zOBXM}Yz`FzXducf*$Ff?BQtw0o_gX@^JG^IQy;cl#G#;`cx%caGj|^5&Yxp;G|J@A zKiRAbkgR->o|=WMv{a;Vh+kV>LAh45Mc&RT%^Mjo@! z&`^sC%A={J6)BY6{8{Npj|pY{RH3=G)9B*r)i-0#yan{GgDI;-%*{+Azs6TH!|*wC zQp^`f^9wFwXxtwUJ^m@9GuAeM(pewo?Tdkqb{fOuxaY~wV(Ef;2xfhy(pZKE`kD{9 zX`VSFdk&ud^pi+WOG6xo+QUOVsA0!H;uC}gb8~SMJ=j^Zv&}9`=^0r_q5M@PmIhn@ z>G?n$M;KvoSy-`r6-QiQhzSco_PiBXv3MRLDI0B$Jk(Dwn4O14Me~=g#-k5EVD{lv z-N&b78bhwP-qd5Jq@?1myH;a1hwI&}&y>tu4%?$7bmpneuM=3miKwowG#{=D3=YQ^ zzwl)`FxjlTafERgzhKES^J(dcQO!pb*XqHNbWg`s?I)_aEQN`Hw#RE>Pp&7=GNej$ zC0xyZqVfmK_tm?5jPcN(mfBa*+J4Lo+MsWa2eDwf9?=?47C=3$;zWkg*pp8aSA`|b zL9P4aa5~5s&~dXy(4UP(yvUe!n!Q6u%)FGoBV#^b#&|uwogA*v0|<>Ug3>xho>+UB zN^q=@02&EvC4hJvLswTPje+*|)Si`*W@sj58`55)OlK;GMnP*)_0>(K8`C1@wz!Qw64{FgAuO1DVhJ^Krgf*wV*k^2&2@@mpn@bfo8iq zdLN{rL9w@z=rY4K&2NT1NN(A)^^Evh|SH*Q#m;PgfK zy{~^B@vKK{7%wkTpS>71Tg_>RX$>B=K2dvry7q=09>6$xR~*Sh-`qD(N*P~swn40K zedAwxCEFaTePCJ7eoSwzrKODI35qg#A7((Hzc2c09ZNZ6J+fL}(a8C0lDxTCLU89V1>=;5OX7UhHP zC#u8V9#nR*yPGoMuXN10pXiiERO=EIS;zG>qAIN^fDT4eT+1NRnz;&Q86v5sRmpaN zO_&GL69Q4|;i*$VR$k`Pg7P%+NY~a2UW=|8r@7>{&g^TuJfbC@F41@8p+j-`Yo)Z} z3KKk7S0-PR|7Ec5>7UK7$ydB7l)O4=D!NHx^XQ`K_NSN-sp$Fra)C*~-He#5mS}=Gu;@YyPu&wZrVZgbDs9=vem!b#fi` zmDu?1YdBF z3O6y8l`EZL#c^%Job%64#{i3zsSMpRR|d|s_PH)iI*(9>yibL_L|?(KM(#>G5iU4+ zR2=6u;XD_tYx{h1UM8Msn46dKxA3aw zyYNSU^ru*|XaRiem&0th(z#A8*mPYXhOVy7C4Z?qHjj#H#hEN4o90AX!RC>NMaoIX z#4u2FUwYFiIdkyjXTOXG?_7h>02)wR2~}R6dP-}vXx-EKrTi!H;sKZLlZrd9f=(uA zyYe-%cXdK0t->bfWuLq5PJ*J?^rRCLG+b#6{f`+YIu#dmZ68;{6|JQ$?3obzATSJH zQjKXbQ9#%A)nXz&4<|f@%>?f^op7aeHf>MwrV4+*xZ1o-nCtvXkn<87mx#OWxd)&A z^iz1`;Rmr`-W)Sr_SllI8lHLg6gE9P)6ohGtslMh-bZlzZEFx6uA%zn24%YZtb4AD zYmDjgeLt}2T}zrDWlVGwF4%U@wtdsd;W8ttM9zmtHUalcJ`7x`Fz*K+l%_40nMlWy zqwC_=5FbQVCKbybsCn;@F!MW3PiJDv;F{xF>xv%J_#h}S1OYzwhv}{h%U-h zQo3nfUKKtHcHvs!gUEHlh+e6IT#w4TYN(>GF&}1Q5|Vts3Z$tI&6jDqX-XQ(f_!U3 z4L#U$x1_@l0n68#4iKZ|G&JFjVZNz19DnlrXHopH~`p6kDAsE$cY#|>!@hH+Ou zI#>R#GP&b@mx(ZCvHq?Kl7p@PH$ogARZNn)tspk+YiHPp1rrO@>|t zq&Oo(Lnt_Z5vApo^oTBb-!p|2NAJ2fHaDAB9jDYIDt>EYEzX}kZ`LAO6aH2iBwJl; zqYC?B%JqUMo0SZ%b%9p{$)~=q8dbG*u)aO@{&CF>kYq;L>5VQULyV!Jwi4&_E}AcO zO5BQK4wj=sUw7^7nwZc1NWzp!hEcN8F^=~75|kF4HxGB65|qw#c3Q6`PqkzHR8U>? z^mL=JtP;J`>97YVtv>19*hu{!yz&F*Uq`5nS89`&8BuqL$V>=*5ZHNGhZUymCc>yl z+H!8+!Gl=4{}{Rl^(q}B+K~+|&0W~X1W0UBxc*49v#TAiKKm@zZ`x|MhBMxaqnOS# zCY@WDK51NESB&>IZbEfahaTZhx^Ev^(o}Hb5T5(5=h4{GX`d< z->(KgsY+a!Oi$Kul6)q@UCg_Mn|lgo!v5}dbhI{33`Zx$Q>4r2Dw?(r?8DKc`?2%j zG4xXYmcdto%XtwIbI%cG!d>wNXSliN7Uqsg_w0-fEE#Hxy1MF0^BG|+gFAU}2cG}M zOK5NJG;1VfjP$g2Xo%%Fv=cjyoJOCPL>WEuoVR>*4IyX>S-!YVz72>rw)}yweooVHfUY=IAV^Ww$ zhCWjGuL%FwoA+A~rw0g7E!u-O-riZnE;HG(5(>u5)F zN0(V=sI{Q-PA4iwzuJG&MQ7aAIM|#`h3gTpUY*olnMQdSUp;z#O*NWYT1a1S7b%>X zGl`Zq=$-zNF}ZEXn#u=^;%DBb8bfbq zJM*f=@KCQ=Zz{T?;YTH|EXu=AfA}*hWIbbE4tbBGW5Y%k+8b4#t>KeKT>0p=(@}+~ z@hF&O*M`=TpYD$-nDK`Pdr^2|2lnjTgpO_+eTK;?)uDYNjhcuqX-&|jY|VPlu~GAi zYHLTQSwE;~f<$lL>Bp!^W7gIZlCKu@o4qH=x5{gIRg5noseU2;SdYBan?c$aQ?fH} zZ}GnBPCTjnTGJ}}Bje25&@tSae6%FCp*kP0KmTLY)Yh0az+Ln<>#FL_+ElF*HtCp5 z-@TtbcL|ox$wG+sW+iRqZPBORXu5^*tbC<|R=I}xt5=VWCr?5$HsaNiksi5Uf}QqK zoB@_qubNu*qkDe-z8IrU4)VU%tx6O(*LMb}wi`owPR$Uo!xrh_$zoovWZYZDO!67uYwvt!I zC6A)1y0Ghp&4OiTLM0M0{;6&yhor<5+;zuINQjFvI-xSEeOS6`z0Pd(*QJXi{8jxc z?nenKizk@6b{$U0sM>~g(i=-^)Ox67zp-Qr%fwm>b*;C;Gaz4sL;Wbo&o_HdR&b~u z5EzEY$WU~3HskcE(`H}C`uZmG=1N6nCF(l+5$-dLijrb9G`1loCI-PFL1uff{0rxC zhC^n3BVRknNAsRGX&CJ5K*7bc=AOQ}-Pb>a=-6oV_w{1$_8o|zBCNUPCWNwqSr|8K zW6Npu3JUX4SX5*btiP`lr%#?FjS3paK(nERj=i3UK0No|z)h=F;80 zeFzN>L|s`CPMj-5T1E=$Xt-6@kcdcTHH>YW-^06`H^nuh=__tpuZ1V8mj1BG@zI=x^$w7~Xf!p{ zV$-{?;N*oe#HVH>iuttDldfesOIRkopy0>!+Q(IUj%qK^CVI|ctWRHdP(=k7&_5Q0 z z&4g8z7bCx*5Y6q~?9c{r;rv+?6cn4czw|A0ty|Xm()LzuFmjx6i_yX%YeZBe^nHFQ zkQ%Lql)JZVzv zyn-EA5%S4XA7vF48)p{8ceJj@DVp255E>a}UN7xvsx@!BNKY@E&o{3YM^bF?!t4&`eoJ(TE1n1Es+W2t^cS+|=BF6UVi` zXc5}Xc6>3`ey#jxi~)70ma;#=_ElL`gKCzmyr~^)ZeEG_upl(nmh;{z@?VOsp)u-X zC@L$f%xkkz;i2Sk49#`axz;YT8z!J?FfW zC#b&#Y|E;LFtc%uF#y*Q>a1q^#*$zgO6MC(c9?1BSK3ch@8MeB70hlw3bT!<5?pg5 zO5XHl#Id7C@xz}yZwy*rZ$I;mL!jR$w5kN7>?~;kLO?4&Q61akdFAM5FFdJ7B9WM5gmQQ^iC?U zedjhrC8i;Q#`n;!JqSxo#;v!kHXDWr>M^%%--#bT|B}hSjE3}`weO&;ycFG?U2Iq< za9A6YES!f{dIm4B@y?x>gN}wW{QRf?iNfj@4A9^n=8$slp%YlSbTN7wYq5FfZg9ZP z2GWV`JGP>txeqxR$vAWTAeHt!5?Kdx=gdM}e4LTHChVJO5MTP`k8t2j0ln`LbdCfd zF*O`Z!a zVBb#EwsaveEf&mh2%@=W) z9h2S$I&p9pI@z#i(enyoM<&D7+t-H!tZ!}B9G9Gm+4JV1t-cI9_V0sFpdUvtZCJNq zBU-wBkeL>Xqx&|aw5|map@De$C*Q@(?`$-kK}AIgJF{I#%AAL&P(Qr$_Ul-;X)E<~ z6lc$!#hY)uNv}5!(cymh>3{qiYU`WLn`1%#G6C)9?X zj#lj5yBCf9KyGRb^7g%ppFH;hdIm>OQ&Wj88`qotM6PYz*ycKM^7IL`vFCd5j+-&qUXPbwegXOAO=xef!J*^F zjPXByU@HzB&%@HCi!d_OgO{G=$f-_Wpctn9Z^yy~v(V1A@Si^+-J&wnDGqcGAUP=- z+txOQOYX!oUwwwh zS1>Cz6|cXsmOXZ>F;p79UK;GkxR23;?8TUWBp!e4QGDr(Pa)F32csbgc;eGf;R}!7 zhnDj5^h{cz&ntJ*u=aL#va(L1X(Za@|J5&j0kp<3FfZ2 z1GnCOyV(eM)2>6PrDvyyajL7R$S~Y{*G*WlI1`_K@)4vZ#+vuZ!|9bh{N!iwxu-vi z<=O144sNA!(q~$F%-)$p9Ok#THzG1736Fj1X?%ut>&GE;!I@*ID$U1{eTVU>PkkQW z_>JGh=bwHGgEV^DPO-nE39Z^McHwe7@bF`}<@S5%4F;PArYWB`j$+H7B-g7^m zc=%StLen0-MpQ;}IzwrX|F0EfwnBnK zaqCU1uwq_3D|REjzg=iHD^eCL!HVSzkdlx<&nzARK^$t*`&qE&7G&jSA&DMG zct|ulOB*rBA=r3q3hui94)(g4$jMB{n%PMht}CLa(1{Rwb`RcnD`sbAAe+b1Sy^b} zP;+R2%1k3FgFXo?s@@M?wtNXPGt!aHGz*u^!|J8;k*>`;lH-sP&N2Kb-7YGE-Y=Gt z_6!eUu{JE8JqwxXnOL@TIZ~37%#f39o!&q!a>8ykK^lD@L z`r$|U$k3Uci|EDrv!l#R(SDwamyCHaAqXAoLnHa@=o!Jng_L7Pn%TG`G9ntp9f7+7D$!nmv6(I9u6`tOcu#=bc7fxQWIvE1I=4q-_xcFgw@! z`mSEgU3oKRanzHZo`v}fZ=yaV(AyeE zQ+o@Yi#qJyz7-ocZb4mh3r0qIkdT_gan2adoz-VmE+9BE0ofS|%#%7ST^$-hZPx(i z-h4Od&P4)sH8wg7gH45Kt}4QrqlfYC+wb7OF?!OYe(cETSg5EH+OIjL^hDip%?rzV z)yzP~yoLDAAO9Jie)MjfJ+cuyIpiJp2|#OeJH4b%GwD7|#U0hoAVfg0wc&(}uzGBL zIzw7F#9p+iQM-AMuty(4W9KNw=sEiM>YGIUsA139KQhAM=MXx2hY%E=z{W)5H^O*k zio(?*3DaTl2=KEz79HBifv&u{uMquH8vEr0a>QP_wORW~_M44Gn(AxN+tY1^Eb=ZD zYi!JVS}LO|#TN9?Mh{u^Yu(h39yZY6(PL>RJ-ufxuS;76Y6I&)dJf(6eg_8!F~lKD zLqj9ID-Ji55A)NWtTyD>8t0ZYW$Z;`gaMl0Q#2o1Bb75KRGWzeF)wYFLApa6(l^#) zjGm(}(`tREEgM1Se!hXY>GnJE=YRg^ShFY#Yu|jHL*IPz9f|s;4s@`=>H$L+JtY6& zK(k$+WT|lRFg7X!#JjxKq3GfVK0{`c4h`e_>AjAQ z43q8%hu$%G{Hd?tTlCa5h4bpGFQC1%o&0OF6dF>0A4G(Vp}&XvNZE~!45F>61s&bi zL$`5eYV84FK@U@PIAK_3Jk7W2L7o{aF^w7in!DPX#7bwyl}twv77>X@p8690=nuYw zn1F6P_tPJsx~kSZXf#?Y88hoPO*8cLVX(i~Onqp+Up)Ew1tBGK4jz5tDSYj#U&r74 z&Huw6|H1FlF_^>A;u0L;aQx7TGgz{MBN=w+;?3y4*ynG1i}s$iKFBzrWl!wXVv>?@ z=iT>lME7O<<~M#DfBmPwi=}jOMzm=)9S>8sk0_?HdkVMjU1mg0Bk_Q#!rwPcU5=x? zvKHkvEr^JYM|7~SS-Y8x|cy zkesCj12kj-$j+IEg1i&hzH2{DojQf>Teq6+*_O^qA&p@K_*iQaEm_I{+F!aG~hON|@la$3_8p>8PLg{CRt%oE5WMWpj zyfJowGK#do>eyqWBk;%_E0BNk5Dp(cijz#gVe1}5q%TBRWH_CIA(oGMiWlaoG)A{f zVF>=pAp3+wqOoTf2lEOzWbS1!%QT_?;$7*idN%b!z3J;8#D$^?QwOPuDOw=n(C=}C zaip_sRyrE<58=?kqd3F5*|v2%np;{C7#M_w*;xo4=s-&wWz0^M<8dU$MI$yY4l7o! zMB&A=IA2_arP>}coW7~#Nd6WO+rE+3WGCPd{cp zBG%X2haB=bZ{BR{J#JMd5AAdx86Aze+3EC3^aQvcscCFj97>JTNNL&C+=a^!78XVy z(gzC`E#%NB9bN^xrLm5NH{X28G9_y^ zKJ%$hBQYV4vM1W7bH@tBhlVnw6eG!xxIe;u3WB4kI%y4Z;2+NXc1@j4T?f z&~PNCXzr_qbPHG~RftN-!Dl}GDWr<-;1FVB6U|pg&Gv!haCl@0=g;L~@4nrrtf|M` z1xxYB!}pV3CW3qh&6DjC)?x1eNaxd7I5)?5cKV9tDtb0yVL@ieP7H^Ci|1u?_)2~$ z>og8CweP7`5X6QDv-}sS3#BNhSEW@9nVHr@7#Tz}R1FM88@=B0s%oTX=O88`obr#s z(v{1p&q2oH3XY98ALi50Hzq!ropmyY*F#9lozME4#WMM_f%hPF_FP^sMp{xb`Ol{( zSA~I59~6`~VgBOPn3o-ky?b}kU>9O|JP3C`@EC{ZxinZBWpD%&7>uOUOfw3RKC10R z$0p-*U-$xt;;d_yH!L~@v**q;`AIrByw|So4U}0$(+P!96hujCr_P3Yga$+yze2bSia0`ohRP> z{ezI0lnCE}cJsWTuAvEu8M&Cl@-AJvggTspP~QPuV7(O;7o$-Rf#`+C#Kgj%n~UT7YC`MJEhYl$26VCh5M3Qzs8+fT+7r#&F4jFiy;jb3oDHVg*(hX>7a znL!%$mR5Rr!}MnQx^VvRR^*j8<4^zmFOd`{Uwnsk1R1EW_jt zN>TNMTnG*dG5j$a8+o7gfR1&hZwzS}m<)})u>OI;iM>&^_ExhsA*_GNT8qd1C2P&| z@mh<`_2gdlp}Asxe<*}rlc`%1L;qkN7>RDA_B{2YqO&73@+Pk%S|dC>Vm3iGT+>LY zyqXH}@eO3S@*bmsqdfcr&77o`ZZ$Ty8kttr*5Vg0uf-Rh`EPjaw)w2zPUD&Tv0U1q zTOS=XOt>J9ddW|ptKsTHHGRZ-mt0K>IT>SSIzgi) z?QI(9KW@&0f-bEE)yD?|`~!?PH#Y8zAkx#rCABMgvvP*Cib1@Iwv4SV`l+A2Im+_%$~qyG^(-Bfz369Nst;WcxawR8U|1wO zW-ZEZ@8~dXS@|ivmQK^wJ^S#5&wUP=v_IGU?J<(m$n{$6Cn{)K<*N1*)wit`rpP+3 z=YFC_X;^WBiKpR#s#=B8J^eCV!v-r%23GVmXK42lQVr3WEDR0b%oT6A-y5gW>YoHH z$hcfm-%D|=%5~+%Q7UZs z*E(^P%Z5AMOLgL;V?p7P&1HO8LYk-}L&ufRrMNDBZMu`{m2`ATnCPlQ{fa)rojeE= zeCS+sTzOda%1c*0>z_p^~rKE5gqkm>6{(M(s6TYFi|E2vK+RCx~FrN!<5g?m)R+6NxM0OqH7f=Um+PLZ_!HL?;imF*_wsv6r2F=@=s98X z;-OGGFNFyTvy7hwDT=(8`1DM~r6$n>>Ol~_j;Fu)bv*gdy$GXcIYw8@Hkc-j=t~ie zyd7nAg-w9x%GSD1Z-a-8i8QXmqRsfOYrFi`gA}VQ6S5F5;(_OOxop_qa!=`aEm-j;mq~}}z{tP>PrRA9Mh3j8e4ODfIQhAZ2a}dzj&ycf6K5jKn$wMp ziAV0N+1JN_UL)8#aV1=4L?sZrVr&8u!c2&LP`KwYaqS3qM$vs|nyJo(>EgM^wc!k% zj-DXJh|ijh2cLKvU;o$vnpVy~Nsmq=Yo>yFFlPGEAL!c&2ZgCvv&hSg;mwq+p|4}udg6y6SC)}@v%Z#WeNC2J^f0W=}u{RnL zkCY-bBplI^F^CM)w}^b%A?b!Czbnb`!zjZ{`1<5Q4cy1Pfu#Asn8;}JnyKbwt-Bvx z*!B7AP^Z6+dZ#w(-cF}9qV9(C!!}aWf~;BdIM$ruhXu*V%#~_Lsi6#6F>>TR&Cl5L zukO%&ZBJ+B%5JEb$EW4%6AxC*#ITg-QY}3cl)OHQtwBvxZNNTEfEVu@raeoJ4tTOJ z)3zR`;ruA~8d?NhUtNxt)@E18hkzf)--@-cn2+2#V zsQv~9y3yL+f@Zb@9ePS{9xQpQ_I<%_6VA5mJhw4nL`~!Vkfd!Z>Lq10p_3|K_nh3B zxJu(6V0MYw{OXUff8TBljJUSCbH(!n_xuFqE*iYthluz3%pQY<%|}oH%<{?V}z6f1L$5R*~(!%6>9%vE@wc_xXvgsM<#rmzA zv3CDS^bQSMdd8d1)Hcn_!gWmCv%+jR)99bw4lm_z9TUtupdfk1LxbJewf-gi%lG~f z|N3wLhJX3jf5WCt+s(2*OP?;$n!pq?`Xs`W?XzX#e$V~-GEdZ*P=|eey@V{fS`VmC zXIP)luv}=r01ZhjKFsjM|I!dj?>_6*80}%H_xeU?!0O8i(9+aomSE`<3i=MbC!VEn zT5l?&q0%cqlLr+|*9zAfM+wG~ff7;4cwdH5ex&i{{I$QRrF>fSt)&kQ4Na(QYBAgJ z>2*~f@+<_0gdl779K^=Nnss-2|3J>5xENQt_1*opYSdJgK%27Acd+skPmZQ2UL*^p z7oSXN)@llpiSksKc^9A8S~vOLyBqN0#slaY(CeYyIK1UmY~TD2x@b&8LV~P?)NzTd z1APzO-z+p%J!oG|?RhBb@AmxeiUwG z$F!