From 4d50e0a9152749c3148afebfe0d4ceb1810a28f7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thomas=20Sj=C3=B6gren?= Date: Fri, 28 Feb 2020 11:03:47 +0100 Subject: [PATCH 01/30] more generic, but still very basic, ansible task examples. MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Thomas Sjögren --- .../linux-install-with-ansible.md | 57 +++++++++---------- 1 file changed, 27 insertions(+), 30 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md index 8eae3591a3..450863a5b1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md @@ -1,6 +1,6 @@ --- title: Deploy Microsoft Defender ATP for Linux with Ansible -ms.reviewer: +ms.reviewer: description: Describes how to deploy Microsoft Defender ATP for Linux using Ansible. keywords: microsoft, defender, atp, linux, installation, deploy, uninstallation, puppet, ansible, linux, redhat, ubuntu, debian, sles, suse, centos search.product: eADQiWindows 10XVcnh @@ -14,7 +14,7 @@ author: dansimp ms.localizationpriority: medium manager: dansimp audience: ITPro -ms.collection: M365-security-compliance +ms.collection: M365-security-compliance ms.topic: conceptual --- @@ -36,14 +36,13 @@ This topic describes how to deploy Microsoft Defender ATP for Linux using Ansibl Before you get started, please see [the main Microsoft Defender ATP for Linux page](microsoft-defender-atp-linux.md) for a description of prerequisites and system requirements for the current software version. - Ansible needs to be installed on at least on one computer (we will call it the master). -- Passwordless SSH must be configured for the root user between the master and all clients. +- SSH must be configured for an manager account between the master and all clients. - The following software must be installed on all clients: - - Python-apt - - Curl - - Unzip + - curl + - unzip - All host must be listed in the following format in the `/etc/ansible/hosts` file: - + ```bash [servers] host1 ansible_ssh_host=10.171.134.39 @@ -67,7 +66,7 @@ Download the onboarding package from Microsoft Defender Security Center: ![Microsoft Defender Security Center screenshot](images/atp-portal-onboarding-linux-2.png) 4. From a command prompt, verify that you have the file. Extract the contents of the archive: - + ```bash $ ls -l total 8 @@ -84,7 +83,6 @@ Create subtask or role files that contribute to an actual task. Create the follo - Copy the onboarding package to all client machines: ```bash - $ cat /etc/ansible/roles/copy_onboarding_pkg.yml - name: Copy the zip file copy: src: /root/WindowsDefenderATPOnboardingPackage.zip @@ -92,29 +90,32 @@ Create subtask or role files that contribute to an actual task. Create the follo owner: root group: root mode: '0644' + + - name: Add Microsoft apt signing key + apt_key: + url: https://packages.microsoft.com/keys/microsoft.asc + state: present + when: ansible_os_family == "Debian" ``` - Create a `setup.sh` script that operates on the onboarding file: ```bash - $ cat /root/setup.sh - #!/bin/bash # Unzip the archive and create the onboarding file mkdir -p /etc/opt/microsoft/mdatp/ unzip WindowsDefenderATPOnboardingPackage.zip cp mdatp_onboard.json /etc/opt/microsoft/mdatp/mdatp_onboard.json - - # get the GPG key - curl https://packages.microsoft.com/keys/microsoft.asc | gpg --dearmor > microsoft.gpg - sudo mv microsoft.gpg /etc/apt/trusted.gpg.d/ ``` - Create the onboarding file: ```bash - $ cat setup_blob.yml + - name: Register mdatp_onboard.json + stat: path=/etc/opt/microsoft/mdatp/mdatp_onboard.json + register: mdatp_onboard + - name: Copy the setup script file copy: src: /root/setup.sh @@ -124,7 +125,8 @@ Create subtask or role files that contribute to an actual task. Create the follo mode: '0744' - name: Run a script to create the onboarding file - script: /root/setup.sh + script: /root/setup.sh + when: not mdatp_onboard.stat.exists ``` - Add the Microsoft Defender ATP repository and key. @@ -142,28 +144,22 @@ Create subtask or role files that contribute to an actual task. Create the follo > [!NOTE] > In case of Oracle EL and CentOS 8, replace *[distro]* with “rhel”. - - For apt-based distributions use the following YAML file: - ```bash - $ cat add_apt_repo.yml - - name: Add Microsoft repository for MDATP + - name: Add Microsoft apt repository for MDATP apt_repository: repo: deb [arch=arm64,armhf,amd64] https://packages.microsoft.com/[distro]/[version]/prod [channel] main update_cache: yes state: present filename: microsoft-[channel].list + when: ansible_os_family == "Debian" - name: Add Microsoft APT key - apt_key: - keyserver: https://packages.microsoft.com/ - id: BC528686B50D79E339D3721CEB3E94ADBE1229C - ``` + apt_key: + keyserver: https://packages.microsoft.com/ + id: BC528686B50D79E339D3721CEB3E94ADBE1229C + when: ansible_os_family == "Debian" - - For yum-based distributions use the following YAML file: - - ```bash - $ cat add_yum_repo.yml - - name: Add Microsoft repository for MDATP + - name: Add Microsoft yum repository for MDATP yum_repository: name: packages-microsoft-com-prod-[channel] description: Microsoft Defender ATP @@ -171,6 +167,7 @@ Create subtask or role files that contribute to an actual task. Create the follo baseurl: https://packages.microsoft.com/[distro]/[version]/[channel]/ gpgcheck: yes enabled: Yes + when: ansible_os_family == "RedHat" ``` - Create the actual install/uninstall YAML files under `/etc/ansible/playbooks`. From 4f486768b36336c72445ce4b72ef71d3389f3f79 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 4 Mar 2020 09:29:57 -0800 Subject: [PATCH 02/30] Update linux-install-with-ansible.md --- .../microsoft-defender-atp/linux-install-with-ansible.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md index 450863a5b1..bb330229c8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md @@ -36,7 +36,7 @@ This topic describes how to deploy Microsoft Defender ATP for Linux using Ansibl Before you get started, please see [the main Microsoft Defender ATP for Linux page](microsoft-defender-atp-linux.md) for a description of prerequisites and system requirements for the current software version. - Ansible needs to be installed on at least on one computer (we will call it the master). -- SSH must be configured for an manager account between the master and all clients. +- SSH must be configured for an administrator account between the master and all clients. - The following software must be installed on all clients: - curl - unzip From b8ce93bd024b7cfc0314bb5acff99bb70831d84f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thomas=20Sj=C3=B6gren?= Date: Thu, 5 Mar 2020 10:04:40 +0100 Subject: [PATCH 03/30] update sentences, add python-apt, based on PR comments MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Thomas Sjögren --- .../linux-install-with-ansible.md | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md index 450863a5b1..584195de6e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md @@ -36,9 +36,10 @@ This topic describes how to deploy Microsoft Defender ATP for Linux using Ansibl Before you get started, please see [the main Microsoft Defender ATP for Linux page](microsoft-defender-atp-linux.md) for a description of prerequisites and system requirements for the current software version. - Ansible needs to be installed on at least on one computer (we will call it the master). -- SSH must be configured for an manager account between the master and all clients. +- SSH must be configured for an administrator account between the master and all clients, and it is recommended be configured with public key authentication. - The following software must be installed on all clients: - curl + - python-apt - unzip - All host must be listed in the following format in the `/etc/ansible/hosts` file: @@ -78,7 +79,7 @@ Download the onboarding package from Microsoft Defender Security Center: ## Create Ansible YAML files -Create subtask or role files that contribute to an actual task. Create the following files under the `/etc/ansible/roles` directory. +Create subtask or role files that contribute to an actual task. First create the `copy_onboarding_pkg.yml` file under the `/etc/ansible/roles` directory: - Copy the onboarding package to all client machines: @@ -98,18 +99,19 @@ Create subtask or role files that contribute to an actual task. Create the follo when: ansible_os_family == "Debian" ``` -- Create a `setup.sh` script that operates on the onboarding file: +- Create the `setup.sh` script that operates on the onboarding file, in this example located in the `/root` directory: ```bash #!/bin/bash - + # We assume WindowsDefenderATPOnboardingPackage.zip is stored in /root + cd /root || exit 1 # Unzip the archive and create the onboarding file mkdir -p /etc/opt/microsoft/mdatp/ unzip WindowsDefenderATPOnboardingPackage.zip cp mdatp_onboard.json /etc/opt/microsoft/mdatp/mdatp_onboard.json ``` -- Create the onboarding file: +- Create the onboarding task, `onboarding_setup.yml`, under the `/etc/ansible/roles` directory: ```bash - name: Register mdatp_onboard.json From 6d3e8c1529c2de82a7466da09aeacaf3ac05e648 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Thu, 12 Mar 2020 10:18:06 -0700 Subject: [PATCH 04/30] software inventory --- .../microsoft-defender-atp/tvm-software-inventory.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-software-inventory.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-software-inventory.md index 4428d8a925..9c6980bfab 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-software-inventory.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-software-inventory.md @@ -8,16 +8,16 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security -ms.author: dolmont -author: DulceMontemayor +ms.author: ellevin +author: levinec ms.localizationpriority: medium manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual -ms.date: 04/11/2019 --- # Software inventory + **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) From 299c02f809ce3485fa1cf3bca55e1df952d05e6c Mon Sep 17 00:00:00 2001 From: magdavuko <50476079+magdavuko@users.noreply.github.com> Date: Fri, 13 Mar 2020 15:25:39 -0700 Subject: [PATCH 05/30] Update hololens-calibration.md Correcting info about when calibration prompt pops-up. --- devices/hololens/hololens-calibration.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/devices/hololens/hololens-calibration.md b/devices/hololens/hololens-calibration.md index cfc55d1070..dcba528079 100644 --- a/devices/hololens/hololens-calibration.md +++ b/devices/hololens/hololens-calibration.md @@ -33,7 +33,8 @@ HoloLens 2 prompts a user to calibrate the device under the following circumstan - The user previously opted out of the calibration process - The calibration process did not succeed the last time the user used the device - The user has deleted their calibration profiles -- The visor is raised and the lowered and any of the above circumstances apply (this may be disabled in **Settings > System > Calibration**.) +- The device is taken off and put back on and any of the above circumstances apply + ![Calibration prompt](./images/07-et-adjust-for-your-eyes.png) From bed8a22deacc46a70870185db9e9294e203f1650 Mon Sep 17 00:00:00 2001 From: Baard Hermansen Date: Sun, 15 Mar 2020 16:13:40 +0100 Subject: [PATCH 06/30] Update about-app-v-51-reporting.md Added markdown for PowerShell code and Note. Converted one table to markdown style. --- mdop/appv-v5/about-app-v-51-reporting.md | 170 +++++++---------------- 1 file changed, 48 insertions(+), 122 deletions(-) diff --git a/mdop/appv-v5/about-app-v-51-reporting.md b/mdop/appv-v5/about-app-v-51-reporting.md index b37f88f1db..381a1231a7 100644 --- a/mdop/appv-v5/about-app-v-51-reporting.md +++ b/mdop/appv-v5/about-app-v-51-reporting.md @@ -16,36 +16,32 @@ ms.date: 08/30/2016 # About App-V 5.1 Reporting - Microsoft Application Virtualization (App-V) 5.1 includes a built-in reporting feature that helps you collect information about computers running the App-V 5.1 client as well as information about virtual application package usage. You can use this information to generate reports from a centralized database. ## App-V 5.1 Reporting Overview - The following list displays the end–to-end high-level workflow for reporting in App-V 5.1. -1. The App-V 5.1 Reporting server has the following prerequisites: +1. The App-V 5.1 Reporting server has the following prerequisites: - - Internet Information Service (IIS) web server role + - Internet Information Service (IIS) web server role - - Windows Authentication role (under **IIS / Security**) + - Windows Authentication role (under **IIS / Security**) - - SQL Server installed and running with SQL Server Reporting Services (SSRS) + - SQL Server installed and running with SQL Server Reporting Services (SSRS) To confirm SQL Server Reporting Services is running, view `http://localhost/Reports` in a web browser as administrator on the server that will host App-V 5.1 Reporting. The SQL Server Reporting Services Home page should display. -2. Install the App-V 5.1 reporting server and associated database. For more information about installing the reporting server see [How to install the Reporting Server on a Standalone Computer and Connect it to the Database](how-to-install-the-reporting-server-on-a-standalone-computer-and-connect-it-to-the-database51.md). Configure the time when the computer running the App-V 5.1 client should send data to the reporting server. +2. Install the App-V 5.1 reporting server and associated database. For more information about installing the reporting server see [How to install the Reporting Server on a Standalone Computer and Connect it to the Database](how-to-install-the-reporting-server-on-a-standalone-computer-and-connect-it-to-the-database51.md). Configure the time when the computer running the App-V 5.1 client should send data to the reporting server. -3. If you are not using an electronic software distribution system such as Configuration Manager to view reports then you can define reports in SQL Server Reporting Service. Download predefined appvshort Reports from the Download Center at . +3. If you are not using an electronic software distribution system such as Configuration Manager to view reports then you can define reports in SQL Server Reporting Service. Download predefined SSRS Reports from the [Download Center](https://go.microsoft.com/fwlink/?LinkId=397255). - **Note**   - If you are using the Configuration Manager integration with App-V 5.1, most reports are generated from Configuration Manager rather than from App-V 5.1. + > [!NOTE] + > If you are using the Configuration Manager integration with App-V 5.1, most reports are generated from Configuration Manager rather than from App-V 5.1. - +4. After importing the App-V 5.1 PowerShell module using `Import-Module AppvClient` as administrator, enable the App-V 5.1 client. This sample PowerShell cmdlet enables App-V 5.1 reporting: -4. After importing the App-V 5.1 PowerShell module using `Import-Module AppvClient` as administrator, enable the App-V 5.1 client. This sample PowerShell cmdlet enables App-V 5.1 reporting: - - ``` syntax + ```powershell Set-AppvClientConfiguration –reportingserverurl : -reportingenabled 1 – ReportingStartTime <0-23> - ReportingRandomDelay <#min> ``` @@ -53,18 +49,14 @@ The following list displays the end–to-end high-level workflow for reporting i For more information about installing the App-V 5.1 client with reporting enabled see [About Client Configuration Settings](about-client-configuration-settings51.md). To administer App-V 5.1 Reporting with Windows PowerShell, see [How to Enable Reporting on the App-V 5.1 Client by Using PowerShell](how-to-enable-reporting-on-the-app-v-51-client-by-using-powershell.md). -5. After the reporting server receives the data from the App-V 5.1 client it sends the data to the reporting database. When the database receives and processes the client data, a successful reply is sent to the reporting server and then a notification is sent to the App-V 5.1 client. +5. After the reporting server receives the data from the App-V 5.1 client it sends the data to the reporting database. When the database receives and processes the client data, a successful reply is sent to the reporting server and then a notification is sent to the App-V 5.1 client. -6. When the App-V 5.1 client receives the success notification, it empties the data cache to conserve space. +6. When the App-V 5.1 client receives the success notification, it empties the data cache to conserve space. - **Note**   - By default the cache is cleared after the server confirms receipt of data. You can manually configure the client to save the data cache. + > [!NOTE] + > By default the cache is cleared after the server confirms receipt of data. You can manually configure the client to save the data cache. - - -~~~ If the App-V 5.1 client device does not receive a success notification from the server, it retains data in the cache and tries to resend data at the next configured interval. Clients continue to collect data and add it to the cache. -~~~ ### App-V 5.1 reporting server frequently asked questions @@ -121,52 +113,50 @@ The following table displays answers to common questions about App-V 5.1 reporti Note

Group Policy settings override local settings configured using PowerShell.

-
- - ## App-V 5.1 Client Reporting - To use App-V 5.1 reporting you must install and configure the App-V 5.1 client. After the client has been installed, use the **Set-AppVClientConfiguration** PowerShell cmdlet or the **ADMX Template** to configure reporting. The reporting feature cmdlets are available by using the following link and are prefaced by **Reporting**. For a complete list of client configuration settings see [About Client Configuration Settings](about-client-configuration-settings51.md). The following section provides examples of App-V 5.1 client reporting configuration using PowerShell. ### Configuring App-V Client reporting using PowerShell The following examples show how PowerShell parameters can configure the reporting features of the App-V 5.1 client. -**Note** -The following configuration task can also be configured using Group Policy settings in the App-V 5.1 ADMX template. For more information about using the ADMX template, see [How to Modify App-V 5.1 Client Configuration Using the ADMX Template and Group Policy](how-to-modify-app-v-51-client-configuration-using-the-admx-template-and-group-policy.md). - - +> [!NOTE] +> The following configuration task can also be configured using Group Policy settings in the App-V 5.1 ADMX template. For more information about using the ADMX template, see [How to Modify App-V 5.1 Client Configuration Using the ADMX Template and Group Policy](how-to-modify-app-v-51-client-configuration-using-the-admx-template-and-group-policy.md). **To enable reporting and to initiate data collection on the computer running the App-V 5.1 client**: -`Set-AppVClientConfiguration –ReportingEnabled 1` +```powershell +Set-AppVClientConfiguration –ReportingEnabled 1 +``` **To configure the client to automatically send data to a specific reporting server**: -``` syntax -Set-AppVClientConfiguration –ReportingServerURL http://MyReportingServer:MyPort/ -ReportingStartTime 20 -ReportingInterval 1 -ReportingRandomDelay 30 +```powershell +Set-AppVClientConfiguration –ReportingServerURL http://MyReportingServer:MyPort/ -ReportingStartTime 20 -ReportingInterval 1 -ReportingRandomDelay 30 -ReportingInterval 1 -ReportingRandomDelay 30 ``` -`-ReportingInterval 1 -ReportingRandomDelay 30` - -This example configures the client to automatically send the reporting data to the reporting server URL http://MyReportingServer:MyPort/. Additionally, the reporting data will be sent daily between 8:00 and 8:30 PM, depending on the random delay generated for the session. +This example configures the client to automatically send the reporting data to the reporting server URL **http://MyReportingServer:MyPort/**. Additionally, the reporting data will be sent daily between 8:00 and 8:30 PM, depending on the random delay generated for the session. **To limit the size of the data cache on the client**: -`Set-AppvClientConfiguration –ReportingDataCacheLimit 100` +```powershell +Set-AppvClientConfiguration –ReportingDataCacheLimit 100 +``` Configures the maximum size of the reporting cache on the computer running the App-V 5.1 client to 100 MB. If the cache limit is reached before the data is sent to the server, then the log rolls over and data will be overwritten as necessary. **To configure the data block size transmitted across the network between the client and the server**: -`Set-AppvClientConfiguration –ReportingDataBlockSize 10240` +```powershell +Set-AppvClientConfiguration –ReportingDataBlockSize 10240 +``` Specifies the maximum data block that the client sends to 10240 MB. @@ -174,59 +164,15 @@ Specifies the maximum data block that the client sends to 10240 MB. The following table displays the types of information you can collect by using App-V 5.1 reporting. - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Client InformationPackage InformationApplication Usage

Host Name

Package Name

Start and End Times

App-V 5.1 Client Version

Package Version

Run Status

Processor Architecture

Package Source

Shutdown State

Operating System Version

Percent Cached

Application Name

Service Pack Level

Application Version

Operating System Type

Username

Connection Group

- - +|Client Information |Package Information |Application Usage | +|---------|---------|---------| +|Host Name |Package Name|Start and End Times| +|App-V 5.1 Client Version |Package Version|Run Status| +|Processor Architecture |Package Source|Shutdown State| +|Operating System Version|Percent Cached|Application Name| +|Service Pack Level| |Application Version| +|Operating System Type| |Username| +| | |Connection Group| The client collects and saves this data in an **.xml** format. The data cache is hidden by default and requires administrator rights to open the XML file. @@ -234,19 +180,17 @@ The client collects and saves this data in an **.xml** format. The data cache is You can configure the computer that is running the App-V 5.1 client to automatically send data to the specified reporting server. To specify the server use the **Set-AppvClientConfiguration** cmdlet with the following settings: -- ReportingEnabled - -- ReportingServerURL - -- ReportingStartTime - -- ReportingInterval - -- ReportingRandomDelay +- ReportingEnabled +- ReportingServerURL +- ReportingStartTime +- ReportingInterval +- ReportingRandomDelay After you configure the previous settings, you must create a scheduled task. The scheduled task will contact the server specified by the **ReportingServerURL** setting and will initiate the transfer. If you want to manually send data outside of the scheduled times, use the following PowerShell cmdlet: -`Send-AppVClientReport –URL http://MyReportingServer:MyPort/ -DeleteOnSuccess` +```powershell +Send-AppVClientReport –URL http://MyReportingServer:MyPort/ -DeleteOnSuccess +``` If the reporting server has been previously configured, then the **–URL** parameter can be omitted. Alternatively, if the data should be sent to an alternate location, specify a different URL to override the configured **ReportingServerURL** for this data collection. @@ -277,23 +221,20 @@ You can also use the **Send-AppVClientReport** cmdlet to manually collect data. Note

If a location other than the Reporting Server is specified, the data is sent using .xml format with no additional processing.

-
- - ### Creating Reports To retrieve report information and create reports using App-V 5.1 you must use one of the following methods: -- **Microsoft SQL Server Reporting Services (SSRS)** - Microsoft SQL Server Reporting Services is available with Microsoft SQL Server. SSRS is not installed when you install the App-V 5.1 reporting server. It must be deployed separately to generate the associated reports. +- **Microsoft SQL Server Reporting Services (SSRS)** - Microsoft SQL Server Reporting Services is available with Microsoft SQL Server. SSRS is not installed when you install the App-V 5.1 reporting server. It must be deployed separately to generate the associated reports. Use the following link for more information about using [Microsoft SQL Server Reporting Services](https://go.microsoft.com/fwlink/?LinkId=285596). -- **Scripting** – You can generate reports by scripting directly against the App-V 5.1 reporting database. For example: +- **Scripting** – You can generate reports by scripting directly against the App-V 5.1 reporting database. For example: **Stored Procedure:** @@ -303,25 +244,10 @@ To retrieve report information and create reports using App-V 5.1 you must use o The stored procedure is also created when using the App-V 5.1 database scripts. -You should also ensure that the reporting server web service’s **Maximum Concurrent Connections** is set to a value that the server will be able to manage without impacting availability. The recommended number of **Maximum Concurrent Connections** for the **Reporting Web Service** is **10,000**. - - - - - +You should also ensure that the reporting server web service's **Maximum Concurrent Connections** is set to a value that the server will be able to manage without impacting availability. The recommended number of **Maximum Concurrent Connections** for the **Reporting Web Service** is **10,000**. ## Related topics - [Deploying the App-V 5.1 Server](deploying-the-app-v-51-server.md) [How to install the Reporting Server on a Standalone Computer and Connect it to the Database](how-to-install-the-reporting-server-on-a-standalone-computer-and-connect-it-to-the-database51.md) - - - - - - - - - From 53123ccf7f8b203df70c6e61e32c2fffab3470dc Mon Sep 17 00:00:00 2001 From: Baard Hermansen Date: Sun, 15 Mar 2020 16:23:42 +0100 Subject: [PATCH 07/30] Update how-to-install-the-reporting-server-on-a-standalone-computer-and-connect-it-to-the-database51.md Added Note markdown. Removed characters that messed up the formatting. --- ...mputer-and-connect-it-to-the-database51.md | 47 ++++++------------- 1 file changed, 15 insertions(+), 32 deletions(-) diff --git a/mdop/appv-v5/how-to-install-the-reporting-server-on-a-standalone-computer-and-connect-it-to-the-database51.md b/mdop/appv-v5/how-to-install-the-reporting-server-on-a-standalone-computer-and-connect-it-to-the-database51.md index 4d6223aabf..b74f0be3c2 100644 --- a/mdop/appv-v5/how-to-install-the-reporting-server-on-a-standalone-computer-and-connect-it-to-the-database51.md +++ b/mdop/appv-v5/how-to-install-the-reporting-server-on-a-standalone-computer-and-connect-it-to-the-database51.md @@ -16,63 +16,46 @@ ms.date: 06/16/2016 # How to install the Reporting Server on a Standalone Computer and Connect it to the Database - Use the following procedure to install the reporting server on a standalone computer and connect it to the database. -**Important** +**Important** Before performing the following procedure you should read and understand [About App-V 5.1 Reporting](about-app-v-51-reporting.md). +## To install the reporting server on a standalone computer and connect it to the database +1. Copy the App-V 5.1 server installation files to the computer on which you want to install it on. To start the App-V 5.1 server installation right-click and run **appv\_server\_setup.exe** as an administrator. Click **Install**. -**To install the reporting server on a standalone computer and connect it to the database** +2. On the **Getting Started** page, review and accept the license terms, and click **Next**. -1. Copy the App-V 5.1 server installation files to the computer on which you want to install it on. To start the App-V 5.1 server installation right-click and run **appv\_server\_setup.exe** as an administrator. Click **Install**. +3. On the **Use Microsoft Update to help keep your computer secure and up-to-date** page, to enable Microsoft updates, select **Use Microsoft Update when I check for updates (recommended).** To disable Microsoft updates, select **I don't want to use Microsoft Update**. Click **Next**. -2. On the **Getting Started** page, review and accept the license terms, and click **Next**. +4. On the **Feature Selection** page, select the **Reporting Server** checkbox and click **Next**. -3. On the **Use Microsoft Update to help keep your computer secure and up-to-date** page, to enable Microsoft updates, select **Use Microsoft Update when I check for updates (recommended).** To disable Microsoft updates, select **I don’t want to use Microsoft Update**. Click **Next**. +5. On the **Installation Location** page, accept the default location and click **Next**. -4. On the **Feature Selection** page, select the **Reporting Server** checkbox and click **Next**. +6. On the **Configure Existing Reporting Database** page, select **Use a remote SQL Server**, and type the machine name of the computer running Microsoft SQL Server, for example **SqlServerMachine**. -5. On the **Installation Location** page, accept the default location and click **Next**. + > [!NOTE] + > If the Microsoft SQL Server is deployed on the same server, select **Use local SQL Server**. -6. On the **Configure Existing Reporting Database** page, select **Use a remote SQL Server**, and type the machine name of the computer running Microsoft SQL Server, for example **SqlServerMachine**. + For the SQL Server Instance, select **Use the default instance**. If you are using a custom Microsoft SQL Server instance, you must select **Use a custom instance** and then type the name of the instance. - **Note** - If the Microsoft SQL Server is deployed on the same server, select **Use local SQL Server**. - - - -~~~ -For the SQL Server Instance, select **Use the default instance**. If you are using a custom Microsoft SQL Server instance, you must select **Use a custom instance** and then type the name of the instance. - -Specify the **SQL Server Database name** that this reporting server will use, for example **AppvReporting**. -~~~ + Specify the **SQL Server Database name** that this reporting server will use, for example **AppvReporting**. 7. On the **Configure Reporting Server Configuration** page. - - Specify the Website Name that you want to use for the Reporting Service. Leave the default unchanged if you do not have a custom name. + - Specify the Website Name that you want to use for the Reporting Service. Leave the default unchanged if you do not have a custom name. - - For the **Port binding**, specify a unique port number that will be used by App-V 5.1, for example **55555**. You should also ensure that the port specified is not being used by another website. + - For the **Port binding**, specify a unique port number that will be used by App-V 5.1, for example **55555**. You should also ensure that the port specified is not being used by another website. 8. Click **Install**. - **Got a suggestion for App-V**? Add or vote on suggestions [here](http://appv.uservoice.com/forums/280448-microsoft-application-virtualization). **Got an App-V issue?** Use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopappv). +**Got an App-V issue?** Use the [App-V TechNet Forum](https://social.technet.microsoft.com/Forums/home?forum=mdopappv). ## Related topics - [About App-V 5.1 Reporting](about-app-v-51-reporting.md) [Deploying App-V 5.1](deploying-app-v-51.md) [How to Enable Reporting on the App-V 5.1 Client by Using PowerShell](how-to-enable-reporting-on-the-app-v-51-client-by-using-powershell.md) - - - - - - - - - From 8158a5819a41638f8250bb1382a4801722557b73 Mon Sep 17 00:00:00 2001 From: Baard Hermansen Date: Sun, 15 Mar 2020 16:51:34 +0100 Subject: [PATCH 08/30] Update app-v-51-planning-checklist.md Added markdown Note. Converted HTML table to markdown. --- mdop/appv-v5/app-v-51-planning-checklist.md | 87 +++------------------ 1 file changed, 11 insertions(+), 76 deletions(-) diff --git a/mdop/appv-v5/app-v-51-planning-checklist.md b/mdop/appv-v5/app-v-51-planning-checklist.md index 52ac3984ce..e1f8ef66b6 100644 --- a/mdop/appv-v5/app-v-51-planning-checklist.md +++ b/mdop/appv-v5/app-v-51-planning-checklist.md @@ -16,86 +16,21 @@ ms.date: 06/16/2016 # App-V 5.1 Planning Checklist - This checklist can be used to help you plan for preparing your computing environment for Microsoft Application Virtualization (App-V) 5.1 deployment. -**Note**   -This checklist outlines the recommended steps and a high-level list of items to consider when planning for an App-V 5.1 deployment. It is recommended that you copy this checklist into a spreadsheet program and customize it for your use. - - - - ------ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
TaskReferencesNotes
Checklist box

Review the getting started information about App-V 5.1 to gain a basic understanding of the product before beginning deployment planning.

Getting Started with App-V 5.1

Checklist box

Plan for App-V 5.1 1.0 Deployment Prerequisites and prepare your computing environment.

App-V 5.1 Prerequisites

Checklist box

If you plan to use the App-V 5.1 management server, plan for the required roles.

Planning for the App-V 5.1 Server Deployment

Checklist box

Plan for the App-V 5.1 sequencer and client so you to create and run virtualized applications.

Planning for the App-V 5.1 Sequencer and Client Deployment

Checklist box

If applicable, review the options and steps for migrating from a previous version of App-V.

Planning for Migrating from a Previous Version of App-V

Checklist box

Plan for running App-V 5.1 clients using in shared content store mode.

