From 5584c886d44018c0537f49f3fdc91cd65f810a1a Mon Sep 17 00:00:00 2001 From: Zach Dvorak Date: Wed, 21 Mar 2018 11:17:01 -0700 Subject: [PATCH 01/63] Update windows-analytics-get-started.md --- windows/deployment/update/windows-analytics-get-started.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index de69f455fc..32e36d85f3 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -53,7 +53,8 @@ To enable data sharing, configure your proxy sever to whitelist the following en | `https://oca.telemetry.microsoft.com` | Online Crash Analysis; required for Device Health and Update Compliance AV reports. Not used by Upgrade Readiness. | - +>[!NOTE] +>If you have SSL Inspection enabled enabled on your proxy server, you may need to add the above URLs to your SSL inspection exclusion list to allow data to reach Microsoft's endpoints. ### Configuring endpoint access with proxy servers If your organization uses proxy server authentication for outbound traffic, use one or more of the following approaches to ensure that the diagnostic data is not blocked by proxy authentication: @@ -150,4 +151,4 @@ For more information about Internet Explorer Security Zones, see [About URL Secu ### Distribution at scale without using the deployment script -We recommend using the deployment script to configure devices. However if this is not an option, you can still manage settings by policy as described in the previous section. However, if you don't run the deployment script, you might have to wait a long time (possibly weeks) before devices send the initial full inventory scan. \ No newline at end of file +We recommend using the deployment script to configure devices. However if this is not an option, you can still manage settings by policy as described in the previous section. However, if you don't run the deployment script, you might have to wait a long time (possibly weeks) before devices send the initial full inventory scan. From 0050637d8f98b5d39c6110f706ecb51cb1047c05 Mon Sep 17 00:00:00 2001 From: Sarah Handler <32965347+cloudhandler@users.noreply.github.com> Date: Mon, 26 Mar 2018 14:35:08 -0400 Subject: [PATCH 02/63] clarify wip doc clarifies selective wipe capability as specific to mdm enrolled devices only --- .../protect-enterprise-data-using-wip.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md b/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md index c68ad8e70c..20431799cb 100644 --- a/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md +++ b/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md @@ -62,7 +62,7 @@ WIP provides: - Additional data protection for existing line-of-business apps without a need to update the apps. -- Ability to wipe corporate data from devices while leaving personal data alone. +- Ability to wipe corporate data from Intune MDM enrolled devices while leaving personal data alone. - Use of audit reports for tracking issues and remedial actions. From e694bb01dde5b620ac85cb96d8fe7c70c6e9d71f Mon Sep 17 00:00:00 2001 From: Zach Dvorak Date: Mon, 26 Mar 2018 16:55:54 -0700 Subject: [PATCH 03/63] Update windows-analytics-get-started.md --- windows/deployment/update/windows-analytics-get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-analytics-get-started.md b/windows/deployment/update/windows-analytics-get-started.md index 32e36d85f3..1001aa243a 100644 --- a/windows/deployment/update/windows-analytics-get-started.md +++ b/windows/deployment/update/windows-analytics-get-started.md @@ -54,7 +54,7 @@ To enable data sharing, configure your proxy sever to whitelist the following en >[!NOTE] ->If you have SSL Inspection enabled enabled on your proxy server, you may need to add the above URLs to your SSL inspection exclusion list to allow data to reach Microsoft's endpoints. +>If you have SSL Inspection enabled on your proxy server, you might need to add the above URLs to your SSL inspection exclusion list to allow data to reach Microsoft endpoints. ### Configuring endpoint access with proxy servers If your organization uses proxy server authentication for outbound traffic, use one or more of the following approaches to ensure that the diagnostic data is not blocked by proxy authentication: From fbcfc97aa1b42d999c059d51493bd7fb86a5c235 Mon Sep 17 00:00:00 2001 From: theznerd Date: Tue, 27 Mar 2018 10:40:23 -0600 Subject: [PATCH 04/63] Updated link to latest version of the Invoke-MbamClientDeployment.ps1 script --- ...cker-by-using-mbam-as-part-of-a-windows-deploymentmbam-25.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mdop/mbam-v25/how-to-enable-bitlocker-by-using-mbam-as-part-of-a-windows-deploymentmbam-25.md b/mdop/mbam-v25/how-to-enable-bitlocker-by-using-mbam-as-part-of-a-windows-deploymentmbam-25.md index 7234d14a83..f317d69860 100644 --- a/mdop/mbam-v25/how-to-enable-bitlocker-by-using-mbam-as-part-of-a-windows-deploymentmbam-25.md +++ b/mdop/mbam-v25/how-to-enable-bitlocker-by-using-mbam-as-part-of-a-windows-deploymentmbam-25.md @@ -59,7 +59,7 @@ This topic explains how to enable BitLocker on an end user's computer by using M - Robust error handling - You can download the `Invoke-MbamClientDeployment.ps1` script from [Microsoft.com Download Center](https://www.microsoft.com/download/details.aspx?id=48698). This is the main script that your deployment system will call to configure BitLocker drive encryption and record recovery keys with the MBAM Server. + You can download the `Invoke-MbamClientDeployment.ps1` script from [Microsoft.com Download Center](https://www.microsoft.com/download/details.aspx?id=54439). This is the main script that your deployment system will call to configure BitLocker drive encryption and record recovery keys with the MBAM Server. **WMI deployment methods for MBAM:** The following WMI methods have been added in MBAM 2.5 SP1 to support enabling BitLocker by using the `Invoke-MbamClientDeployment.ps1` PowerShell script. From d025642c15b5e8ad64e061ed47adeb586d7f731c Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Tue, 27 Mar 2018 11:03:42 -0700 Subject: [PATCH 05/63] Change "1083" to "1803" --- windows/client-management/mdm/policy-csp-experience.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-experience.md b/windows/client-management/mdm/policy-csp-experience.md index 3f96460055..f1e51391bc 100644 --- a/windows/client-management/mdm/policy-csp-experience.md +++ b/windows/client-management/mdm/policy-csp-experience.md @@ -1027,7 +1027,7 @@ The following list shows the supported values: -Added in Windows 10, version 1083. This policy allows IT admins to turn off Suggestions in Settings app. These suggestions from Microsoft may show after each OS clean install, upgrade or an on-going basis to help users discover apps/features on Windows or across devices, to make thier experience productive. +Added in Windows 10, version 1803. This policy allows IT admins to turn off Suggestions in Settings app. These suggestions from Microsoft may show after each OS clean install, upgrade or an on-going basis to help users discover apps/features on Windows or across devices, to make thier experience productive. - User setting is under Settings -> Privacy -> General -> Show me suggested content in Settings app. - User Setting is changeable on a per user basis. From c513ca61e1c05dc5e85ad1f9530c4aca5cc13fe7 Mon Sep 17 00:00:00 2001 From: Steve Burkett Date: Wed, 28 Mar 2018 10:24:13 +1300 Subject: [PATCH 06/63] Fix couple of typos Fix couple of typos in the 'Can I deploy Windows Hello for Business using System Center Configuration Manager?' section. --- .../hello-for-business/hello-identity-verification.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-identity-verification.md b/windows/security/identity-protection/hello-for-business/hello-identity-verification.md index 96d449f9d3..10129cc2c0 100644 --- a/windows/security/identity-protection/hello-for-business/hello-identity-verification.md +++ b/windows/security/identity-protection/hello-for-business/hello-identity-verification.md @@ -72,7 +72,7 @@ The table shows the minimum requirements for each deployment. ## Frequently Asked Questions ### Can I deploy Windows Hello for Business using System Center Configuration Manager? -Windows Hello for Business deployments using System Center Configuration Manager need to move to the hybrid deploymnet model that uses Active Directory Federation Services. Deployments using System Center Configuration Manager wil no long be supported after November 2018. +Windows Hello for Business deployments using System Center Configuration Manager need to move to the hybrid deployment model that uses Active Directory Federation Services. Deployments using System Center Configuration Manager will no long be supported after November 2018. ### What is the password-less strategy? From 2be65c405ceb06afd35feaff3b0d4aec842c520c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=96=B0=E5=AE=85=20=E4=BC=B8=E5=95=93?= Date: Wed, 28 Mar 2018 23:35:43 +0900 Subject: [PATCH 07/63] Update policy-csp-power.md Footnote "3" (Added in Windows 10, version 1709) to check mark. --- .../client-management/mdm/policy-csp-power.md | 48 +++++++++---------- 1 file changed, 24 insertions(+), 24 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-power.md b/windows/client-management/mdm/policy-csp-power.md index 5bee576aca..fc85260394 100644 --- a/windows/client-management/mdm/policy-csp-power.md +++ b/windows/client-management/mdm/policy-csp-power.md @@ -171,10 +171,10 @@ ADMX Info: cross mark - check mark - check mark - check mark - check mark + check mark3 + check mark3 + check mark3 + check mark3 cross mark cross mark @@ -235,10 +235,10 @@ ADMX Info: cross mark - check mark - check mark - check mark - check mark + check mark3 + check mark3 + check mark3 + check mark3 cross mark cross mark @@ -299,10 +299,10 @@ ADMX Info: cross mark - check mark - check mark - check mark - check mark + check mark3 + check mark3 + check mark3 + check mark3 cross mark cross mark @@ -363,10 +363,10 @@ ADMX Info: cross mark - check mark - check mark - check mark - check mark + check mark3 + check mark3 + check mark3 + check mark3 cross mark cross mark @@ -551,10 +551,10 @@ ADMX Info: cross mark - check mark - check mark - check mark - check mark + check mark3 + check mark3 + check mark3 + check mark3 cross mark cross mark @@ -615,10 +615,10 @@ ADMX Info: cross mark - check mark - check mark - check mark - check mark + check mark3 + check mark3 + check mark3 + check mark3 cross mark cross mark From 67609e87f85320666b2379b76a4119745f3400cb Mon Sep 17 00:00:00 2001 From: theznerd Date: Wed, 28 Mar 2018 23:51:47 -0600 Subject: [PATCH 08/63] Add MVC 4.0 requirement to Administration and Monitoring Server While the actual role itself likely does not rely on MVC 4.0, the prerequisite check fails when this component is not installed even if you're not installing the Self Service portal. --- ...-alone-and-configuration-manager-integration-topologies.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/mdop/mbam-v25/mbam-25-server-prerequisites-for-stand-alone-and-configuration-manager-integration-topologies.md b/mdop/mbam-v25/mbam-25-server-prerequisites-for-stand-alone-and-configuration-manager-integration-topologies.md index 79fac92aba..b5cd982105 100644 --- a/mdop/mbam-v25/mbam-25-server-prerequisites-for-stand-alone-and-configuration-manager-integration-topologies.md +++ b/mdop/mbam-v25/mbam-25-server-prerequisites-for-stand-alone-and-configuration-manager-integration-topologies.md @@ -286,6 +286,10 @@ The following table lists the installation prerequisites for the MBAM Administra +

ASP.NET MVC 4.0

+

[ASP.NET MVC 4 download](https://go.microsoft.com/fwlink/?LinkId=392271)

+ +

Service Principal Name (SPN)

The web applications require an SPN for the virtual host name under the domain account that you use for the web application pools.

If your administrative rights permit you to create SPNs in Active Directory Domain Services, MBAM creates the SPN for you. See [Setspn](http://technet.microsoft.com/library/cc731241.aspx) for information about the rights required to create SPNs.

From bcf34f4ca4908f35aa601e6cf09e6bd5aa827059 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=96=B0=E5=AE=85=20=E4=BC=B8=E5=95=93?= Date: Fri, 30 Mar 2018 00:28:28 +0900 Subject: [PATCH 09/63] Fix Conflict and Fix Table Layout What's new in Windows 10, version 1803 --- .../mdm/new-in-windows-mdm-enrollment-management.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index a7eeb7a2b0..b0f80a167b 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1329,16 +1329,20 @@ For details about Microsoft mobile device management protocols for Windows 10 s -<<<<<<< HEAD + + + [AccountManagement CSP](accountmanagement-csp.md)

Added a new CSP in Windows 10, version 1803.

-======= + + + [RootCATrustedCertificates CSP](rootcacertificates-csp.md)

Added the following node in Windows 10, version 1803:

  • UntrustedCertificates
->>>>>>> 2aa0839b99c52229c7cf43d58f467019b1284a6a + From dbb6b40b049ca2e93441dedacb9af84420e410d9 Mon Sep 17 00:00:00 2001 From: SergioCalderonR Date: Thu, 29 Mar 2018 11:25:25 -0500 Subject: [PATCH 10/63] Update some names, sample commands and links I have changed Windows Defender Device Guard to Device Guard in the local GPO, updated the sample command for New-CIPolicy and some broken links to the old TechNet to the new Docs. --- ...loy-windows-defender-application-control.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md b/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md index be8ccb2590..87e30aef2a 100644 --- a/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md +++ b/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md @@ -797,9 +797,9 @@ To create a WDAC policy, copy each of the following commands into an elevated Wi ` $CIPolicyBin=$CIPolicyPath+"DeviceGuardPolicy.bin"` -2. Use [New-CIPolicy](https://technet.microsoft.com/library/mt634473.aspx) to create a new WDAC policy by scanning the system for installed applications: +2. Use [New-CIPolicy](https://docs.microsoft.com/en-us/powershell/module/configci/new-cipolicy?view=win10-ps) to create a new WDAC policy by scanning the system for installed applications: - ` New-CIPolicy -Level PcaCertificate -FilePath $InitialCIPolicy –UserPEs 3> CIPolicyLog.txt ` + ` New-CIPolicy -Level FilePublisher -FilePath $InitialCIPolicy –UserPEs -FallBack Hash 3> CIPolicyLog.txt ` > [!Note] @@ -811,7 +811,7 @@ To create a WDAC policy, copy each of the following commands into an elevated Wi > - The preceding example includes `3> CIPolicylog.txt`, which redirects warning messages to a text file, **CIPolicylog.txt**. -3. Use [ConvertFrom-CIPolicy](https://technet.microsoft.com/library/mt733073.aspx) to convert the WDAC policy to a binary format: +3. Use [ConvertFrom-CIPolicy](https://docs.microsoft.com/en-us/powershell/module/configci/convertfrom-cipolicy?view=win10-ps) to convert the WDAC policy to a binary format: ` ConvertFrom-CIPolicy $InitialCIPolicy $CIPolicyBin` @@ -841,7 +841,7 @@ When WDAC policies are run in audit mode, it allows administrators to discover a > - An alternative method to test a policy is to rename the test file to SIPolicy.p7b and drop it into C:\\Windows\\System32\\CodeIntegrity, rather than deploy it by using the Local Group Policy Editor. -3. Navigate to **Computer Configuration\\Administrative Templates\\System\\Windows Defender Device Guard**, and then select **Deploy Windows Defender Application Control**. Enable this setting by using the appropriate file path, for example, C:\\Windows\\System32\\CodeIntegrity\\DeviceGuardPolicy.bin, as shown in Figure 1. +3. Navigate to **Computer Configuration\\Administrative Templates\\System\\Device Guard**, and then select **Deploy Windows Defender Application Control**. Enable this setting by using the appropriate file path, for example, C:\\Windows\\System32\\CodeIntegrity\\DeviceGuardPolicy.bin, as shown in Figure 1. > [!Note] @@ -887,9 +887,9 @@ Use the following procedure after you have been running a computer with a WDAC p ` $CIAuditPolicy=$CIPolicyPath+"DeviceGuardAuditPolicy.xml"` -3. Use [New-CIPolicy](https://technet.microsoft.com/library/mt634473.aspx) to generate a new WDAC policy from logged audit events. This example uses a file rule level of **Hash** and includes `3> CIPolicylog.txt`, which redirects warning messages to a text file, **CIPolicylog.txt**. +3. Use [New-CIPolicy](https://docs.microsoft.com/en-us/powershell/module/configci/new-cipolicy?view=win10-ps) to generate a new WDAC policy from logged audit events. This example uses a file rule level of **Hash** and includes `3> CIPolicylog.txt`, which redirects warning messages to a text file, **CIPolicylog.txt**. - ` New-CIPolicy -Audit -Level Hash -FilePath $CIAuditPolicy –UserPEs 3> CIPolicylog.txt` + ` New-CIPolicy -Audit -Level Hash -FilePath $CIAuditPolicy –UserPEs 3 -FallBack Hash > CIPolicylog.txt` > [!Note] > When you create policies from audit events, you should carefully consider the file rule level that you select to trust. The preceding example uses the **Hash** rule level, which is the most specific. Any change to the file (such as replacing the file with a newer version of the same file) will change the Hash value, and require an update to the policy. @@ -959,7 +959,7 @@ To merge two WDAC policies, complete the following steps in an elevated Windows ` Merge-CIPolicy -PolicyPaths $InitialCIPolicy,$AuditCIPolicy -OutputFilePath $MergedCIPolicy` -3. Use [ConvertFrom-CIPolicy](https://technet.microsoft.com/library/mt733073.aspx) to convert the merged WDAC policy to binary format: +3. Use [ConvertFrom-CIPolicy](https://docs.microsoft.com/en-us/powershell/module/configci/convertfrom-cipolicy?view=win10-ps) to convert the merged WDAC policy to binary format: ` ConvertFrom-CIPolicy $MergedCIPolicy $CIPolicyBin ` @@ -1004,7 +1004,7 @@ Every WDAC policy is created with audit mode enabled. After you have successfull > [!Note] > To enforce a WDAC policy, you delete option 3, the **Audit Mode Enabled** option. There is no “enforced” option that can be placed in a WDAC policy. -5. Use [ConvertFrom-CIPolicy](https://technet.microsoft.com/library/mt733073.aspx) to convert the new WDAC policy to binary format: +5. Use [ConvertFrom-CIPolicy](https://docs.microsoft.com/en-us/powershell/module/configci/convertfrom-cipolicy?view=win10-ps) to convert the new WDAC policy to binary format: ` ConvertFrom-CIPolicy $EnforcedCIPolicy $CIPolicyBin` @@ -1064,7 +1064,7 @@ If you do not have a code signing certificate, see the [Optional: Create a code ` Set-RuleOption -FilePath $InitialCIPolicy -Option 6 -Delete` -7. Use [ConvertFrom-CIPolicy](https://technet.microsoft.com/library/mt733073.aspx) to convert the policy to binary format: +7. Use [ConvertFrom-CIPolicy](https://docs.microsoft.com/en-us/powershell/module/configci/convertfrom-cipolicy?view=win10-ps) to convert the policy to binary format: ` ConvertFrom-CIPolicy $InitialCIPolicy $CIPolicyBin` From 3c8b7b66b9eaca6a2cb57c5c2512f00c8388c149 Mon Sep 17 00:00:00 2001 From: karthigb Date: Thu, 29 Mar 2018 11:10:00 -0700 Subject: [PATCH 11/63] Update policy-csp-systemservices.md --- .../mdm/policy-csp-systemservices.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-systemservices.md b/windows/client-management/mdm/policy-csp-systemservices.md index 9dd4ebd067..1efa6419f1 100644 --- a/windows/client-management/mdm/policy-csp-systemservices.md +++ b/windows/client-management/mdm/policy-csp-systemservices.md @@ -80,7 +80,7 @@ ms.date: 03/12/2018 -Added in Windows 10, version 1803. This setting determines whether the service's start type is Automaic(2), Manual(3), Disabled(4). Default: Manual. +Added in Windows 10, version 1803. This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual. @@ -129,7 +129,7 @@ GP Info: -Added in Windows 10, version 1803. This setting determines whether the service's start type is Automaic(2), Manual(3), Disabled(4). Default: Manual. +Added in Windows 10, version 1803. This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual. @@ -178,7 +178,7 @@ GP Info: -Added in Windows 10, version 1803. This setting determines whether the service's start type is Automaic(2), Manual(3), Disabled(4). Default: Manual. +Added in Windows 10, version 1803. This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual. @@ -227,7 +227,7 @@ GP Info: -Added in Windows 10, version 1803. This setting determines whether the service's start type is Automaic(2), Manual(3), Disabled(4). Default: Manual. +Added in Windows 10, version 1803. This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual. @@ -276,7 +276,7 @@ GP Info: -Added in Windows 10, version 1803. This setting determines whether the service's start type is Automaic(2), Manual(3), Disabled(4). Default: Manual. +Added in Windows 10, version 1803. This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual. @@ -325,7 +325,7 @@ GP Info: -Added in Windows 10, version 1803. This setting determines whether the service's start type is Automaic(2), Manual(3), Disabled(4). Default: Manual. +Added in Windows 10, version 1803. This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual. From 18115b73deec52db0ecd4129f45c0dec15283756 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 30 Mar 2018 10:15:39 -0700 Subject: [PATCH 12/63] fixed horked table; readded missing text; fresh screenshot --- .../deployment/update/device-health-using.md | 4 +++- .../update/images/app-reliability-main.png | Bin 62615 -> 62615 bytes .../windows-analytics-FAQ-troubleshooting.md | 4 ++-- 3 files changed, 5 insertions(+), 3 deletions(-) diff --git a/windows/deployment/update/device-health-using.md b/windows/deployment/update/device-health-using.md index f14b1981bc..19e2365401 100644 --- a/windows/deployment/update/device-health-using.md +++ b/windows/deployment/update/device-health-using.md @@ -4,7 +4,7 @@ description: Explains how to begin usihg Device Health. ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library -ms.date: 03/21/20178 +ms.date: 03/30/2018 ms.pagetype: deploy author: jaimeo --- @@ -169,6 +169,8 @@ We welcome your suggestions and feedback on this filtering process at the [Devic #### Why are there multiple names and entries for the same app? For example, you might see *Skype for Business*, *‘skype for business’*, and *Lync* listed separately, but you only use *Skype for Business*. Or you might see *MyApp Pro* and *MyApp Professional* listed separately, even though they feel like the same thing. +Apps have many elements of metadata which describe them. These include an Add/Remove programs title (“Contoso Suite 12”), executable file names (“ContosoCRM.exe”), executable display name (“Contoso CRM”), and others. App publishers (and in some cases app re-packagers) set these values. For the most part we leave the data as set by the publisher which can lead to some report splitting. In certain cases we apply transformations to reduce splitting, for example we (by design) convert many values to lower case so that incoming data such as "Contoso CRM" and "CONTOSO CRM" become the same app name for reporting. + #### Clicking an app in the App Reliability Events blade sometimes results a List view of records instead of the App Reliability view diff --git a/windows/deployment/update/images/app-reliability-main.png b/windows/deployment/update/images/app-reliability-main.png index 18a1bd7f3148c0acb1608b777c7d7f20fc1eb899..abbcc72690a1649dd3a062e892372d1c28345aae 100644 GIT binary patch delta 55567 zcmcG#cUV)w*De|hf}nyTg3=Tz(wp=Wl@1C@5dk4c6+w{R*`OjKT|hcf=^$M?B!bdQ z=sh4c^iUE4sWg_445AC3R#`G zelGtUZE5NkriU*t^xF%6AItqBOY`cd#z>Da?-!(cQ|Y6znn%+=&euE)xF762`2*sf!Z#8 zH2!zNrh+EV9K4SJ?X8g9nN3hn32mp9*cO&mxE zMCZ1yxNf#Vz+Y6}#ajXaM`7T=_t0&NaCnP~emxDo#m;Ice?_owZ`CL&WWJ*%$?s*~ zW>=j5`?vWu;OWcddg+`G_MvbA6W3}Gi$(Yd@Y#qs==-cHOPu7TV%9M`7g1f+tVB4D zCV@puee}d*`A`-{#WP~8_AdtCE5bw$ihk)^<)L=sqqs8p3?lJ1-JoNUTvQGmgDvyYU{!)r@3jCZC#db?DktFz3SAP| z{bu4^^E)pCmY6xT_&N&+2%vqGA(z)U&eqVp(Rx7aEjuf&?g3Hp5&gIT$<}Til+)3J4_c}PcLcS%S*LKN07M= z!*J(5z_u6Nte6a@gR+~i;yJv4QBgVk{aIhvr`eyk6u7`Mn^}(daY?<=ANssrDXIsL zIA0$uwd7XF8Sw)pV;bB$c4TF&#$>ataB%%dGz5j-0!a`D*##t*9Lf>W$*ObrlYRxB zd4T>ZSe>#-lgL%vqKrJ__qMNI#d8|E>EB1)JT*$|!YzfXqep+_6phU~c3deDe)-6U zGCw~mOJosnW}|+FZaDIhqZG-(&0s_*Z_0CfUR*931Ms2Vb{qZZneax`?mj5 zXiRMm_;ByMoaCJHS668fhw*^}hhXez-<)VufLTXw1|p&|EGgq6za3CfaNm2+C}fl? zkf^_45My;7a~@fjY2<|{+==_RlVd*-fvoLLOoPJ@PJ`ImF+7H8`%CCE0Gh2B6=cQM z50I)OFL;w0yoNZz=3Wt%MyumOJI6U1EnpzXWa)h!f8Y{M( zo)#FBzbPd)d1*~FyX7iFpMUM@<>I3~}a-xn{wPp=OHiMXJfCqwgA6a@iq-+}36W z@YrE!YWnL+9 z*2#^Y9Weogz6cj$i+lAX@GpWZ3wF2ZU0=4)93}ubUh4OqAM7hL8Qq?#dg%5utWJAy z#>feN>GZd;XW;iY8)+Y>(#;W@z%AX& zw>f14O8m)BeQyHs+V)SGyx;SaSj2fr!zr3?x6D>(2v!Kerygypm`KFq!BtL+cS9+p z+phbg)+}!}-i8MP++X(+GLpu-L$2PJT=AHJUCO!Dptc_0Gl<5^K8+aSX zuz0XjZXKbQWBkoGAXQ)rtrh8Zl*;RrdJ7(x>gD-klZnLiHVi;b)bxl#6d~p%Uz~xu z7vEJrxq^(ucf)eSR`u3B2c{;xGlr_>9Q@vV^QHs+)c_@IjKnhgT7H%}%Q@pXo2>wp z3|H%J=jQnc8ujPlYXdDU;Gy&~8N=2En0YC*!`H(d`tLJ<^G*C9L`Y1@*(!tQkI7QZ zcuREA!#aQV>%Z&tQ}@PlyookQL+=c-#Vm+TGbljV(9*_5eTTbc7Q*kF*?m)E9RK6l z^<<@i=8P~jY0|ClyUnTv?rQndgir&~aqqd6QdN^h7&9edpAH+$d$?emF&lp$EVL|Q z>=0)^l34;2Uh}GP{xRVh=dCBBeD2*1ZF&%!$yw<%Fw;@r04M()X(w9e6dF*pdE24; zLbWRuU}2;hx!2YpTH&qv2YKGN*pe@R*jT!(N?T>9*%Mip@@S=DJ^2V4)QaU$;IX7n=fjQ`84XjB zBU!<7HQH-k0(+MF_1izDA9WJ~@R)Vm&e-#EAkf*rM|(?vBO*JQoug4lW#!z74c}NU zm5n?j89kw~qJJj#WYP^2==G@ZGc@e)#D9(C-Vx}33;G0sfd3wS{;!bi1xBTkoiu6j zM>v8>*6fJD26uMK;Tw4D7HddiN#NaWf{A{^5G<;8?~Pe-D6bhqLq)?Lts)|0j_BWj^CdC z28BL8L!Bl%28UJE8qyF=EGpueOIXO0iH&-`^>6;)lp#tbfUKgcSx|wc>xWN$Q1>yt zN`YY8RRVXtiSJ7mShindP0L`3_Rma%bb}8{OiPJk%(0q10`*-YyuUkChCv=lLApqQH=UdEv$KmrhxzZu%D}ImFh?z036$iKEgQX-*BFxAqJ7 zs972lHA}m9wBQmPjC#v05%!>R-oNv-D+U$Hbv4GmxkvwB7t85}v|WodR=lYG?HTmh?F z5_RlcpFMlksr9JdCg$$wI68EF&roBjHMA6wog+Ttw6m;<5BPDoO1PF@2lNVb zKW9@HwZC7)bJmRSC4NRk)U7P@m3b?Xm;8MEgXzzo1H#E-Z5U$u4J|V{n|vEo&5h{# z@uGrbFc5#KhBLEfJ#eb{`s^>_#&7dEAEEE#?B?@a1s zz8GrHO`mCb(J=(FQ>|aHs=~vAO+-L9ABLSQNrvgc>zkv_e$+L#U=IdfK&u6U-!%^{ z-mP&?f61C}?!`=3F^^DRs;MY53CU4KXcg!tKdtkY)8mmA+#DNMEWUA3u?Rx#9dPU2 zdvA@eT9UW8e(HPg%@O$hJy4fI*6v(pmKHFHU&d0%Icb)O zQF=83g$Ku|!YG}GmJ#}42gecieXIN``NKZ1gB(({d2X+KK_Zk9o#!vc|7BQ_vtt@1 z=?a$HbYX5}j$PBv zP=t35mXw>fFrnI`Wc{+Hm2qN#9B4p(qOugHtP>P4I1c`CiD+|bc~XR4xa${K83cOw z&yOBGwunLHsYsW45T54E@Knwpi?Gw??3je}C#x@ynK$W3-(`Puo8Q7dV)ppliw;@I z+xgMzJ~}@Ei;q`4Z~1>@?3Zl2yGT&K&M)JA!ynN^DGBxVkcr)4e7GCF&pymCmtY(l zUZ-!;)BC|nC23uHS#PO0dBj|UxOH&P@dp(x`lcVYmX?pNE1xedODmSO+`YKZe%W!M z%$_|LnZ76|N>iF~N)5s@r=nIG!-qYPTe}2boh#}GW`TjM&8;}q73p_lqw7sc&e1f3 z`J>3XiGrJ;P>I_cy9>WD@R0%oZbh%I+D5&j)1XkWa!I}xwP|Q{zkV=~so=RaSvfiR ztl?rC9m>;}H`C&_X955NyId2 zO#yW=-Hw{&NBz`TG&x!Ah{)AR?1<$Qu6vxiywSD&9w6`Ovdjs_}c1m%Wd6U*PB0M+z7@740mLd_ku`zqqqaMsjj;fSm8& zmt}7`Qm4^p>zRwokJ)n|^|SWVmJgq1CC4)Dc^xJWYjh!HaJmy8`8V|DKZ`vW*g3BD z3i~?s|Cy|R1EKq$@?^KY<4C*y1zwDN-f?-VPX&c@#`cXYzD^TBw^P-SA>FttX$vI{f8S& zjc>T)W?B;epww=i(`RFH_8!;ESFeP!pELlGJB5KRX@P>sTw)T<=9vtgD^U?w3u>i0 z75VtWRBc=xms`_RFcTNoH|r^lm=6#m%du&RoYdFkFbBkX%S1>g_a{~>>ijtMr+fRG zisqj3e%jmEIc}lxH_z2PwGTRMD?8>s4|OnX&)dqA9QkPPGj3*qEiPwlhWF|^#{&74 zTN73E?B*8@AE$6(nOcE#GaOs#?Hz>1#7&!Zrb_pqVl8}0p_Vi4 zG1pS!tysb_ca_bM^i{+EdJ!K~1hbs9PzRejpC9`&gg>n@FaHi?SvFnMrKsM%l)Fb4 zq2kj~CT1dYtSKUgbp4#odltCb&yM^#zZdG=Vl#3u)teRa)kz}fR*s*vK}KiI93CY6 zO-$(1On-kxl6`W<8LiEf62G9InQix@$`D^ARX$zFE065U4ZjOb16yw7PpvvUnr~@) z9V-?ySE9A(8SV5LZF;RKWn=kG*MGR&P{Bi`FQ3Oz7VHjed^zuhfU^Dof@9Y%yQGQF zC(_W=^e@@8MR<>VwczJHex6)lZ8XX~;ikzeqw zJhE}TU)sh=RT|Ls+yfnBZM_`=Nw!Z_&)9kE7bO3VlGSC=qnc@<9`v$yJ`+s zid?iIc4B=}0AT*`eR!o?uwkGEccm46676@h<$fwS#eF7g*tROwTWfbpIL<~Qr=rrJ z_^ysrs@Z3p#F3N3D$flXXF1cH?@BCzqP9%AZ0)Jp7`wGsZ*gj0kC)kdk978?N^VO# zeW(m9a>G`TIf%Ouxh{!0+B6Q^Y`ay1iAo{*ZTnDr;K?aa@Y&w)rzIZHIhYw2p9UUr zNzlWre^nI@)4V-L{erp~Z{A5Aay3&^MCYFWHFyH4sg2nW)d^#Na*FQq%N^Pmy5o$f z(dSCp@wRZQvAwSt20l2xyO~zxJqP(NA%)_l4L>EZxlzXbTsb_R6Klb2l^k-LP5fhy;63|83Can8e1 z&)f^c+6nR7LxYbZFwtHg?&bRU`a%IkmUM>mAc?yVvz7g4>)k!hgu>pb7QJXog<1ip zj0%$?hxC}kg}+CpznQBSE^l7+6}~b@A+MxpBko&|W0XoU_?UFBb`5YQAL&C9yJ#Kc zVY``eUv%$VHo7-DPBxfaNxQB0=NZbl|CnEY5k%bUZ1P2aVW&=@rf@~>C0byK%F8>X zl?L79m_KMeHc;2?*VEf*EjxqQQM^T>Yxp}H38~hEcrUP#k3D^GhrUa)6`QYaMtkXP zq!vv)B9%w$8Fh#03H^M@^R~4%*DxXA@2{{lX~&-JE)-^6S_@1du2mx9LVSo_LrbH< zha&7c{S=8m`F}-70vxJ=7lGD*DLv%YSxH*(6TCGlmfN>GmqD!I4*s*w5G&-WDDf1? z+V8$6@JwRc0 zUP#8TIlpgrhP2U%0g+3r(r!)hLaGL%z=PZybZQ9!`=jeQovHQ9z=K3`^3Lti*1Up6 zx5*NsN(j+&J4$SpO`3n>bClTESILxAj~0wgV|Q@sCmH!=Nf1ba?q2SPGbmNFq}?Uq zXKtea(tW2q&0M7^hwOH~JUfB#I~~N6?6FfGvOh*EVq5sqiLAGIv1j%d=?ssI%k@({ zH7_=2BH|3~*Gu`m0oMjWyERsUfa7IFpsisD1!Yy)YhF7L*oC(}qUba2FchlQ`S!65 zeQx`a@#>Lor`cGiOZlpN3I1{4+eixbvM#MCBJ7=(s)8Sec@G!AXzjWx?{}0+S02IT z{J5+y_>}3-zFWcdeR-E;G(aG_D<4NC{`Qop9swzjm=)0ofVJgdq#MGerjOl<6Gk$h zH{`3(=3{mx^f*GmP(>d%K*{y@lZ7epO~c<`F5fg1Z**N>$boiW98eeHld&%<(!t~2 zMxqEa?G&l&0RsxRivh~|h+|N)Foko0+;_`vry!!w&9lYYgfqn|=+;d0$EOPos4OLN zvuEcc`8YDbiJ%zb8kRb;Z^zMsqE$aU$juhb5U^C!9xW~%W;x6a0WZW%p|0$=M^VOL zez;T!X&Fx|g0ZI@Gps1>{1smNAlLHI*h7yv6&;BIK90_XYGZquK8{*)dvU9JJTF)3 zj1F5V2M-z{OhhKi186-*vP#fpR(HE%w=?KSJZIjsoZUlfK@ju|V8&G_6K*LNo)wGngE?(ie5cNbqrsa6` zIzrwVPHTyp~|F_){a}40_~^^FBP3fM`_{7%qvXBsg%i*s z1H>M}F&gXi9cras%+pGe#TisQujHTE@1NXD$?nuN%Q{*#Ms#Xr&o^(*2Ujf^Jf&^zpa#ymHao;D z*7$~pq$g*86%=~k;iLM7o*U&8ti8iDF~yH&|LP|H>`s28ucx z-FoWgRWy80^Eom$Hhu2J?IdNK&dLl}P=B4httspKnbi>oBaz1tT)PQ2WGc_w*-k_t z%KLIZ_XYhOO~trDa0SZ;0%<>^vXKOR)D}1>H?Fdr2Rp#c|I|t;mdm=0wKK$WZtrh| zhaS^gbIuD1cqrlOQe#C;uSx*GKYIm`w_SYZk-t(tvpRNB&D7zeG1H|?MekKlp=Sp4 zD*^il2)H$1kV%Xdnnr||v3xrG!}{QFcKm7FkM3-xr*|86SDO}=}sqj{&25oE_xF{l?i4BLmrMwh@Fu<%Y)^n z97VJ*8uXrF3Q$!dhf7)S9N0oDPk9>maw#3su!C{eks5Mvc@K;{lJ88=p+a)kzBPA8 z9J|t9kgU1u;xS5d1kOBQf;4W;Rtni_K*cKga%{er2q8`$bQrBcHn@Cu8f=T;lN@pb zsNV|BmB5rsY9IH7v(%m54iPT3u~IoA??eFwYb>0G`dJErulmyJD7dVol$h6prVpLP zD|TfM5fDF*PR{i0M+ruldmdGX?RBsQ+KHTuYLB%w_eASY#3U19#ZSMu5VEeW=8Vt(k!^U3$8pUs+er&o>Ca9E@7;L`<+Wwrg0_d_n zL*;3c5)1S>sh%&@c4hu|y3!f?(%T9e9&h<4`C8blH@cVkLh@OYJwC;sL8EKQWt|hNMbmT9=kzts9kU6VB#Gs= zBEtAIimyAyag+Oo2A#&^jBZf$IgjovRa!n8Hi}4Ecbu_uOKZ}=V{;6O1$CF|Z+Z0G zbM|J^C=Rd+isOmYb8yS>v1=%=t#H4-qMvE0C$Y#almx{?7~7GQrZf1-K$ua>jrtdN3Oz);MofiBi^ zxWo6nJDr=VcreViXC*P;o%@VHoGPVi-92}G>>b69q7~d7pnzKg7sPS_fgU9AwTwH) z=4Gi#y=h;kYDQjve=PXAv;JXJ)t?U`+k;EonMWT<+}^Rr%d(`>vDVymO6)HEb?ClK z`GLnmv2f7?zJdT%(Hkq9AAD4Uf0L}#4sPrew59#V-JJz~k7U^}f?oXobAV{VEHdQl z!@N2$g2o~PF;Gbg-r4OTKzcPUSB5xVz3402bF?>1Lj!Kcwyw;RS4i{1!Mg)v?Y>~_ z<_ZFARpIn{0WwYsMB*bdJM%AT*o zu3N?!z*_QbW_scNOK{3k4JwM$K;;?f4_wvs3#Ey2@;Dige>P$B>T5OEcb^jXpbq>XesF#f}dg_ z!z#flqumj1j}$4-VVojJ^j5TaO)@D2W~(zY6gLoGIWz=59&+h4?JFx3hawbNm^`o( zSDN*q`#|FORIhku7lj*yg39^UuI&Ag@1!)9)w~%Hh_j+hW%d19PYIdW_*xZ+?p1MN z>&!C}?`2VaYgP$?r;>g1UlVBO#wUi(8s$juIDN5Dq~Abza2cdsrN^>=L-p*sKU z;1I*AiXHUph=y;^n9eWFxP@#S3Fnruc3iS9>pA~LFt)7$qAW#ln}%OIz#2{B)!99KT%sDCi^xT>|6JpkH36l!~5w?$kqj>VsRCQCfZh{4U zR@O{z?>*FroO)|6H5t0x_4VUu%ADfOewTNYM4b;xDMaVz@%cUH<>uQO6Ev@N&f`&w zoY3l9dd%YZm8_Ji)=mD*IXr%5B83(pnqaF<@3NnLYTYF2u;nK!w-JduBsM`uwZV+-mhf3ugYr9+o-Kz{0F6O zPsjOYCH(+uhVhZjT8Hz>6x4*flZsZSH{wXnv+>Yd}gZ*;J zV@mrb<+sw*Y4OFK5Tmlrsy7 z=oa_)-fuWP=WsC3ycgDoWr%RmgJP$|W6C#&)g|<1<`lLmND}BB)NY4aLtO-b^rnE|9LC8&leWFH`eFAnw7;r^5Zju__G9; zfbRlH$Tz20-vH1$QYqz7GkNJE8r<5L|GCoi`C;3m#+{2hjFb*ju~Z4tCxLfcSb(fA0a)7O&V8BBYUxF?(zDS9{X{+JaApV?>xELFmqt_UHS%oxxHkNN_im?9eR z{?LU3X}5a(UYg5!m=WzI<(Fh3E&?_jLN2OPgr+Y)Im9U9*y-S7bQBjOMEX`60r*KTotY6 z$^^KMc+kG3A3o}RM<<9uV#!M7b>}Nt!I*x%vK)V9|E**>O>DeiOnuXQlI@Y1G}yCh z!I)#}7nCgTyK4nv+o6)H30i+~)XYnU=hbeAc#F(#{`OymIxqdZruq<~TMohoXO)Q| zwzgZ8bUteKh9Qa+LfX^@2xJ_JD2)IPb4qeh<~gW=T9-b9t)p>`A4;of%s{Yr-LXh+ zgaIZKXa$JQHoZ8}sP!k~YvBhjH5#5)gz2-jyIriE*+*!xk;n&x-#bY7&ay_T-;g+Z zP#rY@-U(T-9Z!3)rNIh5803%<@GMPX38tj`0+Kj4GggQ_kJUR{l-5iGaNfJkYm=77 z{Xdfv!@s|k)zY;o+Q z61^+FxaYXKx0~cck`pkWAsd@U&WJeR?}o=F3%*BTVI8)D1;kI6KA1$Cb4tLSlna;r z=}Te)^O4s!ZNcF6;}O*xFSqiT*G=BvGCCRLWu~HcdK;pNesImIi81D+`(>pCY3wwe zRv|<1T|FJ zZ1<(9X{iE0PR#)x0&DrikoS0heXe~*eTnQp4@2h1d{y-S8~b^C!W1~_2uqBxBX<`i z7Jya!h&7ynZpZDl%c3MSYap={urk>R81j4&dA#++{8v7pPcfK?oui(`)x1)ctvBbq zLz%oziP({&<}?F{UsM}DfSt_{`BCqS7ss7IydZUCIiD(?H9;=ee!5YtV?a@wAZL|7 zSG4QCmPgDSe#-D)J z%YWVrNQ>Jzj7oPxid+BFCkBj842T**EHi<*S-nmxS!~tYpTe%qTO0v^-<*$raBbaj z?+2!5CxY1b9MnH_z9HD9DUWoCvd7@*rGX0q;U`Stg^LM7hUE=5ZA#$~(vWiXirT4< zcClGc9oiKAwlsjwnGxvj*7D3rZwq-0H8$iNtS~F7=l#2L9^|SXL4!(vz-q8Ys@-@# zFw<+&<@OvF(XAh)uNwX)#J0O}FihE4Q-69-{c;fxwj(WZZT@``vv{1W*)kXPHubpW z?qxwkabY=}=$4C-P9~`nrOUfE`Pi&sTKO6*K1FZ?G@fzlp#GQQ{|;>on+885dj5r&H5`5cF*Yg!QedL_8ZEHKC%;NY{1xglWdpaySDHumb`v@SIB} zmj1Dj+Q_1q%d?Q}%>gwzGT9Qi{x*J*W*jmrUqg)9A#jSVYji<&VE8Z2VjN>J>}RCzRz=>Q^TU+J@Hj94sGjn<{0w^%IL&imnDJAU>+PnZ%;k;1mhwUw(tj6|RxJnd z+ySa}gb@|q{vVOqf2#Tr~L8 za_pz*EjtUSp@QA!I0bwzToH&%FoGs96U*O>z^yU_yj}4rJ9(Fi#{w=VkXKeKE^Bl| z^F2XTz>9x78_5F$>!QEb6PNqWdu%Wq;_i}yTgiC*ApFdWK6$XNZ>CPigL=bCRi@B+x`NUiT?ThH;0kl;Ni zh`nj|Wy2b9;#G@fDo=MY;b?vNe5})gkZr9yFaax3Jng1=cCon{{^?zo?+$E}Q))r# z`i0Op01rs?L$)mF~a3@p>(`e8bT{2mCTT5fTFGCW<(r(NVJ9M`8!1{)nnmk=eNMz ztZnKm5RZ(X7(9C@Zb-&$hcYvlqXm-}{T()>el~J+ zW+&hfwXDGGxzU7>PS`MbIt(`sprSRl2SFOI-alHU;L2>PLk^xw&?i5rS*J2%yM~3p zP3;bKjo>jU_wBlJ5kxH~X%Pbu<4_S}S>PXYCewr1<05GTu|^MU9n1@vbkO-r`)u2n z)j+8^|3A&GlwRNX@>#vImc&Wc1YtLRBe=fJmF_$UKdZg~3UcYh|1I28FO#SF5K47R zl+8nNOXY=3Zun0^XNC{O^neTo;H2}UQr8Xg5dW(5N}Ibg44daHu;hKIEjg*c2YKi* zO1kL5eB$7!B87+byUm_EP_R8EA<|-Txly8|QPhurVC?4ij}>7?w_d!Y)qj$J&uds-_JnWwJ;pOhQO|$e40yFvKamhE z!;WvhUOCjM5&#Yvpxl&h!R{LuNWF4XkR3Hj_9{@sSl)bx z97pD6X;<=oZku>iaOq=26#*k89?3cRWF9%Dt5?x+|g z$L4|H9fiKuGZHPru{Xq#4?NF+?m<6}b`xpeQ9G8qJvpoHfflE%TdPu!&-lm26KNf| zqOb5^zZ_LxXHI*U>35vAZAM|re_FNO)eh8|#gYO{I^TI6(6So5ICaF&DD>F=j&IP< z{#Om#4<1|s(n-C*XYPTb1|MaHKXRPrymnfo@%N?;y^K&*MI3dX03jJg7DCU$1?;y{ z3w4;+xU0szmsblY{+Or{1xO2qaXv$GFYM{{)6u6jL$!ll_ZkyBYsy5(UmIWd$piTv z1K)t6)9eU}2lqz#ys-+l^}TJhsl>HVmA43wF0&n*86vRLSv!#VLUk4zE}wJG23Wg> zT~bP=F+I{_tnEgM2rVFj-m4uwRterXNHlgd@_$6hCK8vOHdf(@khNLm3(T94%%@0^ z;<@qVYlyK*1gS`sw2JlzDS#M=uHB?a~nM;@7Ag> zcF`>o{b`DIMjHErsp#RiD}pL%u^g1l@47e!!ETz8tMzv)gkCEIB$#`OF5F1Tmmit# zh#eCt5^0N^d4JkL=-8vqE8}22XM$1@kit|%3Hn>omiPecv=xpiWjBFu0)ur>Z!RTw zd?2L71&Ld{X{g0=`(Eyj(~hz`k(XKR(+^_}UXyr3`&clo=-;_aKI3+&nqs5MzW5)F z4e=((EiL48dcC?gZ)U2arEhMj-x2zfbyLion+y$7Ih-H1Ex4M~ z09*}IEwcVwA=X@cd7}4gN!Rm7^z2>|oA%%8(Ps87@ECR{cXVy@j(SF#& zy8t=(0diWb`q$QP2a#(&r*9_R%e|!XN!$LM{@e~Y(O1L7<-4)?p_pOJxRDBfz}>4n zSOhrLf9p>g1y_KKh;=rg@SRUVW_h(|1jZUS4+Z~~&VMYf0BnuS$0&IoZhc2(@?2oM zcrW*D#apb^*S97zBUJ#@OK(9~LxRv7E^gBDaGn00*nyqvy638KMQ~JSrnIJHqux~U zd9xzlu@+;jRHR5yM>PBIfX{>T&yM9jxn)boUPn`pEawbfQ-l|vPgNWA^VlN@ELQ7d)6gk2jKzHx{QOvk+*?1o&+ zK8Btj7-t8GuLyZp+ z^27aalGI?&Ah0-38qjZ{x%(_ZcSvJ+^H&kWfQsWqi0ej3Cv6jBkXUfc^WgUPl)kD4 z#*hTa5}s&h7w3E~_%sy~s@^IPSbCeR`>gmKB2)EuezbhBX1z(L8A;5$d~yZFgg2eZ zJ4njFs~yd|l^@Twk4M=LfanBn8s4u68k4G2?)9O@+Nn-To%1HG79-b$Cf3S>Jn3J{ z5F!QitXJoLbwD(!bgo>IQ2eLeVDh+W7?J)W%~DwVv_YE;|EDQkij1gF$ZR-ejl9*b zqBTnk|H$)XL|j3x-KVuCQJ{H88FNJOfm8O}RhKTZY5Y@b(J3$$eRX@tCbx=r8lpJ> z3WEB5!k#f3J1yfVA%C2;Vve!ilJrXC*VMosiS zikt{-61ry#e6sAD{e3wSbHM^wmy(bj6$1&A>D@oozLlh=?CC>KK?`b9rhbJgH4D|Y zLo3bXMh#8vZq3dNrwNl_1+^`+_ik9t`IsuQ0OhP`tpJ!_0mwvcYwx%q7ReCf2-Iw^+m%cgQ^!54r`i2#8&r%_Fa)G6u-EH{v z?uq8@`^jrlzqv65#@4Bhd18Tc>_J5bu{l8VZ1OHvo=1E~_J|#;v7(e(;t#-_^jVkXaE||%v zC@Lxn3F*2rd#v`QQC0ly9UVQ}VS9U>-00Z`&*`5|9_%2d^ZySe2~{GOt&_+f!>RPt z^*43B(8-B4ZBRY?HGs6i4xNnImhXK0r@)^Z98P`??$N$j9#8*8cr z5fejIb)4>@WGPoj7*rxxqy#+Kw127I_KiQJp6y0FFK`s z1E}h&8N8qo^<1jvH7V&?>@3Lo>VL_2fd6m(>My1tYF_n3P8lg!$954H=zkQ!+1CKS z?>A`6_sJkt`s-pzI}7d0@Pf0PofTJl7M)Yn?2)jDRc?z_Az7E*+gk86_} zJaSkS*}HB#UdJw@K8XnyqEsEZ4OnMh7*L`NZYY)`+k1e<%`!*m*K}o)yOl>H$ym4b zwr^+mY4n;RC$dQiuUYKJ$Je6=KKSl5I`7CXJl)D|lNx_R zxrm!L2)@hiG>i0Q&wJ@uATRZO&38`+kIdKoxe)2g70DLE<+8WFO2W;%ReTO$0nkdz z<}hB1=K$VvIjd!sF*M;{iSLD5Bg5$FL#YWtV+b-|D2_@y+I^_3#(L(Jmio`sAkrqa z*>@<%H3&hiWXCu5%(qHOnWwHnEtq8H2MPdv*C@6~-Sf3axtX&*hg%uvUg!?7z|FKr z20l1uOi@75+9!L)`c7mM;qtgOy0qL53jB`tC{i`t(Zw0wQSR!k6YSBrEQ>#+(0!$} zJFa$6>3qe7p6CRe#%IlojYqk^v;x^bLCJn93y?d~*?cr@`Sic&{&}hoUoZq}{xhI- z5nsGOPH|)YRDBQcrzS(suxM)$-RwXKVS%3eM&JL^BKHQ?oLi9n@O|M?l@Z`ddVVF$ z8+0%J#Pj@O`mK27Mos%q=eo#z0@O_}!AkR4b(sq?C7307VNN=`Mej8w?gIWv(D1H@ z|AC6MA6p)9ru51c)-b#XZ@cLLtn7dmbUUu_cLd`IMIWjfyf%1iWO3(m0&4U*U-rF98h4j^hy|e6%!kqpW#9KUqaeRSTNxd zm$EiDzuyPyL+G+4Z95)j%DZoj7A5jOx}oIr12YyinxhqW2w*Tlhf|I=RBGPuKJ>P6 zcE_JTnE?4XAVJqeFxV>yGo*#_e?U`$Ihl*Mwr%gvV^$tOB>AZVrxRlW28K04vQ#-Q z!;6QU;1Fe#l3~5DS0l^<`oE&7{`@QVU`lVj`x1se`FrGlLJX+w?1jt|Q6E)y9MSq2 z2>4I=lJ)2y5-DogdYO|`)KYU7MD@LcZvR6)lO*Sj@I7iBKj_@sa;9V+EM|SAGnSK? zns3tm+FR;u(bO7xv>`~XZ32bDJTYre#IuUc3?<9BK};85nnpr~C!%VQ1QXHxgfpZz zI&R=(NAL&jw$h$dJAp3Ho@{fsxj=MFM@I)MBYvsFOW&0TMKqP%XjWL zxjcwQks3OGy*cqagG}_;zdvXF^Y;IAbzWc> zm?t7I{_}p;2lpE+aU}`|!;|8+P7C=s{VP?~8(a(0Zmn@bbHr!o&fNaksC9hZvEZo5 zH^p_T-Bip7p+r)74%F4Sw90Xn<)oY`utjbkaN{@cQ$_4Umb0kb&6;6?YadgB@!iX{ zdJ06-yIq~H5v(CN{#peJEGCP{q)7mRm9|mkkuRODI7LDI4czCS)+XC;QLC?l^(WCo z0Y1rdSfV~x((X??*|P&EID(ml-9x;0A#NB|&1R@KpQHpB$fk&BXW-BojNPx*?yuSf zl{7~NjDdgfm+~pnKjx-6aBEuWw9lAFrO=dEA8?hLibwTu9P++EMP=VU zSK43I``{^Z_h8mt=a`{hTe38BjoKAuJAStr4&gk`j)kZF66r^+sw0M0{ zwNCkGu(K@*2wDNS&EUy_p_e;ka8HMgh(L!PoVfa}N9mL7HVcf{JTkAAb}(EmKGR&I z(_E@#&fetqkkG*kYn>zv7YFuS3SQbvksbME;e24!;5MGKHMwoU-N(B<1`k-Lo-B+! zkem0jap#!t*Ve9IXp@_FvK`=bBcb=)%Q(>$!UGM?oqPU}M|N{bX$=NLezLQHKyn`f zA+;O}dsBE=L_6OC`~HP0>f1fHehjVw8u0k{`EnV{a_J&n8|f2f53qn36W=Y<(xBLs zl_@0$`nV^jfvYa%f#0_B)mD1RBtCyLkvn-@ zSIvPXYl!*5^1+s~CEwDmYk$9q_?swuqgcvS_M(7%;;Q{MPm+*-HxPaE!~^{P)4GbU zWlvGY_lH|J%k|2|+s!69mo@FbF0lFX^`Uk%z9fP&RWzmaOWSrfe8P@0Q|?$mU-_;Ii*WW83o4Y~oYoW2=5`Zn!hBjHJa58z+Gb||Ir4|r zp@UN5v)tU^Z}#c{quLf+T;g*40TkUIWiWb$?i9+P5z}^td&`G&ygTOIqZoj)>Ko!u zhyel{zCcL2_sd`sxlUS&OJdE61OegI8aZ-5sw$OKMvGTH}w+)D-yQC&wPEAX9OpmQ?xmeTM&wwYQF{tJ%H<2_z(V@Bkq=1b4UK z?(Xgcf;$`60KpxCb8sg(f#B{AA-D&3=ndb!cii{u_j>f`(dQo+z&X^e+I!VnbIvsj zWuHw~iv$jgZ|#38>g$|u*<;EwzoodP7JC;9uJ)Vk z?J`MJ-a*;bA?<+oeTvj06#+X1pNU!zw~h|}XR$4^l>`=-g@w-)3l9(V>kZY(8q`qS zGqlkMrEbOk=KcgOondCG+Gi_|M+CvqyRA* zsq}02Q!Xbph(kR&Vc;kUgV#+Iv2Dmdr)tuI zrw3hl>&~>KB=y*JvEblNoo&q$yCOR!W&kUjj?|-?^u^^d9v5dn(?V7ePNmcF1fJ{G zvx%%GatTkxl&eF-lN3H!5!v`XK=R;|{ZIBI`bNil+ajlxJ>9QT*L_Ea>1PGE*q&Ry zTkEx~Pj!rb&8ag%bTATzS?6YCCvbPU?gkMHrn>>9ISWen1G{0) zwUxuOmX9VAMdrk9)`#hB*GD%iE6!hrjzu?mlbn4X+2xRUU^jKHgsP zKRN^-+*~bhLgZ6S>TOH4aSD+hw#P`+Wa<@rI2Iy`*(Oza9XB4A9vSvVDyolxIs$LE zjk}t4z~lPw%41ca?mb{B;HqT5L%Z)9Ilj13o&ihZ*FxadEfb#@Xnlx{^ygTwjj?R! z2w156JOD{;v-5wbdgn0w!)4_$cyW|LTRD+z^WkP{o^^%yY&|N2K^qIs0bTQ<^1yb% z+3UU-uJX8=*0%Lr%uGz%usku)K419pEdk<;v8Uy9yw-x|f))TO9J8f2!c@zOgKL&y z61`3zm%JVbyf0&bd(K0t71!^(@%;SeRy3Z{I~a`i&%ypRzD(p2f}}<;!_DnfjQ`_A zjsNXwkK;tK-1^EFoE5C2_!&Glo||+l&wXP3mv)OwciPtkC`-|$d$vW4%m;d9?)Oo9 zDShlpXt{|1;f7u-|3y^W!&CxrF}=+Blg(;+Qmzr@ee41vm2|ng)mr}aQ~`MQ84}dj9@8JLt*<}KSn551O`&miN`KlsH`GUZ2x222y{6*NKOT8B z)*go*eYlZwX!_WjLXo-?y}rJ>mO0=r%6(Q<=>7+|?p(PoD{F%U-S4e5SJ`zk)2`>2 zyXjydU`Khavgf6)?A=%WI2=&oUw-T}vriQW++nq~Et>CcB3~#^7t{6FEH_^Ep+nHy z-$D4S^>7==-rJTtoS?fYt)*O(R`O8Z?tEq!yH?&{seKvzdi^5g#S`#=Si}A(cNrle zDF&3d={4=l<~MHY>Qd+joGiz>Ic(-FU9CklfjW=2Ly2$Lf!4_?nk@xG13#)-He5BU z5;?uJ1$D1Sm@fGN6oTJr?gQvDi&|`@RY6Pa16^;A25)K8pmlC951|VpN*eXh0^;e@0slbu< zdB^L+#<9_#{%}f{uN_2Y)&s22qdYx{If*Lb5TTb?``8MGq#7)>Zp|K<)CL;oBYw@+ z8qH@DJoaV^9xm1hA|ABmd0x_9ZXj~RuELU^z6N8(yj8h`+Lyr;R)pB=Cx)Ju#G2_5 zMlR7hLbH~2HyI`OS&9So4iyLh`%t**nDYv6msV(8{z;2RQD8qR^8Wy)rg3c32-UQ! zimjJ5ZkjG*Fa-M_Sy-lrq>kwRgg!vEV1W54sEfdWL4zQTIL1#r77Eg)P!`aqF`f=p z%|h>9iDB>mQ%-#c5cPjgmZh`vTuU(HJWjSa9A*&Rzf1=r55}9_J40~*t|GO{dAi++ zJ7 zd+<#n$3;{B6%y7bi)9)aJ2#ohn|MnM;~tIFz6}FY01gt7n+Ts{%E2#HvZn_JlZx!H z>Uh5mMGn}PY51n0!p}2b5$-1Mb^Q`M`W1U2eEe>gn_0tg?KRRC60%byeZD-TpGS+$ zR*E>hbdmBF#gU5-Yjfc?*EHVzL~Um8_rvB+{ZKZy9M3Isc*ALW4$p{~-sU4KM}u(d zAD)lTm5)z_VLMDg**kujM#o=Y)n4Wbki=|u0@8Xh+Y5@wJon`2A+PEk!pW1pS3L8D zQy;G@>sacEh1SX>d1sK6uG354zh@nuV>1plNh^7>U2t*J^4Uv z&e0d&-XQg3xEE(bXJ}LHl$aFkz~Rl6hO_<|Nwb%p(ahGuEI@JSrYM?}RTfN+!94MU zXG~*k&{FC&N7yNqxbXRZd`e<~il!RMqu?@8Y8Bn;(YAvp+50+h*eF7-&a^{b(1lZ- z7qWfQMb2c8PeP>M=#PMSF7jeW8kR#YrULTW-mQFh+)(K6_4<(U?)5pfT~Vs35;_#a zeEYUHIJi#P-b9h~2iLh~_i6WsKE%q!xU{%_D?cwr&#-JKsEC1->Tsk4Mfd0v$oFR0 z{k`bU0_h-WiE#jEcMyy;Elk%o(;Aj^6A%;N(P() ziuHflia-gXfHmpU>;H=34o-x?f5HCB4gCdp&#&;~% zkgCn8Y3q;D1clPM?zr@AL_H15W5nt1X;TB#;tDc-icM!wIj=74s&XSp2V`K*fbg1_ zbzAkOcZnha&k!ErxcTgOT3kFOyE3j6!h({dnrW{LLyEXwUn?j2dP2rc)t}8=!y8U` z;wRs`_KM%ydh#``S?+EZXk#1$^E*jeY$H2^u~j;{7Aa;ju6yiQlroJam~#6nL&=iL zMNx7|K~o4+n&L`iGKZm6WB{2=Zkb`9pP!{$v#^xf=TDOh+JUK?4kEQp)s5;_?g>f8 zgHZ(mW((A4`jSQ#uQX~nL~SJ8f7BwfDeHgtFj9c)^G9M8d`9W952;>L7S741+Cr$b z#}g{D>P&?cECi*(Es%4|ESoc+iDy|LpO^( zF|;g+zb_b@1*YSgdl%rduQ)ukA#P#zwe&-hWmdMN7w=LBDh2U*3~=*Z8hJ>IKS{8! zP1B4wc53IP7^W0Hru}#?LfwdkY(uaZ4XtvTYB-c)qjVZp(s+stMbZ%B1(V}TtoSr5 z0gTGCbB6i-5rh)dCE(nQ8qDW@X#L?qOi|t`ZWICRYgZZzIGf;GP>vz3kEpAp?Oj-% z!sf)C#ar3)kS(XXeKLLm;NKYSS1X0&EN1Rk^vtGE#fv(yEpjspFpB1vm(Xr(jzAee zqgsvSX+4JdlMdB62$dT?SX*2Dc}#sC>}-|fG-+*lyGM=76?VwohDnU^+9&VZ@e>|E zt2T?^71Tu+Sw)rD$0xqxi)cSG<7}^(XD()fX#>?Sc~TRoawWuW&8qJeyn#*>3oPGy-9d}5xErz)}e^W+{ncX6Nd*rK>9}3$Kx3?haL`8n}{-Z_U^}e-W z0W>d8@yTpDLOQO+leZ!$UI(psgn(dVnM^(%&{jYcrM%@L#qm{7iAHtyzmTAR!Fm7c ziw8YxdNX)E$YoMkz+U+Vq^F4R^!y7wRj}ae)9jdSbdiii>7D9Kb@D4OZsoCWBo&D& zUdh+mi>uS9{T6jljW#Kc%($wzgO-Qb6Ylam01$XahSG^LL|bk=F^`or)1WBrWb5+| z{5T&4kv5T{_lA%`Lz$(A&F}d{!DevZ1meHq6cZa^>VJOWXm)-=Xrgx`xmL32yDi3h zMjZXh_w;*6$CsRufuUOrrEntcfj8hMAtHf2x=$m7GUy=;QI1M`6sb&LP3TY7m;^pR z>y|z?$F_G*IbySWx|dGS%1EBuGuj-ePcu-FD4Tk(c6Xe6-dh2Cb`GaSG3X}Pr;EK+ zv?nFGc`xPXjXA40Qj%5EkMh4arh0rCl+21!>hObX>Xt&(kV+ENY}F>3a2j>78cU`V z8RabMa+7Hs9UI?M*GPCa8Y3fJuL2*BPmS~H4dv5T~XWZVsoh# z&o9*B5~4UJYCGw~X%<@=)qa_*&cRC4BR!X-gm$z1i;Mgvl&W_=e^k2Pv6fo3*x@`( zB@9ArG@2NlUz|>&nSApGTpAx#sa}zys&_6HSdeAnm0$0-x`*iI7~AX5R{)(UOgR_K z{E3-It}1QWNolG$7dNFm^_kStwnYi!Y9;BoCLt|3u7Vslv=G9GT^YRDcQ zXu)r}2UFC?-M%}?(Zd~UCzad#)qwDdOis^NC=_amp80_#oA*hIqMA(pi!^Mj^N;bKA zS%z5(Ev|dImxd;PzK(6!H59`K)0w91?eO6A!~cHKJD9j+cD`q4 zW*R!1wsg2oEaH6}3N&%=hI-kcSu77jD`FNJ$LHvMUC5{wf1ay+lA%Nt*{Cgv(L!gI z*nkG-KZ{2S4!vvE7N_*YudJ!;^BwUP7U9BU-k_Jz7`ZbZ$Y>8Ul{uM@m6Y8#o*Mt6 zP%r74HmqxXPg~X4?yl(^S$Ef{m{9Xe8IsG|Jgt5y)LsHyw6-_0Ofw1DkMOOUC?Suj zmH#sn?8*Zt44AaL_KA`LlY3O+XNh{>ipidybJUTy7ZMwFdB2=*Hjx)~lWCBg_Stzz z$~+CI`{mC&X#i<4OILTUya9wGMdOm}$SbxY&1TFG@s1y;LeoINMDgP#ewJf8FR6ud zcN*|g&4VQTv;5>&FAL6UoWu#g?Jg4lOT7T`26s<6%O(uddAeD8hy9Cti*T~nOl%iS zoN1TD$b*nbX+)^)4eIzU`%|o7U>eOoC%`RKO~utxZe41av?=N_q^;|h!L#lEYk8Lk zZ>@sM+{w`#&wx} zF)DIc+iaW+3>@S(i>@u)#H{;OM`WgquWGFeSm7#BDR;1;YC)f$E5YaY8PdMmtK)Py z%PWANJ(oOZt0${Wvz4uzR4I{_-hvg!GCRpunM6fbBcje~Z3+D5ilt0K%jo2=08sz3 zFHWD82=mZsSf~o=Vf$FYc9t}5oj}lK<_u3+X3@JUy3w6t$=-*`?dRj&qHdT_zO<@s z?Je_?bXt&VfPEON<<%s5(eHid3FZ!7T&~?W66>wMrs(8+Ra;CmHm|rF+#7l5in}_r z&#bayE3Ev+B?8ImbDVWvNoi)+nga`>;nX|%P!MEp+qU~U$EOAMBIV-JY{UqX%?(3k z9yA%yR60CT8JHfpFvg}Y+|;5WP0WJiM$l%;NYE9n@`X!<>&j=MUEffQ{O!28_!iK=z_yW81+eYnXLIOi=|NQsFIOBTx zk-+dm|Gs`4bC$YxdKIsIOE|6H`hw71v65H|C_&-JE9P_0CLc zs!sg*uV3GT9;U{|GifgxNrS!23e`92CVS7wMHBmX?sm9_uem z{$wJin#QT672D)~W~Yz1}T0SoOeQiV~oP8ZfffP|_@`Ww)kW>W1}o!8^6OPP$d+sd`;KbiZRuGSGMP7PMmqg^aWwN}J1)ye_E$?Jc?>zM0!0{_ z$HgIp?Cv9Wel*;8P0Iw}2zNBltg^441r8G5m5b58^Zg@cSus0prY1v7(3iiz1$HTO5U>tzUVa~$R9kFX6*;gVJhF0MTg%2pdYAE`J2AvN@zBfn zwJd3c$K|0M-?eb78V8Z(VZ8|^jp<711;7bsclhDH2mYL>lsidINKD7l6PD<DDMhI_|8ly}?8s z7l5VlYkzTCQgL%uqa|;XGVq_mNlm)c+rrvPu}DXNQBZ9fm5g5)5_@(ftv14UXc9Tc zX{p;3kP%qB+eb!A#xn?QIslwS4pBR8T{!>ofODJJAUc80H(pF3E1&f-lL=mlMfUSq zQZ4e*!M)ls(VynXNz=~E$7I+wrzs^2$Li^&l^D74lZ-*Z+cp0_uogq-dwrT5>YD_y z@8s*k{T=wGBkt!>tfWaoeBUUT&mEQuRbBlkD44)qyH7GasOAl~WCJFrt<__V;xl}+ zf;kK^4g~e`x-w{-UBP_s{Uto6^_A=pQ&mE%mlxi|EwV~sWD;w0u1L`*cK;$q?D(u< z{GsWxUeFj0wm1s$+)7KIpQ zK#{yRRa4woiuf#Z2QZ-Fg!wArz$I)ROnp8KXwasWjv&*V`4&X05^%i$rh|FcVXcLQ zbjML-LCWPyU#TNlrxxK0DR}v+EvgZJmn@Ug=@n_`rR~ysO8`ccn9}n;UN=jowdzR& z4J|FP9?1f2Q<{=BvJt6)#~g2FOQ1y-Yb1)ZWiKjFujOR-2aIMKR)lgzj}E45M`Z0> zN>-L_q`-z%kFTW=#Y&6H2i@dB{%J!c=>{Zxr#k=%7sf8GxP`yr<5zSmBgF%&yYU13 zQwL)i4P8ZHDj@IptLgYg;jxkCg$yqVkw&p}+b>PWyh5N$Ajb4kWcK1V7Y4b>py41n zgY|($|B7XJvcBHf6lv@wE@4{MN_HbG9X`ZOM70NAeNOB(SYldFbv0Y$b;cM4G8*PG zk>=b^tbLwB&TiJ<50{$F5oTFX`9@6iQlqKuul80YEKuV(?=ZcoRRn*%I+q{8Z4qec zQ%fqMj_x0oDbzN(H)(1z{k!)DGlXNHiDo>epDcyTQS@775yy;9UzBDCBELYA=OiOL zSwMYVLAiG9nu2Bxh}pCt!D_o+rl5#bpprKiv+Bb(F>^^Z zCxG+?5K8=OO_5Ce9d>GZH`Z?o#)=v{wR?H*#pucA<9m~m`F2ODYL-3bouz%Nn8sEn zk>h027?=VK#Julj0?xE=z8>yhuI0kupKYFuq7dC&o1Ib%r7ziB$G;I}2bcX&)~!CQ zpvIX#oLd2p1x}R7BCv}0fP7qXkN|nGFv}SZ=wv1(4(0N^Vz@v0FIff>YXoRs9ooqZ zDRS`o$yN2fC2r8phK7n_z;E1GfBob?_&W9fl;puPJ6CKU%7CS@ns``~nItD5IXYCE z`^mGF%BHF^#0v^>%K8@}+GvXg?o$o|Y~6n#YJ}9a+5B3lvYjJGjzR49*9;Yu~mawuy^Ky$7Y3?m-1lE`oQzjVDlY$dJL53grng zF$j=p-DF*%eaasGBbw@g5-zHCcN13?hsOp1#xn=A3*Vb6GH=sOD;n0p9=NAG11{rxMovn@Px)dYNP-(!ExVj zxz^}&I#7hzT9Gx>8>YKF584(Ml(J5JHuU;DC2(I;`x|nGA=O)m?2UmLZXLLxo^EDj zAs`3TaY<#PEwomVDLdN3H3gP#%iJU2rxPP~{)mhFs``eHOeAVkf?1WhL0CrzqAM(` zO1}ccj;AYgh9#Bb9kz70(23w^HSWrv&;+s$6yOFe_%{@kErVX&f~?8Uno>4!Fr#AI zsbr4SvJhM;iaNoMipdADLDJjbG#M&@+`UBcq2=<#3}4}*>?F5OzRBY88I~DCB1MCU zGCG-LP(k4g>R3-wD|53Ss%iG@w%9{Q!{?C+gD;85R19fH_5D)4|ZuesQVx8T#cH4xQT8~WX1jx)FDn_Gg5#-D)9hcAqARJ?pjI2?JM)FZgs zn^ZmXW(7a+ha}h|mf@P8*A|+|XY)ayk?j%%Eok%MubKGnOP}ALK*=}wG@AWLx%EY@ zM*im!`vm&BgxFQNX~}StKED+zkmw1G3t)Z5lRW!5du{WOorLf| znCh?AAI4wI_-tksO@@j~4Z<;J5|QeZUl9cZrFtL#%?==$W_>u8muQ?*Z1i33sP#Os z`$HOP7+ZQv(x$sRFpDNQ$h@Lhn?RorLk$01Bt?sMCT!-GNH=7Ss~6FId?U&-9FeNS zIe?f+d{Ki~X_1+3c3PCWVTdos+vv<9_g_WzJ3tl+e>i&6HLIYZTSx`Y>`yCJU%e zG(6>)GLnHV1-F3O5A%t1BletyY$oubC$8jCO34 z^!eSIa{z85EH_eD&)k~ikWyT+mxZdmjt5C)&#ZPNW|3VNi}aDBo3;&AdIKcCDiZiR zE#x69pm+;U?j}M2-sGYxHRS_K8agy3++;GpYFEsYUuF5gN6S=p^}|g?r>GfErMobU z_YI;+PJ+)G)gkM2bb9~vM(+F0+<(Ty&^@Y;O==N%CK5j?5T8B&;=3Lxwq0tW<;Oe_ zD!ihLd`^JLGLuDAIl~qJI{|Zx5{PQs%k3T^sZiNS;}S#BTHkcXx2UrPu3m$?Sp>11 zxo%CdK>5XfZ0oR1{Zw|7mw@p9%1L~u&myl?Nk_UImX;@fDXyoXl_H|)!T}QiCtT9C zxpeFk@!sWENp$HWOX!s}t!ek9x)uH&3KT5L1MrF%a7*475?q0sYOUcJQ62Jd^g)#Y zgOGjs*b!C?Q_rEbxv~xKj!=1maP6&pX9Crj0;Vv=znO}$phFVAarik$=4^!wCmoa0 zc4f(vb_DnZC3P3*Y6j6+gb|M?rlPgDvS!r4i1sTOYBJC^bE1;xPQipw9SE=Hc!?C* zDWqw@$DKL~AxQ(F9`zMG_Z*e5F?;9ntVQ?n;FwCuhHw*p`?m)F#a#UVLtFsQ8|?qH z2>Sos5eXH4FraeMB8{gV{rrwTGJiYto>0~Vsq@e&eBJlM;Oq8E~ z^ndbDej}EK7mgLj+8-hCv!PYL&kqctNcJAzzQ59F9Rtsk`t-&^y@k-jsbyES9BWgr z=7S1fm4R9EQrkT1Ck0+4Y=1e1x13LU@D9}5KQZ$v7WPIA=KqAzIr${n-2qsgB0u>x z?IZJOSzZve!ptqqH-_lA`=Ex#{wjyeeL7lU1y`I%Vgpi;(baG$X(u*w6ovZJ@>D`X zfVCCSe&$g@6O;dnrJA!Dij7P{Hh!q#yu31=K_IR5tHGo2#?i)>f|LDN$yP5VUVCOZ z&Z_&*`|Dc6&`@;bw+c^V40^S7;8yT$?lX3nko|J%Xa_rSazC`s7=gQ1Ros8-*Z+xzH!xI)>%J_rj zAHMj@YMK2v=xH>wXNtC66W9n-)MCT&_%fY{$xeY;4a>dEGGbvtK47T<+7$XJC;r`R zPWclzZAkt$eJXWPBRj(O!0<+u2_d$%ij6-x7i7Cjnr$&<;*7_kHp0dNvs>5GxKl!> zx=NY$o!;RMU{Ep7guXcy51hXr1F4=7W{Fo;dDLR-oXbiFSWN;J>wexnjhjl)(lD&6Og=&s9O7g?q!`cJSO?>397 zYPHROqu{546r}pH`#H)L)ZZt#nd`?wZ;0@YCIFE**>d%ML6f zj&I#&vFQgkR$|X?r)%{%&n?&ZR0uG?8a;J zB7RNGXn|n2+kq+e(Tyk#W3GET@z+ArKbtDNJR_`3BIHE@2tWYz!*d8Go#Xhn@}CGC z{k6JPz>OT#GZ2GXjirhyE!QaLbG8CxMV7+Y03QL^r)wV;pZiH`)`~8Y_YYJ2mTcN7 zz81PTC*?okmkBMV1#CnwoOY~#n`I7G;&dWk!Fu~dwuVP=BAV+W4;Yxj;HEJ@Bv2fO zKb@Nkki{RHm1y!Lrzs>9$!2fhEgr#8ZZKNaCHu%YG8_e=Am>S_pJK4p?{K zBQ>f`MgDir^k9HGi{|yXkWOK-0Nv{C@&0`{4S4?6Q)mP8#{b=+f$#c=Ygdy?6^iRb zc~4(Bxqw2k%c6Ri$Sa<|j&R)T52g*D^=F3h)DaDjUSC?-kY&ZBr&~Wm&`^kR-$Ilj z2e49kl)Lhe%rnu^;Tkx$U*3Q7c#im@I9YEYLpqm$XD>d%htIQJ`2HPN1&8S_b=J#s z3pqQY*O@o@N^4b{6-EPPr#e#f>ZXI9v0V&D#~3?VF%K{qmD$O5jzaxI2XdDMRB=ov zE2$cZl1HONwEYY>PZvbk4CgEU`OAmAU8)WET^>6*bSo_aZN;+U%&v!(3r56uZYq`+f>;9A+t#e7%)HJCY^Pj{{;3h?YZpMl1?(Lww)yR%OP z42wl9ZKd6xfc(;RT`b|baOG>ayru)0F<+ItIGd6OnOw^)wS@lI%)h;|i>IXLi_Tjl z)`@i9LT1y;Z+)F8aZkRVRej?p%WP&l1YE9EX%P6=BG73DgEI%eKQyyJt38*!?G+58 zm<5G2IgJ!1t@lGTCyt?~87Ocrr_Po|g}H`!|7hq0$kfz0mr^i2E?!S``C4ybChk+E z;E3f-Wk!yd`Ym|PPnhr!qa_m)jh$y7=zjRfW`ahHqU>!V|Dse*Hn)oeASKQ``GU$B zZ&&gLLkN-BUWmlK2o!`^WrCM0lx^r^#z$C4fmo=R z$iz=37)`Vrp8YA2?R0hk2{bJgE=qX4w4C%1qD%&>Ax%F9Syd8+q72Htm10Js|CSQif`Lr!#YdhuYO&h?w>VjhXC%GUbIr z-cYcHYWa_Kz9Lrs%`S}6i_N@u1O?T-Hzd3&j^o?AN8AATwdrE``ch;~o{_^`|>;(g?)kA?7!~f3VzJ z77c&`!{HZvpCWR#y^>XHG%AA>Q-^p)5e)mG*$n))g%Kd&%z%%wJ|VHn>?;lKDyo=( zya@(RNwF<%vE;B8Vy-3OJbd#jifUwB;Ut`*<0t^-7&SpQe|5I?yL>gRW+x1>GXk{%yxOF_`*WsVhFj%8QP#*Cj-)O8haZc!KoqDb*+w~bi?ccs1 z=?z=@IUU^|lT8vv>4G2nB~Rb$jH7us3fpk@-cc0(WFoZy`(soof!?1u%$aM7KknoJ z7EJ^5Nhc`tO{0a{NiW8l-|Rd_pc4EpNC`Rkk)$3ewb+t>ki(Yl_UIQkuV*X~lUq$1 zL|Vw{RoB<#sKIPZC%+Bh+KznfkGq^g!wK!8hp(A$AyA|T@U6Ei!Onn2iuX_|^*;wTnZ(~38-#YyAX zC}L_OP!axENw{E};nSFgK>u(9ZgLx~e@AzEQQ%vUE3VeCF|Mj2f+UzTi56$Q5=hBT- z#QBfY6zEmJ=4p(Emm1Hsvb=Sj_58V_)c$i|&iWQEz${aFt2-N02f<1$uMc!J1!Z&E z8^p=LH6A=nq!}Uth(><-RYEyZIdCxcmB%jbi2x3FiyytQh)PsLa8h%%my$}zt`cPc zbId?wzPeeeVJEM-m>BX_DgA*zm*MWUz50Y{#|N=bwnFA+amZ=oeYiL7R#G7^A-gCo z!g$v#)9kq>6|qz5DJ^rvalx7}(oJVHK#@i=QHLLDn1j)IYZvD}O=`N`d1QX1Oy!+a zkS@{HAc6$opXxizNXIq*Vp8B0cv7vzXMr%5W&BJtb#zcg*>v zly1=#wICEEHDAw}j4u548KDGI@9*YbLgy#@WC&H^)7;5JMlT%7%dndOb}ZVJkGhmB zxwEyoaiu(C;ON}%yNT^ER^mM3|5`pN2H#B+FAAnmS=h_{RqbdDBSU~M+BklXD`DYp z|J^1Lx8ckYOi?e!bu`03T2XUdHLf_tErGSlI*yeJwI7Q3tF#~l2~}}lv$aw|HAGyH zIvlHW+ehM?@X*6jHPHG!W<5v3C2n=!?nx$x6y)I1L>sOpjnuTSRHB>7LJ0j&gV}#+ z3yp^yYFY7~@>WVsC3!v7#WZDUm$A%o;+1jfgsEwHPC+ulDKcxd&oXwBR*XuOi;-19 z!CUxPLmj#0B|~!Lpd^5m`bbLz-Go;Ou<}ZQ-lO6|bK?V34 z0_$yTnQ_}^mEWt~nKfiDv9{2}BC=?5L^Bn1hB0_bwbI9G`V>S0?h(I!NZSKuxN=G3 zS*De>95d+%tNzhZPA_iU9e`y;wS*fZ>vaFa#3<{m#Yev34{DYf+1dwE)iHbXftHR8 z*B=>>(BCItE5ev8rgTjeR4=4!=Q`fk(Ca46O)8Awrfba?s#|Y=A)}QhlCI#o^k70C zS0B&K6P^_YF;2ySm>+3CDvL$lri?}8;*5xK?KaQ(uML_t!zXBAcm60(U+lGVA~Pz% z3VFm{+9b~nZ59YV{IOG|AJG-#pN(ru6|xn&zkfyi9)zPly<3||zR<(Nt;pDWN$9Z_0F_V zP)7>hQxj!(ftS(&gT6H0U$Bj#6f1lYbj^HnM)+DeB1=>SS$cVcW?7_cZ2{t-Sf*_l z;IjUsfpizb{B&Nl!5v0+wm-LR{Sa5MoB9hZ&o&=IwtVd%nL|M+uYYGaHka0l* zE`c(I-fH99Qt%gQ5%PcI5X-L>X6mRVsA-1mRsLR_S%aA{>s_Vjr?Cz?T_aP2uMA3s zBkh!uf&mVrlk(4uG{B-2zRuMN9TAy+TgDb-E2 zv4gr^`mzIYF!nhR4ad&ooeMFzS#}nttbh#*(7tZ}l1n~0I{?pNvI7}ZVKB@;DIY)p z_4UyG^H2YI^q#)`ui_q-R52Yde4WOG?-T(U!|dEXlS9LPQ)-zt!L(d8-{la&nolGX zW++B=+g8vkx7FI5{Mw<6KBQ#srNwvX$zZ^1m0=m1Ps`GP}q3 zhY}QRNUhXc0MADmtF3+Y)&v?!OL~Yiy5Z19ljCa3pM9#KL-9chGECY@F&VW{E2>wX z5Ej;s!897R;}fM?+aua{EdXl!jHO#xrCwl~$c z>A`&UjbCF|_>452mNrv=^IvU6Vie~TQ8x7I*IW#v@yj46X;RO1b?yahQ>%);Q|jE! z?CxZ;?mJdiLHGWFo9Z5MoNYqJqE;bIm2qP@ephi?NZu2^<#m3u*?;Ik{L-6Bn7Rq8 zy_hN}6Ofk?_+J5|6u&U}Xvyod2{|3QnK`}*`Iy?P?vf5{=dhtC-GxnKarWW2rX}qr3>0(_zQ5eWUT*R|h+TDQb+w%~T&;Ex%6cP;ugeF|gD0uXzS&kNmz${U zs*jarkFi9yXldUOn<$7S34~A7%S)!Y*Yi;YIsa%3#}rV-pl?#N;M)#!$ie;ED3WcO zu?(>)Oh!@nZA9A{j(iYysMq*;A14A44MU4bhsL28isukU$S)>a?PMy!2y2KZois`o z!V1_B;FiRgpy8}#`^ZF8t=}9LH(};yF{dIY`MWdNf1dBpvFkQ_Dd6h(=E*65*TnJZ z_F9>1@wlYO^dw%PPJ0n~DEB1U)=C-G{uopZg0_c6f_!md8g)ENvS#(ElPYgA|4=0^ ztf9WPA75im<=TaV*k0xulYJ|r6EweC7dGgwHo^R|m+mDinARjVvoY0B8o$20JH^S` zAfB{no>rFOwFpR|abOO&(#14s&yI_CmulE8R{n$kiU!5Apw4*fV8wBSI*2h#Bo(Jj z-05dpXDL90;?iz;b0LbqnzQGZB&yfHDY65@FH`mm-~iJ4>~f zXxhixU)zaqB)C)i?&TczwYjo1bSAYRc%4S+YlsB^GB0jTW%kV#CMJ7DDFO&mnv$-^ z*ce<~@#}w#(=Hk$RCO0DLLs!DX%^1DYGJ`Cm5ElJjj7>RJ`3fs@kL8d(#G!=w)1-L z;|#~Sh#&|e_DUt5QGHVbo?iAFi8o9~Xci`yXHTkQ;plU-w@(kO_nR&Z<%=|EnS6j0 zJ2Xpqp8{8?v>~r3suE7C=&c$1l-o|V(jxx3@~Os}hZS6&VFy#-UhMB}R?PfdnZCgp zd%A@tGUa5qLT`H;+jbNpd%124l}ODhE+HyH7QCf_)4+IDQ#klp*DH*l?LwiO|=sCVt4 z@Y9TxRW8&`sB~ZFIncB{b#Zl175$l;Ayd``)vZ+)Il8as3e=ZW%CGR@WmH0ny}~J+ z>(Vufcv7e97SNidb6Xk4G{zHGr&{s^c|%kBZq$rNIzW{TSMUm?b{}v+(>|D5(4=(_ zr|AT<4T&7`_zL%(I-#_V6sasG zS=Q|o_g%%r1utUW<>^KvuOy{W{`FtbxuA%y4Tmd9(#cAGf&s2YYSJlArclY`<+WLQ*&UGkN-yZTk>{F}IdJ z^0K#XjEsyl3J>={YT(pb61^dbhxKXm)?)ii|2N$@t|*f{Do~1m>NaFR>@+zm%E67H zD7#*HKRgkFTGu71ln3_7M5|bUg|xuG2))(>KxF!kRx<(=R}fPbFlFtBO~0HDCi2=y zc^_qcG>pX@pO3kzWvq3o8S`gp(H4z@B)%q8oJu^}GVS#EOtytTmrN61MYtwvqH3!| z#UWKk;v{fvOpaVe{AnldlO>dbmfiZrN42}?%dNa^L~SEW#iqIE-?P5U8tkPoS}Xzp z5`S%AiBS%I{fe|%dzjkS>4d1GTkE{z4qCMrz0VH5o zhd-lSAgmUtUulJW(lD3qr9=^Ipe~!Q{5Y#fiM3*^88AU^t@=fkzMN3ROZzK~@P{*D z4>^}vb8x_i7*met00FSzlNgy)Am5`EVrK^=Offsd)MBC@IvSKS~VHLGeOyi|XO|lo$ z>f$o0WCB{}(9pkJ*u2db&JaKFe~{9{`MD=&&ph&bND3Do2j4kh^h5WIOFOQDKYZd5 z(%^eyT(dbIv_@6VC9)#cqm$Exr-Fr7D_gJ-ctX_^YtZ6%*U*E!f2!8Jt^3%yOVJM| z0H}3X{>P~adb0h#K{`52{3&KWS0d!K#DxR^|GrS~Hq4EbyLlD=&46;v6D5Q}hnz@cX=0q^ zqv|9&FS`T;$FZSJ0mE4-#Aj>_Q=co0zZm&D7>$Klx=?5}DGKM|G8l(b)we1$%i(62 z%5hp=cZ)uDqnO5z*%#~AIQ-52Y`l@@HsK8Ms%$Ct`(tHu%=AV9 zOVmYKz^NrB_)`YgBv%31IYbnlIV$TUp7`CKaIoT(dwr(mB~bLTj?zI2#rUVI3bk4^ z9nq14%oui9Bhm#!Y~$4M726Jp!G3?l+UlS1Pn}P@IB& z-OBOVgM_^h;7~QEn52>ZV!SDZ6lZ6Z;Li9|0Uhz@NmO25HSv&2=|roCQcW9L2~ae6 z3%0#TYK^j;;NMd`ofVv(M~C^!w0-J8`?y^?_ieUJiEzI`vdv82FiISjP;n>JHVV7W zmsR2*ELngtBF;2=m-ZyRp9{{;|Hb33iJ@P`G5jB(y?q3uD<(Q|?$^BTLAccPy84=Z zn49w1XWE1JwP&{$rJjo}s+SCMId&aAR{|=6dEs3`ylcEuHmK4$2IpY7oLkit-6-2N z+{m*fVaxSD(u`eORV4u1T(-+gaf}8PwR^m_>7$exekweMb&?}7bjvE2*vbqluWs_% zswV;CG>JlPc@6JVlgL6nP73eb;lI|A8L^Iky-sm^$7h<$x8Utp`0{pqBU}4SN==7A zpdqa0;fQ=I1)k$vFgvh+bfL3wR5?Snq>ZPk8#>+Y_D^8441RVu*l8g#EVJ*(P&!c^ z<>4+6J57h;1>EI3t8&@;rya={=xGi|nY;p&xiM?vLhz{g8)VbW-BGD9bwADTxe|gM zLXwoCJjUa+MTy@$0S`^GtwQ=~Jq3m1IUiGewcLtv0KM56A zmSd91GF#@=@-V2n*=a)F-_R?j-|{y1U^4GARBNkYU#d!zJonA8w}^tR3X0gfz;gbu zjf;IWvEA99c5oq97X&ieTDCoO)Z^jt)59`C(BV5n>W}@w?61g;oR+(1z}4u-B4$Zr zH?+l&BD_tep_3XWu49%)7|YiRUzKT8RZftaa>8s`=*(@AR}(c%}CwBvLm0B~T zsmJ1D{t-?Ac2Xf@^{_PG{vNR;GMoh1mM*n&QXpN8%iF(?oPy=AQSMYvt}MrU)KzCGTYKqkZ8f~YKtyNKC6zr#CK zi_FTL#s;c&Q#JO@0~yjO?yNC+I5GE0IA67l6QgUDOWq-6auo_LVNmaK%Js&1qoOS+ zid*w9$A8M|2tR@kxopUHSKC1~fZszd3^1!xp>lu`2>cNaS;ZexRm#FqEEII=4OIwJ z%*&*|ZCtGDJ4fwZas9Ob%FLI#UxoalKSky89)^&$ix9DTEqVIBA1-Gs67#WkQBb)voji zIeWS4l`fTjfY3@oN!#l-HgzfN3DPsxEOqu-+c+L(vHy#&w~mUc4c~u71Ze^3?(QxL z>FyXBX@*WgV31Cc?(S}o?(XgoX{1X^&mMihzgTCTv;PAYvu5_*v!DC9ug`VeSkJg6 zYq^vwEU?`IxA=v%b;>o3=X=`0P#irD7{QC|Z}12#dIp8^;$TT0a3Y#@02 z3UX(85u1!CK^tgCMGXf(4%Q*c0bgHD->E(#Ebhwf^F$e0=&%7;iSkij7r0hxNH)H~gDf;V>J>m`DoYe9{y~t@5!c!;DUH!@@cfXbs z{TQ@%B>GM;6tapLRA$J&E$z^CP-YkH5fne@uH&8hc(ZA?!G1O13Q;}hp%c3g@3F}H@<>l^Sf{AUPP-E1`Kf8hQgE87geM|o*{HcfCIf3~PJPQxZ$>+> zBqij#snn&zBYVkPb#KO;zmUm0#+ll~T`EP8mfoTOiBv;;ays}qh-$1i_1&1`d{}#X zx)Xu%KN^@ALOdo=gk-%@y)yb_`%S36vc4Ph=X_>|nqomZRcKumT0!pJmlav4Wd_gl z|4pBK;Q<EOr-%&jaj`7baLso{)+8m>F6_{C<{NCKIsQ#!Gr>QrRIiduQTFAvtFCFjs~mt{)qQ>jY&cbPjO)ArU`v+??oa*c zD+C8%pyi$vBn&GYT6T1D<}WL?REq;!Aj=z2x}%_|5K7&BE7H#zhE}Kz!O|Znex?@d z>|i)IGtKD6%^7w~A0`M4(q0j~ zpjB1eh*gu!i}lq#CxHGISb-{8n*UxGHUWhB1K<6JmmOS6lE_YXGKY|qRN8sNe?FIU z?i(y%*O|(Yq~3lIQ8!pXBJ=ZKuN$jzj|KOc8(SI5wd$xABABzP^}kQ*1AGX(wK}7g zk_~AkqH%LR6ldIo|JL`Y-dS`2u0^|t=KMcdEpnB-%FAfU5gkG?BX ziYp%15*W56Tw672m&T+4CBLD3F2HhQzNL*SG$2WW?$H6}c_Bc3YOb50gZ>|cOWvjM z&aIkz_DU1E!2jLA0u=#djs73ZJ1su9-ey3j+D?1ss{*CxeyNv~qZ-tY60#SbzHQ#L z{b-sMN4EM*U!PAi{=8vEMR)R>>nJL1e$Us!WY^&NXq1ikFPtTX42xb;Zj#ZU{x&u- zL%b9TH0$Y^Bw3eV7|XMf*^%v!RpVRm`yCu=SxVRe zMgO>Lzg$}D{6fENR%%h5S9557^*c$Pg|wIsXT>i?5`h5Yoi(ROahHZl`ja2d=IMmp zV*FV+zly0=KpaHf3D?iaOiPPmv>I&t_sZc<##$ z6^Nx$mr#lEdG~)QA~MoYQs09kxda0r)&SvEml zPm%KD(|%OdY79`XQr1}-2DtaxTE=Ll0l&z?=1fi~NQILlZP-fAMFXh2 zLO*Xr2cgBLDy*>&w8mC6tJC7f#*^}=lnlF31^zJUGRD{zh9(0+y1s7dpPlb)*i7L= z;oT7eIwZiiktnHBOi3c#aKEBwx>NYFol545eTRDok%fu>+RMKw(Z)KCm8^8Sn`A8? za4S4GTxibX+I1D!ey-`{mk)}GkDRV}mu>-#?suVnIlo~@GB4_YRGoE zd0si5nckWLGGgmNzy-Vg70x`W$9DGcLtNjq(81+iTB2W(j+UZJrIN!K1s7BBAd;H0 zOV67{3o$M4_?O}Ki1s|=S$z7(oh-*A$|O=afD=lq*(}@NMXxNH#O~lcrown`tDMC_ zaVV3rsq1e`gH8V%U>3**D5;JhhU&&wjZb>2HV_~lWTuqW)CDu5|9d>n{ohS<)JncU zRqReg!H;ktA|z$b<-ddw&$KE~@^wN3FrtyWs?lQCr_3t1+|s6^X1cm?MXit0q$2P( zy`cc)#Di1Oq5Wb$qr56DG0|^CE_1t-XnlLwcEXfZoQzpU_LGpHkP&D!pu`eF0R%2s zvE*~ib=0@nY{JYzfGSySBRX(oR{sHaH(w9!NV3X@v_SL*^ z0Hp>WX6Qsz6!cl?-E?a}JiK@=%yZ4d4=++aq`cezViCuE8@oG0&V^@0*x$Svmr`|I zT@QHs?5x$9%U>!-vmJ2ET0@_meC;EG9M-ljql^*-9qX+(n`0|TQpnffg}9)@U?~Eq zFvS)ur=T~c(ToA$z}$p3Zw25Np2lhX$_$i7N^q{r{s6{o$S77_QZBeN)gG|thaf5L z-`;*5_Z&m%T8ou~j6D#>UIz1`60`8Q)sryjwM&YWnTg1224H-t^NKsD7kAKE=9G31 zhQUDnU+UZ!XUNJZi7B{L!^=eg+FaC(iv5pGGY*!5n0N)DP7K8rs=S@SRM*o9fV9Gl z<~lEwh|Wjc@*`H>9@$kSO5~AGVLh738w6cCo1d+lo#g>_t74jBqKfJ$W0N%2%?Wek zu$0)!l&WRa#Z2+4ZWyq$=sNI^&Wkm&ueC(mBO^ro3(MjE74Y2HIlmrAP{rgfzGAr>W&lB%pF2EMk!HwJjxQmnQ--#5`<eD^$%e4#D^oZ6<;br<`l$@JXJO(5mGw(mJ-Iz-cu38tzvQFyw8`_06wM29g8xuJ&^(a3p zLe6W*5oSiIeQJT#T7gt$CPIaT059so->UEAqGhI3DJvYOv)H6UIDx=|-d)F8NON8S zOFBr)SoW>UPL^Y+#bl0J&aa|~ z=q%&q3bg4jfqjiOWCxty?C2@ph{bUAz;KO`qAcGd=jMsqj0{4gv-N6q`}Fnu_rJFZ zuZ+xA1&!Kx0kr{XF3qf>( zRngc#pKeRC1#`(xsOTJd<|)LJ6w}b=kUNa!!YnD1HZSe&<`wowW2)AqUdw8DgyPnR z&mDc3`fB4jUwl2E+X9mDM5>p$Cg-kCuSU{_ox-axo_kQ8o^MmGx1s)&)ooa+E#B~8TZ5}xd7SK7u5P(@S#?_f~5l9l~z|#X8BlMp}`r&jgM~b z79)C4ywke>e_6eu^~J-)>3XZk{m$Ea!|#D@&6_}{kuV)dXR^(-r#)LfbS_614`t8| zooPHJE$jc_jurK_-of-WZzKMvx3v}z>1nQe1uW5{2AV_B=29Gx#HhcH>njWqpzDxf zV9>Yx1M{7VB&%jB3^>w;iIbYsXsI4}R<4u0xtqxWf={#*2nq|LP-mU&!3|6w7WznV zt?4n~ps_w)x5IgfPH!^+r>W*KF=JT6lCIp?1AT2K;==$~D^bWghw8Qf)Z*Jj1JuLv zhCn?W8wD{uzeZ0{meX}dv)*9gNEi#Z=vqFZal_u$$I@;#lblb&M>=(Z$A>9f9LBlK zVLzy(D>w=Tis!LHv}J3FiV#3z+`SPm8;$!^#y0K__#HowaWaP{2+~D;(BA^S7p*)? zhhNRP&R)f~s8F4(oslahv{fI~(EL1h_RzwOfEZINwh_9DOJ`t)vBFdu0_WElaP9i2 zsn6%A655!jm5>5xQ!10X1j1QfzKU_LN36v$Wloj%s#%pzT*RE|y(lTv7m#Xh#+(3W z+tmTXFp(;-pq_z6ILhP6I)9UM`jw%<0kDlQ#`U1+Ef6rrb=QBtoChbyIWyR!a6;f! z$cGYql0S?yYeozc+?7DvPFUWCG;d7Y;bFT3s6N(y3_V`-3W8os{*#uHU)Lzd*upg3m>-g+B@G&MO3}fo8j&i=g8?T@Ol)S_= z+ca^O#~FtaH;?#I9-+U!zQaK#d7#eGSS?9>4yp5FKwp%x%OtUv=_$`r6*A~Cy_ zQmaw>K>jLy0zm%TwOgj8da8PJ^h`&3dwyW?$rgjcj+-+aB~MA^jGc`mwOAgioKne2 zGX<;=wsM9|FQs)*0f=Q8jl_yY(;&AN)l1BsI!5t3CU84Yl+6hGOBO`8ed90D!Quy! z+eqeP;lQ74d3^Kv^>1cI?vfaLmvd6sQ6O=b6n`~L{{C{Tw#UyydV&~<8d;opcnjU4 z`Gy~%$3nUh%6Na_9+$K>rJqpxz6e~z-eLpYCTP1VdVV06uv>8i#DN-L#_#@QJ zl_Pm5m`ma#U&(87UmQ*vOBkX5x%y2ok(BJQpi=Pk^2f{6;GCFOZGUf!m|=*h^c^fZ z+WGYJiYpSPaLeY@-bS_8{qMB40Jty*Tgo7nsMF}1O;hOlhA;-CpS4K=GrxpNUZ8Ls zGCr25G#CQI>3}i;39!x`L;-95e?Pwjw8j5VX_1c?2QK-B0&9qx9P*^t^P&gaocYbO zD?4ggLs`(xWcN01-pkwgDVji4+OBDP8ywM(x55r62+~k{-ggAO9%Ge#HDg9_HMTg? z{mZw#G@3U@NUtOpv1$^f6*I>@+)V)YH*kg)9bqW(y>g@K&@pLcu_CIg@$q&QVjgK& zvA~5`AmUw`x}pGxqa~fhk+H7CL6W*kT_VR4H?ixMuc#4E$EFRe7cBoGF2bi5bws~B z!%9uAi@(o5#|kkn!GN8_xl}_NDibBSEj7#jO?wVS-^;(f3J44`%h^6X^p=< zDq)b2@io%*K8JBpF-KKQz)gu)dn zsW`!6HPcmCags#vDJHV@M#V)I_1&!f@D^woQFSA!aF_CG9`MW3NtM{qhmSWvxT5~B ztNN+t{^yI#RE_}S1pBJ((ZX$Lgr?eDH2Lwo|bPYB-Rx>@20kJ{r)0BQr^gw0|I3)(I$feb$P5n zR(@_z=ntcmK00(Cuf_V`#a-5~xVeYWNMjF=oc0b1;aN{bi@TeYQ^T#aGl`HL{(y5q zkfH!O5f8z(^W((7nJG%!KjXg-Eb8D*o~Q`sVt*V)j=`7og5={$3ODAj`%4vcXqeqz z!z-B@|Nf0WOpm|yZ164myJpU=%A%*=UWjLD2>_)SIE%@D)(*0&7B23!_D7t__;sK5iqXfIU_$;n~obyY*HsC^Zhj^-EY?ujOp&x5&YW$ zmdf{EVtcF-hP@k*au7Xn=0=_sG$4u9%+805CSuvIlQW30SmHO$FYnWU3?4I>d?^;E z4Z2RBGkprXpQMYYb}{Z~B1&t&4Bg5Zzr?;%7#VCjRGcXBv~4h{+Q-9FthUheGGU_K zU7_Tv_zJ@Pr+S47Kce(A+GovmHMHWkYnl!XoibWSn?|jO0~N;Ng>~2JE$2E z+Xd^Ye2!$9W~w*B#cpA32DPEg+0_98)(TwHi_(-3k@B>Fdh$Sd|B8!}cB|z$i`D1! z!WN|ODS$lcER#h5b}o1N*;X}n&f{dw23k%fbFaZFA@~74xFRTQmAr}?PWe#mM#poX zCnq28NvEj+ZB)ugS}~C!7l^Y5*cpQ_%09tnFiqnt?L<+_$!koMLwv@HLeH;0cpV-& z@$+1WFYJ6R)z-=7ip4A#z-%STpjayQmlOTBiGFH`pAwtTJZqZD?mF{us%+21^PvI> zCoR1hUucijN_P0Q0~I4bi@VNG ztp7>G`Y8-e1d@pO*`5y7b>`FUz6y$R#1GOX6b<6-vM{K07HqyzCDDy9Xv=c)CX%Ck z40_^6djQVDt0dX51>W`&J|_u8G>I8S6^ETJ*4bL`RG#fQlwHe=Mg-+qB)8nvd7MQa*~b>opY~NpQ6?!z`EBk4+9SqtzMnz_jsr@g+WH zV4r@=EXk^vbYU)PTCI5Nwf>Qi?PFOt2c$NU0i|D`_UlU1sA<%sOmx$o?HZYI(iUUEdOQ&ZuH_+eS%FO zz6=_-O`Q3)2o)S5Z>&;`tKNoqd)GNoo>nV2x`tcm6W{hD+f@MN>9X=`2>D?_kq9ij zk7YHF*YY-#$;#rD+-sApGwZO0Tj!7vNDV61EXBuel#dH|naOI}C`~h!7;OnMAF|@M zY^pXEO65f1+@0r7Um+dx?zRZZt-h-@6|IJ+BGq`Cv}U0IiK5oD=>&SH1?EYk2eoKP z_1+;9b7s1t#2Iq83Z0!k$~c@gghjSyxQ)&^ND8d$e$^3*^^fXDM))S<&)2`zggF7U zDB3)l6cNy&ch6*4^exkX1(kD*B1T5 zwU%F!GFQeB3k-%#in5j$K7Skum;u4jM?|sFRw~SU1#0h`NZz;zAYXBcGToJcJ+z(GH*XMP>cQF)60-e_TP)Y?> zC3f9WZT2_Gi-w;RTl`HI%0bi9)2gbf|7*S&(?U@%bjOTN^?!_Ty8U`93uh9#P>t4; zE_?^sg_f@r1fg@P$XSjWi@c5;s2->`NXCQ-5l6;cQ=6-I zr8)kF_V)Va0W+sfJ6!O>m5h#8h*oG8z8*BAZZ!*dge4mU zIYp*YNi{w-PzSoIqW@rueU8kM%WcTdR)*b(Iz%JAc13xPEYkSoMg`wMR{BP4K~H1? zftF}bVBR1QwwR7Gr_%}Yp4aiH>oe?sqpq&Ux49i{w(=f*8dQOJn&|$c^H<&p@AHER zLN$P5sykpBislDrvX zKz*y<+k~VE|0If^vqGjs%<*3QSVXaMYWgsiF?A-LX%nI|{vkW0j9>drjH{HwuP4Gp zlVG*KcM%9WBx*kn_)FrU8l}tY+XwjS{L_;7RN5R+9k%n(Kr>_%3Fd zgF}ttZK<+HLIBnj>^;Y|9U@a~?p&gxK96b;mG{T`;|0N4Bx@xZ=NKtpx<*%XD`YC%^tj7&qz#OnHdNo*0iN} z`Pm0h&HP%$jlJ2!W4Jv*QU|vmza@2HzFpL?{-AmVA^#$0cBsMRJvO&er~GhF4b;I7 z?oE@5wU_VRJoSeo@_Upd<{Kj6^V!@)-B!nkF zI6RDJAs%}*Ul)r1m8V=aUk||jf&FLfUU*dJFW}nx1)>qyv5nMvd;`_{mFHnRaDqI= zu#XCL07uSfysyvaQuMSYkVdqR(o5_0@7LE$m@^!hOd8v4+_G?9qUn!5Zn+|X*B+lcZl}s(X(@+Tlgxf?L`e zqRS_B4~3O*2#=LqFV6CsLv#(dCd2kBFfAc=xQrbLn4jZ_QzrQ&vg?>Vcl&LrAm&&^2XNQm>0++>Dtm(DM6}zAdw~WD39)C`3 z&G}Ta)h`LZUqFLoBuuYgsJ=V;66ht&k$wenJCX==Ai?8 zMEdd}H;H7PSAeda zE4{qxS}Q*^R=(9~4RIDBN(r?8bsXMRj03N%m*Jx^D00@;5dh_LgRXE_yFsL{+~n zvCUO62sjKCvrD$fz>!0}`WwOh;st9@JrIS*W)>*#(wTmo*O}#beeTPwwD-EGHc$@; zINl-m6A?c`&4hz;ki-Q=<+F z*_Tmztrp}`+~~!Empw5u)<8&Cr0~+3W5DWAww@RB#~CE>xji9}__8BMXNy&+Gw&dX z@fLR>k%o&gj_7Kk6fJk63ss88Tf)sViCW2CJ&Tx1evCDrB`jA@N*eSMUIOQ@Zq|bX zq&YDJ)BOu|ffP?vvrfd2avm`d+S;R+DrwP-Ftg2kzsjik3#1b0>zQtu1@=v)5>6w=@$=USIJj;T1_|7)1t| zFb4oJjQs5QitjUiDC}$P7cs7q3!!`pki!bZ;eq(n>hwfa81HlQ8aW*2`>7&6R@dnK z+9mgSWr0lXe{O*%$>0OIZp=1EpVBt?vwE-0!GErUSFF!u?&caRZWs`I<>lO$rGb`Azz9wFseAf@S_Ff?L#@u z*lF~<`o6Er>ueq>@y+6%Y+e5$)Q526=*R`PJZ5hMzkZLb$0uIj!QI$gw=+Ua1Sr6k z4F_sC2oLK+k*R=r4hWGwwCsbf9LphTa{%8H4@V4eXj+3RQ)kpbu9HOaT^E^nr_f@| z?)GSoxZZ%jk2NPGGUlZ~GImKile)#+0&`w(B03O&@;`AskB~L0!mH%-J_ zLx+e?FV~Y&5b_+mmszSPkE*4z&fJdWnljx`%E+F~yj5bMNg`ufYz62g+i=62WG|7- zx^JFWGtZ9<_6rXzJ>pr9(Fg0)`Ypsr{H)uIaw?~2yDN8ke*}g2U}3xYh3~ zkiWHpR@~Q>G_y{j3@ij^d%p50C5A=m%NXrjGCJK8zb!x~<^73=kq_GM>m_*bWVvh+ ztLwS5D7Op6GK5~Cz(3=ZlykNo1n6&`hN-8W{7ORdVQ->7cfjR&`wCJ%d*|~>=x({1 zrleh84oS)fU$49kNSRbJ+W7e+nKW6s528UC-xB^sVlO3$o>UX4C4tBT@e}8nHLCaY z2h!&?%ICjOX!MuHJmq}b(lG9mRc;w;1#Au~uM@5lq|~ln-h}*c5N?31`WUt!D?G|@ z|LdwDVt;jC2R9U?Fuk?*+zsUR0!lqHpwdgT)yuya^{5L6Qh)oqHV!naAk}htnx(G& zdQ!Um@&*BgYVkl~T~N7PUT%~k$KYFYHx^g&@zSG12YfYC2NBeVW!+S4%hB8rb%+;r zJUV`4<{fq^*Uqci8F$;|}{QxVO*-89U1+C&+wU^yw?$ z9btj>8iqRvIB=n!Yp6Yj#Q7Gc>3_$n!;)VsXDGJ(kd(YIT_%y2UM~Tb&q&zFho5sm z^diPldA6AZ#jmLK_^ilqy!ikGV2uga7h4KmfMqp1MHyr;I%AtruwjeFK2+~x?R=DY zkGx_EEQyB=84f0-GE7|v`i@iz)7q{2h(W%&=d7Aeg>0dyj_Hq(cWbu!`gl)nd8vpz z{iU2m{xZ3L#-H&Kd-$f8_LOwuC6bNZZoehdnMtADUr$=Nv$jMu&9=S6X#3}HDa@K@&ypIX0J8E5o;63Y=5$X20@ zhq;!;#vECOh{sx30*?3wUV)~j)g5#L`(w3A?2Dl-Dd~Roj>I*tdV>EyYj1x4muS%kx53-FROx#W-;&0I1%+a0diFXnY>4b+X{hB{YO2ePi z(pFH>y{w42R|sT9&#r7t|1@>K%o**~>w7?+{nie-W7%hY-1_vG(!2TYb1TW^{sfS> z9eiO=WNEQg8T4dBf2wJO^c(WYl5j=KeeWX9U0{mGHYBAsvxY)y>$|&2Q7|3a?Uqx_ zNr9}enYlY`5BoP}YgAL7#@7K)=C~-2CNb7Jf-tP#Pzwqh8P9RRSLCvwPL(SBG(L`R zdR7vUHC5Fe3A;F@LQeBxSDMH4q{q@v=CbY|hJXKI8=jwT-Zz-}BRuIcxqEBc+|uW< z!14jzKi;A1i4N)a#3yca;gqb%{&T5>C2Dt}oy6-Iu;&^Kt2CYMtc`PgkqelH+ zI$8^s*`~L3Zg*vvHjH^A3~ooss`V1^O0H&&nVhO0EcFK*GbdSzzzR6cBdl(l9E{ahd&u_OvT363Vb6bV%E4#Mh`-)4VwcTNhP4t+;niqj&*j zpiX<)T>+hS7WEh8PG;VO7&hm$z<@wp8-|Tz6_N@cabN5)wh@08RaX*bL?+97bH8#H zJJ(WlyMT8vyNewo1jx;gvgUvYl{P`nVq%tA+FKgqv0r~TsWaxDmglni$ zCF17*L}Mq))$iQHmKl_s&nyaejj?ys`UvEpxyz&oqw+`X>!~ z$2(ZZrO&OTz*e*a)&od(0FL69|1&GA9|rhUNCu?c`A)?9mr6U-t|}Mk3nDu81u9%L z!BFU^`06t&2Lp6C9rRFf`k#EY@c)Ui z)F6VgiAOZtoO6P45H(g;x{J92>YJBDOgJnVBJYz0s8Qk^Ri9AA7Vz54u3 zc)p|rrh)CU13ghnU?Q5S6gN8@`aXz6>nE1RyT5wDpkc}1fkPZ76lXWl(;P=)G}=5O zQOEmRxDsBV(Qr)@?@KrNxE*m9*jBR{Ve{?>r!59o#By;%Tzm|P{TWObDH4q8M!>jk zyK;-)J~*9&3GR?_kEtEV4`%i+{RMpCr!aY|y4JoLFs2ttv?&O4#00baF<9)w%xV6Z z=niK}b>B2lm(D>eSpGF5X}ivhl?Ls_SLNa|b^0mO24BzYIxb8_p6Kg_lBBJzT*-m` z!okUf;-o+v$f1p^&d=IW${>3iWB;4pU?jCWPTwr$cAalr-90gjbBrqHKi}sUZr7!pW2^UC8)P_E z!n_C%jHi$d_rBA&;OK^@bD|pC=KV%R?ZnTbc2Jeo|LuT^Suo~{OqPQWPiBlI<`r0| z$jLL?4U%bXv=QIJ<0d#v5DjkI7>5U~$T*sNSFz4_xtLx!Grc`!s}xCk8#i`|Nu;I5 zsZINAIoE*1jJa^-9f`FCQt6PH@4RTQUXghB6Q?K3{-Sq=zBlf0%xsPXjdenEIgr^b zTzVWiAl%xh##|*q=S#Dgq}g#sn4VAHokmM8rZBQc;FKm;R;{ObwB1TJ(EAM6e?hsl<$0q z^J7r_7>ReBc30)G^;3UAm3tfi*LG#f#PQ*Vk-@LR1S$IAc9x)zqV&@$(tXz_4I#vp z(JJDjM*>-)a~0g1`~pEo=4I?4fu?9wgLcC+^J+4&jH9c6u2-x@!0xIYQ_ z=C~R{0zTHXHkD*N?Wy!e`76&%aM_ZkOY%%#@O0k^wXGk8%(qB|w8HwHnrWBWa7!79 zuX)dKWld>H3dEqQsruMyynG`POMO?(?f_T)@&3b_w43S#Od=O-@oX4Kcid%Gn*w5c znR-(;Zae(3XrO;kS4EQhx-L1#Au+Ce5&z8;58W!Dqa?X(7fp}v{75aHU6Fn+VAWrB zyigC;CNQwaO(u=A$jQ9jJ$8O|x$-px2cHyi5w2&Bp8vPr1re(mn?%NLmSa1PfdxOU ze{DaKK0)TSdJ)~lOFg}WW~RX0T&^P-(UnO) zPvkBz1GYTnw1g;2qhVuhxf<%F)BtCv3&8%TxzdEbw9c@~sA0r_5NBzD#{vc)UQ>6A zpgE)T(|$o7|6q-bbl>{XbjGM^PqN&*U9^u?i!@*5eo;R2mlYw=>BP>u92^7<`P%$b zf^R&k^hgi4c|;E5%o2xB86gh33U@rKTJ-$G?3?i9v$+Ae4rCgacHUIMrmIQu*{@Fo zHWd!MC?qiL^|oImSq?e@Fa|-d`D7y#fN%|V>dPZq|MbDoW=FEGgc%d_PJVN7NTZ)c zoAzo+qjnfBXKoSi4!3v6i-rW^k!r_97ZDE;9@Cef*d|xl4QbWijhdiv*PGRXVs>nM zC-8oVFOu}&9Pq94V=S=e3?$!a6C6l!#3JaeuFe%c;zRC0_jx_z7TaCH_7oY(mOZ`$ zP7CttC3lO$37BP0N)hR!(eWOUD7(Cgaqs?}JFU0b4qZKogo}`yHwXmn=06zdxD#~j z-Ux7q^k}OW8TrxI{}>0o%3rg9mXViwNCV|tp#lj=FB`ake%m%dB6ltrMi{C1c#Y2T$!g(G} z3G5vxFUCbMweznbuH5(WA6_%0Jn_UM_{2uNX&jVJ#VQhDNIkJ#xl6sHa&)=5#aBIa z^bn=q6IU^xJEU9?D@H4l>v<{=Rk(<-9Qz-lA9yz=a8S- zXQ@LUJENsx!jMte=XABJoK6cJLfk4dY{w=n{b}d9bdDPWAufJ4pM}+h2;{QFELGI$ zRyMgrECzP`#NQu@EmT*Zi+I<+dDZ&ODSQ>H!Xm!_W08AWchi1F9vCPyAnngMy&iOM zZ=>^6YS=TQpU#~%6__Fc5>Ri7Q>%4^WRWnd4ES0P+AQZgdGrIdpvBY5uGnVg=Ty@t zIybQ55WRLBL|N9IOtK=HTFQ;O-jVq`K6?6Quo|D%F)t;fP>zugr>K9c#*QlaN2~1X zNA=!9OeGJIlF618UElZ>or}bCK?Q0f+m>Nw>@2r$k5|%#j=qeQ5sEV_gANxLEygYe ze?%#GVrq=gtPS#{R04OC;g@4(g_^3$IBDLl!jGSmLll+c2OF!22e;D6Iv zCSpdFVBrf@d3K5U3y(fXr$NRlkb8emH~RAXF?_(KNca0DV_w(&e7s@PR9&p5 ztEXQiprG>pS;rxr;YEV+igsj%^fyK=n$*>&#@h=&ujvU@9M^|X5C6mtr-u@D9*=F2yOiLfP zO=YO6cN!k=olfT2ODWhhvT#GVz`d>8M!f zsawmG4wIL2%Z~vlEh3S3JnNlR4uL8}%2~qiysi&oD5dAX13<}G7cKJpo7PGXwADM~ z`RDo0$m_5G*YKlQ`$h(J0|WgI-Rnuj*4DQ7bVNhYrmo-q==bXUOF@h4Z^MZs5;>3) zceo1Ss&s%I~eyy#DD`kX5B*Nas zhR~ir_4`hy$pdI{8#?z4PvHib8BT!?GvtK|&nIt>&Pzp)^s|iN5-R_Ce{ZdP$2|4S zh>Nkr-{mqtuzpO(+$&kiO-D2cIvghH{NgJ4x{*>)0uwVn-kW9=!N)tHjB&rNr{uW< zDpmOYF6(<(BhJw{I=&gRxcVCj|E^`<@4<#D+;WqGVbfurjRbL?8lNq;MgFAqn@&Im zXEDE$$;BBIhF_EG60i@Dmkn%sj|w1cGmmCZw^H=?gY*^74qQ1CMU@JYi4%4>uxbU` zW%m^L35@sVUT>P?@k?P-Hfe^#9>zWMLw2NB6jmLPpl!ruaaf}z%X?(`+e2F@asTYKhNs};a zuhq*Gg~{_F&!$`hF&CdBNZW>WL_ziZHqG<8dz!x1BXO@JJQ7RZ5{?Dj`?HXC0A$}g z^yZqwGa%|Rgcd>t1P)hYBc(cS66t555e?fS(fkC2o?@?GQkmLA1z zKg{K)n1NT!)^7 z1MO^eqIA$&;M`*rExfZ<+*a1PK$an<{DRTWZVG3If#Jrl4}4%|>h2S>lU-#}6kfde zSv%ulC@uGs^h~%Be10J&s5Q9|)4PhF!L<^#0_^%=!AeMdVxAO`uVM+_b-gY=CdK_` z#qx@NPGTHe6|$}pA;*}?u}Dro7qMz7F$$Ek98q&@if=oW5CVy_5Ipn~KaepAQv5!c z=>hu#pUV&S{XIp3d_iFC=K_n$$p~0`W!;X`mhTuLgn{vnAeqW=syDii_Fn=M!YU=c z%-0S(t@AZ~H079d-(7J&(cIK}3dVnE=3L9=FWW(ug>WqspKwDgE?3YjwsOfXl9tmc zKzR!JIJ(EHoM|qr+;gla5^NdYTDGe^l4Y*Gx0BTMHJ*xIw9mHmbR>XzFZ;My$t@Bx z4Z-3Ok#U#_jZ$#hS#oNu_N4{8{_eFg_$Q!miA%B40&7%o=SF0X> ze&jiHUM z^fdkHPeJ?5**F6bkSQ7jZU1C*eEdFgxLkIx9JgF5Dg{?c; zZi&Wfv~&L&r8sqa1w0KEp`DxCAngvp>xGxAjYq21zp-FmtTaI~_CA;9tEfY$)izol zc}aanRVw{k&Jk}Gcr%|Oo}p&=c{J#}hE1#IFLQbHIly4D=Pyye6?CQ4Hy_vIjCPk6 zNHeSd?7mO@y#e{vAD19aTEdCl>9ctC_kR_4!{>tJ3*H?TDd4c;)>&JbS94J`(d_;| z0XYc9_gi>+?7&KIxpaq49OAp^8}B}cUc0wsx1?r<%3KxRgT`-D+vzd9hlfXx9;qV> zu8DicE8qRcm)WoXAYAz`{y^PI#s6ePY4bNUBjxFLta0%#Y7 zV(FdtplO{k_2|*!m(2l%#OSqa*Bp{`etv#qV?({zL+;*r*KpA1o`~I|Ua9-*C*NDP zMXA<(^~IH6Y`cGdk=*^iTkOTUH~8UV%FB%U@P{$6zt!D4Z;OytY)u6K0M!EA{Qv;P z%P+rt_Uu`!P9=p(|F*Xmcd@t9zlEzkc@{ zPuf(9U0=TOwSRr{Bl*^UF<4Ro0N|jpn=Po8Mmi?sbJc(ABE#dI+QOytG5Lh_K=@n! z#Et*eu>`e381m)xfzIsCz(%x^h zVY8v1#YBIiUL#NRMY5A|CMt3nkl9+jZF)uA?;Mp+ndjZK+V(^nf`NEq-Z3Dm*`f_} z3Y9R<25h6MH%Yv8t}z)CC)yfsJyA7=nWz6<3;XX+&Z+kB5zB_BtlMjF^o(aRB2+31^$uZlukC(Ee4sXKp?UExpRVwMLui4xSYk&~wWOg3t1 z^N9`K_g*#{%~`t1Pds^BJlRX1aei*ZH@Q|L)-6G0UiXPbdr)y~K_%^}q*kQ?HD96P ziBkXo0QQ`{-GV97Z`GgTzxf+v+Ji}EU;wchIGl_~^+Q}c| zzP2GVE+kjmgF>N_R1%H3NpdaExx5w6@iBiuF?&bNP@ zIlu}vA8AjWot>rQXJSJI0001rU{~&b5+$cP&Y$A8tL%LxINV6((xgs!&hw|DiLG?* zo=9%*mtr*3(2~h!MN&R=ZcC4D($l)aP4h`9?EKxm!qBB1Zw?fweLKs-1G+}Bs>Xck zA{T@fsr3c?-Diaj&sSsFX}oDj8TNld9TB#2TNcxFP8ROkPHLOdI!o&rA^Wnqt#sm| z9E!13mdQC9Qx`cc1^T`1%ob^7ku$c;(huBQ?J@-cy}wpLRs?N9HMXhSN!EB=4VjMH zTK}kVYM3W4yZ&=0?NQ9{%k((1C7!;shR6(L-ui7 zojw#cZ@3d~ht_kNwm=J|O~H<|p6l9#x?jM`SvLF%r#R>Wz+Y2f zJQXCVm#Ldeb8%mTx1!ZL&jf$CMAok^00000@O&v>q~6=k)X5OE)W%9-9ii0((uujE zO?o!y+-1YrotjFNYSyatvBaqE;$OIy$hQ#|jbW7}eZ!hh*o*OKr_ee#<_y{AtEm&Q z4LfqI)^CY4aL0WL(z>5I6`x&hDxkyiAW5BFpV?UP*E_BvikoY$$R~fVsQ?BVYFBrE zp)quwEN+c977v{zg|POTKcft>Mw7Vu^oonH66%O#*Dr0Rb)&Thp$32Q*371Ub&;AH z5ZibG0002sxlq1H<=$B7j~>qjbn6=TrH-AKdvIEgLs1?dDSX`Y=e^61b|NUsv_?`| z&*cG&mb-bp5qjkm-yDBb>lzg?rlRT?>v1(n7Dp3H%4STk{`}i$yxK`xXLa6?eOhF^ z-!~bR*$Qn0t98bP{CZ%3+~qV6*C}8DUv^xa6-_pe>}a$OHMHzx7b=5jVqB3qXY zf7KTBO~#qSs0;uA0D$MiZtm_sRLFb34tk)1xo^O;pxVaJ*pT6%|2?@~005xkfJg-Z00000 h6$WGf51-ULM@-0@cK`qY07*qoM6N<$g0pScDjf-oL#_Y- delta 55567 zcmZsDbyQVd*DoBpQx4rI2p+n-y9EIc4HD9alG=2Gl(a~vbVx}fAl(Sk(%m7#J@~xu z_uTJ}`v+s}vCrOX%{Aw5{${MTN!dY4*+HU<&`^`d!6e5-KtRAzRFKg^KmcvS|CG@| z2ndL(UwR1Q>1Y513?~JB7y<%r_v0U8pJTBF0>U|)qKxEAPow>>7$#34Ir+-tuwRYakSG7*$VN%QpiStyXD#};W5mwtoYhFCAZ&B!$Y+b+ zD*3gWN`&+R6SYlBnN=l~o2sacTnsh0?RmLJVS2O#2Kv-vM5d? zI}@Tt*_Lwis3uS!$)b=Ofu)|ZPHv=RJ!c7W&)i_~I8n8s=a%Whlo9fb+w0rwb__5TYyE+K-kdv3LEp>y-9Q?eB zj94XJ5u}6_Xz*La@jqB17%dv>lq;-TdJ-E9?~juk+V0Qr*p4s@QiOgjLrQL6{`o-2 z&!gIcTsRrnyf#{}ODA@aV1pmzr+ai>pX%NOSf66*TYI{je=&S+s^sG>xoLw}>8>>+ zbRyGfpR$P5S)yHJGRb++DzCfN3;_ipA8vd79LQgwl4;o&rL4rdsxP*Zs_?`q7Ji5dsJB;V-JQ zMb0ml)5>4t1BtyrzjXj% z?ptV5`Z%}qVw1~Wz*T;eJGLDKJ@1Rg3N~(;1xtj8y1@?3@q-B!?S>G|yl1At{*66a zF(yic&xlsg^@FQ%ze_|3gxJO0q9i#+VsjrK(0@f_C54M?v9iz$H?ReJIp9>RPoVMC z|0RPpZw8?PsK=go$w`1UEDa2=Oy zyRRlP$Z8tTdCM7-S*KwTWP*$G(5tLQ8Q-Q9?A@^A2|KlJKT3-61#90uY)dEOV`aMJ zXrx&Sr;^SYK3x8N~33BODw|&ecECZiRY8~6N^FvqJ z-9$Z>J=S7@Q;UE(3gWkzER5&_^vq%Jl`n$}D2iRl1%hMgM|DqiB#B z=z#qZ=Q*P27sKjz&XK)rz)xHEri7cyj@%B{^OsH5Z|*GU&Tba_0bPWTU>&i(5^D{<2_>|1 zo|B7BqMLLi?p4fDU&aLfe!8rb5G&mE(9*?tq7pfG%MR zW~Tb`;d&oc2@+G(u(6Y(`ky80r34TbTJikAnYl8Y!ifdTY=tSv+(qE9zTF&qlnvNB zuG0yG_Q|V7G${Ohsv&S7^$D#sX02p!9a1IV+X2Xss1Gxd7A-1)LEp1^h|hh^I<^2% z;NHnKP>qaHo08W{@0V$c5YaG*0QXJxe8cEKPz7Wj%PC4QB@EH>Ln__pHknxferkmE)#7gNQ!lNRYI*!~^7EP~==IH_ z9O(qn0U#t;f zvP&)ZWlGYTkyF62t{9aktod`W9ieINWwD{bn^l~WX0n3jn3Oc9mJZHeK|?c$VJSp8 zh7!a-rH2DSUWm@tV218%6#`if^=@eMYfM}o9M{{AoUs}$*ld0+%$jf)0^mF)507+{ zkhgo1Y=TmsrV|~vMC&f+rt=&(e!!ht&9LVaMXMX#28&RY4KvM(z2GO}9!wF}VVTk= zepc}{A9l^d5E=%%$j%Go?<*L1@ux-`qObrDg6G2@SXruGScC7Y=#9uf|3RD&|IZSwcGDL+z{0|9y(HVa4_bb>w0tWP}M%GhWq zg|0+@%7|X0*1AO|`wd)TiDAN7$f*6knCsfUBeb0>$!G#$I?iiD#(w(4Wcqbps9WAq zQ;it!!S~zSBsA^YWIF%ZlQ^x5Hg@Pc42!RXryWV{@6j=;nzsPng3Li*+hmiL%w2JI zEFAZE91k^&A}1$q_SAa2x(M~Hox@uDtS@^|l>o|Y@>W?1F>yV2&%G%&wU*Yl*KKvHGbaAi-Ru{$Sy#z!Zh#u~5z`nSksD=J{YON1j zaw%U{Y1qZrU`tnLqm7ySf+%x^Ty%6G3aeRu@Uo>wEbYt?u8AJ4lp4*-3VMyZZ#dfo z>%A;5FHw!+`|Ry?uq*%S1>m&9>e0aWu-^-I@ValJ*c68y5UCq+SDq}q=Yd`xcN@RU zKEzsm4^Tgj9w{*lckO`mka<}`RCK>o(+;4_H0Mo8w0oME@2&rtR~NY%WI5(?3Du_3dfO+};e-mqD!vT?4GEPNZ01KxoVYF34K|LSGYR>5B(_=i zrznVMb>lKaRZa@{l!c&1F}agy0qj9qNJXOaLD_~~$hS@EYDJ3H@(bSPuZDmLhy&Hc zRFP8$(u(sF|8%A)hy}sj2EzUlhcW|~XZ#C!ib-crly+E9{pa``!SuQzi`p&$Ar$&1Ci%n4ObMp2vA{Nc*du~>pWwFNAH7H$JnTC z-@3@=JjN~bdMr%7%a#rSB*4w;=G2;{gB3eM*R};);BiIHixkN^Vh*0esL#yr9oQ7E zJa4i|feZYpsmu?YPns!kA~KLVjB^UnJyd2~#FmlZt3nM{as&(btQ0w`hw4|MbCDfx znJAfnu4SdgHf1o&L)!wowhXHnI4Cc51yBz9Q!%o-G#5D+sp0|bFUnYc>4|J$G_qgO zMqHyI0aTn%D=!mJZIcyR;)MD;JI&vUMFvHD8#WgXJma?rHOG=e!VGL?hzt<2%=pxU z0s;9*uMZ`6jzcz{6&ixRezWOHSfzeun=H|?V*jp;*t1PxHKm~HO9l%hm%i~KC~1ZA zK9_DELrz~H^DG_k83RWK$`axwz~5cRM##F@ZvDo~R>7XwWQZD?>Q1IntY2pcr+$G0 zGdIr2Cz^~0EZkG_X3Z*W`tt=nR@P6o#d9sIxYwq-Twflj2wXVj`CFJ^LiN^;7*{?p zDq}FmTYra6kt=M;r<)|B=2{3~PMDG}=zX}qt5|rG77HYt2?`%yHEI6Tfjv?P>l_NT zlZ(zTT4jo~7X2|u;dDoOrh6wwr52H=1amKn!58#wXKW}z@wxi|!689;#d)Lm$O?)D zUx30agy9CQ!m~Qm80CSFQbJPgq5o=f!?~sR5OevTpn@N&XA>r?)cJ-YAf=Z8sp0^v=Usq7(iFFVI&e#ci2fr6=r7g=Pm-(L8vBi)^T_U(8KtUxQwO5FYTQ?5nbTCo>Kk1!TYRYs*Y zB)a#F@1)2E9)IpAF42CtAV?$gga6FAc{)O&E5{zXLKurDdX8@!(3b!F0Yg4j;nf(ohhwFV(X%pibvxFOPP4ycz>#|I=sKO zEFTQt;T+9;S$(1*w)$e}pnZ4v?r4d9X=m{Q0vu&MjJ6yB-dF9j-p5EwpYgo#9>^TF zZ#s9CLy6Aufp1DoMB#~vqU)Q-e_l%#UBvCgHy3yd}+Puni!isowUf_{o zq}Amhc68C{$^vjqH8sMgFoP%)!wv1|c*KfX?R8-bA9Y9;+orLLy^4E`ycF{HaV+{| zDT%kiLmLYWkPEGglwqhXO&T?5sO@fIZ}YRi=jEa&CeSsnz%1`0s^%`D2m{$mZC}2}1*8GJ!^i zvS0hD?c~6$a~#9ty#EO5#U<6Fg>H?*3kE-~9ECucE*lOh`sMzF(OjvHFw-4#{qvV> zzSku8YbpJic=~Iv+}`e3aVXs=8_CLu{QxL#bg5sX6PZKuwrhP69uUkc8da0Ye#0=s z&vweM32S^ChM4Z0YHtu6g#J#X^ElB{HN&BRYGa+e%E1Y6v5otb^=%}NCB-Y@#P>Mt zAmO~DMrXb|e2N!6Y?PHH1@+k$w`2;5lCjK1bA;$;%8hEM`sucx$;3-S+W@A1mUBZ% zy_8a!WsJH#m$Y*vFlTrH{usIKqmoskn~>WA(`ZJ}xbph@=wZ(mx1d;+m3o+n{|N+e z=RXr1^nWff+EB{}+POSeSxiZuIAWZ0F(Du()?*YmSa*!Fl8@c>dA(IPu@+XMJA;cHmcsk*)Ic0`X-0@3y>xS@=TR6|p6kb_jnMUS8z9|#V zRc#mJ;r?Gr2x?w=7P{I|yDoK#U`W&Mg*RCBJAusQ3o0xC{WH3Dze+6VUf`R+EusCC z2`f%DF~~rAxHkk&iZHh@8Z#E;I=R*+Apa|ma@jZ8W6&VFH#+_hI3ML-J5How3G3kZ z^6`ohr4tN1V?&{ds_3^EU*Q6yj-s|2!C)Cc{=nijfUbl{La&*!?4fg%{*rMNXN;6 z)$8)cTQcAZXDAQl8fh@^ z%@p)8u8pdw^x#By=AgOxF?#Gu5I9o-faI>Zd#pDjU?@M(aN5TsJ|0(m)MnIoWT7AYMuZ@TcgS0JKeN|45XfkUhosT^N5oumf}RCH)jK z^{_lW)%UCn4zp3!o%wK|4i&vmLi`ix64KA3YFQpBX?vjm5#HM1h3)e;6#1C(n=qO+ zo+x!IkgK78ty7wR5bGtGD%Xqfj%ggjmFrQ%brc}w*9pz926md0=lGq2G%E7O--QmU zh}Rk&N(m}F`rBSpY_9c^%l!DMy4r}|&}*0pWi9cS{ntcXAEU2tIWTFW_frYDu_6Th z_i71}5P2r;Cx<$uE%uYQ?w_}e!LHE;h}Yr22i{pxhjHI z>vV0oBqhyuJ^OiZ7le`d>3web#}`EO%p$FBO2I?fO!-Ee<=jJ0!y?bBxan$3wx!#4Eso=OLh9`O_bj+-n2Fb^@v%8q{C{xPBIZ)8MpP;d)n5r9WS4C3kAaUY9 z96((qVnT?*Gj7<9Ajd+Ur!D7teKW&=cGx9qafFWF79RpQJk=hGjxQ3a!;+ivm{Zfj*?CzcSKje zwBQQnPlNqW{Lhkx$X8rL&qgLenTX%F1U?>(Rab#EVzDw&Znl}=G~@`;r!hfL2cQ+3 z$BL+P412D4By(0B;pO2G-^ zrdz#G^?r5C)#QM`SOETpx&Qj=KQTRR7{!ZDfcY{_c|U2)_yCp&TKYw??#VYdyNc)P zQ6?Sh5oloPlG~wxJ4+{l(~ZFWh6R*?y5axb$ydVdbFP1Dwbw@2zacUlo*g}7z9k}* zTmz(}G!wEn|5M=ELX>cU;wEOnmGnV_YrK@6!@8LDw|mZl-yAp2L%6>|MJY}zLjMk_=Y3yo|a(U8f~`yrA+Et+vjo`H=LQDhqKbNEA$8+_{m+k zBYM~`5Xw3xG`aJeDndhZbqy8X{+L;p&_^X}YwE!5HagM7%ZTL!z;C9uBW9qCmZ*Hl zj8ei-1Jx6Xs`chTbr-=O%` zTmvGcCYq~MX#0MEWNk-m_;}pqv6ulYKtDCG$$!QOM-`354iZ&me8MJ=3f^sD7W}KT z)F>Yvr#UnSoF@HTWJgj&Ysl}*1FZV_Djc6E&2*)cR_QR@_>btekbvw>LaAXUZ4DSk z&SnA&yjazM4G^yl7wnJ-+jr?n)reHOoe;lMvU9Hi&{}?~@~bwzG=so5R*CU=Q&i|? zpx;iNnP5#N11<2H*7H}oLx4G-J1(`YTGO?Qh(R1zGQB1&!0z1pUc-R9XB?_^QI*UK zj^J4YDVq`yhx{n!nS(SyD#YGS@c;WP)e$h-1m-ex5yw75*y4#gvVfNL9Nc z0Z3g*kHS+1XBf~GH(6jJy@fmpPggGd|1RLWEu>zD5JQXqmO5fXZTfc`Z8d%T`z94X zzuAhzNif8->?-rRi|vfnN}3Zpyh){nu);Wfx3V?Cs=R5+_?@CJW?|gY6wd+Sb>EH= z(Pzoop%O1ZkE0wzc}0_K8A^-CW}T~(Uf8*N{A#92>w5rp9SK`#**S5FoU)G#$73P+ zX0a`?#wf0DS>W!mR=5e1Af17Gbah#RFXZ} zXY>4rh7dAj>$69vYB2uu_N@-d)WZddc9I+DC9oSJg$ny2ni=P-W(`Rh###6tj3P{X zcitIJ1nW?=8KuXdcHd9^pkCc0D&KGA6$F^k%t-7qGQ+3O8%jU=&_%g`;Auld-?_r4Ock84}>6%Pz6>aCaFy3e5cch}m zMuTeNmmLi+o-WnzjZq!=+7G{V=Cg%l@xw$9X=Nm)X%pxeIly-fDmpqki~Y7)H1qJ; zJ}wq9na6!Gic-$2fSA7;rHpPisY=#th|A9^h0xW&`xTMLe$Alf-}Qe0E}EW-EJ5t- zCJCk=;1No*;f=6mYYmub*Jh26l~0S$ZJTP<`3XPnpbvh_tqETBCj59p`DRz}@CMAy zsUU&d{i2iFY#8P58z4z8)E~g-hsbxYe~+#zD2501{a&0#bA$5`-1?jKR0*xPt=sI5 zhR@D$A3VjgiZHQ(_Z5OY@mqY~-H!Z&^!ro^y~W?+Uw`|J zmiJum#d*P*y?L3 zOWf+s)7bO2!SS#1Ego((y8@osU*9fgcni-S{;0R@i?v*6_*&zp4DN#GosxBVKUo83BHq4rMQHL%e)bcQqoR%a zT-Y+&wg z@7ms3Mf(JkhDVeBKB$2iby*OreZ&T~kz=Q23Q8_YQfRbmWSPT2InQH2Q-{$-m6VbX zU?5O_@YyNe^Y=&lfLCKKc!SUYfDq9li)ndN%tC#JEEV$p4VP0;smF+93!yU`Dkv*c z_9OO~LsCV=sc~MHyD|J}IvUR)->-(u1D3F}(E~-AjnANW;+VxJ#G;9ip*6ut&3yv-7a@cf+KJ4MpC8Ksn7 z;g&c5N`FRsQlt4PcLT1AR4`TU<^<1%HW;{*w}W`JlAkFJuY?$bZr#_P-cjD=Z`t5( zr?kuDY-;f{+<&d_jMBr5S2GNKp+77uHaA|A)b^QETC7)F6f2BLt=-%{xVt59FcfqcLL1onnN00@zb!zDEAR;A*MZA;cyxt6HOdOnI|x)4K*NIqs$Sw zl(pTMAs-S)9SWhKdesRLj^M(@&BmLAD35-=f1UP5=)(s&u1bygO z$@cEtRpS!@cQtcyd%#Z#C05(=dA$E`qD_L11UzC=!MHcaC_uS2qm0=au5=n$tZ1lE}oGgyu)ywri^=R|~P0^0Q2-SL@kk+>25`xSo zO)2(SS9qU!zu*}R!_h9Lj64hI!BVSIP7Lg$c%w@FJmx2Hs_a=orUrV8Ow|SX@oPc# zK^35i&tSCAj)}mGMdou;+*hfG>O2-{l7;AosM5cP3s1+wADcCmQ}juZjM2j+cnj%H zvuMM5hg#9Mi)$c(y6u!b6c?sWlRN!}d2Cdrn=whZ=@Hlvx`Z1DOxpx)pA#Vm9k0Xx z?5JF#~1@i_8rL9-e`L(uEzXqV`Yt*L)>V2`i%q${7Ik!F|EA;}cK$K`^pcJc)u z{UP`V)x}NNuzyB@%l1DP!2ewRKNlOEDc@Tyy3oY^lhZ^#tJ~N@2;i=@O*(Y zJ1`bEmwnD00-PxFME8YpHa0DCk~Y~^^CtvmlfiLb+O6FjmR@p(HO0`a;040 zhZS%X$e2UUUcrQb#h_O_WXw`DF#jQrjiER(jsK`R6^q(i?Ax^R$sm=F038Z$`ELw7 zJ}_?5Ca{8p?ZB8nY8}=%_d{zS`lLKH)?JQlXcsBy@5})G&OpDdBBB+^RKj<-pFR>y zg##%ZY(Y)=Etxqj5z=9rc{?9p2Bj-M-nE59(3n{FrVuewFiOSgpkjH}t6$~H$MCbK zl{Lx0smg4aX%z`O+Siq?DCO02v|>J2yfirJ!h5SS!Wb2TtgW}0sI!L z`>9<7uD>h5NgbDbXj88fiXcFS6 ztBK*&kBly?bJSGgwRB7ED4skDfcs(zEvGO{MnH-#fQ_lXFtHvJ&MYG!Rt_qP^?3j8#Q zYdEV~?hXEpc#kbWO&HxXmK`MQRKLN7DY#LPZu0TqkraGFl+wX5>Hi_b(=@E_jj(BR^{@}2|KK~|NUF$4VB+#P zoty0G%FY0^^K>EJ4sDwUxJC`=rgm~qIRo8DLtRkdIDs=keE%8Z8sBdvXyV}t5HXp??dBq846w+=;^oodMS z-iz*#>yyjbi>8RVDli-f$^Gd9wdKNf?TRFf!Y2f<>k5!n z(2hW3))pf5`c`ez%EU_sVo>eOd-Hz+?QTo(KN$+K1ElSE;Rq78@@(VIC-?~|EM3|1 zSTmu+sscHDzCfBSM8O)OOB+VwVzTo66BA|s8;I+7z(bDwm{b1Tz>_WDD`F$0sK6;C zVrQm^Qv$W0Eh8Uf`hpKER;fujgrcqmW&bS!l8;urkxz$c3>@XuVrNZl-zd-FZ-&&8 zig~OqC;69fYP2#SQiNnyhv~zu!wFuubGF$YdEXZUYETu#;}85KaJ`bgb&Y_Oc~8e* ziGT(m%=RHMm}BJG_5wY5V&s4^G9Qu{P7Cg(qH1c$T_YxyVX7rjNy$fKL^J%b%Me$A zU7kKXM&ztiJB0ylc4(u_98{#$D2Uc5_QsUwGO|GD=Y8X_Mf(*liOuh0q=S-2D?1@o^f ztRiF3n}GP9latY(|JxD4yUd*7H{=2t1mlt@7fjop6{z4J(ES|*|3<-_VDx992HHS{ zg9{^%-TF+AETnxB9>d`^jmLKy-HtOZG>R?PC3)|SUW0y}E|mNby(F@rVuh+g4N-wa zy(8|ZCV$HT_5NCUsVi_!FP&P%G0hc8(x*>lu6Tr-(ai&6TGyV`Z@LS9MLE@)1?z5| zp+D=={mj{EjH?lte;ukmySmAmpaF<2P!6S=&pdxMi;{t56r52@P3+(ZbqZdq!r-A2 z+#6T?@lv`&mPf#%R)=~nxvI$FNVOEw>OJ8NIz+D*!vfJ5VvxX>qIf| zYk4M zTdHs}5xi$hz?)(kd;6G$KjyH16PN%0#gE|-Q6+a5D!h1~CDI<0*sr7{>S<08TjXOW za|}c6;40;t(&to%h1_tJVmrb*Nor?#R7hZ}L73WN$%wG{N-@>7KGY#opnFf}8tLYv z3>zYDDloKtOI8XBs7yR~%I0KzihywpOZo7J5QpNp+>o1^Bz;z5xY$ml&>p+(+P_1;Zd)pS^!OAf~Nk$H#tW2N|5mOTRtnTJ4#+UG|! z(u++xWQ72vfe>j*%&-njH1Mj)yPR7K|MDIX4m}p}g<)>hhkpvbAt=Z!^6N~dHV6y5 z;_|eKAqmHgnR)&*v#Is=dyEY{0#TG-G764Al-M4NL3pDI;CbUXDw(>H8Wr*tQ()JG z)ef?+*kQoY*YpD%P{8xnm`sueT^*7dnXxi$%Blgf3unVv<_)kA;7558^z9-D7YDfl z1BqZsD6>fg`6KlbdJ+OtSrg;4fFm=S%KRdfIjEE$0;PfbEiF|nze;)2%JU=#Uji|^ zHP~2fos-55fDp8(!R617oQ=Ntxhe7T`X?W(_5wMSY_1CMq2>-tNm%eNwPR)<@WL@uJ&cT9V(;1 zr=7kCK&T=#_$XeY`kr%)+p$4U^ zB>-HsfhR5Gc8YpWapp)LkcL3=tDsPYf@;?d%zxI&T)jClJzXzDm(7wb$>;F%I#P;K z&?R_ZMgpdp6#Te-@t+NiTxKT8URlkggzU9kW+g=pXHDV)#-1qUh5ZODtLV0RVC673w%!=&|(lH)Bf14n3b>E=ebvSz_r>2&5 zxoh9}JcdCwHdIp-&;eX`s1Y?N)i`7D+qfbWxBLYBt)8a9_2s$cIPW^aF5 zF0-XnACy>@1>-p+639(LHikAgHMjwvdBgWWg0b5FHs6Dk3fAZ1V~BVXGkBV&p8{ zp$Wc$f&ZrH!S?$;yw9o^3l%{TKkS0~y!+ZS5p<({kpra5VA_OYt7@Nq)*8>533^I} zT-<2g&&@~--Y!$s&KwzYRc`5Nt%hm+w6RHVjv(%Ty2Jx2s@>|?<->zqw6lIF4dbPy zdS%y)LZ|@Fr`!(apiL{p#ViwhxF{+RqK30n@TK##QNf*HSN(CO}& zOUNAb2^|n@3N1E!X_dxz^BnaUSBX#mYuetBHfm{~aDRTeU~iMkjQ+yDrS#(>>Eavn z$38EPnDmCIw@>7y7QS}KHDVO%GVBe^0*JLaoVbsjF6CjgOt=dh`bh_Zr?^qQ0d@e!63t5kq{ zc^&W8Odh6oKqJ`luY&1vwz$syv-X*l6$exa^dd-&-=pF_0pq+2HD!e;Nxg*f{33e^ zO&a>Eyy8aYG)?F6I4jbcHLcenbe!Vaz zu#rbKXyC&|1gfKbg;_Y381NEcau6k%zbb6B6~u!S6un$KWhF{!_xPU9N+FzlG<3SI zffjqU{Ad3D{bJiazoXtwvVtJ_b3SYaXT@ptmYS><{mD93?Tc66x#$@oV>fhoGA5#W zW%o)WLwiPnJ1Hhsp;C80vKvVOUS(cQp;0ZAIM=nVi(vF$J(y$72%AL$j<{#}95I*l zv=C^uav`swqA*s}=SB@GTG<(u&Pd{6m6P5LN57NJUD0Q^qlR%W7*TZvTu%4@3^x1y z4l9$gv@P!7Q0ZY}l|6=@=8|S9+pwfJLV4cx_E>pbW(hq*0V5O-CD?xjfcsj0sf>PJ zwiR|nN-9xSv7}D3{x~lb(^&E(GdR8hg*Qa0oT>kkdY#E6|7S zw2WR-#u>gnYxSj=7i`^jK}gZ6G*pR5y7TtXY2R`;7=MWg4R z_Jw`-WsKF2BDxp*a4E%r<|B!#tUqBM?$kdU%H9sf`eq0V@#njjFSO>_cQ?$=IvQ5< zUCi$eSAL$KYrY#UEZ8&hu{_9~;T`2|hlJ=-_Y$NKa4(BY14fZ5NKpEwvR1%gVdQYK zhAkEg+#2?Z%BSywb+JAnEQ+LSWA0tJgr@Q*EcO>7*^RF5w=A_lv#IpGT{^OU`60=+4WQvX;Cu45So86k^edV$aDF6}?I zTvCg8=3iY$Xm5>Ja*9}HGrxrTS+1Q@fDhDM2zV}1)Lvy)?LRD5`vH#aY|5icOWf^e zc_I}Fd>zdx&OYA(zwq{1<6zOt&mM>L+zY6L9{0q3np`8sp7)wR)?{HCTooB?f{QC& zkcC^5D|VlWHyJf(Gc~oduKvcb^z}H0UX-;Nm_7$UC13jVv%hOuD89J&eOHTJLta%5 zjM5{d`$>v#*6a-1P0(5ms#3<`(I8)HeN3FZ#;ELoO3oT^TK+BeY{i_>#At!eqZjaV zf?X-LruQrLt!l4qHtxN_@vSKx)Q5jhBQ?vw$F%>xr@+Z+QZegxpMHBuv(YEKCvtGe z(26<5T33zFV;uF#OmJVczif`An3XVf^|n*!LZgt6i&qpnt+@ zzs7WMJ;y`;f%^;|-8k7-M9g?U?{2j@_AmJ25;mI77=}|4&8(2HFLt$2V%J>MQn6bM z5TazmFMnERebJw{m)QqpWXUuCgq4(*?#5Z8$?wVmx|7D1%o=fxY)d~GdKp*x2PA-u z^PeNItwg2CWNDWl3A|$(%AdcyPoZER=@pR4ekI;`Kr9n`_3>su#*Z&K+GE;{S{yA9 z<~I=8ArMa?wFX+v?W=z8`vdC1w#{hu>u1vkio2PhV9(Kz=aU}0L-J42l0bx=>YU2I zD_h-AfFfxHdIe_c$aQ}pO9CMYhcjjG*a4R+{Bi8K$l%)dMz8_qu*W8 zd=_vL`F-#Uv?K0edV1C(l`+Gy0)JHG=EIeLMC)&E99oEc5}gtNMB@@OLh!}Be%}J- zMMR<>S|0QsXjD^#zqj+*$f^!5)efM#rr7O;+_^^~kuG^1oQCp-Z8lKdu5}+gTnxp& z2vhUj-U<&Qg}wc_QXq=@Au57!vt-@SMW!p-}o+4PKki`gr+a zWV^@N?twg)XwINW<66hUQ;5f_A#&jIB5PIQ^--ED(ia=)vk0e1qFv*ZzJmvQHOw9Y z`u2-%9ra4~>9dO`)P!D;!M(PtUK{nGE{i5MTS@)#7Fp>Csos!oVR!(5?@Dp~rgL)R zzDW5`Y9sQ~eJzhsO@2eiKyjbsW;F3$p&=RaV7wnp}%KpO=DYhA1A zwlk3BcWfu!tTu@HH;392F|5z;Hp=&ml&DY~L#)KFR^Fu6D~G*?!&u&+6zsUvZvM{D zu+$jMHH@N{7>wI~AN0hyT>W5oz;A#E1kGrEf(HL~T$Oq$GW0Zz5m@882udz_4(X0r zi;BW=Y;yl`q^^G!BmZUT^0cit!<*0jf=ck+vadwKD%*5(P>{j}&|_7L4s; z)(7SHR4?2ZR@JFqR&V67+^le|9|JYPCvtEWLqV zkLgSaTtp21o9fg=V5w+m2+2U@VkvDpNUAXT-eUs!s$|Tul!9F(giKEQj6XiCqA6oknRbWnOco7dcW&mS$SScZ z_CXn2xb94-B0`4YDPsgYNge?0DX`g5ll58-w;Gm^RbG0R+&&$Bo93rkBNcXS&8ikIr=wu=C4`Pg6<+ zZXOaN6}a~|U7vcT9{R5RZs`{yAOshH5S`&kchRAzGg=QjHKOxWI$0j1H%~dN(s7ZS zK@NHwaiacHMma+$%YUbR6beMLBC#I&^qxV;9?pLr#VI_2K-{>KbyW56;&(9yOWzd# zz?PIzre{2ZCao%)uGQ3k{1AfZTe7gLql!?8S@eRZ7e#qix*=IVS1c39%IW~wo?P&O zL#0gdo)$n$63nAYNq2Dy;BpF2mVsAfT-unUmd}_2pI}AX*`uMD@&Y;7sUvTz8(oKt z4dI_L7IjY%Z=~d5)8;Y}Jf^eTsZj|i;|b{hpfQQki2}Mk&Fb0?Vf=TCis) zP$BsL7U-(`=7-Fp06QR!U_qJW5OZSt7Soq8xxQKWE#@1;6Dhbg0<9H;8P~d~T0+_I zm=Jn%f%-I(GzC^M4bx#)o?jkXU26$zZaET=v?5)oZ81LkbgBzxfJmNzAq(j%X!_g# z!`fSiMYV--qjZCGNT=iwD&0s)hvXm)iqw#jn{ELS1f*LI9l{XO4H7EdLy2?=NZpOc z<2hg4d%x#C_YWV&nb~WvS?i78`@X;RZdL+>b}%Lc40V1@Yi%Ez*sj`+kli3>$k2I5 z;^k9mD6uiurjynBLIjx;QdL@Vq=$3QNd4It55WqasNZW~1(TUf^fmjoqvr^)C)n|M zd?Mic7V!kF&x}L_ed#Gq0Zecu*jyyO&$vBW!szv(0YI(vN`NA;GD2nP=Mo!y*#Az5 zKzoIwnikH_sdD&~y+`p$r(#^7{VK^%k%k%Jhg=CI8X=Ff%O1pR*lT;0bBbgoSPX8+ zBh@GDWowIQG89?bOh2e2bL`UtRKXK;RI7h6V*g%oyf$m1K^Z-GGI`+JRC!Kz+=qE; zPP_yydQmUQUL}rSvHY_ImY@WJf^i#bP;Da+PjS{TOs(M*7H@M!)E>RB&3`JFd+_?w zQ%VFJI3YsC{)jX9omO7&zPyBjLL9PBc}@hk2fHQ!9fh9@^gi9TqFY%a!hF<&Ub%O$ zA1LM>g!;fEKcMhBAc)^EN@owzj{7~@AhAXS<8VdkRoR{8C|vc;?~%5&BJs=E8+7;X z&`mS4eEE1aE=TpgR+rgog(sF;D)KFwTOftZnn+M3eCg@gsi{|SRyYn!G4F98CKHM=A*ta2oYeXR19K*edjQXuM)aYS!y5^?9no}NuJ&Bihl$Oo6AUOk%9&+ zYF(*wc_15=mOO#j)qq1j%T?=88vK|TG@bW@<)D|d{H-;)ES!jOJ`iXG}0XM>Y&c~<&c zvjPw$ug~zGHDVZMHjp_;HH|&ywe91&%lD8s^o--R@tD~tWjOH}n-EWj&j|j?z2&eT zp~DOMOD`PV__wKN1UQj*fpgNV*+S~6IeKTVb^p2qBzuRJEvRMdN9je690R1^lOm47 zRSh0#2q4_2{(0CIef3rILC1N&2M2&+q#1or`7?@}-Put8_s-cM3lS3*>@IYb&T&R` z@?{-9Zb&}t0naPofg2<2V3yv94xtsO_h&`fJ5!k=29++KcwHi&hv=r67R8mXT^smC zz}09xNOJDF8?(~M)}`Q{&7K`L{p_UuZOd@TDB@AK>s2NJebCa@jJ{GFmck?2{XTl$ z&?%RXdczctX;TJK3VBQj<1Zk}Whg|;oLANXh*V#}r4e>%eN#NLPZ+78_a;8IdAmRd z_$_+D;8;4h?0g@T)Z5KS?dU=mWBFkfaKYkkskA&CCqdH09wnb$QbUg%$t}Iz*Y>>} z?o1;FG;ll?$lmRWh~{}KwBgNv&4lu{+F3f|RZwaDMTeLLI)w8{C;snQM~Sba%unr% zkKP*uW+>b>qe7l3quqK^(d?4n_L$X$OBCDpo-qfJv+y@ZqQ&hzu`gej*0E9Pe{Te6 z3g*hb$x1c^ga$mEtOb_pb$Y8FTGIU-3i5)=cNe&|A$N$4=Jh@hLv%b!Gx=?@U0y;4 z%)ms*t^NLW$IwVzDd|*74?pI!%qI$^Vz2Tqs$S!*dT&16Ox((G|7XI>4QP=3&el-8 zayquVN!_UxrX2z-VNzcB18H?&IbXb}uW~%&KT%4wjrMa+6 zJ9P)%Z~(58(s${ztM+pdqc?$y(ndS-sq^K!WJR%tM{#B;Y(Y4)AL~w56Ltzxn^tNa zUp&sd#yTd45E^$jw5;^Bb2MN-;F>_vDaUrA5FB8&QmADC8R@VDg*WU~-YLk>ENkUEED_9Gc=ek@3|-P8#uhW%F17e)uCkr<+6apli%zDV0* z3#WfIhij0dl$guj+7u!RYvH{AxF-%>D3n(M8>~g5?ka~2sU)%gwo;^Q5WvlP*;N0C zOu!@obUU+e&i|T?~bGN z1c0)^*lOepP2>XWzh?R@dC1IA(j+nHzK~x?yA1- z?q0Y>x70&xz-dg)6B(R=R3vjH0h!8^pOq`1^n5a z{-{*^McyKgicp;>cMvZPi6Lb-aFPZ=L*BQ`s`MJo3m<=URb7SQ&cWY+)Y zQW%jL;S=~)=oeVQHT7yIqf!{^Hu@&;_K*_BA0D^&KrFec%$G_D5kwK=mJ&9p-^7X0 z8rNpt@l08=p{-C_=LP?69_Hw$bmZu^>But7YgzfL1*{*6Y*-k!0%+b?fKgziuk;rp zaFJ+WJq)GpvNkgzwTVD6=kOu9AvD`^Y7A$VzS6+9fYa zq>YFoy)hbT8n?CEB1|iW;gD$tM-bQ3CB5f8?#>)`TXSN5?k&^5VZB3>LxydY~KJ5MO1$D}mc{Q}6FjdXvEN=-UhPurwSPhhybZyM56qgTObyn+qOb*+ZXRuVfPuU%C58xE}nA{y&A8`;MdFVfuSdX=DfNG0)bdeJI^_7s_A=0j* z_;a#38Ye7$>A*>r5|*nI~9H%YlG^u?gN^olFQNR6dP1A=r36k|ii=H1UB`z*k_@tj zgl3)QoJ&wTGzmsnc{#sr1}=XZg>!TE??*}641*@BOLr|V< zIIuVIf!HXyiHZuRO#a96J%P%;ckh~b`hr=5c|<+o-5qCwg7$r_p42zEWZFT+NNsDb zxGqnSA>@VY7<|QiCg%cF(Id*pva6RJ0wKH2aB(r3z5(g5d~eBrh+ z4a_t}8_*HfQ%=OcqoCJp6CG>`hU`NgF{ji2ppa^nZfmTJ)8w|2<_bz*v6bywM0*%y z8l>$zzziwq@>rKq8K%Edk7h=!g}bwm3*G^@z+#LagyW^mRh3>K7_TCghx!U(o9hcI zAv-En?i&n!kV6CJ4eEhUtP_JvT(9|_3nfd*x4!Mi-kR&_5GBS<3y+E>R*^wi{G|I~ zz9{|4{h?~kh%+5I#SK2eKxfHWvcp$vE%f)NJ>-sIoP~XXz#OEqPqH_4G zUT`8=hi`Z6Mqg28f;>vQ;kBj2LlT?p-beOF|4wRfzmfayBaLI@jA}$eI-&*Ic{^Q2 z1=zIVLvzCu?bQCR&nJ9TU>0J8Lk{Uy8ryz-!Da-#3%!u`NWZhzdP2bIg%4(z(qn)d zBwhan$CHR+gSafeakTF~?f>$IMdS67%DrUGs0?@Ui0wzwYAWwC)ao0MX%fw8k>91I znS0MV)E{uSt-qFmO6y2Nzt>sNFg+pBv|ta4LUj&%eSfA5Zh)+vL$wV;jP@9svDB3a+JRPgqJ8-NhEg_T#*6}XJr?T8(=Wa=4tSBvhS>01 z|1i3&`KG6YHe;g^f~P}aPE*LI(qEYb*5!evMz9biVOtm4_T8a(;2)ZkR z(jfT|%z;ob6|zMaydO)!N~;k`vS<%qpurWFZYd@lTR|s!7utG~j(<36YDi(}OG7J% zaA%}UJI2j9Ha_@9qNBJtu#Wa(S*EBf^gdhlIZTukg~%v3G5sYB8QY9!sWV1L^gAH% z;dMNRupsi6;>oYBI3?KBGD^_>IR1wN+>J=kSF$~CLv;9PBgVd_B$E+MLA%%)XTMU_ z%0GSWp~yk-;+2FjW(4&jT@ZZ5nrS^ks#Z_iYW{5H*>;HD=?F<7A$6dfeR9yN10x1V zVq2lbi`>LuVOS38P!Eyl_ldkfL$Lo+1k%`ZWCG_=wtea9*!|+*xEC0(Kmo5jJTmo( z00`dK-b~la8dh)ZW>M;b;(lF&D2`{^_StogkC%nLcjy@wbtAxg{}iMZ5JWW`v>9fB zz)b{2LL?}fw2WR$P`t2=rz54{UOa<7?vEs*5X6<7^3Tc--jJ*D{pzRVY##)mqX%*E z^L=80SX2Z#HHAcEyyn4(+01$I-a;lX#IV@-*iMCmQnK1v89^7ViQ7wC5dg2umJUFB zN>N1B&1x1BJ1vdj{Du+X4H3tW#zjmTa&W*97T&@%MvE2*keEcW&d-EUOed?L^W&ni zRI-&bhsl&Q7E0E@N6%uNFai70%5tg*^ZQ2JC6!w5aGblB;y(W6siKF|VT6JoHI2HO zhC}4ptcn%~uMl>AcGi|dg%-z5-{ppoEr`U1J>PB!SZniu(Yf<6Kx(5>LbUA=y--dR zm%8X6i5!k7Z9z^0P`;_ay7>Pryr$4I{n7`(Gv{DR%yuc(9Cq@mm6oBdNAd!p#=YhUH*T03H-WFQ4mHY zcJJZEp|MrZ5rhuL5n5s;8Ae*lGzNVJW{SH43XNx2-@g4JVh~={{?3^R6~?~GHsE}a zXroSJU`C&FVzco@eC?Jfa4i$V91YKZr(|kH;JvwaLPI6ip`XqqaN&}W(uE*qde?`L z&36pS;E2KV$$)CB0AJm}s=?pa)xaN^3ptO}>OrT*%;Ex?sngdUeYg4a^$kodEj(H9 zp)zc)cS$w&3&*EYTs>%Iyza*&RDnD{4> zmw7(drv4zkFC1AIrb{rHT2yF<;-FuB5CwK>5*3<9YykF+p(-``B_jHFifSo#)U;=- zbHGZ(4MWdsE$F*KD0(69{SY#WZK-1K#z#R&8D&(Bgr3;n=t`ND818uJZY7w}v5P-h zRNo5g3ax>~q326~Pp5=bcy^;V^0OFqBlpNktaOKJJLd(FDvFsVyMZl~`ldF1iDl6gAOle}C;_Cp5b=~c-qY%k>uySk}HmoH06YdPj}iz(05o_C?UG*YlR z>W7b4Ibo9IAv&5cbn0o!4f#1LQ+HgSMJp5yg#9f^ign2I zIT2c^LH*mBtNB=^NkL;1$hVaiaDy%3k+@IC&UO`)!Ez3tYA|K5^D#7W`}dqdNr(NP zzXbkwU&fPw6_<6y$25+eO2?-j-uA5o{|?-eV8Gjhf4W(3xhLnC{INMakoI~=9tbbW zOEtXIzF4s_t9>a?Gyuy_*N>;z{YjYVW=@~$_tYYlrG&af41(P<4{>W|=nWP=c#lNN z-2;Z7!k11?vKGhvem1i3;&IxdQs`4Wu%kL2Z1<|E>1N-jCQR0qSSt;09j(ZrVJB<@PZF!Ca6yhSR#=l& z^Kg7L7g(X9Wy7!(XX|p7j{zOQh@gkWnTm?g#g%<`a~ZwVeW1)U~Q8P@?G9y z5BeX4CDAweUCpbU(hD!}8mn|3X7sj>PaRz7Ok56ht>w5p&~+hPp~T1>to7bb@+Am2 zP=K}XVh$=Z)4+1v%icN94J&k`M?~RXEAvA58i-Z8(ls-QD2AN6LyxS;DCP|F0G-XQ zP~3iL<*v1|NyyC*YTDgNI!TY8>Gt=iH+WwcD$3gcfAg_i5~c>nF{V0rrQ%Jg1s8v z49vW<74itC*2XIOIbzE1v<1k&(GS5HVYUxL44;M)N0XvB)$Z+Xx3H%(LLOx8H{Ykp zYPql<2@Jl@h4XoLQjLfaJ$_)mW4PDxEYee!R`@DcM6ucRicRBrFr}geOyuSMlB0D5 zQ}0wx3gU1>%Ez+5ZlNPY{+oomBcetOcYt!~%r{)eqsYGM=34G!atWrMTYDyECgR%<5vHu$C&CggV>LV#h@9qmo!%q!K_fLwF zLdcIV0MnG?`kSAq?B^t=O$YQn*OYaKsa%fN8%}DWJpP+fHooUgQWrC)cD;Iw9@8OW z<;}apC2WgVKnC^h)o$GG&4R}FznuKP%{;%O@lJB%XO@JEf8>3wG-HGSB3pLfJ$f538t*Ux3F+V&~*!2S#8 z6ikz3l=N8$E0<8ffOK#GLdoaJEoEsD?!OkyMPSte+?|1~9@DFutdyVZ#ku!YKS-DK z@n6k2k83^lS~v{ldJkmY;o(%kiXN04*_v(nq816#79+jft`lxgzh}6TOHQ4sL`YqA z9Cq_o1ile;yC&vykZRQKy#MPZDe zy497S6CK;lP21bmCh9)N+Y9$Lcddz@1h3GWplnLwuJ@fVL=QgPDY8Z`o%0K!kO`Rn zX00_|>KOZ_Q8J#SFuN|{Q-7)_;mYVB6KgEM6fwAW`D}b)A%M2Gy5e-mbdd;d2QR>G zdSnCg+TdXCK=Di<6_a-3(VbqQ%+qF66Az*v-;XF}o<6#&bAVh*;9(n9yY2PeRSSJrja+8_U{ z@o!6ii>^_D&*Nf~%=7J}S=}Y}bA$@OclMa*V`0-N64Z}&P1tHs8TuF7UeNUEz&1{V zsSU*%S(h-F(-g)bOFq?ju_f&L7-z8W^&49$CcYcEcz?pG{X9#r|jBb9?Uf zyQt%B3zXRAR6*0jC%z+TT^$@yY-jI=P_9zkx@DakuY~5?Dyl+GizqIyoqP}gw%E3b$a*k zowH$+6vKB6b}M~qf}ds;yJ9ODQWqJR6TtRslPSL|BIvgJQfTS3*^{c-$<~)hd+ciU zlVX8{yIJ(U_@Y3|w@LR|=Wex~i|qKl=Fj+P@%9HGQ%`_i>MLsM-m|@}S{W0YsjpX6v-L3o97l}@sd+Uf7Y>=tpc6vQRQW)Z{GHQ`B}zr* zVG(<9hHSU>R!%+&?8jwjy!7$$xlnLT^|P9}pZ#~Uqk-N9wA2M`f>FaLvx=5)6R~nv z@h;{&7(VoOgOqxL)W4>K9X9>CXy@=lQr<|#GN$5|gN!$ite$&7V_Zh#q25Y&KE3N^ z#}LIt-A+UUw}48$gBZg(hjd*j!ey*XEH!*5l~)T7lx5?;a40z zIbdCb2Bdd2K%Z)tKA*l2Jn9FgJrnb@`I@^~uU=~I{)z*RgI$}<`-vlp z;doqN$&rJN3Vf!;%@1XZ3E-tlT0UEkBT(DMXWt!~c5s%%?WDqX$AZSN%X&?v=&idq z4-d#nijnOusE``-duB877wXLwCKCkk>-APv>sfvy49(5S1*N5KFjr^(!plm%+uA_u zJ$zdv3N;JcYx`9v*an=n;!NX?eZp6((!K*N3Vdsu5Xc!r|LaQ5|Cs~7=nJ$tv!V6BAFCOTs6Rz|z zK};4+e3$xE7I#8k%#v{dvFviBA~OWw1qGf?eLn{o-_~sKiXZeWbFDjEjUnbQyj{bF z{$uY=yAQCf?XSd&j$Hd$*lK z$6Mt6IrHt8>*~GguY~q~)cbfsS3h04gJ0R-y;R#PU+giOzj7@7)gWZ==H+Q?Z;4OV z>C#2jI@pd>XzK=SFIp^gG4fFaSRTJA&_HQCOvJS&&(NYZmm};^5VLysER1_ zXUysGMzgKt-i~7uc?n+>1H>r}e%VfjncsYDFXi&{qY!4x`SD3uij#DRup5FqLSJ3# zjo`LMlJzE;3CbwcY zGoDiWp<2uAQIS({;+ax}82a9cf4YsZf>0eR?`*+_+WJt_6HN|a<`@X!$ zk)y@Dli%1VxVP8}TWk?J^=PTG)tKF#FY(+l`e3;cwKHqFHTC2BL@cXuU0tEJTH37X zOznB-t2FYD4F~5ZTNKSzyQv?X#K-G?L_U0R*VI(Pb9@V*OCRig0*LrbABMk$l=z%{ zxG*&YpG%{^YiDv8{Wf{;nd8T@;({Lqh3_c*Mf?s_zL0h-3H7?k6RA_mNBv`Wv9_Yb@1~u{B)pzh zw0gz)w47POr_tw>R$^k@=W?lvBs?x_TN3uy>DSGbqLFm*FTh_n(3^%Mki&_@r8^)G z>q19)$+YNa2l%YZVJebeQotpHp1yNWDYV|wa*mKSRwmYjD#@5d*?sm!$w)Mu=d*@Q z+e&)3F)BdW+=7Uos68txrkC_v>}hTFWbOsP08qHPwO&=q$sq8TJbebXm#!Usks0p6 zv@pcvNhk=ic^T-nJzCnvN5LTWI=|;?)x97j84&Z9I%;DBPc8I3`D7e>{ak*cMjRX= z5AM6fJh`*jdc#G3#?ti!w5jss$)*{#mnA30f;QAZe_Pd;ja}o3q^uF`%(l26>Dy8_ ztBswldNK61bj{!hZ{SN@@=7-<4Nu8Af-{(+aYO3Wpah@y+YZa`H%K)!HEj&(Z|MN7 z<#$#H5UVccHY_4$79g3S< zXEx|arhA~=pofamj>HYG*DyNp^mIr8nd^#r^hQ-%XCO`X-tbb2gz!T}^~}(cB9Kb! z=;O60L^uBvjNYf3zTU-9AzaY}U?9#agFmC3k%`Gef<4cvxR$eGxh!@(XeKx-aYDkw zza_!acM0PVCO5vmtORf+lV-K&wIztJG5m?8scL_xT1dSO(FSr60%*4kTYzwdT^c&% zl(TG2)M|`&1X`9+>EFo{Ot&Nu(Eb|o7S{s*dHsL-k~n%WfmOwW3v^sP1h*ts&}&C_ z7eq9lucr~0i0f56<*6EA)qA?Ys2_T{+Yr5k@Tsr69w`+m|O`FrXi8Tm4TYPd9h z!@XpZQj#Zmz;C`xnJ zx|USPu)tj-%!hI?Fz1vbuxmW82OTh#Af%XL=frZj`#mgcDCcw-G{^}r4q#EyzcXo@ z-JwmGZsxn#RS1N~W;HS*D1)>B^@2|y!U_2StnIl3ArM=4v9ltw+YlW|>xqcmzkgW{ zYU5*?-^&ZK-u{1hsocGGGHGg>%T8cMY(di->+bFj@R+t-lF9Rf?Wam+>zy=MAW^yO z@?8`ZFt8PfNk^K8rQmh({z(?!BxcXR0uJOL==IurdrHFLsEh-=oB~2ZRmA7GA~;bpWLsv$y6gR58>#t^gpunaZhcNHqGS!7% ze|Dwpbz%qbMr*$KnH&o@C*oe|JY8|}yG9UYB@E^g)kE)p2RlL?;yM=(`u=?LAGu%u1)XLq#V@NCi1xXkSkB@X{=X)0%sH538nX~Fy}7+{W* zynVu(1h04V8%M)p;-{hNuhU(!Nh-5ZXS{uQB;)&SP z4CpNVZ?i#~HE_EKw}vQcuOVK$)TR~Hmjoz&j~#S~oN8N3ZAjE$uBmBLhN&jw$L}96 z5b$d+L4iTA_ov{p<0^+ix7$oLNm3p&NpIG^J>%x6!82KlcHJzze+ ztIBfS^6cw3e##!9!gci^!xX_Ilwgntc}uvopeZX!=-6AzxGr=+b|4Bj!43!!Ax+k`R5H9JivBGU0#V@O67RPkO4FWQVpy~jW!pR$ zKt5yRV}1V28r2CkC(&#(Xe&H^?FpD6 zOhD4cPe7`aty2nMe(0O?XhS;10^=Sl3j}|~%Y>Ux9SRtUEP~I%b7WlU(MUK+lEsd| z?N#0~K6i$LdHm^L>-Rbj9`LZ^gXp(VtyH~cw_djxXa6@AUDn5xEAA_e;?AhCci{4D zH!Lu1J|bpE#&}Fo>9#EW!;tRKLSM;%)>S11V}pN|H&z?03kN5I^a^!m%GG9>THx&t zX?sGy!AOIqk?ZHR%EDXl{ErPOJgloe#$Qsx7+Fy*XY=&*_U$XZ zCMz@$o-ntO-u$LbPw`=>Ys+H+@?>Ps#f=wL@Y6J3XuZ7to?aavfctb+=Ukwg^PFnmS}cc<%rA!4T4&MSd|}YbA*qiMNeS1ljdnQo;p)!Mxe^d?kAJzfxt(q zz2Y|VeU?sgNTVMeD%SB+QTXY;k7(N9&*!({Hz0_I!iaX?e7< z7AGtxkaCl!8A~*nCFqR+UHEgp=esOQUFsGOP;5j{qI+cgzoX6-XVVyP&JUHU!?@pG zkU0iHsUtKMLawlol0QeK2fm2iXOH+H>QJPHYx{tUU*Hg3FdFp z60#Ts*`pW6ho9cf{+QX1u$XWt!`>yL=;M<8R0eO`esAP9YBmtfGOrs`j}H&6vpjgBVN+7Vm!MOeCEj_ZVPqi2IWLoDw8udac z;-ZlUvc|Dwg~2EFmAu->cHk3I6B3w8gUV{sIxkI#26ID31xgj0$>(<-Powsi)OhNM z(kp_bMX+o<=p6J3`0N4k@pXu+Bvphuiw#RKOwpmu7BlQd;od`mN)0IZO(i02&b2d0 zQFQ3c;Gag`*^M$_*mid1aUzI56tWGF+?)ts#@XlAOEAJ`61-ocqATjt$cGJ%RWPqcW)zi) zwHk8y`Ob6q7_@HmFIRZr0hLcV;#9C4+b7?6jO`_LG>(+8cnYp^d&&-cs{MNP_3lLC zCSy3D0BP$c!4Lil6Hn@F*k0k8)KtD}<)VpqFxXjVkH1g?5<1Xhfa8j~?f|(I3 zroyP&K$O^yMWcNy1fp<(Tnd>^;y<>(Ix1R#o5OdA)i>wKT`Nttw@clb zz&&{m@;`eH{k4nVYL;o`K;-9-ZN*3r z<|5_Z58tC$%|IG91Ci-3%n8KgC1ytB^`}uhe3OmPc1f4fPP~3#S@>Tk+U&65dw|&` zySqC^E0=OulH+EnMW^WudSVMY#{go6`wLVLJXx;NIUxmMds8UB?B?I4ZkBIZtG^Tt zWQOHL-_^$VUdLi-d&j1@N|AWBo!qhb(nUuW0U&U~#hsp)*H|2}7a(Q*U|4;Fd-=ey z3;1V(G0ciEPO07oubVUl&H~%P;ef z{qxt=ACI{uo@o+oKcg;)js)n)0NTTB+V3IC-osfijg1#f zy7Uz|@J*pHqACB~*y@H{z|W-}i-a`Ag0(}I;T|c$j25nnd=3)WIynHc9DVmD2p?b% z0Hr~>eQ|v0&geO&mSiz=)XMDvz`r*)7J;INIe{%96{i6SkY1X-%12*Xk`@$v)~{e^ z0et9*z`bU|uZZoQF|CAk6+B`VlOzB9TKXa__%_V5QUq>Iu_8w=RMudRS)^3#@%f*P z&x=9i;xTcmg9Rz>mFM$%>V!r%w_v<-=;hNBwDhvHKpg|!hj}LC?5wve^j|z6MgA`9 z7h=z3Ko+7(o4Q{7YZk(Et7UmDSwu%Aybn*$@K?Ds=B}2iiLVr5$WBtNCAy2QnEP4K_g@@=1`CYs z)w$~^1k9&gMHFl`Eas}7=|dE-l+;R9I#~C=)7bi==McXXaRyHrMl>n+A9EiC zfeaAdo~fc#gdnuTG$5-7q!kGyqaDXzrCNI0rFNp?ZWJ>^ZV!b00v)&3?BcT~*pTHh zKHw5)ihs0-wdVPO=HDphZ~dWiEAiT?OiBmdk*a!;Wx7;7j;zdrF6s9l@O>BxF^mWq zM*6R&_zzC|am_U2@f5YBgGZ-4zy`Vb7(cyni)842=0~SAc|%yc&R2s@pjOKH(@*}y z+*;7K?`@(oyfFi-`~BzvAs8RYV&3G)JyK0qZI$UR_}W(l81M5f!*XouG5db$!$0bf z*bb&oen(H>M8M?7@1W*(l}NcEJl8^KHO$F&5f{zDv?Ni1l0`#Pfzm;(o$1uqa5Ib5 zi|lSi1$+$jfBhpF1)Y;h6f*>p+SP3?-BpmlF>6~O5AyGC!(ebsf5Q;woBeQfl%GSn!79WCK!J!?i?(90LcU)gjWP!N+XX=6H~COQlCjL^hphp;&4S)XxWr$?<; zy3YpQ7{@QHY)pIQ!4m5Kc291Zt&*TvVaAP1)$q*uon0*?(t+eX zDvJxC1;=?3Inhzp6z4OV=@KX&?Sr$`LqKnQ_6Lp#A+VnL^iw`Btignxc{3bPwPwog-1f7e0&JdYca*rBbYVy$6p zMO2cXAs-}fPBW0Jkd47zUCQ_0^%P!|6=KsVv?b}A0bu?{~8pU z5$iTS3O%nCQ^Qr4x{8AWSA#!clx2K$wD#>;;lFqK-@rB+J_T%j3OP&mCz|83C`gYX z8KLDJ_bNrInD+WMnuF+K)nCDFTOp#Nf|6rn4pCL9dsC&93$4HU1@J&;WnW#T$Ro&a zhj=`;ysSk>-X)CBfrghvsRZNjml|P%j9rb$qI}>a-)wyRepp#lLp~BWwv=M;4Q?eQ zowI;l9QX+=8aso>o?MfqIqt3#;0eOLQkZ+%xpkp0rAcF%XpAcH?r!G$NLXQ>C9Buj z)7YC=>i!iP>5Gd|_IP(Mz)(2OB|a&CN)PGAkaBBD^Cp?rRWF~Edv1o6!PAzo@ea=p zN@Q6rcCiSr{Cj7}DF3&J@oJ2*#J#aL1uvcfi~@5&4IarpKmDSHSyyAG91z0yOs`Wp zFTNc05Rp>#GNrtz#0%V#4eq3o8t#;D|5|6K_cvZAr4S{oHJy_T^>Yb~L!s!4q9vc ze^#~^LMrV`ZMaz~d@**v10P-AswC(T_Ilc(oX+rGX5&>jw0YugQ9+O%!IN%am;u8i zx}@zcV@dbr2e?T&r`q$fvHOhotfd2cNe9eMXXqFm@k^;c&CpVa#1~nn|6qJZ@-<~R zXRRlYgDhwvos1$yn|2h)algtH_$BeTfR8c%VPd;~2kYR)jApOa){150awxhd%xK%|q5AR@- zArzX1XZ%N>!2IF*TTShO`wYp3dz_m1Tr__SR%leT6x)CX)o2Dma}~mut{c+b$^zNe zt0ZX`;%2C6;8zAlgDHKD(e(LCIyp5N%GmehIul9GiKs~le&*uLQysK+cHH4sbSh<6 z{*SK1a{Ob3pl6a?9`?+bEost=fCUVe<&D78j{Vs1!n)f+iXMF_sthVw+7~JO@bp<3 zeAI!>J3llrVz2uz_-fQYfdlB=fo?CiAjy2$xIk&Nc}(xRP?u%yd`taaETw>>uOwwb zM84Z#3os;`;72v0>{x}uaZ%D>a(q~7;S^d54^TJ9)-^V`8_&afn@jke$P~{WoTuZ@ zRMDFouj#-^5YqgJqC%PZCvm_Ig(l|Qp77$2g?4oVk~|slVaHieO$?m#RTLAAN-1+@ zurTo3+a-Q>HGi|lSR<~y{fG;Dc^O^IgE1J-X5wF82@*aT>kyz8lHA&p!i(o@n}98>up#CjW!ylXQa`;m(3)d0*jxJP7q^k_gHEoz1r-w>i^ ziNn4xs;;`|>P1D&rqmte2`T>z9&R1_67f6{y3f|AAJsf`s0N;*0oez$fR^3zhhI2I zYev5|oJW-OMd^hlqL{&u_0ivv#v$Xkq@b?;iV`;UJIZquXxtAl5U_|oE<6UX)R z21@ng0K&G%9Wnhs&w`;@X~{`T+H*J7)%zb6ij#&|na1tIkdA^XzPmDuBE2P}vqpN! z!bDZ(>~_gG()_Q?ppAs$OJu;MDG)^dci-P%0nfRcRGEwW16(AcF|-RS`Z%%(S&b`O zMrRN?T#OkAH$I_O{={B7TxpHN6=2|o& zI5Z=6>@O`C^U<2n{I?TGG65zJhcE6(Vhh~qdI|`abX1N{D370!|W>c!8 z`nT(ozF-xuPaUQ+-v3wbwi}inFmd5gKcE&mg&=vucUJWt+m9e$p62t@N^#+{I;-nL zE5#RqgTe4uvd%y6@OBiRKml3(2Q7roo&^>ShkR=vUJgWJ?Hmf13-(;$OnrtEROXi9 zDQ><^SNf}e7tKw{sZj& zo8T0C!R#=b8IyFyD-R}bxztLx87wcf0#zCmD-nYgk;#O>_Qp!G1TZG;q)3rv#uiVL*jythw zN{lcnGDe2CWKSatE+QOg6@g34phNjzaF$;@`8~Yr>DEDZra+}qa@FMCgSpK(y1N() zuF3#2W$S8^!&18O)#kyU zHwzT)$XY?m#94*ynx9Cc>3qvaA*w}wgZzVN!j3OI&eqE`QJ~WVBL<%U*_fYhI=c)7 zP3?QGm9kjFPVBc29v#{>Su!CfA}YMBU{l$)^JtP#ghtMZUDx*nPnYJ$XE} zCR4^!4?LA-c~~tnFDenT)`&qgP2{I&4cQ6)BjHb;nb=0#|NI(gygx}WM+ylnycCV= zSC*dZ%N3uo^c;9XXn-rob46b`oIc(n85Hr`2ypNht%TW2S1SzATK7GVujI`{7@Mn~WF%=lGUi)D(4enQv` zdy@=Dn!`4MVZUhsG253Y384VF*h~B+zP&v*fptudzEy(r7LbgMOS0wmdi5q$*Bq!n#1t_ zMcP}3RrPjjql$D25+aRsN_Pk%C5?nEM39tRbWiCnMMAnmIv3rYD&4Rs>Fzia{k^_> ze`mk@I@kIBVEr+f@zfa4J>t2?`2d-BmER>cZZ3IYxES&alBF*FR|5)YS~>v36nmt3 zpPG*6A1M6WcvOIFWns}DWTCL8557zSAeP^**JZoQ3SkqBrwlrj;L-8`E*mB6KnwzG zwVI)g`EMUA6~7PIzQF}}2OK){dLAU$iFQl4ynDoWxh;Qyl#8t%xclTWw55`AFrj46 zvn9GZFwj=Nw$Pt7>}vIy^Xd}Ip+@rR&ovXo%M@>}L=~jM`vI1>&@p z#houEdYz9TFs(VH{p7^L_tM85NL=E^6N3G31mGgA2->s#p8L^1I-ungA6iC}hVq)( zB;yx?#M5c^gOv{>VKQFP19<{pzzr=&yy=&r&VPYzh)`L@_<6*@pD=>3oKuSh~%FJJxpxzJ+j>&Apz>P zKR|xLN0vq(JN!P#J5Wj@3X~|KNYChLe`GYaQ3a_gKhgj#p`cDTga#&w*iA$NgvVV~ zH4oivZ4bH~X^RY>var3VcuK^?=Kj)K5@{O#qm<%e4be@xr+xymH{wNaBKmy)7e+}A z*=hTV6Ago}Ms+9Exx(UikM~!_opC8x_bh0)+gJ<>2Bnp{8@FjitV5EBJUe~eSgJV{ zU1G6jwj}|-z;j#0x!SylSp}wtBw-0i<5_TNw>7a(ZQU9$4Rw4LTg_!-ue@1h&p+;0 zP$jCmTleLLUVlLX1Ho=sLuzjCF$jDeABLkwQ@Sv4QD9hMDbl+`z0l(hpae3_1f|?{ zy0o}6Bd8%5v);=OmQ{0M&Bh>Ww#h&9E}{3?@> z#xbaRd|woa<7@fqlrBm5jSP<`gl@h-LT*PQdR_&}fl38!V5*aN-N%Tqy~a4X=8dXV zbvo~FdoBcW*-Etf=#~i7jH19xpuM9YkYM3TL)w{nCb_5Bz_0^LI-@&eB?z z_k6tNq;Rj7z3C}*v6K;^P>P0QKIC>0oDETo6hzM-BPbNUSlO8^zz1^7DVIk?HgAQ4 z=u3#uQst0ElM)h#v28`p)24;HD_8%7Y*hfcAwQg$dCGH9!vcKVCL$sB3-CbMOe5|N z-gBXMb?nNJPfp2NJf#tbCY|$goNCz2@7UUd)@4{+vW0J)3K0&UPvo~e*5 z$>&63(q z;kFlk{LR^u+(uHKPkSC$c>Ij$TYPaD!}~rK3}Ib;elQYV5qx;SJ?finIGKt$|GKHOuk(xGw99SU&kUWU9$|OCC(w2JJ16v?4_w-_BB3 zCh0^Rwp~=`?0B&n@t~7?`v7jH|1lqxd>%t6Lq|4b$p8~6(#mXrY*2HA>Y*^zV5*a;OPFIe}Gx`b;++B!cMg?Z|vYWHKA~-6GarQdl5Ro(hBpl6L`w z+bU5f98NVoh$-O(eGtaHA?`D!zWyhNjF5Z4feqTT6_l4t7}aFc@qUb(L|<0L0>B)f zYHM+b^O(Al>KPkO0V-}SN!W44{6Kr5kWx##MR>j!ElR$$P{?R_@RQgGq3)GtTZXOy zspCv~gZ?3!;l_m`{Ziyw+GR0*$%R#|%U4NB6gz456CPFpPwd9UHk-@;1<8PLZ!i~U ztIC{X#4S(q69b4jw11XLL7o|FSY$^SOVUk?7+_RiC*oyomI*2|HH$pVnF-0|9-REz zN+~WFjjZD(RWGOjm73#TO$&?QpXMBHTvUp5mmfOz5*8&&I7kYyBIGn)Dm(E$A(%3#a>kbY|;eJi$5rmma#yqEpbK z<08)cT3P=7=0m&+vRE6ay#K_#zyxDQIwCuQSSs*{^*^ARSOg#%#!$uz3{3nQA; z`jC~w0<5v|6ii9(f(!%qwe=ComdHAf3b)Ca*d)W#gD`Ny54dAOJ!EA*<;c8vO&M)q za$OpMh|k7m2JjNWuGOuy z6!bNERC(7a9?Qmh%@;#`|Qqx8MHafoc3?W_frBWo@iyKN)oQ|%gG7X$QUq)qd_KN0FcUAfPP$T`7=&&Di$v(Vuul*0HzrQnof&Vl07d+$tf0Qr*wb=i_yMiyJf{e8R{tIMr;WSn5l2QS$ zL_hZtyh|VsPRD#Q0@gnPFB%P}hJ$=A;6)!~2apN_yhzNQ3;%tkHN2vt9_6x1 z61*7m<5XfCAE{QUusms3;Uau*@x2gFz|mqcltXjqZ6B1%F;6Z0p{&=zY&zj!9KXX$ z%8nthB8*%sT{c^*jHyHS(J;>=iZZm8fyv5yTHiad9CdRZ0vRFKblyo{415wEBsz*) zAX&I(B1u#};hAC|X0hc33K)O93RnW-v(#<3XY`fJRd+{ z^hDMgSLgHqFy-WI?5uYE2_)+xvlsw}>OQWx!>{5AAMph1h?VbY%@WqxIKB%B=FFAd zfr$@gvf*xgu0olDCA5TbDF)B8J{1v=pGW@Q;w;W`g$YeSm6wzOOj{EktppeN@dsH^ z@si_fm7KJOHjonR!Gd&5;!lEXRz&Fh zq#0eIOYeqahx1+m21fkG6Y=4O?}W+pjTm5mejU$%yV@1myv#jL#w_wV5Bj z6iR(1#sL#}Zi~DT^OoWM97tAtI+&+)^(L5ePpb{P9q#(jk@T~v=DzGi6E&mfxDAm2 zG-p?w=(9r3Zp3rhAdQdcLEE8G=?_1zJFbb3(5ufSD0B%fku!Jn@$UqnLU^yS=wN9jZ;&e6xYgYi zt-OM~q70`+OD#i!9$g;|vqaYH6BxZiO;Jv>>u@xo89VU6J1Le4X5?i-iX21|oUY9O zlqQDU7c?CO*e7ueU>kT1CnePy*+cHlFcd6Vj9VsF;tZ7NlwxHuNZ$A0=fhcgkxz}9 zLjHR}2d4cm3;H=3NMQut_FrTp5DEz=7kR^@ACHXngxe51l_33z|J>YMax%G+3V=^b zA{|Z|^g#y9$dC27Jn>tW^#Siozh5Dt-gb|(!fE$y6fG!OM_^8sWB_){Xn41@!3gww z>T|H_&E3ZiUXl@k?~N9^6Dqkm@b|fozb(q0to4vMK)6kZm3MxNpi4%02>9k+vOCG7 zwf^%Cpys#4E{6%SJ>fQGaJm!Z=z5hdDXcGBb8B8Sl$mFdD$@~W*O=Z5(#r{*p}sEv>Xgqw!Bf)=CNvo0UcZ zG8V5Z3HHpFVk3dnsTO-W1=?$}QsS~*>;;R~fr$O}-M zh?xq{*HwsA!pF~JugeqK;rH>J@5!81$RXk_&H#k7_Nne}2#!PT0!c5f34Ur!kDzn5 zljd=M$&^SnOtzI6o4uc?Fse5U#E&1&w%vn+Cn)*JwOx+hVxM&lqYYkRwcA?k)_6NRm1QOFhjg1u9RsEy zWi^zc(|9KoR2XWRS_!x7NUDG7aa7`}O?NmyGj+wd-BvnGa?66_GnS2iyQS!K5uVit z%$BMrU;hz~fHFZgIirvC@0}`ucf;^Hb1C}u0D(w2r|;A=r9X1NiXw26_h#x7*pCmZSwyBNGOpFUyyeR1q_e?c}WDY96Ee+lFU43m?S zpDpi#IfvjV>RgzNXkzEfvDCGd<i=bvRsqbwwHSqcc)SL1ZST9KO0mx~Hhs?XruKyMVi&nVPo zv$BuvYyA>VcF}qJED2je-SLHAo#%e_KhVN+FLxv5U>_RVtw7ucgyZ*MPhX3v_0&sq0q-bzrNGKOU z^$p(2JSB65>?gwpNT~j5mn%KXD*KQtqdnBT`TYJTMrHg#SHMNx1$A;m3#jhYYLSk=@!9(X? zzt5caR?US==3tZWia}RrCJz_lmvIWP{lrzs0+bqRueB^U=YXM6%bQt>Lhk`Trc_XI zw}R@}CloOpqhsrJ9q@ybL(uH|uf$It=ys49Z~d`(Hsb|*w++X&R{12XJ?bXXW-A}* z$Ig7)H&f}}cIw_bRPt2e7z2HT?_3VZu(y0@&N#&4(Y~xiJ7(#L#W{R?s7+rlTQ1fA znAa!qF=BY%G(g988@8$02o`Ockgo3cyj}n+Bq7x@%6?SX5*rh%-X2~#tnyrlsd9oe z;pOAz$AL=w09>KJm*I>4cy^9>vREovx-KbMaVa4->y(P62g}966$j!Q@8))7@&hr!Eb`fMVV}7^`d$pUXo?8A>fno$m z8wu~*hj+!YXqV}L__ZTXEhiJlBy)*0wpyuG+Uj;Qo{ZheP@pO6!AxQs{ou~FNO>K- zXft(pWHlcmfzQTsS`^zOBda0(f<8apS@#`bk=-JhWOS@fXpj&Vu=gt?Y0b<`<-{~M z0v4$Bb6P~OEVosXm^2nVkkr#}vjWE74|5b#1UwJaPrt)auqkGz9Slv@TEdeq`JC*F ztmh}I^rw6Is_Ls;5Br#TuMS4}2%Bb3EPm$a=xOaw9LkdI?l;{W{hYu2tfYI` z(sVl{cC+ksyY~Z10Xq`A0T$r%F7vdSO{dnyu0!*XW8kIxCUDzieLWPRyMMYmxvePzeRjXyLE3SPcvGJspGe*o)atFP9CqF!Z{&ues8LI`fFFT@;V}? z7|XKNA7@a@ZQ$p$)A583>$%OMclF9}-es)A^UA)m@0G`~~P=H9-`;dnahGkcG!+nJrB zpBc5IFo^U(FR-^bsVlmoE$Zr^{zT0X)Z=)BbbpA z*_r1RYOD4;!kan6*r$Ol!RkcuiD$(L2bhsf-=2b&?(#r0sPxie6Tw65*^|W-!tP52 zBj4@`MkJpvrq2Q{o3+FK7O=A_2eG&HZr0YW$4Z#$kMps<1n7PwL$l1qUj#C~of9rh zW_Mk;pEh=`T~y%I#c{2C&v9&XIhN2gIVDrFxR}`96mz_c>9OppTc+_yvy)_UzNl7w zd8#JO?z}d%GvjD_@U&#?B0{8OJN%@Pyr$5us8FCV;V~MhW?s)v*!#0CoSh`8NH6;g zbh(6>TsG5BoDdh>UJMCC-vP3x+HW`aVl2HXZS5fwRQz@YyB$>`^Dg3!hb_9-1`JVl z^$rlif`AWt>%VrAPOk_*j4I5#WaTs{k?z4kw<2bdRw~@~yMpzw#+Vo^g^*P2jY9cj z&&DS@lnLx^+Cn@N=Z!)+zC>T>|JWy(_3(oPzJe=@+10K&es>_I5nq#Ex9h^%!)3l( zXdctD+h2ai{qThLk}{z{`JS?V?g`wQ)c?-VN%zrV=$>EIs;|=31m}DHpH3fSzp9`Mj3TcQ9shwEUq-29^abg^& zxUpyNAOYgQ;$U~z-y+Iof=_WF5!`5IO5SBdV$9O^y7aw=KZdaBO0TK@~-Hd5T zsh_fa)&!Q$cM5IcYy%4e%O0{r64DW&W#%huuvc%diEu3HTzVQ^w!1WUL`Fx~=6TU; z@H?Tu>iDi<9kF~pD$o=kMjto=m8X`GtqF;XbKMm0S&$LVAME;I3+8^19Cq3Wj5+K% z<06Z(h3sVl&6q^~Gk@+0^u^ch=5%KD+9 zz-zU@zR!zQ;aIWPL5q3`?IEj=Pysbvld&4Ax|3m8GxtX8vBkh zoUS{MX>0VOj~NNEZKKF~=uBXT^w~L=qP@{Y1JPL~eZ2Iu{KUk<$v{`ciE_+9G3`~% ztC!MiMLyGKHSv$Y*~!f(wiI;V%kVU)iu8e(tvO6tT}e_^Q_Q?H&xAr+SA_I+9#K>; zM82*eB?3spQ|x0dT?zIO-Wc(-v5r376r>rn9|c7{L+#5QA=i#%7e(eiAvI{z z{7WsOA8mf9OixL`?d;tiT{M*Q-S_?XeEl{=&$ae@#xI;hX->4KxT&U52bPoMU6$eQ z^9_T9?5_ z?jIQGuGiS?$wjz4Z^DOHEpn5a-s|lWchfQBNAS2Q3YXL~SJZg>)O@Jk6*IwJ<#>JC zI+e`WB)rxQ6iq~B+vN}mKk+D?bmH715uqA9A&YQ$`Xj(190PgtS(460qR!bANmaa) zy8*1k+;T5EWw($zwp_Zd3HrWXesLc8>-Y0omjH(5^YY>*(!*rOQqtIbMz^;(qXJe( z9rZ!Tn9C1pta8=6Iw;98uA)jop9xa{I2jAvIM}{`dZu$?(?Zgg7|_AGypZrqr3GbCGhUj zoWUhJ*2B+IeJsWQ`o6EBukuUH{afW<&*>Y_)9M;_#e|xse zWlee>kNnILlqe%quE_AdU*&5dm!d#a-*sQz&6bHZ1plf8z29?v&04r55x~qjYu-r| zbeo$s@B^jL|Mla_6Yg_nq6@{$>(u#X|8zmN>pbn-ix!;li%Gd>V=)^zH>9M5f8T!c zG^Z})f`cFytQ;xoIqpB)*Ru<94uKq3&h`rXdPWAW7lS+ewo|}t`kl8cZ6ds{$$dFR z+5?s1m08}6#QRv#k<6J%EYr2}>sXqXVu8pwc!=u=tJY~2wqf}QEQ%$>S9F2r>9G@N z$i!PBR5Ckk^+O}o*tOb|~gfPOV!2^F%~$DqqBnyO!1kgZ9~ zXkc6Zcwph#;k|Q=?RcL30>w!475)X#t7;-$K9YT!2pXO2&IvY zfF3?>e3$kW8J$@I;Cc}UIP=LU0?hbsI=#YS480GHKa$0sD(KpE)EDaDBnj#XTO*(g zg0*LZle$c}ojgIduMle;6dkX?-w3s1<{rBHQTANHv|eeF1>oPNFHd zw>#_C!$b2nL}rh%({i7(6<;qupg3Qu$eEwm6syxP>_Tcv)R`p5gaqpHuO;oC4kn#k zD7jvDHE=b|{UYBT!QEYczH1okWRT)i|5K=HTBx>7sCHm;a>F5~{wa{q&_>cAx!K@j z?Tj*2Uo<**^LnmvWo~Y~eo(VPM81BuaIT2XdQE;VoTz>~q~3DKZ94h5N)&GC(km~r zSShwzIdsU&<4m&IfK}eWXX3I+aWppWvPr%-HoIF`H{=F?yBp?KU+Ls#zI!mWb2R0- zSUGSsHnUh*Gppl~Pz_vYSdR`hycRpu7U&2)CGDH;%vA z=DCd>zY;0_^`!WhSVQ)%YZK|(^?_J@Y$LqEzVdXbx`C+p;O!OQwCiW>!VdYx+Ssb& zUQ@l!Y5kqAL27=FF#MR%bJoo>^z>@Heywpslec;ynwBK|$ z9@tMluRlE!b5jBa-8RbS)Kd17ujqGsfTLv66_I_j-5@2Gh+Ci2vw61&j~{MZkKV$w z-hxJ77{%$T?h-IS@@wE)2jqZrjtJi)zXs+qfNhZjmEEYOgAMkR4KZ)5+~wALLTnG` zc%kRk^RNxjFLXjGVwe56iK61V`ZSIsH2joESG@-x*pi!+XQ>~xp&bJtC4B71M| zDC-<{PsuNyT92VL1l+c}oekAbQXH(hPq-}`6fb7HZPSC-pew$yL2%nr70zm@!BVtU z0e0{SUbl zOBR>0OrZQpZ7yVrdp2bO<)Vo&fx!oMtCrltkwr%w{A0gtrm_odZvDeE=%hFR9RJZTqK*_A)EFK|6VGxPUV$iZy+Z4iXO+= z1Erx+axSlJT`FngrPIcd%F(w$Qc09=w}`H9OfKuobA~qsosegX4^0{l*Xl9Wz5`Th z(Wno0VK(6OnKx=Q8Lbq-yA+8o>M;^gt+imAZIzo62_=i{o;RJKP5zu$n@TS=UwN@u zq->>uFZKi*m!Hiti5@}E%Urb7TGB~Jg*3MR{><0tS>29?Pz>OK8tlpLN-eoi9{h48i652~h`b`KYf6YDe?|vX( z+IxPto0<4>6RO0{;d!Ukepz(-!9-C<^wzvNH4o{_3s=Px2hc?JIA~vdM2}4&23W-a3B>1ivzc? zqEM2W?s^Yby4>D`T|Tp5*p8hEp!u={6F)nqC^%c+-rUt2b2xbQyy@cv$ge$@VUm4g zI|T9;AD+m1v9C3H{IHctJorJr_Xhpk!Ssr(i)(FHZ|;ur^!5Tr?j{vkkZpj!ow|uc z_?sIA|D$I{T}Z%#^LBe+Ftmy074$+@pO~&xfa(Pq?q`W6hkmil&i=&(~khYV@(PFu*-f;|45|>|PW* zPyZp$^U^_H?#gBdgHKG4?;`p6qehz{AHDk17WUc8;ifsh%|76C=;Gi34p3=zGESZ- zvf3h`2bc~{1Z*^MY)18w`|qt2lvDLzk0rX?z7^Zezv#3U`{8{2G{PfiaUU8X;k+ca zCgP$1|2%K*zR^VP_TlQilBU>Azb`#yf65t+FUSk%>Ui*T=;mJAAzy#jUfcQ5JU_4) zk*s?JHzB%So&-9?JUsUmhMMjzuCD1N)}pq`|9p03dx6oE=#`eY>bIKGFmiPm`_)|U zL&I@wVKt9Ftl`&6{D8c170bC)-zOoRw>966N9*)DZHD^fcXbY?Jc{cbZ<+hZogK7i zzx9zrYOh+dn2j6!7Z;6~P1tpKOwRLNQJLQYh8-Kyng&2z-G_nt@#!ae)@~L&zLiP^ zE^t{?%R8>bonMukDcW_OHzW_|+#Sh$v4#rgVS5UgA#*borfsW4yjGsLl9%!cs!cPA zAEpvN_zyQ$@>Cuhq03iUxEXC$X;xe5)H+<6Pdlc1^MJ-Hk1DUo<4-_2q7;cuId)L_NsDl(;<<#Ft!zk%prJD` zT_SXQj2_6UuhCGwOQ!xn+WeJ%^S4XawiqC$P}?#Az^+i}TvU6#R8BV;j{oxQkJGWi62sp*HclbfknAkfa`y3>c zJZB@m^Z3p&AQ>lT58-d_*#en6LoFu|G?(eo>s-_+-QT0;-~Zyp^yQp|`Ae>h#A__S z>bG^6!u8tBIQFEXJhuZ+fk!E`=c5-R;~UklJUxkkrn5#PU5dm;4ZV&h{%JDdec{?E zne*!0N9>o2ZZ{q(#lMkk9;Bl;#pF*zG*62s9Il3gZn(0}y&g#e4+<6`+31$Qevx zKHSK;!tHs6;Cb{kv<#6(JdH6>4S9DeaoDiFd9?;ZmqDWtn%ju$ha z=`xg9XLEHV5a;(o3z4{4f%vu``*#3H5((^Zn*DR>yYP1c)zV#zPXD1FIuxu4{ve_| zj(x~sBrH?L`K?NHus9ev2ks*0>i%#9Y*~V*^IerYXi{y5q_6RfQvVflBj8-3?hXtV zD{1wVyL+tn?y=ub#eh@an=0{t6MnA&{yHb!{(1V)DixN?|+<0##dmW0EY7& z6td$s9AVLH=2GeZq&@gY-}&%d{xz?E9AUuUVC(;ND#bq`V}&TPSk1RCMrq*3T*YaB z2(VdNT7qjmgpl=90hk7b9YVy8e4jBJj_~8>=qP~nDH9APV=JQ#qpM&&FjZDk!U_C- zbA3sh0zU8i00o;=z?LSTN*2r_`JFta!u0tJm#F4`7DKO%1e+h;XRCIpU^RRxStSl> zh5s-fr zKTCOnsPtnKr^ki8BZQwCgY*Rt=I_yYc;|jOXWo3^TBUCwJ}q3I2MuHN=LG=~Nb zq)N1ez8($z|LcBRFn1-g8eX>JW$g}abuE{vMJzZgy58A_B+NV#{gd#>_b)4$>Df7Y~#kkgEQgjT}MvmK}Y@Z^mPS{!#ek!^T9A@Q4y%fAWWo?9x@a^cW39)%>l9OKUQ?QOW6%o*4 zG{U{(M3KV#I-c@JI{hd&J?Q#QBv899{WOAMsi^py@$#&EcS{pX3xvs1Q)lN$2duR{i;;J<)R`ed;;a|$6j z;pbP&QtLX1(vXL>wr4j^VrE4s7P~@6SCtgEpqZpyJ58aA77o+8c$>_-VeVAf1Ch8( z*j8x17AbdVm{N_0{ z;Cd5Uil71WhQRM1+_@3L&%gDkY0p!mg`PcHvDE`79d%zC56m-3XK>*H{ZnHnQR|fj zMbk`ZqBrSDqh7+obp@_wrpL__vVAPUcDx^@?Tss(h7*Yw?prgiQ=R|%Xn{%?1dy86{O^C`B9-DE8^`AAfGI6XaE5;)4^JZZqInvK)WvG*x(r-Ge|8%s1bUeIZ>^ z!e4Bfx2Ik++=d>H!U!$8S>;sx+5gq#gKSPK0zYXM?*~+4+i|$vq{oUZ&=6Sv=+g(Z zbtLH4+#hf8!{PEOfkVX%ZD?RWJ`X~*3&Bo@1v~R=&JfXevy!9OozkCihwdr?h%wpw zX8m!&Ddf9U=PmoWuvZCOjiSMvEVuv-hagy^PHxU(w$@?cZm^Jf{w)-p1FV7!`0Q&utJ@WPuhN?4hHNKOT>YresuWV+IJOOP1v zG^F){pV$CkB1|yVOdIgqOl5e0IPu|47gBB9HtI5rdu$>(0qbu!)YQBDGS)-7(WWn$ z@q+SmJ`*qP5WLNYk`8{dTgd5JMdN>YLz{tvzjX1iOeJSfafY#%rqhbMk*=f{w*T1z zEm)N}(+Tp%xc1twR*BiZ*0(L@w`2kg;E-n5hhrFHB#-EJA$j04$FAQ;%=~PZ-SfEv zie^E?X*2UOcMmgMe(NRNy!G3=o+6zLh6kaWFc`G@0k!ApeLdk8*c~cK#}7Vx8pQZ} zSAGWWg`nL1dw$eE!k0p$5RBt0s2Knw1C&H&BsX&kRC1v52ktzjpY`l)tQ@7R2j{MX zy&3VT%HMfa&xU(fdnTEzZeKsEZ|aNq8E}OLF}H&AyBOUw5l8^0E!^LiyBy5x5%CU? zl<|!+m^=`P2XYu`?5E=tv(6slvVI|Ph@J=>%@%AcV2tM!FTG(EsTo~M{4{X$V-t-I z;3zBC3N*Ca!8YKnlZNS9Rje1)Y?BJ~oU?sZd(D9LNT9sQp;tC2J8AafVb#@yMP#>> zN}J&JJ0};_HVC6v%-6Bi2l|>hx^23vlMCcV`I4r3q&`7zFPh28E-mg8XXd@^d_iHc zXh9dup|dSR>m!6GP(Vk${j12c`qH0j1o&B?BMfSg(7OR#R*;H-#qlTMEwGzGkD~AK zo1d?_saVQXn;>~}^=VI1(zdT)E+(4Z&r3*{fNUl|ZdZT~F+;MoY4^TfN7l$um{Rz_qcgfdMU<&ak8e1fIkZ|q1yZ)e6!%SJNNb?ng3mf&yj%D5cB--mma z+QX8Nk9xFFO!Q1+Ia=d7?Neh;ab7S)G&zeq4T+jP z;@c)=Pk3zp!|y35Rew?%k-xwV(25Xz$Iw}&kg9XsLlb^}WF4aue1p@TFPz+&c=-Ix z0=NI84wQ3z!z6^DoB%noe$9mYfY}&w^W6 zxs|V_Wi@n0a-owr;S*y*qO0Z4=Y{=jKl73}r?b4A?L&w|X{xXX8)1d_6HvcwjiZwc z3$pD{^+m43$t&Yds*j_d2x{DCtT*Rv-52*1TdMx#R&SHRA8tfa4!}U25oaIX=L&A7 z7MKwMc0TBDDR=TJ3?9sF2mvk2msm9a3O)z?kLqXc_u-~J~-lh%Z3D^bqp5rJp# zE97uTn3EDyY|AQaL0Mtyetr7goqxu}Kj04aFy3jiKZxhghWIZ<27u|Kv0g^+cGzJ~ zbu$4kxs-cwk_?MuQ5K{;9#Ob`x}z6?ud4{j3J2OrF*MXpi3 z@;sfCBi5{&-Ji|RV%wcM0qeDIw15tNS#XNBmrd;YDP zs=GD*q1Y2I7u5z21pV@udfy2GOW?a@jJzAxDq5$qQWuOf~^F{ zgfSPfI`|GKpMye;-v=#4(FCzSjm-ztQw_HPP^*FSgO93_@PQB4)Y^WwrG$f=t!$Ema8sku>%?n#!ggr#E^=M* zd9WRJxHSbz_0*24m?Dzx0=^T0ykYEnpmxksi*N9STDr~%81pu@g2lLVJOuG!obnA8{O?fi@I9D`gpqFVYLAYu?!)+H$sG~ zG!7X9F_H87B7yK;s{0gF7&=AxF_9E-a-wm}LCy2g6D2T*BUevlS9y{$Q?9@p4^^EA zVi(4r+fdAY60myO5<~PZuTBW6gG2V!2F-KU!cKr^--)S=LGIP-3E9rQWs=n@`xD&lDO%wnA#dL?^gh!s3BALBHFtuxB*XO|7aF);o}T^XM})o zaLraGXHCA}N7(*!ibgPkVZ7gxbglkaE+R7y(@T@9-+#C|(qeIX(TZ$KRnDUMlY)rL zqf&OQB{!ul*u(%5{AOcu$SY6{Pt64CzXz1kmG2~RumeoJ;{X2Kog1dSn5$?3=N%$> z9antPi*7SAB=O)%srU#(@!B(VeD92>ie&c~XB0xOFXSn|YfL~jEJ%ezho||VZe)4o z^Qcf(xRs0wGUgxr6Gc&|3EBulsZhwwcOttFrwzn>526?$Hh)!{Sw*y2_v2ddH_V7L4VK$w5^y6cEH7ADZ9#{z1GUHM(PejY^hX!TW~urt z5EG3{GZOf0&*+8osze+9S0IGx(*I|H43|W0gIFcR>D(^M4%GKUf_2&qx)tTn{piL5ua*A4~7wfEa%g8WorR z2VDO#5;E?Rp?>49-}l}fAOLN{|Fr4c9a;DXodKA*U9{8I1Xy%5TtI2mLb35d7-$NPP20pN9w{=XeNp%OFWmoTEM`5@djTnq6bl`%!uYOtz7JMeGl$NgbHAzi*euDBxK z^h&D{LAko(p(;!#46N!P?v?FYue-^R>0rJ@78@C|T1y6XlkWH`@+k?6S91aiP4Lrr zwNSw*iS^&L>qj9r``Tmnc}bJ`^_~e?G-tdQ+){x>Mt$6%k^7G77a5UwZv|B+5>+C; zlM|j0Tc>6!kXRP;lQPCs2MxlXE#FgtkxeFXzZ$PdJT+gxtHUe+_J*+y;m(ZwC)-ev z&5J9Yl3rcZ{H0=N(dokz8iPb+$z0O-Fz6F+M8b2>!79{%;SEc0g#Q{3=4ZQSq@^p; z=lV>A+H$2WL?a@TRn8w)h*~4SCQAH9m3RvHtEum@td@m|1dw|3aCH#{h*7*n*gM0B z+moui)@5}SJIju3RF*K22HWq8_2f-}hPghGp$AVfLrblO6%S{PP&N{!)^3XhN1@Kc zaSg|xOCi3A$F9Cx)1UYV_HC>H*E2&>KBjvm^tevH z#1PS73c;${f7=8qCnhrBND753TJFEtaV$ai|=KPf>nJ+Jyj2MV3Vw zEGg0RzB3*SdebAXD@_xJ*W;tw#|VjTU&+C`zh;8rk=03|9G&vDT`E$o%8_xobB5D0GqGg8C+cMrR)3>GDHF-{GDu zH$2~5rW%0J)72vR<9mD|2I^7scmXRb^ET%hYQr{shL(cB_7ScUDKe0%p3xI$U>#=T zdwuq`rezNI-}1;<443%&I8tI9`kbPp7AcZzo!VxQ+XXzgunhDU}U^l_+-|D)<_Rf*y|97wZvrGKvP2wMTGy*a~ zw8`@Dc7HaNqCQ)<<(=tTLhtf8Vt)bUizf8IN=xq<;77UtS5A%JNka@$V!FD3Un`Xi z@ZM&#I5qELWLS;~LoYw#*@1rW5Z1u2rp<>epRa-lZ8D$Hs%I7GEF$VGz-q$0h)A88 zKZTJI&2%--A)WLcyIBbTU|Bzb1}A8%8i-yktU1Z;B`~~C*R!42){y{{6o!86_=cap4+fJ&U%M{ONw&NU$8M={ErGHYvueST0hjjfD5ujn~No@OwW1NlQaBcas+w{Zz> zaVeppfz-Z{mOINi)M4F(?dDs9_sE{li*0A;M(OhU{67J>0!RJNkG5;N1c~h-x06iU zE+YSr?Ka8%tVBJ#S+iq9K?t5o^w1x98egIESx^|yT zGp)PUV@`PTv;&7?MfL?@?Z&`=d;bV>G{+(zZ!_dYO{X7p?)3kI|21#=QjN4(i8R!L z?%?Q>RU3oC1v4|Uwk)4?)Lr0uWEoy@A%yJaro!dxr`#AcWNS>9eP#B2eHP^%*#aM* z9;}M)Qtv}R;NFmF*w5NF&+NPBdy$r-L2bP3E0Wo7FwnTvef;DCs6m~7;O&nslp*Lg z))@)4YzJ-KIBOFd(e!p^pkr@mXHmFVrd~X#eyjG2wI#h_WHVC*E!kP(o*B|2Ssvu$ zo=Mw46PUZ8fTu4PF3VQU1|^Mn-RhhzBkvB^Bg;^@5JGmtn{#hSZlX70stM*o;Q&U_ zL*5LoN0y;*A%yIP!sRA^=vVXMV$6&4Qo_Y9LEZ1w0&+dBN0y;*A%yIP!i5lWEv`qF zp>QFD?1sXH5OOW9N0xab!Ub+%TK^^Vg5ON>1}Q>bCHC{e`=^KICdjy-Pgb~J;QwZF zr{gwXqHuW~H(OjEv!3m473VER)g7D4i7I$|?=>9N&hz1VWSOIXgo}AbZ(A* zBUce3VTnq~@<5hNmfrOY&zYB>ZtWB0qp8dp%1GnopWc+G@%LX_8{b4lKh$K_GxS9J zKAapvt(9e-^-L$^T4Z_0St%P+Jxx-kpm2$j+uT~X=ore`=p(^MltE-HR>MjY4t%(o z9%IB%vBrzCH&~TkPilblo`KI25jYyBTh3P>KF)UWHmvB-KI%Z!wjnC@W1RQc#a|(O zmF+k<{aFT{TbaMCC0|mK?N_Snif2lCJE}I$&mpuvsn~e?v?b0uLH=3CWyK_?uA- Windows 10 Enterprise E3 or E5 per-device or per-user subscription (including Microsoft 365 F1, E3, or E5)
- Windows 10 Education A3 or A5 (including Microsoft 365 Education A3 or A5)
- Windows VDA E3 or E5 per-device or per-user subscription
- Windows Server 2016 or later | Windows 10 | Enhanced level | +| Device Health | **Any** of the following licenses:
- Windows 10 Enterprise or Windows 10 Education per-device with active Software Assurance
- Windows 10 Enterprise E3 or E5 per-device or per-user subscription (including Microsoft 365 F1, E3, or E5)
- Windows 10 Education A3 or A5 (including Microsoft 365 Education A3 or A5)
- Windows VDA E3 or E5 per-device or per-user subscription
- Windows Server 2016 or later | Windows 10 | - For Windows 10 version 1709 or later: Enhanced (Limited)
- For earlier versions: Enhanced >[!NOTE] > Regarding licensing requirements for Device Health, you do not need per-seat licensing, but only enough licenses to cover your total device usage. For example, if you have 100 E3 licenses, you can monitor 100 devices with Device Health. From 716e60069ef5c832c08ac97564b14dab632e56f9 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 30 Mar 2018 15:26:13 -0700 Subject: [PATCH 13/63] added threshold info --- .../security-policy-settings/account-lockout-duration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-policy-settings/account-lockout-duration.md b/windows/security/threat-protection/security-policy-settings/account-lockout-duration.md index 1adc579110..504909f266 100644 --- a/windows/security/threat-protection/security-policy-settings/account-lockout-duration.md +++ b/windows/security/threat-protection/security-policy-settings/account-lockout-duration.md @@ -29,7 +29,7 @@ This policy setting is dependent on the **Account lockout threshold** policy set If [Account lockout threshold](account-lockout-threshold.md) is configured, after the specified number of failed attempts, the account will be locked out. If th **Account lockout duration** is set to 0, the account will remain locked until an administrator unlocks it manually. -It is advisable to set **Account lockout duration** to approximately 30 minutes. To specify that the account will never be locked out, set the value to 0. To configure the value for this policy setting so that it never automatically unlocks the account might seem like a good idea; however, doing so can increase the number of requests that your organization’s Help Desk receives to unlock accounts that were locked by mistake. +It is advisable to set **Account lockout duration** to approximately 15 minutes. To specify that the account will never be locked out, set the Account lockout threshold value to 0. ### Location From e48791087584d0a0faac87a8170343fdf62e4474 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 30 Mar 2018 15:28:26 -0700 Subject: [PATCH 14/63] add offboarding for server details --- ...ows-defender-advanced-threat-protection.md | 36 ++++++++++++++++++- 1 file changed, 35 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md index 576adf3128..ff8fdcc39b 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md @@ -80,13 +80,47 @@ Once completed, you should see onboarded servers in the portal within an hour. | winatp-gw-weu.microsoft.com | 443 | -### Offboard server endpoints +## Offboard server endpoints +You have two options to offboard servers from the service: +- Uninstall the MMA agent +- Remove the Windows Defender ATP workspace configuration + + +### Uninstall servers by uinstalling the MMA agent To offboard the server, you can uninstall the MMA agent from the server or detach it from reporting to your Windows Defender ATP workspace. After offboarding the agent, the server will no longer send sensor data to Windows Defender ATP. For more information, see [To disable an agent](https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-windows-agents#to-disable-an-agent). >[!NOTE] >Offboarding causes the server to stop sending sensor data to the portal but data from the server, including reference to any alerts it has had will be retained for up to 6 months. + +### Remove the Windows Defender ATP workspace configuration +To offboard the server, you can use either of the following methods: + +- Remove the Windows Defender ATP workspace configuration from the MMA agent +- Run a PowerShell command to remove the configuration + +#### Remove the Windows Defender ATP workspace configuration from the MMA agent + +1. In the **Microsoft Monitoring Agent Properties**, select the **Azure Log Analytics (OMS)** tab. + +2. Select the Windows Defender ATP workspace, and click **Remove**. + +#### Run a PowerShell command to remove the configuration + +1. Obtain your workspace ID. For more information, see [Obtain workspace ID and key](https://docs.microsoft.com/azure/log-analytics/log-analytics-agent-windows#obtain-workspace-id-and-key). +2. Open an elevated command-line prompt (as an Admin) and run the following command. Use the workspace ID you obtained and replacing `WorkspaceID`: + + ``` + # Load agent scripting object + $AgentCfg = New-Object -ComObject AgentConfigManager.MgmtSvcCfg + # Remove OMS Workspace + $AgentCfg.RemoveCloudWorkspace($WorkspaceID) + # Reload the configuration and apply changes + $AgentCfg.ReloadConfiguration() + ``` + + ## Related topics - [Configure Windows Defender ATP client endpoints](configure-endpoints-windows-defender-advanced-threat-protection.md) - [Configure non-Windows endpoints](configure-endpoints-non-windows-windows-defender-advanced-threat-protection.md) From d97f2adf2f21812daf5d6ea8ae96000026c9060d Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Fri, 30 Mar 2018 15:56:58 -0700 Subject: [PATCH 15/63] fixed broken links --- ...rt-windows-defender-application-control.md | 2 +- ...ploy-managed-installer-for-device-guard.md | 2 +- ...ion-control-policy-rules-and-file-rules.md | 2 +- .../device-guard-deployment-guide.md | 19 ------------------- ...oy-windows-defender-application-control.md | 18 +++++++++--------- 5 files changed, 12 insertions(+), 31 deletions(-) diff --git a/windows/security/threat-protection/device-guard/deploy-catalog-files-to-support-windows-defender-application-control.md b/windows/security/threat-protection/device-guard/deploy-catalog-files-to-support-windows-defender-application-control.md index 0d9c04fc68..5e17a306fa 100644 --- a/windows/security/threat-protection/device-guard/deploy-catalog-files-to-support-windows-defender-application-control.md +++ b/windows/security/threat-protection/device-guard/deploy-catalog-files-to-support-windows-defender-application-control.md @@ -152,7 +152,7 @@ After the catalog file is signed, add the signing certificate to a WDAC policy, > **Note**  Include the **-UserPEs** parameter to ensure that the policy includes user mode code integrity. -3. Use [Add-SignerRule](https://technet.microsoft.com/library/mt634479.aspx) to add the signing certificate to the WDAC policy, filling in the correct path and filenames for `` and ``: +3. Use [Add-SignerRule](https://docs.microsoft.com/powershell/module/configci/add-signerrule?view=win10-ps) to add the signing certificate to the WDAC policy, filling in the correct path and filenames for `` and ``: ` Add-SignerRule -FilePath -CertificatePath -User ` diff --git a/windows/security/threat-protection/device-guard/deploy-managed-installer-for-device-guard.md b/windows/security/threat-protection/device-guard/deploy-managed-installer-for-device-guard.md index b97a44ed0e..1fe2c03c15 100644 --- a/windows/security/threat-protection/device-guard/deploy-managed-installer-for-device-guard.md +++ b/windows/security/threat-protection/device-guard/deploy-managed-installer-for-device-guard.md @@ -110,7 +110,7 @@ For example: ### Enable the managed installer option in WDAC policy In order to enable trust for the binaries laid down by managed installers, the Allow: Managed Installer option must be specified in your WDAC policy. -This can be done by using the [Set-RuleOption cmdlet](https://technet.microsoft.com/itpro/powershell/windows/configci/set-ruleoption). +This can be done by using the [Set-RuleOption cmdlet](https://docs.microsoft.com/powershell/module/configci/set-ruleoption?view=win10-ps). An example of the managed installer option being set in policy is shown below. ```code diff --git a/windows/security/threat-protection/device-guard/deploy-windows-defender-application-control-policy-rules-and-file-rules.md b/windows/security/threat-protection/device-guard/deploy-windows-defender-application-control-policy-rules-and-file-rules.md index 909c8b6e52..1abe52b44a 100644 --- a/windows/security/threat-protection/device-guard/deploy-windows-defender-application-control-policy-rules-and-file-rules.md +++ b/windows/security/threat-protection/device-guard/deploy-windows-defender-application-control-policy-rules-and-file-rules.md @@ -42,7 +42,7 @@ If you plan to use an internal CA to sign catalog files or WDAC policies, see th WDAC policies include *policy rules*, which control options such as audit mode or whether UMCI is enabled in a WDAC policy. You can modify these options in a new or existing WDAC policy. (For information about *file rules*, which specify the level at which applications will be identified and trusted, see the next section, [Windows Defender Application Control file rule levels](#windows-defender-application-control-file-rule-levels).) -To modify the policy rule options of an existing WDAC policy, use the [Set-RuleOption](https://technet.microsoft.com/library/mt634483.aspx) Windows PowerShell cmdlet. Note the following examples of how to use this cmdlet to add and remove a rule option on an existing WDAC policy: +To modify the policy rule options of an existing WDAC policy, use [Set-RuleOption](https://docs.microsoft.com/powershell/module/configci/set-ruleoption?view=win10-ps). Note the following examples of how to use this cmdlet to add and remove a rule option on an existing WDAC policy: - To ensure that UMCI is enabled for a WDAC policy that was created with the `-UserPEs` (user mode) option, add rule option 0 to an existing policy by running the following command: diff --git a/windows/security/threat-protection/device-guard/device-guard-deployment-guide.md b/windows/security/threat-protection/device-guard/device-guard-deployment-guide.md index 0408fa63d3..5bb386464c 100644 --- a/windows/security/threat-protection/device-guard/device-guard-deployment-guide.md +++ b/windows/security/threat-protection/device-guard/device-guard-deployment-guide.md @@ -20,25 +20,6 @@ With thousands of new malicious files created every day, using traditional metho Windows Defender Device Guard also uses virtualization-based security to isolate the Code Integrity service and run it alongside the Windows kernel in a hypervisor-protected container. Even if an attacker manages to get control of the Windows kernel itself, the ability to run malicious executable code is much less likely. -This guide explores the individual features in Windows Defender Device Guard as well as how to plan for, configure, and deploy them. It includes: - -- [Introduction to Windows Defender Device Guard: virtualization-based security and Windows Defender Application Control](introduction-to-device-guard-virtualization-based-security-and-windows-defender-application-control.md) - -- [Requirements and deployment planning guidelines for Windows Defender Device Guard](requirements-and-deployment-planning-guidelines-for-device-guard.md) - -- [Planning and getting started on the Windows Defender Device Guard deployment process](planning-and-getting-started-on-the-device-guard-deployment-process.md) - -- [Deploy Windows Defender Application Control](deploy-windows-defender-application-control.md) - - - [Optional: Create a code signing certificate for Windows Defender Application Control](optional-create-a-code-signing-certificate-for-windows-defender-application-control.md) - - - [Deploy Windows Defender Application Control: policy rules and file rules](deploy-windows-defender-application-control-policy-rules-and-file-rules.md) - - - [Deploy Windows Defender Application Control: steps](steps-to-deploy-windows-defender-application-control.md) - - - [Deploy catalog files to support Windows Defender Application Control](deploy-catalog-files-to-support-windows-defender-application-control.md) - -- [Enable virtualization-based protection of code integrity](deploy-device-guard-enable-virtualization-based-security.md) ## Related topics diff --git a/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md b/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md index 64881457e7..2d66a5c847 100644 --- a/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md +++ b/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md @@ -811,7 +811,7 @@ To create a WDAC policy, copy each of the following commands into an elevated Wi > - The preceding example includes `3> CIPolicylog.txt`, which redirects warning messages to a text file, **CIPolicylog.txt**. -3. Use [ConvertFrom-CIPolicy](https://technet.microsoft.com/library/mt733073.aspx) to convert the WDAC policy to a binary format: +3. Use [ConvertFrom-CIPolicy](https://docs.microsoft.com/powershell/module/configci/convertfrom-cipolicy?view=win10-ps) to convert the WDAC policy to a binary format: ` ConvertFrom-CIPolicy $InitialCIPolicy $CIPolicyBin` @@ -955,11 +955,11 @@ To merge two WDAC policies, complete the following steps in an elevated Windows > [!Note] > The variables in this section specifically expect to find an initial policy on your desktop called **InitialScan.xml** and an audit WDAC policy called **DeviceGuardAuditPolicy.xml**. If you want to merge other WDAC policies, update the variables accordingly. -2. Use [Merge-CIPolicy](https://technet.microsoft.com/library/mt634485.aspx) to merge two policies and create a new WDAC policy: +2. Use [Merge-CIPolicy](https://docs.microsoft.com/powershell/module/configci/merge-cipolicy?view=win10-ps) to merge two policies and create a new WDAC policy: ` Merge-CIPolicy -PolicyPaths $InitialCIPolicy,$AuditCIPolicy -OutputFilePath $MergedCIPolicy` -3. Use [ConvertFrom-CIPolicy](https://technet.microsoft.com/library/mt733073.aspx) to convert the merged WDAC policy to binary format: +3. Use [ConvertFrom-CIPolicy](https://docs.microsoft.com/powershell/module/configci/convertfrom-cipolicy?view=win10-ps) to convert the merged WDAC policy to binary format: ` ConvertFrom-CIPolicy $MergedCIPolicy $CIPolicyBin ` @@ -987,7 +987,7 @@ Every WDAC policy is created with audit mode enabled. After you have successfull 2. Ensure that rule options 9 (“Advanced Boot Options Menu”) and 10 (“Boot Audit on Failure”) are set the way that you intend for this policy. We strongly recommend that you enable these rule options before you run any enforced policy for the first time. Enabling these options provides administrators with a pre-boot command prompt, and allows Windows to start even if the WDAC policy blocks a kernel-mode driver from running. When ready for enterprise deployment, you can remove these options. - To ensure that these options are enabled in a policy, use [Set-RuleOption](https://technet.microsoft.com/library/mt634483.aspx) as shown in the following commands. You can run these commands even if you're not sure whether options 9 and 10 are already enabled—if so, the commands have no effect. + To ensure that these options are enabled in a policy, use [Set-RuleOption](https://docs.microsoft.com/powershell/module/configci/set-ruleoption?view=win10-ps) as shown in the following commands. You can run these commands even if you're not sure whether options 9 and 10 are already enabled—if so, the commands have no effect. ` Set-RuleOption -FilePath $InitialCIPolicy -Option 9` @@ -997,14 +997,14 @@ Every WDAC policy is created with audit mode enabled. After you have successfull ` copy $InitialCIPolicy $EnforcedCIPolicy` -4. Use [Set-RuleOption](https://technet.microsoft.com/library/mt634483.aspx) to delete the audit mode rule option: +4. Use [Set-RuleOption](https://docs.microsoft.com/powershell/module/configci/set-ruleoption?view=win10-ps) to delete the audit mode rule option: ` Set-RuleOption -FilePath $EnforcedCIPolicy -Option 3 -Delete` > [!Note] > To enforce a WDAC policy, you delete option 3, the **Audit Mode Enabled** option. There is no “enforced” option that can be placed in a WDAC policy. -5. Use [ConvertFrom-CIPolicy](https://technet.microsoft.com/library/mt733073.aspx) to convert the new WDAC policy to binary format: +5. Use [ConvertFrom-CIPolicy](https://docs.microsoft.com/powershell/module/configci/convertfrom-cipolicy?view=win10-ps) to convert the new WDAC policy to binary format: ` ConvertFrom-CIPolicy $EnforcedCIPolicy $CIPolicyBin` @@ -1052,7 +1052,7 @@ If you do not have a code signing certificate, see the [Optional: Create a code ` cd $env:USERPROFILE\Desktop ` -5. Use [Add-SignerRule](https://technet.microsoft.com/library/mt634479.aspx) to add an update signer certificate to the WDAC policy: +5. Use [Add-SignerRule](https://docs.microsoft.com/powershell/module/configci/add-signerrule?view=win10-ps) to add an update signer certificate to the WDAC policy: ` Add-SignerRule -FilePath $InitialCIPolicy -CertificatePath -Kernel -User –Update` @@ -1060,11 +1060,11 @@ If you do not have a code signing certificate, see the [Optional: Create a code > *<Path to exported .cer certificate>* should be the full path to the certificate that you exported in step 3. Also, adding update signers is crucial to being able to modify or disable this policy in the future. For more information about how to disable signed WDAC policies, see the [Disable signed Windows Defender Application Control policies within Windows](#disable-signed-windows-defender-application-control-policies-within-windows) section. -6. Use [Set-RuleOption](https://technet.microsoft.com/library/mt634483.aspx) to remove the unsigned policy rule option: +6. Use [Set-RuleOption](https://docs.microsoft.com/powershell/module/configci/set-ruleoption?view=win10-ps) to remove the unsigned policy rule option: ` Set-RuleOption -FilePath $InitialCIPolicy -Option 6 -Delete` -7. Use [ConvertFrom-CIPolicy](https://technet.microsoft.com/library/mt733073.aspx) to convert the policy to binary format: +7. Use [ConvertFrom-CIPolicy](https://docs.microsoft.com/powershell/module/configci/convertfrom-cipolicy?view=win10-ps) to convert the policy to binary format: ` ConvertFrom-CIPolicy $InitialCIPolicy $CIPolicyBin` From d6feeb1ba78a5b94275f2f25eb06ccefe5416f9f Mon Sep 17 00:00:00 2001 From: Sharla Akers Date: Fri, 30 Mar 2018 23:08:46 +0000 Subject: [PATCH 16/63] Updated enterprisemodernappmanagement-csp.md to reflect actual behavior today. --- .../mdm/enterprisemodernappmanagement-csp.md | 31 ++++++------------- 1 file changed, 10 insertions(+), 21 deletions(-) diff --git a/windows/client-management/mdm/enterprisemodernappmanagement-csp.md b/windows/client-management/mdm/enterprisemodernappmanagement-csp.md index 2ad3ca1434..404877f84d 100644 --- a/windows/client-management/mdm/enterprisemodernappmanagement-csp.md +++ b/windows/client-management/mdm/enterprisemodernappmanagement-csp.md @@ -112,7 +112,7 @@ The following image shows the EnterpriseModernAppManagement configuration servic ``` **AppManagement/RemovePackage** -