#YBxA`>a?qPxrp_2w;gqu(HtSrpco-dEIGamQF|>FdNC#)YPM3t?;h(8%wG)Ef}t; zu0ml^p?NzZFd&qS52LoW$-H70z)J4nP`IJK5y4@hW>@&8raBZB6hM0%YEuh;4CBI) z9q@}vMRaT&s;X)+%%N&{WVmVQHng;)xvmDqB_-xHw6?Ym1hcF`fdOX2;iBR~R8&-& zE%UTsJ222P#KQxvZ$b7$yAxHEl`yYTbaZqfDmvQGZ*HzPGO4bqH7^`!56D*X@Ux#jixM{aRSU8) zHqeE4U-&5stC}%u{xU>I$C17-Vxq|x^J#5uB|ohwEiOS#T`k6Z1IU{eRr{c|sTKvI zUt4Poy`}&Hf`dSfL2XSX3JQzNwr_gnv6PgQG|{2S?rEP2+o+0`bk@9m=Waw5$u^><2V(*mQ7yE; z*87R7XFi*E8bA8!b2Nw*XklZEj*drNO(}l-lQ%JI_5#F41>)qkt$6~gEiSvhd;;i;Z92mi|W5=*({{ebga}ggOC+lg-p*KjjZ`+6? z$4}7MRAJZ7?dTd0LtIQa-g)~iY}m2~t!>R{=ov+JMh1;uh-pk6Z8doP#s5M#!V#Yk zjU)Ru3%b(%Y*>k9@D96D)dytS2kKT?3yz|~B=G%wN zq!JkaZLh6@lkpdKUYRokDeGCHC*$fwQHxSh8dx z2D+Q^;?IAGy(cfAxv2r?P9HK;7xT4GYD+DC@!~7UFVe=)-H1xfL1J{c94GUp)xllc z@Wy)^DXYaaVu3hya5pyW*oD;Oc!_Mv7@WRWlqp_)x{M92ZDG_5mE!ehe z2l7kGaP-JQoXRi9!g;gNQD1={{^V!KFR!8j&&Q7czrFVkvLw0hJHPF{_jbJZcE_y4 zF1RFs#bOD7@E}Bjca$jIDJa8>3&lk+^v5wMP&(-pCxR3lA(8^X1+dEn*8AP@-p}+* zk8d;6-uv$ReY0Nnem9Da~zV*wjs;pOEM*l<#mM&Q+7Zi%K zv`snYT^-H%ezm~^}$D|U%X1JzYJ-2 zyYRuD{kXt6Twi<3Je;4EorWL(?f<}wvY$6wnsDUc2iSMy7*?)ci{!~6y!6u_;a6{e zgqtG%r%oQmt8c!Ag-cc-J8cSY|LUiB^TU1Sb>M^h_h2MB8};=yQqJ&m%CkhfaNzw{ zk(6D5B`a1ST`q80SveS!^X1i_|5)nzeKgAj?a;w}QqTLaXxR!mmxl1~|HEJ4t@n2s zL#3{+*1Txr3iQLworov})c@M2E20m~e4>1Z`1s+&Xl%HOEsyNL^UrfW%^EWstA2}jIe;wE4O4QYH6W2Qjkk5%Fh6cg; z-k*K;)A+)dziQq9duR7i^8vA&QvR-h}4!-pH&q;6K3NFjZefq>v9KYI+&wT!?_~zHYjtwgoqV?Kk4E6Sk zb<>D*&Fy$(=MFsgnNMSJMKO}3!LjSkS5X%&suwG&6=yCt$wjXVAMQPffuvlt%LV71 z!)LMSiBIEqfA^o@Yv1^~SYm_t$9IpQt#<$|Z8y;;SNU-^V%dG3@J*6NZ$DpY_1Yt^ z&(}n-Ui#TDv2oKQ_$UA5_wbEx{x0S(SZF5Xe)^eDZN*o=@?|`>buCVwJ&xYN0kJ69^AZbsd1rw-^MpS_i2>o z<(OA@GcvO9nP;EF7r*p1a}vFGX&8TyW|4ZYUUJpYkvbC{f+1GyWjjKo_u5z`r2-YWj%^!u?%1Q;27#w zZN(E$Jb{X$9Q@=LFPj^e9Imm1>~UH{vNDEUa*_Jp_x?Nn^1I*1q2rCXcJ&J0I&cQ- zcYaFh`Sar@$HIjRy~J#y35@OO#G-o}zfacqd)Dvpn(AYImbyL#}}8}Fl7ER=-{ z7NDZ60)+)d=4!!rm{)KP&DvUN4D&=VY9$@M>n)bE5h3O|D&5lS_~^ZN@$#=<#kq^k z=x*vlepV))+PVULmk;0rDMzz(aZKJO4n(ALuztk?^jtqDCt?eRFJ&A^6 zyHF~^kt5wR>7!!d#%-vRlb8*YlT0+VHks!G&W$Z?V`cB<_2$_?94FYT|gwq7n&CAfT}1ATqHxNznqUY8!k z>#x3!p;68{Hg4K)fgIzFk8H<+1&dH!yF`vlF|N0Do7W!mY8GSj`c+sc`@dw>dMsJG z0DMb|y^Cwtu3_H?@8FeR{R&4HcWy>2~f>*}RDFD3vRoHC7H z_qgsC)>%dLZd;(!@R&=dZ29`F_&5LO|AlR97U0!i{0-iE`vY@QC#TT#_GV2P76CD{ z4zegxV&23V8=o}eP#lw#K;Zkh6dJ-ZCz~#CXux0m_(8av7f<7bzx^vrrDotaKlL28 zY}hC#=@fGE3h?}wzKQ?s559$o-X{F#zxa>1DBV4K#ZS-3!LkjHNcSiSAH4S#@(OG5 zI!L}b3~0&tqOTL(f8fC$5+6li>WObW)+!FZc6 zyw$<-P&KC5wX}jEc>9rp4PtTq+kf@Hqbx5KfAv>?iQT8JBQ-q-H8pkEwta`3JWt|V zVsZTLbDu_G9;aQSH6NPlO%h?=#2)Aftk zvu`i5^UATPuGAbOj%N=KkDAPB@h2ro_~IOM6Qplo7+t;nBFaOi%$z=t!#^&}!?aJa zz$RIr+!1koeVusijeo?E^Vg(K9>u4g`UFY~VyzmOLOXlHozx@SlT)9*(QY;&9Bqf>2 zw!L;CdGa~p&@o{8qf&O>j2aplG`%y4#L}RU;=6G(9((i&eCaFS#2^2Qe}Vd%ax;Ws z;xm5Ln&{N?3mn+s=ZT80=ioYS|>utR#uB^kR_3JS{Hh|u~KGQH6pZ^!+m!L8?6MOa? z#F7WOtIs%FZA z44X zXvJEj^fu$2mw$;>D_5EEriz*c80+i8uiyLtryCk@=JW|%Yi`DGKD`+w1=;9tx`vNl ze@F6q8>dd4!hr)HVPvpf1j}p4BuxZh$?}D$DVxBXuf1kIl-D5EV9(8F^hh^4C8q#o zWhEHov#_#T=8nACPpMn^dHNFkE# z@u$1%;D>S1Rp%u%!X-eYn?@ec$`< zqT%8-Io4??F0DXOZn~-4dg*2_UN8@f7StgnbyB+QAL8t#>*jdcCjgi>XEb9QIX`sEz^)$8v|J)e`hJdUf<7M^)*1B#@llQhbUEZdpgeESwV4MDbx9ZIq#1V{604-H zY91c_#3xZbZxK4%_!Y*3=1wRdh5euS(Th%HMQP&5r+q) z8_PSTrzBqMjhoWhPnEouVcog~(lFl_w;NZkwP5x7O>!mQf!xrCv4Hc)76@9W7| zkz7Eop{jlXp8xby=5r`~Lg4U`!?`Sh{Kr>gwyH8{LZq3m2ojsL*^yw@FUE<;$ha^QzF_dKJe`oxtVG zS4DhB&BNx8J@y2K`)=SDzkJ!uSd}donlC>09F{McFUQ@p!U(OOQ-_b>s-*X=Z+#QB zRn=m-XQ3c{%FIQ|FS?#Ne+lyzuf%7bc^nnR`ACrq+2!-6aHZk2Sa~bKd9wU!p;;pB0DPs zeM4hdwtR(|ptxTymi=;Z+puy43S}FU<)>PTN{Wy=-h(5@T{u7kOxpxHxG+zE97E6 zVV)LPuwWrpN*bwSz2-UH%a<>k=@ogyV*SQ#m{(tetO+^Zl7GYb3pjO_^;?X55x(8K zKfpvr5$4rYf?r?YWtOw&x3^wLdF?VRU$MeW>_J`3mWz8)Iz*(8kA!*=);y z%*@O-&k6D~x#Mzjb#!zZ%crcYT;ffl?Pfd8G8Bsd@v|2h5}uFm42wXdr)Qa`0nC>o z<=AkpNjXDtL%ORYw7R56aN*F0c;&qV_*eh#-%IzhOt#&WE~)n+K0XVZYPzxfC;!O> z?ds)=_`zTP6()+R@W+4jZRuJUnl>>$K7`KB9`K8$d~}Il8Yq;yWZkiA+tba@pLp|P zX5~tETrS9*tCXJ>W^I_`BNflb8wB`4ZXcZ2Qa&FTsbKzqfVY%7vhll#)IC0L_F*6=rT3jIQp94!N$dcp8aD7ro z{LDw=l$rE9>dVcm{_10-si!YPj8P{_*v3!v!t|a8?3SkbIv5CWSBW! zy_28y@6Dyk$N5;#DN@h;JTpJ7%unO=_79jx!uZ&jsnd8tcAY(sxlDy;b;?eKw`R>6 zqc?=T4^D;0U;5dp@TeIxM3jLjqIObdMzA8vyNP#8L<#+whk1xN6oiUz{Kb!ALT}To zWq|_EbyF^J3`c*)@zU_RPOK1y;dXB0x@9_DMhsad<;$S$|uWAmqP@Shk4*RR0K0-DREg&Z>lgaFS9OjEe!5GaBj{T z<+e7)-dSV)$KkJ<1$lku5J1$+#{rizuR&2hDvroE{ z#f!G$pZ@+=&4=@tAJbqQb|<-P5RXfZ=kfZ>|A-S}&3)sa{V}#~SdA1BdJ|sKH+95i z3G0=a(q!w}yNH|pFnjN%FaJz)#at;IMAYJ?%W?98>Yc?(i|soCczNq!F>sB{HKxqH~Z+XXNHmT zOImiF^%OTqrLo@cWIj=fD6LZZQ5Sp7B=O#SqD;$*=yc0tKo>Vr>+Uwpg9ndSL>A77 zQ79iaYK|kB?*)an6PAiX!=2)38GZ=O7orCqn_`mtp-k3EIj zs42U|VW~{HOrBDP(4Q@X2^&h^ASd|*Z}>=F9FL+zU98@L@kxB)tKY!-l}nHk+9h*bBtITsdrbIiwz2L)<>W=%x!Q3Bz@9EQ6^7*$-PE zHXl=~qIO0Pq#SUy*J=HewRT)hR~{^r+FQCed1oHS`kI#PdjABfo( zNzY#qYYv%(wL}AFwzonTBzW`-@_$$eE4wTkD?;2{_h~NS zZ{-p4xJ_)H_pAPSqO;NDN|BqHWvoW!{u9*JB5B67h?2N!q#?ND6am>e<2WA1=k}(=%ZydU zD0Eg#nBHt+z+toGROZ3_#N#&WmB)j5a$JVLclG#4T9MMDzum_D<<*$Krd!IB+-#En zShrG#tddBW?xKwoC0sDJeBPMeY;|DD9a<)4a*dEB@gQQVLki6Lv2_%A@05=dws-3+ z?m6MYQ+!tZi9I}UKzIcGL;c{Wm-Lv-`}3zy9LMp~d}E^r14BdHV!}p(b;qu2-#{Pu zh0gF()raIUGBSjQlP7WH$Z5$>y1-_@f9_B;Mn{Ly+}U?U1^RFe}@C;b@a_oE^xw!OpZ*{G?B!qM!w=ub>u>Edj~Y?1rsF#KF)IoV zKNb7RE3aVR!DHt0v~C!d+>}YYCML&lVE0G(vp@R}_|f0Lh#MV!W=cGkXS%#$`xg$= zvSpz5UcY<+fBoP7vw0@gyx|lQ35#17{PWj_U32rKsPNGoPT9vdXl}tq!|!X$wvj=T z7a#rln;-l)y!ZawQh(lCFN8Oo2D+N1Zr{MM^UdZhEZ&;-${|GAM~mH0KgM6uN={7^ zYf|#*X*JXLU2SSMcl0GdVEUZ!gk!fXK!0Bke)e}iz^{Jwk~wz%db2fS^LOjVE_vI$ zOJ=09D)Ehb%-vG<}_@a672Y~ec1Nclla&Bq&Ha*Y zsaN7@Og)75(<=wX0_g4S!;zC`(AC{*ENMO-NRO`L5>~k)qBk^ z%~+2=eeq@N5=(hZMAJjcBf>bw$v57A9q+&Ss))~^v4D>pI)p2iub8g6&BKUNaw;-2 z(vh1f=}KJYXUlJNePuut-}m=dQIrzt2Bo_@MOeC)?hffr1q39PrMqM4Zl#fKkd~J2 z?j?L?{XK90?{;QqZk&5+&ga~7S>>=6BYspl%r{kiXGwAMdZ5Oj<>H)-M%z)&Yx$8J zP#AsZ2CwB85D4dbCE9hs*7j%l1qoSKjalfgUru97=negliN>lg>VxEH_wruoMbRY; zBy&y5%m)=ta_d;KNLKb(mGBi`dcXL_c@Lx=i3_spYfK_2?9mcuVL{Jn&m}Ka=t9b> z=*7**?!=lXSEz-=#!G!$``)k`bPKvI$!71Mi{Pwy`<;m?zKEe_LA#ZD@+Oy$ZoE9E z`9&BPwq;-~wNMMDIpd=~yzTd&bd8V5_!I?*S)B~!#xnP}`lUbIhOg~kkyIN`JfDg@ zI(Fb%V>4>{)(1`g#bC-ODi9S#GUrrx$5_f(rlO`75HW(g)Vgk=aXSQx9dG<$=tvRT7q_#+}!BY{%of} zlwSzDH?fNMyF9^?@H;l^Q;}0m(J!o;mctEFt<;pwH-EtOo*vcf3WQOs9h4`3`r*N^{NwK&$77sM4oB@MM&Sa8hwZ0zLoI^gQp z+*G8+mzH(jw6C%l-G66K3AePGNAXbK(=V{QyE|H}=Fe9PbmKLB z7dxlRCx73DzM<&qWl|g%X6sGhUO##2|NFIjXZ+7)lk4qio2T>cA&6PGl`!>-=WT`2 zdU91Ogi1O(^;LqJtGtR~M)XDK&3eE8g)b?;A97@J)%%8OVurRzAT-XWqOKW?x#ExM z*nU+R_M2L+bbC#|+dIR0uj^qSo7>3tC+5?(V~y3SUxt7$@?$2FcC{BdXV2vN;Nrw` z@X6yN8+#J?TVMpZ^;GN$wdIDQ?@W#EY&+fY&*T-!_SKZ{XOGm>gywr`6+^A)vs}N2 z-B)5iS03+y^8y)K-{0N5p)omw`Ir-*751huKA#Dv_!~{JaXQh>?`F(*O)dhZkxw=; zEgm0P=Mv@)V{)kl&Qo0EcPZphC&0P=Gn2hu#MTxVZ$(o5`6hJo$nkBi(Ko-E1;5+j zITaP1=*ceT3=v=A)yK1O6`i!u;i8+h0<9JHXsZN*EwiVGyQ%0OnS#!wY^|qi`VKbn zf@R{~I#?bZH?+E-FdsPlG$8EYeaUKpd{WBUq*2E`Yj|1N#N0~w$>XkL&B;&E5~!s) zu4Ybct4x&tt}$8ynQk$XZ-v)mh1Tg<=x1O9xFM;qGqF5A+sFO}rrTrB4rn)B)LLsj znp8vl+iXE^ba^d%N##Y2hwv+$b9@HtLR%SGHGwwH=^(>%(HV_ zN64;WpLEMge|yj?=cgqdh8=QXYc|uTBXW*9eP?W|V`aOdR2MO0$32HJx}pB7L#_sn zQ97F@t7We{lDOmbtmPJ`O(!Ie<1g4oPm?<}Uz{sjVz@h8BH(}klnbw8#nscJwJ6jQ^sb-T!nA+2^;tlph#omQ+q3Vvs1>u+&JEbsO3~Ek{ zUQh41XZf<$wBvMqDA3xr!_SX(QPMZOi>eqn!Q}39+=GIyV4mZ5rKHZR9dM*98pN{r z9h#WwaQvnYt<9U#GN4^BEEIMU9$4?Krn>kJQLJK6oUaMb+jBmPloL2T1YrBp4~A9l+DYjsipfd}0lD+g50mw0A>H>bv_1E0!kJuV8X4&s zt5~eoE}y3v)-?9hL}n!yj<~+2)wi?n78qk^rR$l$n44fWb>4Wux~w)8`dFTT@d8> z4SsB*^p5ARUZ97UkP>WQV3st*#hGHIN{_rCOaJaD>8to&s+V&Z2d$l5OzXT@GOnBg zCqTR1JXqU7zSl<|((iZSy@^Ng$L5Az>Z7$QeSicOk_g%Fx&x%vjuZAYAE{qULQx!8 zC}T*?_7|31f4915hE*~$p?R;a!?!%}Ei`y;H_g&(5-z~3MgiyH#9!QY8}GCYeLgX# z^v48>yl)H4-*hv-;G#**D9S+(4hB)GTuJ+*XXmVjP`LI??zc;YUpSERs zTd5t?a(&zPDz%w09HoIAoXml$e+Q5Df@_F8xI!%*wjOl;rTOVn;1|1iH z!cq5XWR_DxSoSO}EpzC_Fz=e0=o#?QQeMeEBr~T)0|!SjXK6tcdCX*p4nAHKAal7+ z&oD(Iiqno6HAk#5oGfZSv_HUk%0?avGcIYRv2}Q>Rz{|D>Wq1i1%>jHCr=t6M0{ll zUhm_Kk@wbo>m*U=3|Fe{Up;La{gqeWQd;X5yY)ZY4sGFJeQKS&phZO+W$2KK3CVZ! z`y1@~emj+~6mU|`Zq+&h93P+fz?5`PyMOY5vPmVK(>e~$wc{%e!?j^tE#+>w&hR>= z5pp>{BFgeF(P`}CDw3~ox|zWWbv?~nY+_8EDE6teWzgukUlY$sDXc^pXmKt=q8~Oy zQxnXEDwbkn#ar*ol27?o|2|XYI~{Y0jgB`|mM}Tq;#5d*g(JV1BZ47NOSBI6O;DQF8=cvhS1)5TEysSOW^kgE(CXY^ zo83;x8sDY4-_H48h87QG{Ji-K?^w5D>wt*viAG*L7sp9B+xiQEn2-uKl8E_k+2>p0 znch?Badf1`n?#td)M5aKYCPen#OyOm#Zobgeo>pz`szvtqW{aCvg_s0MQ_o}kh545#y z{PrxJcdX>Vl-2vLywmH;^<-Ih{&pjis`K}Ta$wgeBdjnsWXV99*n9jZy~|K(0ZA(! zo=#q)+gikHOKf;(NX_40@3{>dzoKF6{1OxnbYJ|Q!(a7$-V~guG2R~{P2PD;rdQ+J zEvL@1`fYlW@c~|OGg5DN_|X&7H4A)_X^D!@^flf$1xGQ7fjZCSV*&JZ6a8jmj_rXI zfM5C&%jTTVmfRyCz2;-I0nZ0LXNi*OaOgC)KMyEa$xUtwPTh1xlJrMcRxHzXOE^qWa1BlEh9jietM?D-uD<^O#9A93%# zAWcWNuYsi}eHfA1R$*L0`ovglL9j*AiMI7-*1~_}N!B+iQdUF> zigGYn77g3?v0G^;3nnt-_k8$IS2wL%xqSWj38>m)Cz0{BanBMhB)+a1Fs=!BxUh!g zWTYD2`&Y49YF{g&?eI-T`UK)cMqLSKy^!p>soUV3kH##^C4m&_YXxczh6zONuPCrNXl4XtQQT4 zDaFtiW~O{Mi+aT-h0{3s`zzpTc0`4iK)|_ zI$W>iNuP3Iv8}|CXDam40SI?^uZ#E2l@>d@fSqXUPuBIW0(rn13kQWynnt+k^YF2I z{kZIb;A|TJn}ky1V}p@eRyt(`fUpdGOFr^T>y1w*hrOj3i}`w}+>j4rdbLtR+F?nv z=`y2({j-VCn#R)C{Ys>L6B~3+Kuv)8IcjDDQRQZc=`(pUbVzZwi2opoF8y#{3pQDS8VjiLsLt=^IEUzSJ6m-c3vOw zd!N6U?1dTBe+t-x*Hu)L22D1sxSrC7(5b2D889rbN&&~SpaXkZacPLVX8P2Mb(&Eu zw(z#2ZiX!6e>p#5`@!o7oTXlTRv3C3;mYpP_9t0cuERW-tK^N>R7>Ii#yL3$%~P$k zolA3WyKB}ySNmPp5R)e#H4*?I05FqBgOxL>+iTs9B*MrPhxL z`H5+~6<#nfGQe%m8$9(ic#%gq2{GryQJ7iC&J_B`J z?Aai2x`eaV4i3%b$r@ka=4NV)l(shYoo2$udX~X$N5=)(m$m4p*Ycn++CI9-fn;0) zSI3Ffser<5{F)`H{QIon{ZboTe0-TktfiRvinf+lgC#_&QFjBQGEyCGe{WM!j{Zm;_+^Z#o6p+Z z8!j(9p1`RE(+4o|MWA$(!3%Z4wK&TX(qZ+46mKcDR(otVY32?=f!XWlLm_;^!tVlo zHE=cdRnCcH1m(v^I0-cU3iE!HDVDc?v}PmPJ=(F#6-bz5!+*fzs-nLbiiZwLfF3tMo4Mv)B-6muvBU_6a!}aHvQg4O*=EiDVJePp=A7^w0 zXV;h4GQPMe8-3D!