How to Install the App-V 5.1 Client for Shared Content Store Mode

- - - - - - +> [!NOTE] +> This checklist outlines the recommended steps and a high-level list of items to consider when planning for an App-V 5.1 deployment. It is recommended that you copy this checklist into a spreadsheet program and customize it for your use. +| |Task |References | +|-|-|-| +|![Checklist box](images/checklistbox.gif) |Review the getting started information about App-V 5.1 to gain a basic understanding of the product before beginning deployment planning.|[Getting Started with App-V 5.1](getting-started-with-app-v-51.md)| +|![Checklist box](images/checklistbox.gif) |Plan for App-V 5.1 1.0 Deployment Prerequisites and prepare your computing environment.|[App-V 5.1 Prerequisites](app-v-51-prerequisites.md)| +|![Checklist box](images/checklistbox.gif) |If you plan to use the App-V 5.1 management server, plan for the required roles.|[Planning for the App-V 5.1 Server Deployment](planning-for-the-app-v-51-server-deployment.md)| +|![Checklist box](images/checklistbox.gif) |Plan for the App-V 5.1 sequencer and client so you to create and run virtualized applications.|[Planning for the App-V 5.1 Sequencer and Client Deployment](planning-for-the-app-v-51-sequencer-and-client-deployment.md)| +|![Checklist box](images/checklistbox.gif) |If applicable, review the options and steps for migrating from a previous version of App-V.|[Planning for Migrating from a Previous Version of App-V](planning-for-migrating-from-a-previous-version-of-app-v51.md)| +|![Checklist box](images/checklistbox.gif) |Plan for running App-V 5.1 clients using in shared content store mode.|[How to Install the App-V 5.1 Client for Shared Content Store Mode](how-to-install-the-app-v-51-client-for-shared-content-store-mode.md)| +|![Checklist box](images/checklistbox.gif) | | | ## Related topics - [Planning for App-V 5.1](planning-for-app-v-51.md) - - - - - - - - - From d20a9e1a8b09b6d9e1537714b2b393c087c58724 Mon Sep 17 00:00:00 2001 From: isbrahm <43386070+isbrahm@users.noreply.github.com> Date: Mon, 16 Mar 2020 14:10:28 -0700 Subject: [PATCH 09/30] Delete duplicate sign policies page --- .../signing-policies-with-signtool.md | 91 ------------------- 1 file changed, 91 deletions(-) delete mode 100644 windows/security/threat-protection/windows-defender-application-control/signing-policies-with-signtool.md diff --git a/windows/security/threat-protection/windows-defender-application-control/signing-policies-with-signtool.md b/windows/security/threat-protection/windows-defender-application-control/signing-policies-with-signtool.md deleted file mode 100644 index 4d6bb94c8f..0000000000 --- a/windows/security/threat-protection/windows-defender-application-control/signing-policies-with-signtool.md +++ /dev/null @@ -1,91 +0,0 @@ ---- -title: Signing Windows Defender Application Control policies with SignTool.exe (Windows 10) -description: SSigned WDAC policies give organizations the highest level of malware protection available in Windows 10. -keywords: whitelisting, security, malware -ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: security -ms.localizationpriority: medium -audience: ITPro -ms.collection: M365-security-compliance -author: jsuther1974 -ms.reviewer: isbrahm -ms.author: dansimp -manager: dansimp -ms.date: 02/21/2018 ---- - -# Signing Windows Defender Application Control policies with SignTool.exe - -**Applies to:** - -- Windows 10 -- Windows Server 2016 - -Signed WDAC policies give organizations the highest level of malware protection available in Windows 10. -In addition to their enforced policy rules, signed policies cannot be modified or deleted by a user or administrator on the computer. -These policies are designed to prevent administrative tampering and kernel mode exploit access. -With this in mind, it is much more difficult to remove signed WDAC policies. -Before you sign and deploy a signed WDAC policy, we recommend that you [audit the policy](audit-windows-defender-application-control-policies.md) to discover any blocked applications that should be allowed to run. - -Signing WDAC policies by using an on-premises CA-generated certificate or a purchased code signing certificate is straightforward. -If you do not currently have a code signing certificate exported in .pfx format (containing private keys, extensions, and root certificates), see [Optional: Create a code signing certificate for Windows Defender Application Control](create-code-signing-cert-for-windows-defender-application-control.md) to create one with your on-premises CA. - -Before signing WDAC policies for the first time, be sure to enable rule options 9 (“Advanced Boot Options Menu”) and 10 (“Boot Audit on Failure”) to leave troubleshooting options available to administrators. To ensure that a rule option is enabled, you can run a command such as `Set-RuleOption -FilePath -Option 9` even if you're not sure whether the option is already enabled—if so, the command has no effect. When validated and ready for enterprise deployment, you can remove these options. For more information about rule options, see [Windows Defender Application Control policy rules](select-types-of-rules-to-create.md). - -To sign a WDAC policy with SignTool.exe, you need the following components: - -- SignTool.exe, found in the Windows SDK (Windows 7 or later) - -- The binary format of the WDAC policy that you generated in the [Create a Windows Defender Application Control policy from a reference computer](create-initial-default-policy.md) section or another WDAC policy that you have created - -- An internal CA code signing certificate or a purchased code signing certificate - -If you do not have a code signing certificate, see the [Optional: Create a code signing certificate for Windows Defender Application Control](create-code-signing-cert-for-windows-defender-application-control.md) section for instructions on how to create one. If you use an alternate certificate or WDAC policy, be sure to update the following steps with the appropriate variables and certificate so that the commands will function properly. To sign the existing WDAC policy, copy each of the following commands into an elevated Windows PowerShell session: - -1. Initialize the variables that will be used: - - `$CIPolicyPath=$env:userprofile+"\Desktop\"` - - `$InitialCIPolicy=$CIPolicyPath+"InitialScan.xml"` - - `$CIPolicyBin=$CIPolicyPath+"DeviceGuardPolicy.bin"` - - > [!NOTE] - > This example uses the WDAC policy that you created in [Create a Windows Defender Application Control policy from a reference computer](create-initial-default-policy.md). If you are signing another policy, be sure to update the **$CIPolicyPath** and **$CIPolicyBin** variables with the correct information. - -2. Import the .pfx code signing certificate. Import the code signing certificate that you will use to sign the WDAC policy into the signing user’s personal store on the computer that will be doing the signing. In this example, you use the certificate that was created in [Optional: Create a code signing certificate for Windows Defender Application Control](create-code-signing-cert-for-windows-defender-application-control.md). - -3. Export the .cer code signing certificate. After the code signing certificate has been imported, export the .cer version to your desktop. This version will be added to the policy so that it can be updated later. - -4. Navigate to your desktop as the working directory: - - `cd $env:USERPROFILE\Desktop` - -5. Use [Add-SignerRule](https://docs.microsoft.com/powershell/module/configci/add-signerrule) to add an update signer certificate to the WDAC policy: - - `Add-SignerRule -FilePath $InitialCIPolicy -CertificatePath -Kernel -User –Update` - - > [!NOTE] - > \ should be the full path to the certificate that you exported in step 3. - Also, adding update signers is crucial to being able to modify or disable this policy in the future. - -6. Use [Set-RuleOption](https://docs.microsoft.com/powershell/module/configci/set-ruleoption) to remove the unsigned policy rule option: - - `Set-RuleOption -FilePath $InitialCIPolicy -Option 6 -Delete` - -7. Use [ConvertFrom-CIPolicy](https://docs.microsoft.com/powershell/module/configci/convertfrom-cipolicy) to convert the policy to binary format: - - `ConvertFrom-CIPolicy $InitialCIPolicy $CIPolicyBin` - -8. Sign the WDAC policy by using SignTool.exe: - - ` sign -v /n "ContosoDGSigningCert" -p7 . -p7co 1.3.6.1.4.1.311.79.1 -fd sha256 $CIPolicyBin` - - > [!NOTE] - > The *<Path to signtool.exe>* variable should be the full path to the SignTool.exe utility. **ContosoDGSigningCert** is the subject name of the certificate that will be used to sign the WDAC policy. You should import this certificate to your personal certificate store on the computer you use to sign the policy. - -9. Validate the signed file. When complete, the commands should output a signed policy file called DeviceGuardPolicy.bin.p7 to your desktop. You can deploy this file the same way you deploy an enforced or non-enforced policy. For information about how to deploy WDAC policies, see [Deploy and manage Windows Defender Application Control with Group Policy](deploy-windows-defender-application-control-policies-using-group-policy.md). - From 513dd02925dda0952c9130cdaf396ef1472f9443 Mon Sep 17 00:00:00 2001 From: isbrahm <43386070+isbrahm@users.noreply.github.com> Date: Mon, 16 Mar 2020 14:15:39 -0700 Subject: [PATCH 10/30] Add redirect link for Signing WDAC policies page --- .openpublishing.redirection.json | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index a4dfbd0f88..d109fd20f0 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -1,6 +1,11 @@ { "redirections": [ { +"source_path": "security/threat-protection/windows-defender-application-control/signing-policies-with-signtool.md", +"redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/windows-defender-application-control/use-signed-policies-to-protect-windows-defender-application-control-against-tampering", +"redirect_document_id": true +}, +{ "source_path": "devices/hololens/hololens-whats-new.md", "redirect_url": "https://docs.microsoft.com/hololens/hololens-release-notes", "redirect_document_id": true From 8810c907000713b357667133ef0951ad81ae5560 Mon Sep 17 00:00:00 2001 From: isbrahm <43386070+isbrahm@users.noreply.github.com> Date: Mon, 16 Mar 2020 14:26:42 -0700 Subject: [PATCH 11/30] Add SecureBoot requirement info to signed policies docs --- ...indows-defender-application-control-against-tampering.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/use-signed-policies-to-protect-windows-defender-application-control-against-tampering.md b/windows/security/threat-protection/windows-defender-application-control/use-signed-policies-to-protect-windows-defender-application-control-against-tampering.md index edbac5d2b9..7386316a87 100644 --- a/windows/security/threat-protection/windows-defender-application-control/use-signed-policies-to-protect-windows-defender-application-control-against-tampering.md +++ b/windows/security/threat-protection/windows-defender-application-control/use-signed-policies-to-protect-windows-defender-application-control-against-tampering.md @@ -28,10 +28,8 @@ ms.date: 05/03/2018 - Windows Server 2016 -Signed WDAC policies give organizations the highest level of malware protection available in Windows 10. -In addition to their enforced policy rules, signed policies cannot be modified or deleted by a user or administrator on the computer. -These policies are designed to prevent administrative tampering and kernel mode exploit access. -With this in mind, it is much more difficult to remove signed WDAC policies. +Signed WDAC policies give organizations the highest level of malware protection available in Windows 10. In addition to their enforced policy rules, signed policies cannot be modified or deleted by a user or administrator on the computer. These policies are designed to prevent administrative tampering and kernel mode exploit access. With this in mind, it is much more difficult to remove signed WDAC policies. Note that SecureBoot must be enabled in order to restrict users from updating or removing signed WDAC policies. + Before you sign and deploy a signed WDAC policy, we recommend that you [audit the policy](audit-windows-defender-application-control-policies.md) to discover any blocked applications that should be allowed to run. Signing WDAC policies by using an on-premises CA-generated certificate or a purchased code signing certificate is straightforward. From 56b58add0d830004fc09f04d06be28de346a9b85 Mon Sep 17 00:00:00 2001 From: Charles Inglis <32555877+cinglis-msft@users.noreply.github.com> Date: Mon, 16 Mar 2020 15:32:28 -0700 Subject: [PATCH 12/30] Corrected Microsoft Endpoint Manager link Corrected link to point to https://www.microsoft.com/microsoft-365/microsoft-endpoint-manager --- windows/deployment/update/update-compliance-wd-av-status.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/update-compliance-wd-av-status.md b/windows/deployment/update/update-compliance-wd-av-status.md index 3fae8e0328..881410e578 100644 --- a/windows/deployment/update/update-compliance-wd-av-status.md +++ b/windows/deployment/update/update-compliance-wd-av-status.md @@ -18,7 +18,7 @@ ms.topic: article > [!IMPORTANT] -> On March 31, 2020, the Windows Defender Antivirus reporting feature of Update Compliance will be removed. You can continue to define and review security compliance policies using [Microsoft Endpoint Manager](https://docs.microsoft.com/configmgr/), which allows finer control over security features and updates. +> On March 31, 2020, the Windows Defender Antivirus reporting feature of Update Compliance will be removed. You can continue to define and review security compliance policies using [Microsoft Endpoint Manager](https://www.microsoft.com/microsoft-365/microsoft-endpoint-manager), which allows finer control over security features and updates. ![The Windows Defender AV Status report](images/UC_workspace_WDAV_status.png) From 810f9340b38bf3f0b1ace054e5aa7f6af7a28790 Mon Sep 17 00:00:00 2001 From: Charles Inglis <32555877+cinglis-msft@users.noreply.github.com> Date: Mon, 16 Mar 2020 15:33:31 -0700 Subject: [PATCH 13/30] Corrected Microsoft Endpoint Manager link Previously pointed to ConfigMgr, corrected to https://www.microsoft.com/microsoft-365/microsoft-endpoint-manager --- windows/deployment/update/update-compliance-monitor.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/update-compliance-monitor.md b/windows/deployment/update/update-compliance-monitor.md index 2bcc21e872..e1e7e102cc 100644 --- a/windows/deployment/update/update-compliance-monitor.md +++ b/windows/deployment/update/update-compliance-monitor.md @@ -20,7 +20,7 @@ ms.topic: article > [!IMPORTANT] > While [Windows Analytics was retired on January 31, 2020](https://docs.microsoft.com/windows/deployment/update/update-compliance-monitor), support for Update Compliance has continued through the Azure Portal; however, please note the following updates: > -> * On March 31, 2020, the Windows Defender Antivirus reporting feature of Update Compliance will be removed. You can continue to define and review security compliance policies using [Microsoft Endpoint Manager](https://docs.microsoft.com/configmgr/), which allows finer control over security features and updates. +> * On March 31, 2020, the Windows Defender Antivirus reporting feature of Update Compliance will be removed. You can continue to define and review security compliance policies using [Microsoft Endpoint Manager](https://www.microsoft.com/microsoft-365/microsoft-endpoint-manager), which allows finer control over security features and updates. > * The Perspectives feature of Update Compliance will also be removed on March 31, 2020 in favor of a better experience. The Perspectives feature is part of the Log Search portal of Log Analytics, which was deprecated on February 15, 2019 in favor of [Azure Monitor Logs](https://docs.microsoft.com/azure/azure-monitor/log-query/log-search-transition). Your Update Compliance solution will be automatically upgraded to Azure Monitor Logs, and the data available in Perspectives will be migrated to a set of queries in the [Needs Attention section](update-compliance-need-attention.md) of Update Compliance. From da766c37ef8c251862a05106e289fea60f506059 Mon Sep 17 00:00:00 2001 From: Bella Brahm Date: Tue, 17 Mar 2020 10:03:42 -0700 Subject: [PATCH 14/30] Remove dup signing page, add operational guide Updating TOC to remove "Signing WDAC policies with SignTool.exe" page, as it is a duplicate of "Use signed policies to protect Windows Defender Application Control against tampering" Additionally, adding an operational guide section to follow design and deployment guides. --- .../TOC.md | 11 ++--- ...r-application-control-operational-guide.md | 41 +++++++++++++++++++ 2 files changed, 47 insertions(+), 5 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-operational-guide.md diff --git a/windows/security/threat-protection/windows-defender-application-control/TOC.md b/windows/security/threat-protection/windows-defender-application-control/TOC.md index 7275492629..364e2c3baf 100644 --- a/windows/security/threat-protection/windows-defender-application-control/TOC.md +++ b/windows/security/threat-protection/windows-defender-application-control/TOC.md @@ -21,23 +21,24 @@ ### [Audit WDAC policies](audit-windows-defender-application-control-policies.md) ### [Merge WDAC policies](merge-windows-defender-application-control-policies.md) ### [Enforce WDAC policies](enforce-windows-defender-application-control-policies.md) -### [Allow COM object registration](allow-com-object-registration-in-windows-defender-application-control-policy.md) ### [Deploy WDAC policies using Group Policy](deploy-windows-defender-application-control-policies-using-group-policy.md) ### [Deploy WDAC policies using Intune](deploy-windows-defender-application-control-policies-using-intune.md) +### [Allow COM object registration](allow-com-object-registration-in-windows-defender-application-control-policy.md) ### [Use WDAC with .NET hardening](use-windows-defender-application-control-with-dynamic-code-security.md) -### [Query WDAC events with Advanced hunting](querying-application-control-events-centrally-using-advanced-hunting.md) +### [Manage packaged apps with WDAC](manage-packaged-apps-with-windows-defender-application-control.md) +### [Use a Windows Defender Application Control policy to control specific plug-ins, add-ins, and modules](use-windows-defender-application-control-policy-to-control-specific-plug-ins-add-ins-and-modules.md) ### [Use code signing to simplify application control for classic Windows applications](use-code-signing-to-simplify-application-control-for-classic-windows-applications.md) #### [Optional: Use the Device Guard Signing Portal in the Microsoft Store for Business](use-device-guard-signing-portal-in-microsoft-store-for-business.md) #### [Optional: Create a code signing cert for WDAC](create-code-signing-cert-for-windows-defender-application-control.md) #### [Deploy catalog files to support WDAC](deploy-catalog-files-to-support-windows-defender-application-control.md) -### [Manage packaged apps with WDAC](manage-packaged-apps-with-windows-defender-application-control.md) -### [Use a Windows Defender Application Control policy to control specific plug-ins, add-ins, and modules](use-windows-defender-application-control-policy-to-control-specific-plug-ins-add-ins-and-modules.md) ### [Use signed policies to protect Windows Defender Application Control against tampering](use-signed-policies-to-protect-windows-defender-application-control-against-tampering.md) -#### [Signing WDAC policies with SignTool.exe](signing-policies-with-signtool.md) ### [Disable WDAC policies](disable-windows-defender-application-control-policies.md) ### [LOB Win32 Apps on S Mode](LOB-win32-apps-on-s.md) +## [Windows Defender Application Control operational guide](windows-defender-application-control-operational-guide.md) +### [Query WDAC events with Advanced hunting](querying-application-control-events-centrally-using-advanced-hunting.md) + ## [AppLocker](applocker\applocker-overview.md) ### [Administer AppLocker](applocker\administer-applocker.md) diff --git a/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-operational-guide.md b/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-operational-guide.md new file mode 100644 index 0000000000..8e14e7cb0d --- /dev/null +++ b/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-operational-guide.md @@ -0,0 +1,41 @@ +--- +title: Managing and troubleshooting Windows Defender Application Control policies (Windows 10) +description: Gather information about how your deployed Windows Defender Application Control policies are behaving. +keywords: whitelisting, security, malware +ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +audience: ITPro +ms.collection: M365-security-compliance +author: jsuther1974 +ms.reviewer: isbrahm +ms.author: dansimp +manager: dansimp +ms.date: 03/16/2020 +--- + +# Windows Defender Application Control operational guide + +**Applies to** +- Windows 10 +- Windows Server 2016 + +After designing and deploying your Windows Defender Application Control (WDAC) policies, this guide covers understanding the effects your policies are having and troubleshooting when they are not behaving as expected. It contains information on where to find events and what they mean, and also querying these events with Microsoft Defender Advanted Threat Protection (MDATP) Advanced Hunting feature. + +## WDAC Events Overview + +WDAC generates and logs events when a policy is loaded as well as when a binary attempts to execute and is blocked. These events include information that identifies the policy and gives more details about the block. Generally, WDAC does not generate events when a binary is allowed; however, there is the option to enable allow events when Managed Installer and/or the Intelligent Security Graph (ISG) is configured. + +WDAC events are generated under two locations: + +1. Applications and Services logs – Microsoft – Windows – CodeIntegrity – Operational +2. Applications and Services logs – Microsoft – Windows – AppLocker – MSI and Script + +## In this section + +| Topic | Description | +| - | - | +| [Query WDAC events with Advanced hunting](querying-application-control-events-centrally-using-advanced-hunting.md) | This topic covers how to view WDAC events centrally from all systems that are connected to Microsoft Defender ATP. | From c140dceb33e4a500a907df0165820405a2ec6243 Mon Sep 17 00:00:00 2001 From: Michael Niehaus Date: Tue, 17 Mar 2020 11:02:31 -0700 Subject: [PATCH 15/30] Added a new note about Hybrid AADJ --- windows/deployment/windows-autopilot/known-issues.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/deployment/windows-autopilot/known-issues.md b/windows/deployment/windows-autopilot/known-issues.md index 40de54fe9a..162db9fe0e 100644 --- a/windows/deployment/windows-autopilot/known-issues.md +++ b/windows/deployment/windows-autopilot/known-issues.md @@ -26,6 +26,9 @@ ms.topic: article + + - + - + +

We have a bug were we may surface policy errors if the account doesn't receive any server notifications within the policy refresh interval.

@@ -475,7 +475,7 @@ This section lists status codes, mapping, user messages, and actions an admin ca - + @@ -487,7 +487,7 @@ This section lists status codes, mapping, user messages, and actions an admin ca - + @@ -499,13 +499,13 @@ This section lists status codes, mapping, user messages, and actions an admin ca - + - + @@ -523,7 +523,7 @@ This section lists status codes, mapping, user messages, and actions an admin ca - + @@ -535,13 +535,13 @@ This section lists status codes, mapping, user messages, and actions an admin ca - + - + @@ -555,7 +555,7 @@ This section lists status codes, mapping, user messages, and actions an admin ca +

We have a bug were we may surface policy errors if the account doesn't receive any server notifications within the policy refresh interval.

@@ -566,7 +566,7 @@ This section lists status codes, mapping, user messages, and actions an admin ca - + @@ -602,7 +602,10 @@ This section lists status codes, mapping, user messages, and actions an admin ca
IssueMore information +
Windows Autopilot user-driven Hybrid Azure AD deployments do not grant users Administrator rights even when specified in the Windows Autopilot profile.This will occur when there is another user on the device that already has Administrator rights. For example, a PowerShell script or policy could create an additional local account that is a member of the Administrators group. To ensure this works properly, do not create an additional account until after the Windows Autopilot process has completed.
Windows Autopilot device provisioning can fail with TPM attestation errors or ESP timeouts on devices where the real-time clock is off by a significant amount of time (e.g. several minutes or more). To fix this issue:
  1. Boot the device to the start of the out-of-box experience (OOBE).
  2. Establish a network connection (wired or wireless). From 5f26d35c1e4863bfab57c196c6be03170fa85ecc Mon Sep 17 00:00:00 2001 From: Bella Brahm Date: Tue, 17 Mar 2020 11:33:50 -0700 Subject: [PATCH 16/30] Add Event IDs docs page WDAC event descriptions are not documented currently --- .../event-id-explanations.md | 80 +++++++++++++++++++ 1 file changed, 80 insertions(+) create mode 100644 windows/security/threat-protection/windows-defender-application-control/event-id-explanations.md diff --git a/windows/security/threat-protection/windows-defender-application-control/event-id-explanations.md b/windows/security/threat-protection/windows-defender-application-control/event-id-explanations.md new file mode 100644 index 0000000000..182c28dedc --- /dev/null +++ b/windows/security/threat-protection/windows-defender-application-control/event-id-explanations.md @@ -0,0 +1,80 @@ +--- +title: Understanding Application Control events (Windows 10) +description: Learn what different Windows Defender Application Control events signify. +keywords: whitelisting, security, malware +ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +audience: ITPro +ms.collection: M365-security-compliance +author: jsuther1974 +ms.reviewer: isbrahm +ms.author: dansimp +manager: dansimp +ms.date: 3/17/2020 +--- + +# Understanding Application Control events + +A Windows Defender Application Control (WDAC) policy logs events locally in Windows Event Viewer in either enforced or audit mode. These events are generated under two locations: + +1. Event IDs beginning with 30 appear in Applications and Services logs – Microsoft – Windows – CodeIntegrity – Operational +2. Event IDs beginning with 80 appear in Applications and Services logs – Microsoft – Windows – AppLocker – MSI and Script + +## Microsoft Windows CodeIntegrity Operational log event IDs + +| Event ID | Explanation | +|----------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| 3076 | Audit executable/dll file | +| 3077 | Block executable/dll file | +| 3089 | Signing information event correlated with either a 3076 or 3077 event. One 3089 event is generated for each signature of a file. Contains the total number of signatures on a file and an index as to which signature it is.
    Unsigned files will generate a single 3089 event with TotalSignatureCount 0. Correlated in the “System” portion of the event data under “Correlation ActivityID”. | +| 3099 | Indicates that a policy has been loaded | + +## Microsoft Windows Applocker MSI and Script log event IDs + +| Event ID | Explanation | +|----------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| 8028 | Audit script/MSI file generated by Windows LockDown Policy (WLDP) being called by the scripthosts themselves. Note: there is no WDAC enforcement on 3rd party scripthosts. | +| 8029 | Block script/MSI file | +| 8038 | Signing information event correlated with either a 8028 or 8029 event. One 8038 event is generated for each signature of a script file. Contains the total number of signatures on a script file and an index as to which signature it is. Unsigned script files will generate a single 8038 event with TotalSignatureCount 0. Correlated in the “System” portion of the event data under “Correlation ActivityID”. | | + +## Optional Intelligent Security Graph (ISG) or Managed Installer (MI) diagnostic events + +If either the ISG or MI is enabled in a WDAC policy, you can optionally choose to enable 3090, 3091, and 3092 events to provide additional diagnostic information. + +| Event ID | Explanation | +|----------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| 3090 | Allow executable/dll file | +| 3091 | Audit executable/dll file | +| 3092 | Block executable/dll file | + +3090, 3091, and 3092 events are generated based on the status code of whether a binary passed the policy, regardless of what reputation it was given or whether it was allowed by a designated MI. The SmartLocker template which appears in the event should indicate why the binary passed/failed. Only one event is generated per binary pass/fail. If both ISG and MI are disabled, 3090, 3091, and 3092 events will not be generated. + +### SmartLocker template + +Below are the fields which help to diagnose what a 3090, 3091, or 3092 event indicates. + +| Name | Explanation | +|-------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| StatusCode | STATUS_SUCCESS indicates a binary passed the active WDAC policies. If so, a 3090 event is generated. If not, a 3091 event is generated if the blocking policy is in audit mode, and a 3092 event is generated if the policy is in enforce mode. | +| ManagedInstallerEnabled | Policy trusts a MI | +| PassesManagedInstaller | File originated from a trusted MI | +| SmartlockerEnabled | Policy trusts the ISG | +| PassesSmartlocker | File had positive reputation | +| AuditEnabled | True if the policy is in audit mode, otherwise it is in enforce mode | + +### Enabling ISG and MI diagnostic events + +In order to enable 3091 audit events and 3092 block events, you must create a TestFlags regkey with a value of 0x100. You can do so using the following PowerShell command: + + ```powershell + reg add hklm\system\currentcontrolset\control\ci -v TestFlags -t REG_DWORD -d 0x100 + ``` +In order to enable 3090 allow events, you must create a TestFlags regkey with a value of 0x300. You can do so using the following PowerShell command: + + ```powershell + reg add hklm\system\currentcontrolset\control\ci -v TestFlags -t REG_DWORD -d 0x300 + ``` From 68020943aab4d60774e643b3836f71f89a938501 Mon Sep 17 00:00:00 2001 From: Bella Brahm Date: Tue, 17 Mar 2020 11:39:41 -0700 Subject: [PATCH 17/30] Minor changes to TOC for event explanations page --- .../windows-defender-application-control/TOC.md | 2 +- .../windows-defender-application-control-operational-guide.md | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/TOC.md b/windows/security/threat-protection/windows-defender-application-control/TOC.md index 364e2c3baf..5ade5917e6 100644 --- a/windows/security/threat-protection/windows-defender-application-control/TOC.md +++ b/windows/security/threat-protection/windows-defender-application-control/TOC.md @@ -37,9 +37,9 @@ ## [Windows Defender Application Control operational guide](windows-defender-application-control-operational-guide.md) +### [Understanding Application Control events](event-id-explanations.md) ### [Query WDAC events with Advanced hunting](querying-application-control-events-centrally-using-advanced-hunting.md) - ## [AppLocker](applocker\applocker-overview.md) ### [Administer AppLocker](applocker\administer-applocker.md) #### [Maintain AppLocker policies](applocker\maintain-applocker-policies.md) diff --git a/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-operational-guide.md b/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-operational-guide.md index 8e14e7cb0d..a34e52ab58 100644 --- a/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-operational-guide.md +++ b/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-operational-guide.md @@ -38,4 +38,5 @@ WDAC events are generated under two locations: | Topic | Description | | - | - | +| [Understanding Application Control events](event-id-explanations.md) | This topic explains the meaning of different WDAC events. | | [Query WDAC events with Advanced hunting](querying-application-control-events-centrally-using-advanced-hunting.md) | This topic covers how to view WDAC events centrally from all systems that are connected to Microsoft Defender ATP. | From 004f72b34fe3d03b765383432a876c5b47b5ede1 Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 17 Mar 2020 11:40:29 -0700 Subject: [PATCH 18/30] Adds contact support link to troubleshooting pages --- .../surface-hub/device-reset-surface-hub.md | 8 ++++- .../surface-hub/miracast-troubleshooting.md | 13 +++++---- .../surface-hub-2s-recover-reset.md | 4 +++ .../surface-hub/troubleshoot-surface-hub.md | 29 ++++++++++--------- 4 files changed, 35 insertions(+), 19 deletions(-) diff --git a/devices/surface-hub/device-reset-surface-hub.md b/devices/surface-hub/device-reset-surface-hub.md index 6d7d33415f..dc0045817a 100644 --- a/devices/surface-hub/device-reset-surface-hub.md +++ b/devices/surface-hub/device-reset-surface-hub.md @@ -90,7 +90,7 @@ On rare occasions, a Surface Hub may encounter an error while cleaning up user a 1. Use the power switch to turn the Surface Hub back on. The device starts and displays the Surface Hub Logo screen. When you see spinning dots under the Surface Hub Logo, use the power switch to turn the Surface Hub off again. -1. Repeat step 3 three times, or until the Surface Hub displays the “Preparing Automatic Repair” message. After it displays this message, the Surface Hub displays the Windows RE screen. +1. Repeat step 3 three times, or until the Surface Hub displays the "Preparing Automatic Repair" message. After it displays this message, the Surface Hub displays the Windows RE screen. 1. Select **Advanced Options**. @@ -115,6 +115,12 @@ On rare occasions, a Surface Hub may encounter an error while cleaning up user a ![downloading 97&](images/recover-progress.png) When the download finishes, the recovery process restores the Surface Hub according to the options that you selected. + + +## Contact Support + +If you have questions or need help, you can [create a support request](https://support.microsoft.com/en-us/supportforbusiness/productselection). + ## Related topics diff --git a/devices/surface-hub/miracast-troubleshooting.md b/devices/surface-hub/miracast-troubleshooting.md index 9517857676..40ccbb5804 100644 --- a/devices/surface-hub/miracast-troubleshooting.md +++ b/devices/surface-hub/miracast-troubleshooting.md @@ -21,13 +21,13 @@ In traditional Miracast, the projecting device will connect the access point set - The first step is an initial connection using 2.4GHz. - After that initial handshake, the projecting device sends traffic to the monitor using the wireless channel settings on the monitor. If Surface Hub is connected to a Wi-Fi network, the access point, it will use the same channel as the connected network, otherwise it will use the Miracast channel from Settings. -There are generally two types of issues with Miracast to Surface Hub: [connection](#connect-issues) and [performance](#performance-issues). In either case, it is a good idea to get a general picture of wireless network activity in the Surface Hub’s location. Running a network scanning tool will show you the available networks and channel usage in the environment. +There are generally two types of issues with Miracast to Surface Hub: [connection](#connect-issues) and [performance](#performance-issues). In either case, it is a good idea to get a general picture of wireless network activity in the Surface Hub's location. Running a network scanning tool will show you the available networks and channel usage in the environment. ## Connect issues Ensure both Wi-Fi and Miracast are both enabled in Settings on Surface Hub. -If you ran a network scan, you should see Surface Hub Miracast listed as an access point. If Surface Hub’s Miracast network shows up on the scan, but you cannot not see it as an available device, you can try to adjust the Miracast channel used by Surface Hub. +If you ran a network scan, you should see Surface Hub Miracast listed as an access point. If Surface Hub's Miracast network shows up on the scan, but you cannot not see it as an available device, you can try to adjust the Miracast channel used by Surface Hub. When Surface Hub is connected to a Wi-Fi network it will use the same channel settings as the Wi-Fi access point for its Miracast access point. For troubleshooting purposes, disconnect Surface Hub from any Wi-Fi networks (but keep Wi-Fi enabled), so you can control the channel used for Miracast. You can manually select the Miracast channel in Settings. You will need to restart Surface Hub after each change. Generally speaking, you will want to use channels that do not show heavy utilization from the network scan. @@ -42,7 +42,7 @@ It is also a good idea to ensure the latest drivers and updates are installed on Next, ensure Miracast is supported on the device. 1. Press Windows Key + R and type `dxdiag`. -2. Click “Save all information”. +2. Click "Save all information". 3. Open the saved dxdiag.txt and find **Miracast**. It should say **Available, with HDCP**. ### Check firewall @@ -63,7 +63,7 @@ On domain-joined devices, Group Policy can also block Miracast. ### Check event logs -The last place to check is in the Event logs. Miracast events will be logged to **Wlanautoconfig**. This is true on both Surface Hub and the projecting device. If you export Surface Hub logs, you can view Surface Hub’s Wlanautoconfig in the **WindowsEventLog** folder. Errors in the event log can provide some additional details on where the connection fails. +The last place to check is in the Event logs. Miracast events will be logged to **Wlanautoconfig**. This is true on both Surface Hub and the projecting device. If you export Surface Hub logs, you can view Surface Hub's Wlanautoconfig in the **WindowsEventLog** folder. Errors in the event log can provide some additional details on where the connection fails. ## Performance issues @@ -75,7 +75,10 @@ Channel switching is caused when the Wi-Fi adapter needs to send traffic to mult If Surface Hub and the projecting device are both connected to Wi-Fi but using different access points with different channels, this will force Surface Hub and the projecting device to channel switch while Miracast is connected. This will result in both poor wireless project and poor network performance over Wi-Fi. The channel switching will affect the performance of all wireless traffic, not just wireless projection. -Channel switching will also occur if the projecting device is connected to an Wi-Fi network using a different channel than the channel that Surface Hub uses for Miracast. So, a best practice is to set Surface Hub’s Miracast channel to the same channel as the most commonly used access point. +Channel switching will also occur if the projecting device is connected to an Wi-Fi network using a different channel than the channel that Surface Hub uses for Miracast. So, a best practice is to set Surface Hub's Miracast channel to the same channel as the most commonly used access point. If there are multiple Wi-Fi networks or access points in the environment, some channel switching is unavoidable. This is best addressed by ensuring all Wi-Fi drivers are up to date. +## Contact Support + +If you have questions or need help, you can [create a support request](https://support.microsoft.com/en-us/supportforbusiness/productselection). diff --git a/devices/surface-hub/surface-hub-2s-recover-reset.md b/devices/surface-hub/surface-hub-2s-recover-reset.md index 1f0e98f92b..6c9fb942af 100644 --- a/devices/surface-hub/surface-hub-2s-recover-reset.md +++ b/devices/surface-hub/surface-hub-2s-recover-reset.md @@ -69,3 +69,7 @@ At the end of a session, Surface Hub 2S may occasionally encounter an error duri > [!NOTE] > To enter recovery mode, unplug the power cord and plug it in again three times. + +## Contact Support + +If you have questions or need help, you can [create a support request](https://support.microsoft.com/en-us/supportforbusiness/productselection). diff --git a/devices/surface-hub/troubleshoot-surface-hub.md b/devices/surface-hub/troubleshoot-surface-hub.md index af6809a477..2b0397fb04 100644 --- a/devices/surface-hub/troubleshoot-surface-hub.md +++ b/devices/surface-hub/troubleshoot-surface-hub.md @@ -456,15 +456,15 @@ This section lists status codes, mapping, user messages, and actions an admin ca

0x80072EFD

WININET_E_CANNOT_CONNECT

Can’t connect to the server right now. Wait a while and try again, or check the account settings.

Can't connect to the server right now. Wait a while and try again, or check the account settings.

Verify that the server name is correct and reachable. Verify that the device is connected to the network.

0x86000C29

E_NEXUS_STATUS_DEVICE_NOTPROVISIONED (policies don’t match)

E_NEXUS_STATUS_DEVICE_NOTPROVISIONED (policies don't match)

The account is configured with policies not compatible with Surface Hub.

Disable the PasswordEnabled policy for this account.

-

We have a bug were we may surface policy errors if the account doesn’t receive any server notifications within the policy refresh interval.

0x86000C4C

0x86000C0A

E_NEXUS_STATUS_SERVERERROR_RETRYLATER

Can’t connect to the server right now.

Can't connect to the server right now.

Wait until the server comes back online. If the issue persists, re-provision the account.

0x8505000D

E_AIRSYNC_RESET_RETRY

Can’t connect to the server right now. Wait a while or check the account’s settings.

Can't connect to the server right now. Wait a while or check the account's settings.

This is normally a transient error but if the issue persists check the number of devices associated with the account and delete some of them if the number is large.

0x85010004

E_HTTP_FORBIDDEN

Can’t connect to the server right now. Wait a while and try again, or check the account’s settings.

Can't connect to the server right now. Wait a while and try again, or check the account's settings.

Verify the server name to make sure it is correct. If the account is using cert based authentication make sure the certificate is still valid and update it if not.

0x85030028

E_ACTIVESYNC_PASSWORD_OR_GETCERT

The account’s password or client certificate are missing or invalid.

The account's password or client certificate are missing or invalid.

Update the password and/or deploy the client certificate.

0x80072EE2

WININET_E_TIMEOUT

The network doesn’t support the minimum idle timeout required to receive server notification, or the server is offline.

The network doesn't support the minimum idle timeout required to receive server notification, or the server is offline.

Verify that the server is running. Verify the NAT settings.

0x85010017

E_HTTP_SERVICE_UNAVAIL

Can’t connect to the server right now. Wait a while or check the account’s settings.

Can't connect to the server right now. Wait a while or check the account's settings.

Verify the server name to make sure it is correct. Wait until the server comes back online. If the issue persists, re-provision the account.

0x86000C0D

E_NEXUS_STATUS_MAILBOX_SERVEROFFLINE

Can’t connect to the server right now. Wait a while or check the account’s settings.

Can't connect to the server right now. Wait a while or check the account's settings.

Verify the server name to make sure it is correct. Wait until the server comes back online. If the issue persists, re-provision the account.

E_NEXUS_STATUS_INVALID_POLICYKEY

The account is configured with policies not compatible with Surface Hub.

Disable the PasswordEnabled policy for this account.

-

We have a bug were we may surface policy errors if the account doesn’t receive any server notifications within the policy refresh interval.

0x85010005

0x85010014

E_HTTP_SERVER_ERROR

Can’t connect to the server.

Can't connect to the server.