Added in Windows 10, version 1703. Used to remove packages. +

Added in Windows 10, version 1703. Used to remove packages. Not supported for ./User/Vendor/MSFT.

Parameters:

    @@ -121,34 +121,18 @@ The following image shows the EnterpriseModernAppManagement configuration servic
  • Name: Specifies the PackageFullName of the particular package to remove.
  • RemoveForAllUsers:
      -
    • 0 (default) – Package will be un-provisioned so that new users do not receive the package. The package will remain installed for current users.
      • -
    • 1 – Package will be removed for all users.
      • +
    • 0 (default) – Package will be un-provisioned so that new users do not receive the package. The package will remain installed for current users. This is not currently supported.
      • +
    • 1 – Package will be removed for all users only if it is a provisioned package.
-
  • User (optional): Specifies the SID of the particular user for whom to remove the package; only the package for the specified user can be removed. Not required for ./User/Vendor/MSFT.
    • +
  • User (optional): Specifies the SID of the particular user for whom to remove the package; only the package for the specified user can be removed.

    • Supported operation is Execute. -

    The following example removes a package for the specified user: - -```XML - - 10 - - - ./User/Vendor/MSFT/EnterpriseModernAppManagement/AppManagement/RemovePackage - - xml - - - - - -```

    The following example removes a package for all users: ````XML @@ -307,7 +291,12 @@ The following image shows the EnterpriseModernAppManagement configuration servic

    Supported operation is Get. **.../*PackageFamilyName*/*PackageFullName*/Users** -

    Required. Registered users of the app. If the query is at the device level, it returns all the registered users of the device. If you query the user context, it will only return the current user. Value type is string. +

    Required. Registered users of the app and the package install state. If the query is at the device level, it returns all the registered users of the device. If you query the user context, it will only return the current user. Value type is string. + +- Not Installed = 0 +- Staged = 1 +- Installed = 2 +- Paused = 6

    Supported operation is Get. From 30a4b95f90a85e341ec3bb5a54e3ab166eab6cf4 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Fri, 30 Mar 2018 23:18:12 +0000 Subject: [PATCH 17/63] Merged PR 6803: I broke apart the topic into multiple child topics I broke apart the topic into multiple child topics --- windows/deployment/TOC.md | 7 + windows/deployment/upgrade/log-files.md | 168 +++ windows/deployment/upgrade/quick-fixes.md | 56 + .../upgrade/resolution-procedures.md | 684 ++++++++++ .../resolve-windows-10-upgrade-errors.md | 1103 +---------------- windows/deployment/upgrade/setupdiag.md | 4 + windows/deployment/upgrade/submit-errors.md | 4 + .../upgrade/troubleshoot-upgrade-errors.md | 91 ++ .../deployment/upgrade/upgrade-error-codes.md | 144 +++ .../upgrade/windows-error-reporting.md | 66 + 10 files changed, 1255 insertions(+), 1072 deletions(-) create mode 100644 windows/deployment/upgrade/log-files.md create mode 100644 windows/deployment/upgrade/quick-fixes.md create mode 100644 windows/deployment/upgrade/resolution-procedures.md create mode 100644 windows/deployment/upgrade/troubleshoot-upgrade-errors.md create mode 100644 windows/deployment/upgrade/upgrade-error-codes.md create mode 100644 windows/deployment/upgrade/windows-error-reporting.md diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index 2e859aa94f..d36561005b 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -8,6 +8,13 @@ ### [Configure VDA for Subscription Activation](vda-subscription-activation.md) ### [Deploy Windows 10 Enterprise licenses](deploy-enterprise-licenses.md) ## [Resolve Windows 10 upgrade errors](upgrade/resolve-windows-10-upgrade-errors.md) +### [Quick fixes](upgrade\quick-fixes.md) +### [SetupDiag](upgrade/setupdiag.md) +### [Troubleshooting upgrade errors](upgrade/troubleshoot-upgrade-errors.md) +### [Windows error reporting](upgrade/windows-error-reporting.md) +### [Upgrade error codes](upgrade/upgrade-error-codes.md) +### [Log files](upgrade/log-files.md) +### [Resolution procedures](upgrade/resolution-procedures.md) ### [Submit Windows 10 upgrade errors](upgrade/submit-errors.md) ### [SetupDiag](upgrade/setupdiag.md) diff --git a/windows/deployment/upgrade/log-files.md b/windows/deployment/upgrade/log-files.md new file mode 100644 index 0000000000..72d23e920b --- /dev/null +++ b/windows/deployment/upgrade/log-files.md @@ -0,0 +1,168 @@ +--- +title: Log files - Windows IT Pro +description: Resolve Windows 10 upgrade errors for ITPros. Technical information for IT professionals to help diagnose Windows setup errors. +keywords: deploy, error, troubleshoot, windows, 10, upgrade, code, rollback, ITPro +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: deploy +author: greg-lindsay +ms.date: 03/30/2018 +ms.localizationpriority: high +--- + +# Log files + +**Applies to** +- Windows 10 + +>[!NOTE] +>This is a 400 level topic (advanced).
    +>See [Resolve Windows 10 upgrade errors](resolve-windows-10-upgrade-errors.md) for a full list of topics in this article. + + +Several log files are created during each phase of the upgrade process. These log files are essential for troubleshooting upgrade problems. By default, the folders that contain these log files are hidden on the upgrade target computer. To view the log files, configure Windows Explorer to view hidden items, or use a tool to automatically gather these logs. The most useful log is **setupact.log**. The log files are located in a different folder depending on the Windows Setup phase. Recall that you can determine the phase from the extend code. + +Note: Also see the [Windows Error Reporting](windows-error-reporting.md) section in this document for help locating error codes and log files. + +The following table describes some log files and how to use them for troubleshooting purposes:
    + +
    + + + + + + + + + + + + + + + + +
    Log filePhase: LocationDescriptionWhen to use
    setupact.logDown-Level:
    $Windows.~BT\Sources\Panther    		Contains information about setup actions during the downlevel phase. All down-level failures and starting point for rollback investigations.
    This is the most important log for diagnosing setup issues.
    OOBE:
    $Windows.~BT\Sources\Panther\UnattendGC    		Contains information about actions during the OOBE phase.Investigating rollbacks that failed during OOBE phase and operations – 0x4001C, 0x4001D, 0x4001E, 0x4001F.
    Rollback:
    $Windows.~BT\Sources\Rollback    		Contains information about actions during rollback.Investigating generic rollbacks - 0xC1900101.
    Pre-initialization (prior to downlevel):
    Windows    		Contains information about initializing setup.If setup fails to launch.
    Post-upgrade (after OOBE):
    Windows\Panther    		Contains information about setup actions during the installation.Investigate post-upgrade related issues.
    setuperr.logSame as setupact.logContains information about setup errors during the installation.Review all errors encountered during the installation phase.
    miglog.xmlPost-upgrade (after OOBE):
    Windows\Panther    		Contains information about what was migrated during the installation.Identify post upgrade data migration issues.
    BlueBox.logDown-Level:
    Windows\Logs\Mosetup    		Contains information communication between setup.exe and Windows Update.Use during WSUS and WU down-level failures or for 0xC1900107.
    Supplemental rollback logs:
    +Setupmem.dmp
    +setupapi.dev.log
    +Event logs (*.evtx)    		$Windows.~BT\Sources\RollbackAdditional logs collected during rollback. +Setupmem.dmp: If OS bugchecks during upgrade, setup will attempt to extract a mini-dump.
    +Setupapi: Device install issues - 0x30018
    +Event logs: Generic rollbacks (0xC1900101) or unexpected reboots.
    + +## Log entry structure + +A setupact.log or setuperr.log entry includes the following elements: + +

      +
    1. The date and time - 2016-09-08 09:20:05. +
    2. The log level - Info, Warning, Error, Fatal Error. +
    3. The logging component - CONX, MOUPG, PANTHR, SP, IBSLIB, MIG, DISM, CSI, CBS. +
        +
      • The logging components SP (setup platform), MIG (migration engine), and CONX (compatibility information) are particularly useful for troubleshooting Windows Setup errors. +
      +
    4. The message - Operation completed successfully. +
    + +See the following example: + +| Date/Time | Log level | Component | Message | +|------|------------|------------|------------| +|2016-09-08 09:23:50,| Warning | MIG | Could not replace object C:\Users\name\Cookies. Target Object cannot be removed.| + + +## Analyze log files + +>The following instructions are meant for IT professionals. Also see the [Upgrade error codes](upgrade-error-codes.md) section in this guide to familiarize yourself with [result codes](upgrade-error-codes.md#result-codes) and [extend codes](upgrade-error-codes.md#extend-codes). + +
    To analyze Windows Setup log files: + +
      +
    1. Determine the Windows Setup error code. This code should be returned by Windows Setup if it is not successful with the upgrade process. +
    2. Based on the [extend code](upgrade-error-codes.md#extend-codes) portion of the error code, determine the type and location of a [log files](#log-files) to investigate. +
    3. Open the log file in a text editor, such as notepad. +
    4. Using the [result code](upgrade-error-codes.md#result-codes) portion of the Windows Setup error code, search for the result code in the file and find the last occurrence of the code. Alternatively search for the "abort" and abandoning" text strings described in step 7 below. +
    5. To find the last occurrence of the result code: +
        +
      1. Scroll to the bottom of the file and click after the last character. +
      2. Click Edit. +
      3. Click Find. +
      4. Type the result code. +
      5. Under Direction select Up. +
      6. Click Find Next. +
      +
    6. When you have located the last occurrence of the result code, scroll up a few lines from this location in the file and review the processes that failed just prior to generating the result code. +
    7. Search for the following important text strings: +
        +
      • Shell application requested abort +
      • Abandoning apply due to error for object +
      +
    8. Decode Win32 errors that appear in this section. +
    9. Write down the timestamp for the observed errors in this section. +
    10. Search other log files for additional information matching these timestamps or errors. +
    + +For example, assume that the error code for an error is 0x8007042B - 0x2000D. Searching for "8007042B" reveals the following content from the setuperr.log file: + +>Some lines in the text below are shortened to enhance readability. The date and time at the start of each line (ex: 2016-10-05 15:27:08) is shortened to minutes and seconds, and the certificate file name which is a long text string is shortened to just "CN." + +
    setuperr.log content: + +
    +27:08, Error           SP     Error READ, 0x00000570 while gathering/applying object: File, C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18 [CN]. Will return 0[gle=0x00000570]
+27:08, Error           MIG    Error 1392 while gathering object C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18 [CN]. Shell application requested abort![gle=0x00000570]
+27:08, Error                  Gather failed. Last error: 0x00000000
+27:08, Error           SP     SPDoFrameworkGather: Gather operation failed. Error: 0x0000002C
+27:09, Error           SP     CMigrateFramework: Gather framework failed. Status: 44
+27:09, Error           SP     Operation failed: Migrate framework (Full). Error: 0x8007042B[gle=0x000000b7]
+27:09, Error           SP     Operation execution failed: 13. hr = 0x8007042B[gle=0x000000b7]
+27:09, Error           SP     CSetupPlatformPrivate::Execute: Execution of operations queue failed, abandoning. Error: 0x8007042B[gle=0x000000b7]
+
    + +The first line indicates there was an error **0x00000570** with the file **C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18 [CN]** (shown below): + +
    +27:08, Error           SP     Error READ, 0x00000570 while gathering/applying object: File, C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18 [CN]. Will return 0[gle=0x00000570]
+
    + +    The error 0x00000570 is a [Win32 error code](https://msdn.microsoft.com/en-us/library/cc231199.aspx) corresponding to: ERROR_FILE_CORRUPT: The file or directory is corrupted and unreadable. + +Therefore, Windows Setup failed because it was not able to migrate the corrupt file **C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\[CN]**. This file is a local system certificate and can be safely deleted. Searching the setupact.log file for additional details, the phrase "Shell application requested abort" is found in a location with the same timestamp as the lines in setuperr.log. This confirms our suspicion that this file is the cause of the upgrade failure: + +
    setupact.log content: + +
    +27:00, Info                   Gather started at 10/5/2016 23:27:00
+27:00, Info [0x080489] MIG    Setting system object filter context (System)
+27:00, Info [0x0803e5] MIG    Not unmapping HKCU\Software\Classes; it is not mapped
+27:00, Info [0x0803e5] MIG    Not unmapping HKCU; it is not mapped
+27:00, Info            SP     ExecuteProgress: Elapsed events:1 of 4, Percent: 12
+27:00, Info [0x0802c6] MIG    Processing GATHER for migration unit: \UpgradeFramework (CMXEAgent)
+27:08, Error           SP     Error READ, 0x00000570 while gathering/applying object: File, C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18 [CN]. Will return 0[gle=0x00000570]
+27:08, Error           MIG    Error 1392 while gathering object C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18 [CN]. Shell application requested abort![gle=0x00000570]
+27:08, Info            SP     ExecuteProgress: Elapsed events:2 of 4, Percent: 25
+27:08, Info            SP     ExecuteProgress: Elapsed events:3 of 4, Percent: 37
+27:08, Info [0x080489] MIG    Setting system object filter context (System)
+27:08, Info [0x0803e5] MIG    Not unmapping HKCU\Software\Classes; it is not mapped
+27:08, Info [0x0803e5] MIG    Not unmapping HKCU; it is not mapped
+27:08, Info            MIG    COutOfProcPluginFactory::FreeSurrogateHost: Shutdown in progress.
+27:08, Info            MIG    COutOfProcPluginFactory::LaunchSurrogateHost::CommandLine: -shortened-
+27:08, Info            MIG    COutOfProcPluginFactory::LaunchSurrogateHost: Successfully launched host and got control object.
+27:08, Error                  Gather failed. Last error: 0x00000000
+27:08, Info                   Gather ended at 10/5/2016 23:27:08 with result 44
+27:08, Info                   Leaving MigGather method
+27:08, Error           SP     SPDoFrameworkGather: Gather operation failed. Error: 0x0000002C
+
    + + +
    This analysis indicates that the Windows upgrade error can be resolved by deleting the C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\[CN] file. Note: In this example, the full, unshortened file name is C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\be8228fb2d3cb6c6b0ccd9ad51b320b4_a43d512c-69f2-42de-aef9-7a88fabdaa3f. + +## Related topics + +[Windows 10 FAQ for IT professionals](https://technet.microsoft.com/en-us/windows/dn798755.aspx) +
    [Windows 10 Enterprise system requirements](https://technet.microsoft.com/en-us/windows/dn798752.aspx) +
    [Windows 10 Specifications](https://www.microsoft.com/en-us/windows/Windows-10-specifications) +
    [Windows 10 IT pro forums](https://social.technet.microsoft.com/Forums/en-US/home?category=Windows10ITPro) +
    [Fix Windows Update errors by using the DISM or System Update Readiness tool](https://support.microsoft.com/kb/947821) diff --git a/windows/deployment/upgrade/quick-fixes.md b/windows/deployment/upgrade/quick-fixes.md new file mode 100644 index 0000000000..d11f924e4d --- /dev/null +++ b/windows/deployment/upgrade/quick-fixes.md @@ -0,0 +1,56 @@ +--- +title: Quick fixes - Windows IT Pro +description: Resolve Windows 10 upgrade errors for ITPros. Technical information for IT professionals to help diagnose Windows setup errors. +keywords: deploy, error, troubleshoot, windows, 10, upgrade, code, rollback, ITPro +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: deploy +author: greg-lindsay +ms.date: 03/30/2018 +ms.localizationpriority: high +--- + +# Quick fixes + +**Applies to** +- Windows 10 + +>[!NOTE] +>This is a 100 level topic (basic).
    +>See [Resolve Windows 10 upgrade errors](resolve-windows-10-upgrade-errors.md) for a full list of topics in this article. + +The following steps can resolve many Windows upgrade problems. + +
      +
    1. Remove nonessential external hardware, such as docks and USB devices.
      2. +
    2. Check all hard drives for errors and attempt repairs. To automatically repair hard drives, open an elevated command prompt, switch to the drive you wish to repair, and type the following command. You will be required to reboot the computer if the hard drive being repaired is also the system drive. +
        +
      • chkdsk /F
        • +
      +
      3. +
    3. Attempt to restore and repair system files by typing the following commands at an elevated command prompt. It may take several minutes for the command operations to be completed. For more information, see [Repair a Windows Image](https://msdn.microsoft.com/windows/hardware/commercialize/manufacture/desktop/repair-a-windows-image). +
        +
      • DISM.exe /Online /Cleanup-image /Restorehealth
        • +
      • sfc /scannow
        • +
      +
      4. +
    4. Update Windows so that all available recommended updates are installed, and ensure the computer is rebooted if this is necessary to complete installation of an update.
      5. +
    5. Uninstall non-Microsoft antivirus software. +
        +
      • Use Windows Defender for protection during the upgrade. +
      • Verify compatibility information and re-install antivirus applications after the upgrade.
        • +
      +
    6. Uninstall all nonessential software.
      7. +
    7. Update firmware and drivers.
      8. +
    8. Ensure that "Download and install updates (recommended)" is accepted at the start of the upgrade process.
      9. +
    9. Verify at least 16 GB of free space is available to upgrade a 32-bit OS, or 20 GB for a 64-bit OS. +
    + +## Related topics + +[Windows 10 FAQ for IT professionals](https://technet.microsoft.com/en-us/windows/dn798755.aspx) +
    [Windows 10 Enterprise system requirements](https://technet.microsoft.com/en-us/windows/dn798752.aspx) +
    [Windows 10 Specifications](https://www.microsoft.com/en-us/windows/Windows-10-specifications) +
    [Windows 10 IT pro forums](https://social.technet.microsoft.com/Forums/en-US/home?category=Windows10ITPro) +
    [Fix Windows Update errors by using the DISM or System Update Readiness tool](https://support.microsoft.com/kb/947821) diff --git a/windows/deployment/upgrade/resolution-procedures.md b/windows/deployment/upgrade/resolution-procedures.md new file mode 100644 index 0000000000..713ccc1b67 --- /dev/null +++ b/windows/deployment/upgrade/resolution-procedures.md @@ -0,0 +1,684 @@ +--- +title: Resolution procedures - Windows IT Pro +description: Resolve Windows 10 upgrade errors for ITPros. Technical information for IT professionals to help diagnose Windows setup errors. +keywords: deploy, error, troubleshoot, windows, 10, upgrade, code, rollback, ITPro +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: deploy +author: greg-lindsay +ms.date: 03/30/2018 +ms.localizationpriority: high +--- + +# Resolution procedures + +**Applies to** +- Windows 10 + +>[!NOTE] +>This is a 400 level topic (advanced).
    +>See [Resolve Windows 10 upgrade errors](resolve-windows-10-upgrade-errors.md) for a full list of topics in this article. + + +## 0xC1900101 + +A frequently observed result code is 0xC1900101. This result code can be thrown at any stage of the upgrade process, with the exception of the downlevel phase. 0xC1900101 is a generic rollback code, and usually indicates that an incompatible driver is present. The incompatible driver can cause blue screens, system hangs, and unexpected reboots. Analysis of supplemental log files is often helpful, such as:
    + +- The minidump file: $Windows.~bt\Sources\Rollback\setupmem.dmp, +- Event logs: $Windows.~bt\Sources\Rollback\*.evtx +- The device install log: $Windows.~bt\Sources\Rollback\setupapi\setupapi.dev.log + +The device install log is particularly helpful if rollback occurs during the sysprep operation (extend code 0x30018). To resolve a rollback due to driver conflicts, try running setup using a minimal set of drivers and startup programs by performing a [clean boot](https://support.microsoft.com/en-us/kb/929135) before initiating the upgrade process. + +
    See the following general troubleshooting procedures associated with a result code of 0xC1900101: + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + +
    Code +
    0xC1900101 - 0x20004 +
    + +
    +
    Cause +
    Windows Setup encountered an error during the SAFE_OS with the INSTALL_RECOVERY_ENVIRONMENT operation +
    This is generally caused by out-of-date drivers. +
    +    		 + + +
    Mitigation +
    Uninstall antivirus applications. +
    Remove all unused SATA devices. +
    Remove all unused devices and drivers. +
    Update drivers and BIOS. +
    +
    + + +
    Code +
    0xC1900101 - 0x2000c +
    + +
    +
    Cause +
    Windows Setup encountered an unspecified error during Wim apply in the WinPE phase. +
    This is generally caused by out-of-date drivers. +
    +    		 + + +
    Mitigation +
    Disconnect all peripheral devices that are connected to the system, except for the mouse, keyboard and display. +
    Contact your hardware vendor to obtain updated device drivers. +
    Ensure that "Download and install updates (recommended)" is accepted at the start of the upgrade process. +
    +
    + + +
    Code +
    0xC1900101 - 0x20017 + +
    + +
    +
    Cause +
    A driver has caused an illegal operation. +
    Windows was not able to migrate the driver, resulting in a rollback of the operating system. +
    This is a SafeOS boot failure, typically caused by drivers or non-Microsoft disk encryption software. +
    +    		 + + +
    Mitigation +
    +Ensure that all that drivers are updated.
    +Open the Setuperr.log and Setupact.log files in the %windir%\Panther directory, and then locate the problem drivers. +
    For more information, see [Understanding Failures and Log Files](https://technet.microsoft.com/en-us/library/ee851579.aspx). +
    Update or uninstall the problem drivers. +
    +
    + + +
    Code +
    0xC1900101 - 0x30018 +
    + +
    +
    Cause +
    A device driver has stopped responding to setup.exe during the upgrade process. +
    +    		 + + +
    Mitigation +
    +Disconnect all peripheral devices that are connected to the system, except for the mouse, keyboard and display. +
    Contact your hardware vendor to obtain updated device drivers. +
    Ensure that "Download and install updates (recommended)" is accepted at the start of the upgrade process. +
    +
    + + +
    Code +
    0xC1900101 - 0x3000D +
    + +
    +
    Cause +
    Installation failed during the FIRST_BOOT phase while attempting the MIGRATE_DATA operation. +
    This can occur due to a problem with a display driver. + +
    +    		 + + +
    Mitigation +
    +Disconnect all peripheral devices that are connected to the system, except for the mouse, keyboard and display. +
    Update or uninstall the display driver. +
    +
    + + +
    Code +
    0xC1900101 - 0x4000D +
    + +
    +
    Cause +
    A rollback occurred due to a driver configuration issue. +
    Installation failed during the second boot phase while attempting the MIGRATE_DATA operation. + +
    This can occur due to incompatible drivers. + +
    +    		 + + +
    Mitigation +
    +
    Check supplemental rollback logs for a setupmem.dmp file, or event logs for any unexpected reboots or errors. +
    Review the rollback log and determine the stop code. +
    The rollback log is located in the **C:\$Windows.~BT\Sources\Panther** folder. An example analysis is shown below. This example is not representative of all cases: +
    Info SP Crash 0x0000007E detected +
    Info SP Module name : +
    Info SP Bugcheck parameter 1 : 0xFFFFFFFFC0000005 +
    Info SP Bugcheck parameter 2 : 0xFFFFF8015BC0036A +
    Info SP Bugcheck parameter 3 : 0xFFFFD000E5D23728 +
    Info SP Bugcheck parameter 4 : 0xFFFFD000E5D22F40 +
    Info SP Cannot recover the system. +
    Info SP Rollback: Showing splash window with restoring text: Restoring your previous version of Windows. + + +
    Typically, there is a dump file for the crash to analyze. If you are not equipped to debug the dump, then attempt the following basic troubleshooting procedures:
    + +1. Make sure you have enough disk space.
    +2. If a driver is identified in the bug check message, disable the driver or check with the manufacturer for driver updates.
    +3. Try changing video adapters.
    +4. Check with your hardware vendor for any BIOS updates.
    +5. Disable BIOS memory options such as caching or shadowing. +

    +
    +
    + + +
    Code +
    0xC1900101 - 0x40017 +
    + +
    +
    Cause +
    Windows 10 upgrade failed after the second reboot. +
    This is usually caused by a faulty driver. For example: antivirus filter drivers or encryption drivers. +
    +    		 + + +
    Mitigation +
    Clean boot into Windows, and then attempt the upgrade to Windows 10.
    + +For more information, see [How to perform a clean boot in Windows](https://support.microsoft.com/en-us/kb/929135). + +

    Ensure you select the option to "Download and install updates (recommended)." +
    +
    + +

    0x800xxxxx

    + +
    Result codes starting with the digits 0x800 are also important to understand. These error codes indicate general operating system errors, and are not unique to the Windows upgrade process. Examples include timeouts, devices not functioning, and a process stopping unexpectedly. + +
    See the following general troubleshooting procedures associated with a result code of 0x800xxxxx:
    + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + + +
    Code +
    + +80040005 - 0x20007 + +
    + +
    +
    Cause +
    + +An unspecified error occurred with a driver during the SafeOS phase. + +
    +    		 + + +
    Mitigation +
    + +This error has more than one possible cause. Attempt [quick fixes](quick-fixes.md), and if not successful, [analyze log files](log-files.md#analyze-log-files) in order to determine the problem and solution. + +
    +
    + + +
    Code +
    + +0x80073BC3 - 0x20009
    +0x8007002 - 0x20009
    +0x80073B92 - 0x20009 + +
    + +
    +
    Cause +
    + +The requested system device cannot be found, there is a sharing violation, or there are multiple devices matching the identification criteria. + +
    +    		 + + +
    Mitigation +
    + +These errors occur during partition analysis and validation, and can be caused by the presence of multiple system partitions. For example, if you installed a new system drive but left the previous system drive connected, this can cause a conflict. To resolve the errors, disconnect or temporarily disable drives that contain the unused system partition. You can reconnect the drive after the upgrade has completed. Alternatively, you can delete the unused system partition. + +
    +
    + + +
    Code +
    + +800704B8 - 0x3001A + +
    + +
    +
    Cause +
    + +An extended error has occurred during the first boot phase. + +
    +    		 + + +
    Mitigation +
    + +Disable or uninstall non-Microsoft antivirus applications, disconnect all unnecessary devices, and perform a [clean boot](https://support.microsoft.com/en-us/kb/929135). + +
    +
    + + +
    Code +
    + +8007042B - 0x4000D + +
    + +
    +
    Cause +
    + +The installation failed during the second boot phase while attempting the MIGRATE_DATA operation. +
    This issue can occur due to file system, application, or driver issues. + +
    +    		 + + +
    Mitigation +
    + +[Analyze log files](log-files.md#analyze-log-files) in order to determine the file, application, or driver that is not able to be migrated. Disconnect, update, remove, or replace the device or object. + +
    +
    + + +
    Code +
    + +8007001F - 0x3000D + +
    + +
    +
    Cause +
    + +The installation failed in the FIRST_BOOT phase with an error during MIGRATE_DATA operation. + +
    +    		 + + +
    Mitigation +
    + +[Analyze log files](log-files.md#analyze-log-files) in order to determine the files or registry entries that are blocking data migration. + +This error can be due to a problem with user profiles. It can occur due to corrupt registry entries under **HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList** or invalid files in the **\\Users** directory. + +Note: If a previous upgrade did not complete, invalid profiles might exist in the **Windows.old\\Users** directory. + +To repair this error, ensure that deleted accounts are not still present in the Windows registry and that files under the \\Users directory are valid. Delete the invalid files or user profiles that are causing this error. The specific files and profiles that are causing the error will be recorded in the Windows setup log files. + +
    +
    + + +
    Code +
    + +8007001F - 0x4000D + +
    + +
    +
    Cause +
    + +General failure, a device attached to the system is not functioning. + +
    +    		 + + +
    Mitigation +
    + +[Analyze log files](log-files.md#analyze-log-files) in order to determine the device that is not functioning properly. Disconnect, update, or replace the device. + +
    +
    + + +
    Code +
    + +8007042B - 0x4001E + +
    + +
    +
    Cause +
    + +The installation failed during the second boot phase while attempting the PRE_OOBE operation. + +
    +    		 + + +
    Mitigation +
    + +This error has more than one possible cause. Attempt [quick fixes](quick-fixes.md), and if not successful, [analyze log files](log-files.md#analyze-log-files) in order to determine the problem and solution. + +
    +
    + + +## Other result codes + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Error code +Cause +Mitigation +
    0xC1800118WSUS has downloaded content that it cannot use due to a missing decryption key.See [Steps to resolve error 0xC1800118](https://blogs.technet.microsoft.com/wsus/2016/09/21/resolving-error-0xc1800118/) for information.
    0xC1900200Setup.exe has detected that the machine does not meet the minimum system requirements.Ensure the system you are trying to upgrade meets the minimum system requirements.
    See [Windows 10 specifications](https://www.microsoft.com/en-us/windows/windows-10-specifications) for information.
    0x80090011A device driver error occurred during user data migration.Contact your hardware vendor and get all the device drivers updated. It is recommended to have an active internet connection during upgrade process. +
    Ensure that "Download and install updates (recommended)" is accepted at the start of the upgrade process.
    0xC7700112Failure to complete writing data to the system drive, possibly due to write access failure on the hard disk.This issue is resolved in the latest version of Upgrade Assistant. +
    Ensure that "Download and install updates (recommended)" is accepted at the start of the upgrade process.
    0x80190001An unexpected error was encountered while attempting to download files required for upgrade.To resolve this issue, download and run the media creation tool. See [Download windows 10](https://www.microsoft.com/en-us/software-download/windows10). +
    0x80246007The update was not downloaded successfully.Attempt other methods of upgrading the operating system.
    +Download and run the media creation tool. See [Download windows 10](https://www.microsoft.com/en-us/software-download/windows10). +
    Attempt to upgrade using .ISO or USB.
    +**Note**: Windows 10 Enterprise isn’t available in the media creation tool. For more information, go to the [Volume Licensing Service Center](https://www.microsoft.com/licensing/servicecenter/default.aspx). +
    0xC1900201The system did not pass the minimum requirements to install the update.Contact the hardware vendor to get the latest updates.
    0x80240017The upgrade is unavailable for this edition of Windows.Administrative policies enforced by your organization might be preventing the upgrade. Contact your IT administrator.
    0x80070020The existing process cannot access the file because it is being used by another process.Use the MSCONFIG tool to perform a clean boot on the machine and then try to perform the update again. For more information, see [How to perform a clean boot in Windows](https://support.microsoft.com/en-us/kb/929135).
    0x80070522The user doesn’t have required privilege or credentials to upgrade.Ensure that you have signed in as a local administrator or have local administrator privileges.
    0xC1900107A cleanup operation from a previous installation attempt is still pending and a system reboot is required in order to continue the upgrade. +Reboot the device and run setup again. If restarting device does not resolve the issue, then use the Disk Cleanup utility and cleanup the temporary as well as the System files. For more information, see [Disk cleanup in Windows 10](https://support.microsoft.com/en-us/instantanswers/8fef4121-711b-4be1-996f-99e02c7301c2/disk-cleanup-in-windows-10).
    0xC1900209The user has chosen to cancel because the system does not pass the compatibility scan to install the update. Setup.exe will report this error when it can upgrade the machine with user data but cannot migrate installed applications.Incompatible software is blocking the upgrade process. Uninstall the application and try the upgrade again. See [Windows 10 Pre-Upgrade Validation using SETUP.EXE](https://blogs.technet.microsoft.com/mniehaus/2015/08/23/windows-10-pre-upgrade-validation-using-setup-exe/) for more information. + +
    You can also download the [Windows Assessment and Deployment Kit (ADK) for Windows 10](http://go.microsoft.com/fwlink/p/?LinkId=526740) and install Application Compatibility Tools. +
    0x8007002 This error is specific to upgrades using System Center Configuration Manager 2012 R2 SP1 CU3 (5.00.8238.1403)Analyze the SMSTS.log and verify that the upgrade is failing on "Apply Operating system" Phase: Error 80072efe DownloadFileWithRanges() failed. 80072efe. ApplyOperatingSystem (0x0760) + +
    The error 80072efe means that the connection with the server was terminated abnormally. + +
    To resolve this issue, try the OS Deployment test on a client in same VLAN as the Configuration Manager server. Check the network configuration for random client-server connection issues happening on the remote VLAN. +
    0x80240FFF Occurs when update synchronization fails. It can occur when you are using Windows Server Update Services on its own or when it is integrated with System Center Configuration Manager. If you enable update synchronization before you install hotfix 3095113, WSUS doesn't recognize the Upgrades classification and instead treats the upgrade like a regular update. You can prevent this by installing hotfix 3095113 before you enable update synchronization. However, if you have already run into this problem, do the following: + +
      +
    1. Disable the Upgrades classification.
      2. +
    2. Install hotfix 3095113.
      3. +
    3. Delete previously synched updates.
      4. +
    4. Enable the Upgrades classification.
      5. +
    5. Perform a full synch.
      6. +
    +
    For detailed information on how to run these steps check out How to delete upgrades in WSUS.