$f5lzOp5}Q4u_vgBt)Njlrf{j-SxHfLMMJbR6mq+S8TOcrpw5U za)^A(oe<|Xu*F6)`Ss;*X>Icx(BzxjJrimxN;Wp5g(<>?Em)to-re1X3Dyiy+8LJs zPp0Llr#b_T6#GwO^ZD2Jiji%l+H~*U<4S)A3q6BmqDFTOW)be-6g-{jJJY>us-lz| z`P2FuLn2>JTOne-r{(0&_|u}%y8olt6WMo1LpE!#K(qe6ks0w;`c_%e*td=zZQ3aH z`3g7k->ErTUu;I=cpRC77?WH%hCJq_%EEqI4>j7mglC7x2yc#SFB>KW-o*Uii_Y`> z+FH`z%E6_{JZE9GC5d;i_$^P4HvLQM8P^~e1c!XlD>wh;Y>*-s=&8}6&w<9DTqcUi z<=iAG$TQEIZ#iL#G*86<2<-cDpO~cE#|4y-vl&4cy8dj9dfqFxL91P}nb8ks*s9u9 zrDUU{jVC5ez3oJP`|_va1BDrwzyZm_@zRl7X=dB^LjT~Sfu=lxNR`9HK zo(6Bt_m$j`>7=o@#Gag&A-@7y$dGkZ?(OF-6J|;a3j-N`a{uqixZml{ZlcI#O zhXz;;eJ??7vpO02c7Z*%JvWuHDkHaJ#&P_-*9=&JADf!}O?Td?;}e8e51}yAeZxaG zb@-w%AlvPULDP=+EGeEYEZMO55PLSuu2y_KxKEOXQQ1^*y?1MHC$V>v;QQjr;4TWc zqmuWYmqxE}tGm=1q!(w>oHMhsJk<^KrDwdv6zL$~EJbX1xJD>Gi=X`G8CW)mV%|zM zx7iq*Rz#2B+*ax7Ejk^s$@&>G&J@RUs*k;b+>80lthl;tS#&wu+k`iZB@$fy1@mIE zx(|14ly&5#Ehr4OK2rF+_NyTlR~m24e2A%1YL!=#aU!zf~4!DMCzMBuxz`A25$M z=8spsBJ}S=aikuSK#%r+>nGwiCz})247sCPLQBbZo|KvYFigPGnd}EdQs3cMWL)*F zYLKxi^*ayAbv@GLKrFkxtR+{9{&2Ho@om7T&Z@>EPLhU0&bi2F>m4Q&x%UW4>_%J# zv*x$+kL{=)8Z0*d9`h3LDdGq+M?m&iLUN+hvmkWVP8sf&yQi0X3SlZuU5{;UMSn4a z-+O%KS87sJ@lVk^;2Jh|PLeQT=2g^-IQ5c)VbjBI2=;~w3aNhN&`(EBhrp{%nfrg$ z!i0Al3HF-aYDhZrO$Y^fPr?&e6V6p!{THHPBbnL}Jm0MrgPb9Zu$ytz>3C&uLTHeV zBQsV5JuV1hbu77I*;XUzrmqT4@S=_D>!qyZh=i2Vl+w#ln)c4v7{~k;%`t<8!{{j} z>WISqINX7TfGY_4s!|#T9vB2p&61my>8pHH(1}eTd<2 z_VbvxfiV@=dFaXt8%j zjP=!?NlsX)6EJ}hZt4o2eSp-wG2taJdO7}C$_6<9K_pGbK4N;rWV#SbS=ZEhC)vNPThG%kEk zluuJMI*@Q6J19#?Ox|_ZcR@%>%B@9cmb$XT6bYlp#FygVq5zdQml8M3G}NJzcheP7 z=hYSAtlmLS{)CD>yl-x9{zziAj%sdcNjqDv6VzZk_wjP#R_(^;GXN?)3JM81pZ*a? zM@N?=0Mja9**iLRlu^p1I7n-~TJgHaP~*qXC=LV27a{|I_WV+PQq>-#x_0yRG_Xnq zS47!f?1rfRUL8M1SgrYDZ z(q6a=0YqcRj{j+4OJ_Xv)z&vl2D{F-u23T)hr89Ts~?L??&)3i1$Ztd{7)<2RhYB= zfAij9tm2;+(j+HDT&MFn-~JLO74X9*U^D2v3qdAb>HunCWL=V{#=K@$b80Hr*k!@N zSz!)7$-Z)XjJRmEDvz&rnuQcB&CExMghuDq`Ts75dTOW0G@2-=ogc-Y-2{%ECj0jV z+h1tnZB=5Ijm=+7(x^zzYg15bn`xWWkW3ryWyNeq0K~rXf+84l%w#F~l z+)<>0jQ4c+?>~b0I5-?8iIRLT-wY=txT`nRjgs|`3KOmZiZOVJ2Gk+o7?iaCr=E+R;};(zD2F(Q2(U;cwS+~CCu1vsNbUO1`sl<+Qg-lV_SrG$c+0NM7A*Al-YzFDJjze15XQlOl()h zs>wW08|2i>4I+kTZ*OhoHa9N_|LwsL5D>`876|C6sktBmi(26^fRh6Qp9^1*j2rJw z7RbcLzk8i!Ea8G})cOUhsi~>Bq9oIgcDO@A|KQ-LD>a_ZX@6RWTmDCFPBo!Us&(VU zWJI2HG%R;5@b<@hHZckT9irWXM#QF@Un{c#TvlT_4R!s8s|6Q3&g(tEPU5JX;>H(y z)+L08C!MKk{WSI{o*T61sOPcinf5Qv_qXI}AJHNSfHRWKt|Oh(SdHGIos$YKE;_+4 ziS+F)Qc+_wQv*=2%7CO5=i32i{ia#whKvwc*Yk)s7=H$y+6dF-dWW{;e*vJMR+XW& z^k*SpUzZA4hrwFT7dH{s$WB3p-7Y@lx8B3R-B3@-MTc2J*xjT?#~#SNxn-I6;{cg> zjE|CukD`r?&*?I3y7vxk7dw`fp7EpZ`HM;;;m}$9!Gj^Z3L*kH$XdIi7FZj1o0eWt|rotZ*J&f1{>DGt-aWUo9SaVER_ z5ZVY0gHfIK-dw?$@{sc}R+*yfL9ruIe}h5AMTPMSle}xNkM{EVX02z<*Cn=*5~ddT z6qWw_V$ET%-DB4^yx&>(GgQHq_4(jSq}aB`$ls@1*}x{+JZ1r ztCEC+VOY7pVH^L#_@pUb+IfHJCDs*X1je=TYNY|C)8nV)`fCdQh{6L!exK8KmAnlQ zr)XG3lLoO;2-cr?Y|oB_+#ik~t~YQ!PK2m6%{lvC-Jk7O8TNm^S9(t)f@Z*{ce?Vq zg}TG>0y`^hrmMQVH71E$mkTweq^9EzXMH4H9~kLJm6{30)L< zk2S;2x0EPc74kYw0ek>h3FvCswI}00Jc`CdHA^NJ746dh7a<7n}QGK{lb)W zBf(BZwd^Gzpa&9`qE%DTHH^ACm<@Nb_>-RzAu-Uo%@S>Vv90K3w?jpEY=;lFPK+|+ zbU8<>F&)({*J(k%7;@p5b;T)5X6svUKZr?2)yG3C$;%__A2W~ygCezc8j7nbK74ki za`?X7qf_$*b?BhR`vBh#`(~ify^&VaKw7J+i5L&+RFzoIXQv;^!gRnPu*5*Q5DBC- zzZYR5K*JxAXmgwI-$eD;))j&y_ZKWR4JauSpuv%Cc33{NX?tuX&J19iC?`TClq&V# z^@W0pTbws{Wr37q`KJA9CqFV|Nl72%{^~EIKKV+Q!`I!rUQk+!`witBm%xz)$o45&cBmL)zOn~v%O|ZJmDJ;c3n62#F=DFaQU#4F^7T?>J zca<6Jg3%0D`#lQUt=1qBnO^Whw%FPnrnC#CLY>8#m%q1jFl#pwHe6lABqn{E>W@xm z-dmN~Prwo=F`evU*EK8s-Q;dE*fiF#=WBv1 zD#HM4aZl|QQ?>UZFM}D1%S9bng~y0h_@Ksh2iZJ7(pZJHbmiSw*b+%`K&5NLggf;J zc0=Rv4Nlc*`~bfEN$luBOd@v#W-q7R+cIZ!H_|-WJ^IuRbP%N_k&X^M1M5c%6J*-n zZ#(4X@;}-e-w}A5vLq&N=Tc`cYw9E)Tbo={tM(&HnoCWrhy>2gl1yfbLAJlMVrBT$ z7;>?v#YLUJgo5dp*X^)6!eP&Gm9Ndds-HyTqg?hn_FUneUjJn0|RdX3s*n z+Z0e|rL^`CEG5f?naYrA*&3a+kl=>Wmyec_mJu>|#(~wJE`v2eLPmxIwUcWu16khL z*uGkDtY5EBI9Q+2+{BY7Z)z&k(`UVR-~GcujW;f>qw}&)@`Zq1&F67ZuGU|R%VvER zTc0Qmn&}$wf(wTYwG-F~!m+0lck({W%0pej3CWak+}8Uo`pg^Q=h$kVFN4qZR6??H z!Caa{4jOR}QHo9q9?v5QNSrmBw;8O7iYv`A#VZx!`tsf8>5zqLWO_Qv>v4&Qhz5q_ zq>Yp@n-_dk!1@t^Uy?xI{MWEAAq8T>0>R8B|5pp4so38BmFSjM-6h!$7dHC$}3?X7wdGvRBjU*<;lsM<+1C$x9u zjYiBXDJrCp5c&q;$S5f$Yq#EUp}bimE(_MgH+b#n*?WyuC5%;Q!K6tH^|+7fuf8}d z+RSH3U_E~a7hD`|TI#tD{%aWyx5SY}cs4$|(-)X?lq3Z=>N4aG41rRDdYIeJ7nV4S=WtvN4r~kg%x?p2oQ~>+% z!e?#W;&-Dr+IPoQNPm_WX#=HZJ@I{kt-c;O&>8EX{g}1hKpU%Ac?WE#A! zT+SN1TqJVA-SSscuSX~j0>=!*VM0 z8;BQsbbZhFtg7vI@+^;oCnmrs$$=%)3iUUaxklw`QB;vbAT}y0HC7KImxz3Fi%h;u zpJu_BM8RNm*=&N5P4n?S^h9-3x_%kb*wORsZ(O$FE+=OPFgzs!*KH>x5+CaK1^z0V z(a^IqXZ>~;jphlFJ|9`xE#nj1Z7n>LOGA=&vD6;rtTU{*1Ql?JvMp-OPCh~^@ z9*Z@DwHoK~p$ewa&fbfa(d5}#%ca9zUQG=HooAJNq}?S`biM0>Pyicx-{MiC{pn>2 zA$GAIWwxV z{aN{PBZ>wdXqVu?Z6=M!lng&tyLo3Ae|CL;Yq(JVh|e(x)I1aP_{jem&JCyII=zio zes5h&(yyGwHSVaScvk6|t(}{>dw3Yb8TWCZW)xU7DQQC&Yz=Yj+AcdopEgaB? zM&Pvj)6aFIsIXN=QauW(d+=p`YdL99CQGBs9rnWF!UQux&;&%biT`rr_AGvPk3wAM z>N&Ro0DehFA+ld;;@I9(RlPt<9_x3mDOb)EuwvdZla4kC&?l_rn%d$I9ooiI3-5CY zznGrl2MSs(RsESQrFW%^y9P~)g#2)JNVUX#xActakIVWcaLU9$ClbH+6Q@m5rL=)P z%Ql-%$Y}a(Zp9ww_2FXl6Gs?L6PX3&M{AwC;^I;sgZa%(+)aWcSZ(RTlDE99V!VSb z24hd0nO5ekdf#-hx8_CT>#aWnDMaMjZGJdOY&u`jtdur>cIL%dKJ#!`45zG7y?~|| zMuyp^C2;8UG^#YuTTC{L_b*_OR2Ns`0_6n~y+S8gG-+839rPL;kdW`2o%hc15|Wei zRGC#pi8VAegGWi`%)|{6vC0){qWJ8WqvA4fNkzW=7rOae9L+(dyu1C_f!U}X{epn? zXUG*(EH}s3hjSZdy*5+~%Ijn{qwdyyUFPB{P~oApi8IalIcfw?YFtLtdM)wA3*_t@ zh2as9#g(ubNVQ0ANWP$5+IjQz{be}b-7QXZZn@+>mk5T2>TE>4!iZ5l;UaGpK|n`X z+vgkLsK(Lh&fQb`N^Yoyuy7RI8?DCuk+@#JDGbTQZehWJQjhrn*#0RIsb3#OAwuu& ztJ%CSU!7$(UE9&?vc$g`M~N51NFb*)s0}s@ARRmIt%bVl=^8>57?=up8@-u^+5&uV zsY~m|=;W++aN6F@4z{JBR@K&GFMfC6GP4?4ZDaIuF4}xS#%mzq0djS@7>OiwNY5bb z|Eg_8WwtReG=}9oU`ajoXsI*BRVSH$OS=2IuNTf8FE)G~8*3uVGgy9M`I=&lD8YgG zWzt?zQSdfaLZ#>5pI>YAT{k7i$HuT@Q`sF!Cv1j{;i~$&xf`n2mu`Ed#7=#mfeKBlQol3Sm7v;p%Ew$TGe5t8icM_1Oj-7``hJT2xBLFbqk|)!`wW^{ z;hWf`zd5f(4!$X?oc_MNx;9aGaHU4?t|4um?-j(;NkEg2O5hmP9?dgdmWL*wW#1H& zWgl&^-OwdQr^)z6M?{6^$P-bM(QwGbeg}?4F)!@eD8HuYSNF<59v930q^ul$S3ohf zuI}{+6ER_#P#g$80Hb}uG)eumrNaHGDKR-w360)19HynMA9x;)>Kfm_h*WZ0k8ZxR z33=BD=qEqze6wJs-(3`k!(087cEGvv<7@wsTU0`Zp|GWOB(09lFF=@|rppHQ=9OEG3 z!{_I6o6p}bYuByTI&Qg`43E4$dkba%k@MjV^^H8WAdNwf$m(mxm#yXH=)tujLdq|U zB*k>z@V`u2R1hx^<=iywMyYO_aT}x>&)=CT(bvu=*SQYtdeFN{jbr?nVo@%6js9sO z`Il-!?UuZ#!m#!OW%C|o&XNgv`npOAscd`zVe%|Tw1rNS_IDtL{JU0rRdp`4*8kg8 z8ck%XdosDrz;>gBMcG%z8$8!BA%!1O$_lN0hnSb|KA_DA>avge)-s{5vb6rE+Bj?4qIEkFEMNaTC+M_>A<#JDRG_Q73KO_t5fhxW=BQ`}Z=i($h2 z3ee)uwYN2qaKH6!iW>T3WTSWfcaO4-2PTVM=NN{(1I-6`Jmo*(9-zKy{|}9)+(-Uz z#(cE1a)CpD|9;my$of5jhlgi!*Y$EhPM(7x?zgk+MU}T?Ddu07Up^{6;VxBYKct}o zT4Y^t5bsBoo@nTO>doUTckC8!NC^QTTVZM-FJ?v zjI19a%No==n%Mn+y|xzuOYd(pJ%wA5%aoRp*62|+eLgB)8amOz@u!yWKHudw&#n5A z33v-=H`pZ(uCAD?;DR{17%JQH$bhP=J+M3I@#3=gm{q6MYzZVFTVbWq*(@c@MU##R z_N8a7L`sHG@;3tncIE{iOgP14W4`x%P?{@p=Qjc6=mr#1xEOy%*rCd3MryJv?Lp>1B<&LAZ zTB$?XWQEYPfZ^bqrO+d!4k1TmX9*NvQiUBlq2X{a5H4(<*H?J%Lx3^~`s?%C73RjP zsdG=E^9@oQ`BUhel`#hhgL8?0logvR-ejZeIXf^((QOW> z$U&y51VYjDw++8KMDv7BK61Ff)Bu9@6V-w;4{dJP8j=-G3omeiuzIXE4=cTXN*Ja z7W~;WE4E&~iay*$p1*>&8BXY3uMUh*{8TSlle$6$J0v$R+kn=Da$h;@7Dp9;H~0W} zqf1i#r5YG_D{00WWB5}uKMPD80T;+on)SxR31wxh+;$!VDiDN%VaL-9eE@dLBYqpZ z{}OHB-YGc^!_#Vz0tSrx&}`Mq9rghWW4}vUUJ~dRE9}<$EmN9@S$*;m0&c+QVAmC? z@5^hD3yP4AWHz}cN=av7iZc25f6e6XdJk3zzjhHirbFa$S!C|6u8(QIZkt_;vXY<1dh zKXLl;b@g%Um0RyLMmYjXcwuewC#9Gq#?K}fSexrOC@86xXec_0)Ur~)EJlduY#cqnLi*eK{n zf=_?$=iCoVryn*OA=1S>&GIdPyIy_!1~JIz$)+}BsS}x=RB$8&NJCY5+@$T_fjqhD zfJTbbfVK1$fjG%=v!LUEZQVJm4QLq)fyacziLH2IoaWoF_x8sL6d^mzcYc!$f}orYL+Uvx_~kQo&0D-0Vqw4>UZQiN9E_aV#Ac^0&9YK{T~0OZS^qn_dR{Wv6Oraf}>mi?CWt?)JYY(n}>ugV6ck& zA;u&XgFm)A_Nt^Bfk@GlYtmJ)hCmP^0mG@-Av0I$qlPU2bVKmhj-O-J2!Q7~Qz4gB z0Z#~jY`d^E*b5tPKW}E>CkMF0>395i+9|0G1RKYYKwI_(5Omc0HLqynOyYfcABr0ZjiKphx&;*72x5Sk?!wpW25Ji3?qVpG^DM6?aQ=Z2T%abE3peuTqaQkJ(A;=sO zWXs2`z$hu-PG1yKV8|R$aOa~dQeWH|1R&-*3q|2rtcTx0@T))v3S**v*{3ewv2a;qXE7CnTAG$>4vcE2CP z+#k_)>N^&6TrkNm-5i8i#nG!A1g^x=iKh|L!yNuYjF)bpD?fWx%u;?DJ0T1h7!2E7 z9{{Lf_y|=wmbt61j@5ut1_BmK7^kd#zU8`-cFYEXjW8k*t3d83Kk+BO&P>3Zu9pIf z6(`d;TiCnO;Q5jl7Pj!817Onu9s=r=;PJ~uBG?(P%zO5$8xOk-n$^)57uJ1gJkY1` zdU#&PjXl7@TH1M~c_hC^5e6x?TKALtFT9x)MFp*3;9cBkb}aYAB<-~b?mP(Mt+(dX z@QQJSD_{$Yo2NwRS|k9Fu7diR?vDW=H_%<`CrVj;=rmg+cxFPwxIqpuJJiL#mCyE2 zE0{_F)9T=qyJ{y_K_7lzy>63j^s0h`Xj3L7teFHs^_N=rOBNlC$hkq80BNzDUM4mU z4SB0KO#4f7Ue1iD#TGj#WJRGqNsB9HqDz z!N`)>iej3t3??E0MLwa9O9OVg8bdYb#&84iDM;p(I5RW;8;O}ayXGkL6QsFV10f^W z`Tms!#9+ypbKsQ;NH1mNAU42x;J^ulfKdyJ&lWCP{CE+pCJzWKs5($UWR?gnTr2y`l=xCn#J>{Fa(!`;VG1PSANw!m=@fydWwF=_a4CtlxeX8_8y;A z_{ng9_M4EpB&Rj>0lN1d1TSVaKDsw>meTAa>^MYgX-!V+-LeIsbW9@YVd4RZr6tq4 zIIO~(d?$jAGa(ae{~RHIa?~sl)(X>At%wULYBC_30%2+-RaI3#%6E#mCF`_YApUyM zzy?6y_4s2MhWFH(>N9{e(`21tT8x1%U{R0-cRW>~10q}YF{u%XQZ&jWbYTALsqf4< zEwK=!u*9Z?O(^IdjWGc%4rCulq~VuESNczLAk?K~u~)CuwSaP0Iy-=*-A=Hb^B2m`zavb>I!0M&rFL8~PRuP5j+Q#`2sX+-p!h4Kbp1KiG|3)dz{XI0unt@icljkV~l=n^nv1KZ>TO{SbMl8xT6-!(I{!LFq)|f0Mk(Q zdxftdnpO9Qr~=vYS50@Se;y6NvE&Z0x;#1+IZ|9^i18(A2fNSuHRGuv2o?}x_KPV? zTmkwiM*Dxnaca@!V}bc~)(<0m`CjKal1b zAW~Q0OxOA=9&8=Os8aua_IH!9m=^HaF@XH zU`U$EQvOnj6OcLY7!=NTkF)eBob*MYX{8VQp?+>PevSwwMqa(JW9rD<1QW^=qImHb z^gVCrYbJ&t(9^l;sY*WE%inEUM*y0>({A6a!`fHwXi( z(**(HbW0+1LzBDmfTK6^p84;TV%^O-fa3{th{+UJBYaIn3$t-YIDNN{ z_0k^^(wFf1h5ObcB5ekC8wL_)`In{jOyvVZ;VkGQ2$)OntCtB5V|+<~C?