Verify the server name to make sure it is correct. Trigger a sync and, if the issue persists, re-provision the account.
-  +## Contact Support + +If you have questions or need help, you can [create a support request](https://support.microsoft.com/en-us/supportforbusiness/productselection). +   ## Related content From 982edee905d36eb4efacc0236a9db43f0723b6ac Mon Sep 17 00:00:00 2001 From: John Kaiser <35939694+CoveMiner@users.noreply.github.com> Date: Tue, 17 Mar 2020 13:39:53 -0700 Subject: [PATCH 19/30] Removal of locale in link URLs --- devices/surface-hub/device-reset-surface-hub.md | 2 +- devices/surface-hub/miracast-troubleshooting.md | 2 +- devices/surface-hub/surface-hub-2s-recover-reset.md | 2 +- devices/surface-hub/troubleshoot-surface-hub.md | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/devices/surface-hub/device-reset-surface-hub.md b/devices/surface-hub/device-reset-surface-hub.md index dc0045817a..d8d0269900 100644 --- a/devices/surface-hub/device-reset-surface-hub.md +++ b/devices/surface-hub/device-reset-surface-hub.md @@ -119,7 +119,7 @@ On rare occasions, a Surface Hub may encounter an error while cleaning up user a ## Contact Support -If you have questions or need help, you can [create a support request](https://support.microsoft.com/en-us/supportforbusiness/productselection). +If you have questions or need help, you can [create a support request](https://support.microsoft.com/supportforbusiness/productselection). ## Related topics diff --git a/devices/surface-hub/miracast-troubleshooting.md b/devices/surface-hub/miracast-troubleshooting.md index 40ccbb5804..eb33f483d6 100644 --- a/devices/surface-hub/miracast-troubleshooting.md +++ b/devices/surface-hub/miracast-troubleshooting.md @@ -81,4 +81,4 @@ If there are multiple Wi-Fi networks or access points in the environment, some c ## Contact Support -If you have questions or need help, you can [create a support request](https://support.microsoft.com/en-us/supportforbusiness/productselection). +If you have questions or need help, you can [create a support request](https://support.microsoft.com/supportforbusiness/productselection). diff --git a/devices/surface-hub/surface-hub-2s-recover-reset.md b/devices/surface-hub/surface-hub-2s-recover-reset.md index 6c9fb942af..7493e10c3c 100644 --- a/devices/surface-hub/surface-hub-2s-recover-reset.md +++ b/devices/surface-hub/surface-hub-2s-recover-reset.md @@ -72,4 +72,4 @@ At the end of a session, Surface Hub 2S may occasionally encounter an error duri ## Contact Support -If you have questions or need help, you can [create a support request](https://support.microsoft.com/en-us/supportforbusiness/productselection). +If you have questions or need help, you can [create a support request](https://support.microsoft.com/supportforbusiness/productselection). diff --git a/devices/surface-hub/troubleshoot-surface-hub.md b/devices/surface-hub/troubleshoot-surface-hub.md index 2b0397fb04..cf02da1a6e 100644 --- a/devices/surface-hub/troubleshoot-surface-hub.md +++ b/devices/surface-hub/troubleshoot-surface-hub.md @@ -604,7 +604,7 @@ This section lists status codes, mapping, user messages, and actions an admin ca ## Contact Support -If you have questions or need help, you can [create a support request](https://support.microsoft.com/en-us/supportforbusiness/productselection). +If you have questions or need help, you can [create a support request](https://support.microsoft.com/supportforbusiness/productselection).   From e8381307d6abbfa766c650ef681f8ad0b27fc76a Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Tue, 17 Mar 2020 14:32:42 -0700 Subject: [PATCH 20/30] text and image updates --- .../images/report-inaccuracy-flyout500.png | Bin 0 -> 52286 bytes .../images/report-inaccuracy500.png | Bin 0 -> 65910 bytes ...oftware-inventory-report-inaccuracy500.png | Bin 0 -> 25969 bytes .../top-security-recommendations350.png | Bin 0 -> 69925 bytes .../tvm-security-recommendation.md | 101 ++++++++---------- 5 files changed, 47 insertions(+), 54 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/report-inaccuracy-flyout500.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/report-inaccuracy500.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/software-inventory-report-inaccuracy500.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/top-security-recommendations350.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/report-inaccuracy-flyout500.png b/windows/security/threat-protection/microsoft-defender-atp/images/report-inaccuracy-flyout500.png new file mode 100644 index 0000000000000000000000000000000000000000..e862c73200fa42163a1f08100300017408ad9a1a GIT binary patch literal 52286 zcmc$`byS?e(=Lbv2<{Nvg1hTLg1cLA9o%7XNP^oyfZ*=#?(XjH?(TBQZ}&TA@BXuA z_uTvKA9H4=-m31J>gwwEeV*{NV%vfztEu1^JgAh2TR7=PV^B2Dbx^j6nv2o6;}yACZ`*^LH0#b2~?f!m<&` z4-t~{he*`a$=K1t-r2&=76KEVjN(I%@J}vcXYcN4VP@_OQGzm-i!eH}VLX0mL45Q^g#RN{ZiAzkOGVCAX}|pt*y3 zQ#=U{&I*?NqnP8r#t;7$O$*_$)jD}U5;su}rq&q**=;25iR-C6Vxr4(J( z$H)1{hK!$E+BCO;P^-2~8#8mgFL5&oWYEc*w9vO7N!bmt zj`pTB1>N#v6s%Se)xOvXj%+G;92_pU0nfMs)OC}#j1|kPA#i^esgZST&(Zx0!OOk5 z<}_-x{U&~N*vjG4hGf#GFN(ITlDG431A)Mcj@g8uKoq}D`_u}q3>C_ufRCUN+bdRUI&+@+{k%rxPVrBNOJLj35!_b-ro`$n&hXf#i} zn7_b6)?_$NgmQldnsucM?@TC_GDF=8A5MFr#gLh{m)mzX^&|LXLsdB^hTCUfE$b~M zYz@fepHT$PH?gKK$fuQcxR)&rO4q=#3YG3jHD*$Z5~bxcomKZ4i*(~E_b zVDHr2*B=m&psUNeW>UzFeE`ubCYGS1W9!KJ;gf$u>PLor{Ql3E=M)N||H+4+pPD|t zZ+`mvA2~JYFQ$)(@<77>bEOMjGUHzW%txi$kVHE+|L7#|M5M`c+g-OY#5njD|x2Pd>gdJXTU7rH(9qpf980AO#j zRl1MdJiqKpW{JLxXE&UudTZL?hi;8uB(Af+fk{<&)5{Y7%@&0rMh(tU@TyO(uX+{x zSe5tfy)22VP`2KKzjw%EY`0QRJ9t%D61YW+am1k+b-aF8 zt{Pi03Aham{BcRTRmd1nmUVz+jg1O;P`mIH8eM~z78^iIj984F1BaHfMX@4 ztA-?wXq|Y>jAn0j>7Wsi!e-dQ7D5^tMJRm(3C=%lMxEaH4>X2^X3y zsJ0w+XP2`Pg2QWvXzjqnbZuY1+HsziPa&lnkx0d@Ze0}=&nHYfCU3g;(3}9zVnWrN zcI{~1UCm_epOwhtk@T`XGM03o~k z8NXsf_@2F*Lyo&5wWxl3)5}Bk2yENO1Dqp2`0V+rHik|I(Iri4o@78)Mgq7Ru!~)?e-YL%_4nn#||LN?@%Wg-OGI zi)pW=CWd`dO6QB4< z!j_xKi@0%nz}9PM=F$MPrZ)xI>FIZuJK%wvmQQylgt@z5)wJlF$vX1oYxIAd_? zBOa@>Lb&{|4!vDuj#5UFT!r?U$(<507~CyRbnoe(@6V{mu87O;%6u-XM_RAlE=wN? zc@je#XXqBgt|bNP60>P>&Wd0bsuu6M`$v9M{O;Zl8;Z57-bE+Cm65h3!=K0d(_qLI zjZ(I8Y(pP1Mk8+K*bRgpFc?l@e%w;UsGEwx-N&eB4#lkO=T+iJ#S=-=Cu|%Ltn$Yr z@#>!QGozsa#Ec3*6?*r41+wRye?GH)LQFrchB_?KY7NTgyX$K;nVQiZUP#)0@Kt;k zbS^m3LOG`KN88=M`{ZGb#ViDZh|&9AtvxV0^tF8fmT9)Z^#}=;8#9Q|`|eU*q5$hZ$Kz`iR}!u2QUbFUYGnPbO}+ONrJ!CY4& zZu@J-Anl106KtHx-AWC-IZi^|Ioq|w8-(R42yL98wq@BaZ;@xPj6*~^*>#TH5anli)IPBDOWulEO zt&sIcrC;3b;Fh>b<$uN_76Hi|_BC2~ylH9O2d!T$dEuTo^8)fAr|#K~SId9+9+Yfz zh$&)nX-NT^(z1!yXadoikPf=-}?P#){cU^Z@q-?UUtu-LBoGSDyOvG?|kq5 z4J7l?M%wRlCjCnBM_1zhkJ&Utz|m^{#Xts^TQLHf@VXLn#r=Wg93iLiXe4km>Gh_3 z5~|x&hCP|{2*vByp#pMNk&K`_5LZ?lvy7}$_2PD;i>5B?=;98Q>T6HxRi<*QkHi_l z!e16U7`i*7feDwBq*io#gK?g&M%jWbM8&Y6HaAQxl zFg!iaS6R({A%w0Aepw+?R#oLdF^o6<~W5BR*4Jbx4ImQ+D`-tfYwb z*>Wv8kBojH*2Hg%hKpn%&)dvSa;f_Y0Dk?UkukC%mZy=g+*L$OW6{#>Yo2_}ZgFu!(S z>#rk?s#+mHF+2>i^`Z7SEVj>7Z( zdHS5qi{l+$Z6=T5Di~C99fHfO?8h^81z|<*nax(IML29eRRe!Z_oV!k#3trIn5&6+ z&Evq;loO9YY!f)qpuC8P^Y^OdmmcS2!?VcBaxJl~2ZZknBnSQCKDgq!gLTU&n-`s6 zJY^4LQp`;~jyfw*(M9p8o^Ko{vcT3TNRPT^gv#(Xv^Rpwr$ z#KKy?Hsl1{I=I%FNC9N05l`Z>6fZ^7Z>&}Pd|B?~2?eM@N0m#EURDgCurj+I8WzIP z_ewHNZws7#hSodQK*SyxA8DwB8^O}5z)EP`3U}cYqSNsat1fEavfz!&5=L-hYQ4Jz z(O)-a{VbyAjDI{r4Jce`V8V`g-^*0zmr8CkeWDhse0Jj_RwJ0sUQTsJx$TVhO%hx8 z60trUb5bHc6q}0%ac&->|GdQ4uwAwWB3w@~waux)cWr~pLiK_)+=yC+IqJoqGXJ)` zU*eXmd!qExC!n~l^;Vp9HZ&yscz#S4O=Z-zK;(si(UbwP`DM}(pUn$WW;8t5_Y;*q za2~Pbvz6|UXi4iR8-vTkI<4z6ovyQ$hU-2xNTnc>y?NW(@f`vRrhPuG@>%Z=-GTEnjfF-w2u` z^9`@ddH}}MtXWP(D@c4*W7ejtk?V>;j+I_){Ztg}3MEmH4+0QT$7WY86*4=SWTSy} zA}vak%%$t)WW;f5&0uVCA`(N;_ z*DE3jj|1M?QcrHGQ$ivc-AlX6#fZG@Jmi>X$I2FI*>GQ9BkM<{jjjV!FvT^zpy)Pi z*)r%rZ1ShnWQSFUx1BSVX94o42HP8Dt0xf(U0#QQ9@cy0p{4k+F$A4thPXl7)!8^z zyCyz^ry#HeBhYEk3Z{03cW)YAO4AxY!;qeD@NIODK25}4B-D{N<&S*Z$Kz5bWdoaF z8I>~~7PZZ8$DiRmjnx88YBUX0iCp%nF^t-4md806V*sca>p@BQiK6yx_G#NCPj zNW5&v8N`Rb;UwXE1T!$`MAp+jy?$YU2VJ{-m#1+o=hgc5rMJ!t^nOX9%|Dwj;Rgyo zAn2o)kyk89-8>Gy{EFHh$z|yC#l?VefQpp~)@d4DV6FB@4MAZu*+NB;nE0E^IQdpK z4y$YOHi)se9wqYDDx_IY3|BFt?6j$h-WD0JmrK6%B?`5L&0KdHwG|MP+U_l*T7s>3 ziApl^kj81}NU0_u0AOi6fTZ7RAyj|mL5-YwYEZM0zP~{5RcK#3kp5Y;{V5}t`l4R} z(O#i2$jSkOzCBr@3!A-Rvg+NNBO5uA58VO~DL7CO=Am;X-!saH$-hO`|Eh!&U0O%EVGD{rhsJ7&np(g{*#>>{C z7h0@Hm_dNQ?r@?f`STnK$QiZ;3HIjatmWy5rYkLe1eK&!e(mskO~GcEQGGN(=wp7BTX^CziB;8=gz_N&D)1i%Fr zDcgIkUNn`7KP=OTJuO8bv18nf)wSD#!J=RDrB|DQiE}hn<($dsXJ+wCTK{tZtA{Pe zUGyY^_w%0>?6-Pd7+QZc?o+!bY!&SEKxj8FgW6~V`mLFx@kbv|{6K_Tcb+ZAHQ!qc zk6QTt{@FiXeB-1=9Or`v4%6->-UpmRrTyFIBb$evHkVHG&}FI?ONsE)Yi3&j*A0~; zJwx30q#I&D1kC!_ULstR;%I-h$?j_5Yz;2vT2e2+O255Ct+r=J%UUy4q`*B}%=xi2 zcKelE#Sr6!`=oWxu-DTNO_J)Zs92EMEsns=)P4(33#O08Cf!wS3#QfbMe=;hQqwyh- z#1GcBN5bb?M>s6jB?V?lNm%@^rgj zxm8UanX?p#;caw`R`3m?RM;kAiil6|u0@^7)v&s(&!QnTN~UHEjLjUJ6KWVJvLP zqM<1YEh^IZQ~|6vY+eYQPf(w(SSC8oP@3xF!!CabN#BJY8amM`CV>c*@d(V6uYW9F@>ziJt;1!8CF^fOe!knH}wlCzI zLG_WB87qM+*lLk)3LY$>Ma;{Xbgzk7S<|c1xC58H<$AA%r5fpNUmBinJC4VP z)K!U|2+}(*v&l7VuwYWEJ!{&&eMJX(XqkQJ7YX20$C4Z%r{)9pA0A^nq#5L=MB%?rZWkK97s*Q zPH!KG0{4?I?m_5SaPxD3Sq_1nTZV4%u?lNrGry1SC?Ghn^obp~VvqmnXn3>V*t7?2BH$J_Lz|@ne#bwp(xvkVuKdBAf&w> zZw8&l)Rzm$a2t)wygfj*F}e&UJxh)RKNJ9|KL7Uz6x*|2KnS%ezgO7$(zHRaRn6Rb zjNO<9L)6Fe+{k~a{Pv{GWG3kAuaDy+q4mx+kLo-sfAYlJ(l#7)Xbh{;+dt6QO8)@V z=UF{7r~C)5chSa*WazVPl;+BsAItP*rYAi0^%K6D;n6 z`LgATJB~1+^mAuS7{Os_MJA1kC!=uV8aK|%d;swe)Un4u8#-r+P!&*%>InLJJoz>X zxv!`D{4_(Wc)(|i5N3tdERbTlqTYb9vLt$66iIizm9hA^&!i36UC4CLtet6Zfb?5qk=RYek4b=wugoGq*x=a#)3>0KZfy458 zzP=Q<9zv27`aBgDjMo}xJBb^!EzMdIvrVgqbG1~4a!|Aac!M(2?ZO(qq}k6JJ-sGb zU}kFx=s5=#Cx&j=0HsdG-J#w-Yh#5|^>BRkklW(6{oCAA_xeY3k8}N=p;*$h)49ke zLB6UQM0P9(^ELLC8kUGO5t8h{_K5A`w(W@gjn(qLzp_qI2M2dGZN=D!$8~IGVglZM z98G}Hk0K$wlC_L=0F)=@2hSRHVjalbB@&tJ?kL$CP`fkX7t+!`n3!zO<-?`^=sk-y zK3Q-izNhjV2-Y5FRk6tvP;Rv5?qRFCJDR`t#*TRHeN6`Hs2_&q_!hl)*zzb z?N(-!^L`S%q9I~~T5LZ59F)C1kc*yHpTGIxaj>?dHWc7>14HmfRbtB)P?m54!e-X- zMAfikhZ|41A5jc)b|W-d%Jk{UC5KRZuy}giWNcbr>G~EzQcy(QgGrt8%kGO7is?K( z?IJ33{V@X%XM~QNNP4QQr6W~@mfE*`o%5Gg?q4og2$B8K(T1@4?6iYRrqgal96#ml zgq3a;b;57UIV1m#``HlZ1TJ7TLJZ=|1qxE;yA|_fdo=YT(b6=7C3L#bTDrpNH+v^N zZ%;m(7@^#I#NiL1xg#QDt+rsY1|Rx2_l0Q>8c+c;#*>BF_jNWxZR24){ERa>hXGk5 z9T;wnnZGi|2L7VUDKXS{ZA0ZgcE5%=vT9hB!~mMq@6{ zZ2Mz+q17w#ergKUzl~dYj*_11eVzbVER<50TB?6j>d2S3(+i#`sNY2r!|9;#U;35S z(BuNV$;O`K_*ryAIQJJ#fnwb24IO#Tmb@0?Chv#?>GEr7KPhqHp-j|K19<$)N^oYk zgt8*_mjOqHy5s4W^5-AwL{*qe4bZv-pR!akebT8DOl-g5cg|c-Zq6D(M5-Z>cIZaB z_78et&xGsGk+{Yx6#`Iit$rf9&yd)oW@|O0?;&`+Cm|6&q1gcNFU;m=|3hDLi%r)I z_b0rsSLTRbTlR>ms}qmU6}GY*?n1hK6u39-uaEz!=^I#p{}7Pv@*e-YdA|RterM=F z0bIuG!||6Q+Pt49%Euw7Wc3FU1+3h$ymjxg2$ioGG+OLNgZI06uX)@AQO#Z|U9}By z5(BuW+wg5WxUu1^l`5+=K*_jx5xbC?}71p2t%gx=r!7|MR(|1JKV zn5MoS;XQb#mOY{F=|pZUH*8% zGVOxi)p(dEmyG&j`SQQ^0&ty{<0wbfqf`N{asAmnwy zw$2dxm93tw^$5mDE@Cfi^zu`FnduVTdc{=-p0MQ%#lkd1ozY#%Q>ZJ@SHi^PtJ0l) z)9e+b@{i{yqcQa1p!L$uG?$<0IOUXk8-~%*(S>svFoJo}2-ta7*GEJNP`@u&u`3?) z6HnH$hhOaWs~E1Z{+^jjWxz`=bX-rHRleM>FUFhX%a`Ie5U7pthP>PyhI!o@fBp04 zk)x%WSWj$U^X`&CQ2zn(xbCE{S)C_;?|rOs0$=rRN(4lh&Lkw7TcH>(1}|EgpfEG# zG9qM2_N7*?s6@4|TU zynl7(1I?SIFp6y+I@+MweA; zDYrJV*NUh-_i*T8(U-$|-OD7SlvfSX#e1_3YGJ$$=A4ygs4P}v8lugdSrN~)YtQyL zLX3LSJ8|9#MO@?~Xu~V<^_UCUOlc5}L63L4r>X}^aMO*eUINF)ANkui<}HrzQUE>< zDAKxmFy0n-jDY;)-k70zwOFy^DqrlQiZZdl;)%eHTk@6diYD(#u3*oG^!(j;gP73c@c=b~8jRiu*n?rv{jkw3erk-0Fl`vAWC zJ^dwR474+AA8Sdc_~AJhbT>+GOqzOY*FOG^!wB3?Gyi?eK|PTjoT{&2svRAm@3SUt zzpC}nOdw-Z{Z(Dy9Y38xzjIBLzSe5iU*y`&u3EVGsq+AnoAowg_JO;!d((zsa8#hL zpTxJXN{wLfwn!>fTCm{T_rC9fzJ{=fd3>0WQ?CVuXx@`SR<$sT?G%TDJrsUSsWd$9q>yKlM0>Hfg!MA`-CqUOtesQ!Rv@0 zNk(o&r%*E+V>fKv-C~+EdotRCn|Jk)4X_`iCp|PElzOD}Tj*UR1j~F~x9kTF8XM1i z_u@m|S~M)3)OKWjT=x2UyAO(hiHY33sQEy-4iDfsSFuXaR`a7BJ!)sGgss#uF z1BHpY97rh~E2H22-KLK%&yI)lDPp&6OwL~DmR*F}I(NUJP*hYlL*+%HrIu@V2stKx zWNg6;Hay{5Pr}?+pF29Zsh=@2Uj)v0?j>X?jhvn0%2tFOl@=?NoGdwtg_3`jUUrL$ zhUbr_?I+aoHji+Ctk6Tuj0fpKH%Fzti79|M$x1*Za=NTU^RqiSdEaE7@@GEJL*CLH z;^odmLSzQ_o|4xTyRBn(_o-?By!Q_1>U+oe;QR!R60#5>(P+g_JE^AKuH{$W;xgpq zd5-DN0^&ZdpDLnpaC`arZv_Ar2oznXBZ;k_M8clk&H@Sr-0fuU%5{Z*mqO`@kyJnW zXT#>tjqcfZ^L@0mzihf(u z#kjqr7@1s^5$#bW4-C4voL)z_ny=WQav;AHz)6NR-$_#-C*y@nhK0#Tt?+e)Z0!%v z(#@U9miovT?C!^`X!PhVRZ#y|CF^Q?^K~3&Ig+i$;6j190c83|>o+$Xxb7#G$H&ja z2a2h$#dlFwwT^EGIB{ahUpPT%hCXGvLkgSq`S}>j?u6**F&2N~yW(EqzZ@ZFNgXv? z3;r1#%U$1`y_N6MW&B7`M9erK`&G!G06&Q4vU%Tug^VQF^bM2!GXd}4;9zuf67SAF zj)>pk)h`uSpX4Nj1|J}AE6vijZyq^HKs>Eay6V_9pch8x;LSx6FeHw$@f^!`a*T8O z6=62qoWWodXUaI2vApJJ7tB5$hr`G8xc`7LDPDVU;)oc52Mhb|hC}8pTUubxwlHQKa)y3LvG%*N{t;*&k%!Bi=<{(s` zv@)8rwuk4Z*rQ9`K_Lczrq*R;T9zmjRQa5vIyc8(6~Fu}tXZ-e8dT<|zsXxd*5%}u ztS^LpPd!He@=(E3RMFSAfRbVQ9b(!2veiNY99e^h z*PG)gDJ^x#{y9j`@)c7Fd7rlQm>{AGnIB`V{a<(#Fz-ZW3DP1d#Usb=Hl zXV5Y)*PC9%*lDq1iWB}QFgLoKy9kPGv(#bPA-o0Aj2H_y2~;xjbYN_P`-65MJeRZ; zolF|(4*}oRlJV(hB&4quV!nM`Iz3O_zK*&-2Lpyyn=pxwf|hSV8&h(L#$?>tpOcMp z9K*!j_VTI+afDy(^_}@(+BX!hbd(3j>Y)%?pIoxD(z(S~bFXUszurSx>E&m<%6){ugwGfmHy<`7|RzWX*N%iY(DdK<+6Svle%>OwUd_r8#1v+ z4vFDMf|^hLCdGxu>lGt>xFzx;`69nf_v;gEov9+TzA`wquRE72?Tk-#Hd6Z5(&0ds zPWWa1aJV>w&o7_N%0MGDJN~MDH|(>oGmY9+6^~))Ui|o;{pQV&`#=OBgxL4SiEEC8 z&l3cbDv}_ahUP@3xZ-=%TuVzqTypW&-Iy&(b~;LZ>o{4I(v^-lKMBcchOZ=pSr+`H z%rV!UJ`FmW;4Fh`?5suPFE`viFWDJ7FXZ&HOZ_jq$x;I85oHI2@OOKfqreg-DjgTg z#6~Zzo4n%`l7(qcn#u^vD}#i47jV;viP`c+*&)c`N2sq@QYycg;D*!Uk-qhLbd!bV zz+l}U_ZJO8{!(UIk<0+lUrM^8TvN9v49D*MdBB0dE`iRTZ^y_uvZ|Fgb@vi?&utQ9 zUIq<#x6wl_*YXdX2a$o&H`-d+ToXPB?sT?ek4^95+RtjNS@VBW(&v*4jJUp4VyD|0 zAM#r;NubVCH<_8~p>QgtD9TQ)nd9V*cZ$KVC|9eIR6tXTHTchEP9HKaIOr0tQRFTuWosfnxaeBGMI|8Hh(kn zU~YwZi%@W52tddPPE`XkJe@D&Su)ahAXIg+I%n9$)Q7m?xOF+vZ8&I>Vd| zU*Bu$(p3H#*HL(aa8ObF8%>zJ-7k^n#rab9Rsq#9q6N9iNoYG<{UdIxA&GXo4C7nk z2ZF0bf<~x%uJTQJUVZXpyzZ0&0V-Kva8i@bUMrygvQ_yJ1s|tHLe*O0Y4(cB?wpwI zShXuIt+#H$gpR8`xb}ge(4y=?UCN~Y(7I-cDP_eqYKC3oyqfAvzw>dZ+x@We2X7D28nRCzt~G%HjKhufwZAGzF25zxjyt+lfvd{dYzNPJkvvit{rBg`9u-2opHTsDsF!@0sey3zB4r3*8!B9c`S)Ng$!jwX6YL)pi&KOFeh-thDxsax? zWP2pb-zS|}JQ_N-sH9|x)o=RpFPF%b&Tz__t#v<%yY+H52X6(MslYyrN4nG#cHyTB z<%E)LVJMwqggOH0H<0(3pHk>JBZ6F6-1FZJJiYK=2~;y^t_h{Y*^yralpHc`BZYll z$kN6{k_={w4_b;bri!pjVUcpBg7;^y=deV_zrTg+v!#Rf=#UPMpqm13SONY0zRsJa zXMZz7!eA6?gDK$VqSV{x(o0g|-Z-~H1QTW2L#ggcSLO87 zDJyYq{Q28@gceTdC!HLqrjewqcewW{X2;=|S~ZjZe@t;OhAh9T@0zc2Mi( z{dx~zJL$1&n~SEOD)J=?Ek@c7A?B3!el$V%o;_SOUufc-jxWjb9Q9FUp{g)ThwGd@ zn$EG|5ji`HNG}#`K*Npo%qWIMZE`;EiaiwC{$YjjN^&@uoDF*c9K?ONh*Y<)M^s!+ zk1Z$3dtdVs=uWyG$=QdupZy+hW`X;TgSv7H$#+uol1I8J};LK+c&Qr-DOQSv$ zDpdE-cfbWa>iRT6wo(3E$G*FR<|)Bi#hG0Hh2{RdTf;pr*u5+0syE!QL5C}~HadX0 z{}!l`^;gSp-9$Y9o3ws>nd^17i=6&iDqCzlg7c00kyKGM>X%AuVu^NC$I9m!;7*U! zgJ*2FtwtljQ|Np&dHDpZo@f*mGkHVL(P$4URl`&q*>>y!PvOGdlDG^qQ{ZkzTlLzh zL^q&lbdtfWP>u3SE0o8%qKAKSBC7*S$Pc~?gq=6q^Gkzkgj|{4ay9NG1>fiz>h}CB z#BXA-?VJ%SxDr$Q-hhRqtDX}0nmhH0=K3A^`CM7TJ3xcSM5V6K%bWAA*CFql-W=cw z!u#es(vb>kYd&Iz!&8T{Ug8ZMU$5|ZJkCVdI^1a*c*M(=4LZ-vxZiIKRetM|Y;&Gz zjWS#!{iNr3JLoER6w04%XE)vgkNa17v;@oZAMh71j7Gba-CHyPF!nJuZeBzMApz|L3`)PR^o>!5)!1g zJwj|gfW$hx9s5h!;sF+-x1R18CbG7Y%Oig{-VN(xsPMN4Sb_JY=9%Z~Ko4?SKYa}WWjAFhCMcwA1e{{R zq#c~SDt(k`4t^}J1DgV?<7dPitO>*zd37@_a+gYGK;elp@#U|YSL*r#L)H`%Ct8b} z4{Xa@}(?_87S zMWu2F{KGE6?2Mue3$XXzkuO2+ogC9CbkZtp=vnAfJmdS6$8Tgg73Q;UuH-<=LEu@J ze&JLebE+jQk33~z?vajVvcAswaNY9X>; zd)C!qCjF4w*py>G{*Q5wE(Q=L_(P zJRYf~7n$FVnc8P=A$^q<#AbDiMAmrU7CeFzTInx{-i|oCUg&mpvs;Ho92V=Ja{VH# zM$0n_O!f5_sWcdNsyuXQ^jsrAZ5NLLFuF@zxI-#se5wCPAsa-1Zo?=gxgDaAU{zH&`gEORPi&G@>C{W~=zq=o`;CaCoF8j7+V zwOHKhYVY*A=tf~Hy=&KdL9W08I-f=~yS>kZ^P#m7KB z)cA(prLEM|DEm8w%xSCZYO#;`f6xy&EbU0w9)ZP+(*BEUi!P#V1+ZXm3 zL=OA6NY{i0@)&teS;7U(uI=(b*7sUw9;GO;Ap(U;(*x(dHT`>|R1QxnM1Akyrj_7% z>Fhrv?rjo@6p7to`n#iItTV(ngyX1|;Zkh zz>@5Fk@2f<`9~=~1On&h6TYw>8P+kskrX>#(GEO^a03?-1wda7eRh|6{sl|zuhkMm z;#B0iiveeHq4#<*$32MhdLXjp?n>5Z1iWcaxydP5cF!r|IF9Zr5C~8?m#D=yto*(* zJzY?<16@RtGHzw}@-3xzFJa$}!99)B?R^k3p?VCX+JW97xf6Ig9&AK{F`kzHg+>rl zLSA}N33AjYPK4elxRK?FX_~WEj zbCM8yBU_;@W9vE+Q$2R5(zudikVzOibjpaA_*h!qme_2ZD#p0lkMS?NSqyE>TTD01 zKjKAZ$Yo%ay#gZ>TL9i_GI9_V)V(aWdvf$-?i&YQ3ELayUrr{>#OD zW)r1Dne)-qj3F)WDY{e+4lg-wXwZG!smkRb8 z_e%}2Bip-1pRBRW7ALGXPIrHg8o`pFt~i5_@Q}pAb8)eDL=ayWb2H;B^8Mawt}6U)NJASpn}ugzFIpL{$XbJG~n`t z#^Y0)%>D%8b|hL%yx3abYyv_|g|5%+O5Bfd!Z)J55)+K7BDNwIQz&zp(bz<yc;w6r($B7|t(8msfEjy(% z)Ho&Qvzn8oR5~&)^_Dw9R?dDFA2$NWZ6h9!o6oHM;24#ov@%dPNw(G{D~6M>yY(2B zmPdm5f-47exP|aqqA?)=KLTUvw?@>|to>cvV9`%u!rjTcHkfW^`tGHWiDeiZoiqntffh8I|zt1~oNxLZxK zWW8JcPP02R2J8L!^5(y&C3tMg5jPI1Pa5?VoQzN$-uF~v%s(d)(qDI^-CzH2=3xJC zi|NGrfj>_2o$tx2in5$zSdbkVUV^Td<2OFh)>q83!TpH+V-7_MDVQ(ich0FevAC(&q+&2 zNI)r+5Eb1i&jC22qoZRgW`qR?C;Wuc6&3CIgmpkpPEM8a4Hq4q6%wW?I5-%dWiX+;PoUyb6P$LQE%vxvL)0;q zw{TF&;gd^?