    +
    0x8007007EOccurs when update synchronization fails because you do not have hotfix 3095113 installed before you enable update synchronization. Specifically, the CopyToCache operation fails on clients that have already downloaded the upgrade because Windows Server Update Services has bad metadata related to the upgrade. It can occur when you are using standalone Windows Server Update Services or when WSUS is integrated with System Center Configuration Manager. Use the following steps to repair Windows Server Update Services. You must run these steps on each WSUS server that synched metadata before you installed the hotfix. + +
      +
    1. Stop the Windows Update service. Sign in as a user with administrative privileges, and then do the following: +
        +
      1. Open Administrative Tools from the Control Panel.
        2. +
      2. Double-click Services.
        3. +
      3. Find the Windows Update service, right-click it, and then click Stop. If prompted, enter your credentials.
        4. +
      +
      2. +
    2. Delete all files and folders under c:\Windows\SoftwareDistribution\DataStore.
      3. +
    3. Restart the Windows Update service.
      4. +
    +
    + +## Other error codes + + + + + + + + + + + + + + + +
    Error CodesCauseMitigation
    0x80070003- 0x20007 +This is a failure during SafeOS phase driver installation. + +[Verify device drivers](https://msdn.microsoft.com/windows/hardware/drivers/install/troubleshooting-device-and-driver-installations) on the computer, and [analyze log files](log-files.md#analyze-log-files) to determine the problem driver. +
    0x8007025D - 0x2000C +This error occurs if the ISO file's metadata is corrupt."Re-download the ISO/Media and re-attempt the upgrade. + +Alternatively, re-create installation media the [Media Creation Tool](https://www.microsoft.com/en-us/software-download/windows10). + +
    0x80070490 - 0x20007An incompatible device driver is present. + +[Verify device drivers](https://msdn.microsoft.com/windows/hardware/drivers/install/troubleshooting-device-and-driver-installations) on the computer, and [analyze log files](log-files.md#analyze-log-files) to determine the problem driver. + +
    0xC1900101 - 0x2000c +An unspecified error occurred in the SafeOS phase during WIM apply. This can be caused by an outdated driver or disk corruption. +Run checkdisk to repair the file system. For more information, see the [quick fixes](quick-fixes.md) section in this guide. +
    Update drivers on the computer, and select "Download and install updates (recommended)" during the upgrade process. Disconnect devices other than the mouse, keyboard and display.
    0xC1900200 - 0x20008 + +The computer doesn’t meet the minimum requirements to download or upgrade to Windows 10. + +See [Windows 10 Specifications](https://www.microsoft.com/en-us/windows/windows-10-specifications) and verify the computer meets minimum requirements. + +
    Review logs for [compatibility information](https://blogs.technet.microsoft.com/askcore/2016/01/21/using-the-windows-10-compatibility-reports-to-understand-upgrade-issues/).
    0x80070004 - 0x3000D +This is a problem with data migration during the first boot phase. There are multiple possible causes. + +[Analyze log files](log-files.md#analyze-log-files) to determine the issue.
    0xC1900101 - 0x4001E +Installation failed in the SECOND_BOOT phase with an error during PRE_OOBE operation. +This is a generic error that occurs during the OOBE phase of setup. See the [0xC1900101](#0xc1900101) section of this guide and review general troubleshooting procedures described in that section.
    0x80070005 - 0x4000D +The installation failed in the SECOND_BOOT phase with an error in during MIGRATE_DATA operation. This error indicates that access was denied while attempting to migrate data. +[Analyze log files](log-files.md#analyze-log-files) to determine the data point that is reporting access denied.
    0x80070004 - 0x50012 +Windows Setup failed to open a file. +[Analyze log files](log-files.md#analyze-log-files) to determine the data point that is reporting access problems.
    0xC190020e +
    0x80070070 - 0x50011 +
    0x80070070 - 0x50012 +
    0x80070070 - 0x60000 +    		These errors indicate the computer does not have enough free space available to install the upgrade. +To upgrade a computer to Windows 10, it requires 16 GB of free hard drive space for a 32-bit OS, and 20 GB for a 64-bit OS. If there is not enough space, attempt to [free up drive space](https://support.microsoft.com/en-us/help/17421/windows-free-up-drive-space) before proceeding with the upgrade. + +
    Note: If your device allows it, you can use an external USB drive for the upgrade process. Windows setup will back up the previous version of Windows to a USB external drive. The external drive must be at least 8GB (16GB is recommended). The external drive should be formatted using NTFS. Drives that are formatted in FAT32 may run into errors due to FAT32 file size limitations. USB drives are preferred over SD cards because drivers for SD cards are not migrated if the device does not support Connected Standby. +
    + +## Related topics + +[Windows 10 FAQ for IT professionals](https://technet.microsoft.com/en-us/windows/dn798755.aspx) +
    [Windows 10 Enterprise system requirements](https://technet.microsoft.com/en-us/windows/dn798752.aspx) +
    [Windows 10 Specifications](https://www.microsoft.com/en-us/windows/Windows-10-specifications) +
    [Windows 10 IT pro forums](https://social.technet.microsoft.com/Forums/en-US/home?category=Windows10ITPro) +
    [Fix Windows Update errors by using the DISM or System Update Readiness tool](https://support.microsoft.com/kb/947821) diff --git a/windows/deployment/upgrade/resolve-windows-10-upgrade-errors.md b/windows/deployment/upgrade/resolve-windows-10-upgrade-errors.md index 65997cec49..347b42dee1 100644 --- a/windows/deployment/upgrade/resolve-windows-10-upgrade-errors.md +++ b/windows/deployment/upgrade/resolve-windows-10-upgrade-errors.md @@ -18,1078 +18,37 @@ ms.localizationpriority: high >**Important**: This topic contains technical instructions for IT administrators. If you are not an IT administrator, see the following topic: [Get help with Windows 10 upgrade and installation errors](https://support.microsoft.com/en-us/help/10587/windows-10-get-help-with-upgrade-installation-errors). You can also [Submit Windows 10 upgrade errors using Feedback Hub](submit-errors.md). -## In this topic - -This topic contains a brief introduction to Windows 10 installation processes, and provides resolution procedures that IT administrators can use to resolve issues with Windows 10 upgrade. The following sections and procedures are provided in this guide: - -- [SetupDiag](#setupdiag): SetupDiag is a new tool to help you isolate the root cause of an upgrade failure. -- [Troubleshooting upgrade errors](#troubleshooting-upgrade-errors): General advice and techniques for troubleshooting Windows 10 upgrade errors.
    -- [The Windows 10 upgrade process](#the-windows-10-upgrade-process): An explanation of phases used during the upgrade process.
    -- [Quick fixes](#quick-fixes): Steps you can take to eliminate many Windows upgrade errors.
    -- [Upgrade error codes](#upgrade-error-codes): The components of an error code are explained. - - [Result codes](#result-codes): Information about result codes. - - [Extend codes](#extend-codes): Information about extend codes. -- [Windows Error Reporting](#windows-error-reporting): How to use Event Viewer to review details about a Windows 10 upgrade. -- [Log files](#log-files): A list and description of log files useful for troubleshooting. - - [Log entry structure](#log-entry-structure): The format of a log entry is described. - - [Analyze log files](#analyze-log-files): General procedures for log file analysis, and an example. -- [Resolution procedures](#resolution-procedures): Causes and mitigation procedures associated with specific error codes. - - [0xC1900101](#0xc1900101): Information about the 0xC1900101 result code. - - [0x800xxxxx](#0x800xxxxx): Information about result codes that start with 0x800. - - [Other result codes](#other-result-codes): Additional causes and mitigation procedures are provided for some result codes. - - [Other error codes](#other-error-codes): Additional causes and mitigation procedures are provided for some error codes. - -## SetupDiag - -You can use the SetupDiag.exe tool to automatically analyze log files and determine the root cause of an upgrade failure. If SetupDiag is successful in diagnosing the problem, an error code is displayed. Given this error code, use the procedures here (in this topic) to determine how to repair the upgrade failure. For more information see [SetupDiag](setupdiag.md). - -## Troubleshooting upgrade errors - -If a Windows 10 upgrade is not successful, it can be very helpful to understand *when* an error occurred in the upgrade process. - -Briefly, the upgrade process consists of four phases: **Downlevel**, **SafeOS**, **First boot**, and **Second boot**. The computer will reboot once between each phase. - -These phases are explained in greater detail [below](#the-windows-10-upgrade-process). First, let's summarize the actions performed during each phase because this affects the type of errors that can be encountered. - -1. **Downlevel phase**: Because this phase runs on the source OS, upgrade errors are not typically seen. If you do encounter an error, ensure the source OS is stable. Also ensure the Windows setup source and the destination drive are accessible. - -2. **SafeOS phase**: Errors most commonly occur during this phase due to hardware issues, firmware issues, or non-microsoft disk encryption software. - - Since the computer is booted into Windows PE during the SafeOS phase, a useful troubleshooting technique is to boot into [Windows PE](https://docs.microsoft.com/windows-hardware/manufacture/desktop/winpe-intro) using installation media. You can use the [media creation tool](https://www.microsoft.com/software-download/windows10) to create bootable media, or you can use tools such as the [Windows ADK](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit), and then boot your device from this media to test for hardware and firmware compatibility issues. - - **Do not proceed with the Windows 10 installation after booting from this media**. This method can only be used to perform a clean install which will not migrate any of your apps and settings, and you will be required re-enter your Windows 10 license information. - - If the computer does not successfully boot into Windows PE using the media that you created, this is likely due to a hardware or firmware issue. Check with your hardware manufacturer and apply any recommended BIOS and firmware updates. If you are still unable to boot to installation media after applying updates, disconnect or replace legacy hardware. - - If the computer successfully boots into Windows PE, but you are not able to browse the system drive on the computer, it is possible that non-Microsoft disk encryption software is blocking your ability to perform a Windows 10 upgrade. Update or temporarily remove the disk encryption. - -3. **First boot phase**: Boot failures in this phase are relatively rare, and almost exclusively caused by device drivers. Disconnect all peripheral devices except for the mouse, keyboard, and display. Obtain and install updated device drivers, then retry the upgrade. - -4. **Second boot phase**: In this phase, the system is running under the target OS with new drivers. Boot failures are most commonly due to anti-virus software or filter drivers. Disconnect all peripheral devices except for the mouse, keyboard, and display. Obtain and install updated device drivers, temporarily uninstall anti-virus software, then retry the upgrade. - -If the general troubleshooting techniques described above or the [quick fixes](#quick-fixes) detailed below do not resolve your issue, you can attempt to analyze [log files](#log-files) and interpret [upgrade error codes](#upgrade-error-codes). You can also [Submit Windows 10 upgrade errors using Feedback Hub](submit-errors.md) so that Microsoft can diagnose your issue. - -## The Windows 10 upgrade process - -The **Windows Setup** application is used to upgrade a computer to Windows 10, or to perform a clean installation. Windows Setup starts and restarts the computer, gathers information, copies files, and creates or adjusts configuration settings. - -When performing an operating system upgrade, Windows Setup uses phases described below. A reboot occurs between each of the phases. After the first reboot, the user interface will remain the same until the upgrade is completed. Percent progress is displayed and will advance as you move through each phase, reaching 100% at the end of the second boot phase. - -1. **Downlevel phase**: The downlevel phase is run within the previous operating system. Windows files are copied and installation components are gathered. - - ![downlevel phase](../images/downlevel.png) - -2. **Safe OS phase**: A recovery partition is configured, Windows files are expanded, and updates are installed. An OS rollback is prepared if needed. Example error codes: 0x2000C, 0x20017. - - ![safeOS phase](../images/safeos.png) - -3. **First boot phase**: Initial settings are applied. Example error codes: 0x30018, 0x3000D. - - ![first boot phase](../images/firstboot.png) - -4. **Second boot phase**: Final settings are applied. This is also called the **OOBE boot phase**. Example error codes: 0x4000D, 0x40017. - - At the end of the second boot phase, the **Welcome to Windows 10** screen is displayed, preferences are configured, and the Windows 10 sign-in prompt is displayed. - - ![second boot phase](../images/secondboot.png) - - ![second boot phase](../images/secondboot2.png) - - ![second boot phase](../images/secondboot3.png) - -5. **Uninstall phase**: This phase occurs if upgrade is unsuccessful (image not shown). Example error codes: 0x50000, 0x50015. - -**Figure 1**: Phases of a successful Windows 10 upgrade (uninstall is not shown): - -![Upgrade process](../images/upgrade-process.png) - -DU = Driver/device updates.
    -OOBE = Out of box experience.
    -WIM = Windows image (Microsoft) - - -## Quick fixes - -The following steps can resolve many Windows upgrade problems. - -
      -
    1. Remove nonessential external hardware, such as docks and USB devices.
      2. -
    2. Check all hard drives for errors and attempt repairs. To automatically repair hard drives, open an elevated command prompt, switch to the drive you wish to repair, and type the following command. You will be required to reboot the computer if the hard drive being repaired is also the system drive. -
        -
      • chkdsk /F
        • -
      -
      3. -
    3. Attempt to restore and repair system files by typing the following commands at an elevated command prompt. It may take several minutes for the command operations to be completed. For more information, see [Repair a Windows Image](https://msdn.microsoft.com/windows/hardware/commercialize/manufacture/desktop/repair-a-windows-image). -
        -
      • DISM.exe /Online /Cleanup-image /Restorehealth
        • -
      • sfc /scannow
        • -
      -
      4. -
    4. Update Windows so that all available recommended updates are installed, and ensure the computer is rebooted if this is necessary to complete installation of an update.
      5. -
    5. Uninstall non-Microsoft antivirus software. -
        -
      • Use Windows Defender for protection during the upgrade. -
      • Verify compatibility information and re-install antivirus applications after the upgrade.
        • -
      -
    6. Uninstall all nonessential software.
      7. -
    7. Update firmware and drivers.
      8. -
    8. Ensure that "Download and install updates (recommended)" is accepted at the start of the upgrade process.
      9. -
    9. Verify at least 16 GB of free space is available to upgrade a 32-bit OS, or 20 GB for a 64-bit OS. -
    - - -## Upgrade error codes - -If the upgrade process is not successful, Windows Setup will return two codes: - -1. **A result code**: The result code corresponds to a specific Win32 or NTSTATUS error. -2. **An extend code**: The extend code contains information about both the *phase* in which an error occurred, and the *operation* that was being performed when the error occurred. - ->For example, a result code of **0xC1900101** with an extend code of **0x4000D** will be returned as: **0xC1900101 - 0x4000D**. - -Note: If only a result code is returned, this can be because a tool is being used that was not able to capture the extend code. For example, if you are using the [Windows 10 Upgrade Assistant](https://support.microsoft.com/en-us/kb/3159635) then only a result code might be returned. - ->[!TIP] ->If you are unable to locate the result and extend error codes, you can attempt to find these codes using Event Viewer. For more information, see [Windows Error Reporting](#windows-error-reporting). - -### Result codes - ->A result code of **0xC1900101** is generic and indicates that a rollback occurred. In most cases, the cause is a driver compatibility issue.
    To troubleshoot a failed upgrade that has returned a result code of 0xC1900101, analyze the extend code to determine the Windows Setup phase, and see the [Resolution procedures](#resolution-procedures) section later in this topic. - -Result codes can be matched to the type of error encountered. To match a result code to an error: - -1. Identify the error code type as either Win32 or NTSTATUS using the first hexadecimal digit: -
    **8** = Win32 error code (ex: 0x**8**0070070) -
    **C** = NTSTATUS value (ex: 0x**C**1900107) -2. Write down the last 4 digits of the error code (ex: 0x8007**0070** = 0070). These digits are the actual error code type as defined in the [HRESULT](https://msdn.microsoft.com/en-us/library/cc231198.aspx) or the [NTSTATUS](https://msdn.microsoft.com/en-us/library/cc231200.aspx) structure. Other digits in the code identify things such as the device type that produced the error. -3. Based on the type of error code determined in the first step (Win32 or NTSTATUS), match the 4 digits derived from the second step to either a Win32 error code or NTSTATUS value using the following links: - - [Win32 error code](https://msdn.microsoft.com/en-us/library/cc231199.aspx) - - [NTSTATUS value](https://msdn.microsoft.com/en-us/library/cc704588.aspx) - -Examples: -- 0x80070070 - - Based on the "8" this is a Win32 error code - - The last four digits are 0070, so look up 0x00000070 in the [Win32 error code](https://msdn.microsoft.com/en-us/library/cc231199.aspx) table - - The error is: **ERROR_DISK_FULL** -- 0xC1900107 - - Based on the "C" this is an NTSTATUS error code - - The last four digits are 0107, so look up 0x00000107 in the [NTSTATUS value](https://msdn.microsoft.com/en-us/library/cc704588.aspx) table - - The error is: **STATUS_SOME_NOT_MAPPED** - -Some result codes are self-explanatory, whereas others are more generic and require further analysis. In the examples shown above, ERROR_DISK_FULL indicates that the hard drive is full and additional room is needed to complete Windows upgrade. The message STATUS_SOME_NOT_MAPPED is more ambiguous, and means that an action is pending. In this case, the action pending is often the cleanup operation from a previous installation attempt, which can be resolved with a system reboot. - -### Extend codes - ->**Important**: Extend codes reflect the current Windows 10 upgrade process, and might change in future releases of Windows 10. The codes discussed in this section apply to Windows 10 version 1607, also known as the Anniversary Update. - -Extend codes can be matched to the phase and operation when an error occurred. To match an extend code to the phase and operation: - -1. Use the first digit to identify the phase (ex: 0x4000D = 4). -2. Use the last two digits to identify the operation (ex: 0x4000D = 0D). -3. Match the phase and operation to values in the tables provided below. - -The following tables provide the corresponding phase and operation for values of an extend code: - -
    - - - -
    Extend code: phase
    HexPhase -
    0SP_EXECUTION_UNKNOWN -
    1SP_EXECUTION_DOWNLEVEL -
    2SP_EXECUTION_SAFE_OS -
    3SP_EXECUTION_FIRST_BOOT -
    4SP_EXECUTION_OOBE_BOOT -
    5SP_EXECUTION_UNINSTALL -
    - - - - - - - -
    Extend code: operation
    - -
    HexOperation -
    0SP_EXECUTION_OP_UNKNOWN -
    1SP_EXECUTION_OP_COPY_PAYLOAD -
    2SP_EXECUTION_OP_DOWNLOAD_UPDATES -
    3SP_EXECUTION_OP_INSTALL_UPDATES -
    4SP_EXECUTION_OP_INSTALL_RECOVERY_ENVIRONMENT -
    5SP_EXECUTION_OP_INSTALL_RECOVERY_IMAGE -
    6SP_EXECUTION_OP_REPLICATE_OC -
    7SP_EXECUTION_OP_INSTALL_DRVIERS -
    8SP_EXECUTION_OP_PREPARE_SAFE_OS -
    9SP_EXECUTION_OP_PREPARE_ROLLBACK -
    ASP_EXECUTION_OP_PREPARE_FIRST_BOOT -
    BSP_EXECUTION_OP_PREPARE_OOBE_BOOT -
    CSP_EXECUTION_OP_APPLY_IMAGE -
    DSP_EXECUTION_OP_MIGRATE_DATA -
    ESP_EXECUTION_OP_SET_PRODUCT_KEY -
    FSP_EXECUTION_OP_ADD_UNATTEND -
    -    		 - -
    HexOperation -
    10SP_EXECUTION_OP_ADD_DRIVER -
    11SP_EXECUTION_OP_ENABLE_FEATURE -
    12SP_EXECUTION_OP_DISABLE_FEATURE -
    13SP_EXECUTION_OP_REGISTER_ASYNC_PROCESS -
    14SP_EXECUTION_OP_REGISTER_SYNC_PROCESS -
    15SP_EXECUTION_OP_CREATE_FILE -
    16SP_EXECUTION_OP_CREATE_REGISTRY -
    17SP_EXECUTION_OP_BOOT -
    18SP_EXECUTION_OP_SYSPREP -
    19SP_EXECUTION_OP_OOBE -
    1ASP_EXECUTION_OP_BEGIN_FIRST_BOOT -
    1BSP_EXECUTION_OP_END_FIRST_BOOT -
    1CSP_EXECUTION_OP_BEGIN_OOBE_BOOT -
    1DSP_EXECUTION_OP_END_OOBE_BOOT -
    1ESP_EXECUTION_OP_PRE_OOBE -
    1FSP_EXECUTION_OP_POST_OOBE -
    20SP_EXECUTION_OP_ADD_PROVISIONING_PACKAGE -
    -
    - -For example: An extend code of **0x4000D**, represents a problem during phase 4 (**0x4**) with data migration (**000D**). - -## Windows Error Reporting - -When Windows Setup fails, the result and extend code are recorded as an informational event in the Application log by Windows Error Reporting as event 1001. The event name is **WinSetupDiag02**. You can use Event Viewer to review this event, or you can use Windows PowerShell. - -To use Windows PowerShell, type the following commands from an elevated Windows PowerShell prompt: - -``` -$events = Get-WinEvent -FilterHashtable @{LogName="Application";ID="1001";Data="WinSetupDiag02"} -$event = [xml]$events[0].ToXml() -$event.Event.EventData.Data -``` - -To use Event Viewer: -1. Open Event Viewer and navigate to **Windows Logs\Application**. -2. Click **Find**, and then search for **winsetupdiag02**. -3. Double-click the event that is highlighted. - -Note: For legacy operating systems, the Event Name was WinSetupDiag01. - -Ten parameters are listed in the event: -
    - - - - - - - - - - - -
    P1: The Setup Scenario (1=Media,5=WindowsUpdate,7=Media Creation Tool)
    P2: Setup Mode (x=default,1=Downlevel,5=Rollback)
    P3: New OS Architecture (x=default,0=X86,9=AMD64)
    P4: Install Result (x=default,0=Success,1=Failure,2=Cancel,3=Blocked)
    P5: Result Error Code (Ex: 0xc1900101)
    P6: Extend Error Code (Ex: 0x20017)
    P7: Source OS build (Ex: 9600)
    P8: Source OS branch (not typically available)
    P9: New OS build (Ex: 16299}
    P10: New OS branch (Ex: rs3_release}
    - -The event will also contain links to log files that can be used to perform a detailed diagnosis of the error. An example of this event from a successful upgrade is shown below. - -![Windows Error Reporting](../images/event.png) - -## Log files - -Several log files are created during each phase of the upgrade process. These log files are essential for troubleshooting upgrade problems. By default, the folders that contain these log files are hidden on the upgrade target computer. To view the log files, configure Windows Explorer to view hidden items, or use a tool to automatically gather these logs. The most useful log is **setupact.log**. The log files are located in a different folder depending on the Windows Setup phase. Recall that you can determine the phase from the extend code. - -Note: Also see the [Windows Error Reporting](#windows-error-reporting) section in this document for help locating error codes and log files. - -The following table describes some log files and how to use them for troubleshooting purposes:
    - -
    - - - - - - - - - - - - - - - - -
    Log filePhase: LocationDescriptionWhen to use
    setupact.logDown-Level:
    $Windows.~BT\Sources\Panther    		Contains information about setup actions during the downlevel phase. All down-level failures and starting point for rollback investigations.
    This is the most important log for diagnosing setup issues.
    OOBE:
    $Windows.~BT\Sources\Panther\UnattendGC    		Contains information about actions during the OOBE phase.Investigating rollbacks that failed during OOBE phase and operations – 0x4001C, 0x4001D, 0x4001E, 0x4001F.
    Rollback:
    $Windows.~BT\Sources\Rollback    		Contains information about actions during rollback.Investigating generic rollbacks - 0xC1900101.
    Pre-initialization (prior to downlevel):
    Windows    		Contains information about initializing setup.If setup fails to launch.
    Post-upgrade (after OOBE):
    Windows\Panther    		Contains information about setup actions during the installation.Investigate post-upgrade related issues.
    setuperr.logSame as setupact.logContains information about setup errors during the installation.Review all errors encountered during the installation phase.
    miglog.xmlPost-upgrade (after OOBE):
    Windows\Panther    		Contains information about what was migrated during the installation.Identify post upgrade data migration issues.
    BlueBox.logDown-Level:
    Windows\Logs\Mosetup    		Contains information communication between setup.exe and Windows Update.Use during WSUS and WU down-level failures or for 0xC1900107.
    Supplemental rollback logs:
    -Setupmem.dmp
    -setupapi.dev.log
    -Event logs (*.evtx)    		$Windows.~BT\Sources\RollbackAdditional logs collected during rollback. -Setupmem.dmp: If OS bugchecks during upgrade, setup will attempt to extract a mini-dump.
    -Setupapi: Device install issues - 0x30018
    -Event logs: Generic rollbacks (0xC1900101) or unexpected reboots.
    - -### Log entry structure - -A setupact.log or setuperr.log entry includes the following elements: - -
      -
    1. The date and time - 2016-09-08 09:20:05. -
    2. The log level - Info, Warning, Error, Fatal Error. -
    3. The logging component - CONX, MOUPG, PANTHR, SP, IBSLIB, MIG, DISM, CSI, CBS. -
        -
      • The logging components SP (setup platform), MIG (migration engine), and CONX (compatibility information) are particularly useful for troubleshooting Windows Setup errors. -
      -
    4. The message - Operation completed successfully. -
    - -See the following example: - -| Date/Time | Log level | Component | Message | -|------|------------|------------|------------| -|2016-09-08 09:23:50,| Warning | MIG | Could not replace object C:\Users\name\Cookies. Target Object cannot be removed.| - - -### Analyze log files - ->The following instructions are meant for IT professionals. Also see the [Upgrade error codes](#upgrade-error-codes) section in this guide to familiarize yourself with [result codes](#result-codes) and [extend codes](#extend-codes). - -
    To analyze Windows Setup log files: - -
      -
    1. Determine the Windows Setup error code. This code should be returned by Windows Setup if it is not successful with the upgrade process. -
    2. Based on the [extend code](#extend-codes) portion of the error code, determine the type and location of a [log files](#log-files) to investigate. -
    3. Open the log file in a text editor, such as notepad. -
    4. Using the [result code](#result-codes) portion of the Windows Setup error code, search for the result code in the file and find the last occurrence of the code. Alternatively search for the "abort" and abandoning" text strings described in step 7 below. -
    5. To find the last occurrence of the result code: -
        -
      1. Scroll to the bottom of the file and click after the last character. -
      2. Click Edit. -
      3. Click Find. -
      4. Type the result code. -
      5. Under Direction select Up. -
      6. Click Find Next. -
      -
    6. When you have located the last occurrence of the result code, scroll up a few lines from this location in the file and review the processes that failed just prior to generating the result code. -
    7. Search for the following important text strings: -
        -
      • Shell application requested abort -
      • Abandoning apply due to error for object -
      -
    8. Decode Win32 errors that appear in this section. -
    9. Write down the timestamp for the observed errors in this section. -
    10. Search other log files for additional information matching these timestamps or errors. -
    - -For example, assume that the error code for an error is 0x8007042B - 0x2000D. Searching for "8007042B" reveals the following content from the setuperr.log file: - ->Some lines in the text below are shortened to enhance readability. The date and time at the start of each line (ex: 2016-10-05 15:27:08) is shortened to minutes and seconds, and the certificate file name which is a long text string is shortened to just "CN." - -
    setuperr.log content: - -
    -27:08, Error           SP     Error READ, 0x00000570 while gathering/applying object: File, C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18 [CN]. Will return 0[gle=0x00000570]
-27:08, Error           MIG    Error 1392 while gathering object C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18 [CN]. Shell application requested abort![gle=0x00000570]
-27:08, Error                  Gather failed. Last error: 0x00000000
-27:08, Error           SP     SPDoFrameworkGather: Gather operation failed. Error: 0x0000002C
-27:09, Error           SP     CMigrateFramework: Gather framework failed. Status: 44
-27:09, Error           SP     Operation failed: Migrate framework (Full). Error: 0x8007042B[gle=0x000000b7]
-27:09, Error           SP     Operation execution failed: 13. hr = 0x8007042B[gle=0x000000b7]
-27:09, Error           SP     CSetupPlatformPrivate::Execute: Execution of operations queue failed, abandoning. Error: 0x8007042B[gle=0x000000b7]
-
    - -The first line indicates there was an error **0x00000570** with the file **C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18 [CN]** (shown below): - -
    -27:08, Error           SP     Error READ, 0x00000570 while gathering/applying object: File, C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18 [CN]. Will return 0[gle=0x00000570]
-
    - -The error 0x00000570 is a [Win32 error code](https://msdn.microsoft.com/en-us/library/cc231199.aspx) corresponding to: ERROR_FILE_CORRUPT: The file or directory is corrupted and unreadable. - -Therefore, Windows Setup failed because it was not able to migrate the corrupt file **C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\[CN]**. This file is a local system certificate and can be safely deleted. Searching the setupact.log file for additional details, the phrase "Shell application requested abort" is found in a location with the same timestamp as the lines in setuperr.log. This confirms our suspicion that this file is the cause of the upgrade failure: - -
    setupact.log content: - -
    -27:00, Info                   Gather started at 10/5/2016 23:27:00
-27:00, Info [0x080489] MIG    Setting system object filter context (System)
-27:00, Info [0x0803e5] MIG    Not unmapping HKCU\Software\Classes; it is not mapped
-27:00, Info [0x0803e5] MIG    Not unmapping HKCU; it is not mapped
-27:00, Info            SP     ExecuteProgress: Elapsed events:1 of 4, Percent: 12
-27:00, Info [0x0802c6] MIG    Processing GATHER for migration unit: \UpgradeFramework (CMXEAgent)
-27:08, Error           SP     Error READ, 0x00000570 while gathering/applying object: File, C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18 [CN]. Will return 0[gle=0x00000570]
-27:08, Error           MIG    Error 1392 while gathering object C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18 [CN]. Shell application requested abort![gle=0x00000570]
-27:08, Info            SP     ExecuteProgress: Elapsed events:2 of 4, Percent: 25
-27:08, Info            SP     ExecuteProgress: Elapsed events:3 of 4, Percent: 37
-27:08, Info [0x080489] MIG    Setting system object filter context (System)
-27:08, Info [0x0803e5] MIG    Not unmapping HKCU\Software\Classes; it is not mapped
-27:08, Info [0x0803e5] MIG    Not unmapping HKCU; it is not mapped
-27:08, Info            MIG    COutOfProcPluginFactory::FreeSurrogateHost: Shutdown in progress.
-27:08, Info            MIG    COutOfProcPluginFactory::LaunchSurrogateHost::CommandLine: -shortened-
-27:08, Info            MIG    COutOfProcPluginFactory::LaunchSurrogateHost: Successfully launched host and got control object.
-27:08, Error                  Gather failed. Last error: 0x00000000
-27:08, Info                   Gather ended at 10/5/2016 23:27:08 with result 44
-27:08, Info                   Leaving MigGather method
-27:08, Error           SP     SPDoFrameworkGather: Gather operation failed. Error: 0x0000002C
-
    - - -
    This analysis indicates that the Windows upgrade error can be resolved by deleting the C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\[CN] file. Note: In this example, the full, unshortened file name is C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\be8228fb2d3cb6c6b0ccd9ad51b320b4_a43d512c-69f2-42de-aef9-7a88fabdaa3f. - -## Resolution procedures - -### 0xC1900101 - -A frequently observed result code is 0xC1900101. This result code can be thrown at any stage of the upgrade process, with the exception of the downlevel phase. 0xC1900101 is a generic rollback code, and usually indicates that an incompatible driver is present. The incompatible driver can cause blue screens, system hangs, and unexpected reboots. Analysis of supplemental log files is often helpful, such as:
    - -- The minidump file: $Windows.~bt\Sources\Rollback\setupmem.dmp, -- Event logs: $Windows.~bt\Sources\Rollback\*.evtx -- The device install log: $Windows.~bt\Sources\Rollback\setupapi\setupapi.dev.log - -The device install log is particularly helpful if rollback occurs during the sysprep operation (extend code 0x30018). To resolve a rollback due to driver conflicts, try running setup using a minimal set of drivers and startup programs by performing a [clean boot](https://support.microsoft.com/en-us/kb/929135) before initiating the upgrade process. - -
    See the following general troubleshooting procedures associated with a result code of 0xC1900101: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    - - -
    Code -
    0xC1900101 - 0x20004 -
    - -
    -
    Cause -
    Windows Setup encountered an error during the SAFE_OS with the INSTALL_RECOVERY_ENVIRONMENT operation -
    This is generally caused by out-of-date drivers. -
    -    		 - - -
    Mitigation -
    Uninstall antivirus applications. -
    Remove all unused SATA devices. -
    Remove all unused devices and drivers. -
    Update drivers and BIOS. -
    -
    - - -
    Code -
    0xC1900101 - 0x2000c -
    - -
    -
    Cause -
    Windows Setup encountered an unspecified error during Wim apply in the WinPE phase. -
    This is generally caused by out-of-date drivers. -
    -    		 - - -
    Mitigation -
    Disconnect all peripheral devices that are connected to the system, except for the mouse, keyboard and display. -
    Contact your hardware vendor to obtain updated device drivers. -
    Ensure that "Download and install updates (recommended)" is accepted at the start of the upgrade process. -
    -
    - - -
    Code -
    0xC1900101 - 0x20017 - -
    - -
    -
    Cause -
    A driver has caused an illegal operation. -
    Windows was not able to migrate the driver, resulting in a rollback of the operating system. -
    This is a SafeOS boot failure, typically caused by drivers or non-Microsoft disk encryption software. -
    -    		 - - -
    Mitigation -
    -Ensure that all that drivers are updated.
    -Open the Setuperr.log and Setupact.log files in the %windir%\Panther directory, and then locate the problem drivers. -
    For more information, see [Understanding Failures and Log Files](https://technet.microsoft.com/en-us/library/ee851579.aspx). -
    Update or uninstall the problem drivers. -
    -
    - - -
    Code -
    0xC1900101 - 0x30018 -
    - -
    -
    Cause -
    A device driver has stopped responding to setup.exe during the upgrade process. -
    -    		 - - -
    Mitigation -
    -Disconnect all peripheral devices that are connected to the system, except for the mouse, keyboard and display. -
    Contact your hardware vendor to obtain updated device drivers. -
    Ensure that "Download and install updates (recommended)" is accepted at the start of the upgrade process. -
    -
    - - -
    Code -
    0xC1900101 - 0x3000D -
    - -
    -
    Cause -
    Installation failed during the FIRST_BOOT phase while attempting the MIGRATE_DATA operation. -
    This can occur due to a problem with a display driver. - -
    -    		 - - -
    Mitigation -
    -Disconnect all peripheral devices that are connected to the system, except for the mouse, keyboard and display. -
    Update or uninstall the display driver. -
    -
    - - -
    Code -
    0xC1900101 - 0x4000D -
    - -
    -
    Cause -
    A rollback occurred due to a driver configuration issue. -
    Installation failed during the second boot phase while attempting the MIGRATE_DATA operation. - -
    This can occur due to incompatible drivers. - -
    -    		 - - -
    Mitigation -
    -
    Check supplemental rollback logs for a setupmem.dmp file, or event logs for any unexpected reboots or errors. -
    Review the rollback log and determine the stop code. -
    The rollback log is located in the **C:\$Windows.~BT\Sources\Panther** folder. An example analysis is shown below. This example is not representative of all cases: -
    Info SP Crash 0x0000007E detected -
    Info SP Module name : -
    Info SP Bugcheck parameter 1 : 0xFFFFFFFFC0000005 -
    Info SP Bugcheck parameter 2 : 0xFFFFF8015BC0036A -
    Info SP Bugcheck parameter 3 : 0xFFFFD000E5D23728 -
    Info SP Bugcheck parameter 4 : 0xFFFFD000E5D22F40 -
    Info SP Cannot recover the system. -
    Info SP Rollback: Showing splash window with restoring text: Restoring your previous version of Windows. - - -
    Typically, there is a dump file for the crash to analyze. If you are not equipped to debug the dump, then attempt the following basic troubleshooting procedures:
    - -1. Make sure you have enough disk space.
    -2. If a driver is identified in the bug check message, disable the driver or check with the manufacturer for driver updates.
    -3. Try changing video adapters.
    -4. Check with your hardware vendor for any BIOS updates.
    -5. Disable BIOS memory options such as caching or shadowing. -

    -
    -
    - - -
    Code -
    0xC1900101 - 0x40017 -
    - -
    -
    Cause -
    Windows 10 upgrade failed after the second reboot. -
    This is usually caused by a faulty driver. For example: antivirus filter drivers or encryption drivers. -
    -    		 - - -
    Mitigation -
    Clean boot into Windows, and then attempt the upgrade to Windows 10.
    - -For more information, see [How to perform a clean boot in Windows](https://support.microsoft.com/en-us/kb/929135). - -

    Ensure you select the option to "Download and install updates (recommended)." -
    -
    - -

    0x800xxxxx

    - -
    Result codes starting with the digits 0x800 are also important to understand. These error codes indicate general operating system errors, and are not unique to the Windows upgrade process. Examples include timeouts, devices not functioning, and a process stopping unexpectedly. - -
    See the following general troubleshooting procedures associated with a result code of 0x800xxxxx:
    - -
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    - - -
    Code -
    - -80040005 - 0x20007 - -
    - -
    -
    Cause -
    - -An unspecified error occurred with a driver during the SafeOS phase. - -
    -    		 - - -
    Mitigation -
    - -This error has more than one possible cause. Attempt [quick fixes](#quick-fixes), and if not successful, [analyze log files](#analyze-log-files) in order to determine the problem and solution. - -
    -
    - - -
    Code -
    - -0x80073BC3 - 0x20009
    -0x8007002 - 0x20009
    -0x80073B92 - 0x20009 - -
    - -
    -
    Cause -
    - -The requested system device cannot be found, there is a sharing violation, or there are multiple devices matching the identification criteria. - -
    -    		 - - -
    Mitigation -
    - -These errors occur during partition analysis and validation, and can be caused by the presence of multiple system partitions. For example, if you installed a new system drive but left the previous system drive connected, this can cause a conflict. To resolve the errors, disconnect or temporarily disable drives that contain the unused system partition. You can reconnect the drive after the upgrade has completed. Alternatively, you can delete the unused system partition. - -
    -
    - - -
    Code -
    - -800704B8 - 0x3001A - -
    - -
    -
    Cause -
    - -An extended error has occurred during the first boot phase. - -
    -    		 - - -
    Mitigation -
    - -Disable or uninstall non-Microsoft antivirus applications, disconnect all unnecessary devices, and perform a [clean boot](https://support.microsoft.com/en-us/kb/929135). - -
    -
    - - -
    Code -
    - -8007042B - 0x4000D - -
    - -
    -
    Cause -
    - -The installation failed during the second boot phase while attempting the MIGRATE_DATA operation. -
    This issue can occur due to file system, application, or driver issues. - -
    -    		 - - -
    Mitigation -
    - -[Analyze log files](#analyze-log-files) in order to determine the file, application, or driver that is not able to be migrated. Disconnect, update, remove, or replace the device or object. - -
    -
    - - -
    Code -
    - -8007001F - 0x3000D - -
    - -
    -
    Cause -
    - -The installation failed in the FIRST_BOOT phase with an error during MIGRATE_DATA operation. - -
    -    		 - - -
    Mitigation -
    - -[Analyze log files](#analyze-log-files) in order to determine the files or registry entries that are blocking data migration. - -This error can be due to a problem with user profiles. It can occur due to corrupt registry entries under **HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList** or invalid files in the **\\Users** directory. - -Note: If a previous upgrade did not complete, invalid profiles might exist in the **Windows.old\\Users** directory. - -To repair this error, ensure that deleted accounts are not still present in the Windows registry and that files under the \\Users directory are valid. Delete the invalid files or user profiles that are causing this error. The specific files and profiles that are causing the error will be recorded in the Windows setup log files. - -
    -
    - - -
    Code -
    - -8007001F - 0x4000D - -
    - -
    -
    Cause -
    - -General failure, a device attached to the system is not functioning. - -
    -    		 - - -
    Mitigation -
    - -[Analyze log files](#analyze-log-files) in order to determine the device that is not functioning properly. Disconnect, update, or replace the device. - -
    -
    - - -
    Code -
    - -8007042B - 0x4001E - -
    - -
    -
    Cause -
    - -The installation failed during the second boot phase while attempting the PRE_OOBE operation. - -
    -    		 - - -
    Mitigation -
    - -This error has more than one possible cause. Attempt [quick fixes](#quick-fixes), and if not successful, [analyze log files](#analyze-log-files) in order to determine the problem and solution. - -
    -
    - - -### Other result codes - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Error code -Cause -Mitigation -
    0xC1800118WSUS has downloaded content that it cannot use due to a missing decryption key.See [Steps to resolve error 0xC1800118](https://blogs.technet.microsoft.com/wsus/2016/09/21/resolving-error-0xc1800118/) for information.
    0xC1900200Setup.exe has detected that the machine does not meet the minimum system requirements.Ensure the system you are trying to upgrade meets the minimum system requirements.
    See [Windows 10 specifications](https://www.microsoft.com/en-us/windows/windows-10-specifications) for information.
    0x80090011A device driver error occurred during user data migration.Contact your hardware vendor and get all the device drivers updated. It is recommended to have an active internet connection during upgrade process. -
    Ensure that "Download and install updates (recommended)" is accepted at the start of the upgrade process.
    0xC7700112Failure to complete writing data to the system drive, possibly due to write access failure on the hard disk.This issue is resolved in the latest version of Upgrade Assistant. -
    Ensure that "Download and install updates (recommended)" is accepted at the start of the upgrade process.
    0x80190001An unexpected error was encountered while attempting to download files required for upgrade.To resolve this issue, download and run the media creation tool. See [Download windows 10](https://www.microsoft.com/en-us/software-download/windows10). -
    0x80246007The update was not downloaded successfully.Attempt other methods of upgrading the operating system.
    -Download and run the media creation tool. See [Download windows 10](https://www.microsoft.com/en-us/software-download/windows10). -
    Attempt to upgrade using .ISO or USB.
    -**Note**: Windows 10 Enterprise isn’t available in the media creation tool. For more information, go to the [Volume Licensing Service Center](https://www.microsoft.com/licensing/servicecenter/default.aspx). -
    0xC1900201The system did not pass the minimum requirements to install the update.Contact the hardware vendor to get the latest updates.
    0x80240017The upgrade is unavailable for this edition of Windows.Administrative policies enforced by your organization might be preventing the upgrade. Contact your IT administrator.
    0x80070020The existing process cannot access the file because it is being used by another process.Use the MSCONFIG tool to perform a clean boot on the machine and then try to perform the update again. For more information, see [How to perform a clean boot in Windows](https://support.microsoft.com/en-us/kb/929135).
    0x80070522The user doesn’t have required privilege or credentials to upgrade.Ensure that you have signed in as a local administrator or have local administrator privileges.
    0xC1900107A cleanup operation from a previous installation attempt is still pending and a system reboot is required in order to continue the upgrade. -Reboot the device and run setup again. If restarting device does not resolve the issue, then use the Disk Cleanup utility and cleanup the temporary as well as the System files. For more information, see [Disk cleanup in Windows 10](https://support.microsoft.com/en-us/instantanswers/8fef4121-711b-4be1-996f-99e02c7301c2/disk-cleanup-in-windows-10).
    0xC1900209The user has chosen to cancel because the system does not pass the compatibility scan to install the update. Setup.exe will report this error when it can upgrade the machine with user data but cannot migrate installed applications.Incompatible software is blocking the upgrade process. Uninstall the application and try the upgrade again. See [Windows 10 Pre-Upgrade Validation using SETUP.EXE](https://blogs.technet.microsoft.com/mniehaus/2015/08/23/windows-10-pre-upgrade-validation-using-setup-exe/) for more information. - -
    You can also download the [Windows Assessment and Deployment Kit (ADK) for Windows 10](http://go.microsoft.com/fwlink/p/?LinkId=526740) and install Application Compatibility Tools. -
    0x8007002 This error is specific to upgrades using System Center Configuration Manager 2012 R2 SP1 CU3 (5.00.8238.1403)Analyze the SMSTS.log and verify that the upgrade is failing on "Apply Operating system" Phase: Error 80072efe DownloadFileWithRanges() failed. 80072efe. ApplyOperatingSystem (0x0760) - -
    The error 80072efe means that the connection with the server was terminated abnormally. - -
    To resolve this issue, try the OS Deployment test on a client in same VLAN as the Configuration Manager server. Check the network configuration for random client-server connection issues happening on the remote VLAN. -
    0x80240FFF Occurs when update synchronization fails. It can occur when you are using Windows Server Update Services on its own or when it is integrated with System Center Configuration Manager. If you enable update synchronization before you install hotfix 3095113, WSUS doesn't recognize the Upgrades classification and instead treats the upgrade like a regular update. You can prevent this by installing hotfix 3095113 before you enable update synchronization. However, if you have already run into this problem, do the following: - -
      -
    1. Disable the Upgrades classification.
      2. -
    2. Install hotfix 3095113.
      3. -
    3. Delete previously synched updates.
      4. -
    4. Enable the Upgrades classification.
      5. -
    5. Perform a full synch.
      6. -
    -
    For detailed information on how to run these steps check out How to delete upgrades in WSUS.