%YxA8M*l zag>FP6?P#w;C1kHn*>FPJcWiNL(W9sbA-4B2u(DxV_AH3FhzVZQgb>e3#(QMD@YQ_ zw44Cf#5KEFs{{4_-yq}J0)>~|lMR4eGK9zS=>^1s8u;+)KwPbxeBQ3R8UrMG)=dML zCCx<2aJ41y`6zM`1|Gmrhy&V^vMYD`)w2d8PeB{ZBAwWvmh!PPs5i82mU9|JC<2TUa|Y^aXG){c%dqW*H5RQn*GBwX(MFqugx)9ism?;l!JfNZr8JU=B z9F_(13kpn3O`q#$^EqaHxIFRw@4t6MvXbKJsWT8n?p0MgoRL+(@oP;@jmq@E^vukf zkpC0em+krScPs+-A#YtX@%wjo>2)2xr>uUqzhcD11d=p>D$>FAqcK2IA69I}W`eof zwcEOo{~6iCX(#{@YiWJjP$+*=Nw2M|17J@4a)TE9l9H0XXyTcbm8jTQtSMHZ|K(j> z-rPtNfRPJZoHzQG3BXu8xw-H4KeZbB#m8w#;$*3CF)%WI^feHfoSGUHr0bi2mUGf= z)5E^mkKloAD6brOu`=EN3rD#HomRfzd5Na<>?#^sA}?&U@SKb!1okCDvRP)4mnbqt z>dcyFh3Qb%46Tf{CUcIyl>&6vcuEp(2dyEFu3OPYe4u+4vi*6ZDPuL&SxiZsfLNkd zEb4^IJY-!0hz`qyc7irU$?3>ClW{009PgKQ$_#cS2$DEZy%Lv+Hc=6TbDsi*(cdJ= z!11BSAYAaxaQ5+!ZuMC4MAj%Ts;=%G>H!oH+*KxJ)K0JYQcCLJ|@_nDxFU>5u3zr}LxGu`Gu>d+BVq zzjU;8J*r0%j{Y53Gk&Z$SK)6lA-~^{02Q_m2uu>uGN{*ufDqP5?7OxWdwKOHJq7VY zMQR#4DzPe+k#Q6((B3Tc4^cqk2A2Rwlp&TfJOLMvN{kNe(bPIBQu!Sh4_-G?kQDQ) z5b2n#tbmL|J7=AN!9j6xhc~Kfo2MLYzoQy}#rO|zB0AtQLSYlSi-B=%=4IZazjn(f zDj5ELZ{M{&&}8p8I!f_t9v#l4@;G*`g1q8KE3H?ms$8*52YZy|Zq_B%mRU$#%U@B8 zVM`oO$HL=a|71~YFlajCFt;b63A@s1Ucg&MSzcPX%B{O!V%e!i!#b_7u#hl0DJdZE zfzmv`hy;xnq<=n5ts2(@%XGmkCC3CcrN3}r4tfX-8^n&};phzz?3eEDDa}8nDaxl5 z6T^((=q4m4W>24zWai3;W+lW?QlS*Z=vjGV#F6e_QI=z5-zfSbA_p=c0p6cuLa?%qH|g{SNqUtHfvD4?Sw z#qC<_8j}>~(0q004It~;$y#4qm+ay{Sr&d{W0X{qYL=bbE}$Pea-|C~mBgC)k#LMY zYoMFvHpj&&Axe(htAI6J|0`m?wKE|#)}$xld0K3e<+j$=vX=)9A?=K8=tjN{HY*dC zL{eljz^pRV5)(GY+!CDo)&pU)46Z@$eMrXNCQHP^3s+ak>0O5Z&UV%QU z(9W&rsQ;&SW`V(`;Dp3PoZjaX6d)5l6QPlT0rpiGpR$kjl*)E^efs~QnvH88Ev&4} z4rVK)aMUEmT`%Nur^TPbEz|axFv*3(o}QlWnP8VcP6`>r(b%eEnV*4D6I+;Jd3kw_ z-WQfRVSQiB_6)f{6@uta?B&={WCW*T^crrcRMmS@hS|7l_R9C4Vezm}UBHsGft zT$#6nKm{IKAmE|;zZi3a;8E>?G-Y_PSPtTEEJdU|T^MhiEo5wlGO@hv)zw`o%HLqr zJS8AhebYS}VzjYzH9whh)`z`{TT)#7^Wp9y^6lj4Rb&CY+2`Rd`%%C{^!rr4fEE_8 zl1*lkH@8WXH|;kf54+N0X;UQfK!Ly1SxNYrV!`#b$Hg{w_sYeb=*7kP|10Ubj_auJtqTrP62k#X&nkr_gDjhky^d~RK&%(ybTMy{{b zMRD!8pL5=4pXYd;4Xm_IlwlGmKR;BaA6UdirH^d+w|{*E*ktsPYFvE0 zzEkw8F$c~C-x45_Eg(8itU8_EXJER>nB*;Cy7k@8wR@kw1bpV_uf4r`VPUOj5ZIKR zOfe5}lJG^bO!xO7Jy-0<@G$2jSBKyO0D0m@RNQ-j=En6D|Pwd@*6g4cG+oEb!Jw z@gvP1)SR7{GOjQvXS(s*7gznL-D@;{?V*mkg5lC{sIVxX|95yjm-<@ zswsZIp>D};;QmAHChhl^HAJVep0YV-8qs!S-g1l9<`u+uNRIn+JJ{I$%nC4jvan_8y#!OXX&x+>+qZk)aKRiSS7(W$`uh5>@-||9p$CT9@WI6DLtrMF4vpyY;l)Lw*Y}66 zLLi{Jj-8kJT&A?e!JlTXLt48+C;P;`r9Bde80l3K!CP{?>a{U?-y*;GQdPGL}Ug)x2zgXy- zGsw|H&CF`wK+#Z|M}1gy29bN>-H&>=7zh83VF6TK3`qXs!mys_@5m+HGVamE2L=p3 zO&nca1LQ1Izjy3WlVA!qj{3dRhL2PTJbFK>eX4gLfAct=-1q0$d4Jc`^d5)oOGAsK zpeNp!CLJah+l^JcLpR;2)PUS;PYqA+ySzZ%{A$ZJuIA!icf`QJaK`{;l*s(K;rvJS z>YAGFC7shyy6Qmq?|;26WKX{MIy98_i-m=y|7LKd>2-4~8^z{v*!5N*&ieY4+PwD) z{cF5OPilVCogVxLa+P^FW$2cfMy;sUQ=WVG?u8-R*ijd~9>MsoY6UK`0X_wNC(;dG z+5tNszu>2QvKMu8k&8xJtE9uMfyeWttaqzpH0$__x4%tI`F&mrpm9oLDmM&VTttdb zr|5gfv!@XRLetMpK*J-p|0c@2-rU}<-FJ5+Ns(XIc(mt}dsLdj26Ot`-s^QviWr=J z6Y-s0-OJkY(5`D*(`>I=cxBrT2zrXp)<**G$LLdTP&yu8_iS5M6>-EE96{*QyuMgG zPOt^E2w2646;sqZbvJ1La+rD^LX*=9+;x1oQ;_9UGyH`I1e&M09;z2V`(@H#zF}r=@_AyJ z&n0X{GO*LgUJON&g!?dICE@K$e?ig>AKAN=(PV66P>8aQ&3JMEp3};FTg% z?;pCM3`AfHAN*&@0)4QoEt|pBZpWg`V@(0nqW83dlae8t4U)>MD13_pJ%X;VtpeXt7Z*Rlm}L? zmnEs^-Jsu-lD4+Cl=H3O~zTqtO2x4~ngH6}!(w^BeeMl$31-~$V zk8oSfk93gg6-^iv$Y{7BUxt;*%XkR2^f=T~9JU7AaFld+^*bV-a~Qjkq3+nW(>E1$MM`6idS% z%t79TddN$vb+`8otV{m>(LgJo(kA!=7dIqB+klsLXL_PynEJCW33*ZX0=?|2-h^Mw zm;m?SEsFo}j1WdugtUT3HG|7N${IRZzm0f~#GdxrnN8EzG!i|_9P<^>S`8j$JKCIc zf4Gq8+ueWG^Qvd;6VJ(32z5HOcwbe3{`&|gwXox+;nDH5FyG_bGnHhq-daiNPd`1( zd(uQ9A-DHG_kUtwO8F_G8T9SBm$)`!i&4R)Jz@ApN2y`V(yiZwK(_4d6Vi~25^pt2 zwUGqpLW-n74({gIiwN`V?XOLJUfI{m+|pF@y*4G3#<_ukWLz(Tiq8Y_6?YNPTs0Th znQ$Rs$MC4;o+$F%#s*ib!OGJa1#^AmWr>Dmj)6-a+Zk6Yct2Wa=1?K5LUEE(lM4%@*XwsRt zt#@JMf0azLp#W=;Z6L<`N+N?4`=-)0LtGv}8zsa5qN#H$*)Zb_s69X4Quv)qvUcQc zDS(A8w@mM;IhE;hoDJ9oE+qCpd}rgfoca>T zDn!fAZ1fb^w>`w1;p-cBREmc! zjrB}$3U|n@KAb7p#<(+%mV?`tPn=nDT->LKCOTHstaO{e5jola08jy7L#hMOHG$_L zmIlzHU#tJ0N+(-vmH?z+Fg6AIV_bXfy`V#lIZ*E}y!F)INeVn?c?%?|fnUzMYyrW! zS_1rgYD{Y?XN+=UW$#&T;==~Fq)b(Qq)3#J-kkAP6^P+vlfLBjc8uKFnL*@(lR9Xu zs4CL2J0(X~#pbL+CK4)qM!T+bjd3CUo!rCMjx4=|hp&1v5` zB9O^TT)&qj12HIg-gWOw2>|W(cHT`d{-F2OQ(dBOH1@dbNGji4nj3rBcQKaTo>pZbMqs8Md zzw^O+7qD|nv;Z`4<~DzqGwJMUIZKLjL{cRZh+)h^vs?Ti0Z;>*_4DJpZL8yV04+qb z82>eQ0wYlQA{TIj({HQ*76hoFmsdQ#)xn1e3iTQRZU(eyOW>S%mWS&wqw+rhR};Jh zEqk-&d=ucILcb+EVjIzU$>{^o2Vew7D&y!ZwL8(zGtr}}#KHZ}IP9{sAp#uxU%TPm z`QH`qBbChz;9|PHG}tBI|7wCY@Rpc-)O4t9W=7WtEVwNnDEyR#^IBr1hb=>SY(9W= zOInL<0d_=B>MRU@GF+%rh=~B7G7Stg7IOTpyU^<7-?ZgL5gC{^aVCa;W4=z0Sv~UH zshh2BSg}7kSr3zNE+39t7}uIYIm1-P1L6`|8z_`We@2iLtfd7 z8nd|QILH)L`gB?z;&jjePg`7+Fsbg$V2F)N#nEy4%E+Q+~0>+(_m` zR5Kz(MgadDI0nwex6bR##sraS+fD$>GH871t;aB_EtH=Vsl_*pd`_8G3hYh^*I1b{ znE@tKh0%*dzJqZSm6W+AZ%S7F&*kN6e%8h)C@7_r)WQf)@Oa@@)^xTj@Y`%SNW@a?tn&oF^lr;7`Cw^H%Kv%=7PZyR{Cv*3R zyMnvxI}2&SSe=I_=TGXh$B*Cczb@&RG$(Ft1wDH7D9^K?c4hEpI{O!6z)eifx#m{U z-mWQLso;OkS&Uh@^KiZeoebiEWDs|0qn4JI8}tYWi-mLP5IBGS{GC_jSc)HMX;#|_1&l#T_hoZC-zm?ySE|-a zISSCnxPdF5JcR`EAptXNAgk0UYlG0-nV0n)9UW3ibLwrIJj2_xaf^c1ehC?IQh#() z&-J{Fku%Qcj>^4Fk521ZnbJ|n$pQX?Bzbvx`L>f2g^;jmK3w96pO3sIoLf^mf_u&1 zXW;!S=f#VBU7ME;I~TGCZUcSEEh^ereqPlJK!(8qGs!?$vwO6nZWj6NbW$i4FetVK z!w;}hcN>^LCA@g?!oC5PV&!?E)O)Z*XEr(3u`iQ(Sg!*xJpo>D#P%Z@J9gjk#%rDPxzzp7 zf&qM{L9HU)_j1$c|4ITWg0aefarX@j+~QZd>9k^&-WL-S1LKRFuM#pkR+Y0}{Iuja zKXBmL@!tH{9uxjC0W%F&p#?xIP)Cx%PU%FUgh%>vVU*5DMCHxZ*MwSl;7&sXcKKN?v9AF~QYPHs4;Ho2eCuEsGoGm|Up z5_e_#*yt$VRnKU!IL+8{4z3z9x!thWY1mmgCoKb|?s6mwUK{Y9_yevT=u{ZG)nU9x z4y5B5vCGp}WQvRrVf5y{u3D#~4YAjr2r_=PFv~}8OJE1aq=bJoA zANaj&-1*DlNW(q%Si`G%5~;vc(>9ng4@|Uu>xxAw9>;##UE9rvot`wg6J)OOTv=>M zAGq17jk4Oh9oX4&Xza&FRcPBgh6|juoDk&Ys@VHnF=4u0TyZTccMe`RAb(OhJP^mz zv&JnO9@u&RBpwB8sPeN4IGS&)#I9lwT&Qz#qs~a&+P=V_u%?hf;w(rFH(P6kHnq%6 zd6GOSU?_%!RA+5WOA8K0BKcnt!i-Mi0JFIc`dM5gSEXus6Msg|@_Wy|{vy=%TilP_ zWN=fq&dz@QZgGw0=j)v8cX#JM4)o-FJ?M742ob`-)w^8qxOz^=GhAr@1#+o}c5uCs$Kr0C6W|+8D3IXzA_U|o z1ks^+ksJGVa?xlE2vVHHF36LM4%V`M#wE|5lp;zPuplT6Z`QYjIv8bCd^e$G>1R7j z@6=ROR!S9Wgea`yEkKI`dE(s}3^hr-^2%jj<9ZpFTg-0eirww$U&fW*pt98F4tbpg7KqOy2$~q81KtsbPBrcpQzkk?ISW2h8M*cfWfl|Lcs`Xkp0aGun_D3Pu6FY2 zzbo@w$#39^AU56By1M;jZ5@p|yd*U1{>xmsurOIf!P?Q~8E+?rmj?(b_MNj+&7JR{ z(PjW{^3@sCQ(~zVUo|gZfQr^}#n@Bhu)MPe4o5336Dnn~SN&Uz-4=VN&14gdS11vZ z4GW@hV!oN>meWeOAphr-fcbk&bjS2&KF6k&FgH@)6WIt+^Rnj6Oe9Tov%$?heuFPQ zv_U?6!Q+P}W;suEJ7p-^r5!aKw6?}xX*}^joMaGs6AQ_`e*L-`L>mHOdQ&#$vSp(7 zA$o4qI&JLvHdAIx8G7MOPXplM%}o@Q4o{0m zEk)?&rdX9;%14z|DTeMBL~w`Y-il@mp9_XeR!!KWV7?Q7B9+eA$CAp^QS5b z_9+&-^@KFF1A~-M#(7s=GXRl6ZKFh!CbwYXW1DIdq>}H!)J%prxQ%-3&!7Cp!p~QXqw;oD$ lDN3ptJ`PZavHf+bb8hP*Q>z#D;$Ohe#L(QJR_|f-{{h9#tnvT= From 0bb832736f57ba56a874f30a76207a2d692134ca Mon Sep 17 00:00:00 2001 From: Max Stein Date: Thu, 19 Nov 2020 17:08:44 -0800 Subject: [PATCH 19/75] Updating MDM section --- .../mdm/images/unifiedenrollment-rs1-42.png | Bin 42711 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/client-management/mdm/images/unifiedenrollment-rs1-42.png diff --git a/windows/client-management/mdm/images/unifiedenrollment-rs1-42.png b/windows/client-management/mdm/images/unifiedenrollment-rs1-42.png deleted file mode 100644 index c85e74d141af4ba50b148aed25f81276e0effb03..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 42711 zcmXt?!n!qxE2D%wdj}UUF-XimCT-F zYbNK+eXe~^q^hzEDiRSA6ciMyoGd^c3hI*@6cn@_0vsd)@JXnKe0_3Nmyv*~ogo23 z4qz?CmBgW-8sd>(O+Q195uIf9T%n-QhW`6}N@YSLh6Lf=Ye1h8;5cd>SIvvzcV!bYT|hQyKni%U8>dAnF!TDd`0 zqfZGyqG%V0SCqod+TH@{>mxcMg0L&6CEg>_6_9IPEIq56scghOKg8=8iryNkI6)cr^B+5Z=lbhNj(aBzcq zm`dw|#Nhs`s%hV}7p77?~<49a#m1=o|z#Ha0IWum0tI`tww?>I0hzGlDm66d~O9UUCfTxI6|)l6tvfJZSx&$0lnQDu#{x3_90CTzF4f}XWTy)zOeo{XMi zVo)xwu9&#Ev~)H!Uw;DBE^%b|uw-@Gle#Nm1f%ofTW9H4a`$X*4GJCcS+bW4PqnR= ze@UI31HH81LeIeTh9;gN&IZ=G?5)!oajMpc%V;gtbBh>00$edidMLt>?b#-+)$quP$X%p6v`%zw1 zmAscbV1cP5E8D-;V7^g3J2E28&CNXqR~0tjC@{VhmLU!{5+=m;@orW;IU+uYovc(A zRxSkHb%5-Q!uLsXaTwWHG>C+AqjdaDnFk3j8Ep)VLQmNp(k0@#9Ln@W%!&MS|Jdl+ zXHQ&~qY9+Nv6s4k{fLFS7q@)0_FNaCw#l!u=c#3?1|bS7-{)ruN*=XSkctoQW#p3UzOx60hwLr+?^7KQtYCeHijko7OP z(q}%R`h^qow`Zm{wG-;5Hks@W(M3M@LO=Y?w0pTUdzl8*LwfeG2v2j#fm!(^3!?AJ7(nt%B)h2Cf*QG2HGtyF1_ZC$|Qz3u; zM4NS(`T2RT{YW|tJiM@^BrLs8s6$D_Dyeg8^jgZ;rmdeUe=(vK63Lg3oL$3)f=Md{ zW|4Zxnr^1%&gKeztkm6!7Qsi0hAoq7JwJ{r?igp(0z&hok2EGL4MVGrDmoE+>_BP( zsp0IUTxkk?>(auxXeG-VX4M+Qn3aZAjS);08@hF;=D0s%c!B9fPAPe+7DO)zPB>*w zw6SqEMf$x-0`4&u?F-t}&%N#;+YVKYZZSudLO8W5ILbsaK9AR<Z%CNTs}9s>FD=?^a9M=wR{B^(NeWpG%}HdVY$`0i9g;DqDbID}RDM?xen9*wtT4X}28WD9`wc^X} zY%)Q(r*IunbkQlGZQn~_O&y&Ljh1j1&$Xg>p&JA^6atFnbfQWmO)B}bkhZoqw=;$r zujKIvt@b#M*mXXn)ibS(lGVYf8-hZfDj$R%<dX z762QH_Qm{4-+wLS+=PaNjO|Uui#*Hz;gB%cxUk9)aA$PrI_EL$_EM|W7?97^GB5x1 z{d8q%X&16ejZID_Po^lBsG(Bb#X7;3Xq3mQ-!F7#o$cuabM)D?Q7`deRtnqb6_%-; zSl8id=IQk?Dh@AhR?pr&5Zsm@oqb-GJJ%RpPc3MjZ?9H$SIu$Wn0g*1{Bd6VT4|>< zp?=6+fJU3L~f;;TH<2Tqip(;mb#D|W6*VsEV$7Rql?04=c8PpKyq zjQ`adbsd_kN?ReX>nnqvHeF}s&XNF$1)y?@b=|D0(NE?5H3n_Kf&#HpbAm9i!(31P zFBo{B=jHYdbZxczg5ZJ(mX1E%7WKCOqY>EsEJ5i7W`l~|`{w)M;bB2{clUW^$xA{%61McWc6w1CW0rWn(a?&lmQ91mJUIsPB^s=BE%lOu96COVTo z0!?=#ZqMKG98kDw4MO>|YiVYem615{RB{DqLlg5t=^8Xw==7@PH5p>6brwXQLzB@` zSAImY8g=3{G&D4dG5!om;lytKdwCh}ezsyd9EHmnGe5x+ z^oHVnL&e8?a(v@n#dkO=5(;NF2)DuLBK61h^E|RiX=z_rlsYp3cwe?6)g6Syo#~Ww z`m?^;9tt=Md*<{u@FJ~NDqRFX8^)iXO&lCZ3q80wq#PVeU(i*F0G)7U4s!3JX%_@Y zaaC%Cg*#G`lBia3?Wu@xaANAZ_s^>6LLnPM$fs6kJD?EX2=n8$>qVMou}b7R+1NE;KBvq zRd$+RGNwFA_X-%fB(8f<=h?-@E!Y0-BL0`rfmQq6*P&RXU}tKPEk*X@u23;3 z&R{{hQ=@KC8L$i>mLgmpQ2x9i`FLuop`!vVe=NUV1qPUJv$=%3c^K4L8W?R^>LA%G z=s2k8q|~H?PaAx`X51%MHdVFF64n;G(@v+}6>`Kk`E&y7aEb$IfX~+jfD{T_ZYnBJ z?~fvuG(UgZf|SfD?awt;91FGmYmovo0#g~QYI?lTJ}j%b1Tk#S|VJW5%0z;>CrTVb_UO;vu0?w)v-Z>OiN zZe{i!ODn{tf+XkIO%H^FZjVMXp`Nmi`PrSPM$42&zvqo8=Zt=DpM@^-s0LPuxVq~( zmrQbd(#A@lyW*%2q~G5?H-Z=y(cAQUiE4R1T864wc-3D7q64ZIJs_7`(}y<8CxCH7 z*El;uKwvzAOJeL+;q(-FGN~rBU zm4?