*X$>zW+T{KBBk`;UF6qMsm^1?MNG29j2gcRT~x-S@f)HHiZ6Z99XcqNEQT$j%kiaBl*Aryyu}gcja7*w&eq6Ak9ans(t3P|oQerWLygx5 z-l8YqY176gqag!LTNU5oW9u|TL%|qhM$4kSYR%s#9R3goB_5r>)`K?7xVMqgSt_b5 zIMDXo(fXRds~3^g`TxKVio!h>jErSZt=9Du5H5#2T#zydqN?RSsy=i{B0ENFFG+rr zM7l(WeGD*dXobzZEbIwduqYcMYafykRpl7v%;l&J{IkLsC+q%K=fCy>%w2g&TP48< zOXaHM2*C=b%=Tib&1_%dKfv|>iNy+>)m1Q*hfn+Y8Olc9@+j#7wtte6mhc$NTDNuK z@%X4g~{-q?Oy{XQ&34XG|m{Qao-BkBl?B}5RzY{q=Ng_RE0tA?493HwD3!MT)=%l5=2Z@ zJcay>4yR~;*Ohq|(65P0rNUKU;+$oamBCv{LRnmrX=+&xjxl$C2HQP1wjwAvaXvQI zeiG*?D7GRcFXaC-M->_xW?>C7)-1J2cafl1<9$?ZSgKdF=QzClv%ol^s4J@EF0#z` z8JzE={6$>@uzW3J;Zl1`P0sYI-~xg{kh)hJfs7Bq(;Hchv6Sb<_%IfK60-e({K~cd zynUa`SDBv@ee)fjS?C4}Mnsusr=j`)bN^=_W6S%t%wfsvt|QUY8~FhDO8dy>yd8RX7f+jRzk*8tt6~> zU}_#?dkl5xjNi<*&A;-wYo^SiggBLgE;|xiAMaugTLi2qAu3-ZHv*f_b}vM6@v76e z+v0_CYl_f?w|RZ9vXKfO;%F6Q&BUBO{#;?{BD?XXkDpf{Gcj>|t>c;?o0qIGB@%ZZ zoqNMx{?L%c`;L32k%-W-({IITvJ-2h>G!pMVdj3vcU5aGVFw#maPzJS1G~QAU7qw- z&{_{Yb4sATEtLw1PjIBVZTDdv+VUySna7P*Ae`yd!-Mt@lF8(p4Gb=m_zgMUgnfO_ z@Bx=g{~RN5FoazQm#KTc`HQ zd&A#;W|9ti+_kZ#0vWg4)k^E+R}_^ruj_o)NS;6$>b1^-1IxU1A#gc9s%eD_tLJ}3oW`OoVkC%FNlcRXR#X^qim zZ;Jx|gSxK@i!121#34us4#6FQLvTxi2TMYL#@*fB-3bKuV8I<4cN%Zp-Q8(ubo!tF z&cl57&dj}I-^^Rr!|AiDPRZJ9uf5A@^7a0YPxgAYFLB~oYfvKI2lwNwd8qy{*_Ej7 zfl#vgiyiK2Y3FX9ncn_Lv<(~p?2&edVrD;fYt_7S`ba#@liWZFOWa}c9cw*yrC&~F}2l$#Iz?DWscrIlPM_C+4Cp840n`6`{o zxl<8iIDJF&B4Z{XD9>$anMW%Sm*dkFRb|Ja?)ZuBKva{$Ue>4x+!JYDC0*!GYxM49%Gn>g0vesZ6UcMZ z$`KeIq}OfaYd`kt)AL&)h(itEX}LiDP~!pz?3X@tVMVc@*KKR6<3(AQoem1Xd-ixe zO|ur=aMYy~Cyt^GFZgYr{H&{`6)14jkV5hSD84RY`i5~$z7JNp!7e>3qzgW1g11v&6W;Y+2KcS~w_c>Kv5B`Q? zw%>}M`b6m;ET(W;4r*z?_Gn(c1qOoj1j60e+cE;jqL}T3h~eT4=#2-5w0+&Vo5Y2q zs`S9y-ClP6uOa(s4c_opBg$09L)K!fa+?DnTLw{JfE%S}svS>k{(7E`qF~PtV*X3+ z$hEA|D2(Kb-WKmRJ>P+?Qs0&Ps}N^9HnWGQxS9%|neVHyI~^s6=Ez6MA|t$%qed3f z4l54VP!Z2t73(OGw2Vr@!~%ad;klpklb&n7etaygnd3Z(u{~8As1$xLSQKejSV0U} zNVzmj5nM!KV6Nk0hi43_9eg!zI{KX^adT(}2Hl=s0<60HNmTVA`4M*`k_JCh@e)o$^?n*(&QmMdmLJ{gBqi7IZ+ZurT=YQgO$ zapf_!7EGZqt#e{IaF?u*D0hqz9QvLEwEg^IaXv$U_kB^@BLhYgd7r2Xn4SQ2lG(wU zCB0kmy3^2R4ZxaXlUsQBPKh)t)~89j6zxDbyV#ak!FrS-yY&UNB}eF&@Y_S_-6xPc zd%Gb-Ba=*PpmbE^f!yy+3Yp(KgYR! zrnqr&he|%(j=J7QE=A*y*mv1Gh?*Bsr{l;eI-hroiLSd6Vyv0|=Gz(X*i~WRKtad; zRi`K~1`e14yRKs5uDBuVBBN<;V0}nJZ_T`qd{ABTxn4_RAs=N$j8fnUFaEw~37g#h z)FWuB%J1jnnwDs*$!TRQ>Da-`^F`D9o!3;J(9g0z5#DTm282_!yHRdEmy`aut>Xbc5zkjrJr`u1hw%53L8LCxYufM*V52 z%;bY`qF{aPM)_@K`fV1_AHN;9@9(?HwWW!Mfnlm*GN#OkSafF!=zLiSocne5fvQ4= z;{hvN|5=~1dCj!#G_3ZNPgnvqMjudsC*BEmxIO#)N*z=Z6|?E2X<>Uip;@1m+`~%I z$%a?9nO`{6%{5kW>OveWb7L|XZ%|;3wpAFi%etN*VX26GHp%F8;t!A1lzip#1>XjB zAkVPZY{g~!7$08Djc3gtNs~3eSxK2@)Utb%QrXi|#8*`VHf43Bl$KMK1+ozzTzbQ8 z7+6`u$C7x3i>|#~jwN1wpD*uk8CP%NLy}^E?fQ=ub-bQfyZ$fFL+lz##OuFQRurtR z_;g#ggb3l?b%3iIRu!~vs?2Oy&%nK>nj6JCD;B+5tg@*0awlHYGUQyr01W>)n+(7G zYkVB(s$Lnc0zDBFQjfjJ5om3Ddl4Z~N3xpb*Cv&@Z$lea?0c!cqW6~vpGTY3r?;og z0MF0!J48P>L^iciP+z7Pff%nOTnPa|Et73fa`dCJMF?b@^|32(ewXgA3})q$Vw=nU zv$w8h5O_bYxtYYxj|dV>D|ix*>Tx(?u_E$ng8=pjC3+-O(TN|;Yl<$=dzDP5$?B8g z{iZq}2sT6fBCABH@CyHI&L##2=GQ8zC?8NPC|Z?Ls6>p-Q@`Hjzpj?LrDyArHZsQc z^x8M9)3gtkd`CRd^EqW5gxqTgAFgorWjg)tO~m4Gj~x#Q!EYrWDXhG#o*JR9Q`b6& zTT5JWl5%??H?f*=)BcC3to!feA&ZLzMJ}{1JIrLifZE;R6TC%J_yzT zHWYnYCf0YDLDOgHJq{Ld)O4;9`Sj~@)?Ib1nvIb!25j!yE;EFWcof8+2Ua)$yggl2 z`aHL{Sivsn(2_Vp3>19;W;rnc6Ops}gd43FF3Lck_%uMDcWLx6Yk8*4<(@Q^4GKJD#S;W+FR zuDBn;|MqdFXc{wPteitfk75b0ey&IUl0Sup9jSk~0@mQ&0z6&utLV)Gr&HNN;iZ=s z*zPZ$_ujaR>nYo8^IvRTLz$pgSaSt8n~le|RG!oF+K^G2uAII#9DzOdon;Re5>Ehr z;c}!bIfY`JJ*8Et*nZfk!A-dN#$yBF3#kq0E0@*0O!YGhIrU4EnBb}K^fJbrnFjGB* zrZrytWe#8327Md5UPBBzPR@kh@#f?@?BjsW*)QLI(y);vrs=&O5X2TAh%Yh`x%N}8 zeqRm1jBVNSkmbDrX4E~$KU-Skb3K-Rh%5z%gWzs!de zz^Zm}32F=of7(9v%GD|t;P(a@*@;c~1||hnA`Uog4W8Y^w#8XBigriE=?rB;`WY2Q zb^<9-9U+Iu?iUTqf==le31Lp_L3cdPC&ZrPo>@%{dNOlzsMCwp-=Ae(2sMJ_PRU|B zU%k%+?YQ>EcvDzpTzBuMQLfJro$M*R*?XsY{fZOJW7}RF(GhYsk}{O`72#qx7wygs z0Vh=Bzg--e2CO=H^WTZ^9u}XG;)GHV@eqC86atuK9M^)+J$7z| z1@26`DEc;2#QO`VePkV2H~Py!i9$P{SYd&vr5^%eTI25FF{is>nVzI!SR|j8NI*{O zBiN3R*0BxBZur;s%r`P_{ib6NvyD=HPnhc+zCL#zf7!;0bL$&@mS(@YE1+lLO4J~n z6>-wfI)ViHF$PLarE-Da4}nm4HeTos{!g6vg^YSx;fe;RG11S>E8@PQJ8H3lq|ubBtE^KMbfPK00Idn@1<3*VdIrC@514%}7g)dzMDa z{!mG{RJGN&N{hR{$?jV?T1eFi=Vyw@E}@>;-Te+YrL9pnqaoL|ymDkNuLNN&AOy!Zyv2EEi{EArIdKW#vS|(YX>~yG)e!a$gk>5?Lwf>M$CeO zh4qqj(>%af#r`q60#|Cj1tpasq1vya_aXi9gp`tpb0X>14$h|}QCWLgpv-h>Z+E!R z;-sxpQVUGkLMLy5jy=cPx({edO7zq;)u&(K;oL-_T8<^xQqzT2oc$inGsw<={EEM& zTMZA6uu*e15Xn)q?Np59@lhq%Uh*~Wsl6l1kk-^jBQztis{4BJ;QbC)KJK@`lMPBk zzt*DeoNKzLd9iMR%%|@!uESQD@1{e>lW`s2BOW9t_~%o{-AakakfaalWl1IJ5g%T@ z>=67mz)&vqD&}MrjuDJ6U}u&@e*E5YFF4*|K(S5X9_)mD8fugx>g=W>D5#+t43nSY z9mT-|GfD@?MvC*0Ia!1Iixb}?Bg6XO`iK^x*!PzsZ%+JI$E2+zUy~j+LZ9oY@|Sqn zbg>?1&TXDWs*mBKt)XrzG{9vR8NREe>_?w;SHE%`#I01Sf>l2_;X zVRbN)@_&lH{3pFAw4-}w8yD8HqncS@ zx^T*Vj#u*Ns6u*1hF@oV_)}rI8jDV=>+UEIcqb5pgN9Dvpz16k{3PGUS3usxgnkTWWULjL29|1JvmpJM>=%6$}3;v4mekq5->r#;_eIUBSlPu73R-NhRfuT+a{Ht^Ec04g5x_j&j6))7N{*5j;l> zsj0){AIY`m9sMWkboY2aRCN_LsH!5}0BGB8`8jz+w<+;dYPPShA7{(#8N-u_#xMEV z&x$`P0K7l2oIMGt7NdK;*L_i6x%boCx((&Js=tgT|J9*&Su4eHeG#qriDO{hlkhn| zh*Nvk`*qy81JFR;G&VlC4bJr*R~Vj$I$4buXFB%gM=LCx)8au#NYsKJPSZxqD0&V$ z-T>T&ZrW}!1|41K*>%C{@3>l@J6K2)1Oml|pxSO%?W`5n4~H>NRRVV{w`6Y5F$(GS zNaC!I0V_iLN-BE|7&$w`g1@wVr|BvM<~BCt<~Lni7erop_&gu%hp-ZXXG=Ab@jVOq zFYvC6H z`st3U$Huh><*m_9IVIrO+F0HeB`8)P{HDMi7Z2NTCSWo+G}I6Soso|(`P1qT-506y zSWc8!D5XSWdv|mLL4AuRv!-a`d=utQ=A`JGT9#3%7p#}x2RxV1MP zs@x+tZ*4#Dm|bbR!ig)PyoG2$Eexw8(gV@>d>~}tQM=cmk4#v~`H7~*$l{%pt+u(v z4a1#T21pa<1ta?1``*xsAhp*HZPy>_Pq(eqS5-CZh^rbk2`2+S&B}p(OkfWj~ipVNcL_Q){tUYep8<(rwD` zv-+r~W#W$ZX6X~N z+PXRtA!nvK(=o%Dzu!BngR!eXt+ao!qLRpkcf>d-&STxG0c^zg7oI)<)?|p3$Wwhd za#_E5+4S))C|iqF4HL1A0=ol}<0HlqYS7&k1+vm_2n20g*-1#kb~hT}Y2$LLfWwyF zDgn--j9<@6T|oZ>ix);{$m%+G^^-OFS~Xy?y*{A7_OVRd4i@Fi^u8~_Dl4LrlI$yR zekl9zM~41oYh|6dyL5ELfhHchsr6|?1Sf3xNH;e(%k?_52L=XW4-&&q%-B<+qN6cS zT!r)U^88%fBnuEvu47DSXlVtXE_yv)p!-9EgH%jRe`z1+X&!%#>>7@x^U^Uea69e{ zcD4x9Ou<8-b5*)kaWNT97f*G{*Ows5>4}Mn?>>0Hp8IT@cntf{Y=H(euOuE+zMlHO z2F2IJP=)HrqpsaW+}qdwVZ+lKRzeK5G6D%OB_UVH+c*CRaY3yPYkB|IqGSL2qgP#x zRRr!UVvQ;MDz9P5jT55Xaa}$(KP4q4U2DMsx?0P_1YjG3aZ1gl9FseUe(L2k3zVel zd)k#a3WE?NR~1`|Wj}#bED*;62N1o^0YA}pDqKY9X3{fQAZlJ_l*E?PW7ffyDbD&k zCWiyWg?Jw%VZNX5`Dogxjy&b1kM7$#T8D4e*4G&9M3Q#29w17D^Q*J2(|fqx zyx*&w!)CSj2gTPpKY3GKwhmFI*@TqtjI=_p1vL=59Qlyn4+(fit$hw76_0D(nXUXH zstlK7bc@@w7h7l~zlLsg@v*bGMd@x`RnzrOrikvdqwsXH`qa)#h*DJepxENRsPiHZ zJeTO<8~YvA(&DtZp_3|&nV1WP*-Zp!yWDuv>lIY*L27X$aKQWU zBi1%Y>!MjJ?Rrw><85-OUlJdzT4E}R>~pe55>7Q3x)JXw6J1~eCfIEMkpLd z48d`l!~C_khHeD!$Ar2{U|c?mw9zUKx2+{c^3`4+(f!)I0^p%r+hw=^<`jQ09ou#< ztId8zgJmIoHEASADCS9deWQ#%15Iq}b9SpC=S#Ms>DnV5rOk>`9r6RY4*`F)c)`#V91G~cn(X*9dLfh4$%^Fn(dP#X3^d5XiC|%xHP+PAmZ9Q z`E@@(zMXf;QNy)BWiv{5Cgwz(M7p*&*=qXZWIrF2rtAogVD@U<^r7JU{n1|kRlrkv z!J>l0NXtn;R0X%WnKvb6j@QwoGgnk(hKh!!)3g)C)6$x%3H#1y*Rtd{nwz+N0Nmq$ct^84qp!|D?ORc<@iN;Ylb6}()=L|T><3~Z-7CcT><8wuane3`!l1R3 z_2Gq7`xV|}kH;iz=D#FzCzJrJweVh#=k|!;SyRVr4ZV1evv;`aV`fp?-?B5gVJ=Y= zvdXy$0o+)5wpc`FcH9MocWB|m{KW;i-Mb4TlZNF8a?vCr#s#MPGm~s)ia{qkZTZxu z&^z6nk-0X_r@a;Vv0yik^Ls#P*~MyR+4CKkElZ~7#+(y#I7eLDgM2#KT>%%q=E%{ys7 z7Da}Qi^qv*GF3$C8wbI1SJ@1hd(oVUi5FzgeBqh};rh!n@y0J4hHOZAO2zXZHSZyy z;jPdK#x;cc_*V9u)9a4SmXPUcV%?+2XA)t3I>wxP1jORCE@b()JLzR$`W3X?bsY7} zhZz>&#x!2D-j1Ese*Jl1YkK-%8Ag#_8)Ef4G#~`120ICO$q5fcalfQ` z3ap5=C!1`-KdpDWcD$4(7k_9w89CGl?WgM6lxdibAgX@ZOn8y(2QXEYqXxn=alq(f zHvzR)a!~ws^Wjv`AEA(5KvIE~sUNFb+VSw`3b(denyI*bG``QARd8eYT$cT$I*!{U?PT&%b zFNes?hB-zOVYAP9UBN~49pX3nHCIZ^g$6@mY6nq4=zxKVIUyr;o~XCvh=wa8cy;K=TqiWIt5Gs3bTq zua=bg8itSIiFdhTu(7crcTIlWThScg_?YT!ilmHnxBnR8^0Y1%DhQ{By1JFWaMiCp zS3Y8BrA8=EWOnvj<>uSnsotC>x_4*s|NJ8^f6&iFXnk)dzRrR=$7ePe zgoPC9B&$M*L0De=w?6Rd>T7zs=*dDBQgk0hX5%UCnr6JRhX?ZRE-$d{0`&I5)4UYT z-;+{Rl>nc}mceY5lFUv~@YwTVT2uG4$DC$|jm3Z!AY68W82RzPXaUgmRrYY_szzvp ztuRKoI||VK(OR(Oc3R`is<{}$GEH)>2A1^F-&9Z9=p#h!`HbvsB{Xu)3J0Kccy40x z;U`TmSTZuvA(edxt<0~}7Z(H)(gwy)bcu@3+0;z((1a(2@b3I<(3fOz{KiPSOQ1Rm z*xNoq%y)j$hG85HM&)b~54{ieLZYLCf2l~BDlPZIK44%aDHZK{nXlMbkP=Z+C{BT2 z6CS;T8L+6>`_S(bCpvk)$2KB+zx=w9kE3NM#CUVYom`>WKiB5{1mo1=4&c6QwZ!A& z$o@1GiGhk&d+P8F33jAhu?pa^;Tj@4 zHAS;*hK(RgHj%}i705KC)7x^J!CWb8JaO=I3U}&_Bk=-_@U%EJnm6B{Rt7vg<5%Vt zn%0R{7vv~)TY3;-@4-!F0rrvf{XEz050VV|%XkDURb zAbmil=h9|DSlD)%PM@26-B5|bZsf>Y#<|A*^=GorZ-q!~=aPgR`1rr8>>FD(f9}k? zbiP#2j0$(A>)pRT9V%RDEh)9$ENA3D1=d7=UbcPZpk!Nn9^k&>*tp)ZcHQJFM}lh9 z5I?|$hdbB56(3mzRfRM^S&@<(%FHB7J zBIE~cUxEEFUT6MqimU!Ld<^jEs8KL7qP^Y+pNDtA0QeJ2Gzkw%RH4yb$(`WDsx3bZ zTVs-N7tlV?!n9hJJf@=y9Jj866?!n(9S{&e{vDP)99}~5co>l=6#B2_T>r)!-!@yH zHvLppJ5z0*n^O~^0P7~LE=S$!*kX(2*i{WLokH3_gw40Q?P4PKwzzGtj2PDYye_wn zut6Xnu-4Zqb9~I}Pw}eVOxQZ7On?3~4qKP}BDu2&xFDz*YCV zKjj9*F!<%Ehmh4yy1zzf#R7EO{uteEH3O3}>)L|bv2WTtrDx2Zt{xVbsbRhUzGU+5 z-y>7|*Zumhlx_N*>m#B<45n4Xr>D;gyLYFjK|dgn0Q$!h<<6AHwa2Kr`0&9O*vm~$ ze2&5wpN4XfeXb;Ta%5G`{-Kqdp!PZ-<+G+@WGtpF#f90^5E>f#{G)2~*gt62>v7Zx z2j`a`ZB*el>R3;`PCvQs^VOGd}6xF^kr_z=X4mRih40*$aX;I7#;c3-|FT9)Oydv z##&U_kLW)5vWKNa>4>7D_IvZz#oVpr!4Ov>P9T7JoozFw47?{!)FEp-t?Q}{TZ_1l zWCyYS-=wqL*|$MCpZvsyeFJnzM9;Jb;>3R|!9(!w+$DU;Q}8P>mmkU1Lk!-vohaTFFg~x9Z!?} zp3t4yFQjr};Al$+U(RD1_FtdZ@&3Wv*L9^ZQPI^`^CjUbDRwwzd!@(pKW%e33}Ut6 z@I9DSc91@YE9Lhdb($8Vy-9Tl9(zj2t*hK9z~K|?+{6*HbN=G2$KLELf+!qPqtapf z8fey8Ww2lp7XQu~naXcXMdV_0pz+QtbGUb&;`86ht^^{zy=PSv#x+MeD@yO=+nfD_ z$MJl#ksrFxoo+)m<%VMFf33>y)y}etyD?O@plFvH_xk)&=)`QaVap|9S^y?2^?0U# zi2}4*lgr&!0Mpg3cRc2Kit}v9{ktI#TC%`boECLEGiWVlawQ;Uc2zQJWTX`9oOACn zY7ndq!d~adpF$-joO3rkO!j835w2*5lO}V+9g`>grnwnB=-<8ofw|UZ%XWjM0K;3&npRuVcpNhqJViW9 zni5vS-xbobx^Ld#%<%HZYpE*F4%?+_X(-NLf@?XQkk>_=*!k2E&wV&^C_8BZVahvE z$WFk5s?V_6P`5^BhI1#_&3Bo!7dctoo@U2N6@)f=fvc9(4BW(RT2N0?dpF z5gs!qlR)vpYYJ0`mpJ&PGV4pQ)!V~>$45H=o+r1Pn6se8%|_&W$JX%(%E^rM zNU5Or9DYC4t#fQ^lz`RqR-|;^ITA?bJSO>`ca}Eb3I%?p6>Hvd#JY2I+qW7)^ z=B(5KC@2${_h`1S%@vfP2Gz&Z*L$I!XjhB^B4`-~8*k7}iqjl=yC^8b{Hnzr_)t+; zn3+qA_fYw-O-#t1g=Ky;x*|@zs?WE=KFiGdW$Q9bb^byD(aJ@IydR*3xIt?>f^D=` z0Ra@n*`MR|gGSfcY#3>JVrS8>b2^e&lzcz#&l|w$y0IJ+`VE#=*p?n?1KXR+M=Q1i z5pnN;aSn)Yi{o70j1;YQtFFszRV>EV^^f_zB@3s_aMk3asSt1PF}gKHqg0 z$I(yLTu1mttcFgVJOrLhSsqNq1ifwG+1@^P-&h)nxN-UcEP4xy$2cIzV1Xap&l*y% z?dtqh&bC-j=1hYag!L7kNguM!U-xp80sMGh%=ZO_tjB-JqwRI(l+}}k_{h;hHoQQq zNlCzWcR2yH_(|8~O`!?9qxbBLs-U0C@x1zPoQ>*fW+CUe`4Sj>;e{;!Ze_FPP)w$+f0r zy;WO{c&(?ipRBWDH*1u$jg5y)lTBC+phdFmK2SV%N|I(RpV)=Gm5Yg6vZ?B~6kySUukYQOw$$lG2gpme7Kg7#F5nSAkA zyH+L9qJd@%(ElA%4%zhiA*S56|ZLb_Z zE0NZvr*28xtYc7x+seSk&L_-uFvrMajRHZALS|q7HQUM!6oZV^Y|(~Qyun1D*lYfr ze1v#F>DgQhueBU6C*xt%g3NEaHPdrFOk0rK`mQ@7d~p3om{RlW52n{Mt4{mq`=;TS zxnpsyz^n{T-`jS*s`HfIhr8v_8zV+X-)C0K<0Jb=gqqg@Vn55{ySdf1+sCH4h8nB1 zxvy&0H})%q*iLz{h~*Atp~T&Ui87FBxjrKEYY@A{CF-F6fRFMo$ok16;H=bSxd;n? z?se`9){fnhbe7efTV@jS&Tqbr>(i>Yk+2ou^lTBJTeGP}=q(%vx&7k$Wpl{UZWPB({OS-Q{%YTI=c8RdgP+` zHLuwIWbk7tp~7b2c_h~b&djknyO6EGW+P#;?=!vXxX_&KaPg2$;kn-{Xo%TE1lTE#>I#Iq?XI;@f1p+S=j~pomY3lz z@b6#NLgyi`wkENpsI#_UC27$Sv$nBT`RP=9eI}TMh4h6 zi(2II3l5{M*ZZs$`caQda?7{v>8%f_znb(Ja>_q!KLts1*Md^Yb?RcLrWD@GWQ_$& zOff~X?^mVjzqT;NL0;zjt~rY-bv#rH z$us*3yP)!wM6T8VF2)*cQ!uij8%%B|UHyHA%_Ht^e;1bwUJRYN z1gqG~6W6tiGvRQWEfq$DiNF~k63>aI`UlhDB2JOGeER?(mkbp&cWAkMI2u~YRNfpY z9QA$mS=0Lw-D-;0-ylw^5|!9y$^Yy{w^>cH@I=!#C{bdXnJkhC#zN^(Z zv4QyX=WtyV$FCLHOOgZki#AZxP4KbGP?)q-bjJ26@@_pxPTG}udEPE>ygFf}j=w^S zsCJY$eERLzRdG^z*k)b>d8BA5D-6`s`xr*kvw&a|eED<2JwuG#Zv%S4#WaO}r;qc7LLLLAw za01EdY+pFN*Lb?TTW=Wu^d~tqq?4;Nu@=^4#X!*juq)>72H%)+|yd=V}O2u+bEh#H2mW&R)Pt9Odq;~}5 zvg3dH@tf)=G&NwkRy66Z8IIt+UJ}wv>^F?mAJB?Nf(-h8y_@SiLxh8CmK+Bn*#&LJ0s6@D=xZ+rGK4?46p?Pogoy-#7tKmvL3&VqV=I zgx=HgHP%lpX%5e?+tRelxRrMLojV|_7i552>W&r3qhE;}{OM}rCua0v=iHyo?Dd_3x=}fGwFxX<-dH({Lm9KFl z`8@xZ@=gWosR9KVN+4MTF*z7S;`0#tvchZ`dt7FRmVByGj!!kc;b=Fse1b8xw-|ubngrhC$U~0?Kf7wwvRKjo0LhP zoWsT4MQ3K`aMR+Y&5b{7R*c;9)ddd%*>8mZlFqJs_Xp0FY1Elw5d`SS*#d@#j{qoG zCrXZ0_(z1J#dHOvJ}r{p8f;1A)vRgDwK!{6 zpQ!7gPA9Kbtwy58uBk#M9m&Y>z`yu7IQZYABMjwf-si^+n9l%=>}ud$k&uu-e=23t z(YF|ZbljbtwvRr7*uO?~Lw0=l_OB^VPSVnN%=Y+qPXq%e-iCi7Li+qJ*!2@q3l&-* zRXrlj1oG#1NO|P%0@z_~v{QdHXIT5QIjUqX2CV%>mhd$tUP$4<%u#ecSC9#)_@^he24|45RtMzWtRbuH^P20rb7wm19B<#8L?tJFWO z41Q(3#QMKz@BbU4_P@c3`^5l?Yu*dUBggkC;)k=>l`u8V*C;lmKUZM37k2{r=Ch?m zk((ROHu3yaS$PuqWR5?RIsQ}F(CfBSNndG?q3VqO5u&;#>ifiz3su`KSVC5w;Je<= zbHtY#YjLhX?`!aS-G%)V&}3Kgca_?hna?7)Bt$QH|KdF%$3nMqRlqs4v11^Ui0_5Q z{_puMXjq&51aUbYPJx71-ffiN^wS7-RSKA?e;q{78$hEy!r%8Kk6!}r< zLF2Y53R+OG>*o;#_a5*NMznaM@Paz`ynUj3FT?jc%x^VGlAP6VPf?A+`SN&1Ht-7T z8o2ES;|=#_N82{l#O_NI`Yc``b9Z*zt2(ii?Xa?+j4LmbO>{fcV1)I?`R2pz-gj08 zvlw=lP+!I&J%O)FWjW*rmWfI1)S_M;71ZfSxSt_p=#yM!aP86$$b6T7-xIDhB-QwN z2ClDjB3*--m~k*Bcg$(tr%=xfZVH`)g(7w&Go@wlUJeekDHwTNi2K;^*y(0-8F0)C zY8RCg=(5v;J|ZidkJUymYlN}ji@O-S!e8oRDBi9mvcFRuIp5)smxto)!{{Nii-U%s ziPt|`_g23yVYh|-6zTgD1UfgKsLKHBYDu)S$o>djF_`B$ZZn*D&B!3K+-bM@4ik}a zf_3I%s<%0>*SumZ-K>`1Jf@ppy)rI+4=xIt1^V_Vc6OSQzCLZ}y!R1*_I~8@jzM(@ z@!ciGj>)?A<%#*#Kc{!tP@*uXsvPFPf4RfMaWP1)@^`f{+H(Go{E>%Iq_2SIMBK9? z;u9X~`{xVVw@y7;BQFC~e{G_H5Oismn*4kE`~q^7=M!8yax(Fv zwYA~Npf&y`;a987iV>1&=F$4xAA?9b6kG3UP4iLYl(rziZzScZA00AH*yt3v*MegM zF-a{8ks{DyU<#UDH7@SSU}3dSjbfo?wS;D@p+AhMc!W`dG!X=2^NYybkT}gInR}z@ zK69Vs6?K39m`z9VmW*;^NML-xvZsUdV48Wj;SUlnJZch_Z9;AIxHTh>C_w{4!X;-+ z!z_}azgU*{aZL!l{j4f3&tAOkBsIJvckKMOq}BMR;)HPbBZnb1?h4NWS&UtFUTDdO zl>lOk(&^3>#$MYGBRYM!+z-*-jw&DF2B}eHEOq=*yp-PZ1*IE-!-A`_TY|IRsB4FfDAL{Jr$jT(QQBg%@I!t#`&WMj{rNlUe89BF25nm%o2HYZays}2J zvT~6AGssj^VEW6F=ba66Z!sIy>Ou?KW-@nMIs&%>clMGHSsohGY{C9c;vdn=gjUKd z7bccuI|IuU>I3|W)7+CNso*dy+A14nLBcL_-g*i*T;TDr1Cq%EU~oiH0=5RY$|cc* zxlDKUXNLtWSuP~uZjAAF68uA0O!3Dg|R^~92Z4&mcZz71uDIICkDwiy4q*myC-!ZKVlGzE)h zV*n=84ieiMVZ!FSHUEU0K(ZNl#+Wg7L;oLXUv+=ApE586v^J8-$VywiNig?1`6}rR z{32J*TrnT^cU^|FlBVDA6ZH_1Hr9;rGaSGP9c@m1>YKWZh6Yv(1(bM8_q}CCI9%w> z7e`i5j>Khn%EQsXT$B9+W~3vVEDlElJaWm9^wEmkj5O&YNs0MyTt{vtc_X&UPxv>7 z#lHCo(OczqUF4Be%(KQj1cpB(de&tK|D*ny=BtqrVuwBw9Wn{I&@UQjNvRFZd*wfKi-Y5GQu+SC zrtC-taebrzIb zU6c~6&#qi=@@emn+4gDD_t!rG=)QuBt)pY|@*Tdq?dhu3vn*)%i zg%Ew`#0Bx@Phu1%sAr|}k=qa$m ztMU%!Y)lQ*e{PfRZ-^-C0=Pe$5zw0`r3WrA7^`s&u-DjLhLziVpA?h|VBDZ?0GSuX z9z^N-j1IZ&7**z^^#2J18%#TaFG4C(srNWl#|R|xR}V7Z7t`cc>b2`X4Wjy&%JjWZH=ETA9JV>;1xkSx?Ek|2&_I2Ko(Ml~j@rS;2?0`KpcdGZU zRDrceW~b2J#m=ngx3CZQ_t_xMai3^k)cH$jsbhjGTSO{`6$HTEQLnxnvg4((U1@M& zhH-ymugu`47*I6kUEP@)@%+P~iEVr7`Rywc>9AhWU4i9ThIb2p;AAccPsw0Pm58>& zH`=R-fV)VGqJ03f*z$Opb%lsgd<=c;mTWF=uW}g$XRRaNZ63(A%xkWKnd!B*OD9iw zv6a%`JT`;`D_P=hXWMe>{Up;-)KQ*r`T=XN%^Ux*@w;yULWm_%3HkMb$DYX!UcTXN z9qawlC)3bqu3}W9adM^7!-F-c1?YHt+v>+a3{NQsK}~bpq0OFkZ6&+J94R|kJS-(l zN2P1yk{Z%>Nv$YE>Y14EsX6GaO4a7nn(MH7=TPyZ=AA}ixv9*AGW$l^%Bb*io3_Ux z-Bk3qhFkf@88a?}qfhlN8SXYOZ}AU3Z@RfZO2DqMxME9^A+!E|KA;(|Xx>{_E*>8_ zL@1->EvOzdC~~$?Pxg{os0W-()x7ug5UtbmP1hYezMn4BBKC6?^OZ@JP=%LPdc`vG zESLm3F;iNX^ybdye*3Vfg^(`|yUkNU{!mCvyOC(f{7XLewB5{@vk8lxcWp?jblB2q zaiKY<6FY^h^?t?*v?k@d&-H=h_(w-q(e5v&l=rpLuI zD_ah-~p5};-qw>1@Z}1CCnS5?_*G`|XUtD$H2gh>0Vk`f8-cV5xV3?3s z7w;{-5nK^t9S!S*^6aWGPKPnP^;SVpvE6)`><5-LT`%sFz8OX_mWyb=V3lqZJsGT_ z%JFN2TlP=OTwnak`V&-a*ZHYa!>?G&8?~yfp2DvY#|j{qd-X2j3kllAto->Fg%=6l z!=U&5MFr9oqakld$@895w7N)l=J&;)cJ5(?!lJ~OC<@ZpT6^=3sU9sgd zJ-UhRPgN`&Cd+tt7p30R*xGv!7Ks;(&x7N!^S4 z%K8dxT&NOeW_^QB3-{@PQD)->ZuQBG$*@8W{RElIlhW0ejFdJkz0=>oAaE=35gned9lx6y>bBnTE zKJ8)XDt^Po7?tf6mNkZW@VzyFmP7(*vGgr^SfDVcbMQ(Ol+0i-cHa9pfLtImwJ-XO z&LySpcx5##vqv#6Us0mKmcmKslsTc>&h0g zCy+Dl7cFt?+X8@>`&=AA3p`n|c9z2~dv!%F`zq~FNH};fI&q0Nq}uF$8xwcn2_=X= z%?hG9G=fPMYWMwvqQbybk8WipX;VSb&t>lXM(C6~eH!(R>7y8o+>OfYZ=>mC%>2Y&I}fIFRBzhYmEIA5IoJ@J?1HCHU0PRfwa zG8JFsmPlw*J*DhEc2v1v5KtPecO+8tu>}viU*5S@H$X(Eu+Kru79aSPk3zo0Qaz4% zKpTWYpKeVV2mn+|gI?Gx{iRbl+M@T4ExgvoJwQ2U@C2Ta9nG^*8HuQ`2=ZM1zABZTgKy$>SDZ^kRif{fSCP{D#!j;!PVrnM1iGT$?D>~m zbtQ-;Jy6Jp_3cFN^hl--8lR)f zN0p!IOKUcsFKBf;>bta6+H05RF!)rlvVgALoj66AG)4m%ewEId!@8fV1+Di? z8Ib9Oe7(MaABhzZ$owT zoV+J>e)*r;d&{6of@be?X0U-l26uONcjw^l?(Xg~xVyW<;Df`#{owBI?hY@{z430u zM%>-l-Ot-!JF2=Pt1`Q?E9?K;e6-#;L4VaQWN|aLS4GARi6Rz8E;$JclJ#jbP-(6n z)SgSW&6F&EWye=aPQYw`4!!(q=u02-KGu4eA%)55&4E7NlAgMVPaxkKn>?Yi#^;Md z91^=T!@XJPI>d*y#us%BpXO5KmZj;0wQzZhmd%>UqI7D-CA>)JY<-O=EEwU%nn=f$ z8-J+RyL)NZlPIx6wH{oV$FE^iGX|@QE$I(d>0#&s<5bgn*TMiLpqQAmU%aLv<38z` zAtp=2-VQcjtk*EOp1S?azg<}|D4=P1N)8Q}iA&xLPb$lt0fT>_X^H<8ieT3NtmJ-? z__(a&;<<^%3^{Rt&_pVY$)8}AvmvdGn_n;|IO5gJfE+G)b3(^dBc(7uT z06_K66L(tVbO;#`_^;z^VR4=6SLei;*p@jym=+aVv;v%bJ4yH&$0WaEnO`7Z~@T!w5820{XcMfDdJguGwez0T{*?1F0L3lZdl zv%CU!$)ia#^WN1a2Dd4ToA-kMsNPt~n<1o0Gq0i*6Gwwq7?`+hb3#NJS*KKTGt;dK|o-bE?cu6Z^ju-kiUiR|q^_g+}%2Sdo#iDcj*yVJ4!!i%I6|%i4 z5!$FdwobOAFnqte`Jj=Y*;t`3z#FHdNW=Qjx)w39f4e9fY6JpuMUIh zwkNo>);hZf6_t=UZWknm_y3a65)v&0zDrnAD}n$cW;OQb{kNEm-r%!#FU+S1%E)Zl zV?K6whvV0Mt?&DCSK_`;3AX1`>AIb-_6J)H$N05V@`pn8a7GfjDmZ1f+p98oC35&z zb}uz)UyzCdfq-R8QN&2(Xi*CovEfk(@v3itd;v3-9I;wRiuKDpt*)H~E_tkxQGg)V z0DZ;1CJm(+ihoZ|Bp(Lpc7>5sXv|%0v#t^grNz>`CgKr)?jND=RLL;VxE{f(RPagD zE1P0ud-nxA?P)l{e}v*mup$Y^;-X%zJPJRnuXf9#O|AQ?4}#rN8(i19fZAR0<8qrK z3XeHi>}Q?_^m=`%rwiBnA++A_cO*=Tci_sX;6znDX!eUU_R^u_B2%Iy@NxZa`cToX z%n>VapcjIkU%$S(npZrK#rgwXi|QikWseXeVHGFx_OWnzy*{z~;DpO_^Mrk7ag#eW zA}eUCpawt3Uh67~N*v;n$8GV{wbA{s6I1k_RQNj<5ndcHN>~P`sBFo$!7Z;vWdX)ai?6tO5#JfWAl3PlPo?yT-2mZ_kn3lt?KX*SM~bFEcpxb zg30X0m)o4&Y%sP6!nGVo$pO@sWGn!MptFi!DPDWvRP`HI?YT4TgEhM(2Z;z1beM-1 z%H=M>lZur1IPvx$p|tE^iELfZdBc|Ny{XFoasAyUV1?Jy>KwQpavUC$5G#D!5bQhoocj5~P4V`i{-f5*ddC5? zES>vr_$n3{%DO$aW~+J`{ec{Bo^2@0A3D)ZfZt*2t$X?Vf8B2pPntUhCsw)vQXae? z3vLS6ze6Qs_2+WDu}#Nl2{big_%~h})Cv4Y=Wv~D*@7N$O6C@^O6pz|;fFLon?