    -
    0x8007007EOccurs when update synchronization fails because you do not have hotfix 3095113 installed before you enable update synchronization. Specifically, the CopyToCache operation fails on clients that have already downloaded the upgrade because Windows Server Update Services has bad metadata related to the upgrade. It can occur when you are using standalone Windows Server Update Services or when WSUS is integrated with System Center Configuration Manager. Use the following steps to repair Windows Server Update Services. You must run these steps on each WSUS server that synched metadata before you installed the hotfix. - -
      -
    1. Stop the Windows Update service. Sign in as a user with administrative privileges, and then do the following: -
        -
      1. Open Administrative Tools from the Control Panel.
        2. -
      2. Double-click Services.
        3. -
      3. Find the Windows Update service, right-click it, and then click Stop. If prompted, enter your credentials.
        4. -
      -
      2. -
    2. Delete all files and folders under c:\Windows\SoftwareDistribution\DataStore.
      3. -
    3. Restart the Windows Update service.
      4. -
    -
    - -### Other error codes - - - - - - - - - - - - - - - -
    Error CodesCauseMitigation
    0x80070003- 0x20007 -This is a failure during SafeOS phase driver installation. - -[Verify device drivers](https://msdn.microsoft.com/windows/hardware/drivers/install/troubleshooting-device-and-driver-installations) on the computer, and [analyze log files](#analyze-log-files) to determine the problem driver. -
    0x8007025D - 0x2000C -This error occurs if the ISO file's metadata is corrupt."Re-download the ISO/Media and re-attempt the upgrade. - -Alternatively, re-create installation media the [Media Creation Tool](https://www.microsoft.com/en-us/software-download/windows10). - -
    0x80070490 - 0x20007An incompatible device driver is present. - -[Verify device drivers](https://msdn.microsoft.com/windows/hardware/drivers/install/troubleshooting-device-and-driver-installations) on the computer, and [analyze log files](#analyze-log-files) to determine the problem driver. - -
    0xC1900101 - 0x2000c -An unspecified error occurred in the SafeOS phase during WIM apply. This can be caused by an outdated driver or disk corruption. -Run checkdisk to repair the file system. For more information, see the [quick fixes](#quick-fixes) section in this guide. -
    Update drivers on the computer, and select "Download and install updates (recommended)" during the upgrade process. Disconnect devices other than the mouse, keyboard and display.
    0xC1900200 - 0x20008 - -The computer doesn’t meet the minimum requirements to download or upgrade to Windows 10. - -See [Windows 10 Specifications](https://www.microsoft.com/en-us/windows/windows-10-specifications) and verify the computer meets minimum requirements. - -
    Review logs for [compatibility information](https://blogs.technet.microsoft.com/askcore/2016/01/21/using-the-windows-10-compatibility-reports-to-understand-upgrade-issues/).
    0x80070004 - 0x3000D -This is a problem with data migration during the first boot phase. There are multiple possible causes. - -[Analyze log files](#analyze-log-files) to determine the issue.
    0xC1900101 - 0x4001E -Installation failed in the SECOND_BOOT phase with an error during PRE_OOBE operation. -This is a generic error that occurs during the OOBE phase of setup. See the [0xC1900101](#0xc1900101) section of this guide and review general troubleshooting procedures described in that section.
    0x80070005 - 0x4000D -The installation failed in the SECOND_BOOT phase with an error in during MIGRATE_DATA operation. This error indicates that access was denied while attempting to migrate data. -[Analyze log files](#analyze-log-files) to determine the data point that is reporting access denied.
    0x80070004 - 0x50012 -Windows Setup failed to open a file. -[Analyze log files](#analyze-log-files) to determine the data point that is reporting access problems.
    0xC190020e -
    0x80070070 - 0x50011 -
    0x80070070 - 0x50012 -
    0x80070070 - 0x60000 -    		These errors indicate the computer does not have enough free space available to install the upgrade. -To upgrade a computer to Windows 10, it requires 16 GB of free hard drive space for a 32-bit OS, and 20 GB for a 64-bit OS. If there is not enough space, attempt to [free up drive space](https://support.microsoft.com/en-us/help/17421/windows-free-up-drive-space) before proceeding with the upgrade. - -
    Note: If your device allows it, you can use an external USB drive for the upgrade process. Windows setup will back up the previous version of Windows to a USB external drive. The external drive must be at least 8GB (16GB is recommended). The external drive should be formatted using NTFS. Drives that are formatted in FAT32 may run into errors due to FAT32 file size limitations. USB drives are preferred over SD cards because drivers for SD cards are not migrated if the device does not support Connected Standby. -
    - - - +This topic contains a brief introduction to Windows 10 installation processes, and provides resolution procedures that IT administrators can use to resolve issues with Windows 10 upgrade. + +The topic was originally one page, but has been divided into sub-topics of different technical levels. Basic level provides common procedures that can resolve several types of upgrade errors. Advanced level requires some experience with detailed troubleshooting methods. + +The following four levels are assigned: + +Level 100: Basic
    +Level 200: Moderate
    +Level 300: Moderate advanced
    +Level 400: Advanced
    + +## In this guide + +See the following topics: + +- [Quick fixes](quick-fixes.md): \Level 100\ Steps you can take to eliminate many Windows upgrade errors.
    +- [SetupDiag](setupdiag.md): \Level 300\ SetupDiag is a new tool to help you isolate the root cause of an upgrade failure. +- [Troubleshooting upgrade errors](troubleshoot-upgrade-errors.md): \Level 300\ General advice and techniques for troubleshooting Windows 10 upgrade errors, and an explanation of phases used during the upgrade process.
    +- [Windows Error Reporting](windows-error-reporting.md): \Level 300\ How to use Event Viewer to review details about a Windows 10 upgrade. +- [Upgrade error codes](upgrade-error-codes.md): \Level 400\ The components of an error code are explained. + - [Result codes](upgrade-error-codes.md#result-codes): Information about result codes. + - [Extend codes](upgrade-error-codes.md#extend-codes): Information about extend codes. +- [Log files](log-files.md): \Level 400\ A list and description of log files useful for troubleshooting. + - [Log entry structure](log-files.md#log-entry-structure): The format of a log entry is described. + - [Analyze log files](log-files.md#analyze-log-files): General procedures for log file analysis, and an example. +- [Resolution procedures](resolution-procedures.md): \Level 200\ Causes and mitigation procedures associated with specific error codes. + - [0xC1900101](resolution-procedures.md#0xc1900101): Information about the 0xC1900101 result code. + - [0x800xxxxx](resolution-procedures.md#0x800xxxxx): Information about result codes that start with 0x800. + - [Other result codes](resolution-procedures.md#other-result-codes): Additional causes and mitigation procedures are provided for some result codes. + - [Other error codes](resolution-procedures.md#other-error-codes): Additional causes and mitigation procedures are provided for some error codes. +- [Submit Windows 10 upgrade errors](submit-errors.md): \Level 100\ Submit upgrade errors to Microsoft for analysis. ## Related topics diff --git a/windows/deployment/upgrade/setupdiag.md b/windows/deployment/upgrade/setupdiag.md index 71f47196cb..a460f3c8b5 100644 --- a/windows/deployment/upgrade/setupdiag.md +++ b/windows/deployment/upgrade/setupdiag.md @@ -16,6 +16,10 @@ ms.localizationpriority: high **Applies to** - Windows 10 +>[!NOTE] +>This is a 300 level topic (moderate advanced).
    +>See [Resolve Windows 10 upgrade errors](resolve-windows-10-upgrade-errors.md) for a full list of topics in this article. + [SetupDiag.exe](https://go.microsoft.com/fwlink/?linkid=870142) is a standalone diagnostic tool that can be used to obtain details about why a Windows 10 upgrade was unsuccessful. SetupDiag works by examining Windows Setup log files. It attempts to parse these log files to determine the root cause of a failure to update or upgrade the computer to Windows 10. SetupDiag can be run on the computer that failed to update, or you can export logs from the computer to another location and run SetupDiag in offline mode. diff --git a/windows/deployment/upgrade/submit-errors.md b/windows/deployment/upgrade/submit-errors.md index 01a1e06134..32eddd5c45 100644 --- a/windows/deployment/upgrade/submit-errors.md +++ b/windows/deployment/upgrade/submit-errors.md @@ -16,6 +16,10 @@ ms.localizationpriority: high **Applies to** - Windows 10 +>[!NOTE] +>This is a 100 level topic (basic).
    +>See [Resolve Windows 10 upgrade errors](resolve-windows-10-upgrade-errors.md) for a full list of topics in this article. + ## In this topic This topic describes how to submit problems with a Windows 10 upgrade to Microsoft using the Windows 10 Feedback Hub. diff --git a/windows/deployment/upgrade/troubleshoot-upgrade-errors.md b/windows/deployment/upgrade/troubleshoot-upgrade-errors.md new file mode 100644 index 0000000000..a7f5d26c91 --- /dev/null +++ b/windows/deployment/upgrade/troubleshoot-upgrade-errors.md @@ -0,0 +1,91 @@ +--- +title: Troubleshoot Windows 10 upgrade errors - Windows IT Pro +description: Resolve Windows 10 upgrade errors for ITPros. Technical information for IT professionals to help diagnose Windows setup errors. +keywords: deploy, error, troubleshoot, windows, 10, upgrade, code, rollback, ITPro +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: deploy +author: greg-lindsay +ms.date: 03/30/2018 +ms.localizationpriority: high +--- + +# Troubleshooting upgrade errors + +**Applies to** +- Windows 10 + +>[!NOTE] +>This is a 300 level topic (moderately advanced).
    +>See [Resolve Windows 10 upgrade errors](resolve-windows-10-upgrade-errors.md) for a full list of topics in this article. + +If a Windows 10 upgrade is not successful, it can be very helpful to understand *when* an error occurred in the upgrade process. + +Briefly, the upgrade process consists of four phases: **Downlevel**, **SafeOS**, **First boot**, and **Second boot**. The computer will reboot once between each phase. + +These phases are explained in greater detail [below](#the-windows-10-upgrade-process). First, let's summarize the actions performed during each phase because this affects the type of errors that can be encountered. + +1. **Downlevel phase**: Because this phase runs on the source OS, upgrade errors are not typically seen. If you do encounter an error, ensure the source OS is stable. Also ensure the Windows setup source and the destination drive are accessible. + +2. **SafeOS phase**: Errors most commonly occur during this phase due to hardware issues, firmware issues, or non-microsoft disk encryption software. + + Since the computer is booted into Windows PE during the SafeOS phase, a useful troubleshooting technique is to boot into [Windows PE](https://docs.microsoft.com/windows-hardware/manufacture/desktop/winpe-intro) using installation media. You can use the [media creation tool](https://www.microsoft.com/software-download/windows10) to create bootable media, or you can use tools such as the [Windows ADK](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit), and then boot your device from this media to test for hardware and firmware compatibility issues. + + **Do not proceed with the Windows 10 installation after booting from this media**. This method can only be used to perform a clean install which will not migrate any of your apps and settings, and you will be required re-enter your Windows 10 license information. + + If the computer does not successfully boot into Windows PE using the media that you created, this is likely due to a hardware or firmware issue. Check with your hardware manufacturer and apply any recommended BIOS and firmware updates. If you are still unable to boot to installation media after applying updates, disconnect or replace legacy hardware. + + If the computer successfully boots into Windows PE, but you are not able to browse the system drive on the computer, it is possible that non-Microsoft disk encryption software is blocking your ability to perform a Windows 10 upgrade. Update or temporarily remove the disk encryption. + +3. **First boot phase**: Boot failures in this phase are relatively rare, and almost exclusively caused by device drivers. Disconnect all peripheral devices except for the mouse, keyboard, and display. Obtain and install updated device drivers, then retry the upgrade. + +4. **Second boot phase**: In this phase, the system is running under the target OS with new drivers. Boot failures are most commonly due to anti-virus software or filter drivers. Disconnect all peripheral devices except for the mouse, keyboard, and display. Obtain and install updated device drivers, temporarily uninstall anti-virus software, then retry the upgrade. + +If the general troubleshooting techniques described above or the [quick fixes](quick-fixes.md) detailed below do not resolve your issue, you can attempt to analyze [log files](log-files.md) and interpret [upgrade error codes](upgrade-error-codes.md). You can also [Submit Windows 10 upgrade errors using Feedback Hub](submit-errors.md) so that Microsoft can diagnose your issue. + +## The Windows 10 upgrade process + +The **Windows Setup** application is used to upgrade a computer to Windows 10, or to perform a clean installation. Windows Setup starts and restarts the computer, gathers information, copies files, and creates or adjusts configuration settings. + +When performing an operating system upgrade, Windows Setup uses phases described below. A reboot occurs between each of the phases. After the first reboot, the user interface will remain the same until the upgrade is completed. Percent progress is displayed and will advance as you move through each phase, reaching 100% at the end of the second boot phase. + +1. **Downlevel phase**: The downlevel phase is run within the previous operating system. Windows files are copied and installation components are gathered. + + ![downlevel phase](../images/downlevel.png) + +2. **Safe OS phase**: A recovery partition is configured, Windows files are expanded, and updates are installed. An OS rollback is prepared if needed. Example error codes: 0x2000C, 0x20017. + + ![safeOS phase](../images/safeos.png) + +3. **First boot phase**: Initial settings are applied. Example error codes: 0x30018, 0x3000D. + + ![first boot phase](../images/firstboot.png) + +4. **Second boot phase**: Final settings are applied. This is also called the **OOBE boot phase**. Example error codes: 0x4000D, 0x40017. + + At the end of the second boot phase, the **Welcome to Windows 10** screen is displayed, preferences are configured, and the Windows 10 sign-in prompt is displayed. + + ![second boot phase](../images/secondboot.png) + + ![second boot phase](../images/secondboot2.png) + + ![second boot phase](../images/secondboot3.png) + +5. **Uninstall phase**: This phase occurs if upgrade is unsuccessful (image not shown). Example error codes: 0x50000, 0x50015. + +**Figure 1**: Phases of a successful Windows 10 upgrade (uninstall is not shown): + +![Upgrade process](../images/upgrade-process.png) + +DU = Driver/device updates.
    +OOBE = Out of box experience.
    +WIM = Windows image (Microsoft) + +## Related topics + +[Windows 10 FAQ for IT professionals](https://technet.microsoft.com/en-us/windows/dn798755.aspx) +
    [Windows 10 Enterprise system requirements](https://technet.microsoft.com/en-us/windows/dn798752.aspx) +
    [Windows 10 Specifications](https://www.microsoft.com/en-us/windows/Windows-10-specifications) +
    [Windows 10 IT pro forums](https://social.technet.microsoft.com/Forums/en-US/home?category=Windows10ITPro) +
    [Fix Windows Update errors by using the DISM or System Update Readiness tool](https://support.microsoft.com/kb/947821) diff --git a/windows/deployment/upgrade/upgrade-error-codes.md b/windows/deployment/upgrade/upgrade-error-codes.md new file mode 100644 index 0000000000..cdd4fe37c9 --- /dev/null +++ b/windows/deployment/upgrade/upgrade-error-codes.md @@ -0,0 +1,144 @@ +--- +title: Upgrade error codes - Windows IT Pro +description: Resolve Windows 10 upgrade errors for ITPros. Technical information for IT professionals to help diagnose Windows setup errors. +keywords: deploy, error, troubleshoot, windows, 10, upgrade, code, rollback, ITPro +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: deploy +author: greg-lindsay +ms.date: 03/30/2018 +ms.localizationpriority: high +--- + +# Upgrade error codes + +**Applies to** +- Windows 10 + +>[!NOTE] +>This is a 400 level topic (advanced).
    +>See [Resolve Windows 10 upgrade errors](resolve-windows-10-upgrade-errors.md) for a full list of topics in this article. + + +If the upgrade process is not successful, Windows Setup will return two codes: + +1. **A result code**: The result code corresponds to a specific Win32 or NTSTATUS error. +2. **An extend code**: The extend code contains information about both the *phase* in which an error occurred, and the *operation* that was being performed when the error occurred. + +>For example, a result code of **0xC1900101** with an extend code of **0x4000D** will be returned as: **0xC1900101 - 0x4000D**. + +Note: If only a result code is returned, this can be because a tool is being used that was not able to capture the extend code. For example, if you are using the [Windows 10 Upgrade Assistant](https://support.microsoft.com/en-us/kb/3159635) then only a result code might be returned. + +>[!TIP] +>If you are unable to locate the result and extend error codes, you can attempt to find these codes using Event Viewer. For more information, see [Windows Error Reporting](windows-error-reporting.md). + +## Result codes + +>A result code of **0xC1900101** is generic and indicates that a rollback occurred. In most cases, the cause is a driver compatibility issue.
    To troubleshoot a failed upgrade that has returned a result code of 0xC1900101, analyze the extend code to determine the Windows Setup phase, and see the [Resolution procedures](resolution-procedures.md) section later in this article. + +Result codes can be matched to the type of error encountered. To match a result code to an error: + +1. Identify the error code type as either Win32 or NTSTATUS using the first hexadecimal digit: +
    **8** = Win32 error code (ex: 0x**8**0070070) +
    **C** = NTSTATUS value (ex: 0x**C**1900107) +2. Write down the last 4 digits of the error code (ex: 0x8007**0070** = 0070). These digits are the actual error code type as defined in the [HRESULT](https://msdn.microsoft.com/en-us/library/cc231198.aspx) or the [NTSTATUS](https://msdn.microsoft.com/en-us/library/cc231200.aspx) structure. Other digits in the code identify things such as the device type that produced the error. +3. Based on the type of error code determined in the first step (Win32 or NTSTATUS), match the 4 digits derived from the second step to either a Win32 error code or NTSTATUS value using the following links: + - [Win32 error code](https://msdn.microsoft.com/en-us/library/cc231199.aspx) + - [NTSTATUS value](https://msdn.microsoft.com/en-us/library/cc704588.aspx) + +Examples: +- 0x80070070 + - Based on the "8" this is a Win32 error code + - The last four digits are 0070, so look up 0x00000070 in the [Win32 error code](https://msdn.microsoft.com/en-us/library/cc231199.aspx) table + - The error is: **ERROR_DISK_FULL** +- 0xC1900107 + - Based on the "C" this is an NTSTATUS error code + - The last four digits are 0107, so look up 0x00000107 in the [NTSTATUS value](https://msdn.microsoft.com/en-us/library/cc704588.aspx) table + - The error is: **STATUS_SOME_NOT_MAPPED** + +Some result codes are self-explanatory, whereas others are more generic and require further analysis. In the examples shown above, ERROR_DISK_FULL indicates that the hard drive is full and additional room is needed to complete Windows upgrade. The message STATUS_SOME_NOT_MAPPED is more ambiguous, and means that an action is pending. In this case, the action pending is often the cleanup operation from a previous installation attempt, which can be resolved with a system reboot. + +## Extend codes + +>**Important**: Extend codes reflect the current Windows 10 upgrade process, and might change in future releases of Windows 10. The codes discussed in this section apply to Windows 10 version 1607, also known as the Anniversary Update. + +Extend codes can be matched to the phase and operation when an error occurred. To match an extend code to the phase and operation: + +1. Use the first digit to identify the phase (ex: 0x4000D = 4). +2. Use the last two digits to identify the operation (ex: 0x4000D = 0D). +3. Match the phase and operation to values in the tables provided below. + +The following tables provide the corresponding phase and operation for values of an extend code: + +
    + + + +
    Extend code: phase
    HexPhase +
    0SP_EXECUTION_UNKNOWN +
    1SP_EXECUTION_DOWNLEVEL +
    2SP_EXECUTION_SAFE_OS +
    3SP_EXECUTION_FIRST_BOOT +
    4SP_EXECUTION_OOBE_BOOT +
    5SP_EXECUTION_UNINSTALL +
    + + + + + + + +
    Extend code: operation
    + +
    HexOperation +
    0SP_EXECUTION_OP_UNKNOWN +
    1SP_EXECUTION_OP_COPY_PAYLOAD +
    2SP_EXECUTION_OP_DOWNLOAD_UPDATES +
    3SP_EXECUTION_OP_INSTALL_UPDATES +
    4SP_EXECUTION_OP_INSTALL_RECOVERY_ENVIRONMENT +
    5SP_EXECUTION_OP_INSTALL_RECOVERY_IMAGE +
    6SP_EXECUTION_OP_REPLICATE_OC +
    7SP_EXECUTION_OP_INSTALL_DRVIERS +
    8SP_EXECUTION_OP_PREPARE_SAFE_OS +
    9SP_EXECUTION_OP_PREPARE_ROLLBACK +
    ASP_EXECUTION_OP_PREPARE_FIRST_BOOT +
    BSP_EXECUTION_OP_PREPARE_OOBE_BOOT +
    CSP_EXECUTION_OP_APPLY_IMAGE +
    DSP_EXECUTION_OP_MIGRATE_DATA +
    ESP_EXECUTION_OP_SET_PRODUCT_KEY +
    FSP_EXECUTION_OP_ADD_UNATTEND +
    +    		 + +
    HexOperation +
    10SP_EXECUTION_OP_ADD_DRIVER +
    11SP_EXECUTION_OP_ENABLE_FEATURE +
    12SP_EXECUTION_OP_DISABLE_FEATURE +
    13SP_EXECUTION_OP_REGISTER_ASYNC_PROCESS +
    14SP_EXECUTION_OP_REGISTER_SYNC_PROCESS +
    15SP_EXECUTION_OP_CREATE_FILE +
    16SP_EXECUTION_OP_CREATE_REGISTRY +
    17SP_EXECUTION_OP_BOOT +
    18SP_EXECUTION_OP_SYSPREP +
    19SP_EXECUTION_OP_OOBE +
    1ASP_EXECUTION_OP_BEGIN_FIRST_BOOT +
    1BSP_EXECUTION_OP_END_FIRST_BOOT +
    1CSP_EXECUTION_OP_BEGIN_OOBE_BOOT +
    1DSP_EXECUTION_OP_END_OOBE_BOOT +
    1ESP_EXECUTION_OP_PRE_OOBE +
    1FSP_EXECUTION_OP_POST_OOBE +
    20SP_EXECUTION_OP_ADD_PROVISIONING_PACKAGE +
    +
    + +For example: An extend code of **0x4000D**, represents a problem during phase 4 (**0x4**) with data migration (**000D**). + +## Related topics + +[Windows 10 FAQ for IT professionals](https://technet.microsoft.com/en-us/windows/dn798755.aspx) +
    [Windows 10 Enterprise system requirements](https://technet.microsoft.com/en-us/windows/dn798752.aspx) +
    [Windows 10 Specifications](https://www.microsoft.com/en-us/windows/Windows-10-specifications) +
    [Windows 10 IT pro forums](https://social.technet.microsoft.com/Forums/en-US/home?category=Windows10ITPro) +
    [Fix Windows Update errors by using the DISM or System Update Readiness tool](https://support.microsoft.com/kb/947821) diff --git a/windows/deployment/upgrade/windows-error-reporting.md b/windows/deployment/upgrade/windows-error-reporting.md new file mode 100644 index 0000000000..e8c3251320 --- /dev/null +++ b/windows/deployment/upgrade/windows-error-reporting.md @@ -0,0 +1,66 @@ +--- +title: Windows error reporting - Windows IT Pro +description: Resolve Windows 10 upgrade errors for ITPros. Technical information for IT professionals to help diagnose Windows setup errors. +keywords: deploy, error, troubleshoot, windows, 10, upgrade, code, rollback, ITPro +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: deploy +author: greg-lindsay +ms.date: 03/30/2018 +ms.localizationpriority: high +--- + +# Windows error reporting + +**Applies to** +- Windows 10 + +>[!NOTE] +>This is a 300 level topic (moderately advanced).
    +>See [Resolve Windows 10 upgrade errors](resolve-windows-10-upgrade-errors.md) for a full list of topics in this article. + + +When Windows Setup fails, the result and extend code are recorded as an informational event in the Application log by Windows Error Reporting as event 1001. The event name is **WinSetupDiag02**. You can use Event Viewer to review this event, or you can use Windows PowerShell. + +To use Windows PowerShell, type the following commands from an elevated Windows PowerShell prompt: + +``` +$events = Get-WinEvent -FilterHashtable @{LogName="Application";ID="1001";Data="WinSetupDiag02"} +$event = [xml]$events[0].ToXml() +$event.Event.EventData.Data +``` + +To use Event Viewer: +1. Open Event Viewer and navigate to **Windows Logs\Application**. +2. Click **Find**, and then search for **winsetupdiag02**. +3. Double-click the event that is highlighted. + +Note: For legacy operating systems, the Event Name was WinSetupDiag01. + +Ten parameters are listed in the event: +
    + + + + + + + + + + + +
    P1: The Setup Scenario (1=Media,5=WindowsUpdate,7=Media Creation Tool)
    P2: Setup Mode (x=default,1=Downlevel,5=Rollback)
    P3: New OS Architecture (x=default,0=X86,9=AMD64)
    P4: Install Result (x=default,0=Success,1=Failure,2=Cancel,3=Blocked)
    P5: Result Error Code (Ex: 0xc1900101)
    P6: Extend Error Code (Ex: 0x20017)
    P7: Source OS build (Ex: 9600)
    P8: Source OS branch (not typically available)
    P9: New OS build (Ex: 16299}
    P10: New OS branch (Ex: rs3_release}
    + +The event will also contain links to log files that can be used to perform a detailed diagnosis of the error. An example of this event from a successful upgrade is shown below. + +![Windows Error Reporting](../images/event.png) + +## Related topics + +[Windows 10 FAQ for IT professionals](https://technet.microsoft.com/en-us/windows/dn798755.aspx) +
    [Windows 10 Enterprise system requirements](https://technet.microsoft.com/en-us/windows/dn798752.aspx) +
    [Windows 10 Specifications](https://www.microsoft.com/en-us/windows/Windows-10-specifications) +
    [Windows 10 IT pro forums](https://social.technet.microsoft.com/Forums/en-US/home?category=Windows10ITPro) +
    [Fix Windows Update errors by using the DISM or System Update Readiness tool](https://support.microsoft.com/kb/947821) From 58c0b04d4b3409f6ac7e8f4530ab0475842aaff8 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Sun, 1 Apr 2018 14:44:55 +0000 Subject: [PATCH 18/63] Merged PR 6806: minor typo fixing one small typo in one file. --- windows/deployment/TOC.md | 1 - windows/deployment/upgrade/resolution-procedures.md | 2 +- 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index d36561005b..94f70ce62d 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -16,7 +16,6 @@ ### [Log files](upgrade/log-files.md) ### [Resolution procedures](upgrade/resolution-procedures.md) ### [Submit Windows 10 upgrade errors](upgrade/submit-errors.md) -### [SetupDiag](upgrade/setupdiag.md) ## [Deploy Windows 10](deploy.md) diff --git a/windows/deployment/upgrade/resolution-procedures.md b/windows/deployment/upgrade/resolution-procedures.md index 713ccc1b67..ae8d50adda 100644 --- a/windows/deployment/upgrade/resolution-procedures.md +++ b/windows/deployment/upgrade/resolution-procedures.md @@ -17,7 +17,7 @@ ms.localizationpriority: high - Windows 10 >[!NOTE] ->This is a 400 level topic (advanced).
    +>This is a 200 level topic (moderate).
    >See [Resolve Windows 10 upgrade errors](resolve-windows-10-upgrade-errors.md) for a full list of topics in this article. From cc0108a8698c9d1fc41603b1d0665ae1b095bba8 Mon Sep 17 00:00:00 2001 From: nathanmcnulty Date: Sun, 1 Apr 2018 23:41:23 -0700 Subject: [PATCH 19/63] Fix typo for box 5b - Change AD FA RA to AD FS RA --- .../hello-for-business/hello-planning-guide.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-planning-guide.md b/windows/security/identity-protection/hello-for-business/hello-planning-guide.md index 61dc742a69..880d8394b1 100644 --- a/windows/security/identity-protection/hello-for-business/hello-planning-guide.md +++ b/windows/security/identity-protection/hello-for-business/hello-planning-guide.md @@ -284,7 +284,7 @@ If box **2a** reads **GP** and box **2b** reads **modern management**, write **A | Web Server | NDES | | CEP Encryption | NDES | -If box **2a** reads **GP** and box **2b** reads **N/A**, write **AD FA RA** in box **5b** and write the following certificate template names and issuances in box **5c** on your planning worksheet. +If box **2a** reads **GP** and box **2b** reads **N/A**, write **AD FS RA** in box **5b** and write the following certificate template names and issuances in box **5c** on your planning worksheet. | Certificate Template Name | Issued To | | --- | --- | From 8a8470b40235d7d5dcdcb028a2417d7379aa9b78 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Mon, 2 Apr 2018 16:08:09 +0000 Subject: [PATCH 20/63] Merged PR 6810: Fix typo and link --- windows/application-management/index.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/application-management/index.md b/windows/application-management/index.md index fdd42c35b8..23490f9d99 100644 --- a/windows/application-management/index.md +++ b/windows/application-management/index.md @@ -24,8 +24,8 @@ Learn about managing applications in Windows 10 and Windows 10 Mobile clients. | [Enable or block Windows Mixed Reality apps in the enterprise](manage-windows-mixed-reality.md) | Learn how to enable or block Windows Mixed Reality apps. | |[App-V](app-v/appv-getting-started.md)| Microsoft Application Virtualization (App-V) for Windows 10 enables organizations to deliver Win32 applications to users as virtual applications| | [Service Host process refactoring](svchost-service-refactoring.md) | Changes to Service Host grouping in Windows 10 | -|[Per User services in Windows 10](sideload-apps-in-windows-10.md)| Overview of per user services and instructions for viewing and disabling them in Windows 10 and Windows 2016| +|[Per User services in Windows 10](per-user-services-in-windows.md)| Overview of per user services and instructions for viewing and disabling them in Windows 10 and Windows 2016| [Disabling System Services in Windows Server](https://docs.microsoft.com/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server) | Security guidelines for disabling services in Windows Server 2016 with Desktop Experience |[Understand apps in Windows 10](apps-in-windows-10.md)| Overview of the different apps included by default in Windows 10 Enterprise| -| [Deploy app updgrades on Windows 10 Mobile](deploy-app-upgrades-windows-10-mobile.md) | How to upgrade apps on Windows 10 Mobile | +| [Deploy app upgrades on Windows 10 Mobile](deploy-app-upgrades-windows-10-mobile.md) | How to upgrade apps on Windows 10 Mobile | [Change history for Application management](change-history-for-application-management.md) | This topic lists new and updated topics in the Application management documentation for Windows 10 and Windows 10 Mobile. From 0e1f9f5f3ac5cf7b2eade54dd2f476e23a0b6ad5 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 2 Apr 2018 09:52:10 -0700 Subject: [PATCH 21/63] fixed typos in file titles --- .../hello-for-business/hello-hybrid-key-trust-prereqs.md | 2 +- .../security/identity-protection/hello-for-business/toc.md | 2 +- ...e-group-policy-management-console-to-windows-firewall.md | 6 +++--- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-prereqs.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-prereqs.md index 43ce0a6db5..645efb6bee 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-prereqs.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-trust-prereqs.md @@ -1,5 +1,5 @@ --- -title: Hybrid Key trust Windows Hello for Business Prerequistes (Windows Hello for Business) +title: Hybrid Key trust Windows Hello for Business Prerequisites (Windows Hello for Business) description: Prerequisites for Hybrid Windows Hello for Business Deployments keywords: identity, PIN, biometric, Hello, passport, WHFB, hybrid, key-trust ms.prod: w10 diff --git a/windows/security/identity-protection/hello-for-business/toc.md b/windows/security/identity-protection/hello-for-business/toc.md index 86c01a544c..ae838d1fcc 100644 --- a/windows/security/identity-protection/hello-for-business/toc.md +++ b/windows/security/identity-protection/hello-for-business/toc.md @@ -22,7 +22,7 @@ #### [Sign-in and Provision](hello-hybrid-key-whfb-provision.md) ### [Hybrid Azure AD Joined Certificate Trust Deployment](hello-hybrid-cert-trust.md) -#### [Prerequistes](hello-hybrid-cert-trust-prereqs.md) +#### [Prerequisites](hello-hybrid-cert-trust-prereqs.md) #### [New Installation Baseline](hello-hybrid-cert-new-install.md) #### [Configure Azure Device Registration](hello-hybrid-cert-trust-devreg.md) #### [Configure Windows Hello for Business policy settings](hello-hybrid-cert-whfb-settings.md) diff --git a/windows/security/identity-protection/windows-firewall/open-the-group-policy-management-console-to-windows-firewall.md b/windows/security/identity-protection/windows-firewall/open-the-group-policy-management-console-to-windows-firewall.md index c7078281bc..04fceb336d 100644 --- a/windows/security/identity-protection/windows-firewall/open-the-group-policy-management-console-to-windows-firewall.md +++ b/windows/security/identity-protection/windows-firewall/open-the-group-policy-management-console-to-windows-firewall.md @@ -1,5 +1,5 @@ --- -title: Open the Group Policy Management Console to Windows Defender Firewall with Advanced Security (Windows 10) +title: Open the Group Policy Management Console to Windows Defender Firewall (Windows 10) description: Open the Group Policy Management Console to Windows Defender Firewall with Advanced Security ms.assetid: 5090b2c8-e038-4905-b238-19ecf8227760 ms.prod: w10 @@ -7,10 +7,10 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security author: brianlic-msft -ms.date: 08/17/2017 +ms.date: 04/02/2017 --- -# Open the Group Policy Management Console to Windows Defender Firewall with Advanced Security +# Open the Group Policy Management Console to Windows Defender Firewall **Applies to** - Windows 10 From 59425f2b10873d33a1637ae095971bc6179f6858 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 2 Apr 2018 10:23:58 -0700 Subject: [PATCH 22/63] added link to a blog --- ...cker-by-using-mbam-as-part-of-a-windows-deploymentmbam-25.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mdop/mbam-v25/how-to-enable-bitlocker-by-using-mbam-as-part-of-a-windows-deploymentmbam-25.md b/mdop/mbam-v25/how-to-enable-bitlocker-by-using-mbam-as-part-of-a-windows-deploymentmbam-25.md index 7234d14a83..ca4cba335c 100644 --- a/mdop/mbam-v25/how-to-enable-bitlocker-by-using-mbam-as-part-of-a-windows-deploymentmbam-25.md +++ b/mdop/mbam-v25/how-to-enable-bitlocker-by-using-mbam-as-part-of-a-windows-deploymentmbam-25.md @@ -14,7 +14,7 @@ ms.date: 04/23/2017 # How to Enable BitLocker by Using MBAM as Part of a Windows Deployment -This topic explains how to enable BitLocker on an end user's computer by using MBAM as part of your Windows imaging and deployment process. +This topic explains how to enable BitLocker on an end user's computer by using MBAM as part of your Windows imaging and deployment process. If you see a black screen at restart (after Install phase concludes) indicating that the drive cannot be unlocked, see [Windows versions prior Windows 10 build 1511 fail to start after "Setup Windows and Configuration Manager" step when Pre-Provision BitLocker is used with Windows PE 10.0.586.0 (1511)](https://blogs.technet.microsoft.com/system_center_configuration_manager_operating_system_deployment_support_blog/2016/03/30/windows-versions-prior-windows-10-build-1511-fail-to-start-after-setup-windows-and-configuration-manager-step-when-pre-provision-bitlocker-is-used-with-windows-pe-10-0-586-0-1511/). **Prerequisites:** From 88a1db886659d0fcd3f7abc11102d46205b49f3a Mon Sep 17 00:00:00 2001 From: Marc Shepard <37675325+marcshep-msft@users.noreply.github.com> Date: Mon, 2 Apr 2018 11:38:43 -0700 Subject: [PATCH 23/63] Update upgrade-readiness-deployment-script.md Added info about new device name opt-in --- .../upgrade/upgrade-readiness-deployment-script.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/deployment/upgrade/upgrade-readiness-deployment-script.md b/windows/deployment/upgrade/upgrade-readiness-deployment-script.md index fb04dd5bf6..7b45c2ed1b 100644 --- a/windows/deployment/upgrade/upgrade-readiness-deployment-script.md +++ b/windows/deployment/upgrade/upgrade-readiness-deployment-script.md @@ -66,7 +66,7 @@ To run the Upgrade Readiness deployment script: > > *IEOptInLevel = 3 Data collection is enabled for all sites* -4. The latest version (03.02.17) of the deployment script is configured to collect and send diagnostic and debugging data to Microsoft. If you wish to disable sending diagnostic and debugging data to Microsoft, set **AppInsightsOptIn = false**. By default, **AppInsightsOptIn** is set to **true**. +4. A recent version (03.02.17) of the deployment script is configured to collect and send diagnostic and debugging data to Microsoft. If you wish to disable sending diagnostic and debugging data to Microsoft, set **AppInsightsOptIn = false**. By default, **AppInsightsOptIn** is set to **true**. The data that is sent is the same data that is collected in the text log file that captures the events and error codes while running the script. This file is named in the following format: **UA_yyyy_mm_dd_hh_mm_ss_machineID.txt**. Log files are created in the drive that is specified in the RunConfig.bat file. By default this is set to: **%SystemDrive%\UADiagnostics**. @@ -75,7 +75,9 @@ To run the Upgrade Readiness deployment script: \*vortex\*.data.microsoft.com
    \*settings\*.data.microsoft.com -5. After you finish editing the parameters in RunConfig.bat, you are ready to run the script. If you are using the Pilot version, run RunConfig.bat from an elevated command prompt. If you are using the Deployment version, use ConfigMgr or other software deployment service to run RunConfig.bat as system. +5. The latest version (03.28.2018) of the deployment script configures insider builds to continue to send the device name to the diagnostic data management service and the analytics portal. If you do not want to have insider builds send the device name sent to analytics and be available in the analytics portal, set **DeviceNAmeOptIn = false**. By default it is true, which preserves the behavior on previous versions of Windows. This setting only applies to insider builds. Note that the device name is also sent to AppInsights, so to ensure the device name is not sent to either place you would need to also set **AppInsightsOptIn = false**. + +6. After you finish editing the parameters in RunConfig.bat, you are ready to run the script. If you are using the Pilot version, run RunConfig.bat from an elevated command prompt. If you are using the Deployment version, use ConfigMgr or other software deployment service to run RunConfig.bat as system. ## Exit codes From 65131058015247c7c7043bda6754752fcc78da37 Mon Sep 17 00:00:00 2001 From: robsize <38013135+robsize@users.noreply.github.com> Date: Mon, 2 Apr 2018 11:48:35 -0700 Subject: [PATCH 24/63] Update configure-windows-diagnostic-data-in-your-organization.md Updated to reflect changes in Basic Diagnostic Data from RS3 forward along with updates to policy implementation details. --- ...ows-diagnostic-data-in-your-organization.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/configuration/configure-windows-diagnostic-data-in-your-organization.md b/windows/configuration/configure-windows-diagnostic-data-in-your-organization.md index ec20ebc2bc..c77762a5e4 100644 --- a/windows/configuration/configure-windows-diagnostic-data-in-your-organization.md +++ b/windows/configuration/configure-windows-diagnostic-data-in-your-organization.md @@ -56,7 +56,7 @@ Windows diagnostic data is vital technical data from Windows devices about the d - Improve Windows – through the aggregate analysis of the use of Windows - Personalize Windows engagement surfaces -Here are some specific examples of Windows diagnostic data data: +Here are some specific examples of Windows diagnostic data: - Type of hardware being used - Applications installed and usage details @@ -167,7 +167,7 @@ The diagnostic data data is categorized into four levels: - **Security**. Information that’s required to help keep Windows, Windows Server, and System Center secure, including data about the Connected User Experiences and Telemetry component settings, the Malicious Software Removal Tool, and Windows Defender. -- **Basic**. Basic device info, including: quality-related data, app compatibility, app usage data, and data from the **Security** level. +- **Basic**. Basic device info, including: quality-related data, app compatibility, and data from the **Security** level. - **Enhanced**. Additional insights, including: how Windows, Windows Server, System Center, and apps are used, how they perform, advanced reliability data, and data from both the **Basic** and the **Security** levels. @@ -188,7 +188,7 @@ Windows Server Update Services (WSUS) and System Center Configuration Manager fu The data gathered at this level includes: -- **Connected User Experiences and Telemetry component settings**. If general diagnostic data data has been gathered and is queued, it is sent to Microsoft. Along with this diagnostic data, the Connected User Experiences and Telemetry component may download a configuration settings file from Microsoft’s servers. This file is used to configure the Connected User Experiences and Telemetry component itself. The data gathered by the client for this request includes OS information, device id (used to identify what specific device is requesting settings) and device class (for example, whether the device is server or desktop). +- **Connected User Experiences and Telemetry component settings**. If general diagnostic data has been gathered and is queued, it is sent to Microsoft. Along with this diagnostic data, the Connected User Experiences and Telemetry component may download a configuration settings file from Microsoft’s servers. This file is used to configure the Connected User Experiences and Telemetry component itself. The data gathered by the client for this request includes OS information, device id (used to identify what specific device is requesting settings) and device class (for example, whether the device is server or desktop). - **Malicious Software Removal Tool (MSRT)** The MSRT infection report contains information, including device info and IP address. @@ -240,8 +240,6 @@ The data gathered at this level includes: - **General app data and app data for Internet Explorer add-ons**. Includes a list of apps that are installed on a native or virtualized instance of the OS and whether these apps function correctly after an upgrade. This app data includes the app name, publisher, version, and basic details about which files have been blocked from usage. - - **App usage data**. Includes how an app is used, including how long an app is used, when the app has focus, and when the app is started - - **Internet Explorer add-ons**. Includes a list of Internet Explorer add-ons that are installed on a device and whether these apps will work after an upgrade. - **System data**. Helps provide an understanding about whether a device meets the minimum requirements to upgrade to the next version of the operating system. System information includes the amount of memory, as well as information about the processor and BIOS. @@ -322,9 +320,9 @@ However, before more data is gathered, Microsoft’s privacy governance team, in Sharing diagnostic data data with Microsoft provides many benefits to enterprises, so we do not recommend turning it off. For most enterprise customers, simply adjusting the diagnostic data level and managing specific components is the best option. -Customers can set the diagnostic data level in both the user interface and with existing management tools. Users can change the diagnostic data level in the **Diagnostic data** setting. In the **Settings** app, it is in **Privacy\Feedback & diagnostics**. They can choose between Basic, Enhanced, and Full. The Security level is not available. +Customers can set the diagnostic data level in both the user interface and with existing management tools. Users can change the diagnostic data level in the **Diagnostic data** setting. In the **Settings** app, it is in **Privacy\Feedback & diagnostics**. They can choose between Basic and Full. The Enhanced level will only be displayed as an option when Group Policy or Mobile Device Management (MDM) are invoked with this level. The Security level is not available. -IT pros can use various methods, including Group Policy and Mobile Device Management (MDM), to choose a diagnostic data level. If you’re using Windows 10 Enterprise, Windows 10 Education, or Windows Server 2016, the Security diagnostic data level is available when managing the policy. Setting the diagnostic data level through policy overrides users’ choices. The remainder of this section describes how to do that. +IT pros can use various methods, including Group Policy and Mobile Device Management (MDM), to choose a diagnostic data level. If you’re using Windows 10 Enterprise, Windows 10 Education, or Windows Server 2016, the Security diagnostic data level is available when managing the policy. Setting the diagnostic data level through policy sets the upper boundary for the users’ choices. To disable user choice after setting the level with the policy, you will need to use the "Configure telemetry opt-in setting user interface" group policy. The remainder of this section describes how to use group policy to configure levels and settings interface. ### Manage your diagnostic data settings @@ -340,7 +338,7 @@ The lowest diagnostic data setting level supported through management policies i ### Configure the operating system diagnostic data level -You can configure your operating system diagnostic data settings using the management tools you’re already using, such as Group Policy, MDM, or Windows Provisioning. You can also manually change your settings using Registry Editor. Setting your diagnostic data levels through a management policy overrides any device level settings. +You can configure your operating system diagnostic data settings using the management tools you’re already using, such as Group Policy, MDM, or Windows Provisioning. You can also manually change your settings using Registry Editor. Setting your diagnostic data levels through a management policy sets the upper level for diagnostic data on the device. Use the appropriate value in the table below when you configure the management policy. @@ -351,6 +349,8 @@ Use the appropriate value in the table below when you configure the management p | Enhanced | Security data, basic system and quality data, and enhanced insights and advanced reliability data. | **2** | | Full | Security data, basic system and quality data, enhanced insights and advanced reliability data, and full diagnostics data. | **3** | + > [!NOTE] + > When the User Configuration policy is set for Diagnostic Data, this will override the Computer Configuration setting. ### Use Group Policy to set the diagnostic data level @@ -433,4 +433,4 @@ Web Pages - [Privacy at Microsoft](http://privacy.microsoft.com) - \ No newline at end of file + From 4037d403e592f211648f297cdd7d5ca71802a1fa Mon Sep 17 00:00:00 2001 From: Marc Shepard <37675325+marcshep-msft@users.noreply.github.com> Date: Mon, 2 Apr 2018 11:53:24 -0700 Subject: [PATCH 25/63] Update windows-analytics-FAQ-troubleshooting.md Added step to reset SQM ID to "devices not showing up" FAQ --- .../update/windows-analytics-FAQ-troubleshooting.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index f195cc6375..863e2e62d1 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -55,6 +55,11 @@ If you want to check a large number of devices, you should run the latest script If you think the issue might be related to a network proxy, check "Enable data sharing" section of the [Enrolling devices in Windows Analytics](windows-analytics-get-started.md) topic. Also see [Understanding connectivity scenarios and the deployment script](https://blogs.technet.microsoft.com/upgradeanalytics/2017/03/10/understanding-connectivity-scenarios-and-the-deployment-script/) on the Windows Analytics blog. +If you have deployed images that have not been generalized, then many of them might have the same ID and so analytics will see them as one device. If you suspect this is the issue, then you can reset the IDs on the non-generalized devices by performing these steps: +1. Net stop diagtrack +2. Reg delete hklm\software\microsoft\sqmclient /v MachineId /f +3. Net start diagtrack + ### Device Health crash data not appearing From e5408e3647514fce2b5680f21f8abc7b6bdacab9 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 2 Apr 2018 14:17:04 -0700 Subject: [PATCH 26/63] added options to config appidsvc --- .../configure-the-application-identity-service.md | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/applocker/configure-the-application-identity-service.md b/windows/security/threat-protection/applocker/configure-the-application-identity-service.md index 73a7463d29..81658b4b49 100644 --- a/windows/security/threat-protection/applocker/configure-the-application-identity-service.md +++ b/windows/security/threat-protection/applocker/configure-the-application-identity-service.md @@ -38,4 +38,12 @@ Membership in the local **Administrators** group, or equivalent, is the minimum 2. Click the **Services** tab, right-click **AppIDSvc**, and then click **Start Service**. 3. Verify that the status for the Application Identity service is **Running**. -Starting with Windows 10, the Application Identity service is now a protected process. Because of this, you can no longer manually set the service **Startup type** to **Automatic**. +Starting with Windows 10, the Application Identity service is now a protected process. Because of this, you can no longer manually set the service **Startup type** to **Automatic** by using the Sevices smnap-in. Try either of these methods instead: + +- Open an elevated commnad prompt or PowerShell session and type: + + ```powershell + sc.exe config appidsvc start= auto + ``` + +- Create a security template that configures appidsvc to be automatic start, and apply it using secedit.exe or LGPO.exe. From 5d3bbf3c0020b4aa39d0d466f47efea345aec16f Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Mon, 2 Apr 2018 14:19:23 -0700 Subject: [PATCH 27/63] added options to config appidsvc --- .../applocker/configure-the-application-identity-service.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/applocker/configure-the-application-identity-service.md b/windows/security/threat-protection/applocker/configure-the-application-identity-service.md index 81658b4b49..eace7b9b57 100644 --- a/windows/security/threat-protection/applocker/configure-the-application-identity-service.md +++ b/windows/security/threat-protection/applocker/configure-the-application-identity-service.md @@ -7,7 +7,7 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library author: brianlic-msft -ms.date: 09/21/2017 +ms.date: 04/02/2018 --- # Configure the Application Identity service @@ -38,7 +38,7 @@ Membership in the local **Administrators** group, or equivalent, is the minimum 2. Click the **Services** tab, right-click **AppIDSvc**, and then click **Start Service**. 3. Verify that the status for the Application Identity service is **Running**. -Starting with Windows 10, the Application Identity service is now a protected process. Because of this, you can no longer manually set the service **Startup type** to **Automatic** by using the Sevices smnap-in. Try either of these methods instead: +Starting with Windows 10, the Application Identity service is now a protected process. Because of this, you can no longer manually set the service **Startup type** to **Automatic** by using the Sevices snap-in. Try either of these methods instead: - Open an elevated commnad prompt or PowerShell session and type: From 63d27137dff1ce98eb9fa84b4de7f28916d37408 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Mon, 2 Apr 2018 21:24:46 +0000 Subject: [PATCH 28/63] Merged PR 6836: Browser/AllowCookies in Policy CSP - updated the supported values section --- .../mdm/images/provisioning-csp-vpn.png | Bin 49838 -> 60867 bytes ...ew-in-windows-mdm-enrollment-management.md | 5 +---- .../mdm/policy-csp-browser.md | 7 ++++--- windows/client-management/mdm/vpn-csp.md | 2 +- 4 files changed, 6 insertions(+), 8 deletions(-) diff --git a/windows/client-management/mdm/images/provisioning-csp-vpn.png b/windows/client-management/mdm/images/provisioning-csp-vpn.png index 15e907a16c6993130e6fec26f02cedf8f154c547..f46b884641d976980ad2e2e683137ce09b62865d 100644 GIT binary patch literal 60867 zcmce8XFyZiwr&s&Dg;zikWjZGDoPUwpn!;gAPS1~UKFGxq4y%$Mo|!H0@6W53`IbC zmtGW5ib_K7y?4l)3B`TRJ?Ff0@4M&y*d-xrt-0nL^&8(9KFW9GV27CwLm&{C{LLHp zAdr2BAP}m&gZscYr_biQafbv9`KKIvxyUQn*;AJ6^TD%lMeF@IYAQu%9@pw@_1kx`(0c|t--bR<=eHt_1bDHj4$A?=PJ(r*mM*4jS ze4!&MXX~gsO}JcfqUn%i@ApR#M&5mh$WpthM0$Vi;vBiLkoDC1KZW=!Xe72iF7xTO z!f{=CM0apK^(Q!ZdsFiVxR#~HN}KU58+oFmduHpS*P@9rH28@YE`0nN;`MU_3obU#V{(=`>Mb`v6$s3CTSL4y5(wzcaf{Nci^jOGOA5&? z=66Cjq06ji9#&QT@`Tz;=RLK~*G?GS)X_vSMNQq-6dMtj5GiK8$ou|I*n^=j{tDf0 zt`(j&6p%T82WhLgxyF`hP5ZNQG1gQe=1a+;DN_S9!Y?zPdSJ$b++8I*xVU_)ie5k) zY{f8zz4^xe7b8iW$*J`Psy@1 z`+m`=EK5zU-J9>XUc<#`2X&cSH?teHP@NTnfsd#?e2cNG>Nyji^^*V}_>g(bT*NmBAJ0bHuU}gEF8B)qqE=7LBHuKC#47qSoRa-5c7ZpDW*-=;kK4lXUBi|stfkNcZT;S)aA7^?otE6pu1 zv97P{=`u&IxghS3hky<1(WQdaB0RGT3$=0Tsec3+b$kl#3DytEwC+RcBW|3UvzP8< zWr9szDrM$vZi7|JRQDjA`f4f1Zqs(zK)mn?o_8K)@Ozq#d8wMp+TD^p@ZlFKxj-)VFfDp?j=Zagta3mzZ z;Dq7p@R&Q|E>oZ5i7zQ318kGnhx47?(H>PFE}zE23-k^5$JLL+628E z>qn+kal&-j0H-LvBFSIkepE~+fv~tE)3JHZw$5`w>Z$iEZq2z#`q%Zden6-d7jLc8 zK=@AXM=G0UzZf3xOQL-nQ)JhdQAItkBM2#TI+`aH=P9+8b-Br7=3^W3?eta0iGW`} zMLq0JK&oHl0A&TAvmYEhFapAI#0Lz+%XjdH=eZK{DKE;8!E&j4fDcJjj36XhTS}@#>-eC!tM(~p zh#N-q#1`1iFx1AuzqXp@FPwU=fjwDQ4+cb zCDY1)YsJi{fB1OcN>e7Mv?b=UYi`K>s-)G?)5b37(O1%l*0DAMfv|00x=dRZ%}YGS zFXg4)H$UU~@ca|F_pPTPGeh_8%nhv5wGZL8-{BMdtFFezXlnv^Ws9Oth4Jz>X+iN2 z_{OcLY9;uYIUhDX4f7SUy>CJ0*^jroUQXAx&ncbtaOYU9NO?r)(RUbVfRSYCYt)t9 zdpbBe;^uAhS5HuN#CzuVW{FBzLcI8|7fQ`e=b~67FFy)lsyo9qL^~ha12HH%h>sQV z9K}nzhxwzvqR*w@CJxNCQI~52#Xnn#{6Qe3#-uX85i`h!k6s}uuznF=6X6Vm@rn`R zoP&eIN%%a<<9;8VC=KHxbZcor(!<00C_ki3BoK{h%1%#3wcZRhcDjpm9ZOKf_&@rw+&+gvcI5HlO2fywoVMUS6Rl90->4My$`i)?N<1Rc*x5haw2p_Yc;ENH`jI ze@>(}&SmEDmd3()9jzfg1N&U%8rb!?i*!UpilZ-X-npx-uc@S` zcSa5#3LHC-f&+525UgSx0SzSCIHttdUb$Uf*h#+_KiGA5&M4k?p&f3YZQ>T!{NPj3 zFmMSdLcs}UQ3#{J6Nic~5eU!un$T3*dNCiUzia;0{7ebaINsA*)+$fgE{yCCWpY_G zi)ZC3IBn9+B=Fi7C;8FadGebB3w??}Y8s#0Q|EQH=MJ*|?^yaJZ~uDVFZ(pG*iFc^YECHPAXy-AN`bBuR!&VJXSDr?pKge zTINyd8$Ur*xX$|s+0q?ju)q88R!>)LOG+gdGeKA^vdCsGxj~%=O56uAsP#>RZ!LGb z8LGNe}ifAd%G(5&`*lY*0~-@cvH;y;b!A=rk{awDQunBdfPEI zEoN&{_e3Ad1SWPnkADLfPMxRl4ZL1xXm7t*i8loAc01Fw|NWT1t7eT2<}O~o@W$7X zvvim1QpbhU73FBnxHr+<)wR_Ro{QtgWuJze&O#AN+^>k(K=@1!PhxwCG#2ru{Z2wr z=hSqwTLN8DKYqWmP^foT^5CSA#GM;{#&?$YAMvvs<$4p1M+o66z>-)HVkwPn5`z(! zA+oY@gjf+r!`UPie=VV4P2VjcV|_mDUyCJfQErgHx`JyV^+P8xf&NTH=!%Hqx8dM%9z@A_A?1(Pu z{O<7N?k98$gwF*neWx_xN|CY3!V73g0^C5q48}x6t%CsOC@!paYv?B(>kw)kGC`fk zacwltBWDgbH&0T=dfq#m?+a?X_aFGd2DE)@YAUoN{cF2YDL7aVR+*@tICVSPjVQIa z)zn(A@8;}mYRV-d4B^v4WBkPK7P}1^S(VrnxMb>xZ+)$i^fX?R5t!H*^5?}lY8MY@ zuYPbL=KJseSlWY4Bjs)&eo9FZta(1V%AM|pR@+24Nu0$OIja8FUxXR+TG)bU@mp7 z)O9_k#hm;q>YZ6dRt)@}DDT-seriZ+EShczkFOUv;)0pfpZpRckWd z`MKj*?)@Z5iPb@B6$G?S>81PP!a#oMI>9qj?40AQhk-mp@iKeS>Eo5-3$%l*x+g0; zsESjfD|TOSrKnud>8L@>irnb^sq)V*1OqiC+%WI)3zJR_flEEWmz`b@t2|BLwU3O^9m!oorZ9t4O~OfJr? zKFR9r>?|**WMl-wqL~i>5sNfoSF@KVEkr$#^r&O>UVnvC+{^`rY3M z=|6t`k@KYJxPjB6Ph>}|84(EPNIet*mHogy(}Y(v*a;bi?{=>}v%O>0D|(2DhVw<) zEwjbGWxLv;1dNi=(Lq|1?{%R^cMDJhew2#t~anhaZhu$7JqeBi&jn>+TrA z`t>js9k+x|N+G<+PqrfwJ%<889$t$trSS-u-+4c{PqC()A^>k<1vc$}sM(be3 zibOhp0FfLsT^4YAk3Mq5575fFkCJLeuWPfQcre3A?w+h_Eu2vIuc zUvrXmoq$oJg7Hc_U_67kUX~8%A)hsE`n`bsghlz~u=LoG4NbfxM?#>aQ>tJ!m ziuBr(2HXod!r+8qpNEOo7(}orp=)}{_>F9BFaH*M$h83SeIW*Dk~swE3p2@7 zQb3?oh&(9Jf%58!=_+Cn;C-uAl@#c)1X^7fa6mPuX{w zhaCS|b56dgU9!(L-|!|$yYR5F=W!tBHI;PwF?Kd{`Yywfm{z4YDn=-{G}FEU_|?z( zWAinosO)2P@~v$Z_|J{Nf}qPF0{akovN_0Iz(V4eKS|4k#@Z|O?vZsR#plidLz2fr zRcI)N68h>W*(qTP%-(-(5_ezV!1-cNUh-N`%}G&uT~JW2{UE{sugOlzWQ3IEGp{eO;IOjv1cFaBn>YM(w!*D1dW+3DuIrHq$qVlDlYTuP zDNHE9_RtW}tMygtcO)LPHJb(gf+c?^!2F3Nt!9hDP9T4sprY%L#6h3J*r~yhgPZ@l z{-D$&BJKs;&PUtvu`g#Ee#p+9~qiF zYoTW3wkZ-8k|#DQVPj-J{rrqg2&>_PQ3F1UKSfnye*XG(cYW_%JduOwc)Op4%7g9M)LEHqsy`!#YmLK6VR!mCb9zz3Yg?mw|#f z0xX&_{^&h@#QPQMGmbW&dgr$t`YE88l1ahUur8H;HKo3;yN3}YZJdZR>2wRh17~H! zhhK_kqH|6%3wvDzavcx{S5sG4YGlbVHxsP;3>$*Q*Z=8J6bj$4cw%s3S}vj>kAqc| z>BjWEVSc$I9;FllK-+-JVO*V-@wfeSX=zwxgzM#1KJ}PE?vNcBfXX0Cl+I88tWk>d zRQ1?u7+2pFtW0~#?us`&Yp**>HnhP19+uvgPUV?pxD9;EgOY|0=yZ6YR4#?^QN%;f1i+V?8zxSY8dIpQQ0RrjW=h0)eLkS-iz1LU3O#ns1c5hxz2 zr~3^=fVMGyfV+VZEzQ#%Kx*lCbZcIgM&-?vmRR#U2}ra`;yxfY=0aX5G;M5M_Jx4; z0xP01zcQe@xV2vi5=#vhiN??%AvY;Wp(Q&=roVZSe1B~Z)Ju@;8U^ww*kS*(p9RIi z+YQ`){QP-{7XB8zD-`*vt{%qC&7IW-KsDel-)t!i5W$wU zocn=I0GjytBaH4P^UlTPumd#65lWIJm4YIU^X0|SkuN)iS1#+pN&pFY3^zebQ()k0 z5c1RhdcivpWS9mLcx<)Tv}fO442@5!I<$MUcV@`E?hlG#Drm}`N1cBSf6bND(SM5y z4;dxfYLml5*l+!d3U;Hf>?))ZVbh;K7v-EIV_!r>Bt9sEo z@;b8bvr}---3}lYfYAa+I`25GcXzsJaC%F?;31Pfv2UP3jcV|MY!+40s!v+SCM)6i z^Rz?X3d=P*Zhcat-CO*5{4i`wW%`>TXTi~d5ZBfrN`1tD`0kd6dlzu5jpSkAMNKC_ z>@hcw-JsfiqRM^5p9t^I=hw72@>p6U^*$_&Ktq&;r5ZK!srPnV1j&9EEzPzgVsT#O zF!vq7!|sFb-U$Og%!qHM+L69<2LJE^U}_zeNQ!8%=!X--IMu~yIZQ* zf{%46%1Bw@Gjs1m@|pA}$BXLHMi1>NR=81q+|~T}R5aS9xb1!Jmq|`JxOKaTJTwxq_nIhbj5V`9cYo@DZRa;CJuIlwyj@w(p&AZ>>?b&E6>G@ebd(z zV-y#5!KW;yWuc{8wl)8`ty0~U@nsb3$svhjjNb6Pqygq_Q82_eJN&`c;dl>Xl^Y=j z78aW{qxngDTli$GFWV zF^A>Dd!vsBB&VZ2P9PRQm4FD zFhfq#bP~K$vv|)uWpyK)O-G`Tzusrr8@m+Sl%9wzda6_racMlH+QqG((^9F}MWjW8 z|3{=_;<3i(uLU0%=+~d2Qp^e&vLlpo57Koy%j5ZEx5cpA(?Y&jGJK$PYrIB{YBGw) zbR-ZimKu0bGyPdbl8c&7P05Lkq{kc^sUua5Ij}|JF2a}v_fp`)R4%GdNoV%=5LBLb z9obv_tSzRasGaJVPhd8WK+#}DTw~3gmRNze-|J}zJeHW;+iOV4n<4fpOxCkcP->N;^jDKSPMb;vXVXUS%w%HuJx7| z6HwcNc4^PlOKB%$rt8X(BTiNWu(0H$1^V&Rte*jI4()89zjKZ_&&sdxf(EF)Y#kt&c_of(Q6ssq|tU1h&(C~oi)QyGb{vJnNbQv*p6#{Y)6CqxMQ*? zM;Y-3k9Xq3Z~S@XAR-3mS`NdQ8s*!UCVq?L>CCD|?0$dB5B_;+AyX%FXi7cvCvI*) z!SV^_`}q3$zRR5yyEmfgh9$~oI;);ezsTYn{mzGH)|VQADL%ZN@OdY#_h1JiFmUVv z@@8GOM2rk+#azt3J$*jBkRz!0a6JB1o3cCSJfenfcb(V?sJlzodu@8vg;A@k;?`r6 zk}%X_iaOKS4G|Zn;8;foW<^0Y8sTAG`u$n)oL}fD3noJpY63Qk{jh#dzZEkp(kxxF zG|xuc7D(h9@uW{noN5>!{k+~RaecicTqT8NhH7+j5Wt=%$?m1mI2z95xg1Jy`TNS6 zdQ!Z?;h;PQ)H_!$2dzZu?k7sc4#Mk#E=+bYr6-Ct>>PNfRFeWWu`o4xn#8~&pGw0KJr$#+FiF@Eb9 zHEx8g+Jug=9Ccl}lS}Qczp7xf7cTht$x=?uN}Q49yQgI?3%^~YIRD6#muv4Rw`vv; zp375h4DXOMVWys*gQYAI;Ks||LF4l254xsmf4~S!A4&yOmA>bdM|>N%mp0m8{F<2K zR1Ql3m?{*>2>WK*B5V6ZUR9~fju1!C)~lLmz7ccS!oCZacG`3Z`~GKzW-_72hr^}b zen)p@r8|HDXmaqI`&OKzBf#{9_Y3Xf@hJWAC;eNCuj!~PV@_o2#S5lFCyLZVcut%4 zVh4=w`bK@~dOC3M5W?veHi5JIaSny6yQm==LzV|VrUIe|<~dKoNU*5p6FvA?AN9Dr zx@r+x+0Y{d_hbC5dCQne0_PRs*dq0zTFt!j4kf`n)djJ-ff+3W5kXFE z?nRLR;UHzQF5AzJu&!7wkwP`N= z{;E8q2TD!SaYK+l)p)}%lAH;)#S6|%y(6EpAlJIMcL4&`6`2~%qwY_Sn6sX29R|>j z90MBT3auKqmSsqqZhn1;D7gpz5iDUPbrnHCE%mPLQu!Q<@wkspUUFg?|?Vj(>sez^6ta zGb5+nzS$sT{IZ^^795g@Y2P;~KMgH5x#|Q+2fTdkJMeUM7YqcN#7E9HoKIN4X#%Sej-Ev8std7( zNt@C4epKn{Kc#J!IH=u;mNp7^Iw$_Jxx*t#j&`JgqXm|6Y{8*lRhD4~S!H13#+r(nD42dNzHX_)Jw8zuM~D~a^Wyorv8HRE2sR^IKCBd%qbixR_t3l z{Van64{4?VBKI3%4T@1YtRS2U7wfvBU|!vDgwSk{zycl&3D^glc1Ge>GfUJ8BfCzc zMz!s=JjFk@IG^y_s3YvUm1kPf=^~SgIz>EYt=l z8(`(Z2K=_B$FeTa|3VDeOAA`C@i5)rDS>1-R5(>TVuY+)cMC%mwHSDr6j>1hs1RNl zvP$h1hW;_;zFTteOTm9EF4j%&F!23>$J5ZVmX(340q_q|HX(;;{~OTi4lrAN5dSeJ z#{qBvU-*GqLOEi!>|?U0nks5#kedM%(H$KfF{df`1i^D@+F-e;?zBty>)ZN4*4Zzu zLKS^w>Di)HtjSI1CCt+{z_zPPy3@##);^4MTNlE5#euCizKH~A$lc*oxrf~@LnF&6 zzy3J=HE3FLWvNCI=Pv9x-BsK(12F+{fuCU>s9xX-oMfYNwK!##_!YioE&8wMA<4Ls zfFq{B=)H#nsgjvf;4|UcdZ3bPQDuYzO9Cn_2_(aTPFn+fPVLkiHplE2`EvQPNM?l3 z3zQ?$0#f0~E}iI&0acv;(s`<+4sE{zp@5C2`jKlb4ElPsw2aqCK`AJcjK#-^NiHw6 zJWUZ8lU%IdR0AZ-y6ET&6}A}G{O;oCfpzTe58tT`eLY65m4S3+r^MgZ%pR_R6nY)P zdV$_5OHB3>>XX%Lq#0YjzgCmUE5*4XxkOY+@zLMF-Y%<%X-smk?u6A7)(al@kt3JG zX#(Y=H+y>5Oxu3ru*%x+O;$Q-Kyjq|Z3`uDU3CW{Y6Ew8TCnJZEblb0rulyQi0^~w z)XL8-GV-~DopMul2Mih~1wD8%6UDbqz5Unt>SlGi%ydSH*G)ltF2snPd8dI4Ih(jm z$MC(6Kgm%;!i~w_QsTDnyLX5&A8|o-Mai4r&P6#sD%)W@5D!A2P=M?;ZRLT=p}cwa z8`W!@TzPQ=l5HpQ0XxGbvJ1xYS}{ykCMslI>ASz>)oi&e4=x){DGcgad9N&;+ttOWPONVAfDG zZjj9NB903+e6yp@XF)Ljt~(U|OK!gMh+k0WI8*{fF2({RRbX8-k(Tql_P5eh6Ty@z z<-+p*D|3YBs!E6}VvV4HBPYDf!T;t>mxchLXEJUS`xWE#;uPl37xIOIH-V_ve*US2 z{sGAZKpQ|94b$ElB$vv-N~ zR;I~BGXDHkVde>P16an;!adF$o_}Q36cP{?7FuT7(RT%iU!JY*d z+}+%>OMxT`lYrrEe9|7Ct7BgQxZNH&d(V86+q{>A78e%l?%AyAmBVDVvr20`%z-78 zL?Upx><3>sn4tv_q3v8z$Dv~G?S%ypWX#&BHjf9Rq3?Q_(@ZrEC8MZ}Lt9%|gv^Gazq8hCrLvp}W6mj4ygC4pEY(DbMZ zRysB=LXVKEle@uJ^HM+f>W*IyD>#rmRoWUmVf)=)uvKFEQ=|huctDd2Uo^! zb}AGs7r(ocS04QIe!6FP6ZL?X9I%KRzL6(0oR*!p*0&$3pwc^l@CBL`T<#+H_$l<|Eow+lv(}H4f-HPl1kl4%vtRK_qz1@ zCUu4;GzI@b@+}pIkjh3Y6Z315?kmBnN+zBOX&hf0Ju~z3Pcd_i93@+ev$hB~59?V^ zx0Piz{(!3kpt2jG9rm-UiA`F`ko3;^V}RnDG?J?<buslAcfgicWAn2oaRjw5d>PFYw@|b-nwl9KGe*K0ww;5i@w{3i7V_08bZMvz)d37XTKU5#Q-pJ?>)V07dKQ_i8@9Rwm z$GJyx2)h&an6nn>DIEwI0ei4yP@8ySXD*5@+`VBewl_(-V|?WB%c;)&vnLxq!+hx8 z`)R-@$Dqcicv+S_Yn@js>3Aj|QH!62J zsRa2WW&`jEfMov-k_7}+ZQPbbhERyZE_op5Eu@ z@v*F~lci5i6ItNY<;9_ZmF&%-ZI{#KOZ zU7@CKf3nWK28HCA^6=bH^*80#-a8%z#N~hok_EUAq_&7Q`k(3NREZf5`}k?L6%8mg ziB}DX;TP5YNj%)eaKYkp130v5~xz3Oy20--~Hjg0@GWdwsr zT479TjG7u?NQnM6EXsr)5Z$}4FHH_H+6>L}>aX@pv|J9w3>#O~*VmJH8^&Zl7AWh2 z@V~#IF{E(pi?h|x!x`qofD`~M00zDvO?hM6cjQSy5ZCtqr@m$f;Ra}&=zc(vKRom$ zV$$>SiJeep->HH)HJoPm6FHlRIXoM(I|sg9GcJei`&m%FwqzOD$sF!ZjmV=TL5};# z474W@QmLAPgg{`gdx7dN20~)1NpqCJ1V}Fecsy}ONWl}k7m3-Xe2`S_K5{M?zRh!P zuLMNJke%x0O2h5N80nM0;_F*>UO4w7}cz(zsV#Z4V{IT8U71H`L zx;F4U8Uze-)WZN=-hLvwa=j)ICDfcwNH*DSJhx~tC);VP*N4mRS5gzLvCDf{)J@`JlyUXvok^6m@F#r#SdQH?KD z3^{a(W?uTC65Z^Dt&6)ie0)9s@r`oW|7>r|U?8zSx1Us@KWH+JMZD8LV;lg^6OCCX zpTjFMi6erK#C5fGbVP{QkcckiV*v>#-_-vPA^fX=1K2)f{MHLUXMvNVj)vAGkNr0* z%GR1}Zlw@7xmpok;noqo^Af4>6khMM`LOO5-EEQj>uZzgum2aR@-B?~)LPVSekxhf z={pyhbl+=~h*KkI-6tp#C=6}{l>rR4LQ>8+9^HlcLZ%1iZ}4acgz zoadtEJ=eR4M)t~IvucK6pk+YK;=yRFc(J>@alOX=UHw`qlG?hsHtSMV(h;noM?4;M z-rxGruB7x}#qm9oFC_x*=*c^=ssD(P|Gj(&;s)Cd*U^!7zTJTBifBI#YV*(5pMK#M# zYId*(`fR6K0yNO;;D74tYglBS+hE@|eOp+f5U@PZ1J`##V0NHn=GnjEk|_Zz_UYxP ztE_5(=LifUyEZ~YfB$V8I4H?(8>ya8a8LuyWwN*Ey9N*&0xDTBsbMK)_VDh>4B%mg z46d3ynzqXdO~`YXgr)(@`WXEpd-=PDAZ}NUa&3`cz2{sMjU$=&j@o7ddrvz1!`*lF z^xU_o5|YjbX2Z#Synx=_VTR)b(qu5OZ4I;$Bgkxvf)0~D=;?Y`vSacW*y`_Rw~;8| zw^CiXdder6<}Y@Iu?A;OL#NlIYl>J}onO5~&S>iq5gHQw9_#EwTDtF6(s_RIXCnn$ zyRL-G?}|Tr5^}`Fv^#yhC%Gj@&kw7c^3Jtkg}~&Sz(DIFnelOyvK+Q%4b1#FyN9p4 zMNFS|dHQQ>{IzE{EOo_ty8!A@aTPPM{Z{UiZ%X4@n7e61#~e{S{59a3v8 zjiCt2fZG*$_#!_z$s~_o3HuhQC(!UqYizih=s?Y6sH9jVE z1>=Do0|Ck+j0rpYS7BBLGd{kvJB+YADX!TDi&fZ;O!{IC^Q4Gh(Hk$yr8hj{8o$-S zeAELr9*l18JrQe|&v8*@n);GUyL2D?yo;jb_%Gy4NnHiw4Zok?^@UkXh)?#O#h3$6 zN#{@q-?YcD#!WV?y8s`$MbZ~TL0^D@O4$}nx!<*L<23ZR9M%1`Zu-NEnn(HqqIY?J zHWX~BSC2XA6B+!^*QWGKXr$vhB}@QGh3pgE5{Y!e-AhHL@{|8k;_Y0m%O#UhND zlC}Wp{|p+>f1A7i3^4YOfC20ziTE565@O46lElHjPnlp)lKCU7bZar&&(E*tW|_fu z`~m>-%+IU0hCvr<7s&P{qg)n1hrdR*gFH4Av=Z5wjg|2#ZLZiYzRjE?rO)?c^|v7x zK*DxTbbhy02f)f)u@}A)_4S~gQ(t4vjT9?gZN5SdmKyo+XwV8QAu_*2YX4SvK4I*^ zznK7fw@2bo+c#laDu*0T2E~D$Ip4{->C}VVMj?49~G=UCa3&XYh0n} zdIx`JI&tvrR#PQ5_u8?94N`rd1i&%h+4UATFRO5)kVt3^&An~D8sOnYAVRq$o!iXg zkKRDI;-vFKU%zo#TQfN?S}aZ=#NzPLs_Axkoq~x{I9SgL*dA|VX!14~2g0z=`D-Ln zxKPW%V|j6^;WrgQV4WJW_%I!L(a2JNY(X zOSHAMfo4gN_uk&vYIA%=1AFhIaH7tqPOm)|>upQ?SYC|V?|$f5_uI^RUAhr*KUSwv z5u2wipE(zW{1C-}IoH8ts3*GG3W`O)Gh0^ob!y_~DL(oved2uGCSZNbvZ-0E;s=-r6B14(<(C*h+D-EiQ=b4@_tT9v_shdh{VXG}hJ5-1L>{Ca=}W zBt%!FN7Gnr%bBU}So8j^FYPdwPa~`WF$OdIwv-)Y_N8>&N#v2*v3V?rCZazSp}){vxC)VE@&Y7V(<$AEQs*z>`VhxslWb<1p@NY#Ya6O=~43X@35 z4;hil0Owa7l60R>IL2^fJsR-BB~-X=xgTBIUJ*yWR7O^o?IaG@<}&yrX`0kC3TlVd zJjBhF1SQ3it^NdJl92nw_~4nY#&OfJ%fq};{T0L8?II@FVQ38K^B@f;D6z2yBNQB* z*B9blY!%qtkhj@hoa4k7*uNE@iNfbmRcG=MCKMGy;Uo z3+`x)h(-4vgm6a>ab{dwSG;oB*;jMOjyQKcwKFnpJ@;*}fmq5jxIrZOBzh`dczUcX zHb|~?aPuk>82N}Dg?^>()1Db(W^DJ;SFDg-Q>bw}!g@>6(O#VU?L(5@S+-FS;HZ+1cA>X<4 zD3&P5zr`0KoBf#a=LI~%gbFYwukAnmxR)3K|E2DmH1dq?0;7$9@NiY$$)BOS!L--+ z<=~qgyPy6Yfajk{3h;V+Ns;w$Kq5^?U(2#FD5Ex?`h~W(c6k8xwo^i5fT(&|Z`YYf zkQ2opWHlzkN$k7ixBvC8LH0%(O9JheM*pDMeIO~NTLjZ~B0;-u>%(b$KK);nW)w6! zySjaLv}5>}VAfw%;&1oS?hfFus)m0&E4CYUA3^_sB_$Bxd(my!w$Ng>PK#r9Z_1qThSaH?dB$gQeN7Ibisy5oHn>5-xRZ z7Qf9W4`nL96gy-m8aWs>M@1isru3C03!9tMY}446x-(Rsw!JN$>yO){z!Z=#QXS)h zV_SBU*qet6YA|a{@2KpjBNB+N3R^iqOfQqKyq}&fGbrJ-H55ez>>G)9w}jR^V7=c* zx&o%``kCU1P4WHNyFd2DW)vhHm+)hL6)aU6gK%PC>y@?Mxe*AH9V((bU_NmR>`|U- zA+8Fq0DeUSNN@d<(CN$A*eMKMqF=*7l)`l=_GSu9CiFOvZXgvP5|?Hr9Py+%V(*Rs zU0O4*Tm4~(Gefe{2QpY-z#x;meQQO;6RC zc8PC}85v9bX2eP(-hay|84nw{3~FONSWw{oSM5CiR(bJ!-ZszdbwK@}`PYi$xp+eR z&X*GD=o^OSzKq&jwb0q?Vkn0#cW~XZ`o4J%CJ0z7$38bB4_fsmKiF9C+HG_whv^cO zqjg%;0K=@yytRMy9h{Zup4_6)$ns*ZT#c4SAVxH!DdVX;fLq#rhZ16YAgO&Pp)@L6 z>>P0xdAKTujqwsnhi8QP*-CZ5D0K73+A|~Oy~V7yQ0Yf(O5BW&+`zO+ttxelV|%cH z#QUyB09TW2n3oEkrNBd0y(D@aKm} z!4@A=qz$>(;o)63?L&y;^rWB#Q6*7QMChzYi z?*9)TV)1<1;<^A?TWtcY!r`yH(B1Ic7Yig*h>?vXH@iil|4p(Z=z0TPry$YF`dI{0 zH9(3!C6%VPe!aLCu(-NN4QiBSeBiJEQNt32(g#y(w9+HDr`GJSyJ`>4Wd$|8M{Lwi zXpeo71V}Nd;r9%r0%%(G41Na0kYN4|sW=EID;nL86=g{^ATbqg{rr-*JU!mVyPdPp zHYpI(xh@Ck8$8(<@blNx5m6sJNxwrysQ^hDaiLd54H4kp1hOIhD_5Sf8ZZLQ1#Pt; zLvsR&ni_XNSks?+6YujNs91i4(+U_@OLh6+Cib?e$1IVduG7K0jCr+Au z;cF8@ZlDMzO?@d_z3RRYH@3kXN=u&J01~k6X>R86MKXnk`2&(XmxNvZ7|n`tAhwpu=547%Pf={3mtm^3@s%6AkeAGW2~bb3(y=%T?&YzmJ=bn+^9~h>Drtl_wccGS!@udw}RTFoNu{h#@tjw&PZ0?(P6%^95Cl8 zUDsr}xj-tmdG6nyeo)Z_H>VCUeMw5Yia03|BitA@#=q}m3Aq{qmNZ|f%1cX2I_^1n-Nj;O zW3J;OKNJBTIN>+BE_P*ZtxZ29Cil&I_EVusajR8`oyKiUiJe9mnTo)6g1vv%0yg$x zD(IJ>CzO`lXPbjme&2O>vO<5c&h%wW_{MUlThK8Rx^4PZ-u$rSdGX_OV;rS-bJUD9 z^d3Q}4za6%;D)9Gc9=v^j3sJ(YEw4Rp92YSNNT>3S1%A=K$ukCR>)aJchZDKQDOpZ z+7RF{tPdu$#iT`Fbu@3JzE&8kD5<;WhhTQ-iOPRr{Jc5?*82GdAH&}md ze~^0HI{j4&FP{IX`y{n1>gwu(DAc;Hqg&^9(<_L^zdW2Ld{1Y6BX(^rW~X6e;CH#3 zC-c|F*MG}XT35n;(>oJD*L_n1Yu|25EglVmKOE>2R1P(9+H}GTKt1sDv)zT$QB?nCPx=lB%Xa1iyacaX^l)=!|L{N^DjA zMAxb-x8lblQT~Dz&^~Lvf3q9y@=3$CV1lzyOC<8sP03EJ&m7i$@1oO=MMA7P%H|N8Wb1Jq=#zjQp1!c zFIBIL25vjWICE;m!K-saWN*CPOndhXnV1<>NG4|1!|F792fbIX$?0&uEO9uL-O>g- z^mI~sZ!wZi+i=cUL2p$8N|Qy8W8ct;d?v{^Glb_5Avb-0)8T@0*bAp8X{HBoa<_hc{m}{YSqJ6l zM1`x@ZMf@-g>rr@9Rp)OcA98?sY|=Bx$HF-|68K*Z^;rE0#jeF09syO++x`C;3kJ6apR+g6g<@Q0h=>(^u;lU@s z#3M(*xB`3%A{fyJ_(+v&!pZ_gB$o)_7}D%QK!FJfAx%z8*tfY&o};OQfkvv!i%I~z z%xlv$S-7hv!SA^8`P(p{TbK7f?%GxdFdPG??>-B-A*6W?s`pIT=3k7mUD6AaqjTRu zN~f@>P*f3Oo*Nf-lXdQ!PtDh8{ev&*7q+QifP^x&v8qIxnXB-}YMsS*$$Ynv(y{M! zWE=z#tVo0Vb_QPf*OJq+x;J_H;mIKgFbw#wi0YS!hM<@tbD+Vz+ z@~<&iiL+>FoIpUBp7|#&?(r|53#10OJ?n4OjhhrJHML1(isBp@ zOY$Wic0y(YApLBe=sJl-E56pjD&LK^Vf0xyB>%>4x1{3qbENo)qLoku~%* ziYIy5bf##o{3qZmd;;%doKxhfEzey(K9U1!aJ?zWeac54R`DYOz~GDPvKd*+1b$*Zm7hh~wC={UbHbwiQixBy1OdG5jW+fzBOM(+=LTB~d`E6dyTLRCNkRLv4{`2_@d5Vv zHIf!4piHS`UxgD)3SFSfuSXsvbyRY5gta|l78ge$l~1bk(ET3X&kQ&ux5Y2nJ!Vq8 z+Xmrhfz)i$m0Tq?4}VshFnvYh2vDTo^$8M{>i1x2!VilXdm_F>4L?8}gKvNQIb!MNX_8H4lsUf1vb-H+e>{oeoF*MH}gWoFELKJVA@ zI*#XYhn}P(J_P56iHQmAHJn+t?zN>cVd!8E**Jb(WC5Q$JlGw8?Ze89GYQZ0p%3`G zK^h8xHX)eKF;$G$xWXRTRB`tKyk2LSyl!#{91Vj|`{YwP}8 zI|1RQhyuj_-0~lUN;SQ%044jp;A4oZLpIPXu5N2Y(8cTgY0|ap55?2NJ&H+~w9Qz_BDPp+6r* zHlBuo0laHr4<*?i;%D1qVcpr1nEAz`5p zK{Q}j7lXYy)BWa~)1n8a5A2^6LQCe$gzleRl;BPp0r&)xw?gqQ(8w@O9!R-6FFg9qYxW+B21^X${7uj_}zGP*T2Qj^P>E-d7@^pZF0d-mre z8^z5}bgy1fSVDUQTOL|PW50E8C}h&`jv6n1+2T$Ooaj}pEM`k&kou+TDmlyI9-f?4Nug#;|L;i4x6|R^p4nKI~Rh&OFTDllI~u+5eR` za^Q^IFT^viBGsw4H}{qGu$xE7TmAo2-^VYQ<=x_2mFI@?#s5$c9ZUvS<5M4%lHw}c zJEQ+M<1qhj>kkgMVADKfv6trv*zWD#8B?etsvfeYOkX~~S_?AuV0@z_OIkmHYhG2T z&GF1zH(>7mo6G|M-pGHCvH52tW;gfdrwEjv=s zKM2ctLoZPpyTrF%#HEnBP;_!bIz{1qXDl^iH+db{*mG1}7ql7xs`u5?v=X&83)=h- zL?KK}$U*adptr7)79Dh7;6lr->2JH^m+r+dHq?pzf}wLokUzzVx0%|}?$4Gv`_Rc$ zHSwiZ86eM(`>NaS*tNmL&w=88@G)fk?Sd6bT)*qx6jCubqQxGq-k0+{MM{`vO83Ra za?Z)*Da)*yCl(P?{XWPfHk18nsq>|IXE}&_jt|qt*6BKP8|;PzBHEW_kxq2`7i!%@V{1w7-!U*%emDp}ocCIT}INH~4V z<4KcP1=jRkUeM&MeUD?*cyM84qiPqy)wi1&W(w=AhLz$zoiMFrfFT}i<?G|RKHg8d7nnGTx*K`t#l7#=Ud7Zk!)l$&Sbutx-^iD}A54+Uxd(QB zG2!EzMU|*QX;{3g0J|PKRh&b~4RvmkUUf`66rESXbWNKVtbl`@Gi%2z)}~o(yskp8 zOsQ4MsN~(XGO6zMw!D{o%wIs7|u z?xKaA=}DKFc)O9a#&=C&t>RbMzAelX4?W(>OAI6T@ksCoc;}KQ@V=7xU9>QCfkXuJ z>U`|Lkk8TvQ^dBkEh)bI?x)z!gC^R@NWiNtPZ{|?-obb0*mfb8fZr)IGm~Nf`e<8i z$tnMj7`kK#>3<;b8tsGTG$83%2t)u5e$MYOw(~zR=6XOvUYhIzs#A%oH^Z`i@S@h}%*JUK|+mN|$k?HaJ<3KD$N9&=R5uc8WPoBXLp61xqb zL0L&7S|r4$ixPAD1+f~T?2oz0NaNna5N7Q|K_B4718jV`8Oxiu(BR`#RA0yP6M|U+ z8^sn~I=GS<(vFNv!$(a)lwonWZs^aGzaM}I0Te~H%2@&pGax_w3e06m_E=dU5;-nh z=~mPIN5?Yk~&3-RVFo zj&nU?t3W+nSLiX`ma-#T&R_z~E#K*7nZ--m^?~?~Ma%M)p6;2oO`eQyRI&D8c64lzyL1Oh?G$?43HP4H1S<@`lpSAHVHi&=rTN&U*}C|=4$RNGF_dQ+d$U5Q z!2nTKd50Y3eb@Wc$|W6H#ZoYtb7w6QetscyuX3c|-1QV)*b(^kQ((TC>6z)Qog*^W zf*NYYR|#HfFnjsm#+8%wX^W-DuO1S*qQjrvp3-xtEi*_XJi$jU8RMaFsarAhi;y-& z#~Q#di_-1wuD&*tl6FfH{J?I{oJ z%PLz`m5-RW+U2QxM1P+Wdzaf(ZgSkWnflbrUpiKjB1r>D^2K{E0ampQ7$C@6d2a$1 zABD|Z_+6k^#A9#tW4+8ZkVGyv4IV9;cd2vLfA>9T>P~^l#=@Y_i86YHz;TLc5m9GY zlfgw%b<6gM{*Y{RLzC_|2QSfQp$o$LsTdZ}p8@1$GCeX7z_sEzRU)t9MU%Xi{8DQg zVV_)5<`*KnUm5LM&j#oEv@lY`{j1J5);JpC^ zo)z#uPdQ>1%!Qqa&2KX9z3p;URNm0VX{2ZU*5Vh zeQ0+tu?vy1q@Wpi7{IE=YIoMb*6U8F!Cn@pd;P~ABQ7+Q3&Xyhe#z#eg;?rfNSQ}c zw!C#k1{^KMEeJCYnXpCWyG;7;yjKCxKol@23)JVM?u9Ia&_8@92Y&*@n(+{ioaVK* zx1O7q0klj3CTZCh-W?EweDN4SrmFU^Wj`VuW*}yzANPD#M8|Z#5SCr71*7?OG=Jv)RE&H!DoC6NKE+8`eVE#RN< zL*^u4js&s(46B^j_%;sEn=<=rz>=G=nAV_0Gar@T8HYck7q7jEr^iO@I}hyhmFYeD zAWxYofL!kp25dMsz^sh-&-o)qNqZ3dMCmaf>%sq_81%yhB*=|Db^%_r+iLls9stJ) zuHCR+Ps#Q;wCrvmo~&lx(B z%m=bo;4^#rJ^h`7Kz{HOe|dERs&N69FpmdIDc+gc;D3K;i98En${`iP)VGR5iM*6U z@Te{Ht<)!IX9tjH8Js%mOb#HsehZk-=KcL4(Xr&o-y~BNc=1(lL;FF?VfBu6i%F29 z=8!u*eN1Q6>?1QsYND@eHRnliw-{rW>R=v(su!Mm;#x|f$P%Te9$T{IAhd(6m|tv< z^)ysf#VXzGzOUvIe>bZRcWJoV<59wg8`Qx4aMJ#7>xX?t1g_pEBppZ62HIJIa*A5^ z1OljHX;S<7*+dQ@LReFd$sT#~sGIr0X3uA+3+s}o)glimxC;4Khw#mCCbTK0g}I4s zMVAU}2;w_cO*T;2F62@BPZ;1~r)XbJi>5l^*~TbY5xn85=h4O{+oQf5J>pX%qoqQH zh#SB2VzOqL$$n8$T&pkhMG@(l@H&>IXkpK6Eaa+Pft`xUTih?D66%pbp@4=<`QDfo ztl?VFM`aug5kP#UzauI?5gApEbGgEK*ho$A8RNCEA^!`VPiyBCn8b)|Qb7s8jD~D; zK(PAsUTtKAmmq;5ZsV87pp0sUbpb2tz^jMOVlUs&s#!_4f4PisvMuYGZ*hO1b-_$$ zGhy`xZ#`%{0dx=8j=y#%a*L7KTPduHpb`~YoN9*|e1U_FPsyHM5ByE;f)Xbs-9nZZ zqdsI1F6ZcevgAe-UrjPseKCR-H|e5~Y~~1S`d<6C&&ZiWJ)QsqWw5|(7V{k*eMW#! z3K0+1*|qBCTToB{=R;zP+#f7)CizmxMaOQ8<}6NijZ&TwKX~+^y|v_;ucxJ?J*_}I z0i0!JrqcP!?8_A57)2couIvu&lB1MzSM`O|obNY!OyX4;+jB!xGg0|xRi523zR`~A z_|v2Svp>V`l$?asyIVExSOP22Hah9qX4UhVYa-F!LqEZUboNi~{w(gDs{Xy`%LO)# z0^b9f2XaI3B*727B%rH>FZ(-2Lh=Z}f`GB`_hW$_mo1pkK%P`VwKrGD^e0%A43n?9 z+hkd?NQ?Dw8K@guPCjyO^)QpnGQ=uW)yk9j^P0rhBH-Jp)F@v=BildoxFYza(}XoX zeb$G?gps$vB@Dj*UtF_9|8Smx2-JxKa3-|dNCdum@i-~`Vez$M~zKtFWpu=rQ9EDP2Lot;AWqB6owAIzFLDy!Ps zjioaof1h`@DjQ@=>n+S@VBot&Leqh_$qCSNu?mpe4?>zukGH1I8aq^0==yEt!JHsq^*y#x)qZCZlFL& zT5jC8N!^sTWru!C6Y3!n>o>Ny8up1G;*~MBQQf5A=?WtAB~8zCNte0r_Fny+>gw2a zQzjgDs*Zb3s%*a2F}Qc+ioitq+;HflF3z;JLy>;%FqfG@EM<=gg4~v~JEPk_vFZ&0 zn@_f+8?_>>!lN!4_DolDev0hTPadz(GY@vX)0chA?u8js&kSJS)L(Wh%+5Z^aA7M^ z4_v;`pN}gN0{x`8(3^FJqw|mV9GLqhYV+eqJIs2?MluY|W$g0_$_Q6=`a;Qo0}|7u z%Ls%U`4pulE)3NzYO(MaUNA?j6G^(ZtKb;44hkSN5zif(Y~R)dGeeo`d!l@~VABymNySd~q0KQ!r=8w+ZZlLvf?WgOSshRbA}7?p%yuF1c)UpL;m)vgi#F zj^BR8>b-CJewNkQRxw`V+dQa#m{cJ0^Kb*q57>!;zd0(gFpd5f?lSL0e2sUmI6-6M zv3CP4@0QvQ5YwQKsQ{eh3pzYYj>c4j(xPQ>MgjV}C14vB{~{|4Ani8a<5=_SsBN|a zHo|!WsPZ7?%+pVuwD!}ecr(~@zTR^ULRp!+^v;1-wskE5>RJ-f64%j+cXQrg$A-Nl zHi>xE{sdTTkZA^I{Q1y&5Q83%QZ-+F*k9Jr8ZqB;K8muzw#MxyI*J|O(+WZMZAN#i z$$|Ggpif<~9ZGev1voD{kr#VNH)ALy{1?QFCko|1U`N61L&RMFcmCf%bLZLA5M7x% zzr{=4t;T=GRpRGVh?(Z`C5wV9#Eam+1eO1jJiFWROjLlJi!mrH=&Ph@S>|x@1oz2= zxLmf4H~F{F{pigUh_ZH>EJMR(b_$&rQv+3E#zPd;fiho@GJ zv8N!@I*=P+kbqrR#rvl%)Q7*WS zip%*WS}@sJNdj*Vh(i8Zcw{?Xq9y3SD?myM_$}Nj^@AJyN z+QtP$-OO?v1Z6R%RSy@&`NNEzDztl@9%nfu^eJ4G0XI%7e~G3DZawbd+p@s}U9#K^ z=;m8D2&ma976E#Wl7%}}?xwB`+v;#Ey{EFJyxJ-jE0EYYEtttrCoQiQ;lXe+D>qEf zq$f6M-w-@@Abt4MTgi&RM_iT@>AFAe>&kG`>AjABy}_>V-tu=-b=}x#iPxn*-7)VC ziR0XLuU>5OmIboz)1Pu4aUbR3AP2C2x~*6A%-6t)JB!r~rqfU(;Z>@iHeT&1)%$c3 z);JPHVj2tN+OG)r+;WwzG#Qn?$trM6emXs%w>oG8j>%OoANI#(jR*}Np$v|ZSn!%* zzhLm13!eSZzV}5=MZngoq0IF6z`W1kwKVx|yF~AShj*{&e6tH1TD@N4!Q^%9c|sVw%<-)#D1OfpL=fCo;JD z63Mg1byuYzQlOO39CBJ@3i?|t=iSjB>NEB$R{^1%=smwV&^4_*GB%d zc!a?Bj0)()%|8)(dc1IGfLFDKJ2YD3%Z0+R67QSo*ETcSa|oqHJhcNC!V<7bgf*H_P3Kf(TRWvb8w%o>z!Zq+*G{}n=iTb>c1L9RTnHccD z$V&c#k+_Xa^$eA;Dd;0uX8NC#!vEdTIl2!}XIz`UN|xu)UNYK71wz~O7P+qhQ7YRd zo9NW4Hsu9(fg}vrBO}2X1cKF3(?W#>AXVc8S))<_9}kR8;J!^Le@&U3Cc%3CC%B=l z)-mZtCN+3$)Y%V>{rPcSZ+j{Msea&y6t`V)1?Ze68Q;|uaf0|_=1DH*tt~Q$^5E7N zz*ztx=F((#@q4jS`%zmeqRz7Gv`{vbbXqrp;7jb}3$?~H)Pu$Hz88mFwoayPFsys- zI=C@ru=@_Of!7{Pkh{@2khqt>HM=Vv;UlV1W}YJ5WZnJeejjOUB#jOni1<{cK+wV`4%k+sdoVXUAhbKbj&#j8_|h$(wbibcw5t)=ZFBC=UD-I? zdDIm&MF69d(opY5Eb33-s%? z?ERB~#N<6#2G)cuko&H@!X`ZsHr~d;QN!Mhk{*j_ad-V@D`{gnnZNf%lp2oI5;6Q5 z!JV|s_7>oC8#K?f+S;+PhKq_wA~bbnmLIQVttF?%u(${~eJt#2DLUw>qdFRh3LoO8 zLw2UxWItJM4KHdJWid)yXd6hPah>|S?ZFZm?zxA8e5rSb=H{j!vL+wF@%L&JJ9b_0 zv)aQE57rsWSYTZ{EtyywvbF`hP6TUl6f9j3JAn<8x+ zfi@#{dDw@?g;Vqv051Vgq~0bTBxARK8qq7%#~!EG+DO;iQoDyI-S3I_68KuDXH}LG9ECM**4Y)JPupr06P0Jbiz=pZ^Z#bJ%ID zQ8e#tM7+Nbs6rO-{Q1R^G)w~JIXm0_Vc)=6w;oU-%F4!3yxDSwpf^fM`Vas_AYkZ= zCxlk@cis1YkF6ursAFdaZo8BG5)Y;*DnMs!cj*K)g&|&V_$k{1*#&}*9ecKI^dhQc zhDHR??sB*2L&(AzWA9wT%BIT52t>y>+Urg_WCG)u81QE=HY5TW7qpDd1Cx;(P(q+~!$RU2Ld0%AuUZK41LUIb-b4hACrlzyJlxs>!5WL-Q@>O8QW?SFubqu{(pH21}qowlnKlCuM_f}=O3;i6#KTq zhkyVC>W4Phrf&hcXsv9r%fX0r%_iX~u#s{$5ukvwkF@apj|`vxbTpp(4|sva z7>GvhLyzuRtbQ~5LsS0%v8lKx{I@#p z*8~tj1cw+($>83=>rX#AkE}h^$XvUt}I<7)Hu#wZb-Vx@?wa+q{r_2t+!m?Hy`!z2?%`-AQdXvA4q+3Lt1>@{Vv zIDw^f!A7&F+O4f|U-(VqX)83VRytcZ*-vql#Hx6(%$Izod5i*m6-`?LV}?dH5aEf1 zqeApIheoBgUt|g!FZbN?I|-9AYa4bEx=)@XVy*Vt?I$uI8gt=4N4L{y{~72p^k2YE zJoGBTm@g1yqtKY5*wLZP6uBdG!soE_sK7b56q z*3Q<2+VDUds}|N&+9w=rS^-&&>tjl`rv<~7D#~{O0htCtE9w}ontaflzRr5S22xIV z*WUA%4-Y@IdibnwTi>O4l>w(B zZmj?7Q6^y8hls~f;o>HO4Vgnee+`J0ZF}!XNaDU6ZBAu-C;h>9I$78}tE!02nj)bT ztZv!e`GJf0$SJBsy&7i5JC-b+AC;1ULEpfC?}S;pc<J&?lp5Sd^#$>j$&VNbb^~u`i_yh*N@lZCCo>6ePELfzVkc0P>hD#b zB%X`AXYAhRev$AFQ|QT6OXlol2ZdtQ%WG$|7$~rHJOs&8e_46Heij{Pfr)i(nYPBf2}Ef&PuHb4 z296)+Mrom=gBhh})ijz7Z{2MdrU^W1DPPh3VX$T_uLA9m-IbIR%T^WI{l}v7)kpr^ zoiKxjdoP*SZU4$oNg2g}8F2DLN=_HOI98n2l_VD$6B$j>6qs=8fNL8^BV*4Wi<--( zmg|F&c7-o}nH+oibqhKtRkijm{h>ICwzrH&+QS68KL6DX^V9C>VV*ISZU-v|kXnb^CX14Kbh80nO=LXjp>?VDqgYqHBf3DUj>IfP@LbXk_9D+|D8 zE4qMdXE)dj3Y>`vNT;7>I6F#Wo&h<0Cg0gMpLcUim}zqzc-@i`D=!9b zAOjYcKy4vZKnk|VU?GwRF{WupiRBp3P_Gy-rm3N!@wm3#EE^>6i0fiu&&x@Ok&pyB zbNv0UnrR?Is0-G`Ogs;^0GcX@FsM5_5YFU5_~c?sSdD>~%x65K@_tO({Yek|SU(v4 zrL#C(C}7LybOh);BvAJM>mhvr#QS#u01(rMo+@zr7`@I6Z0Ib`JVky4M84%2km9O5 z=P78rvRm_g1@QzMNzQCCC^5a5NL$O*T-Jh6yBusyu6YpNmg|D%w_y7bZeVFgx**0#4M># z7Tfo|dt|@AWne!U@pWLZ2BvhnYG_pNwv=sGmxibshAun(N{^Np`@NPcx*0x6v}F|D z=3KGr%SqR`#;s5;kEeW2XO9q)MlDdAL$uGl|VbB!AHgm6tE-kUfyp zMpaI;IQN>qg{;!;vl*huH1VoZnqD($la9{e4=_9uP2aL2@d@-)h zcNjCkwp{+(MP*1j&ap?^PiJx^aq&qdSI0oy&eN@iO^*Bw8H-;oKzug4KX5@vv7%hL zC1Nz{9-Azdo;_95v(L)qem|<@t+B;Q89gU%WAtfyey?M8OL_U!H?k-9z+g2@jeq>T zipejDX_+`oN%zIuG4Z1~6%IU=t7^gHkG?Oco^K?{cK?2^R6g5cN@p3`e%D5AiK{qWb|ohP(;g^wR%i`(ec8jJDnGs?4@zr zZ@5%3OXl<2e)-*CP0#~YnR1->JNZkWO#3vyz-oh<_r0;yh*#SvxC0D?2`nb!?d@Ht zxqVZQ*NYVhQ}|4oVi$;ES@I9soIwEDc>hnN-H9d`-m!ljD>1%`c)N_)KF(LR!tf)e zb!iDR1DogU5~Gqa#SH;)X5bruR9)y_*VsBeHd8ZsN-vD`Q~cy03A(d(lHzrdtp|}$ z3b)Sc3J6;4yVER$rF)`?*@!Me?tu5~J8+>%+xkh(u%4oQT?NJuw3*(~&&pk3Ic$3p zKwC*icb*{R=t};x$oP=Yvc)xkHR0$xu>HHN?Ih!7r~3IoPw(7Z_76_tk+06y=Z~x~=4jR-HlC zU;SFrv%wcw#FE>nF0k%AHS6`lv;Ny({tp|tq7>q}<2UeYh=Z|o+4>EgvA-+5!Sein zj!>~PaRmH^0V^ihzC)HD0D%qZbmLzk(9{04Syu==TOjshVPUavqswn(o{jq$K*R|pW#j!13j-9}sAJ~l zcdOJQXv8_ZBaef1^fh4O1TcXtA@d)1FL!xzNh@e@-Bft-W~JeL?uPS*+sNtwHVSax zL5EJzp#>@k2f+;Hop@VJXMZ|?+F$x@}iq}!MYzfv>PJstL z3Tm-_HMk(^Ah;Hv^djGzPRw-_P9Ck?mV1Eux>>;JM?l1Wg^+rojoqG37*7|4+m}?=J zL&`gY{v3>ZN>axtRw^J7BR1OFPGIiqK)FxfN--8&+<){MYu{hyG)n#MqfSO5zHyR zdUD=!*N7Kisf0G-R~o*3wZL=ivwW^_p2XT`1mgMWb0x_1go7OHDfoQJ6|Yv(Bm|t1-QE?)+&HA0VG^fh?iB_tS=IwvIJ+oH zg5{muEB*JnEc60`b?vhB;%g_O2#y_;A*KfNEOx#9GtpcV?2CLv)ALS?2aqrH%gj%9T3GG=OWj|3Lf~5bC>#WCTnRgpHXX_Egn#) zTDu|I1oIW0we()qNV{6g-N~o>^A&lww2O%cc>{ly#z8d5#IMOlfLs$4RJ=FaAAa1? ze!;HzSDpQMNQm)C^PX})Xcx0#sV+C-GuYc{`+`Z#dur&Q$8?`z@}vlCf?>e4KL&spu1#hG!Nnv z*xje+`x-@Eka7KOdns~#ve;U0UY{mTolz4psk9HrnJgfok1ct@0IQ!v&tB zbTA3BrGQTl=r_?5n=L!HAu;A&1NbzXfKr(4eMmetoJ4W21s0%8(4l6Kpp>Kz{CJ*5 z_zEbrZHl{IKaUL-$CnR|i;LksHCt@MfWnsAi!q8Sx|gDUsvfgiH&VMj#JvOvN`Z(v zkc!|E7`BbfRp3rU#4VJJv@I|UgBJm(gSH(x;`qvk)KkFcf(SUqr#_X47|H$+QDO^> zB>&?^AFyu9rZ6h4td#yIv<)|(ZL=sy=l?OGF2~cGllXoEbql<9k|}DLMYkgc1wa`b z3iNLuCf?QnH9z1ryi{DEeJoAuEhAZq-D5QDGZ=MZ(c;*;lDT-FUVKp81EvAXv?F~A zAA?xQBOOm0)N!AZjG*yk(Avy4n^!O}VdV5_lm^h9s>O5Lb4g_fEHNCEzOj$zeO}~^ zW#?^Z?BRnOuU0zA@!p3s2}yi5Rs}C1^A+= z)yaWgr9rr5#h~Gts>8q%0xtM{&mRd{SPO2CR976l2&N?*Z7bTn#cvLrK9a_^{_M!1 z9&Y1e=fwl4mm3gyU`_AaC=rHog!YF0+Z&n~8LdirHV=TY}%2f1|TL}ynR>`=Jd zVfaT@HYp0Z_DMLGMPYS?+mT-><3@C4Uc}*ig#>zDB@Yi8HoY@tKpVP+Gg+X(y>Vg# zofBqH4h-wN_2@?q12+qSU!j)f)NQr&zJT)N&-ekm#Ibn%qF?2nFY%~JFGi6_#tWEJ znPe-?fq)cvr$QD-i_&IJh)15`{qEl6!6%i;<+z^XlTS38M)9US$hAi685OPC?R+s$ z4)T`3cfFz}Q3jpt679`_zXzT%r|R?9e3#`(8c0C*N{J{<2NV}N{$dJ>+5gs%>Bhl? zDgpVC&S?kZIpX@|Y~}R#Q_PZ$CPlte?eWU_Kt`LsRCxaWW3Qr0#3n zV$7uCrt0LYcVmR}2vFw*E!t~yrwzD?W>1k?OEwDcGhx=5r>Bm3jOwVZo#g{s6-e!V!XJ0>^&rPNp`A54i3q{&md&!=3Dk=vTT z>RXi4`3p4mfb7xh^w*f~__n&LzN!k3qdI~^yxJ=XBomVA~IHHpN#DG12wNK{~_=72x{r*65%7pX`%B5C#SoFqQ50RNXn8ooNf@K@!=%7n7#Ps2khpn{gkoyaJr^muI7t zLaj}P#UE|f?At0fWYt0dVh1jQDTD~VfevYU$rrsTDR&{pAvYC%0)n37P4^MG5K|Sm z@xj#UtjWGM`1>rOA3$>>;E?}=g9A!U2^9%U8glP=L22k_Xn)y4Tj|;W#b#R9a#oLg zQyO5Iz6*1*auM}Hy%&xwga>an*U%-Y z@aQ7{Gk;XSwnwO~$$W~BP4d2%SE60RJsLksvzJ~DUBzCamL(n?y{vXH%7vRfKSVzB z0^$ONWkkfsFtIJW+ZIbFPhxn@lJf%qR}z+TO_Gn?i3-{ny%{?93#Ih^6VApGao@b7 zoo4unnSXDKsMWYBpwYff7kMDYk@>#y zbwr_($7~Y3eP`1&x51Z;QrI}&YGL{@LZ%M9P^J6@%}x_h)>Yn&+HRw|L9s~}D6Tde zpKRffSUAx8rdRRdn3mSqRgM(+;ZL;F(&AwMoCfd#FJNTk{HPB&-xh%nTau4*<@g=d zPfB){tOXcT@FqYz?GJz4Y>G6#vHVEzM&q{$Q>r+}gW8x1zYpZibebPz`1P1PQ&IR8q zUK!Wp7V#X^OBq{j04hjmQdQF8FFuc?S+ZHLJdun`q<`xpTr@TP(-LBRjutliQiqkzkWXZd=<8k%Hrw7hb|M|JJQ$*CBH+!z8`*7aaTpCx?F5(crsP|H^@Ik~ zU(4?@YcX3i#oi6I`-E94r77}tsEvp=SyiwvJoAJ6t8E5-9*kFHMn`8==!>XPC2dMu zn2QM{ws7F}Ig1y(q?ZKF*ldju+e|)U)|aigCC+?KKptB*4us^FQ#%_o!W++QDkQl^D8*Q zj$1G-23}LQ@}MJrjOQU$Qk8XFmC1N@HcBqI#bR}(G}^toJofE*y9f;MShOFnZ2Z#s zc5vr;A-fwBj;i*bYopo+GtJ3#Nv61x*pk?^5}?&?ZHT%O-qfii#GU3Z=p1et@R>=9 z-(tcl{ce?p1-CXg-J|m={)5NKPik*&n&o5)q1H1JGv{E_8Iw;>f}OKuQHAFW+J2Of-v&iG8=D(- zmTBu)nbcw^A}_L9zbdmiNvTG8(7GOWLuUCNHo*)2nTj-5c!*iv>gA-He|J1efbCo@ z{pCJRaKZ%dD(En}fTQ>x{C{7HB$=Yip&ks-^dCAWJ_$QM+Xj01G+BYTx0Sm(H4E z$ZOD!i=CfhE6&4XPVZ3WKpy~b>VEJJjuOMa!rZyQrld~Yt&Q8l+G!!k0ay1{y{*DX zsY_d|i;Ho=s?wo=Opzkp6E0{9_8mX8-5p$Ag$4C@T5UUseJbE3J*Kzy&Skm-7Nx=6wu0hApr6Jp}^ z(kGQr$8}BZEqxjA0|6*gTNHUpapY8sefLMMH3iu~H5Jd^>NL;gY7X9*rZ=3Agg%Sp zAMZ{#ljqhz@=#ojbJSq@{n5fdUb#z#FK(YKtKN4H`&qd}r@)Hf0W>!aTBC%Idkl^yIDd#P_xbSK%#(e#UvL)#*7QEABouI8t$W`!wx4u2yW2nSY zab(7?)*O+v5i_jZf+=n5mPhimH{X1$VqthaMxh|}IFd{EbJx^|$;X!mZiYIU7P%N3 zYp{fMiFxo``Te)~rs~2QyeiyKv7-z&d?c#@HV@dE4SGVS*QuUtm6rz>I%}ZCKMaZ& zJGWi_9K<LX8awW8tE?m0 zNsjzNC6=w2H-wcwSsq7anc|bZvi?Ntm2!mqU2GYQ;0o7C{%z~^Um=mJlc#YTL`L1} zi}UJwB0|Qe6de&xnL=1gU!$vYtzhuPy8)>cY1=t)5Vqrwc28lC7(UcnOu39f4x1`N0ZCD^w!kZdPbz; zJ(1u_ErmWGp57!yj+_Sfe_gMDw;CQ1JJ#+F-XdhT~S6u`xe_m6o$0Pi#8CQp6 zQ}-_^E5j){YCPHkCI5T6X-_}90~+sNac_yf?tZ&xpFz_aN4W6A!sfj1EQozxPE=jf ziHo{p=H5=obeAr9c7Kjg%H5}PIM!ohsY-ml>&4)|tE?W?^NffZ@L#fF^q5WAX&hRa zDi{KB0)JI$P^CRqZe-HHy-$W}Cobeyqs|Se5j06}0Q(gfq(Gtf%(BGVmbDVp3xUCV zV`)KLvqEYK0j``X;=*Mzja%qgut)U+V!cKx<4D7^;j_?H516xnMxMXjK?Km3;M&Of zG3CtK!Y81;^A~xZTd>@mEWUrQ@*-43hW^mbF&{+?dY>FUO?-KQ8w*ku>Pbgy%@hGG z@f0rB%8QmE;>wow3c>ZHXaWa-lo#5Mp9-b=u(j3&0BwMGxp$hzsQg8gXI$?`Pr|4) zI8qvj3=M!gd6Yl7&= z%j2T=(z-2GfuM0CUpD#FPQjzI_bA3Mb`$I?Xxg#0dGCU@*E_3y5by`ArYqvv|$Xnt|?V3>^ z)kX*zehY0e8cG$88e-|s@-3@-E#Y$0%7Qns0pVBml64WC@%9_Xitie^@ps|}pBG!2 zRje#hbjgh!BrD24z2R>rKa5HgFIZfm4aSt>iXWmYHyHJToNh8D4~2R(e(8-Z6O+p? zY_D)ZtSc|2U5L&`fXk(MK)4A}b|W@c$ci;tXW zV}1#9Ms;KU%tpp!S93E+9sJCD41JDYJ}V&OCiiRh1*)u18Axq|uRG?dAF%2hhyi;$ zBMp1K`|lhcCEkzgvX;diTIv$WSIZrT${7sdeR*7#nxWj#ooy@`oq+DT@Z-n!|L#VrcPai7C5vrlYRzv|0bJAA0T$ zO{HUfC#Esp(@(f*wb+Lho01x70#8RcB`()7O6}xn`sOKk@#Lqmn?xgN`fPT{X`2iEAwH_}B$pLLd7K>SsM}NTfWRIJJXbU@K zFJYSePsEr_j^mW4owMr30G)_7sf<){Q>!0D|9R;Dv10i05_!PWIxP-+yB^q~w;D?W z65z>t0!Nz5(&%#CStVPzmgnI!UM> z81s?G?ty#8Bt}N8oJ4M#&y_me`LX@aMq@tr_ez&eJMgDc-w9k{ReoWKtAxFh+4|;D zpP(p?QD4o2sD%QzyA~ez5If#58H634xpM+P6Zt0NE|ePD<y28>AxuXvgd&I41D=c!1I*MU3|f75S09>OyeK~x8YR!TsgQu=12ZKMY^%=LqfND z+&W~B4yvU5MA%alR<4(QH&jfG&fpyz6mSI&qMC8_D^hBtgRi80S$%yy2n+%n7sS6v zCLBLb(5b$N&YpSM^BEDkPP1Qh`iIpVP}@9IJv@*G4p7MqBhO!?E&NP3H1gs4KLBe^ za(yS?EECHV2XQX=m{$_~eU2@A%(K{?Ly*0ZoAeC;6;iKiGR_34`)aD+s#id{X!Cka zXuge?AL@yq$3q+EZ*&ZBvLzdEO+bUDR@m5Di+4S;aeFdIQd(vjFTTal?LJ4}5&uw> zL;LdB6F~E`DoebEevn^6+xW59I7Htzhw~hOtk+>ZNtF%@^c!{^AA0$8HvZH{ZJyXR zNwC^N`ETI1ShnW4%HeR4@7I$zc6RsE}NL7Fy|}?TGS|{6TPvlnp~Gq<(ryI zG0_35MCta2wy2Y7h`XTYkcER-@WZqio{F47ea}eljtvc2!(5XXp}n>bacVB%kEP;HfDdh>YE6v z(^PS^X%%Z@vAx}&n~hBubGo!OOG{g z7f;|N=vHnVe9oeKqsWP);;x7U~ zo2X(tu9ee&Z3RNU;|u#h8X}H;S_^uV=*>0qsD8sfdbr5Nv|*u-Vr?x{no;cK4x}H1+f;_d zdvd$(;G@qDSZ4L|eF9;tr5+gIB&0za&d#2VqGGE%BBUw4-+d@irvP_Z_uzTFfSN4h zaPCLxcDl-Pr>r1Z2M5V+0$x_NEPKIln0d|UK+*H;t@H>;V1wtm_IL`k^<=U?k~&x* zNGP+CI74}7rs#@r-;*5fUrX<)wY20GPTjhD)tx#2OO1UkK^IZm`U|kWb|>Jx3`u&0 zYV*Z`gV$GoI9|W;R~wT&4^5U^)s0-XM2W*4c4#Dz_@-%8M3`VW7_Q!e8EfCpCm0M> zX+`-kVhd-QeIL%(|5xCz#4SaOE(|0?gx!=di~y}1>4%e0dkk@iR`G1+rVMOhNY z5>leVjBPA4wwmHbQX%^iLdH_IVQk5keJ9M=*BQn-b~Ddsh&s=?&vVZ8d(OG8=enN$ z==#prclmrj%lq?QUoXy<>AA?((Tt#ju6r6FWGfGh&hjAps`Q~@%8G+}_qyB$m`#1m zb?Zbvgp0V&o%~`K;zBA*UYV~6&6>2wR2cT6p>o@GpvFi6vacR zS}ZMPf=mc}>Q!j7ZO*Yeh~eXWk)IUkd49(}#H7k3stQx((VxIO&+H1nR*1X)EHO*d zJp=?-3YXf0L8PVU$1i9LY#oS1^MyHLjAdIA&Dsh)`VC>W+4z{gPshR{Rvy+C&1UyG zmtWhq<>9NIQau?r*L0adfBXZ;y17!xvgESP4a1_I%W?# zRtA1BrbapoF>~L2lSUn@s!qEkbg6QpKB$4nb^aVE$iF^WAb)**Ope>gmjK@#V4X>C z*Wd*3x^*_EWF!FBt^5sW>ulcOH+A{^$nED3xO1$h`29bSBKGecwriven@qTv;o9G5 z8s(1O0)_IeflvI1Lx6M+kL>i>z^rQmI)3jWI>hp7Mjgp6jSJnD=1K9aR-k-jR!`=k+vOh_nTPS9`3thy?^Q>5CnjU3-WaTzBySL{ypcj`%B+yV=CQY_&_y68sn;!yhym!D=hCb1rW%Bjj*cJi-Jdq=Ld zf79iKeFdxz%+S)JACVkO@w!*{`7~kM`*EWdx$Ey-srX|5f74EE8%= z8$KmA!13!oz-kgrZmTgP&NMX9?#@(xOfke`nn9O}_d@OvmMg@hd7g6L5vteRu%q1GN2>h9 zd*AYlFc0Yc@9T+d(^jfyZ^qZLO>=Dy7zi1UnU2TpLb&m-qh)>fgN}tNj=xt?UWF2xk!usk3sG9;Q zQNMs+fQbo`UI1i3B25V-fx%pz+Lx}2TxtgJuTt=3+g|hJRkQx6pQ|w3bqlHAN`?yNkl1KEICHNb01k z9AkY~1_>XYMhK%hP}7t}_8bGTl1>19%WzrNvJ8s?ZVofRmjx8V^mLHpzDFKV7OJK2 z8tUoo_#GG*aI?*WxJ@#X{A?W;ew<2W|2+w;rluxXw_PA6%=m#0W3_j=w_7nQV(9o% z>M)GlS~4cGSb>8f&vX2y&u(Vgcxrq*_F5hA7@E;r9HbxR9FP)HO?e?$mfvm_y(d5K z!?TjRr0-Kh9Zi(1B~>_+ypYKY?CFUax0|;dt>4U`NvMHGIx*yMo*IB94?$+$PVRp`X`m+g)=x^=yPY2YnBIhaz5 z)P`u+mTg6EGTD|wy~K>palM+DD8!eRybCAoDZGWQEB??b=;J^k&8^7(#7D4;;#eO{ z#xw;~&>WHy=98YM_!?wMeD`gj-HD#|8A9ui3cc5sIVUs2=2^QRix3UmCa5P(bs_Ds zP?4RCo5*J?>q_J%h5zud@j5d z8RcALMC1V-5x!>IouWG|8mcmga6Db-c4%qH+}cqheqC`~eGoGk7y z{70DcXoRM7vu#EQ!jn^Ne=Fbfm@=Gg>y=IOM^%`i^5~xEnO~85I2uWRxIw`{28BKhTF4krVe|Rak(ffGA=P z%buEGvqDYA%!;o_WXL1#i`jCAvst5os~gL__vm3Fi}-)nsgPYHOIim( zeOjs2W%dM1gYAer_@4gLkw>xLWy3I|L&}8@m>tRfcbp!~0U##i*WgSGvCsjK)qR+F zp|;2U4v75y(@}`Lb+IvKxWS43xF9{tpgAU{&h~h4ixYBLyY#{C=tBHzi{htz%|w|~ z2=1-mJH@ZT##E*in%-$7oP!E}%vA9)FeC{!UkV^HDL>(Z4HtKG{9Mr|1CN zl6Ol0{(IlD*DJ%K84Zc!QWo|?2=0^M?K&sZ2JtKMzreg#)7 ze%Vq1?(m_jBngH}W!C;#(z0#y9)ZLN&AeBfW7b+LNw;i1JX+Iwcxn8-fnrcC z!5DYRbhmbUf|xM*6C9F1{Zyz!Z*VKT?nG*y=CTqQDR%!$>b0FF#Txsb@Ew2Uv<2ft zv*}2Iikut}nR2OpsNAXEVQg}^g(Cw7c*;N-!sYJHrOc(sc%0Ofy`l0g-(mKAZH@8E z3aG4B6Q9ASLCp^sU9USw!f2f>-Lo0&8C?0F$Z~V`NrcGK_CUR-ewvD|`AyOKZD=z@ zDXa%hzU=vIdbjq0`9x%0L>6z&#QkxJ2`uzF2g2>KOb(4fA7{`@@21kpIeu+=Lv@B> ztD$@=a=K`N?J1cF{Vg@-$&2m67Eg$k6xe%8rs#9n{V&=AO=wL=;U{U%hg1(-Jl4?3 z#h&(*&~+<0;WjZ?dw>30kj=m)rX*#XeTD%U4erl?CUC^&$GNq0EEyck&4J}A=KsT=yE-Ae`D8%aM{A22 z-@OR^A0Y@tQJR|J!g6PNC=4m%F!_~dr<*(*>}J0j$+EwUI`nb|8Rj}lLAnesRGg;I zwsfyH3Kq)0-%oqVpg|ebmh|rSpory>{@nqwHFsFAYyq9Rs{%s4N9)UN3aoRX)EO*G zr<%MydE@M&r0kNfUSMrEbARM@O930xm7Opi9v*W8iTN>4VYGr5k5L4A+{QG1Vr7Uy z=d*dkBC!>qo7%uYXk>!;u_vCM8s`>Bj+y!d^VBhR3*4arcMRa@q6jiEi()@cuy?Fe`9c{iO2E0_h_ zcpJ|Jx7W-k)q@OrqnU4u2GUNgFI^%`O)W?hYAQqS56za16s5A{U2ROvR(pEB0-B%m z>(>`9)*uZS74!L*Y%{(H|8c5QQhD|QJ1lRqcA#H1CA65mek<5qj}UsvnY#fJC_E2b zXNBCOY%;TGuA7wnD%Z1G3TOkW!WJQ$*BVj!u6Mggf9e7x=7l+J8DHMf;1w_{eCCp= zkCsPBLmX76f2Dy=K7pK&%ZdwK5#_N3K#^s)0yCfyl8*YLA0CO}#g^v+>+GD{WJAA= z6L+O`ge$K!B5A5y{ZN*zWJ&lZ_Ez|Oh;;9jcVXcXeX6}t@?h-f6kodls6<6;>wCD{ zYbixio!_>rk+q#|+iUaVw!@k=9Gi*^ao2AhqT06;IdZFQ=kQVUATZ5CMagT< z@-Bbmh=5(i1BC$S30;f`^@ssm8M8L$B#u%}g!X`=JSt@2q30qP-fV|QRlhnPk07D@ zS8f>`lIYN;k#4!*%NdYp0a*5G`gNRqv`3yi`c8Bzr&rkuA$E7~1T@M9e58b}{BFki z5dWF@R62EWw0(Jg;@2q2@%K0@_081KOkJmX>uOlpM*buo^+5oFlOyK~U3<-tQll-$ z8~vCHqnL1bzu~r*wcwk;1l+D^FD4w>FG`Yrk!hG`VH{4#aeL#+$@}jpltp^*gNvFhZaE0eu0(moQOo#-k*&G7^|~dE0yDMf->s9v5UR+0a&lwz4F!GNs~+A_$8z zc(%bxC1y#s4cixY$avwMa9R#^n#ybohK_SFy^^~6~kXRRP>(=%_^4FF8Twe~cVABZ1@;j!Kn945b>4Y6kj z;tf0E&*LSK)Ro#w>PiFkgdyfy5#+&|x@`1Gcr9{U9fncw<7ezm3Al5{m1yK#?Y@t^#^Y8zH)C^>t@Rl*+dG5_oltR41z+M?lM{HH8^!UrmiTfwpz zxB{7zoSnkHnzb$WTjFyl1Nl752CGN0!ror%s-R~Cxj^{xBPF4xk5FDd;)QGLr;WfP zI8llDE2`!l!a3<%-sD}Cd_vUeoa+jNQ&XWh`WMyQ^iK<%fqUbyhiXQnGW}5_^>#%Y zBM>A<;9scY&xW%oKB?XQg;B>EY=^e}&ES!`?xm;-hMDt!*^dFsJ~ZEN~E{?EV9h(4r35eSdbn zJPNC#US0zU&ggib0<9!XhamjlWQ;`4=o+@m4!A!^i0$kAXb7!(<+mc{Kg=$zLePr8 zJX5@VV^JMSgWfdW9BKr&(LWvE_CPpHHP0lDyrB<6k+N7Q7tk7jEE}za;E~;0gYG*| zMvfW4HU)?6AUjL@`eMmujoP-h7K_^%uv@`P&H4g1=iHhAcoHZa=zbJ+)dAQ(BLkTS0R#$rOrLMH_afMqL) zvuuojXdAnt`sStld)(=3zJPB#n;?GeP6c@9bBj6wG#^e=3k3m^n$Fw6dvQ&_E^34< zMH`t~Bt9EW>9sASs@6i zkodr}PcVa2-gJRZq*V?Uy0m-k))`@XTNZQu2f`UeI5`h){TS5C8tS=Ev5(pg^i|BM zJetbHSw2!Q_zqd5&T5qwdlEDiF=E*fMp=r3w|5C=^Z&6X=ZCzzN2?*Ov!rwbh{V{5 zKfbGeB^`^nr#Im3xc-3iqV7bs7K6gdLe4mo$BS&RS?Kx(F# zK7kSIUDwxqQ7-@45>AArY9pqfeVOp#PsE7q+K^W7Aw?li4hCqzyE1ynUU`!*I~jx5D0vBa`^n3L;k-{b=56)WRH*GmQT(H6k*SPhaJrq^9j9=CuyF+Y%l`BRV+FMtj3ACBb^N0t9mVJu-=Ofl68 z;JwM1>H9QnRUExO1@&`!0h)}`?h6M1p`68Qp3A@vSYJmhY3uUxzgH>Pd|FTn(bCfL zepeZbd=Fsk+;CRPgY!|9kckecl0%!py1WOAT}`1JbMW%0slyHXpL@W6AQ(W9>K_Hh zPDDZ#bI-r`2q^c4s1pq{?Z6bU+LT(-w!pn~`fR0+guvh4kDO7$mD|zN%Q!!E%yN%= z%unI+3Fv-1}YvA!qbUy#(U6G~Q$%T2M8Ck<&~?#$yP`!|}jXxd$nSP-dVZ9W(V$M!{6 z;Xb`moL0vPIv6aWSe2=w9|M{*PIt!9H1P52cg}7%Ta^22FlOs8fxlfrE0Ct9P@xj8 zp)n}{Yqp@`Pp2mbXD!=QZA`Kt*POKE-}die*@X|_C4B+#)SwX4-3oH{UQd8Aqp;ts zdYbK(wKs)*JT`hMH+Rw=-s?`Nfl5)cZWKdqtgBs3jA6)}#Yd-rmUv*`xO2AgDMrR# z6t4OB{v;rns#6!S03|x>bFvsDU1?kJWh1_;mW3xLDrI@4)KY^nUC}OA%wfOlaXKOjWjPtNOj3e%86o;g%1+%7Ok4#WRI+=SsLmUD5u{q7w#e!+U z{_H}e7nEz)hG;+3C4I6Hz`w1FFc2NR@K48afG(FLm095Ud{#Cd-{mqNA6WAiYqGg^ zffE^TbOqSTbv)vaK{hPd%$fqAEXM0{{a@eB{?B_O5E_63o9XUVo35aue&6i?lp%AI zD_50~TZ%;Ht-fl+{?hK{VUw?^AFhqE!p?19YbzESb{oc91JlYYD~L^ZT|EH1w!RO~ zeuWSQq(cJJ3MHm6ye{`(Nn_;T9}KBXM0@yvcNGM2MQL438|cGq^&B5w$5~^$r?W5a zuHnn>1umvFYX<9=2DO80D%1)e0gxc;Czr!{rza%MC}6N_ zW7mf!-SL+mcED1TAZ<-kns%*ORfwP;lGdi$y!D6%>C>H(tu+^ER!Nc?rJqIj?{Hc% zuAQq%dAX@bqbJyN@9CD_DYe6<1SFzOaPKslr_37!+U;`jxlS*leML=3Zd8|XPi5Gg zoo037bWhxupsO|I$kXhc8*`<}6{c-}C#^5&yhIy>5D!0ZW|r}q9C;2sUK`ZIdPov(bm;e3M$q2=t8cjU7NVyd94X+L+DUa){5J zBpWAA#${RWHUkQ~$e4i(BOdW}I{w1ppz6j@m8W5|;@3LL83%l=u)58iSxs!4bKD;~ zwhOJ92~A5(mONPZtj4pj>Fy2RhluN=knoG7MdSGKxQ~dd$U*@{356DIGf+m$ph2=D1N83zxz5Itx*1l6}}WQ zy*|0G5sEUTfNzDAV|4%56d=9Hn>=4=d(#kU+Koulo3^MTDTPuZI6DdZ6L@aGPBF4n zJG#gxJB2oNh!VmF2hS(!pVBjz0utJ3*A(PZM}{(R%8jrOXiNszDm}&L)jnIyn4U%_ z$3`D~x5wJBzRl9xD$$*o655UE8~>u6w2DV(K+|C6fw@AW8(n^#E`4%U9u1AZS(@Xj zj}JNa8d|n4xsEe*Y{3*!s(@&co_1Ij|5!IquMy;gxweuVS?=Gk7ep+zp=>%@PCaq9 z$7i07dUSstAF0>l-n+inez(FpOMZ8)4sD)~me=y1S-u(P-)4KO$~oj7FE#5ult@p( zSQcBZ_m*+?vvUVFmK}&5{AN=AItJ1dFllGqzvA?HwcwW|6NIsRUkfT0ia(of4P+X%GgUp&sYE@rAnQdQIvJxr{4Ru&)ZqjB+y z{9wCb_=0rc!Hs@ug2HZ_BtFnBg*!d~vA2TkfycMRPyKBt|F$vc2G{0Q`(Yyl$JqEr zgIzJN``zW%x1-r&rUfBJJKXeR-dIeFIM;qTr=z}IM{hU&pc&=5$apSJD>6DnFTlCs zY%r*3w7t^arO4HC^l5RW9CG z=1$B>Z%s@pO1|3vw$ei~eJEJzB8UAOrxij)Xld!@uAssg!@Js`;m)!`O=LpRr_Wjh zd#uDs`)JI2uk1>7qFNXobMRv6(bv$#Q<0ENwe`#~Y1ZdBh!>)MyBfrJ)_r^b@gF=u z=mJq>nT;ObG`3k;I@abHOO!P8HUAesf!`h!1>lX2f=C5Ob6E4`1D%Jyx~z9ltPQ66 zM$XuV@QioOdk(yu`IvbS(s!6hKaua#h$WyeaO{o}UHj575bP5A&yPOflE!NJYJkGg zD#*1AQrk#CobeY!bogu2zo_fx;+?CXw1)?k(pvJ(i`$!R6A(ME&Eqfkoa5E&#M`y` zf|wyw8x}`=_Cg-RMys0+oq1tIi>%&mk#HmsKL?_IILK{aPNuUdJZ zg{t|!C%LKXIeI6?i$1$2jy~u^)j9$S+H8TMUp60KNMB*(Ee&`VI#35_VvAL6uC(e~ z6ZDFz!ikos!IDIpqgP*OGKi^PSw&T}qKGa>?~t_n*=KB4QSt?ntMZKoqP-v4*Bg=N zqzF>u16=c$V&T~Leu?UOcJjJ4v|vmQ16XTspV6wLqQ4|V8+FFVaYo@sgk%9c%U0N* z1G9B57+RUBkjU}^J~gasa(jKFdawJm^hpxp{1JgA+=z1Cj;*O*@}aMgEBWW7*Y3J1 zn(xXLp4_t4*)(O1NNc(3S ziXgyY<^~cy)F24JTF>lzx2KlHpP#SaA49Zsp^O3V`5U=`+1Ac%RtXS<7X{%mCkA(EQ$&$*HZqv|NMUexd&{$ literal 49838 zcmb?@2UJsAx2_5j6fr2MUIqR1idpQboFSr1v7y zr1#zudJVn5wRiB`bN>6^JN`G`8w1bDPWE1V?X_n4<~QfuZy(&hO?~+E;eGq|QQwid zsjzR~0q_}-LwNvvQ}xB92mEipmBMYweaZD_C%^%@p2R(gef!e9skU?ug5yKxGHO=) z_8l#U{_U?ci__h=uT1LBO$jAT_ssUD)tQdaIfwAwdU0K68RZx@n=tebJ3~E7^w|d9 z_7A*SEd4?YNr`7YZ>NpCr4^CoD5pL1Oe5VihU13st#{;&QCApzIb?WjcyCBWFc`>u zu+C6EzPWBInCFmGG${Gf%XEG_UYYg#A-*7)&CSV774045CmKo0LxkNy_VeyE2axVG zl7p_`8#MTL#}Bu>yxi8-Mj#L<-ZsqiWD_*DdOPX3KDk`6xjOg5?3m;)F9fT}SP`1NVs`mr1A4pK&TiVt zv)#eLba&OoVQHP=*<`coDMm5JDwH%O11&15g`3xo*j9axZexE>@NJieqP%i~uV{FV zqPMW?0oJF-uN_G!G@r-u#){vjl$6QB<~Xd*RvRv`Y!*qWF+SZ~cV$#M`GWrW1$SM4 z+-+}^vV22Lj?h7;@tKZr(Ti3>(}wOocZsQ(nHolK!UnseG`5^$EIT>%Xwgnme_2@Y zk*?~fqYh`7n4h7m8gF-fp0InwI>09wBsAsHaX2?l+baZN#+%6a+v8qM+nIJtn@zdb z0S3jLd`555QHln2k{0*0hcg;i2QveYZtL$Pmi9|iR?{Qd+1U~Dg#&sEb#1?;)9`c_ zn}``zXOna1kh3Q@mPJzqj6^hysG}2m~?z(Sr zi_6`~)v+6FMeP=L`QN`^vWb%tc1yb5B^m3Xf!ivbdCZRY5A4#!?X!^@kw|9uV{hmh zqGVDVmiQ&AyA&BdED{mWU9#q@b&bW(fZ1)P1bQqv53J(UV;pRODIV<8P|@4gu_Squ#~qNtjMz(w_}S# z0}iiHy+X$+w#V?Se!VM^z=!}+OA#nshjzHt&X9H}{9sf^J3Ze{eP_oz~yJN)c z1~an%mxv3Mo1D9kNsZg%jJC>q0T=W24(sWBkd-SB3ZCv#rNK6w=-Gqd|Qfw#j+Bp}skTNM_+*eU8M&D5zF`lBdBf zD$RNkW21n2DrLc#T4=duf#sOm*bo+BVA4H{@sYX3dtdc1iwnzG&jW&BlQVYhZ6rbd zq@k53E7;O^2o^cHdqSra>)Qi=nA)DQi}^m&TRgU4S8Imq^3S6FRJo(%N$gsrvYYMI z8Mxr?$%4F(UsJ8GGLGWNznro)xT-yyq9xb!rkan;+yAn=F%_!$OLk0vJ1)NVYy>SZ zQzc|f?j>Z9wffIK`k11tI4|I(k7b+o4ac0;{E?nsR+xW?X{5o8P9%3MuJ_4(Q{L5~ z);UF+vHZZ5?ahHA-repYLB&jEpt@HFl-uG$QaW%Ei9VnwR6eJB>qF!I%`@$s3(mt7FA^0 zf1OWpQ0H5@VZ+Ss&Yh7fl3+LL%1OKQpas_x*0)>uWxWAwe3pqh0bO-veY$t4CEPLa zmDtkdi#9xg<;h^XnUUI>g+$wlOS0=H`LX8{(AM6CUNpYfQ260D>DNB_vf>C$u`#~t^l{t!&Uo7Pb-Z_e=_P4V=klx@<0D5! z7`C##E-4d$@v-n$(j2Fu*H)l%x{b12@bN4vRCZkdRW~(l?(V~}@F4VREyD(DP%Y;P z^_?|evm4|mB#vB;A{%N@h?f_d8uC} z=JBF4#@<)&_|Fj>nV)0x$w~*0Gr1qBk*bM_XcM*R8Gl6V zV(D`WcN!jgq;G|h>JEk@F#YJyH9qWJ8l*3<%f5SFCT4mo`kF!U&NKs-k0$>#6Z0pu z41PVZGT{??T4&tbF)k$R=t}nmR8EmKk z($`EiAlB`?P3Y?P7B!%lZ?L|1H$gvudZ>e2i#Zspfpxv zxp+jF+TACOQ2I8cDZ?=KV@!eV(gxCbm*BciXVToF-W$73x-UnB_h;IyJjoMfWUgz3BdzR#L#*PUHMK)&U@NVw$1IX%y^OaG*B-h6f z&Z*IDb!@}7&$BfmA9eqfwd8L}WMDhdZcn^t75Qa~(4wql>vuTmp6M_Bpu3dStYnr7 z47(Lzh(imh>FJj9t(zK}eXSQvPfb}m^J*e?HBDo6zU9PpY=4$FOPUBh;$-qge=ZbL z*t8b3`}B}2&K={kI7K*H!^vf0e{4X>-~+?W=6t$^a4lZEzq1|FdnpB;+oCS*gT;@) zS~H>W#O$QvpAziD&ISR;!ZIcM8SIGfGDS+CWZL4&?enu6)x8Dz=+0hL(3())6*yvu zyxbaWP#oQ9&F~|ebIioEM{yxr$7~GQ=c{t9CZy~pCE9w7N!v8kC=uCQl(QawTV6S9 zt4ft~xV>S9*qvNk^V_wMdD#CLE%H9oiZf-A)4)y>OvR)&H`(F+4HtUwHC=ue^oy+=g(=B2Y>k$Wah?-zrM^Yd^cce zDFVnlT34*ikiQ9QkhC!s8$f}1V3>W>vr;;QaUt9k$#+7OLefS%bf)pL+yyZw@>p?T zJ6Goh#>CaZnjb@r)&gVi{B*H-!`)p=V`j+NCcTt%>ewYQ#%s~Xu;--qMXW4YI+*Nt z{oQE&+D^-Ot%bH2Bgy6D6K{|ldYK$`yrymHeX;1q)=BNjvk#>%%5y5~vHBgo{rj!_ zWPx?Bzg+~Gqsfk%2tzgQ=0MhGdB$#nbD=y#WNn)#H_W&evUtpOE{hwk^JK_Gik@B4HDShsH<6(?f7MpzwxyNOs!bqrm@ zT85*0{GI%PVh9f;b1<^b5!$;Zj2S~57rX0jttbE$A_Q1istcU)Uy_QI896sLD1;QB z3@o8WtY5EFfaTNtNPFd~R?&GuEB{(+g7ncZMz|Q{*$`o$3eLb!o(a;o>Mv<%X}u5! zwxRh!Of zsS&!7E8;Yo2Kv?waR7Y#re79B52l?-FCZiXzJHSWxQ!nqazMWH#n1&~12r zmsgnW7?lVp=kJVu)SM92$}-GTuIyvFoSl>Z0zXOJv9IU2BE!q{{;3o8Q<^KX_Rb>E zM7jt%S7yuxzR0h8yi@*J*nRG-MY{Kf+{{L@ytV`LmAT208E9&{0k}Zq0DbDV;~W7% zCI^Z)eKU%m6V+2fYBM52Tj?GS6xO>A$c>MY&i2QZc6%AWZ5CY~U0{lrr2m4W!uFwJIJhTma3k`38t}dE` zlk=YHeLpsw{uljUXQ4-bJ3l|(6shbR+FR@r9vWUkcIOoWii$BHN`{7n27^9=TY-;I z-26X%>>3?fndt!|g@}n%*2@pNGMAFs852Gv{h0^wpZg#e3QY>gBRqF_%yRwpnB1n{ zrQo}LNP`hz^uA}x>Qr{AxK7AtqxbmH7VZi@RzVCL63>{F{yLoA5`S+bvaF- z{t>boIA%D*^i?{I4kI_6();kDo@gI7)mi0Npyl$LZFx2SL?NQ$Q*lb@N~QT!I~{Dv zO8wY-v%5uM>ZpQmiK_EC+FiAM{`ty9xPG_g2(9I8mFDmA<9!h|UP=$4KrhBC|_ zUywM}>()W`An!mZ)??>9w2lg;<%3gqwtLIZ7vhRyVnQcVlGS$UYzPaCmLf4f#!ihkm`6r3&&4aL#nox56`4FFRrgkDWaOiWFn z#hi~H9P05Ws6Dgqz$+?Ee#{(t zm)=uRO|OunWWJ%%_DfaQ74KKlE#0)JOJpEREWKj(nXq;J@HL^$Ccq+fErL<;m`Cb{ zC-3iY>5vKhexSjQe~L{VX#TxiD^(Qld^7S<&B|Sy<)y?&^{~qPbPLhH%A)uo3a>`c zVBgRvaobFOT-cOC6H#}@;?w>c3>3O!Eb}*f2PKj%KPQEqRxX_Sg1dK=YhtRQ?e~sK zm;efIPnrAl!=5JR3aciU$TA>R&LNK=SX2B41l~zU5DLHIw~Tjx^j}0y?h9PCx2d!L zq53qb?(}|#-*X?X?B4xaXgz*=Q4ikiC=sN?sQ`rW?a>rxbS8^38p9Sxcr+%FG%=Z@ zIH=maF@vQXQ&nfY`)YDDU8>Dd%f)VHaxua9%h}JLLQj}wFc%??I-r+s8|3gn z{SKqVq(5T77k@ioToi1I(>(W@y@JpxcWb}YXG9N$8TIxOs-WWt`gMITq@|W9ybAS+ z$PgXWvBv83>P zBv)6*jVml774w5BLf0ikgJ`vKA>9Eqq4?DSVGza^Nf%}vyC++#DUWZuJG~B`(h>wK zv-6$ds2-Wi(Ya&Cfv}xMJd#=#1kDn2Y%1V*X~zA@dIV4aj?=LC6Ff2Vm+z00rRz z(j~@rDE#P!1ZI(;mDj+KFadOaS*DWxlV!M-`bJN+?48-m)jI$V>_gs}2cffg_U>k{ zCYp8zP^ym$99_2=AvXsh4cLe1gY%%<{QJY>kaN)qO4@MGiuwZK5O9qI3^w4aB<9%Z z-WfR~4v?H>iQ9YEhbzJ~!bsW+xW2*%4)nP}2JJ_tT>1$8wSY~?+o=NX7d&DW4^rHD z)tBNKC<6c>OA`--_Mtj_FAZ=J)K4N0mDkZgR3tcJ|1JRwrby>fVlTY!;>^Cf^u1 z03NPHioyXY-eafiOrJWl-Mcm>zvCc)F-NXsTAKM|%&e=X!x4l+Sr#(*+&9=xEi0t6 zg;_?yF{bZ1%VStN+HM!|Ikzi zZ2G7)uizkvV_hz_H^g+;V8Li$Rz94lD8G&%LMc1O2T^fGY5d4K8&VQ`L6n{<&4>)L?xk#AdF#gT9RDy!W=U9?BS}(B}%zr}5HQ z&=kIO@+j-QYX;ltwg zk$&0O`_VzTl`3EDRgLAh=g*YZpf=gz3HLlTpU~S(u0fJzsXY^@Lw8p0Y_LktOt^9m zx|Uu7Ps@!$8@uJ=8ixwBOKr#`NA7qMem;GOWHL3WsOakY->s~Nax6;=E(4F9w=F!ptYIT{ik22ho> zl_dE2-)vNs05TyVftmz-|Hz|+X?39ZPWSBaeK3LkPYyYk7{O#^KKy&Zd5I`G014Kg zMm8@kk8iZhj(uU=7W>F0bEopV96+SIp`TwQhz%9~-e^;2 zLO_C}lZdTqvpybm^LwoXKus)TqEj~H%vy`oG zo+?}U{h5kpm5Z%NzoH zpuY8g>rl%-nZKK%$6xSnx@2(chnM@}vC{jV>^{Q3GvnnC6)7Z5Zy)8t4p2b4gyU@3 zT5i)>I6w1tb)eT0mGRa!t}JPV_tiPNq#w--nv;0*)?TTG@Z%e2W{Pgb55yao^uV&f zokPc;lhJYJ+`I2T%14;ESNqUYIB59@dnnaw__uNmOd7~(ominT=er-G7~IO!Z8Rs5 zdskj)exNn>=9cSstL{d{%0mjL?hQnQf9bjqoRvvL~{{)wzId$DPJP}Q(K$zUzQ9GZrIhYI$v1UK2Wj}LE>Q|_rH8T%cJFI6A^&>#8F6eYL@M-AYVyitDGTGLB!wM&)6t zMsUBw1B}Pl1W{*#*$q8Z8NcW-)uAPnpUbapp@qFMuWAqMxa{^YHve=}m%fN?G}Qmf z{?&%+>A;C><hAd9{L5A+Z z=Ki>AAxuP?Y-Np_@)&z0(-Xf4W_SbCMkC698X#}gsO$ST=`7OxP}XR0Q|--95lE%z zp_mI_f+cGdtIxQ|wp`0*QhKL#UZzmse5ALx(OA?Qmo_ToH4Wtt+KVOVpCN;EyO*p7 zOP!-@q<&IZuYH4eCdw7}nbvrTY|^ry&BgYkg1iRt@HfHaZ^{ZLp3&l{r`c?#b#ALD zW7iA9G!L~UTL*oKE7ECN?RwoK^^f0eS&;^LjR;cg^=CV)?Ux%*0YMF%$uGC&YD&ZX zBu|=U)KZzQUE!tah3;yRk(Ldh@Bc} z3p`1fo`FEbKiM!Gr_mnK0ZuzV@>?pozmxl3O6DZ36u#6xx|j$72uOW(J#d+l_3L`^ zjgt}{{QxnzlbhAe_y;b+?1|J0W;|(Wb>nm!1w|kr6HRLWV!gt6P?z5s^*8#s3=WhV zB_>PNjW?$0(@`hH4u80Q%f;tMueSF?TNn0Pf|o7gxplb;G{vQ#w)q5D(ZM3DVHZ}1eJv4px8qKD}IqbZ0YOK68xA8$>SY_nV1&(XKUe1g; zT-{y7A*6-*ljzinPa;If#gGyd)20&D*p%#EkzcECf|rVJZ6Rz%B_=|xXA_|vroOo{0*qpgDl#vMl$eqwKzTEvd0eH}+O zyC~Ohs@}g|h^T*j0UGG!=>l2jbjZ^|b`#z$*p|Wa1>w>?)>0oj*^?dF;!g`<%FF67 zq+vdWLWw!%0O$z{GSU`7h;-*K>46dJpPUhZA0)B_iiQ5&M_prVj?1odLYr?ePiRU9 zNGWHKcY6hQ5U7f+#*R8%2ho}|N<~G*v&A1&k8C%%TwJy4<6m!O$1%oUYV2n#;?Q1e zBC@pQ)~Kqc0NUiGW+;eN4~#Y}F8Gp_BoYe4BZYAry`xY{{ zzARgM?lN+S-|SmD^7$p}^MJmaUVvE3cMk)2b>AqK0ap2-6r-{jD@r=oS0_^(Rol0< zK_MazR*oD=wBA%8G^S3fCik1ai(i$x*(6v{^xBErG_TISaIxlbQeo;tjtMf68G=>^ z^X&2v|LtWmzX9o_;&6ZK0p?$U;BMsD91!|acNXO|cM2Bjt8JtQ3otv`OO5X$xN>+Mz=2XZ2ixSCS33rOk zFp9e<=Nw_y#v)KE^^=|7II21=cd?QnMj)x_CXg_lAF4CWK? z-=$weMrWeFycTD6q_bbhHf?^rN9v3k&%Gqp$~CgZClo6EnI~5tcZv3tX@r4faGBra z*+LMoL?IxZo3A%qo{UsC-xU2dm$o|pC|k`-%mJB2-EXhZhR9EW96M`4_=SF1sc&4$ATQ<640F*aYUNJ+? z(ffmYg;hSK90AGr5XF2d zCB!9R?ZWHpq4FO-Rq|Ee>*$&RoZYecC*7-~Jx-o?JgoV16*i(Q{6rRxVa`Y5B`nts zHM!gdC0ba&yw5@jii*FcCP!6`gB&*%0k5Pggd+lyLU*<68$`dLb5~P%@)oY1+i2Ph z-+j^kd1rF+gpkEcNcVt--p6lkybrvpG{)9usGJ=9DL?N;oRcGwciqx?r|EH)fJRWS z!kwb|^&ip+Z3ig8jJ?otAK4RBdHq}7*AfZnViya3qoH1A@QWN;m&-EJa?JVl{|9d7 zWQr!>W1G^O@ue!$yAW3OAxE~Y6G1ta7RXO?ZqI}^7gsqkckO~e0cLMp(P+mDwD(LU z;2h3=)W4@>blgn_$8(KiOBd{(XmP==viq*6t4^SGH> zsniQ&hB000MoVRGnH1WmU@Se)Er8~uQfL8*qa^8+6GR)5`A$v3RuQZZ=|<>(q#{1? zcg{~3S{7)%boBU9q{>*iR_B!f;etMsXvta!r*km+p}=B@ZYe8V9LUc5%6cuo+%&)T zDa`I9E43-gp=uM1at6SbO&*s92DJGsS>}y;dQEs18^cs%c!lq>5f$zWX*No zzK}rb8mU25IA%_-D$l7GUAvS&p*r@V5Z50QGa(B3N=%g)vef9j@NZG_j<3ZWuMm0) z65Ho@Ialsv)MFKA#NasrdV>~e%fE`mi-hGy(OH=FR*PG)rn3)**3;#6*E8lq)FvF) zm5_Nka6!2YXxaV|x{}-T= z#{Xpnu=yX&HUn|tYvz-yyuVs=uQv1p*aqj>qF&)@Ri}XCmXVQiu(7OE%3QMf#B>t~ z61M^hC2GG^@%l9=l~4#&Y!eHy-yHT|oCYWhDw*)0hN@d?EDra8(#a^*N>e15f^>%ezOLK}1QM0H2r_m! zJjRDtSNEiK)U96Ay54;WL06Jljjo(f7dx_%!qd~wRk#GI+@`m{&6xln`qDbf-jHsY zOSR<=4I3cTck~wqlFz_;<2-i*Jw7FW3-Rsg?-~a3zcds;RKNp!#tfvYR8i-=$suy0 zk7N<)i0ALs3k4)7bdt375Q!z?TpLmQ9ZN6_0o~0B=$uU^Ox#;P))G>V%qF~Klscz-+P|~ z!D;80qQ|385lWg0SL6#!*Z*<3nDk@)_Ha2j3WX7}O9Y&HW_R5(kaC`t0@2l}OO zrP02;uc9)8t}&xBSf@VAdlHxmlu5A-8@7trE4B60Y-#^az%pt&Z!Rf!tiN3Uv=tOt zFbScgZAKL~F^}WtR1C6q7_cbABgiJ&Bip}4Ta{7M3`hMDE|=nSFt2z6ft8Z7M0?KW z;c{r*C2Nz0zQ%z>PYH{oy#fa^d4J6r&VakC$EWg$(oWkCH7aai4#pA7ecQf`&nqDY z(2Y{|So&HAE-$r_FgZxL$kCsB)A*N7cH>t~`!?Q)G6E3FT<3=Wox85e5*|epoBFmF zJqJNkfWQE?S#vQ4F!(Y;_mwvX@xfzL+NlkYM15Rn)LQgkv|PbcAzWlMQP@wlC!XIQ z2PFx%7)ZeFQOuSvwzs}azODH2_2`N=fs2Dk#E$~kmM@6qKpjdxqi_VD=?~$G>Rt_lqTXgzvMaMQeN#@ z3z&g`%@}OdNxUw2Rub0=v$!yy3+?y+`s4V=*dGiOg0E^6@Naw}-?I;?QC|*N3O!HO z*^9ycS!VVPL?RE#O6~E65akA^mEo!b@Y6pJr4DeyHOa-VB@k0?L~`=QO5+wr@X*C%D6#-+6xXz4*5I!=i5z z-3gym#jm=AF`#4>N|%Y}w3^?7q?Bq9$lOu<8ZK=;0YAS_-InoyvfeI3>b(MoozA^|sKml_Y?&~Gn*oaoGx4S1{C)ZVHCa>-$_c~XDc#FE3%hAap&z?uo3R(ZL zNcb?_qvkIND=D)Tc9_fdl=~c%HB}^**s9g+Fefnu_5`x-xU@kgXVe95`V)e1#u!Ze z*K5Qw^QG9YxIq2#dxV1L(tx-PI}1P4Ad}mFwwk2HEni#U)(CYb%#UQ;&5+jX3MQcbO(X_8sQ>;WAoTz^ z)x5-TXYIpjXfJPMx#NJPRq~RJxAX{jE1(!!4T5!EFY2Atl3!%)#$R>euslSH8R@A|?T2$4Eu+Wf={oMt z@sk#EKdN{374ZPPjbLs<4&(8ny$}^SsN+CTjZPtKu210J6Hib#YoReS>)!P{Bb6?p z6S=sc2s$UDJCTpD2{8!2q>Ir|B`50j^TGFEeAkn$KtbniQMR1V-}U>*ODq(e6p*EP8Wg{IHHISDTwgD(X+ z8IUR;->T^TBNZFKKa*5Yqn?bx?f;VvN$tZv($?0#)OG03ZL2ufze`7huu1xLI{Qq)G0&g?X<1-!lcI~Av=KhgA1Ey~<6fxV5I=T3B%N>vaSc-QaN?~d!w zV*5$vCI{d7O{su+z9}v&qE_Ptg zT%KE2IYFO0xpWK`vMfeq=$o}nF;@+%%!o5;`o$&jNi)k=`i{+1upJ7;HaZ~F*e5Ra`-8+a!BOHzc0mfIxxdV~HcKhu4yCBe6RT-5qY&}`Cbqthm0 zR+O9n9?~<>cs8l^!^6nn)$V`Tgfc* zb`>UjJiET(>Uev25kp>*!B6(`+XElH$26)nGlr99UZD9{1K0rffPsF}<3SK2*w;6iS!M^3IwMp)r4Fg7rV zuQqNM&d8gECwI>>#3A1w6-Q<^>WCggAF-XKg%`Qpc2vT}H%?u?@MFmM5AOpleH-i! zPAS4#Ag3Z;DNe0~tueq0knbjYn84FZoxy&!Xyb$JG*mbU+%;f)!C|Ku+Rv*CYP-6d z(L5bXvK)8tO_8_d~K3?zI9ylXmA$W1pA-O*_AmxN*@L1{h(Nb*&LX~$d z4HDusw$$80Vdx5~mXerRy1hp`wI?&x>Wylx_*;yV_%{d=u@_z;uo6jXN1Yyf&quvN z7=Z8$V7Wc!;1HYij$dyj%*aaH zVA*(@;Pupi4_&a=kpVLrG{Ngr32+I<5-!Ed_-U7LvRy*brd2rl=Gi%1Wl*=#1M%c+ z{>@0`*)vH4D~-8b?^Zz21Y)NWQV0YzDxWAkBG-LwhX$+f&9QD|h5NBF!bJ23;z^F8 zf83qkqTv7VTr4><5VsQlz|bfK?SSTnbCSLzI#G%(LUYEKmNULZ5TB&!NiP~9YBsxu*b2i4gAf-VyAyX^>SCxI!&(g&)z9lHL>vhIFDG3k4nBT{=PL7?6 z&^Xv3e(uUCbXuFp^SBVz%f}^Yj~vtEx)nBWh!hlJf2(En#DsOowRRYaW}4BuOEIT= zl1SM}A3kKSueSyfRyB_gHd1CISC9@eGt`Cbv3mHXf$4Q%$e0XJ%Iv~VbMhHer$p2^R<|qQjAJ>(S#_;X#G`J0u@U`xD~EQ z+K2p?!*XLF{(OSdD!gwBh_I>-2LKF0y&4$}vPJ#1iP|7kAx&H7Ca3D+6!E4-QiwO} zRPf?g5oFl@EQK(dy`S-#IO(+3?KqcO?D!fxeAlkQ2yQ#MqBsflnbFYZ>3F{-)Y4%t zCrX!++w1;$y%V}s4rgwaGXx)hcA=jV#;y7Ib+V4oZN2%G0bA`g-0m74N5-&GQT;0fr}6Z|LA?JDbX*;-3cRM_cN8x9*q^>&*q(0s0& z4My-bUL-|Ggwp5*AoyR-ei)PxDy=pwAC542DasuUlKn7ZYHmq9eXdSwsY>1qt*_j_ zO9>KSkgJIbL?j$`XzLAf*AK6tN`t^DjA{j zwllKtKC|f4O%bl6%FJ4CM+@KQz9M!o`EyUNTGpOCK!xl;FrfSoBp&}fBnb=&OF&|U z3&X^n_E#X#aMGH@2p6WOlLF#Y0$QfMqeJzM?eQHK*hf_b%-={yK?1TTcY7m|APaoQ z|BEf=a94ZmH~QQYhAGiHd6ftr81$6mindw0!Z-dBzUSm-*-4z%O_* zcmcupurBOH$mFP}K~O3lOOjGF8ve%b6fg$0@m=g)cxzR${VsZoQA^$Mf-&Qu~Oa{FZS$qH$E>gVz9f~3}7kaE(W%VS5G~3SIBXa5(27xv6NnD_@ zPNnIUwyXYhor1Vy5aI)+^E24mPOs8kFnxc%Ry>A!#1o<9+ z?px!AK>jU$0qEll40D*?g0!@qzb-S#-VN;{AQs-0=4lxzOAbx>Ukd9$;t>Wzu+f7x z?VrU{FavuL`Mx8W11_@~aBR`t#X&p5jESocwEKHKA7Pk4wMRM9AVGVN*y^kLn-1Gm zykPD?djE$i%)NvFQ+z;zpuk;4146;ZfkO_JOSKs)gEkj+0}%iy4g85)mKoyz{lb*;{D%mAp35X6+K09ik@*nm$y zg%mlgJ)`*umAbuCHQ};@FV=IKm0(?xjV+y&Ub`s6h6FLNm?m6ipmT)B#i?%H8C3Sq z4h)18TCJ9?$`r6m}&ff54!&SFPO3-KA^y-9_X=RxS*_}t>-zRncSZBF=!c~sEm ziqxb%`}YN`|2CKMi&L+GQ|XSaiT41@h0Gg}4^Ib2uXbCS} z{8MOL7areVLn?eR0O-NZvew#Nb03Dsms30 zyleHGtd%`r)8theeqSI5DPnQV)wX#FsOLih}(c#%5WV)G?-zJhKz_1N$1@c&KjB zuO&49PVMjfE+6Hzp;H8+1NfRNGsU|@?~Ui5yxAZhdU!cuI6*z`YO1qo62IT6E6jdT zRKBk3M{=*yLTPZxIVMx{iL`UUL#1C@+Vd#;Un*?;y^=m%Xf>4;mAK=oW)!geBP`_9 zqdt$N1{>a0U`UuNr34xtzZ)z4;sxUMZl?n-_b+f?oH?oyA7?%a>fF<3u-v?uKB?QN zf_20E+#{XkvfZAq#eeGBT)&`NZv(WVYGss(R`s5lPHj~bpXxoZ<98NQ>*jL(-rg~o z&4tR`Um~nD2GaP+0!7R#RSqCQqta*eoa-1==|4|%D(qxs%P`~D=`yLB4zkq$D2n~p!}70tCCP!q-_Q>q%hjF)hMxx0$%V!T zzer-0^jj1y7IT$Na`}@N%mL+hR1^t2?Vhc~l0lfNdd=i2W^Y#3x&>6`#o9t`rJ z=Kb!3qqvlT%j(?R2UFeZl-8t;n=WX2*E>|PEnjyUmpScKfB9bwKzLoFfKxE)|62dP zsV^OHSJ7x@GUPl`B^POS1C5ks{4oyOf9YRR0b{6)!^w=FSt{I2+*Wz)A-A|6rBEXE zQzr*hGbriVoMb{{pX{oHa_jFJ(xN*P6tMH+uX9PR=8)Dbjo3^j%Cvd(Q<94zs8%rd z8N~_kwQdgj@|3h)X|LTmy(Hh1t+IZz{xR(1Z;a%TF5Rp3g!2sKu)qEbWI-qg`h)EK zo7(b!B-CLDCgXu)e;)|d03~La6&d_h)Bev+3J5HKk~a7X(B=n)Hvg@@8EOZFh%NZa zU*R}qUkHeHWkczx?^w**{18a3)`w}wb+alTZ91;c!gf0`r3ZTH1JD%6%qH(8g#4nS zqhDZWTXBlTyM!T@9Goq22E2ae;%Z}`U}3Diz3uboui;cH=t!C1;|SpeZ^>9)Vi}0O z>s?T7b^U0V{cdld-h?#p@3@CV^WB~8nh6GM+&&v2W#}a}&q7$=_fD^X%>ijKndNwn z-&yo5lSl6w6y~~v*4HBExt~)LXPQ~*I)1A-m1&#$9em^HviAdayB-&8Rm-PL9?2QLX=_V8CGhUjOa;Hx z!mqin?j4_`p$=Ms)6}HIrbk`wXr80cUUx|_nm;(pDxmvTu97~sqHkMmOoDyYl-2IA z)23H@+2;;+^vz@zFEk~-OlU8e`eLKz+}I{V!HkFnTQs^;xraeJT`9E|7&r6kZRJ2N z$=@kuQzRwqDvb`G$!8Nk(#fVLU(0%pRWvk1vvfNhg)f~{#<)q2j$%C?$)Coq%`}ar zXld_ZLN4@?=d(jK!_gp#8`z#eoyh90-jXtM8fklPwPt(N0ogQl=OPls?U@-FKS^ZC zoq3-!qv2PPyEXhY3+PU(CQS@w8Eu7Ib{HR#Tba}1In;|PAxsDe{?uc+@<#p(Q`2THa!&7aS;-)4`$iN3=pIs@1-cIBh|8oe@5 zd#a}&sZUGx#rH4o=!K5BY;1Ye^iEGsvXMAGQDn^alZQfq@rFuJdmf?}C_X;F{eQ{FLcLi#CqZu($yR}k z9(c7?ZPFn^KsR7tzf3OG)Ig4f)M-Pn2>PqUzI6G@i1NJ!p3*lr$@>)wc!+dtAxRnOZN34brj);2E8-cBfj)9sKy z5{|*w$!*de>c&fSY;e)GCcVfd$g?f2LJjS}h4}n>5$e>6I-r1DZ&UOxSjT_fn7wOi zgj!nMI{|V#;938jw;^o+>~Kgv2O^vXnXaK~eoaFyE|=8}Rumyu0>yclrSYcbW(7B0 zmJ7o0{(`*ejbHzen*TScQcpT*_q|FMfAoqaBOU3koMWyUL<>1Fc>Yajb15^^aVUB8 zM$7GqtwFwi#r;4ey?v2^}kHU`Sqp0A%`9j$F)xQcn0LIFq=Jg^}FRRTi%|;Ck;~9 zk9P{(Q{?y+ZCLyb9`bX1vBqcRAq=;;Bbt6dP?@zPpU$JA55Z(&}*?1IxoB00oBdI{jxl zMNjr`_SL=FF!MCC2o`ie!<$OR)JFyh3tSEl28TPi|7s(FMGn9U$UFQGoB_QHlm)2^ zrRVYcTRRGF(ox7|i+^@B;BD3_KI|_@3!Ez&YTl$0hMPCRqLC~Ee2ahIO^D-woH^7= z5^ZgKmltk~V$uZs6LtQBJWi$9;~edG{HGNnK&w$&Q36CgflV#99V)$w%?(0Z=89b_ zE7uE7;5=CdH)CsohXmr)$c}7^X6tG?@jfmntpaWQy$0^$>`X>KisYJUHg4mHrpvn; zd?mR$qENY1icEsYZuU|}NFe)YTOXnRu$0^|)+Zd0qTOt(KZG6MWnY^ey=7c1=F_&* zSY`7@T-X=)dFIg8_ZIMy0Pu*NN~0+$!UGM1N!F7}tGS4jErWv{-;Gwjeo`Ftv+Uxs zYPX#88A!1kdbks3;gTuVP0&bcniQXr_jZn+Q*$tB>S3G}{h7o&-}Dh}-5EBRVkrGv z749w6vC7>nX50pifl%p*Fb!E&gPxxK>BkCe&iPRr{F(_C7Gx4N!sVYBjEKfyj)N#nGb52Nrc?#~~CGd*54_C3p3R<)cQq>H& zL(7sYZ*G5kB{$51-WZPPqa{wi?cRyPc!X?!Sbqo95WE=16Or8?&peLCR91E8KaDZZ zY(kk-n`6wgA{av4DLp4W6IW?=PrwUOwGZjaU|`pIn^6JTAnN|$EmWEEO%)ZwpCGmJ zP?2(y*tmilLk+igks%9B?Q0vl~mKm17D;FJWCR^uJyv znEW^;W7Pn4Jnlm}X;KDULuHLi3c!NW6N1>bbe&$H>34>Yb+5R|{Y&o_>F{TL@5JOn zjV@GfvSXXBkY^oTe;-g$pk)~ka(}>o0!n57{}VN1{TpP;G?G*zo33l8Z~|iPP{tX- z6wsFq-jc9l4wnOi#;~62nqRKP^zUv7=D!#D!_*zh0PimZXJ%~Ou}OyBp4Thk0ZNXk zkP6;-dRxntNT?@3(Br>)0&Gq5(yTxIS5Lr?#TLsWayIvo$2afKm8JXZFP^*9#U?e~c&!89-8a|w+A8*2Vzi``Tks@Cd#NK>J@H)&*@HV*V zwtJBUIsuD4FLB}1oAn@XX^;6+qTTf6dw~6S#XpdsxdLj9G0(oIo*;JZg`~&8x9bjK zV63x9QM+@N{KeDv={gk5J3&EBl8++&8F8i>$9%$(cuap>%tmjiu4e8J?Y@c> z2c>ieAikwJ6!(5$tK(&oW7_(HQc-y1a!FN@=31|CT&uoGE}c<+f$bpEy8y0)w*C{S z$Clz(UML?6jTjWjXP^5mMdMploR>{K-i&WepLG1PSM2|wdw`JOL~W7tsl@i)k@oAG z`gwG!o5BlU>ugqYx;x`1ZkSy(RPI)i#bY1ztJn;c?keN|4{h%q)>Id6`|5{+4PqAr zgV+!hQIQ_VM-dR|2uK%@-lTU>5doztMVd&L8tH^8z4zWi4L$S@fiqVEU)guxeeSt? zpXc!}Bq3Q@ne(0RJH~IQ5AKkzzS)!M{P_zqs6^Q1T@S=#%h^ed_BV>}G0)+%7R=t5 z&MR;R>kIHCGHeI57u!y0WVc$t)?4#2Up-z1y38&3oF;D)IC!da*#noaKw)RFn|hLFP_3Fn`hSdRw@?{yZL{+VD6;A4PU`frQD&egd6 z;;a9%7`)sVV~Kajf9%7SFAv7(adCGJZcBNx(TPzq`k~lk2|0=ii16=$&j$!r7C~SP z;AV!94tFc29q+benRyj3K~91ZJ|8iFCK-Y}1|4hED(`Y?KjUQU7w^Xk#n@G`j!uR zVt*S9n*MBGUe0I`s=4MoZaoxN7iE;~E9rbky{Q=)T0am}ZxNEznWW-r4nPkOzcv!w zB-5jO-r;&Bq1oYTDnZPXTlmi*{pMBvzy;H==vP_eT^F%)X;}_575;w>84l+XMM5Up zJ$g^l)YMgg(coj}RqJuhH! z+zRk|vjm+^%XUK`CAf=tiSiuEXR2V9tTq+NQ@#Wjw+u$Ti=j)v%9JDLbpCl&z8(u|N9a-7`Q{8= ze)S>ectbj=)vsF4(@i{y{oUe%w17D{ylUA0JSyQn2$U$I9%1Sh7lgpY^ScN$FOvb_ z$*J`>hKjFQZ451gS>ES=H@Wzr4tLUX*vQ=mE}hE~+|eF1DwKa?qKL$TPPx9k8MgbI zLsjFTYw>2XDFRSrWy}jcKT$F8o2c3(s2hC9&|z5vk1oO=x2}sXC<4ga;V>>Q!*&`> z9ZCi6^Z^G16BAQ95qfb2Zhf)1uizKrmBYp+dVjJ#A+az-Z}}Iw9nFP_uEeYMYKOeCt-GbhDqj9&$eTXIzKl)W&%8sS=HKi0O2~nmKRX^M&H31*jd*Sm8 zdRp`I@4`h7R4~sLAAVv9)(b~N`c|1{*8pk;t```wCw7I&h$G>LEipbg>rDl5-(TaL zxtekdL47M@_M`=>uXgs{`mQbZWv!WUfRBEr*}CZfzRuMd*c8<^L6a(+zrBFrlS*1 zb>s`HN;Dfi5^GIPxc*&ZK}03XGVUBgk2Z;hm^7x~1e?pxJe+c&}=I<{V$h9{`ae|67Ga861#HjI^g z_W^!?##{Dwr@QTRi!booEntf353K`&NngBd7C84%Ct*)o!;jwP{A{$BvNT*uVr>Oo z+6Qp49Uba!Q?&@zc&z5&_+)af?$_2>u!IIqO4Qm_&5c9re;g15k-S9v3s|L@N1F@6 zMN|%-rWzfTxB{%%U8a z4-$WRcC7=N5D)Xvqu=*rTfH*y_^{M%V%H*Isiom*K&njCZEeG0uGwX+bq}dxeIXOy zoB_tf^yE*<0_xN$mkei2tP8j&E!prCkz=7Ucj`-M^h%9skWKl-3#E2hC&PVWOmwfq}^u}J@?&B z@p=&92s8)TY!{OP)eN4VPW&?e60QDdEXe&+wz@8ptt0)e@vq=3MN4&3Sn}H5MDMnv9Ulx}2jS#my5%A>}|`886d*v-sGoq2*rUn@icyEFSy|t2gB} zt=q^<-dw}DVfp&pEmCvuc++p}0g6t5D|Xn=hjnJOd&#=lt`Su1gNA zc};_MHqg1Gg8F9LEJ`MRP4b1lWo{k2&`$dwB-(vhpG;y4meTu)y`f*VDJlC4>X%CP zrdG}W0CbbW8S&|7$4H;exl}PNyg4tOC$(KYEgIOtdt>6y{%gt7zde2qV_wRhP5NCW z?9E_zuT?U*jUF&t)ALF`4IaE?>4cpDfmeDW$(DUa#;|(saKYH3r<~5+30zsei$TJT zh*`4DbF$acWkDy&>O^_74(6KY&`B94iESFYa@{OmlM!V)vD?bDc7wx)Qkc4J z$=z^3(lczy2hGK7TV*hHL_N|)zFBbQ&4i&CEWZ8Hd*Z#oK&x_fQB&t?H<%Vf^augT zD=h7VKA+bW*x^@e1ls2RjxO}C>Dyt|YXVNDmOJY>FyRB>L)ysLOsTK}d#6W^ z3)i8QMySDcU?l?#)WG>1j8-k$TR!vyH^n{}z(~IE@o0Si!~r6fQu4ss^fyP# z-Va>b0vkmF7`1sezF)1pH`zM^?J;-lewnB_#qWapRa8|%&LMeoG{j=%273YI>!3Ue zlX048mWLD@ki8LwbeI4Wx?aNWbi#IXxee{Yy-nlBk&OdW5VZny&4GHDPvVQeXN%a2 zTEeug3~6c%eEd3`$Ts9I7znZ$iXj1gfT#$rF5gwu;wTrDr@E$A>!YN66~bOo8@h$> zzXzz-^U5~{xu?g|3BJe=g#FO#5o?OTj*^8QS)adQ{S8=op9Eq2X3+s{3Uq)#*#%js zPq1da&{JgXND2gCt*#(Z_%`KP>R+{XX(}h7GWq=I!SqdMu}=Gvc)6a!I2}u8VBSjr?5;STrGyRl zCzr>s*lcj{Jmh*EsI(EeRPsqx`3$U-<#VCj)yXEyW{f7q@zx1QHUa9u1o$bbET3p=U{53Q(dBD}Q zN5R`Jh6~@!W2vMJ2p&$q(;jTp=Xy(J&N;l2ypqiG?Pp)A*STy5O8m<3)fm&}KM$bR zhqJ`%Hlz2bSp0n-O3R^Jl_z? z(l29t^W!%+R;Xf0j>41&V`rs8!mwWmVr@_|0)8WK4^zWs`acDdKnHoA152m=Q2P!z z!T&gG!EOp_pd&D)*TejG=yKv=e4rZL1mnjvl`&E1X&!RH3#H?MwK=HqMfBa?cH8z8ke#fq$mc*MO4UPo?Eu_DBZz?@?h6dCMwJQ_poRpLXavsv%*KYr zZ?w)dEBB-{F4B2DtYzFTdd?}WLXc+vYP9vUA5{A4^OO_ml~0q+mYri#+_dgevtTOF z6WbK=t;G~9xFiT8c6j*XBw9n5Qh=+WY_;7-_KEhDH(hr=Ie37s3i#mrKa-(mrsb4p z3OeL%8U|6BX7vSWjqUvSUS;3uPEDM*y!SdU{{lG&>WtAxZnP#716!v7{P8oA2Iat_ z3Mv|l{^1BnHv9)nbve1Mdl|pGTK;tF6RAEkyl{P2Sa*MEtOOoThCQo%&n08v>UDE9 zqu}QWIiP?jWJ}ISmc#7zKENhXH6;bG&sb3QjTEl8;&Ol9vkdoGXUKY17iy8c&VTe~ zOE5vp@=Mze-_s37U;*nJZuDdmbe2EUn&3M;B(vHQ+Fr^SC*#sc689D7r8PC9MvW)+ zsn))HPDN^o{VzVS$F~<|Ez7+${2ZE1(NIB{^z_udxV$f09CuV12+jp$SzKWc6y16{ z!p!GT9VVzJ)l3V;Im2hgJ4F0587pDh6aqMxDOV&;jeqz_?1PoIcS;Ks56~#j&}?Wt zzUa4oMt7d>$&=WC7fyO{JIiT?ryHM>*-CvXkPTgV{HgPMxgVD6`8oG>X}D!*uumvl zf%M06Y!Y~4fjRcK$buXU=;^Qgyq7jg@C`uJDc)?>2_KC(%Vs2Av#x7;_Z zUiPO~Wcba2|7Nn%=5ss4`N}2QZz3lNcaRYoJQ{VvFj#tWv#94xc>aZg!j--olX2OZ zUVkXulzzMgo)d@YURmDqB*-51b5L`BZ)V){ROC)`uAY{2I5~@ zZ{k7bOHGWhZVgg1!d-NFqx~$;qZ1HO_ zd1(q0wZmFRWeV0?Q3bfXt`tzW5>O;LuLqX5O$nGXw(LKrpQ zfJNlWJ`fnWe+MiVfO*MYQoK~Hh5p7R=f^)`b-k?~LW(k)FCN#&YOJUa14jvjBs-+D zTwzwX1sd#hD^Uh(du#^mop`o;)C2tz8D<}JD3=lz#aYNWS?L{3XQh4_h>s%3>PcMW zx)N+@6FRzV;Wv2GbH%-T`@UpGtjBj1tPGoavD}%+$~I?OJx&T}n16#G(mA_TY>FdG z`+YZ5Y$swA#$Z}_|Fdyr2IV&mj-P?=Dp|EN%*!(vvBqIXyB2)(II}w$Tee^M*Snes zc#v<5Y1(;gRm_K7-EdDn?HV@dN#MNSZg2CK!g=zSR)UYs zhC0Qne@ZdAfLRQ%V&2y2iaKX zVeG4J#Nvq1t)`Q6eGVGS05EDrbIg?X+AQL3`E_fHQ+j#%XcFFx^T~Qj7BwGb+IPk^ z%4rQ{x@dd8{Y(>sAuRhl@{ov!w@p@A@;c^?H(g%n!U1*5acsisF9r&lC3(OJRZo)$ zwPh;T;9T(CoO;8wi5JflsnhEtnMxJ?roLFdu!kOb zq>Z#UKZQ7W>{O&d*Y%#3Aa4HYJ|eG5(CMA?SMKS$qOQN}cHu?XuHa+~j%qpd-Y6U9{^|ZE8F`${btVen5x? zMOm$ohu1>le9)cOZ+^kd#G1UK%~`)UI94#u_9ny-1$W%>+=zFIW z&p^|l8R+Ek6k+Q>))f~QCq$b0m)k6F3Di@X|Cd!*fVuDb`j$D260Jo^=&1lf&h-sm zM(Rw(Le$W@QCzPi;CDmbkE3wFgE#qJH&~h31{%f(!YyVP2<$0;!VVJn0@@xM7>_8? zXUL&`ueF)i=5_$x=gA3^x-hOY91-)={|yq&F6BjxFGf8hD_ zP{!D*k1LymGzA>(U^?yao4)oO)Didt);k(S?y5Au)@Ir{K%T&Pyp;-Lrkt!M^*Lir z4P`<~k)G<3Z@SvWYzXEV5me{wVzSLAnQ+Z=bw%BrEmVtHCw`q71WB>nf6gZ8BeQ@9~}0m%X`fVCB}tw$U#RiD4G~Zo>mYXW@!F)x-9eCUi)XoH zD8%x&CugRvD3LK2S(Co*OSbYlDgV++PR*G7jEw&NDx>+USM(3nF0wLT+b|33>3Dl; zz0Z96EhX3%-?~4V<7vr*koizm1Kks#KSE_Y+ z6Xu{43tP&sbI5`-grWwRF_X)P0(a~MnS5V*zMYdA?agx;-R%ZbrV?WFc4R&!d_0v&}}O7nxI zaZ_ZP#Gj4T3cS{aH406UNWIeyCcK^NW7Pr!g;`$Lp0(Nt`(?GpJ|rc)k(zHy!)hyY zZ1qQ6=4z17o`n@q@Wc?I^;Ef-@|v{pgDVFv9-&V~L|4BhJ3ky{)G!Z-!rIY+I!FRL z)>hdK^87_4NqOi$37Zfft zLp7&s79a^>!wRitgB+7Vx%e6deGDMb(d0S(t%k_NCV9y~Mt4ZNV!n_GwY(r|ylWQ3 zDk`o8OEL2hh;}glX)^%o-~8MUkq#XIaE+Xtp>9h7#BOeBf94xHZtNgg0jOkA|{>}mC4 zD#tRf?AVb0zW1|8rQQ^(5I(3y!2Luv&oR5{Pz&Gigi^PzWP2__fZ2`$26|tSG%$21 z>u&GE%2}o8ohyORm0PI$MUXgCkiNgtN7R?vS_N*pYUNM_$vSG;PLC*S1{@ANEX@5 zcCjCd@&^iRO#3)^2hdZL@bE9ja+7(bx8wS_irjyqPsM?1K=6x=zSHUcBP?Iu{T3E9 z5*R-rmn%uLEtVZ#U(uTe?p`4558qjyOa988V@b*5h)4@`z+SwWyw>QtjHy`(nCtFw z@&H9>E+78K&kNCP=Q&wKn;r%kO7$GnPU1}Ha)YQ&7j}Tv>SxDM__=+1X)z7+hF;}!v z5cF`D0TuS3lw@TBV=SDFUU)(p}&8px*Vjxc?NM#-s$H$qCZS$sXl*hfHP*r zIG9l=#J!qmqwu3lxCiKCuD7^PW$P^d;`xlYl^cPhug3XN&t@EO@>JD}b=DKpv zxuKjFFU;DrF*pl&CwJarVy@S*t~om@`+gW;Nq@{-_fRFZA*M!_qU-Wx zIZ=&nAF7H&Ig4mxd}R}p``+_@@M5TasjfABhcM0%ISu=wlWbPV#Qz**a(<{pr zv?re0cka@-#Gtu@;JPuf=<5JznK!I!Te({7<2ze(pH16J66YGA_bz5zBZvuA`m&%q zvwW@i6rpN4Fk2AXriAVI|CoPQo-@G*FLm0}6gTkz&?;_O?rY97j8OUSHv+2vny^%f zdfW^B5WUDI$E?CaV%-Ditma>hzw`S;a6AJ4{CD}c#bMsk4trbHH7IQkJpL|X$~VdS zw_Ydxu3MKtYHlA48-h_@oH8Pu0~R0Ng>6BgRU^k~RaM5{v`;{ebYiVh zWr?l0(D@GSgiR&GML8*bGiU7MSE*geb6xeTie!oH)a#E{(m`@C8C& z?Y96e;_jG87hkU2OT3-F)yF@n&t=qSIs8tOdmTtt#5K#@KT^=9=DQ}e|7vJwD$m&C zK7Nq*9Pxdu)(BL5`=ao^v)qFGe9IHUiq0hP07Pz5g5(Ec zp*m=Hg4QJXv)W0DPNxlT6P(Y>sO9AE6Ol#aEfZB%(a||{=2*{WTY}o0QUSgiJtx7O zTPo!<5Rv#tobs^3h$G7hvEug13w`=2d)EV!dr&m;;4K-A zX5>A2f^(#Y;sOct=GyRg(0Ldf8#6$M>-R;XQ*~+dA5aiHy)OC!0eI#9sP?&g8aFih zzOcWv@j{L8agF(9s-y7DWr6>|Dlp@CR>mi# zIp<^~+;Pd;l}D`X4DbE{I%2guyuWAqNCnT1#%%7b7WL;fo=gl`k2GQ3an ze5XljR9DwA=9jYbi|6!ZCY`(SYMcxFE>9dvw9(uc!QU}qR%vN-Ep?^2??fH{BhAH z;mPDIIX2`+oomb(d@+$(;SSRc5NglHPy4p*`%A)c#-lX?LS^r3mMfx9+8qI^^Akxp%7@o|AoVPn1*B z-TaC3UYV0L#+$)58+Lpt8mEiMtsd4r{!Poh?4EQ3S*A=N#sF-J3V{RnH#Y?^hM7(trv)x8{`r0-eJ~N_y(&?1wXU$T9`E z0~nqqR0sCO8vS}ipT$z0-J!U$;-k9D`k70dZa9$1{0!xD*qA0-S$zUFoC`7<4oB+~ z(b~myTVH}rL#Z28B7NiTPwqH>(T+5IrtJVC-54!0|86^vfMLCQ#6Y@dXkapXc=d^b z)DnKgRd~2CxJl7wE;~we2~6R4)5tX%&2XT14ieML2(>L3jssfyr5Hrv`4DUPxPW0J zoh1VR&kwnvFi@&uC;HSu7tbAw#X7Y+ zfUQQ5Nb(K#Pq!x{(V^3qGW0F?7b;Q^OO$vvDuXP2(i zgSq^yKY0#YHa@LQOV#DlR<7X@j+mD~wc6bkAf4BEgYF7rUEJJ(JTb)m^dZfo$SP}n zxzwc(0jnEuRTxTT)DLbtazsrrOUTws%~om%+o6Z*GQ9WVlT~nT7P9h2Me-U23(lp_ zC18&M%&W^>bM~Uv;24hOfxyb=#HT+Swmj+r+&WTy$m0D34cM=jR_N@m7Ve|h>a@?m z-q{>?xHNMLdjaQSZTDFo3f1zEgss`$aOq6lc;!NZTZ4I%O;0{E^(9u{`DY%G$89Wz z-ORqSvA@z%Jrv>NrcN6ZPoBSW)>dKl$5)J#r_1vx#64Nun=@f#sD)7*-YJOl4Lrso z(*v%`1-J_z21vG;7I=QrUfa41#_ei}F7|o@49f~Ui)X{VsKVU=3C~-|mH79*3~QWj zQdt(>FM8%-VgW1FpvsQVEx3-G=U*KVc%yP}H^^iDGkbB?aSNEVCc_Y^F2w$J?^prA z57*wA#3(Uw?l@Uy)XdpJ_MY>+7SHg;oG6L&o30|;%flhhCxohV1uvV}$R37#o!Y~_ zD-q!_u6;3C&h9etMP)lBf_kBAL&2leY-er-%8^bH+F)Of6yZJ`zDBgeaX8H{eQOCEz}k})Ht zSqqKyzTYraP96a{Fo|M2C}o+z(4&H3?tTsD*#e3gnP6cIgxm|ckPkvGh=Zi>WS-%Q zNSAo~X!G#{Ir;MS(1uH0kfLzR#eM_|#6~miZ@r_fv3Zb-31gE82f6dQFwdz>l0Z_TVtpE37rRsIV$EftYy$C-ALMEm*(|_!IH57mO;||N|2%pO+D8d{ z_G(Rg@0l3U#~0C2x1hT2H)sn(rg|!^Ps*Ql<8Wb^%)`16!io|1--A}yzbIo5=l`CW zx4jYlo?VvBpXQr84*4W==GT;mfV%J+m~0X7uA>-sXyzZBz2f*V0Um|%LOG=y)bEs)4ROWq4wAt_X2%ggSXGQG`H-WA0XyHBu4 zmVaCM74n$9rbe>FRl2mBTWPibI2EZ87l{4@g-KPo`_y(?Aiq^%Qd7HyH6t@gRUl?4V+H}>Cb)Tie#ZT1fz6kF*NQD92Wb3I03@%KoM z(v5N~=0W_s3-1bVP)}vsS|R7xn&M|nr5(=KJ@ii!nL|bIy;+ldLl)ez^oaZn@eMTy zIC^K+Tc#$4U%zNp<*($CoqlEio2rY#z;d3e<^I~XpZ}hyQ;#t51uV80eYl}nOhp9y zx|>bVO%%q|M1BALyC~%r2QyAVWn) zttIE#>6Z%d-n*|!NhA=10+gO^)`8~#1=NO%f zKs2-8`iRPGqa-Bi?7SXasa<6CjhAZf6EZFI4ya;1Co2!gU!MD$JH`zH?vHtfFS!uz zo%79u`}nDvtxH=$q(<3cHtWu6a2(T?(BL1zH&-|BnbZnHHyGDIOBivG{#U1%AXT{T zy7-@Qt#5$tCBkOpvs)hxfT@Y$R=2l_F6sZaq4q7=Jx~$7ysb=&b|(YKYOsP3pl)B3 z!$2AkpnoZ)65FJD%7ctTip4m93IK!&sPjVbsxXZ5y#fit@)J5(OijU^$ZgQ>d=obH z;m`ihf+I+0Kh8>Fv& zH0E%BuIq`B8I*vY-|+o3GFOM|48f zx0#nUpjn*%QH|}@y^~Z|VI$rF6dzP5OKDi43+&-8G&T#`e&03Vp~n+5)yQseBa9}( z0v`SOAQ)OI0Z-z}RNd2;s;5Ha{HZIytTd}Mt}^~`Ix%-fpf_8L!N5N11r?xeX?ZVV>r+5UA4W%4&VMK= zC$WnRJ*$4No1c0*>z})M{^H`84YMck^-l64HddTUT5N&!qHx=!^KrrN<3|=h1>X<8 zvhmw>`$6*Md!6#iQ8F@GL!-_>R+-l*d)jjG_dwFv17||-s{dT3vyEVV|AYs!bUXPH zb^gi^lRv95u75rVKWH-=9Wr<%ofl1D<=59W)|3Pmj#=I{c!W5HxilyD^IjIL;dumR z)Fr&X#1n;{@4Lac@PQq1+r_!jPhtCuq6`0Y=8}gxN z86(g!EO{S>qYyMqZTAqLduONoUZruXUt6v*+)!x0h^#!SV}BKHdqQGGaBm%qfP;d9 z{>sG||Ng^#DAxor<+^iD_Ky*?`|z-*vPR&$fc2x!#9C^Gsr5puG$^w2X{iG>;QM<3ysr4}&Jp{guIie<$ zU)Njz`|j6e-D9;Zp$7nzI@j2AON*gIo);sQZ2rn{Rz_Hi&Vl>tI@&yYFQIwp$K`}y z*S>AZW>!|VK}|0~1P8y!ZOs4%9^ABKv2qH{Z&I)uK~@tP&)0B%og_ZZ@vr0#KKq6M z7*wZTtbL$fEX~qQ!m7k4N&D}(*6|F3fZ*G(A5HQ*m3zATdqW!~wu>%0CiU3!Pq&(| z+oYWCYuk;<=6#P2n}cfOm{xO_mX$RCkbj`eWHWqv%XzuF={0!B4ePBY^g6`u{=dgV z0jB2y(F}s<3L<6r6=p1E~m)|iQh!=L=X6mY& zO%+e2TK06di3-jppBP#cE&`h&@bbTRpSqe5_+s|NU}{ZQa}#BNQ$v~$?j>@EY0ljD&yuQtLW+rDk4w=Pf_;uGTQ@-fOUOHf?z{pqmcagG+B`L}u)wN6CMJZ|E&o9`B&MBe9;aT-R@vSD$ za7$~}oa@ig?U7SiY_Py#^GTQu`%7)1!6R1L##tTEyxwR^EAI^CM-d>koqEWjMXSQD zX<#Bqf79{0X-Vrg-@*fqKn3+Mb+<8~AV?}OFIhOBoAWC7cfW|?)fh#2*#01rr6ppy zJ7tZnFPX8sp;$PLcoE*ZON=eAANj0iK{9zF@hPXukD{ASSXH%jidCg71Nhpu$fx`? zrt!#v^N)UnD>#Ul#fTMO7L}~rap=Ap#_^Pr@S3*mJR*a0Kw;LqXsBJm$^XvPq(o|) ztZ&41<0sZ^l9hpM?%eLhqBdHWJsGvI89hTVx?ktl4O`2neROhUSGA9J3XgmD;5gJf zb6*;!n-~bIiGo{I2ssA@9-EBoM=D=xr#6?iCuuU*HkPg)G(*AUb(7<5)RlWm*26QA zx8w|i1a#{RNW|-e?;1_5v^hm=6DR&_h@X>_wpx$-Xi#h%?P)t0u@tr|xP5tpIQs^G zXiTi0-p1P6H{aadmfHU_EZaw2d6Cgfmof=Y&QWztRayayzx0le5f}OH=p#Z2+Pm=o zoZEX2e(@!May4lFEl>oR=MZx^(goun2PLKeH7p(lYlfmP#IbH*&s}^-!D+pelevE; z4iAtkFfgqmhy!Z91NRjUq@%U6ECH&7zb#nL7UA#)HBCLNaf#UGqYGr(c20Lv`G6SC z^dgMze+w`wkK;ADkw+vBQ7a!2M)7&G(Zotm3mEzEns^74y(DSpLVUvDeHft&OofEs zSSZ6`j>}Kq9yi$2lc_K!W`_HvkJ6d@loo0Ia7xBaDH^WjUmZIrY8g-s z`(E3kXVACkj&heHzQD0A2g=^S3&i&aIZvSD9!c&v;WYQ>AOAHI-va{Sfqx$?2@?T; z{3Ixapz%HclM;Hq|0Kj6_R#(l`b!oFm3-An!EQ>4FfX8(tak)3nSv+awb$H&*~|~1 zGi*Ur(D&5ujB*su#^z03bAguAytv_$bXrp|poXacD*g~O_wOAZ2{R3iE(2kerZjf* zV7lHPB*`lh%>xKA(C!Wx-)5uhxc<2j@Q&$<5F-9xWY$1%-+5UAaTv`@`+S&($*vyr zCGW!5OxngsRd(LfIu-OSA{A12upHTlm$V7UrT7K%o{aUjDB6gW z%lkl&rV7nNV%^B>%1Qz4v>4Q>;ul%>?KTvrcsLM04MkwEHs_25ZZPEwMs@W=1bUw;CN_1U27;&01e{7;uaS#+30wS;BBcsn30kkFin<-qHDOdj9QI>| zdd#%gmUhQw9j=0QBY~z~W9#Q{Le)q)F2(+EW4O~Md9Kgs*pWqp^uvNMLC7IcK{@IV zxjE$l-xc+s>hxR7ZvPdXl9S?ndhEv+ObLRip7?VC0Woka0k6&pPyeYjjRGUw)}=A|LNY z9MQKS9Ie*s`s0F0Y3?q(`8H>Hf4BWZ^nYl1<=u-3-1&WKXM)Z^i*(cEG`&l1R>$ju z1Hv2NBh??j%f#|_zbiDu`iNcK^&X&0t*Zy~Ub~pK(NU6(bc+Nz%zJppCKpto^ zc|CZJLaj{GwuNltX8f@-3lNF2)355ce$M_M5#t}^CCFlo!L5mBJ z0{prI2OyUX?X<;0SReub8ebsw zeMNZOAr|V@8_z0&>IvMtV&W{UkWyxt?nZb|oo6ax?YIF9)!&nXgcR2TsC&q5hw_h_ z?4<)f)o=y}SPT3#;0+^#FSKOEiyA+6OwkQEYTmOI0fS{I`3D@9LLnk0)G(dOrw}Mc zPs<}#pO7OQIo5VSW1T2_7`LUI-u&V;Tl5MWsAc!4yx^WXbMy2W-q5V_3p^m-I+7xm zcY?13jq&gUvEtx0L8wPS5?%t<7)tN6CY*@Xt z(@^68Lr|Om*UsysdlW*Kdn6>_VjlkxkNNL|YxJAL{2VjDtRE=e(nh6Uc01lO}V?QsmowtDKBC4UQ5Vp11)~BXf4rgl1Q96 z4RYfw{#!E;m4uD(9Tl=WV-St=tu_ZCqq>JK9@0Djp{I7 zg1;8F2004oH?$EV;}~8*H8$tPwnsW%fqy|fn;uTwm~6gk{^-?PSP`uV-TEg9us$EwUDmqha=ry!4|5tQFB zm&~03L-!%E6`?wB^9bfl%>ZnUg1O;^`6_6#m{H++6>V?QDRFbKm(}iRaU{OeP#+_L z4$NQCHoqVb-E(&Ej4%K5A#xxB)Ne=J$!>ap7&Ha)BLPB*D3Q$xCrf0_?3`AhKuXjL z?pRL593l%rNe^-wa&WSqkGubp&(@rW&5u3LPKc(+FWdX>WXxlf9Vx80x?>MsJ=j-& zp$*cIv0R&lv%FY6BvrwN@vrZJgU$b_)elM#U&N~Fkbq=+`;1k$4wQQ8EQ<;j2Rhn_ zK=ioUc5rW+|sn0d8MHO7?-R`Aw&G7B* zOusg(yZ@&e{<_PqL8_Ed(pAOCc|7A4_(Gf7&_}*OwzbI~Nq_RMfey+hPJXw&S0u5f zz8FfvtMC6pmK=ZY0t|yH%%{!b+fr1!zdtJ{v!)v-tEpgYy!=DeALnbGY~hQ_-C80G z2;ZyFiojs~Cyc^&Hn>XGtUP-Uo+rSa!j(mSTE)=vL8uwovS>mDq56KR0;=zbzpC%( zlIM|rzp~%#Cq5cBwiu`)6gPmp2Fy7*u>7@XDh^?h)TEJ9v)88YEi9k1`O!TZIF{Ef zEHjRmcL_H6UaS#HGmjc&BZaE7a%BAojP@-|CSk?pFGS?THa^`c3EWPW z*U+|W3VTMO>XWd6C_}-n4bQGL&xD9vYjPxCyEUL*X?zB%_S|v34nNEWA>r!ZVpn3( z4Bb`_DL~2^vCR8dgyCx+cbFF;3DAIjLF{{I)S>pZ&~hsOKbFj9H6Zg~549V2h2pQw zgZOF0plYxJdOTylv}cZi4$qxbW4T zi_Jd^YG<1Fmzei~nc|fTQ4U}$604s(ZB4G1%31~+n_E|r#GA#MNiKO6*5)|)zKo0U zOWyMJJB?X_Y(=2pz17x7HeEN?zv}8#Kx1Q@rknS=nzxb#s>36HIPJ{;HgzpmCv0=W z8c!@bF3gluuhOF`5hip4bRI6BbRp60(qQTB4OTjdgEyw95Xl?jH^BOLsJFUh{IH(bqk>tLsv?{(;tI(71=lc|;fu zKCPJvdD`?!0`#`iBz>IHbSuV0#=ehIIo2hvX}WCI(0)0U7x&=6G#SI?&(J9uaWIbQ zM{N?d64T>!90nCkTZCgMi2O{FhM3HcTXmA!fe`_^F#uK$%%GeCU(^3jeg8#Kxwuh@9No-#qp{Vh!#gA;u?(`PY^%U zI;dX17RrFY*V-gDP4n^3%MKc`_8e5Yd7%4LTFahTqi@*e&HZqN{vhruirBE~80|Pk z=X63S1bm(#%LqE2bbXVUd@WF{-{b%3isv}r zkdcjCSA7S$2WAr-;6M`dL3R270mYVXY5bPwblC2!y~aaZ%T=j>Pem$47hzJJX2u0q z%P8Ub>+lZWm3-EbQR=<>3#y`9T{)$yp0Y~aM-vbQ8#5L=X|Q!y%NsU`j0&)xSWFgy{~?PdSsM1q35h!CLf9-4DHHM?`93x2 zB*b?{#R?fRSsT#3$nJD2A1-|`pRHqeb7D$ugwCL@&#u7#^#a`w3Ccl_J2talchDK_ zP!x;6d3_=>ylC;PnP&37vW-%wnr7frRSG+W@v?6uGtPD`lgO@9TRqL6I8iUgN--Zr z;G=+VH%iw+{~6i)tm)BLmc|}^sC)r|FC{K6V60(VnZboQuRal8N@bPCVLo2rRXEp6 zt-~;xy0%*F%9Aqgy_HqHI);3XbrD+cs#w>gpkmurWW50?c{CWJ5#VjK7)P{lbOuLwOu+W6e=?l8eV6(K^A!H z?|)g~=?I$(=$k-;La1*7>zXoNG)Oe6!#?XX^fF+AP9LC z++{i5xQzi}IZXIus3lDG2)NpRE%rXGGsZej_Ih#OiuRlPUZ1|a)MR9dF~a9UFF!WG{msbf4i!$n;M>mFwPfWVDZ*Xb zd)3CuBk;Ve@N_dgp@AV3oU8h?x>6@I+@8q3lADp>Tv3@Sy zL`*M=H#(Z~ED(k^|BhEOd}){!?b{_T$6V64{o?0MoxYy|MSVRXZ+~u4mJ|#7xH5zp z3sBqgz4;UBar^ORX6%*NNMJUnR+mBa5Id6f`@oKZKSHn}g;Z4cl^BD4o;q{!BMVCV zPHTnp+|1XKI@akN8~!ZWQQV$t6l$Q75>@Qx5@;=Y_dBS<5%~yt@(7hPlcTwMM zcMF+Lww(9Wbno?WWLdln)=K`i8dtUYZ~;?XZt4H(?8?Kb+WP6k^POl2P8m}i;i!*A`q>8f>*s^Pa$P1fCSb9635xS3+HyO)yAN-zsO>f#O-^KF*q@5faQb z+HP;S#i0>ybTC4(Yj)wp)H$QB;V5>-EB0jkh=G`6vertt|@2S-~X~YlS4m zzqo`LXr91NriL#6{Xod`Vez#yCJAdg4xmK50+{G>>Se5) zuO;axiJQyZKR$C65OZ$cQWzF#>R<#yw~#uM&Cc(V!1`xkDepkn%HPxTPGs<97=r4g znAEev)X|(uwV4pW?u{7^$vBH!VTUl2x?4-HuOE ztMNIViq6M#25wr&b3*{hudkqw7O$r7>N=`)%rSoHKKYLp7kla=;aWE@zn1PC72|2j z>%=GNzRC4XpkVx}16gNgv72N$Vz3&>I~Y^kBX;+lFt3Iva6BdF^=Wq?mxY~_FX_oy ztF^vt@|$#Xu%5ma%8z+C&6)Sc40F%ca3qK28H}!b7{sScX%q9rjW<-1dNOb`5wR~p z$4Hy4fMs>$pe#;pyzfcp6SYJO18eJGXpL?>B``#FNe`qzyifrDb}av4m_!>;zc==v z=bpR|toRICV$LdDj>Io#MncAjBLK!mxJng$aQ0RP`?~<0*x88a0X-*pPx(3JXE|l5 z)-FUAR;Cv!IL+3Q>`lOnf(|;qniICqdn`A!m<^<_#p@8T%j^BY^OIBHzEObV8&9QC zY@Z{ja73}Je=``dTBz7?8TH~kyR~~?m5uHNHlY3Fj;H{sRggr$#I~*RqbYu zk5peg_Wa$*Q6Lgca?0M(%nf0e`$)BTQZ@*!0=gahEQqB_6O+Y43JJ2jqE@v3ALH`> z1ULr3IV>!nDFj4Ty=(ejgaCkYE6)U4*ovyIbyZ8>m{$G{Hy|5%P6R^f*TBLk{ptly zkCEC^a*P-#=?ndn>r65v;D8W{f%*HIj1ka5D58N1C*+9Muj(f@9`ivsN2@N+W-MpI z7-2xR!albZx%BtSY0wGOtNAiHR4y)c%R0pIoH4^qBerGD0Uq{hBTynU&gia*M%s1( z4wVHU7c`oXiz%p0te2tSm5fGsj_^#iT@KFE@R=H;P1p2&n6rS4Zen4idOGe1<9J`L zGn3}r!TC4`7KsiGF>MAZ`%h9z+XR7^K09WhOBSQbJ$fbuuh_A%cNjr-69_4lxZNxr zm`#Z7)@8%h?fj7}-_&Wa$vtj&E^zn0^ds9(3P9x_G1lMjuE*_=GSIUs8j0hTw#oqu zvm5-N!WxDcWU$A^0dXa@pm<=HM$Z9r3cO zLwF55WgVxzA=`a`UF)P$5aI_$Cn2-{@is-(ZcJ>LtAN^Jyc8}8>evOdU>i@dotov? zWBU?Y{*{jkne>Uzlkr@?i7OgS4@dI|GNBKlxnb1*U(j5A*X(ENM^PbbJj=*C=+NXJ z z!<+(-2s-t9Z6V0<-do=|ZFCnhxm@vg0Hnr(ohT?)1A7x{8j&25_RsN3Uu?Kq8QTD3;!guLL>&CY?uxfHKgC1Af2$Vi4uF$S zl?d@G?9c3+OgN>iwF^86S^1r) zzwpuVO=_v!o-a!-R^|V|a$Qc5F{!!r3}yBVXg_m^WE@fI!+EP=m_E*3fm+jn(-v%5 zXAMzXQC1>BL%=z1+j4xcVRBWT*e%T=d|SVI;UN{*7SV3CZ!t9Jo>Qu3CJhQ!>eFf6 zouam;@L>?k15BUR%2+AKehNQ5CNPtB=3p5B0bD*`;A+Z-zEkX_f?=f(vW-HPCJXB`3rDhVCMXSUQ0hUWQ z4!X4Fn#20J_V2Len$|GQ=q`+h9k&7d2#xqW*>}lG(6U;-)T7kl(_4FLE!Q?p05%Dg zKIhs5C5D_yFhoww4xQ@G=W0Y&^k;@ZZ+i6VKsw;ge*LC+N{EDl4kln;0dPk7*RleC z=-2qKgg>wdAqx|JDd2%ZMlIyf{wpu5JT0WU?hvcUcRO$UIBvq??7*d^bp z*OC(;>dxxkTv2t>N9Ik7g&gFL7c%poIu&YNKb5!lqupU`^>UyyR z_Cp)*sWJUMJ!O-`yi4#K9XLD2sK~4}=klh2JBkp%H%ve7K1u6)-TlRh60z<{+gd%i z$M6wB84znH1-zOkvjrG`^9nuOD3QEyGHzU`-0Tu^#Hne|?x_rG?%RAxBGCPQ2y69{ z&^U~lBqm$_vX-7VL$|(^Kq9Qvc_1o+LI52p5H5EH4g|7sfs)2 zc{#I1t(aL8GsxK=RwQGF24SYc4rJrTG)#n2S#Hb6t^h*gC@myopv|_}tqA`AL0l2bh5XQ#z|l#EZ=(nK3N{N(10`nU2=c zBBemyTxb{urzziE%+UmD(0xo;nAZ+2pyg`@F_}B_erBp_vBGVgs$XiiwbgY;bQw=k zxQZGBy7c7NR#Gr>OeLspKH7CUI92T{njayrE+e|e^>9aXXx&wpMa zEs;ub$~q}dxrXIt{o0goLI~H|{uuxxAX&^Yabpj(@)4-%xiHmmS78>@oo zCB0-SEqLHuMzr254~cp07U}p$6{&S;#nU3eNvUViP7%btTYuIF4k#wLrse6t#ltlC zsNCNjuYc?-g-eElk3r9TbciA+rq=Lm-QZOc4XYPoAJphG=F&>T^bmdq9E=q zD=u@Lh@P>=#40kaok{T#&!@SUs^T(%+018eK7}6drA9YvGBw> zZ(<>Q8+h+Skv6#d>YcOF5MfuBzq|r+7S3~nDEK%;h>9!N;{I+Gem5B_LiU>ATpyZB z_KE)o$Kl>IY`_AG2_AQ+Amlq%Cbfn+UP7ZRf~+enxfXE;mLoHbWwZh&JbAs@rhcdL zt?i;<^l+4&)M@k`Vnvr6h6$lF^*e-Fa5S}bozag+`6PWR9H|`pHnkLS=bMK^=?K!4 z`-pJge&(B9XP29ZqXRi%9UEQMmvR=3vaXelQq1mHPlbtTft?1Z&%jTd$OeRtgIm>c z{=Um&Q|1!e+dZcA4TgQAV}MF>TQvZ`yXtlwrfP^c&`a5C=+y?8~ zwd#$(%nL5402tCY#gQpNXEhSH3vUi%p@2I`w}IXaq}m2l3H+=b|Bb2k(O3!LcKy); z^t+Nf9p*G1T;|*KrMKrag~rwd3XWILme3ZGV)*~x%uAHugy2tRoL@7LI6$3tg^?}> zH+%MX4qvKviDNc0c4tM_U^HgPNN}I1I3QF?`qk*#8=VY8j9>~q;vp=^2}(L#jl6mq zaK1wlHGE94*;}(hzsCN7PF==2t0M5!B13GIgNq7O8a>>)|4L(6mO10OHOhhBb;xqj zgMw4>EXeGgf^W~*vy(8&UA7$1kKWJ@#Da=9S>ETYEt#iIMP!XK)GXx($*~Xtp(l}5 z(&@=nM&U2EA?0}7h_BDM5Yx~jqb2RI+{4CPR1?1K2oG0T{l?;-!1R+|Ul%D9a>Aq> zOTutFQVxvB3TL5v_#yfCq2mbp>P{ZwdZBa z(-w}Gs@*6TtnI()YvMNtPr}dX=+{xpCHvjco_;)md^D3!M+8L}k?Y20OEu*5P(2Sf zLN-03c2Hh0>I>LU@C!+W)JFg5qr`nPSS)*i7#REo>VnON&V%1|4Aw3~Ix7&OWrq`3 zkS+!34cPzq2bXS!fcqWP%Lg{;kF+CvPX-r{0d-F5&{qtjE`|8Zp>zk7Ie{@ue@b_N zTJ+SR@L`YBfTCR-L}#I2G3gjCsS2>K;gf}9cnpU-xBg&Mon|qv(2YD|W6(OmxG&ok z5P}8yLTPn4(VJMDi*m`dnVqSV)r?MFwUA=7)ubn7=_T!dL2gagT(C$R}9izsSCPlX#Dso6Ru&zdY#ZDexW zx_34z@*Q1?Uovl1!`h|b#ta9ciU7Ymvl*aytz@ZwQ)G z#rS!NKICNuq_GMV&sEG0%Q~P*RIXBsfQtGitMi~~bn0u{qrcJ+K8UGBk^u!F2$H_I zL21qw3~B~&lrlU|l5+DNGGW_$n!|=ZYaWJ>(yM^u-e0b`MYKVEh`gA4aL`&{P{W^w ztKsQXG|G8X*Gius8Yc^HCwuN$(+250*t@^4`Q9{002G0W60!QSHC}4>&(i9{>OV diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index b0f80a167b..4253263137 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1329,9 +1329,6 @@ For details about Microsoft mobile device management protocols for Windows 10 s - - - [AccountManagement CSP](accountmanagement-csp.md)

    Added a new CSP in Windows 10, version 1803.