_-?O2vK!W`q&T%GPtOK=N5B5sIsO_3SZ6KJw;UpVKKaQAF|t93|cn)5ImZ!PC( zPij*F)DQ)<#J1~~=dd-tGaW^j_i?=yugmBdq{ja_Jyme6vPjjbQyIpdNwdCSjE)C{+l zZIO+i9<}8BFK174SQ_|oR5PtI`43}kucB*e+!vd04wlr41$~x9fIDP$F6WsyEGe|e zvJ%u1u4P^<&MRx(*C(;ne%V|$FKil}N+mP@@sEB=&HKlj`LgBA1m|F?(2sjHvh~%F zCjT{YK&T4bSI1yf#uNDD`CvWB}qdJX7xxY?Jk-u!IYPvpa5wR>5vn>{{ zmj~!nFU&P&-LW4u=EZ?xy<@S5t9-0;(`qJkz{`zMtE;hljKb6RoYu9DbSxU}S@eoW z8kae4LoIwOIm`389B28q^Oia==a#3gS%%gM8wNQiZMSzcBBUg+!Z!dNYsQG$_PYte z=W`*g{&swM5-XD`3-fj?^p)iI^CH^#iVFarxVyvg`V1s{E(Jj zk+vI#n)!Z}npK!-#zh!WD`gC{ZE3hYRVC+Xq?H~n5Pygr<)F5_>ju`E!n&w7&}PbT zK26_Z3HjUJcY={E=R^B!>w?-uz{^+Uax58K4wOMR9TLLm+LJs5stIb9rWfAuzts*h*z3V6E+>#Msd~y_7qfBXdp+q4uH`gBBf*`EJ zXDW=}eceoseVl0d?Sl;jUGjLJsT7BBhdxA&E*fkOZ)bqH_R5MN~8Aid&i{ByX!eKUqpsB45 zY;Rx7YZMOX4ImJ5Vn-tp`WZEWL?Y;+=nxKC9K;Uz6>wuwMd;6oflC@1braQ!uX;9j zOm=d#bSD@2vj7Sf4tB!AA9w}z0hQTWSU8ZEY}$$Mmgng~1rzc|$NZaK?AKFOQt2sB z?dK7f`aiozeAh zERlfQN;R8OdP7%Djq(6&V7L^9%cMQV2UG&kDP_^Hw49#W=+PtMN7DB^M2eia3j^Fv z?<%ey??+|G{lBAkOjYwYvHSk96S`m0c)&Og2@40Bd<0zGT!C7rH-^GmsaSc?@&$ZXI^LsSC($#wsG$X;u-h!##U?SzM@NP3ANNmYGg z#!xjqL+yl!L_EVzH#wxKf3C;Z3kqz7rKKZzps#;s^Vw>;pF+G+(o*-?0^gBO&+H`R zrg8=Gi=^WvG|aJ)kdd!f``)!|X3XP7zl46JrTy&KeGjJ{(7KR!aLR!_KM)MB@Jr`y zUly>@ar<2_(N~@@_Tu$-lcn?P(>1I6aRsVdiGbHhf$&i4ue*C`m%caX*Wy%bzx;ec z&6$KkNvGOfl84K!c;|!BJ*JOqT*VB&PaGT^d_H&dHnz6s74~xvNuMvyj-#gycqW5s zEx(~9B`1|wslQk$3#NwQhoO;1Ny?y)!$g^OV!M%Ct~J2Cy*!Ry6%Hn*R210K6}_HsRU2JE99B-Kn4xlh7S3B$-=kI|i;PE21%b>3l!dF&G4c3Q+D%Y#~f zKgH6@T=<0(E4U5MtA*01Uf7K3YbI>4zoh;4x&hO1xIQQ{e|+yyFi)U)_HTNT_dL+t zW)OOs3-&q%mtDR4ULJrg^G0^^Kf1cJGN^b=?#1i2d)TdZDefjO!vDVi9-A4Lp7}{a zLqjv>tbI!SY@TreN7|LBmU#0%STGQL$evXsM}z~KMngkPdqf;7y1jj9O8-MtO!>Vd zi9Vj_E0WZ4)S-7qQdUsI!H8LZ|EIN{Kwjm%Mt@j`^Ys=4Bvc7Abt;kfCv!rN*EQ$E z<6~-pFZ#76Om6;X)hjIwr4FX*@KyY{^ur)Bj~)t2-;=%Yt7*%=NF`$4@dibgBkQpN zLN~1v%7|n-<^7AU%aQWLqN_2<_-`*O=U%V#qu0s#@33HN@WT?RTJBnxr=vI2{Bl<5 z=0JxFFjxMd4rMX7&^51`zmrhmg3((?8+&;1Eomi9TT@GCFO9!Vmb$3v?qZo(Md%-F z?_CIoheC;HM=dXMMr&^|%~3Z`*NDF-6PVxR$%V8JYX}3C8Jc z)8M+sF%TKDzkk{geGhvM^Lf2y3k1A_{e012%#yW^Nd>$RHd-A9^MrkieLvccKf?N6 zkJ#24y`!6x7;+u>xfDIc5kGgFxXsJ~Cbg5J$_{cbQmdc+Qt$2rkWmre|5}O;>hwKp z-H}toB1~aQy$(3Si(@%rHuxu3-aEK$FF^lwy&@-_lKhju{ zaC1Msg~|8~PcTo; zrhljU!U5u=uoJnl_Yp1%p%5%(A*I*-PMz8BMvL~xcVCOlW>+^WU)Sg3vFo(^v(I2x&hv2osCc!8f05fKP6BqHi)Zux?q%3&Oep1&@{;Njs8)*{W<`W!_)&bMiW zSr_HJe!5{t32`lin+}GJXLmQ(ipHPE6!cRt>vzlQH}g)n%h{l8?Ue~$B$p|Ubh@7% zdNFK;Q&7gn#ipsi;+imyJVhRa27ThPoJq0Y>a?%wS*jYP&sc)PvMq5h{&hNn)w1Pf zUJ)EoNzCi!nFk0Ki2d`u)AN4t;m)nUcsw~FG4I#flWw(cFSM&eW^mzP*n~&*)A!FS zj=GL2TbP}lUueF_KK=w`Ogvo$qnB)md19#?=Z|D?m>){M&;Z?1mkVF-`ae$Qi;mDr zgDr;2F(cw*)2$sLfB}VE#Bke?NW_lM%*?#rd-2DAuuFQ@Njt-8l7s51n&e}Y zEo+2(|<>iv^AFfHOI=a>NIrnx&SMUEaoV%Q{?)WXs3*o1gEoW83C_ zNo**4)4zc>@PInfY}NWrNcpu-n#P*+acDnpk7qrt^C1$kg&tE2ANIb!$7eHn#{E90 z+;3BzIa|c84v-QO#z{opN{9J&n5^Pc{B7=lggPv~zcD`Tw8Qs?wsrZnjurO>?p217@UlOp)KFGp*xgS_W6Rj zRlGM&KhwD3=Ya(M&E>Xo`__pSwtKf_73EUmWykah!c02}u;$WM@c!LRx8=R1X|{d5 z4g{{7*UU?$Y?~<7ooP_X6UmDDyXyhK_bMqFfRv%+3)T59fjR)-0LzYz=RY}`my(jQ zn^~5ZI6LsZf819eo+T+EM~_)zIRGxXs?`UQjsT2E70*#L;Z%gKhZgTMaGq~c3vL9N zMsG0bBp7a&dBRKyO1s2FpXa~MTImus_zgw=k>-Fj4Mt4((^2W07S9LPF0Y+{C~e_S zjk1WA&z20ps2O_BL3TyY!E(oud*w)aS{|mKEc0w(5BTi885~ph{a$(ef|mjj_K5UrBBetXF!HWo53^Q$Xo0+H`O`Mjq?A8ZP4 zPBbW;5fKT#Izan{{Pa&0)uKh_78WKI{TQF+uw1b-?9_x+iT7eQz9Q-UAU6q$r!&&* zZ1rEFyQ45roXrpA`|OAnzI}g>Yp}bT*UMhxpk8 z{8@i&rLS7$tIC_5>-xp_7vZb#Z+L$cN#iHvk9XX_cCK>tM4|N4Sxr#0AA4;OEh^pf zcK*If%y0q}rW~Lo5Vqk~S6823px_y!hU!^x<#7APBlJD1c7yH)^asq)XD7B&-yHHe z7S$agPIf@2_d)peuV6gYmnGt_?yt7oBf{-Oxn~qWnmnIhMi!x1hplPpIirsGA55jp z-7s9zDAH2i9o5OzgWBjSo45VyfM&csmDvx;?^lW55qJy%vFZ`afb-Hn>sgM(wzO)T z59lS-k48u#PHJyKz=Wi%XmjFiDZOziQ|Et^d*DFj(Yh#}{ph z|NFiXs%4*+-kRH5)m)A9wS{N0yQPJ2`RfsVT{(`w*@iUJ*imcCPdhC0^T7>^K3;yJBl?dRmiH~#5CB6v^J@b)yY?5pi7cFkqyOlkxjWz6IoF=%~(pU6tl0dH(Oh5y#i^-{QbPws%fM_^h{*3fx@R7LCZe5;tumE~}R3SspzDS{sM zumJK+wkC4*P+G-}y3L2QKhl(qwB@*DFh&RfWDCAQH_Ih&&l0yMRnpw=u>NJa%A8mz z&!wv3;^Jk!4`2q^px#Y6@J8e>xX?wWTX{BI-~csryl@MSflhC%@aPO^k&VFQ?INCo zeH}(2-v>!)`E-Do(HS;62R^I&UhJt{x4Ff=@ehdDzUx-Yx0nHuG_jyU@#%i@<}v9LLOSM2_7^r4@v)Ji((VvWS) zM5VMdcDLB^6J-hQ7Ws!8;IO`Q$VFI4OPg$RTJnS)qG4K~i{}>uG}CaRq9tQ-ocexJ z#E^;-@~Y&=4Frc#c+QE1z&`IER`@mKzp*>)!%pQ2%QV|V`T4zJe0ebap%0COJX?hK zDT6bB9;83BTa=ous((!VJaHp1#co1y$0I<5RdnmHIHL5RYU>sYL|>kt%owXz-HQ{^ zJYFFDMjNyWjcz*r8TNU1TIW43*^>BbipwNS74eRc8ybC!AHMJHNF^b#5NqJqyA>An zDfl4XGXI4&?_-hN=`yzsxgmZuBa(M-RP_CGz)f;KH7h4psunIN_I@BHn|x@t_rARz zFZ6y{OuM-LIV2%OdSu`7<3%*Xa}ltlqkXX10qyrv);F}r6^d|on~0zE`4)fQvhRuX zqQjA)_xA6q^N#SN8R*1N6A@of*cCS5&ZG~tn&$(p=ikI`15$bd2Y#UJ82a=jWPVv% zX9Eb(e9JT5Znxgfefm8c`0M4eos@yWI>Tkr@Kw87)aQ|EBiFIvKp@&}Z+MuJ$&$JE z@gpFLj;xnl&wqi#`UXWPAYWHGLP|;t*Y6F+X;v70ced{h6>l~-GGqKsB%Vzx#^fp~zgodQU3QB9m{}P$@AXn*md>L&2RP3l@ z9xH%5UyGwkOm>Bhr{aB$__(foC+xBW7at?2sBSm@*Vn*acyuDHg4rIP;w5 zr`6#7pzG!_UwC8vR=l>YH`?N1sVJXe+`43=ZF<1;EH6~sY<}=SkGXRj{p~zm-Vlt0 z;$^@y)0#^o)F%lsI+ZTmcws+sk$`j04DU%2A=YQ-NZGD~D+a$?(cZ9-2nxRg(YyiR z@a>U8`;On+R}?~FEOe27BymS304G(bQ(}EJlXHd;O}<;Z5Kafs@=4C(;;zjovf&`| zI|%yq`|q8G$E(k;*D7q^u7?JmmS=n8k<)EL6d3+?jlhM3$?Qdr=J(S%c86Go4r|dd zuS8s_dU5maA9$LKJbvtWI&UNivKIvM*iN84nY5b8lBWe1mR0Tq`N# zbnK5l?vf?-Pr!Iv#HzM#_@%Drr|A2AK7C!S3;+Oo8tPTI*=nLYYfO-(xbvwkR>=cy zUF!S%3le%?LkHY4ux=L|Sy}0Fm@5(rOi~{jrQ1vU-Q@h|(DZdxC6JAkXc{3JMRI%o z?ddW5vWS%(Q?jW^m2UIB$#Pa9y+qy+WhS3L90WA8ru6mli9pt1A_|>pOB(Py8YLZU zM`hIm8nF~>hWGW6&*aVwnta@&qmT$7(aL!2va$6<*PqaL3Q_?oaK(Qi5+q?pYZ>rP z`psh|?hoNXlMqDg{)8g=-6v~fTXY6L*#$-FSJpW0eUB71)-is8YEM^jI z_0M`b=iQN(`y3K_y3v}*^4?&Du~KwpXnzK>(MY)RhKK#ti<5g|*#sT>1F`(AwQCWH zNV0hE6BB94d5IFMz12vj0A+bfUkC0sunj8|!~11~%JamHIY$&9vMmJFxDLJk;is>w z292QF?op@6UUFssRc;r_+8JH=M!kEChEyDG^a0L=3JKXaOS?5dSo@ zy&h*EZx(0uSgqIOd{%SI z?)Qz6)p#@dwNc?Ji8l)17|Em2wM-K{#IwB2Thys*rxFZL*oCrq&{3!ia|7%#kb^Q% zTcc2W1Sx<$}$`dst!7Zc;lP_jM$(Axwnt8}N zC>fDM7ujS!52Qo!8v=MUxJEl=vZb!>kF}<@JHC6Frp65}WtV=Nh+)VOvgiCWlN~Jj z3P!)#(Bv^~qLgZ`Ae0P?1@Y#;5#6BKj~aQhfQGC!oL(f+_Z%JlBYd7FOcab5L`1f) z?#glT^8?NH_BXCZ1G{4=i|7v0ML#}EqY?hhTG#)_x7_8}8>3bfZVpa%A2 zv-4uneKmmQ{EMPW&mvgK&4;h(Etb0F{OP$(!{E5#Y6c170B2hWh4>5h|3 zT~;V$k~wQdyM-@u*hF&LI|o8$_c{hcs=$X; z>2!X&Ua+N8hC!qGet327FD85euk^3M(5g=F%-ul?&a<1pBM?x3w#AFW#b!jjT=t^= z3aGKNYry!VR@at}K|^lh`?EZsd7;#YWb=t54&Qgbp{zH)Ft`bmh$QGLLiP}aB+9x8 zpOTSPt^H4{JXQGlk}|qauwMdLlWzo0c#%B%v~+#>B%4T2P?fH&csFN;30nbb(RlYP$Zb(-&h5 z9>3|>ZGZZ%n8o*5!67#&r5(e$u)Z%uYKat=Ffyc_01y%$*(sI%3d8XOM59RXm8f^y zQ8*DY7qV)Sy)_PcfY~;yVV7Mw(2M*tBVze zP8i;P#o7IGE$Lxj!{8{IsgTR?uEe za;%&maS?W$TxeqSkdHfPsaqJX7npH29SrM!qsh8cP=C+G?y8E9{UV|AT;FdI_Mi3gmGl8 zp7cPYw`f{Yd2{S+yqqb)$a6u@g3eNX-FTj}=zUqflRsmp%lUhU9cEt0rl`o#61GOP zD>Z)Tq96BcYKCgmA$*#}j{q$xL>|ZOsAvl<1OybRggSVhnl}`-*E2`HfKn)UG%`$} z8f9A@>b#~(Vp}&5#rNSt8iFI6QI?n17a|5E~z~b7k#Y8T5)fx2T2}L8yN7^4DXn{;w$Hf zFg-Jnd|k#}>#;??xj_yoA*Ns@D+I;Xf!3Fqu5XCRckeZBbcN4rY=fKhZV&hh0yIE~d!;0F29Pr22Ij81 zoY6P}K*(RWxP*=3ZPmYvZdUr4g6F8vGeRsZ#y(HBz#{uG6?3;Ei;}~G!JSo=C^dgq zWRS!l1_iU~x)rGPx}}`HE-b&V4x>?dk3 zgQt|$_25R+)6-&@EaesW%DY_D*{W|SHY6pP;z;6}+RRf_*{T1x&!?deI;3FX@`MsDGihG2fL>(*^2c;f5Jg%IhRvJ^K3h1h%0 zkxvA@IJjbfTkojFKF7y8JknwX?b*IVNq1agIoeG#oXgI>d5il7fGWBP#9>e zqW*=YtU)-}KEFn()xPBvn=$^OigAN6moa+5&;cg&_k^l5iYvAFsD-7JCh06}B>mfA zW^)24H?q9s#xIdBe4RkXzCO4A(9D+~Qx)_Dhnq0EJL|l-yYhV|MIz{op<2+OYvY)^ zwXEs9sb##iMq719O-L^zZlR)ay=||tz@yb3Wzk5L2*4*eLmE{+QH?(aNpa64T!6!J zxZav@)F#TmSjta9SgjGqY4(B;Z2>nws4xPHxd3Ibol81V6I9VWn+d0n9zpmGLK#cx z3YurMBo_)JPBUX|rvEb#Bs?%oFV?7YkwnoW(?Osk?)~=(Ed$^T(tp;38C`1wH@O4?IuWm~6IjGpq|MXc>u3 z!#Vk%wW4W(tUhX-N5`V?2cqv?tbr1aZd;fOHuyBQQz7#R)D)kLK@1LTN$})8s=W)h$D&<6m?fUD8r=$P z6!S{j`r6q4q17PnDO^J(88e%(ql|Lr|G6Ld76#C$_NN? zV7^8%T(m9kVO-&ThzVm+N$t6;+eJpYMB#Kyn*m~xh)R|1Gz-O2mP&!t%*cZS=dl*V z4W+!fK@1Yy($UGVDPioXpTJWIZgPN{y!iimyC9HCg4M!TmC>f37YE!!aANc+^c=IXlCvEFm(22F|9c5Sdh z3WBSgx8S^cy8SUQNs-CP$$iHxAYMRBLQ)t}QBmIr*AwFB0r6i5$TuzF>=(hj>WeQF zw6szrm)j5Q)OiRt;p+Km)0p7QwLQsHUrC*qL~~coDnj zw!}+T?6!ZC^Q!&gU)v?J-IWc8!K=NFhlDr?+ubd#Sj613^`|gWFw^kad#CG*+wS4| zOPL<2pg6Kn_6`FBhgKiXN5@XD+Z@P^r!?Li&MvSm;V0m#)|p5kVoKC|U32;EVzUDQ z4Xrht=qkGZF#DL2QiN>4RLyI*fsNAhM9lkdS5)A4tRJ&EVM|Z4z7h01d^j3qDv~aK z+VM{ z{Z&!)ye=t_lqZa&B6|DPYwx++f{~AtNP+AXYe7T(oH89TI-+0rQ8c7iPY+@|czSv= zeJwZK6M2FQJzzp-lW6w*3dz;SPE^|X#(e5?ipdqihFBvd z0D}!r7hQ>qeRX_~f3I2RPWNKN^Pk}^jD+9^-g(fiPyc#*-Bie6Vq;tQ8WAsA*UAFw z(sAYg8va9rhIwN@PSbPQV&g;72+4SQ`AosfZx~jBN`UACvlE5BlYTbea6LxK2@3;% zNWr-2VR4zB8)^R12CVP?l+J~6UV>ZZ#dLH9 zy{&ktsI7eDCMI{&GXn+UF!M|-|6DczqGctP-+q?U3A5mmO~;nk;1d^M;t>4`DV~&2 z8iXI0i;Re>zgOz6_p$bMadE+5Q^pB8Rlu>PDzdYF1#Dm?C1a9cF*{<7NQXvw3{f{Z zngFDv#<-(?_KV$N?yFe*xCe()d`u1^Q<^54y}*y1%VN?A+J}cbiE5}X+WBYY#$GuY z^=wW+%|6DC9XMFbPv<1;R>Zw|D` zYHto`f4r{Si}NMJILBjc=wS}c52Wz9A5XDANluJ`5+(02a^}F~;nlu#?dJOeEV4hs zbdHoG;Im3NdC6(z(ct%go@+&y7IpT6gbx>YkHxipYv#W#KP~(Q!wA z*f#MQpUy8VFz1I=RMm(}M#BTmurUsgH$0|7WQHUB^JrLHsqdxet}dcTGemB+i|K|V zFdR2~zM(xh8pWH_-CAUY9BLk-5d0hf#ztPJj7S?Aq6EQcW||3NnJa~-fvC-fMWQ8s z{7B=Ifr~Z=H!d^ze75f49QNi{{rmXI{`iNTA~R6J?(NUs5z~4;Rrof-=}SxqB=y}j z?=;L*R&)*DoRF6nmym$LfRqxsJt!j>-7=Qf3*{_MrrYX= z%jrsI{wD#D!^SM(ri+kPw-F^s?gb0esD8a8`ocvuBz}L#Wis6Vu6IJG{8NqErQUu+ zc}dd{wDPrT4>v2y(f@6d&)z3+1W=~wO*qC&q;zBf|ExEuk$4L263 zyWyUm2wUS4judcyV>ms%hkj6@V+m3|NduJOl;CnFxL-?CQrxi z+e>^krw3*{<_>Jn&0Yd$;LaD7JQ`RUV)E`6yf{+9u*|lp!K7h@gtVj(!~>av+Dd|d zpF;^aeX#Pp>=-!JlM|BW(al}BoWXa>-F@30{n&4Cu^=PQ&Dj0qm!StuV<&%SrB-D|ozb)DG8 zBz2*Oek$fHLEHvwe>F92h>p8`SpO-KnW^iw;pa?+GBP$_G#q&p3=lnp?7!Ayoe0>N94ju5w$5Q|s3FgvGH!e8TllbKDcsc=%$Ob7M_*#j>~?#?