&;E z5hF>%#+d4}NRF)X?<3+wOY=!_ICrdc?1=n7i@eIgPv(F;cQ24BvM!F#I#O3SkGEue zJ{J%ryzMdci&Z<V%gGXtLq}jz2m{gK6E=1*Rb*12Fbk(vvtSIA zy!jbywgdOClq!?+HkZGvwc%#Aolz{sxe^;Bx|&^CfRS^Mo{ztJZSaZaB*LS9Y={MX z({D8i{{&gEL8baxK#t7cuo9lU+L`<8Zs02r>FbH z<*aX~t_+L8ujAB2c2~$D(AWmN3>q5oIS%2$wus3D&ZVel1_ylD~!@r2JgT2Bh zN*#_M-G>^z;mmgBenS}%BHlDl3%YdCW<%dI)SQZuUdXulTnqHk-QuOc1b7JX3%A}(GW>U* zmv_S>B(DqfMjz~SLNR3UrxyouX6gEujK7ZmMx7`2^g`U053>^{l30(L2?=sZLMzU+ z&vraQ+#Tx0>JM&-VOly@FYUSrF0x<^hA@{Rx zD8c;K0@kMe=r8%7a5M%yc}{Rlr8z(UM4V0*Wj0-JJIU44&clooW~IB`uEHa_`qZZ- zoS+#eN96gk6mmTjY}&wEH+B_XRC0pJEj&~onqy{HhZi{zO}~J}IS8sQ^6WDG$fP%zt_b6<3_pDQrikJA zjHByusgbi9AHjz~bXvfvon|S#sXZWWM`tn@6|W5Xs#PJen#&8@DFC5z#Z5Lj#bD=h#}(5E+KK|uuTUy;a;ruI7Lk0f+HMc%wveg z%Z6%j{b=CnD*V|Ajsm|kir6Wu8!RN_>q?c|`Bf}NZQJA7`&^@3I$P@Im(ub2W0eL{ zc^iY5K3&jNpWLqV8OcHuHDO`2J05*X>m>pGkToGEg`@(Mr$){l(f6z6oROP;JXiJw zx{^+(D{V2>T1-~t%H+U7MUYC8pzu^8>GBh9eUCq`;uYEscHR^6;RGap>C<1y4U({A zO*hNx8*VBg3>HIw#-i+nIuL9Ls^e{X~0f@U&@~Oo!BZ-NE z@sj=Sfk{bmrBru%<+e%79Pt`wrTY7RPF{0fngqTLF=W1o6wyIJS1|yepcC1r;hu#n8-w;Zt&u4@^l^Lk zKrt@WRa?$LPZ$$kg-+DMGXW8QAC+z#T4sG6_+4s zCCGZ0k-Rgjf4{5;`{(X0c-RuTv&zJD#!Yn)F>hs>jq_!r&NQ7{-CDGj8qK6{SV<;aU5U8$&NS!j9}+v|ywajhaYaRB zg~H;FXCX#8G{V;24`Qx&z|=ZQyf^bl{y|PZ62MUUb ze|gFRwZ-tU#)Pw$fg))uH}4#8RflfkCaexpZi;Z?a;E9ErSUfvp1lt8tG|wQr(Qfr zmugdk?rj1LNAk@CAr)(LR;H$RHx?|3e5t53Ytaw%=PUdord)%dtN}2yX)|Ly(#?tQ&uSDD)>wDb_~VnHxva{| zY{(M6$(p}H>w!&9ex`k(%bH2V?-w=0d>4nXb%Ae9A%XKcnRcb_ErINneOMTCrj`^I z#WB;sWX<^o2u_#_tlp#2IeWxBN>3CbniCTBAO-$Z=W^~xvFJ(C_#+5`ID{x!(U~V# z%)lz>!V|Qy%(bQx-EU)2l+mrA6iir&QHZrymY6Y0qLDqTFtna@X;lT5I6Xw}x6u=) zX18a3+I7i3xA9i+RsHdaY0KBTYe>XytuJ})=c%<)*d%~|MbZq*x4!t)`$;Op&8Od^ z$vb-(MK1j6cmK;d>s=~$PtL22;W8H8Xd&x_RrB?sveOa$&nK^>G$w@k=d11TXQ~8- z_43l)rw{t@!{lTex$hWu==s{qqS^2h|6{5yA<*}pE=N;Ch6Xyz0a0$vaof)%Ey!Ky zzpGRPr6-8~@2gS*K5qnSOh#fkl)r$R!EVAlfmjuDfv_8SRKA-kl z`~7Uf&5LRrIc}X3oKl zK8H^4xuHiFCU-AZZMT;1$N6h09v3@2HeocwYTd4lXsE8=K{l0!*K3QM&No{@z4T{Y zJW~xAPMcs^iC`jYNlENTACv$>a{Kv(-Mc?>jAR~h8QJ2Y-Kf4So3=R_*I1-=;8j7l zNs7B%_v$C5NIbPsr<-dMM=0nQ5}<+n{dS6SM;t$5)usffjrRyUYHbpKkYLxg-=OPr ztJh5->tBxm8y(xd6o6S`0rhS!GM;|s;pXSYXKGY-n)jmf#6JoNu@0PSD>9_d$zThj zEq%SJ({@U2zZ{I$6q=pgWT>B?p{|q{)!T(kX*`E~rf`z)9>D`yNj_R~NhCQZ@5)}g z{H9#DN?*b0_9veM+}r&7S(k8XqQj5x{F*@!F00zTc)94=(-E?$Ln^a#Y%fJQ|E#gO zibYs{6GT83Dg=>?frIfGM}IFA8&oO|qP%~S z(azYw5Y>ojd%(+FidN2#=3(~Iau3AV6}r z-z)1}90T2lqlqgBnFj=z(7KoREU}4KMND&0S)t!#bV)K%3pKx@6`37Q`+V5R9|x&I zplODz3KTr~g*^(Oe5hSZqBxx@5bv?BAiKUKo zLLzt};IF4Z%(er^wfIh+yrImP0H!Tr!5p%Smx9J@Ef(t2N#+$nc;xK>t65MqLa`8}JWl8cD8%-MQl%9-vgfTW-W8_UAdq67#;>|#Sr zym(S#Kd>trK^9I)POEZNl(rO_@YEDy${R>A7%Edh`sMLc#DplHpw1nsku_0zc0|~R ztPc+>%QvC^PmlG`*A^*3MCk^U=g%i$^S|j!E)H36vP7HNn=pIs7^Mxt_B7!|@`jVc zVl@d8e+nc_WjPJtMt)Y8Fbqon!a6?cdN-dr!zjY2MkDW$_yI^@C^bziP>O?XwFo;I zsWbnc9@idT#FDh0b6C9e|k6n;3NuA#z%!(IB@(N`mV&~p?W?YBBYZTS_JFa0H+o4Js5nXi7Vn; z3GyK-K|oC_q#gL(0?U~gE)w7kkKESJ3K#Qic_}s~6z5)Xbx#!XE=AdTNY>{!!pzj! zU|hz#9;ek7IX8pyBs$Wc9>Sk8nrqCO?-426|9!iuKH||(P11DXlVW{k z09r( zXV`?XHXQjhY6IkacyUlKAU%Ld_R|*7IBLQ-5UpGwBP37s& z5An1OT8PgcTAC+EsF9!G8I{LO7qQxGAW()l-4L%AGBfDY5~0sp>xnE=6NTi|RncKk zI|o=oe&KVf4m2mH!=*?T#DOw-fiu_fy{uqYZ&(x-QZ$lual}CF^Y6ZJYc&=0UpAuz zlw^;mbHXp!Ed{ez58_8o@2&x~nQG%^Ob{CEn{kaIV%G@SnOk!cqVf4g*j>Pv<^nol%UD9;MyQg-wjj}>UDoAvX@lN+HAdEc2 zV|-oF*KTbx)Z;u0Za1Ln_`6@0bbzjpBCfS{WzcAj+tu7(=BuQ?X3t+cFVlds`Eqb7 z>SNDkX*#~u-kC0$L;Vk$nOQCd6Gem=Z-&?!DiY%c^w}0l+FxPl+S0h zDT~8Lnhy;sITQRBXQNH$t5;{U*Vp1IQ8~|06I{0TR&bq=dP2(^lgl&BE6MskKMxL)SBq_H$TW`-QW$zqsd3QY?&+}JP0LYXDDNsXR@ zQT}<4@5qhHyG_Mk4aRXJm@b$c#_cRmhSJj&Ok0cWf_4MDbj4iv+0cM>kTnX?MgHb% z6H8X~qRn2Irw`)h<{A^KT7HJ4r<}j5N=yb|9LcnM(}SBXb!(n0yAC=hQ+Mw(Btqt$ z`Ch#TVO8tQKZaPylsTkMDO=tkO|w^n>s{z?ci`c&|4JItLM`K;59wWIh%PWXrS$8d zdcQ0?N@4|>8v+cQY_&Phg>J@+JGgc)C6vVToX)nxx`^M~4t_h~nQmTSd2T$IndYPm zN-g81{MC--hUq!M-IMi+NDmVBwqKXp1AhE2ly%7vwbFPxJRI>lQlJAVB35b)b;hRN zX1}GAl z-lY+x)(g1ZBC2BwQCQn2sWhJIADFoP->=PozicHI2&7k7w`U9=x2xOE%PmSOTC3R` z%siaYQ5uUtNNJef@4=J%&ER5qf{H%9jHiFQTGP-d8(hTfcDNTI@LBwRCZL9C?JPB0dnv(bws+U7RhMjk@EeAxy>&a1!|&-7 z_fAF$`O$iJ+lt>{F|Inxv${eRrZ_mjsDz2`^NA8Iqw77avF>Bd?eyp0`q;@sT4TM= z&^w+f3?@u24@e*D@s9g;YD#V=Jg1s$>AoGW76&8N+4g&p?Ag%eMTCK(Y54{hMrzj- zM4t9Zi?jR$TXgNAEo*Mad$TpiUDJ~q8vWI#pe6dOUX}Nocp`W{-?#IHcE?G0KA*k; z(wcPu!dK15IT4~X;czS}%k`*q7kaaOk?U7EpCy`g`l8KJglmswPVJmaQ=^7thusJT6}rQ| z44#Y6TbBAe7{i!k9?!+nxyQCUmWQrJ__mnV7(q_gy^P70`@x#BOx^x!8>l*MhG5M1 zUvUMpX#Cd;ZgONW$tlbenZy0eAPOq}y@zvCy!ThQy%QlE_j5wDORNbGnf5T#oFO~2 zd(q6RtK<5|Wu?o*wcaMQ0=eB@hr;EDm;fnTVEo1jIJav6XTvXa5Er&nZGsB|g&h~68F*CA@KJ}w+OWIAlnB#}X;cfNcMAmX2W0vJac#^C%H6JKBV|ksLp7X!uqtNgRAcg-z%`%WasHC zR_k<6d^BJ%Pr;g%D)Md0bXl3sOnQRE26(MM%(+i`)EvgPWGQwTd#^b(O~RaN-gt3m z<~e}rlWXf=9|=uZ7*vaFNT>56K@1ZpeBKvsNvvv;%H8SqGLpv4YQwI2DE1AWC=}7K z`P&pFl?#$)c8Ynn7hQWyV#mR&4I8z3)(<3v&kx0{N<6cPCamg<%mBht?%C?oXx*BD zx_g&{Dr!QOmZQ+jv}*rw=9!k~cN^HQM*ig0<~ZLTyF3S#@-{o|Ge6P}Cu~?!_K=eeqlkkhBtWm595Ff(LNVTag z7Da=rpnshkeDC|X;vQ)F&2~pXS~9&4d&BG;xPC`F`rP9K7&#p)8hbI4_w7OgFfm>g zSl}$!n5+#b4JUT(T$3`AeeS|XzydP(yK=j1EA~IKRQ^7iIjzbx49gEKbr>^-R%RX@ zZSz-oqH)Lg=*YQowU(F;nRVqQ;-Yp>8DhqUvc}W+`9^O2 z@FvsFtlV#7%J(oFF<4D8V%J>>-Qa+!a(1}zr5X0hsePhg4J|ig!ckou0gduEltG@s8+=0f7bHGvW?PTW53+LFjr=Q@j0;DGG#k6J-?jAPS_T#uxCuJq( z2Cuj{zKaRV2G)oCy+hG7%VsfPYV@6)1j!213ii)SE143S88=Qq&>qhoYpM@UlrS7V z;`eRQO){9BnNI-izBj|N?EDNKxyXrDUFM25@r;Q--**w&>6E*i`qO!)n2wR2yTCQn zt{JUc1$p+YfF!e|vC5{SJ-X_5i8cg(fM_NQS1QQ&8&7<;h>BgRg0xLq>FHmc2y1V--K5rZsDNN^A*Ypg*9q-B-tVz~x z2#s~~>yMC1ZCudc33FMapt9K6GOJL)e`S>FiqZR2(K(w%2JtBm;9OQdN2 zR^0)z&9=z4T@yIO6Qyw+l~9cG$p!W!+g0@l;{>xrg*))G>R}#pHhfD2m*AoqTwn?W z!dY*W?OyP2O2zM!gAT~DQuK^z+>CtHAkSX@tRGrXYH+8IELJd3-!LTO7jdzK2?Zq> zlZ5H9h80Ld4;ZAY7c>?I(}+Vq6TMyi?!{tqQsnr2KyTd+tUikMRZAt=$xks#NtCB5 zPAnyk=6c>bt~v4;ntf}M!h&m8t9`4SU2Wd0Hf!-&{f1WaM!YgOzsBf7FWHFY#1zxF zOFrEbMTAz;(Tc|_pi0>3c3H~lNk|qg^4AhU+~0s4&AN7~@RFpu#Sf>mK?#^?sg$tu z05nHy#%6wMTPJ{83CMMw0Q(n5gG>xRSH7*$Ef3WDG(>`et2bwq7hY%j zHW-WozLT`ys0p)f=N}0ClIz&y%G#latH;|7uJg@g7T#9Z>Vz&j%~8w~LoU;dZkHQJ z%V^YKl>U9V>7Kt(oMLBxUS>+v8MzS@&ST>Y6p4q7{uEWCm|DckPx%e#N$(Z zosD<+TRzTpl}AGm>f_Zux)+0)X`BgbfxKygqCG|_w^)E6oMTej-+sf!Jl8UU--PfK zg@hg3dz4&uthdL%CYheYRd|x{j9zyOpDwnUQAm>F7>SWBZ1a?5iKN)-omA#nTO>?Z z6(j&eBN!GYpPKvXMV>%}j>o5-i z#!w0T^t1R>qX2S+kx%1RG69Yxpt+xbMmpX2MB#8IM3SNdh|Uir6P;4a%PdKYY9G)_ z&g6bw&W!pbrDnX96`El=2EtNV652wAKZ2fdCiuq&>tj<4G992>DJ7An2|mK2MvO%$ zH-Mi+zUd@4z9_)j^*h~?mei#eU$qh^Ur;iM-d6BbEk}!;bkQ25|6GoVp2?-6P2+jg( zL-rw&esVW`U;Uw#VzRtKqmi<9Vp~3MwT`a(ZB^js&mEMmN$%J3ifW~b3%zWoiWB~H zoD#od%q#_iM4jJedrhIO=YwDDl^es?Z)36EyRl{bJJubWote3$8D-3HVU6}T4&q2Y zO5}mi(a6@mZ|tyqm*nwlfP}&g$gB>q6$4A%O@z-wn`ihaE&aT!(A8ezg zr8|U}y5D(*j8-u|N!;}9F>RjoCa&Dai*0bjdSln(rY+YMnM*5J5MU?hH755wE${Vu zySXaDY$^jQ9?>XH+|ToJ_`P2TgvdNlO6mR@+us`TESzuOA!JMJ&HD}96h1$dR&Vj! z-rlDB@qg#v0&xd5fN~w*<;2UQR;8ov;`Ln6q5~Ww%wC_D?-z||Xohf(Na8vEg)$uf zQo64&no4{$c99&W$NA_IrQua5t27BC07=S{FEu-_7ceJ3%sK>foS-g78~FDE`a*D(f5S5-c2#|xjHcxo@uR?cnF&x-Fw%j3kGjvn-MQ!RCBOOP-tL2x;I^b9$f0+=*xMHfk^PRLOIz{^UhCV+9mH z)L9&Xe_RX0Ven#OW@%5ZH^b^DpBuD;m2MmL01mH?OxT?~>VsE=&?e7}p1Y~K@9OtJ zu}Uq6;@*ch3Nf7TcIrCrQC5qnEn901;h`Iu1Ii_$OD37w z`+hOV@1rLihTGCYP0$0dom$*SQc*_B_j7EkPl5Bw;x~6Z+yZCAss%L;?Q({kF24k@vGy;>tUfN<$2Qu}^|rmMIXx?Iu{qZ^n=5E(iH=^+vVAQzUA7pP zKKjK%{Ox&Sc)46)9gR9#iW5b+B8Ps~nvDIL`}_8-lqQ_H!-hBqle#P`gO{=h%6xN) zmz4y+*kwSd!W-hj`aI9eIO@miWuA?d4Y9L)Ud*GNzLH$b(itfW%FEJWZckLiH!;eg zi*w;8EGtTcq@_j=-gnBpwv3lfhyv;ZrR@=>tKP^ntjQ_we$5j-7g2`vrEv)^iF0MR zN0G~0`Oc^`1d02rwVdBlW@IkqzUnC8G1mZ;i-08 z8cXsaf;rnU@UCaLh5BjAAawyPBNSwb2cAB4XHFR< zy^xXo)TLVLvA+u*a|1tWutq4DW*XydgfS&kat~T>Ev`u2O=o2zNE6Ljgi8K~5SuA8 zwAO?olFKT2eCc@$!fM+~I{2v7DKw`6*1?~pP9W6hjw)3)32tBFzd4od1_U0j z+jP9@*B&>{o!w0XkMoaRjnR^2pv|wo5u6Zwz?t)8ZQSfrR3`!hl|bX z5|Gh1(!m$5qa$2WJ*IHgi4vQQkC**o5J6_{DUnQ6(*l7`Az@1MK>AW=whvIu6i2?& z_XKvB3=;#hu%ZpI%O*|+q0VJ@?h!YQ)#U>H!KK0A)E0&m>IW()mpwEhFZ4{Ep1$cZ zju7-0Vm`_ZJgAB)ir1Uf0#d5ODFK(%z`)Eol<;7lQMgqGJ zW`PsvvgJNC{A(X{_7r<$lo}t4Pef;18O-$Ex8tuIcJYt2aC%*+m<9>LVNI25KrZLj;q^lKo!!_8ZS+c`JoC9j>=FmLMF z;mPL4U;l+H*ZwbMi=F>QmZPVo2;iS%?-s1SE?r?Yf`v9e-VSWW)_NfgHa*;qgob!5 zN(GrYY2QmAn5|Du9`s_bfpPGSBG|5vgxW2QXt1B{?U*6eXvngrj@&j3K`v#vD_x@b ztY#U8hvqH~XehnjuRq-7>Hh@WEJ{NeHg1E(Gb2fg?HDj|sPFFZtg?dgU zM+&7mxL(d`=*U>Oy6Z5%l=IjD+Gy+ibUaRn)Als|b0UIugIV2fMUD`==TWFObGh1* z`1}YDq<-}X8(~RZUmG_%Zq}01_!8+!vXCOFfx`1P__I+smd@BX|CV9^GzD+bKS_=+ zG1;Q*R8%F&rDb56AAx(N4HOICrg?Ip&>%ys5oA*`wx+7<{T>--;=jufPn$q>_W5bv zJ!mILsb|b_y7dijjNqWTHUgsUg&gn-1|CE3dVxy}ip`;92*?vPa^vpdYz!;A?*^I(i z;gDHE7A-xkLS5mY;itSIM{+5<1v8H>30mz{8tLFHsiMCPX3{GyO`!;xQh_;!F$}!u zSl*x+LkcD1u>gsFL)ToLuxdF*Y;4#tx5-Oe+PH$PWa-lZ^X{9y%}+VHzN*QCr`W_@WA@7$_rVw)8n3m3 zVmVMZrsVA`xogAxwZd=`hl@;>lVl&LoqRIb<~xtNm&+eGNOdXvnt_l|ZmLG0;G{C8+K|^+lZfy7@$j;-cZaHUtKBWb zqLJAS)RBzDX!Wvt&p<%4pZ|h#1-huHvr_DUoK5DCR7*Ir4S21%|t0tADbbQrq@heI6a?)Y-mx%%7FGN6C7hSb^~q8{rokBFwCGrP1&)Fk zE6p(q88iuOQN^H&T%b@uLLWIW)T+dYj% z<=)!^4YO?Z;T;wIzz7jOe^b1AIu!ZzSTK7j1rB>+Bzm;HjGO;uwkB9O;)I8H!sq+; zvUeSlCma0L?FGwNB^+#@;q{It-^|X{s-E?(p6iRp!7fLNTF!23Z@8VAmyqa2 zm$kF2-o(Y*T9&-)3}+|ofkwQhns{(2e@tfYNe1tuaihx*Y18g@2$*@?5Dw)ZfYa=0 zb77U1;ea5*QDy6&dtdbQT1drF*O1Fhw<%ddJ0WEza*R3AaQCwr^z9o=4?sjvxqww< z?Hhwd^(|v9<+wfNhZ$S%K`+7_Gd{(wSJ@Rd%Fy>*QJ3z17WetAMwwLrqpDtfo*f{m z^34~>J{xJ0vNX3bgq}0OD2+IKZ7;|)#Ov{7*ohBT`^KhVT|nK7bNjBKiv@S({DaTu zZ*EX!S4K%HX_dnP+aSk7y6r?;U98zeIgdVOZ1Q1GsONJ{6~qimIZW`=VGxX1srZdE z2^r^Q2D~+xWH6Bt9DJ^pM#!cWBk|4vWXeQ6$29ti-V&*?;ogn$FL>-nnVZeim#523 zEQ}c88J5=is&46Sdmowg z3>7LxM0P3`xrg%;13tJQsAfid%|C~~5)RUZk$&8+X#nUMlUbMinu}m>sl%zl7s<=* zdgaap0?Vx-(!|-T+>{I4G*+qZua*wqH>t5~C{0m1h`HJd0XL-)a2n=1@|lERwuY{m zB>H_<>zdIo%w=US-w*~Tj=ft=KXpYN@l6CM6`yq|MAGK`0nT<4z|j3 zHORlpa)s}$Vt@&Xer>%N#*(#$2lB`mq(k=kZG1;VjCbq)7aJ7v!+}f~nvbnL0VWsl z(U@~~1I6KF;r|Q&$jH%w^VvBjoz~>9&pp#N#b>Q!mS1~k>h^%bQtHlx(4U&g0G;}@DuwX{|MZT$_=0Jyo3{f#x8Ak;xFyLYuL9D1W-nsNN(seC?W#_rp zyV>O9RcB~|_eBum8yg935B zh7BLWI~fnn2IMfbfHE{rwQKbO&i~{SSR4(hU;B>}6u4N9==*KVa3Ja%zn3k2P&fnL zSRU7jnapm!sG+XLkg(FyUU-#J(TVU|?4aB0GbCdCBm8NC6kY4yxo!W$GK=bq#ZRv* zcUa96A)2adXS7oDC>w@zTInChU2i&+;TN>vtU{g+KeAiGhp%Xl-s&2Enh< zPW7cZ*3>#SeMV)L+Q9F8F3u3NP2rnOnDpHwkkc=YeAB8S{5V@a<9tZS@FfP*TemdpS-2(TTmnkMM{#Uw?lL%q z-PJinV=1aL-V);y2z5-6Jy`)J7~mC!+AZ~2aVFEs`^0+RhU}cAmC~4C>oMFbh_m<` zqP}!%>`nX|`7;05Fc$LkzoigtD~7YYHmf1uB0YLh#6pzCzW!X%hwx$P2b+VSxpFtJ zgsv~^6&LmJU;dsMPlOR7n7&!UxI?IZP+Y~ua*vS<;6Tf39h5Vf>icVnpXdR_tv_4h z;rummqbjO!A-V7_w@%A3_&KXWn0S}Jlwj=w+NAveDaPWY?LWzhh9uUP0wMbU&?N8wa%k;d z2bgBd)u|X$B;rPlzlDhvCM73#Ufetj<#hIWg%22l{|IP)NFN|FGBOe&LbQIZ<-+-T zZ@U$PSz&s#NbA$1t>9?vWo91GR1RTCXsAb_<9WJt2)eF&z_icn#?7HA6Xwe5DkeTY zdG2I`&#SALxcKJH!xuB<0|`Ep&VntqxT`C7+38?vZYgY+10y8B0ORuL5Hd(mwOTuT z^3aHgSx`+4T{ky2A|k@=&gp9+m&_UE9vQp zD;Xgpr$aB)=uPg3M%MAN#q7r6U>8q_6jOciVDtH#0gN&~R~cLx+x; z+t?VrKAfL@$x^pE9WZ!J;0zAU{`GRjwYfc*US0-xdS@Nx`sFxNiE3$Kr+8Ve&wtkIzCaSr|S9~DQoV?P~nLY=wB69yvF+5PZv zSDP4lcwl3M$(R9jsYdgo$$O5RE353xW)Ie1z4UKQO^rF-$L#)wf#kdyHUWS0MWfgK z%kUo#A62Lf0xp5B2Ecd#CM5K6X1y~=noL+rYZbfN2m`Xw#iien@h#w+jt;j(@ywGC zpSLc3G#uR1yYJ{|uY0F16&2Oh>-*UTuRysv_-^vKdP=YX#!^c0|Izn*YzH3wy^G7- z!W_j>2vz1Ai(BLi#angi?|%)dvWQWX(CG#zC6^&Its z4}&{%mWZK;4xWFyx_GOfYpvg}-Em@vgc&f5w|hnJ9v%{;$-+g5{Fa0MKE= o4*s@pG5lq;{{Qb$_v-U|<6*SZ{EzIBZ(kQcR92)~NI&p@0Z@-0+5i9m literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/report-inaccuracy500.png b/windows/security/threat-protection/microsoft-defender-atp/images/report-inaccuracy500.png new file mode 100644 index 0000000000000000000000000000000000000000..12f0d72face7752c6a991bd7fbbd2028f46cf083 GIT binary patch literal 65910 zcmd42RZtwj5;htkxI=JVf?IHh;KAK3xVysw0fMs-g1ZGta9iAA@m<{A-4@qB=blsd zzTSuXa37|od#bCZ>znSHo|$i=RF!2hP)ShVym^Bm_f<;$&6~GZ{~8T4;=hr;6FB+5 z?ybAJti+p2DA~b31;JWeN&L;5ns~G)(+~f26qm1h?r+{;_Wh^5O=iXqENKQ&z z)5rKY`vVYPmNX(av8k21d&Nk?#oL=fwL}IqnIfSO#^jl=y1cT2f{n|qTg~vP&*nGf(?HU=!7v}$p95SdaQh=U2BWs@qyS;N3lS25xP(v>`Z?i86Y38} z|MBIO(!$W<@o!PNZbJ%QD&BZH;j3dU%|a`jj5z4Xep~Pojy=_RH^NBpB(Fm({y+-A+we`4O?de1V)qm%r zC6R=BdO3)Mn-@as%QvGdG>G+QuK_-f;ssprGvezPd)>$JVkO@mozWfDw$l`D;_-nq z^D*d==3gB={|aAMj<4dW{{bmVIyZ5!rZ-<#+fKYrzS0Ktx1=ZEf##vU+IsDf+%OX6 z%%h6vLu*ZMWQ(H-JoYt79^aBmN zAiJaq;}G$RjuX(XkWQd117pY_^_aIrmU`_xkpK z3nouzXCOagC)b-{S>3Fl(*ROYdiO3g3T zhc>`@$G_|H&}UgbtW{M1{4Cdi@9}@dg`(zclaKGW09lJbdhNIz{w0I7y%&TAt_J%h zSDOhlXmMKViZ~?snFVXO&`IPB33nkYEtD+Y)9QQ>^Y@wFNO#kt|Df{!BIy=Hf|g4V zORgTAc%<#lBk+35u>6fmT2%!x}+fpCgD6z+W#~-L}Ukc2=0tIdG_2OR7;cF z9tvXLh9;nB)}+Jbm!gXj$)*r z_h$&Nz0OqYUb?7?DI5O23KkB|UQ(afz|`rgL9JNi9_T$>rEd8zMqeoqk_j3)8*K4Z zNuA^WB6v9{NmK6zxs7!AaNpeNu*EkTUHBUaJgP6k-jDc~f`_R-zoz^rC4XC(j~7m% zJx>ew`OE?p8~Ark4y}R){~KCSzY(Zfmudf#os4h)pP~Qxi~Ie5bIZR`AOHWcQ7QU6 z_*oEQ00kr8uR*5i!imL=-Gh*wUJshfsi@`zwm=(K7uWs?C~mSXXq#=jWWbHa2*0(6 z^|TVIYahdo9oq48`Zs^=WnXMIX_29WBJ&FYB5LjAS2-BKgnshdQAkzYhXWK83v*D+ z*LYAEVt^CV94=S?jdqh?vl(;Bb0WiBMsk9Tj1{JQZT+TSd*AhNi^nVeuH~<+r0~^Y z96mySmg#uc(~nj-sXyiOOVJ6mp-uktaM)~Dr?U7ihSTqz7=j`QbOw)*w89s({hEw~ z=VAH;fRRz{U-7`-;W43+8VW!EF)m{&G8%)3oe)vRXAB;eA}l{4UCy*MmfAV%U#s%N zxj-_{vBoChH5y_Tit!{81fOmJ#{(&`8R;K*S}#_RoF~i6Lw(0iwu=mR%J?2?g*8Xf z)5Om+E5@H#X)5UNN4*GGjG=L%)=eoXG5G^X4y0*A2364Ytb9aR(C4rYkbGj$oyNOd z6P6p>p6ULxsiNpTF)P)N9GyTLTCTk+z+K}P14YaL-?MnncKwHh| z_(is6toVG&qwk}et|J<5XrxkQElNX2oyl~)wti%Sv}tO5UFu@HU;_#C{H0jI98f&E zlkHVBYX9lAN?5nN9JXgT&LsN!RJT;3BDPUzd&Y49YSaS?54F{7=YB~|89boL)O~`h zS0XzGvV0ZmeS&pZt?sItedOR{*ESIP=A19%Xc|>fv}@9drJ3d#M{5FvLDyXh(-bJ) zB%`9)3$gInUChZOl^iem=o=)+*A&cj^&DsoNfi*V%#py~4MB zTU6DyblwiVlf|gFjaWrvYN)48;_{Y(3V4fK+P4m_4$=L+sGu=vd4dF z!RPMX!fQmwy(IS4DX^0-k|rWl_rBj<^HRNK5yN7@h;{=8kPXcVc`|gXtsBxV&N942 zyWUN1H2YG;OvTPOP@kRVCjH5CF7v~KgxlEC4#QG9Az{p~@V4c(_)MMer@O(P+aJkg zS=jZ$@L4_D1anaK>5iBac+)QLQ2xi;YdWDbj;jNWPa+ zofXnK;saqOTfBg^7;y7c3bA9CQKeEU`=PZy6C>jRgf}NO(NcJo60YoEU!GfR-^@c9 z%}^^My{F}neNbPJH43ITn6EIHGAkF_H78i61xa7i2&vQz0piCjUmh>U?j3}cU3b_% zNBS9RddJwx(nZ@p7K36PwYHV?-QF=Cq;E%iLfqPm$d{vjQQk+h^3M62XSb?6-j-fs zBN%~X%B1a0!&>9ndA*|Z%3N7ZNUQvpzfbQiuV2OO03Q|^TD)wezl;!g9CQ6@>@?~= z*tbyg9VLy1B#?M!Tz3Zc!FyY9h{i*@W>1KoHvnw(%!Li7T|ZTNx{1;82kd9^g{q(n zvR1|yMjswR9H1vg-H+@T`R3mg^c(C3#xD}}!1S>mmbq;%R&fW)%&z5?u-Czb-@*x5 z@1PF%Dc$7y*yEm`*G^m6pn6|7cd%1{_q>v=jdWC0-=WU~mj_ju$eju11cL7chHA)G z`Q!hvW0WWe)dZEzUQyg*F0q$H4rlf(@AY%KR+eIwh z`+G|pRW3$&^jExbp8aD={h8qRKVp?z>YHaP8$o?voYe7=bbv7C!q%x`ONB+xg8{Uu zK(o06`)$HTb5jEUK;P8-swWvUzm95QU$WFI{zTF~A>{+1hv9-yCcR(UW#HuSmczq?mLHh3e|epV z8v8?Ewn*PGY}LXAb_4NS_$$em6R?K{4l|}+G7PT6>rLZa_J~a-q}Z7ZPHux+m@L*G zb>Cs_x?KA44(Wv4Jda+9dmr_c$$^MpMlO z9k7X5!>#W#$!i@J#y2S96ZGkiL+~p*!Y_{$g=xG&Vkpup1>x^-*-x!k2iQM&r!1Lkb94xLYrbl=re%3<@0ztW^*sdwZ{rDKm;Z=|0=Vg8f)K-=(MPHxXA4F) z#-FhEEe&tp*+UJ@PHq$T=V*V<8a==d=j=nIle=M$SfR(K-gByhjZ6avH~yTZ-v#T~Wfz;^fG zpm`@9=!r8zQwvgXmd1IyrewHhEWS;3+u6np^!4T@Uu-ZPN29F1P$cuU)zO1rlU|+t z-iE8vy|#et8_9-$ejJHng-f^Ys|dMP&Kmi_r~8P@v7)Hz7={VFo*@hEqc7XE4^dkP z^$rSaYA{aoA>#s#%R%89)%xB*pj(&jU6%eWSEyhVcY9l`MdI6z>>h`>m?xjd{t5JB zTq*}I1;J}#ND`&CD;wLRRfmX^O)>Il=NaXM4?Fo`INTEo(*Voa|`-v=u@}8pEneGhugtw>3Lo5t@bCNOp>EsG=)=@0jb7ps%iKbw% zmPsNM)BQvqKdM6sQAx?S3l@MLh~`I>fvelC;?&{<6VQ~>T%fPWYgy!*ZHfS9VByB^}m zBRI<#CMX8#T}pM+zGIo*A5CN(F&k`yWTaDaJU5R0e(*Fq9?Y4(n05EqBLP#kMg9X% z)2-S3E<--72t<>kZJX5w%m%iHyRjm2dfDiZ%vHo%-=L_45A=uUa33wEWLO%G_mf#b zi$B+t<2yby=KpFX*GrJNqf;@rOv~wdOS8X{Ps>JJqStCAv{%kFRSCv2RWK$5xgkYS zU=Rx^5>u|->3w&h;SJ4qn+63mIxj;nIA7w zO4MR!_r#WwEs{&92cvnmdKB9|Xs_lx;T(nZ$iX;dZNdOzRaqNf_le7yxr@Vd6UTr0 z+&Jp??r8SY_2bpM5z7{GNhhWBUY}#fq0nC}LKezVqj+V$gdNmmp`rBh1N0T;W z!FEJO7Cz?C7W^V(iwJY&6%?1sEV29No63~QV^Gh zuP)G^e*y4!a_19H;HR`KeIpbG=HZ)RuVR&K$glT0gM)Ku5n|HwX^B7RKmE!RK3O-; zi7QY}b!T-Nw14*)s5j<&G1BQuuRq5Y(E$1Ka9ww-8}wbO%~mvzw88KPjk}wee<(Yu zweEp5y4iDh;qToj`wZvES<6aB+7TGDD}+Lq5JnLYxQ&JN9v2D!%KXa_n)|v zY?VG_Qm?>U#Tz5dz!JRXfDcD1eKCW2vJX57#pm3$y{TOOz6^il*`))SQYGVE+9j+7 zwcNgE5%IpB<7jjmNN1V94+oJ+eD4hY$x1pOxJ?$vW1v1Vpg&*!p-pVZoHuu*(6V#l z>OhyUjJZ{>&K4_*B#4B!JlNS*%)u<)jYCi6PfIX5Ij5$L)O)-8R(M28QYs`^vU^)V zt3>OFx87lvXy6KdJl~XUE+O5*eM5ME!@lo z$*uE|d~g}9_0DNUZ4*_~N5^qsyUM!m+l#PO+r&qe0MQBA#_A)BdbO*9+ZRa2*2K2$ zG71rI6y+X^MR(g;+B`dUypZ#hrLo!2EgC<*R%E+BV>pON>f>#zh#&q?iV1<6zyt_0 zREEQC9~&_Wb-YAUgF9+t6i=;Xa%WGg4sXR^b|A$9^R@N|h?KDU!2{QLOqzSPkOE3z zR}i9IEiTo?JN9_qGmnE#!mZ1FbE=6e;c5z(iGzGZH5G;Mx{m$nxm%h(8=0=!t997` zcH{_0x;e==!k_bNync&kQgEMp@o1}8NZaaPlMHrgH@Mc$uFnI>oI9WJdl9kntmBQZ z_GdzdnchduRk~3#$)z0`d{rE1nb7UXZ1~yCRWenQQ&!#DW5d2U&@2`Xe?cu%z4jH=Ub7- z8|(G;d|@6Zd{+BAd@lLbgu@m83Hs_<-_;lya=-DQ^)G)>w}O~2B)<5!zmlTusTBHy z-g&)#&iomvIGw{o#B*T3%ck46>|8S5Q4n5kZ++*uVygawx+A&C#-IiGIX71<^XvPd zqDOg^(Njw)?Vy~6&VZ4`x5?EwQ7ohJn|V!8F&e(YHv@w0_rTqE1kive!5ge^->>}Y z@12D2hYSO=d4HkK7N{M#MS%qA{|=l4(Av(y|L|@GSdE$VwTAvBg=?@&ad1oU69$n? z8UiNlxw-bB+sPdu=~lHAT0EdG&K$b3)4bGqKQ}rPYqG!M`apBc-F2ckzp)DM>GOHi zRvX)Ql|7i{VbhJzBBO7~)+E?