    @@ -1342,7 +1339,6 @@ For details about Microsoft mobile device management protocols for Windows 10 s
    • UntrustedCertificates
    - @@ -1673,6 +1669,7 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware

    The following existing policies were updated:

      +
    • Browser/AllowCookies - updated the supported values. There are 3 values - 0, 1, 2.
    • InternetExplorer/AllowSiteToZoneAssignmentList - updated the description and added an example SyncML
    • TextInput/AllowIMENetworkAccess - introduced new suggestion services in Japanese IME in addition to cloud suggestion.
    diff --git a/windows/client-management/mdm/policy-csp-browser.md b/windows/client-management/mdm/policy-csp-browser.md index 79d91ff2dc..76ccab305a 100644 --- a/windows/client-management/mdm/policy-csp-browser.md +++ b/windows/client-management/mdm/policy-csp-browser.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/13/2018 +ms.date: 03//2018 --- # Policy CSP - Browser @@ -445,8 +445,9 @@ ADMX Info: The following list shows the supported values: -- 0 – Not allowed. -- 1 (default) – Allowed. +- 0 – Block all cookies +- 1 – Block only third party cookies +- 2 - Allow cookies diff --git a/windows/client-management/mdm/vpn-csp.md b/windows/client-management/mdm/vpn-csp.md index 47e0032fd3..fdbdbaed7c 100644 --- a/windows/client-management/mdm/vpn-csp.md +++ b/windows/client-management/mdm/vpn-csp.md @@ -7,7 +7,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 06/26/2017 +ms.date: 04/02/2017 --- # VPN CSP From 7e34efdf69eeb143a7f534c37f0bb90021d6aab0 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 2 Apr 2018 15:56:20 -0700 Subject: [PATCH 29/63] updates from sme --- ...dows-defender-advanced-threat-protection.md | 9 +++++++-- .../windows-defender-atp/images/atp-mma.png | Bin 0 -> 130055 bytes .../atp-server-onboarding-workspaceid.png | Bin 0 -> 53142 bytes 3 files changed, 7 insertions(+), 2 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-atp/images/atp-mma.png create mode 100644 windows/security/threat-protection/windows-defender-atp/images/atp-server-onboarding-workspaceid.png diff --git a/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md index ff8fdcc39b..737135cbd7 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md @@ -106,10 +106,15 @@ To offboard the server, you can use either of the following methods: 2. Select the Windows Defender ATP workspace, and click **Remove**. + ![Image of Microsoft Monitoring Agen Properties](images/atp-mma.png) + #### Run a PowerShell command to remove the configuration -1. Obtain your workspace ID. For more information, see [Obtain workspace ID and key](https://docs.microsoft.com/azure/log-analytics/log-analytics-agent-windows#obtain-workspace-id-and-key). -2. Open an elevated command-line prompt (as an Admin) and run the following command. Use the workspace ID you obtained and replacing `WorkspaceID`: +1. Obtain your workspace ID by going to **Endpoint management** > **Servers**: + + ![Image of server onboarding](images/atp-server-onboarding-workspaceid.png) + +2. Open an elevated PowerShell and run the following command. Use the workspace ID you obtained and replacing `WorkspaceID`: ``` # Load agent scripting object diff --git a/windows/security/threat-protection/windows-defender-atp/images/atp-mma.png b/windows/security/threat-protection/windows-defender-atp/images/atp-mma.png new file mode 100644 index 0000000000000000000000000000000000000000..37219b5b0b77ca98e403141e56dc77c61d6bf7b5 GIT binary patch literal 130055 zcmXt9WmsHYuN}0wySsaFcPlzjtVjnd?poa4-Q5cmcPUPBcPI`8iWRqe`rhaJ!80?N zGl#vila*v8Cqhj{4i$+A2?PS6D#%NNK_F;x5D4lB0UnSPh^R3DFNhBEy3QaFmdn3C zs7-Tn4?y_NML}8S-3}}?9v?{D2P*kLk&KRugsY2%y%VUSW?UW+p|}7dX)|XNCrbwx zOM5#IHXNqm$G;8bh7+n;R5=GJ}wAI(f*S}j?{eh-Zf@ypVgms#bpo~YHpT&Bgnwdfh?AYA-4{?V@j)0Md-wmp zcXcu`1Kqp@o&4`IDSKO6Gdma1?RaVrAcOyRnWm+SjTxx?&n!I%L;+HemeBObKFx8@ zHk9dl+j?InYL<7Vz)Kl}lNb+z#*~KR&iD8@VErRiE8BiYurfDc;pQnq?kx|=Uz4yGR z?JQ9xMdaSx1MsMyx8%wl`{3i9PQUC3>`iSxZ!N?b%xSz;yLB14qmMZ5a2meGTq&LE z{=Uo=(|$8LC7^%V{n;ZoZ+I$|;@FLz?(uANdc5`NiTdvPj&tVM-GQ(DU<2QsmnGTV z@3&2knZIH!7sI|EqOoBR<^Kln@aMjPtZD^1&tI*7@6!+2P%RML@q7lMeU45V^*Ry5 z#8AALhJ}UY%;F69h?&O-70qR$JVRMBbWxD@*GFW-gyM2j(A+Q?xULef&#iCAH*U-; znkxhmhIFOLx(G-A{q!e@gz(n6n#q-3QaB8KfZ%CH2iD58NRUg#>#G6A{!@2p59J^~ zIF6DYYconYHtqFtZ;RRRNyzV(Le5yJhT%5m)9b`~Pw$mI%pmedaKSD8o+y=riCA2F zcU_)!Uzad>&!zTPW71X}>?3`Uh#hjRfBfaw*h_?9ir-`dtuSgEYBZ+`u|ksX8nt%Y zx3bo=-Y|#Qj7owy^N?9FC1ckjeqNGUK?O)7g+R0ris{5bXrWFVIO)*wk%>nA6tKpq z@x*Tss6dJ<_R>$1;fKPF=s^%Z$uWqQntQG0t}3NwGD*R-Bz2>BSY1b*s5Ix~J35-e zSIWq*p`zrY3?Cy2E;)Y>g<+SeVpmlfyVv!1ab9#uj&01+4ur$YmLHLFYQb>(3ZhaY z^@qQ#D9c6+hFibXfR7w(-k=zzS&E)I6s3MU_NN7Vx!kol^=KnL{pn7y3yCI$`i79|&4O#ZAuiCn*ck z*u`d%itHLl!gN9>;7f9kIoTpk4DZuI)XXACYW-EnjjzRJ(;LS9TFoVe;`7^=t5aV=c zMy2O`UOVVdYpb&5EG~PFU2s7V)bQ~3lXB_k@D(Ik3_5{OoVq-(cTq+zM@ZbFN+v-Y}(6<_zD&=gnFe8nDN9WbN#euyrqdi z&=aXL26KR8iMtVo|7l6Arr0oMUQ`i-i!Rd9^R>DJM=TX);uVD#*Pxzp_X!f%u`Z=yr8uf8_3W%-57_T`&grR-SAVS_>r{*iZP@AAsTJceYgnlNz8-IzK z6%?R-U1ysHu2W)Kz*%Tf3t%L^IWD1pi~CHKlg%5xigwc{AKluZ{zPX~?!iNIDkK33 zCW$i3Fj@DDb?SUz+^Nq(kZr2=iua<-e=^{Lx}(}*#U)q5MuFP5lE;88o>NI~2sM40 z^fh;JjLY72mH=m?S z8&f|!FH@_Sot+Im^u$4eYlO_MZ$?;V$}@6i!%9pPslZB>P`zqgt0__%;8Q1vFF<1{ zTXHAX8}&DmWPTDtgc^$ukDR4!`@v#MT1{XVNKvlNl5A;d4NrS?c4q!FneDfR#C!9p zLj7-_SK%cII0fPxn_6HJt(u}CI_af|eZ6^kGl<1rC)mRdg=onKJO}PjIDSEk;PfewDoJzPz zBWOyq!jaWASduNQtO~Q)<8ADqaB>e#=t-g3|9nrFF9UUPh<_DLwWVYsj_GwwLcq~O zhRt*;QRF)2iXWTX+>A_-hmLglz?{#3H#T$bLicD;ouE?oBfPtzyBi7%F|3&}$5ENH zT&oHJ@;MWW5~Ytr+&aK^hz9Axhuo6jbGl}gS)ZCoCYFZ$&wZ*=OOrKoYO*$OsA?%a zy;Y7~_-Y-N>G^pj43G5Em@Ih^7L1I&y_iO+%jb4Pq!1EioQb3fEB#A z$}}sdXA=udRy9Gz25;>w!O6jpaBdq86z{FLYx2`#8G_K|QJfS-xV7fd!=m<`Ogw~$ zU0K&bM-7IO@2ApxVYn5xw)9ubDX}BEO?ojqqE{xbUSmCoLrd|`TcM_Rmic}Z0*YRB zaj)}D>`y_U-hu9rbl9VW9-}~TujmSagmCD4<4>d%`$Y3M-5Xsntu=sp8 zGrwM}rU5h7w~?gi#kkP*$NsUy3G}X$Ry7h+o|xE+q7A)*dsf?ifU34VOAig+F$I&F?K*IWMOMf&6i$M+k#F(#~zq@NF7X(qB653CeD>Y zm0|}CRRYe?uMuZT>1(t>nHxaI2|zmj^QYg96s3RQ`bFnGl{!+TA?jFt9qGF%WQLDF zTVvN4WUAq2F}`{I!bG7D$@*SL5(PrwCIB1D!;Ep)*(6QZ*14|nW_~KAV8OQ}SdNX7 z_2+Kgo$NTyo>pH3dl$3)qW!coM<8l_3y-SMJ~Fio^7ktGP_kAOvxU^6OaOoBY! z=KQ_6+vZmQAD7Bw2ljHHMDCZP6hovlF<>9O6QsEms4`$-7b@lIGzaQQo;f}rPLhF- zahh$hgCRvQH^Lzhgy2T`QmVwoB|c!I(u&w~To_>4Z)+SJC<;x#A(`;G_@7tsc(%$q zI^vp}d0E!z<}n=`NZ&D{!iUupgoZ!}_-mrf*6OO0!f_O}q${sOBuUr<7UL&SXErx~ zsIi6ZwyI}9e`>L%PO_98(vz|z(9zoaB5G8u#u7hD9b>FXadX`hOox%FW-8ARP#ImL!cGm{zpgFAkt5~j)z9}W;eEcm-SMqvzysNc$A2rz>Iqi ztT5G5qStLx;7VM}Gpjy@WlaVRL}8n;!TJa~gkUNRN*)?jvFD4UTDEC_j*I7bQXwyf zl&U>s+CViEJ+v+#7zE2iB_4<#T0!8cTJCEA3xvScNktfIQLm_JC!>t)(9icTjOgW? zXskBlPN{~b)yGbb%(JIU)ye&}ttWD;fFTZBU-#`0ec!>4DEmnF0e$tXN@IoK8;kQJ z3Iys;&rT(>Tq%V`4LRU8B&y8c4J628Zbz9jA!b4hy$aHq#736!@$#hvYjQ)y zt+6WTaN;fPB%+Rd;84)^cRe2N6|u`lCMGvUMK4GF_HXPxsLQ$!H%RU>ai5<9uXkNC zV;u5U8Ud7tONC_dx;7l-9UnQwmg624bK=K*M#l0{ayv&S?G#<}M{Ct31R zGxLf0T}^N?VHDCDQkM3u-qNV$JdrjyP)H)=1+)r$GR_*v$EMh!9Mo%V7>RaBQt7aU z@<+@l5aTSgR0wr&zCPQqDC0Cyfn+jL+j*{6>tiId$KM$_apuNFozNeH zr~(3BMLYFU+NqSoL<7z#ryF^`Ofwb7PjM!b7Bl7yaL`JW{G24+Sob;1dA{>|<2!ua zdm?GK5k1UyMvD`BhDBVX5Q>+1@YRI$frfE3Kj6}QCWc-ENm*DeAhm2bVQ&aE zUzUj(hQP8AR#%J_C(2Xg5mTXf>yOzCRK-svxY$&ta514Aou8Bl|~lNb#Yk47ah*2vOgR;sohVE@*S4Je?>$5 zdvi+>;OT6hG~pNX`ZkOdJ~Zvg(UCGW&og;`EaN6{>3 zrV=6;A6=AQUYa(Wf=eYhH8!m_;{{yr^R=zrj55C2&Dn9wb074>*L(e|73d7j!~>T| ztCb?na*RiH{1fdLe&tBLK{>cz>9W**njFFr^E7baxDQr6~y=LmA?k8Ki2eD7c55u-zc`eFQ z$27y7zUj3k3Y~W*v3qYLf77WeykyO^;4;UOL#Ql)wuqTW!j8dI4UDM=^A^i+rpZ~y z7*)^A%}H^l4I{&JDyFyyDnl5CCpXC+y}mL|WrkRkWW;%Y${qiV_)O5%RE2@n5d7S*O`sc9ZcqYXwow~+i-X8 zkKr>Wf|n!lq!}jlVo?=+;FnrqY1womrq6YNt`)u2dHq`^=6F59_uh7uTWM{_=iHNB zqfA)}#H?-bGw4oC{F9szeb=9x@f>%GW79~Zx5qS_t@aqFroJjeM-=*;@6gyuC$E3y z?ArG69_w|R&yLK$7@;p2I`hO;`-P+XUA%O@1}{x-X3M_&XfsBcs$ii z$K%ZjVxWIqp0A*-t*vmwrEatB+R*dEwdb$xu>1bX6w?OXPQ8$p*K09n@g- z$5BGq%EkQq?7ynDhv8|Y3K|-b#svdrembL*XB#9O*6<2^gV7mtp8L$PKk89o)oM}| zXcHMqT3^^(5>)6Pj^p0a#9ohy0JJe%^JpS!-gS5&f9>tM+Zz6BX)vDd2}*@r9VDp^ zHL;32K2(k^U!1--omGCG%i0`Cl!@|u9;Nqq94(VC)%f;$a@N?~;y6SvHfVA}zQ5G- zjGM)0zc>C~bg*Od+Adb?mOqn=5H?b}?+2Hu=}8eZaQqWj)M)ew!nr;NmR}#gwq3OJ zK;-UJeD7c0Bw)l|xAK5wD{<^V*Kx<%bC>uPG2~!7j0`fD8biYWg=|UxNzMv4jxXm~ zHkI6wM$)P=kl3y>0aaB*O4W$n-t&5tMeMhOVhEM{rYHTral{k3w|@{G%U-?Mx5Ac= zFgRqqi(L1vEc)E9Shad4gAv2j+@{Vl-A`xd)0`#P8bqDD^X{`eO+jURHam~jwI)xK zq$KU97%HOsti?%_7owz`P%BG5qI693(LEvLPl!{N{+=R z;%%DwUcIgz?hKMTgtVcBiUR>DVPy|rQHns(EIu%S<#cs z_Xw)yVfSNe?4W`BCZ=_YWcO=R?bUEq?LeJ!sY~;9L*8@xNzE&DfRPNGXcU@WZ=%e* zI@1|R$*tXAgHh@4uR-Qh!T|niB{s_lW`LlTU<_Y=7NrZA2rlXS&~}$yR#F0QaHG)m zdXr<_D)*^Uq4+jDn78g%{gPDL%X<$Ov);zr#2z@A`~zMMMej2F4oit^%D^lR!$xm? zs(x2J{yURARc(J(tqDkufO;Fi<&bMM)8ic(V9lsYZxQysyVfKeMNu`D8m&itTUQxV z*$Q%U#G%3HJ{R0}t*?5iETZ9-8bZ3B$F$!%4(*gQoHm-4E&}E@rS4+S{@%D;2c7$* zec=<15x*1@yBBTQ^u}IriU=cX&C7ee_j@?2^^-Yzw|ukU!jy@UL}fZb+TuLj_mKU4 zhX?0M>iP0FGbRJc@XqW9_JhSwc2pS-!0GBYU)_0Meq+BFz>eE)=k0kpt8IPjc11CJ z2W(<@J?}L=2Z)uuFL$zLuTN2ymUcUdQS5u}Juf`YhvR+m9IlG*fH%fpmo&LDxT#(- zNY`jkgf)*e*l;;eCAhYyS7wHM?l${9#hw_aY&;?llrj|src`~OssFUT)Osu+RRoXG z;v0+7v7H3ePo8s(=l@>Y92R(7lrkbCBVoc& zCd`Etxa9Z!>5F^V8 z{IOCR8rY$bnY9h667Y|DstNVASz1`b@NMZQi6aiZg4xy8pNRC?y;JP`c~(tIb`J6H z$Xd}Ex!L_5#@hDk$Kt^bzfN^+HtP{7^TA9GFE>k$d)r~x=XozIut@AEki*HG=aZgSW&l1$Hr%%+#Er!8U;ap91O~kN z=5Ab|+->=ZeaX9#K@&RVAXzG*T^RWJv5Nm;ujOhcE@zT9&0wi{KS+lKLjmLOai+>Q-**ASx)bp=PLL4YjYj$lJ_P*Cy*?zAN z!4MDGGlYb*7($YZH&CM!S2JZ>Y(C?MBAcjHR*7%rpoUIO1w@(1BEYkkg0luBdWtulHM z6xrw!zC7yh+$pDin0n)n8jQkksP>|kYJ&p8IVj@%sq;1%*Za01Z;%5e*5{^brPGYs zV6Mz*s=ec(55K#Y+31D|^!hTFXYSyD(O>EOB_#6j`Ky~-gY%)v=52FJf;^qTb`!J5 z<8c{OxfauU%OAt`_V)YP6(eZMR-1iA_{YaOl%%t@X2%6w?W-T?zUdm9k9hEpPoCFV zTS_J1(uS@aii?M?h0Qa6lO`GB3qOKh6u1A7ckw0Qk9!nKv^?x>-ScLXIcfa1$I{&UH zyGn@j#o0pkczfEKGKmxZxic7rD4f^QxzCz?-;S+TK$kaly_ckVwTQRX87}Rm~1$6!Tllt-6y`K>#SOwJ4cUg$)X;s zC=N3Hq@V&DbKiq7GVYrYefdNVqkj2;PAg+z)5w#ujyPdUPRy{fysGaO4jKhHaaQ8k zq9yS$mNpb>zrM7qh!Ax=S13%$nYrh2qW0nS&R5>r>sniqssn{ys zKw&h6tF1rS=py^#*P^;EM z`gvnTANhq`u>37Fw|7z2T#d&%kD&M9whE;0MvxN