%43{e&jImk1Y zkUcjW2wm3`JrSi2CC>u!S3Wq4za^s|v<`@NMeV9Wp5X z{eY5NCvSAzwZzJrYpA>a>Y|Lp6(nnFMPoh@lS#numT9M?_TW-*-*wi!&>7l)IO)n)y~Jg3B5okqGc3g!%1y8N2Mo5>xC#o^U?bH zgk%_6;-y3>{)C_;{zP#x4b7J?6Y1<4e0sn;2equljIS(<90g8Zj#EN5N2i^b2?=lJhi|~I(1!W?9y4WI%7f*778Z*&)*=kNznSN z4yB4+xUz*5VQaNXv}d}1#L5-Ul(7qMP_P7t=_yMFhc``Y?F+19&poRL8HF?6#=})G z0_xR}ZC!7aiilApXhDCf+nel1{N(VAJJZz!v18FX7XdOp3n0H8)-<)a$n#R2KKemWb8}e^zhmjDueXlXWIG9lt)75R5wO-eBr%2oH z29X)hn<0n`u91q0!=#VGA;n_| zeoq&IPv3rz@;Tpde^Krs^knNmO`kc6wD%^pU2z0NJ2hOkzlhMtJnt2G8jmKvMrUx@ z#?kx2lIi(~K9@=#1bc4x-^^+kDK=Y!snN}fF=}upw}mN`2;df?>phvgdZ zn6LJl6Y$$XNuw#kplzO&##qn~mo}})Qq%Fqtm}DWb?CiSczRxp|Mt7(Py8gIM z>=+q6F3a3u!I-&Bz#*h#*ey{^kkS)1? zToL@k?pELjvg!MDyY~czsjya2W2b%&H;{7=q^+f;aF$w*@%D0U$<*Mth~{_qN8ayw z@6!|S3-D>*n?%?j?FEfwkUXQ zzl<^(2&^WNl1fhybR&R6IiZIAkgVQmM1_Ai$9QQc7!2L;_Zx+Kz5RIq)${UTe!f19 z5T!JlpjH%OwMs=nqf3IXW#s@1N#!~3N7OqR2q$a_qH5vC7c~}R$b`BZ>1o9)IyW$4 zubg*icuN30fme5!^Ss&4Uqn^zRQM}HKg(^X7?Yl-+swn?7}{zuKM%*?`wi!Ly-lyq z6JZ3kKk3F~uoLD03EAzFa+TlP_%#cdz(;dRUjwX2PTJ4^9sV){P+!c2TRB7axW z4SA{eeZlL#Uh&QNTF90ZN~y;9TqdoX3~<$;mY-l$HQ1qFrw#t=1+48(D- zvghI2R1Ii48VM0J`4NDc2oi{Xum)J^){kuvi=b*f-Ohes)6M3z9OGm$)xL9uWWOJf z`;kV1K-RcG4MTNkHWd|`Vp`@Rj*%@BVCwed;mhhVIvYmW&v=L>~SRxx8r`D^jF)*2&<=8J9mzxd6+ zJNb3)yE-R%4{9LD_V78;f|{%FFU(`>LEYUwyWn#sWlaOqnrWpg-0LN6PIwyymBLP| z{Fp_^PHRN+aWjsNyhHL%hu~DcO4Zmfc9%U65QSY++WWS*&wx`>@k&Aziooz16f}o} z!OW_k9-qB3BK;H*^#%hYHaIsx2Hg4U%u*wALs4@7gQG5iS`mj5wy_*(e@gmiJHfx` z=+ysX=_&)F`kwYrq>=9K?h+&gmd>TSTM&>&LSkX*?(RlPNc$Q8 z^IkaL{y)rB?4MuZIPrP$p`|_rVeJeP7|Vg+;eu(`Nr~9u^>v4h(REK385i382>tI8 zO|}kW=S&BxJ-1q&{3z4y%5P>l10o4m4Fg@KKlTSaorLY=&Ki&jTcX^fDgJ)jsj#(o zf_E=th@}5#f*7U5v8z$}D)@&u7xH$@QFl7;Hn&fo+(_D6^zR-YrMe-JJgX4{d!Jka z7h*ht_<|lknI~!>leDkZP{-37Ij^`}hUnGmX8YNfuCGA%4`B#9+crhP3VEG(F+G35 z$|t0|@H6|r{Zw2$IFN7EWjKSTq_bL|$lBI_%FIMm4v6-=9)_az9S2-EhRDinC@LQJ z9%UQEF>=HSkhm$eRrno_qXrHgDEWP*ua4$lXtohQx|!0!Uh%>ptmv2E>^lj*7Vq}M z6pb?a?U7g3rblK%aid1oqGi5arC$f<)N#(ybf6zL9esH0^^aUMYV@QO7Ey_HJq~a4?#=W?W-u2&_K>?j73GI@1AycDJ zYX{v{#Q4B`q7`v8lwZtgeBLy7jIvPNMigOz;~iX+ZM8`<|u38|2v;u5gi&p5`5TBVH?lnnSIG{WL z!NIK3ZI#GsR3_qez#2e53hR6wYId@ok9=`W_-*?7!vofi>~IL?LqEdLLDdC|9-fNI zuhK<=r#Kdcf0UUJjMg(MhE7&1pL2$6L()ML?b zlmVw3{oxwLKZ&{EJ9wu4He}KvTVltMh+<6l`xn z!=k#38W~JnSd7i(e8XgxeHlu*LWgr7+PNn6TV`DO{vHW=)7Bjy&TY}F|ZL!$D)dTwll;0oESklomS{xL~-`GB)*md0B z%9`DzEt-GF<@VTnV|lTMetgy09`aEgF~ZL&@(k}1DWVB+^GAy3q+%B4bbnng5oN4f zosplb>{fKM0E(zxci0C^i?JRj-LPngC=WpmL4hKo1KOo8UTc{m5TV5a1O27J+tb4x5L$=yX`0kw)*Y+H7&o>20 z?Pq@`TQ;iV~6EW!*75Ti&_>c>u$v_X4s@;NajJ!KuwP3lo>oy)k(zf zKvf{sQD@(QwYtuvl)?3ic-Kx&UI|oYgMW3f8g==ZV}ZmnZ0U%UILy0wq;K2l5jXRS zoRGtroh7rK%YRw$&B$(KwS~1(n&WTC;>4ldq3>g={|F3_0%)HDQ!l;~117Ap( z!OB|eH!eZNhmAWB)t#5+FSnZOe@@z|mVN)1K6 z>PB%Ps~}Z;wYiYR?TDDdrWeBJva!_cPO9x&4@an2Im!5e3h`oGrfEUPjn{cN6x}?x zJ+?wfHHut-VrvjJUs16a(opJha${E%=_hEugGGH1Y)N^z+V)B-IXO+p5mhFZJb0rw zjE0$;075us7J(HBiTp@7D96I_5AFK-{4Ws?9bxmDyFfk9ecsL=aFzZo^AMysWtx>3 z36rwB`+-LD?Onn1di+jma`-{k6Ex<{V8wWf#dfC!a95-|oc6Pto)J*LsjvI6Pe3N@ z1BYOP>T(@?-CKA-XYBRYJxObBeGU@I?QLn|y`_X6wo_zzDfL+FD(L?QnWPV)xwwYx zRSz!FJD+;r9`g{vuRX!9PnrqWe)RW9-az_HduB4@6H;OV{id-Q+M8mA;wQ|E@LvKcN!BF!#4*5bwu@9nw1U7VEY*aZEMsAKE zmpuA;Rc%n`x%P@0C)6XH)hIU#-jGQ!kY&SPE`*f-(=y0q3R4;^A=dO!KepF9b;Y|! zb>^M<0qD(fY6v=M)8@~*Y1=B+#8?Vx5dCI~ffIqYO=4AZV+l(CHX3N<5(-u68%dwW z{<94^GkB#sboK1n~3TK}z& zSzTVQF5Qc5agKD=?K$hnr?GZkS7E!8i+D)tMg$V^euP8Zwj8S4bKe&zs4WAD5%B3D zf7FztYI0l&$^L%*i)W`T`<*El1M;iyOz_t?8-9{_70%`D+AZVUC$@Hyb|~nWUbJj{ z3Nf!zv{TR`2PvmZRgs7%Dz&R+>{>^I^Qa@1HwrKZq9k`AaMU-s8(Fn8Q0iV8lnu&| zo`%x6R1+$WMhFu}Q*t)18$3h!Tg@aR9P?(>?J*OOt>&8&mF$R_8z!=)?~1w)zyBs8 zw$cumF7Lz_#46Ug?^~0-^TE-37t94lmbTF1ep_u4{d#b`Ky~d2b}tFILHI5HP8Qj< zGF2d9lLky5vpdC-$tr3-0{@0QE1H)vcKxDNGE4L`MR9R56fft!yL5PMyFq+bMhMU3 z9O|b*prQ79J0MoH(zy4z<4&xCRKHK!m5C-;w9aqapSq3wcq(kL?^Vz5{JM35QFih) zVL05uSZS?W`YPiN#9JHG18#~mp)KoM=;|2z2kDj6Ke#;jd&_mWq^VJDdpw%jTJjsv za79UFt#T{{oKLDzIfB?*G8lt;bxz`s4)hUC}` zwy8nyHsdA|_P`++$@&s;E_*Uc`8-L{djX%2;Imb8e>4!XZ0URa{3vim*7|Tmx|LRg z1-_dl^9x?RNc=VAFbm$V!1?F172enAuqI&G{^hzr2y8D9)dy?<@pSDxG22s9Oj$Pno)VW@hm<9S{er-Ru z`!4%EjT4a<{lFP0*bMPl)lmMWC#-efC&=PF@;d+G5)ebS8ry*sn}194oDtUQA&3Wt z;HY}+1ILj|(-NR$G*wrA<~9Y;V{q@EQP$A95P!DyUFPEuV|F7qqVM=-8~K}Ad;y5F zIy#e?-)?@g`hO8{kql_=|>p;Gb-|CBf6^Fg3E6YuTMt5 zJ$Cxlg(9C%_}loTRZ?E34s>GTjz4$FSUB-t0;Obrg*~s}xODs2?!G1x_aO3B@~5BE zsKrsY@Iq453@_nGGosIVE5fyxBFpvhK=VWNKgm+W5$f|ToQOlsU2okkYBoKptt{K7t1X(rV3yUQ!DGw#%n z%=6Tps{FpWWwB0M#qU$@=pacJ6dd%2w>qS>d*sIaX9kzF#0_io}|40nT_1KXOj z`||WsR_3d*oV*H1&KYZnb*SHCY18-dVY1moysy9io2ag09|K*X=U2B||H*%CpJw=* zXt;nQyu-+yGC97tGx=jr923woB1BO!ujAt>~^^7E|dXCQ)qb`VjuKuKPckbqkk1cLq<)pv$uD^%$ar?w(GjR zz5msiKjW$AXG!$8RHrmvi-3M(IR&w>xmpnCiNa*nP8I9y?Fj$YCvi4}25w~s-CWwh-f4}eQ?GSbL#0fHdn9R@I_)tjb&(tzLpr=Xw>Fys9N76jC!XIT- zc}b90S{WzYlYf(AzNh2VcR7nf+DStbR+GH=8DUaI$^gW0?v0<~ovKemY{xe!S;C(O zuE_Fg)e_a!A@56RMCg$DwUWme5F$-ScnimiodUy86%(b|i%uvq)`Msi--Zm2ny+WwNcM zD`Fl@Z;;b-kh%E|M*7JP`nzh}Td=&-`XjFtQW`5j;k)zkV66j<^zGsML|YBdKlTB2 zpz*$GEF8PMLKC)c;blI#OjZES)24iv?%vdOIBMv4CuQ%HRA7n^ki(JlmMGzoc1lq2 zxuz~h@8ZhRGFKCp#E`~HeQ&0+SvI^y{W?Bhh1)6`@_`>amMuN-+kTVj`hvID&g!ik z9-!Dg@LBi;n(E$q$UFV0?`Q|sbLb=g#G(zvq<@inW*`&vK@Hse(s})asqoH-12;7O+ zgo*}z;k9^xMd5WKQAAH~dcEogRUPjO`kYELGmc9*p4%(x z$=-JuxsAH<6OXW1ziy3Fe3_gg^9w{VWI;6>y1FUJZ{Fw3ru8mF=BFYaT5X*&(lkpwiJrWgZJkum!Iz{07ITM++*U!O9bYS%2Qy|XYdszblrlvLO*%iYoT=cO|JoFeBeo&E z={)behfodl>KL{LoE$QOU7nc4j8BQx?=XG@_}vqy%Sim5T3U+o`|M%bUs{PplKkb^ zcT4`(BR_MSy~po*H86UA-gIS&UogWH75lW@YqOj&4re!7Rs8WyX7eG)v68c7+#twc zd#tAdpVI7iO>i35wZ{lH<8<6I^-Y5FWmA(kDERS#|m9*2vJA--feK6}H51139g zsl2wxAHQD`w5|%<#9;;1ot!%W$3V-G<+!ru-vqIn4woTMJ;jd+z>P{Xh)RYCzQsUP zf_INO4wwHw5#Vky)tbGy&6UG#I?fWIO$Zk=(0BIkxJg>qd0&ZasTnP|+7N;qe;qHI zN<%M-Py86RHK*4QSYdu34*o(t{VxL71>+3!cyQ016q`6R3W7#R#ZLc9x#vv8bFam> ze6V;(W?3izBlJR5%G}3^O}Cz?E}r_#rZ^D0uI2IRb9@F_u<K{jD3ApJ3VlYs>l@9BnHq0*;(mu@3V(c{0pPc4J+)-wqe! zO8qDOIM{Aah>vexEJ?m;dF@s1><6(}W?lnQdmg%0l}LdgvT%!gMk(i)sm5Uolr<{Yoh zCxg5N+XG?+Da2)6P&%IT9&ZGHWoG^SW{=t9#4l>6p1 zK-3^eufZwE#H+Do({lam^R>uk0+P9;2U85$JDRWW=?PUVrm8aY0{-R|x1yBBkPWs* zrea|eGlcZw)|LDH*+2N0DU9xYKet)!xjHz}KNifV~L7I;&}<-65-Y&!j~TKAg= zl1J8A_loCOaF>oK2VOGt>NP}*9jZ8rb7W3EX2g`zg;vAT_QmM?6`D>1!8Y13HU)W@ z0yW784-@}WBzN!C(?m(Nx8~bpD+MttXR~(AO2hqovBm^*SBSpAv7Xn{AwQJFgLSij zBS4>)^H@;KumK<2FO*t{hRm+R)%om(`9R#C!nM@WY<~MWiBsWe=h5@@>8<`2#B!jr8oC)ORysd-#AV@ymV`2p5t=vq_A@Rt*a)OJE#w0Z-$R9NWj=q}p$U4ZbK1r*#2ZXj(NMGe4){i)cEr*g4z45FQq35HG{X$(iRLcZBON` z`fsO>1`=||yo(B7FkZB(ah9k#!Rx}cHOJD<$&#>7>&C|L~fJ|^L4c=2XSodsV z-g*0BQ4Sg@boemh()SB5Xi?)WX9&ep^PC<$MO_POV;&c9o<27dY}%0Pc( zxzQbVcs9KK)c^!m$ZWG7S;+JG;Iq{8F3e?w+xXjJyFIH`rK_Wt6$cTs*lL?QyIz4;-PG-(;&m1%qYZ!aV^Fm#pCY2o9(E&pI~ghH*Xul(@O^`^ z>HZN@XGrK{jyrGXUGgB8^&iul&p!DjjfPM|+V5bv>D?W zN)IXWY3H}x&^)x0Zcy$7D+2WkL)~xi?%%(be#Lt)ZRbMmf78{~6WUQ)yK^Lal5CSB zqo5unIybOv@Uc5Jbv4#37!evNgT_)h^k*K|R<~Tm(7BS8gHoruNBPYK-Wg}j&@AD2 zVg1S3XZ_3&CK&_-^L~TpA5PCFjC9tPn+9u793`l+J&Mz*|Msa}#{qpTl|Qe&?N$0|{#muM)(o?Uen>L|x?%M}4z$LPuE5$* zj21y=w!`=a0fDyfiCM2gKu}OgpNaW(=&!`B!+GOwn@a6M`94V4k{DU@?ldNLHa~@l z_k~%N_u$oT96_vkBRo9y@lT2N=cCVF*N>_vJ!{6P!Iu%H8``U%2D1gfeHLCdxxz-} z&>D)(;75M7;FgEi;aW;7`VPaz1qB)r-kZL4k4;G&B5V_rxR#(A9xIb3_)GgxFtlLG z{$Qbz;21cjnyc|5?ca`tN=?5Op7V`LUGqi5e$8NdR3L2GVKDC(nrh;MJ-NH6>w8Sg zqa=~i^;MM>(Xx;F?FiCEeQq|w>QC|j)=dkV_;^v|2F5E{%Uk251(VGx!Q22c*$}NJ zugPpV3_Bcxd7&f}Ghub?@TaZg_n&;`f?vjF(~`Tp>(lb_oJJG?2>~*}lu- z*zdQ<@pz0LdCt3!N;#NpoL~DE_XsYC-y%xg6;lhneI@0J)YEL7S|$1X^^O_c)?F#X!Zh< z8MXOmUk5)4M^vo8yM){UlQx(1HvOl!G;fcF2g|}6;&bMnaF=iyW29S5c(to_L)nEf z)GPnoOYg2qS=u{oNdJxKL>??-cEwJa!u)_apI23d;o{d2FYJrFNz=>ie4+f4h>zq$ z?Cdb1H044Eao5x1`KCTjZ24B`FP$ak9a@)2Yn7fH^52llXE7EQ#lQFZyB(Dhn`DJg z7YP;n;c*kDW?3N-PfM|i?qX?N9!2f)LJl)@7xMe89RF6`4)Nqia7(W~78vXhFd9tFm^@D6~`#%=YPd z=Fis(5={%M#(oWPqF!-WUDIB>e|21L+}$y!$YkW@+{-Nj6GH}02v>uV@ z@?YG^B?#^*{9X5?Mh!HdusSWjp%4LO{V?kZ5=LKJ*Yv%ula1r0BE8h2*ZuzRI!km7 zI!N&uYfI)Is^V9iT>nmO=-|iCk+$1>XxHL!&7+yr(mwO6!GdunF)oP==5i_~Z%D=9 z;-5x!Pls~r?m_pN$d^5%m*>%aBkx>morZbZuWvmxwPy1gCoy|vqPlAX^@!en;-h)U zsD1brV7gUPxG9MnRVRgLs@A1cWQp;<5-W5xmlMe8G=7fA^|!j()LEF^>m<$2&lWV! z;dX#>V@P@51c$}QsJqdLJ?}VH8FnGq`F&cSRSzRKf1bFpbn)iD3-8S4`-nHCuEFiU zOcWA&vss8K-UBJHx4as~4odv;sv{xfuWnfKep6oCB4r&nctIj}N>JlVT9Pp`%Eh2R zxTIN-p(8}vy*!_omv9-t>+5XM)P@{9Jz}$k)GD-`bDx&)%rc@8|6=axaqPQtGypsA z(M_6FUabJ^6`sye(;p}4H#nx5v7>a z?=X9mc}og+d?}2*w~Q>&Nn+>~Q>aQ!Qm`%<99G*gkYaN{g^%H1O4@vG`E~ESjIDF| z{#ci8{Cs-6ahS&V6GH(>M8bqdj&tzweWOt%>*|;F+;ZL6ydNks|M!RcEW7#Q;{r1E zT(18a_tk{6K4I4Rd~oHhnvtZWN%O2>@o)`qM)0SnD&)1WKgNC`A3DjMI!+n19T#YqAMN97^g7x7rz`LU?VnZD zl(q1i9F~H#bKh?)Aq^kjlL`4EYb{v_Me`>Mb~-V((^`alHwcMc3sBT8Vs(~C0#k#W zkGl(}3eIe6dIKN7|4kL~JY1$<+mN%G(qY*}lnmU7?HyF5<`YrJW9hRPG(LFeg@aDv z4^>ov*l37~`R!ZzUM&jUAXCe!$S1@a`aP@~=r$cl8CWdYO6z%ZkLmCs3;ZU%_jDXE zn;g)v;iOT@lKU%-;B`DYUuQoIbcJ5UEm&SE4u1anjK+w@fim5MViQZ*_v>N$jJvEt zk+Ak4ySdh9Ut(jgx!@$JwgB?q?G4iUdX4f~^!@$SfrOPb38YLhZo%Xv5y8S8J$?&-?u;v`s?vsJH zxRs?07a@i0%u-E^lakI?ci&U`h4y+wTD&%BFphpl0yuvKot+W~v1o#I0fb|OS@F4c z@4SyhhWcM+r3NVY7i<+cdseaxyKMA$J1o~rb>@rySi}4d!N1x-qNF+2?DYNRm2WH1 zT8sa;c%kDn=GD<6bC)M5_9wZB7uGjPZYfDP=@sFVyZx_QBa3LZWnX*c>yB0N@lhlk z6Jk*g#oh2^&&L`?hvsIMQP<++K>Y(72ftq5tgi?-(>z!CarF$GYLtTY!K_u zmi%N7^WTQXkOb$hG-HY1%~GDUo(!b1ZrQIgDkR=f;1kCb_mJkl>&VN=AvXbVTBB%} z5WSK%NwoB2wR)C`K=dVMPn-SFYo~rz&Q9N6WF~C3_KaPD(E-=BJB*yCv)(f1jxU79 zKG6s>D&BhUFtSA0*@k0;tJ^AY!a`)#oVsoY-Pp4y`5PL^m%Tp)Ad}$EuG|7Ae2Shq zkc)vp4lk|Z)RSAAT=V(-#H$I?;JrP4JQTwA+MR+2-+@f0j^JrXYFF^=biN4{`8#h^ z#<47^?8hvPnb|qy)UN*+$4ru>P)3qn_$>-#JaY`aG7=d`20`q{W0_|7W4_#)hHYQ? zS;hNT3ri2E1u#ZOl?B~QIgLMGuIWB4W;7k6alaiJ9^Kq0VK~99Z?wxprYI9%Wz&CuTjdQ)Lmiy5a5D;tiLbRk>BVtzm*UHm=mD#JGtU7ay?