`*^%FQIU#IxIWR+5h`t3x0*j=6Py8^dam82#IN8*T zi!fe~b&)W0M^iIcROPEK!G?9CQ$7njixPkLR2EDH6i7?4aE{cGWItkAjIWyt^K1|= zrn)nM$?tfuH<`(pr$WVZxc3FW2a5=*^>3xfenmsA@hXMdn?Seb{)95pNa^4}=hMn8 zn6lG)OpQ6r$#I%34>-SZ(}ZK;oS4N%Dw6&Tct$XgWGlEm==-VcRPZH{-$PsKMBqb# zo#ED1Hy6HY3YgV?y|jMC-<2n~Rs{%cTM*;o&WlwueyU|DAAO&A>r5tt(vt@QYcI&SA~eP3rm9ekwOr#=AuA64_&|gcfGT7`o0_&>LP4-pdV%aY`t|b3r>!-6M~W`;8YX7!0Gb*HBq74+*sNIEzC- zMC9~&D#_9WEVW@nP3EEyDSL*vYZ9~+jI-~Ajr6CB?HV%bu?v=pL(npis{8x%KdPzi z7cin9%*MrK3v%3rt?{!1!~)dm{#^WNL}@A3N0UK6ln+QK;W_#+X=GSZqU-dvb9Cmn z8Nx~)jlct^>riyQ*gzHRy4dmCo0G@(u9Ui(9x{@z&Dg=0S9iVi(o&U#u|^N6e1YBL zr;bvhjaJ*FVy@JM3}ZJ*f4})PF*wb|#}eJMP_hfj3u4YMKDFQC&0hzmPh=meHppnn z9~7d9(kL@2N1Qz8!k@~%va z2cu=AN;%hbrPQe8gON0X1wFpe1Z25q>6R6okX)j>jMnQ*I2_oIH+pE z!_hdVB^!yWKDbENCa=2s%?kOg;7VqL`L_Y9Y1}yy{%=&Cu?kZ|qwTqmapb{>r8qytD)wx5cm+@v?`STioB-6d@_%Sb$z(5;^$IfKfUPvgW?+V2pQ z?5B$r=Ab@)$ky7_j9XqMw{#1J!oI6M%xq#b3ArX`l0s^?OCEv0nsxdp!WKT!T5jkM zQ~iXR~;dZ96ZDhfao$P^=H0V+bG-7wR1GrhM5Lvw?% zErYwH2M`VbM}Ft$Hg{5eByiE$GzP@~#`WM}S=H&{>7!K9aI;sIUZTvD__l1ssff?f zfKnfGF)JK3K`zL+kW%_zg5GYIgm(W3r`TG*k&d-jCum?(@iB($`KTV)J<`Z;FzVWH zYo1?Vn_1b_+JTUYVjI37|D4$2`)PihiD*K}PUa8;&`Y-ACfS%+U7SvACJF?_vRH~K z0NX@f#sfS_5!-#o!w~KL=?x8yTt6m8q+%6~B<07J6bcyG2{X?XbwuzH6#UtXLEQW_ zY1oi8Nn3PWg&;tOmj|xzT>z5td8<6hM{Olt^e)J=3J)2^z9=oIYkJj**Za~ife22F zBsCMhBq(3Jc8pu+tdFP#_&m;K|6WKcwtB`yr!w)`=>NI^*GF6!^Ip`$-! zt#T}FG3m39bme#)UzVLRnzmJ*_QE15E7}|9F4vD<+Z;rqSrr0m&eG&ND*3>6LovUU zhNh8J6w}IgI_$iGzUnK8CEMSv8O5n%PCIG0I6{I}$e|Nue~HuY^2(0nTHjb0iw)4I zJIMN$s0tnoukLOSH;<^YM@Y4hSN&CfW7k453|hrmqa*UvwmfbzfK%@ySop*Jd2-p@!oYXJdi{(3 zT-lG*#E$}VFs|3cy?u_;054;u_IP012myed)qy;=J4W6-zNi@;{}Lv7EOLz1SXH1=z_>bk_80J_VnW zLxw-cTx8D+_(UWA&i^cyTQ?A&Sb+WpPa=V$IX*9On4l-o6O3129U59Vz1y=gPcE>SIemH9=>qX>v3Z&-|Qa>cEx{}_vDf%-br{Lxay`| zr8hFX6LWtva+WUC%)Tm5n8+4^C&XJz4@h~pG^|;fM}2ZApzXA*Ad&JXeSU%2wW9Rr zM}7F>UY%}@9c!6Rm035t$>lw}0+EIRkt3-;Su&`S%+h__S3Sw!sAt@2C6bO;$)^-? zf?=!?8`s=iPW5zz02Pb(iQCn-c&9&qZs2E{&80G4NJl(@F z@|d?$blkRtN1H1`H5(j}UNR&~L!1A8^GMflMiu3vhO6@cmdFbW7|kjw>u;zuy)Rh1 zyXrl=yT0aq9Usvxcb@&w=ogUwbRujnTBYCcOJHqmeQAwuY5|7ozXnmv;)rk-3(T~Z z@yh=j8hKKc^KGiK_xEzqz&?9n8_JmS&=11`vz|zK)o`Jx+QH~O&3%;E?42DE*AA`v zmk*lqr1&SpUx5fZxNvFmVY(*=e&QgWkbAxfyBdN6ZGa{%?SaeyN=SQ z_t(IVo6#|xCGS1K8V-5bxJlnEj`L1c7&9wkCsYMZ>A<)dh{DzJoNy1T=efbwUGSUC z)1$&X^zow5h3$Ioh1KmTJ^Nuu2fS(s1ig{MHnq>cqmiNi^O83-s$c(03sTRzIdGui z^IVkUBeb|lJIf5svk$vbyf>w0)@J7Q;(=QQ_UbsdD}E6u^lX>Ymq$!*_O?Bj$TW+0 z+@0qkUkvZPJ1uced+9E#XV}Y&bq*|Vesx)|B-?nLGwGHq^)Yoq)qzRpqhmMLyO#Lb z7Lgv!PNdN-A9>|9KU44ySmU%EqZx~Jyu(pVNc0Hf0+i}JPSaIaip}a99D44@4S;7p zWi1TNQA*V*M`eZGD|%K8m8pQf9OSe2)Ht|@&oF*^0^LjXlbc@DVrUYJrA_vW;MtqR z?^Z0&H!?@%S*|4z)nd{YwQ8iQL~ALn`nYrRRIm=l3Q;r7(QQtml?vYp(9NujkmBjM zJM?n$@;Y`678jj6Ph+eVb-J=TpyjrEC+|cLFpsJl%e+gDP}vIuzwm1z=NT^)9fR6N zGpfYapAb!srD`uH9c`{B?a|AR!kq;sjzhL0h1!z-I8#UyYow8piXT!g{`wF{K|)(f zN52QCEAAKt@2(J?+Ho#^AeJk?dvL@QMA@Tx0q8hgggDc(KOoeJ21H~V_dG&X_J*6M zAdmVV1?zujY@RGHcvnuYZ(l9HVia8>A#I(( zte*O)=5^MDbC~RVh29buA8``or^B-F72cTyW_M$t3V>;m8^hmf+D(RC?l|ywS~2hS zYm*d;`+S|(E)2MJV@VH48KEw_w=pB4xJeu8(R(9O*1IliMZR=iAUZ{(TzZnpj;n z!!}CUKBQN_P1xI}Hutw@kmG?>2^ERuk1zaekK#4I^%GO>MulKI#~!>dPZWe;A5)qh zvmKl-%n^vfx5mU~Sd^b;S_LtfHH*wugm9G+@ciU_dn8J=wQ&dHj3Gr5K>jIggHc0P$Hb1sySE!=3 zrWpK`_1r*i+h#qCDZN+Ttznyzlo59VplC=sWH8F=^W@a-+8y$EoX9=9wIZv$Y&&z z^rievbcxXh30BNRFM@1{H%2L(A1U%jYShN$=>qCToRjO%e}=EokvrdA1-k%4B9e(qQUd;o>B_<~AS zB`lF{mYM%WA$zgnH8H+SfbjO^_5MN!3fpYY-D=Y)$CfAAy6U+rThZ!~ zYh$O%g0{*;b3XlH8$O^%0(1{loend%HkZ;Y#&>&bdQ@^TJud2TG#i#fQ(P;i6#-KD zkil0OGu2xw&qQhm3QV;&xKmBbmT3CCh$KycKrS){a^Trn!rH!%n~7Cne9A19O4Bd& zVwG=YuuPTf8|p>Kjw+PclJRL0>0y^5xYuj7r_4aMHnJQ~^x63oA-zBmR|ZX+z!)W6 zL6ar%J_t4&!LY5#LdV>!c8Rt3I+e4XLd5#8lo6WFUqC>BNNzjFj>FVv@aIuHLb4es zGBD2p+?tmtj-wP;QG0EhF zUBTr{zui@*&U%={8e^$X!ie~h%~D@uqA~6JKDDVv4Kq82?RU`Un`TC}ENn|_2Ze|@ zH&MZn>6uE;lC7q_16^%JEOoEW=Bu z&XN{&)?;*+Lplzg|4Ie0-4tS+}#5!a>r-#2ZGtY2Z^~p_8wG~ zyX;LiC&ENG5I*4j!`BSWtFG>DiaE|1;#n=^Y|dZCj<%wm`{6^+sQZ}(Tzyv2s>49il{xa9#7oDMeRN{L;oUz_jkv=bG8N(V}{ChK%L9qWlGVM4 zc$0kD-pi&)Pvx8<+u3VItF{HKTQkrvl;l}lg9OYSpJAKZOoP7_ihI?K936twkvF%N z`VEXNV6Uptn5ho)%`~Xyr8{J``)yV9zbD|`5%j->ZKlv)@)!miN8hB4t?2alRm+y} zfS3KZS5E8Zqg!SZPl1&NVhjbm#d99d-ho{*_9n>_Q-mDPJ1?5o@Xsj;8V8H$J}>4S zf&a=|;ZYTx$OmUfdqK$A?R}B~Auoj2w5_8+BO0Eb66F}X`q3pk+~s^ztf20fHSqR0@NVT*>@kEqGynC z7*?y9H6kMynx+^RGY>5oq|=QGP#Q@(YHJ>CD$)I0)1^I+VA*_$OJb=|p+ZGD`jCMV zkh!@9 zLEkEhQc>;JmSm*HZ(zQQ{3<;ymfyU3y?8OX$E^3{_XZP;sac_&?G`8K*7vadj@iyL zATBrP`RA#Yh|}&#HovA#|525&WW?W`f^5M_sxR}gOcXXroSK!=Nrjwry?tjpme!8o zMzeJ5-VNZx*dDs0!FxW_qa?6KjV=3XfZOL}XJW&0uk#{f9u+l}K4SpZ;k6w|b|U{Q zB&^{8cr!c9iZUf#%3AI;yOZgq;Cu12qItPOX(tX6r%%)IZRhy*fKU~~o3JK6lf7XP zYxDY`;0Yvhz{HZ=C?yWPt_jiZpg-1`b zra2`3DCCIp5QKVWXXLxHGckSXPS~yeUZ(RAO{E^+Ydp=WA2W?FVDxUU6HNDycZ?-r z%%ZSHG+Odlci}7$iM5vbWyUObELE6H3L%K~N7d^6cTf6)34hPsl732!HSW(wmqh1j z57hton^Flt=-tc7509eP=`Vr$=#PW}10gg5Hsw+l%S}8*S-;a>H7s)V#s(+@29YR( zdMn`^`0El~8Y=1r(f8(IvHzHxLqV_^40Jzxim))Iau&^fG`FvDoyu<7Z)f~EdXez_ zHqY*0DPyJ6EQZoNH@f+`3s6-)V6qn(dn-N#L&v`_NEbOj|&{Nk!PD_Y6l$7C1o-2bx$Q@2I?w_m@y z?hs#}{EJFL2%E3NpuFJ7Tw?B4X1{;r^IY#|5w-lX`}HtJmPN1h`jA&%fVQpU{=+Z} z=Bd$0rV$gGIA2v0{SZr#GqOgYE~NQR(N+2tTc5H;(MWbYzg>}h6&=Za@iHz5R((NP z3%CS0p&~ep)}M3QPX#3xh}C|2DiU<^ohmj(KN#Z`m%(E zp+>FzWMsq5k))+3hOVyF;)U|m9t&n*G66`x2Zkk3STPp`|1k@Fad?;fQ6NwdEtjMy ztRi|_>KrEolj0Nqr=;qbxp4!5jY9|LC*dMvDI|Jt=#I_rubMMnu_&dHVfQiy#%2iJ zNZ>mAGaTid=CA6(w5Lwc&fKGMZC=Jb!JJSNR!Urz6RRU|dlqs$5}#Pxv2zfsrLy{` z{73J)y>Hmm15g)Q4kW%c_2p$2p&Sh)?;7*7w{cPMe(O?~OOJumDxjD_swA*aPa=+N zcaYk3j2`O3!$w|F$L<7fG`Ni|O*~#~4h^Ly{Mt`!^5_F*(;a!)n$Y$0+d8#zd`QY? zOSRvVoNsm~j0lnB_r6ACG9WZ0b9{Xe8EQiZz`|;S)|@aYaCTf@m>B)+g_pCO;*16( z`3J+5mIQ!T{5sQt{Pellp5|D@(2vq9pMxNiiqIXSQIqx40#g@fM-*xn;b?~hP7rUry$+kk z`lhoY^FQJgTST?>BO4|{?z+0-J3#~XHm7IgR_fIGDWv%tcP!anz+mGogwa$C&CBR* ze6)uX=@&ghW;mqL-Es|f%ugSfWIsIKrC(5K;qKA<4oo2o&`5l_ySlHUy>Zmri~F=)&#ECBUeAV++upyqmE+EYLNqrWtMlGVN@(3nr;?oC($BPZ2lKCY~xS7Gpb@Wj1Fuj2E z{Tlzk&Dha=&>epXS^#57=jg7|(%0(C!lW5bFsp8F$JWO7qTl9;mG$4M2MKj^n0wzm zLA=Y;HX|Sr)y2cTw__ikeNT*Vw$wAbf+YP2E!1RHsf;+a$h0}5XG1mERzp=0BED3h zz@o5GH8l0&>{PNFP{9xu&ttW>L{G5>~V$S(bTiC&wG-*JMWTJDy!G(~~x( zpsq^hlnf17I&}P$s$vIU$hiCW@V@r()$zH%_`MUj_p1jh-)Y$o;jzb-xGTxtC>`~a z+T+&zArG_V06wnr6P(7#F71kdf%6GlX!P)%N!4HfXwP`7or}Y7Oo!<&sJI845e! zopN+#Ry3X6tGej@i)S|QqWIF2vSZ@7e);bU3PIeRmJMvlq*GFokJj45a1G8iwR=hf z0A&1#b@1@R;ANvwOlwZ>*y$&j!#W?kTATOg&9Wa#-=EgzZ+TE{5ocfZbLZ9qt-ZEm znR&xEwVK75xKLic3pQ0)aA8Y0 zo#NxDX_#|di%?#@5+q+;FwNmAtSK0pCk8HvBywzt?S}CGEPGU4tj9Ee{70p{d5CR? zEqrdi<~kgYsycKR;k28KN%O2h?mWjf8f?{-svQ{D1JyS{w$i>iI5ZXA(S>#R?QQn5g*d6T&-&i2~JJ^60p#*$Z& zA|zr4ql0)ZG|W2hR7321WxlwymW|`A?pBYItQ)k=f+{^VyO>n4SC>e%;r|`yjD?2l z_Qt;2NhEB{NHVHuGD2k4B>%X$N+#`bK_ zhtHpW?W9wxU$lzTvznbNT-m~aj{A@!_?C{x%)PVZPHp=r+x6ZZEsg^W6gIGW9o%$` zXa+tb3WV8}pR6!w)i4&)cZjFT-+ao}hx83my0ge5Y)cxO8}_O1h8q@M_X)JEa7U-M zc8;lqV!dB|P9yZ2?N+X!KOA)Hcn(A{<^T$u zU=TQIv=s%najk?{nmFS_T}k{D=!dlrMukk;>{0?a)gn{H z+27Uq^hl;$E*wrRFED0Q`-&RC=zmsC6%s<|gxrMIpt^lg=q8YW+DIh>@Wo6bNKT|9 zxhmxpCn4>F=aM%8M-lQJ)NtKUBITmPR@n-HqsJdn=i$aCuJH5I&FPHKX(**$b0C)i zuj6+6+ZRKuwSi^Ue2blrYa(SME!}^^#OhwUi0hS%%{CycEDyU%OuBtF*4?tBLQE`^ zjt*N(@u@Csbm_nZY$Ib5HS4+B?Vr`0Az4!+z9)6GWCFgyP2AF>$wh*0>YIwU%yl$+ zpSK9LV@jDO8ql~>oXp3ts?@Zyd(s`n;P(&iW=D^oIUfWz#VW6wQZP7&2Lwh)=FOn8EIA`7$In z4cZ=q&wK2KPY^Rh`#qc<*_a6frN7ut0aJ(27V2H!Q^uFVDmWbNh7oxkF=>pFnqSzj z4vS5M28t`}`CWN1TjQK-?54D}Ss&6%GExTQ&9MubgVU#SWbQ0NNQC*^$qlqw@Q*|y zS4Cp5_D;4HH3^L9$IPA~{cQ`YAkx&hS~mzROCdDrXFss*Tl`?6lp88KK&-YY&`V^E zo!>!tvv(bmU^%)*0pT%nG=6aXklE;f^X?UJJ%UUw##5;m!x#5~E z9liX%v@7%9xeAoscUsOH+uzw5Oo=1dfw_-)LuPq^H6KkaIwF5&$*1;D<QQpVfK6Ohe+yte)A~H>}@AZA2^th-R^52NQ%wsEv)i zdyKxeF&TSXL7mz(6VV*l3D{nXYm})kiOzLX5Z{h(NBX!@K3?ka`&3Z2ZLqX-9YiLt z*q>LM=a+fGvgRAPzQXKV26`rs3k~KX4WiO*i#=Y#r=B@ zYp)VlYzZ-xxUHg9-)@HdVXT5J(jCftUXt=ytS`tkvyC!n`c*9?BWhr9e-3dLl3L;K zQWz6xpPT#uJx?5A5KX3$}Cnf92*~=_!hJWcdqv8|F zp5~^FelH|seSC6!&Y}?`PSdIi=|)sY=&V!*RDqUa+}vFUdRH*~dwIOd1?7S2q68i9 z4_0egz`Qx!&P#|DVJY?7g+HVXseRl(qYO2dO0C%3j5a!8p_-mWtJrKkoVU1hIZ4Ir zYd>N8ZrV79f!et~W`IlFNBsDg7PidNrxXx}QXf6W-KDL{aJ?}rzGMQNd) zYR7lfSMmGUsHc-b!x;BwCqS6sXN*_tURcwkjZ^Z%n zU*|sJx;ltW^wet~j;9UZqyW^F*T?_n`UDsTwOsA@j^mi$d90eMCnXw3(@6VV_9yt$ zgpf)EZE&x}oyhsSzId%fa5=x~ng6hljFUvrX&g^>?L9KH-jXRKz;JcrBxRV`A8PJy zR!Em$XCX^X5x&;Mk{3V?Zm8~Q+^|{H8czUjA?gA2Rp(y@}=|_DXnppm;7Pz!w87Uld2iVc4mor6t7aC;{`0- zwNBuvOq8UwmXZ=QX*o*V+7+oeogI1jN5%3vx#7*Fz{WdLGD}Il3Y>&}8azB5<*K}R zs^{!nnzlrrR@653)#46ko@yrlHq~zP_+k0|IuK*ub7>lsq}4c+@dMD;am6Bv@onnJ z)a(5FX_IY|C8zBa9O>ZMXBPfpo!W#iL{|Nshgqi*x#0~sAvQ`gf@2J{?_TReBlrWi-bFNK;juPwl4of5%QWo` z4WwLN#I7MXmXFm{wU12SimhK;w`@3yzT|3zSHjwdwwIvn#Wnq&x$!7aE$aF-C=-JRg>G~GagJHegCHMn~q(73xhja%b7 zB;UPjX4d?gS@ZXF*U>urRMq?LXY;^g;V4qPJ*Ex>kmJyifbU*3f#H6Syd&w<`{him zYyUtEweM*&8dI1UOldo{zMt<>CssVRF2Rnt&!VMgSjsJc9s3YxdfK73vc=VfvNvBd z0m0HN(b=-zzEXU>3-jQ!l@|6n!W2O87hD<^2{I;u1z6XXE=*p|K`zVGY`Z`iBe9_l z*?Z*=(0!;$$AenlC%o{kt{^8aDkS&d<|^0Y7PQBVS##W1*|G(G?^MTqP)%?No-&iU zUsFjhSwVH$72W>0Gf$qLing86@3HWM?(NNrldUh<8AXv6nx^vIFp zoi<}5e&4?N>*dLfuHsw-939NLi+5Lbg}1pn5`LLA5ocsV(<`UXysjOKy17efK90p? zt76oRj#~Db$d%+K&^(1Sm}3v{Xob8h>S+)~l}V@%j({W5Yl`%*3JIwoxO@<-`cTHa zaYIlZ{-J-Q^v$pi`~+VXlD36tqq)G{a+Tvbq|;IlD@36_+ulgi>+0}J;cqV(Dw1dw23TID7rW?@jh59`m*k2lH7d$!y^fD5iOM7L4sk9(|d(h@YvC_Eu_e z_4(f^DW^p%`t$Lu3K_L)o!jeed%C^>Y@BNN)LG3M96F>7RNXL|2H1CriWL#$vN8`1 zZm!KNQ*MV5tBkTfFH+G`eDINs7pI#{pr$d;VN$&|*XAhR3U`Pch<9r3u+%Jbhb+!g z8cA~h+7XGL*v_KieL!3sk%(am5X(i&t4(r>L)hu=he334eZz``XA}y+!BIpsbcT{X zIs%dkB;tFB&7pH6xuV|9XhgjSq~5*P;E2NJHmU1v!GI8(#>e(2aZ$yd6rTkirOt^3 zEyW9M+mAK5wk%UB`1`5BtR!T!@p)8AUHB=$U;M| z-6-5;CEwndK)mid`MwFKvuRgu6AvpAf`ni(`8(uSDaO`4cfJjJjITcbL{S9NVu^m^ zFlncE3=MSth6@l(CpyF9G3emw^z`bVB0m zGW^?PqAo1?YqGQptMF?}@S?*6AAI?i*hVAF&CR-|)&-@j{I0MFU|0^*cDit%{f zsm}Kr;tdl;*{zCyoKa)eL?zYK&F!1xP38M(di4M)%Cr;HX+G_|lf6b0eTzm?SFEB~ zg~J=b^!zh>`Hj_lHPulws>wvN>efoM(Z}qw0<%#atwrl`+`Q^d=0ks=+T=aSy{>V?`c;IEy>?EcHR0TKm;Vr;`(^vr$Z2$bd{hmQKy93P9RO*_&O? zCzr1BRRU@2VwDDLcMYyCG^o?J{%>COSbKX{Z&!(BIaiUHMdQWqJ81=D0OMakuz|5O zvvH5Z-ouXMyF!3=0HiA@6?HKS1!<(IGRh;UuFxzz@d8gU`4F|a)~1)C#;<9X!GL3-I=uMaXIVqOT)9CYAlDp8x$Mxc(nZ;4yV~MTNymNfPXi5;)%+BKu1&&+2-=-i z&H%JB9lXJ|#mXdYNAWy`1Nr4w=*ryPT=3GrlKK45UNh}}cBT*hm<^H=vwKcpD%@n9 zYuwm`2GB3gS=fUv22}uWv4DC4@{#8YQ73p4b(}}53*W6ub(OT0v+apN4+%pf6xIhx zC>Si)zq-w=7lX&K%g9XL_!}4!l-mVZF6JzLi z|GJ*x?&3p1D}!Ei3qowxDpr$~lzr5L4RaFECh6zo?mb>9!mnx9Fg%%|7BBN5@gh+-!ett@V6UXDTFTN71lZG*%Mu z#%k&FGs={)aY7!;if0`@!Lu6G6l?H;-1PQ*r9x(DHgzCt7USpS}G|+Xm zA6pvWO`|yA@~h=AIxrv;%9?6_{HDJ#`Qy@Z%oSxY(DCEJNfA@=xDzFX7uO#}d{d=Q z<;p~*B86R@!)ex!!W*y{PLiSx?L~k}i?Oa=!Vu#SO@&BcUEQ?cK?u74(6ac3*c)Ympo|1pt%;&X zDUcYDeJ9Y8fvcXYX9w((@XCN>B|&GqwGwMY#;3dp9RM$SKwQO*_U`e(au8vnEtIA{ zkzN^eyURpWiGya*hW5BOUqB+1(_Vz+5_w70G4?&d|9<#d`$3&iPZzdS>+~WZ_Nb^^ z3KUG#C$P~?S|YMjUv)qFfd9lxkzkQ@x$Kg<7=Zw2hfBQ)D6*hZjy&~EdY%+R{RDR_ z8p12XPx?Fy_QMFQl_O>5YMx_FdwK$H0h`eB*hKvh$V^}uC*gRbIWLBOYE<@5Y?t^t z{%FF6s#*`S$^#Ml=9Jk3w{Am$p_Q)|QtAMe3VHsL5|&D1@6W|*SqDX2@%3Xapk7-) zita1*MfP%as>yJ(fU$frFw}Ebnz=VWcT#74T{Eybl2FCK6NO%%D;uF66Lj1>SM|;t zY!#UF;qKv}P^(TbIsO+Yz0{+?*9cIPyf4)biiOKI?xr$B3f~h=8Mw4uX{3M2ivLWr zPM%HH`#xIXqaRcHi=bIDYcG0KeYIt<+%JnIOum)FY3i#Fak)Hk{>sA=Gx_D7$7}ta zhS0PXmR2O;Vm-zSbEQrdmG2t8TlKvN3a=RP;%KL;W`FHPfzP1ElvJ{0Vd2ity}1yN z_EgbmuXc!~dQws+RX*d00h#(%jSil$s&;(uiq2Ps3%<;QOA=Oj$@8Nri=qwXRy@3Z zS+WN$M4B#^xOltYI(X0lH$vqG8T`YcAdbfY1FmB%vqXxwdGjJcQ*PYMFAm$iS;Xar zq{?J94ux&2$vU|05Tjd28)d<^(aBW&%GZO{E80Y6?nw6F>kpVd8KO4AIJZ5^cnK zxgs4^YpXxSg-izXln78KXn)W5r^#oS$y0tTY5WN9$Lo}ih_o?hrfhDXV7buDyCQv` z+yP^I_o9;6;d;*E4(hGkQ!I{z73j3{{?VPq95KWRo@HL!LOr#b^S4Kpi6O@BYR`p+ zD30Wb@SwPpY!^*d3ULlJ6B?H1Wwjd733&2LcA50moab95l}}x@PNTMB3#PC_c|i}9 z7_4-=j7Mi>O2OvxHtV9)lJ()R-jHFjN8b{4UJh|IM}@bGxOPyL_SYTsOqP=+LANuB zKYkIeA1=Ek@5aAbDt$LbSBZ3$!?#<5)#%6=uZmj{n_k*AGaq-(NjR3JgKsOoQM1`K z*KR{PI}u>2RDrI@b;+7JAf>@`uyaI-1GIkUo@J%(Fv*V;* zmmH&c$;|X>L4Pe+^`+wsf*|a?VnXYZ)FwBK5TSG&CKS`AnrYM(gqMDBxiMK>q1q82 zGB8|v(i2HcI(8p9%mLUSUIA1i+mk!Tz3Afoxj)p_CBxp>i!FU(mkzctqM(01N>Y)m z+JS8cNEBwZ^64gd`@^{inJtXi7_E!sQomL^WsCgUNJ`Ffh^d@GgFSF>di{O5{4dGr z*5W6|9Yv4|5rka1Sm`+*c+-Q?>Cgr?+qo1&a`QqFZJs7T)sbb8;Uw;%If=?nKTmDD z?>73})+3*MI1SF9fbGuDB)E0;&9=QKRfM#xe!pAM#NCt@STR(3vJLK~T z>T5)C)mqajAg?2+CC@VEJBKE7;~!4ZO&`v6D> zd}1)rQZjm?0xXSV;ciTtI(#Y%<-FOBL*>DVIi^0fh0L=>!%_L>5H zC*j9p@WEm_BddZ@{~_$+f*E&<5AVJBaVK1cVeooORe}C7{kzYJn7Fa7oIy7it-e}g zs9jDWWC9xm0CA!IO@$5V#B?c+(SH}8cb*&(P@Q8t$)|Qzecy|fp7LREyN~BwRz_1q z1&=|ICdJ|(7f)qe4kOujm78~7d&kftR{rLylm}i7vIr3!ItUR4Mxj)kt2x$e9u8c4 z`V1&CM!RL168lcU&)!@f(WD5uz`r*bE;3w*DFwD0kB50b;G};UY<|+xrNzwb>^$*^ zJKT&aR7GKcIDGS+LMrg}ibWzGaCv~y0DzsWhXWdgeo1giNfF;nV-W^dJu^t7p%abL zoJ8t?!-pgNm4|QCgGn?>ZIXflb??a0n2q_m0J5HJ*9?nsd;d=kZY0JnCS%E=t=I^OnS;VHi0tr*iE4lRUctdFAkqE&w+#@fSH~;)h zXY1)cG(eokB(6EeYO?*?F}@^ULkaCtnt%f1?axrs=e}w;T}PWKZ_s-^mrXgi*<@Juh6$I8IcKJ3_pbO{XuE}AIY-h5;J9O3y;Xv?G3&fceT8n7wM zXVW@k<)UaiG+zpMxPosxT~}aJHnBw`>G&Xr=_b2uWMHdru%`hBl*Q(S&cGhw4I%C& z!QqiQh&GsntEnR!Nd7l=o}BK(kA5x&g7}MN0-fL}N~<-Q{a)MckC`0B>nxxm*kMMR zc&QJs-2EMqcY$11U=J175lXi9bxeGie&6r4AVxyv?ed(X!~G~7p?@~1XioI`Fqg-4$iv{Cn7{SdW1i2ithJ~gj!%+KiqEn4#RgkW;S zNa;@uM+Eiz?`|4(2;k-OU!WOGsXjE($zv3@>Ac`37;cq3qKir*Dkt#EX%rmM67c7s z^t*?HW{d{tCj^h9bulpk>3$qN!Nwl|7igvJBMF;0<>9U-VYE%l9KaD*QbEk<^p_uS z1LNxLk&)pTU?SoAax8iFPVK7=S$U}rYKa=Gx3ddFSlCRT4FBwX`h0T?{6=GVB7&;Y zpZETA71qx_wO7^MkP$3NO-*MQlKkvh@WDSPmGmYVax+|hslJ(;BZthAVX{}`*hk`W zcMVY`TdS34{DqlX=+J~wPW3ORif{72vv55hFK4?slD(MGPa@3<$>rM+Lvj7a6E44` zeSoAmBD@QCi9~Vz%22LnT8u5~n=mDp;k4KiOFG)#gL_JRONnLRlbMM9v7s||fEe;Q z+t*vIcszZ<1O9#i4)0k-5`?0izCtS6UKes_HDy-H3%Z-9cAAK#cYhr(+&g&ws+} zf4v={u<~+$w+V?dTMA#zhLy>?ks>(dls@oXSyB63AOkpMH?1}$({TB)E@s#TSj`y~ zLDiW7e!>_t9pByN=r^4V=b@0F3hI>}TyTn8OAO~XM zk&4t2m}18eE(5ozdOk+o8{hAXyk@Z-(4&Rcpa(r!?8GPixU#z--n0azwa zyGf(X;FoG~kIx2@>+SCJMxzO7Mjv-Z({5N)F4pWff^Hh0gC6WK0d=}w+}rXke+{A< zo-M(@V+z2-t>oLsj-A#I7n4l0Y*{&gA6uFK$d$3ZU`(qXL4t_9#591!zt8(K90{$c zqO?MH7Pp(KEQv$>_=y6uJ)7tYRW-IZ9ie(-X69U+lIo3ekj4yGHRB87GVkrF2*!Wd z+E_{C`BD1+7p}$sA5pdmX>k<)8Ao3hA)@F7nbiM-n?AA4Yp3iOKBLknAQ9^F!_vik z(Eo95(Zys`-aO|A6ir*F>n{(xU;_Tz9{Yb`cvcVo?_Wg)n)UgIT%Luj33c^=SFEGb z|ABe8en>T8NOmS;>@@k3)};|1yCfw;DgUS4%dY-OAX|xydPK*w zl`CmmG}(h+Yp@T(3!oG|a?H(QUbl&$LanWZQ^0R>N6!3tAi${ zg`FLsAfLZZ@NkR(NlHP^7^p-~SX0+J*O}x+GGl4R3CN4_d$P<q)G-3YXt70<>5dI0=4yZGzYVomu-5z z7$kBf1B%K(jaLNBnf7y9lr{I0;zZ47A^B%u$Sbe5v(aT`ji=!!f}WcN#NhrJ34d@L z)f01v;_=M>eYqn*`Ci+D9?rwikW5tC_GXRA9g?j1guIofw{tq9nuq)1HpX2+OWfh? z!KyK(hlx%^bWA6@d-8-A!8(XS(|ppK;&efhshIDD?Wwnls66xdUO z%;0$+z>s+z`7#};aCg<8y1|=|ZK?BZ}lSmja8>6N-7;2}WX&V?*4R!DkBexh~Z13}Gq90^C24 zi){I{nYZui^Y6bKbBwMI1=ZmDYT}a6TjBa6URz5BOSlCXGgIE}0?MI?Zui1nKZ$#1 z^uOpS3^29ZqVSO`lA4beOPxPStQU)k?K6>U8=?~~sJrJ`Os^Jtk?7Q3>u#!9r$5?E zvVH#fyL=N*>He)GOJSPkQ_EbEm5ht8Buww@n;7wq9w_sy0WzNSZd%4PHz4yF`}Tc0 zYBRlw3%t$4K6j4afv?S0LK@Iw!v$dO_BPj@GM1@(;Zy6-T(_+X%%RwoT!+PQ`G?R@X)3Ld|7ns+Fw7?06$U&c=>TFeeK0O5-|wAaeQB86&9R1bWZ1ebC;`#N12FF4@#_K zh4=lCl^%c$deCFoY_~Ho5RF~=ZjjWScx{-QR4pgxFF8a}ucX)=^giOjlf54Xwz#+{ zOyOEL-O*p}N}}Ln+u!7T;Ba8(A6flChlzUGYTEew`iQ!koA<^3F3ed_ zD1V^gn$noaQROt#--B}J^O|Ah@b`BNLuazDk{g|*dy{ScbLDU>?QNN2G3ASmPVuC_O zCZbfetr+YWiG5!nfRcVn40WJ=&q9)rfooT4Ggn0sP&CAUK9xnoP95M6g%xYJp=kL2 zA>T)GwVfyFX#vmm}!8i4gQ8E=J0 zaP7MAv_HVTbK{%_D|#5T@iwx!LDl%4oEL8RH>YGEDErn+1-jtZhoK`oyXl$$?-f*c zUycw~na8HuG-Xmo8a~Obn(Xh${1)e8ER#e_{ORgs(?vi1qlJ+Kj zao{R$)7Oe9K0(vQhHI7&IR^QSZUKwX?KX;3n&enbcmH}z}YUSZcPBif& z$XBtMzCTD8+WR{{#(eZ9<8~j-(zP%Hi@b{h51b_vnYM+m-cbMPFo4`EhQr?08$EP| zKUBfKC_V&c$l-lc$dwv}B!f1eQnFokVaxXAzfvsqaBsRSHs;73WtK+bJ1f|MP;M0B zXDW-h>IkTpbB|e7679i~%fnO|vR%R^e3Z#dJ!}hURHmY(v)ao4)@$G%MJa0boR^Ds zmf5y*TmIy8R?A$wyl&>x@he_P?ISTtUUw!L$02G}-6Jtk5MoY~Vvb)`Q!l#thj4X{}1HzD3RXJQ2bV-Fp%j@0j9Z0G$~Y+*fPF zZEKzqcC=J}@7a~|9M43}r@0f3asp0KHOlyYXwI^vz$6g#z&D|Q)yEgRWP4Aab4JQ% zUqYAFeHjV;??FU5?wgClz#b>u&paE1?gnh? z4_y=(jcwI2+c3jU*Z`l9&;}%eig3Qplvwbf*NK)xfn!|v!~HJ#^{JVdOa0N(aL`HS z&cqKUy%5bUUM%lDn#kGOvla{9CR=`|E+@Vg7f#$qK30n~=cnsR)OpH8Ac+waJ;p9lStPc zyiZ?Dv$I`-*)D812gfySVlS>vCa-^7&8<36Qk>H>?J#x*qd9r5BH`$H{V@Kake9jK zT_{O(3tE5YezerLhI2-Q*v=f$KpXAC5L)qwp^Mut_i&C5V9Vput+#{D7QSh8+QA2?qHz!;|RF~7g%P|Xl(2%94ytp*;bP-~qSudnkUox^zCK>YsZ_Lx?4 z-Qkz%!=d*!MQZenoCVT0B)VBDrDyJSoqOn)3i9*kS92xuZ6qF0ybcAQ@L5CO$Y>uO z(Qjese|$3KI+IANg&&CS?c+^1)1>nFNTPBz@nKGn+!>B4dx$Haanm3bgp13^ zfHLiS7(Hg-#6EJa7=No+((vMZ+cr0SA&Eur9xZ)@&ZuHVePQo?_^qSor>Ml7U)a4O z@j52Em@9@>y%*Rr+9z9^24-`uW~BWx+SogB0N!-6$sPcXJQZ-S*S6Iis5@w9a_i28@x(upg$v^~Gg=<19$4Aspa+q}{srxfsnZrFx4UQVWa`UzN{l zP74`AFP+d(P^az`rlQw(w^2yx9O1&sJC3aU|cGEVs@&zhue5 zS@m0_0DcKLJkc-AmS=!w3I%-c?fr@hq3ADzRm#cYFLsJw9Ww7tbwe@B! zw_UH^o^h3KuhZH1=@}FcoI#cym~mVa-A6q~GI<|f-nmwf z+8+|Ob8%b~f3on3Ulynb!_pFlVa3ddr&nQ!#@SzKr`6?!rcFd@i)`J7Z|Mtk`#E%M zO|qCH`um2?4bJwp%a6mGEuLvam(X4fjTDljvJp#RTXC;_@9aVtdx~HGo@k)^8aPLt z&fgsxt{m_V-i3TVH0lxV41l;CFAt^IwFnpPo>MbYV119f!u-46^Cg|=q$#&5@&?d>GPldT<;gi=)UGGE-qg#d! z%=SL4h?9V*ZMm{mPGU~KI{L^M9D>O8R1yy*in1B0dUB+6atdusEDjCN=m)9qeNL2t z7&heOgS4^Jl16t_l@(;KkZ3rB;Cd7r2~$`tDp?4nupK79^9_b&Akq@b$oUnQk~@OX zWx_iY@=KJN1{39|Vj6zBFekSSLs%O#+niSFWf;8huAFEG)J75(-;Gu06rTCiwmIm_ z+*`zC0U8Wd#YhM$a`#2N=%Cf-*#;DvY&GoSE)7|F zbvrMBVEjqkfQ_|l?q(P9rj@V-71^36R7uefd-<*|0!FTMmrfQ~l zN_!