    {!7$kZ-p9?_=%Ld9PX|SpBZ&@LsWyCkvr7sz4r8U1T)Iw57kTwD#SAAhCb_c zjZLM?t(S;eTfXn#qo?-;IDh%&Wd;j1C3?-h)?&AxUKBSJUWWSk^{ar#C04WjhHN!> zuiPZI__~)+6EQ=;mC3h4dZ9{vfzrU)d~Qt)gsWV`Cs%V?WEMC~zSjHMJ(fC_AKpl= za^wLSAHxIh;Rh1w86j99%aYU?qc4~vzp5%pE#ogbP6nqJS{TVI7Y@-DdWOiMcU3lo`F|go$d|mo^(rlc*GJHfYZR)%ob$yW2K3_vUDTf&1&>vfKuj&T;9y^_D^QwC*^NP! zD#QFTv4q5H-MU<>=#0$J?LNU~Yi8p8l-*AEyFXv{E64aBapkVtlT=K1556Rn_99!6 z@cXg7H&-dstD;hd0%QO7H*O2(hU2r|hV-^~`~k353qUDmj|sp^EqBt=r_Ct7 zzf#t22c^?FogH4`V>=kS3(c@B8!e5vobJ*>t%0D?NrP$5M%-p=zZS0_Db;#6_ulpR zpauB|-Jh`XUCr;JUtj0FB1jbPA<{0#4m2xIQz|}bY8HQvLL;ss&XKcN23f*Jl;TMq zCrq3JTV%EQdP~Tafzp7MKG{h4zV)z%b-DQiZtqwC>>5dPUH`Bd&?Z!c)UDn+T!%)tVoMIeNVi-c|eD!myl^ha}!P`Renv?*7U4^kIi zvZg=BZ+w~Q-)_b41LQ4c7B{5iw?CtE#=1N(|(>asm$UL(da}0zpdIg*9 z&kF$SlkO`3vwrt^;srV}T2&ANJR!H!eEph4`C{=8eQGn=mS(MN){TqujJn@HL(%8B zVA=bed_wGxSJHs@*JleellgF2)x;#V;$3{nt^9MJtJyY5N%rZ?BX{`rY%PP!3`tew z2B%?1nJ+9fbXxB{H}}A7$%nS*t1&_Xg3o`}+ccSQu_9oBjg+b}#LLrsXNi(5=v}P- z1oV2kSSVJ77`IpNn~>UUQgMgLr}(;`L^>5SBn!m3=Az96pVuwoCS;=H2j1{vz?%U@}=HK(Tt_Rrx>j^b!3oYQ>ga96K$!`5UP0UvJ`E{02 z-c+WL-Is;Rj~3Me4u1|GmWM?{%>=x6lFCeIe@xTClF0{fv!K8@@yH}mV}=^~rzoq88WvHKtBI;{>6X)@HH%}qneo=^w@ ztb}+87;<~M!lKt0o@Lh_ajJ$_f>Q!UTynLvv@8Jft?#Czl7Qh4cpm29+q%4a-e>ot z%u#7@IR=0A@&YV=r*TeY7l`ukfKQ|t*NtTISWoL|u;A%-xUq(jwMXB^Y6%-PxUQK4 z-Mr(*nB8UJ%K>bqEZ!K7+&>jsRhmpG3|lBcsi}AYZdsk!ZUxuOyLBhcP zVuYE~#sH^5=?D6%vnwkK1femH*swq=5V5Qxg0FKMRrv38zs<^bD4~qvlD2Afx;W8W z24=0!(0`av3}$S$+mPfH3Z~sv&Zqx3`?W)h#7HZF!R@&4cx`!2uH^~n*5wFUQH(y9kaj`;g`^J|j1?nOLkBm0C!AiIb&$eQ6D4E|M>f`5Ppq zr!pY{{B*<&DCvp-DAd&U7u%O4G@VoKUeD34z692^)v zR*q-$gaH-=y>*!JrBKD!>ICOtDsPI<_vZc8Ak`P29i>UZ6PC$`ZTE+PVO9D$QwSj% z`Tg{}!XoaSm}}wM$a4YHYk^Ybv%-U=qZ6`1#*|n$UOPJp3P%I{ehwV~!0JN|&fzu3I%PUAq)ZFgZDOJhF-V$kkUQQX15x~DAX*4NN)HlhxGaHsQnk{Us> ze#NF3?n=1XeodiGzqGbCEOwIDW^Ko7>xnGyd48Dx?{_mGurY0VcC@t-&T$j|LuNQ&bJ4}c z311=nYqHpXoy&3{2@AGPIzK-oJ@=sZ>wYj7eVmDN`t=-Q0X2pulf)q<;`3(?PGPWRXcsi?DO`1TTd5K z6a6Q71vEGn+tJ)}7gW04srTv-=&IT^uRkqY*BwdX$Yt z<9Wlsf)EHCN}q@&emMi33x~a#S`h4%%|_pC&IXC+{g`~lch6mT0ITLoRo?xo={Pq( zNj*DVo|%ZmW!7o7A@qA0BZ?LJlTw5=yTmtO;JzhM5Ko<===hVdOs#5R#JpkMahQ}Q zNnv$$mH+Xmh?w;6zit6RsPN0*ITj;doUu4zX#au&tbffbWPG;#uC5FPj&YV^2SQdj`;hGM3sXJ#ara>S8FbKEyZ3xiUp7Z*dpkx%D-@ijGUz!HI?%x1kc z!}VklA|KV}d{}QfilslCuTNk)+>0i7Kq3yNn|Xka6ZuOJ*7Hd4h%9h5$W?8Jt;{b! z_lrGFM7{!ia5GF2XN$mVvpH_tvLz|H)IWwM61YTmCkWydeL?_dj^}m}_*aSz+@5{P z;Btim2#iwOPilg{dUc&KY~+m_^>~C}33brHQ5uo=U@XNiG%Va3cQ=9<$5Lznd==_?9)J z*YNem%6uYoFk8Tx=m5^wM#v_UZb5HEZ-<=P@HO^b{G~2I85`-3OAmWV+#Y?5Kl{7UWl1g@o)UJv0 zeEWqPT!4RO5nZUo_Ny3t`C$en8(;R_r$xtMKQRa^uRbD%=$QpAWI*=ghJxS_Bl{s=C~aV(ts+amY}e}>Af;`ZRz*3 zjkdzWcM0kX2n@LUNxS^Xig1AxK<*v^Zj)wO;jX+0<|w?LHf`KdJUK!@?#HlzTc}i} zf?#^cC=D0ZCKm}TM4vGu@D$kos<0@t=>)BX-|AK}C`(=u4+QM??kxdiWmr5YX(f_U;j+N`2aBOFL^$^A5vMi$KOvCgDWV4 z15TD_JS*z>U|@U@DlDySO*n+)KUoilx93-AQP-Pga-sR9)n6BWjG?~Xs{f|GuPx`Y zT;29b@bT%X4G4a%2btD7O;!tRX3Rj;j5)4;?4m#*g2gCgWLa{(6pkw`E%%+bYLdMl z^bT+llxhA#U#-!>fQFi2XKPvP%D^YhmD3mLp2?QNtl33m%X-PS0SUJzNP@NaH^BY@ z@8*_BHqVj2ehMBK=d&H31ttVpgd&cm&+;(miHd0uaCkDpCkag4p}7mSmqB-(u$7^mmv z`Wr3h3j1kTs~p7{rA^Cx9by8=JPJ<|VuZ0swO^dD-OEMYo zqWoztijE5?5HR{INFw#Bwd!n%$Lfh>2Qf&AvgGwRt6ZU!e=5sl8S7#x1yJ^;BzjjU zIWwUmF%5DJa^yGhz+C=hpQ@rn%_=C65L^{hpeyPZd7m*7E3NZc7y5(ryL?3$8$!oL zQ!2tN11U~J*+2YfO9t+wJr5K14hHyJcK{#PGnF7m7IEkaL@w_wxe5y=4yu3&K(WG8 zMO|H830ok(E${c*2ClfkCjj0q4)}U9-cJd?=Ym$DnI?LCd}m>2XO*n%<@KfWskyki zDTo4rfPf&s!P&|?R$CJu7@k_BRAdCUyen0I#;_TRSuLD23tPz5VhdAU6vv#SVv<>( zKsM}nbbda3Eew8E>I0-=^7z4x^{1SN^r>u}n^bOM)pQU+?+?I&VCD z2=dR6XbdCElky&SD)p*EZP!q*u7TX99w@3xl`;a!*9iD{cnSjQ@pGu`)8UUWk|R&U z*SDQT-3Jj+Rj;=4#4;?HVKY4SAKm-Ra3!0hkR;9dWbQlnG0dx7l0@PYZe ztHvfXaSYXSnVhmiPfm3OaJ44J?2u#Occ6@yF9FYxsSHvbyAYM&ELb&3;GyrYRDi~rOD>aNz@i2F*&Tp~MIWccR>*O6paPnY9052IdqxMwkfg}(aG>iG8(I)FuEp;)~f&;?>*AlxVUxz7Cp@g1C z{J(RpFTcZ1HRE|4e}u*wtH+RxpDsx01r9=6y+R?3iuVkuL*+Wm~T>~W37h|M+950z zRo7kY`N|=T+;zw5&V6W5hxAt3T|H(4c_IAHc{q1->yx*vSlpEX74FP)2`np4X(W;= z_P!-Wk$1z6ly*w^x?&*1)=8FA#N)Y61H}$)=xXehf%Llz8Dee4#&nBUWgP1Mw2qOw zP2z{A66L)CJ6E<>HaA*vOtSDflu$q7p>;ObIVcp5dFhrT+1vT zTpq@GI>j(%NO(R}F8eb9@>?C6vyWPY3MwI-YMw%knu^|aJ_s3Aa{jKIY|-PCbjq>( zxieq3N>lcA<4EWComwkShJ5M82WXV5WHl^fzsip%x+TQanDfE?a0rIA8t`6mFkuOAe^NKd z3Kz02FgB;zp-F#oBt1uvt+SS6p$g=E+z|PUu5$PMn(I5fCo}yy%GGMQ9N)NAm`I?u z$jd5O?B=d-B()qiKsemQBuq@dk7m3v8Xm3*8h5-awe$3M^(3}a6 z)W4gI!N}bI3iH9RF3WJboo-RMX1;KPN5rJ%g6OnVjisL!0(w-OZpeO9Oiu>qrwf{9 zd6zBCGc(a5Ifb_l=K>z@I%xFHw$Hz|Cg6Rm@wOT;r`erJFt35&H;(OY?2?E?^DlU~ zX|cNw>^IaZX5&i?oeD0{=4!uqV$yv6?@2HgLwVFGXD6dKRqN0)k-rQYxdsquSSW=3 zf}4BN;`oE*DK!RM3KNY_F%hzb!O`;?H+MT^o6|@IxbRS5>tu}JU<=MfQ(-aU%m_>h zI4Y81RZe3j8}wVouLE8k=I;H?bOgKIveXwPLrAnW_?{X`7)Tr<-}@P2bD=&GqoAtr zAXS!9Br~nv$tyIvsYw=0Fcol2L#U93zR76B`65XL#DAobC=TxjT!K%C0{2jEJ!9BS zph0ZR~|H* zyI>?7$#RdgWO3|RDsd!2o^w4Og!lqn2_=7!H{?vxpNMmL>|Bse(f@gS(wwjU+8aS_ z*WBAW4Na+hW~xBKU(@2(Jk^dy1Y-RDap+toA}&s7s3s~39FGCLI8-Rtj9#I%Kbkcr z6p}b1TxFy*r8l`0A%bocVmvG<*3TDZ|KEyAn7Ws7RN~ayH7`c=;;sYI;WIa1xGyVA z5<$wq-j@B+k8qZx^EnYiFh4=hbGXPeP~gDx5H?j8++s?gQo!+p%n3I3^+JjC@?u@}fP=cUwi1i=NEwf-! z4GhazBH15PQhjze&*w39rJP}`eYbzTmT!D{x5)w$wkEF=um^QkcQ3gIr{s2p|G70w zwD5?Fss|({U#gK~SLPF0U_1N>MK8r_+lo{$8P5l-pZBl`{?q93p%IcrMNP&QG?ITj zrP~fI(9W}{Wm^fG5DcTSq=yMn+{JGu-fmCtJbK>nJkW{`MXbtl5`be^6`E4qXHetu-R+ z=px%nDXy-9jjI0W2jxohgSgYA;!?vdniNwy!nGoc-1m;AWA&yV3S}bnB- zcAyhMb?05@K2MY6EmIPFt(IwtOGbEA#Nu~dhnrrL=iYu#Df%f(Utg$p6iuE^hqEWl z8S$b%2C8Vju%#$6{N7)DdFQ<#LpCheRilV}wy$5DGKxwy^exe}f8PXTeg92O*QYC# zNE8L-Do^#?S$-73V z4SkT9?xXc=Q~FK>_1KwjNu<}-lJ^}pqT36p^n>x5C_fX-hS={r=Jm4KTDl?4V`zWZVRlM!-1xjI%={^$ls@T?ABz%Bgas~VE)ZLD*%*l(+Jb||Xx?l3)E+=THLA5Y zCfebOE)gUWy@n0Y!j{kOyeH>Dp2jCOZ_sV;093I0RWz?mhvoGh#rG8GdMbvlM9>7i z*p537^xq1padyggk%Lt2H72}SoLLhLKZj|T$>q8ctYg3bNp3)7R9~Qy9*T_ELgdqZ zAOLP#7OEGmikgRqQ;EtONkuF*LFmjzom=S@kWvl*8G}N3uF|)L^DjHEVhK3KT5^tC z!CSEesL7N86^fzMa4)eXZR%5tn|ZHW_q2!RP92sE(&tSjjha>l7Df%mS&KZhZuNje z_xHg&?0iO6i+QTpOW=HK*ox38B6IP@O-yV}*cl|`K!-dWq>w4wd>(z`>y6Zu^9l3! zyjf@0B%Acn4_SIKAfMHAF+Xrc@;J&IcZ?11lR(UA&`we%pJu<@k0ylJsl%seS+Eo; zJPI@oOvnLO7>-PV4hxtCuTF=Bp9BqHk45w1yhT;15_-2CKDVruM9CnG=&;Cg5CFVO zf?^2*EVPocG6a~!rOT)}(W%z@ro{~K)H*DogT@l-I5xb*ZXKk`b0el)<&}|h$EHqB ziS6xzAb?J*to*sFTdj5VAY56gcxBF&@m+`IiXTvaoz8c?>MQ3yc2*Yp9lcYx4wlnB zr#5*SEQZLyx#MD>M+fj7Srb-0Wu~1bKQq2gY>_wH33G8S*p^f;s6*rIpsoCE!+lw%+d^z=9$N3%#|B zziB^u6{y8e8B%0T{B%S%>$Bl4IuRT+#;jVI)Snves>QV>W z<;&*MC(J$B5o8t+4(j2YXni{#9aRAAq(Chku#*kD;oVCP zPR@X-!=xqJz1-GA$u#zpwx( zVA_?mXDe>Osv3*8PAB^D@v9{(mgM-c%g*&fCGTHgOr0(%;s1zw3$UuTsB2gekS-A< zq(K_#kPfA!q@}y0JC&3ckS+lU>5xlK;*KzP$L`95)Qf8R)kRiCeT!CJUotlQcr7q4nQ)6gar>wMu)=o=lrP z`ieOb_AkWR2DrN{?oIjxVd~8EFR$2>OPI@h?CaLun>HCZ(B93Z1b+)^c)7glC~N#g z_9K-7MeGavDarTmFJaA?66KMDB;*`}@k;4LOpYPmYLGd@JJ5I^tCDcj1!v9~?YTe8 zQIRzWJ8$xA4UxQCG9A%v5+|uHj7hyBLmof(jhWwp)8J0iqMmlrP6$e}* z*28@=l?pdq`nQjd>J!hZC!$LkF*Hjw?C+RltobCGF%w0`4Q_rWdxbYVFhNMuGi4U& zDik|uow)HNF^$$M@XCtRQ`npit%wnHIfl^`mhOKy0w*6QRBX3jE4Q%+IN(8{9Tnk zEb6ANb7blgy&s83eY>Xvf~&4Vn>DrCtgv~#0zzzG_u)u5HXBsX&CJ_r8dOZ~bnTxd z$mefd5sgY^)RmXVz;&6w{ov6fGSu(IRL(|-VO%p0dmqFQxG~_4IBI4{KyO-Pe;B36 zKr82%kA?3-n>?t&B+ol_ptB#q&Qh=UFV6NuXL2K z7j&Nl=Sz!gOTa=bWOR2B&Cpg|+|x)4#uE*+f=}^Ml!y;jA?WJeagA3h%zs);*t14j zrddKLWb$fo`xw4PvjIngo|5hevIO2|<%I_lL(C|Z_4o7D!u8l+2va0?^qW-4R`Wi4 z#xlzGK6z}T%PstP``C*qilz29OScm`Kgl;>uue};oonE}Tct6`1+o;)ffV)iR9gXZzKI<|gIMCoc|`*a&h)K<%3Q|J zYSwz}$%NHw&6AUpMaA+@AAQW`NR)?TEVmN;ob~;S&Dwl5rjaZWg@6DtgtW_$AQvxE zWvxzt64^}?-byuN(khs#1PLs|)P$Q2`j=~T8dk%HX_5yI|Ls<|Z1mx`p0(_cfB!De zoJf0|zOZHU&969^8 zYxl;crcFJ3x;HlqsrweSy1zFYDiYCU{_}Ns!x({{KK!mYjfqIXDy@nlqMM-Drf2i$ z!ypMpoIvacUdf$zg0^n#$qBX+LtbH>09ffe)eT}pJL2RmKJ)(g{WrJxBilTuE6)%E zONgXFeA0j={rlmeA;oE4t%5m>Txvc)iIpxrIOx)OJ zLm$deQ^XE>sWw=k2o71)z_RhY?6jzn+hm8YDoFj2F6RUmMDE|OU%%e>uB++b&r*+2 zn`LU(NGhQs-Bs71CyMNMvQB$0lvy7Cro)C~gzY0*-4Ffz4^t|gmLa$@Z-eoQr*uQy zHB+7F=9+ug!MXv_94)MKLX8GFa4apD>izRPL{vLq=0}xK{5HnJMkMumlIJD6JnVA0 z@Ta$F!xoUtrX+&}HO0wa>qSzjceGHC(Dr3GdZ6znyGvHO^^StJR4orlEblG-$Iq_ZPjX9&7 zG2?>8p(lCzFhehWDSN(}oV{$Kh3o24iEH{}G57emRk_xG(-muucQ7WfE$UvsBWP&G zH;tDk+w#>yS;b?g!vFNznwsqK<4uGr4@uGIPs9C+Sr!y0dL05dzp#doRUR^lx$ix) z9L?G+NVm^zZ8b1Z&i}CvYC5@?e+C#eV37q}wy^B$(&-hFRt`NspLXoH%A2s42CbbX zrhh81-dk?VZt*#*_PucCdAWXmxZZp;z!DV|^@$N9Iy$;kzbWg7LsO=R&)+J`QHr$m z^oyCg){sSe3vZ!;*A6W*hK7{TdoEI%dSVPLy(~OxrTYY@Ukz)*zbkVcEwj$ySV9+88E1FUbN7 zOw31Jh9A6)@47eWf!E_A10qtli7K;NznNN$0^?W7|G+}Cc36KELv_QK{<4v>Ow)GS z7wq_NYSjQ(j(rUPog&d`xY$RKT2H649{@tYjMW zVgP-Ro>&`NVYz7Xc-=AN3JRah-3W=>Un-XoE!$Y5b%@i|h;>T0c-ro4C4StE|C zY8>{tFhwk#pCq1UJRSAd>Uq|1>D+;?jM44z-gS*XED{quFKJU14b)J)Z-U3%GUw-Y zmb|tfg9%CpZXZIP1t1AaZ&H;)XACKvK-{#GJCGQ~7#kVsPE>5{%T0$axpk+7h!@JmI-lT<}DEv>MAGa91E)#HmtBqTX? zb;Pl~o&2qb*dv+GdjBjok-%Sqb)sZ?;QU+wyd{OLh=JlOn!VaMj>Vt8xYf1CWm=my?&dhBzj>-km+)oj5lh*9 z6Z^<$tq*>OXKMXc2fJsN5?ZOL;Sl{D8-(jKD26OBHA|vp=_GR)OJ6*)XR7Idl;>}# zGJ+1NI_B|&8MHLB29AZFQr$3=ev`cG(xAsxuG~lKw2W*`R4w1dfsW?Iq_Y;kzud(=|t9h5`J!^fw_oS2f4 zL5GKCRI9t`*|i-!s94|F&5MEARv#9qh_Nrhm3oDnl&{+vfa=SL^w}E3dwKgm`)#+P zK4*W-ZEPZ3g@(aOuTyLD&=B0jPC}WA%E}7IMR*vJ_W+*x%v4aFqZ+0X7WBhP0hFO#NUp`kq|0ck)~*@i#DGv z`7~etsSxzud&-_1w0zmJoYz#6?y@~v?XqnPKe-Eat6R=fX#V4`TX2rd;5I^*!o|iO zpO}yYVGRs+n}f*+A8C$M*!yl1u!RvscGrWO?la%jpy5qC^u8D_#fDLMzlXR3>nG^* zmld3KdEm`pd;Q;25s~4VQBei(v*qRGHD7F{>ot4Et*#p1L0ql?xy9w*-_3_TWDpcw zCSUR+7N)1SR}fOu`ue(_$D*6vkN={fYH7$pn39Bq2EeYTqLCPM9~bOOoum-?TK`bb-3?f6E%yefP|Lb2X@N%2XW)%oP7D!Au5-_$KW zr-@rR*_niNnxw)Q3{_**iw-q9lg?7j5-eR}&ftz(W;6%$+#tvM^S|BYz8b}dM`T}K zUS1@KT|BU6GWcqR5BAUpwzK7la-@mn^fmLWL08}+Gs&wcDOsQT@+w0tAPep}oZf@WYdBInS*e+s`RdGa+@9v{u}||ccR!3V zhNzTHA>Btsoon&o_w(}u2O2&aG89$_Tmsg~n6lS()%J^x&IkE*7H99g9gf{1!D=(!CfxC~GN*+Ic9FG+n9XKdEiDl-BbCS+vr%rtrICu!EIeSu#$c69s@9*(YA zrrTX*+UvQU=>b*#`L+L*znD^C0=N@bR;a)U_Oo&1aJ|>5K@U=ZFa<8`66bq|m)Aoh zBV13Ps>lcfz*#sLvVcv+4JCaNs}4=JIT&B`^|u9mf1a#z-6IaAK9&!MoEQ}s7ci+S- zxKJ1~x)Nh!8}kgO>;uVoRBuwYi5Y5cXJQfvg&%|(pa~8S4~zF0fHD{~*N%zr{~Tq= zWFr_uDK-K*oa85E&+ci0yu~9@QZADr*8iL{;zBjK_`G9hB^VM`hf*i?$RBOJyH626 z@MFHlvH_wNd|fWj*Jg>DJ?$61q9pZfABn4WB2Vf00wg{JBhi-9(>NLoaUMSAOa{UJ z=kBg4c(~yE0;NdIuJ@_1@C9>fVyXiqH{C%QzD&pNaF<8{Mb1&=I0ENacr+4S!L}D* zK2A|&fc3SgApxqOOe%08eD2f0E-}R&>g?dnmWd86DeP=|QNp{`+N^LV;E>HVc~nF( z)x+HfHl_JwLg8w!P`So-mVKh1FsM^XF)BJiv9L0YZK3Lv-^$?)ZTe`H>AH|0S5wMd4oei5H1anX%*@S#6F*&?=N_n4tolL?>(0NlBH>kwJZNL zK4_X|STt`p`heK8!ooub2Ty^}N=+r9^(hlogpk)4N4vMwLRL5_r>u+%%?dpxRgPOj zB;abw@2PcKe-1lV26q4Ny5%kSC}gC&L>vY~T5bO{U{M6zei6QirLeTK3l^v9g82eE zRVFB}UcCYs0B7ih0QnYJaX&-O%*mlv$`TGAHqLKp$%HCrY;5dpzX=0iPxkxI2UsKH z?XNhvP4rn*`$*Ev!9`ETXScFbm|f7;mi>Rc{fJtnqU}aVG+SAh9nw~6O3J64oE*ik zb}7S}c6|3emajGbv|cK)8<4MM-|S?Ax`1$c!3smhc|W^rFdjJ3Zi`5HzVzIp z%{!PoQ9aOdDHw1gY}k72?tcu<^s{eGSJ%t8kL{DQ!PYtU{d-UL^-eaYu<*d~sFw4!CceHIIn+U2 z*Q=B_Ij)#DEBD2WAj0`x{#f1u-;%Mjvs%xSyK0ya$@8kJR2vnW8XL{9;>&j@rnz`| zLkb?Equz6MW3$*_s!Petl+e&<{aagc_^YIXi<5I?Ady8jKVDHW>Nt<`+9NG3ZLZmi zJF-b=!zp*X=qt`ptXKm%Q1&XU<5LqIr~FHOrm=oOk;E^~5w59s_wGYzm(Jye8g%TD z{YogA{U;U1gC4R9P5}W~xa;j@pP$2$tqfu_TxG~%F96g z(f`|HL7tUheat6J!0jKB@|D=_V>mT)=V%VC7er|V5bTs*ytv=l*@?&maQoQ}n%@@} zv+95EEY>K2QFN=({7Wkv{jacaachj)k?flfpLeW2g{(#{=!~pC3q!`XVEqA7VTW~w z6mJb|i07yyCCDMSy{^>#U9Xo_omkTM-<#MYu* zR#q!r;SUg*7zz&$4}QQO=Ht0C=9^z+tE?Dp41a2d@cQQDu+Ym#s9xyjEL`hgC0L~ zcLZbxTt?Nr9fYTJNRZ!aZ7=3W{X>`cpJXXI{@WvIOlC7*|91*(n?)XeU^`VLF$Y-i zW4SFy9`WOaY$_zj$>lqKe@wTI4#yLA#KhU3v&)NB+MoS4;AbB-trJX*9^&E?>K<|pR;kR=GV~kn8yK)wj8Z=C*>$Lb;OKv~ zPHFmIns&7_`f3QWDrz7CEMpx1H zj}*9|{JOeixL`y(eSg9eMAs6S4EMg*MnZsqu3J=VHhhU?zVskF!-c$PX7GLoogP+JuJkGIi|pR z!EIY>%q=n0k(+zc>3L|cT%q%VXD5a@{i9OaWR{g}cTT zfMHqk*%tvTA$VFJ!lr^xgifH(>6;hZ+1tbX%Uw3L0}Ym?4^U!zrP!16%FA(HPClZb zu$V2^7ydhE8vm9)LGD{+ijtC2wd1NJBxgA58edvjw93r@m(vlT-yBlj#zFjbfdM*N z-DzmVfwI46d7{V1RRQB*x$>?ha@8;3d{w(!IH+X$Dy4RJ<^cLif^YvB-m*j#a|`h) z!r$`RYF1qo>_Wqx8B}$`XOY?K&d;=4bHk)f*c&9eUZE>=P3sZT>-YY0%}pIr92$ye z`neHF+Fb`*g6=VC`*iW-EqGXnrksQuP8|bAB+{7Fi`T6G5zaxbN1In{s z6)MFIl8$b4T-=2k6aZdp3TNi zubEf~$up*GCAWFL!zPun1MEUw1 zZvQ$Q*Axb@m+@6u1$JjH&b=9_#w-plXPMh`&%ojDmPD`7>He%+scU2*Bnh0b#t>{_ z)jr#~drE|gib{$#^)=sM+z>J*G3%$MvS<_LL6)Ya4WoTy*KXM@PjJKotN=6^3rS2d zB0^5p(_{JBP|Qom-Zyo}|H>Do)kq2~^9V78MsKc??dF{yKu4L8w?#bMoJ6^8G@L?J z7sk|xD%&$#=vGUXEm%9D5S3$1`)2Z=)4wSl46o>>KaG+5x65Lmp_NaYwI?U2g(o~QD|edC~N!Ks_?< z5mx-L1qu11l~XN4dVv3ni^I^vpkQfPNceBnF$H=up+1B96ChevzCtp**lQ#11@OCw zt~ChWhyoH2_QfBMHU%IK#4h@kJ%Ln}V@N;%yUYEyY^c|>{Qp@a^oSf4DvH?2@$q)b zn~GaZP%n7+`MEiHLu&Ny_3od6N)1(<@Y#Y3&r}#92&bl{JPkBiv?t=>cY&B^?FQ@# zqR4})2hpNY3FR_CwTtms|E>^B;`*C^y9f;J1&3;9fBy*~1}Crrkcay|yIdVoUNeC< z3N7ba&DVcL|LzAQV-lkREz`Ss^puOMV{GLSkQ3dK;Tk1cF0(Bj`1YkwR*uP-4(PGv zg>>hqlSa3z(%4XWXWDJ50&&I<(Q(>5R0`BEC7%fiMU?MC?1st)2j(avC?uG^@qtsl zLoWcr3T@5vd$GM?-6o&)n-(cx289Y?h}gfp+u@>$k1^}cjc*CY=UC}m-cQ@mB*+=n z4nK6jLXF10Jy@k(a2{lfidCK%uSyZ80%@3*G&(`vytw+%h`r<&6zdt!Jd|wu?!ZlY z@I-0l_yX$Uu5~Bqd}OToqm(Hm0~#th&T&)QWfN2gH(L%jp%7mHh(TRdR6Kx41NQdN z^(=CSRlo5g)WJ&GqHO3uB_X;~xMn)-_y#}Oq!0I;&KiyaVGi`#Mxod>6G!s_l86Yj zzJLA17%`+mMnVGB9bRO&q`v;+ezSOJdPH=e-1)n|JPNP}cv``T+=Nlf!^@V1fZG-x zo~au5-=wJb@1rC80s^cK2uOonHLFLzMzd zUCQu`?Iq^VUwVpW7D;|S%UkE;riktV#92-DxQYO3ELSEH*86$XYY$w6!sfAf`ta|c zXWs%YIBvNOD()9fMt9q-zmC0S;O2e>NKr*g>xEFJ`RT7j1krRDu6hF#coHY?63tQn zuNR9kny ziH53@OF%$dBfBss=N(Y8Bw^4X+Xb}(2^pEGyL(b$mN!P>WIxP}!@_RcyHzTj1jc3( zO3#?b&knqrOLb~O4O`A>fDuLjQsC*G{+;X;V{yg#jnB+H7a&iPhylJA5rE;o0)v7e zZS3r@68foh^cOP)GM@Lyvs)sEf+phagF6l%9f(o}+%jp$OE_zISg6+Upozn^?i5yL z-S&gSU72AjVev1D%qkz9yM<+vFo{0@wKcpX-Q~Cc^yN!9psSHcb zEM3r4pqCFSTX;1Xod6y?uY9{pYg?+fi*5u<4_=BG3K6KF>0#%1^3{J8-$(>mnS`92 z2g!5fW*fa_hu!W?Q@_GA{z;)c()s$C}W;C*&p|E)|m5&EZ8{Co4b# zblBIqz@49%ndz8P4+b5Gtq@`PSeNR(6aMzQ8J8U34M;_H-@l@Vb+#{wIP|+er0J3T zT8>wKw`p+%8XM;!%GWKpliito@IY~N#QEn>d??ORQ&U%A^dscY7-+ho@IN<(w0s^G zaDE?t7~XBdg{F$k{+g8tB(b<*PA(*>SE({aRYjAu)tn$vMiQ~D9rjW_!9zPZyPdu5 z|M`;W5p6e z;K|8JpZXLiIQI3cs8AKs($aGAUcpHL5LN@94V>+LT#7FExP|7oGa;G5fu}rtA&B`P z5lE|!Z%=n;!BR9=vyI&uKcn&jtX$aGrvi_aNS3SY7lm-h1-=1!3v?uAz#(x!`~L0C z{xQex5eI@UL;#HCtKnrtv!eN65V7v(cYG{>&XKd-TQY*JQJX0V1o8+67-Dz1e`7wVSV&>G_TL z6hw+d=>1VKF@PyXLb1uTTfBM0r2`>mR02RluuU*oBe=L2I1p2=RK!RI7{&0Bo&X3@ zpx0q3TmZBI-`)}ri8Vf$3fGCFtk^o{bhi0iZ zg42bmZJTpdri>8?&9xVH;J90+-{oKYaB0BWiF7}M;wi!A2dwD$3(C!ae2KX z9xxy5?XdzWYUKBruOtMrtexOU(Py&M99RLapStQCnuH;sXz-ANtq;L=!q^yuC`t~g^eoYJCoUaStUL6xg%D^{6K$N!QXKhk`uO8GSByfr7 zO=5s!CWrBP_azh^5QRYOnwin$BB9lIMqZxR+L{IDnuj#;U00R1o~D+)ot^Zo8<3vB zU~SX|T-K$grL95G-GHL*YhB$S!GjJiOc!%HX^T=>=e})h;tl?`i^1x_X9>ft~L z#irS~8=m8O$6kztJbUg5dm?U~*kn2|cmQh9B2GSy-tANB;LO2Q=+J$p(_$my=4LFn09OdH ze^dGPL>X8wsAGVZHJcBCpo2JFu=AkwgSe_CvJ7f3bluXjZ2a>T1&Rjn{bfz@TFf0l zx_M1auW$T!Ci1JX-!t-&giD+KE&}Eel6FMrsu7em)k-mAj#?E4(Z!^9izS;D8{JqC zazAtvRCjp7cCW2K4(CcAuD(X#h@XG{AY@~NrVtv63Wm0eb+H@MFM^T9Yj;XC%i{lV zix-gA)z#I!`N0Qe6=Wi)aIOJ9d>OuX^$Qq7gd;<*As*t{om5`B9yeZr-O4~9XFjNlk}?`R?DQwM(+G9dAw zG_FZeWCr;h6Z)X1rbANF(l%@jeS#YsKN!n638iGEWcB zkL%b{)%$s?;G8&P|DzM-d@>IR)72@qkUo`#59wapFGbC6_n2@VMj8q$=$`2sy*X0%tF(vCeZh1{K5vIwGY>=fONLHtY-~*6TAHD9 z$BKS*m;f#^xZ{(MAHq$0qlFZ@X@c$%@9ga4l(=xd;;y;+(RR(EFQQO6&k92k2%?`u z31%L@ZQ?By^5b`pO|A2k`^@h-R5XEk2O7OC-QB}A#19Rw8%F`)zAEkoEVUY)rc zMxS*dCV@gg0Neo%3>jSvpzJ}?0v|;fjNHI3{4xCR^!e}yqo=Z8G6Eg=Qa^WpTR;4i zEU&1j__ll!Jl15AqSr&CW~FjIKF@Y%E0WotR?LEYoHS1e8K=f_6#R4*ppHfT_+3y^ zl764U^DUJAOD#SKGfJUyc5a~$I>32KaLWn!{lju-sSSgIR6Q{Vmp|Bg*Q&F$IEC<` zK1OJ>ERYOpwy;bbpd14pr%KWl7*FA|%Cu-hqh&CbjDOqYkenW%a9ToHWh=)bYpuq&c z0uq2r$Mayd;+2+`G7xWfV2I88sAVv-y1Kg~h&r(HfDZo#9-1SWsTqkT?k)RU_ja#YDoI@SO!_T{V<^#-LaL04j?-!Wc zscEUJN$C!&Sw8!#iCPA$W9?Ev1#t^x;SmyfHB23014yR!~-gjmPB9)FMj{%~+v?LYx}2%*2sJbyWf zKz|?z^8=2m#?`LU=J}PLx)pe93;&1>1;D;lRV94-N?hiJmWFG0Z~>`PMRB>Qc~-lQ9JzTB4WZliB!L_KEi?!lz(BM{*Fkd(*NIN zHbU8}YdvLyIu9nsL4~_R&;$jxeckJVkN1Nl=B;6S;l=iv_e2&&(vIvn3Yg8>an3-v z)$uX2vs3&#d)F-d8W`7CuM%7hL4|;<0?OL+%&d&n3A~;C)kYy#eM@g=`J|)!l_^8; z{>__F6jiFy3Fr-+=(FiR1J+NyA$tO0-aq^jjbGIq2I3Ndr|^eEn?4Z^3Se|`(7Dfi zPg|X@IzKIpfw#-Pj!a+6(JSL~wH(i4QC&_%hsr~@&}MsF_w>y8f}EsX`;AxDr8xJC zHr0R%uuqHNnhkoXzVeW)puVnS=*h-q)|2T88$T&g8LQOZ;&V}b zqmyCy;Xsy-CcDY1l<60DxW8GT(R=3kcjDr@PDt;*(X%~fR-KQuzOf8$VkN}rf5cOT zkFFJz%UG>11^ptLw4aLqCQu1!kt&!c|I=n=xNOn*?*o1krRqmz^(B-IAJu>Y0-C>) z^`YMw8-K!TPMYH1Q=g}+bG8GENOf+bCepNtxdopjLjnUKmKx)RiW?gL6ku_cai_W8 zuzVmqre-~&P48D>w*JX@9u!@~5Lx<%6{9GkUJ9rl7)CH(=RgUHWG{t}ViGH(HK|fz z;?KR(()X-3{NX-~|0>Yy60EYJH%RpK%zXn^qnhXj=)K?SJxU%Ea8a!E(vKI8ORo3+bQcN!+-o{ zfC?pzZAejxn@=#r2Hc#a$Q1c>-2Bn^eOG??jdiCR%oH(m)_pTpqFo~!q*)TnU)UVsrYfvyrxl;)r2d(YOeGX^UrP? z`G)qAN$ajnAn$avUuxqJ%6uu_V$>4tnzfhzL@#D0ipTr)4YMw_K)#j zKGMb9iIe@zO8)pr@cm^zV+5U^NrL*vhBcRt?`rem`UE^h5w`g0iu8B!ANGedz4(BK zpP;&vRqTo$UKOEqD6X;G01Eb{;jjn2hUTwwy9=sviLZ=!U06jnMNAl@8k%QBbh2Ij z;b#y}V7K)R%VoeA$STLxjtEPwBIYf@whvpIFznLW4o$(Nh`0<=3XnJ8-%w;`^2ywE z)*-30#1o1REco;hJ*Vg+IR*+-qN|RzAVE0rcQB4I$dwEgiK3vua>JzpG!?rlyx8u~ z8L|usP!e6eyVKyzf+q0?hzj;t;`G7jPGf2UPBR!jh&jv_9pBZnu9}ynYWBQmMZE`8 zYT0cBo2(M6|)H6}!itDlWr~yWer05M7)6mFsbILx@Yx5W*uuvQY zSm_8zfGX0N`|dn^p#g3wo{yBb=e_^l7?>96fR5Z|x;fA#A&e z?#9z%)rF*iHVU>WP6y#wppy>A2iLhvqyzGGDUOkW_a?t>^&duyxwZ{ z@~bV8{R=V7pR;IkgjKSR)+{)8PEAqAenr@na^ySvYIz&p%|~t=7#l+~Qh!aP`Aa@m zXFmInGoD77jN%7f2~-ZtkS4->1+#}kWz0J4xqA4zWu7t`@W7R1|BLEbzx-35)9oka z67`WREbqwdpKfck8A@Sm1;#{7?=U0}ukdYF6$|z2#pK%OnjJ%>UzKZ=AFS4=`TFff zsDXha^sDIMcKma$m9Ko8F}J2c{;K&l_W9ecX@l@P!);`g$#-@d8Okg}UrV0cd&TU% zZKXveAw)0#^QUtj!Ji~jn{zsg z3c6Y~`vOu18(h&MdZr@}^`r0XK*f-2-Kgi%VUx!3gj$c~J^6=dBbnx;^NXOe^@dUP z0oFrJT_l#iynviQU!xjh!clk1#N4t7^psM;^|h`QB2 zTLtP>y*K%9u!}0;1&` z?}1o;X+;^miJY(2u4^|2@AtlVMY{L5;m=8;Y3lO$jr>#AeT<7{HJQJnKixD!xfuT? zZmNIrRn+HfrHye=6HRy1x!CJ!;d;N6$f^QTvfIz1qL~I!?+~?c-<-EHwI;<>SI4R{ zZ?QrR;;Se+qFC1OrLC`6a@1#dx3U#kD_O85R{~s-g4O;E=@pB9$W_M}iKrQ&m0)mj z!$w|jO13xvV&#Q|dFe;1QR=m{F5%0sqZ|i2L))>IY|~#G4mI4pZ$A+^#_4zoq7c*< zKa^E(Pu#YQLDr`!bX}}`nA{&rC9PR=@hY+1#9vQNqFm>#&3Vz7D$^H>h!9~Mu8&6~ zC%y&*G-c|Ir9pqI`E)p`WzN=1%!kx**YYCq5=WPxat2(;A@SS>W$R)M`(n$sbX8mOTO2 zyT1`v;k^9%idp}7ttNKUhYe8m7d-mQJ%ueB$isz>?L@AYb+G|efDR_8cb^B4L>pd-YuK>0VH@A-i$a~ItP4Q+$q2q0sQ_e5TE;z+z-SJ6x z7X_B{J2q^V`FV^qV*WZ4Q60WDTyB3715{!Zr#a{YWPIaTCVAnZ(C;&xD;X<$T?Le|$ zgOi4zV#Q6wM^4IwJ93nQr1aP-@&*+ zlt_{VvUwr7M!AxF`o`F)cNHzT8{<38QU`w)MP1?>-iS-YMC9}`$>%#Xluk0rPmdlO zw%w7q^UZuMuAHyjIq1~ZZ?9AQu3~|Fgf_)2uS0;0h2q8aX3xpa;ud1NKVy#M9k~@5 z*hKHUpYC9D5u}wZct{uJeb?q=UducH%; zcFp3C1Z%=uvDD;KUKNyBv*mBprLbp1V^;qp(%Udc@p54sv`s}jpfWPiyIv<8w~g>S z`;X0XV2Dn6iYB%P@EF7F172TpU#Fl9F*H$mv<~8ze`gR8Vp_Po^6iLWRpKV)rz?+# z<&W=Z!z-s$5PuwGBQrmG_ TQ9gUl+>mu2l2=1gRW_lpRIFzi~svKFiqpG2J+A2 z@-Dsq_q%edHg0dD4zfuPzaW0?{C3{wn6cs4?$X(-!jUfx#U)K8CEoU@r88raHt$fy zk*Lw1J~I8L2<;!e)J|)3qq80@rI*zP1W#C;$`dZ5!hd^GDWcwMACgRp6Gy`?^U@qW z7M|5}`=z)a`$~iKTMzmp+;NXGgGK#L!EKL`o9n+fzpod4413J=dID(8SS)w6St&oq zb;JMu-+vu&hlIq5?w;sPXW`yYCStzFO(~Wrzv?Kkq@g#?8hn}_^&i>V|9S!RAFQ?X zsS`KO0zIx-a_YN}uPPn?`O1T%G!2t@R%75)=ig}7ZD*HH;_@xy=&gVK!pM4_gp&KJ z@4Zol?XCRlyOTRSxr`>Yx*XouE#HN%g!TMe_i<%Zq1TaEgi=ETszl2EYi_I{MFyAg z3uhE^F)Qu`y^?%P%>TC1bPROOj@kmvxKbT{X3FP(pxbeFn!B|?{BC0Rfao=@VO2{q z!LSCcrp9S5%Bj|(%s;Jg%xF-wP*VnIEYFLI|CO&fB{Rnw))^lj9}M!fw?r*JeiZ67 z?%S+lKdgzn<QoruaEMZU)a6d-A!w+apd^ zz27cj5=GK;3`OK_+}@ZsQ?{Y^c{%!15Xwj-nIlW|?enbo#`2zD^o%$Z|jXC+ctN)Om6 z_}dnkQP^u!Yf|@v| zTsXO{?AuRsIp~VidXlp57GuckuUh9L7k}U>Ow1IKvCEgL*t#vSv@6gya(Kr`Okg0$+;ZFBax3rX_fZdbnX{6frahgVs#jc7*VvGm4Ln=8e32M_Gd zI_H?%0*QD!=!{O3H?I3}>>9X`cC7mCX_Rm>80t4VbBVp1Z%cslD=PMm(>m zG%s)9K_7@Q$ZM;stG*U6w;$Tcug+H&BUY|^PSd$s4f)xZvtx0H*-49wxx~aqySk)r zY89frWmJ!j^(VhJYjwcT$3p=yxlzv7-j>t6poRkkq{G(M)=|zAouq)x?a@qAfB&pM zfBrOk>~};h8J-;bAM?k_ZjACmgH2zb>`ew`&(%oCA3~XavNP~`!6oAQ?hT&*4z{)- zLkjIadS_}xjB(tAvfOdF{u|NmGBeWyjYG>a^+S|lhFLLhI7d9(ufKU#9NspYk{L5u_QEh8r{F9_IE3eS~e z;^FB?iiYmKk;1c%%ix&{`m7%>4l<0!c6N3#K%m`4Z zf;Z$7G`{Z6dsbYYt^Rf@)8wYBh5i(<=Jc@DEp$M426(Exr1ppdZi&NooYPm{{bUOQ_5ZG*d`Vt-{uPbUryh5u$Gzesur!AFxNLv&gK9_m4*^7{2LX2pJ6jG?do z{=W?BW(7XyeFM7J7wcR8m|MyQpHB9ClD(%+BE>vz-nP}&d$RSnT5!IwX<6Y8-CWDj z-LGGdY15f%Ms8QBG9#{7upilU*58Qny%nNBCBg*fa{^594>;JX89kbMCAKwhnZ17c zM$FvV2Fw;g3yz%@^72UUb7fhH?qb>Tq2I%_7L2BfxQJ97wC*ESM|g7(nl~(DuDKH? zkovAP?a-dpnV>8j&KM5*5t>dC6B}F0`%iV1m2VgA+pOA0UiK+6NHMU{>d=p2jj`<$ zpuN0DpGU2W!c`rp@%3%-r_UzZziE7yJR=`JJF7YT_i~C)Q-y%l?DDVv)NGwecLd!# znZ7ZxsrIwh%g0&%zjTN+_#a>)<4K3)y}&v6*(N3xuq;rb$=3OF$YsmEEq)wd1~Vd; zI$~yzm+A8)lZ8cr*Y)We*5K^};&ZQ~{wL6+kylWFDuFl7^SFcxv@l1Z$3?|4(>9_o zswASA`2-i|Xu$S|1RfI`_7*Yk@x^YDJgU@e_3{Hn_V>o^CbcPbgGirpSxDfC<9tog zw_rW!;1=^wsy@PyN6P;kZ!KN&z8eG1-vcJXml7ZCjP9-?b(qn_fyD$L=Y^BdW5$S3 zDsBAW<1-^~@1z$L7aqbC9R2}!Ni=$Bv@5l#GUch|XpBC{SymcQ^^)jFsPcXbl<5oc z6(84d)$gRyt}-)MuEao_XC;=v0|)usn*uTsib&(Z#wiUMiAr7Q4fopbJ2~O8ue;2h zbzTkBOLJf+v?I{dP}gX;c?jJotgJ(b=XR;+k$q2H(<9#Ha1 z^m2X_(a;A^#(4RE{F&R?0Td+~G%9KlR<)msQD^r2GSk!6586Aiu(7IE)3CK=?!H86 zPg|_lrb?4Fu9HKvDso1W_=e)d0cY*?I{VjYMP3pY!s4j7!XqY-+_PbTs8 zS!GIYNC<1y^w@{V0@k06FhfV?l?H2|5$Q`J*+MKr4es9T{>ts&B3E|3INvqPBuBk# z?f{9XL0GDJoW(XYnypoAgF25?Z87i#rSJ13RMkCc#&2`tFkW0-wq24wTb`5CmlC<@ z=-A`K_$EGk63JC;Ql-5#He~)ZJXaR95@>>9fad9(($Xk+h6>T+5+e!Khoynv#tx`{ z82kt|{uwNpkFZ1lc~lK*oGW(lnf3^GL`1O-T>|=^yU*XOcjdO)Wkk>l*^wpUuzp5d z4P6cX3cqORxu|sAnGkl^2@|`b9u+>u z0zUwdmxzbF9rFhq^IvU*Bn!A-A&0!XqmifqmOO)=Ck#4mH#UGo2Hl0d{YB|%ob23> z9Ujxa9wQzp>561qmWI;L8SXP(0%^hnZqP7Y>=vsZHg(1@W+h)_u=8w(MbXJ!5MC=t zHGvlID$kqE{~?Kc-ZZ~Tm+kWeI^DSZ^ZuR3m}wRt;%cuv#P4aKM7}Mskv5UD!y#k- zph;EsOIrprwUk20<(Gi+%_T10I2tlW6`JPFW;P|*T`8KEB;^C`<98V2e{yYSpb&O{ z6X%;1l@foYI8KP{zZ*@pXc99X7@8%QAU}u}k6p4Dots*1YK4)D@*%_3BWuv&oxTyL zAD-DqoNs=(Dr`chtAP+W{5 zfd{SbRB^IKk5HjGU6u|>99*sT_WvJE=N*mp-~Vw5*?W_{6GHapGBUC*QT8ekvbXGP zE}QIZS(P2KS0ojZEu%=tSIYRkKKD7lKkjqxbDvXp*L8h9@AqpwpO2@|o(URFQ!$3( zVZ3Z{g^2G4gS1fTb8%W)jOh#OmU~k-Jq_Z)*?g!hj zU*RfTm|j;&UM<0gNxaOYX*xWQI~I(M(+wyE9YI6{KM-7o%CL)prMMiaiK8PeoP*f~ zxs$XH#eI>TOuRL)P)virWkjktsIBqao2fR<14}?~d@@b10>mk5as|A^l)E4Ex zu|fNEfYKiq{*O`|JSjeiCq57_kaPiD8$i~-{aWb*(A#>$CJAH3bdn9dPC|0p(*gYt zPU|jP=oxRW8cl(Gc1o?H%T6fOS8@H61cSVT1}~ekM(m;d^*?S~aJ|xJ9pXxQJ5x19 ztL&);m};s{H$QCuMzI$$!``X78l%HQfdc>RV=k@HG_9Mub_zA7o12@ks$T_Lrl6qU z`gGAH5Ps0JvTlNs0$?f}aoFKX&FTq*A3y3Sj14%ZX_nc4*e1r z3vXt34HZ6}^}hcd^{hEOJUr;Buf2UF7^98RWlc?(k`fMMw1W+M5|>$u5#z(V6|GWF z>@v-9#abbs`(5jfuGBqmO<#d1xiT6khC6Z;?wD}O(gU0pqTduwZXe9mZmGSB13 z;|^FI@KS26y3gh0#Fz5vQ}c8h-fAi&MK)oRtR{O{oai z#$~UkrY|=BaHise>IXif`KvB7)D-d3{TY&q>DXs_c3U#J53Olx`S8>zA7h#l`fLQ? z8o*JFNgsz;VX-u$-^c$!{&z&}LwnxYI^N#Ka=Fv|#T5b?4NB z^wm{caE1Xp+-hc!`5#VPbrIh!%MhqP5qb#hRn&UTVX#acs}`-vm6Ly)h`t@S!vgR- zm)jVnW!j4|2BJF)Emw4>5w&4^-QgGK`bH5}U{koRAz4n_ULITT*%yNjb<4}kk(3ND zb%FYyU5gT2La@(;!nY4p1c+NC8w8i|M^#DGKYJNGPw)&d1=r6InGO#>^pQ8zD)ZtR34f50;()7rx#p9xfA_Uvl5Z-> z@5_7=U8OI+#EeS3)Z*DJ1Kio@=tJT@fGxZXf{k%`!~3zH3xU$$B}R-DARgZeh<2`P ziv})84D1LeE$0W$gLmQec7@QIW>D(Da*sjMt`9W2R#!^lD{n`|gEFO?@0yLhJr4NM zMCk3oD2qtYp&&-!7kt#VV81^(@dr^QBF_Y!B?5yY{{6ejdyVIFomt<(wfc2<-#hm= zga&zd-2FP`{wzm){Aj%YAzs*hxktgUQKV%dK&&P7U=0B;?Dd4GYuE)rPU`dO&u}l0 zUHPxT#s(&8U4aT?5aT>(wcfLPz&0itro;drNKjBMJ2?r+9^o@T%Brj5jPI_!e$+AB zaeNhCZqv4h(qsyM*iwh(>bw35RA)K{1TdoCK>!-1>uiubJau3KGtk%X0e1}$7|1|D zpXd6Qe$6fo`3z7Jqfoe@6g*>qrwzbRMBu}LGq&8(;Bph;ihIKTKE+^kbj~wI2OHM{ znipe#Kpp7WVCr|;IOG>N33*=Piz!#zg^1aq5GMhH5}hbMck-e zT?#%wziI&y!CN;G5uPDQFrX!uk(C9xCUD%4st37;8JU<6%~G=bfArtJeM5vWU`SFd zsi}de-ktlJ7yuwSfUpZu;)B8{AL^UpY5`=y^;n7-5}iUrg=5HA?fv}d;|Hu4+G|p| zVqrfHHP-<8j>Q0^X<^M8py4vGphEv&h!pstKzn=P3#SEar*<#n-QSZ z&D)Np7*to!dG^d6R6Ix=6JTR~c4ps#`5Y=JadC0?wM0qabOI9#7;1xqgNT)Df0f4t zSEBh*V1D}-Jh%ZMXoxdkk19D&ed6!Y4AextdIhVXJLYE5HZ(AJ3w^PQ9Lpx80NZ-G zWFxtG!ok~QFV|)$UT|FIybN#pRQoAm=Jk7n&_zoD3oEZ~X&gQj39XdJIzHGOmw~kb z>gTn6Kky6#h5<}q0E!TX_=uMIMDTCG0|MF;&_Gw!R@pfEB*77Mii=1#rC{y~ZwKt5 ztzX7IpJv!_bd-L)ilci(LQO|^czQVb^6x0R)^uTX@y#9>U#jZemOtHT-d|(A$Zl#P zbZy_Z1D#TdbLNiR%Qdf77-dpZQ^UExy}JwHY6Xsc(IlY1MZPY0;o#v!G~o}#fmtLA zI&gRrGKDNg2NRhP?+C)Bo4bF0xneqs@9xPeYe?9}hPu7k2H+P~LBn06?oNm>4M=DRS-`dF!68w=%172 zhhBKWrQDaeYARTFeixk>29ebFq&G6z?<<8pN)?{ zpM`fbo=&pKJ0LniNXT&Y>Kawc zLbOfK@886T`;xDo55SD2dV@ysfQBZfFRa`N zd`2bJ0>a&=qAOkU6 zO+zyU>69F)N@z61?^W#oBQkqcnTd*js8#j>G>R}O(*}daTWb-wEn&fN5Wy0-NW{V{ z4sJwf`dC3H4{ad*)vFFLS#56*=(Lo?Iy@vo-Uz5$;Yde(4NZbZhK9XhQ05a7LR8dX zpmYZ`68sgrySvCdt9xk@hAH5u$FYXmW^hm)NJ15Q`6`)WJ4>NY=5oyHT2~2i;-k*H z6yV%%eDJX|CWrXn@!pVtma(yk$W8fozsHG-n>=o5$BhhYaVc8|JdCsGSmZFiJ35+C zv$e;HBUo$N7(Ul#Mm#?HT_gD_DpM>yGkO-(V0jW2$<@^f#3YUIEGTUb&{?vvBpRU6 zC~a*b(8lI1b}4-S&iIRl`u&XLlUjSzrdEQ!_wG_V3CW2!6ci?aEB5Pe5LSPQ0eDi` z;YJ5jGECy+SU?qz@VG1&niDt5wD}0Y+Q_1AL`^Fxv3%sGY}ELaBO>?>;tFkU{)D5g z&A`A^`rbP-K!5;}EgbxnerM;_!F@1uTo!Ou=MD%~2 zhqi-5yl_ldK5uR&1*W5$n_@^PJJ8?|n2r=POjAVy|Las0b&9SIe@jU@B30jcDnLU+ zBQ9|hkeet}$gNwq##3BmP~iGPJRP1#uc_&-_?@3@?w=6;i4YE&`aNM<1n(hmHd8q@ znik7(plE^FG(_}5V*s*IE-gfx3a}?I{cZpFQCdDBo-Hssh6OKBxpILXxGp2dzHy}) z&|hU(f#}w<)`q94sTA;!e`2%cMC`l0a|QYoTHhR#^+^GAWtQ!L9G>bos%)k z280Wrzr8HjZHr4gL~nIg7)o5ZBioSWH9pFE`t~wTygZkoKs!nq?cKSEeM?*W@l$>{ zhIsh}X%TOy)Qq&UAT2kur4sdvpr4-I8fdh1vf@4t!jf5Ne+^c*Qn%0cPMN#paqPB;~VjE^T8lvzoMYLqehtZKMFx?6gPJQ zF{v0VjC5PR#y#+MU$#a#kd2K_P^X&#NDmMN7i`S&zn~6+tM46RFo3E`m*kx$rXR3D z(KhSayGw8!BIPr(GzmR@Ox#xl-#l;@5HJU9b94sv-%nAHBVb+dYfgrqAAS_B9$Jw| zd=h3kovmGF2(M!)AK{U1;?t60@VOzDLKxd1bR|Go@>?Qwxj^_9TW-`bW~%7BFFh( zNGqt&>)Ib)FDv$NoqdI{Bxq4LQq*LDDsvsdUA6y^fWsvxVdQdEjg{J=?KD=~E>%mD z^X5I6FC%_J8-=_f)=h-N1sGutay}KbHvsI~>pX!a2iNWRO!qnB_-+H<>OsdB^G6KR z`g$OShKA*2W^8P%@$L&GAR6i@U@@rr`uZy9ys_zf4cgm1s^o!_pWPvOV1ytSAb_fX z_jUp3+kNrVqbn<`*T?6kf0O)fbQ$n?cx}vG+Tsb|eec`YghiM0Kz8Wue{cWCS_0{+ zwzgROz1+FRHQhm8UNF}dzj~Dp#U|)fyRdvaEj6U-4--YtiA9dK7yiE%K!7DVuj)KE8XyyTddM*UzT!VK*R~^* ziDwG$RLSHc;U5I{^zYvvb^)&0mhD&nS~6uGSz#fa50ia8KVxDOM0;=8-GIJ_6UH*0 zx<+CO^;wyjj_2#i-D-lgYxkD^(n2F<_3u6`BcY1}Ln{oAbn_&N`3MIF1`tyh;FU!r zTY8`!{`M{7)oTlaEd-^G!&%?=gI5EY(ZD#!)%ESSrW;}}v1l_e7)m%=A)i2Z znvb8q7zPGuytfY^fjH}0U2FL0=q;E9$CWg|WWHpI4~#OWyG!TSp$`mNA+jo}8cBZy zwL$FK(BX=C)>zok+DJ?pcxFvI{T@qvm5-`^sEL_?mk2&q(D`AZhJkq3zlFWV(2Ed4 zLPF%-1~W-nRaHT7AlYM>H1qHbJ+PSS&FcEi4O25em}HToQfunkEM=26Szu~kvt*)M)UKkqw#dfF8w0ACv)TG{G5+E#-J1W`XtCWII=53kXpdqrO?pfQ<~KqYc$f3t9s*a~fItZ!ft#+ARRvHo{>-H!|e z!0;S2!XQDAT_S9LcVg(x*yt$YwUKRhyAPIlK;o_L`z?AJo0-M(#Q~S)n=}Z8ng7SC`#a1#!wK}kVT_ND5B6S9R##QH z47hSIAcY-p^yP@-=)$Jkeic^2t;u5q!)(zUaXc1#>8PZ*^6Fx2fG&FkPX9HF2_2uKgus(!tKU3(Qqa%7tX3fq{ z?qod;_Mb+krcW1KCj(ueayNy0LN8_nq&dLScMLFZV&Oz+mDDAGqN?E&6%$LVKNA-d z>jRkOd+|hcjY+B|7XUF&+Br#MB4Dxt)O8?d!;gmr4m{vMNx_t>u>MJ0+(Rt500?3@ z?d?CUJDEZDhONYP(@9LgO`Nwqu5=8A^z2}I!N(y-h3WI*WCvyW$;I}qD9w07X~ZWi zJhXX8K^Rq8TRT3gK``||s_@IRwNnTvkjYoaJeQl~qK$`{i+h_nGy!S`{VVSJMn)*u z%$U?jTLO8VqF8cfhQCD!IjQxX_`%Nm{2Q@}D1BV-uU~wDOLH3kiu+!*u&(F(>X13Y z?gX696)i1=zKe6JMxLBAR^6#^Qk3wCS{7cZA9C_g6J>yV5eELC+qUyex5o0eJJF}}y zjoR_~cVc)cT*=EdGp*uwWAM;z<#f#vhQ+UMm}=hX{TM|{?LFHn6mus89?}&ao{_ZJginx6_#x2PQo1l%SXum1UBc$*MhO zV0Q;z8Bz;J7be?!tr!!posg>N?1%$NF`uEqn;n2_)>n$n=j> z93k=}3DS;vY*ZKI=W{P2qon;w> zxO1mxXEh%^A}PTy;ey__VNx4jcDO`gu6Vk*cg6xU2ms!YD3c?AKLWf6{O~73Yj4-~ zmwh^*Ge;<^fI+zJMyD6Uq)ZMX08rg;%v71Ls>wJUba?!DF}ZmkJx^o)##J7rU^L_u zJ%L243sgI|?*4ZhlS<;^6R%Z!yNn`V!o`FFmDw1_@##~1WmOHQ@n--Zj*sga+@*cq zW2Eg6#n3A#C}3^fkR1KD41@)fn|<5jT1#!=W!*J@;7lj`gk?z0U9a>+?$SGB7uUn! z3NdX_vFiawnndti^O_nA-Vfb7-Vf;H!VoY^Fk$$E-k;1dD_bY1&4b08MAuR;Mze7sUp~}IWqtWmkutBHi z*j{TvFSzbxeDOW z0muR{7it*U0P-dvfTd+f7smFNBjlk-fIG1j3U|}j-{WfKoPcJqo)P=$AqdI7$y2wL zxI;`qImYLiq-k7yd`_N4QAbVuU(}H)Di!!NY4A;U{TUDjKFDC0YK%YN1`f&?p|68H za_B&)QGk%PX_+$+Wq?~4x}1|mjp#b~4Uk3%0U|ipcQFb&CZ<2Ly~RcOe458?u;ddS-k&qn_`7%PW1;{yfdS^Smm`x+HIL0* zYFwU*!JPa&pm@IzSw{Zv;4uK$XlfxHOEQs}30!bJj$*L|J{|IfZ!m!yP=UbQhZ4T= zoE+sDZ=eN?k4tu3HOqV%-%OS@_6!!Jl%z3-UyF&H2e#VvoSgWr85N~nKRogc!Z^IR zzNN&K*}vw^j>Uo9R1O0fCq`Dx$O-bvKx+jP=0{l47Mcr zD*W(|^Dl^e=cqa@Zn!T6+#V&i9_Sjz>AL?6&00`;zSQE1xmq}%n_+WDL5+$u2F@8M zSe2D8wbzLO;}ixR@b|zO4!mwC6rl%^Fca*@@WZ!kauq}wjJVaAl2DI+KX{i4t}Q(- z=JNWEE8R0O(?5snvtVMrS2Ol)^_tZQVYJP!k4Cq@$tQ-h!JHSM`(W8_JUc2}@#&cB z^e3XnmKX`cOwqFz!YnykXOL_2E{Z6e2EOS10C_9`Bq9VVOssf46g#`~EmVXw2-_W4 zI;Qx-@XDk(NypC|I2kUK0cq1&petn9IE6j4w}0y+RpjiFwH zh1o-%hJIUkO<-dK@mZxX$(RQUXsJf>2Gt$-h_J_ip*JA?n+`vUE5U$o?qb3cBxo?l zY22p(w;PP&%d4BB*M{^qRL54_)4^m6GjI6)*%%WYHp`tp3Y)cO--CTqALnHx%LJ*U zfeH)~5<_4NAY!P)$qw)#SuJv>YQl0J0ZTr3@YF5%hZRgwSAo`#Pzm6*q>QD0DR#I% zd(vKK1oJ2FBMybboJoCCQ%wQxQhtGLzsQcCU0L>bH>|o3-H3^k8=4;7%)JDMI>bc8 z_4cZW>xR|RY2FbvRdY7!F5}~Kf5NRMnz}Kb!efRg9l^GLe$cp28PRA=#Gh>ZrSxQ4~2R5p(Bu@e*FBo zX|o5?4s^)$VJ~@Dt_!yV<`&l>ky#!6y+@C(zxMX-@3jFM90iI3cu4{oy|7yQgue6m zza2A#%LCmLOr`*FhFP_pCZZt5GXp;_!Vk_{IxTl%=EBsPwa}sr{`^%uyNteh6S!mF zztc{A{hBbjInv=_R7Jfd^JB&;!a9Tek%VCt7ggHYMA-ZGr zlC*(sOyK29Pe+sVnYXawh<}ik%~;4q8LMwfUsPRS7EIN%0Osn3PR8Qkq-;oNIRo6Klu$$6XOU!Q57h0K-z=MAU@udFregHTi-T1 zJ(N5r10^W@vG%|Y|351+smzqH(KSYAJ>J~)JwW)eu(M0dvI@xop#!XZk<}lIq*(Ve zy+DP8?{Ja$nfo93@)`Gjah_Q@YH#e|M)o0%rM!ROZdJ8N-1g=d5`rykF6<_=iM($M z!)XBr5YHGd;CvaN(E^e*G(-Bv-1QAGcZTBz$e8dNKqCYrVZ^Y9M6?js^uWp90AA#T zgcKbfSW-B+xIlhaU%U4Ygg%S(oL2w7%s{P(=mwZvTQAjDusK_EY4VVm3tfXMRg(+W zKY>s(nEQVl-4XjBLVQ*C4#M1yA$`3m7S;t(_8Y!(Op>n8pFhXJ>aehduODWd&-Bt% zGY@+R!c&g3;ogNg#sAv2rso!DG&H$?g1S0~oZ-{KG$ z8oYD{ReO1P1&Gxy0s+4`0LN{;o21r0Lhc6CQu!S%YJk}A@;W2ZspAs#@yfLg5dFRYK6 zHg}PtPeg1O8av>}jE}ZxxeEOXl=eU10)1Tf3JhC1@^K;@c0!zmkG$W(1q^)(Y>I}< zPnf9x672`P;fq5U%}kP(lOV^<$-B1<5ODYuRKzq6S|_y4E_0Y;$2k`XXeAJ)ix?I_ z{Gk_u#|_yb!ASs;E_-$5X>o9Ee1s{k*`w#QyPiDb3oM{G)T8^R`fHVP5HT0p7 z_i$fE7BHp8ckTc|#si^0o`0`DClvYi?~Ahpa<>)_m`8)56MTWTMabO%9}He=DURzg}q`DfJ+{?(c^Ian{ zxOXr4-3GE6JzZEjvrs5$4B8fTtf)W|2)s#1fO?_UaXEQROXH5@ZMhSiBG0jR_sCO3 zyrvId{4n{@)Enei5I2ey8<{Zn2)MZ4yq+Ur`Z~;?@HNl> zbexhf1GGYkW8X?Zhn44cPM$Ve@JA-S1%*k0u8KZh4JD9wVF{ z_&5>JBO^sW$VrKah>+h83Iv&aV`Jk6V2Htw2QNJ^aG*8-oE9vE49(C3fF0LVwc|{E zkdC}|?tWpqGmos-qDjoX9hk0e%51UHLm3&Dyx>8^Bw?96v)R{xuPG7xcQ8QCRg$zK zFX}`Z4=<2km}u%l6Mf#hiLEUuhhh(G?g47Lzm3vYtxX%|nL*eK>k0|CE+D@R!iX9) zY-Qd9qHv#wFYN*Ag_1Bwb`s79IG*2H<995mqrJJ&Xmoly4y=tiDPv(Ood*ZgMo-vf zkYzOhm>&M93LANkh&Y^bxFM`@CB@tNckfPs64y9AW98Z}5lPvYKAQ^YmLLKI3c2m? zKZ{?!j9)xgKuV6II2u25A+;K1nH(q}r}dYVP~JDIOG=q!!mYW<`EK}zPvOHo;lOSi z5U)~9`LkUOryHqk!3b3DhjAG0E@e=f_sLwUO|JJ1;CE_~OhTqprb& zy|>RNe66&#mA+*xs=68;k(}p$+XJ2n(ZQY%23t^yZf$K@`*~6KiReW6?a)IF4*w)* z>fizZX2;KBm}h8VKm?$v5dRSP?(oy6>Xe(l`73Z5BIadizJnlj6%=6BLR@2Fk$O{! zOEA1G{tk#1IVKJqu7UVWdMLT@IqW4N00sg48R{<&h$zjFK*hdyyh#HSjj>T}0+>DJ z=01e>0qQsaKXb-$fVCTz5>0;lw$M%iYGFAP>s4t92}#TQ{`feTVJQ<)cSBwpWo9Own5b(!^U>aD zavI9^Z+#_I#Ux7hUi<35{IU#s~=M{P}k zb2pbxOjZ*3Ud;Ix7SE)ElcLMj@6t+gXwg!dMZshn)|LR}fPQQoNJ@tVm5>ewpQrHr zcZJivH@R?`mo(CEw#zUu6&7{ZXSIKkF==_xZ{z!9fQ>QM(A0DoZcX<#dHj;d$sZ`a zF&u4`kH&Xi+K;RTvA$(qs_pD#*24S&JiI!<%wenmw*eJo)WBw}ygV9e`>ied3cZ4j z|K=67yuE3BI%o{UTW^AW#jGz0#HnaEc*Y zp+}Fdy=3>EF5No{K)6LgF5z);w}3v&&rcvKC4vAzVfk7FQ5O&a7z4pam-W%;sJ<0g z9thU+!XN>r0kFmfP!57}0;tT1dn6FGes&(}J=249sS{c_Nr1cuVL;i}*R0iXXlZFH z`L5lEe5Dh2b8!}j?GKPHlT)S-%8d8LoFImSx~A=T@gFc{K7Pu{qpL8ox3^Ci9K=&8 zW(fo?Ay^b2Cjp zr53U3=J%r?kJ~IXO`Myf)66ubGIW*?Y4pu3Vuyb8ee*Ivn`v`M!^%J&&f%)6x;4mW zYHB;56$gejJwq;JV0tciGgVd#m3Ef=?t3X1LeiR!lRu6r!i`}R{tB{I~0nDwM zHPdNoKBbxv;U_o^6k?OWSJLG4r|tEJNG-sXAN@bIhjPFD3Nl7>3q7FJZ^3;bo0Q zf5MKnCyudD%M@$P$F+csv7G3s}mME@K&c|toL?m7^LZ97FB{;6|QXvTly-Rvw* zu|9!qGf!-FHEf5WmBPh!HP+?M(OmOtKRi|*$=;Rf@p_wy1ME@b)qQuLtZK0q@`3Gr zyEGg_C)^IS8fKig*#3j21k)RN`DY5jxqcid(HzHskfbv0yKR5lNm_S(3kGb2?|<)oN6mz*Ss|vzsU?@BST4$K$e(Xsr`DJbC=AB#F~gKM1RpncQ!xac&L2GR3Z;Z%i_9_ps>;oxzEI7O=@Pd(Aj4v<;bZuKe`gA zYd{TwH76S_=V3LO*ViIgPm4s}hwRnuhObiS-6iFo$I(*xY)p+JoxMwgH3lifM9jM5 zGY>J4wapjD(bQ=f5mj4tX@z5Peoi7X-KqSmZSj*G6)DD}g6>gc8Qtm<756Z|&Wfm7 zU5?_;7^QxareuW%i!(_avB35YY0sZm1Fl@*qaM@IOK1czTitvY0|Nma(@UsOwAq=b z)icrh)S^aaWUVBa9h`6LK?=!hQeg{};*_!1cJ2W`oh2DuYM^bPllJ+I1H?66Aj5D_ zQ;J!eiDcwFZ~t404}_vC)cY^b$j3~84# z3PmIN)&26}#=FaR+zC;39P@J1=Q2s0Qtjf`-^U!@;00|+)-B8{@@kG&SJ3z5Y=)i* zdTxxbr~-^1bOwEMf$G~g3^IvO{oXqB#J>Wkn=R5uZ|ch3o2HiFWz1h>Eq9_KPfVyh)dBs652+-z&K_8657wo_V(@ta>vcI+V24 zXOU5!;s!j*bZrUt;9PlGD*>wMfj2VE{1aD_FU!kIYsuvlnR~oXr{^F`t$48B@J^&r z6F1t1>N5=+S!55zX418N+2ivV3G>Kf_RDei2FJ@8@^V$C*D9;-D(moT4Vy5aJsL9T zCl$~7_qvJ3n*@_}u8ERhd*M=~)zui^slZMi+!Meu2v?$F$j|9}r9ch}DmvXL?( zvmZ(&e7_{btwo5x?PUQOin&^kP;+gOcA#Z9OBs5;fJN@RpxEDjniTCu+0y zgtAO<=q(>XkB1xsZ(bo6g*HXJF6-yU%B09B%0&I)yhv5X5qoU=E6+GGogyyBm4xA? zR+=tjb|~X@Nd1m4_nS=D^eNr8?#ycdLuZZjB-yowL zv8NodBmXQ;!b~^T?EdJ=oEQ&G$bbRne8p-={1NSSi(VKDSLzHHJTa7xVfkEHS&cnY zW-4gSC^Qm>GxEGOOL9?aFzj;p(r|`FUDw}-2t-zmjMSQB$Pc@PW3(#gJd(jHo~zEaaR-6DlcIW~pTS(Ifa zmbd(>^^A9;%iA46_OygMeu}9hoAIE*r{<;}FaFVfX9xZ$$ZzUN`ZyRr0o&~o){JjR zKl4!d=3a76VYjIufZl0@&ZWMm(I zyQZDisk+x_Wr^>wupn7i)Chdwbz;g+w6 zz=e%b3sPTxJ}O$brVnH|uGoe;BSGrcpc7G~l^x!<<4U7} z^rN@%E2NM+P@1t@6JKedP)lPca}nA|yQaq;I#E%0ueSqNd1RS&^!#+l_6F!f9A#u^ zsR*^CSUT$CugcwLm3vWTBmRlZ#e&+5n}Y5?_M8MuipQB_4zJ#O>9+$S2!dq*qfQAK zED%MN^FWP^*#>109!*mCTE_arf2Oa4MP5%n`AJmtmk$I1T0ozNL%mqPyKHc#VdiTmd(;*--$u@*UH9g@~O2WpCs`+MJ!9=b&{r}ejFtRh7xLd$Llq>Zq z?q;Uo7>ogl`>bI+2z)~5+x5RhI`tY&$up5L3wI|}IoWVfz}-@=FB1M{Ypn_=xW|jl zzJoOL`c8JXFGVF*Kh+JcNbDz0xx-1ziR}C%4D2bR)X(x3=GUMsididtWlkB#1IrTfL>< zNEeTy@ZJs}54(Ix`yp5DZL9Z8-&8IU9TWDgw7ZgTr;j<*Put0a3uKKI)G866j0}tu zn+)(qlxI|=n)!ce#0hX{?wxU?`+V$sEz=)$SZ7N#8LAtpWS7U;MO4oYSO1bCLQ$cr z)r{n21!a{C#?z?Y3S466EkYgd8-~!Ch%*j|B=lHk-r{!qsd6cLVBj}1L5_>W-eZ5` zuxlL37v!1tGt);Dvq@^A(Is1^eg{mWuR`KjwQl>La+W(83gm4Cq>p}KRLSKlu#K>D zjNRhs^>(2%BU+Imti!3}Ean5*l=P@$4(Qj7_3SqvIt%dA;Ldw+&<=TrZtll@a*$Sb z96pkGWh%?TU8gSIYeS-ISU1cr6U|qszPjIYNtA@>W^I74#xhP$=2H&UyZ8(%A8S}5 z8iXIzR54mw@Mj024Bm50ld8aw2r9CNb6tna8XaA!N79zmD7DJw>pv|TWT@zQ`}q7P zvYw7ws5Pwkx@kVGG(xMIX41$xhlbqZ?vs6BuPovG^fIF=Qpq)7^aBK8(;91B@)kh!sPLOuzxjXt6ue64F-k+C9a!S3$okDK5 zWGoQoAgw9H_dW1ct@$wRLH}AK!~Mi%?SnG4pnu!GjbOeptxA!4pW)^IMfX z?0NjUUU$on_T^Shu~Ps2%gpsWU#6#3VL$o4ZAEbwd?m08hb(EfVeAvCtx(4Ko2krn zy89|-*^P5*UGJN@@$fX~9c2VpgP0d0Zc;LDmAH9+~*Q8gTMj;U0r zr)x61g;=}T#!bZ%fBNKYj2_g->J!IzUfi4WvHqp}K&x0Yn>maIhAyVvF`!zfO6d;7hH_u?IfhHdy{J!r_J_J%;GYmq zJA2Yj@GB`;sZEzxaba6Bm zsVON9%tS-~mD=oo4H{bT?hj+|OJ9`BS6tFsT4wu%KKdwm^MigKK66p1n~uMQO&907 zCr(u^?N_752b6>aW{D~W_C59l>KYoIt`mf|sZ!OHDwrkDr`oH@dwvt+U*8=2|FLsa zpJG)gvXD|;UHK=`dvVv`6$7I&hcjh5RYXg6^JKXL-lN^7=Oxu*w=|=5rD}UZ8|oH` z#QwBIlbANst!s7@h5edeeq3xUSUN%&x4CTBf#1G+VXe8!SQ5mITWDo3e|8a%Sr`{{ zE8nVD1n)tFPQ81Ig-*@RTQPgVu^F%Fls7jk_);dbZoFv9s`8F_^K6X9-5jEeqt^qp z(b2YzksQjVGf{^J1tc!>5}9^^ol1DsC0FKTo^z}+L^lYgCMFD(O1UzOc@Xd$tnm5E zJPEN~C3}1t`uGX8QuF8?DJ5*2vq0N$Atsc|(4e;x#$I^Uxbs!MpKC4;(TY)))9ueS z8ukZfzf3L9zLc*?S>kCCDyXt~+!eA5q!6!*e?H6%?jjA=U~y|UTx^Rh-U7dHNauus zGN3-f47{0RY^yXS3OQ?k@L|?tT{8_jalg~!InI%j+ExMHBbUzdlw|K&H>5mrQjxFd(HN7-UfB1Q}L}E)FkRdLoig4go30T0K5;x z8DBkvyAhV?81d`l+e>*?c3CMR31HT+11A%bGIsYKZr;l^o%qF!QJ8wz1qG#pOypI{ zD2QNgpMQ5Uth&XR$CwhP!Y)kuilOZ46T_+mt`W_+gc5Q&J6(#^lDLvMO?3nQb#1TX z-{gcS=VIae6b8X#F*IUS0YiD?na|{j1mj>fm8y%dVO%B* zuE;TH5gf~oroeBpywQotbrT8J0QkK5eusiVA?xnnspnhcc|vAUDt8+e&t3~~_|8+U zQ}dSl)s^5l(wDcyoN6xZhX^eyW>KkNFkGVq=ckO(D98hAKYwy9JjTh!96J|B3)AYp zf=#A)Dw63i)n% zDq6L17aApUk8xV`fE92X*K75Ay{aqL<4DcNpAK^ z`!bJ~8NMgrpL7@Wvd}Pz%&rz3TlM^>=sU3T!s(%Vwq7|eNZZuxD1fd!1Rl1^7gfd0 z<+NHR?mATSUafvzR4Gr@qB0kLD_p}p-kIze#)~s7va-ze(YvaY{tAsg5^ct7e&o+! zL}f-BsF%q->X2sp_7^i_tWG%_smn#CIq$5|xdQ!FrUCKmB`l;9-pYqp`JH6!zTMBq zj!QUx8uK^sa=$Y)`FsMo)%Y)j`uZhyt%KwK3FG+mG+$+pW0JF6xzYABLqVnSfuR6H z?_wl+?=I!Hrj=bPn;%y-ItL5ygj%)NG1*U^Vio|W403@LNG}Jo-q8G>O5|J&(H{o3 zficsuCaKGPHZ&Gw;3z70vXRA$<4Akwa6>o7R4~p-%Cha2^0e_sC3~~8eEUeg$3*k> z!|anGX0vr+U=go0ZALYw^HLnM)37Hrt(`13UCGWmNoJl^jNIP~E6QMCdjM#h!|bA9 ztnG2iY(;8Z(Hyy|^jWFqUF-P*_I(}&3T-UWX#S6Ws&N7m1->MGd=E!$ew^1sVU%u2-%s8ilMMCpTWn*O<% zO0JD{LtdUw?dIzl(kXw1z75@bU|&hftrp-KZEdy8#GjN-A&BC{-n0%YAy7q{d}AT< z#BF8%_g7B;+BrTn`&jTAYpgWJ+sk6hal2hloDr3&rpEqLQtj(JzFYU1M3#_+?bv7C z;U-#rVtkZ^vh%XW2dt=|f(L@M>7IihjIyIuJ4I2(LoCqyD9TWct~`nDu13W^@>|~S)6tn3$SYm z*^mjcd{EK6`yhbimMFXM-yOizLr9m)Y(v-pOszpxK*_IoPs}1DeQ|C1K`yOYV{SQt z^R_onG}vv%IPMAJEX1;ndW6IdhdOrI95voMcen7x!)@g zP^7|}&S6y?J-$#Bi{FsFp``SSC*+QlLP-B!z4ArTk(i-^?C(E+TG?XLdc5CA6GWw$ zi;$?Q4a8ACXIEvXA@Nqn8>Yd#l_R0iR8D^I@~*O$s`a^wO(LARUB<+fY?O`Ecg=Sw zMvg=omEqv#8J8dieXKgTiO4|9FLp~`U(m>ofN65J-9bC$dPEO?zRkM^FpUyU)mF$v4*awp6!kbIOq9axiU zhD3mOe>(O=Wuzi`2yW<@=XEV!@`w^F!@T|VYng@$T*h^~Y$Kx42DA_N>Qv|WL~lwD ztgqu>h)BG>jX&WR{m{2!wJW8PY8q@4yI)mVb>HL%Gvz*cxzmRQ|JXD)3tJN-P9oaR z)_2RTnKSyMuhZa!a8goTyDonN6%a%?lbWiEw+$V*S;R;q^GPok*g*%&=h6we2?vbZG-ui5qddqeWkF!*DUCd}z-(%n`Mnz_OB;k(R{CC46;ZiRAs z&f4SRtr)mz41m=q@ya}Go)aJ-|-dqX9)1 z@i|*T0>0A(#q0VQHM2m@6On#dKaGCkVg*aI-Uk?WD1oLN8x#q}ShbiaH~xv1e!Q z`Y=XEZDxD>d#Se`QKpUO$$^7SknyKdrON(Sqnfi)7*y2*ksF!ph1W0%8dWtlm+X_k zMhBi7hfm+V#|ssOD-&Alq)Oj4#a3%Ziqn|KRP9p$N&JRx+Gy@wn7HRW>%snG;rFuC zfD6r?^EARvR9r+&H0SxVNgLkC(zG!I>LG=%Z$f>||e=KYJUSmHxA(Yr0+>jTX38Q&mZR{d6sj3QVdv zrWmsq*VAv|wN)_>m{asMJ=KVmQwb35o1LXEcZv(FuO{bKxudqV*A-YW^Ivyw?PrO* zxw*p|JR>xHk!akJ>&iOI2EZzSP_0M~nb$Xu`l+A}SLb6W8Q+Z;z1Q4lETO^0h)Rx3 z;byr0oSbm%xB2(gcamg~sYO|DUxInJzWuWc`UInU*YNdA_p{%tiwg$)6Alcr&VY3$ z-j&*moS=%a$s%Jk8qgSznTP(3GkD2^{QNb(vH4psIVq_f8-g|1vXYY$OuPb+n)#h4 z9?n0m-5^d?PE_yH#NdD662_{oto)^E{f+IZ!1{r*yNHN5y;qq8{Pjz8d+bk^VB|y< zW+#(a_akh}1+-jkoz@x?G(^UCj6s)7o7p)RWKNdRt-tI-<%`0az z_w-5#lJ3lpwRE3dt;L}1jO35MdP{EWS{R(-%%tEMzn{T8uVOe?;zbP z2#IGs{Z-K!{2%i>-Iqup`N?`P>wOQe$e8mL*`1{eMu$H3`=(#_-;zDv829gG6#pD0 z<+Xg%GQ?jI?xlVa#Ubw*H{R!iBG<3zQn1K06X@Z$2<|Uj>F%471c5x^Zu}<2ZDY^< z{E)75Nk|mjzEf4Hc~Exo!@1V1EeQgk_upOV9#m`2N}*f@QURsx-mJ2t?X%F}KfF8s zPQu@s-hQh2Y~3ovB#=N3kbNC3Jk1go{V3Vfb#~>?NMEx4^!wq}q?$j&!K|fr``9j} zYE{`9S>gqMkF@2EK8ht&@Xq<1Nh}_R0dC_bbN9(RB8WDxRY^*UikI^IF6fpo_jb!Z z_r;9W7_Y(^zxtIcvlkz?zql97E?XD zjPN7+hLXv(dH$>x2Blt=bya$cGO*woyy6Fel>Yl|GYng-HUqf>r*nm81a;T;*Ntww zAFNBCugsI}fB6x3vVOVHe)~g>f%&D#0rhnruB=mcR>g~~!u@rsZk1$Sh)2H}dQc|p z+1Qcg7P{GC=`-}rvoQFHLpWV;W^Z~ORp zrqSc**3Wilx+vQu5P;@s#*O#?;gVeX9U{~uO-dLe9zBWv!^BUZU=o2xi!aph3x9`JG=TrtBakHcleE<)l`@!^h|q!S;2w-VRTG9HYYm%#Ox`k8665LcwJ~n2mI!PRsSm3q)0SX z(nh!-yA7h1FK&PjJ!p+-3Ew@uWig`$*hef6GM0M^GsYu%XQ z*`Ep|Q;TqM@;=r1;&E5Zk9NU(AvC^=jcGOYcYCS2{j#&Hq?K-8kQ32e-w3_MJW1F8qv@=os%+b?Eg>M?-7VeS-Mt7YN$Cbby6XYy zZlsZvPH69Oe#ms}jNIU3(r-kDKtOJL15{`#eWObkEQtZA!D$c^B%Q?|?Jm=#dyS-% z4LJjE7!_6Rrxhay(BuHD+Pwg$@qA3=KL~pE6og2@%MrYt2tNiDK-aIKQ7{+*o}S0O z+~@Zot_zCSjn+WtBVXgFPS-U`3X`4$M-kPk4XPuFf3_^?6JD!eo7x}zkyPWcPo%e0 zHn#ixzWc<+&yN1UP(TmDDvvY%4_&W$+7gwHUY)Lc2&hzj4eDOxzA#a8~T)wlD=|>;5P(n{4r<6a@#wg3q|{*IhD$>!`;MyS{eI&GE6Z{lE(|A<`AY zZ99tK9Hxv;{t}>qP8Q0K3}2A^&&a zZpsI6yqoKb#N6lq8Y*U81|J+P_SR9SG_5Ho@po2)$Ny-BWjc0*f|agVjX_;sXAm$6 zCaDUtFgMp|oG!2~+r47}1Qq|xoF@0~kqje-2GFUP8aGZe@r=wFve!V#($2BBNC+W- zHJi|Kz73O=Z9cpIZqA7na>bV0`~qsBj3l`-#HQVd2Vr`KS#0>EOk5Ina=k${AhMvN zH(6$*o%zu{ce~f6{k`|};^&n?z0NNpRA#-GH!5-C3$KZHty!&_3mD$X#Xo(K8`;es zX-z8a;>M16pZ!)^dtb1bdRD7|&=}um# zXP16Ng8r^N29tAsgm5uU9Ca9`P0wo`)d{aPA>eQNv~+KqHnh3BM`kLNxYL(jU)f;^ zv(RWfl2D|mZt<=uj!N)-2)3c@I+Fk8Ad}ILw57J2)9v^|pS5V?Z;i#VATub-qiq zOZFyvmKM7dotqP?%-p^@Wh37$bP(*`d1^W`Wzbv&ha)Eazv4m!GVz8}>CVeSE@}Ja zHpEE3vpNH)8NZb??(QE0An+<5>MNA$wM`nNX3asT8qnHbUCtl`|BCAY(4mi@+z^Pk z$h~a0V~&2kpoU$y$$8bM>8O$~$EA=`uRDIU{!T`AG z*Ymn7g2A_oxt=BHzXTI|g(A$?!fw!Uzu8On%=Q|10uCS`DgjS#A83X| z2<-vTi)1S<8P#zMZ0T1wGdQWAgS`oC2IYCKW%U=7JL6ri{3c+a;|C_tEWaJYzg1lW z^%y~%vJh&SLAnUp*F^c*?{wEcynm(^CnElXi5>e1Q++JNjO<3i)-I2EPUiXZW%wPq}?4{0r%xF)8AqTe1N;S&*jvhzvc zEEzY^MSa~%b!$8^LVW^%|8|Ian}}z8ivl14CZN7KU?dRc0fg4KZ}q_s1tqv(;|)4{ zZq0OnRvJK(2$71|Z=LtKb~QF%x}T9Mm{to(Fu~9euC$v_A9mx7d=XwTdm=%I;@a?@ zN^UND!}j#DZ}|A)!^an~O*Eg(HljwqqsH|Xf@Y%6L!l$vNTS8WB)tu`+pgK;n2`VT z0*qs(DRJpV#>jlqA+t~f3(B&rnOX2G487}aw}{8d!g$LCo}4PqJ6T4(#&tsQ;MZCn zF?cLH3l~yhwY#sw_7-m7r!aqz!%4Oi=zX3=b-8mP!xI$T>s*Z9`(s8;-zvQ0?xIs_to9(43pMGl z=dtTUYXR^3p)DkX*2O{2@eVm1N70U_U@1&_19Jm&g|NubzW!qt7B~00qk)4mt4g!$ zMV`&lfpbX3eBINB6ej&xLk8E)xpzi_mvCN%Qp1fc3L0@-F*G{gr93RER?bA0kM_5- zb3}d>(@^Hs44Css+H1lzQai67X;v<^Ml#PDg=3;iq_XkyWLs zCHiuR;rH+hO1pAi45BQ2z-wpOU+00{{lnl=H%qP{$Wxj-v&sI`Uil32<+bbXDaP*{ z(Q#4HbA(2Fb`gGYY79Cf42#LBqQ%F~8vy0i2Tv5VepN^8U2t&w!X5gZM5M;NdH*lS zqVG6-S{nU%s_`?X*#?$D*M{Y5Mu^3r9ZZO+&Y~Eq7Mz*!SPV8>@QgMW??f^P|M6Y? z7VN`h4;!E@&4t9oNJ>M5^Q|!DV_Y7O>c5p&)EYurU5ht>T*jY2e@;QbnPH;;9{@9f zs|ZM!)qyVZM*D?<*D}l&*PT~x9oge5e9J*q8@PwB%ZlD(fTG@lk*dy|*jUup^gFoH z0Bq@%0&emv(z4H)7#J2`YyT1xC0vPGA% zP}Lx$Y638Ax+!B|B>;EQd@xP~smFTHGann<1JBzvS?G=*AnToxkpW&40?7Hj)}pVP zDkTCs2?*YT`ePu9*ZDqpfRF~rA%iFejvj7y8~8t&{eM30>j~M;u8$2FWL*H-ZUN?B z2uN%Jedu*lensp9JGr8vFnSb#StwJt2k8ERM^@eV4QA3Xm1$K6R`G0rF{qmJx(?$R zc|uLQcmg`h>-G$eXBZhcvAOJBup%L zjVm)xllgw~A5SjWE$aG(KzOB6w*m8QdWqi^(@ZjVKrc8Ruy6n1o?4t5`s#NH14_5a zO6MLPZNc{i<||MtFQq!pmI_}FJ~de7(6u$8m@9TWeW%8!+_PLxKS$03=<>=9=rAgb zSemj@+~)LQyTGa{6(i3*i+w`EmM>#pT3a7Hk0xsKa*l$f?R6-V%kzpXctR5bE0MAW z10{RztQ|7?A&k}AyP1P~#|NKWIAU;P)eQBKST+@uZyG!`lBWL?VNLm}Pb)L80v@;x5iP6lAvXZrc(O}Rpq zR!_V+CXO?0y;qM%iX4}GtyYf*v%xTc$pc&xk{Kax`~=g#?a__lPyPc}ybg2_O{A*- z3c`oB&+!|jh2qKehcvmQV&-aywH5|yQOu>ytjx2N^8fo5T51bamwu8YW;|}n8IcO`rtEX(TU&#ROU1Zc=&~e9%tTQ;W_Wgen>3`>4<0szZgt`(T z?nzOy|FVEF{A#*THK@y|(L4YCr}CCU-r(D~589Aljs504@I%-xdR)R`mHWH3`0iI@ zKYm-o=c$EB>GrTJBq>Gz${@sLHH4$UL5j3ukY5P$aPV7s01b-RQC^ng>HT1AwR`B3 zs>>lxk6F~1A7AE^V#T4tluVvD!V#Zi4uQ~A!A2D)uwv6EMS=0WhQ9IOTH&A-sU4iW z$=^zCmaMKmkRq9DK7-59|9AJ1UWuBt$l}`0PG>-xBB#{yxuEFM08Smn+#*1Xdzo&y9k?t(AmiWw;=h!rTsr<{w2!SixK1JgxX=`o28p~Rc#(HeuWw$xo81}8-;}u$n`DB`}+#! zB}z;w=;=`jx`GzHmBf**e>a4a4K9r3T=#OjV~LUMCD%drd)I{=`ABw#54!P!H)*?*}#s% zBx7MwRPyPTipODbXi(&u9XM`Y?-G;lz8Pvi3{b!QxBWX?QHb=Dk53kum(V5xzXj~g zQR3YG|00as+}u!TUs=L9BY;zt`*fU6h_esXSZz2{%rZ^O$CN=uxGC7$v;^8>CqO>$Q*S#ecI~{XmADk;Et{@Zr<~pf--B;AMUDq?* zrCOS-|CuXzR&=}kgd1kKL(D^qw=K25>%}nlc8iHBkBv2_NYkduqU~w@?VF&&u$!d; z%igT+;NqRDwUvYE;8YQd?!jCy|d~Lztnr z$c{G>X!keIpe`a5V(<~{^=>>P_Dw6l0(p%#%64*#DoQfVr4ugyU{8Af*ZC|iGccGY z*p*G>*b=yQ_TGs9QXtHN-L`S)5F0u8B0C!y8HECnm=>|I(&@8Pm$xqWn)KRixMvMq zQ8JsV^VignN`T1JU&R6!#`$BWD33w>X8Nnsd7rh10et^|ue`|^6lHKh4TCG5z)sf4 zk634q6~5ZUk}7zg@?B3x-xf;_U4=G{*B|Pn-8BX2)9-}R%I(|8#8F%02+DBaYr;md zDEPp)ie49oAPuH7s!nB1smTY``DI1va!g^QF)o8uf>5w(+=P~HKCmOs?~_nWBe63` ze_s9bn^8kho>l8*FiSMc5}B0;m(KcyZ8pbeAIe&M-o+o1rNN(#Ot;R9cH_Zh5KP9p z6KJCKYR_%VaiT0D=zh9%_eo2bs4PGm`IxZID+Pva<6?97O~{dbkb9NHw?L(m(8VYx zF`rWaAanoD5mp2#*#v5KZkq1vB8~TIO-9X56d>UVzTk~sinX=13An4feg5ovwl4h& z+XX&#D=RC65Czq20cqfS0P|9C!Jh9;n?wRRX zUO6s8lc#%kyE!M6Xxs)fy;T8RL%eYSl?8%{*gM&~9sj!)t73Q0y<{bxlTWsM6pxdvfK z-re6{zdhUdHmxZUR@}&g?%-f;O@WOF2(t9J7k_3N>cOS}UiJt$c>}AKgqR3F2gmv( zo*du}fM^Jf+cp4Z@zBpb-~?ivrV#si`S6`I{6SEv;7p1@NQQagyEs(!|HL zPbCg1Twh(qD?k7_vWbm9zUX4zVr?kIO$&mPT_08B4{jy^vK}y5E50n^9uyjF$tfV9 z#FLp1z=^%GVXu4-Q&UPS>QljcKxT9r;N87FMQ%J ziW@f-aAa5(@!!@_@qH54dX;>nv61wM2iJ(u{IU&L!bxMz1QBE3N1PJ(ip5I} zCX*s2lI9|~sVabjZ8YxbVs-8|>+?FR+&93t;!l9gjONb%-Wu_J+z|Eq>VN;-G%3jt zZz^+SOp%F|HwHWkzqT-ev0x2MPnpMJlz~*OVTb{ZN0WvlCv2}M_O1=o^X}PGtE08JGd@j zM^tymRHTuvYfw_m01krnch@VTLpT1nD43Cm+v6P>Hz$k3_b3Nm`#N81ADUP(QDt@O zzmQ}v2{V0I{CRGn==nHI$M5%ufO3`mqiMX5lAuV7;iDie0A2{)?-q_4J3++o@&-RL zFq_P?xNeUX<(I{iyD&4Bm-91|5q5{8xg+HJ&l%Xyh4~`!v!! zYGd2)PV&4n`+_^$7*Q%P0|Ag11ku~U6Q|Rw-qG~g-yr4F#?9x=0#4BWqliJit03EK26Mb%24Y`W6Nu#EO#-NF~Vkhx}ODtp%*H3mF+2=)6EY1ySLU~lOa(C4vVpPOvD`=|3F=roN3h&J-CqHT?$s>?j-vF*3a=9`@N(F}iIByh zd1&SFYqdsvd5?2eo+fB?Dr&!7j|PlT7%*ykU4+4#{|bc#@7Wvh7i*lv1!o;sy1@^E z{e9S=bp|sm>&6*he;q*DVa~EcODHTfmYrcQ4;G(OW4@!rh`IJca>`mcO|E{#iMLA9 zDC?62Gs2613tkV0*1$BOASa1bw&|irOFMuNI@3L=fh`__7u_E@hz0Uzq+XjCUwe8> z)<1)T98KmJ$k!txP>wqKU1VnQyGDWawhpYfAlM8tS$(FIFx&zHzW`z!a92=tBR>Na zKA^FHqxTl;%Q{tr$6#l~u= z>y7)Q&!Nd@NRYr4! zGhYR|wVt^p~v{lM~@grs3a$T`Tgr zUQf)QM>4C*uPs}>zc774M))Ysf(I+Fo`g>%e!Sl=Lob1G5B&)3(|a?uA0t8Wo;raj zubJG+WB|>wc<}P_N7L3*!=5Iq%Jz5tnI%q`yl}Wux&nrZV`bO#ti&C!bM}{)mrK!U zhlfMECVuZ{J%iaTvgb9j+uMz=yF``bra%4fRbQy68q`HP&fodpm-zqke;$89D$hT*`7xl zPZ(b?csN8fDj9QpzHcHR`c4rs|G}6>hk-+oQ}#cFmsN7k#A)QK8(>`b+Uv)YgC-lC z;B&b|7#DdUUU}T+#U~)L@M#}7G)EbnWLFNhX_5NQ(|3N38MBSb3ds2l`Ql0ts#D?f z#^K4rizLOja1V@H6~1Z3W3E6C=EP%RgRQo1YX63erNo}L1lzezLC zXv@VXK#!nK`K~!6h&&5NKtf<*V-u9hYGiI{2`xGM9_O4`SZHuUEV+F{t%ey6zCw$U z=DdZtx6mw0$T_y9#p~BwB4u?areMty6*hm*oa`fk!i_{AP$3)c+)h#v=jO_wn?=M0 z+K@RXp@(A7{mxqb?0?ckKuFsC!;N-8mK-r%l&kkKpCAklz7z%Je0`S1<*X>0SVUla z^bhvnP6@kvw2N^lp7EFXyF%APyJ}6Ax%SghuN)EAgz7Gzcny)k-CefuZB%wPuI@-p zI{bY`%~5^&@{gWBa?{fZc$y5tYv*xF|C5e` z)AQbi(8VLa)>|$bnQ2HdnldLZXUq|p?jbv$ZRxa}Ub<>AKomlSG_lN*h)GZop5mz8 z=9d@qc({h>;Z%Nq{FwKZN_HnL3*XGaBdqtrHH*(LE3nh=9uD4X ze^lMt{1W21w_ZQ0q-?qiJ!{VnLJ8IW5BlJ%kVpQoyOH#A@w=Z>7jzkMe3$Y&|^8b_=E+mSI#Eu9sIjLtFMN2A&x}Cj=5MXcUo} z9k~EQ!o-~%Z`6gx_sI%ilX8!F2ORCb_pj_AtBe7FcmjTw{S>S5@$m~#zggGbJ_^*s zSI!hDnlNZ~3Iw(reIRbA(PNj**kDJ~82LhI5z$ak*oB410QFcMTb(79-~U+%4BEi6 z0yln9I%5NR6i)x7Pj3=So>xO2$}X=i4!X`V+fN_)*I|(%VwfiT0^hZR^YaO*HWIn? z?Talf)3ej1-h?Vdg5!Q3J;R+wJRWOj-)FyrCh)I;lnJ;TNZMOPNK|##ZVVC-k@Rrc zp^lH6;0MtsaM6AF@SbOaHKr24?sEL@p@9M`Hp`8?)Wf9=?9;yigCC$Mxj=`(Pc9Uo z@TO;Gnt6C=C&W-nD(Cv$zn`r(-T^)fU>ms@7af0Hpg4qtluD*Som2>Y6d>v|Rkxob zf^`-+DcJ!1uVgxY#wr^Xe3#9BJmXicqw@4?hsNEGab9&-ZeocFhmb+xhwo0$k9rDT z;q<6yFk}k}_J6sue?qnVepP3|$C1#- zc3!ZQ1J+{v$QC#vr_kKOzz_?6`H^`FqC?=jn}gy9k2YnI+!8hV2|&dLTOd7d^yY;Z z5N1_@ou<)VvrLN*d@w)=2YWt1mc0VbdVwIXtE;;TBy@1-&p!}IRtOy)9%iu^T@{P@ znXeAsF@-WK3^Y1jfxnE+^l?a9lN**}bjk*H)AgRE_wKhqs6xJ?3-%X^jP#RGr*BK~-KvwO5&4uu4gc34>LX1p1v-xnv=g zlN}7DSC>TOR)gzXOen$cZv<0=6rpX9YiFf6rT)Fp=EYNsNa&m*SbMXCVk=5X$8VGj zIWJoO7}kjj2{;IiXjHA;L`Ryl{#%QLODO-vj_~lB@`IqV3ou_{ct(nGYw>(0OhQJQ zegio|mtt?#2!r*=AWDkDRZqx6jMkQ6V<k)uAc#; zrg5e~cT^r3TZ~%#e%C|%V*a0lTB(-PQb2pr)Z#K_E+)O=a`AsJ<-ryw&}R)FNDi?* zU3|?lpF8U+qbT>!Z|74M{lQEc6q9jidmHkyD+^1Hj*BTs%Ac24v}L*OH3K~v9O7R4 zRXxGn=Ppt7F3~}-E_H_KrC+&au5NS9cDCwF$Nx%avCBV~4Y^Fa!sn)K<%l+oPClXP z9S?g=!&06`%0_F)`@2Io!+ta$DNM!VKD%WacEQZdq;d#cz=3bHc8LPy#_Nd7jIX#sIbMBvw8+#;r8~L|{N3E0m;`uFI z+aCs5207Y{eO%mJ_D!*jnJgA7||f)p*^ z0#1G1)}|)iJ8wEpgymuAsiUUa5h-v?Qg`V{hWV`4?wAiHSYj*~;!3HH@J$GoF4PG~ z|IZ7+&@ptBmyzJavG)U=fWwxUlJmEOmyZoB1vcf1G`9wMs+1UZumgq3I1KVMtvq$s zm$qqhZ&#!R9hUNm6M{aEPxe_Sr76O~cE?&mMT)){%)iscXSN-jkCACJ@O`-XNkQnv@1~ zMib_}`2Z^ci|*cy)cq@%D4;Bm#c7(~qO2{X(G#N-jvi4Ry)aEiA&6+h{EdltfMxlu zI+7#=p_ixFGH55*L99{&?oBZvti*(sI~yb>iza}UM6{d7+|-BCKuY1y!97L_1wcys zeoaoMNuVF!9m3|P3s2?vhZVlsutlut*8RpUh^>E&+|V{i4jLg83SYpXEqLoP;fhu& zC)_4ODlod7$mQ9*f^f(gL%^i8z~&#zy$9w-Lq=LFgO242d@uR6B(|i8*->n?g}#ff zMr)O ztSGjfxynOh!o#8qV7SfqQ*Z|$&}bNZg$kKy#s1y)r}@Fcv5mCEzmMvx@9k}_&a(f@ zlS2^bXF4VnCdYa4JFc;;9|o5%ua~Er7Qd%g042C5h5`SINBoetyfNfxk^lp(`ri1+ z_qkpUTK!9*21@^-SH4W3)JkG-;u8T@$>%D$<(9$n;lZoScA4|E=L2Z%6Mw%p!9&x> z$MRpP>;YMPU4w7#N4g$I=rUoFC=4*eq{KtYGp0}x^Ji@0SQqAsWj5V6GmY=VsF{LG zvGTSxQjU|m;PJoj^reRx*( zAR8Apgz_1YWKS=O;?k!bfii!%PZE-6g$OHxj@dx%QvIPksKE5w#I-p3M?#)HXhUu% zMAR*Xu5W7*raq!dChIr?4$<@oLwMBi5PT`m_^(^Kh8%;`auFQ}(u&D;OnArC+Hyf5 zQjzN15RYI>Xo@2hc**IaHL6c=4i!{b{!geaZfgt6%i_~G=XcOy$3uQJDl49E`!GT} zrKYu%v6b^lMLGmQ`G7@|pKh?Pk54_TcgnRdz*^wPzP^=I8o_53O6ru3vJ!|OVrwzE1er2k zopJ`WdXSp3H9i(rGfPHs9-)BxY9S$qH4mcCpV0$M>G!fJK^cwAh?EIKy<8}xNrg%S z&eW}C1*LA*f@%n6azO~1sjhFvY1Bcc0R=HteVYSR*3XB#b`HD?WO0cDp; zHr5S^=nD-@<3W+y?dN7m-WslhwEJa_!zQ89h9P&{^>~pVv^BvGNiB^! zMQz~Ex~oGP7EW?^bZ?7N!~aXk;r+a-eyQSpqkMCRbJhK5n@nf(#_Kz7F%_ORMCY?Q zgZoe_lIQ!S5SwBdeh|52bh_2I?;7)qXCZ2e(yeGA z0c=rfYHZ)3_3R5KloO=hQm|>vwpi~(V(CFU>b}Khyyz({EsnuV>})}lXbQH+)-aVI zlZunMMCO9fMTx6RQeyWU69t7?r$!XUSuXVQSj>bZGseNPx0vqBW2sdkE5I%BiP0x~ z9&|NCHcVY6lZKM~G7&Nn5imxACyI$3O{>l0%7wJf#f0A{mo^!pT@q}0fZ&EH#_NtP ztRl=i_0i3RCqIsE=MxNTIk1Ngk5z>|gLIs0n5WK_;^Lg2%~hT;t7^ zO?jd&XOm=je^o8>MOY;LGC}!SVoIO%(KX7)>%|o2^g{oBh9E9?*1zM?PVW}!`kV{} z74^7LL%nrIE#2o1;}&wkMc02sp@QX6T7KqW%*|R;${bb8qQc=?ibdbOgB-=-T#AcZBzmLpOB@U;KBv;T9P!GXl zY`=S^%S%T_MbUJ#E0%G=XWvwgnft2Vkd!u!XXVj(pn1B1FK8hhYf$EhqA4?S%*=Z# zSBiqu(q^#p_lU@c`9^3)9EK!Dd(|`|BB+>(I=T|M{6Ih)y6Lz&503%)>!w96ArA%y z2CYQAqGX)qr(OJJ@u8=-ia&4DIFCE``ukMB+e z-W9czv;R0;!ew3Ryjnv+425oares_oJyIb$Bu>^y0aigxLcFM|wZS$`g$9jrCCV0Q z2~o;OE@Vj>m4zb;O|KAUykznYx}`V|UqM*WAcOra$B-$r`~|pTdpR^Erg5q_GhCa( z1954wha-Fn9XzXu>9aMs#0c8|5PwzdF%YLBio(X|E_P?Qv z3TxE-RJq=(Lff0O0F5Jj!NA{*pW^u7OmNr!T!c6Wga^TuO3);{BN5U?Yxc2?l<=3Z z;8Gn74tf_iX!hB~8%nn|Mz$~ep`!ie8It3@O&pvOR`$z)5Rz<`Qa7Ae&hdWgaM(L) z%6&rdMm|K0x*T?%(_NeB^sA#^&-%JBWntg+&Y)U@n@Hvd-ikM3R?uxpC(qRa5+X$1 zu_bkN8&roPKJowP%Hk9LqOD4w4#!yh^NU!Xl{LlZG7BFH@;EU|-)_DQ(40D}f0*u` z&?u13#~6e%ZXh|Qm;9uP`b(6PYUBB4m$mVoH@4dOMTqD%<0vcX8)f+m5*AjDd?`L1K9cKzKHvhy=jRsC*&YPH*t%2KSgYJ|q+W)cpNZ?} z?@2P~yi1hbhvYu`_{Ih`<#XQhsa~r;nj#jlh)aZoxXcHmt{=aDZ{sGrkZMNq3kWLA zLyaj(%5-~RiL`u)zG_fLY@wu!9W(pqv{i4R&D(@eO7zKv_N!TUc4!D+C?zKMNnS;{HANap~s3xMlXpa@D`1hO`OeOXpGIQo#Bnguu7e5aSHm(9EPa1 z-5gdrWNA{(esrNtnRb8I?hDsB!CE#bl8h}uy_vM?j?quGw&Ud!dSI&O)c2^BlcmD@ zG^v`0A;wv|OaJzm>4fbdMxAZ#I{1xpXz~n=z!+}qhSPo@bt7ui$(=!$U$##^a-(Ef zbr9rOk`;9l0ph?c6CxhIH!OtcbkP~DhGIare77sW%v#LmgD*M57K6z$ak{qs-2ylD zSOU}e{*R_^m~tDb%g(*wA1SBfOJtZj#cU@fy(*DXOXpmF+ut;skin# z9-hzXpU#9+Z&tihKiJ2OT|tzl%{`t$%$98gKK1YIp7#kAS2mx#t|Rd_uMz3SzF}_H z-A^E6{sb9P+qKYXi-Kl;j5 zJ{~dI+L?FMfjPZix*^DJcf?IRy~rl5&*_Jou9hnV6gxe7Eqr@r4l50OI~lg(Y+ z>QJq6a`eg!t6pW~KX#OkSbUSSu(n(`9DdR+-_J9#9+!S+Epod{d$5pc$JL});W(*+ zoWt**G!c5@{}Rr{bI|NCv|cRhZ=d#H%j~eEFJ0@12?w1|y{H?|za`DXd(3&OKVIYH zn9WFLv^6n@pE4cp@P@(8gEFO2@X(X_{`kAb1ftL5PklRw74d20uA-khyV>tu3h z#kX|4Vp(ZcAB?sY-dy1>wl?)Hq>7l?mJCnz2*-}9Ts(B$aAd%(ysUZqIPFQgEtuHa zMz_pc_ca-<&FL1aVGFPubT%lr@F%Gk2-DVX3%F>!;g!);P+#Zr&~r z6uZDLo!0*>yFaJ*94#r_Nn;Nus*3oT|LVtT`8)o(eaCC*dH)L5V&K1%2SdaNS(?nY zs>`-dTibdsgU*lmCkutb81UQsJHv%v=rYBPH|M>iw3OIqOxUe**eeUNWB5i(X zlA(Fi<{v$i{BH#5-s}8SWi(!SvW^wK|N0VNC<}kL+M!P^|6jSyZdm``G@aM|A|D{C zqj^7h5P^Pj(RwAxW;LYW7;+*?VlLCWkMT zOiY~aoA}e=w9Vd*(h1?q3zps`{U8Mzb<*bJai!@dINq<**{|Xo9lFJ>{nsF>-_NN1 z7E_wY@3AS@+0hGycT!K+dR2x)t59#^_?AyQbaGNW$8TRKxPd)33*XYqEBK4x`h2x- z_Jpe!C<%2k6K^muub5fyukILXLFzSV+pll_@vFs^)#-K)pJ-%(I+6ivGVp3FE;)we z&;V%G&rJ2QBagkAL`+q7ULnX+ zmnbnG1>J;s?o4Cv?z|37la0OIQ*Qj~r0Q{;&WaqtRJ?oT@rr1%**$op1dU3|Ds*V> zYdJb)M4Z{Y%i8vmbV$Lee%FON?(vD!&2JQu=JsDtq41SeRcG-2w`5L;r_ZX@VwmfE zmUvq~QK%Mmx3-@ilty#S&GDZ{a+z!O98Espes3KA_Ybb?L2yNS8WuEdvwX(Y<|7$% z*)J1;-paJ&{;;U0Yhv*|*8Zes8np}+M}9)Lt@YbUkO?&2NnUr^NB+RuJF+Qes`siba7$TGv5(5;?rRvvGev$$33894MVs#LloM z>Wua+kZ^=@UutM5_TTgv;!t*O66C}^Z`x{Fr^@MYh^c|0uk-Oe9%ELTsJKe^;V6B! zN5qLZx>T0Xmyke8;>@tJe2(mFoF8*rbB`3LF_Qi`VQ^sxz4(%!o89)z99CKfzxv$@ z@K!AkoP=2Qe6;t9xtk}DdFZwmQwfiP@|B(_q}Ak3BOn4OlfI8dV#AYO_oI9kM8A>= zO)5Djc>Bfy71GaEcDxhZF+T$t`hvz8P3Hj}ORgejD21`m5c<7DJ4ulKg&`{1Mf+ap3oqJ=f>V zp9R0I8oFCFVK$ZDW!AUqe!6T5XEzQYAZ*gP3f5qYvYzx~j%=hZM_f0~t9<&UHba62JPV(|mCX9x~s@1H@Kq z=e5T-i5qO}h8zFBf3SW{CM zVCbf%lpHCKU)9q$_a?fjnoTQVjf%vHD|u!MCt+>}&=QI#L%x^=KQuWyJ$>l2vX5v< zw?$) zZAC?9Wwql(sOY==nX|KA1PJe`5E@dZ+*?C=gu*!L1gjQ?j|{7GUW6#}L%dovQkkNt)5u_~4}+ubBDzk_=7iC{@3`b%3ci_-P-UK)q?7IfNDgolBnpmzOv@zv$q6 zvrPG2JDfU&e!`0g8$ySH`HnBv#G5FC`77*O;qQouf!SYzQ+6=>IW`N1M-BhQ(3*gX zm@lne5((6pMSr=hxqT_M?jPXUrpuXF1CA`C$Fgy+w1@sA+3f%h^51JX{R5F$3pF>U zgdw^p_xpSJNw-WLBZ0x82&SL05}r5N3wDn8Qe{Pg{O`7=-V^FO?FG|xz8F7eiQYfy z@NtMrbTUdAb#08SlRz&czDk?-?zH#K7+dM}&7>&T(64{Af3q2i z5-R@^qzB}Cn+fT54ib^^X_ddde_-Z9VStgWw6k-)t0!q}^q63ZCWq=BHY>6tc7_gh ziHwhQ{^u9&jfN}NM=wuY*V@v5c}Ve})_iIO8=ug?-v-8ZQ00Nx&k(AR!xs4bQ=G-W zap1`%P_XG(gDEv#fNLZ;nWjf72!2rFCz@nCdPwI!$lzO?u99Y06bQn#GOxiOFZ+unWtQl^2R9xWq(%?(ca4)rDqV8zll)o-X(CGmNhrv{IU+X(teiNPGYcaeXpi^Q(LQEDR6>1)b&uwL@ zcHDr2+7hAHBF8KNom?;ee7@WCg&Whmro3CMj`CCroFuq9f1AG$-G_(I>#l6eI?kwb zmo^E-0=r7BLKAewhU_f{QlL!caW?<-k8u=DZgR_Gam;WeNuZ%b}#}~0?8h)ZuA!B%w286YbVt!xxDmw zncb%MHSm8dP}pV?3SJ46SJgIX4x+)dzp+Cpwq*1<6^9vf!6(Qq_z=J297WT}bKv8~ zZ|Usy|7bevxT=;e3{%qGUDDFs-3!m_|dOru0^YaE2XD(W%H-EwDx19>%e) zXKcP7DKTvGNdfi~W%l=X)xaw+fAG&Bw}kHzpTo+pi~YIr$vCdpWE+pY5kH&#Bj}Vs z>ngJD&3|nUMXuixp{q z>KSSd=)cI@y1@7j{n@h+s?7*WC4`d6EX#MA09u2-qNjyVOicVG*%dQInOE0bJ>oztSvfN6s_*;!W(6@6AkdF5)-r!64Y*8Gu zc82Y5e%R$f%M7ejnhs7f*Jo%wWZq0ko$km!;t|p3Lnm|ZIpvmjo*|TzZ7M$rQ%Zpz5 z5RL_T`P;)~592^cNtU=AoPs*N5c`!zSFbud>1m9hr!-&`VA62`sp%Z1{;tkUCTEsag~G3W@|Qyx!vd=yQ^ z@H7sgcKTsviC|bwr5hH7f@dT$a&^VvRH4>3C(YwN|Hp1v0hSR-AuikUy-gAwAycbd zAYa5wm?kcjJVRMLmgigiO2|WTqq{wMlj#O)994~`(s9zoMAZTvgESY2%k}XcB4VXc#<-bw$wvv2n9xc7 zaNtDz%KXI99hEe+XzZMa8eu+39b;C4!X}V6%Rx+{l`i3$ET1wzrit;5JUu(t%G&dzbp^W;3IUTYFW8)m=FZAe z?U|w+WXOAG{}4WWfZs-?-$eM6hhXd^ke8I&I5nxEU8+ORUWCY~9;>rk6T zMI+r&#aX9}wfXNMkNdKCwmM8yNcIP9Sg3NdEQv9|S%x99SS-4GbIQGQCbV3Mn73Y> zT(|TyTv(GmC_7@SWRe!)`^vXg)IL5z|1&1vk1M6fiw;5gy^D$oZyOYg(330*&@bBn z{b&PUMNnv1Nb+^Ji>Z}Dh@^dne1icEoTs0ipPH)BO%F-0U=Oz=3w;t(h%)^YfY3zZ zQY~DT>97Fimx;}O5BCpkl9zPN0mI|XgH-nriC!)X6mt)1Bv)#rvlnz4-(lXi%;LS< z8KqeBd4g{wb=1T#FjgGG;LIY=u>NApQfZB(Hpi5D1|7zFM}y2ve1~Yyw%9E}I%#g$ zOwYK+l^$2}`FVa~(kkE+D@B|*wHFm8{mZun^x zmr7#~(Ug~OJ%a_2sWeT*!JSTp6$lHyIpR&BDJDj$56LX(hEVtNdf>}h*xP^5ZpmH2 zO4Y(hnn*F@RqH!)pY|Xaa#?)+rYL<%DiM5^3wB5(7cYhGE9{I>y^fylY0imoG_4RT zeL9y=O*qm^wsL~Z%S&BhwzRC5g{H5xLc_`h7gKxJA1*OI(r3m_IGW4#jiw=M_f;L; z$tuw%Sn8%Q{hij4!oRTvUfEiq!H#>8`9X&43fKs&ZwQ?`8`ZFt&2>gFDdrsbuV3$i zc7>m$0^OG)$h3`QWX;(O2V^Qtv^`k<v~1kR>+$DOc*m7Qvs4d4qqVf`@b0!ResO8p+Rr^%ukJ&>JzXiUFuU{& z7X?|U@~^h9tn4(AuLIttEP8Rd2UprR2V<#Y<}oFfEq}*R3O#|?exyd10d`{x9$+$E z`>TpX96UR76HzF@%YRE+4u?t;yq>rEQyzzFEE>(Q?F^^E07KKZ$~ zUo&Uno383h##i4!uP1xB87H@B&)^?KdPa@5PMMxr&dzhS$(+x3A5l2}+2|x6Z?|(1 zkdVLFj%fCcf9K5h{E$j!D)`KOO#TNOe`6yTE0Ua+ZG!=54kaHlfA5wg7&BZ!nreqD zmq2%@f-5?eG(6rJ??fuA6}q!{(;0uzIKvzJT5^*47oU~Sp1OawazmtDxr0NM*>A#D zr=)(;jJKPfe)`%hw4z;MPKBW{HQnv+QmK(C;ZWxY2qaKXmnj@p-tFP9ql-QCr5sLf#`Nx83mrjA6-#{w z!^9w_)b>lZ>%6z5LLyVMqbxtPQ<$P~q#4n1b>vFc7Uc!-dDUprnr!(GBxCF{=%T(D zR~M8EhdUK8k*4lr->@q!eu~_IGv^f!fcY4g?e@1FhB24%uW;f!F_aku1Y@M8)!s(8 z`VRSfNSY{4URb4|llRG} zLVqqD(bX7{x7)eZlB7E$_n!50_2+%G{=I#M_~PKj1%{rWhr1pvn*!?HhQ4d@hjk|l zGR=2%a6ZJeQ65;Md05al=PSjWbl7BqQ+i20=f9Uk>Z4!n>7=VFWmKPJhQd$~q=NHn z-k_)N&??ftB;o!OyJ=N4{n=R2%f0FJ~3k5KdV*Th+L zE#xO#FRSOu{*Y-AW8Cbd_MBU|V*g$U1}go%Ei#W4 zu&Wn4fi?q*0Nei5F$dY3g{1F{#=;yQlIz$3t2g5()l9s!a&B#PJiciiioZ{gxUhKo z;IUs!upZjSmJZ1~`#1D=FJR!`-^s&hY4*(1^M}KE8VMvB-+4yCEw2j}1MH=TQa z#SAMp$8!juS8?I}Cy)1holm0bd8p2D9n*8;8!VaLFPZvUNoapua>FQ4$g`#*@>E*) z!pJ&qdAUX%%G#vC=Y;sD2rj(Qo;Z2DN_$uA9ZZKMr=e>b(`bx7yJwVK@G&I)6!G_Lp@7*Jx@OvWL$h&&%K&~H2^r^c*aTD z$CyFVzI5FYUSN6x``IPK==p-1bKmW%k($MI>k@O;&$Y*>;2H&;2CoejUZLY99-D1+ zPyK1kcFBLI)=En_dC50rB(2q@-DnCqQmv^ z(P(>#B|BfeWQBW0su*>X^?0zPq2*h3ZPg@pE{ACvfk$Bk?oR0TJTi;g(>E!dD!y_&Id%Ga0XhdaIQfUnJ%Ox}_ zS1PK|ft6hlNVZ#Zu$x+wyv|Ue)g2dmf?0CSW+|7Illy?6LleuD!ueo4uTv4_E>{ML zCz4u@ySVE>mDn=J`D9tHF8Z}J6edAd@~4>J(^d5MXqL{y6;RLdbIqLQbHb&V?WBgq zNosrnhcm0Yq%;UqSwfkPEZa&2GrC8FbZOw+U-m48)I4gI!sQt?PFZmAVWWtc@e!#5 zZAVgJ#qS+_7gRPHPhF8LFK$?0xkh@GSP@f?l4zl z)xPLlLJCv!>z9u?3$O`Cb7H?{tp0rV$gpiYXU%?c$7sD+Qm$V;9bKlbeehN5gBSV) zewm0bnczP4kNqmLp?RpQDBA2m^GYOTmN0$z{w!XYw7NhzqyF?$MTqDFLL4mnWb{Gekb#~LM*6SsZ=!-?8 zc=?mdYv+_zPmiY2wUaFc^0p!3fPR|}T5fxuwrgVx@ix6`ExeOP#wf2L+P1;Y=HeLpx7#(2j#Ly}fi7pxz^Cl9}*!nNGL9tz-<}^DRjcO?R#xq$PYXZCY>D zE%?Ix=;V5QCFv+PR>OM2YAs^TpBrnH$VddTWrLmaO$29NphvTO&3vS6H zds$u@Z}2JK?)@txa3oyda@w42qkmbI#k*o199e5HI5e^3(U5J0QGn>Z-^r6}5l9|9 z4(ZzaroiOp9jf(h{iynisro@cF+OAsLwF>MB*9pV`l_kK>qUQo#8hLvZYX5=K~s_b zoL0{LrO|r}xm63_6%1sx<6IW~JWE+WF%Q>xZp7OD%!fqLL735)#E8GdzOig1cgq&u zaPJ4(Rs!RjCuNNLjJHY{Ef_EY#r#C$`4g|lh?0QZ=ROkpPROoLp0Cd z*lXBy?x`nMx%1J|At)+RqZ5Ctku>G;?iExQ9&u|k-lO-~*SUR2Xqh$IDc317VR5{! z+j?7a&N4;Efr2RW&7xb7-;^O!3;9#1Jnx#6m*`f`{2z&{B}k5&2VW4oV#tH8(%w(8 z?1qwtfCGWXk3^_Hn19&{sr-t{?fbk{pF4rlYfd}el+E%8`L{Go- zVF;3h#56C;$-`ehf3}ng&n(%$oM$=6j-22)$h1_WA>uai(jtLzIiPAzSU*&S{AN6c z!MgFeJ><3?vEXx;4I)3itO|Zc=1UAttrZO(c;^Mp`Ud;m<;+Tn@i?mJY;%tYnD4FT zy^4*FZYhrbX>6aZ8cpY&YO|L13Q30Egv>DK^ra$!vkb>kWVyaU{0YAs9XCrh(0R#d zA0Iwb;gqJ52}I%@-x$`1rfrjs39^3aD<>RdnwcX;lRibP!RC2B-XEgj7bEyg_6&1^ zxpc}ZfG5#DGfU0Y4{hlzMJ4PD@KeU3twB_5nsBvILbWM@TlnNYT%y%Eg^fl*OUk=U zKxFd=<@-$d)sovR3)i_9Bsj@&B};e3`sPSEE-6>zFo_#$_rsDwrsp!BUETZ?F+uDk zQ;85qzUatxOFW4P=@e`BlE&1sNpAUr8#m-yW6#n}Shhm#i1bsE?fYHXJOeHh(rj6h z!Gq!X@|^jWd^g)0f_SY)Sn%nc|oaL2++aaBD1ix#$=;xV%8j z6a7+KTbo^wH&ODpY@gE~Y)&mg;|!ZR0cQm|=mJvUw^q zl+6EKL`*z6xr}#3gP)g@Z6D@%oTg8tX#1fb4ZW_DJUONXdt9-f`5}kl!m(jU(;#cO z->N~M0JvKI3QDEpz$)8*s*JQ{Ht78nqg^%LprQQlH5xXkT3F$v>k#>9heL3SDVMy# zroNGgD*68(&C6yrrCO=LYk;7%UrtB!?hUd-{R254HyF8pE_PyJREH+iAhcLQ(+q~K ztt88A^3v}JssG(r@bhJr*Ys%c*fdcjs%V9rZ%~{yvM<@_|Gjp4W%>#5EhMO^br!>8 zr*U}*g8uthaqr)<@P#Nz`B9Dg)No-sWiZMAe&U&wX(|b;t7jaqq_hI}r{`?-)tr6b zk-$~}y>{Rfyzm8L1~P^(=r>vRl`Ryb&fp4Ap`uhlf}*1-6CO{pBHN7g1{qB-4)&;G zar(mBzctj)E$Lp7ga^;yTIvv+r&|x*Q6qD*y}+?dMx7C!l^=jpBMu+&rIC%8eqN+H zUjnE3-^A#TLe2Knhud93QY1x`!p26Fy0;%`T{PTjb;@VfR^Dj(TveEiaN1ev@2;Z4 zo9XGO)yB;F-zYy*cNEI-Vzlk!#0{oLhbvD(%{gGO=Aw}`pRJ`ps`Q{mK%o&PB}0(P zUqT6?K0Vh`reEK~jr;G>YwvD~&A^071@Xp^;HBFoj_nBF`(&viuDB$2t#nN>@JGM` za!8~<@BN~*^qd?-?UKF!hSqEHeLk$K!EzR$C#FE{ z<7N_YU;w8*_Z)gk4KNJJg1~n;oy&bpPBRJk+e-=!!-aipB;6ALGU+)Hf=NM69I(Qnz&cYenZ-AFqTv9Ru$cyV;R7Lpk@bH%0B!EL5f(NsMrnXK zmoz1ExC-Hy!kz|jpjWSmmcE9~YnFW{At8}s22ha~fBM*#WZ! zQb7B#0x+(201Xm-xS0F-t`EZyP-OtaqW1l@Q~3{;OW$lji8x0J{EGz6IgbrH3?ME!!`F7N7OUt0o~|%Sh?GZYW!Sbcb6*;(-_1yay`2dw?nN3ravg zYFgh-P@pseAb#7*rB;s@(C;YmuoMqC{|Yx-5|0+_t-v&v6AT7+xY^rUm4AjqC_dc; zR?!{-iYbCpN;~}_xC*<#^zZ6;bqt)55%T^^{STAPJOqi-8)l{PcJx(e@9?SOyIVly z5D2)N%jFgl8ewbt*$db!&@+?Z>@?Pt*fqHsaV_BJfphPGzZ1|4it>{Jou?R{hl^6g z;qCWlV_%KhQUL=s&SEI;^w$ThGpIF##M8Ni&E=mTfIx*8PUGBp%K$~$b)EpKhgdg& z+co=)=>g`Pmhx%#iC@IyV*oHmCM1nTgpLJZKya-zIhPnzxmohf;Mvk2);|TR%l*;IzC~YlxFN31)U9mE<^T@U4X#4 z9}g5!3f2lhrBroX8922a@q@_?oiF-z))-)N6d6?3f_v}(s#mG!bKJ7G2*wS7e!u}# z02~1<*?Z@wQ;8Z|Eh-opnW3c?H%92GcPMWhtgVjs*R|#YsK)-6y3pt3v0yY*BJp5{ z-Y1FN1Lna9z@_SgNd&$cKrik2EH4JRJ6m&Oq1w2;gngSZu>oWnDrwkh?D~E~pC&by)Hm2G2#oN?cuC-F6iM1KxSU!^s)sxB`{x zTiG)OoOkU_Afx~{`w!fPd7xM=^RIudHgoOi!0iVB+qtQJy6ggblC|G|Vc-jGZ4#))o%Mo}RXa#(O z?jKK{PFUaYN1i}lr>58jZPLY>5qkH#1f znB;4F$(3@4=jZ-RUP(@v0gu^!S*h0_`%G zZn*8lP7DbrQra>-`zPz@*Mdh>z1NnTFb`*!D*&+oj5 zo8Jl&ql^+h_O(^Uff8q@SzjNRr^`_611UEzw%^8CrbENebE%(CSziUMm!GoUY(l^~ z(jM)1q|>A97w=PM?&VZvQ4BSUq`{b`QG~}To%j1=A%pLjY2GP2aec~$R!P8JYPQ>Y zy8wBz3Q#kxxwUWnf`b4n9a%RV=C;dF2!$p6(0x?{JYQf$Il3FwROhxknq-TLt9YzD z)d&^U!oW8;5o638E_s-`l_KZEaNnMeen!h|rS17bs-9PjSoVE}?F_CrAi)OnOW8}} zO2D48zzod1;e3wXAaEZlpWE$#Vwhujdw5wNpfJ0#GJzrRQ&K}ifb;p$N~02XmU^#- z4a^C>3rmpa#@;yZ2k0%^3^`y-A5QVAjkL%yr!+?)NCllhU`A?}wqzmRXHK7A!7>p7 zppe)o@Pg1%-hhaAo-oq0t51v|d`X&V2>{zPh*n-!>Oo(jFo5C;$~wPP--Z{#O}|%S zJw&GYr0rRnv+`^g`fP8luOyemZ)Xj_4GJ+J!=d+eH#&l0RW%7Wo3`bB-R8*#LK1JA z-an8GBqnqjOe*nlsEgzoR-nLogap0Hn_Mx+vDEfzHbo_&C!Z^c$33^zP%vk*y{WU< ze%EV^Yfn-b*oRPeyO4)sBS=XyB;|pK%j?7#Y+7pt z=b@}T+VZOo*bcNfNh^;+)DI2Gp6nS3f+n#H7X})SWMM$*0(3t(tP~qmZbAZTJ1Hvh z8Qc6%-cV8xxdaX4r-u9evn7uOh++J{7a)tHU(49-bF22o-o2TpPLB3Ru;t>7C)cdV zZX?kZFn#kHzPAo>8uOX6<=s7pWJTK2t>EBy|$)r7o3eTEnF~sLrWA z4jh;VGquK_9It&o#X_SopfNwm5j0d&7TW8p{}mArPj`9`;w)7FEyk4lpiQ^&hZMI# zPsd^`oqoVem@Q&MwbUQt0uv%>mQmv6Dxz=M{dpYQ9QNJS=_VNgk#X3tP@4`5y|%;G zI}rk^WPRlZ127f7+uLJ#Ae8E`Ak%*@Zv z8{3_*jBf(-I9>PVJa-D7C(LTa23|T657)VI>dboYi!Wn{BbW?G zxy{&KqGqv3OWr=B>J4*ifm!7ocGq@xCkI`62Xx0qi#MeK9`;`1? zB+Iy4@FmKlWvE%YXu2B;Z`A=V0&I&RyU*uMBIPR;cfORg{QW*WQ32u6%M zY|=$1G%^_whG%eQ`6$+lUv>#nsX;yzHK?cN#w~HEXN`dpB9E9D2%e(u_yW4OV1J&s zCsAC?cA16A9hj7gp&}Blg!Lr-1m=EaM-1}nW{V{FenyYiD?nj;*1=jAQ zL3U!|Sx?{f!}fzSe`a$P+9%b~T~e$~D=wF^a87iQ)Tv2R@@wYK6ANO*xUEkkmcoNg zukGnVe^1}{Z<*FDsk)VBhhOtyO_!xRDrAod$iNgcI5NtO(w~V|u%7%>~FH*k<`;_M20VMXmAjB?xgYbV8$@N z*3Xk8o%b%Jo4o73hC{!t(wkj^b?O|~?VwC>=~5#s7f6BP%4Kof>PNdpo_KQ(_T7fd z=}DI)ZkKWZjG(WlAfE62w76Z=z>qZZrD1nC;W>zTl#6DwXdaktCLz8%%Z}wBa*yJK z;pBGBs;PNvFG5U_-RtojmXXlbx^Q3Jtp8jLM33>}ch7-KScIg{pz51~Fyk!NI}B2797^1M$LS;&7?DB}-e|$iSP3z+ZrnD|U`{3v1=;OUg{2 zY6S>d*@DciRVtNw@TLHJ`}?BgZI|=uIWHgI0Ej)_?M{xlp|q6!O-el5pbl6lDJch=Rjh{1p?vo9ro^5K+ph|XMLpU! zZCZ^6Zq?}ymog#%g993sS;UJC;%SKX0RH+7FdFL9ePxuA-UITE27@F2Qk}rZq_G|3 zkRYi2WCW#eB*2FQk}EWLYyto9g8wxDvZO?05s+v|=S^$T+}!Tv4xNhv z=P%!0|EMV4g*u-8Nrl+Y;0=csZC$6-V6X#CQ9=0m({shq@cmH(#Y}OHUBxP_(4;9k zUDAr@vYJ`AnP$Zg@7>Qf-yAbnoZ2vkTntiCfs2ax*as}}VUVCUgV?MEFuR%$YsZj7 zKu!vBe>0FHfaHyFNIg4uU2IPlh7{1-i_(mHYgvI)TW_9Bgf|Fv7QF{_f47|saw0&k zPw10ens+neO^M-{d#+{BpUaYd(K#$c%^?FXTrRatzbZur3%nanJ~27=H{G=u@NWv$J42I$zGex9&I&>OMz7XpEn${ZC=)44Y(T8z7K|P`c zBM6tWk$&j(>r^GL7FqG!B185X^8s$aFpo`692rsK{;c{Uvq32jy9nEk*HCqgcB{S3 zG#-oc>2<-slxsJp2pn5!WdEKJ1lKf(56YkI%c`jxbV8&J81p!Xx;iDeC%cei)!}~ zax&y$1QaT$$r99i>%$4eZ%<@>@3Nw{HadhT>{~kV5(X zkP9lFRB7%uibzZ_HU=bqfMESyCVPJ~a6ZK?%sfle1K5V5Yp-oIdl6Rm#%t zJI@e|8;BDyF3=gTdz|%9RgXEnYkbwRS^mOq{;lX$($MYv)A>46YTNI97PlWi7XBV| zUD>za|Eai-e>#mlNXWEaqQ~`rEd40US6o<<#nNK@85?gU1P8QcW z0zQBCB&;vegHcg|FOMF-QA-@>yQSuRR}feCa|GJ`-ETYYc3}lVhZV?lsFvEiIDoU7 zmFX$9*V-kCDAidQc|iJPAMJ7q63ZQ(kU8Fq@?6 zuVod#n~6XBKy@GVwqX?LF~B*UE_34S?!ft*#SkWY*S#z7yL9Ln%W;}YiY>Fze?H|fBUac5`}o;wJj z!P#4mlo4*2SEQjqcOg?VUVjwUc)GV^nIq7vG?ddYp_=fekWp^zXpOB9FqsIyJkalS z5L(@FO67PH$H{s{DJWg`bF8}?_ljy!;}??Oy+y96gLzCJ64q%={Hh{XnhoS?;b!N& z>x*&O-(50i%?kDN1pBIz4HiOnJOYCyd7*FLC*`$6_fWVMITg_+;1+=tRij`qRDGd;CZ|#)uCs#Rs3QJc*H&3 z{gt^17*1t-^ZVpY=z-5yV}C9&f3$bpp5GOivCsSt{nvzCD2s3A&P9PnBJ;0{DutAe zk`H<%w)BS}?5L9$_wocokw2|NG_jS@DxXQW5PODaix>w!shQ^NB}`cB0|yU@hkXrw zko19Wnp4~C5=OSGn99Kl||Ms>2?M3qgyORx2D4+%( zerHL!mXIrf=Igen;l)Kk`}waMV3RdpZT)c%1Zp%O!0qj3I`3jV{lx+hJJG8}=$a6} zZkYmmIqq@WiB#u#_EQ>2??R{9Xb#?Oerg2rJaiHQ|BKt%v`$$dy#u)t>aqK4MuEzz zFC63IifuDiU=2i0p&CEE#l{G|v?};&WRvl0jH^KhsD6zrL9m{o%MOG1!%`a;kI$c+ zbzB&UZDK?;Le^g|bMNq>VlNc8S^acZ4Ru#Ex!)v$N@zgygGxi2%VbWH5OL^NuWVW~ zf66O36cO$1p56I*QB$E0Y%Xpc!l5ked!WJA9K;HoieeGG1*vS}rZ0f@vcg9bLd|2% z1?hc>*z;1pWLV>ga?s`S2u6`a*ak#r;5@{WFo?LP_5jR!3+k|N+K>0upe5X}CSE4uT3Zy~^>UYNc!wLf1ydM8 zPMug%NS}tN))Z>e_s%M+%uhPAw<|qB0A#I-gf0Gsb6Ux}&5StI3_K=cfwjLVPF)Y4 zS4U#Q{?~!=<~54W&Uqe~)DrDEcs!Ad_Z}bBteNrF7Mwc7WLw(WG7TyR!B+*0ZLn(q z0sfOVH#c|4mY|aS4)ARObW~*7ku#`O?j2abU|xZdhEa5-gUU}mJw4lA0b2qA9~g7} z62Z22zHDDz1DM?*)TXDK1KQZ zLgt!)2j9??yj`?nhQS%qKQ1k??C>uY!^7j`CqEi!Rr~;XIhg!SP<{OBXuWSL;EE?y z*R(Gsb7W5-VN8kvzR}S=qg!3+Eu4yykjdv4y>%TrlfY68*qzcst|)$i$Z`wZF&x`# z|Cs?rW|6xm*Omx@^`DJJ3bu4LOOHJb@PY5Q86`FvSDXsKo5_%U=(_94A863GKljAb z(mzAhS?I$cj{vg(1mki*UHk;591V^R}2cTGg19r%ubcgF4 zxZnXMo5ON_l*w(1iP=oI_Rns~j1WTx?(F1N+LGmwGSrl}v0>4O)5CPn-LZS8r#XM@ zm+6Ec9Xg~IL|}4>ijD(Gx8>q&?45tSMW4)#nPk~dxsE09^2h?eZLdAj1%&mnz`Ks8 z@v7|i@1FMj@s-1dN$IJPMdcMLcr!tgZ=IYp5;cqUZ1xsF9C-KwBezyR`icd^Ua;GY0?n6GHT^5O#o-Na;{%*7xO=-Yo zH50mxg0dq+5y5=5$rKoV?_a@4-iI}y?(D`0tvOg)A_Ret%u=B8Po@y@1RWC40v4!p zKr6;jqCeQ#rPKARx*p}{O#)C-X_&Sh;^NWI7cJsXfj)>Hwkr_0HO6Wn+6^_LqV&5l z^Mw#`2l(MHi0OtdMMQwY@fmdW0{kQ6GZ>X3T!EkO;6bsdmlGYTU-LUI_k*Yk)V6+U zJpGOz-i>ZQJ5w>NapAdC#v4mMT&;`fy3KSpSN>GoV*>opr;XUTgoM=R+hNH~?O5yP#lN zGGnXFO8Acnfc7`Ar$9|0J1-}k;r{|#+v$a-ATsBBK~O0IG|8^QwvyZi`&V--xink& zr~YZa9m)k}78!&;{_skN3aS$Z_e=#o;)|`KHSe~LEjI7tvdrnOEw?0r53x-*=L z#i@0l0f1#eN&bnbqvIho&w9O6OowHTH$yy!>@uMx#%Ec!i%O5y%;s1f;_neM`Lyi3 z2@x;0%WqI;=>o^sEQ#Eb3DzHLtlHMxNMs5-*$F0^}Y73$jL~}*B>9i2Kq6Yqca^u zmLr?N&lFuYJs!UaO2t!1OwRU5fx29E*P}4hZy6fQ_#RZEvzw?t^@d$sU%7%@5d=O^ zYbQ{y+GtoXwzwRyZ+7TI6c3nVeBI%T0tWY{Q=vd_<7|w>W`9-+Y?9sE{dB-V`hJwC zYgkRdKO|v8%k%iBREO4HEe6?ZkD0fKh@92SlHyQ=>GIDn#EYQK zH+0X+*~XM>Plv=MrG9Naqs*-C%*e?xCY?Z>{e+GcUu%72z}|78ouwK_Wb7Bb`u^(O z_HS&W>X!8Nd#tD6;9&X~N{Pv}4hWZ;l7@5ekBWs_hkeqjMQ@U@MBA`&FX#&m5oyd8 z|0N!!HYy?#5m&Q2j;&gy!48lE7E>oSd+5O+FzWMic7svYRIam~fk`v+BoSD>Kxuui zY{^ZSN{`3$aJvNG!L!zZ=e`Zk+l0sadw2=8*LoY_VfP>s^ewzvzi*kcctKRg8_o&( z8kmZ}G#PNo;)#?0cvJ@UE0B?qad^ypYP0ZP?~C`)X>VXfn>zpINVed?g$@t2y>l6C z1aPW>KeK4Ymac3RqffD37Q}x_e3zWxb&Bni$DV~yliHHSB6f5b-2}K}g30z1AYh>d zNWf5*$g6lU)h`=X<%+|+|4uymM-2G;1 zj4DYw1HV+No;0zGEQ&SP*!}Hq2aJhbt$y^zjNKhXrBu>vcrw(_#&wm0x4b4${lI`> zq}{-^e|wP_RP$dX(Oih4uf#<+&^Mkq>*2qVnPWIK$9Jp934Fs)b^s=P{{8_kfw z5~*rN6`DXxiM2TevW9|q@ll|JjRLU`ccWA+QKJHe2EMz0piu9;EEY?vRt=ok#CU}# z{45!6L&I!GS=9SUVxk&_HFY>+VmIr9=lhA|*J$_)l2I>xZGd=62KuFxI>cVq&I_MD zL?O*6;^MofpxJhF(%3Isy77~8Rt`TBvE-`ESDLLB*#q4&Qgl^Ju2-{wFG`Qri3(fH z-QXoFVUiVS@1Zb=k?xU(je9O!F=MaRs5|m=TyTVY>?5LWWnOi4C=fAmd-kK@0cG#MA`1NllZSFGm z`1y3t3kPP{@|{Tb*w63N4If_5xb;5R7O^!;I#|@bFm76pb{koGd=x4Bacz7UC_Hc~Bl(x)=>=M3PS|9i0jv|3>?BMv=+PC%NK`XRX0_=xCL3j>C9{Yu_@ED-h%z*y< z*}Ix_c)Nzd@Y1nQz5R`}&=w&=Lj& z@qE*#WEH_mbw1X6hNM_xfkIm>mngxLWaWEoq6#T-y&^yIWBqFfeQpkM`U z8fd^%fT;+Wn~k{k3AQy341U^no@tbioK)2{ko~|qV_tAXOodMJxZRKC-Ns{nW|%c` zKI192_u6BbJ~C;&k7qfz&i)ZHa`^q0D!G=*<~`=gC7>)fLf9X7V$&!kf_Z+=IC__;g`#J7g+^}y_vpuq1qglatbyFPsfxCOH zIVUI0Cy*#0fn)qUi`3n}0M< z)ggEiYePeuI(eiw^PE}0Lzr>vUz*fhx5toM?nGl$HqO&w;Z7q;WPm%7Ch_Y6)@k8$tOKlld2?M^>@m-&}CTZE9p(Yp3Rb2i!T)_4{9V(8Fsfx7Uh z?b`~`HP6w5A4JxuQT1i9S$^#Ahw0y#7%>OoZ0CCT9#;BabS|b8TQld0W*(ay+;H$^ z4f4G+dD_?+5r)Q39}GK3ZQciNNzZd`AybHa%~h-U`x3?aoF$O*@J>sqlf!h^31NPrTAf;~jkB&^>-X|JoAANA0&cETp-rTRctF?wj_flUH4u zQEs{YVWt*!+e`M6Q*mxb&s{qq-wKaJ+P0eBP@BJ05mnbul`G{nKrZ}b%PU2U8=l~t zWk#GH-tUecA~`hR4D%OGGdSKtA#R+<-I{^0PIqLy-C0_pQ~c=mmySJa6rXt1RL*Zh zteVV1QK>hplefq4bfJnN1nc9x#?QViCTJ@wlAQ?_^_x#o; zMM$WB+3>)ov3UGJ{;P+Zk${rjmj?B$b?Jv=|Db$fZxL!W=H7p8jxpVm^QC-}BGgH@kFK-qBAFd0v#Tl&jeW- zs3i>uZhGZ>zUK6fL~Jc9E5n-)e1fb?AzQZozZW1EK;}NY?1FKDfM!%}VB^Ovjr`}* z*FL)LeXvE(ZYb<^J)CB{2Jf3`>Fm=F1YL-m=>+oaQ~5aw+DZQ z@ksTA0i+T_i8M!p+=E3RtamykTrWK0+`w_vKIN8u{nb8zyI!{Jx0+_H)HW|EJv&~n z+~Bf|BXu%7Q@vKacnvn`S3L`9<{9GBMx`)GGvwImxAHGbpBV(j*(|e&N<~K!+Lqz8 zx&@^;_O`-E(`eD&O_1#Q{MbEY!Ir-WXj+%c`=J^X%A06Ui4}U}AC~i@i-|@ulZPRZ zQ!(yxQi5RicT7Nrnq}|j7eUV_-^?o)S6Ef-;Ih%>Mcy${u%K6R);o2vhO#|V^qUm+ zBz1ak9U3<_Ti=v-v^48NX94V2B?Ww@YR|F=HY-=~(EtXb)S6azmw@V@2k904n zjL-JTQO|k}SDEoSc+WgDy=m6Z;<|cK+ex?}`1s z>cyX**Ppj_LE1ns-e#*4tzZ8RCXh_H@f_nJpdJo7h`YOCK$l=8ABaLhQzH8F@`L2D zo&05kN`IiE7u#`*iK$^DM8T&dCjuWLFuBZ#%`+HMtz3ZNJCHnP3_wK|^ed|}d^l*O z5Q-F?Qb|RUlB{`6$KHp-=pHlW4_cpr?#_~e3X(wOq7cUwEgFr50gu(f$>=?wnP<3& zW~CzpZoK7uAd>>kIWqDb&i}L;QxC)>`OJGxYj63$N-+&vp#h-I%=&t~c6kaXckXv~ zG7^%WMm5mhMe7I&j;3K_NkK%rBf??H1-3u^hQEC#=py8?5wudbQ-znV{iS!Fb26p+ zmg*gRUlndNn-mm41Kp0GN(k;~NFf3xB&cXCbweNnJr=X(OCZf%v>!- zGAc40))>D5LAnBtv?fdH8mLhxpmryA?)DjWx<%7q3O;M1X+_q5d*cs>PC$xK}3j zo!_+{eMT9YHE(Qafn7Rn4AgKxalf_iFjm-ynTteFT$!x@v!MnW$5c{Tt+#I!-JQoj z-|JU#AP1f~Q=DuB20EoXoZzwq2REW3$VLq~lp(h>gj?Ytp!U^|Sk{8Rwt7Nfr34zq z^_{7c2W!-%r;sZ19S#HBkL()|rR7Ophndla_2@J}#ZQXobG&xEq>3aHRjb8_M*T1O zV$9+Dcu{^DtM*Ba{g14-42tV{+CU+=6I?b}2<{eKg9ZuivO$8odx8cJF2UUi?(PH@ zcXxN!d&uwq-nv!y(^gIG?)3EZ=`+*vJm7uh?AgvNK0aUbSTl}%me2`AzKl7Rx8w{A znm~;pW&=~Ts!{cLcSRKrQ0rPlCr;cvkD~-s4xtp)bET)UqjYK@m_aK^id}5iDDjlY z;0HQC9-fS=A;4ua!FB4NN5?^)937Xb=`t4hvzo15WHX%#?UWb|RP|wczaNz4FYz8p zobpu0>`kTB8+L87$on0_OeM-8D1M<&v?u`qW?E#Z)m)0AU&#=W-VS~WAc7I;eal@d zoxR4Udqs1FYwPu0oTLzjzfF|OFoxBhqlhVQgDf|zaG!&p6ntsGrzzU?L4~CC0Bm}? z&l!)-@J7hUy;4*`Unm9}7YBN@t(BM^USUFVX4LHFhPv#mK-*NaJ9sI!yS`&7a-iV1M zU5e9v6}lMi090pk$t4%FTN3BxOs(=?!<%+XP&q%XwhC1CXVu^rDimcV3OM%;_Th6A zLFuO9GtutZKMYO!Q^?2nH>7m`aPL%_=#mD;^x@;Rnj$e$sNomH$YiuMh0=NB;F*j>P2PZa!=RzSyx z&%x>E5?uhi$gwz8j94MrTRlU-p@Ip3kd~hkUEwweI}m*C87Gq)LHYd%lC%ME$7KOI zfebvVs=+YB=z-YmxHp}n5;7H5d_PSytki`3jLeHfdj}L5wtivBD%YlA#8^)6&2ptF zGHQ$lEuh-9M72J{W#DGc1XmLVO4lYDTB@a3I1BN%g-I*0sj8F7+2>;E8DdSm)ks1e z4h%ZETm2~&U}J2M1E0jNW&#~g{>T55HhJa_o64EuJcR{cR2(9B)t%%!Mr}+_-JnK% zc)mbR^eR&GXit0h7+xm$Ym$I#QD8nL2d?W98ACrT_ZFM?RQCD}c%UaZE6AQfH2eEb z?3XkuSi0F;J(7jvY{kk`v5o?SV2bRtAgcsB|A^?Qub7)?{8kx1pr|LrYS@03(XrTX zhQa_<`cSU*Yveh-HXH-S4Cf7~yeHy6WR?uG#@lyWf{Eag<$i);XSKjIa)Rnv%S*#j z0-sQ@bG}!j9)=kuV;*tYwm@ai$_4-IZf6lT5=AX#HS)y~+!iH3*DVr3+e$G7Re(^d zh>K^8)=$0j*q>A!cot>xhAIp2A5NVk;m5a4ZVK%fCg-9mZpuUslhCdy(aNH`BkIA+e)d`WEFvehBtAH z%DYFIysR?A$^?QqvVLLxEbkgs-hGc5vh&RPVSJs5ilCnY8#sn+p@g{5_lrF6`WNF4 zIGhZJDwBnxRPvFx#thG-8a1^uYBD27ly1Oy$ey}+=ENU$6zy`$B+@N(W$H}Ag5B!q zSlb`Iad69MZa}MekHdvolOus+)JMX~bcHT0-Q`B|DO1|9l{I%-$oKdf_w0{W!@CC* z2e`(|8n5(UXlZlav1Y{yN+Os9ckv@KwMub+;~l=1uJXBn-4tXEsxHF1fix;`{s2l- z(h^ou%9}+mwjO!()AsGtWatXwlf7MUXEopTCFUO(66W)iuT78|CT>g;58s(VK;Gsj z@GCdlTigRqf=vrO`!yE61=@&HKTm=u1#1R2U@1bsz-vi&1`0RHdE$BdWC1Id@*}uZW*(vjjZUL`F|g3j;9&I|T|{rj73r3s32BZQGfojCu{mEwW1A zv|`cJMHug#0=w&VsME>`FH;l_FEVtD*#;@vvlqBual4d2qZ# zP?lm~|LmfkcDBz!SAq>sL<&R8h)Vv}mFCEhUZjO9+%aqC6Y{9c+lcTCcFj-ZLEt2* zi43JuVNBm?SUSoAwSk*!sxcp^IZvja&lavs*1J&fCS|g;3jsTD{+W4&{GDG6uAMi6 zn7lD5R5koDW;T;zHSS6nju(JM4UkIdQpG7X?1V>7pdxaMrbLrZQEEm*bGgsJDPnN z$ge4ZEl)BFLfIhiSTa7;{%`NA>P#oj|9aw{@cy_LK=KP}c;5=tJ|ZlSu>q;7Z+7}0 z#W*8NDs1i1^$=+imdoA%Fu*1Tw4*f5WMt{XZ;9Z;?>WF#Kb2{sAVwYdx8cZ4TuNdt z4c&hXm1ohVz#^*@RzdBhSpGzuN5F2fqGEr@LQ=+rch!@c9vn}tLlR3*CMNr(G1vP7 zSxyz|b23Iqds%*%*7>D@=o?xej8#)#9jl_GI#5(utW&$7d>rEJD0{<<%_=0<_g858 ztpNK`QiSyaIB4+5ZpK{tLmZdPI^7$xKkskq+W3T;JqIYov2dVm1=11Wqdu9mCNL+s z06j+#a#>!ML+m%4O(AHL`MUez=B%Aj=mW77Az1weMLa=B50rNOvcvg2TVp5G+`Pt^ za0Cnayqp1id>ETKic%o)ZfOZ~4z(6Vm8&VDXdLWMi4yN(zY<7nHgwX+MfYNU*ww-v zx~O0m8(onwCY(?WnrU@{Uzzd*`mIp261&d<6fD19Q-O^IodokUF zX9YPGR&%qpD6@(D9d>Bo!?6PV>@p&hFga%A!a3DWRQM+*Es>i2$b2BvO2tQ7DVwL4M9akzDmz9aZ7^^%(APPl-y~dic~C4vN+-##4kOD%-`2r{P33~ zbz}AyTqn4DC*3Q=P$a&WLnkO7UG-F_-gBg4Z0>6!ecldw3|$aQT?pk72XyKN2eIso zK;x1HO-!ak0>8^oCkarW_zPWXrkr9u^X`?DA55YGk55e@t+{tN8Demd z0DP*|cn4J77)_o%y`W}1D*@#wxI4 z`6gt|z!yn5cE-TOJHDZ)XQIy+F`g-}L`NsH%?YjC+|TM48Xw2E{pQ;e$@#0qG#EqD z_45%@C&puDl|bVg?8V^b<8pnmAVN~_qY`wO*X7QA%`i^ zWcMcYbbZTH6l-E{erf^eY_S9%DMi2`pAIY0v2OTJ*`4)Kfa`jZXfVP~E`H>yY{yBP zKSb~uakSZfo51H@^7OfhsqLYMXuiELfUq-(Do!hIt9S5A7w~D+*EoOLF(2Schw2A^EX?#0fAgINbQ#S>j zFO$n79-lY6SuZiB4ZIe_%xjRXd)^NSH2VD(;igo;)kt<_G4Rd|_}Ni9p9mHvLQOgc z%^#`e?L=asqNz&0#o)c<`gnHWwBH(O7rOe*&=3Z@ZxW~!pEL(r3ZJ~wkGz`@539q| zMTs1PoBSwFDz!QWL>c(LjUKUZ5KhU2o0UuK6I8mUcv5d62tA^!!Jj-XA^hg^AZ+9E zOWAR)l`Fxjbd*|L=pIsdi}v1eUxcGuCg?W4V}>yG7+udH(A^^5*&u`iVdgs}+)!&P z7Lu^p7p?+|awdiGubiWdv5eLsac1T^KUh5eT9gYEwO%bw=%DME}#3EM23Eg z9HOGt)lr(W%FcXHLol`XtCRULt#wkEQ-k^S2`OIaIH6k7Jnf#qfD~Q?F~bxBSJp?0B9V@o#@`GsCD?~9c><`D>TDBErbcka**n; zC#kQj|D}hpu_LG=R0=Yrw+!AX2(2=&@B>YZ0+Iyy`s{7oF26qO=K|f@4jlW+x18an zYy0O^_z<6gfiB$VP2*Et({uQj+hb}YX&Fl_%TgXU)WteIYIbq-I~&3Je&bY!^CWg4 zFAn0uL^E*uu)3uGf-&-&rz5jROcuh#7QEIu9`$+Xz!6@&HCngsHoNW_Dz0-KhceYa zJl7aqPVQ{2FWteZzGqD>U?-h#0D#LTcJ2i_3`Yu;@nkx-sdO5vd00``T$0@lM<5dX}Q?#XdFs>K#KL)li5|?O0>^7`-NISsuS)@_PIS{6U!qi4|^% zYK6P_uRf}v(5ukTo~L>#C;0~Fj$f~qOBV(E8)Cfl;q|wnm&$0SyJjiGf~loF@*(E| zzWbNtdOlaUos>P$t&apnZiB=t?(sIS9qtMp_gtouVvqbw;C75ikJ{B-j# ze-tX}x%;*y5^{4tbdsoeB^J;9okCZ(QE|K0BtQjwEPVB7{9*jieE-IjSXL#suAw7I zIcQJCAwp0fT-h)5Gf7pD1j;CrdeW7`Sy1^*1*heWK^feWSz_T`cW=IpnZ046)nuZ@ z?V-*>ZwYk)_g270PZF2!`wZ9+3j)HVdEnmnY8k@ce?>40F-#yl=DnftdJL`Z@@CDLqgD`T?ZP zXB=JERC!Gzl{`U5oo8m;iltHIkSf>u9_4(zBtBF=FT_Aqwembmv?fZoUKB{$`WC)H zJz9`9rW&XSoVug%mt{8De8c*~GYE4~TL+9F&9~fs)X=!lOr@J4C{z5)#BnB8D z7LrD*D;FWV>+Y6(0155e-eNXC=*2W++wYFz2;Dz3q(6TCfw1f98$z4|4pJN5(q7SO zC&F`6g{13j_Oshs)pYjm)5RA>CE-|w@XBwf8Vur07!+x|v9joG5YRWgG#xy2k8C^0 z|13S^I!ig`n=zAFh5O5&bNk!3@)-&`!_>12&l8cu@1<{=RLc}Jg=G-WR&kud=Pf;J z{zg6@5)dz(4m?=!`?v=3@7fjYRdK`kJf(a01PpzCJWGE}Oh^;x9@Gl(L_B%f=TBhP z&s%SLT=01iTThb|hdzs<-x1mw$A^H=V^`X4=$G%8Z%pS;SDqm*4VP2K&-rbSgf?w< zA(4W5dB+_qPfs5N?>CiA=mdql&sY{jg6{Tsyl>8sUmin?a|(xF&fC0GCM5FY=xnB3=n`wk>S*I`7{V76MZr#3%K~ocYj;g{J+G2iQ&;MlB8*AaZ zZHf!|(e?~UkG`zCJG;@_GF84M!M z+P6Dj#-kLAE~Ul8Hz|ZA3EDB(u}z(T2#E^~-d_2%b)K6?PC1K?DkPPv&+b*bZEsQp zX`Mdzk+(gj_;f_P(evImGcgaUxWJ6`f4-)hs8RMDJ2+pmNvHh0dh$GUatGAkB&DWq z0R_SB%BLCQ@q~uZQ1Xaus!!sXB*-^r!(CY@45nu z>64qnX^Tq)v7%wxz*MHe@{BN%gRjQgM19iqdKjvVgAQTZ%l*3$v4im*6yL7< zdm_n*)}H+n!Hk-U`jdr*avtGYtItrB-7wP!7=*B_B6)jgnL_?7(uD9ZCds%uK5vZ; z9K6D7ri|AOq)L(F2imz|pGf#ph&3G8H(59B{0GcUjR7>3zp?-UM6abzlMG3aN;5CL zzE@9gjRkBA)0AOQVrm){#9;O$8}+ZO0y{_)2hQ<9thRP~PV3<7>E2EIG@L(_qF^qb5=jx~Y_gML#p6hOQefB8G71)^dSgRV9Cx<@xZG(ZQg%{8yX6#e z3$u0G;h2F8)^W~3x`kf~Zz(k;@ThNIy)so52BgsuC=PItwk?UyzoNv zrTQF+LQWF4cuh#fgReflR#)W+51sOv9+c{y9Ab$5fhR>*ESI(C@mGFDGhGTFrg7jR z4z2@&pKn)?z^K6j(^L_a4DOP*Fy@Z~RS_Q49|S{hW^R(wQs2ut+>X(JfrO(k+l$vy*>lP6%U&x!;%NPdX&aeov539`>Vs~}^($u?~ zeiKJW3B9QoQ^WN4ot@ir4}Jj`LkT8P8il0`61?tVp{8ZqVBEXg;hmx8o2FNGJBP!9hDiDS-0Vyf=+FTztrjOoQK{?LQ<%PA;G*{)a$ zOq$a~C$+YJJ``VmAQjrVePnpKfOrq?#pK_%t=u7~I3+g(#CRTDnaQXAUOS(Ho35ST z#DU}UdA?YgSkeG^8hp}ETG%kU+#HdoBtlD>%UK+9odz5KZGxgj~Q-~)~{q_%61>N?inIFfOTRMTIcUR>jHyn``( zUPwrvyO??0H@Sg&wG-R!cKid~67x`z=(i?;WCH}BR@I3oi6>@TBb|kLn83(`X9K7? zvzAwHTKRp_*h52`FGb@V=xwd`khuc+mA?po5cc+zM zXzrG(7CV6J&m&I|SW=2RwLMVv^(sxDkxJ(86%un{|M}^@v-@NOXlvM}t-G^X%;N$N z7w@J6u%K9_2Q^Q5L^~VM%KP5+^L@O}M=QT*QRtBhAtPgZ*R%6`b~(H~+CJxov4Jx0 z;^WzC=V6jBaBa<3CvA%uvtYCSQq{E=L!uU(xEfE_30*f3gnCOk6-gck^dCQHYHfB} zI%Q&Sa!?f1Zl666X4*^ZjMm__{3Ultxm9-hBG>}OuW&Ipr{K1Cr+yon{_GDXU~}O& z0T?i9YS0>w{6`1R98o~GefoXBy2MMm9W|KaWcZ~q_ z2uxTQqP-)b4gXgQAlO#n@8KBV^G$CR17E(XVXF7q^9x=It7RY4^d)QbASe^1(J8F8 zr9%Q1g__gmWiI^;LRvcU(W?3Yb5k73s5(;BBAO0g^*c=+p%IJ2ChW@7hR{y;BZu+@ z32EBF*>vRd50N~Pse;K&d@*Z=Ebb3sFy6QKH%X~wSXU8tyR!^K#1#$A1BDw7&5uv& zg{iLJx5*<5HE*|U>VN`!Y-*y%;1D+{=d6Jzr7-r+DBM!j)c*(;)wSs?+SR zp(k-UkAm;#qP2zu{q02WBrTME_EoNLKcUN6Lzn#b58oD4Ys?+~nK*V>H%$%2SJ%|n z&tLwXi@#$;*EL|J=Xu7{`l9RlqMw#2v}?P5%liCCElBF^8CzP)Sd`X>v0{%X7W8sm z$5(P}xp9wMo%?emN^z(nrSaXM)M(f4@QGKt)eWZ4tsgQ9`{`8MCHJSXt1M5F6KAHq z)*0wVY+8SsZa=5vL8^mPUxEb6F$11SP-G}EtG0#3VKrY#Uoty0C{xRC%gXiTVhFX% z_it)mDtEVYs=U$JTyAV!9OwLiom%ZZs%rR3dRt%_sMm_g*32rr)cfz=gfcgBnGUB; zbEWJz%<%z>!)~tcMO8fhHzVSxjVUUPT%QkU1$4hJZpVBU1GNmy52A+`GNvU9b#~gN zXXkshHqRQF^Y$!j80YPQ&3a4_m~^!^9wmH#7Q-sH- zlQh&~?uu$+@F>^v%=pt+P9!_OG741opsq zIL?Y@k)e{Zi~XCp;6z?KDC8sLnq6(}(i;$BvZz zBy(PWRvpbCg%RflTVq^9vl1D|-E9?8>qVbr`LFobm0)4i*Di)|QA567sa z$BnFTr#;Yr!dzT@NwRv|bGrP^%2NBH6J?_Lbe391NX_ZDbB zQ1&2IZ}j71g%-E_@2MK!R3^uF5>qcXLK-b6PQK{oObUp0F5V9vk|k(3w`dIc62A%O z726>zPf*zSx(Sdn&)#q9bpusdC|AArcpAyx?msEf35{^$xgH#a9)Hx-Sp2nuEpfWv z?A_UL08o*p^VaFPX3D_PiP-oG8L?j-iihQe$Y#*>t@5iM#IhLjw>w^LniTqD$X(GD zcd;Y|dnr9V*NEmVm0Wa~N=n!f8O;ySwa-v@M#}#*Opph^FJajlViwxjpC?+9CpE4s zkblsbpI;SvT596Xxy>%j5t~rXnd3-B_dM;``Q27Ic&g=l)5B1s&#`w611}O>=|!Zh zeCZ(;tuv;(vWeez_r?%)sUs>=%1f=!jUtmWe26$)iN9awo}SFQ>QrVx+kseX9N$`sy<(;$6&dx4^(*&u_3 zQSd-QB~56;M5?E?wRE9A77s8Q0OePWU_1MlofXed$$9^(Io5%$J)mSJHx6z8D(n1a za1fa=@Uw-s#yn8i!y-GkIJ>q1A(EBjwAC5z-A3*LM{2cn&M~K;BCxht2dkmSFKjMV zCDhkWeDh)_I}EVQCsj^QBEJCVFZ7PFu5F_SS#V}~_p>wzD`;L8GxY(OUWHmE)_~h@ z*I@ctDODkC#x}G)0fGFfoz9tACJR-LS1&tHe{qj_wiV766ekIMyidR01d0^CgI^%Fa3B^ubwejvf2K6uB@Cw&u zJB<r(plMe*`MZ2xK-tvsf3C;p^~z_1shOn?`udyuuFk+w4%|2dFqIK=CU zKWMCrpiQG`>A0Z7G-BW)%XF?@=ZAoMYr9Fn)U->KzJ*k4jNPMn<~@e4 z7@HB>dGUA_Ws9C8EsKZ#r>66a-l)zswA}h|bfkE&6&5@ zUt8?QGv<+M#S(lk!HDicj$R=aA6g@;<41%`1fDTx;VcUkb4~znvIZOMq&z;`nb+Bn zoAtpW+L)#;@Mvl-f^3?zTEC;-w#EbQvj|(YFJ1hRur*>MQfn>Gfef^lgtANL}%Yu7Km4hZRcSwPs@K z`*7UiBSw|t5j7)2bN2dLFyFY2?i@ueJ0gOsvLKy90TtIS(ZX0%vs#zg@EX^*dPh#O zxjBk{;Re-4aEN^|0mBd2SY>ebM7Cn#nmcYa+u`Bim%^!23n!Mq;c$wZz6-k9#@k0o zWf*^ijjI@)@}*K&y9Yh|P|j{a5El|yC}Yfgj1)aFRp1k*I881hJPfF>(}*YBJ+A0v z{K)xd*ZOUrba1ZM{uJDg0*qsH@1EQhKXRNUp@dcd`w%(T3f?T@j~5$Ar%e=;Yt+INmkd$q%3nFDwB4j3K5`zDZPw~b zq)6hH4}mb|qMCse&vbvt2LYIGIO2R0i3X!x&ZwH^1$EoA$Nrz5VCz`@xK`)To#Qi9 zuPpOiML%)x?8CdP?&peWveY0dUHY)z`d!eZ=DffX0DvmmeO=DCm5+=&KE%Kmo zW0~^{LrVF~K~JcS;~V;>wuBi%^dQqx8}7Le(xRX~mEtM8Q)O$6kQnvkybWx1x365i zt8OGfZ#X5AbaWUD`HYh!DOnF)&_K*rfkM5OBX1GCD*d%M7|cMf$6JvU2sk`L>G zR{K}?yY}dGeYIBnkgm#*2b!iLV#5ln2lrHJ2Z6vb-|UX_cPi)&gmB4u^}2Jq0wi!> z)ASw76{0ae(^u*kYMOicL~MlBu@hWF6{uRw;^mmh6QG|p5AG)7m%~9W05wD^6FSC= z*xlWyF!XD}*Tr<48)2f0S7`k!$E1|*zwq=#9onfKD+q5(%aN9_#_1)f4%8~;vR>vR zge5i%-XMU~*n%Dcz3f3j456V+Gx5C+0_)u33-^I!LUN%{W0jm`hS|RlZqh&KliKNC ziWZs4q=`^Vjg={suKfzojRs4}O%+NWfKq|00<;-#`=>xPi{!XC+`Lk}){_j`Kb_z5 z;=kCr!s9D5Y()pLGI|7m+Y>?&7RXJWvljK96Jw^3 z4OC))1!u|+0TO-QJ(&v&RC0!%Z6Skd{A{JwH zQ=8H;(@9fqLZ^?0SL669x(S4k4x8!V4U(l{rdC~8ROv*6x#M~)j@YTpAxIerxFEX) znrT*RA?aH)D4yLC)3`6aL#0)18<4M%79a*N$v7b&4qcMY@@y^0aS?c1NEB+ecj2rU z%0=<~Sb3abDjiW;V%TSs#}bo7kxq==QnhAj%NnWguk}mo~uR7 z@k-9lnb=t;cO#$j54+ohhAgcW=yp}}7sVxd+xQZ0yVg?3iJ9=Dd>i>jP-o^+ru2uA zXo8cM_%kTg>{nwT%{;|t+zD&AmGbcuD+7Asl~T-ID4~ci@QVyNnfp2BQt?ha^S>!} zFL%Y?LKr|j)na)EOiMLc1g4rujr=Q{o7vt}9t{5Vq<+3Kw3Q41?3niUz31haVV zUn&XbK~s}O!thgBB>qz3x{J&8&Gk*|%SXuBcHLdeA|z-`FLK3O_vHQ=)UsFpvdt5u z!$)Z*oJ>4QTl+3LpLS3~*q3Jt%Gp|jspN_aR1EbtWH-;_NcZJdk!SEz?2|+8;Jv=vT`53=gR$3z#f=~6 zxEy@{Depa*FN5S7cngZWVVr=IOqEDHB86I`mr7Z@W?QFc(>%q#RYto-kv@!MKNeDt z%%RJz$1D-6dY2foVe}=t52e>Xdm5?E`RR8YRPp0oCVYd8WS_ZXtQ@KWZM$Sr*m+By z>>nSHa{Dfi+Oz2lXQI*i3xe$@KSDgn8m%gblw&Z*)RRn<5QBw46@g+L6h@@v4IgVI z6!Mvsha@V3B)bc$I`l4KK$Mm9s_`qU>k@82!-3^NBlxrV56xuTHnJI@}{m)F#pJ?(^T@ z1*_uXS*;|vqLW1g;5NZMC7>klL*Sp#)P^AKWr?I6hl^@FsW+EP1MQ1m3>F5L(2C3J zdiEvPch@(~FD~=f!^|f^S2fi$8+H0K^j=T*FAHsV*;&{g$r1UIrDJuAd{dGQx=uF- zDRL*bJA7>~oV0;_aIP+mEnFF;dUSJ+JgO zCnmeM<7qj_3f&0#(D~;G09i6GVhP0L5Dq@->S<`y14nEu_2aV(Q|6)fR2N&S9KpTI?je9{iu!IrIPaiD9)xOfG}~xr4{>X7^cDt!*}pkI@=03 zx&#V)eT}W5f=up2hx{f&pA7fohpiQNZI@_b&f}TO@H!hPhaE`5Qf+ySS0DB$Nt-X} z?HRko(gR}DpkfoM{-IuvzR>u8D>RKUT)JCZ8E)a9?6djkHj)-WN=3Z0ZK4@?&^TKw zpl9h=eysg2gH2?vvP2u6uPzx6Ta=$WhMIF>*+Oq>*}5%XoBj*va3@soG_o8aX~y|< z!Fx7xMbE}-G<1*jdZVsx+MFohd7kd*K=~5kV)dql*z+#@Tx|t!`sG~V#=$`}*yBs9 z!rHdYm4^V*@ewh%c_gWQQyA3J6k;z-P2EQRwd>!Z#{2%Kmb)vh?Lh6Or5>a~*8E($oP&`_(Xbe_klAJnISUKKYC;tP~@( zykNLLcwA-NygXyX_K${PiXxJee7-3~kHTD6bSYn1zus$_Y{4^J(0&_@gt4!E>$m)Z z(DKw0J+rdR&(wF4^6M=bd3V2_kmrr9$AzyA#Cy@ZoaFLZXm{ZxuKAf{_L?+g!^Ofy zCLQxp6kXK)*XfSo~_Wif^k56tFCo56Ov)*?PAMbctpY#s5&Q7j&hTB#`5pExk z+#WD)ZwC${C0}m69I`=V0_IuNJ>CAU_DlO+r+R`?>6=FeD~9{c+6a6~=->dR5`i_s~)QDaS<-LF(KG_%7nvW+DOf;4k6- z7WM{BoH&9H4g2-$qM&LvyreMcoK;O9TB=B=V zgMXt+{fPgc3I5GLK>oiut@04RQT2J8kHN8<$0kR5Cy%`VNxs)V4H8YN=1*$&RChu~ z+aN1IwBmr5D+EcT+>Em%mqI8N~k^_mBE-S0Zzp z3jRq6tm*%TJ{0~p!YcBH>~%@}b{sg;qAoHxSpVex{Xcorxc`3|QbPErk*`1gw_pb8 zcmMt&7|Hoe48~>5TJPWTz+X8EC}t#~<9~ktts|1h0q@5}8xL)0y$_#mf+zFP@B5!V zK1i6^8-sB)eC7NpKBz~Tr^uQe^7pcmbMeUF{uwF2%<9}M3eI|6COOGl_h9nhKVj zANJ$_7;#VYclRY0np4J~DX%@YaYM`PRRh66nyk4_PnC*9t#}KY8@PrncV0>2Soqun*ohtl2a)lHBTGgi+KG)CV2j=QMI1_*q624gIou%jYD7S?UPmzuDjd&Avw@IP(D)J|T#?9+ljM+A z3+&0Lp!H8dZ^5_obQR;9bS~M{2heeCi8}7z|H<*ozKM`Q&RcB!;`YAikx#typS^S& zN+uCYe21Q7>lsbcOEWr1^7OKa@y{~) zzBiKK(dPCJK;~%H`ruh)V(9%~MgIwaBjMkp6xHaJqSF&IQdrfhzx{_ls9 zL)^ElAA8wMVqtP>;7eHsiC#)~;Y=pcrrrkp+h?94S^L&BM1f~7jyFbBlD>o1rw!fz z3FE&g=*&u!JIYdqD3FB0p#_&0s&@82ZzDO%sQx1yEAyh+G?bMP3fH1TR`l(o)MwOx zHo#jAJz3CNHEuLWF|$>ohEBjHoUMpFNnB7ChAym?*zyuiQ7mT89r!cAy0JeR zefj?N;gMYYNZS7E|NM>p)lBLC{NVrV7#ZR|FWZR!pSPie`e#Yl-}GTJ*yeWSr6pY) z9u{=*fa$t7sHL&OSU*;m_)?(vUp&!|vGaT|Iaz2~cI?}N0WONUIK7Ek#0T$;Gy|va z10Rw+SDThzosKK$h>OfNUngNFVD0PS0=Xj^V=bW2F1B#;| za{$JRy7uX6iPkUwDGUnOi(qQaIqU;)k{RtrkPT7)QBNzpa7=jbpj6qT+eeYnBa(V0 z0nP2W8EHBjz>vMh zj0XL5NWSDw>JD$n=>fr*>gjGf+431f76N`8h1bWKbY9q8Nds#wZ_rPPP;z%gp^O)}YOS!v z$6RSW-R1~@F4zr(Z()SxP!n1)#)Kl6tBuF5yA~`2hX=sP2slQBobzj=%LCa20A8xr zY9*l~z@CaG!f>6t*GU%`f&v5W|KtEivM)`D)C3ODc-Fi4^h_A8lo2LD7|u20*GfEi z5cVeP3^A$|18KEIFH)^IV1pYqNDKg_zu*VjY_%-l{W@G*ZP?gb9&cD6%E-X1ks%K) z`^6J`KsRY(QW7Bq8BT-+-H|SC&^39)4pcqO9U+#SciYYy5KfXZ`t%$&cbr$-&dvobX=-X_PV5={z zHz(4caSTz@cD$^lTdWo+rR{}W)L*TN0(1!_R-^S{h^_T@9p#mlY2wJ)4L~7$g;q;S zN`emIUu84S`(5;T;&QA2raFZt1R#J0xSsa+=>TNLmv+9BX0fWdO^=m_<)=m5S68w~ z4d@QQ6n%W;2W0hpJnJhdD~qN?5(0R3dU@K?cGkGjZM~2l4O!oC5TKfJ5HT<^o{jLG zoC3I4_P3|tW$y?Q>T;=;A{zq@w-3+Y|@_H`;pa`1MG9 zng-+kIe!j+Ft?ub%E`^1a}z+ltW}B!sLQ(UbK1^EXV{jbMy?VewfIS07W$|lr&x-t zUZd*8#G0*CsoDmB@|HDbdJ51Q)jiI<-0RORFK@5BJorEW+#Y~;OU3nZ{IX%#SN&c4Z75{Qd`V3RvdcR+f z`Bk%kRZjT_*=)j5!dd@j#^Cqr&cwqVRXwJ;+Tq1T&?}44!omVjA`KAQ-vT(gLgy#X zOKpbc=H|a)RnfhA>|~Sk{yY2KtZsk*S&0jHjE|1i+%(4Iy(suhr?0yVK-Ai9|0VRk z%qBg1ynw8*_-56Rlq1r=9PN0=qEjN>Z<`el!04&{u&&W+1}JI(W1pU$1{&dC^IVpT z;;oj2nXyDd(y!~gH5q)H&JXDmqFzvV=U6075D0h~s|6sx_{uz_=eC8b=f3v=Fr*m? zcPfN0=;kZvCHS+$FRSiQ93XU{0~a^vt6LnMTHJ`)qUJS6RlFI5HoO1lKH2!;Hyb5l+-X;8{Ha7VvhBHcr0Qf)yVT zgtz!NHgRT*Iwv-x>j3!}S;slvee?f!)J$n`tIpQ}tHKi_=pv5Ycm;Nm%g~ybm;fwl zi&({frRi=qw$l-6Y#vCU;xLTPp}MZPZh(L_@o%&sv1m#{1vfc)kGP8%&3GW%4knNR zu4RC)#Tb-Fj)CsktezDiMh}7ldL00r)qhaayvbh-VnZ`&v-dsbu&q1+-WiI1(1=G@j%EQ3hjKu_dgUyUqe=%F;^u!@qw~f#|Kr0?+G%hNL!91W>XVYXTlSR>>dix=KrBJfU35S)&!sFtmH+ zPLo?Oa{yFKjokgQ^3Y*s8LEUydHR!y=pFX`$^G_~D`a&-L1+tb1)mfFlqph-?@RJ^ z3rqO|z=_t}nRwfKl*hNp>LtU0#<^+%(QQs|*LjdRx9+08ymRT`Y++bWzYXE+-n?$% z!8`pXi~lCUk92GB1W22f={9j$hXPMGKsE*Sv3l@}R+p}z(8t)VIS7K{v1`1sW0USk zn!peMOWJvT%~f`wRI29E(t^1@P_11vvm{T}G{wrZi#=;iU9c2*cGKw7l-llsV(YAJ z{7}DRaE!MKn2P5p^r$uD#gB_;$~cUW`3F#q2RNzLhozHsHxk>>+_RO{S&+uN4Er5@ zk0VY1W04EpHH!v7IepuA_Ri)dqiqd{2K=T8IljGFl84#~+BiDAf~{S+c6oT5XB6hy zeH*_d=;MMSJVZI)H)UO(-r^2S*u{h@rZe-d{E^Aw`(S<6Urjo>)^s42+8DIaR1W>6 zX(?~Y92^Glt^iP~y-4!$#^Da0){@b`12F5V7LZmm6fix|d`YTXj#s*#Z?E?=^o1~Z zq1r=j-dzw~L%f2|@;faWe0L0`6pA{D0a6~=bA*>oT>&@p!e z`)8&tl+R<8nhfa?N}S$!de&O6o!!!Xv3LYDeJ^stNf4#L{gRxueT zK+I?$1AzcvqmsdbAFX!bC;(F-uZ7C&nCr(`4zmvRZ+=n-pUC_y=c)aTCHs zIlY&R{KUZ+$6O`y2txonkH>Dk8|^44<91z(q!@Su7=$%2w-8Klyd%vXnDc8AU?si8 znHq*13=axlU+zuZwhFcC;fQa#38DwaCnNxG$PK6q`S+lhbAHm5o#6-Dk7!~T?r%Hv z>hxPB2L&^)+`T~6LI97Ttb)Rc*^Bk-O`-e!hBIlFv0sl&uDuu#;}fg-E5;vel`uFK zW6x)to}JR9m9VltD(^_GQ}yY{Dx zTry%F;F~)-@zC9Jc7U>XU;&PiujkUYzz;wy@zBP1uI?=)OUFRBYD$lkbLw4co5L~Q zXNhBNRkc6P{|{ep0abMt^?`z64KovNF!X3 zQo1i84bt$=b!NWrt@XY2)|#0$z>V`iXP=$Fy?-R`Q3_7+ui|sp?BzH<{884Jz2VKK z{u#hS)dR)^#uARiX6qbJ~n0YToMQ z1mr{WBOk&k;pT5OG|b`$On6G#4e1=8@-i^&wUHCU{X5q0_=kvKy{p$neePv&xDI{k z>~dl>cfOTe0wbB}rdtcpTLj`kw3xA-coXb@`6O*^qvPWVYNtM1=?D#aWjEx%Ibo_3 zqqL#XCt^?-SH-j{lMh^@fB7*C(-~TofyV#SZgnJH*g}yzCOVp1M5Jx^*quY)XOF5W zV#27{u?71?1Ae9>V{A)Qx%W&=tYb@gEQVuVg^1_bvtFQ8r`nk6<$~>qgo5G6iLVTO zDOg5Imgxf|@ZT4JVQ!%sB|TkTUG)@i=ArpHZl$vZ*G2dJH_W+@tkMnMP<)q)LLYb9 zbIWU)sGof-$lN_IC7BHe4)Z)a*-NDRL6xSBKh!ID3W%tJu^V-BL?d}{bveFf+$S@| zaiU5ruwrqW!|+ZqGsEh>`R$bezi5`UV|u9XHS}mP=llRt0SViAgiJ9fc6O zNJ8x!DlV^PcTKLCJH*o3-*r3bVfA(Pc{q%`MD+O@4$@|-!we`LKn z@a-rqi(G9a!dD?m?x~bbNWyL}p=r(rdE%qiCftn96X*^OW$VKVjgs|S`?G6(`H)_z zAuvE^dM6osxsC|SVLIGO_};sxi|K4lL=MrkO+|AW{{Bo@^TYSG&#r*ZDDLnViMvZQ zs$@{H(QlUtrfsx;aF0F!RpKX)UYXW}j;^!@I(E*y`k7lxTD^`q2?+_X@MNaI!UKjz zf-vF)#=J@Enjf~jLcCp@o6HhRW%BX*L-!i>=b9YjX-Mata16|Zoi+f^baDNoaw+lV z4&C$u;OCK$lFB=6%nVg@YY-&uOrillo=9r__M6viaObq+7#-8ZJpPgmK?EhV3!@{o zKvU@URB>?cb{)2ld>JLy!HYh6b2Iasth_9&WOg@Y-no50Ri(qnDV&0ITQ3eVvK_vVM^e0KYjY`!&3{uj%#ja7Rr5aeuyo$x)SPnJA1dcZ;JD- zna9f96Fz@-F&5|l{q7*{mf%GU!A!}pwli#bpwtqqK&crOa$yR2(U7R-D9`5tO^Ru&jC3q5NF_O zgoVo>cuxlrEqn;x(-naYcR#p02<{Mrb0H_AFV;L2K|BwJOtIU5NmPR!A7&kF?6!DT ztt0ikCL&W53v0~M%}fsujfnc%m@sVA=LB85W~I0=#`S|2XQLo6ataC);3zXkd8{XE z3iw{~Whr9V5WCNNa)EiztL&U3h;h=KdICx<^X9fbA>6cN;A81{q)&mWHM-cz|q? zmL?CUz^@e#&*_+J%E=x@orxEY8v_p9#c2?Jsg!A`$W_hQkCRb+njU&}b?4B<{npjB z?z}_uf&AgT*i*{b(#HK<2sl#sn3QS-3tGYNfcHEB62_w>5bSIg>Rc7($p#;!QIoIi zm|YyP$IbV@RT8O|N4SDj`~QL6lJ}B<`KX8y!ul(M0XlF zD^~mBj&Jt;KLUHm{rq{~#W5VDMg^Ho`3@q|$$;e8jsf%n`zZ%;ljc-%_F0j6M9OjmfL+P4VAPg(N)B|^G1 zyt6@gtAGS>z-4Hs!xJOXhT3oKm`dyxIWO-Um7ufm`~s^4evX=ANisJ-|3H5~=A?B$ zxB&7)*b_VamB`t9P`nZ=zHLwnq;dy63t+OoGw7_>DRblbtw+9nN--16sQ4i>t@8|8 zyZz(GL(go$jW?=8YU1A5ekx&48T=?ha;vi_?w%dLpv@SqY#?B(7H4tOvx{bH-gRq1 z5J>^)1cT!H4p;jS3@U&O3t&Mr9NGu2d*m|(y`u=36uBGRX#i0kn5GT|e4`w2E`zms z_qbH-pFms4a&eBoR#_s2dNfZ3iIOEdopK5Ll6~3XmLE_0@`a`SAe8Ii>~>+1O@>*$ z#1)K*7jXMcCU(7y2ONy+jprT4fYK8@6v(|GC=Ng@%!;75h|G;Z5Dx%aOknFzy^`67 z28*Ipi=*FOv>Qqj%)#c`*F4+H=x3FnpFVx!de=75bY?{n6)e+(Ft z50~IHh}r1!shkI(>CENN91DV#arxWT)~Q$K^)80b`Eoe$U=XvTISqthp~u*-74|k_ z^Ui=D?g3iP1TJRrtQuy2&kOe<7^VQr#xUYvxTrgg1is_tcLzamyTHg^8UPmsA@#Uz zJgK-(iiC}g4Ospucq4PjRn8({ z4*_3BjVF3e3z)ap0AVl7;?17Bp!){9@!Ghaj=70-7=q{Z8ZLJCR52S8^T(HjH1$`5 z16T#V6v6O1F=UY>G&|eG)04bImE(;|wbMqj0`f%JwCV*;F>!Xz1Y}X{ zf=o)8%it`I)(Ar-R>4&8{v8J@Q)A;murkVgA{w6qWQW#6boY7nmtrt*&s<<4eSodO z0+tC6rMZcgPu&0`@DPLRfiMMu33^AllF45RV*0lB3_nUz9U?yjHu4_adzHj$@$Ac_ zb*6}S3Q!CP=F7dtRovTg|4XGz0jD4YCmTp_@c=1%?te!a5)V@{IOmaL0hGS6s!vBAK<#pn_f5?Ua>MwRXI)N|=To zcC2M!umPs`^CKRiOalt;A?SDCKLB)7gnc|!414jb*GW43?eTq)7tEF^2H7+mt9;vIDb|WhgYUnWXQ49tYN;bTzx>~Yu zd>O$HF4jeCVh4=Qg)2mwFOfM4jOxOfoUz~R89lAyH4aHR zC&)+wVk5wo?cfNQY@RSNMXsg+fTk1pLG=3I1z2wP8zm8`6sFe85={ZmZ5&T~Ftq%7 zZ~vAvaeTbnX%M7E0Yev{pdTy3TgDjGv3hu!4oI;d!owyf)qNJhZ2z33++To@hy|M0 z;NmlD)&kqtnXO?r1#${G_=jS8rWGJe2To`f)pqN0jK zQYd{5hXPr_mwk{XUFFuj4JA%+MySYxE5AA?`hg#XaIUQCbgqy6Z(#@uWbm1w%?Uvq zfFQ#LM<$yPlE04DJkJRxxq}&C8?^cRCco?HwFHJmJJ}(`aHek^yjyB=`bJ(2f%lP=m4s3pe2BL1CIb) z;P1o3JVHWIU}m~k8}Dv1b*B}aN$sqi+x`N=;RR;*8mJqwYVR|>tpMMHCFFo3_;efk zrYS9A>jNc`nkcB?;u&V-piTk!R&Ec)ZV|ctAK-NTDIcHOl*&BN@`%l!*m>ahXZ+(a z*KN<;$o|d3K98{Q(9s~hL;J;(7PsM(mUeoOyOXZ@)qUpcX9un+M)@G1buCgOFYb zY!!TdrjRQZ?D%|Uy1f@0usn9$G~A_p*}6{xhkGt{h9ekQ1pK$?{jdA{zaMOZC&u}X|Z#Ql3G)MK*trv(IxJ)PwwmMtt4q}qYG3tuc_7Us%49G|2< zwYp|hH7fr)OZE-V|NI3aArGo?B_$=-3;Vt?GSr?S9k)9j8-_O}{yh^DM1WNlB;pZ$ zEZ@FamVL;|GBY<1qq$zfuq-2g^vKLCzmld%1FBdFtUEy%9guEr9Iy(+wFXpc35@yE z(NCYWrf6Gm#<=DmFR3Q)=?O_BGs)Ox*B04#co%{o`6Ey^*WQs(Et-L`_^@GZ3b|V*!n%+k}3jtH-PQB-Hf}9*uUwC z17Xn}iYX2tz!6r096qK7Tb{d9wV$tE=}Ay~ywUWd^4CrvCP;+Xv!ctWHkNpk4mVMZ zU|?dwz^uu?RC|<^AU4@E0^STa4mtP%L30L_3veZ$^72YjFnP3_xaJS+y3c`)#o0AT z1x6|Sa6mSvh^=_i8bldK2*&%CeZi=ybP#m4pO!iBJmUuhZh);xv;7Ff!AR-;5J zZ|vtE^;#Dlw>*g>2$z0@{%0F*EZ(1T)KX*3ztm~MX)zBVaey}B_;(HLsGCqJ>0US4 zx9{IM5xicYHU-qWjJB{zwDEMgK3~Q#Z|(tj9gz4BX=yn+WxUUy%am!boSkhIe&l3; zAR+Fg91DW-2yFMfeS=;SMtGM&%&=bnb6kdbTaEb~f?V(HPI$|dae*8Q5G5cebADI5 zz*+*!0$5={Q4L&NY9vJZ5!|Us>*QbzJk>8D>!va?GQeBq0xk`RE)h-)$VnaCykES? zS~NECDTaJ>Ur>J;ic9sgFP=drVzsgKfe>&ITHIiutOlGMpVJaUv$q~mlatS66S#pR zX4kOWb9TeqMJlamZ_60~>d((jhv)T#F1-*6GbH2QbK(Ac3_U)}(aCdb0kO2@Wn*yb z=j~I$RWi4*kjGd6SvWug3p5iD$7Uj&H-w4ryzTlQ80Sl;kngo$0cJL#Q|Vv<#i7{G z;Dr9{w#6*RQ?SVo;o#vR$c^I3boUx`zk@XIP<8b)bK%Co%4~S@(*ZD~oP`1%7Dq_~ z`dL7532K^laSxFPdk(P;&+jQmC?Yr?2j!qZp8y8}LBKU>T{jm8hDh^-nb$?H7gPYY@}kZvolmDF8rKYMRV zWsH9fBr|F^rO5<7i8UR`)TWnLl{6f;Zy3;$4;PTJoW9)qVVo6Pp`?g*)u4&U`zlmbOTSp`=_XLEl~935MHhX5vb@XM0n_Sx^gzo&mk+ zk*!G*S7*xPIoY?S**#z6pdn5!6qrF!(@Z6j8=8%23BCwEh zzvvufK^@0eA?AAXQCGBX*rOWK?&Ui@`AtGuirO-3ehnHW$%*r2bvEPkyE>?>4N+e6 zg+gjfuurLs>)*f7Virk@YOB5s0p|RRdY4J(w&B)>rvYx*JNnH;=Fzh0ot+IMfAgLAaV*k${8_RF~R1 zaCKXYw;6DSrl>{%;m*N-??jc_v%BXpf2J3{F!_^RfuA`*LqlV5A30UZM=#`yPFYG{ za)Fih`?h2x=Uha-^XhlEOq)TWPE3(n7yUfZrCN#9JFeK(qr1=+d@>rEJ{_s_MHj8| z|F8fX(J=}{SGLpE@Mnryak)h_{H)u>0A$b=ioKJoA?5qah;=jtR+uE|J<@0Gg1qM0 z**xt&_K`WNJmXEnU+qq@BEU&{#*H&AB~mZP6Jo5z$q9m5%`DF3<&Ze}lExDq5YL)f zeX!;L$h{S!e28t~i;C2Q4Z&>EB$Y6BR`ER~%z zST-ESWGMukXUCnnde6Vic@o$?N88vg4p5C~+1oLUI1qLR&*f*--vb z0wK5JlCZ<0)E~c3qa-gS0(GYrPo&<~=>S3Fg+N|slRj+$nY5^)RqF;ws(px*3bXxC zksg4Z;M{cS@j{2HIIL7#pJ#2oC1{#mvim%D*TE(gP|a&X)ORS!)ns z=wDZ29bAx6o3H&-3#_)#ChZ#<^aK1KBfLS!H;%J*4aq8*jIx7CKp&fhELnrXPj6q} zP*OA$r;#G0Q^VZi>$L4N;7@UE3$*%ezrgtHsnIBb_W&gdq(!c|-&&hQv&+jSQmYW< zsJ!(w?y@K~v9v5|jlvBI0P#aK&$?vOBR#p%{B4j+8;po1WZXN~8~Y+$Z<8hC#-BNm z=bhE*l>!3rmBylRa4kzOoUmJ=?;3?THPwD^d+Sw|LoJ)0-F8~agG^@L6L3YXNS4yg z1MS!!E;7gJ$3#;m>^Q=9d@_M?8oZ=(&#o~0x%=~{mglv-fqt0=8=77I!xVkry=xK% zeMz8oJaNOrW#oDIg@tt~R5VJ|kG>~l)OIYYh*@hz^mw%`CO{glQSrv}M!3sjJy{WWGd29s$z7=ItgH1AOHj-+~yOtFh**n=-^Tb;Ak9 z9$HGSq$E7hUhiM_-8;T`I$(5Sda#3_JbZ5AZjU+p=#N)EW&)w$-bEahV0GE_MNx(S zO;bI~?`hv8`HnEF1F;YJ_##c5_Bv&eH0MP%t7xFg71v{-evR4n=RCSUqP=~l@p=Bu zO4ugMJdPMu0w3gtw2R`hbBTfB0)@LSg@H*`2Six~{H1Xn|9^iQRU!q>o)$C6afl8P ztbq^K#r>OH!ngMIzse_0QsiYh@Sjz~~~&wKuO1?BHU2XO}= z4gh?wy&yus!CxKUnM7$8^Z{Q3zFC)R`06F0jBuWvle1uLfj!po0 zY{5(Buq=`CE2y9ReF}-60|311#j(f0|Iae#oFo2wzD~2&|9J}M2cqKkVCv7`uN&?$ zmwZM4@9UFnr9R*%nU zv#Fy0?$^&MEm{?7tb>5B-Im0`s%sQqm*70lhQ6pXXz>2c*<%J(esi+ZBRS|FWtGr| zs=sIBmLs$dtw+zGJZfc*Ao*7sW2I1v{ZW)POq07#-k6fa{E+HmgSptI+)KDe_;(@U zc^sBK>3MOJT0XoGXIf2)5QDv03Wo_GE|Jk^Ztf+ATtMrvC zsoyfHM*j$eExNQHaUeCyAkoNZKzPrN*eg%u|4uh6n&M}QAtj$+HkwqJ21!0gj*6VL zG2(E790`ro4X>EF2Xjg}LgEGvZ4FW+C{4Mi{%5VhRpJF$3@>3n;%?u1JnLiVc`len zRfc0_KVTbw{oe%=rpTiWcV*$03R9vB>NiQ^*Q$B;z~Enj7f$IkE<&pRcyFAHNDwQy zu=C6}iM1U?5lK7F_3^~t)nf`rNcNmFubQea9?OuI@}5hC;L_Jly~iV?VVwKAIntpulWpW^;7B_DE<88!0!msj=Fcs!p0s^~RJ~hIC z(@HtgIteTs>iXBd1ML5b9&%E1>vx&|xyl(a7tV`>{|X34_<#3V?pZ-QI)mhY7uM|k zzY3#)ofrGxqo%O2bNZHI#q^-P8(*pmM5^>M>Zr$S@)F%y5xjIBju8-f;{YHSyzD%do2 zv-t0A?bN!g6J?c2CZK(AlR?*4OqKWgLioR@X(GcH(vKS#uWJNLhu@P9Shf2yM3rO!VW0w4Xr;RF}R zp%1;*AaVrfj>F}&2Zb`FJaUq^-jsic`GL;iU^0qhJ`c3{t|qI#je;WT*aRcaC(#DZ zW@w4sRT!?WWjDIBP=VB(hFih>qvJ5TB%jG>2gbF_21Fmq6U&1GgBc4^*yW`G}9m8O=*Ut}bX^uU1J zO8=Tx;SH#AwC^Xv1+`O>#abSk6fk3U#fWQT+J>pTw~{Y^@L@`e=qJ7%Bna}7QeBU{ zICBm<;3~P-6Y%6U1B5W83**wJ?VfTzcje8;j2IRC^>QJ1dXhW^!%(&{MS*pdi zAy0Z5v^}Gnu=?*0B+HcZX%yN%QhFGoL=9EizVMh@TDNWL z=m*&`=~ZnMR)%SoUiksnpz0+v9@gm{RD7J5-b85%xl7Vxr0Q;coOgr8lGn?|EF*#H z0sL#MXc<8Y{dTyl-F`!J0gn-$-Nx=#7&~pqJpt<%@^O zV7|>6r=QP3R-aHHzgK%-Sz}NxREY)}$3sFRA3(Q>Ohd2LkOxioIy&Ba7c^d=Lt0XfU~K_<7jLt} z>u+EpE=?gS)*QQ1hGYWBpTR8M!qj%l)m1pM7L5{d0_Sv(ldc)};QJD)k|-gzJRE7# zxSHaRLErfnVil0Fgvp_Ja(N1hMjU~|$o-dJ$|11(BCgtumRU&71XS=$0S`kKS9KXF z=CESm8wzMZN;M2 zvB7d<9W-C-&9PJc+%ZaqUEoh0^FwRh_;BinsbJ&rlJ*O8=h9^MfP*blGvp(kUho3 zc#mr|j6TS8l&mC*FJ+SKMMt8oh_t@3%DzlcDHL26p9K(Y)2UI4>oBYJ<~0a8M@kX>{saPSs2wE1qF!K-cqn=JyL< zmvYN_%*JX|iaR(|Eql&RExM-R3=YI(S-JW`FdZ!9&;3C<1cP(HC$M|z-&$^ovs#A%j)CDtq{ z3p!p5$6n&9XH;V{=xSwp_0U9-Bb6Ztd(Yopas*=!ys1K!Xd3T#Yq^QeV~O( zmO5)5A$zaYFYZJ$?JcHh>pDe>uH2-Y~y9YaiBkR$&;}n!l+xJ+1O~YC;w%Pvloyu?qoV@q#=cb;Y?|*uo`#tI??td3L zndTRR?}7DDjPaB&5W^~8t~m48OfR+wsr*>*aDNRH(NeS=gFqEDt*D7>lk#jpb*(Wd&C$1Cp72+n4*vV1f0y*K-~l1G&1eY}-IF@F=y`*ohY(||?)6&J`m zkC1fSgG<~oY0bl0nG`cnX>{L9OR;4yRWUs~wZCYI%(s~jSJf!*eWvgR zQ3eIT;AS4R;46|o9*{Qy$=4uSX0(`^qF-`LbDO6(UhVBYeIY8q^J$SHdd1SU%^m;X zi`B>B1z&_OzFZ(~sPVP6K7tG_a6kU>=u<&5d1~<=!G!RX^IvQZhqD@~y=&|_@L+WxPufvTwJ6(jIw|^OFB=YOk>s!)yUS?R=2}H?~V9~C0UeZL`EyX ziGqwW$X7=E4xE@?n$}Jkvu^-n!ShwWlzM~S6W!R{neFp>xlg_+7JIYXnC;dw)-}qf9ZD^-Op_c?DL{(i%_wpXI z)E6QsJz$`zkn6*~7$Ut(hr*TKK*PwUMltE4Y?!kWEq12CJqD0GP>?Ry{Vv8i`>3u~ zJ!DOX!nghfT`@{&9cZJ{ zwN^QgIdTf=AfZV%f0_NH5-UNHsJTcNAN74t>P_}b-~l!YD%W!h&qYjXl?{|hcv6%Q z^|C%hqEXW-T(OD8dF-<;-hciXHmI7c!@+p+X?9XA7b(MA3bo&Ls5v6>7{vrW(#1NL zO~@x3e_Jg$BdPdOMsw4Hj$^5dM}9{CbG>th)q5aQN~ z2BaUxYDD2BNQs5(S7mATpDHs@X|MK~tqe&~jl)evN`I^k1`H@SvY7<;ykEoG)wE*% z_%q})iICvC===lx8e?}A!bfN3>MY>VPRYBbGUesOGiXwK z=9@3uKE>4WNzS)MEC6VG3-ldR+n0*s1rK`V$3A;JlPV!A!C|4ZGU$Q6$Tg4?u~Ahq zqW}1LhV~EJ<~IJ&@RMX~@$A}BE6T-pMVmNwCbhEDzS69Tq;{syWXPesSkW`@c6I{9 zG2YFJ(2I4wO{qU5Hyt;mC2-?Vb)OhiWmEsbV!n%pOduuM22L(v{A!P zA&8XAm#q2q*`Olz(QDn?`;#-npGqlR?vcq?j6YU-DlH=e0CwNk&W*(r@E-1WY_paP?+VT0QFT+(+7nqkC@w;6pQ;W>afV<=XO;paKS&u&Y>E}I%w=%b!nOD zbeL>wQ}~7V{nkt;XEsCG<}>$|sQU7?0B8rSA%W3MLAhd@t;4Nr>;nOwTS60V3oWzI zzTVp{xrQ=O=9^P$5Zk+wO~|S1C3`~xN<*$msz6mjU<|Nh*Dp=XQF3C;04b%f-*XHB zE`-AP(P`}zkX?>5{}Nrb`Xm_GEQE4y zXd-L$oD}+=X2n8(Ha!0NaQOpORw48FW91ibDNMK+4Xm5$`O3UHcuNnX?#87-*T1yIwJw?>Z7u1$){6F zhxK6wVJhQ1hy%s{$Z_gZuLoSCrKPp6jzgr?n6`SzCii(kf7wiZkE7Pl>i1B!||Wzy*dJGp@))0>3+vT9+~E5B|el78U}a4gu} zXuA55CtwkxE|ZuT_3)mPts5WoCu0n9&A<<@zNtSTQ7FGG2q!9t>={)LR==?vBpwZ< z8z6M%T`3(}(D&YYCv^QgpT=dS+d=TpHctVQIY1(;vnky?_(KEvUSa5&ykVUI0D!5W zjtVpI`2am8ZM?g^5^y|6I!A7=h#Qk^1?FME~KSmlr z1;CC-=XC8FydsO#*z^ z`xhDJuiaSfiBeql3=9m+Jv`DttuRS7RjOQXtxsxNkFhr^P9PREyo$3(f#TVSMTKUw zW(%B(&-1!gn@~J|q`exmnf$gNWGh2{ny`oF-wCR7zD}AQnl-}cj$?h2P02@IEcWt6 ze2IyT3fa!Gv_FYul6vS>E$bkrp2bh|$!9{!WQl~6J_%I3v#WK}hRYaSK5@zG>e7_s znH>T!8;90N734Ec_QO1y8#1wo#;feB^D%7y0VRWLLE}xAgFg(6R*Gu(v1!uSUuaK0 zx4PaO{~E2TRicu18=%E~qo-!iPu`<;{+f7&yC(g$L;(sf;Svj8&*bb}gO1qmCAX#6 zD_+@$U>LQOfyXi$$QzJ{0VktydKJKFm#X@xzk%tG(!rn!w{V;;Dz|#p8sHwlPxz<+ zU5%&~hI*f6xAEx?y>*hzS2Z(h3I)(UJUmlkKz9=h>J8EYz>B00a=Wo($}n!mtuv_T zTUnt8=pNdksUI=H{F0nmnibOk4>CD9=_)yThV8VeYGU6VF6L^N@J2S8VcLxwj|E^sbnijG{*vvZ8=b;FzJ_$n1@|7$1e^J|o~C;79x`09F9 z?qXJjmkffUM=88cMaVnWrk5&Qc~SNmdQFs4Z(m*H_|(dc{kh~Y0q|fj-}x9|st_Fl z1#ZLK5Xkp0poM{o1`Z}dwVtfN5YCrQne(*1`(L0M0J|-C!XJV9=UkHu0PF&2sVl+{ z<y%;ysA4MYj|xL8lUSh^DoVneng4IIlW6v2R zj54qFa4I8H*f-1<0}ntp@eVG+X~1wq9x;Ccyind0z9Gz;qW8LTzH1!J%28cBpqJ_k zqydF#G*_Yp&Cv8prMe8ZGfA`R2k{UTJwFBDO+>GVlK;()&#sLjieVz-{qdR_%O!xe zYQ5TPK_~|RD*X77>y5epMXLV*K;D8~0D$SGD^WxfJdDf#Lf-FY$MAS>cAs11>A=qe zOd21@pyvku&@)jF8XLZ$VPXJI;?I+K?nS>3ZL2db*et5#CaVZIkVgo1~vWHep^5CO&lHZlgcN`BW5EDlarHqO=??PU#FM>kU_H4^z0+o zBPXpANHxVoAx#iSjy8^2>ekkHPc0cA*e-N@aL&-3b?}`QkF7@!m5BdT_N0OMD;t9( zWkaAUqxNeXo_rnhPb4R_6;oZ;=jo)Tpx?E?lnxN5 z@$qrU&B-_dCk3V_Bq4e*5M3Jpi%g36{k6m0(A}Ui1f!=C35kMQ_N9bcUhma@dtb+u z`yKTnw&z;BOp!*|`Na?y0+jz$P|#C*yLa+2G4{=545s_NDIK6$0H79Nfi~c9pnQ#h z!36FKFqqcXQJ+51frbc8Xfn#BR^A;#6p!EStrc9&cUAdbI{m*8!JFn#z zhGW=3H+K;QJ=tH(Y#bw!t)PPGI7`LTZch&pb$$I)*zZkt?K%eSv;!xmF0=WCy8X`< zpLcDF@atH`H>YebKYf}u$fpiP#d`e^5JsncNLz9_o9oeapjz$!bn|;bM0U-p^v~E6 zrsphR$}eQM;lg0~w4%Ar#!6%|PR(+?Rn?h@1V$ouW;@k!+CxA-xE)wUI}LDQ5xJN) z90;_X{o+FIF*BxRS?K|2WI1Tt_l;v8LNo<|=0HKg0RZ)qmzSS&>U%^5@p!)onlca~ zZzg90AY%Xy2wGS@vyT_N_f;aTOH1n`x+n@2vsQ)-Z?V8<8>SwqwsW?m0S825_Se1s z2U_|%I`j%}0RBrh;WO2b?cZnsP6%u%0yqtTJ(mPhDlhZKkg%qA6boMfYz44~0F^Sm zv+e?5xd6IvtTj>D6#3`lGf{DT@rB|0--bg+Ekxd($yVu?oKPNOv?e!>DVBGQ6lk@g zLwvN31&)b+LLMtCAGWoJnh;!6X}>0+9F^!;YVx3AwW-u1A|E_An(l^~uQ|o#XmB+5 z9z}nW>ke%5KCihuQ)=4xzx_xn|I6J`Z1D!>-`n(*Nzh}7+tc22Mc#19-T$n_=MDo< z!L=X5E!#&J;vn5$Y6`iV%$%(=u`OUKG1jvJ!dOY+_2_nQkZPYc*R$y4tN9%CAH0^% z;i$t8>i!X9TFu^rU4M2_bNZFSOI(@{$Q{~-uPB!W#!i|iAv*Prc64@kC1zsgNxbWAxqDpbe_3cI?@kt$Dd-;sIw=7D6#(E87+b6XQFoQo zz8F&h`u;baV#k_&yYLv?dCHC{om6@*n9G9K4o8wI0=T+2*Hk?`?|FekA}wtEIf+%q z8}uO6>2N?x`T%SVXv=?E768$+^5+Hg@D@M4DXg*SbegGjy5H+@d0YXXt7SmBFsqD& zU^?<4oF^>_>GIJ_13={U%KTS5607Pfk{D^0%4aRx;Z}D2FFfyuHXhM zm#e!2f2TWN_k`=ueO&&B05{1B;NW1c{{0}i?y)=>ZO}f^)NziBXi|_^;^7gI$hH6) z`K03W@@m`)bJV9gG+Pza-OP%*Ny`WGoNs00Adv%J`U&>2sqgN)#>gqt4JGcRV+z09 z#0SWO6){pG2=fBN_0O1I>2EY$NJH;p95%x3y z)G&yZ0M57ybjh=m@Mq<{ZwSbFFv?l56}Ykisg(!IK@;ca`u+p&JuSl})CY&f{A^{cef+=ZBzD5R59d!4Jqwq1}|jAX7%d~kU^GJ=mTDr=4T z4a+Kpl!09oU5c)@SL>jZQ(8%&LC=PJa7iY##i5Rb05w!4fL}0-EKj6ir%u2a+WoX*#&Gsp-1 zA_j@PY*3Ydrh)qoZIF2k=uL2MNib3re zEug4k9P??}xc#u<4i|Jen7_3p>kxXKPeEevY|4a3tAuATM{I>;ClITjhne!M<(m%? zx()GW(fj8!GM+tM6}}w@-m)CBRD@E~4d~_o)%@$1Hlm+nuX%?vOgjAT?$5|?!PvFN zZ-(ZlJQ(8mw4{3RSSs-H{GS*imvLt;FR+A9mN41a<#oa}4TLxOBW%j|%H_n=TuqTo znghvAn&zYuB2WtoD};`(AE&0K<_wY=`g8(_j*aNmdPUmnTsH2IuO*rl&EE@t+4e3k z({)@7JN#T+gxA1CSC^IoU}ATf&>EL)s^5o4J%zvx=vYy@`(tr?k}CEz3qr@{oGm8S zD>&U#H{m*;A6UZrftl`P6^UPATpKd;@wCG|zoj&;fdy&TqO7Mt%F7^b(rM&yW0-QV zdJTLy2%B*Yx7OA|dQ3XO8iZ0cZI(X_n?JgA(cQ}}(_2iLKY#ygT?Hvh#StR(je0Ad zdh6;nC5QNv);2xo_7JP=K(bFx?Az&HXwldk3rvigY{<;$k}{fF$|(0K(H;!AXsFMe zSi`Q5f`UcNj(*EruRt06-d$4|elw|CJNX^7{)>DZUg051?NU|hakUY>I^D5$ux>NL zsn~Q9dqH2R^H|G&IN@vl*@hOXfLaJdU?OKMZQBslY%jzN9g5Bg=eIacH$!32Tw-L} zv9`ADh{w|on8C@<%VRL;@EaaGbOFz~c9JxnNLVn=f*2&>d2#gERsR_1ylS1YG{r)F z=|q>JO^(EXmWxbG zL>g6NGC_IcHIw&wLFCpo<=$c+3i*?SC8XlC-B9^ohHRO8pU~D43;Qi4gR4tX9^ekh zWd>eYHz-o&)Sqt{XoI~x|3-6*cxD;cN0hM@7eBud&|!CVb>#z^5+3z0TwDnD_4NT6 z4Lol1y&{PyFIo5L^mzF6yN>4ffr0zSzoLr2c-~$&mc$STfu^M>r)Xq36(gP}MHbkW z^N^h$mD%X(v*p{So!fB>SF3q1x)5AgVciMX*jy-~HFmv*`ef60MJ1&cq-~PW7GjUq zIL!IgLxHKU^7lsdvFk*M^zVzu@rcKryox&!DRAxF+|V#))_5&o*tym9(_Px0IMhP} ziYCvdJ@Ft+w*-yEB&yYO;;VdYo35eP?(Ha_8L3zTJkdU{3Q6fB#G)#*M$4n}aUEXc zaU-3&Ywc8PQzPxG9Cnw9{6=~n&Kvy&2iy z|K;&wIsj#1fAKlOJ*h|j9uLB5f>j;q}bIj7+G8&su54davOYev#7@8JKSaC z*pt+To?c(-C^$ISW-rZ?#}vZyAt`U9jXz6qpoT!zCRO1Xb=((K9$0I%)C=9`JIXkt zc9b^_R>(Rq<`%0PE7Nx~-)l79BMXs&Nxk}CU1np8XYxB><~6ud&28p3H&$%l8UkTu z(6XDo@WBHGhSiqjcDs8fi=uapTj8{=xNW9OFGx=8YJ%$v_opCpvGpZVb;3;QL2(@! zs6k$p^&_NK)z2p=O!}c~;zqw0d8=Lg?v(DnH?j+OA3w)BjLzb5?p^O8&l@Xp@h@8~ zkiDmXN~iUU4XN%ImmS@Jo9VNs(q)xQPIEf6_FdDT1cA{C#QTr^Y5a$JE18}Xa1^vpY1LLRBDl#T)U*a z&M2TlQx-P)C1)?O;gwo zL|q9aHdD8oJ0-=l7+g4eCquv5x^>p%F{mvc<#shiS2KUf2pfVv&3+^jbI;Qi$Bgq?F)hRM3UMD z=g8C(kE6GLwrAf`>&P9;O3n)eTnYrf4`{x(8_+_tINa$xUU_}{Me_}}Ea&&(v;Aql zdqtIY_&#jn_OoHKcw6Wjc5B{KN<1i5=%l~G=?N_(P7~@2_S5LAiBCDcqUeQ_9Efrv zJ-{!|LE`89{lw{M#kZ(xH4TbNh$-KPE}x#|ZFxVT%diR(rSowA>r}Q73+yk9)=0&Q z2ls9A^eTo)w~){pa^2sbUtzq#M~bLPOA09!)uY@erRnLs z;rJ;6Jd#?fZ+q8mM@%%9qo@og*;BH+h$9BFHlXuMyUm0@uIjF=$Hi;vVNqYV?tI5@ z^vg*2hNNcvW4w6s9*Oy(4NZuWJ0AY=$3SVTn7X~f7B`9dpll{6;miq_ZzXySB^bI8 zv+faTevNdt>B_+kL`!+;J$*K4I*q5+gmla&!zuPNJ(jG85a@nvaWgG01H=(<4B1-q9`ktd(n+=|{q>ok#|BHGchY(UyNjB7%-MqxGknx} zRV2Is9C3ovp6zZe;g(PMbLWbSw`SGj2BqjLA}d(iw%-RsSjo&dqnQLpSSFAY12iAM zBJy3Rnl_m9Xj(_3b`0qaItkouu4wDugN;pNyto-px1xzc53c;OMXc%9F`ayl#pWsq4D;{vUJO$F*O31)#=a&A3+Z!9gY&lEt{R+2Rr@ za+U^-_XJa%W^q-NIMQ`|$aHeZcs#*5WwomCz9GxdHGm_}iH46kPE~<)B$21yfWXdW@d&vpix=#8fhzAYUN-n4mH3{Sn zF0kSEf7pk=n*h{vzA9HiiZ?mYN8C<>)*OFdzVZ44+-x@iz%pV*?hhjXX<7h(xG`w( zq1wJBN$Z%T>gGW}u4QdStQI9ho#1O&tsu)_I)YVoj!^v#O?YTrY%f7dL~UH7m4`$rc{Ul!gp zA7KU|5HW)QOV(b^*pAENbBU4he#U6ZMX_Fi#)795C* z#^#3zz0EHXc++gF#Z!VIW;AW^cBVK7W{Piws_|rbh8Itxt^+fT#ZV=d`-_1>eUJEX z)Hd7qV3pvJ%krTrRykQ9uy7a2l(WEHI{rSfm|C2~`_jcT2{+rY>l1InvyAEwwuV+`rwLj42ngNe2Ob41T`w(P=^``P0EOi>yf7Q zIJ1Bohz}w4V(&M0oE|$@+Zxa<-N616R#7+lefwVA5i>U9ir{Jd5+5o= z46zkr4bFr>%m{1SJ_86M5#Wmm32#Ct`LA=?@cH}Toe;LsfH=h86SWim7T)e|w;o5k z&bwdN-GjH*L2ls)Mh+HId-5)CzkiDWwNA0Rk=~n=H0^D9fZhq%OVWVUM6LD#q|YHP zlJ?^5$734|`EgQu@0|qT9R(nK%m!4U-3bJjf-4m>k7a_1r}3dH*eD|S;L*B@zFrfn{=m|AqYM+1c9Q7dvU0nD5&QJtGd3*hVubci6uC!fmK79uNwpIO9}%q zT0;U*p7)nRX?&lBD8nr0maybIkx$)AmGHK0vUn@18pcmdshI9E--LO z3v+2xyw0^Vhu(gC7mk3pRxaC?!}|%wy`5{{^+gFLJfx}G%+n`8bntE)Bq$60$I+|B z%WuOIZIcBR@7r3S?k|HNS-hB3tf~Ls8uy~)9{iSSW-CPVQE$L(&7&X`d6bFn$KguD zyk6w-N-&$RR*XhtG%xT~MPmVvCp55HF4-SVaMoIYerP;u;9vv^DF`|vh|%WOmbtR@ zVBW~YVHT*Xh#IYVf#zj&KN8(dP17XwW5KCg%QD?O2l_IB9@2$%7aF>MhUD;mO~c95g;JWP=zK0DiypG)TtRWfP4%SEs_s-^G)6d zV)eQku>HN|%`Mi5b-Ggw+lIEsk}T14JlMP66E=VUc0ba?(a`)2JJ!=1iov*R4B;k0 z$8%jST z$Lnurzqvkz+I}6Fve){5{W_NZ1tSIF3fZ1sMY$F6+!i}|Zvqnx7sB1=`#pKEFyLbE zadD^Pz4sY9-kE`KJ08H+7Lc|&ytEb}Aq1F?$6YIn#qu646oEOprUw#li;E>s4o93Xz>=(&0sQXw|IRpr zfH;f2}feqM;5Ly#IjoI2gorBPi`I=iIo%J-&N?8q7inyJbPyz25b<^ZSnv zX<*iE#kW&$8m)M;Qi))08?HYvesFdV(dJ$@$( z+tB$t-5*1!VhmMU$J*qWSo$ME30$9_q2oq|xgu%uw<|gx>s5ekjc=7iFd#q<$5`6d z$K!)*8mHIyj=Sz5Lm(i7wJO!t`lRQ3*DR!|uW3PCxA%~k#l|o( kKgAHbi8*Pyhe`07*qoM6N<$f?!B5fdBvi literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-atp/images/atp-server-onboarding-workspaceid.png b/windows/security/threat-protection/windows-defender-atp/images/atp-server-onboarding-workspaceid.png new file mode 100644 index 0000000000000000000000000000000000000000..ef0a1a23bc4295ee1897df0a61bfddf3c4c814ac GIT binary patch literal 53142 zcmeFYRajij8Z`(ZKnNBB!6k$Qg1cLgKyY^p?(QDk=@8uA-Q6wFxI^P^P2&#zH{Utm znP=v1F6M47diS&6UHVqlu2pNjJ4{|y9Q`ffTR1p4bcr9Lig0iUrEqYs0^cCPEE~3E zQ?Nf2yB`{kaBvuXFF*KrS_~qX5!p#X<~#D{>sL5bEZxTmwEvjCt2+rfJDJ%!z!g`F z{D7IzoM0wVV@E>=b2}$BD_{ZvCtpAeq zqm#L{F&z61CJO8c%F7caTN5W&eFtMW9Xseta@2ncH+M9&(uXB=fNSik1HjC0Ud(Fx z4mRdCrf^+EyCEI~W?nT|onm{!J!gYi(_8;{Z$x&7|~E2{eSk#@l^@R>1nRK!}{(ceO>|#Ki zj4?4cH?RXt9OR+@#{|3B=)0~s<7sGUe9Nl!xH~s?aC97GQ~2Lg>%nLe)FmAEqk*&Cu6G@&9M|fA1yi{Z@F$WjCXs zpPu%0=kpfLr8e17913$d!vZyDGSe*gAkUXiA4pWCDY17(Gpc2Wk{srenUaUA_3)44 z{u%GQAExZlt3;;|wX8kDOIieouM^2?^IPaD(cLqB|51;9QE-&pZmcznK1(vw&bCsG z0|k3Xn%f|cw}Hc13G0M=he2x50q=Z zO(0^5bQbR4z7XQ2x4k=^3$~KL`E1JXRTWHvJ0;KGE_1De) zx*~KP&^`n49ZlmnKOh8nk*E%5Haed8pw`d59dYd8s6f2;ZW?b&Vpc`Li3L67AA>r7 zxfb|_m0_JYy2;Mf=5~*6cCHC`r)@t(gndeH+tbU>o&X*ro@1xLrZDs5@>KdPpyFXK z55ttJ@+RS+ti`;fe&Z8>{^~=LY4I_OOn^(wb3vi>G7rnHY1D9gwIdk4&M9e#FsP~@ zUus_8?PnSG%fblFZZh60yQb}h6#4sN6=?b2(2cQvYe=T6k1qLltz>Ckj~)8z5+x)4 z@u(0PH->7@kFW0f%A~S9+6|Iqj(6Jq!Mq>%cbSGtKoZ((dE&TB!Y*m;#*jOkStQg@ z#wM!eQR_h5ll*;5_w7y5poPnkw+;xUZ}u4U1`D37-IRg7VY5a($|i#dw?3AICNe(} zH@~2Bt=Z)B1t4 zngQQMR^ST}q4F60yNn^x10Oi#St*(9%f5lwSCy!P&oX7GTGYIr<|wd6aJ6hz#_}uf zybV0(P;TJ9i=zw^jElzLokRbEFqq|efLH- z+NLw?Ptk^B=rk@Ywjn8}&p%$RB^61z-|)6w{HmoS2QVi{V0X2@qhG&>pjMX;xCj~C zryKtyg-vzB3DEb%MjOY=!pzh=w#jd?qPRYBLX(Q9+BSnDJ5h46VyrU|YzRVFqy0u? zDqCZbqPUxDxu&TKcIqK!1tui^LA9$!ebA>p^6?0qYVj`9!-3>^aUDs1<#$54nEIqj z_cutF6C9#dc3&ZGxYFe*Sg=ymmopbA~fetGI~fN6NhbARxsy ze%fvFTldt5I0kZ@&Z}nJYlg5ySAmx6#M*`mbX!fN-F#XmMieXiM#pV=_VNd79P9FY zhcJ%W5#ouXzLuJ}0bN$$TeYf>?<$_`_>W|t0Wm;tIMB-jx zBkoTJq&m~w;jMK^E^b_*G%bu)&zHxMRScev2)I;EQN3|3+Ic$>vS);D2_!twkpHHT zC3`o%CV98fzHKe=ZB#Md3k>dQ(5IhM(q(fTq0_Rto)`CO0s$tPnm>S^KUo~o3@LFh zJ2s^~(jcdBd*JTj=ntKB`reI{vdxv}*602a0YwC_CJ0-rh=`4`&~dxoDec(|J`1Bn zE3vBw^YLe6x;kq2v=MsGnP*iorcTn-MXAq}`iWAQFzt3M=EEVCH2UOC=9 z&Ht8><1qu-kn8Mly}TasekkDN*Vn5gkF{3evd9JV%;+&ocK))KHT~fkZ%Y z*qNd>ht-MHVz~;`o(mr!< zz@`RPi;%8nU(3`Q@BwnX3VM3AdFN_wT9HNteiST2@8azlbOmcCO>?E$NtOHdH~`j4 z?L~W@7U=-@wY*Ew-SDYP>s$l21Zv}PfwGiB@4_eNk=sk5oixe1^!n$mROLfq8vhN! zCXdRgV%0CgcjsA(CIFf4s^P0kjD9mV8cV2tYRzG`%CK&sk;rf(hmcUH+Y+F+h{!->f8*0z1RdcwvPs=DDhmycGd zHGB&R28U%Yo4_UtBvtlazl%&eXqt@nvKVcr#e-zbH^+|q41bE;{z_(`Kap)eqiAOz zlj9F3PzrS7yuFu5NkX&dy&`#K|8=z`ee=N(!kU*#vrwZN0h!QESye+>H=>{#(JEpp zCQj87WuCar#V*2dxUAP-g9JbNhkl4`^{GP9YV?bOHZh-L@xd<*Hp+p+ZKktekt#3v;6_|Gx|owvnDYIoSREscV1Vh`?Y^~2 zWzo)9b3sQfT&P@98rb!yO&`A~Knyigs#HR&)<#&uNbfq`w2{Os`uwqXWWaYh6rO5M zjUr?e8C2L@k}&Lb)w+0agID|X9d*fuNHv}(ImR&CE#{tQbg9Q6+;48n`p}w9LhF!6 zJ*r$QBwzOFzMGhp=%_e-`I~oAcD?dTPgl7qA&bIU1b+NO5N2iMvFNna)5Ibw|GXI6f<5`uvw=l4 z>DD(DERW3CfzdD9f+|r@jTU;qWn%aI54g%dhoS{<6*~L;NvWb)Em&JG)f4*MKSxtW zEK{-B)gcb{FN}6f51Jj$%4;{d{p8ZkLMU}NAOW&$WqffD>Yo6KY9(5PZxvFb+#E&K z8D!=35&LrOKWfumbh}R#^UTY%mb`IHBcDz|q%k&9QzpaM1L{OzKHC`q;7i&um#V z?`P79U4=NoB+;Ou#?v1rY1YZ8cPY4bH=-_ekB)dN`qLYH~a9wP@|_h&oaTfCR`wwNXw zDSWugsUKx(O%c{TY>g6IxIJ4?$V|=^n}8L~&zWPNzv^?%);!CM(a7i(l@1oT>d1*!poXb*r9b+IYSzfh0$~0e z>*1H5AtYd!&&Wh~djcx7oBye*DzW*_vR%1OOi{$yNspsL@N?UY?55gT4^o0CriO@9d*75>W=-aouc6$$tMA?Z@`P@ zy1d_?SFXtOsQo&Qezj)2SMq-AIY=PNwV!a*dxTiy>}B5MY(Ix)LJ6X>78^;t>^SPm zX)fLYneP5U%u2XH8NrWm*}Z`0sSEQA_aV@9`bDw2FrlvWR6FUjUk^|v7u)MYLV$#e zE`KEylF1EPISP~fA0U#XzkS}^kQW?KtD9%}SfWy`G8S;z4NeIj&qy0b-*Za#PAN)L zdo89t1z|nzeEMNo;8vWm&COzKu$tU_0x;)ACUzq9ylB5sDy(JaF6u7;y=Yk zM}}rslOEer?w7q_Tj4(DV&2k&MwyM_tL)M5?H*S&8J53&_DIZv-5X651zc5vcKx)& z&HJt!P%&df-cOUMci&UJ$6z4AwU))&EuUSGYx(LUjNHV1MnOflD6E@CUV8C%u1cVr zZ%Kh2I1*mp9~J_N4z|JM|83N?|HiJ>4B_n*(z)w^Q`Qslo?;mEk$dS^S(shWl-V1M za`w->%m5;_)8EW?W3xy&th`MN>gyE-sl54$8)>cRf5V#szyenNbLGZQ&pL4>7-t=# zYu|tV1tj=okTOQLhICyrG5q6m=})m9V-^GNI^V6jKYaqUK=A-=t?ADhC;FAR#I**8 zM)@3RHe-Ca7THHmiT9FO6vnco06M=4gu(qo5C)mq~j7k4BFLr<)yk3{6n%yq#VmHgeSnlWpJhhTDbJX1wV`E7yh6 zN3HR;^?GKJL1Fq^jK&9$j4;Dk#$~q`>%Dxn8@J~Y%65NdgjY3fK8srZtUi*a92GaG zcA7Pr0kH@Z=QLW~)U(N-;L~S~w6L2OoFV!uwxzbD)!S?^Uk925ve8Cd&*-q>Q^Vow zRj0o_3A1zknyehm(zz&0o5enY+A5wqs9h8^e{+7ArRqXb)^*r^LP@MM;oOGedf6kH zty8Ps_Imk2ui&b{1^?+1lTJj6)>DsYCZ(j81L9|FW@q3zN&t=U?M$VpWTQkWju{~P z;#M>ggnM|?sy{@5XRPEqq?LLPwy-Y}h5fjdbu>Nny|-9_;8j z3n9I0(JHDa8B8}Z@z&oCFSw`b6tPcZCuN_KTA&og zm9nxg<*-#|mm=G}6ov1hwQxC)&b77t?xJJX|7zl^*KC^Y1}~7k$;Bq;-YgA6xHF{T z>8g(M)?Yw91zA-oKDWEQGsW8C?Ap_=O?`}`(k~Dd$K?(-1$qE?>;LdhIdX!1HmBw`@F$*fNX0 zEQ@VA#LzK~1+mSRy=H@(h@U&&Yi}|X{(0mf9Nw(2U~2J-xKe*hmMO35l~Y=+!J=dS zzFigAb_P@;Xf12Ph;KnG@~#M&wk)=I(y*{6edBq+)8u!~TFYF7^bz)I3RRX4wow+o zfV@iTsT7ob8r#o5Xiw|7@O@=xJv{Hn*9FB-Thmef+eA@6>t872$GElub=^G5-7AVe z&s9yz7lFppjohpv;HBQcggV^}^S>w6`3Zxa zr=LA&$4~{Fj4KtH)7Xlsa2yxmIds2f?*<7+&!lLma#bx%?W~b*{bj~mt@~s_N;c%i z`gNfu)pf2ceD(x&YKiNFHV5Wb7{cfA# z4Q4LvFpo@n8F#YEQuWDc!JX(i$4{p$-%F1BPH?2Ft?rHYPlnv_mFTA`Y+D#KZ*43k z7W81LiTL`%apLxohJl_nSLR})g9~7q$@rtVH?6uZL1dm&v8Flr&$3R;6?GD0J5PAS zoMOzrdv)yL{U2BJpFHvqf?eu=X z*LzqNNWcig>x+dBZ7$}B32Ktn*1EFKask%7cFVT)adX!CHof8GYx*;E>T=*+8_AMG zYVXUR>gi`2HiE*IgVLmnnh`sr!gJ{a2A>1uJ_L6b8B4jMq+XX%baK;;`_BXF#EXh+ z*XgvWT-9J?b0~SrWxC3#tNPwpQqP0;>4QKJtpr(!{;w{(jsxxOu_Emj4;i6m_$A(1 z&urF$Z%b@YlG&k21;kyP>UNF6n0YO`wpEF}Vll#KKPc7*4IIJFS5o@8OI&Nc>^Hbd z54m*2mEit4ufX7~XRXgK{6LDTeDeWHI4(L=AVt8GU}@#5DG}%5N6%i8u-LVjF2DA# zrw>F?^igcur)w%w<1?}GN4# z8!h82xmIDhAUia_7eeUJ;5nB(N2<4}Xs8M{)N{T+nzrXf4?)1R9~$X-+{VqgHxVi_ z6yPy2_{#h3;uF!_3UW2c^*ZXd<=KsDtw)%^^W)tm-CUjKbVR3s z!08(zS50-3sS-wxM3XE7Xz2*3HX>0g#f|GtgSN$8E80eidwuwvV6Wt1p~wl8qU zQ9f2jc54`E325}K>gBK&e%f)6mr=_@JY6{Udi}8eW`OGpY`>(;;{=(#db_)J8KR5= zgGjOdPO4i!I=#u^)GFF}2dJ@NFn8m!wVHF`G-l8smM`)}=D>gZpWP&2GdsV6{N!-o zt+mRxGVL(-=R#Gqze0K`9qffBt=ri5N(xp*-;YDj)(jco(c}p8@5a7Bj!~$O8M`gp z{`_%{OEVfgE-X#3Bu^=Ilh2l6f!x!KIu%TO>1+BeG%3iDYiXWyRus@sfCN1pGW*-) zOTNpF8;(lWZ8x1*|B{mu@1ShJ{)PneOaU?uf2!;3;JPGYnD&W$AjL2I`dY#5r0gB` zZ?TAMJO1FFE5r2nuud9G{oyW!<$ZyxCDSLzH44B%|BLHqUD&efBEZBdvTus zZ!%aAuL_v%LmStwgP5hmUfKhze%T|hmT>Tjh%DsUchFjoxc47{1NN-1{QuF80sEb$ zRygTQ9>++fPycOrBk7Aru9iIE^42=+{_pmZH>)a$Ndi|&hDk4uc&V<5UBXo5`)LKu zw|lf+`~uPcy2VCjN<(D>e1!G{Z7_HEpSooO0}>@o@9j-hcK-vZVT~H4Ojr5vPd8i( z`PqVDb0(5q&XJo^iTfIrlU-FaWBkj*5K>x4DgmT#gS#bWIqf~+SmbvkiMyA&ID0Rv zWxI;@Ti9#)@Y zdAM(v>)I6o&T^+Zg;uKp<)*(RK`UyAU5jmVJIZO})H6>g8Q(s`5Q1_f6 z4jN|?D#ju7Mt50nWh@~-_6RvM@{usQ|B>{dyV?`kb4_pL8uEe3!<0{WhXUr-&_GHn z)B4ud)Il=ewCHGz;fT)g`puYy^i^)YQ)u0ISC8!%^qbz*t!yap-TIHQC)%%-jvF%5 zN_BnGYPE*y8|IGlwF0i|wsMYmQG?`=&dNeF*~hKGchnAzlXeSXi)?c!%^G8q4TXrN zE_3Qs{|p+%&z><2@B4$ogZ+KDtcEl67GGDaUnyJmvgVo=u6sVdcOltOUmki>x3DxT zuiy0z32MGhzlMcZ)COH4bc zQ~WlEJHv%2RdvSzro7Q>bPw=byWJzlRQ*Q>v2p*1ro=#-QJj4iNo6vR711~!WjHP- znP3tUt*18Y&+E|%1DGX}L*vXa`=JsZf;P;xN(6v#4w_ zt={)ETWOE3f0*SpV`gYjxDXXMx~|I}D$a7*W3VVy&4Lz%rKkWDR*9#*iGA7xsIF*H zseSu_JySF;U^Tr-#D8M}%JLnWGo%FhrQ~jXYjHNw8p{NsI6 ziFo2VD6^H$8wg2v@4hdt+qg`8m~M8wh@B^{$_njI&JNsI){q>!iJrjw8$oZZXE<;) z8&_7d8F_#PXUkcmZ_RIw=eKGEEWr?XjJsG|=@}T5DiZKQc^alaUeb{2N3h#&uD5zH zm$T{;V&L78v&p%*z->5Q?oZew)4w(+O3nD1EnpF^spm?u14yVUZbn|=EM55U13EH& z6(^|cUr%vmY#f`J7@d>ex^SgU3U^P{SY^4#-~!f`nJZH^u(P-8rLo#psP{(waHly& zy3}_L#%M|5lt2HIT6V7K;$7+AZ;o*|Uy;92Ui8t%0W`ti5~0IO`xhYz!U)jeb*)~) zd2}8PIg;nTle6hr&An(0OV=v;n=Ao3ad@jXP@Fpn-t?$xyKpctC75HN|E|(nR9?db zF(~yQZ3f2)Y6@R%2-IYh<#EVEj>qFDD_sBCAB6uawwMhAfge6zYTmDt(Wv<<7kNDf zFw#5;dde!uKCg5g&CKO(=p1zxJw7(-srqRQ_90WrQw^l~2OzQj+j5rt<4$WO*|a02Fd$5XsTMhS{A|^G zZ{39%J+Roc&n1*xfe;zBeJr$d zEUquqU?m?pFc{a~86AGq9xzM;D{8{Q{O6jlr;z)EI<9?3c+S`1X3G2#m}X?jMHG)| z8DC>7SZwvM$ej;q`7^WLE61LR9k&Hba!hV$)s8mfo2%);kS^cAZ=@V4N2V;?jW|p} z$qy?gGfm}sAdgz!H}~)%>u5X+WX`0Ut9Z@0kvv(Lb{m5HWG`4J!;MAS2-L$PEkl<( z*l&zlf9919K_)E&%1Dk7xPny@h@ytimt?=Rgk3#(R6>a@e6SkmeOl!iGyU2k!YGo& zu{JQXS6{GL<1ZLy3v91VNlqp>yV-y~kR3laT6)>#{_>{pL?6{hT$j=-ygycvl=TX1 zK0uhAcZEXM9A5xIo$n?4bJ-%1>)O6r#*?>2belgNe#Qfg@qV=c_?BopDQ#x<3 z%e7M~j4l7%nbktN<5fon>XC9Pky7q(=lHX`T~G0?C%iZ$4_bBk9ld(jnd#pM48x{BLbrFhf8>)kpICR=@D?8I zQeNBWFV#@~^`#aIRG@NMt}%Wn%-T}KI90(Zx85srrHDOi-(%m*|L)liVC8uHZc@V? zhdyM^1X-u_a=#G1iEHv$^rDa9-2cIIe3K8MgEc>CQ-F8=yWC9iPV(iM9NY5m9y$8V z*!Znu?lU}WEj~T(RM||#1!4PJAO+^M*A+(St^k4tn?nw;f8f~2ou%zQ_I)g=jxtUP z8~@OG7@lhXa5ePqxk|P|Rp-^UL zM))3`5#oJ@w=U;z@&2(7eMk2rw_Y=n8aD^Z8B)dMw2k??xZ(5N40&bi&W2k?%&zF^Y<7SC|0fD<_g#JaOP zX*q@@Pqd9lCVe1|PwqUD))W;249$LDYQywi^K^CR@4J_lfIs<(y5kLi95MbHoR}hE zH^Jb#y=8J$`fOHb`E$r$PM@c7J8HW|=U`v^B{MU> zz&!$LQz(XT$^6h!CXeh=#HKf7tf5IEL)H2dcbw|31 zCxn?L&KpQZA8ccEln(10^P=>rT%Dh`!^mVpT$AWi zHh=S!$x=_0NMq21=r{_}x52iMU$B@h)%rKDj1wA|u3DdZ+0s0yV0dkrhSJEielIqm zsggEDpkgI?te$tedH>-9e`X!iLqn$i)HC7J6Qqi%Ho!PI;1Rs#i#@5}eXzjevlY$T ztPqL7^JLJ~9kUgq_sbj1SbMXL|9SuUld5SztqsxjK4kleR8zNRQ<}D`#>lAi>AtO6 z&xXCWJ`dr55UK`sQX)k(pSU&fKHlQGUs(W9dgqwG?)}4Vwj#r&>o~E^Ass>f zvnOdY?=Lz3@!r-GHJS^MEIs-)SP*JiHYt20iu9KUM;Q7@UqO6*RA{9Vy&>1@x z#J33wYu$nnt!*jTThm2v)Vyt%7Mv$SY*ZAAM#NT_4qv8+eQDC~-e1rsSIee3sKO(O zKX&jdy-yH$4t{*!o5bkytvww~fc#+~L>i$qV-bPYwboYVcsNxgpZSA)%HogS8%gyW zAH)P?lWE7{;H##L9N{W#`iXgY7{gVzMn09auCdn zez?Rs4$-v3g}G8N^v7PRMnSo$+zP3eREeADPIdo16%F-MV?CRduIvysYX6;vS!ENK zixZ>F;NDq!FJdnbL;=+|g%oIlDn1vu_n|3zanYG8pl~jwc&*&WZ1Q~Z*xP_)?B{ca zMc(so1i6Bs;M0~$<|-dYYHMTkI9wiTbq(nl0fg~~L9VHZz^$6(VKqq#h$@u_l%1}bzznzC6qv#> zcS8LI>I7ffsS)UtfIMGKam;_*m8vw99Z$`0%lzX8*r2 zOP_rvqQD*tNj%xjpU>C@1NK-c4R`w1&CtrAg*wX}^}&fZYDyh~BswQbGmlEttQZSb zQQuSQ5NFy7a*fw?b!`^K?tIAdjDNbhv9~s8{3Q&M6>7;2-4t8`#?Yu6RVX|=;Mj!-fVK^9&C;@ z*ZC+?b8X#w&&W{%;P|GAbdOA$eTZC2jc=nHX>gnJ{R7+Mx50`OkCX}4C3LQ>rSF7$XZ`Z z#O)1Z*?HoMne=K}!C+19pA33cLS6L`6Io^u@&!e|U8E2QZbDE)%2)2v<3dYg7WrRafa(ctfqtJmFE;P6=fw4w2^_9Q>q$62G zTa(-VDQkUEeDglF+47L@m33Tfpm#iMfz0l&CVY_uA5PjrI}2|fno4i@Ty@WwR1U~& z-v7gAJ50MTqhFx!=jFn{U3Um zq@yqJSp(+Aq;*PV(+}&*zHX0p5)(L-8QU?m%2>+kG&sDH1d! z-WAE%mE3N3b_f}|P|p_R5#_d~luxxM1&p_!VXcki#IC62!DX8lI9oGrf3m5tFo||{ z2z+N~t$+vye=tmc%baaKL9a2M@a1Tbhy3Lr*TkN^SGH>9s{It2ocS0Hs?Z}j%KHyX zL*AE1nLaC&f~(2iB(C~TpI$to-~hxx=#Z^Fm4NnC^(3>%AaLeQ|4V36m2a&aZ zhrU@EYV%6%*(zY%(!8WiSb5r*KxmnigDM+~PQCQ;rELcO&Z_VXx=(NRAaYyHQ>=Mg zf-Rd+*SV->K8`Daj9W#*+5#QZwZv6Yhm-=d6C)QW`boOu{O{iXWQQSupTf~P;Lb_F z(WdRe!4rRSZAV|EIjf?;_2w+~<2JaM__l(?b@`3~6(l9GCE54{|4(%p6Os4xv6`bfqAmyVZvt$f=4P};Qd)mV>6 zvgY6XpP93HOV>Mrhu1z`{iS4o?utDnTIuO`3@Zy+MwP=Fr{m(bV1)QTv?DVYc1JDY zjAuEgUE)=(8RVXLx>i`9@6U20rUGUugwMif>(SU0y!>`~`siTR^DR zC@g5p-xt21QP3m8X;d0cU{~PTEGD`^1NDw;i*(j-&X@Wu*Dj%aj6j(%dd6iPoZ8g; zC*7G+@}|_fdSXJid)?$Yx(0)`0EtBWDEu$}QC*}+#;(J8tJ<_K2TT5L8LNV1Z)gw| zC8KG2SbMT~F+Fiu!a<(}O%Oj=nU2tJeW1&%E*)i-lyQMt@6f=xB$GV$U};sqzit3Y zeL-Pob8-G+;LP2=k+i>B;E?_o6pd_8q&zqM2e{RBhRVYh0FqKl=pgkRHB#kJNg( zRa*5lVz{JO*}%n)f$0P@maA@UyP^&0G3G=8mVhnL-{&Ug46f=5dj~ih`OZ!nUkfn)!b{vy$505%b(?{g7KC5C61e&hL$}`R)x#|M6P2ma|$Jm@hC00 z(8|W|KRy)MZV7+v=mIWbLA-hZt}vO$&=w=l`bc&-x3}{rz>U#H9rjIxvCFY@_1WM! zXkjaT19X%##`X!bJS}vD1lp`^XMhe?ihdFnJzfCzTyQ(I7B+i*gt6$&KMR+Y!_i?e z=e@&RLIg$jbIE_#j(nW311Q`|{%9Y&Ari5=8>Bg!or|p)+ zZk=h`#sUw`+8VH8p@+^4ZD=Y--r{aL5goW<^-mb_JRf`p6b=ZAI0K@9fmcynF|W_- zodmf!_6E0)n&T>6HwN?nbbM8?cKQejQ8=-1W?sO}8T0)J2$(y4esfnu#4_OmuUhx3tIv(y;Oood+maJcxA4Vs!F-a`+Cu;QO2YQE;ol zaaMhEMkc-`DeoknQ`{>&Xlyq2oL!<^=6l1W+d){O8rE8Xp@0Y#7Hngkn^QIZv~ari zoOn)En<;%~+%lL$_k5f(0eoDXm0ZoVR!KPVroBwjb5))6fpUglKXfXbtb!Ejq)0}gQ!DyRYmo@1L0 zSG!SPYjj0XfAm~c8QWV7og^3Y&7cB~2ZH%Db6S$ibg673x*em&Ab-c3MXl|b4itt; ziyR@`D+E+zlm##JTTAVsz1}AsR@Te6i7r~2`%iTTuCMGs%INL$o+6c&oE6MR0YI-Y zkI$Eyk5dXA&%Qn*^U!fX@?CafS*vZbc^gGvZ`eGE`gP#AJ=3XjJOSve&$T2+Ly`h7 zi7759sQD`=kg5scfogpRrJ!pZ8mx`V2eA*|~N@6am zJ$s_vl0u|&V_7T}mE9t)5oJ=0@x8*Lk%q}7cx^7BqoKcE(F+xnLLQr8^Z}FabWPx? z3)%a51pYdbDXv5mF`^vmW*w`B>^>OFD_ev~K=x%0XHRSvWfh~6bm z{33?-iL&A!kMsz=U^o*RPDEh09yT4nf_sVs}fA(qnexZdA_Z;@BT`*-j+1n^@ zh8r@?w|D_<1*?dCNhe0Q-l;& z6utrn>j=~dv=<@76|p~g&3kaGI|)`0nTkeOhren^_0NRYj{M5b{Qw%Cts5tISC?S@ z$u;O{*N)zj*1hY4)benOxu`s93ca4Y;j1!hO6+$tW?GGOA|W$aQ9`BGT{*Jb=nC$| zA$Y&of-}vV)>4?ECowvijf#eQ-L~idaGo>8ji+-eH7=6`;pCi-Om03T5^uMT+;nFD z#t(>nQ*J}B&;IrKDBaLEOD3oqt)=60lS{NqGu49?kwsE(3-0G#_i;oj>+RGM z3eGYZ$u=MvfmxMB(NCypokNaoVCYOvRn}K3SArb2cO`Y|SP_B8ba)udr5*Hi# zk}Pk4Z&EdMpm$qG#SMm13)eW%!8)0}-ggMQJ~kM4KxEZPo>S;ksCoOe#Qey%9P}u$ zS^P%h`A#o=*=I0)`R zInI&jl89L_c;;2N%Hyx?DE`(z!C%VbQpzMq%VUKUba=nN9(bB(pU~yN(`iT^mI*Mw zL^@YZm|9YRAGB6?pm_zMLZLlijOyjqeL~pQZbW$R(|)P*uk6b7A(N?^BK!8BK3d^P@s3)St}!Lou|F+aCHr&YcUB&2Nh+omF_^!n zoY|K^3hu`)ST}F6yqu&xTYaHj>^vVzc9OqV2wmtw=qS$J;$Q1^*bcBW^E`fQoj_-A z)7L|N54`oqP>r5?n?E&X0Mf|0XC5~8cI?3Z%<_-RDVtNvTq=s|zBi&G^Ssv;uW=q~ z87|gR7V`A`o|O^T`x#s%TcqFR`@H?W?%?@ThO-6yuqsB$LaL1XI zfbAoob9?*#J;Qd=P?I5t_k87fSFi6#K#(3rJA+O${#)o&;q>5k8)ZY6d>^|)#Jlop z{UL&Z5Vdu+a`}K0Gm@rWR#Rs8MGnbc$`a2MFc$Xd9`2k&-SBtwb=pKsRYDv zvE7?rrNVf<1tG+p6a9Hubw%wj&gBy^4UG(9Un)z>sACDs`Xsh zv(CN_9xd8tB~g{67_;Zvj2D{OY-&%ECpVGiWQkl3JU@SF%X# znjLEttaS58Hq{VZWyq^raBnnYLsja|tvo<_tW`qJ)n=(cnh+ava5F#3hYJY7+*Gh7 z%5~B~2W*tOC*=aOx^Z27p(HtejHel#ni9?N=FS1(mS54h6N(;T2m9#JR0>?P8ct8K z&SktE{qBL)Di4TPKF_DjJ(CoQU@V>^Nr|M`-VWT))n74z&r>s%^8w^wx|;MarDVA} zbGf>tL+B;xn1wb-9crH~BH)hKh?;+c2(`@KN*_CaKILvSItzVFS~qXN2;>*%oCrIq zqSX6lYGK5a)0%Q!wF~z>nf{m!i~n7*8oF)6n(qNBmk6F8}v0 zcL=?ls+v8!Zv)YD(ZrHcnG7!jciLmfjl{rR2r%A!Wi_Ua#9aNdZF%hejSOs8`HmK4nQQ zEw^SPmn;F7eR|z*H9Sb0sv&c{!4g@SDH6@KI#W3cnuZGh_y&O!iQK-)OgmcmA)#IJ zrw}Q0%F*6pPZ(GyJnV_qS^U;3N#xni&LvJg-T$b)00{;>%V=(x2%9s|7IOF$IgA)?3bqEgWI!sSv-e?Dr_M*Vqh6Q zB^Z+vO~NZ?V{@Wj_@y}a!Dp!R*lyyvRmtnhud?bw56V*qKJtB}OB8Gg7uW(mTE_+* zI6_RuHURMI`?u_vkGF|VY0xkI30}{GH<@T8H?x9Yjd!gN_DxoRrQ}n6PC=$3C(J!{a_60oYkp)A;si+6aBB>5g&4B_RjWA{Ai98 z%%*0hm?g(GwD}B5o&hj#nKMvzdd3BJq4qfNm@@qv3-C~YZGm3}qj{=|gn3GYmz|!; zt#+{pb1239eHXF}jWe7?DWhVnOce$D%7udAQDKMcMq(;erERal4KxL8itd1RIzb1Y zn)OVd+wFcXz(9AtLI)M>xit_KYQ3SPDtNbzU7*wPW4^Lw|6T>J zQ_z*X4txpPqX3|8@!XJ`t~w|w&-N{z+&&cN(@)Z_R_~2x?mgYCsezLKoMSxLluEb2 zaK|!ib{xFpIM`>CdZAvRY3=CZk!Y$-9jdvmjzbVK5d?o%BZR%=Q94Qaoczj8Y)c#I z+|vklI)??{e9u>BmwRNiMD}Be@ak-H|I7Z9*xmp=V{0_DT=ok@oT`9)K6ByDu~RZ{D*HGu9VuvRp123g^^vb~q-@lJzi|J;cf+<*3l6cr%ajBx{S z9A_1lKp=Bl+dZ@Rh^epz{q)+THY;QX*V|N5*|w8kvE^xRpf&d0L8v4x+KV)IjYie6ZB$uh1WnIj z?IP6fs%z~-gg>u_*_#~=gqG2}vkS{I-`_tp)|-7J{y?}tRmax@AR%+E>eSx66C4AM zJpH%qg`rE=n&G>74X`t{whum*a41ex>DXZ$HRqm2ajVZl_l8~z_Q?eqnb+TfMBA|~ zAF55J^~fF?np&ME%4NnOg8dT&&{-AZTRhnbkEuxR66_=Q+z*4pZDIe1y|;>s;|Ze$ z2iKrUfZzmocMA@|-8HzoTX2E|m*DOW6Wjs>cXxMp-zNWickjOLZ}(+)`-SPA8oH~i z>Z^0UI;VS*3b#!3Lmgp7;4nksOef-DiyZ05COa+HhpqCuYFBkvv3JTx)oXkF9ERqY zMx&P*NGFprM}#?Vi9ksU?d#YA+4O;-6qZe!_EWjjY{OSYtJfRXr|Cpv^u>nOmJA(% z2SVi|Jwzqjv;8Zaw3>>wcxM;}ABIedGSu2?n|Hoy_mqWYGC4u$!ntxM<968@N-<+i{Sv};GqTQ&^W>{9 zp;F6cL7DFR+u#UI>a|MRQe5B7$%I=?h4ciZ19t<_Lj(XB>tP&Ryz5bCCUlQ!^ZuSfuV(b$*nhj&Iz|xyj{_3)t zw_1O-wisOd4k?29<9`YEiODQINy?8@XFpz+amg2;U(_Hhb7LJx2~ zX>V@pv@pZ-oQl}<9OfK~Y@w<7zAQp*7wNuk=<#eO`8xgP0r$=f|E(h{j%K>%*L-q8 zD>GW3R3Vv+z0<_xR{3t2d+v_OdtPM=Yq|j|b$$A}I3-Vn7?58$Yafg+xCCS@d{UF($Z)1Ba1Q0} zulSm?cDd6~Zg$!-K=)%LGB>`D@Pr?e5n7Az^~dXyOBzZZ@kScSB&K6qc01HAW;nyc zQowGr@V@f0fSYXRag6=#+~E6MCfZlw{i_hn47qdzcMM{ZXN5*|YAs(ksBOFtFZbm6 zwDDr~m&!Do{?9y?MwhfLvd%MNGhu z;lNjORqeUk0d#*4+Z?agyisC9>#R!m!&MNq_~mmoH15=_3?u&tXK%-8Pa>azqZc5_ z_sBQWf6NK5;&KLv#rMP3s@2rbT_{U1bodf-V(SNUT;as97ee-20HqfzgxT2}gV`;2 zsWTiLF|uDGu6$$2n}bk3ZUf-dgX*ekT>!^}-&pr^av?D{V zZI{nJyF8ccUb};7M&J&vy%4_V-2vJhNBY32(>}J_u1xnXs$B*?QuqB&YlH(R0x~+` zkm=SbM#G6e-Zewn@CmQ+`hzPN3fs=*stFrk3fN35(un`%c+7!h<4hxTisBG9fJ1 zRGdZ17L{`4BPLdN73#Ic1rO`D*>aV&rSCAZl_fGqF5ecFaqjyEi+mN5SgiK&Yb*zI zrlX1T%V?YNt4be5x?Q)Y%_023HF8P0aW0%LT0^JJ*sgjpw^S;XPOOVt-YLbt&P~H8 zzm-p)Ep>AlC)L~#hY<7&_?m_19cvr0UYy*qjxB2zqYt9k_%MWRz``ZWQ}i713 z3)T7ay$1UtBH^iz`=3g5ZnANvds?cdu1OiO#FDVb=xUI;g~%JnAExtjgU99!d|Ms!ihQf{t5&2zzpO&I$RkGQS zk_OeVd!j!+&KcT!gBtzPK0}(!w5EffA?^6h-E6XS{p7nImlKy!=0b8M+^nmH#nD}E ziFIvlRzH-w8eY*dR;h`A{Aiwoq+=dN$>4r=Cn?&wK-KO-yk@oNih7HVAOEN;%<+~X zQ2lcMok^~_9x;VMiW-IXmv?CNV0Q!r&y(q}+>D5b6WFLq3b*Sb6!iP?Vu|RJFIKA) z9W3j>;O7;3Qa<}XeOtz1Oz4>Iw={w$sP1rLp!q_<^SW)e_ZY(NGbqh(TvC4X0-qjyM>4 z=+CA@hAIj6+^=1}4XM${h~SoO?fS5kgT*zocSPK$Q1J+zLnqDDlit%jOrKmyE^Ea$ z?eD^;+Q)Hh=8u22-_5-fS?~B6yBq!xp0kLhP*>S+#1)1O{r>5Du?i!)#jmL&Vcrv^ zg)2~pUqUFnV5Cfyh--`qoOWEscg&YS;RVS!-njj2&4Ed1OAiCc@qQtm+N^R+_=tE$ zsvzcSd40|T1iZIFrx$4wB9z!o-NBF5L3N!cN<2M@V7yAOoX3(OIn93vT&|2ENxX6} z)Bq+lnJ^~2sR^YlQIVAJlCK~V zCEk}ta8HlP{LGgG{~?awW>y;Qc~5J!t^S~bxlty9mcr1GuD~sLRjw2&#CFx1ccWiG zH*gTZDvtzFImchS@OoF zTQ_4(R1d)vLi?|;i6c0-zyoQ`{qZ|JsLxWSaAuQD1z)=UvtA^?L@fFbW9d@8D zH*M!j9Vt)7*^iUX2a>3C*4Lj|zlk5EHcnJI-FA|B5K%)^EFXWj$JX3vRB&p4aG-b6 zjW3>um`#K0&nA`uDO;^3o)F)Sx*CsQKD#T&s|YGi%N_}{U|YjVouY18FL3*JRQbtk zd%sV(`jB9w*HQ@q`iitE{|L3n0CJW-YaVr5fQol`0uOX7?wB&Q~u$2 z$spl`u+Y#GF+5ml;A>!G^Y8WpjsROx0h2lz$=jBb+O41P?^vh>N`T70V%O(rxjZyN99G))F~Ltg&i_k%^36ua@QEURXSv>;5=p zy*ROifevg6kwCOhXiOK{SVn-BlO;Yc_V|KNtA~C@q#Ee1aq20w0P{A((UdGAau)!m?z_u$!|$#@+|eHiL} zC`TUa@J}Z?RR>U0UNcGd?#zC|6bwf1oU2;hFmi2hUCyXz-fA$;CxidX;X4`i@bP;? zfvXNjTK{V?3bB<|Kg?$`=n{~;X-~xq=I^r;__WAF3B1dW%WiB%FbD1Ize+fT7*t7- zsf%ySAz^c-i!7`0!pl5V@2(@pdb*)L#Sy!;DTZwAU&U$u*P~!dmA_x#*(1x6`-@@8 zMiB;Ddw#%Jw(0IXkF#Tg?C<}A7tNymUyp<>{WjwP*%#8S9{euEXRTB=E45)6b`=$+ zGuSvVB>How+rR$0m(i!6Agz&sLehc^&(QWgqnDbr$XB4g8m_X15;SN4U6@o_1@-Uj zO>s=>`5QJ28%y6H=i1=lGHgnCTeW_`KU>3P2o!sZ*YEE`&DG*dNN03!6v#Bh3(CJI zHhF=GnJd$=&3>B>sx9z~wSznFsmZ`F7)FL4289z-3H%&b7)?m^ZS1f0jsG{oSh z+iL*gtx>NOG}H!kV6FWhz?EqaA-N)v^cPl-7e%jj{@Rj3zuJ8>)YE!EZ@ND--}C)B z6U7}(*IPqu1I-{xryFL7@4ROY{-D?RQ#z{&rPCWS8_RY3siCC270y{*{A$3^_>mcy zYt>7ktglN(Q`7Bcc9*~Z>rCtj0V>oaL0fQxAiOH?#_!*xfyVb^SX={DJ$-T543X1> zncK}traObCW8>536;a1Q#KDP6f?*J0%pw$O$$1`f(sU1={J6-Uty@9Z%SAY4#Z#)0 z>=Ro=fKl#SlPvV7lz_fmm!4s8t6AO$Ko4kq@SlS_beTr&CY(Gh zaN6NHXeTo_s1v;qQyr9`NlH1Me2lfph-o>vs=%9`$*ke6^==xPJ~V5HiKc6AJ9jvK zLEIA8{2A5Yme0a*Nl@O>F8#3oWDM58R@p67e~G^spo+8dNWEbFo7vL(fcNt9>+4u0W>?=bd^3~O0>1A5;aaU18Btyhb>7kW|@qwHq!zH-W{=oA7P1%!F{` zoYRCmcW;6(J(Z6zU@*>mcWh!AZuT4NV_xZW^vaND>c=|g1@yLL-BdxR36wsYuQ=xW zDT_WuS{j_DpQ$L1?PCO`rgO8fL=hg)d2P-C*kbEt%$K63RwV@-8 zXcr~H{-sH{R6hx8wKw;l=GN?>>~4*N%@!AQI#jmzo9CYzh39WAetE9jMiQG_Y?$Xi z^{H$_;d+EjT}P5Q!-HJz;3l2T{3mm{gYPN3nr^o6u7vfz;&2@n^!luTMn4u=Bz;8C;20-vnQ{n=9m(YNSr_jWad|VlKGAU6DXG z%LU>xkeKbMX4B&u#{WtzP(k^H`6~T4|45H#@#K>_(Ghg4--S)3A929;_#sut)gP&C zOS8IenZ|)g*Qy`zyo7$pD|q)_?wKB`xV&?>vxi$ z*LGe5MrX$g$S?)<=nPA9l^Pp%1m^NQRH5~)E-64v48J2e0Yl1X44Byz9Hy>uZ*`8g z5C^tALO6G5x@1wqnN+PrGpOE6gvVvB$!G&S?j4%u@fm8=C%NC>?nFjlLly(}T2Oyu z2bV4vdg;n)S|nK6;?>dV{D9b_sY=J&%E2FKZiT%@6?7BvacId8->Fo5hc+Q+aJ}8G zRJ3B%uIB82>VR=?(f^MLDYIagekhJkfQP*yAIFL|dhho%vM;i3ofsGTg_4etrhmyp zLy`mmJMS%+#sBE`D-MM-SVjPqs_P8uXwG_}2@qUnAFAVj-ycqx7ljPMW{Xli2kF@OazaOPsMif|xZX6CA-b*B2ia_)691*vJ)^A@ zNWw%{SZO&lJFI?o=J7*E-$;wS7(*6&7hNyUZ*|rq3?B|~{%x{~b2RNZ(Tt5ZphR^N zM=IH5w+_k8&E3Gwpj^5WV0MfOb%M5o2rYhi*;l=a+qFR#{~TpuSoR@9vV)CZtyR!3 z{AY+iq6sAa0`KLQP~vRFPTn`bk}eDY7Hq~3w|jAWV93K$Y2pX-m+1-N@5j%^vISS> z@0Cu=pk{n{@6ANH$eX(Rg>8@1t&x=hB)gZ<0}PDCnLs`pT)RU&*_LK?yXmH#0BrB< z77bslRX%@5FzA;jYO00PjDAjJ%zp@=U$|eq8K(rO#(3+G)3R8q85=_FID)|F)~Mnr zG>=cEEdiEFZqMo%RZVM$4XRxB)I+d(UQVSf_R+PSSkc{TUZQV}?+Ke(7R%+#j)&*a z84exQ@?K;^^}}Rag5X*HXNeBP*|9Hk2jR9tZv#NYl>>l3n(1z6pKTz1f9yqi?kmNt zT9I0FdqslRgMz+=M+uL3s}QhtQYYl0G+@aYUM)h-2%vOsqO2`NBE~k`qd%79UTH$wODzPw#t_yaO?;Bl+F+Rvwaji?DmN5Ym5nXz25C}s696i zv=~bOCt?fjHM^*D7XL%K=v17Y7zs9uD04R^qIVVCviObi;E!{rubE- zb%r4?===XGa8-x$gL7G5v;2G(nsy%l?}F>zx`N{C8MT6>P2o=iBO8BIG-|0MrV!vux6JDKU=a=~h2y>8~tp+Gcl~b%g&fVY(?U@rQa(ra;Jcl&g z#j3KiMlX)Wih=Yy{>aM4AKb@%yk}Q>Vq`htK_%z}z7f9K#@s|Nx5)&PL83`K*J%oW{&r3ukU;^RO zueqG|R?u*wMC>jgxmLVR2QrAm0`%Pw=bjrw4aAYye~z!@IDni!gfd7~}w*I9J! z-*>RQ(Iqquu}1Xfr}c{!HZ9S`moA*#{w!En;j;#j>aTZrQ7uo%LYF4|ezl`#$dPc4A%AvntNZg1&*&Mg1pK?DeN zRPIui>4Q5ihg1o6S+|y6wh)?}Wv9?%+nzC1ht>C%c;$6QNa`CUuD)^amt1Mw)_q}G zrAzd+M+sAfL*advS#yG}wbV-g>^Q^kL8yckTNIfQ0?ZmCUHS<_?sae(;*M|znv0o% z_=m~QjEyiUO#$-+0Z3Z~46U-~VG~rFQJnLTilMXJfMvbc}|8dQm5q5aJ(+&=B zW_M#F52+?l(VQB9iVhsj`NM)rGu1A`@u?*Gq4@OuPW9l5ERR}zH3WK{ShwKZ6)XH=0MB8Fjsdl{u zLRe7XW6w}?ZmkiC$anxFXb5I3e{1-PXY@l-b5~JoiyO2O;nt3@jW0lnLB(#^0gnmR z+?k!(=S!|_*KuxS(gd}|H3>>nX?ihgnc}6ChHF-cy~k3sy5w-{`_kYrVfdcQ_~!*f z7YAAek-nEN(%x0U#wzZ~4cOf&#yoh`J^U2b}CA73+)UFMn+E z1}E2AG_?LSRtviousq7X#O#ZfnI9Ae*2pi|&)OmTmEiAknF4btae?7)^H8BYvB8T7@cuT4vF4RLARIsWNJMsQU(#bjV(~qXd_zcRc8Z! z2UPQz>k+hey9X|u4|dRIGsW3Z5`>j)M-n)*BdibW{N~3Ok@lUgzdu~mL0;zuwMq;s z*-HYg5ucyo80!uFy)#jB8Gvdgoxf-q;LZEOR%g31E?5VxEaVfl*p_#_9Kp*T>4_dW zp{>Wk{am_%U0GR;=jiLwd(X3jF`(*NR$YyS=B8GBw~9s6%r-=DX?Re8&nHYVc59Bj zUdSSn8cGnK!19&+KsK}cD3aic*Q%<=3vKi^B*sf0%cE^JBr3#zD+nGolhCi6%hh{H zis<)hK(Us~m7BQzUN&3fQ*dVAwk2`Pdi|G0m}E+%e0%{MB*U}e9xI;SfH}XFSRhWE zkV?kBj}#-ziGB8wdRL?e|Z?u{;cPBetO;6;1c%9P1t}neZ zg?*IBV3%kY#Gy-%X<0P`s@pP=^6LSrfAi88h+M%ZPm27W2jYa=6|av#{>Bz39!x5k zsmDcqY&lMt8M}I#mYC>MId~!m+>Sw|i9d#o#xa%rZ-biUjHo^C;ba6gV2Q*`2 zJ+-Bv>U9}JFy)Qb%QZY&T=x0g1{=Xrz=KEXzB=*!imxT&;YX0wnU!|aa*mZtxaK#vLoF*o$}B96#Pbii+_@FN-)L0yhN@)n?b&& ziZNKaP4E@QnCDiMmuo73eDZYrrlW9Ge3Sm@{!`UUsqr_IY)S?XH`QB!1y8(fJZo4{z&FtiiA3y>U3m=*1Lp#?iH>5$)jCi6XF%%X036L zfC^##cvSSr2p`Q6`uB->X7C9o{d!yUPeC{5OZOK%JAvp5Z-_sjKNWNzmK(I4b1Z9R;UGU7ByuF$h63H+?^GOCbF|=y|uG z+%fuZebTRZio07Qobk5}y(=+LD(-H-2RDO;49`_BNxGu229>0&U3{#8og zkRE6Zb+uNdl80G)_+5~8TQ-t_Od<@x#8iS$%M>MNeA$9J+xfoFi=oQ4c%n7a_JFAt zu`Xn7a}ACOdOT5s7@vG2KaUZLt@-QNwR*wBH3x3UVL`0jFy~aFtc^KgIA6<{S%Npm zM|AA?;{Tj?8_=pcp@~{qb`gNz_30sPKDV#HnDSM5`5-EAGESsW5Dn~3s?b8r8Cx@g zeMbPpkg0-rhT>m$@2qeHcLV<3rp+0C0R1`B82KiMn>Xa3 z*Io}R=tpMzbJj1|1Y~L1vqS^rH)?MQczhs{SgjNVA#GW=PlGOIcCx0P1q2$Vu5v>ZDw4tN>&|XULLEe zk|fC5O+KOBa9aZ1nxg8uuM?qs zdb)fqB$y%&zhyA-WiBu%#P6W}Sox_CN1$@>^zFZL8{%GTjXy~x1C_QyR_%}P$s`az z^7p}GO?EQ1EH{$zm1{Zv!fOU|)<9j;gOM@%15q$zH;ucP;TwTaT8)@s=>NRZsitN~^&iayGv3@a+ zO?}^J?2gS|)nIZ6cShaL1R{%--j&@z@39+K# z`lDv8y7mptKkjz3W0t>r<5(c1G&dr9lq{(kX5=)IXoo;#ZJu7_7GGp^bKtbB?U8-N zdki#tC%-TJTjq#kl}Qb3RjRLrsohQAvPu|S=!s5WiF9*ynwSC3Ifdc*PVs{*=c$4E zXz$U(Uvqv2+7tYtPfm={vmA~u5=1ZuwL12gjE|zPcWR9HWJ!_wBJq;G29A@I`i2>HssOk99lsf$UQH$10_GKADTTq6D++N zV9a27$UjMw0yGw2u`3S9N}Kn=XY=D{Y7SLRjnJGeF0``kksb4Be)wnv;LWw_)9&lv z>~8bp_lUAfcX$DD;*5-~Pz_1KAipMY)Qzovfj@_p=|X2`TvOAFXTw-RZbq(<45Mj_ zd7E<(eUp4ek7r*vdl0)GtyPcQoj(cnL6iHu?~LhI0v+hzOW|fb$&pj&Di)smwnxvl z_rsH;5dK`PwsPulzk7G(%$~qn*RtQJaHj?Z zABDQn;ezBLmciOyErzpgvmEgG6p{0G6CsWJmK&CQ*8lk9+>19MAf4`_?{?LoNqS8# z)oPfQpFI-ZlYyX!!t0wl19dIZRXsoI;&B~!wTHbUQU_L-VYJwPh2 z;`-3}+e0&axG3f19H_J1+m>3S>{B@Vhhfl2q;Q6n z^(flPTzlaXM~5-$Q6~*W()s-uXOtJmcl>Aqp}im}44@gBT$lb&3JU@C+K?lD{w^-XGja0;`Qn6QJ>!CGmesRD-Cu;XE4tm=Kr1>ABF<(on=HPSlj(B>BosyA zikz-0MXe>Y7wyrFkzl|d^Z5H(c)xG(ZAR*X z5YK-5xeZak_yAX67zot*+TxGD3}t9jY%AS@Rllwj}-#)6D`Lb zP8PW}8Y%arC!YJT{PQ))OMgn`o-ry%Y&Bp9oCHXa8T?4J;8eWt-&~_-SS3|3A7X+Q-G?6C$HW2+ zeUsXL{osp+_vteZ3Wr+q(7-#d!(vh& z-2~ng$#$uGdM?5QSUvW;4f{K4`qO4scvd5%C_bi!PCd8!1^;!W-ab}eM1QVpI28+F zl_bF`0fg6i&JBA)D+wYqaz?BA&p6C&-=t$z7)Ve-9C)rDP zojE>cDa>UIImmo7sJ4<3VSAsVAmRv?9gLGTWeFUfpZ+kM7yA0*az5fN72N8D#Aa+cv1#H(vEPt>tZeK(=j*AO8B#U&*aA+(5%| zMyJwLIYM)P_(*t%;1e<<{gU9csx;#Z^d%;@ht$VBjTKo(>7a?s+5CjlP2Yh_F*3Rg1JVfAUvU$76Jz1k`rY`Z z^1{mso685I=?v7)ulYw`y-&<0`|-Z6aLY5fX%=`h$G_|}joF(;bAcIR=(bD2PP#Jf zT|`-mpH?%BSni^9M}%)ZzN3&y(W)oMAjSD2c@seMO1jP<5dUKF zptsd-tDE$40PKlX6eYdJu@>sS3g{*Il)tuVZoVfAJd%v`SsUqe!JqXl7?D(`;zn3HnD9S6_RA^PC>%) zWnSel*rTxmIXwPy$^P2sRW!9Zb~vDSm?ajxU6f}LG?8*@wwS+^ICWTr18$baZE_d8 zFj>g9(J}v``8OWSPZ(RrSn{Bi1ShlD>QD!~Y9e7I;$WnBsA-_OWI_kqT7fQUG{nls zadvi$usZ=}`}M);Bal?m-5(m}UHtG>&G$*_A=T?cS?y9=kzFfJo*H2OzMq~2TePPh zJ0C9des-VU{!AxfN>Z9~UH3>gVY*$8iFwRhxa53oLh7jf;9T2hrtEtEsLf(sC$B~A zlU9meITcG$Ie&c#j!d%*^zr`8F)Fd*b#42z?~4C=+r&%u0}V^AW#&jiZm@AIANh9L zO>KYP8%+or|7iV; zePa$Y!7;glh@U(Ek}XeID>+q71+250Uw~OIIGDz7I5%{E)sP0wUo!pXowvV8JmLQx z(Pj_31-xy7{>peor@mv~p4dyF-ldeVHNVA`l~D9IpxK{(ta>X6Jf7vl*i|3r&D8V7 z>mgz9S5N=f+u)~fr@I2L_%8>xv~DD=HnlLeYv9m=Nxdh&*a6@6sVB5HXwW5?aqg;b zZxC-#c<&K+?e$)?t+15a^Of|G-VFEw>#~>wS2Jfi#~LxOLSBoQHtL`|vk`yLZZP{$|2a`1l;VPr z)rjTOO`Pstv?$+->1{*g&i7bua`VbQhZqkYJ`^U$8jgw$9x~NfyDAwe1|;x+K1Q*8 z{nO}4-%Xi7vo;rD&F)W_kuL&>s2j@L)$`gbZq;K*04 zVEku&m}GdU$cC{_zp=`!!|42z*EGtU=tcuVerLSe9r#Xmn*D%(LOat~o?_Z;7iNCV zuCKK!pajC_+4!gE*|3oPP?B8Pj`L-#@giz?DYhJ451BiPu-rDIH8uqw+ zB`lkGI>mG&jkng51x2$xf;M7F_Y|I zO?~bI5_>KQV|9A|)j)s|D!Z^gXHE5)j?Z!N*NN}dF@#_ze^uIL>tE*~iE&FUM}{Z( zHRT-yoA>Lga0>?tt&f#g4S;UEaB))#LlR8*GUKF|3}~KU#98FW*=lH|wB+-tGTRsU zi9!yvtLvLVMHOVJk5F;@Neb=e1&<-7*1?Om2@F=wuzMp0gsCwU;;E=YN2p!sa+&g9 zB}O3DxfD1cLh!o~^(R*)XerQzv6&P&bi@H8gcYUfLq6cvsG7`PY=97YfYcmm*7}r5 zd{47RVVY#Ox@y_n6k`k;hRpNh6~Ueh<{)qTzI)&=XY<6Mf9`rWS?E(NV{>W?k&N7h zyd1sj16m^^6YzY6p70N$mXJG)!+k}%yKuSewC=Ty(O!b>EP1~Aiuww1wmNf;AkR8X zf%1g2Bm0DL%Xf{NwI6+cNSKUV1DFr$5wRz{%>1h`L*JYp3DQT#{*G3#XD(mxVAoKJ z+sc@#{tp#WQtjfK{o>kvLnt$BIASye5>S%xAt4`qKnJaTN}@QD(2;|5G;j)oIDR-G z%PM1;Ms6I5?NMVT4%$*7VlSTh6<#XQt`9(wuW5o?^9pr3;UqgJ-9=&E2**1E`DU5Z zR@xM}izCJjrq3NKN)k?wem@N6cua{_Z<2n#NQ-918s{W?$XzekEDY~vZu z%Y$g@ea73F2Nb3PI&#+unR4_-ALG#l*G6}&3I^C z3)<)Vdm4M=jV$d2Gs^b_*RkTOGA*c>UbyRHCy)_v(RPHOY%P!vouugtoxRV|3%ECC zQ)CarpnPHX{hm$^GuxcHwL3Jkx<3#Ui+!!_;QAPXx$kOrp*;m)<+)!Xdb}0T90<@o zVH2(#gn`%?jF?Hb@Dux~1I6R_RcRu~e|?E7T@6`JM0N_%dNYd-nJMXhGEbZ0O!o(a9Vu65euT;*Nys*hVU5bT zc0Vo+bIR`779=#xCYw5MBTPh`EF@rKGTBqXn1Y{N6=z`+D~v~Zzjiv7OrRsdEa;cY z+f!P}hTTF1KU>7GCcfhjc!vUp8+X4)`l#l~okm4bjuBP3cGG*EZG+mY?5#h3ne{1G zdq`*T%@%?x9&;w-)3mR`U+JMo6n&EXJ03KGWETPPu@nkBMKp&cCB3ZnJJ589&}%$F z)Jvl_P7n2C0`Vb$ERB}k7QR9<`hvL`2!De5f3|FSroo;5px{!jbeCGF3NGu^;(Y_? zEM%qP?-Ut#!pIMiz8E`kx3Tm6i3f*gr_A>YQ8Bgc^M0#Dtzl{^aTo}%9$MzVW@pz| z*InlgL;%#fvAQ}!Z@Ur|)AQ<&r4onx{KUu7{>4)O?{$$~himyy>C39Y76Oa^m8sjM zh>L)p#~rG)Rc?`OKrS0{v`r0!oXKB#G7R{V32QT2#w^u)a^A`FQSrfte$@NLgCiJf zz;xoFs1>N<=Pk?j?Q2Rud*ywWg<&`#3LWtMgnf_x1LT@+keF2cxLCJ>%%B1CxK zLU+#Q2WfRoANV-i{Ydu_@ss4o#|CsQZU$j8m%j|H=7E405&$6IAAJ-bIQoK>2<5UXx!%KK!3rfZ$9x zGVR5K^gYKAruB3|#Y+p(>NY`?t{UNGO!ynDHtK=hDQH0JbKwJ+lmy>n4s4kS2F?Dh zq3j-hbdD3h4q3OT?8R!rP4{ts4)FP2THXOjjmUAmHt9p3q0mO6y5{-9$Ji8j>WVw; zFm~19B^7w$sab}Gq22#R!)<)?;KB7eNBe%j`mPN^?Qufs74fs&Gwf~p^E)v}-{9^Z zmj&9jS>MZQ7YSRBxOYinSmjivD{RO%muR&*MC~{?+TEH>yl*pRyz` z)P&(JVFcKJxWhMW1_<%Us4t%bjtRTgJLr~nU&&w-j(1;7aD6UDOSVrTD*5w2-L%}w z5v54HewFivX%B8l6N5DI4Y~G#S68%t3`zE67*zsfw$b9qrVE-ToN>vz{Xz0eriMjo zOz+Stfc|oAWHOXULD+hhOXErZTZeMDPj<>04|HUs7UL?bqTKDVO}n^Gn6x^}^zFmX zp|Vosds|o#u9xX^iBo*t2(=sz@_``DvK*!Gp5`G1mP=_*$u zGXX41Yh34ePh~%=iw;rSxALYb#+XY7lS`dAA}vf^YM5M(beyVWmJ$ap8DK{RsE6qr z0y1TdfLu$L4z}ISVs{F!f%>sHpJB4XVJv|6{B6D2zl>dkWvM)iCj%e9AI+VA^nZFT zxo1^Q#kafm{E3%3UKdj{Q8ICpc%m>QIQ<&G1efU8hLuw}+VC{Xo?E`C6DmW#PN)nn zH1zi8H5GEQ^=L%Ow#VwqhMZR(p>msG&{HQmiXe6Yu;eyx@!ltd087b{d($!7gG0>x z<>rq{$5)O~)d$brJHO>(N%y;gkoNZW<_=oW06&H(0SR4livq=hI+aL^jzl7x6>s~W z1zktnpn^7OgSvBqE7lfcEm!8;Jxc@ESV{wYv8_7qO zyk?ZoAMP>e0Ma&2qmnYHSzj+voIeEP><-CV_=GYjluJc~ok^GIi4!gG{@-X1k_H$( zcCu_Sza;U-2jcLDQS+~5B8)_^F-3|FfcJ4jy2$l+gCeX?*-d6C3e-#diGT(1IVd)OWlD*|RMenivO z3s+gKx;Jg+Yzy1`XObp0z^73|tMj9CWv*&^o(Q<3BstCR0YgL#FYR9zgg?Q}M4!9{ zZLUZKdCHUt_{mIOirdTC?{;)qprthU@#Dd4Uewt#dT~iWByB%<-kW@e3s{$HB33Av z9Jt)do4dJ0N5)Q6IAMZiz}aTuQPvv5sVLAXs1!fO%oMuspCv$?`r^O&S73@xE@g*K zcpF>9u}^?8eQM?hKjGz<0B(7W5k0m0iZPrCs&hMn%)&C8 zN%GuQpgXmg+FF4&t|J;tO7$sHN+gIjqCsNiuf<9`TLoT%W}Bm!VmTeY^|_R(O~GsB zvJ2aWN_nO3EG3`&W8yeWoV!lK$BHtONpmi0;|AK;6N^8k%h4Xs7?aGjxrU3TFS-dM zUgGH)El+z1(z4sY`v@j{O9##Y<;AaitxR1TpSnI>T7jO0kP;N+0b)htgahP?1L0_3~^z=YK}TSA%bfXd?IwY$q@ z#Fh#;MRB6tU5vY=b3Q z_ZMwqygnRIt!Kimde%*Ej%kYA6kG6{>)o}XQ&CLQqo9G%sVfIBU~&_( zf_&RHGlBVNxP=Db24kqrHiQ-S(~qie0o^E6R|?`k=Z9i@+`@lekQPky_kZOG#GHTT z&KG*@4#I{229nXFk_Ks{q-+>jTkdu#oe{EX=xM;GxcwpdrgREzR&5!z?w3@_0 z3NMB0p}+V84gNd2cUndg^htJU=9h(Nehs$O&O8QR5Nmgh>>?j)`j7y($d&Iby#zO#qNm?>&d};zJ#Ku=N~>d~UR?Q&{KL{r+2#*m%Xp)HwDp2>2qKk* zeqR2@2oZ-J5{T%wSdfnMa!10!G&@#mb;!E`Xph|oWP4B-c>Zl4$bPvk+&KTKE&h8gZZaS09h~(}R5?k0VJ3E5NUq86?a!189|4+49FdGYWI7etyRhpbsf{|0|}0;kko z|34kp?&}s+&&F9mOCyH=-O3wPapYHPJ7Bt?h(b*SpYP4nuO0M10AGbe&e@jje zo6h$%+4Nd!U!5FTVu;V-j5tm_Q+%(|_N8znEOyTK)_a9!6{GX$OMqG40MF{H2f zpd&0qCSY*mlijn>+4d(!oA3)JOF6lkgNHg74#h^F*jcW|nmo@*t8Ei3B=0Q#cW>z; zow|3eUi;p-fBYVw_p);6rK}h)9bt_E@}>Nb6De&YxsTtk1p@xim#3Mw0UKmze0phzGgf4hEP@r%DU@*Y@-W#;#wI+f$*87d2(bR4@^-faS(QELR%v zm5XND=&R{Nl3lH>f5lo-#FZUH$GSXC!=D=y^$ z5}oUvFIq!U-y!R$icQ}Zl9)~2e;_8LeMnvQ3lDnM(oR~7UzKnN9o%@91~6L0p<>qe zPKR5SHXZB0@*3N1tDc$_Mrc|-$B4l1cdKM0!YJsp^D!&5bGKVRNqq72x%0G!EIWvY z;ec=J);wrHDwNJTa@>_!<)>@pBUjZC%D1k;vH33o_u?Qd_&qJ#X<9%L+AANIjd*fD z@<^^IEASAwU*$1Q0ba=5AFZiW->i&M6kuvvJjNpZQO39WPoD}tevnjm<)KxgQEQF#h*P5F&#KSe}Dl=R)4h78F*=)K~o%|7u?=d9&KiS5>1&IhT}#Sh~= zLMSA+sm;k0qOQuZ@pdmCq_PW|` ziw!ki@$dOp((Dp!mSm2sKi01U8gmRw6q}}Lrg;CWq_J<>dkv>We{%Fx z^|5@NsWAdpaM}oG`Q1AtA}2iMqG2p>v_9f6O;6RE$hwXZ#dfMo#OCtlBD!B7Mf~!W zD|E(+EccDVy%EDf7XXbbJSu)<%#sSmz^1s+qC~|}SUL}Mc5Js*U{zk-PgYh{pvYYH zJT{cY!wtUG#bR@;6yY4k2%oCd6!Z6DIhSuz3y-8Xu3tclT*utQ>AL-Do4pdpxH55y*J*xG`2Rv9hJET z2GvG4i8kTM=z3T9`>^s##21&(LuhehI^Q+zA+Yl!PWyF5S8#E7z*_Vg&_^03kq%%UxQ2l63R#`OAwKn9fE zL<2Zx6XeMAsQA4>9aYnhbe=$XX^FO95Gv8UX>DkXv#BJ`9Z6(Yi1gJ(n=+669WA)r zU)f_{Q$+YCw96u83xgZ=Y`9P8#ul9fPdl4l7Z7h4=0~E8dO6wCKI(Y=*f6Pr!_}71&f(Ia+!kG~<(EvPr|?6j@BS4yRf77s_;ayxiMn`ir7gDstwZ}J@TSy`vg?A#NlP-@t>-I z)a)(E$vW<;tZrh`qd($eHg3DEk36lZEPe~Ccn|}eoCdElz!30XopmMQCo9#DO|!*E zeKd?^ipMfz!oBN+)sEdf?Do~YwKWLp*yF2f8*_w{!Jb|NQE7Qp|8pVvXx!YrgI{Fk zSeRc?{i1eHOm26akf=UE4hcTet2n9Bps{1XY3v#q)BA$2W)$l*Ny!gQeKTOs^q{nL zfjr3xGL@I~u2qZt$S?*ivKu)trL~P%i8Uci@I#NH9s&nC%EocAaHbDTWcbN5WU!3! z8V1^?BgTIrIfT5cO`+xqY?p5w&&F0eoFFK@UBD*_C~=V$<#a7?oR#rptpYDuKz zxg63K=B}6BodWZueOAVQ-AyX4*5}YfmyMZxy|Z2;Z(Eo|~nXL!~jlADV8C zEBmsuS2fC}?<{6UtUinGM~)b;^KjuKN)LVPp#A5iw=tX<^dHivH+^yz85)@!j3Rhf zBZrcPD1|)GcVV!)X>vKWnZ?Kjg|Za-%^o|>g=W&;QbDpI~0V$ z+Out_46LC|cMoR;B_4KJBv6g4_{bcE-$%Eu?1!Iajp=IcQDC+zGNs5FSLA&quEb;% zwTN%r|CTPeh<r?xogg@kD_ztS~(XZl52LlP6|vq82OBMJ)(m+iNiwM zC^%x~I?b4$O!Za4CQac;m2$}Y)M(^SMMIrM9?lVS$xN+j`E1rqsa^ zUUU2BjGB0*t4itl#t)9Y42_Jw6;M{(-FMho81bR{ZwidZy5(4C{RPu-2b%!1z$By*Eshu&^C=NS;$xL^CZ(K%&DCvNk)r(l$K6C-h|FkZemBtY#3wXTdJY;Lzkcq4i* z!>IT;+i>3vLnbzacvsiS5;yvNF8b~??XORh3zbwwlpEkoVZjuB&~XSv?#t@ ztZO{-Ls>U>;d-$lb+@{}M&2NU;rAx(q1q0aXp7<@;pga1fp7%__~(X=1g1jmu|&{* z2!Es!chUGwSjOY8y_zk?ilKzrXgM~%UIB%ATnNuXbaA(;o{s;GP`2<$hV;C+oK$kO z6sfZMk5>e7+^X97b>}WP1E%ct@qcu{(fI70(jJRDb`V0qo|G8!Sq9P}AmDd(IjjV6 zupxYCf=l=Nhd9wB zWUH>|FA<0)KFg{_RVE0zs|}Ucb?>Ot#!wfitDS4|Rpr)voUd0eq0FZ+45K9V`H4yav8Jp)pu^c^ELrSjQMCL@9; zMf^Pt%ENH@M7of(+Cmi@r<1sA*wCx^|QvMS73YYIHOH(krUAu?BTd` zg-rw_xY%d)MDp-R7nZGx*Tks1+dYSSxXu5u-;}0BhPur;D-yhMxZfx0yD9=lDeV3pwzsg>cBCO*V+E;UlB^V{a;2m!U&zPx-IOsQ_9$Vx~l`Ddo*9Zb-ZnT}ng zsEE#Cq>-M;++0Yh!o5iArdopUl(IxiVVcH*iB3kP%pU78!f2d^S@=|NQ)zt6dZinh zm7ACmi4AGu!4dngW%ejn3%$$WG~4b2{6trBnMNN(4OL&LJZjh1t-r2qvvVXJxm2_) zk!wqI8evBBXrpF-h-c{MZ#U`+tdP05t%(}j!l0Sl;|j*X!&9C5ozOBJuAAJA0cUG<8I;U@bMd@sXr z#Iy?B8yQ!$9mRRDO6HHbOIT9II??>DD^iSD7e4UrcqLY&vtBi+CM;8}mOmy94-VZI zKA&+yO?oL1j{HnfMY28x@)DlPtg^A$_?dyB$s4W1+HnPet%`>5D#B8sVE;mdWKa9-gCRX4dt?sPHU_3r6O z)Dc+fR6BtqHhbz(ux+|S+`d287^ke*8yr^BZ1g4?mJ@)+jtEQW2EtG#XxP?>>A`rR z)Q7-VQo8~ItA{N1y>n>#K$w64*vby+=hqA~S=OVq^?DOyGNpGLe+iMfg`{#AA4{MS56*bf=(&ct z0VQ^3pXAsiRLhK(h*k4p&(xxo5{v)o$s9ER=D_SObXGYpb*~|AIu47S4htI``DRwL zI79{1Yye^gDbiJN^%q|pSDCd`hk@_!`jnFHYO(^iey<8-fRW1F&_xG}w5@K^ebM{r z`j_)8RHW3$;SOqrH;A@nw98A@zg%<(D5Tqt=t8pASk|_TFEk^Q1lR4ad;yy&EnClZ zYo;ArHXX98jr^q{3ayjn!eNLG;`;)+VPkoq+-!%e-sL+J|jV@%BZ4m?FmRuf6?6Lv^pk!f7B>Rf%s_JlMH zH4U#oTh@#hqEl?&5vykWmgz^?n-7k@e+e2**O5r>`8!wtEz*1yb2o-LpW%q{;-{3> zKWm8L4MT4ZE_bA=LU;o?^`9QuOB=D{_E_!%{d4f1%AAO5_t zDSWLGo0F&?x=eP?`AF`GrA?h_+Zx*|SV8FsQAi4#Q^{f7&%?>|?eRms@Iqv+{+KZt z_Hq4{cJ-kud#%^q#>1KZ!gR%sdB&sLLU4~Cn#;8TfSb^0IL68ZuRP9oq`c64kYz<< zb6?8?QZ=QDqAv*lCKyXvpAwGi za1clk@JWTYujA5O;T)Ece|}De%YND1q>o6{&EFDi$^6`bKY!>ydYW?%S;~C(#XNZZ zQLt&64ON0My5!x0uR{&?QT08PpV?_Jnl(6;u1Dqh2EQNSvmE6(J2P#X4t@^O=73zS zrl`(#N-Drn;I35%I9>CYo-1=C=!h1X8pB13ML$gCC)Vd!$9#pVnO{pA_f)%&r5)yo z+Dve5dey3uJ;|3vpsvwxAXv-9oJoE~=pMMgk~PUb6n!qWg{MFA4$*2_U4K|E7b6YR z%DCD>DAY+f8Eu%fzkelp!|%J&yj!pbeWXijW`5Aa_S+EpMCsHmTyn9h`IhMUNl=8- z!Bh2>nfp+OP_0rkuiKI4myV=rF>g=J7^4}yB*SrGT8OfUwVBRGK`xw4SAsnz!Hp%R zle$bkOl>HZFFo5cbO_i6wAs|bTJjIX5Zr?y<4Qw#ZgxV=O|rcqN17+_&rBoPdZ-$LmZ^V^n=CKyj{# zxtn~OVv9w5Pm8yKi*R40iA*iD_3(YSN?FDrZokwak+xtsqD3(l_&54CHyR@{2f?p1 zbBq3U&n(YQID%2~!wQjOx_7in4KNSYJ<(N9A$G+_8n2Og_SCWyPu;?%wO-lf0?U0EnenDUG(SMBh)$I#D{DYI;Ddr~mpWTp70;5()QcjD5}2 zWTtO3!@yc?Zr#6X$BmT+DBX{z_}R;jMs`+|8)cc^b`EQ(EtX4Ta<^oG15uq>!hAm7 zF%BqOi6thB%yedNLH(iRrZQzm{+SWczZV!+YB`$5>H8Os$1UOe;&amS!3mRCqJQ6txc-0RmLvSbJ+PxCpg>rrzolk(~MuLm3XQKCX>5}&zOco%n8mq!5Qp-jI~%- z8XFJ11BdEaRGg%btUD8ruNWf|~ zp?I86o)vX)>{tEPER0~)oVG_g-_L>zE{pAqAlh-aAg{M#G{+T@j|>a6bxO4p z=T8#52@i1fm&^IrH8DxvG;sB;avYpku5~yb49?ir$zZhYK0fJfP<3hg2!^d(4=>S2 zPVeW_Rf6*t{a14M8yx-LC6;)exQ;9OtYKiC zy4DOJNY>cp`8o|Ab;rnIsH#bwKD-UJ<=pf!E}~92@7F;(q_+m{niRXSc{OCKs?Z1x zTLFP~Z|OuOTh=l5Boj<2slUXxnLaK*8lv&gR-h9b7vMq((3PFFbn2(s-$GU|UB!%u zKbgfem9@HY%UJ2nrWI5(x$#sU;dSEp?X-vcjvYo)NBaHsxJRFA6b@8)+FTxEd*_@a z+?UYF*29S>3&Hj1U$ap}f83yl;s1b_`YwREk1OuSTrZwzWX_`bU0zrwNKV+Tln>Ec))s$<2cSJZ90DlW9%Evf)v~mZP@RFuzYe7)3^Q?tN+I zB0pCb&b?$iMo#gSDXr z&bzp30l9~MJmnG_w)fms@-OZgGOcn9)FPm(=}emEiHg*5 ze37S?g6{ZtZY<0<&-`-y6R_(WF~UE4r%J_g%#ov3Q~kgJY<{`o5klRluH%bYhda3U zW!<($(kIe`L%f%RcI2A8JT}6m1Gky>kB#^s*aI159!2i&IHp!BC32Y~d&YEoNzw7g z3#W_PZ6+Q`l0o0cXrnQ9-~ybgCLS<%WT*GnCeJ0Vg1)+?^snqQ$@m%Z=ps_L>OpkZ zDOZ&4f3g42@(}8)_^O!?DrLkfs-5Dj4n%v{zD>lwYp#8oW}}O19BOkQG!){4JK{L* z8-y7S{8O@$3&>_gkjk_*v_ES%eB!`O0>| z!Wu1c_srs&!;HD@v~&=m;+~v*}_`&^0V@a>J3n0)Gk%E^}@>1m`^`lu5KnuPz0WE0Bx)`RM zkBR*l#)k4TK(s55=qakzHSuxtC zhfgGLWU!CI{<2}tKCs0KPSeB-Y%RtI*Ld?lL)nYlkY%R2c>mc#44Bn)&58q+sR`y zklWxz6C})=X{Arb{@9^WK3}#q$lS}@XHmc5B_xcT`W|FpdB4OKvKqxpqi8Y{o8N#R zQrIzX(=b&GOHkPRvd$cAryfB6jhgrJ-fxk*fiqIX1}$V=~w3%8_CQcOGsh8U1sc}jlYX7A|R;l^52Xe%n* zD=aK`28DfF_Aqg>(xOaW$|oW)c)M|ex=KZoHV!iJK-s}=3S$(`d}m{A^X<>=5f@j} z0^feGQX!eMVr$1^XY1$t>8K!FL>JAq>D#z8Az&CefcwuVCVxK04FPWi&1VD7as>@K z=V58+JqB+LKCg4N?)l$y<<&UI!f8@gFyd+pm=6(8kM+j7Zdajz}d&M`0dRf;Y?-=Ws5p!BXc zgA;f9jE?XD{o(9x_3z9-q$)gf|L+a(EdAd3Cj4tZ$wH|LcTp16$5qZDC?JZwjkyA9 z4)0G?rMp5B*Z+k@03=;S+0Z8;n315dU*X&!dTC&JZjYJrADT&oU24*l2^%Kh99P?weki}hN{ zLA`Iy7tbj6kyhV9z3im@2v@Qq9jmj{bMHoeg4=AfrSU*ovIm5R3RLS)nqyvEk=DVK zN&{%VZzvkgZWCnN$Xy2`T;-GSe$(V>>(8umUk~NITt`*a=9Q7&hD=}6st z^Nt1tvRHNTKF+*s;G^!@9oUFj3%IGNd@2ShQNN{!sn04on#$Zi>P)h7%-r@!h8@_h zy0qPztLa;-o=FlnJuh7LfNo^C_cMtTM-qeto;3V5wkK~rw<*2*^v`{ey-)+iec%o4 zQ5aa3%-OCvbid962b=%XG>eZB65w3ZFokIl8r05brSX1_8NM>LhRP8U*rXcro5p7v z`@tWsE@Sdz_N7P8$V?PHy59=P8U{B6SqiMjh1C@K|F{7XWhBvF63e}MnsSESUUjP{32%VBKc^D4GAd}yQe+8iN_a3IJV}UuH%(wsD%zr?!l8)vsDj9Y#dE5v zoHOM!MoQ4s4`9#$?2t`@6CpA{mkpXXyfD-n!}}q9foE@GX1pfd$FPPjujcvoey~!f zuB%DY@EP&Yy{+MEMt$81rGD_t7{u7WzZyx=G{KEGty~sVmi@=B%@pq(y#e3bz zKo&F(WLHQwE|HQ{0T9ScoTQ-tDNg&31$HEg6m0%wt$+;deeeH>?Ed2u{{!^1o@p``CV@$ydS6yaX6Jua@0~wbzF&K#^7+UcqypbX{#UA%_}LB?U=Zn@homR{ zn9Ap$p|SIq75fKugg?sUeFczXc$)k0?&{w|9j1NyJVppuR(6pDWQAZqeTrlN z;_EFeYBs7Nz?n`K?Nz!L3h72}38%^dfXJ@&4a1~J(Vu72aU@V|&rE7(?FC+gN9gq7 zJthAK*rBzDDIdd(>35aN6{6)4FC%%2THlTW=+-CrbH>NXf$EncihImj>xZ{#5`0F7 z*P}LfMfjfDZ}*~X|1LxWUm$vS_0>%9A0Q@ioa5(LaDUK0=37wMT_w$Q?&>dO*(=sX z20l_{XpvYJDS`KCB)}_ODd$UqpxM96spIySO@tY_2A26OGoNf@t`g5ljr;l<$ZPU) z|EzUAQSGW$7)r@sGH7@WY1eH1p=@9g)4)&R4T0+|nzjNc+oxaG+Qsle>gAwo!L7;4 z0h7hm)y?@W&3O%-BlVp{p?nbTic8&tSE{PougI%AL{{diLgLNvK5^qf+q@R*H5ezW z0VN!6c?8NX{Eq;V<9alyu7U;gd?~D-ZRefie^=+r^E)K%@tzZ8q%5@By*~rS5Oj+Q zU_}H;PK53+(jOej)n73#r$MtR`|ky*^{^|>-1edsxPD1A!P`4Gw6hiU)c^pObiov8 z?c3Csj3<#O`S{LOsT{9;z9BF5sTH&R?xJ6^4)?$Xk8Ty@O2(B?IiPhIBVtI96@Z|x z_I2XAI3gpMoVu#TotgRrUsGjzk5uH#KeLy4BIP6|!l%End-Pg4vpFMcn--{Ct>s`v zXyqawzs}4Ld1n1Zv5frB&Wf}tp?m>*p6nF$v7)8Feg?4*1l;F->9sE<&O|T5*fWe~ z?VqQxHMB^qwGI%;Z~)uMMp_hpy)VZAmR;&iko(NS8g!xr=p~xd=;*nT5B-Q)su|aJ z`Q7xEUaj`{8{r=vMrZKnncZu#=73k@@Pl)b^cqRSKsM2$tWfWC(OZjNy9~}7 z-P8%56kXKZ1)y*OgL#@RbE(D6%fpK=-$w6s6Z(J1Q8o1%R_Q~EF7|)k>Q~<3EzCTd z-Oq$D{F42CwY4X_jp9#Ke?#7f;UGR5+v%Afs7MAfyJ%-xaKXGnq*1gQ)kLKQv>r|J zOYNnAlydT!RJN3lH(M(MY@ha?GRkK(`@QTF9F^DRg!wUDil|Rkd`M?jIUj??8YKKQ zrD#z0vlQxlmQyi3`}Eb4PoGaN-fQk29mSP|8{}3q72`i=p4MH=l*npa`x$GqAAiH^ z=n|}&11#oMPUGX|O|WGN@Mr1AV&10aZ-uJxHOeX^Hrz;WEwHSmW|XveFc zGv3_SfsB2qf(t(%*39fJIvW->dNQJW0~P+9OF2nIMmj5KlY-u>L6t!>Hm0UlZ)T>Y zz{HxQghBg#yl>+|XQbUycigb?y$2A{jsC_3=*CK5}p!@$IOj{zp|6tNUc~PkU)S%`xHP*=tRZP|&Zadw+ z6YGHJ9_NXWsCcUdYF7PB;v+wMl6ljL_ygm|tC*pyy32XenUOk--xG8G%UhmD{}#3j zg|638<%02hfxp%)nVthMz%~DVGdbwmKlLH^Ep9Z0{xI!L%Vn=o9wHz01v?W@s0`c> zLj86}E=nan`RR@OS4Rg{zCQfrkTwiK3A#0&Y4vWO{FT{E zmvB8V6tFQd^DIM7-47xRn{d5PdPBx^cucAE`JgTsm_!HJiLFDlE=St zv)-=npk0KG@e=ZGvmGKxbpSm~6{wcg`&o!r@NX|GwoXT`t% ztG&njjp_G=^w&HWL4UrH`UHYH%vMKnJ>5rQk51co%%5y~{nbv=Fv8`;%{pDT-xXRM z-ySqG7{+3IWEkXj1bbXkFCjT{bdJPjNe{)G%8W$s3GBK&2RR1JLz+om)=?);hSDVJ zAW1D!nM%Dpkpwoad`vOkTaf7wi8J#J{Vd!}rh{GtwS6KQeS80rA9gui!h*@$u*U7O zG_gEaY%p4WJz@qCbk~9T3Mla&38%3g1zqy53u+<#{lj2JtQK5f2aP#f;Y`|7FMk8~gr0g_{3*;=hG5|I2vxKLgo)0ObK>&r6-1?`n-v_FntT#RcqRC7`-0 zuo361qYHO!NnJxQ1IGJP$|b2Hh2bxK=amK+&kpwWdRmn0My<)@QI>aPLr%o@UE9TW zaj?vA{$Np8H$YP;F?RPs24!1$A;I??>XR(%`T$;mMd{|4UVOJ;%3PZJga?O1$#0RJ z41rB6P2P;GKQ=CTgewy1g_Aydn}>^?=0lGrvGn$w2yJvqhkKU-cDe0rQMa0@bbMip~%Z$zV)@78aiUjQ#rS*gMXGzumNmJIH ztS*6Y76rFUr3>y2({RI0o!%Fy8x?h^Z#^iJP3M^B!w9Sg{iuXSVG2$uqz!)oqy*+hL12D zqGz)08y%UgWwO&*!3i8pSKRZaH9n+0d~&r1M>P?eCU7~}kS9MTkhO6ws^<+km|`T;$I61Rz!LU&H|PyR z-W%qGOK#y3t|DG3atfZl!`8uH>+@ZtU-L8gNS?`kgWPj7$s0ukxzkbdvHT5kg0Xf- ze609ep1mwz>6HbIs6Tv<6$&JTY1IsndN|kdXbcadNpvrqcOEHYpXtMgVEVz$}5;FvJ+epHm=j=kvBn8uY9F5N=r-oueKfe zVES2LGop6|3DMhC@dT&5$YV;vI8!6+RLDd>!8f>3cOL!p{yA}SOZi+sUAA#DnkjRS z-);OvsnO%NN7r$k`Qv3GwDBP(BKnSL$h+yxh*^;=@~y9WeEdYdpEhhbCwBbzK*??-m8Ra-8KG23SxpoOb>iFMj{ zOr+t)zCcBpf)2xL$KFey`pQlR`zB~^xs2@g9-g;Ps~w05FEZRXhmANWRYPLfVowH66ylBT%)}!Yo-g1lq1$G?EjE4YyWgv8{=q*(I-KxIh)(x3_onyUhCG~pYM~YS_ zBUQz3*JYPZ)=lZFC{_@ZV1tV+0EMCutBYYUpMy?X`cfh^)>D*5ao+PL314uEKZr(- z_J|u{cgQPw;JQ$2nHx(5(No*>lzMG`95S>~&Q%S6YGqonXkG5k@%eGql6r3a6gj1p z zgHvs$5Np3op8oL@=5fZ{9RIQ&H7IT6LX5takrBxK%>~jaIC1*=(S%LHb4}w&aM~RH z&HAXdWM9(Au+J+fXBxIxSTe*AV5{`hk0iA8z`k_~$t912-`mV^YE?Oa^XDdZjlen* zqp*!H9d{elg#x#^-tOlbfye0k(4}Ho5mj^bf*USy7{enr$-J`h@KEfieq8YrP;DJ4 z74k&cBO=23b@wb?_QhTlPk1{?bmc|f`Lbk@bXEYjOcN_^qpRC?Be&c;_f;5pEC%WJ z%dl|C;h?KNOSb3Ufeo6$9De4UQ4eQ?M^5}roZ1Ewp#M(V;O@Fp@oI6BL`q|#ld%H- zd~h6R3Gga%%k9HcGfpjwT>q3jrBTDvA%0C>aN7cw1|txYVxLF-2}mi=$KYe3$pT@Nw?bcKj2! zq$)ddfJ>oosaig@qedK9{0^sAjFCwY6l^El>;m`-CWRu7Mn&Sn8Y#=`u^et0iIho3 zky=l%I>cv1kHY%ma3+P@(@(j&SiTJjUz419eq@nhK#yoR6JvL z|G2?9UJg#6(&x8jKvUfSfxd+sO-AN@nyOvwp9Yw zLMnXU-Si9TYv{d49*sw5!%dNx`|%O_OMkhRmL+oHsp%Z zQxk7^{ip!@*&S9z)|Hdo%Pml)oj|@Y0S2yOrhykF#H9Q^gZAtG=K>vD*b5XJ2kLaB z>Fo=9o;dAO;qTdS1E>`?cO1EB6!n}k2Vv(sCnDUvam;bPXUJ{mM<171u7Va8Y!RiV zB0oN|-*8Op?#HiK?o+XaSh^6M!F4V#;%-QLB-@*%{ejMV_Z)bqeqMd?!HnSS-uI=@ zRCjz;S`4exRIEhbm!MBz{n}UAGh+kZZvF)G@vo8Pd^Q1NxDz%5gEdE>RxUJ`09j&% zhw{oSCWv&?)S=fSuIr(%dczGSr_m*;!bxXwbs9KiDt23r^e{E~BlIx>=L?&mOY-wl$yxSh3Z2=*@5Kb37=`iDnVp{HxL*b@pr5(8Io z=w?1Fzl~tUTJ0aQ!kOf7Z?5=Z}#mj5_o) z`XzsnMt8It5#_EKQ#I(F`GV#X|I8|YLxqj>WFREg8z$$LFLi@A(4n0(tAc0fyYk6I zk(^E$a>>2)8kwwdsWeQ{l}{JoWXN*5W)>ye7c;8qChth0zrCqTlnA#~I>;?3FhQxh zao3<*hliLx+ZJkf-Y&GSGCr?T9yhemj*20;pnaai!HoVn0&_+xIoNBHvU31hy3Tl08;+ zM1_?4oFp_4$0+lk~j?H8dqM+xYYRkjgTxT6R zS(8*~DOLr~P)j%di04%I!MeoK4W=Q0Y%)#ft0ua0-yg-}R2NgH-WKb_=VK<=#LU_M zBuCsev+W7(uSZ!>*2x=4LNLJgs zvX75okwL`q=&E@bn|;ugA3gf>VYAU3WdP@~5SES+e+t(+O|BxO#ZAr}6cktFm&6Z0 zmP~ahpQ8qSQaD3joEZ^|yqkApwm z05!*kGa Date: Mon, 2 Apr 2018 15:58:44 -0700 Subject: [PATCH 30/63] get --- ...ver-endpoints-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md index 737135cbd7..55507fd60b 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md @@ -110,7 +110,7 @@ To offboard the server, you can use either of the following methods: #### Run a PowerShell command to remove the configuration -1. Obtain your workspace ID by going to **Endpoint management** > **Servers**: +1. Get your workspace ID by going to **Endpoint management** > **Servers**: ![Image of server onboarding](images/atp-server-onboarding-workspaceid.png) From c254f5d3e76cef7083abc2844f165c39f6d044f5 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Tue, 3 Apr 2018 00:04:30 +0000 Subject: [PATCH 31/63] Merged PR 6842: MultiSim CSP - fixed anchor links --- windows/client-management/mdm/multisim-csp.md | 22 +++++++++---------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/windows/client-management/mdm/multisim-csp.md b/windows/client-management/mdm/multisim-csp.md index 5453323c70..b82b5779fd 100644 --- a/windows/client-management/mdm/multisim-csp.md +++ b/windows/client-management/mdm/multisim-csp.md @@ -24,49 +24,49 @@ The following diagram shows the MultiSIM configuration service provider in tree **./Device/Vendor/MSFT/MultiSIM** Root node. -**_ModemID_** +**_ModemID_** Node representing a Mobile Broadband Modem. The node name is the modem ID. Modem ID is a GUID without curly braces, with exception of "Embedded" which represents the embedded modem. -**_ModemID_/Identifier** +**_ModemID_/Identifier** Modem ID. Supported operation is Get. Value type is string. -**_ModemID_/IsEmbedded** +**_ModemID_/IsEmbedded** Indicates whether this modem is embedded or external. Supported operation is Get. Value type is bool. -**_ModemID_/Slots** +**_ModemID_/Slots** Represents all SIM slots in the Modem. -**_ModemID_/Slots/_SlotID_** +**_ModemID_/Slots/_SlotID_** Node representing a SIM Slot. The node name is the Slot ID. SIM Slot ID format is "0", "1", etc., with exception of "Embedded" which represents the embedded Slot. -**_ModemID_/Slots/_SlotID_/Identifier** +**_ModemID_/Slots/_SlotID_/Identifier** Slot ID. Supported operation is Get. Value type is integer. -**_ModemID_/Slots/_SlotID_/IsEmbedded** +**_ModemID_/Slots/_SlotID_/IsEmbedded** Indicates whether this Slot is embedded or a physical SIM slot. Supported operation is Get. Value type is bool. -**_ModemID_/Slots/_SlotID_/IsSelected** +**_ModemID_/Slots/_SlotID_/IsSelected** Indicates whether this Slot is selected or not. Supported operation is Get and Replace. Value type is bool. -**_ModemID_/Slots/_SlotID_/State** +**_ModemID_/Slots/_SlotID_/State** Slot state (Unknown = 0, OffEmpty = 1, Off = 2, Empty = 3, NotReady = 4, Active = 5, Error = 6, ActiveEsim = 7, ActiveEsimNoProfile = 8) Supported operation is Get. Value type is integer. -**_ModemID_/Policies** +**_ModemID_/Policies** Policies associated with the Modem. -**_ModemID_/Policies/SlotSelectionEnabled** +**_ModemID_/Policies/SlotSelectionEnabled** Determines whether the user is allowed to change slots in the Cellular settings UI. Default is true. Supported operation is Get and Replace. Value type is bool. From eba6c36b8d267d9561a53e2e3fb011f200d67728 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Tue, 3 Apr 2018 00:04:42 +0000 Subject: [PATCH 32/63] Merged PR 6841: WindowsDefenderApplicationGuard CSP - updated --- ...ng-csp-windowsdefenderapplicationguard.png | Bin 17196 -> 21965 bytes ...ew-in-windows-mdm-enrollment-management.md | 25 ++++++++ .../windowsdefenderapplicationguard-csp.md | 14 ++++- ...indowsdefenderapplicationguard-ddf-file.md | 56 ++++++++++++++++-- 4 files changed, 90 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/images/provisioning-csp-windowsdefenderapplicationguard.png b/windows/client-management/mdm/images/provisioning-csp-windowsdefenderapplicationguard.png index 8e18128149f302d652cc7c0ef0b4f7ce9c8b1c80..c8f2721143a9bfffaf47882675b400837f67f34b 100644 GIT binary patch literal 21965 zcmd741yq#pyDp5aAfnPOEiEMtiV{OgGo<85H%MEkv~+`X4Im7iO6SlZE!`k3{XK*F z6Zik@^X+~1K5HM=a!I`NK6T&Mo!8^_L{=OVod_Kb4Gj|_@mK*3?Lr_L+IfPj=fQ7W zo}WmA|IXPeh>M`*AW0U$4;Nt%WgeoTRtjrU$c^c+M=P|s73ud*Jzn;fQF{5 z2YLKZ>AChwrIZ%GS!gKvQ7+1bO6>4v<^Ve(B{8D8Vay71w zyUOM>YkXs~=M?o$-L=ho6OUP?RK1%e@(mU~yu*=E%olAeq8v;X!O9gUk))8hn)pLm zS=CWhS@=1b+u|1Q_Q6Cza(S7yR+`tQZ63`i0u#&)?TMw83hMuK{%pRb{r!ESiwzA8 zZ;yYR1HapsOh8yzSZG(fyUn&|yysBF#ts&TJmDP{z;)ZV4L1r854Rkz$|k>odO`Ix zPu7!Q$MI^{9H-duu=W0)7Ce)YQDV_8D!j4ENTMZeP`fOtv+;V{%eAV%Hk?lAscmpS32&W z95$cqVI6g%#@&kRg%0%h)6xbAIe!;wl)q}d@gw1&IIy?S8cW<4lk*J z8GSpq09Va%|9)sX?&zDmMz%%-*_ohYC+08)dl7UqiOGsd|hI|tMhK51==Hu z?UmBAAcM5so7G#6TC~$GE~D`|*U-kRxei|4sgaD3ZRZ4g@VP6H zg=+Ww6lMjSqB%&mc(=@pjZtx1DRV!?75^y0hc>Za#=^gBvx4`2RBuQ$eDCDkw=d9L za+l{0?tIQc;9Y3Wje?G=BavqJN$?l=Y#wp4Ws^M0mzG+IThviD9kxxmkN2>gF-g}V zVaY!dTKYeXY3}zg@lFq{a<=}o=HLjaqUU=9Ku!W ztEd=h!iQR>-mS(*#q|c<2E#q*D1qtgPnm6oOi_-C@o8p0b9zfHBXvZn4b^hxQf8yi z;AMx|8FJyw7*>kr!3ctdF4 zoip;5!Lzd2AXWFe?y*Ren`z@MQoSqyT;;^l-$WY%LR@bg)%3mR@yU@*47(6<& zI;6kZQAJ-|CHb+m6iZ=f<-2M=uF=k4Z~fq5`MFJV^NM)&>bwMhV5WhEXR1q>wU@EP z24|>1Uy)jNSUAz8+y-?_(NcxaHDd;k^$$(2E~)#Paf4X4>3`r&wW*{Chr!drloyW6dVd#pA* z4Ve}d2`h$VxG{Rsyr;}`QvdSRBILHwU?{VOBzjV^r&A@aMJ&Ty>)}GmD|%dB)5Ofo zQ~_CwFA)j$14Rft>5ek!uz0(hioR2}?CG{?@IK#BWn^UR3cd)&>f}#Gj8(ZExNa^d zU0JjBO@57Yh%D>Kn1cuPx;l#vy8Orr?wQ+@x&WU2e4!h9Nj0bHBwDe9Podj=Iku@R zISwJIu(^Oc`<=LY@5fZNXa^Q}@_}3zvaGPM&lRygomEc4NcTT#q76uqk#5J40iyjuYPkY(|?dl3Zf$M_+NUZXwswx&ugOj{>q~a9R&2q3!41E` zQGc~ZgE3!#pQ0qJLG>t`tH$wf4z`eh^vub*78>SsSSNiXx^tjg{fz?ML8XI)%Vg1nv6^3kxGlXHESc2@9>S0GThF`&{|v zy5SDF%MXB^{K9TKL*lB%MMYbuhsh6Su!V%?YPxyoZOmi&yN~WU&>5(00;}WUxIZ3c zdH+5)_jUkS)`M2mqfMvg1tlco^KagKpwk((x7gp_-nKsi4gp#x5tu`zRe!Z6^!a*+ z9KX)=n>WF3@5p(CZQl-PoJ0G_4EBS;vHzrUW4+5(AF0Yikzfdf05+GlEeH1V0R|XD zX$h{Op#dcG;G{7-%CCIbPd@EaE}_;?RXKA$kI;m+2|rf}zZ1U{m8|YfW7vAVM}^nP zn;v0eFaiFTh%otVg!aMw;+pJ9^k#c(bfBl`T)B=(XM5hQw8!3Ez^s`QDX?a<6m?KD zU*}{i()7v}TbNxn7)G~4YzEK@<8JADu=HgY1v}vB95zP(kmETf0?U7PE2hxbB(~5= zcf*Sci*I~n&zj4^U`!bk%07;BW!qLopItK4fj!w|u1C~TuV_;WS2|S+X5atG6sC+7 zutzSiv9Q>Fp>uXpPMU0HoD}E@-WO(m{^``S3-XNt%s277-kgJYm}9`px?gx(2NX`=FXb4Q%>~@{yd!bUst<>5w70 z{EAt=EV9S3%O#>S?9G&4vvj3ti=QAn1!S^#$@Aoe7axbuWd|_Pt9(yac3mWbIlwDY z7+ne+u6o?YKtof%0%NAK=|9=%o=Nl9T4Fz$`sO0+y!{?bH%#eHGM|JYXNZV|G-V)R zLKizlYoTPOjTT*Z)MKVLsZ5AnGfumaz7wQwhpzQ;4?!>_=vgqAN@o3Jm4Yx!y5e(F zS?tYK?=l;eJKk{k3bT0rcE)nuvOt<9E%c&37rgoXhQY(zhHa)Znl}7wmkVd9SVg%t zzO&Wm(LUujT^-4ng2~c5>bB;ueZQc{fq7I5RPhNqQoUh?-|=Mgq>QPcFz9d~+$d&k zxtltZ?gr&bQ&~EGCy7edwOfIlyhFzyHO^wdA_HCy2Ihs7cn!0L+~iHFdf->A#lF(w`IxSYj4x5 zkvo0xWn5ZvQ>^?}pJhT9r(v|AFeMh9D zgOh@ySEy_V4{?q$my;$X%Uei98j|LbWO8bgg=l>KD+19l4U2G|Cnn4d29wn4R9Jd2 zZ>j?v+fOlExw2kbxT9LSs)Xy^#3>FlnpslAc%iM-J|A-4mLsiWAej#lrs+~6vTYAB z`o*^`+Z1U7r}C9?nu?}BvM9H8XV|pOy?yzo11W#ZB0G(5=?n!VI#9(8op=C2)&Ez_?CbA zT_ag!IcJuK2!IF4FHk{>lZP*jrn+A5^6Cs5%8ywM6udF>O5qVjr&NA)lCQD*;k{=? z2tm*?!!~i>aFCMn=yxOiv1MT|3KoCM=AK^T5Me@9`#OP@hqj9$UzI0DaqUBI<&yLS znJdR<2LHfIE{lwv3jure&6Ts+;Bjfpizsse?Cpo?_8+plFLiAz5623@N4CBC>*hPH zRBYd7+LkLDSwyBN(p(DYNA9&}kh8M5C;y)95u2m&4p@P8RgsjwSD?I}@yi5KelMwH zoQGy8F)fh zN%L*!vDVfu0X6B6An_6jz8E9iMeY3nMQLnFRF_=WJLNK=RlbPgc)NKa0w>$x(DsyI zddu#&%rK+yh7|JjaILE_ueVOSk;tOZx8TaEB%3tIUWRm{dz5?k8x5; z-Bp=iXDqql3)CeP#9AoJdIiYBQ#vb^+$Il9)7h=DS{?hUYKYcr#11uU^>I(NdsFob zU~xemTztSt)*tc3(? zPj}ZGPEJk&WG({McM7;dows-x-_%D|!_i?!dyz}~Bw+h4pNqk*IgfHK2p(IhT*W{+ z3Quo-fl@G`{D>D1FTy-Oow^y9Z~Y%W7>{z_3NI(*S5@W2gCj{l4_;LB8sQH7sc^j6 zv{bsZs9;oV9Kp-M#m2?eS8>m2r8X-%I(mNs%s>`37w1JdaLPF>Wh;S)7SDV96~s2< zw%@dGKab~jc^taCI#QZMjsvVGIT$0+5xL*hUFg-EBv)0|nujOy*qv?t zbu-4?{rmT~rhsc?{t6+YhH^2OE4EuAb$Fsg-bbRmhv7qxwbJuwcEG99?ZSW^ExjYJ zINX;beMmta-H0{nVX<$oZFvc89t|~!4NOZ*%PrfwNgi9o8x>(kBmA~`O>A4ltFSbmpZnfa~(~GJ3AXS7WPcO2sRTf zdycYch77G&h}pTqhJ?O87rzE`WBB!{X=U$<#=Q)z@^lZVcfVS^Xih8MS!j(=&Xs>PCS=iGX94GoR? z1vsJ9<-Gsaq3*Z-ED(D#z)XyVKa+Q z&aBlV2Yma2>p)xNOA+W`0v+uY{zXBgo2|kDn(k{s?iOG;Qq*wTJXufm_4RFbMnDK= z4)RT2sC-jE9PvSG=%u4N;7>-Q#8l8mH(D0%A9T3es9?0jkH} z#`+BW0>z%-H616pLpneA$6#($r*q>stpmZ0@bQnS`uh4-4<{FptocmB>-Z49S=`9N zJ2Npo^iH+@!l$yb%y=M)^EXg97J#S$GNlFIRBZflVFS2sm_XPsAs4TpfHd>cDS95g z0D;&8;6UBPp3l-!kVSp`tiP%2} z;Q58gPfQj@xnWP3{}+Qi0r^H$IQJmF#C|F4SpMQX_s^%^p~u?q*Yq|wPXUy@MsdtB zX!bGt3HGmn03`HE>yJ-d*&!(jzd0!^q5%?uTXIwnbp9Fe&2@1rm2@zrp9>59FmV-$ zzJ2cZ+HSLxe1Rqi{j)rgw^Tfgy<(-2 z#XYu@XmO#Zg3r;;zRphN$dHwbQbmkVk=<-!o+RnHw4fgT#_m?z_ zWJpC;U#74Vc`QZ8-SRW^f42L>|@kC3_W9Hg5N^}d!d}vZRIPUp2OLdU&$$%v zG~idH=%qyIg^7>P8x5o4BkG>}g;xf>l*DT39v3Q6_NW9J%*Pq(F2>GEQz9VzYgTV} z&`VT%sF4PKhQ@g%g@+kYecr1%DH4EBP^Vs)E^n?p}g{CxmgBramCH_NXt==LEP?E>UK;|wl@dANbqS0I7(+UF|oPE$b z&38Q3@i_v7juff#^Jg6|PRWrEjsbh|BEWdPXt!w=G@_N%>T7WV0R%$lPl5e49`f zWdDY(2|dw^skn`PRoqU`mr{#C|ML3#nMplPi0o+2P;|n?19i>GNNU{c*@0IYx-;en zy^ZU3)ikret$JHzeB5;*GHLZDcftrK$c)l;i&PmxfPf~@;(PBrPcXvkCa_-Cl9$ELt ztm*H$kssaW6<3_jJA75#qGSXn7bv9ZsE87i?jz&QRR>Y;sJgsxk-b-lTmH{@DTNDzHPYv) zJEu{??_jCU=Z;1ShMt4kmQ(ZbCZ0HrI$l!kd0~}UaZHT4S$Ld4yT+l)>p%LiRS)&c z-Qo1gh)`XL3cQj|(0wOyh*sw$5RG?yHw+h7RZ7h4p(bV4hsNdJrxLJmh-cGf(?X&kB5MB^j5u zrSYoklk+@Mx;YQJ6AGO#p@O77M(w{8bZdRBjPhl@!$Xkxm&iIJbXF>pj69~6XXgG5 zUZ-l+KX&<#419)OBlJIW4m^w$wZPf`jm76+GzL6pzyRdSlIY^ytPhPv-k-$83V0$! zWPafU@OVHr*axjs80Cn25S`mc|Aprws0iccKPKY;js^U8&Fmvjr1Mk*<`JvJ`4^61 z;o;i>ln<(ZnKv+Jkk#!9?x^B9=A@|eK+49cYiRTc`=Po0vffX!5v%-%pW`m<-WEB8 z>22IaqI3PnjNb*MWRn$$pnhxHzwERrIY(K6o1<|ZJyR3N6b^67qk?@#tq7qP~6ECj=tO zbEhpy_Hi38Pv4|s?G&)*ea2mt;`B@L@6QMwhw4BbpK6fD;mmMA)rQub3+I*usoe;p zjGhhQW{*sAo3St>LjY^!ZDUS|-5>#FP|e6Jk_Mqngt#YEG<%c(nL9RNX>>G`k6D&> z*pt`-tAN2{uQP56@Q%C>d%n7(UTilFZ>WNYNZ6|@#T^A7H_%YMog2iBAq+bvgr|qn zf876CDZ}>0e!vJjv`(@88qWBX>=E`EjdP|b|JOubAa?jlhwy1i4SMq`v!7up@Wu!++o&L9xewrx z&C#CwUl*u@E8G)}BX*VT)*>N66=!yd$Fw79q>J-@M!+H`8}Flqy zO#h-P|8-EJ%h9Q>DlAO-e-D=eP`LD?SmPfjn!&CgM2_>#FdY()DBzUC=;T1neIZ`# zMb)ohA-x~E3ySd_FI`X`J)08_%rokjP5)1B-8cBZ@$U<(Pm3R%lQ?(=yFc1j_EHtU zzUCx$EGABprO0qQ3kiK1$#E8qUV>Z>Dho;c&8G1&_IhT#aSj7X#WvB&wPz(aE8Mq@ zIF5l*$=*rV(e8;QER-W4HIw#J?Qs^ud^u(kE{J(HsBnI-R2;2O6=@Ub+ZUQlj%475 z0>oKHuODoNLa_dlp~`@fOeUN5y2b02*cJ?&^5*R=)GY+OrbPmkL`Rp$-HEx1HSO|w z#(doua`z!RXlf)nR-kBG!7-c-rHt|&Oe=f$qw=LJ^^MX=LZOgga&hCwAM^7Mv=pes)qSsj7X;w}qGTfKI##q(L zXnuz_35VAKy6gYga=$lFX|DHf-df6c^Eb&+F`p>fsp-VS{*Wq)gKvaWGTQh_ytOeTSUp2l+F8>T_TrXeKr)`D{iko4L7gq z$P{2*)p5Wr&6t5_%H|+474=OOeG^?|XX%4m5~Cmr7SyDCYf9lwZ|ji^{wuT=-hRB_ z|C&wi;|9XUEh+mLk~*PqGj3XU+LmD9Wy>&e$f8D6dhh+5>JRfDr{G?h-kf4H)_S!j zdJwFI_d6@p+rjRMF4nRdz%U}&^P}KT!|OsJx6e8=**a$N7)(3Id0B{L>NC5CRIk3c z2459oLk=mN74bs%YeP_salSkJz#aH^4f%fsowzMV)Godd%B!e=d*Gbg2WoH{0{@S@ zOlA4`i6^%pXy1__$&9Mto=FP)k9tl2cC%NcP@O~;bWoCbE5^D(L3dkJz9F@Onv|1` zovnyO&a5i3bV$1_`kFDv*%KcMmw@>hS{Uf&scC3*3n7YErL7IzU0j@Wi}~=5IK{HF zES9ZD6=V89qUlfiqmVUkTQ*9MJ35LGy3A=4TxifU&@PLVtoX~NJ_tGw!@UBkm-EG& zL!?ttHXSxq^rl0(*y)vRKZ^I{*WS5q`i@NQktMC9S!|ZqVI7J5k%#$CZa1|FK;z zM_S%*NanFOsqgW8WRHxdG;l0znJP7i;S$mb^0~KaD~PjI$($6*DT|>FRd_ZaFQ5Ch z0oxW+LAv`>$Dws>&}8#mN8L?mx6PRy8^fHJ%6CqiY=zo7awqXY3`#STZd|Vo^V(-3 z8=$9;bnTKhC?#UFw4i4FGp7s4p>Tt3+4?L5-}xvnGh&cz<-r5j=<2a{J{RsZ3D28O!Vg(Uaedy)^>vy|`*>6{Sl!~?4ibItf|)G~Q&*k>UV3__r8 zocahR=G^)+FDmyh$83g<@v?p>c zhUJ|p1u1`)rUN1&B9neMJMF+_`G{eg;jG{$~RCHemvig`1dKx0hSzNZtv@O8R}?aCqgSc!pBe{A{6^0McLtJj5qSJoB9jZB*u(;spY#9Z`tDL&=gm( ztWA>HM&obayLZOgQ^Jl`zc5aIY$XvKCV9IH#l-N%l+KVgyO-ZtM7|khlPlrHq}zwN zGIqUo*!Zd<`V=7_M?hijrz$p0O=cmkEpB#R)tkXL`aX8`naSv1bz1Yn5ThqxOEbdB za`!Rq9uma6KaggO^&01oHcc$M*Z|z~aM>dSxyNHRC9wuOs%+K#6x*A4 z%O|EViOYC}3?te{P4K$XAIy5^BUOCdEHLxaRzpNhabU5R4a`>(>X02<#kxQ7K zPyJazRY+5?3%$1zW#O)IMg+y9%$jZq_3prU`xST>bx*p=Y^VJ4jUM#DDF5%x=$UhM zGCg^TINMY`T~P%N0iNxm%Nhj9XS|+pr}#o*SZFB1<&C+jv035i5srO_HxqD+y=^jfmbNyo*M zzpJ*|X77~uL6pjyV6%<0!?C|Y*f2iZcqEC0dx1A2j9+hzMzHqh%q>_Zcm5JDE0ugj zvsxx(N=)c7PK^D%zmgaKCXD&tqoU#uw)qf7OOeV(tIben5T5 zS|$D3Z}ae<+QAD*^>;tT*I=R^j>BY~Dyv_|Zr>S|+RZk{;mu z3;B3!Xy?M;6x|nFsacHWLgkS2(9K7`Kp7+NFVOz=Bp0@RYqv_uNjrDXMjYQ#+y$!5 z;eM;itH`0mLipBG^!6gHw7iT=kYHjDjMrIAE(p1E?8F> z6NM5FrxN& zm76jKr4w~I4`~DKmwD%fdXQ61x0N57CXT}P`hs4f$MjV~Lu+IuK<(|f!~CwbqGOSs zke>7YEtv_a0H0W{{+__SCTG$1lt49u71iCLZ(>=7N3Eq`ft z+$4JX`-0+m?&Uos(TZWz%))R?%VAh@W{cv4!y=Xl4NJsYID5YCSc)FZub!=1ZZmT` z-?;0+C8Ws!eq{!qXzYiWzoa658a>`w;{j2$Q(sO-0hjktV?ZJ|rrw^S1&qgf)yg`t z1(K*zgpdrCUV1!Z9PgwWT9FxKH!||lAVKg6yZMxn#6)JR&fjq z@H%O_TB9=3pfdS3B8EaHxq)QHjOIy1Fbu^*@oXNJC>XnuG0DxovA}?AKy1 zgah#(7m>oIe~qky@?W^ahPbzaFAr}AopC&V0Wi78UXh{*{1ksP+yMSET6N_e zU>rRb>?snPxWbkIpx0Prm2j>`6m? zX1)`X-OOiV?zrbOleN`)@r6v?D+*GI&6#moZl%bm3iUfN3a6kuQoi$sY-Jqt$ zlSPuXC8l&KZPT^9FqoM&6LL122>i%C9rjnx4tGX+^S4UALiGi;V!Uvk^j4G+_?T(x z?6RsutCP4J7JH%QbT z{_P+%K-jKB5Q}tx?mkVpjd5|6$D(j8-apDT7L@f&vMKpe6sn*~uU_pD01B#;>G!#` z==$wrWF(VLNML=5^m@JW*lI4a+TD*H3uc*-MQSkK?|P)GS{tyv(a6!^tn zMOPL}P>I2WhG-yXVrIayhsn@hQ9ks*P*TaG(7yi}^1LY%lxX~&(+JBM^=|semleX7 zAhUn6LEly4fSEhGzxTB}6Im5Pzwl%?Gjig_GjjU|o7B;It=~$ILi7uZ@NSrOtjlo)ow0>(YaH266m2d0#xv;FLX#2Kmlu#i& zTv!@nsUKZi?otS9xrH>It+4-VDR%u$(?PX$*&$gA7=f-dt4emwOx*m83k>z2IFyAg zm|AT;SP6}`P2|x@Kx%@ z*#$oU3r>6-bp4TyL9?u!kHhrBZ%6`&Yj87G84@IuEa9IMnI;-;v#)?JS;l_P z8+%0&rx$;oaq>hjyXT!l@DF&2M!CE5V#x5Ewd3T;%!!xjK2tX35~Fuv4`HHRUC}>6 z1rYjjCzL~yI#lYKip@=36{fQ35V{aM!>2f{myP{i?Y~N&ni5+v^SZP8v1B-ruedil~ ze%ds<;pVmc#6I@=sJ9O=E&bJa_5nfXv`37=P6dtNd2;apj!%Zndu1ovp7i$^gmjU$32_Wv^9|(Ov47a@a{N9Y z2X^W1uU0c!?UU1{M~w#aF<#0Tn|vtv#(N zKi4VvTZnMcq^(ru$$lR{IvSY7-{Tb$Y+K40p2%m&%AZV!^u+FADMf}SddxD^+~xKe zKH^t$0iN=&M7i72%B7>+xC<{lQcwFI!MS{c*Mqb2iZ-g_WVv@z+WSghUig+WLh|HK z**~}kQSRXe*%AZs9=2sgX;D$C2T?g1Z2JYC^qxm5VrZ^8QVIG34oUoluMuH-NU79g%VX_OD~Wk6KkD<+5j=v+@W^w&)NI=XPf9>bnQ%Py;Q z?sk$hU~Qes(Jv1WKf}R`T{2CPE^LG*Mc%x1-`DioTW0m6^oA}k25x@)gM0VNe7vHh zf*krKZtEKv+ZQJt11tKoTkzE7BqS+Td?ywu@=V_@YP*qSLYlF(FW8p%fiuN$7G%d{ z`XiQL*0G$9qM;GjE*VaKZcu{2uUz1-l|XNoN-?tri4Yq)mpWuTev*jGmOZT^hnzuM z@Ep;`j>$5yaM0kgm{7Yvqrdl0KjY=lxg3k}%CdQ!AkYjL_1ZxhgzR2?MR&QX)W~}z zEw-mCFksA!J(0Fu%pn0Y_`eT&=-r{Us6fA?vXQJ&j>D~tWa|!g1-WtI{3vIW17v1Y zw3`@IYtLVUL&gC|bMTQ>zvi1Jw}pgv*Zo2o!qXg58t_dM!{uuuDkQ})he=l$RB~@QjK3Kx0BD&W z71(H$cETO(`d%jgxqsNm)Iq?48~X-m%KY8+cmcU62->APYTL$ZmfBT~&1Nkpj1s3R6Lj8j7{ST){F>s5qBA5}$v>arQnoqOC_VtCNRiKKVH@Pfuyz z>k1-_bUq}tr6xjowKMV|ME6W!#yxgWJv*QszSpQzwG#3nQ9>q!9cIZ%8(#31HqPX3 z?2>~I$9e{pPvFJqp>Q&M2fZo_)B3(fyB=3h?qF)*LVWEN! zNkm7+H;haFCr5SVMoeL-1i1_~Q=mvIv`<@q5-#~8M@OqXE;DXhGCfkWmIK3Ysz$c^ zt9JB)W_!;vZ=9_Ikr+gmk#W7#6IbF-s)3ZpsvnO^uqZLW+W|4R&0 zz1yM%NF&28`U1vj``doFjU(sUmo%?E!_ml(jdFmvXB{SlwzuAPd^Y(fS$p9MQc{Ba zpOk<9%L_1?})J$CQA1vLYN1MlQpG94XV63z} zh?wJu-)jr6KAZt@P}Nqq6o^s5TmpU~@_!H6LmPlx8&T=T!SC+KIA-L zNTRm>XX^!M+F$0iVx?G_1?}Yc`1srZboGCOC*Sx2swhK0u@FM~3dGd~KRdO9_%4Dz zw`V`mj>aD3W6?T)I*O8upg8oCiGUGPxN?T(5#)d71x1m8dn+rTmw53x=)7o1XCOz> zP(envRnDjHJm|3h{k|dXY1$=J9?c)&KzQcO?M-ef!~Bi`6~^ge0*)x?#89*9m~Mzqj+R;|cAh0NwWw%1?EK zG2;hQ%Ds+!||^<{|DtDQ3MuS&clDHlOA+No|Q7x#UbBO45L$)_I1ir&j@6b z?}4s3-~)p8|Ic@RntJfyYamMh#Roy3f3&4m=ZTE~+K)8e!o0i$&4HgW z9^jv%t{ef*5MWH5CR=Wyo&TxKr=A8{!cQDHO|!q~{OQP?Cea@}`#I&)w$VGNkjf{) zuD>f~rCf??_MzoJw}SXpteXecuV33$7|!@I>ad*`UBa1Pj8u97Uj!Q>T(-XX}`6ektC5j$Fo_VZQNL zGgHGH6n4>YP|nTuFhtSUdl_Nw!KCPXCs!=j@({GI zR{!`)fNPoaCK@>6Cnz$@EpG&a3>1|kzWe`6kybw(@#!|SrQ^@_@C3^BkpQ)#aU{_- znSv$bwL2}AOX>F%E*5f!g%Gq))of)6E{uoZ{>_vwOj&?X_+a3Z`6Y>kF(RD`2yZz$rtyn*4- zf?BbWA0s~-e+NBaB7afCG-Xc|fPPq}(k-xIDUBs~t-cu;o*2#iBVtkw`%^4v8y`&J zNDC?dgxX^ezIcA(;VIt$lt-mdarYBN)QsOg!f|VCwOq2JWB2ds^htd3{$4l!L@bfuQK+r%IK*j}uVe>VI**f(CgFGdkA z7;i(GR3^KdTsh_Bd)(9R%XBekH3g+#fe}F-Z$76-UkZV{qNwJ8q-+Km>L+uYvx$ts z;&f!szqdl|M7=TaBqYL-x#txka|1;NfaSU>BYttG4Sydh0UC^}s^0KXYeP`cM!9fl z$ktkmw}}mkISrBO39enxaabY?GR}&ud##S`@2nA&nMpim))sw47wAS*Y&P;rKqgjf zFWBj|{4d^gHfl;J-gHcde37zSrtGA~heacYI7P5kuQt1=gKy2)oHr?2m+lr9DU!s0 zJfLdsxc|v!fKDAd=}|4ToiG!*q7qqZ7$zHvBcRR?jQmf?N<}hY)fE@Ysz3DbS(V@FI?N4REdz*k(!facDCSPU(H^2~0tmF%+`g|a zA97M8vqqNll$VxfoG~t_t4At++K&GoQ}(|yjuV4Wz>TiFJdq&m4%h`KZeHTRDf2i# z-^N(iJ(HK0i_6}9(GM6m>Vo$H+MR%A3@&CVwixZkx`KvgcMc$amm=(Fcsz_Yt%F?P zAPYslp8s-y;>Ep*0mSbgfTk_X<)r7}?u_C_()=P+iw4AOBV+k3D+Lc45htc=6S;ho zB2CBoSn-ijKb|c_xoZN3A?TV#u^*Q}Nnv`q^kgs1!$I2fCI^Z^p5j@&^$75yPua*y ztEkIJ+6Nngb60IHdVVl-w_O}$R2?5cU1d{%V#fiBrM4?muabggC}-;JXAh(^#74d zddf0BWjq5{;~lxy!A$&xVfq*Xjj(QdKU>g&SEi3XhIzFeDvIRlFte~&qyr>Mb(Dhv zx{^?rh$T(Akl+)p`Z6(z*+i10e??z35V0Co&l?8sq>v{KQ{A zyDalnSmj~%`0-4J{y8rKmsU zbL{r7fZ#V7*(%1}(S9{4I{aj3m&JB^#M47?|2?12PePkG4xbmG9Tw8*QDmp2E-*~0t zxWzg!!4IL&5L`v}R3dG=+r%zYhvLI=l(tQ*vgP3AKyj=w?m@Hf9l(PuxP8STn(47{+9w&xF*awK*q zSj*0z^4mY!0p&vECr35V1jtk$2t0!sB zDTJW(YrmJL2Ds#G0G7Czv`@afZkkDW=rbDAyI^_PFK@?lu}bIU<}RVAL_;7LN%tKt zw$xFNh&Q{h?KZXBQN42n+Qx3&mm@hG^Eep&T21CwM~_7(EU?q$GbI-vCBVitTH@{o z5vBy1OAiLAA1Sq+3zicq1uW~qy@jWUwNM|_1xM8@fDui}nPhH-EBr|2uyPv znQ0)Xh%}Fj5fEZ?3i;q*>#)(gv61f{g!c3^%K3Eu_hZ-#pq&&oxzk9MfEI){>0~jd z0ng`q;8Y)M{|al~UPFy@1$G+5-jhbT#Db6J;q48hD-G$2U#EU|&b^ip&GJK>zm5%7 zt|TWDs~q(t4KG5y7m%6w?Yr9_h+T)7>vqN}Lg-9XCRgo1_t^+K;3r*rasBiIg0ad? z{f7!^>`LF@r5XuZmYDL@iOy#A4;XcV#%bx^x7O|?kTGbs zjx#pIX)iJG{^-QiGx?xD&Tt|n=B2|;aYEzDyk~qpQgY1v_>jxY+BcnIu9F(4c#~z7 zpopro=poq-+(2$l&)m6Y`pU`f#`y7=n`{MJ-%SBmOLo_{3o|&}#itrm{08-BdIJ9(QY1 z+Vq$>#uv`Kgd;InXRc4TF_;JKbY{7!*wZiYwjhz}JlrnXF$Xqj10YZNLKj?1@mh!49-i{eqV8;y1|jVcYcA0x5EH66I23IF{J=<{Y$39_sfv4mcs zR*XKa2&9QxYF9#Lm@R((3CXta?d;cGx-ZFz8KFGfPBAxVeXJqZ510|-|^ zFVrxElMa((ECW4zh9M#vZdSmoxdNzlKNX`ls^!?dU#RgXJyZ4fR-0fVCHa6p{!}kh zE0u2Re^$-Ggp}L|DWjif-Vd~L>bI;FUWU;CrqrdM+RIe~Mcs!2+zsq*3vHoo4)B?0 zC^_kO{XVdZ>a<;8LIv}X^DoY!5;y?K%20p>+y&5A1)71;KCXf{gRdu!KyScTI`{DK biExUrCN4SFOW-Y_p+Q7tALocXef9qVqPpIu literal 17196 zcmc(`1yq!8+b=q(gribAfQW!JjFf;#OLs{OF@Q*e(jkq6(jg*9ND4>{5<|CihYXUV zq;%I%=Naq$uXEmSef#YFervN9Fz`HgU-7%H>vxB!smNXfQ-VPt&^38EsYf8tg(?sT zXMo@W@EY6+ku7x??Ky_~KS2t@c9`;F6X zmum_FNi@kziEBPLTua%Ahqrp?95i%anYJh7d{C1dJ72(mrzAGPFCYZMeE$<&PW-p8 zed81lTBzHflaa~Gg_@d!6eX6I-irs5y~Yc?6l}|FdRK92==5O9Wd&8JKjqY*il*j0H^T?!(|8R5`~*!kLV%xXx2E9V+ahkoi`G5QLr&@- z_-Qp;ZhZ?FL18c$6iWM~4+QdyW^oO&8Ab4EFNZ1O`<}G9?NfRD*g8EBIT@#k;i8`g z^;7#eZ)~Nal9)y7oxk^`2yN9|0)d(vU4z!v)(-mL3wmvjOdW4jSmRw5j#{l-JZfcD z<)CSB-!VUN#R2(&xZvOS*Cu)omeI!}`~`I4a*6HxQ^(q~nX-^5r<9bM6utfDvi$={`_X2Z`>Vtu=8Wex+(yvxtct6#F;H*8i06Zj8hM4~W;LSc ztw%`HXZpRB+|we;7KR)t)1-_Qgr|!-CJs(cJRVnYKo7NI5cace5x~5)Z&C;#Q7WFs z+&BF)Os}vxO$C1I5m|kFs=pZ*%KeVO##&5rgGooz%(( z;?k}l*={*Q9-^vpz`Qo zyO=5MgBgXw#U1XkC0FYcqamZBWGnY#zC3nfdDdQ8{FtTANf2t|wfJd_wxoFE&Fl1W zbS}SbNjCP%#t6r@?|l3v{3E@d#de=V^h zK5|o)2M45iYY7|?=TUX8U{Zer0?Ek|zQreG9reCT;ug7Bq3ZoNbtduYrjAYnZKDkj zeh8+nl2Z;D6r5qyFedNj-jw3Y6x?J|Ep=CrR=fQarWO;C=-)9F_fTq(C|*DG`)9E- z;56LZ9E{S_h{%V;TH(bpr{8%nrl2Ai>!g!Hl9)((H?P3J~9V~=Y?`MJh_ zDnV%Y>4hK!Z6*^Y9D5ouF_Kj(-dZ&^`Qv&yhMVm5UQbt9#tYG~0s8jNUN%HQ+qo|V zKiM_9i7Rk%$o6ylrE4=^hQ_*-F;`8A0*V=GWjDD4jsxH_nCXC zs6k*_clL|zS^j#brQxtaq01mpUZ^v!xbC@a=JE6)15Zln5YH*k-K*!e^q_|XEeQLa zg1#7B@nGH!^|Wxp07k?WbMh3MUGxKU4)wZF1ZEu^Y4=r z%!yk&13Djph9|NXMFur589|^xd43qE>GKYGAhf`4v!CK3=waG7un5*$(AwJvQGWwG zA@PGs2_k#Ixe-vo)A1_-Pk4zCF>n!%12{)~*bf}6gLx4E-37q_@6p%<@$iEJHvHQ^ zyLs*!l*Dg04a&V#VTX=Hqd;7@wJfSE{7Eeg}=tZ(6b?nB{ z!q7XXoQ9L_?!v;tLuDdRDIQ`VV5_P*MaWI`85~Vegl}UiDS?$e%oZY=vgNJ*>v?M(nlk|x4kggkn}CpIR&UO+z-0@ zm0)6*xovp#c%a@sJ z4$!_&=0{H!=o_!T03O3(m4E}@T1c8yr+u;58DOL~V2jUk@%LCtFj#Xfb5L-2XwNlv1*jHcZTSw+adq+#Po znc1k$bxrSN76+tp6*wqTgY@D@=(=;C700FEyF@nmH8VL1w^5Gll0JgFKfn%Q?y@bB z391K#7tMZ@hCy@T?u^EgObr(T%y&t4cMZ=;dA`l~o_Fx~`#Rr0+XDHq;=z81>moiO zk;pFv`lDSOgPdF2&=3`Nj9rdqCUG# zyu)wGs5|gGBXMKpUt1|Ry)Zp@CSJQ+U^}Iv+~V#UBpD(;ex=tk{%Nwa`<{z7eX!`! zZ1s2qgbOB_q-30#oPJhjPnGY>D>rFaCR);3C^~4^sgXHEPMvGHR9%Pkn5)63hPxM$ zoCks$ZvdL`t>5TOuCf`ucE0;jGBx5gGojaZ-NkMcvP8e+N=2=8_oG6CF6k|~FgHYW z3%SD>b-euu^+8Bih%V`F;*Dor;M(L)J=vB5eGh#0anm8G`K|}i-|1#*?{PY~IHe>a z!+cy3=>?ErI-z#0;Rk%Pm5#*ToBpmQxMl5arc$1mQ+2((;XVw(0+T1O%Qmz1*{vkEBxVU(`dphO^CUi%qFTvp8(m<{ z9Pv5GBU3JTyi~wir7|1?U|hQbz->RqYlH|F*VRo~a_EkBt%o3%oE&;NY)J+c6yyEB zA8uM0O(LJr9*`zk7v`!2zhBr;GK~pnnI#_;;P&Uk7kP3}d1F31@q?!pR8VM9t;#>% zu5+I+YNBRJ=f$eScT-c7`*M2CVWVngKP=dXUqN&CpSo*#)cBh`F(6lHeQz9<>l^d& z=5NtEoYk~(?@xbK&}~+ct5|-h8E=rX!!Bdx0J-WO5@nayPM<~YT-BNTOxHj?(%-?uK;7AjSz+~Tj@_s=)thx$N4HrPn9C3@%nmfHm60D==R!v8~;B#8? zYd3mW?Yau!@J*O9EeENs&>nP=F{~HuukAg7AXLkk#{KlxMlEvjqV^q?fbG%@n=Kp> z;;hrH0i4oS6h2nk{KdxC`hCy#4+^`@Mk#RRZMZqw$LH%|O~D-V+r^?1nhcsfq#qO> z3#PeS3Op}~*A|;IEpv5hv<&1OSF5Y3QvId4W4NmNjd$gbq9T(x)G>OM;}L^BF-R8` z%1lV4td273j!25X1DsQPbgy_+T7Xj`Io@XFr@!(y>Yo_CXHwIwmm2;}SJ(t;drgk^!elDuZ>i#flte21?bau&G<*+I>d%WUB=X*F zoG#zmNYM@Pr3O7FYlJX07V1~Lofg?5dR1?3AbI(tm(SV0Se@_w4PQgj$K}8apHV2( z5|PSn(WB)GBj3jA1ky*H!cK?ZXL~C+y)h0aJRnf%MFf{T!k`A_ zX|_*j1JNPYvsGkK=z1?3UU~Q(h!InS7*Dj^KnXW0F9fz?+HQXb6ZIPfrvj*f(;k=L z3IGWntNkZG^dsyqN|*rwmCtohk0>x`5I&69Wv026=vMchOlEPVb9CT4z$b3uS=QI= zj?Jsuq3drq2!PD5!*QCQ6d-6t72aF3hY4~RLM=mfop_QE1X01{N#PK5%YE6)Ys z1@&qG_nd7l=mR*xdtstTY(Q8GJv|+Xeh4ZB{d%4(;D&kknMi-nFPh_>7-ljKnsRvU z64#Y)U}CcQ>gK(bQFQJ`DO*#Ig@eyCi$#P&{<{f59ar|JfR+8?xF)_BQ+MzsiTMys zhm~F0y8!yQLN0dlJ!VRqF=6YAo{$jWk-wOzFReJWX$v{s*2nE3gQq{hpLRc59?9RD zAb7mo^s8B$W1aPRq<`&4Aj<1O3JrBbFRlZK?<=3x`S042E)C_M)zsxQNQN$;2GxsES-)YO!%bulkGOM)3K6-;5o_(gldYJT0_sL3(t z%SBU9;o$wkS3WS4Mj@)wxL+}CyPbmHM|_yyr(k$`!AZZbfXRqomlXH~FP_VlCXR`W zY8yshVpxZd?juThAN#tfv!v@<-SnOtR=n{u{EUrX0-z6dq!61(Bd_OYVd#hi)clIw zXp}x*+9P$NYaP~w)GcUSh7dN7%ZP8)MbS?my~-cI_VSM-Fvr90#vJXSJV-xl5{8wc|77)F+?%kI&Tc7FFCEkBi)?{62KM`_`ii5M1s}S~!eJQcf_WXU-yN3~^K`p{k zysvVt4=-FWC&VrS4kLzF4FQsutaVlHeDIv8=g?}z;6)Oc%LyxjA8P!+)$u_4sm`jk zh~&@?UN!22C)+=wM60~GeO5p{1Xx{p05`U=$#+M$R114MR7D321pjL(g`zJ?NXj(QX{N7yvj*=o4N>E-=(Vr~jT~K_u`dzkA zP+X$VO?n{S?9tW^inAcmO3p&%i*^%gr4znhn^!&N|~fXL6F&I37RYXsQ6 zk0?h!ch4h(;y$C4<3?*D=2U|-%~~9UQ3G`YGsyfVuwTtlP|(U%HAbxMvreGVvG8Mi z0Z5YC=aWXki<*~#H~c9V@KHC@6tKJZg-h&HA4m(kwzQW=FI@0)NrC;sEq=EM<=?rj!oFMlG(^N9`Jk=BMi_-hI}|mU9_v zzrvURGqB1tylIe0*SD~!U!5j=f_7ZVFt`d>p87kR?%u+nv_^eR z+xGG-807r|dT9I_L2P6(KQF{Oau3rwRXadLE^s!!j5z%G=oJ#)y_rhrT_rL3WSWFE zI6<{v)Z6@rhEpvttzG_yH|^3Nco+KWHbFob9N6aPO9tXTLTMZ`O93oDd&(yY+Nwhz z-eWuHAJL~fr+}GJ& zqHa(ruD>QE-OwK>oEW?2Xua(GD>{k(8=VAHkDKjE4^Z30a<{2c&fZ*RcTjcG+No)Y zkPf5QpIpAa7AK5^dY?U%R$PRi)c-!)!x;=si(vd~v7`7>qJA-BgNDgLM4`;(RXyt6 z{T~W>8xsXZE>e!i=H#{l!FNZ-Kfs;4L*2?@&JIzsZzFW;MlDFS-aOsBV_}K#tK(DD zLxh{$6r@ure4gjQKRUMOVm7dKj& zkd3R~P-zjhMr18B621>HlkuhsuU;bmQC9k#*kFB!-QhJo<*3{25A9w#{s>`716`?I z7rEErR-^1|cUyQL!R%d~l2cZ`B+oMJgiL6eE;`>XajGCnTwAe@XMN7|HI_BloM-=@ zxoSY>sp#jFe4@0o28w@VaW}l}ChO zD!l?K>n=SNrpJl+Yf~H=o8~OZ;ZJ+;1{Esn!pDYpS7)+#-0F5qMD+C`YY!21aHo|L zHMad-55VyfH$hIgZo*h93A+@ZIhR(a33s$_k6V{nz@E9hTkp7VH#O8|U8e4XQDvsg zUJQp#Pety}IgKdI94~Lt4rULUC&)yy+PthMq}#UAR-E(0pzc1&TW|m(lD<9{YlH(3 zkW4`H@#Iy+-zs6F-kaVeyYVu1Z?3DADw}5*2Ah)18IJk?xL9q-Dd00W!(fvUu@Ftl zS5gJD1$In>T{;YH_uIf-cfeiCOJrmx#b}pWIA7KtM2yl|qj$S*jZm)$+T37ptJn=* z_rF7G)HSlc?NDv?^=8*r?Cn@vM<%^YzQ_0E5>0uz-wc+1N;+Om&e47lX|P#cUot2@ z%y_Rh=g_yyzW!#Ji%Pi+lq%|z-mY}`vQ^)w%{@mTx63CG9qx)*vP2C*`jlN!@hWXq zhu*lqckkUXn4u+suhLEE=G|XMiw}Qs2u5&C1I~jEu;TW(GtkQB=KxmuU$oe7R=`en zr^8`aRIf{%{5~YWdlVHFRp309C@3rpp^*f9)CIs5{CijPKkUUS9q7;6&2buqR#sMK z+KBCW)=l9}39iCUCglbO;(K4*qDp|go9AoNzb>;aRZsDTTwz)$rnJeR3AF0#_ zSq<6S0PA8_Wn?b@nK6Z%={sky*VI}5Dp631CP+5(pGh0{#PCDle4>SEdaMu?0BdVj z(3!T(<~q%RkM^J1IK~>CKMQDf<(BhI7if4JSxO4MB%z!cfu+>maY5GQ?HCOvFmyB3F+{xVrn7=4L!a`(M;s95*jBX z>%$b5@iCVs7r)wg(f!`UZ$iP`IhBsG^3Ysu1w|KJ-6zN=MnAx)b$1w-b?p>|SUF)< zMsNA!6@#FmLo zG(5B|Bs)Dder3`rmO=VAkog8SiOL)E`0&O|Uql%@u2~(`<^jZXP`N!`Qd%V~GU<)s zNX`J{i^kdt$l*Mw-^8buXDjn#a9Xq70miG&e7s!Ip;h6 z)6|S>smJG6hR*U`UO}@$X&P0{zc1aBgBm@t*|BAAb?uESg?ebTy^r&D54vvp?3waEz^lcX z>y10tulfpsv9MLL3ekwpVlsX7ckljtBY-QB_Zwya*^;qeFjhO0zJ~0+tDbVc!&NKP z#`>2Un<u8F#J4lj<@E0*nXjGxfZ3;&m$T)+Fq!pz+#V*ju>9ri$l@>MiaL&OES=yOXQ zoh1!jHpjPlxo>$-L7DW`r+&F`GBM;_qemVxVR7aJMZd2 zTSd?+7S%$D0i`UM3WJNwTw}aa&X=vgt9KcZwqTBi$&HT`J1gJO{S(3XznW7tPjrq& zwHIXS*7Z~{s~RBE4sNd1`-dh!oB_AuP5?!{5N37}c+(?d`VyXMHR3-S^o>5xd__y+ z?X$fv^WckT_5OK9orjLO9ha}d)V#q4;vyrWU16Cm^f^0kIz!76<;M|>Le7K3mD1}! zTmc=QY>k}Iyg>BF@^8lF4lxg|RC^?g$}L-Bwgd~qGDJ>O$#?fztb8+tp&#ThMcHOw z9fLGUq?Vnw9jxzIKUpFeBk3KMKhBwzT6`k1)(#05=4K<%NmUls&oVQs4M_cpo&`vLuHHZY`R&<71uv~_=-*nb=M zz4-y|-nc*gH?aI;GYq~1q!WJ7V~MA>wxNH3gk%U%7QBwl!~m`wC4*yF9RcPcFunjGV4FQ7Us(p@|PsrKBc5FIZ z^m->zP4~u?I{f}xlj|YQL0Q2l?Fn0hANiBZnGxFQHiaoEfYDekrU0PGQ=|#?s81;L z`R`x@2bLh$Q^E$_WucjIlJ@x8kpwodb^N+C4{ovfGwo(6fLO4VRyPn{j~i^`I;7zv zW5;Kvx?^)?Z%pI}MN6r1YZ4j1We`vu0SjkXbkytxDlLuKz6L|vVK(S3Bsee1T-0Tak?4l+ z=;J9xxlreA<-lM{hMPt{Ca#Nm%Pn8HOinXu?Vwu! zoGI~Pbp3Bb^I*8@sPW3;`J4rfsLPL1lAW)d{lb`K6VzVV4JIRPEw3tx?>R@gs+400 zOfG)nScjBJb(9U#`CY9IQ;EUtd`sIbY*H5+JMEm*H#5BE%x5z+Xkt65>hQh}W8wI^ zKC1^vR5F?f!?9zalj-p4Z$d{O}oIfL*?G_PZ07L5MAoaJmR$YFSvwKICoz5>K?>~qw*z%KEf7T^Dq z(80MAZn0>aW6rnVg$RmB(H^#DFkStt$HNQfk z_qJ}iuS=$?mx(&a=)8UW_Y_Q9rxJ=S!4Zhy&XW~Oj@M=wxN%2E$TdeggL@bOl{L1# ztA9KV7u)*G$+(L460#&+l)K%nqfq~JoM}wg370SN8D6i4pug^0FcC>awy0}206Q{W zZ@z-wSkEAuKFw;0Tnoxht|~8j9-S&#pW`aC&6{~vjb9n5^Ar|&=5S1~s8d;E6Zr0T zJafk}$ZoBUfjT^4)Mu)oc>`)W!vE1LFOVTl@_wS0Ec%PJj7tYukYzrfp0;kvE44Kb zMpU*%uP|#xpF!DY#;MmiiLO$RFC0Bfe#>ctD6jrG;_b=d3(0K`Ei-*|GQQ80Un_r3 z&2&0Aw7TDX_qP?XKWTRPmlaX=EhDAN9L=hHYUy@Cv#h@f*F^=Dj>@}%yHe_?9XRLb z$XWVfli0ei-J;6^ zuKHRgf$x6DwBLmrinv0d9er=Fx46g=+SuL;jixHCdpmu{jXFbL3%XY?k?1vlAHT=- zZtfOtkao())eYf{Oktr>Dbp6G)$+X7*mptykeaSXF~Z7SFAE-7oel^|0Y~!Yv|i%N zux{X&$gxid>;yko`kO51g&N%1qn>{_=yzHrq5a7~HXK8dG^Z}Ox85z{P0*UWqZ!-le$TA(x~^ zzW-@v7RG5r6p#5G_ypgBo)?6(c!f^q~~sWR7Lew)}#Lk1KmLo8ww>G~D6e{&)K zS0If2!sHTmB5tajVgJBVjp%m_rv4<=v_4lI{#e?7o1FiL83(dP|HyLZvA{{yy^AMWCKTB}K&uFjNQExt;@ML|Sf*zoFzefsD`!K?(9@Cv%e{MD*21 z`p@FiuK<4Wja97r-*c%ockofx^Dn3=G)IYQ!=4`^^=#T7Og`|3DhdBVolO>VvR+zh z!}#ixh&0jOb|c1?3c9)aTRX_gfL%WT13CB};l5f$jX=O{n%?7Al+*8Js80n3*F!@x z2ra^`o)%V=;CL#DT0iBRf1_FB^I38QZ9@F$H)NLts)zl)C*vRYNOqcI+|JF>z7+@~ zDMd}D5fk@-JJ47{n3~xmyQt6)^>(H8D3am>BtEaAOSSxPWbSk3sh%b2&bHNhzQ~n_ z>T6MM@t#X-NL(&bxN2E(l16A2wIZb4mHwZ`L)O`5FO>V2C);NglC_o733#L!`ZY?JYGG zce{n7#K4K9#xWp=99wmc z2MWl?SBobgr0ls!x(Q+tA*2*-k9dJ4K3}X`5Q8J7WBd%afqn`;<$V2xC91jSFwJyNa~>b>+^6{0(f~=n{3{X%%9sC{ z&ym9xDk1q0kW%1$++VN*@)HMS0YE+fQy&19Uld1S+xcU`#&7T%SN6Y^@el-ncWM_0 zBvEKn`mEI2%1!5*sYtXuNCQx2;}_6qD*zUj;{I=azM2eVG=NBktLkN8mJi4%pe#i?KpSmMwAiiP#RnnRM&LY_OWE~)R{631Sl)6(pXu>S?0|us; z6N!N3a=j?Xol)guM7k(*1sg1yjFhj-l%G29*5B@FhXH%`d#L}+XMmvb;Cyfluklks zQBnH_!!L#e0OtV$FR*AJLI;8H0C@GE{{W0}=t&H^o;CIq@UYBhR)O3A7S;hA@kxrj z1XBV)!NC%OeJPE5ehSUc0Q?)4ymR4K!PyJ&FF;Wno7nSL{TXBY^l6&_0yS2bhb8-_L%*vsAjXOQ&Lir|Si8!Y0~VrQpVsu=83dz#~EN!EDD9 zigejab^zJN$>Hy_X0u?-|0jPIvpN^aSUa#3_Mk^mBbl^~+bDipdjhD#6k_LEIuG_< zPjKzVOw5;}N;tPlK8)NT%I=4hb#~;4KsBm%Zo2Yvk7(xvzO#gKnMPEg>`h^6cGL#E z^EEcYb|AR19@dgbIN)kgqqN;xz268H%l#nq+l5V@uC`Y~J5rfZrlk^z-%YaZ|C|)dlH0Tbg`Tl%hw&eeQL5+AwiY zf!fRGs)D+B#l2ZmkLc-2kMa5_SJaKk-Yp&!tFiCCZT1nxF`r?fSBtEp8V(zu6;&7D zR`eH*wT$(V>BZ>DO0CdSAGma>XE>Tsb=Z?Q7`}_I1bBZFzux?&>gsNq}^8P6KRjkCfI+cji26g)uLHbH)ho|nTZ5mBu@ zqF@zsgtLOtqFB>gsxI%!H{I_P3MtRLU8j>h)pO>k44M<;Fje#Xblo#Ij6v2_ z-?+L4Mu;KrTeUvaCJ-o~&~PP|jaie?U7LL)o#9A|uDnmGs?~ExK-@E=#CAQ-EhWW? zrRG~F57Hxhr#LbRD4p|b(|SHFa(bOnA@%R6vUeMt_us&CbZ`9DKj)KriIR_-T`ad| z$F1PIz4_&?b$!*k(sau_YQv(pTl#kC zGepy~yq0a;v%fgr%gew67xvSFa9>0`j=Po#&OYw4v8`skjpiV=Cg1wVA@rpF zL(x*_=hlOfS&|{E{C5oad`wgksF+aVjY@U9rP-Vq6Ee-NL#tYO2>a>kP_TO-*DI3z&e}}(;Uoc=1Dyao{AlHCAcBS`QDy& zIzh~k!jSuE+Q)l0^O`d2sIHgBb67dlB0Yc#2iD4Qe?ZXE1m~M37f5>Tg}cEZjLVrm zCc+AE=3eUvTq_JTw7d8AlK#5!w6P(a7wC1H$?8VFsiIeKJ zD01q41n6ORmO&5@Fei$9DBxYgw(Y;A#5efPB}J{(jAE`=GnB1P`<@d;t&%N&a;y&F zZdAfL!0=AUFGgG4!J(?O`zJ8o9aZX+P_CD%97f@24(wf*pFC15uM!{@2N-z|=Me|~ zIGP`%@&1JIImyOJUp_qIqjQL>9yTpeg|FE`%2*&J=T9RxQKu+wQSt+)5UHE za6m1xpFfzN0yI>exU}(iE30LKpQowqEBz^WSnLh~1}-n!AQUYF`bBunfWqrM_8Nsa z_07^|bd!x@TMe}_+B_9V3o5jD-~yPAIk6qcJ>G7J1!YrXCnN>4teD{B5Pmk|XPr|% z9vSL^dDyCnuSk$(xY|*~?mB)Ye=NI&=*zX2m68wJ?15WSqX>hrKX93(syTqO@K?^b z5Y{JBym733E!UZsIU4UL%QcJwk)}y|-%n2w{9+!wKl^YSxK&gSTtzxmzRb0U6^e6* z6|o@bo4AIP)&^a^w62f_zu@-@mv!`~;zT)IaV1&9m0#2}1B8o;iM2nCsAv#Vf~QAq zKyilu$+X8tvlz{h5iqX(+yUWIJg)lv1)$770V&v^w+~|Qj5>Gr_7?Gxy?|xLHb%p% z9Oo_UL~KUuhYiNSk=eX_V@O^26=4j!)BvH`22K4zM?A+!2I{sM~!0#0EnH3WATp2ToXa%y# zU2!TWWH<@R_PBoARSvT3PS)zu(plM ze!6%tkl*%EXEC%H66xI{W^z>x7YG|!Xy7IE~(l zw}iljHU`syWJ{_Bk3H)X6@QXHkN-sjl@lBDJjns-{aZqpWq><;*x@^PFTq%_bber9 zYz&f)4S9jNzfh924=VXR>wDLlAYB)*4L+tpc~{)rmYuX`6L?0)swO__Mu=x+jkNuK z{_YVh8e;i%IZ3MsV0_l$-JE}@#|!&0n^vdMMQg1+vpR#l07uAp36^jVJ5cJ9Gp_oa zUW#!TkURj3VWOOA*)wbW1?mP3(ov*7pSX<_^~n}TyI7W8?Soi>v-R74Cj$%4Pb`QB zLRg#r2YIj;(D3K9>_K$*)MRMHqo|b0gSK%0^v>!G&`^c)5|=JQN;C8s6|_(1RF197 zSy>yGO*|&=Ks(njBFV`{7Pl=MS5b9Nv4%^?_Hl=Zt=P8b?{SBDM(#8yPJXo}>(jVj zy~aGw?QUIQ`u#cZEZiErLE8bUY_1?p?z`~nKk-`L_SC>DJosCh&7lua;N6grk0`Qdii%5GWC{)0~O zh|Z4vT^WA|!6OQ%0qr3^eiQlLBb}s|LX{1+Q<>X5uaH?T&)EoEX%;0i^^$S3WqY6&<AsD9gcR6kbAY zya0+AFp@areP1IZHc6uaP4Ey)r6#^B{0eho+I%1mkd45W1R(31SJfw zy+hXwzvI;v4II1(Z%Ro56Pot2O)%avh95w_WINBX)EP7h@H-V2?3Cp2oBnOw1ObDi z?miu?xTwb$H=?-0n%ah@&GnDBEm3@~Ct7n`4l9?j*8Sl4fxDuUf@^K~ql<`|X27t?(g9v_(k_luoDSnyUgYc5dcFRxs{0~N#7@Zt zCvGmdHyNQzkyRc=lo9ieJpkKp-{l{@XP5aJ88>s=e2U>n>X7?0CLWAd691P5W>dmn z0JNT;8kk_6Hv=}k@ZY`_2o?4`929v)O=miAG7$oE2zmtQ?Bl$nx$RbsLNke%9ZN(i zQ}y0LKFm!7fS`gv1Hknc;8!(Zhk(1g{D2aIKtBKw0({xJx}J$ad0Df%3+QfQ{~<4} LB88B6?En7&{ct8A diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 4253263137..dc568d07df 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1608,6 +1608,31 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware ## Change history in MDM documentation +### April 2018 + + ++++ + + + + + + + + + + + +
    New or updated topicDescription
    [WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md)