*aqTd% zy?kgpbSSZNAZca8c0dR@M60hs0fq^6(ULo{br;L6Bo3U1ztzt3MoTgEvZkvDN&qfcP#vt);Zp-0Avf`yWO<>bx|=LfTJDKP*uHmTf@qEB+d`@|x&0Tm5AD{Z&H_Xo4<@rf97m5$_jvy~{Cjf0> z?Y*HnD#hnN5?-_T=Cj-T0Nw$O$gVojsu??|^qTX&+oLL^o|R3lKBr5mh8Z z#N)C=N%H+Ky}TFoy`WtgL!as-I$O3ni*-*Yk-Xd&Q5|%#Sc|9VvOZk-2TKgf@-jX=lC|6Xb3xC_ZnUbc}6xwX{%m)=k-kiI; z=GtRJ1PcE;Au|3nYc%!rIWlSt7Ydi8$(F2_Rm!uBDX<>1B|IMUkNd`Z9RwH>j zb)WJ|x7^3v0(YB8wEb>g*=K(FFM!f61_>UCsxW}lLA0!cR>J|U19kL!lVlN^w1NW8 z7@7E&wZ}UFK~DzEuG_<7=W=Rf6Yr}`ue}Z7^}!UT-U}wT(P@aLiFRWHh&eDP{hyD7 z5q(jr%2B^lz%8%CIA?$G+7ok-FR9v+VbB*Wao>w81Fz#p%+q1dUz3W1$&hfjf-C6(=kjSP2ADYi^v6O&*qBGUQzaQE6~!|l)UhK^U;lwEgDeGJ80 zi`$*irMW(EegHuDYRBi3v>iq!tQyfm~McLgU`v< zu`2l4lF|6~-sBIOA10+B)KwZE&|{E=5k3$fL<7j1`33C&>iFT{X?uejJJ5{(1Hdq- z^&UkvWNTQFX6^9O?o4dh*+j_V6pVi0wE;SM6`iX4frcsRn|HubGbVeEKQuC2CeV2c zlj2>(=8!^PA0v(EI}{|3n=x6>|l^F*gfM-h+lA)XnDosGsdev**#k z5Eh8Gi%-Uf==3i*qssFt?@=1A1xOH*OkY{0}$=Fp*xwi>n^`$<{Xk1nl76li_+S}Db|9a^CbVmFckX`R^Un?7&z+DQg8_A2l~4`!}<~!3Rm?|>;R92yF)y} z!vnO?zpfz)i{YEN7)Z#N5$e`v0vhB|j0DMdb9bZZlO=NZdjKT;EtNF8%yj3yyE0o` zu&6q_Mz_66Efn~6V<|AnAw<1;pJo`=X}=>=#HzchOA}S_3jpAc65f>C&q4u)CV+!@ zb_kd@Dp+^{+w56&p)xN60bU;@od|TDmq26`wMw(0EDf`I3@{fupzu7>qrBp+V4IRw ztpQL0rwxPUk=MTPZ!~?OX+}5;j95}j+dqW`$Z?C`$Y8r`0-iET*sR#odI=b-pk=M~ zrPE;qfDG6gBjO)d(p4S=p)~Zp;Ehg+Td4{4PG##%)a%=r!QcW+8S>gV_R{nV21eL& z0D7>>xM+qJ@-WTTPe~L~=(n8<4Jg1Uk8i|2gprotG<+5OM0B}@Iw2qq=w#o_O*I)q-{F0QidJ+5z zxCS`b%frV=qEe39>!=9Sfc?UaHI5OjNdVT10{}AsFl7PR_<82m&+^S}8@~n*7y&S? z!DU}i4%P1tf|1$$ujBVkh%g@5W9y}Ne_A4p#=cQRPZRjdE)GLzN-UKP%x~kF1GL)% zMKl?Szp#l2K72a+W(~sQfWH~Q-->HgE#@r|zz0`K>cOTNFvnpe{9|5em=f2(=4bGb zE{8Sd)5b(eO^NZh(iJGMG1m?K*GTd2Sfbkb}Nk_YPrJz|kBy26X3JYy27&%NCqK2Su2&J!cG_fK98Un}yHOwx> ztvFghI0(|zG1Y?hw2T3)j1ioAZ;@6`uMqCmuazE^4y**gd}Vgu8$8J zs-Pk`C1jCR3}xX>0iw22vl+4CFzXCJoS5U)_4x&cVW<=}X?8iu?)LWK^j#lL5KyS2|Ammu?mXK%BNsRagK1`8x_n7*BJQ2QVb58U?S&TVztt~6)xe(JhM72Y)<<4mj_jCl7G0SB%TG)&*cD_T z^O6JPGkQO2+;bpj3e#m)?IoGJQih(rzZZ@)_6%u08v{`=vPRW-H#%Haw|X44E7&sR z;90*I(wMX-o?n|E{le5_2^e2U@rswck%x{vf{A^9zeY@;A23QrRMET#myl%sB^3}ew(NrnQt zEST-)BImX*R6$Zq!eKp~fh50(EG;lj20ke#SiPqlJ~PbLbMKjELRnaoCLoDws1C(2CwCN*-d*;gNF|eH4^AFo zqU~s4x?T&GWv<{Cn(npPMA0%CmuB19MQN4=E#LrlXN7BzqMDVOKFfR4G2haP1Z^6P zTf-72aZ=vPL!_Sn0)_e5lgsMAzZu&_ToxV0&(|BYa~@=UHv%LsmL!h+2Zm175Hn z>MnC?n^(S@UtVVGwcU%G6FbgpA990XhVL?MXv!3;WJ33bDy7o()Buq#XF}K1)h`GE z%U$-p$gC)WtSZAd4dn*etc!3Mdz__zSBbb6u!q9Wuu<#f!JvXJ+-62SXdNr$;p`hh zT8OeRl1^v4Se2<0Ctyg=3@y1Oy=dNhp|Us1h1x>+U>wy#$cvwd`!{J>5^ik`43Ho%aEQg>aON1ho(p zV7N9usMaz?V7K4lOw#HM$#VFnZ_{A!=h(R`aT`aq@I~@mMaEarE^7#S(a*L{W(oQg z4JLBFUcf5%EW%ht&P@WfMl1xYxo1T%e<@%< z*i>;eGe$%{h0zRghyeC;^jm3olzgH45<`J@&@ag$z`zfrE3PpVSa0RD?bW9NQh`f- zsBzRz?3i!gp2!18XL?fFi&LG>o{R?Z4r{cYTQ_P*)2CEm8R-IhTgEQz+zq8OW2g{v z1mK5ef0Pr$!lf40wxh}VBlpCscV|7qx&_v#4psv&<;2U13C96eE?L3T0Q)(Ox_Y_a zl1zc0wzVXAD`Ch*+0I(OnX=QV7h$G=B|f>|&T0&%O}q+(ziMZq6$_N{nFGP`b}MOt zFE(kPhMm;CUKzw36r!nD!~%Gv62^izav6yn`rey|lJb1+!_&6eQ$Sd*r21ZfiG0I3 zE)jK7diI5n%jo=w6)DwGa$yx^1_f=vihw01u{v3SGTP4DOaadii>~0b^|uq~?Nj7X zSiheEPrxT#SM!a>v#K^~$gn0R!vL2&`{PrUgY0LdE$%S(%2;dEUzDz2VSA)X6-UFu zCyarCnL{~7Ne`wXeLI2ELU#F5ib*ul#3)UG-!^j)Yy>6usMGM5yT3ePt0&Z(Pp^>H zdc+d7;sc|zPRNYHv(ViU9E+N=B_yNu1|}R|j@((R+MP-TQkY($F#s-u*y=qAwWFJl zML5n51FKcRn}dNDORb-wK$wgn^bO?Bglna?;ZO`S08}d)iNr7xjpDE(0PY#MAFaYJ zFXG;itR|3(OaO#~%j8qSg~KYkyC%R5<$Tmhv_>8q7}pVOt^>(db=Bi^D?)q_VKcK_ zJb&8q@e*mJO)Bu?gLxy9Och~hQtxfv40u$?(UhYVgI!?XBtPpEw%}?~l;8WHX`xB^|fIb zVq0TOqsJRG-sL^En&#@M?I~AI$r=@dvV1ca$ z>Suoeg79O~$ZLh=8xI?MvbvR<<|{xqzDs1tCgLa;B9hDl35!(|%tme0gK7{(e7y*}F_( zI+Dtr?8d-FN<|qkcy{yG5n!T35mq)e3ChyfJ%$=BUnD39N2&NTkULvcM6~T?SeXM{ zCamI%xlpyELMd0UQF3A_U}>22gQY}3THF}RwMQOaIweCM_S6b?iGIl~@c#}ZVz5Z? z+tUDOW%5i~lAN4hJ$hd9+V5t?ALz1*Aao@$jbDSIEU$`N!S0K|a66bQ&FWDC;yN}U z<+RxFeR+TH(9le;`_>dx$}?vI%^X-Dk!SA^4t z>unO)t|S_R9b5<$J^;eXz@EtuBX*wzECVjAS|EzT+o2(3ORznG!*5d-F=XEJLW$ zwS-2YEQkyi{R7!3AC0>xpM60w6qY4TCsJ={ZkCVF)&rn@B)BhYDsr`!DO^NL9hpi8 zq@e8IOGwU_)KWpJWDTd#7+#k1g=fFV4o?dvq&*{QeADk=ayNVW6j;y)=s;UZPZGaE z;?vJWATkgFj!Ry0o0WWSFnwN8fc?im^`C?!bj)Gjmm!Yfi$98g(wmgPPu>(7f<@^^ zOqJ6^a9S;v`t^B$!qxyo$00myvqeCuB^sp+jvt8rFZiPFY-S`i6g5>Xi#q{wh@!Ac zP0@QATUk@XVkYViUi)l)0bKQAQbqVkm=#5La&pqB!s1V|aESt2ng3U6_rXF?uXI05(EiMRfIGTytT^k!l%Yw%7 zkuorU|}ba zRl&O#d5ucPNH_wwB+E3pZjUBuR~z8}fCV~bu~W<&bV-PNWPg-EZg}~k}EK{wKVJn>p$X~fTzs-w<_%bDw zQTdA=`&&>yP=xZ7nHT(4)u)l4GTPUu471vT>K3qk0}2QLp$g2QFJl)wYLk@qkozA_ zvoxg3zZAUU2rA^OzyBHAPe{xg22iKQp9mF&UkAopvxXZW+0p^DV=5jq#Q^#bvhgx+<+noy?P3u zw@Rvm@f1x!{SBL)6o6?w20Vy>;Uqs$rLY5nr2&vbG|cxHMh7mafU;4T(16_cC=@6& zF4-p609861!)QquyI&W@YU?j_XERpeG{A)aKZ(bHnGfdaOz{-_ zR)Fy{H1gr2JX|l455*o}ongV5OgA6H+hLf9V(bLTCw>G?8O92jGrw&2l@ZaXn;N0^ zw;EvoERw2uHb8-77ezO`I2pEWR(u9sC1B4wZX0~|6r=7yK`_5q_$whGS<@O+qZ*P5 zJHytE;Y?;Jb-XaHy9u~SO%A2GfrPR739Rvybx>ii`v}m-c5kc_F8cpVlu}EwiIdQo z)M%jv;Mya1qC(X_A6V22Y(vIoUkIqEN)X%fL@@j>=Usuil>{FS0HF&|+G*=APr2mc zRT_Nx6IEt-sths@0%_5+H3D?zZOhYVC*^kEuI7QIYFkHfPwoRG{2g^gy*u)t~=NF#1zBVYK?c*${RCr9<06oB2^xN#R- z>F|Bk5J-8+G(3~yGW1HVfpo|^XxIM5Y?JFm%V=QJ1C~hXB@jhb0A=syOv6fkM4qxJ z45QHmWxSCy0Ebu(ssNv!2BiF+H9o5VmL~+J3WG`_c1IC$^+09tO=12USsipaz`Kl8 z{AU!t$O1Ec6YitQRRAN=zm^TfNOZ!{t~qe{I{EvzM2j>O@kFyC<^Q35-W3>0a0S=wggOKNvVr6-~j*A z0Rp_xU6q{ynq4yG8j^$(8vEq%7t1FV&XE5hSKp)Lb4p5C5NzoKBtWfF!wR-f>1H82 zJpqdB-8?{nIlsWlZ=QW4TOPA$0G9KB+O!|M_b$X-qNiiS4965ymvOjisl|3Y{Z+xbfpHfafa=tOUxE(%^U|QcW2UhZ6;=B zLcV>P)<%xSw)3p_adC8 zj?Ql>;*xViPHdn8ot<8*6CC!a$`Ltm-j|r+fP{ca&TS&%_NIwE5d&5$RFl~I(y5K~ zHhFq#$vm^U@uW}VcM+u%fUUhQr$jEcY1xObb;PF0pej-xZq{i#Bb^l^tMB1q2-MMr zlq@u1%!o*r+gpv}9WM)(+PDLe`!&>+ghv3i1MOUx@KgMfHgFt_x4C;W@q#3 z>QF{UA9@i&TfucWa`gY#(RBwx`Ty~6WRHIKZjep(4B6unXPzxx_KpjOl(rK#HS*NZzS_ptW=+OjmSdH&Gj!?Gr|ZXU z)hae%1DT^&e(lD~6Ic;VKcsDOiCWF6!JWafIyROqJw2U)V>jMH6n1|md#}32bFe-n z=mGvB@qb$j3G4sE!Pz(FSM~M59m5!w z-kBizcc7#yhm9mEi-Vp0=}7Zkt3N-MlpU);#wL-)8%m%Z%a>uhM>oz6I-g(p=0A=6y(%Q;J4oONkSc{S zZm&%S?%_b`;$BY}w^#~ri{~7-c6AZwD}BNit}FAX6<8un?B}8)6LE3$w0%kL8UJHi zPQG)o-Wa@|1^fQ)s5NeaJNnYat7xvTPmhim#T-x79DdIwT6K7kuJFOrveRRnW_&ar zy8TCgO*P>N%UDr`hA+N+hUN5b>i+W-T<&2x1`|y-qc(ke^+2{Iv~OjBI$d&~X}z9i zAmt;hrhiQb1IOVFH=#SpC^ELFXzNtIAsWB$<~+Q8ebe)^aj!OM{I|A*&0!X$-+o+` z#bsU>S0$qge-t&`##`qYK^QfBU-O$!(b1gT@dnl_L3%7JpmnfJiviaF9b_3MIr$&S zeA0YA=j_KhR8a4;_R#6DAFO-*`&xR?`Q6mFFW9vyg3CMGE=i?58-^TddE3+3sCF-} zuZuUp938I(hmw9#Yp8B)P#+i|$z&<&Pe@gJzthsJM-ny1} z5O%fzLS7}7|Ge?hnL(3&3i^JXZ=t(-;t zkdfb4rMebzXZLG6xkML1q>DFQ%Imv&X5pRZy%!fHiV=s5`M1`bCeLwh%u9QG@7uTf z$h;N;D6`~FJ~i#jgmpe*YCgX*__ojsxj{vTK>YS0jluKUvA`hwEZAN2*t>V{j>>$I z#s1^@a&!A2V>^^jL>iL4cgr$!PjiO)nv)VaRbu-4hMJ~JXf(f@n^#OpNr@lM+ey67 zJ2gIDC$9GjL_5sDy~A%Id|jqg?TdpZx92o(!ZGV;kJ^``yeXs!`M}W7!1U8g5C~+g z|Cf2?ZR_$DaSNPyR=n7sEwsC*+<*=3JSAe zPQRwURJZD=)_%*#HfP$rR)Tu~T=nS4=-WdO5m1USeHcP5cbvO&yTZdN zVCoqPONa;T8~OKLlD3?PD(cIkI3R^P5g)UiZk5S<+Ov>kqF(9mS{SkbG_ycM0Jyd23IT-O%d>tvRnNjl&up!ohdw+jDAa zYGLJ)l`XQbOS6l!yq70yC1FOc#Z3H}SML=mv-HPa$&t_zbTgWa#}>BKm6wy0gdN2v z@rmhVUX@4dxp!(3Az&vbOlOudUI<@;Rc16kKcpDPJL7d3_9O*7oOwE><%vjjX*yPh z%5~lql&sJP99E zD*uC_Ea(Uz69S_^JRu4KP3{BWBLMYaR!Wo`pPxt1d9B-1u-t`Y+d~Ur3!j@?)`36i znmwb4a(2E=xrcP$1Hj=1Ef1IReQNd02_NSawMY4(==0Iug5^k()_S%F0`=e_tiWsg z+Gk*1&U4T6qZOVrx*)z%svE$%7z;(@)Vt=;v6#bC9Us)Et;rw0qEsdxVTsEtVL`wzta>h8a=yG%ho zN@Hdgz;uhnp^wYA=NT4j8Y*(86OUq?1PCqf3B0DPOyg?K`uh4_PtzKI<+UkI8=HJ) z3Wz>2*;}C$sv$c$IXRTZr#D{{Xp902H+Un@buGRiC&%@QGlu;9#iwuYo=e?-`yXL@ ziH4MdF7tts-#2w)-gCP%*i~iSK^h^)^TkEGwY9alzC1t1eQFAz7#SUrQVfzDOud#0n&3WMdDS7KOOr8iTv1Wc7Q1b5 zTz$o@=nJjR&>|Rm?ab{2$|{2frcR~0p)=-ccnR`cn336p&k=3UIj(W#gJ4N!BnKB;V$a1n@9o>Roq2=-YvqkC^-8$Oc%G>1yWeC- zkp!aMw>#)-KS-8O3z7x_iw*t0PkwQknJBuQDn86I6I!V zs%c3{v??dFW{O!s)Dah>jwTl4x7Ki)LuQRh4(w8oE;BMQq1l)j8F@F?`Z8#AU}5>3 z+gxi^Z`{lMj#6xF2AYOBkpojY!a;7gKqulQd9TH%^PCHkS2Z@n4E(A79BuaMCyE96 z`K0nh$ZwZ%@E~=K>+4>kG#5FPr%QrYsFX4fe;-exDk}%C_S?~Im)E~<#$b$$S`3}G z-{QoL!ZCkxMd6D-{F@ukcE8MgY}D1)H@F{qwx9g;?SG-wp=Gj0bIReLSwL=ucu<>q z5U;8@51836YgD8h9r1hhnpo)^JEtQxJ+-ctmDK_>C#Q(7(9fSg4MtnURm57BR3xuM zQ}9x-!6_##=WAH9QHGx(Kac*zm86!azQ1q}YLf4G%P!Yc6t~TRYz}5z8&v5cIPHFZ zL(%*9;$YpPpyTmWlckka+|rvM_|PfOrw+L5LS}@>wav+*9Lsd6l*&EZ*P|H=dH+d% z1pViXI2_K+Tk5qY3*n}=0ho7Lz`1v0KQ<3)%1-ArRoDW(=K`%3(*QowdhyNyW7bQ_ zcWU$s)qZ><#XHpWjfn(NY>oVS4w4JHe-W}5?olvU>rQ+pyhJF6r++)11oe!xrM9jP z?+vv}#P&(W42s$+iiE_(^&hT=fwW!SpxJ}Z!tV3~iTEv%!OzF8p}UF~IL%GvrLkXU zy?>LtLr>?mZXeB*Trlr^Z0r}j7S4MX|3+gdixGl$J?ArGHe%ZWX=}rKg7*T?<1#us z>+}k@uJgZ6w3|oir9Q5n;-N~V90F0&kk^M(%UZ-i9*2bgHRIMc4=DcrCv|qx4?4H! zRY~3jMq!Rny2*Vj{E6%KNMxA%*7q`YwJ^mlmG1xX@FaJP?Coxe-0gX7X65Y{%_@O;cF}Wmc+ko(4_qpT6 zIn3%6GP#TN?_$8@GF$I&vJHts3Gtb)zc&;S6PQp7f%I;puGB?kzW)B6Iw^r*a{r-P`o=oP<$icA7?iOyqIU76V16&CCxs`*5D# zr)!+*ks6ia$4@%xyp;OVJkQ%j%WP-dLSWWhOv%>=6-8?=dkTN#O05^nAsmgYb6 z0I>WBBg|4EvhRL7a?yzMsjrvM`7bbO`v?{n_2 zu9pxgjApBg3GzUpK|XLE*?w6%@At8Wn5lF?fp%i**$RAL9U5h_>9#bj^mT#}A&~x0 z0~*oL zI3{p9xVIYY>MJ!{51_Od+b1OaOIqrt8{!xyCb!JZH3klM{bk z3txx{(v{*D8e{iS5~!W(KS{8%1JG<=C|qXd4%(kEL8~{vX|6pkP2}SFT$J^lEYI~@ zxR~VntuOsM4Rq*Wi0eyc0CAU+_%m~xfg@*?o*l6Z32f+3=I3FB01(WubTo_DuN5P`nf%mZ&DP%jW=a?hpxfg*4gA?m4v%mKMRmYl-pU!llykT7ALP>mYHR0HQ4ILK(I zm%lOQ)gsEM)&4TJ)u zA0-ggWAuC3!(UoNIxtDM)E^iX^zZqK<*~TEXNe|aTAvqfc=8GvRdCAYPjRox#0tSh zBGnZSAc{6EHE0t>o_OKqgw}r;A3iH>BY0t!p$V*-zGeoiKLq&$Wd%IYBSg5atb1eD z1hAun)#1RYlH}L6U(G-~E)AI+3rte+W5HauaM~!cO%O`F2^K|)$r&ZePei;z(nj6` z1(J)yl+Zkukx81@V8A)F3D~2)u#543W>UZ4joAu zMq$Hy$`#LD@Cyrd0@X=_n&Z@PBE}c$pRV?|%%6K#G&fCSN+wDGd~WW393Kx~svVnA z*2ml-AY}H{Qa718{W}9bZy9PZLkEzDrVmCc{uzj$w~SlxHO=tWer;0dBT6UxeK_`b za8bep5~dEY#7ac8NQyeyeIauu7?