@6Qrv|uO3eEg0K%v9P===U4TfJ^t75z2{v>gD!da-9S3Bowx+>Y)EYt#%8EjGF z{?{DwC5tIgL$Fxzz%}RkflhX>pK4;U}d+8M^An%=1K5@q#Y;rJi&Mu%~x z4b&KIbk*GWCORw>UkqL19aRpeKHyY|(MKQ0lCk*pKL}$Lbrg#$cPn$t`O}u-l**3m zYilMBAj0)FM_P6GUO3H0FE92&dXHQHfUvs8pQm*=k>vbhAZEfZ6AlQH%tX_u9?=Wr>o0~2fal#`%XMTJ_ zV5RpvBsMnMk6i|?`c1`WdYV33^J@mVylueb^GfL08R+_3)`ury7L_s^GaZhiu1l=o z(E8JSvzmQRfjkfXLI^e+F!bC$9L+-(|5Ikb^x=^fzD4s|~YS|vQC5i*;`Fe}= zVCYBl{)w4rz8}PU_9M{s(TIFS=>FVFDyWRAo=YhY7H^R=GDO81LGLDWTGAn z1PMB_mpfnaCmcT59f^8wr|J6+rQK(JqIel(VM#UVPmV8Wk7wT6ef1Yh~Y#QTNLB zNu_`6Hm%h(qHetSP0yqRh|h1Fd^wNMEooH?-{X)CCfCq(&8e5WCIvWvd!X-!@n+|+ zax-Z%w)@ULPejbn1_~Y|BC^!sL?sYT9IVOtp{f^a$cs@AY;98J%-l0{CwmV{yI&OQ zZ0a=jtbAHF`qAMJZ&8mBlWb+}mUPWRwUEum>}!HPHL`7`N9MmBuBckkL`u@0-{0XJ zx?NYQ{6|ODzWG#VQ&zPVh$lbC?Um4>fs|}Pn z`-$4EkGNh^LA5QIA>BeWz&T4lg?*o>lJ7jO6e3fa9}$BB)J0`0l)yuZM{?l(GM-0B_TCEa2oz5N(v`i-vYyPsW`oDE!Xbvw@!*! zujC#$86E8|IZo=6hjqg%RGR%5Xjo{B4rm5CXu->Yo9^J3kENaD0i27p6Bjfkxy18* zjE9QTQ#Whug#0CRs^CQVSae0^iv~eV6Ft4gFA29Qu&Mc5ryVzsKlQF|CJwgiYI)L@ zE{elu{Z%vZSFJBB4mBH@RSLuNNdr}$B>ZMSQfGp(p+(ouUcb=~G4bYyqVkB^J^h5J zwA*gi$paG-wKegg^>2d-5tR3kFnOwhglO9jPmcG$Lb|%d{OW_&HOdK4OM#dG!A*2Q zmuvq8$m_IpHHFnieT``x9eS@71I@64uqgD;KToDYgD*JTh-N@qSR?=_?9@Kh0Nn(By13f!!y4GR?WGxiE0^^sn3++VB+Bqw@PbKZTr!ju z#*+$K^IoSa!8w6`-OBB{TH{{5;IU`=p>jL5%4bU)Y$TqJnjr4oq02uME;P7a`rb3C zLbR@cvnn!-=ET6je=BC=2UF8RIpZH;A8_@7u!-ZU!NuNk627F}?e1RZ%}YAQh6eHI zuZ&hM1#RKfKd8b5HmJb$GtG@#cn6G2d&4R{?Q6_I1*$Bp@>>5i^cnF;3DfX2aGa%k zLoWBy+OV-nhY*(0f><*moJQT|C%!quwafJa(-E2DuE}K^yq55(dixus7*^%fm5RIS z!@ACh=e-Y2^!)n`&d^i~nm4V}MYj5meKV|$R`4-soFfL)V>tFZdtYSuJWTi}W^Zny zU-CamY0}bA|CC$PtXP8rufYW0nhT&S#!&G|Q@I9ZyAMye23fwVD+2eMWcwb6U+8F< zm@|6EtuNCqu4Y`2GCu?LqX60j!mcC&tigNfQYn+_>{&K5-~P1Y~SL(w8UBy*fm{n2PS-z*Q>4hFY_5zUMt7}hfvSG3~@2sg=BK{_2oI>^v+&+ot6-w(Fx3IILCf_@WZocYOc|9 zQ*SCftNQo&N-%s#F>BD9K2_1(WtZW92u#EVZ1!eX>FMa6ruz6f;`e ztKFn<9fk6u0%(H0A|s)b-A$kfsLHw9DHdG6;0@~6`%9Cx%A_&Z`}E&P^<5s-h4GTg zBw^b89!rM_eao4(Fj7{r^xTs)?i*`skNBw7jxY(aA$c1e3}=DBQtjrn%TF{y2~I97 zO1Gsj-{ef8WUuQx@`d1Puqj(L(ZGzhIKN9(f5lph5f z-;v+@p1I`>BO+xI7L#bF8p&U(!eBVGx!hdjUcR|1Hr~*BOaVxUcf8IK2-q7BYrSaZ z{Vo=np-Ts|t6f#ry0I|m^d{)uqN?cW-U2p#4+#^U)W3`?a^v;8#^Bjn; zCCTmZ$!hQk^imQO8yZh^9fi3dl2VLOy&M!QEIxv!H@D-LGZhKO^j+a@x3Gu5UG;KezclteC!e zu|SH}bx$+|Sp{bsEGz z3%kNMZEYP?Rn@hfu)d8(E9h-wgP~Y5O??YLpgq=C?!2 z4>2;3^U6IsH<_VG?5>VyUe~BFq~0IiEd7b+@!q673jkHK((PdMjWmy{c#iY8GZ z{%hy?ztz<12>x5~G8SQD2DnS_;81x76`n6K3JLdb)dQeEqW!M`*Qh@BjGULX8ug!Q zCh(zObPSoM%{cS^dYq?a?do=Rhd1=!Z-BP|A~_csl`h{@g*u(cn$kUge$0P$3(ut- z3+WR5o}fk31Z2DR|J&deolc?e#4M4NDvpWb;u&X}m~>NR&z0}LHsGv~hTB=DF0G4u zWz3TeDS0km{9|F!TfLgNno@v5PBVtD{y!1&0T=P06y&RfVeh~4T_?A5dKk6r%AT|) zLFzc_(D|>l`uv@IGOY$c5t!74ZO6?#X}NXZ{?wtg{`tuacG402@9b~UY1!KLz#x&8 z&PT{?ejyi~wXRBSc}qh>1H*}p zmAk_Q|7-yk{*xuQoObM;;v*_3eG&e)&(pO(Cx-eNdNZf+7%q zUisQ^V~4@a%nWh!$Q7|Lx_csgz)Kg)eq!FyWvp*df!Ul)yiKf;^u9;#p^ScYPV!e7 zj{ii$k?CAFUTqR0JiGeq%R{%Y0;_`>G+~EC%R29+SN>OOlmz2ga*dOG$=^OM>phszGjH*@pU*(YwjcGu7hes`sxU#+h}pqRS#D+J*v&my)QO<|c85?!MP*3V zr?+=Dsrhn0d)#_hmeLpgzx$D#wZvxVM2!lRMJ1Go-^{&Qky}j?(E^nN!aIW6+61=; z5(-Uv!fG8>zl7Mm0{{R!bX+(#Xei=NmESZHbCk&#K_^Em#j;(uybHFtTKa~eow`UBfE z{JpvgPGHddK#Hp<)~#MHAvTr+K+g2pv0`LoEy*B_R(y}cfwYC)yNsQtigQm%2XgapD)&8U#s%_#=NIYkhNb9{WP*8~dG zq?R+fEKw)ob=Klhedl$t+rQT7A8FNgsh82>Dv>+0wy`f-VbB)Yo5F4p)#rho3-;`4 ze9Y+k;`CRA_mvwjau3&i*D|kD)X%_CDNG(W&X9ZSc!KJKsL(CJcI>vU6|QmB5Y!?;sc1|rr!RtYBO_dIMm^6U6OQ??bCPk0(thZyNuNf zX3@e)!e<4a6TzL4G({DaYDYc=!pWB!x4JtlT75%?7RFXqU-a~dIwhkjf!ECDphr~M zMCN>(S^IBhW}!zr?4WK$CnkpEi>t-C`FZ?kAU7r^=I%-xf}t-ga(o=0@-1k5gX-_v z%7$00w1NUP56?}#3!Q>;%hgdNTB!4|bl3YPpGSfWF_NdW|9OwzTG*hPr8CVDWqv9D za8@++#ypsMvbL6KnVz43R9%(C23VSai=_)tS(%On?lzrq)=ZbE|Ct#{gh59)HA~`^ zD-|*Y`q70Se#1ru8D5f1Bidb@oy92azt~~8F~rnkVsK+(l#?4ND=SZxs3W6eq%gcW zIyzzs=nxUB*n_}$_;^=ppxHd}FFRAi2Lcf`Z|T*FM9j@`xVX3=F!|(DB!|{BzCtmb zgjzZbmv9^=hl1hWUdfPsw_G@-b`W5b)!W-U@_rRLpQdYaa`HwO<9V|;`s`emD9d9^}DGeqinRqS8P7NE8i|7I{an2PS+t9%Tr z;do$8zZrUC?WvQ!;_r zWXK&VK?rDk?bAr1*jPi(Qrzh9uy@uEpMg4B{U`c_1-$u=$B`DbVm)!h#&?nkk}9eW zq*H}U*P7`WF3=I@?S1SLHRbw84}@#!zon34dtYIA)?C>V7{XJr6&m7`8&-_;XqHTr z`@zN4_r@fa7W$&nysV5gYip992zlQ-iy=0X`^bDGBm%vS{2*hdB4&WWxa|X5rwERW zsc>ciUH#I2iFcU;qOEA8LPJ%i*$_lw4vwk0X~U&p^N&@UQ7JJoXGwuGMq`B04rXRd z-4k8Aa;3Nv}qScy!!kXsjMg#Kx^=uHBmHpb<0i#t9L6Ad07|74G!zXi_$i;|kU z+6AhBMj~J-^yh?jlQ5p-op^l0L;uJKTLv{s2db5n!s&H%19WvO@V zToB-H;f8bZv6c5KOB~(QUc{R+S8RsyCbkVh7GcE@WfEdO*R7BbyOD(4h*kXG<3fBA zj`zcHSqNGxv8yzXQyAd7t!K+kBUWr?N_tetoMqHX5#3H!yd(U|Z7WcSRLM2O@e+#k zG5X7N8#bVtG9jff`E}KaTr5$Yay{P7HZLlDnY;MQV$q)o9BSoyDc&1Ii}el^^lX0n zoYr^^ngz{n2W&Q1jJYn^5lh$Cnu*iw1#XiCkwxOQWdb;bOPEUJkHcx)%5^g8P7(Vi z_cD-+?X4|>$&z&4rgD9L4?G0)0?I4V441SN70W%4=Q_PQ8t(Kh;J<^=64>Rp zwInmpnmj9pHTgN8=!OB#XaTAmo~Iq6|M|lHx5oN;$f<+y4kexTf5Gn=k!~$EIF#rk z&EK7Fp?VvizqP-60q5ZFn_QT*uhTYg_ z#VuNozg|o!$_8?ZzxKOZbS1e8Hf(CjtkD4up}5SnBuRI7uG<~WEcz2>?%f{u9q;Zp zFm!2YQPt*%+gZchU6*=RR#u2dzwEyk`0voL6cI3+9?PHSNgjd!Y9{;gtTjd7xpLRBH^zPI2=zU1i&BYw*eOoN2Us z)M8?6vUQF0)8iUSkiuff=o~nCzQYf&_lVK7BM&K?K3mW|87r=?0Tll=q&9p^SxY8BobYQkHS|y5!*k+^eSQDhV8CfmP~;C7{CRN{A#gs zoJ}#3uWX~V+Pj#*T;>}rVOoGmlwp;wnKDVYI!O6qHy4j@fY8N_E2KQH@Y0b=(AhVo zKM5D++$mjL{~*6;jTi)7ee>PW_5K~ty6jXF^fPdj^|tV9Bl@l138WsLs$5^qE@84KHymHh4IrKucmXR`_e^*vlt10;3tTSeWC>sBHTX6bo#gP$FC^ zO!{@C+~d~q%6LR9?QNTFE;NO&j5G;Xe&fI_SQ^*Q-WWPm!>%z-Z-LzLbO*PnV3C7c zTs#e<6T(wXGla-}(`_acYNv}oJ|$pD5+3d=E~Vx4!EhlkTo06<0Wcgu4T}BuJQsCO0vlJpTyy z^tE&=nuwwkmdmz)2W}sEnOF0+yS>*%)6ao*12#b6fI=_>6dm-(@3DBtj*WI2LeOGXC~=*hja{L1~3+e!-WgG896!FT+7^NSdx%?#!C|b1*v`;5PIb zBk&|g3G6>I5GtWgu$C({fIBMKiM5$&GMdj38>=$rhCg%~giU*J65Y_kjCinW@!BJ$%L0uO1lu}8y@q^T{ zW_fw1_L8ac{qOl){t>@&TAs0s_3Fr0&g9g_s=ca|Tbk`G7Ii`?sdGt(F=LN4vY^{J`*m8yI;^;V+$vKS{QFt6G~9e% z6C7bbntD4lr{#&HyTC_E3Q&M+%F(Di42p65;;gn4(UBSHGH~U|uak)5kq|XvGn&E} zR3Afp@V`?R>7X!<(O1=Pw7z4Cq9RYf{`m=I{m%_dS=lWzqP;gjAw+NM!-i5K?j*kP zKN@F>$M@~pnE#bKQ#=L~_e=aAkgbfr^#6Cm{TK)Q_kTt=5^A6SpIO8IpG9vuc_q2K z6lOVr#aL0Fxa=sJs z{Zj>(WrZ2rG1mNdM&tZRzKMlG|GnKHg9Up7^Q9Kk7yLx~ocHISG{F6|^KKf!>0};5 zBO3WG!XXHy>S45eq|DEqtjXz#bT|@ECkTyNKV*z?aJtc4bsc%D-5zgvPTXPFTiC}9 zRh7TElPr00;{0-cpYD24t7HrYr6IeWkUXl9TF2o%<1JD!lsZvwjT8#s`y{9iNHrZR{4MgGUK*?CsDjtk3QLsJgoj!*!$b7Z-(=X zNBYi;q(#`34p z8QS&n({`l*RHxpWb(j<~W4tBJY(e%SEHt%eQ5B2iS0+O=>jXREsTVM}j~N;P4mq`_ zJg;|5X$KWlbSyCCY9!Xv#qmPYEUFj0r>$Mz!cKj(@&eM#H=6fL`i_bT{DhB|9t%=M z^oU>b1sMD4#$E1*8e_wQ(H zn@n#cA~2G)06qiQ(0%NPuKiafBU?v~uUv-dTLw0T{`-hn=eUAaq`_iRDm$%JvWNg4 zV*U5XDzXWYzdK9rFeo)3UDu5;&PLdeBSDEwqg)`ZoFg`hiaFV@LbrnBNN>1H#4irG z@*ajXlj)t?z{ghX7trBBt`wiax$nf))B~Jj|PGS4MEvKB| z`BPCvUKpp6`#QI0o?c86CpEl8OutZ}l~{Cu?vFpqI00lx6n9XI$!QfZ5RF#zEVQ~k zd!&9i;^$=MSujvY9tcJdA;;VjNGr7GN*rxMAYSRp8nY1@ZP6i2GTD`acTrxPD%bV{ zHZW*Zf#?AxQfXO(17mno%RXkzsd)Qqn=e~dcD~s%e6`u(1~>P(f9 zQ@cV;4x-$85!}y3`b%dlBckWFwR=dC4E8>PrU>1?=5E>9@sO^QF6!FI@HJ;m_=xfO z@Q@r_t@G(vMeA=+38#a$NN;R4N#$*gS2^%7il9pEa!uG&Mn8w3en36~DT!!4?STRp zkfYh26e^HkTrIUF6^1|qy7Auv(32%wu@^i;fRteU$gAW+Cl`_%mKgRZL8>n&1-j`h4fib<_X8EP(XD5DPsI*nvWO z45QlHwSE)20ZQA2XX)%qzk#qBQ3uwTJp)6~Jv=%SvsPFAEbooJ^~mjcy-m*Czdf~5 zw+jfk?2l(q*0;NaE25ik;VXo4h@pcyWpm8!+(1-r=rrSELW zspsj#Umr!W^^k4|E1YgPQm_q>w$q@dqQS*jFQAX*xm~VOFdus4V2VU@q-nwy5NDUQ zNPTD(Ft=8fRyE^jWk6b8C03z^?tC#MSb~VJ>WGf-8xnV7i%XTF0*pn7B|6Jy;hUf$ zl!MjyLq9}TiS7Pws2jRd>EGpiyK`n5@b>ZT6#9DZRs>v@v{53k+=;qGxf*Pv%2aHp zkPupuF?#b9STb{JEYPc?@TficN1iz9*RSKbtw=cb!CK|3_$`i@TZwRwM9Rk{6= zQAjM}rZlS^Xq&_qVysP0KsOvsO)U@>rCQSJn2)~T7=UONhqQ#_cC>1JbZ%p3oZa_F zT$;~AICF8A%f=w+!h;>0UvP+W`ki5yUq7Uzn~2)dqgH*`+&cs<$G__#oV~VUC_1wP z$!;S6n4T`dU~6!J;`oi%nU{#Cy10Sn%fYe&1?9(!84nj}{IONxG$@~0YCLDd3yHSG zncpJX4$J1)a-$+%qH+~ws`cW25WxPQ)$twA`7i1P&Fn%-uZzG)GeAKy)(VYwm3Uw= zybI4FqP4VcXlyQUTzzFR;0m+06{p4PdCO+Q@ojF`@TX53H4DGMk`EJ}yaxctV7}ON z{zW$9k?%Ql+lDHkY&$$@z8gC#k>zXC9ZGc-D3Qk9X=+o|5_b zu|2TeAa-;*X)s?{=h&IQ)(b5`jCOF)=F*82J8qEAI&sOnix|(I z%jYL)sy;fy?$Z1+W>8gRR0*oHfkQR! zLhyst@r@pYHT%F!fw+-WG33KHJ{#}lE%3bSgy%9fAV04E{DdWuJRJ8+y6r2=lE9J+ z6OloGOF0YUPEL9bv+Li@h)$CjV*SrcCGy1wK%Goj1aT1|Nc1wQe-QZ1ACWbUe zJ4DtR%kruGIfl{T7#rMuuaxt5JT`pf!&~pjsHl{Hn9fHml>_QR+h1|rK3Ji`m`oHE z_&sJwcEpBGZZ-YjB@%6ITA%^YsiCfKWDUtfw7XT9+A54*;3fhAJmp|7 z863;*p#+NF|JXZ2e-b&ZBb8R5r(BShgWpCy1UMaW4~Qcv(`#vu?#7NDOLQ=&BZNt^ zr_(_7-YceZRB#}0UCYF2L>it6(ju?lcZ?Jc6bI}f1dtJZJ85qiv+Vxvx_o+@q}vnu zJc+V+|AoQw19v$KQF2>FBZI~qcT1~)sqNA4_I5`1`9>0CXWFdq9&$4Epx zG}cw%F<++zJAxzyGCki!1*@=`ejQE@_Q~9C>0IR42_<`BuNOb3@dTe<2qgTiQmO+3@4c-Hok^wHxJ&~ z-4AyIe-eJX2`|lI!nG5Wbh3YS9Q>?riN?;$=0ltRf$X<^Wzq^14KC>szkNOjoSuOE8vx zYpn1=6-Nb+qB4*cVB()m!654aRw#n zZb0?xW<3#@?7XXV?Y_Z=LuxqdWnfmz!Bh?47ok{-lE+_w&)!J-Ktn@ESJ$4IIgEi4 zoI(2QUfEe5GrI=7bap=iC$X@jI;HEK=63ozJd1&j%J>suPlU!i>D;!Ur6?9N=C~3= zns%N6`i8l%5Ky+2{GmJ?-gH1~B~#Pe31dMy5Sw&q54xFTtc(OE7;bL~Bhw<5I@x7- zV7@6UMWv*Yt7CD5nth6O_BqBHe=sA{o>#zuFQIdol)ICP*!;n=1KOHO%XLvTBE$&w zdW~-Emvh+e;MBxnXs}6QBC?SYydqjr2ANtjBYzlkmJGWSRjI3Ra`wWig-yi+sdHFh z3l>;S%Kz3V;b#YjHxet(ZPGMrI>*OZzR3J^hlv;*9sEQKCvD2P`nCEj=9-c<7D?9Y zLlCp2O1}%Z({gtEzTGtWYXU@Qv5L|=Od8P^e%vNGd7K>da`E^~%yQYUl+_Yu)u| zF%g$U4-1O@V~iB$aJ?6fF%37GSSUGP9G2a4^GhZiNL9l~e0lvm9Lkm>YYxk9HRTB< zS;dAM@I)GLbLPb>%VdB2hACA^FY1c-3;@5(AoQJ8)EJRXG>1+)1tljP3fPz}2pDT(?!Xq)op86(a7%@`yJ6hbAU@h5)HU{?qj@@Y+ zU2Kg?$^I=R{!}Q^3*mD) zrmG#qV;D|JQ{{o9fBNeR46d_Yo6!{x#pE@rxHgkiba0NxqMEDY+^-XOV?j}rWTgT3QITOsTzHT|Q68J??2#bch z!x`Nac$(;Z}k+h+FnC0{XV(W`$RZM*saxhg#Amr zFjmNl1X@{9gU%DrF8)(^V`x_R;{<_;Skn}GGh672&!(18E{Y~RY$)3<+v$(9+7sn& z_{9Em>c2sSqZl7M62m8Clc~dJd>r54>(<^gI$7Gu!B`*ZI81ZFaEzd^E&FnuX*>GR zGS>oS{u!+Xb~7E;zz_^HtCcv^t-FSna-s`L zxnI(02|c-N#OIH8kZ|s@u)MyCw9jO);#0e(@O5;75gwsz6h2UQAZ zXKhj;L*$;=j`A@OBdczZXH{W4FG|6yVo*Pa7^=~03ulQ_= zwpsbp6t9~H$TCo~&?FjR(a^t=a2@)Gx@*@<^Xa#iXkn17Cp`~FUJ`NzIt8_D?l{1CZV$Vo zDQy9A+$xfuxTn(%8eTa3G~V+0f<(|MAN~9d7WFj7{ud7+#v*X3DKHN%*P@^|tUW_; zJhn9q^Y4tc47wW+lwtoMj~)4RGeTMhEAt^_y2Awk>k7|NS^Rdt*~GK0#Wt&zgx#Ed z-sSrz0p^L_jtE>1qv{lUPsArP2a|4zRfqe>*(Spx@rtXYWMdaZ79QE*4r_K z(=_f%1(EWdGHclx{G4}YYv$)#?aLi6P3c%jM2xe zz-Pc%La3gbFU!wpB|R=M81?N9x&DdG&PYU5;ozbiqa+b{HTpZ8#Ue*fXBn|%5Uacc z5!=nmGPN+MGQ8}qJiWNO zEV*sD*L}NY#2$Z5moJXb-Go##Sb`5qrNRDf9kU?z!uW2{vIHX{zzeho(4g>! zwYB^%OV<=+B+mX6*yS|&8Z~Dr@pE4|JPyy@Y%9I1gTn)BV1Y<+y2;{6FBGAW-|>NJ z|E%jr$~Wm^nc~THrP$aq8O5^g@s3htj2%9ci!WX4O&Jfs6S0A;eBs;>I|5|44b#j9aWJu-3Bhcj7LOwQ9j-acAY{D?w$ss$``Fp; zY)t~2w%U7mViBvt<%e;F*v2t?lVY{0%{%*x?Gbyhu^*9!db$RCGlRV!!lwVH6Ako zKY5tDT3FaerKE2pYRFu%lh_)QnF7c9a?A|py%M7wD130WdW+lfNjQi;QrpWyrXi}y z+j75~bEixZOPnrm2J7S`brmt_5p2YWo(ZxgKm1?k|B#p`WeSRQiMDp{}vUPwCYuwoKh3 zAq`GytR-t|n%BuJek^9~{&%~McZ9w>wW&I;8SZsdJX{~I2xmJTJHA4U$kNz5)K}DP zZ+Ou$vj7v^@%{TE!AhMQu1goJxFp8GKuZ9ZMY7ZCc@_;2*=rSWB^+5V2sQKP^O>qk z!uLRf6Aj`^y=_jn9c>{4C`RE{(Uc5l=HV(ze90AyQI;n?-yS)&raXMVB9wEec#+b{Q(7))AMNi|@6HS+cIU6W zXfvDcsPASaXQF7iH8c)`&5~+d+$~NIyMQ{ify1+rL}~SNt-GUgI`B=6ZvR!b>8h#d zQKME)A$_V!eWz7PNppn*V96&_pPEanVs+`e>D-+Bm%Fy0)4Gkh{G~fsh9!kCCFIm< zcJ>kCu7j47(HsIpBP;=YNWkdgt()tGAQEN$fO;LMs^Nl7ZDR>}yK#{N&WtP8+*G!9 z5(<4X9+&9|!@lm2dW1@(tm?v)jsFBkTIu|%G>BUlqf^~;3JwJpiM4tIU&JpIyT=D8 zcJSbwZz|d|erK83o`--$6_r#$z3L-*g^&W+YV=8gyYKd=r~GM|peaqiBlKsVu3nxH zv~7uHWF+;xzb|1lfv`ZnLp(>lD_UD{;AZ- z&l`P#h3&11s!8*Pr6gyg>zv0IqOw?{7`*)bPXkmNJ!+ zYN<1uQb8=qi_)fRuGrJ}6tI`->GveJEIjlx1iQH$C$dS4p+A&TUNJh8<>t$gf9EuI zVRg2TcEqdUHZ1lu3F0<~v}vX*++1E*a<}WOg*CNDS-TOxmJ_eRBMq6fdF{D;=g;hv zHaJ>aCqcUZ=Dp6HQ>_ipLn1CK)7~_7|XvH|>Cpr^fWu z#}@vrVKy-*RVm~OC@ZGP0;C5RcbxiKEw82&9l93Q8|Z@vhG(vfn?ro+n_7&%%NCE) z#Xr>%*D;4h!mILkFuQW6Xk=@b(e_mSgjk^a+hdLlS8!Af=NEq~|C~ED z$Ys4N?yVp=Fq&oU_IGY>HuK946zxrNFLdctB#n`{RUc6vMkk!W+|(oIRBWe1D*Imq z{vISZNdLbzfjIO1NRov?zY+b0Yp1S}7NZ~zC@=O!;lw63ICqp=2vSBP(g>e>SLulP zG}JhufmQ`^*2;Td|-r!G0C4DziFB=%rxo|1I2;B=}U;?qPu1(A1 z!%GK-6fbog+TJY-VB%AJN!kd&nVFwPu^)88jT~O;86_*#i!x_)BCml1pveBZ?*8S> zHlD+9Feu35#kWS9{_hBf?D{rGrI7rTFF_lQx3%@2fwG2dW}|zYcBZ@Ue2(@4QfYPx zEN*UPy&JhAHE{8CtZCXeY}rWY|5 zX-gvrwRx%?e@#IG!{b3RRz7T<%aBMGn*5(x6D_2AL&o4_B7IXhsW#x4RtfbDIcj*0 zI7;2T@C%K_!x!a(h~~tr=P*4qqp=`rrjS zfMnfK{R8Wmen!+)F$#Fq|4K+$xxNn^1GW1?%7Iz5pEV*4+>PHN(I8V;C2;M`nHv^uBuN6uM}EewBTn z_mkD{4$qD@&r`dQ($QOj6wRThRzLrlp>R&2Ewyd073Am$2`_xZC+^6CP(EOmr;VF- zcc#RT>G|s2Zh}+LaO<9q)`e>(=IVaCN^>BgJ^~pF6+~k9Vo`@9WRRRFPvO$m&5ME zK#`9(I6mU1rLNZCdNky|p+;(>*bR<=Y&_-Yif$HL`D@aAy9e)2^PL+z{*w2>?9SmZ zW8JSgJ3Uf_nKvYp;q94DYtO14|IxN75Db;>nX#Osaf0{mc04U)IDtYPrNb+|%C`2N z4r;8Ro0uAkhA|yImW|_#Omjb!X#D$HpAwc zn>_jV>5AnG7|W18JIZZkxFH7x; z#%}2|cnIa7b!71OfqPAjjacq;d%geB0np|4A4dbhQ&wa&bI(Nfl7}mI#sH<4za7@h zJMVbTW0udPYnj8g^!m!;6)%bq^PzbwiY zGozs01%ym_gLJlH9CtoQODBwc6Dtj+JvQs=$`%dk+dByp)u)*akLa>MPli(>ECaxj zOj&t;-d}8K4}d}C+)t`qm4j`0#~NO(G6T%Iu^Klt@>O*Tc`L~nCD!0kEDtgv2M2P# zk+G7@&n!siGNHCVC<6u0{thb*_BK;P3&0(-c5?QELQ@R%4c@LPqM(JH7NQjFvm!Z!OsQkP$}xE4$>xD#{kmyq8N%?+L7>@Nih$Z%CI}N#UV7eW2CQ>d zu?`l)OQ=`Yaq$Iyu`G{@U~DL8Re9pbb+aJAMo{J%-g%PImG7T4PIO-2jK)+7Y3vrs zDW=w-jK0wcK@!)UWm6^ z2zq|vF6lXLGbmOmP_3aIOxr-w*asyV>cxN>QJ_`pi+p_BTl>Ge1fv9f5t4{zv=dX3 z6+u@I|8OTa(O-Zz!*X1saoO!6`JZ|T>@Ik^V+;DZ5C{I#U0Oz@oy3Xz!D>LvL^r0? zH`ts}m&{mL%oS8*@Obv^leBSW$TPh8V!S!5A^nkT$l}vij77Sz&W-}xv>7&N z7+(bL)sd2m4;_!(JTs853@G6P)|%DaOZe*qO36)fR?cnq`4ZmDE2p4u@h8u~U^FB24%mc`*=JBy=H#@tWr zB57n=H6BA=KI>ZOn4=HZ5{XzgGB%>IZsR}*jmoD8<6t!YY`FKQx{!$zW26};r?+X? zp4uWsg|?cd%^Q;#JN#1fKiR_xE)K~Rz9;nkD#~VX*uLCQRlXGEp{ikFNtM>Homerv z)ED536-&1dIoNjW>TjJZp06FBFb9>axT-UP-U^|H=GBh0GGQ|ccIeRWHkskJPLZy< zsbja@gP$sT7Rl@zH1;vRspMl)neiyoXwu37fiFT+yHtcjy-L!xQwfr8Ra^)z(kW>n z*#L9kv0MaeU0$gpvV~Vw>2QHcw0V3Or5m^A?$4ij;q_^>^ddsBw}k=(a}SvkV{BGq zvXfwO+a38R6%U5d$XfTSK}FMo95vDEYycL}&J}yGM6HN7w!Iz@j_=VN3T_d^CA8Fg z;*W~7rDM@TIvB_C+4{L)!&v$^+3_Cd9{x=;ttctcGP-+BJQ&5PUL4bfjg>LPdC%vK zQ4ssKEJ}8QrAX?ccJKXCAKKX1X!U{a*x4zqs(N#QT|?%q%A+_y?yeFU42Ltq96h>A zxFHjDd(!I4N*U_R6_Mmj3r$)_<{W?6kbL|Ta5?2+G`{vkVY*-Xnr6at_$%Esl;GFP z!8ZcF_G6Ob>dvdub(yZE7vc$rM*~Q-K*&;F*8fzbn+}Tnw?O229T@gM7yr`(^MALe zU!wi~f7ksAa`@ktP=fdW(ovqezhdI>PXqbLVwPKUXEtJwZ{YVy72BN-I`j)NgV%`o zvDF{Ql%GrJ6}M*Bt;(Xa?$$6kVqgA+GWztr@rt=+kaPnJdK@Ye|GbRR@_Tc9t-QQm z?8b5a)wQA2uTpB)df)x~yE8bOn&EpI;bZ&l`!@!2p8EYjc7&6SFpAjMmJH974$-}@ z^TfiEt#|ukhK3pa`7u6pPf?FA?>w_d;lg#X8JxWFD#hH;#b1LWsK0`Y(A?S>V(s2i z(_a{g!isC4G1Nt`5wfK$a@0KZw@s0TDL5m5b`Moo>ZED1ABsj?`i0jiilR_to-eM4 zawjGW`sZf%fWRt_w8g(%TmgAm>y=Vd%)68J*-vDDXtHMn%wmZA4gQ3L)YYnv{qiqf zn|m{w)!cV{a3(wsaPhy_(%le`(2E}#6uw)(T#UJvRg8qC1Qw|!^e z`9Z)m#P$cge{m7^`hT|+YYD3|HXyYp0J!bk{G z$}H#?zUkSfXnO9wTRWmrP)ZDvKl!J{S7QfCEi~?sQmcyI!zp$NJ_0Q(L@c_N#Gs|< z0OYr1(X^uPb(4V2Y|9}w(-+S{l-C>yrz(!i|7LQsM?IY!Ui^|CJYBfvB5iYqf$Njk z*Mro8ybe^8-nJ~-kUOV~@)Ev2HW4z6M?;jpxzA``iXwWVyj7%1}4&8`1{B0VSXl!EYWz?T#0 z2n7@D$UYC^v7nTQ%r8R6zD)t|pU@(oXrjqRZVYczpN<=nC0KVV!*X_1MjO#fw6Z43 z$bQxMPgCT0UHG~0&#LIBf&*ENRSz@SoCz7XH4FR^3^j2Dy1WvfX=2S^ib`J^1m@Fs zMGeOjys$FZ+^N(>^c2);$Ai@7yLcl3mcBzt1v#oPx#+hV5#BZ}HBWx~qzW3TB705# z8KyS2w(2bea?&t#cC|^;jGW6zjFuwwRea( z(PcSmYjpJqx7rSe+v5D-k4J#%`(Qu>hdII9jn8QuXDYi@HOOAnuS*-*YN7O>vVc(3= z=$M1Q*rAF%Htg-VS1&qFM$zy0K6S0^CfxD!qhFkb>Njxiqe;h; zu9fKB4C5jz>V2OFtwI8JLj4qfKB0E`czyj!k}%%bjh3uH^@rjG`PXuDtWd{e%~R$W%*FiD|bx{a;`jH{khjAx+j`he+j*AO_AYN_2nNO4$D^; zp=8je-u*DGeoF-idmClEV+|sk>e_X7jjl{WGe^X$eSg^Hr*e+v?sfU}zjU6H`!C|o zuw}#+?QCn2cdPF{3P~kD|H0O^nrY&I-iDlRTqM+<;dO1gdWTpM+~6!#q~C_B;tqm; z0`lvOEydvp=d07lI&!;|*0Qe^x{yWd-bBI&mmVUCjdstmJldSX?y{ff#ZPSzQOV zQgn5ksTgFew3S7KK~2$nj0aBNmRb@`rtoU^>xcOD>8cYY5MMp3DYD|auTj#fs|ZKq zgZ~Kkp-l=63KewUEBmEW>TdgEe50y(Pj>Pc`)6DOa5o6GuM26k~96{&3D^5a#)CKlFwsMxZko|S@ka0fBx!SU^m9% zjjrJl59DP$o($f%O*X&X!>4bikk{io;k3Sf^evtLCfk@PXg$|)1X*uU8~H{pQ}3e~ zUks2>wsGZ$EH@X+c!+c=jaHT?$!*`s$KgYCj3^-@~o?uT@ibrohGq=73;1w~10Db9sl&JTB8&t1#?yasj z3xFc!^$hxK`uJ*Y2``AhH8^rlO(~?73{Sh8W@0Vz8-3*gNwQIZ<)36DRVI6#o5qGi znM4hJ%Xpjea?tjRVChXivGrmSKvuf`M8e|=gk#*rI1we2W^*i8WL$!hh6|NbJsuHx zh;@B0EdL_n3VGB#mvupF7l4~C&k6v@ZayE}*J?uww3;QycnkkUCB@y`(R4UoIKyJ5IFSQ8g z1McMFvovAgO@u2~sYIernd~x+-^-gFeW9Sf-s>?VWKwlt+b&zf(=_Pj5g=WpW}j_! zqIk5&9GEli2YFTQVq%WKY@FAW$KxH3?=o=uQHCC4f#|)SO+;O~D>W+%Y12MWrD2Il zi>vBYDNk{)%AtRCS9K7VifDkoUP2OxW#!gh5^o+Lbh4}udX<{844Rc1?yhZI*2`M5 z1XX2R)=-bAq8iZ|aTYWZ~)<7RtbgUqy~bQy;#@2swNseAN# ze;|v;Xj^oXL{#Jl}8YHu$y#iHeGoVIU`NyJE7w-BvC-6f8uZ zwF1kE2=VC4X~7zO;}!d!!up<{7(3~$_2erZsiCe;ewO|Ir{PW~wWvYEO*e89kE8il zN`vz)>Cr!624u|GE>UgodmWlAT6c>|WGO@zw$n&0C56%13CBAnIXQt+(Du$<9z$t*X(TQ9R_fhwG{lLH=Lj-oPrKolW{k`Rl0wpr?0 zNF9H!T!e+#8(J6R+WnOrz2sJ|lHB^upPP$Q^+Y{G3TAzF>E+zN(U}_BS*(?BH>&h< z@Wzm3>7uZJPAbE*;k>qz!++edEmST?8=2l;P;^!CN{B(bbmY1g|k(Vgpq{ZOi;WnVGL`AW=UPflx zsEVCQYUSQmU7e^sG0=@*%0RT`Hs<8u$2Ubo7vo{b#^AjI}SWr;y|~RN1_Haq~&(Alm7@qxIsi8cfZJUOaB^5Xx^p) zr!B4LY8BmKa<}rNn#~NXe9NQM?2d3Z@`^K_q)N~(237GyMdOnr zodv~Yi~{v%#K>Et!`(!jX4^{QPcFFl9eaZ`JRtNKJJs~MrIVmL> z&wJ$sF&?@us)f6v+USrt(aP);4pYU>5MqreejQ0?15Eq2<{u-S)KA=2GA(K^ur0w; zwH9=!O@RUSKAgjyoR#AJdEa5D`IyGIgy)03aX6pH;yiEX79PCJk;@`&EZi=n!o8d} z(R&JEw<`r%?