    Added the following node in Windows 10, version 1803:

    +
      +
    • Settings/AllowVirtualGPU
      • +
    • Settings/SaveFilesToHost
      • +
    +
    + ### March 2018 diff --git a/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md b/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md index 710bbc8021..e123d33d74 100644 --- a/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md +++ b/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 11/01/2017 +ms.date: 03/22/2018 --- # WindowsDefenderApplicationGuard CSP @@ -81,6 +81,18 @@ The following diagram shows the WindowsDefenderApplicationGuard configuration se - 0 - Application Guard discards user-downloaded files and other items (such as, cookies, Favorites, and so on) during machine restart or user log-off. - 1 - Application Guard saves user-downloaded files and other items (such as, cookies, Favorites, and so on) for use in future Application Guard sessions. +**Settings/AllowVirtualGPU** +Added in Windows 10, version 1803. This policy setting allows you to determine whether Application Guard can use the virtual GPU to process graphics. Supported operations are Add, Get, Replace, and Delete. Value type is integer. + +- 0 (default) - Cannot access the vGPU and uses the CPU to support rendering graphics. When the policy is not configured, it is the same as disabled (0). +- 1 - Turns on the functionality to access the vGPU offloading graphics rendering from the CPU. This can create a faster experience when working with graphics intense websites or watching video within the container. + +**Settings/SaveFilesToHost** +Added in Windows 10, version 1803. This policy setting allows you to determine whether users can elect to download files from Edge in the container and persist files them from container to the host operating system. Supported operations are Add, Get, Replace, and Delete. Value type is integer. + +- 0 (default) - The user cannot download files from Edge in the container to the host file system. When the policy is not configured, it is the same as disabled (0). +- 1 - Turns on the functionality to allow users to download files from Edge in the container to the host file system. + **Status**

    Returns status on Application Guard installation and pre-requisites. Value type is integer. Supported operation is Get.

    diff --git a/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md b/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md index 4cc13ab9e8..a5571745b5 100644 --- a/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md +++ b/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 12/05/2017 +ms.date: 03/22/2018 --- # WindowsDefenderApplicationGuard DDF file @@ -16,6 +16,8 @@ This topic shows the OMA DM device description framework (DDF) for the **Windows Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download). +This XML is for Windows 10, version 1803. + ``` syntax 1.2 WindowsDefenderApplicationGuard - ./Vendor/MSFT + ./Device/Vendor/MSFT @@ -40,7 +42,7 @@ Looking for the DDF XML files? See [CSP DDF files download](configuration-servic - com.microsoft/1.1/MDM/WindowsDefenderApplicationGuard + com.microsoft/1.2/MDM/WindowsDefenderApplicationGuard @@ -200,6 +202,52 @@ Looking for the DDF XML files? See [CSP DDF files download](configuration-servic + + AllowVirtualGPU + + + + + + + + + + + + + + + + + + text/plain + + + + + SaveFilesToHost + + + + + + + + + + + + + + + + + + text/plain + + + Status @@ -229,7 +277,7 @@ Looking for the DDF XML files? See [CSP DDF files download](configuration-servic - + From aa6cca329c120c98470b7c9dc565ba0b333b4652 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Tue, 3 Apr 2018 00:35:56 +0000 Subject: [PATCH 33/63] Merged PR 6846: EventLogService/SpecifyMaximumFileSizeSecurityLog - updated the min size value --- windows/client-management/mdm/policy-csp-eventlogservice.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-eventlogservice.md b/windows/client-management/mdm/policy-csp-eventlogservice.md index 835be83eb0..89b92cd690 100644 --- a/windows/client-management/mdm/policy-csp-eventlogservice.md +++ b/windows/client-management/mdm/policy-csp-eventlogservice.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/12/2018 +ms.date: 04/02/2018 --- # Policy CSP - EventLogService @@ -200,7 +200,7 @@ ADMX Info: This policy setting specifies the maximum size of the log file in kilobytes. -If you enable this policy setting, you can configure the maximum log file size to be between 1 megabyte (1024 kilobytes) and 2 terabytes (2147483647 kilobytes) in kilobyte increments. +If you enable this policy setting, you can configure the maximum log file size to be between 20 megabytes (20480 kilobytes) and 2 terabytes (2147483647 kilobytes) in kilobyte increments. If you disable or do not configure this policy setting, the maximum size of the log file will be set to the locally configured value. This value can be changed by the local administrator using the Log Properties dialog and it defaults to 20 megabytes. From 96ed0fdb7761ddddb86468e034d3e709e2eb612b Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Tue, 3 Apr 2018 17:37:31 +0000 Subject: [PATCH 34/63] Merged PR 6858: Experience/AllowManualMDMUnenrollment inPolicy CSP - updated the description --- windows/client-management/mdm/policy-csp-experience.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-experience.md b/windows/client-management/mdm/policy-csp-experience.md index f1e51391bc..51935ec669 100644 --- a/windows/client-management/mdm/policy-csp-experience.md +++ b/windows/client-management/mdm/policy-csp-experience.md @@ -359,7 +359,7 @@ The following list shows the supported values: -Specifies whether to allow the user to delete the workplace account using the workplace control panel. If the device is Azure Active Directory joined and MDM enrolled (e.g. auto-enrolled), which is majority of the case for Intune, then disabling the MDM unenrollment has no effect. +Specifies whether to allow the user to delete the workplace account using the workplace control panel. If the device is Azure Active Directory joined and MDM enrolled (e.g. auto-enrolled), then disabling the MDM unenrollment has no effect. > [!NOTE] > The MDM server can always remotely delete the account. From c1ef539de7220912cb4b27de65022a4ee1d8e8f4 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 3 Apr 2018 18:10:03 +0000 Subject: [PATCH 35/63] Merged PR 6864: Removed border from table Removed table border Fixed conflict --- .../deploy-windows-mdt/create-a-windows-10-reference-image.md | 4 ++-- .../deployment/upgrade/resolve-windows-10-upgrade-errors.md | 2 +- windows/deployment/windows-10-deployment-scenarios.md | 4 ++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index 40c3fdf557..2388a8b57a 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -9,7 +9,7 @@ ms.localizationpriority: high ms.sitesec: library ms.pagetype: mdt author: mtniehaus -ms.date: 11/09/2017 +ms.date: 04/03/2018 --- # Create a Windows 10 reference image @@ -20,7 +20,7 @@ ms.date: 11/09/2017 Creating a reference image is important because that image serves as the foundation for the devices in your organization. In this topic, you will learn how to create a Windows 10 reference image using the Microsoft Deployment Toolkit (MDT). You will create a deployment share, configure rules and settings, and import all the applications and operating system files required to build a Windows 10 reference image. After completing the steps outlined in this topic, you will have a Windows 10 reference image that can be used in your deployment solution. For the purposes of this topic, we will use four machines: DC01, MDT01, HV01, and PC0001. DC01 is a domain controller, PC0001 is a Windows 10 Enterprise x64 client, and MDT01 is a Windows Server 2012 R2 standard server. HV01 is a Hyper-V host server, but HV01 could be replaced by PC0001 as long as PC0001 has enough memory and is capable of running Hyper-V. MDT01, HV01, and PC0001 are members of the domain contoso.com for the fictitious Contoso Corporation. ->{!NOTE]}   +>!NOTE] >For important details about the setup for the steps outlined in this article, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md#proof).   ![figure 1](../images/mdt-08-fig01.png) diff --git a/windows/deployment/upgrade/resolve-windows-10-upgrade-errors.md b/windows/deployment/upgrade/resolve-windows-10-upgrade-errors.md index 347b42dee1..1f7c1def87 100644 --- a/windows/deployment/upgrade/resolve-windows-10-upgrade-errors.md +++ b/windows/deployment/upgrade/resolve-windows-10-upgrade-errors.md @@ -7,7 +7,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: deploy author: greg-lindsay -ms.date: 03/30/2018 +ms.date: 04/03/2018 ms.localizationpriority: high --- diff --git a/windows/deployment/windows-10-deployment-scenarios.md b/windows/deployment/windows-10-deployment-scenarios.md index 51a8bd92fe..2dced411ff 100644 --- a/windows/deployment/windows-10-deployment-scenarios.md +++ b/windows/deployment/windows-10-deployment-scenarios.md @@ -7,7 +7,7 @@ ms.prod: w10 ms.mktglfcycl: deploy ms.localizationpriority: high ms.sitesec: library -ms.date: 03/16/2018 +ms.date: 04/03/2018 author: greg-lindsay --- @@ -23,7 +23,7 @@ The following table summarizes various Windows 10 deployment scenarios. The scen - Dynamic deployment methods enable you to configure applications and settings for specific use cases. - Traditional deployment methods use tools such as Microsoft Deployment Toolkit (MDT) and System Center Configuration Manager.
      -
    +
    From 10b3e93adca5c36e87d8112e72c0e14f6efe74a5 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Tue, 3 Apr 2018 12:14:21 -0700 Subject: [PATCH 36/63] added item about exporting large data sets --- .../windows-analytics-FAQ-troubleshooting.md | 22 ++++++++++++++++++- 1 file changed, 21 insertions(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md index 5d917cf8eb..6719b903ce 100644 --- a/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md +++ b/windows/deployment/update/windows-analytics-FAQ-troubleshooting.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: deploy author: jaimeo ms.author: jaimeo -ms.date: 03/20/2018 +ms.date: 04/03/2018 --- # Frequently asked questions and troubleshooting Windows Analytics @@ -33,6 +33,8 @@ If you've followed the steps in the [Enrolling devices in Windows Analytics](win [Disable Upgrade Readiness](#disable-upgrade-readiness) +[Exporting large data sets](#exporting-large-data-sets) + ### Devices not showing up @@ -179,6 +181,24 @@ If you want to stop using Upgrade Readiness and stop sending diagnostic data dat 3. If you enabled **Internet Explorer Site Discovery**, you can disable Internet Explorer data collection by setting the *IEDataOptIn* registry key to value "0". The IEDataOptIn key can be found under: *HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection*. 4. **Optional step:** You can also remove the “CommercialId” key from: "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection". +### Exporting large data sets + +Azure Log Analytics is optimized for advanced analytics of large data sets and can efficiently generate summaries and analytics for them. The query language is not optimized (or intended) for returning large raw data sets and has built-in limits to protect against overuse. There are times when it might be necessary to get more data than this, but that should be done sparingly since this is not the intended way to use Azure Log Analytics. The following code snippet shows how to retrieve data from UAApp one “page” at a time: + +``` +let snapshot = toscalar(UAApp | summarize max(TimeGenerated)); +let pageSize = 100000; +let pageNumber = 0; + +UAApp +| where TimeGenerated == snapshot and IsRollup==true and RollupLevel=="Granular" and Importance == "Low install count" +| order by AppName, AppVendor, AppVersion desc +| serialize +| where row_number(0) >= (pageSize * pageNumber) +| take pageSize +``` + + ## Other common questions From 1daf1317ef19b94b140a34695777a97664819853 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Tue, 3 Apr 2018 15:40:50 -0700 Subject: [PATCH 37/63] initial import --- .../update/windows-update-sources.md | 159 ++++++++++++++++++ 1 file changed, 159 insertions(+) create mode 100644 windows/deployment/update/windows-update-sources.md diff --git a/windows/deployment/update/windows-update-sources.md b/windows/deployment/update/windows-update-sources.md new file mode 100644 index 0000000000..1f8e758809 --- /dev/null +++ b/windows/deployment/update/windows-update-sources.md @@ -0,0 +1,159 @@ + +--- +title: Determining the Windows Update Service source +description: Determine the source that Windows Update service is currently using. +ms.prod: w10 +ms.mktglfcycl: +ms.sitesec: library +author: kaushika-msft +ms.localizationpriority: high +ms.author: kaushika +ms.date: 04/03/2018 +--- + +# Determining the Windows Update Service source + +Windows 10 devices can receive updates from a variety of sources, including Windows Update online, a Windows Server Update Services server, and others. To determine the source of Windows Updates currently being used on a device, follow these steps:  + +1. Start Windows PowerShell as an administrator +2. Run `\$MUSM = New-Object -ComObject “Microsoft.Update.ServiceManager”`. +3. Run `\$MUSM.Services`. The resulting output should be similar to the following: + +``` +Name : Microsoft Update +ContentValidationCert : {} +ExpirationDate : +IsManaged : False +IsRegisteredWithAU : True +IssueDate : 01-Jan-01 12:00:00 AM +OffersWindowsUpdates : True +RedirectUrls : System.__ComObject +ServiceID : 7971f918-a847-4430-9279-4a52d1efe18d +IsScanPackageService : False +CanRegisterWithAU : True +ServiceUrl : https://fe2.update.microsoft.com/v6/ +SetupPrefix : mu +IsDefaultAUService : False + +Name : DCat Flighting Prod +ContentValidationCert : {} +ExpirationDate : +IsManaged : False +IsRegisteredWithAU : False +IssueDate : 01-Jan-01 12:00:00 AM +OffersWindowsUpdates : False +RedirectUrls : System.__ComObject +ServiceID : 8b24b027-1dee-babb-9a95-3517dfb9c552 +IsScanPackageService : False +CanRegisterWithAU : False +ServiceUrl : https://fe3.delivery.mp.microsoft.com/ +SetupPrefix : wu +IsDefaultAUService : False + +Name : Windows Store (DCat Prod) +ContentValidationCert : {} +ExpirationDate : +IsManaged : False +IsRegisteredWithAU : False +IssueDate : 01-Jan-01 12:00:00 AM +OffersWindowsUpdates : False +RedirectUrls : System.__ComObject +ServiceID : 855e8a7c-ecb4-4ca3-b045-1dfa50104289 +IsScanPackageService : False +CanRegisterWithAU : True +ServiceUrl : https://fe3.delivery.mp.microsoft.com/ +SetupPrefix : ws +IsDefaultAUService : False + +Name : Windows Server Update Service +ContentValidationCert : {} +ExpirationDate : 18-Jun-54 9:21:00 PM +IsManaged : True +IsRegisteredWithAU : True +IssueDate : 01-Jan-03 12:00:00 AM +OffersWindowsUpdates : True +RedirectUrls : System.__ComObject +ServiceID : 3da21691-e39d-4da6-8a4b-b43877bcb1b7 +IsScanPackageService : False +CanRegisterWithAU : True +ServiceUrl : +SetupPrefix : +IsDefaultAUService : True + +Name : Windows Update +ContentValidationCert : {} +ExpirationDate : +IsManaged : False +IsRegisteredWithAU : False +IssueDate : 01-Jan-01 12:00:00 AM +OffersWindowsUpdates : True +RedirectUrls : System.__ComObject +ServiceID : 9482f4b4-e343-43b6-b170-9a65bc822c77 +IsScanPackageService : False +CanRegisterWithAU : True +ServiceUrl : https://fe2.update.microsoft.com/v6/ +SetupPrefix : wu +IsDefaultAUService : False +``` + + +4. Check the category **Name** and **OffersWindowsUpdates**:  + +Name: **Microsoft Update** + +Indicates the source against which we will are checking the Client capability. Microsoft Updates indicates, updates for other Microsoft Products checkbox. + +OffersWindowsUpdates: **True** + +Indicates that the client is configured to receive updates for all Microsoft Products (Office, etc.) + +--- + +Name: **DCat Flighting Prod** + +The update source is the Windows Insider Program. + +OffersWindowsUpdates: **False** + +Indicates that the client will not receive or is not configured to receive these updates. + +--- + +Name: **Windows Store (DCat Prod)** + +The update source is Insider Updates for Store Apps. + +OffersWindowsUpdates: **False** + +Indicates that the client will not receive or is not configured to receive these updates. + +--- + +Name: **Windows Server Update Service** + +The source is a Windows Server Updates Services server. + +OffersWindowsUpdates: **True** + +The client is configured to receive updates from WSUS + +--- + +Name: **Windows Update** + +The source is Windows Update. + +OffersWindowsUpdates: **True** + +The client is configured to receive updates from Windows Update Online + +--- +  + +See also: + +[Understanding the Windowsupdate.log file for advanced users](https://support.microsoft.com/help/4035760) + +[You can't install updates on a Windows-based computer](https://support.microsoft.com/help/2509997/you-can-t-install-updates-on-a-windows-based-computer) + +[How to read the Windowsupdate.log file on Windows 7 and earlier OS versions](https://support.microsoft.com/help/902093/how-to-read-the-windowsupdate-log-file) From 0d915caeb085c71c3b3bcb63989827b2ab83d3c9 Mon Sep 17 00:00:00 2001 From: SergioCalderonR Date: Wed, 4 Apr 2018 08:54:23 -0500 Subject: [PATCH 38/63] Removed en-us and updated some other links --- ...oy-windows-defender-application-control.md | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md b/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md index 87e30aef2a..a184547f2b 100644 --- a/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md +++ b/windows/security/threat-protection/device-guard/steps-to-deploy-windows-defender-application-control.md @@ -797,7 +797,7 @@ To create a WDAC policy, copy each of the following commands into an elevated Wi ` $CIPolicyBin=$CIPolicyPath+"DeviceGuardPolicy.bin"` -2. Use [New-CIPolicy](https://docs.microsoft.com/en-us/powershell/module/configci/new-cipolicy?view=win10-ps) to create a new WDAC policy by scanning the system for installed applications: +2. Use [New-CIPolicy](https://docs.microsoft.com/powershell/module/configci/new-cipolicy?view=win10-ps) to create a new WDAC policy by scanning the system for installed applications: ` New-CIPolicy -Level FilePublisher -FilePath $InitialCIPolicy –UserPEs -FallBack Hash 3> CIPolicyLog.txt ` @@ -811,7 +811,7 @@ To create a WDAC policy, copy each of the following commands into an elevated Wi > - The preceding example includes `3> CIPolicylog.txt`, which redirects warning messages to a text file, **CIPolicylog.txt**. -3. Use [ConvertFrom-CIPolicy](https://docs.microsoft.com/en-us/powershell/module/configci/convertfrom-cipolicy?view=win10-ps) to convert the WDAC policy to a binary format: +3. Use [ConvertFrom-CIPolicy](https://docs.microsoft.com/powershell/module/configci/convertfrom-cipolicy?view=win10-ps) to convert the WDAC policy to a binary format: ` ConvertFrom-CIPolicy $InitialCIPolicy $CIPolicyBin` @@ -887,7 +887,7 @@ Use the following procedure after you have been running a computer with a WDAC p ` $CIAuditPolicy=$CIPolicyPath+"DeviceGuardAuditPolicy.xml"` -3. Use [New-CIPolicy](https://docs.microsoft.com/en-us/powershell/module/configci/new-cipolicy?view=win10-ps) to generate a new WDAC policy from logged audit events. This example uses a file rule level of **Hash** and includes `3> CIPolicylog.txt`, which redirects warning messages to a text file, **CIPolicylog.txt**. +3. Use [New-CIPolicy](https://docs.microsoft.com/powershell/module/configci/new-cipolicy?view=win10-ps) to generate a new WDAC policy from logged audit events. This example uses a file rule level of **Hash** and includes `3> CIPolicylog.txt`, which redirects warning messages to a text file, **CIPolicylog.txt**. ` New-CIPolicy -Audit -Level Hash -FilePath $CIAuditPolicy –UserPEs 3 -FallBack Hash > CIPolicylog.txt` @@ -955,11 +955,11 @@ To merge two WDAC policies, complete the following steps in an elevated Windows > [!Note] > The variables in this section specifically expect to find an initial policy on your desktop called **InitialScan.xml** and an audit WDAC policy called **DeviceGuardAuditPolicy.xml**. If you want to merge other WDAC policies, update the variables accordingly. -2. Use [Merge-CIPolicy](https://technet.microsoft.com/library/mt634485.aspx) to merge two policies and create a new WDAC policy: +2. Use [Merge-CIPolicy](https://docs.microsoft.com/powershell/module/configci/merge-cipolicy?view=win10-ps) to merge two policies and create a new WDAC policy: ` Merge-CIPolicy -PolicyPaths $InitialCIPolicy,$AuditCIPolicy -OutputFilePath $MergedCIPolicy` -3. Use [ConvertFrom-CIPolicy](https://docs.microsoft.com/en-us/powershell/module/configci/convertfrom-cipolicy?view=win10-ps) to convert the merged WDAC policy to binary format: +3. Use [ConvertFrom-CIPolicy](https://docs.microsoft.com/powershell/module/configci/convertfrom-cipolicy?view=win10-ps) to convert the merged WDAC policy to binary format: ` ConvertFrom-CIPolicy $MergedCIPolicy $CIPolicyBin ` @@ -997,14 +997,14 @@ Every WDAC policy is created with audit mode enabled. After you have successfull ` copy $InitialCIPolicy $EnforcedCIPolicy` -4. Use [Set-RuleOption](https://technet.microsoft.com/library/mt634483.aspx) to delete the audit mode rule option: +4. Use [Set-RuleOption](https://docs.microsoft.com/powershell/module/configci/set-ruleoption?view=win10-ps) to delete the audit mode rule option: ` Set-RuleOption -FilePath $EnforcedCIPolicy -Option 3 -Delete` > [!Note] > To enforce a WDAC policy, you delete option 3, the **Audit Mode Enabled** option. There is no “enforced” option that can be placed in a WDAC policy. -5. Use [ConvertFrom-CIPolicy](https://docs.microsoft.com/en-us/powershell/module/configci/convertfrom-cipolicy?view=win10-ps) to convert the new WDAC policy to binary format: +5. Use [ConvertFrom-CIPolicy](https://docs.microsoft.com/powershell/module/configci/convertfrom-cipolicy?view=win10-ps) to convert the new WDAC policy to binary format: ` ConvertFrom-CIPolicy $EnforcedCIPolicy $CIPolicyBin` @@ -1052,7 +1052,7 @@ If you do not have a code signing certificate, see the [Optional: Create a code ` cd $env:USERPROFILE\Desktop ` -5. Use [Add-SignerRule](https://technet.microsoft.com/library/mt634479.aspx) to add an update signer certificate to the WDAC policy: +5. Use [Add-SignerRule](https://docs.microsoft.com/powershell/module/configci/add-signerrule?view=win10-ps) to add an update signer certificate to the WDAC policy: ` Add-SignerRule -FilePath $InitialCIPolicy -CertificatePath -Kernel -User –Update` @@ -1060,11 +1060,11 @@ If you do not have a code signing certificate, see the [Optional: Create a code > *<Path to exported .cer certificate>* should be the full path to the certificate that you exported in step 3. Also, adding update signers is crucial to being able to modify or disable this policy in the future. For more information about how to disable signed WDAC policies, see the [Disable signed Windows Defender Application Control policies within Windows](#disable-signed-windows-defender-application-control-policies-within-windows) section. -6. Use [Set-RuleOption](https://technet.microsoft.com/library/mt634483.aspx) to remove the unsigned policy rule option: +6. Use [Set-RuleOption](https://docs.microsoft.com/powershell/module/configci/set-ruleoption?view=win10-ps) to remove the unsigned policy rule option: ` Set-RuleOption -FilePath $InitialCIPolicy -Option 6 -Delete` -7. Use [ConvertFrom-CIPolicy](https://docs.microsoft.com/en-us/powershell/module/configci/convertfrom-cipolicy?view=win10-ps) to convert the policy to binary format: +7. Use [ConvertFrom-CIPolicy](https://docs.microsoft.com/powershell/module/configci/convertfrom-cipolicy?view=win10-ps) to convert the policy to binary format: ` ConvertFrom-CIPolicy $InitialCIPolicy $CIPolicyBin` From 473823fc5248678204a3add491fb2b1f47450396 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 4 Apr 2018 07:39:48 -0700 Subject: [PATCH 39/63] copyedit --- .../security-policy-settings/account-lockout-duration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-policy-settings/account-lockout-duration.md b/windows/security/threat-protection/security-policy-settings/account-lockout-duration.md index 504909f266..7da0245da9 100644 --- a/windows/security/threat-protection/security-policy-settings/account-lockout-duration.md +++ b/windows/security/threat-protection/security-policy-settings/account-lockout-duration.md @@ -29,7 +29,7 @@ This policy setting is dependent on the **Account lockout threshold** policy set If [Account lockout threshold](account-lockout-threshold.md) is configured, after the specified number of failed attempts, the account will be locked out. If th **Account lockout duration** is set to 0, the account will remain locked until an administrator unlocks it manually. -It is advisable to set **Account lockout duration** to approximately 15 minutes. To specify that the account will never be locked out, set the Account lockout threshold value to 0. +It is advisable to set **Account lockout duration** to approximately 15 minutes. To specify that the account will never be locked out, set the **Account lockout threshold** value to 0. ### Location From 636f8bc5466625af729ba4c3832d7b7dbc8e1d17 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Wed, 4 Apr 2018 16:13:14 +0000 Subject: [PATCH 40/63] Merged PR 6905: Update endpoints --- .../change-history-for-configure-windows-10.md | 8 +++++++- ...e-windows-diagnostic-data-in-your-organization.md | 12 +++++++++--- 2 files changed, 16 insertions(+), 4 deletions(-) diff --git a/windows/configuration/change-history-for-configure-windows-10.md b/windows/configuration/change-history-for-configure-windows-10.md index 822b8ec80b..b328c042ce 100644 --- a/windows/configuration/change-history-for-configure-windows-10.md +++ b/windows/configuration/change-history-for-configure-windows-10.md @@ -8,13 +8,19 @@ ms.sitesec: library ms.pagetype: security ms.localizationpriority: high author: jdeckerms -ms.date: 03/23/2018 +ms.date: 04/04/2018 --- # Change history for Configure Windows 10 This topic lists new and updated topics in the [Configure Windows 10](index.md) documentation for Windows 10 and Windows 10 Mobile. +## April 2018 + +New or changed topic | Description +--- | --- +[Configure Windows diagnostic data in your organization](configure-windows-diagnostic-data-in-your-organization.md) | Updated endpoints. + ## March 2018 New or changed topic | Description diff --git a/windows/configuration/configure-windows-diagnostic-data-in-your-organization.md b/windows/configuration/configure-windows-diagnostic-data-in-your-organization.md index c77762a5e4..ce9e5b4792 100644 --- a/windows/configuration/configure-windows-diagnostic-data-in-your-organization.md +++ b/windows/configuration/configure-windows-diagnostic-data-in-your-organization.md @@ -8,7 +8,7 @@ ms.sitesec: library ms.pagetype: security ms.localizationpriority: high author: brianlic-msft -ms.date: 10/17/2017 +ms.date: 04/04/2018 --- # Configure Windows diagnostic data in your organization @@ -143,11 +143,17 @@ All diagnostic data data is encrypted using SSL and uses certificate pinning dur The Microsoft Data Management Service routes data back to our secure cloud storage. Only Microsoft personnel with a valid business justification are permitted access. -The following table defines the endpoints for diagnostic data services: +The following table defines the endpoints for Connected User Experiences and Telemetry component: + +Windows release | Endpoint +--- | --- +Windows 10, versions 1703 and 1709 | Diagnostics data: v10.vortex-win.data.microsoft.com/collect/v1