>XNm%L10f<-rDZ=zYff!WT>6KIpUQ=@LdK8|ZP z2?1}bQ>JqQFVrxj8emUz;;eI<0j+QEo=i0LEOMYjEFIdxUoe^UrTJ~M3foqJ*T0Qn z2eu;fjx!81F+a;5s#_`ppJIVGJ&#N0sB^7whEW5(7w==m5$9qoYVDM78ehprlS#BY zcZx!KK}7^CO&som<>uE}_7kXIA&4d0&8f&L9`>;Cl5WaO?F>U#&oNlPU2s#bBlMH1UQz%1QCqin^B$@eXM+2(bP-82l^Y z6(NI;VoK$pBxjoG#Mz6W+H1Rz94^ZuW78GbnhyWZib@G@=J7V!OL@&c%wzM9#Ra0R z3-b#H3hu$uhrG7wb6bDu7AJYjV;u1nBPQ&txHU?&YgBP|_K70uEh8|yvaReIsj}1x zv|=P_U`{ClSw`c@qk|tz7I8*%&ASts2-N+LZJtuXV=J?3Vqd&E(^Xu|g5K6IDI7iY zdgXrs5wu9@V{a6Q_AioTvW6?8qjme6i!^Pli)u-_)u{szrdvD6F45&Eq6~bdU9`Df zs9-zSKfBoO)rK*SGJ#T2^G#P6;LEerz%t}ZoT*Q*(~$cTXVK08n~|cO3HM)Dfw>b} z2E$sO@N?>h=qo1Ae{xz<3!;L_kI;_HeWsh9;oRx|SUv&vgy_#oPx#N_Vnet`Sq^yr z7DEybG1NV6E-tRUyYfkS_U=gx5LA`fy4AW|C75Vv3D%GQwWQ5n7R>fDhhotXA-Z*` zwtg|+f;d(dmUjyawztgsHa1*345vB)ZL}U^EjRLsvMvU1m4)srS_c*_S53~cKuvM3 zlh{&8Rq?W+v{wB3I)DFgQI(QADmC>=Sa`T|A<)4&MLj({nj1e;Ub&JJEkq!kH_H%W zL|P6|C#OR z(Caav?JLp%%EZX{KUP+Oxsw)4_EA3b{^Xw)s?0u?ZA2DeKN(BgmquPK8`V=UImk6? zy7N#-S4XGSx^#PxG2Zk3{p+B2SD8H*crbmwnvvVw0&(m#d~<4witNNj#+}O+-`r4? zEWT|fNC(v-Ya70aZBVa=!YfHJZqHdNI6y-I5~<9~$A^a2zWHu05ii<7co@&h$~xi) z)ZAj#P*zZNc(0b{+_Km7_HM9)t)iF&4AmbzD7O=s)kRp&3YC1hQ6#Q6IVzd-D*zpn zQ9Nk~Xg>h~0dfHAv*E=fPtB*4qvvL4zY*{=r%*0$UK>Y8i3Vd+yL^51#KgpfK@DNG zTes+GSjApg3TtH9dUMOA3#cYr*hHIf7omwC&iz?(z`LX|*cXtHkoX;sD~vjgc6KUr z=n7313UJbN2OsiMQ&aCY$#2QeT=7bLv0D0YLZqa(tIMudCYj=e9OUq3MK|&!oy@}0 zawL#=PiOu35j<9M$I;^&N8-(TNMM!@WJg0o!|IhwGGQJuA1~B#JUu;qbc>`w4ARd?kCMl-05?%vfhGD@KZHw^W#GWyW8*>bYvPHI8| zweZUkm3@f*u6w%%-ERk9w@uDQ%UM>{BL zqQy02pFFOU=UC9)iLzkNDm$ebw|LUs%Um1Ahy1LYbW(TJFf|JE?!=xd*53W7>HiEiDG|m% zsDezmb7vOQq4f$K!cQ!S!?a^|poz+}hWqDn415(4(v?-2ji!_aBA@h4r$`UxA>;?%G&50J6gyz9>b7@^WA2ODHfBI~ zs9B!0T4kYL4^St}Ev(mz!I7HL9LJrecbpz~b)*{)nIK^cP6JsR77Oq!$FDx{62{EQ zT*m`G8vz2s0<@QoScFh!r9#)Y50Sn2^{w^vo~)UxWWyQ(rIUK5rV$jFGpC zuVujbc~ti_4LWNYqxzUdz;=OOrtW@4x!P%A9reW_+B%$B7baoyh?I~;oSyqY6h&f1%T47R}=v?qZy-oD4Ke=%=lG$Zb{Y6=2(2)8KOg3uOt)RXw zbsN?0`OJZ>Y_6(pl-AW-wmfGYf)uSEnO@Lh-;o>?LqH6o= zc?N^wTyFM=YDm?=^~jG@Sw@Z@`^|s4?D>&(JBaA{7WiZ45ORp^t&}cntMzWh{P!irQy0y-Lbf8xF z=oAB4t$vdARcs;-C7ZGh-SW?L*t>IblQCW}diu|egM7OmfCz?z#_LnN4d^(%t+B!j za$5H5IawAER`z5VC|Yt!gykFRzGiVMXgBN>dABtUKELbOizS_8m?iJNhbdJqDV4`B z=q}5`Mr+4m3y<~oWE0JtWaoA)of14h-|AlE;^-cK&-QuW)8w^(XdvMT*Q0Qi)UsMO z(}AZSX^*sWh5npvwqCH{WO22KEp|kk47FHyP|I-}1Yl($jYlskr-Oy@pD^}s{JwwF z2)*T5El}01&TF8M?N*;D0#higUK!=ux*_5dk+BLXlP*L=MPhRi%_3S~rw3bFw($6Q z4d-YNlr;~MYxWdcs2n%{dVm!Z%OO=M^-(8xKsX71(uVgob!I?vm*v#tEYrd}khhbn zTh8s4!H4g4I2(cCvBi9=pTIZ;+FSfr){9E;W|a}YI%+o=kCgr z1)Z<;DsYa=>k2dnv@p|{?u*I=mo=M~X%=ms%3rHUTm&6H#j;eTw`du{`OHFOn}MYY z8T--Q^ugUdHwLqsmx={Z7B+lh6B(Nj?Xj$7|Kqto9=NM!!%x7dT-^ZAS1Q-LyS!G* zTkfc;L`4f07;vc<+`oO_dt7k3d7Nr>zsl}hHz)~ae?Jk$PmO;ng;LL|nxqQ1E^FrM zZ;;G(YBS2kq56_S3Z1fhUOC%I__RDW360}wYE*uX=ygyVx&>!_d|?v)HRc2PCqu4H zN{U9h@X^_92TL07l0>o*Jx(0}2CezETMQ~#A{-q0&}WS9w_C7OZ~s!9t#$~m7kowk P2fhq+jI=SD_apxg@N04< From ec65ac251b5d9d8ed9e0202257951baa44a44d74 Mon Sep 17 00:00:00 2001 From: Max Stein Date: Thu, 19 Nov 2020 17:16:27 -0800 Subject: [PATCH 20/75] Updating MDM section --- .../client-management/mdm/mdm-enrollment-of-windows-devices.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/mdm-enrollment-of-windows-devices.md b/windows/client-management/mdm/mdm-enrollment-of-windows-devices.md index 5693d6c5f1..f74caeda09 100644 --- a/windows/client-management/mdm/mdm-enrollment-of-windows-devices.md +++ b/windows/client-management/mdm/mdm-enrollment-of-windows-devices.md @@ -12,7 +12,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: manikadhiman -ms.date: 11/15/2017 +ms.date: 11/19/2020 --- # MDM enrollment of Windows 10-based devices From 9a60e56f3611913ea93c87acb3b6023c8d38d885 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Fri, 20 Nov 2020 11:36:43 -0800 Subject: [PATCH 21/75] Removed deprecated policies --- .../mdm/policies-in-policy-csp-admx-backed.md | 19 - .../policy-configuration-service-provider.md | 57 - .../policy-csp-admx-credentialproviders.md | 143 -- .../mdm/policy-csp-admx-userprofiles.md | 1342 ----------------- 4 files changed, 1561 deletions(-) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index d9c44122bd..1f50c812bc 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -101,9 +101,7 @@ ms.date: 10/08/2020 - [ADMX_ControlPanelDisplay/CPL_Personalization_StartBackground](./policy-csp-admx-controlpaneldisplay.md#admx-controlpaneldisplay-cpl-personalization-startbackground) - [ADMX_Cpls/UseDefaultTile](./policy-csp-admx-cpls.md#admx-cpls-usedefaulttile) - [ADMX_CredentialProviders/AllowDomainDelayLock](./policy-csp-admx-credentialproviders.md#admx-credentialproviders-allowdomaindelaylock) -- [ADMX_CredentialProviders/AllowSecurityKeySignIn](./policy-csp-admx-credentialproviders.md#admx-credentialproviders-allowsecuritykeysignin) - [ADMX_CredentialProviders/DefaultCredentialProvider](./policy-csp-admx-credentialproviders.md#admx-credentialproviders-defaultcredentialprovider) -- [ADMX_CredentialProviders/DefaultLogonDomain](./policy-csp-admx-credentialproviders.md#admx-credentialproviders-defaultlogondomain) - [ADMX_CredentialProviders/ExcludedCredentialProviders](./policy-csp-admx-credentialproviders.md#admx-credentialproviders-excludedcredentialproviders) - [ADMX_CredUI/EnableSecureCredentialPrompting](./policy-csp-admx-credui.md#admx-credui-enablesecurecredentialprompting) - [ADMX_CredUI/NoLocalPasswordResetQuestions](./policy-csp-admx-credui.md#admx-credui-nolocalpasswordresetquestions) @@ -723,31 +721,14 @@ ms.date: 10/08/2020 - [ADMX_UserExperienceVirtualization/Video](./policy-csp-admx-userexperiencevirtualization.md#admx-userexperiencevirtualization-video) - [ADMX_UserExperienceVirtualization/Weather](./policy-csp-admx-userexperiencevirtualization.md#admx-userexperiencevirtualization-weather) - [ADMX_UserExperienceVirtualization/Wordpad](./policy-csp-admx-userexperiencevirtualization.md#admx-userexperiencevirtualization-wordpad) -- [ADMX_UserProfiles/AddAdminGroupToRUP](./policy-csp-admx-userprofiles.md#admx-userprofiles-addadmingrouptorup) - [ADMX_UserProfiles/CleanupProfiles](./policy-csp-admx-userprofiles.md#admx-userprofiles-cleanupprofiles) -- [ADMX_UserProfiles/CompatibleRUPSecurity](./policy-csp-admx-userprofiles.md#admx-userprofiles-compatiblerupsecurity) -- [ADMX_UserProfiles/Connect_HomeDir_ToRoot](./policy-csp-admx-userprofiles.md#admx-userprofiles-connect-homedir-toroot) -- [ADMX_UserProfiles/CscSuspendDirectories](./policy-csp-admx-userprofiles.md#admx-userprofiles-cscsuspenddirectories) -- [ADMX_UserProfiles/DeleteRoamingCachedProfiles](./policy-csp-admx-userprofiles.md#admx-userprofiles-deleteroamingcachedprofiles) - [ADMX_UserProfiles/DontForceUnloadHive](./policy-csp-admx-userprofiles.md#admx-userprofiles-dontforceunloadhive) -- [ADMX_UserProfiles/EnableSlowLinkDetect](./policy-csp-admx-userprofiles.md#admx-userprofiles-enableslowlinkdetect) -- [ADMX_UserProfiles/EnableSlowLinkUI](./policy-csp-admx-userprofiles.md#admx-userprofiles-enableslowlinkui) -- [ADMX_UserProfiles/ExcludeDirectories](./policy-csp-admx-userprofiles.md#admx-userprofiles-excludedirectories) - [ADMX_UserProfiles/LeaveAppMgmtData](./policy-csp-admx-userprofiles.md#admx-userprofiles-leaveappmgmtdata) - [ADMX_UserProfiles/LimitSize](./policy-csp-admx-userprofiles.md#admx-userprofiles-limitsize) -- [ADMX_UserProfiles/LocalProfile](./policy-csp-admx-userprofiles.md#admx-userprofiles-localprofile) -- [ADMX_UserProfiles/MachineProfilePath](./policy-csp-admx-userprofiles.md#admx-userprofiles-machineprofilepath) -- [ADMX_UserProfiles/PrimaryComputer_RUP](./policy-csp-admx-userprofiles.md#admx-userprofiles-primarycomputer-rup) -- [ADMX_UserProfiles/ProfileDlgTimeOut](./policy-csp-admx-userprofiles.md#admx-userprofiles-profiledlgtimeout) - [ADMX_UserProfiles/ProfileErrorAction](./policy-csp-admx-userprofiles.md#admx-userprofiles-profileerroraction) -- [ADMX_UserProfiles/ProfileUnloadTimeout](./policy-csp-admx-userprofiles.md#admx-userprofiles-profileunloadtimeout) -- [ADMX_UserProfiles/Readonlyuserprofile](./policy-csp-admx-userprofiles.md#admx-userprofiles-readonlyuserprofile) -- [ADMX_UserProfiles/SlowLinkDefault](./policy-csp-admx-userprofiles.md#admx-userprofiles-slowlinkdefault) - [ADMX_UserProfiles/SlowLinkTimeOut](./policy-csp-admx-userprofiles.md#admx-userprofiles-slowlinktimeout) - [ADMX_UserProfiles/USER_HOME](./policy-csp-admx-userprofiles.md#admx-userprofiles-user-home) -- [ADMX_UserProfiles/UploadHive](./policy-csp-admx-userprofiles.md#admx-userprofiles-uploadhive) - [ADMX_UserProfiles/UserInfoAccessAction](./policy-csp-admx-userprofiles.md#admx-userprofiles-userinfoaccessaction) -- [ADMX_UserProfiles/WaitForNetwork](./policy-csp-admx-userprofiles.md#admx-userprofiles-waitfornetwork) - [ADMX_W32Time/W32TIME_POLICY_CONFIG](./policy-csp-admx-w32time.md#admx-w32time-policy-config) - [ADMX_W32Time/W32TIME_POLICY_CONFIGURE_NTPCLIENT](./policy-csp-admx-w32time.md#admx-w32time-policy-configure-ntpclient) - [ADMX_W32Time/W32TIME_POLICY_ENABLE_NTPCLIENT](./policy-csp-admx-w32time.md#admx-w32time-policy-enable-ntpclient) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index c4ea4193bf..99fad505b6 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -485,15 +485,9 @@ The following diagram shows the Policy configuration service provider in tree fo