~C2apU(ZQT8VKK(`0w7EB=1f&%8N|n(0E?Wmo{j{uZuglM@PCSoe*K zu|%qI`kN~?9yvw2V+E{_h+Fs0m_(i5gjP{pDliMt+iJ5I$O=`=nx!LY`fjB z0qH)YN@TZD6*%KG#ge3B>xq})&)fvbI}y#0SgID+0)&nI9#E^h9$8L2XjMS-^e;6v z@Fn_4fXlSl;KQ-MkxiW9sXg~y+lzmgB|zo<4|FIQmt_BPIS%JzNjo5n` z>h{Y_Q;pH&r+(maskSA4q=5Z>mr?{#Kf`#9j>4DHdo#}_tu+03v|x_rU-Ao&Fc-+JDv zYT6*(WzG2%#j&4vDkp-~*D<9_x0}UW;V<_(bKCWY(CT7d;6CwX`So;+W6c=}p9&=< zWg897QfxV9Glh4ZXZ~>-IW>SSLxr5PJ5GoVrWdjM!mbm&1uKU zZgF*T-Uh7)bESPL_l*8zABS0Ih77|!_w}vP=?N#?J`2;M$RK5w-h(dGDp%4eytOW} z#cVTg%GLF#SW4Q<5q-e*#lP=OlPjX8okxWu?ZdJ1A<>=>ilCTMn1IP8*WL+3G3MxT z9PE7{@2eZp;`i-uK#7x+B@NsmJR)`ci+`LQuizCy_S!IZYN+B?cu87(->7~kzin7p z$ybZLTLT+?A3;Jd1n?@M(jSu6gROweeWW;5qUMy>G^7?>XPs~p5O-lo*I*W)TfXFB zA;Yf&8?Rf9!A+YQ`$Lq%BqZe6!H(bwqtkpUcTO3`m+Bkw`JNQ{jLwOMJYnqM)e4UV zm>tO3(Ml7BFxfFK0O;%~`g0bN&`sLZTUt{vIm`QH^5>Fg9P7bL|IV7k#U&ijj`NN1 zWAM<70*%heCT@+Vq)Es;wO<**NNA!Ge6cUtp{rC=*8+|&xg>bP58Q;Q&%U7w5;Ybb zZ=!AoQzWk_FA3$!EVRS3!47suMXqW@uE8KUyA5cmOVu^W-AMm{&mn$1Y|vA`@|Ulu zurN1_Syz#;k)T_Dt7>V{OC&1?>0RzKBLL>ZUiI%2Rf}~kjhvF{* zzTpHuSAP>`r00V|fMm-mVOo^SoI04xu51Ss+qLMft>L-l?Rco`AKwOs+s*cAbk!=V zdO9*{1~1%wS0yG9CHjmM_c=vBE|jzD!y1VcxZ9r4k6nYsRdN0@B1J6L=QeOXisn%> zx37(jY$z4*P9JP<#T4d8|Ggd>u5v;@AjFt0IHqBJw2n{+r(!8oA*h}`bKyIC`)`7% zIWKO=NGp39{{%|}O`Fz&di#D$bYWd6+@Lkdt`)5{Os7=~|Nf+d6bVUw_1JDCRuNY< zC$qz_UdLCpOKl>RoCS7Hph!~b-vg;;f?8vO@II?MBo_S8U2%X1085C?W1Fp4wS2n~lombw@IOVm|tGR{wRX5i1SW~jp+ z$6Rw_EHT&rAacW{S`rqaVrpo-z0w(QuyvE#l)i{tQ_q-(dxL+3KIl|Kl;%XwJA0!Q zj)(-~KJ~fed$$P{T@|2hi0NIp@FIU}xIgR`6>!To*I3SK4m3NvjP!VqZm$zhh-KU6 z&Zx6}wiY{lhOs+he{gC(*G5EgDiBgt7L6&d|6;J_4Ch?lS7{vFJ8q&qETP=V?h@NX!I^X5COHxGhH+Q`}K2MSjo% z*rn|qX8&o;H{rYX5@7cP{#=VpxR-EtU6bw5=k-x;rH=)=*Yo*#7|06C2a|*l}sv8Pvrs7u#DgEnm6{3{7U4!Q0KptQ(H$a0Ku_ z-w&CRKqHM$z^;gw{frgNxcqRBZcE=$Peqh>rm^6g%YRrn7OUz=dn;QFEP=*G?yZ!r zH*NVV&wy)F27&`+jR%g$kP!C?{rpJdNeE7sq)=eBWY^8nZ2G?6chgn?bGO~nXns9= ziyOX}%aEMfNg)1guk@iYf}$)-V-B;`{(+2_5=~C!^A=cI7oFXeiT;BXvZ5`oWNHWeosw3nTosgKBxyhYlV{^$ zkjuIlZY6rdZYXDK06CsL9D9CDSgFM)dB%JF4QvjkTnD0JCktljN`gDoL(q{3ZvS z-aUX~dxtUJ*rWm*0u|H2GG>w_8>S?8sQ&RueJFezfXGmY6Yj~dL}wLs9Ukv zk!#*yX3#vixU#64DBcY-qsZX7VDAHa*;jh_u1t zdLO>|+-e)+S|Tu2Zp)W?EZ2}2<%nDTo(xWv+A^wmw)pgXmo2sP4cT_53E2u7*V&m~ z6teWvbPA7KDKOQ~iOzWRCCVKHY0>2McBePnQsxMNI60g|dt5uXqFz%pNXm0eR(!}h zDv9|_#V0Qf9o5s!9j~bkhF5-*f|-muiQ)!LKLS2OC-mLX3ABeV(sHm|rX*6?kYiE7 zMbgqWzbct5LxS(mgSAzNmOT$;m|Tjq!&ESI^;Ps!q%+*$E5&^;?3Z9Tcx$beXi#^X zcaOsQ{$gIu2sNxjLN%nVy;?7H``}Yu!19E098_XH!3b-rC4!&pthtkM^GREb`FbO7 zPnLWR*|fI&tnrBDbSS0ewns0B9P#{dHFvG-tTyQ27p5Fsuc9s2J1hd%=|0276{Un3 zMU28^H4JD0$9=s} z2mHDVj5%EjfNh@IipILWUv5jGRs*xAR_Y8ktv$=$w&(H=HUFc}gQ3*7WV;VD9!MuG zZkli;C0tVPRLK4(DxC9Snj8&Am~d=p7WFt~ znm4DJVeJ1zw1w?SyfKofn8p9`_){=KRx5(Qy#Mqg&BhS0z1NhDK$mtCi&~cp`%1u2 zt+Pyou(t3bOn~cZUXoyEN|ZZjI9f_r~3VySoQ>cbCT9U54|`%$YO$ z-(FQ~)t|lgs;c|BuIGiX^K)l$7E8s@dk1sn(8>g*yqA!#5~@ez1t-1}>nIZxq7RuI zQ_wFeFX->a@;rVgB$h9k$)5i>-u^@26^FHcgJ&oabX!Z+EIT==s;*YdH2a_2PdnQXdlI+o7H&qQCp=5bcXhpEOHfhi z>~;rU9Zh*`ffCEX)cow*E?|OcDg_`+FE-a;` zE7K5pmeFapnXU6|rm%(1mEVrL$ewx#y_X~Y z8+f%QuOzcE9?sZS3nGfQ0{V!`DTN`Gox%IEF@t{9S>N4-OOALHA#{e9nKMOa_LJo8 zVXViU+t5Zcr_F5#RqvMAWSSy5-fpYTGZmKJR|`0@1RqmWJ^E!y2=(=Oz*N*7G^5a}CthdZw|gRoy4J$p;nbNr=Pi`t!csqKj-_Aba?dx8(RAbDmpb zvE5?#i09ptjSkn=1|~=VfP3PPm%=~B5mg6(?9GhZQiR9Hx7L2kw{f|4zj4w106}u! z*6B#Og*oqJkM?+WTKiK4WOcXt{rB+TK6{+bIJlga*zH(7)rO6o0V8FaFsJ4*HSvek%p9=C>+f3+kUUQSfk{czeiOL-6B z0gz|xTB0LgsKB;o|4LV2MO4SX2RX-WqM2eJxUg{squo%pqfy}F`Su3sZZUq=R@Zak z#S82Px|06Q1TCrQ<=r^a?)eE!*41pTQq%jE_@m3n7{HBi%7NY4?pU_br9rt@)o_(i zC#2l}tHy4<8krrj&%TG2ovwdy6#cqKXi#X7Whj3_U*$lp+jXJHud~4|H)W1ADBD5& ztq{yJDXT{D&XH}%aDetVMv1(cRguhP9g*V07i5X0zt+x<@3rSOtUTvI9s#A@q0M4% zs{*^Ydv;M`pnL_{uUc4Oy77^Pf+~i~me#oWi&^PPCqcJ;?%|N67%=99MM@Jy*Yug5>tYm91fK+`a{ zBerziYr=`-gGZ8_fRiFJ>kW@Bnz3e}mAWHWV(l^iZg?a`jveFGI5z%Z`8;~_4lHg*34=b%K_nDKQJvN1lbZL~Y$V|J6{tj9FGBAK@d?=R@`w2&Y+2 zIWh%BK_h9Mren=s+5Jf5nc4%fb0cog36$}kdaLmzvy{0pJ}DU#f+W&I9|Qk`hm%@Pzyzv=wob*(U%DVcD)9HItX{DUduDr8A0jgle-zeG@q zt~jRb7O<3D)4Cs32Y-=`VsUzt+;PTHJ50Hv3vcM1l~y+Xc|OgsSHUIM+a2Y$vsKxI z&KR$wJ~ZRV7scQAqV%;t?z4$_C-armL4x;XpwPRj zvx%8D=uuzckZKAJ#;iq`1QH&QQz{?FQ=2SF$?oN%#}!NjUs$U=es_~*tQMx#1BLyZ z(y32Ut9vrwo2xZQ)trbdlNnOzGD%-R*?bla zSLeD0r&}I1FH4rUhOHMKXKjUxK;&!@# zGxGyuwe|7^)sCfM&W+#uT~hOLSs^yvvnMwc@0Ocmd}V@`02m5jyu1NIn2UcCGWmpYDv-Q zY9yEv^vr1;Mrm_6rlB1Z&wEZ!Pv()(+Fd?K<6~&xhEIg&lSV_|jzb0!1#?b((mtd9 z7Ai3`C9{7i9UW+f8?5?1TqVED?+g+Kvcl{@Ael=B)LE&w`sOgjS?S=>cQf27 z1XFBBK6eMbHrLDD@W~pialtC@8Vm9ZG7{+Mz5CPnV6sJO+TlhVnSOgvdL{W}Lfpmp zGRO+$g%V8%U?qg+#j_b3UwiIdzWBqWyo}Rj9&O;Pq#ACc(iJT2h_-RHus%WcuKpEr zv@za$Pwlg-{qrlZ|2f)D|*qY3v|{yGx{#%rM?Qwf|FZjPECbBuwfwL70iW zXzb*kuD)7b*ueS|Bv4Pbe=li)JDwhYb{A0H7bCxifSdLPNT@dBilIB}sE`KvO$_y^ zIj4UD0e|%!@$9w-)D+Q+6!BcXErch(E1Ge$u?<6e=I$!e5X^iwNB zH;F}rYH+mr6=%Kw>wXkq0-67pQ~J4Qb=>x?J-zl|7c6*UT0OAk%X&{uS2{$Si$fa<@XL;VH97R1PEP zJATq>?YJbJyI7x3sKZO+9{uj{@QnQQSIs@ARbbpU)A?u}k9fq(@`zT0Rtw-X(z}VJ zs9DjI3si5)nla{6;U4Gq;c=VY8l&%Co9{$+yCnTmYHpT2f!{V$cTV?Gzszorjjok?LuQC$}PF ziLw_}W-XK#R6QJKHgWNyO}1gIIoS--DCuBKmN?60T21Un-JzSLJ0MsO1)K$v=l#g7 zq}|zhQ$osO`z}C9nJzTI+ENYxfQnd9F6WYP+Zs-2#lG_Do7nh^gSm&k2FAy$L8qF4 zFhr`QQj5EPgC^kYxm^a6oH~O1l zFuk*==JaLNPIUwG!{1{cLR1y^bYc9BkGc1A4l(!APjVUqG_Z8uj1p}ElVnNwBc>hhlfQ!u=nhkFshQKQ7>83_1f0*_0PSg9@Z2i!k6}A!=X!bNbpCR(IPc1?^I0KiwX**zFySy)u8NZ;4I46BhN|_u}+Y%f=>$zyC>ur_%=`VKsPbgu?TFU5uZsuLke z{~HRC)XZ-ZI|GaqHceqcNwg$6aaQ}C|GGuAa^if8P#lP$W`fOhuxhpcW4fH={Tl+SWFqV8}L*^82M$={SuZ zMm2YMae1BFQCyFCy)r(JXQc(3PO$6FAQyDApB+PZ>Ehbo+NaLbSdPvkb}-S7c7s1j zlo4%~AkO4U2%%Kv;v#`5{O;w(dDu-dB;X#gI3PZCM4UQvd(L^#340Flx|;e=N}ka8 z_$a}81r$2`^sTcZ5u@f3i)1q>*)dV4ByUzh(A}K$tW}N3riHJfDtFZ+wb|H@(fex+NpmmI4X#z5iR7 z9?lSpnwIrP-cH^1O&%y;&c#?LQpRxIA}Qxes4*0(&f(g38isXmIT3u0ng_UI(o!oo zJiZH8o`q(2Dfk!s495s|skS-ha5?Ao542C;(Z_g)tU^6v7pFPc?wr2QSyA0F?!MgF zNG;jKP$0qCck65Tt6F8t6bSg2L|~jOQ{?p7Xf1Vk5{EiUwWoDsnI#=lCMA}55y#4> zm@nf+j^q_AF6f;!2_LYj#P1;#iWZyUf4Dy$#|vW3AY8TgYWPbpath>A;&h9seVIUD6Y_mpVz9wqy zQDJeo6uHF+4mG<2tCqc`n4-cr=QG zxbaHmA|1X1<28{&e^GSzLSHc-9-ywmju-eqGTXZE{W~SbAw};`;#fX#MD*^*r-DU{ z2%4&u`aK1;qy`(>QO5IftJ z{jA{kCcy=h0W_V{iCN05{ZMgUV3k1Fl?P1G49;M2^>*tK81K#Z&Lr7rj6n>Z z^1PE&z4){vKT};NolgFlKw0y`sIn(_g&=iDt^)TrHAVx$l{Es=A+~a#r!$v{&g@irb zG#3YtMT&BdYb%7DR%UpdR(+TLW-=f%blm*z^{-OS?&b;gdq{Wmd=z?ZC>}NAXC!0Z zU*!4TS>*Xxd=&<)##JKu6UmtSnZya(eY3)UP17oKvyuEEGQ!(h^}?CZ&bCtfn=D>A%NiNH!W$i*Aia12>keMNejsPSM1dTB!zd$ID;i^DqDhL-Iia@e z$+KXbUMUP2(I741bPL;(`Pry|RrT5B-BH9rh+e1NTq$Ps4Z|W#W=>TtE-3~KD!y%? zY8h;!g6YZhiAl=z`cq(V_RA=`YYU@3!p$6S0@PsI^QgV0Fw07(GDQc5nvEBqS`c9U zHV@_pJVg`_y;^ov<^D}FET9LW7LRf`{*&#!O{OLL9 z9k1OVTwb8(MejY%1HTSV*Mk^MhNCa&WBuv{pytLYrw6zBbi}$7{X7#BhIc|HQ zyK}ln%?*vfqKL=QzRjCt8mT#FU+s2h{Og|2w0~F7tUsMFnn*D|4h?P^Va~{Hu0V>u zou6$jmRpwx_T%2|K7KTp#CEsWwhL3tEqYLLNT$>Y3ILwWCJa;#Uz78Agcq%krU41Khp z!yUKL{RcQ!=y$b}Nz25b;_cLsQRXvR_lT`=rDRrQpapN7NGEtxq$0a#{_|6j!6VD^ ziKtD4JTxBskslY#Z1;@kYQ%jHC6p}>yXwgldOam;yI99N(Q<}%*P!AGcyK9YX-H+R z)r0u(g`#uzXl&MA9RaBAkF%iu{<33T9rw)>MR=GZtgm$Ltpmw$o;RV^!!;eZ=-%F6oOg9AkpX-z zQlt8jnH=a!Nc6RzFr0)A0O(I;%qwl-K zDR&G>j9Hr*l@pUDlU$m0ma?9-KWJ46a~e+B_)om!gDWo{>h*>yD)LLHAnLABLCvMN zb9oebN=4HoUm;tk*vl->;KvTmCW7UpajZsFijs77OP#hzT9I2|g6M2B!BJU>`t|8b z1ojnR%U2#g`3}c`DAMg}WT5(Kk2}@ba-TkT^Fq+2jMnq?QxY#H#UxjCrGcVfC%i}WaW0GIaRc6NXk{*+bl3sHfG4BQb5!pcSgtHVifdfQh10&Nwk@n|W4 z{x!Tcf%!)#?n-eq3~II(ez1F7+O~Y_o$unSaMFs&Oa2aB>;)DD^H;h`y717Foe#M{ zSWQe+pTIB(*dQ05;BN7KeJeqXzPw`OSN6gy8v?f)xq)O3t$CcYN zR@3RHWvAa{f~R#F-vm6)~m**O7I_&`(iL*PQVplR%kX)WW$j#QRox3 zNiVxY?aPZEf4m+Yb0S*4NJ{Ao22+R?!qV02m6IgYw@Cb#(1pS()dm@-OCW)?^rJ@3 z;U+?_x8v0_tqEN~cYW3OeRAe+zq)si)g~73@%R5zv)#mi+c!sk5H{syLZI#cb(?`dMq! zc^JX)?eJ~{)8*~2SIa*<>}b*)3e$P8WKW!Zs_`mP3xz#wL{b@!3Ab*vbMVUvoiexK zxh+o%mB+_F*rJgi1)A-025%i5)^rwz7V0~2Eie?RY1&Dnq*nZ}0tM8be_|&b*6wT% zr>IAIhBq+ukU>h}5;y$?Tptm`Cdt5>g$U)O_hF+MJccfzgiqSozyxL%Fr+ zxny;&Q@)OYm}WfHi#*D|FY?OqH1mmVL^=GuA|jkBcQCt1z2iNsZ4gQ^l2GiP9|72? ztn;bok2|5>{h_Pf%+Rk|N0OB!g4=9s5+NG; zOfS;YN!{)TZt1)WJdD4b`*r~Q2a}ymU^{tKzM7F;AHF^qdjxtSV7$tUAZzTSINZ3= z-PsHN&csDstBkm4cSi`ols2NRt z0QTo52W&Q0Ffsf`L#f?QZz-Pz!O zAONE7!_gjm(wi30K1{81L#Uu&9V^DwZy3=_;Fi^8e{E_#urqx7b;jMqif1{my$#?* zm~zxf)oc1f@lyV6t#C&8<)N1gKu|ViCAC!ZfJ|B|+e)@jLLKLt!b0?_CR75fbsxL8 z4sR!!>+&J;K&D8Td!KuGvilP$@1*N_2ITpM!$}{y{(vSx(3(nn3DL)9iB&TN$QIhv?$otH_k;ax(i+p~Dl(FO*^1q38ed z`ph|^YEN>niEhIB23Geb)qna30fn>@djgAQdMWZ_OYZ+xC&7R|oK5>hmoD`r&o7@) zGP#7^W&hLl1vjZ>8rhW5+N>dlhD!dd?~fE)hlHVv#Z3&&0LjUJ#l-1_oBiQ*Nwidq z>Q^!WO6}~*5UjR2RI{G)sTY#5v*N2X|J~}Qm}Z%6dgO`4a)N{>K`WPGLD$n9rRDb<%rVk}Nr36>Hl?-~k>6~8 zZWHZ*?7{kEjoo~R3)C+mZ;6H1g)h%2zV$d4?Q}`S{euTR7Qz1R?qBx$ucw-6UWdK5 zO(z8Re3cI~vr(mX1-Z*RkfC5NyRifVglR;)7up^u;y!PZGp<9QLr56n2>$%rtq zK}G>bI#i7PI| zzPnp+z#;6;5|aXY@Z<)nr4LrmVD~neDX5%=Bt=myQKC;h!FgL63F??I0D)$q7(668 z7n93;aGdV@3B%4PeWiU~5}TvV>QjuoN}YJ)U+XuwI+ht^%xN4rnw19&5jkQr%N`_1 z8T(V*4nz<0bxr`dQG#mWxq1)C05<4^;JN{@azRO3yX?i&pQjV!pcIk2&gAPQcY-+^ zMY=Y>j^t0hIM2+iJDtB$h2oVninIU=oqC9-(x5_0Rg^UDc4m&bD)wgw zmp62jMywpIf2W(lMQ1b@^7+o^j+*tZFdGeYa2!lnuR^fMl=aBVsGwR*a(yAh|K>n# zHZ47gnQ3x3KpPUbP(rJyes_(+fR&gFRIxwX0m~H(HV<5LU-UVn6qczyav_9yd98FJ@#(86L0X zY9cxrIM|@V%T4x{@R&~j&?YQ*WnkF{M_;|7T4O0spprumviRiba{8TZWMs)wj_x&@ z;u$@_um}yP|2p_Lai<8!z@7%Ereg20VMicMhvmhvxtTP>U3AeL*3^#pc;g>wJc}Dp z(>i$99y~~|5^5zXQueylA7Qpk+JKlUkJvHHmb9NiQCk)}*e7s#xF=n-bE2;DXua$m zkcZB_U#GhCNxHIBjPfnPF^UN~vSv&J1woqe<$yH((mDiV-AkoS@$@@F@uhS5HFjP6 zCdDnA#$Q5JRLp6@x$7)i55%YFYfTPIYSbIS>`5Q)KjJUm%qtpIFJ)KBA{ecKQT%TS z;S`#J;h9z^v6BnRh#DW})jDSC=+VyEcWOO`OWF7_ue)tHufr0fBq*RYKLn!0BaIXbGrF8tYpV?sz+FY2W5G6}P zu+Flasa;fV0Z(wdz$r;X-si~Z!|4}NG*wIo^F2#a>7xK))ltaqF?VJ>d-momT3YGY| zoJsmTp!0#`Y9m~MY7B@*;td`k)*+7Aq-+3-VMkc<$bn_eFPY5)0PT-5Q{T6zshRE* ziPTp$MeOI}k((3J3e1vScGdv4}4|vdBtR%(;t4UpM+b1*y$@;#q8ewxU%=;IVwKmH@2K|r;53c02(n?~QY z#J3_Y@&(WJT)l+{U!o;FN^X*F-{5@F2Z!vN3p$a@Yd$+|w+G7BnF9t6;}i2=Q6**S zud{i?(ALqtU;I(}2b1doOG}0%b1~R)f623O*bV%eI8rVNPr1n>_Sq#c&2-5JrZX>% zC~4TD(jIVZymqa0ozLdes&mC>_+~Yz>3iCDsh;Xk3ncHeoo$Z9ReJ$p%TasTv``g~ z#M(Z`;Bt64+mVZyT%3jV&Mq!bXX2jO>YQ^7N|vG+#@!`~VYfA;k{d+xIYJzPL;k5? zhX`-C&+E;{0W$_PlO?>u-=Yf4f|&?pK7|J6vqvu9QRb=eJ|W}F^6GKt)RF$oBlPZj zh{ELzH6ym@3M^vVy6L;J3gUzz#v?n*8srnkj{~L$%N7pc#@w@`X>8B?jab(l{mUEY zmwH{;6p!ME!Qsp!mJ1Xgy0IDeH`)Qq>PskbA~-qP#?`?AdV~(Bjcp9HU zR0^!b)VG(K=*b4wawEq0;=~QTn+$NRcwLvB&E=sk88{pz*x3-FwZ-PCGN^)B6p`7{ z^O*i$I!b@VD69w^zC>m+$|)IcWWBmb&34PC;>>$6 zA}K{hvB{9_L>ZBqk^>LJtE4<1CGTXC6QojWy4PCL(y(OU~r0<|x z^ssx1yZ(Y4Ribv@?Ol)X_9yFfd)EfF`05OW@zZqS%fy*&jV0(#QMRg{xTFE@)JH|& zS+@7#Od%s`=hY{1bVq6#xdKuTc%^{c$wF6wU$T1R^WlfLIYnAspU(B=jlhQZ#LMgp zK%3zyTgrV~EI(Rt8Har*^|!9I8|>FZR&y2s;w4e3Y%s4P>*CU|rcGiMUVOEp=y=!UdAe}vc0zv^B0K*#3?+tsgJz9<#hEKzyL}j-W z`rQPM-ro8C-;iQNOg1FPk7{o;wLb(bhU>9C@=E%du?%|)w}_?;ivU$Mk=R6inG2C< z#Aj)1*O2i5D7W!hC9gNh>8UUnmprQH&!tzp1N~G=O)a^3HRwBNjq0rdH08x_9UYw{ z*v9OG(d_ue8?kvZ-b8VU3&~Z>h))$_@Z~8HsA*tWlEypkdQ&uw4hw5W5Wjk@+SJsH zU{WTo5-zr8h^%m)Tx*mni3NI>?7)3K0O6wXQ`XugY)GzF*W@jzB18RS5RH3-Kq(!B= zV!N5*CJ$$N;NbT|OKixgMCqnxC)~i~sKb3n_jcM3<(^KHq@AvAUcWnLBTpoPjwJnJ z{hf*JKfq!Y8lp%$Bf+&E(J&Su%#eiP(LFHt^lSWaY>Onl+ty$Tz+Q#T3c)t=*2?%x zN|Bwucbb+$B(A=Vx$fsO5G!k;QSJbWfA;W(CXn|hIz2o;<5G?6{cC*$?~57MBC9tC zvSz#Ew#I5+A9&k1R9ED(NuxXQepiFC(q*%zD~RmgZ_b8ccN~h()V=8vb_ zkr1IWuo~6qL#zFY1&DSr$YpcL?BiU$1ts7G`x#M^X}sV4X8?YuqO%9x=be+;)w;L_ zR99dWsy|Gz2F$ur_@D~ajx@XA$>GzsdGX;soFH)!0}5unUv@0OZeY4d(JzPmM=&k~ zn5QWR0@p4Z8$cG8I!rY@y(?DbeTDV{G_zRGUIP%P9Dd2>^$6b1U|a;OR+iaX{VDvsP> zEz3Wrhn*N75*Fz!j#r+iYLJ*Nt@^;}&u14j+K&%Z_!%?b&}adsgGS{ z(hOk>d2aWB92KzkmWe%*?)BN8m_=5^OI*gtC3QxRPv+0X=1Xg2-eK3+3Ex^WMDVRK z^ta6g;*I`AxIon!n_g5F&)BH=6Q|qyYj8HL+3h;(jW?J>Tr}f3u}#8gCSTw)EeRqB zFT?Qnkun9Qg>fkR-?^ok^WFRt0Y|^2lJ)IUVQ#6%(khH8yVj{u?YbDU;Wn-=>a8k> z)du9(T282B2@?-?eP1uRDlOzJ`McSP|v@O<`GlsIxH=_X++pbqKn2fFsKc;L@VsLeloI?#qvH>N5L{6wI zaIpN(N8ukD4NJ?TTk-KdN(~jILO{n9Fx5&kYQbu%>E7V!48~gfg@;){uJT@eQHWuF*QB~K_H8$=`X2ogr`p>+=WXu*W z>7UC3@$$b)>3ygXC8^Ywcf&Djy6r9PbKHd`$M+2~{0Da+fWMnmgX?M1Y4fKhCth!G z1#9xP4GLH))mE=%gD=*FX#Rm`*}-kbQQL;7z)ne?V(pkc9^KoEvXg)z`&VatP2$9r zA}tztUXL2foMltRg+8NawN{r@4jt}ntS5I_|NOhm#-z;)Q)hH$rM$AE4li#&jH?H1 zI7T4aq-Lz^YZ7aN?#+qeKx)EB6Xs7+v#rx-w&THnx@$6DZ3Fy0$uvW#JV(MF2|zUi zEd>x4qhHWUh)G|i0JQvKDTbpxXr?`IqJHR@;NJt}%v!S{0@Iy(Mab>)?k(bkC?I3E z{Kv;{Hm2%G#)VPOuRY^yYPwMR3aG2OM|~ac*$;Pv;cr|cjIFAL+aY1#yNRg%OutCQ zVpq;0ob@SPwUdj{zr~>dT@Vx91=5*>kp&@bptW15`P4V9mNnL8=hr=ZM5J8v0h+t! zHSu>}I|G4Z%8m)7-%VVb8!3{xJhZ#E2-1`UT6<3BkEEo5xru4X!JV$I4kStRc3!eG zOVEUKgOJ$>sa!r53Wa#83Ec&!;528TORMLbDswAe}>8%lM|8J(ZN zr|#oU3?rudTlxiCEL1f@JZ6EG zuj&T7n=(ZW(cYzr3hoq z90CPj;I0|IPexLcrP-TafAj{=b$^%xpS(MAU(e+x(+E^>wa4^H`}7a=YmQ=bdblDh z9K{&y6Zj=O23n zm>7b&L-^-@Y@JM{x%m1mSQH5Pd@jkOAKjpLJ17udF{0A>ib_vN06&#ruYZd^>lZwx zn0P%GGw*dZWKSY)`l9m?H>5$%M$w#Cu$Qbm>Ko0m7N9{#l8u!5?^A;?+~6;m&9v0I8aB^^dOd@ZKKd1HOs5Rm>O)v#&H zX1jtT4?6{x{Snyr!|mZK{>DjSQhe>UBqN)5&K90rAy!A&y>Z^a?-{vluJD#!Mi|4m z+Jp`*El=o~U1XLT9HhQEeWJ0@8-vln9<(z+9$n53?%&(_Apxz@FQZj#&b!T3iax=c z1ty|}59hLzRH)*x<&%dUR7+`v=O<8(Epzr2xBTIn;w*nr4a-OFFc^csb!m|+Ua%?^ z#N`tmN~(f83aA=e$PUWsHD;kzmf|;6bJbg216rb2n5sXX7dl0?gq8cT*cB{ zTA#^-R0)a$yZ=+yfF2z9Ha0Tymt=Ugv?AN_tt=n>)d_s57iXY8G$aae zKjI}tu5Q?Wyo+=1kOPu%;AucjG@8MK2oI*Yp@jB5=y2j2)9ef<|Thu#6D)Nkx#OIOTC$ zjv4>urFv#rPfhH%hS&0mVjGT2ETgiB!X~oQ08q@5P+JHm{k6 zHtfNxixu0aJABQF&rjxdC$uAYQ&&wwNINlSLEBGjrdyAT4+|7; zRuHGFK-yo*YGB*{a}NQ@ux-2_AA2bSCUpidsPpCX754YQqJWh%vOU3`fB)b>U_iA- z4wOY($b4fpE@zg!>{WB~+%VUR+mU<4SCueeRCVw4)}Z#k|2}C-iU=w@Y7Dl^F&gY2 z$j|gM7-Js5puPMs&<^jfLgB5Wc2besqq2w_QgO*w?(u zajLeRlK7&4HJpS1Ppwe|@<0n%nl4fi2bgdaUvs5d$-*lA;;=Cw;KthW3r05kGupGm zvt{0V95TW>ZKR|l;bpxS2^by!$ybRJWtssWeI>!@np2Il5VXn$jrx~vb1L6sKI!lC z8Vh`@kv8ln7KU$K2PdtS7hIl_*;GCoA9WIVAgh4xnpPhoH{NkA>#-jmcl(^P-UxMG z--kaJe?+;Lod`}1^#aJW1gjYdaKjP2qBPQ!5hf2++1s3f8C!9W3p?}gTK(EV^-!M# zW_jJ~@2>Js-}ejobHkUC{}*oiE1Ass|7K`MABY3Eh5ldc*5~K{N!K#r|L;jzurC53 XjhO?z=+^uHeLRw)av~K%`hNcxq5t-g literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/software-inventory-report-inaccuracy500.png b/windows/security/threat-protection/microsoft-defender-atp/images/software-inventory-report-inaccuracy500.png new file mode 100644 index 0000000000000000000000000000000000000000..b299b7923868be4788761485b50597e844f22c89 GIT binary patch literal 25969 zcmce-WmH^G-zA!Vj08dm5Zn?77Nmna1P>nEA!y@HH%qZ;5;55*< zyEH?dxgX}_>-`=}IzbZ;&W0GP%dh`fe=8J^NqeuUo zK3s<{obRPq=BjGK_+f8cfVCqg{UE8wxnxUOcz|-E2S^tixTodSbiO4mPB45 z745U4=qsnO#t+H*OoWwmA1QW7wiAfzlk7Ej-_5Nu^FDdj6cUn>UY3%PqFy>zCkiE|~RVwhsK=O5a7E^S;%fWPJr){_vL9F6Y(Z^ZlHA>x~40X$zz3KRm znTTVKui4=tA@17jq4Urn0u1j>o>l7N8~y=oR{?DLL8j2MIUEup!;NDrQ8jY zs`1A`y=07PjQHR_7xNrSY{}8&#R-`8g6VJY#){|EQTt2c8MTymfK5>a5ny9{NidJX z95^@1`mr^b?yHCJtM;48T$Ch{O2z4$@D1kW&jwuAdLzNl+wnJE|LqJmdLn>T{kCEj ztHR4;M@K?*LOS?Sq`(>Q>y1tW#632vD)~*bFaF%?tmS&C?Gt>c90uTGDT-fOX<-=NrFD(taFlJ()nvM_3*Xpe zMkGv2k{p%JW=d2~ogJbf-uFLR6IPMdS~W!>Y^tyopKk=##)y`zEY-iAmGO+Io&Qx^ z9@*3(LFod%v_X+`P!7W$!(82dj$$w+XF1^^ob+Wu!iJOAJ?Ta%AbWa-ZKA>;%P7|a zSqEe*IftQ5MSws5wv12L=Zxf24b|kyMYY-7`(tJeCuCi<&6#L%&8FnQbJ1I)7pcT%r%l)qQci$wT!0kX{zly$p;Vrct-rpNjc5^H*Hnz?4vi)u8XDZN9b zGij0o=sQbokr!YTwQouZ#w4lhPs5AziPIZxPEXAO^$SrKD>aJYB@0@H5lM+Pk)EFQ z(&wGN@gwfwd8Ps&yeeepSZcaK`oRyK2SvOUQ zbKc$!P{ZmR+S{Ge zI!AH)eGm5LFRp;wo(M!`nTUt8+NJz@yRU#RRjx==#sfZtup1v>@^1>>&lz1?TT`RP z&cO~*1=5SOFK74^b{$z;Q&R3fwAZBe?uZKasxdp}8>+QB9+E0)?h*75nVY+(gPn-i z#*gru#ye_AI<(#S7RptuQD${}Z(p&yzprRv;fhKK2~o>)etjAjhbJ33*H}4ggYX0n zADv|T@&N1s4;7j~wJP5d2oxX`%|RP{LW*{Fc4`$GT@T&UpM{A!zw~f(<2|_JC(5l| z-rCyAz{8CV%X<(0{{?`bb6fx2@FfQ5s(`l~Axz}E!Fxa0#L9~Lqj5D|$N%Ilzt`QoN*CM>AHqZD>+L>Ac|Y{mRq|L&^Zzh0#P?O+ z+sw}9DP=5Y;BjE4)_1!rNg$*#U5eh+?J|#*6C)oU7uUJvpJaw)M8Dlsd9R4$vNQl& zA=PT!ZM$vOuCwo{@->|Ge%91`rQpX(uzLC#C++IJU9DB}Lb7jt3l32E)5T8J4W>)% zNjhs7{{MGsW1R(p*a5A2pR*WU3z5uhi;JPWEQI;Gw@KBu4$ z9);`r+0nHVZO);Bs(;C-mX{we^ZG;NsC)Mo!(N_cJUfnlSZ!}T)xH!rH8y<}`t46z zups88SG0(xV4ohV9zJ1fr>bhvoslu_kX|g^UueP?Vxhb|>zKK@2N$A@0^-j@I+(q6LGNUG3?rr@hn>eqwmFrMHa#P_G;g6bg8AnWGqDwBO{3G}h|8I|hW=Ga+DfA`H% z`i3^^chYUTT~jocD9v1CmN|>*-nGO=_ZkT{g@EPDt-<*?sigJ!AH3NMT9i)0^g)LN zOS=P(h^w8o;Ng`(E;vM0#OVaf=yC+hl6?09E(LkOp%}_A8zptPFmDx+!anbod+I>w z@wNJn_SDJ-DCa`j&4TZA>f40=!J9<&O+D_cA$ySlt|%uYx3zA$vPL%| z`W{a23Fa`F_>$|zUacYd)g?$i^m6z3*jCZo4+5_q@GxlXOLy;XY*nTKzOk&0w+^_% zs%RGj7=o*ztsCp(zl6tpyd4671diNKa`J}2m;P=6ol&ZC67 zS;LF#N_M&^+7oVjE6vGA`Vz;7D>-mD0#zJ3&X=G`$)H;9II*LGzUapE8T}=*(A8xR zpffsvM}Wwe)`GRXKRko4%*usp-z+X5nxdCmy(QOoVqjw!cED0)&`=)H)$ZL@>1^!h zP_}}+PqC?BzMZoTk1)C6*89|~n697HfbuPp{`|dS_8iSmk>k!<=~g$+tvb=~wx=8m zDo0efwH-`f)+1h`8EwD5Ls2m@?u;W!b>_+isIC;9I_x2g=XyJ-{ZuO*h_Le_65+n$h zKJ2Dv>UAkkNN>q1uy@(tf%Zu3-v-pTg)`iECJ!y$;YPPq{^7;My{a#c`K&ZJm_IbW zqIR_c3fVuYZm<$1=kig>{7u1FN3|${V4#T|Qs}f;yFbA%whNdjlmy9=($czrVD*i< zmporDsc2ux{|DZ1gB;Q-%_pC0`A$Kr;Es;Bk8oE~x&9*{u{O&vD8G>_pfPTLuGw<8 z`E2*r2NzzY#Pv9XS{Mn_H%YOyIqABo$nzn{6*a;EZny$QS3;u)&bdy0z1{b+VLWdV zYVbZ*4~S~ZQWCz2+mVV|O_PJMAGK*--R5+tRTxlR=m+!o*RfJj0 zl|@t5`fi2$P13nnwJ}K_A7N=7`Mfv)iJ!ZFu=poYNkqqr z^9APYDdN>ne!ZbmK-4I{ylI`iIgQ?FN$n9KKSQN^4;FAv+%X^=(?}Q zOtj_;f*PjW%c(f#CzG0nY;AXnZEU39Xr(w9L|FW2gP*u>mj#n>T+tddLIH^Y-y}_{ z*7!