    Functional: v20.vortex-win.data.microsoft.com/collect/v1
    Windows Advanced Threat Protection is country specific and the prefix changes by country for example: **de**.vortex-win.data.microsoft.com/collect/v1
    settings-win.data.microsoft.com +Windows 10, version 1607 | v10.vortex-win.data.microsoft.com

    settings-win.data.microsoft.com + +The following table defines the endpoints for other diagnostic data services: | Service | Endpoint | | - | - | -| Connected User Experiences and Telemetry component | v10.vortex-win.data.microsoft.com
    settings-win.data.microsoft.com | | [Windows Error Reporting](http://msdn.microsoft.com/library/windows/desktop/bb513641.aspx) | watson.telemetry.microsoft.com | | [Online Crash Analysis](http://msdn.microsoft.com/library/windows/desktop/ee416349.aspx) | oca.telemetry.microsoft.com | | OneDrive app for Windows 10 | vortex.data.microsoft.com/collect/v1 | From 8136381cf86f842fc7a3030a2a608262ecabd8c1 Mon Sep 17 00:00:00 2001 From: "Andrea Bichsel (Aquent LLC)" Date: Wed, 4 Apr 2018 09:49:19 -0700 Subject: [PATCH 41/63] Changed updates.microsoft.com to update.* --- ...gure-network-connections-windows-defender-antivirus.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/configure-network-connections-windows-defender-antivirus.md b/windows/security/threat-protection/windows-defender-antivirus/configure-network-connections-windows-defender-antivirus.md index f44c485e39..2de4642ade 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/configure-network-connections-windows-defender-antivirus.md +++ b/windows/security/threat-protection/windows-defender-antivirus/configure-network-connections-windows-defender-antivirus.md @@ -9,9 +9,9 @@ ms.mktglfcycl: manage ms.sitesec: library ms.pagetype: security ms.localizationpriority: medium -author: iaanw -ms.author: iawilt -ms.date: 11/20/2017 +author: andreabichsel +ms.author: v-anbic +ms.date: 04/04/2018 --- # Configure and validate network connections for Windows Defender Antivirus @@ -77,7 +77,7 @@ Microsoft Update Service (MU) Signature and product updates     From 2bec4fe1203564b98b4337fe1cf69bc7ff466d8f Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Wed, 4 Apr 2018 16:57:37 +0000 Subject: [PATCH 42/63] Merged PR 6909: Added note to KioskBrowser policies --- .../mdm/policy-csp-kioskbrowser.md | 21 ++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-kioskbrowser.md b/windows/client-management/mdm/policy-csp-kioskbrowser.md index 27f995e4d9..6554f182c6 100644 --- a/windows/client-management/mdm/policy-csp-kioskbrowser.md +++ b/windows/client-management/mdm/policy-csp-kioskbrowser.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 03/12/2018 +ms.date: 04/03/2018 --- # Policy CSP - KioskBrowser @@ -14,6 +14,7 @@ ms.date: 03/12/2018 > [!WARNING] > Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. +These policies only apply to kiosk browser.
    @@ -83,6 +84,9 @@ ms.date: 03/12/2018 Added in Windows 10, version 1803. List of exceptions to the blocked website URLs (with wildcard support). This is used to configure URLs kiosk browsers are allowed to navigate to, which are a subset of the blocked URLs. +> [!Note] +> This policy only applies to kiosk browser. + @@ -127,6 +131,9 @@ Added in Windows 10, version 1803. List of exceptions to the blocked website URL Added in Windows 10, version 1803. List of blocked website URLs (with wildcard support). This is used to configure blocked URLs kiosk browsers cannot navigate to. +> [!Note] +> This policy only applies to kiosk browser. + @@ -171,6 +178,9 @@ Added in Windows 10, version 1803. List of blocked website URLs (with wildcard s Added in Windows 10, version 1803. Configures the default URL kiosk browsers to navigate on launch and restart. +> [!Note] +> This policy only applies to kiosk browser. + @@ -215,6 +225,9 @@ Added in Windows 10, version 1803. Configures the default URL kiosk browsers to Added in Windows 10, version 1803. Enable/disable kiosk browser's home button. +> [!Note] +> This policy only applies to kiosk browser. + @@ -259,6 +272,9 @@ Added in Windows 10, version 1803. Enable/disable kiosk browser's home button. Added in Windows 10, version 1803. Enable/disable kiosk browser's navigation buttons (forward/back). +> [!Note] +> This policy only applies to kiosk browser. + @@ -305,6 +321,9 @@ Added in Windows 10, version 1803. Amount of time in minutes the session is idle The value is an int 1-1440 that specifies the amount of minutes the session is idle until the kiosk browser restarts in a fresh state. The default value is empty which means there is no idle timeout within the kiosk browser. +> [!Note] +> This policy only applies to kiosk browser. +
    From 84187159ab89462133240ca6144b663e52e083b6 Mon Sep 17 00:00:00 2001 From: "Andrea Bichsel (Aquent LLC)" Date: Wed, 4 Apr 2018 10:00:58 -0700 Subject: [PATCH 43/63] Fixed table in compatibility topic --- .../windows-defender-antivirus-compatibility.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md b/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md index 4fe762ad49..fb71bda388 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-compatibility.md @@ -9,9 +9,9 @@ ms.mktglfcycl: manage ms.sitesec: library ms.pagetype: security ms.localizationpriority: medium -author: iaanw -ms.author: iawilt -ms.date: 11/09/2017 +author: andreabichsel +ms.author: v-anbic +ms.date: 04/04/2018 --- @@ -67,7 +67,7 @@ This table indicates the functionality and features that are available in each s State | Description | [Real-time protection](configure-real-time-protection-windows-defender-antivirus.md) and [cloud-delivered protection](enable-cloud-protection-windows-defender-antivirus.md) | [Limited periodic scanning availability](limited-periodic-scanning-windows-defender-antivirus.md) | [File scanning and detection information](customize-run-review-remediate-scans-windows-defender-antivirus.md) | [Threat remediation](configure-remediation-windows-defender-antivirus.md) | [Threat definition updates](manage-updates-baselines-windows-defender-antivirus.md) :-|:-|:-:|:-:|:-:|:-:|:-: -Passive mode | Windows Defender AV will not be used as the antivirus app, and threats will not be remediated by Windows Defender AV. Files will be scanned and reports will be provided for threat detections which are shared with the Windows Defender ATP service. | [!include[Check mark no](images/svg/check-no.svg)] | [!include[Check mark yes](images/svg/check-yes.svg)] | [!include[Check mark yes](images/svg/check-yes.svg)] | [!include[Check mark no](images/svg/check-no.svg)] | [!include[Check mark yes](images/svg/check-yes.svg)] +Passive mode | Windows Defender AV will not be used as the antivirus app, and threats will not be remediated by Windows Defender AV. Files will be scanned and reports will be provided for threat detections which are shared with the Windows Defender ATP service. | [!include[Check mark no](images/svg/check-no.svg)] | [!include[Check mark no](images/svg/check-no.svg)] | [!include[Check mark yes](images/svg/check-yes.svg)] | [!include[Check mark no](images/svg/check-no.svg)] | [!include[Check mark yes](images/svg/check-yes.svg)] Automatic disabled mode | Windows Defender AV will not be used as the antivirus app. Files will not be scanned and threats will not be remediated. | [!include[Check mark no](images/svg/check-no.svg)] | [!include[Check mark yes](images/svg/check-yes.svg)] | [!include[Check mark no](images/svg/check-no.svg)] | [!include[Check mark no](images/svg/check-no.svg)] | [!include[Check mark no](images/svg/check-no.svg)]] Active mode | Windows Defender AV is used as the antivirus app on the machine. All configuration made with Configuration Manager, Group Policy, Intune, or other management products will apply. Files will be scanned and threats remediated, and detection information will be reported in your configuration tool (such as Configuration Manager or the Windows Defender AV app on the machine itself). | [!include[Check mark yes](images/svg/check-yes.svg)] | [!include[Check mark no](images/svg/check-no.svg)] | [!include[Check mark yes](images/svg/check-yes.svg)] | [!include[Check mark yes](images/svg/check-yes.svg)] | [!include[Check mark yes](images/svg/check-yes.svg)] From caee649939ecccce9b62dfac978f71d618d44f40 Mon Sep 17 00:00:00 2001 From: jcaparas Date: Wed, 4 Apr 2018 10:09:09 -0700 Subject: [PATCH 44/63] update date --- ...ver-endpoints-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md index 55507fd60b..551c97fea5 100644 --- a/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection.md @@ -9,7 +9,7 @@ ms.sitesec: library ms.pagetype: security author: mjcaparas localizationpriority: high -ms.date: 11/30/2017 +ms.date: 04/04/2018 --- # Configure Windows Defender ATP server endpoints From cf790ba4f49bec31670a20d7caa956e7199da269 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 4 Apr 2018 10:50:41 -0700 Subject: [PATCH 45/63] trying to fix step numbering --- windows/deployment/update/windows-update-sources.md | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/windows/deployment/update/windows-update-sources.md b/windows/deployment/update/windows-update-sources.md index 1f8e758809..d4b5967b12 100644 --- a/windows/deployment/update/windows-update-sources.md +++ b/windows/deployment/update/windows-update-sources.md @@ -17,10 +17,9 @@ Windows 10 devices can receive updates from a variety of sources, including Wind 1. Start Windows PowerShell as an administrator 2. Run `\$MUSM = New-Object -ComObject “Microsoft.Update.ServiceManager”`. -3. Run `\$MUSM.Services`. The resulting output should be similar to the following: - -``` -Name : Microsoft Update +3. Run `\$MUSM.Services`. The resulting output should be similar to the following: + ``` + Name : Microsoft Update ContentValidationCert : {} ExpirationDate : IsManaged : False From c820a727b01328beeafb8d8de04a01ee91c882a1 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 4 Apr 2018 13:35:56 -0700 Subject: [PATCH 46/63] trying again with the steps --- windows/deployment/update/windows-update-sources.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/windows-update-sources.md b/windows/deployment/update/windows-update-sources.md index d4b5967b12..d51999abef 100644 --- a/windows/deployment/update/windows-update-sources.md +++ b/windows/deployment/update/windows-update-sources.md @@ -1,4 +1,3 @@ - --- title: Determining the Windows Update Service source description: Determine the source that Windows Update service is currently using. @@ -18,6 +17,7 @@ Windows 10 devices can receive updates from a variety of sources, including Wind 1. Start Windows PowerShell as an administrator 2. Run `\$MUSM = New-Object -ComObject “Microsoft.Update.ServiceManager”`. 3. Run `\$MUSM.Services`. The resulting output should be similar to the following: + ``` Name : Microsoft Update ContentValidationCert : {} From 0a555e10caa1238553d35405f1e051a6c69f295a Mon Sep 17 00:00:00 2001 From: Dani Halfin Date: Wed, 4 Apr 2018 20:54:34 +0000 Subject: [PATCH 47/63] Merged PR 6923: follow up on github issue 653 https://github.com/MicrosoftDocs/windows-itpro-docs/issues/653 --- education/windows/windows-automatic-redeployment.md | 10 ++-------- 1 file changed, 2 insertions(+), 8 deletions(-) diff --git a/education/windows/windows-automatic-redeployment.md b/education/windows/windows-automatic-redeployment.md index f65d87c10f..5d64b44037 100644 --- a/education/windows/windows-automatic-redeployment.md +++ b/education/windows/windows-automatic-redeployment.md @@ -92,16 +92,10 @@ Windows Automatic Redeployment is a two-step process: trigger it and then authen Windows Automatic Redeployment will fail when the [Windows Recovery Environment (WinRE)](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-recovery-environment--windows-re--technical-reference) is not enabled on the device. You will see `Error code: ERROR_NOT_SUPPORTED (0x80070032)`. -To check if WinRE is enabled, use the [REAgentC.exe tool](https://docs.microsoft.com/windows-hardware/manufacture/desktop/reagentc-command-line-options) to run the following command: +To make sure WinRE is enabled, use the [REAgentC.exe tool](https://docs.microsoft.com/windows-hardware/manufacture/desktop/reagentc-command-line-options) to run the following command: ``` -reagent /info -``` - -If WinRE is not enabled, use the [REAgentC.exe tool](https://docs.microsoft.com/windows-hardware/manufacture/desktop/reagentc-command-line-options) to run the following command: - -``` -reagent /enable +reagentc /enable ``` If Windows Automatic Reployment fails after enabling WinRE, or if you are unable to enable WinRE, please contact [Microsoft Support](https://support.microsoft.com) for assistance. From d23d32ad1232a5d2e3c01cf7f1788d4fe1bceb87 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 4 Apr 2018 14:28:55 -0700 Subject: [PATCH 48/63] still not right --- windows/deployment/update/windows-update-sources.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/windows-update-sources.md b/windows/deployment/update/windows-update-sources.md index d51999abef..9e8a789f4f 100644 --- a/windows/deployment/update/windows-update-sources.md +++ b/windows/deployment/update/windows-update-sources.md @@ -18,8 +18,8 @@ Windows 10 devices can receive updates from a variety of sources, including Wind 2. Run `\$MUSM = New-Object -ComObject “Microsoft.Update.ServiceManager”`. 3. Run `\$MUSM.Services`. The resulting output should be similar to the following: - ``` - Name : Microsoft Update +``` +Name : Microsoft Update ContentValidationCert : {} ExpirationDate : IsManaged : False From 20ea1fd5673988b4d11d0248d58156a7005f8ed6 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 4 Apr 2018 15:23:38 -0700 Subject: [PATCH 49/63] applying Liza's fix --- .../update/windows-update-sources.md | 198 +++++++++--------- 1 file changed, 99 insertions(+), 99 deletions(-) diff --git a/windows/deployment/update/windows-update-sources.md b/windows/deployment/update/windows-update-sources.md index 9e8a789f4f..5019699f81 100644 --- a/windows/deployment/update/windows-update-sources.md +++ b/windows/deployment/update/windows-update-sources.md @@ -17,136 +17,136 @@ Windows 10 devices can receive updates from a variety of sources, including Wind 1. Start Windows PowerShell as an administrator 2. Run `\$MUSM = New-Object -ComObject “Microsoft.Update.ServiceManager”`. 3. Run `\$MUSM.Services`. The resulting output should be similar to the following: + + ``` + Name : Microsoft Update + ContentValidationCert : {} + ExpirationDate : + IsManaged : False + IsRegisteredWithAU : True + IssueDate : 01-Jan-01 12:00:00 AM + OffersWindowsUpdates : True + RedirectUrls : System.__ComObject + ServiceID : 7971f918-a847-4430-9279-4a52d1efe18d + IsScanPackageService : False + CanRegisterWithAU : True + ServiceUrl : https://fe2.update.microsoft.com/v6/ + SetupPrefix : mu + IsDefaultAUService : False -``` -Name : Microsoft Update -ContentValidationCert : {} -ExpirationDate : -IsManaged : False -IsRegisteredWithAU : True -IssueDate : 01-Jan-01 12:00:00 AM -OffersWindowsUpdates : True -RedirectUrls : System.__ComObject -ServiceID : 7971f918-a847-4430-9279-4a52d1efe18d -IsScanPackageService : False -CanRegisterWithAU : True -ServiceUrl : https://fe2.update.microsoft.com/v6/ -SetupPrefix : mu -IsDefaultAUService : False + Name : DCat Flighting Prod + ContentValidationCert : {} + ExpirationDate : + IsManaged : False + IsRegisteredWithAU : False + IssueDate : 01-Jan-01 12:00:00 AM + OffersWindowsUpdates : False + RedirectUrls : System.__ComObject + ServiceID : 8b24b027-1dee-babb-9a95-3517dfb9c552 + IsScanPackageService : False + CanRegisterWithAU : False + ServiceUrl : https://fe3.delivery.mp.microsoft.com/ + SetupPrefix : wu + IsDefaultAUService : False -Name : DCat Flighting Prod -ContentValidationCert : {} -ExpirationDate : -IsManaged : False -IsRegisteredWithAU : False -IssueDate : 01-Jan-01 12:00:00 AM -OffersWindowsUpdates : False -RedirectUrls : System.__ComObject -ServiceID : 8b24b027-1dee-babb-9a95-3517dfb9c552 -IsScanPackageService : False -CanRegisterWithAU : False -ServiceUrl : https://fe3.delivery.mp.microsoft.com/ -SetupPrefix : wu -IsDefaultAUService : False + Name : Windows Store (DCat Prod) + ContentValidationCert : {} + ExpirationDate : + IsManaged : False + IsRegisteredWithAU : False + IssueDate : 01-Jan-01 12:00:00 AM + OffersWindowsUpdates : False + RedirectUrls : System.__ComObject + ServiceID : 855e8a7c-ecb4-4ca3-b045-1dfa50104289 + IsScanPackageService : False + CanRegisterWithAU : True + ServiceUrl : https://fe3.delivery.mp.microsoft.com/ + SetupPrefix : ws + IsDefaultAUService : False -Name : Windows Store (DCat Prod) -ContentValidationCert : {} -ExpirationDate : -IsManaged : False -IsRegisteredWithAU : False -IssueDate : 01-Jan-01 12:00:00 AM -OffersWindowsUpdates : False -RedirectUrls : System.__ComObject -ServiceID : 855e8a7c-ecb4-4ca3-b045-1dfa50104289 -IsScanPackageService : False -CanRegisterWithAU : True -ServiceUrl : https://fe3.delivery.mp.microsoft.com/ -SetupPrefix : ws -IsDefaultAUService : False - -Name : Windows Server Update Service -ContentValidationCert : {} -ExpirationDate : 18-Jun-54 9:21:00 PM -IsManaged : True -IsRegisteredWithAU : True -IssueDate : 01-Jan-03 12:00:00 AM -OffersWindowsUpdates : True -RedirectUrls : System.__ComObject -ServiceID : 3da21691-e39d-4da6-8a4b-b43877bcb1b7 -IsScanPackageService : False -CanRegisterWithAU : True -ServiceUrl : -SetupPrefix : -IsDefaultAUService : True - -Name : Windows Update -ContentValidationCert : {} -ExpirationDate : -IsManaged : False -IsRegisteredWithAU : False -IssueDate : 01-Jan-01 12:00:00 AM -OffersWindowsUpdates : True -RedirectUrls : System.__ComObject -ServiceID : 9482f4b4-e343-43b6-b170-9a65bc822c77 -IsScanPackageService : False -CanRegisterWithAU : True -ServiceUrl : https://fe2.update.microsoft.com/v6/ -SetupPrefix : wu -IsDefaultAUService : False -``` + Name : Windows Server Update Service + ContentValidationCert : {} + ExpirationDate : 18-Jun-54 9:21:00 PM + IsManaged : True + IsRegisteredWithAU : True + IssueDate : 01-Jan-03 12:00:00 AM + OffersWindowsUpdates : True + RedirectUrls : System.__ComObject + ServiceID : 3da21691-e39d-4da6-8a4b-b43877bcb1b7 + IsScanPackageService : False + CanRegisterWithAU : True + ServiceUrl : + SetupPrefix : + IsDefaultAUService : True + Name : Windows Update + ContentValidationCert : {} + ExpirationDate : + IsManaged : False + IsRegisteredWithAU : False + IssueDate : 01-Jan-01 12:00:00 AM + OffersWindowsUpdates : True + RedirectUrls : System.__ComObject + ServiceID : 9482f4b4-e343-43b6-b170-9a65bc822c77 + IsScanPackageService : False + CanRegisterWithAU : True + ServiceUrl : https://fe2.update.microsoft.com/v6/ + SetupPrefix : wu + IsDefaultAUService : False + ``` 4. Check the category **Name** and **OffersWindowsUpdates**:  -Name: **Microsoft Update** + Name: **Microsoft Update** -Indicates the source against which we will are checking the Client capability. Microsoft Updates indicates, updates for other Microsoft Products checkbox. + Indicates the source against which we will are checking the Client capability. Microsoft Updates indicates, updates for other Microsoft Products checkbox. -OffersWindowsUpdates: **True** + OffersWindowsUpdates: **True** -Indicates that the client is configured to receive updates for all Microsoft Products (Office, etc.) + Indicates that the client is configured to receive updates for all Microsoft Products (Office, etc.) ---- + --- -Name: **DCat Flighting Prod** + Name: **DCat Flighting Prod** -The update source is the Windows Insider Program. + The update source is the Windows Insider Program. -OffersWindowsUpdates: **False** + OffersWindowsUpdates: **False** -Indicates that the client will not receive or is not configured to receive these updates. + Indicates that the client will not receive or is not configured to receive these updates. ---- + --- -Name: **Windows Store (DCat Prod)** + Name: **Windows Store (DCat Prod)** -The update source is Insider Updates for Store Apps. + The update source is Insider Updates for Store Apps. -OffersWindowsUpdates: **False** + OffersWindowsUpdates: **False** -Indicates that the client will not receive or is not configured to receive these updates. + Indicates that the client will not receive or is not configured to receive these updates. ---- + --- -Name: **Windows Server Update Service** + Name: **Windows Server Update Service** -The source is a Windows Server Updates Services server. + The source is a Windows Server Updates Services server. -OffersWindowsUpdates: **True** + OffersWindowsUpdates: **True** -The client is configured to receive updates from WSUS + The client is configured to receive updates from WSUS ---- + --- -Name: **Windows Update** + Name: **Windows Update** -The source is Windows Update. + The source is Windows Update. -OffersWindowsUpdates: **True** + OffersWindowsUpdates: **True** -The client is configured to receive updates from Windows Update Online + The client is configured to receive updates from Windows Update Online ---- + --- +    See also: From 9fefcde76e029f78896ab553bbf679ff0e8bd2b9 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Wed, 4 Apr 2018 19:26:50 -0700 Subject: [PATCH 50/63] addressed the group policies missing from content --- browsers/edge/available-policies.md | 830 +++++++++++------- .../credential-guard-requirements.md | 2 +- 2 files changed, 532 insertions(+), 300 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 016f1295f1..e564c939df 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -23,7 +23,7 @@ By using Group Policy and Intune, you can set up a policy setting once, and then > [!NOTE] > For more info about the tools you can use to change your Group Policy objects, see the Internet Explorer 11 topics, [Group Policy and the Group Policy Management Console (GPMC)](https://go.microsoft.com/fwlink/p/?LinkId=617921), [Group Policy and the Local Group Policy Editor](https://go.microsoft.com/fwlink/p/?LinkId=617922), [Group Policy and the Advanced Group Policy Management (AGPM)](https://go.microsoft.com/fwlink/p/?LinkId=617923), and [Group Policy and Windows PowerShell](https://go.microsoft.com/fwlink/p/?LinkId=617924). -## Group Policy settings + Microsoft Edge works with the following Group Policy settings to help you manage your company's web browser configurations. The Group Policy settings are found in the Group Policy Editor in the following location: `Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\` @@ -32,321 +32,544 @@ Microsoft Edge works with the following Group Policy settings to help you manage Microsoft Edge works with these Group Policy settings (`Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\`) to help you manage your company's web browser configurations: --> -### Allow Address bar drop-down list suggestions ->*Supporteded versions: Windows 10, version 1703* +## Allow Address bar drop-down list suggestions +>*Supporteded versions: Windows 10, version 1703 or later* + + +This policy settings specifies whether to allow the address bar drop-down functionality in Microsoft Edge. By default, this setting is enabled. We recommend that you disable this setting if you want to minimize network connections from Microsoft Edge to Microsoft services. If disabled, employees do not see the address bar drop-down functionality and also disables the user-defined settting "Show search and site suggestions as I type." Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the _Configure search suggestions in Address bar_ or _AllowSearchSuggestionsinAddressBar_ setting. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowAddressBarDropdown](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowaddressbardropdown) | +|Supported devices |Desktop | +|URI full path | ./Vendor/MSFT/Policy/Config/Browser/AllowAddressBarDropdown | +|Data type | Integer | +|Allowed values |
    • **0** - Not Allowed. Address bar drop-down is disabled, which also disables the user-defined setting, "Show search and site suggestions as I type."
    • **1 (default)** - Allowed. Address bar drop-down is enabled.
    | -This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services. -| If you... | Then... | -| --- | --- | -| Enable (default) | Employees can see the Address bar drop-down functionality in Microsoft Edge. | -| Disable | Employees do not see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, "Show search and site suggestions as I type."

    Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the "Configure search suggestions in Address bar" setting. | -### Allow Adobe Flash +## Allow Adobe Flash >*Supporteded version: Windows 10* -This policy setting lets you decide whether employees can run Adobe Flash on Microsoft Edge. -| If you… | Then… | -| --- | --- | -| Enable or don’t configure (default) | Employees can use Adobe Flash. | -| Disable | Employees cannot use Adobe Flash. | -### Allow clearing browsing data on exit +This policy setting specifies whether Adobe Flash can run in Microsoft Edge. By default, this setting is enabled or not configured, which allows employees to use Adobe Flash. If disabled, employees cannot use Adobe Flash. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowFlash](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowflash) | +|Supported devices |Desktop | +|URI full path | ./Vendor/MSFT/Policy/Config/Browser/AllowAutofill | +|Data type | Integer | +|Allowed values |

    • **0** - Employees cannot use Microsoft Edge.
    • **1 (default)** - Employees can use Microsoft Edge.
    | + +## Allow clearing browsing data on exit >*Supporteded versions: Windows 10, version 1703* -This policy setting allows the automatic clearing of browsing data when Microsoft Edge closes. -| If you… | Then… | -| --- | --- | -| Enable | Clear browsing history on exit is turned on. | -| Disable or don’t configure (default) | Employees can turn on and configure the Clear browsing data option under Settings. | -### Allow Developer Tools +This policy setting specifies whether to clear browsing data on exiting Microsoft Edge. By default, this setting is disabled or not configured, which means employees can turn on and configure Clear browsing data option under Settings. If enabled, browsing history on exit is turned on. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[ClearBrowsingDataOnExit](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-clearbrowsingdataonexit) | +|Supported devices |Desktop | +|URI full path | ./Vendor/MSFT/Policy/Config/Browser/ClearBrowsingDataOnExit | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Browsing data is not cleared on exit. The type of browsing data to clear can be configured by the employee in the Clear browsing data options under Settings.
    • **1** - Browsing data is cleared on exit.
    | + + +## Allow Cortana +>*Supported versions: Windows 10, version 1607 or later* + +This policy setting specifies whether Cortana is allowed on the device. By default, this setting is enabled (allowed), which allows employees to use Cortana on their devices. If disabled (not allowed), employees cannot use Cortana, but can use search to find items on the device. + +This policy setting specifies whether Cortana is allowed on the device. By default, this setting is enabled (allowed), which allows employees to use Cortana on their devices. If disabled (not allowed), employees cannot use Cortana, but can use search to find items on the device. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowCortana](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#experience-allowcortana) | +|Supported devices |Mobile | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowCortana | +|Location |Computer Configuration\Administrative Templates\Windows Components\Search\Allow Cortana | +|Data type | Integer | +|Allowed values |
    • **0** - Not allowed.
    • **1 (default)** - Allowed.
    | + +## Allow Developer Tools >*Supporteded versions: Windows 10, version 1511 or later* -This policy setting lets you decide whether F12 Developer Tools are available on Microsoft Edge. -| If you… | Then… | -| --- | --- | -| Enable (default) | F12 Developer Tools are available. | -| Disable | F12 Developer Tools are not available. | +This policy setting specifies whether employees cna use the F12 Developer Tools on Microsoft Edge. By default, this setting is enabled making the F12 Developer Tools availabe to use. If disabled, the F12 Developer Tools are not available. -### Allow Extensions +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowDeveloperTools](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowdevelopertools) | +|Supported devices |Desktop | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowDeveloperTools | +|Data type | Integer | +|Allowed values |
    • **0** - Employees cannot use the F12 Developer Tools./li>
    • **1 (default)** - Employees can use the F12 Developer Tools.
    | + +## Allow Extensions >*Supporteded versions: Windows 10, version 1607 or later* -This policy setting lets you decide whether employees can use Microsft Edge Extensions. -| If you… | Then… | -| --- | --- | -| Enable | Employees can use Microsoft Edge Extensions. | -| Disable | Employees cannot use Microsoft Edge Extensions. | +This policy setting specifies whether employees can use Edge Extensions. By default, this setting is enabled allowing employees to use extensions. If disabled, employees cannot use extensions. -### Allow InPrivate browsing +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowExtensions](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowextensions) | +|Supported devices |Desktop | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowExtensions | +|Data type | Integer | +|Allowed values |
    • **0** - Employees cannot use Edge Extensions.
    • **1 (default)** - Employees can use Edge Extensions.
    | + +## Allow InPrivate browsing >*Supporteded versions: Windows 10, version 1511 or later* -This policy setting lets you decide whether employees can browse using InPrivate website browsing. -| If you… | Then… | -| --- | --- | -| Enable (default) | Employees can use InPrivate website browsing. | -| Disable | Employees cannot use InPrivate website browsing. | +This policy setting specifies whether InPrivate browsing is allowed on corporate networks. By default, this setting is enabled allowing employees to use InPrivate website browsing. If disabled, employees cannot use InPrivate website browsing. -### Allow Microsoft Compatibility List ->*Supporteded versions: Windows 10, version 1607 or later* +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowInPrivate](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowinprivate) | +|Supported devices |Desktop
    Mobile | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowInPrivate | +|Data type | Integer | +|Allowed values |
    • **0** - Employees cannot use InPrivate browsing.
    • **1 (default)** - Employees can use InPrivate browsing.
    | -This policy setting lets you decide whether to use the Microsoft Compatibility List (a Microsoft-provided list that helps sites with known compatibility issues to display properly) in Microsoft Edge. By default, the Microsoft Compatibility List is enabled and can be viewed by visiting about:compat. -| If you… | Then… | -| --- | --- | -| Enable (default) | Microsoft Edge periodically downloads the latest version of the list from Microsoft, applying the updates during browser navigation . Visiting any site on the Microsoft Compatibility List prompts the employee to use Internet Explorer 11, where the site renders as though it’s in whatever version of IE is necessary for it to appear properly. | -| Disable | Browser navigation does not use the Microsoft Compatibility List. | +## Allow Microsoft Compatibility List +>*Supporteded versions: Windows 10, version 1703 or later* -### Allow search engine customization ->*Supported versions: Windows 10, version 1703* +This policy setting specifies whether to use the Microsoft compatibility list in Microsoft Edge. The list helps websites with known compatibility issues to display properly. By default, the Microsoft compatibility list is enabled and used during browser navigation. The list can be viewed by visiting "about:compat". By default, this setting is enabled allowing periodic downloads and installation of updates. Visiting any site on the Microsoft Compatibility List prompts the employee to use Internet Explorer 11, where the site renders as though it is in whatever version of IE is necessary for it to appear properly. If disabled, the compatibility list is not used. -This policy setting lets you decide whether users can change their search engine. Important. You can only use this setting with domain-joined or MDM-enrolled devices. +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowMicrosoftCompatibilityList](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowmicrosoftcompatibilitylist) | +|Supported devices |Desktop
    Mobile | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowMicrosoftCompatibilityList | +|Data type | Integer | +|Allowed values |
    • **0** - Additional search engines are not allowed and the default cannot be changed in the Address bar.
    • **1 (default)** - Additional search engines are allowed and the default can be changed in the Address bar.
    | -For more info, see the [Microsoft browser extension policy](http://aka.ms/browserpolicy). +## Allow search engine customization +>*Supported versions: Windows 10, version 1703 or later* -| If you… | Then… | -| --- | --- | -| Enable or don’t configure (default) | Employees can add new search engines and change the default used in the Address bar from within Microsoft Edge Settings. | -| Disable | Employees cannot add search engines or change the default used in the Address bar. | +This policy setting allows search engine customization for domain-joined or MDM-enrolled devices only. For example, you can change the default search engine or add a new search engine. By default, this setting is enabled allowing employees to add new search engines and change the default under Settings. If disabled, employees cannot add search enginess or change the default. -### Allow web content on New Tab page +For more information, see [Microsoft browser extension policy](aka.ms/browserpolicy). + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowSearchEngineCustomization](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsearchenginecustomization) | +|Supported devices |Desktop
    Mobile | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowSearchEngineCustomization | +|Data type | Integer | +|Allowed values |
    • **0** - Additional search engines are not allowed and the default cannot be changed in the Address bar.
    • **1 (default)** - Additional search engines are allowed and the default can be changed in the Address bar.
    | + +## Allow web content on New Tab page >*Supported versions: Windows 10* -This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the New Tab page. If you use this setting, employees cannot change it. -| If you… | Then… | -| --- | --- | -| Enable | Microsoft Edge opens a new tab with the New Tab page. | -| Disable | Microsoft Edge opens a new tab with a blank page. | -| Do not configure (default) | Employees can choose how new tabs appear. | +This policy setting lets you configure what appears when a New Tab page is opened in Microsoft Edge. By default, this setting is disabled or not configured, which means employees cannot customize their New Tab page. If enabled, employees can customize their New Tab page. -### Configure additional search engines ->*Supported versions: Windows 10, version 1703* + -This policy setting lets you add up to 5 additional search engines, which cannot be removed by your employees but can make a personal default engine. This setting does not set the default search engine. For that, you must use the "Set default search engine" setting. -| If you… | Then… | -| --- | --- | -| Enable | You can add up to 5 additional search engines. For each additional search engine, you must add a link to your OpenSearch XML file, including at least the short name and https URL of the search engine, using this format:

    ``

    For more info about creating the OpenSearch XML file, see the [Understanding OpenSearch Standards](https://msdn.microsoft.com/en-us/library/dd163546.aspx) topic. | Disable setting (default) | Any added search engines are removed from the employee’s device. | -| Do not configure | The search engine list is set to what is specified in App settings. | +## Configure additional search engines +>*Supported versions: Windows 10, version 1703 or later* -### Configure Autofill +This policy setting, when enabled, lets you add up to five additional search engines. Employees cannot remove these search engines, but they can set any one as the default. By default, this setting is not configured and does not allow additional search engines to be added. If disabled, the search engines added are deleted. + +For each additional search engine you add, specify a link to the OpenSearch XML file that contains, at a minimum, the short name and the URL template (HTTPS) of the search engine. For more information about creating the OpenSearch XML file, see [Search provider discovery](https://developer.microsoft.com/en-us/microsoft-edge/platform/documentation/dev-guide/browser/search-provider-discovery/). + +This setting does not set the default search engine. For that, you must use the "Set default search engine" setting. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[ConfigureAdditionalSearchEngines](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-configureadditionalsearchengines) | +|Supported devices |Desktop
    Mobile | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/ConfigureAdditionalSearchEngines | +|Data type | Integer | +|Allowed values |

    • **0 (default)** - Additional search engines are not allowed.
    • **1** - Additional search engines are allowed.
    | + +## Configure Autofill >*Supported versions: Windows 10* -This policy setting lets you decide whether employees can use Autofill the form fields automatically while using Microsoft Edge. By default, employees can choose whether to use Autofill. -| If you… | Then… | -| --- | --- | -| Enable | Employees can use Autofill to populate form fields automatically. | -| Disable | Employees cannot use Autofill to populate form fields automatically. | -| Do not configure (default) | Employees can choose whether to use Autofill to populate the form fields automatically. | +This policy setting specifies whether AutoFill on websites is allowed. By default, this setting is not configured allowing employees to choose whether or not to use AutoFill. If enabled, AutoFill is used. If disabled, AutoFill is not used. -### Configure cookies +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowAutofill](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowautofill) | +|Supported devices |Desktop | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowAutofill | +|Data type | Integer | +|Allowed values |
    • **0** - Employees cannot use Autofill to complete form fields.
    • **1 (default)** - Employees can use Autofill to complete form fields.
    | + +## Configure cookies >*Supported versions: Windows 10* -This setting lets you configure how to work with cookies. -| If you… | Then… | -| --- | --- | -| Enable (default) | You must also decide whether to:
    • **Allow all cookies (default)** from all websites.
    • **Block all cookies** from all websites.
    • **Block only 3rd-party cookies** from 3rd-party websites.
    | -| Disable or do not configure | All cookies are allowed from all sites. | +This policy setting specifies whether cookies are allowed. By default, this setting is enabled with the Block all cookies and Block only 3rd-party cookies options available. If disabled or not configured, all cookies are allowed from all sites. -### Configure Do Not Track +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowCookies](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowcookies) | +|Supported devices |Desktop
    Mobile | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowCookies | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Allows all cookies from all sites.
    • **1** - Blocks only cookies from 3rd party websites.
    • **2** - Blocks all cookies from all sites.
    | + +## Configure Do Not Track >*Supported versions: Windows 10* -This policy setting lets you decide whether employees can send Do Not Track requests to websites that ask for tracking info. By default, Do Not Track requests are never sent, but employees can choose to turn on and send requests. -| If you… | Then… | -| --- | --- | -| Enable | Do Not Track requests are always sent to websites asking for tracking information. | -| Disable | Do Not Track requests are never sent to websites asking for tracking information. | -| Do not configure (default) | Employees can choose whether to send Do Not Track requests to websites asking for tracking information. | +This policy setting specifies whether Do Not Track requests to websites is allowed. By default, this setting is not configured allowing employees to choose whether or not to send tracking information. If enabled, Do Not Track requests are always sent to websites asking for tracking information. If disabled, Do Not Track requests are never sent. -### Configure Favorites +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowDoNotTrack](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowdonottrack) | +|Supported devices |Desktop
    Mobile | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowDoNotTrack | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Stops employees from sending Do Not Track headers to websites requesting tracking info.
    • **1** - Employees can send Do Not Track headers to websites requesting tracking info.
    | + +## Configure Favorites +>*Supported versions: Windows 10, version 1709* + +This policy settings lets you configure a default list of Favorites that appear for your employee. By default, this setting is disabled or not configured allowing employees to customize the Favorites list, such as adding folders to organize their favorites. If enabled, employees are not allowed to add, import, or change anything in the Favorites list. As part of this, the Save a Favorite, Import settings, and context menu items (such as Create a new folder) are turned off. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[LockdownFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-lockdownfavorites) | +|Supported devices |Desktop
    Mobile | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/LockdownFavorites | +|Data type | Integer | +|Allowed values |
    • **0** - Disabled. Do not lockdown Favorites.
    • **1** - Enabled. Lockdown Favorites.
    | + +## Configure Password Manager +>*Supported versions: Windows 10* + +This policy setting specifies whether saving and managing passwords locally on the device is allowed. By default, this setting is enabled allowing employees to save their passwords locally. If not configured, employees can choose whether or not to save and manage passwords locally. If disabled, saving and managing passwords locally is turned off. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowPasswordManager](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowpasswordmanager) | +|Supported devices |Desktop
    Mobile | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowPasswordManager | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Employees cannot use Password Manager to save passwords locally.
    • **1** - Employees can use Password Manager to save passwords locally.
    | + +## Configure Pop-up Blocker +>*Supported versions: Windows 10* + +This policy setting specifies whether pop-up blocker is allowed or enabled. By default, pop-up blocker is turned on. If not configured, employees can choose whether to turn on or turn off pop-up blocker. If disabled, pop-up blocker is turned off. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowPopups](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowpopups) | +|Supported devices |Desktop | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowPopups | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Turns off Pop-up Blocker, allowing pop-up windows.
    • **1** - Turns on Pop-up Blocker, stopping pop-up windows.
    | + +## Configure search suggestions in Address bar +>*Supported versions: Windows 10* + +This policy setting specifies whether search suggestions are allowed in the address bar. By default, this setting is not configured allowing employees to choose whether search suggestions appear in the address bar. If enabled, search suggestions appear. If disabled, search suggestions do not appear. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowSearchSuggestionsinAddressBar](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsearchsuggestionsinaddressbar) | +|Supported devices |Desktop
    Mobile | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowSearchSuggestionsinAddressBar | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Employees cannot see search suggestions in the Address bar of Microsoft Edge.
    • **1** - Employees can see search suggestions in the Address bar of Microsoft Edge.
    | + +## Configure Start pages >*Supported versions: Windows 10, version 1511 or later* -This policy setting lets you configure the default list of Favorites that appear for your employees. Employees can change their Favorites by adding or removing items at any time. -| If you… | Then… | -| --- | --- | -| Enable | You must provide a list of Favorites in the Options section. The list imports automatically after you deploy this policy. | -| Disable or do not configure | Employees will see the Favorites that they set in the Favorites hub. | +This policy setting specifies your Start pages for domain-joined or MDM-enrolled devices. By default, this setting is disabled or not configured. Therefore, the Start page is the webpages specified in App settings. If enabled, you can configure one or more corporate Start pages. If enabling this setting, you must include URLs separating multiple pages by using XML-escaped characters < and >, for example, **<\support.contoso.com><\support.microsoft.com>**. -### Configure Password Manager +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[HomePages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-homepages) | +|Supported devices |Desktop | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/HomePages | +|Data type |String | +|Allowed values |Configure the Start page (previously known as Home page) URLs for your employees. | + +## Configure the Adobe Flash Click-to-Run setting +>*Supported versions: Windows 10, version 1703 or later* + +This policy setting specifies whether employees must take action, such as clicking the content or a Click-to-Run button, before seeing content in Adobe Flash. By default, this setting is enabled. when the setting is enabled, employees must click the content, Click-to-Run button, or have the site appear on an auto-allow list before before the Adobe Flash content loads. If disabled, Adobe Flash loads and runs automatically. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowFlashClickToRun](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowflashclicktorun) | +|Supported devices |Desktop | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowFlashClickToRun | +|Data type | Integer | +|Allowed values |
    • **0** - Adobe Flash content is automatically loaded and run by Microsoft Edge.
    • **1 (default)** - An employee must click the content, click a Click-to-Run button, or have the site appear on an auto-allow list before Microsoft Edge loads and runs Adobe Flash content.
    | + +## Configure the Enterprise Mode Site List >*Supported versions: Windows 10* -This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on. -| If you… | Then… | -| --- | --- | -| Enable (default) | Employees can use Password Manager to save their passwords locally. | -| Disable | Employees cannot use Password Manager to save their passwords locally. | -| Do not configure | Employees can choose whether to use Password Manager to save their passwords locally. | - -### Configure Pop-up Blocker ->*Supported versions: Windows 10* - -This policy setting lets you decide whether to turn on Pop-up Blocker. By default, Pop-up Blocker is turned on. -| If you… | Then… | -| --- | --- | -| Enable (default) | Pop-up Blocker is turned on, stopping pop-up windows from appearing. | -| Disable | Pop-up Blocker is turned off, letting pop-up windows appear. | -| Do not configure | Employees can choose whether to use Pop-up Blocker. | - -### Configure search suggestions in Address bar ->*Supported versions: Windows 10* - -This policy setting lets you decide whether search suggestions appear in the Address bar of Microsoft Edge. By default, employees can choose whether search suggestions appear in the Address bar of Microsoft Edge. -| If you… | Then… | -| --- | --- | -| Enable | Employees can see search suggestions in the Address bar. | -| Disable | Employees cannot see search suggestions in the Address bar. | -| Do not configure (default) | Employees can choose whether search suggestions appear in the Address bar. | - -### Configure Start pages ->*Supported versions: Windows 10, version 1511 or later* - -This policy setting lets you configure one or more Start pages, for domain-joined devices. Your employees will not be able to change this after you set it. -| If you… | Then… | -| --- | --- | -| Enable | You must include URLs to the pages, separating multiple pages by using angle brackets in this format:

    `` | -| Disable or do not configure (default) | The default Start page is the webpage specified in App settings. | - -### Configure the Adobe Flash Click-to-Run setting ->*Supported versions: Windows 10, version 1703* - -This policy setting lets you decide whether employees must take action, such as clicking the content or a Click-to-Run button, before seeing content in Adobe Flash. -| If you… | Then… | -| --- | --- | -| Enable or don’t configure | Employees must click the content, click the Click-to-Run button, or have the site appear on an auto-allow list before Microsoft Edge loads and runs Adobe Flash content. | -| Disable | Adobe Flash loads automatically and runs in Microsoft Edge. | - -### Configure the Enterprise Mode Site List ->*Supported versions: Windows 10* - -This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps. -| If you… | Then… | -| --- | --- | -| Enable | You must add the location to your site list in the **{URI}** box. When configured, Microsoft Edge looks for the Enterprise Mode Site List XML file, which includes the sites and domains that need to be viewed using Internet Explorer 11 and Enterprise Mode. | -Disable or do not configure (default) | Microsoft Edge won’t use the Enterprise Mode Site List XML file. In this case, employees might experience compatibility problems while using legacy apps. | +This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps. By default, this setting is disabled or not configured, which means the Enterprise Mode Site List is not used. In this case, employees might experience compatibility problems while using legacy apps. If enabled, you must add the location to your site list in the **{URI}** box. when enabled, Microsoft Edge looks for the Enterprise Mode Site List XML file, which includes the sites and domains that need to be viewed using Internet Explorer 11 and Enterprise Mode. >[!Note] >If there is a .xml file in the cache container, IE waits 65 seconds and then checks the local cache for a newer version of the file from the server, based on standard caching rules. If the server has a different version number than the version in the cache container, the server file is used and stored in the cache container.

    >If you already use a site list, enterprise mode continues to work during the 65-second wait; it just uses the existing site list instead of the new one. -### Configure Windows Defender SmartScreen +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[EnterpriseModeSiteList](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-enterprisemodesitelist) | +|Supported devices |Desktop | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/EnterpriseModeSiteList | +|Data type | String | +|Allowed values |
    • Not configured.
    • **1 (default)** - Use the Enterprise Mode Site List, if configured.
    • **2** - Specify the location to the site list.
    | + +## Configure Windows Defender SmartScreen >*Supported versions: Windows 10* -This policy setting lets you configure whether to turn on Windows Defender SmartScreen. Windows Defender SmartScreen provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, Windows Defender SmartScreen is turned on. -| If you… | Then… | -| --- | --- | -| Enable | Windows Defender SmartScreen is turned on, and employees cannot turn it off. | -| Disable | Windows Defender SmartScreen is turned off, and employees cannot turn it on. | -| Do not configure | Employees can choose whether to use Windows Defender SmartScreen. | +This policy setting specifies whether Windows Defender SmartScreen is allowed. By default, this setting is enabled or turned on and employees cannot turn it off. If disabled, Windows Defender SmartScreen is turned off and employees cannot turn it on. If not configured, employees can choose whether to use Windows Defender SmartScreen. -### Disable lockdown of Start pages ->*Supported versions: Windows 10, version 1703* +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowSmartScreen](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsmartscreen) | +|Supported devices |Desktop
    Mobile | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowSmartScreen | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Turns off Windows Defender SmartScreen.
    • **1** - Turns on Windows Defender SmartScreen, providing warning messages to your employees about potential phishing scams and malicious software.
    | -This policy setting lets you disable the lockdown of Start pages if the Configure Start pages setting is in effect . This setting only applies to domain-joined or MDM-enrolled devices. +## Disable lockdown of Start pages +>*Supported versions: Windows 10, version 1703 or later* -For more info, see the [Microsoft browser extension policy](http://aka.ms/browserpolicy). +This policy setting specifies whether the lockdown on the Start pages is disabled on domain-joined or MDM-enrolled devices. By default, this policy is enabled locking down the Start pages according to the settings specified in the Browser/HomePages policy. When enabled, users cannot change the Start pages. If disabled, users can modify the Start pages. -| If you… | Then… | -| --- | --- | -| Enable | You cannot lock down Start pages that are configured using the “Configure Start pages” setting. Employees can, therefore, modify the pages. | -| Disable or do not configure (default) | Employees cannot change Start pages configured using the “Configure Start pages” setting. | +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[DisableLockdownOfStartPages](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-disablelockdownofstartpages) | +|Supported devices |Desktop | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/DisableLockdownOfStartPages | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Enable lockdown of the Start pages according to the settings specified in the Browser/HomePages policy. Users cannot change the Start pages.
    • **1** - Disable lockdown of the Start pages and allow users to modify them.
    | -### Keep favorites in sync between Internet Explorer and Microsoft Edge ->*Supported versions: Windows 10, version 1703* + +## Do not sync +>*Supported versions: Windows 10* -This policy setting lets you decide whether people can sync their favorites between Internet Explorer and Microsoft Edge, including additions, deletions, changes, and position. +This policy setting specifies whether employees can use the Sync your Settings option to sync their settings to and from their device. By default, this setting is disabled or not configured, which means the Sync your Settings options are turned on, letting employees pick what can sync on their device. If enabled, the Sync your Settings options are turned off and none of the Sync your Setting groups are synced on the device. You can use the Allow users to turn syncing on option to turn the feature off by default, but to let the employee change this setting. For information about what settings are sync'ed, see [About sync setting on Windows 10 devices](http://windows.microsoft.com/windows-10/about-sync-settings-on-windows-10-devices). - -| If you… | Then… | -| --- | --- | -| Enable | Employees can sync their favorites between Internet Explorer and Microsoft Edge.

    Enabling this setting stops Microsoft Edge favorites from syncing between connected Windows 10 devices. | -| Disable or do not configure | Employees cannot sync their favorites between Internet Explorer and Microsoft Edge. | +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowSyncMySettings](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#experience-allowsyncmysettings) | +|Supported devices |Desktop | +|URI full path |./Vendor/MSFT/Policy/Config/Experience/AllowSyncMySettings | +|Location |Computer Configuration\Administrative Templates\Windows Components\sync your settings\Do not sync | +|Data type | Integer | +|Allowed values |
    • **0** - Employees cannot sync settings between PCs.
    • **1 (default)** - Employees can sync between PCs.
    | -### Prevent access to the about:flags page + +## Do not sync browser settings +>*Supported versions: Windows 10* + +This policy setting specifies whether a browser group can use the Sync your Settings options to sync their information to and from their device. Settings include information like History and Favorites. By default, this setting is disabled or not configured, which means the Sync your Settings options are turned on, letting browser groups pick what can sync on their device. If enabled, the Sync your Settings options are turned off so that browser groups are unable to sync their settings and info. You can use the Allow users to turn browser syncing on option to turn the feature off by default, but to let the employee change this setting. + + + +## Keep favorites in sync between Internet Explorer and Microsoft Edge +>*Supported versions: Windows 10, version 1703 or later* + +This policy setting specifies whether favorites are kept in sync between Internet Explorer and Microsoft Edge. Changes to favorites in one browser are reflected in the other, including additions, deletions, modifications, and ordering. By default, this setting is disabled or not configured. When disabled or not configured, employees cannot sync their favorites. If enabled, employees can sync their favorites and stops Microsoft Edge favorites from syncing between connected Windows 10 devices. This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[SyncFavoritesBetweenIEAndMicrosoftEdge](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-syncfavoritesbetweenieandmicrosoftedge) | +|Supported devices |Desktop | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/SyncFavoritesBetweenIEAndMicrosoftEdge | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Synchronization is turned off.
    • **1** - Synchronization is turned on.
    | + +## Prevent access to the about:flags page >*Supported versions: Windows 10, version 1607 or later* -This policy setting lets you decide whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features. -| If you… | Then… | -| --- | --- | -| Enable | Employees cannot access the about:flags page. | -| Disable or do not configure (default) | Employees can access the about:flags page. | +This policy setting specifies whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features. By default, this setting is disabled or not configured, which means employees can access the about:flags page. If enabled, employees cannot access the about:flags page. -### Prevent bypassing Windows Defender SmartScreen prompts for files +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[PreventAccessToAboutFlagsInMicrosoftEdge](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventaccesstoaboutflagsinmicrosoftedge) | +|Supported devices |Desktop | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/PreventAccessToAboutFlagsInMicrosoftEdge | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Employees can access the about:flags page in Microsoft Edge.
    • **1** - Employees cannot access the about:flags page in Microsoft Edge.
    | + +## Prevent bypassing Windows Defender SmartScreen prompts for files >*Supported versions: Windows 10, version 1511 or later* -This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files. -| If you… | Then… | -| --- | --- | -| Enable | Employees cannot ignore Windows Defender SmartScreen warnings when downloading files. | -| Disable or do not configure (default) | Employees can ignore Windows Defender SmartScreen warnings and can continue the download process. | -### Prevent bypassing Windows Defender SmartScreen prompts for sites +This policy setting specifies whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files. By default, this setting is disabled or not configured (turned off), which means employees can ignore the warnings and can continue the download process. If enabled (turned on), employees cannot ignore the warnings and blocks them from downloading unverified files. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[PreventSmartScreenPromptOverrideForFiles](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventsmartscreenpromptoverrideforfiles) | +|Supported devices |Desktop
    Mobile | +|URI full path | ./Vendor/MSFT/Policy/Config/Browser/PreventSmartScreenPromptOverrideForFiles | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Lets employees ignore the Windows Defender SmartScreen warnings about unverified files and lets them continue the download process.
    • **1** - Stops employees from ignoring the Windows Defender SmartScreen warnings about unverified files.
    | + +## Prevent bypassing Windows Defender SmartScreen prompts for sites >*Supported versions: Windows 10, version 1511 or later* -This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites. -| If you… | Then… | -| --- | --- | -| Enable | Employees cannot ignore Windows Defender SmartScreen warnings and prevents them from continuing to the site. | -| Disable or do not configure (default) | Employees can ignore Windows Defender SmartScreen warnings, allowing them to continue to the site. | +This policy setting specifies whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites. By default, this setting is disabled or not configured (turned off), which means employees can ignore the warnings and allows them to continue to the site. If enabled (turned on), employees cannot ignore the warnings and blocks them from continuing to the site. -### Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start ->*Supported versions: Windows 10, version 1703* +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[PreventSmartScreenPromptOverride](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventsmartscreenpromptoverride) | +|Supported devices |Desktop
    Mobile | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/PreventSmartscreenPromptOverride | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Turns off Windows Defender SmartScreen.
    • **1** - Turns on Windows Defender SmartScreen.
    | -This policy lets you decide whether Microsoft Edge can gather Live Tile metadata from the ieonline.microsoft.com service to provide a better experience while pinning a Live Tile to the Start menu. -| If you… | Then… | -| --- | --- | -| Enable | Microsoft Edge does not gather the Live Tile metadata, providing a minimal experience. | -| Disable or do not configure (default) | Microsoft Edge gathers the Live Tile metadata, providing a fuller and complete experience. | +## Prevent changes to Favorites on Microsoft Edge +>*Supported versions: Windows 10, version 1709* - -### Prevent the First Run webpage from opening on Microsoft Edge ->*Supported versions: Windows 10, version 1703* - -This policy setting lets you decide whether employees see Microsoft's First Run webpage when opening Microsoft Edge for the first time. -| If you… | Then… | -| --- | --- | -| Enable | Employees do not see the First Run page. | -| Disable or do not configure (default) | Employees see the First Run page. | - -### Prevent using Localhost IP address for WebRTC ->*Supported versions: Windows 10, version 1511 or later* - -This policy setting lets you decide whether localhost IP addresses are visible or hidden while making calls to the WebRTC protocol. -| If you… | Then… | -| --- | --- | -| Enable | Localhost IP addresses are hidden. | -| Disable or do not configure (default) | Localhost IP addresses are visible. | - -### Send all intranet sites to Internet Explorer 11 ->*Supported versions: Windows 10* - -This policy setting lets you decide whether your intranet sites should all open using Internet Explorer 11. This setting should only be used if there are known compatibility problems with Microsoft Edge. -| If you… | Then… | -| --- | --- | -| Enable | All intranet sites are opened in Internet Explorer 11 automatically. | -| Disable or do not configure (default) | All websites, including intranet sites, open in Microsoft Edge. | - -### Set default search engine ->*Supported versions: Windows 10, version 1703* - -This policy setting applies only to domain-joined or MDM-enrolled devices and lets you configure the default search engine for Microsoft Edge. Employees can change the default search engine at any time unless you disable the "Allow search engine customization" setting, which restricts any changes. - -For more info, see the [Microsoft browser extension policy](http://aka.ms/browserpolicy). - -| If you… | Then… | -| --- | --- | -| Enable | To set a default search engine, you must add a link to your OpenSearch XML file, including at least the short name and https URL of the search engine, using this format:

    `https://fabrikam.com/opensearch.xml` | -| Disable | The policy-set default search engine is removed. If this is also the current in-use default, the search engine changes to the Microsoft Edge specified engine for the market . | -| Do not configure | The default search engine is set to the one specified in App settings. | +This policy setting specifies whether employees can add, import, sort, or edit the Favorites list in Microsoft Edge. By default, this setting is disabled or not configured (turned on), which means the Favorites list is not locked down and employees can make changes to the Favorites list. If enabled, employees cannot make changes to the Favorites list. Also, the Save a Favorite, Import settings, and the context menu items, such as Create a new folder, are turned off. >[!Important] ->If you'd like your employees to use the default Microsoft Edge settings for each market , you can set the string to EDGEDEFAULT. If you'd like your employees to use Microsoft Bing as the default search engine, you can set the string to EDGEBING. +>Don't enable both this setting and the Keep favorites in sync between Internet Explorer and Microsoft Edge setting. Enabling both settings stops employees from syncing their favorites between Internet Explorer and Microsoft Edge. + -### Show message when opening sites in Internet Explorer +## Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start +>*Supported versions: Windows 10, version 1703 or later* + +This policy setting specifies whether Microsoft can collect information to create a Live Tile when pinning a site to Start from Microsoft Edge. By default, this setting is disabled or not configured (turned off), which means Microsoft servers are contacted if a site is pinned. If enabled (turned on), Microsoft servers are not contacted if a site is pinned. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[PreventLiveTileDataCollection](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventlivetiledatacollection) | +|Supported devices |Desktop
    Mobile | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/PreventLiveTileDataCollection | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Microsoft servers will be contacted if a site is pinned to Start from Microsoft Edge.
    • **1** - Microsoft servers will not be contacted if a site is pinned to Start from Microsoft Edge.
    | + +## Prevent the First Run webpage from opening on Microsoft Edge +>*Supported versions: Windows 10, version 1703 or later* + +This policy setting specifies whether to enable or disable the First Run webpage. On the first explicit user-launch of Microsoft Edge, the First Run webpage hosted on microsoft.com opens automatically. This policy allows enterprises, such as those enrolled in a zero-emissions configuration, to prevent this page from opening. By default, this setting is disabled or not configured (turned off), which means employees see the First Run page. If enabled (turned on), the employees do not see the First Run page. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[PreventFirstRunPage](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventfirstrunpage) | +|Supported devices |Desktop
    Mobile | +|URI full path | ./Vendor/MSFT/Policy/Config/Browser/PreventFirstRunPage | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Employees see the First Run webpage.
    • **1** - Employees do not see the First Run webpage.
    | + +## Prevent using Localhost IP address for WebRTC +>*Supported versions: Windows 10, version 1511 or later* + + +This policy setting specifies whether localhost IP address are visible or hiddle while making phone calls to the WebRTC protocol. By default, this setting is disabled or not configured (turned off), which means the localhost IP address are visible. If enabled (turned on), localhost IP addresses are hidden. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[PreventUsingLocalHostIPAddressForWebRTC](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-preventusinglocalhostipaddressforwebrtc) | +|Supported devices |Desktop | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/PreventUsingLocalHostIPAddressForWebRTC | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Shows an employee's LocalHost IP address while using the WebRTC protocol.
    • **1** - Does not show an employee's LocalHost IP address while using the WebRTC protocol.
    | + +## Provision Favorites +>*Supported versions: Windows 10, version 1709* + + +This policy setting allows you to configure a default set of favorites for employees, which they cannot modify, sort, move, export or delete. Specify the URL which points to the file that has all the data for provisioning favorites (in html format). You can export a set of favorites from Edge and use that html file for provisioning user machines. + +URL can be specified as: + HTTP location: "SiteList"="http://localhost:8080/URLs.html" + Local network: "SiteList"="\network\shares\URLs.html" + Local file: "SiteList"="file:///c:\Users\\Documents\URLs.html" + +>[!Important] +>Don't enable both this setting and the Keep favorites in sync between Internet Explorer and Microsoft Edge setting. Enabling both settings stops employees from syncing their favorites between Internet Explorer and Microsoft Edge. + +If disabled or not configured, employees will see the favorites they set in the Hub and Favorites Bar. + +**MDM name:** [ProvisionFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-provisionfavorites) + + +## Send all intranet sites to Internet Explorer 11 +>*Supported versions: Windows 10* + + +This policy setting specifies whether to send intranet traffic to Internet Explorer 11. This setting should only be used if there are known compatibility problems with Microsoft Edge. By default, this setting is disabled or not configured (turned off), which means all websites, including intranet sites, open in Microsoft Edge. If enabled, all intranet sites are opened in Internet Explorer 11 automatically. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[SendIntranetTraffictoInternetExplorer](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-sendintranettraffictointernetexplorer) | +|Supported devices |Desktop | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/SendIntranetTraffictoInternetExplorer | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Automatically opens all websites, including intranet sites, using Microsoft Edge.
    • **1** - Automatically opens all intranet sites using Internet Explorer 11.
    | + +## Set default search engine +>*Supported versions: Windows 10, version 1703 or later* + + +This policy setting allows you to configure the default search engine for domain-joined or MDM-enrolled devices. By default, this setting is not configured, which means the default search engine is specified in App settings. In this case, employees can change the default search engine at any time unless you disable the "Allow search engine customization" setting, which restricts any changes. If enabled, you can configure a default search engine for employees. When enabled, employees cannot change the default search engine. If disabled, the policy-set search engine will be removed, and, if it is the current default, the default will be set back to the factory Microsoft Edge search engine for the market. + +To set the default search engine, you must specify a link to the OpenSearch XML file that contains, at a minimum, the short name and the URL template (HTTPS) of the search engine. For more information about creating the OpenSearch XML file, see Search provider discovery. If you'd like your employees to use the default Microsoft Edge settings for each market, you can set the string to EDGEDEFAULT. If you'd like your employees to use Microsoft Bing as the default search engine, you can set the string to EDGEBING. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[SetDefaultSearchEngine](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-setdefaultsearchengine) | +|Supported devices |Desktop
    Mobile | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/SetDefaultSearchEngine | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - The default search engine is set to the one specified in App settings.
    • **1** - Allows you to configure the default search engine for your employees.
    | + +## Show message when opening sites in Internet Explorer >*Supported versions: Windows 10, version 1607 and later* -This policy setting lets you decide whether employees see an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11. -| If you… | Then… | -| --- | --- | -| Enable | Employees see an additional page. | -| Disable or do not configure (default) | No additional pages display. | +This policy setting specifies whether employees see an additional page in Microsoft Edge when opening sites that are configured to open in Internet Explorer using the Enterprise Site List. By default, this policy is disabled, which means no additional pages display. If enabled, employees see an additional page. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[ShowMessageWhenOpeningInteretExplorerSites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-showmessagewhenopeningsitesininternetexplorer) | +|Supported devices |Desktop | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/ShowMessageWhenOpeningSitesInInteretExplorer | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Doesn’t show an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.
    • **1** - Shows an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.
    | + + ## Related topics * [Mobile Device Management (MDM) settings]( https://go.microsoft.com/fwlink/p/?LinkId=722885) diff --git a/windows/security/identity-protection/credential-guard/credential-guard-requirements.md b/windows/security/identity-protection/credential-guard/credential-guard-requirements.md index d3be3e2ba8..0e81b79e6d 100644 --- a/windows/security/identity-protection/credential-guard/credential-guard-requirements.md +++ b/windows/security/identity-protection/credential-guard/credential-guard-requirements.md @@ -20,7 +20,7 @@ Prefer video? See [Windows Defender Credential Guard Deployment](https://mva.microsoft.com/en-us/training-courses/deep-dive-into-credential-guard-16651?l=sRcyvLJyC_3304300474) in the Deep Dive into Windows Defender Credential Guard video series. -For Windows Defender Credential Guard to provide protections, the computers you are protecting must meet certain baseline hardware, firmware, and software requirements which we will refer to as [Hardware and software requirements](#hardware-and-software-requirements). Additionally, Windows Defender Credential Guard blocks specific authentication capabilities, so applications that require such capabilities will break. We will refer to this as [Application requirements](#application-requirements). Beyond that, computers can meet additional hardware and firmware qualifications, and receive additional protections. Those computers will be more hardened against certain threats. For detailed information on baseline protections, plus protections for improved security that are associated with hardware and firmware options available in 2015, 2016, and 2017, refer to the tables in [Security Considerations](#security-considerations). +For Windows Defender Credential Guard to provide protection, the computers you are protecting must meet certain baseline hardware, firmware, and software requirements which we will refer to as [Hardware and software requirements](#hardware-and-software-requirements). Additionally, Windows Defender Credential Guard blocks specific authentication capabilities, so applications that require such capabilities will break. We will refer to this as [Application requirements](#application-requirements). Beyond that, computers can meet additional hardware and firmware qualifications, and receive additional protections. Those computers will be more hardened against certain threats. For detailed information on baseline protections, plus protections for improved security that are associated with hardware and firmware options available in 2015, 2016, and 2017, refer to the tables in [Security Considerations](#security-considerations). ## Hardware and software requirements From a196f71b85e44b61c9614d40ef4dfe84fdc411a3 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Thu, 5 Apr 2018 06:40:37 -0700 Subject: [PATCH 51/63] fixed broken link --- browsers/edge/available-policies.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index e564c939df..0d3bd56d4d 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -1,7 +1,8 @@ --- description: Microsoft Edge works with Group Policy and Microsoft Intune to help you manage your organization's computer settings. ms.assetid: 2e849894-255d-4f68-ae88-c2e4e31fa165 -author: eross-msft +author: shortpatti +ms.author: pashort ms.prod: edge ms.mktglfcycl: explore ms.sitesec: library @@ -10,8 +11,6 @@ ms.localizationpriority: high ms.date: 09/13/2017 #Previsou release date --- - - # Group Policy and Mobile Device Management (MDM) settings for Microsoft Edge > Applies to: Windows 10, Windows 10 Mobile From 31893d315efac005dc93c13d4e0c1ddb479fe357 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Thu, 5 Apr 2018 07:58:50 -0700 Subject: [PATCH 52/63] corrected the Configure Favorites policy and fixed a broken link --- browsers/edge/available-policies.md | 43 ++++++++++++----------------- 1 file changed, 17 insertions(+), 26 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 0d3bd56d4d..462b4795c6 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -156,7 +156,7 @@ This policy setting specifies whether to use the Microsoft compatibility list in This policy setting allows search engine customization for domain-joined or MDM-enrolled devices only. For example, you can change the default search engine or add a new search engine. By default, this setting is enabled allowing employees to add new search engines and change the default under Settings. If disabled, employees cannot add search enginess or change the default. -For more information, see [Microsoft browser extension policy](aka.ms/browserpolicy). +For more information, see [Microsoft browser extension policy](https://docs.microsoft.com/en-us/legal/windows/agreements/microsoft-browser-extension-policy). **Microsoft Intune to manage your MDM settings** | | | @@ -239,16 +239,27 @@ This policy setting specifies whether Do Not Track requests to websites is allow ## Configure Favorites >*Supported versions: Windows 10, version 1709* -This policy settings lets you configure a default list of Favorites that appear for your employee. By default, this setting is disabled or not configured allowing employees to customize the Favorites list, such as adding folders to organize their favorites. If enabled, employees are not allowed to add, import, or change anything in the Favorites list. As part of this, the Save a Favorite, Import settings, and context menu items (such as Create a new folder) are turned off. +This policy setting allows you to configure a default list of Favorites that appear for your employee, which they cannot modify, sort, move, export or delete. By default, this setting is disabled or not configured allowing employees to customize the Favorites list, such as adding folders to organize their favorites. If enabled, employees are not allowed to add, import, or change anything in the Favorites list. As part of this, the Save a Favorite, Import settings, and context menu items (such as Create a new folder) are turned off. + +Specify the URL which points to the file that has all the data for provisioning favorites (in html format). + +URL can be specified as: +- HTTP location: "SiteList"="http://localhost:8080/URLs.html" +- Local network: "SiteList"="\network\shares\URLs.html" +- Local file: "SiteList"="file:///c:\Users\\Documents\URLs.html" + +You can export a set of favorites from Edge and use that html file for provisioning user machines. + +>[!Important] +>Don't enable both this setting and the Keep favorites in sync between Internet Explorer and Microsoft Edge setting. Enabling both settings stops employees from syncing their favorites between Internet Explorer and Microsoft Edge. **Microsoft Intune to manage your MDM settings** | | | |---|---| -|MDM name |[LockdownFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-lockdownfavorites) | +|MDM name |[ProvisionFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-provisionfavorites) | |Supported devices |Desktop
    Mobile | -|URI full path |./Vendor/MSFT/Policy/Config/Browser/LockdownFavorites | -|Data type | Integer | -|Allowed values |
    • **0** - Disabled. Do not lockdown Favorites.
    • **1** - Enabled. Lockdown Favorites.
    | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/ProvisionFavorites | +|Data type | String | ## Configure Password Manager >*Supported versions: Windows 10* @@ -500,26 +511,6 @@ This policy setting specifies whether localhost IP address are visible or hiddle |Data type | Integer | |Allowed values |
    • **0 (default)** - Shows an employee's LocalHost IP address while using the WebRTC protocol.
    • **1** - Does not show an employee's LocalHost IP address while using the WebRTC protocol.
    | -## Provision Favorites ->*Supported versions: Windows 10, version 1709* - - -This policy setting allows you to configure a default set of favorites for employees, which they cannot modify, sort, move, export or delete. Specify the URL which points to the file that has all the data for provisioning favorites (in html format). You can export a set of favorites from Edge and use that html file for provisioning user machines. - -URL can be specified as: - HTTP location: "SiteList"="http://localhost:8080/URLs.html" - Local network: "SiteList"="\network\shares\URLs.html" - Local file: "SiteList"="file:///c:\Users\\Documents\URLs.html" - ->[!Important] ->Don't enable both this setting and the Keep favorites in sync between Internet Explorer and Microsoft Edge setting. Enabling both settings stops employees from syncing their favorites between Internet Explorer and Microsoft Edge. - -If disabled or not configured, employees will see the favorites they set in the Hub and Favorites Bar. - -**MDM name:** [ProvisionFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-provisionfavorites) - ## Send all intranet sites to Internet Explorer 11 >*Supported versions: Windows 10* From 5544523d7d27b57117c9cc4e2849262db714622f Mon Sep 17 00:00:00 2001 From: Patti Short Date: Thu, 5 Apr 2018 08:35:00 -0700 Subject: [PATCH 53/63] corrected the Configure Favorites policy and fixed a broken link --- browsers/edge/available-policies.md | 69 +++++++++++++++++++++++++++++ 1 file changed, 69 insertions(+) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 462b4795c6..824ae2d3eb 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -77,6 +77,20 @@ This policy setting specifies whether to clear browsing data on exiting Microsof |Data type | Integer | |Allowed values |
    • **0 (default)** - Browsing data is not cleared on exit. The type of browsing data to clear can be configured by the employee in the Clear browsing data options under Settings.
    • **1** - Browsing data is cleared on exit.
    | +## Allow configuration updates for the Books Library +>*Supporteded versions: Windows 10, version 1703 or later* + +This policy setting specifies whether Microsoft Edge can automatically update the configuration data for the Books Library. By default, this setting is enabled, which means Microsoft Edge retrieves a configuration for Books Library. If disabled, Microsoft Edge does not retrieve a configuration. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowConfigurationUpdateForBooksLibrary ](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowconfigurationupdateforbookslibrary) | +|Supported devices |Desktop | +|URI full path | ./Vendor/MSFT/Policy/Config/Browser/AllowConfigurationUpdateForBooksLibrary | +|Data type | Integer | +|Allowed values |
    • **0** - Disable. Microsoft Edge cannot retrieve a configuration.
    • **1 (default)** - Enable (default). Microsoft Edge can retrieve a configuration for Books Library.
    | + ## Allow Cortana >*Supported versions: Windows 10, version 1607 or later* @@ -109,6 +123,21 @@ This policy setting specifies whether employees cna use the F12 Developer Tools |Data type | Integer | |Allowed values |
    • **0** - Employees cannot use the F12 Developer Tools./li>
    • **1 (default)** - Employees can use the F12 Developer Tools.
    | +## Allow extended telemetry for the Books tab +>*Supporteded versions: Windows 10, version 1703 or later* + + +This policy settings specifies whether to allow the address bar drop-down functionality in Microsoft Edge. By default, this setting is enabled. We recommend that you disable this setting if you want to minimize network connections from Microsoft Edge to Microsoft services. If disabled, employees do not see the address bar drop-down functionality and also disables the user-defined settting "Show search and site suggestions as I type." Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the _Configure search suggestions in Address bar_ or _AllowSearchSuggestionsinAddressBar_ setting. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AllowAddressBarDropdown](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowaddressbardropdown) | +|Supported devices |Desktop | +|URI full path | ./Vendor/MSFT/Policy/Config/Browser/AllowAddressBarDropdown | +|Data type | Integer | +|Allowed values |
    • **0** - Not Allowed. Address bar drop-down is disabled, which also disables the user-defined setting, "Show search and site suggestions as I type."
    • **1 (default)** - Allowed. Address bar drop-down is enabled.
    | + ## Allow Extensions >*Supporteded versions: Windows 10, version 1607 or later* @@ -175,6 +204,19 @@ This policy setting lets you configure what appears when a New Tab page is opene +## Always enable book library +>*Supporteded versions: Windows 10* + +This policy settings specifies whether to always show the Books Library in Microsoft Edge. By default, this setting is disabled, which means the library is only visible in countries or regions where available. if enabled, the Books Library is always shown regardless of countries or region of activation. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[AlwaysEnableBooksLibrary](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-alwaysenablebookslibrary) | +|Supported devices |Desktop
    Mobile | +|URI full path | ./Vendor/MSFT/Policy/Config/Browser/AlwaysEnableBooksLibrary | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Disable. Use default visibility of the Books Library. The Library will be only visible in countries or regions where it’s available.
    • **1** - Enable. Always show the Books Library, regardless of countries or region of activation.
    | ## Configure additional search engines >*Supported versions: Windows 10, version 1703 or later* @@ -399,6 +441,19 @@ This policy setting specifies whether employees can use the Sync your Settings o This policy setting specifies whether a browser group can use the Sync your Settings options to sync their information to and from their device. Settings include information like History and Favorites. By default, this setting is disabled or not configured, which means the Sync your Settings options are turned on, letting browser groups pick what can sync on their device. If enabled, the Sync your Settings options are turned off so that browser groups are unable to sync their settings and info. You can use the Allow users to turn browser syncing on option to turn the feature off by default, but to let the employee change this setting. +## Enable extended books telemetry +>*Supporteded versions: Windows 10* + +This policy setting specifies how much data to send to Microsoft about the books you are reading from the Books tab in Microsoft Edge. By default, this setting is disabled or not configured, which means Microsoft Edge sends basic diagnostic data, depending on your device configuration. If enabled, Microsoft Edge sends additional diagnostic data in addition to the basic diagnostic data. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[EnableExtendedBooksTelemetry](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-enableextendedbookstelemetry) | +|Supported devices |Desktop
    Mobile | +|URI full path | ./Vendor/MSFT/Policy/Config/Browser/AlwaysEnableBooksLibrary | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Disable. No additional diagnostic data.
    • **1** - Enable. Additional diagnostic data for schools.
    | ## Keep favorites in sync between Internet Explorer and Microsoft Edge @@ -559,6 +614,20 @@ This policy setting specifies whether employees see an additional page in Micros |Data type | Integer | |Allowed values |
    • **0 (default)** - Doesn’t show an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.
    • **1** - Shows an additional page in Microsoft Edge, stating that a site has been opened using Internet Explorer 11.
    | +## User shared folder for books +>*Supported versions: Windows 10* + +This policy setting specifies whether organizations should use a folder shared across users to store books from the Books Library. + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[UseSharedFolderForBooks](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-usesharedfolderforbooks) | +|Supported devices |Desktop | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/UseSharedFolderForBooks | +|Data type | Integer | +|Allowed values |
    • **0** - No shared folder.
    • **1** - Use as shared folder.
    | + -## Always enable book library + +## Always Enable book library >*Supporteded versions: Windows 10* This policy settings specifies whether to always show the Books Library in Microsoft Edge. By default, this setting is disabled, which means the library is only visible in countries or regions where available. if enabled, the Books Library is always shown regardless of countries or region of activation. @@ -237,7 +234,7 @@ This setting does not set the default search engine. For that, you must use the ## Configure Autofill >*Supported versions: Windows 10* -This policy setting specifies whether AutoFill on websites is allowed. By default, this setting is not configured allowing employees to choose whether or not to use AutoFill. If enabled, AutoFill is used. If disabled, AutoFill is not used. +This policy setting specifies whether AutoFill on websites is allowed. By default, this setting is not configured allowing you to choose whether or not to use AutoFill. If enabled, AutoFill is used. If disabled, AutoFill is not used. **Microsoft Intune to manage your MDM settings** | | | @@ -265,7 +262,7 @@ This policy setting specifies whether cookies are allowed. By default, this sett ## Configure Do Not Track >*Supported versions: Windows 10* -This policy setting specifies whether Do Not Track requests to websites is allowed. By default, this setting is not configured allowing employees to choose whether or not to send tracking information. If enabled, Do Not Track requests are always sent to websites asking for tracking information. If disabled, Do Not Track requests are never sent. +This policy setting specifies whether Do Not Track requests to websites is allowed. By default, this setting is not configured allowing you to choose whether or not to send tracking information. If enabled, Do Not Track requests are always sent to websites asking for tracking information. If disabled, Do Not Track requests are never sent. **Microsoft Intune to manage your MDM settings** | | | @@ -274,12 +271,12 @@ This policy setting specifies whether Do Not Track requests to websites is allow |Supported devices |Desktop
    Mobile | |URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowDoNotTrack | |Data type | Integer | -|Allowed values |
    • **0 (default)** - Stops employees from sending Do Not Track headers to websites requesting tracking info.
    • **1** - Employees can send Do Not Track headers to websites requesting tracking info.
    | +|Allowed values |
    • **0 (default)** - Stops you from sending Do Not Track headers to websites requesting tracking info.
    • **1** - Employees can send Do Not Track headers to websites requesting tracking info.
    | ## Configure Favorites >*Supported versions: Windows 10, version 1709* -This policy setting allows you to configure a default list of Favorites that appear for your employee, which they cannot modify, sort, move, export or delete. By default, this setting is disabled or not configured allowing employees to customize the Favorites list, such as adding folders to organize their favorites. If enabled, employees are not allowed to add, import, or change anything in the Favorites list. As part of this, the Save a Favorite, Import settings, and context menu items (such as Create a new folder) are turned off. +This policy setting allows you to configure a default list of Favorites that appear for your employee, which they cannot modify, sort, move, export or delete. By default, this setting is disabled or not configured allowing you to customize the Favorites list, such as adding folders to organize their favorites. If enabled, you are not allowed to add, import, or change anything in the Favorites list. As part of this, the Save a Favorite, Import settings, and context menu items (such as Create a new folder) are turned off. Specify the URL which points to the file that has all the data for provisioning favorites (in html format). @@ -291,7 +288,7 @@ URL can be specified as: You can export a set of favorites from Edge and use that html file for provisioning user machines. >[!Important] ->Don't enable both this setting and the Keep favorites in sync between Internet Explorer and Microsoft Edge setting. Enabling both settings stops employees from syncing their favorites between Internet Explorer and Microsoft Edge. +>Don't enable both this setting and the Keep favorites in sync between Internet Explorer and Microsoft Edge setting. Enabling both settings stops you from syncing their favorites between Internet Explorer and Microsoft Edge. **Microsoft Intune to manage your MDM settings** | | | @@ -304,7 +301,7 @@ You can export a set of favorites from Edge and use that html file for provision ## Configure Password Manager >*Supported versions: Windows 10* -This policy setting specifies whether saving and managing passwords locally on the device is allowed. By default, this setting is enabled allowing employees to save their passwords locally. If not configured, employees can choose whether or not to save and manage passwords locally. If disabled, saving and managing passwords locally is turned off. +This policy setting specifies whether saving and managing passwords locally on the device is allowed. By default, this setting is enabled allowing you to save their passwords locally. If not configured, you can choose whether or not to save and manage passwords locally. If disabled, saving and managing passwords locally is turned off. **Microsoft Intune to manage your MDM settings** | | | @@ -318,7 +315,7 @@ This policy setting specifies whether saving and managing passwords locally on t ## Configure Pop-up Blocker >*Supported versions: Windows 10* -This policy setting specifies whether pop-up blocker is allowed or enabled. By default, pop-up blocker is turned on. If not configured, employees can choose whether to turn on or turn off pop-up blocker. If disabled, pop-up blocker is turned off. +This policy setting specifies whether pop-up blocker is allowed or enabled. By default, pop-up blocker is turned on. If not configured, you can choose whether to turn on or turn off pop-up blocker. If disabled, pop-up blocker is turned off. **Microsoft Intune to manage your MDM settings** | | | @@ -332,7 +329,7 @@ This policy setting specifies whether pop-up blocker is allowed or enabled. By d ## Configure search suggestions in Address bar >*Supported versions: Windows 10* -This policy setting specifies whether search suggestions are allowed in the address bar. By default, this setting is not configured allowing employees to choose whether search suggestions appear in the address bar. If enabled, search suggestions appear. If disabled, search suggestions do not appear. +This policy setting specifies whether search suggestions are allowed in the address bar. By default, this setting is not configured allowing you to choose whether search suggestions appear in the address bar. If enabled, search suggestions appear. If disabled, search suggestions do not appear. **Microsoft Intune to manage your MDM settings** | | | @@ -355,12 +352,12 @@ This policy setting specifies your Start pages for domain-joined or MDM-enrolled |Supported devices |Desktop | |URI full path |./Vendor/MSFT/Policy/Config/Browser/HomePages | |Data type |String | -|Allowed values |Configure the Start page (previously known as Home page) URLs for your employees. | +|Allowed values |Configure the Start page (previously known as Home page) URLs for your you. | ## Configure the Adobe Flash Click-to-Run setting >*Supported versions: Windows 10, version 1703 or later* -This policy setting specifies whether employees must take action, such as clicking the content or a Click-to-Run button, before seeing content in Adobe Flash. By default, this setting is enabled. when the setting is enabled, employees must click the content, Click-to-Run button, or have the site appear on an auto-allow list before before the Adobe Flash content loads. If disabled, Adobe Flash loads and runs automatically. +This policy setting specifies whether you must take action, such as clicking the content or a Click-to-Run button, before seeing content in Adobe Flash. By default, this setting is enabled. when the setting is enabled, you must click the content, Click-to-Run button, or have the site appear on an auto-allow list before before the Adobe Flash content loads. If disabled, Adobe Flash loads and runs automatically. **Microsoft Intune to manage your MDM settings** | | | @@ -374,7 +371,7 @@ This policy setting specifies whether employees must take action, such as clicki ## Configure the Enterprise Mode Site List >*Supported versions: Windows 10* -This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps. By default, this setting is disabled or not configured, which means the Enterprise Mode Site List is not used. In this case, employees might experience compatibility problems while using legacy apps. If enabled, you must add the location to your site list in the **{URI}** box. when enabled, Microsoft Edge looks for the Enterprise Mode Site List XML file, which includes the sites and domains that need to be viewed using Internet Explorer 11 and Enterprise Mode. +This policy setting lets you configure whether to use Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps. By default, this setting is disabled or not configured, which means the Enterprise Mode Site List is not used. In this case, you might experience compatibility problems while using legacy apps. If enabled, you must add the location to your site list in the **{URI}** box. when enabled, Microsoft Edge looks for the Enterprise Mode Site List XML file, which includes the sites and domains that need to be viewed using Internet Explorer 11 and Enterprise Mode. >[!Note] >If there is a .xml file in the cache container, IE waits 65 seconds and then checks the local cache for a newer version of the file from the server, based on standard caching rules. If the server has a different version number than the version in the cache container, the server file is used and stored in the cache container.

    @@ -392,7 +389,7 @@ This policy setting lets you configure whether to use Enterprise Mode and the En ## Configure Windows Defender SmartScreen >*Supported versions: Windows 10* -This policy setting specifies whether Windows Defender SmartScreen is allowed. By default, this setting is enabled or turned on and employees cannot turn it off. If disabled, Windows Defender SmartScreen is turned off and employees cannot turn it on. If not configured, employees can choose whether to use Windows Defender SmartScreen. +This policy setting specifies whether Windows Defender SmartScreen is allowed. By default, this setting is enabled or turned on and you cannot turn it off. If disabled, Windows Defender SmartScreen is turned off and you cannot turn it on. If not configured, you can choose whether to use Windows Defender SmartScreen. **Microsoft Intune to manage your MDM settings** | | | @@ -401,7 +398,7 @@ This policy setting specifies whether Windows Defender SmartScreen is allowed. B |Supported devices |Desktop
    Mobile | |URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowSmartScreen | |Data type | Integer | -|Allowed values |
    • **0 (default)** - Turns off Windows Defender SmartScreen.
    • **1** - Turns on Windows Defender SmartScreen, providing warning messages to your employees about potential phishing scams and malicious software.
    | +|Allowed values |
    • **0 (default)** - Turns off Windows Defender SmartScreen.
    • **1** - Turns on Windows Defender SmartScreen, providing warning messages to your you about potential phishing scams and malicious software.
    | ## Disable lockdown of Start pages >*Supported versions: Windows 10, version 1703 or later* @@ -421,7 +418,7 @@ This policy setting specifies whether the lockdown on the Start pages is disable ## Do not sync >*Supported versions: Windows 10* -This policy setting specifies whether employees can use the Sync your Settings option to sync their settings to and from their device. By default, this setting is disabled or not configured, which means the Sync your Settings options are turned on, letting employees pick what can sync on their device. If enabled, the Sync your Settings options are turned off and none of the Sync your Setting groups are synced on the device. You can use the Allow users to turn syncing on option to turn the feature off by default, but to let the employee change this setting. For information about what settings are sync'ed, see [About sync setting on Windows 10 devices](http://windows.microsoft.com/windows-10/about-sync-settings-on-windows-10-devices). +This policy setting specifies whether you can use the Sync your Settings option to sync their settings to and from their device. By default, this setting is disabled or not configured, which means the Sync your Settings options are turned on, letting you pick what can sync on their device. If enabled, the Sync your Settings options are turned off and none of the Sync your Setting groups are synced on the device. You can use the Allow users to turn syncing on option to turn the feature off by default, but to let the employee change this setting. For information about what settings are sync'ed, see [About sync setting on Windows 10 devices](http://windows.microsoft.com/windows-10/about-sync-settings-on-windows-10-devices). **Microsoft Intune to manage your MDM settings** | | | @@ -433,31 +430,15 @@ This policy setting specifies whether employees can use the Sync your Settings o |Data type | Integer | |Allowed values |
    • **0** - Employees cannot sync settings between PCs.
    • **1 (default)** - Employees can sync between PCs.
    | - ## Do not sync browser settings >*Supported versions: Windows 10* This policy setting specifies whether a browser group can use the Sync your Settings options to sync their information to and from their device. Settings include information like History and Favorites. By default, this setting is disabled or not configured, which means the Sync your Settings options are turned on, letting browser groups pick what can sync on their device. If enabled, the Sync your Settings options are turned off so that browser groups are unable to sync their settings and info. You can use the Allow users to turn browser syncing on option to turn the feature off by default, but to let the employee change this setting. -## Enable extended books telemetry ->*Supporteded versions: Windows 10* - -This policy setting specifies how much data to send to Microsoft about the books you are reading from the Books tab in Microsoft Edge. By default, this setting is disabled or not configured, which means Microsoft Edge sends basic diagnostic data, depending on your device configuration. If enabled, Microsoft Edge sends additional diagnostic data in addition to the basic diagnostic data. - -**Microsoft Intune to manage your MDM settings** -| | | -|---|---| -|MDM name |[EnableExtendedBooksTelemetry](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-enableextendedbookstelemetry) | -|Supported devices |Desktop
    Mobile | -|URI full path | ./Vendor/MSFT/Policy/Config/Browser/AlwaysEnableBooksLibrary | -|Data type | Integer | -|Allowed values |
    • **0 (default)** - Disable. No additional diagnostic data.
    • **1** - Enable. Additional diagnostic data for schools.
    | - - ## Keep favorites in sync between Internet Explorer and Microsoft Edge >*Supported versions: Windows 10, version 1703 or later* -This policy setting specifies whether favorites are kept in sync between Internet Explorer and Microsoft Edge. Changes to favorites in one browser are reflected in the other, including additions, deletions, modifications, and ordering. By default, this setting is disabled or not configured. When disabled or not configured, employees cannot sync their favorites. If enabled, employees can sync their favorites and stops Microsoft Edge favorites from syncing between connected Windows 10 devices. This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile. +This policy setting specifies whether favorites are kept in sync between Internet Explorer and Microsoft Edge. Changes to favorites in one browser are reflected in the other, including additions, deletions, modifications, and ordering. By default, this setting is disabled or not configured. When disabled or not configured, you cannot sync their favorites. If enabled, you can sync their favorites and stops Microsoft Edge favorites from syncing between connected Windows 10 devices. This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile. **Microsoft Intune to manage your MDM settings** | | | @@ -471,7 +452,7 @@ This policy setting specifies whether favorites are kept in sync between Interne ## Prevent access to the about:flags page >*Supported versions: Windows 10, version 1607 or later* -This policy setting specifies whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features. By default, this setting is disabled or not configured, which means employees can access the about:flags page. If enabled, employees cannot access the about:flags page. +This policy setting specifies whether you can access the about:flags page, which is used to change developer settings and to enable experimental features. By default, this setting is disabled or not configured, which means you can access the about:flags page. If enabled, you cannot access the about:flags page. **Microsoft Intune to manage your MDM settings** | | | @@ -485,7 +466,7 @@ This policy setting specifies whether employees can access the about:flags page, ## Prevent bypassing Windows Defender SmartScreen prompts for files >*Supported versions: Windows 10, version 1511 or later* -This policy setting specifies whether employees can override the Windows Defender SmartScreen warnings about downloading unverified files. By default, this setting is disabled or not configured (turned off), which means employees can ignore the warnings and can continue the download process. If enabled (turned on), employees cannot ignore the warnings and blocks them from downloading unverified files. +This policy setting specifies whether you can override the Windows Defender SmartScreen warnings about downloading unverified files. By default, this setting is disabled or not configured (turned off), which means you can ignore the warnings and can continue the download process. If enabled (turned on), you cannot ignore the warnings and blocks them from downloading unverified files. **Microsoft Intune to manage your MDM settings** | | | @@ -494,12 +475,12 @@ This policy setting specifies whether employees can override the Windows Defende |Supported devices |Desktop
    Mobile | |URI full path | ./Vendor/MSFT/Policy/Config/Browser/PreventSmartScreenPromptOverrideForFiles | |Data type | Integer | -|Allowed values |
    • **0 (default)** - Lets employees ignore the Windows Defender SmartScreen warnings about unverified files and lets them continue the download process.
    • **1** - Stops employees from ignoring the Windows Defender SmartScreen warnings about unverified files.
    | +|Allowed values |
    • **0 (default)** - Lets you ignore the Windows Defender SmartScreen warnings about unverified files and lets them continue the download process.
    • **1** - Stops you from ignoring the Windows Defender SmartScreen warnings about unverified files.
    | ## Prevent bypassing Windows Defender SmartScreen prompts for sites >*Supported versions: Windows 10, version 1511 or later* -This policy setting specifies whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites. By default, this setting is disabled or not configured (turned off), which means employees can ignore the warnings and allows them to continue to the site. If enabled (turned on), employees cannot ignore the warnings and blocks them from continuing to the site. +This policy setting specifies whether you can override the Windows Defender SmartScreen warnings about potentially malicious websites. By default, this setting is disabled or not configured (turned off), which means you can ignore the warnings and allows them to continue to the site. If enabled (turned on), you cannot ignore the warnings and blocks them from continuing to the site. **Microsoft Intune to manage your MDM settings** | | | @@ -513,10 +494,10 @@ This policy setting specifies whether employees can override the Windows Defende ## Prevent changes to Favorites on Microsoft Edge >*Supported versions: Windows 10, version 1709* -This policy setting specifies whether employees can add, import, sort, or edit the Favorites list in Microsoft Edge. By default, this setting is disabled or not configured (turned on), which means the Favorites list is not locked down and employees can make changes to the Favorites list. If enabled, employees cannot make changes to the Favorites list. Also, the Save a Favorite, Import settings, and the context menu items, such as Create a new folder, are turned off. +This policy setting specifies whether you can add, import, sort, or edit the Favorites list in Microsoft Edge. By default, this setting is disabled or not configured (turned on), which means the Favorites list is not locked down and you can make changes to the Favorites list. If enabled, you cannot make changes to the Favorites list. Also, the Save a Favorite, Import settings, and the context menu items, such as Create a new folder, are turned off. >[!Important] ->Don't enable both this setting and the Keep favorites in sync between Internet Explorer and Microsoft Edge setting. Enabling both settings stops employees from syncing their favorites between Internet Explorer and Microsoft Edge. +>Don't enable both this setting and the Keep favorites in sync between Internet Explorer and Microsoft Edge setting. Enabling both settings stops you from syncing their favorites between Internet Explorer and Microsoft Edge. @@ -538,7 +519,7 @@ This policy setting specifies whether Microsoft can collect information to creat ## Prevent the First Run webpage from opening on Microsoft Edge >*Supported versions: Windows 10, version 1703 or later* -This policy setting specifies whether to enable or disable the First Run webpage. On the first explicit user-launch of Microsoft Edge, the First Run webpage hosted on microsoft.com opens automatically. This policy allows enterprises, such as those enrolled in a zero-emissions configuration, to prevent this page from opening. By default, this setting is disabled or not configured (turned off), which means employees see the First Run page. If enabled (turned on), the employees do not see the First Run page. +This policy setting specifies whether to enable or disable the First Run webpage. On the first explicit user-launch of Microsoft Edge, the First Run webpage hosted on microsoft.com opens automatically. This policy allows enterprises, such as those enrolled in a zero-emissions configuration, to prevent this page from opening. By default, this setting is disabled or not configured (turned off), which means you see the First Run page. If enabled (turned on), the you do not see the First Run page. **Microsoft Intune to manage your MDM settings** | | | @@ -584,9 +565,9 @@ This policy setting specifies whether to send intranet traffic to Internet Explo >*Supported versions: Windows 10, version 1703 or later* -This policy setting allows you to configure the default search engine for domain-joined or MDM-enrolled devices. By default, this setting is not configured, which means the default search engine is specified in App settings. In this case, employees can change the default search engine at any time unless you disable the "Allow search engine customization" setting, which restricts any changes. If enabled, you can configure a default search engine for employees. When enabled, employees cannot change the default search engine. If disabled, the policy-set search engine will be removed, and, if it is the current default, the default will be set back to the factory Microsoft Edge search engine for the market. +This policy setting allows you to configure the default search engine for domain-joined or MDM-enrolled devices. By default, this setting is not configured, which means the default search engine is specified in App settings. In this case, you can change the default search engine at any time unless you disable the "Allow search engine customization" setting, which restricts any changes. If enabled, you can configure a default search engine for you. When enabled, you cannot change the default search engine. If disabled, the policy-set search engine will be removed, and, if it is the current default, the default will be set back to the factory Microsoft Edge search engine for the market. -To set the default search engine, you must specify a link to the OpenSearch XML file that contains, at a minimum, the short name and the URL template (HTTPS) of the search engine. For more information about creating the OpenSearch XML file, see Search provider discovery. If you'd like your employees to use the default Microsoft Edge settings for each market, you can set the string to EDGEDEFAULT. If you'd like your employees to use Microsoft Bing as the default search engine, you can set the string to EDGEBING. +To set the default search engine, you must specify a link to the OpenSearch XML file that contains, at a minimum, the short name and the URL template (HTTPS) of the search engine. For more information about creating the OpenSearch XML file, see Search provider discovery. If you'd like your you to use the default Microsoft Edge settings for each market, you can set the string to EDGEDEFAULT. If you'd like your you to use Microsoft Bing as the default search engine, you can set the string to EDGEBING. **Microsoft Intune to manage your MDM settings** | | | @@ -595,13 +576,13 @@ To set the default search engine, you must specify a link to the OpenSearch XML |Supported devices |Desktop
    Mobile | |URI full path |./Vendor/MSFT/Policy/Config/Browser/SetDefaultSearchEngine | |Data type | Integer | -|Allowed values |
    • **0 (default)** - The default search engine is set to the one specified in App settings.
    • **1** - Allows you to configure the default search engine for your employees.
    | +|Allowed values |
    • **0 (default)** - The default search engine is set to the one specified in App settings.
    • **1** - Allows you to configure the default search engine for your you.
    | ## Show message when opening sites in Internet Explorer >*Supported versions: Windows 10, version 1607 and later* -This policy setting specifies whether employees see an additional page in Microsoft Edge when opening sites that are configured to open in Internet Explorer using the Enterprise Site List. By default, this policy is disabled, which means no additional pages display. If enabled, employees see an additional page. +This policy setting specifies whether you see an additional page in Microsoft Edge when opening sites that are configured to open in Internet Explorer using the Enterprise Site List. By default, this policy is disabled, which means no additional pages display. If enabled, you see an additional page. **Microsoft Intune to manage your MDM settings** | | | @@ -738,7 +719,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **Allowed values:** - - **0 (default).** Stops employees from sending Do Not Track headers to websites requesting tracking info. + - **0 (default).** Stops you from sending Do Not Track headers to websites requesting tracking info. - **1.** Employees can send Do Not Track headers to websites requesting tracking info. @@ -911,7 +892,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **0 (default).** Turns off Windows Defender SmartScreen. - - **1.** Turns on Windows Defender SmartScreen, providing warning messages to your employees about potential phishing scams and malicious software. + - **1.** Turns on Windows Defender SmartScreen, providing warning messages to your you about potential phishing scams and malicious software. ## ClearBrowsingDataOnExit - **Supported versions:** Windows 10, version 1703 @@ -999,7 +980,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **Allowed values:** - - Configure the **Favorite** URLs for your employees. + - Configure the **Favorite** URLs for your you. **Example:** @@ -1021,7 +1002,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **Allowed values:** - - Configure the first run URL for your employees. + - Configure the first run URL for your you. **Example:** @@ -1040,7 +1021,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **Allowed values:** - - Configure the Start page (previously known as Home page) URLs for your employees. + - Configure the Start page (previously known as Home page) URLs for your you. **Example:** @@ -1127,9 +1108,9 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **Allowed values:** - - **0 (default).** Lets employees ignore the Windows Defender SmartScreen warnings about unverified files and lets them continue the download process. + - **0 (default).** Lets you ignore the Windows Defender SmartScreen warnings about unverified files and lets them continue the download process. - - **1.** Stops employees from ignoring the Windows Defender SmartScreen warnings about unverified files. + - **1.** Stops you from ignoring the Windows Defender SmartScreen warnings about unverified files. ## PreventUsingLocalHostIPAddressForWebRTC - **Supported versions:** Windows 10, version 1511 or later @@ -1180,7 +1161,7 @@ All devices must be enrolled with Intune if you want to use the Windows Custom U - **0 (default).** The default search engine is set to the one specified in App settings. - - **1.** Allows you to configure the default search engine for your employees. + - **1.** Allows you to configure the default search engine for your you. ## ShowMessageWhenOpeningInteretExplorerSites - **Supported versions:** Windows 10, version 1607 and later @@ -1226,7 +1207,7 @@ These are additional Windows 10-specific Group Policy settings that work with M ## Allow Cortana - **Location:** Computer Configuration\Administrative Templates\Windows Components\Search\Allow Cortana -- **Description:** This policy setting specifies whether Cortana is allowed on the device. By default, this setting is enabled (allowed), which allows employees to use Cortana on their devices. If disabled (not allowed), employees cannot use Cortana, but can use search to find items on the device. +- **Description:** This policy setting specifies whether Cortana is allowed on the device. By default, this setting is enabled (allowed), which allows you to use Cortana on their devices. If disabled (not allowed), you cannot use Cortana, but can use search to find items on the device. - **Microsoft Intune to manage your MDM settings** | | | @@ -1241,7 +1222,7 @@ These are additional Windows 10-specific Group Policy settings that work with M ## Do not sync - **Location:** Computer Configuration\Administrative Templates\Windows Components\sync your settings\Do not sync -- **Description:** This policy setting specifies whether employees can use the Sync your Settings option to sync their settings to and from their device. By default, this setting is disabled or not configured, which means the Sync your Settings options are turned on, letting employees pick what can sync on their device. If enabled, the Sync your Settings options are turned off and none of the Sync your Setting groups are synced on the device. You can use the Allow users to turn syncing on option to turn the feature off by default, but to let the employee change this setting. For information about what settings are sync'ed, see [About sync setting on Windows 10 devices](http://windows.microsoft.com/windows-10/about-sync-settings-on-windows-10-devices). +- **Description:** This policy setting specifies whether you can use the Sync your Settings option to sync their settings to and from their device. By default, this setting is disabled or not configured, which means the Sync your Settings options are turned on, letting you pick what can sync on their device. If enabled, the Sync your Settings options are turned off and none of the Sync your Setting groups are synced on the device. You can use the Allow users to turn syncing on option to turn the feature off by default, but to let the employee change this setting. For information about what settings are sync'ed, see [About sync setting on Windows 10 devices](http://windows.microsoft.com/windows-10/about-sync-settings-on-windows-10-devices). - - From fd24a1aa206608e3b87464126a0231e5bdbde3b7 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 5 Apr 2018 10:23:41 -0700 Subject: [PATCH 56/63] rearranged as table --- .../update/windows-update-sources.md | 141 ++---------------- 1 file changed, 10 insertions(+), 131 deletions(-) diff --git a/windows/deployment/update/windows-update-sources.md b/windows/deployment/update/windows-update-sources.md index 5019699f81..351417d13b 100644 --- a/windows/deployment/update/windows-update-sources.md +++ b/windows/deployment/update/windows-update-sources.md @@ -7,7 +7,7 @@ ms.sitesec: library author: kaushika-msft ms.localizationpriority: high ms.author: kaushika -ms.date: 04/03/2018 +ms.date: 04/05/2018 --- # Determining the Windows Update Service source @@ -16,138 +16,17 @@ Windows 10 devices can receive updates from a variety of sources, including Wind 1. Start Windows PowerShell as an administrator 2. Run `\$MUSM = New-Object -ComObject “Microsoft.Update.ServiceManager”`. -3. Run `\$MUSM.Services`. The resulting output should be similar to the following: - - ``` - Name : Microsoft Update - ContentValidationCert : {} - ExpirationDate : - IsManaged : False - IsRegisteredWithAU : True - IssueDate : 01-Jan-01 12:00:00 AM - OffersWindowsUpdates : True - RedirectUrls : System.__ComObject - ServiceID : 7971f918-a847-4430-9279-4a52d1efe18d - IsScanPackageService : False - CanRegisterWithAU : True - ServiceUrl : https://fe2.update.microsoft.com/v6/ - SetupPrefix : mu - IsDefaultAUService : False +3. Run `\$MUSM.Services`. Compare the resulting output to this table: - Name : DCat Flighting Prod - ContentValidationCert : {} - ExpirationDate : - IsManaged : False - IsRegisteredWithAU : False - IssueDate : 01-Jan-01 12:00:00 AM - OffersWindowsUpdates : False - RedirectUrls : System.__ComObject - ServiceID : 8b24b027-1dee-babb-9a95-3517dfb9c552 - IsScanPackageService : False - CanRegisterWithAU : False - ServiceUrl : https://fe3.delivery.mp.microsoft.com/ - SetupPrefix : wu - IsDefaultAUService : False +| Output | Interpretation | +|-----------------------------------------------|-----------------------------------| +| Name : Microsoft Update
    ContentValidationCert : {}
    ExpirationDate :
    IsManaged : False
    IsRegisteredWithAU : True
    IssueDate : 01-Jan-01 12:00:00 AM
    OffersWindowsUpdates : True
    RedirectUrls : System.__ComObject
    ServiceID : 7971f918-a847-4430-9279-4a52d1efe18d
    IsScanPackageService : False
    CanRegisterWithAU : True
    ServiceUrl : https://fe2.update.microsoft.com/v6/
    SetupPrefix : mu
    IsDefaultAUService : False | - Name: **Microsoft Update** Indicates the source against which we will are checking the Client capability. Microsoft Updates indicates, updates for other Microsoft Products checkbox.
    - OffersWindowsUpdates: **True** Indicates that the client is configured to receive updates for all Microsoft Products (Office, etc.)| +| Name : Microsoft Update
    ContentValidationCert : {}
    ExpirationDate :
    IsManaged : False
    IsRegisteredWithAU : True
    IssueDate : 01-Jan-01 12:00:00 AM
    OffersWindowsUpdates : True
    RedirectUrls : System.__ComObject
    ServiceID : 7971f918-a847-4430-9279-4a52d1efe18d
    IsScanPackageService : False
    CanRegisterWithAU : True
    ServiceUrl : https://fe2.update.microsoft.com/v6/
    SetupPrefix : mu
    IsDefaultAUService : False |- Name: **DCat Flighting Prod** The update source is the Windows Insider Program.
    - OffersWindowsUpdates: **False** Indicates that the client will not receive or is not configured to receive these updates.| +|Name : DCat Flighting Prod
    ContentValidationCert : {}
    ExpirationDate :
    IsManaged : False
    IsRegisteredWithAU : False
    IssueDate : 01-Jan-01 12:00:00 AM
    OffersWindowsUpdates : False
    RedirectUrls : System.__ComObject
    ServiceID : 8b24b027-1dee-babb-9a95-3517dfb9c552
    IsScanPackageService : False
    CanRegisterWithAU : False
    ServiceUrl: https://fe3.delivery.mp.microsoft.com/
    SetupPrefix : wu
    IsDefaultAUService : False | - Name: **DCat Flighting Prod** The update source is the Windows Insider Program.
    - OffersWindowsUpdates: **False** Indicates that the client will not receive or is not configured to receive these updates. | +|Name : Windows Store (DCat Prod)
    ContentValidationCert : {}
    ExpirationDate :
    IsManaged : False
    IsRegisteredWithAU : False
    IssueDate : 01-Jan-01 12:00:00 AM
    OffersWindowsUpdates : False
    RedirectUrls : System.__ComObject
    ServiceID : 855e8a7c-ecb4-4ca3-b045-1dfa50104289
    IsScanPackageService : False
    CanRegisterWithAU : True
    ServiceUrl : https://fe3.delivery.mp.microsoft.com/
    SetupPrefix : ws
    IsDefaultAUService : False | - Name: **Windows Store (DCat Prod)** The update source is Insider Updates for Store Apps.
    - OffersWindowsUpdates: **False** Indicates that the client will not receive or is not configured to receive these updates. | +| Name : Windows Server Update Service
    ContentValidationCert : {}
    ExpirationDate : 18-Jun-54 9:21:00 PM
    IsManaged : True
    IsRegisteredWithAU : True
    IssueDate : 01-Jan-03 12:00:00 AM
    OffersWindowsUpdates : True
    RedirectUrls : System.__ComObject
    ServiceID : 3da21691-e39d-4da6-8a4b-b43877bcb1b7
    IsScanPackageService : False
    CanRegisterWithAU : True
    ServiceUrl :
    SetupPrefix :
    IsDefaultAUService : True|- Name: **Windows Server Update Service** The source is a Windows Server Updates Services server.
    - OffersWindowsUpdates: **True** The client is configured to receive updates from WSUS | +| Name : Windows Update
    ContentValidationCert : {}
    ExpirationDate :
    IsManaged : False
    IsRegisteredWithAU : False
    IssueDate : 01-Jan-01 12:00:00 AM
    OffersWindowsUpdates : True
    RedirectUrls : System.__ComObject
    ServiceID : 9482f4b4-e343-43b6-b170-9a65bc822c77
    IsScanPackageService : False
    CanRegisterWithAU : True
    ServiceUrl : https://fe2.update.microsoft.com/v6/
    SetupPrefix : wu
    IsDefaultAUService : False |- Name: **Windows Update** The source is Windows Update.
    - OffersWindowsUpdates: **True** The client is configured to receive updates from Windows Update Online | - Name : Windows Store (DCat Prod) - ContentValidationCert : {} - ExpirationDate : - IsManaged : False - IsRegisteredWithAU : False - IssueDate : 01-Jan-01 12:00:00 AM - OffersWindowsUpdates : False - RedirectUrls : System.__ComObject - ServiceID : 855e8a7c-ecb4-4ca3-b045-1dfa50104289 - IsScanPackageService : False - CanRegisterWithAU : True - ServiceUrl : https://fe3.delivery.mp.microsoft.com/ - SetupPrefix : ws - IsDefaultAUService : False - - Name : Windows Server Update Service - ContentValidationCert : {} - ExpirationDate : 18-Jun-54 9:21:00 PM - IsManaged : True - IsRegisteredWithAU : True - IssueDate : 01-Jan-03 12:00:00 AM - OffersWindowsUpdates : True - RedirectUrls : System.__ComObject - ServiceID : 3da21691-e39d-4da6-8a4b-b43877bcb1b7 - IsScanPackageService : False - CanRegisterWithAU : True - ServiceUrl : - SetupPrefix : - IsDefaultAUService : True - - Name : Windows Update - ContentValidationCert : {} - ExpirationDate : - IsManaged : False - IsRegisteredWithAU : False - IssueDate : 01-Jan-01 12:00:00 AM - OffersWindowsUpdates : True - RedirectUrls : System.__ComObject - ServiceID : 9482f4b4-e343-43b6-b170-9a65bc822c77 - IsScanPackageService : False - CanRegisterWithAU : True - ServiceUrl : https://fe2.update.microsoft.com/v6/ - SetupPrefix : wu - IsDefaultAUService : False - ``` - -4. Check the category **Name** and **OffersWindowsUpdates**:  - - Name: **Microsoft Update** - - Indicates the source against which we will are checking the Client capability. Microsoft Updates indicates, updates for other Microsoft Products checkbox. - - OffersWindowsUpdates: **True** - - Indicates that the client is configured to receive updates for all Microsoft Products (Office, etc.) - - --- - - Name: **DCat Flighting Prod** - - The update source is the Windows Insider Program. - - OffersWindowsUpdates: **False** - - Indicates that the client will not receive or is not configured to receive these updates. - - --- - - Name: **Windows Store (DCat Prod)** - - The update source is Insider Updates for Store Apps. - - OffersWindowsUpdates: **False** - - Indicates that the client will not receive or is not configured to receive these updates. - - --- - - Name: **Windows Server Update Service** - - The source is a Windows Server Updates Services server. - - OffersWindowsUpdates: **True** - - The client is configured to receive updates from WSUS - - --- - - Name: **Windows Update** - - The source is Windows Update. - - OffersWindowsUpdates: **True** - - The client is configured to receive updates from Windows Update Online - - --- -  -  See also: From 93ac10dd15eb2c8dff05a7ec8d50a8319f54e81a Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 5 Apr 2018 11:27:54 -0700 Subject: [PATCH 57/63] trying a different layout --- .../update/windows-update-sources.md | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/deployment/update/windows-update-sources.md b/windows/deployment/update/windows-update-sources.md index 351417d13b..490b2664d9 100644 --- a/windows/deployment/update/windows-update-sources.md +++ b/windows/deployment/update/windows-update-sources.md @@ -6,7 +6,7 @@ ms.mktglfcycl: ms.sitesec: library author: kaushika-msft ms.localizationpriority: high -ms.author: kaushika +ms.author: jaimeo ms.date: 04/05/2018 --- @@ -16,16 +16,16 @@ Windows 10 devices can receive updates from a variety of sources, including Wind 1. Start Windows PowerShell as an administrator 2. Run `\$MUSM = New-Object -ComObject “Microsoft.Update.ServiceManager”`. -3. Run `\$MUSM.Services`. Compare the resulting output to this table: +3. Run `\$MUSM.Services`. Check the resulting output for the **Name** and **OffersWindowsUPdates** parameters, which you can intepret according to this table: + +| Output | Interpretation | +|-----------------------------------------------------|-----------------------------------| +| - Name: **Microsoft Update**
    -OffersWindowsUpdates: **True** | - The update source is Microsoft Update, which means that updates for other Microsoft products besides the operating system could also be delivered.
    - Indicates that the client is configured to receive updates for all Microsoft Products (Office, etc.)| +|- Name: **DCat Flighting Prod**
    - OffersWindowsUpdates: **False**|- The update source is the Windows Insider Program.
    - Indicates that the client will not receive or is not configured to receive these updates. | +| - Name: **Windows Store (DCat Prod)**
    - OffersWindowsUpdates: **False** |-The update source is Insider Updates for Store Apps.
    - Indicates that the client will not receive or is not configured to receive these updates.| +|- Name: **Windows Server Update Service**
    - OffersWindowsUpdates: **True** |- The source is a Windows Server Updates Services server.
    - The client is configured to receive updates from WSUS.| +|- Name: **Windows Update**
    - OffersWindowsUpdates: **True** |- The source is Windows Update.
    - The client is configured to receive updates from Windows Update Online.| -| Output | Interpretation | -|-----------------------------------------------|-----------------------------------| -| Name : Microsoft Update
    ContentValidationCert : {}
    ExpirationDate :
    IsManaged : False
    IsRegisteredWithAU : True
    IssueDate : 01-Jan-01 12:00:00 AM
    OffersWindowsUpdates : True
    RedirectUrls : System.__ComObject
    ServiceID : 7971f918-a847-4430-9279-4a52d1efe18d
    IsScanPackageService : False
    CanRegisterWithAU : True
    ServiceUrl : https://fe2.update.microsoft.com/v6/
    SetupPrefix : mu
    IsDefaultAUService : False | - Name: **Microsoft Update** Indicates the source against which we will are checking the Client capability. Microsoft Updates indicates, updates for other Microsoft Products checkbox.
    - OffersWindowsUpdates: **True** Indicates that the client is configured to receive updates for all Microsoft Products (Office, etc.)| -| Name : Microsoft Update
    ContentValidationCert : {}
    ExpirationDate :
    IsManaged : False
    IsRegisteredWithAU : True
    IssueDate : 01-Jan-01 12:00:00 AM
    OffersWindowsUpdates : True
    RedirectUrls : System.__ComObject
    ServiceID : 7971f918-a847-4430-9279-4a52d1efe18d
    IsScanPackageService : False
    CanRegisterWithAU : True
    ServiceUrl : https://fe2.update.microsoft.com/v6/
    SetupPrefix : mu
    IsDefaultAUService : False |- Name: **DCat Flighting Prod** The update source is the Windows Insider Program.
    - OffersWindowsUpdates: **False** Indicates that the client will not receive or is not configured to receive these updates.| -|Name : DCat Flighting Prod
    ContentValidationCert : {}
    ExpirationDate :
    IsManaged : False
    IsRegisteredWithAU : False
    IssueDate : 01-Jan-01 12:00:00 AM
    OffersWindowsUpdates : False
    RedirectUrls : System.__ComObject
    ServiceID : 8b24b027-1dee-babb-9a95-3517dfb9c552
    IsScanPackageService : False
    CanRegisterWithAU : False
    ServiceUrl: https://fe3.delivery.mp.microsoft.com/
    SetupPrefix : wu
    IsDefaultAUService : False | - Name: **DCat Flighting Prod** The update source is the Windows Insider Program.
    - OffersWindowsUpdates: **False** Indicates that the client will not receive or is not configured to receive these updates. | -|Name : Windows Store (DCat Prod)
    ContentValidationCert : {}
    ExpirationDate :
    IsManaged : False
    IsRegisteredWithAU : False
    IssueDate : 01-Jan-01 12:00:00 AM
    OffersWindowsUpdates : False
    RedirectUrls : System.__ComObject
    ServiceID : 855e8a7c-ecb4-4ca3-b045-1dfa50104289
    IsScanPackageService : False
    CanRegisterWithAU : True
    ServiceUrl : https://fe3.delivery.mp.microsoft.com/
    SetupPrefix : ws
    IsDefaultAUService : False | - Name: **Windows Store (DCat Prod)** The update source is Insider Updates for Store Apps.
    - OffersWindowsUpdates: **False** Indicates that the client will not receive or is not configured to receive these updates. | -| Name : Windows Server Update Service
    ContentValidationCert : {}
    ExpirationDate : 18-Jun-54 9:21:00 PM
    IsManaged : True
    IsRegisteredWithAU : True
    IssueDate : 01-Jan-03 12:00:00 AM
    OffersWindowsUpdates : True
    RedirectUrls : System.__ComObject
    ServiceID : 3da21691-e39d-4da6-8a4b-b43877bcb1b7
    IsScanPackageService : False
    CanRegisterWithAU : True
    ServiceUrl :
    SetupPrefix :
    IsDefaultAUService : True|- Name: **Windows Server Update Service** The source is a Windows Server Updates Services server.
    - OffersWindowsUpdates: **True** The client is configured to receive updates from WSUS | -| Name : Windows Update
    ContentValidationCert : {}
    ExpirationDate :
    IsManaged : False
    IsRegisteredWithAU : False
    IssueDate : 01-Jan-01 12:00:00 AM
    OffersWindowsUpdates : True
    RedirectUrls : System.__ComObject
    ServiceID : 9482f4b4-e343-43b6-b170-9a65bc822c77
    IsScanPackageService : False
    CanRegisterWithAU : True
    ServiceUrl : https://fe2.update.microsoft.com/v6/
    SetupPrefix : wu
    IsDefaultAUService : False |- Name: **Windows Update** The source is Windows Update.
    - OffersWindowsUpdates: **True** The client is configured to receive updates from Windows Update Online | See also: From d0801522fdea7557c3792d5728e9ac49703a1533 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 5 Apr 2018 12:31:58 -0700 Subject: [PATCH 58/63] tweak to title; wired into TOC --- windows/deployment/TOC.md | 1 + windows/deployment/update/windows-update-sources.md | 4 ++-- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index 94f70ce62d..3c88941d73 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -230,6 +230,7 @@ ### [Deploy Windows 10 updates using System Center Configuration Manager](update/waas-manage-updates-configuration-manager.md) ### [Manage device restarts after updates](update/waas-restart.md) ### [Manage additional Windows Update settings](update/waas-wu-settings.md) +### [Determining the source of Windows updates](update/windows-update-sources.md) ### [Windows Insider Program for Business](update/waas-windows-insider-for-business.md) #### [Introduction to the Windows Insider Program for Business](update/WIP4Biz-intro.md) #### [Windows Insider Program for Business Frequently Asked Questions](update/waas-windows-insider-for-business-faq.md) diff --git a/windows/deployment/update/windows-update-sources.md b/windows/deployment/update/windows-update-sources.md index 490b2664d9..c9b0be52ce 100644 --- a/windows/deployment/update/windows-update-sources.md +++ b/windows/deployment/update/windows-update-sources.md @@ -1,5 +1,5 @@ --- -title: Determining the Windows Update Service source +title: Determining the source of Windows updates description: Determine the source that Windows Update service is currently using. ms.prod: w10 ms.mktglfcycl: @@ -10,7 +10,7 @@ ms.author: jaimeo ms.date: 04/05/2018 --- -# Determining the Windows Update Service source +# Determining the source of Windows updates Windows 10 devices can receive updates from a variety of sources, including Windows Update online, a Windows Server Update Services server, and others. To determine the source of Windows Updates currently being used on a device, follow these steps:  From 971c875ff86fafbf37ec84e64de9b2b73a8a934d Mon Sep 17 00:00:00 2001 From: Patti Short Date: Thu, 5 Apr 2018 18:37:30 -0700 Subject: [PATCH 60/63] Updated the voice and tone, plus deleted duplicate content --- browsers/edge/available-policies.md | 66 ++++++++++++++++++----------- 1 file changed, 41 insertions(+), 25 deletions(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index 65193cad8d..bedff7e283 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -8,7 +8,7 @@ ms.mktglfcycl: explore ms.sitesec: library title: Group Policy and Mobile Device Management settings for Microsoft Edge (Microsoft Edge for IT Pros) ms.localizationpriority: high -ms.date: 09/13/2017 #Previsou release date +ms.date: 4/5/2018 #Previsou release date 09/13/2017 --- # Group Policy and Mobile Device Management (MDM) settings for Microsoft Edge @@ -34,8 +34,9 @@ Microsoft Edge works with these Group Policy settings (`Computer Configuration\A ## Allow Address bar drop-down list suggestions >*Supporteded versions: Windows 10, version 1703 or later* +The Address bar drop-down list, when enabled, allows the Address bar drop-down functionality in Microsoft Edge. By default, this policy is enabled. If disabled, you do not see the address bar drop-down functionality and disables the user-defined policy "Show search and site suggestions as I type." Therefore, because search suggestions are shown in the drop-down, this policy takes precedence over the [Configure search suggestions in Address bar](https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/available-policies?branch=pashort_edge-backlog_vsts15846461#configure-search-suggestions-in-address-bar) or [AllowSearchSuggestionsinAddressBar](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsearchsuggestionsinaddressbar) policy. -This policy settings specifies whether to allow the address bar drop-down functionality in Microsoft Edge. By default, this setting is enabled. We recommend that you disable this setting if you want to minimize network connections from Microsoft Edge to Microsoft services. If disabled, you do not see the address bar drop-down functionality and also disables the user-defined settting "Show search and site suggestions as I type." Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the [Configure search suggestions in Address bar](https://review.docs.microsoft.com/en-us/microsoft-edge/deploy/available-policies?branch=pashort_edge-backlog_vsts15846461#configure-search-suggestions-in-address-bar) or [AllowSearchSuggestionsinAddressBar](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowsearchsuggestionsinaddressbar) setting. +If you want to minimize network connections from Microsoft Edge to Microsoft services, we recommend that you disable this policy. **Microsoft Intune to manage your MDM settings** | | | @@ -44,31 +45,30 @@ This policy settings specifies whether to allow the address bar drop-down functi |Supported devices |Desktop | |URI full path | ./Vendor/MSFT/Policy/Config/Browser/AllowAddressBarDropdown | |Data type | Integer | -|Allowed values |
    • **0** - Not Allowed. Address bar drop-down is disabled, which also disables the user-defined setting, "Show search and site suggestions as I type."
    • **1 (default)** - Allowed. Address bar drop-down is enabled.
    | +|Allowed values |
    • **0** - Not Allowed. Address bar drop-down is disabled, which also disables the user-defined policy, "Show search and site suggestions as I type."
    • **1 (default)** - Allowed. Address bar drop-down is enabled.
    | ## Allow Adobe Flash >*Supporteded version: Windows 10* - -This policy setting specifies whether Adobe Flash can run in Microsoft Edge. By default, this setting is enabled or not configured, which allows you to use Adobe Flash. +Adobe Flash is integrated with Microsoft Edge and is updated via Windows Update. By default, this policy is enabled or not configured allowing you to use Adobe Flash Player in Microsoft Edge. **Microsoft Intune to manage your MDM settings** | | | |---|---| |MDM name |[AllowFlash](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-allowflash) | |Supported devices |Desktop | -|URI full path | ./Vendor/MSFT/Policy/Config/Browser/AllowAutofill | +|URI full path | ./Vendor/MSFT/Policy/Config/Browser/AllowAdobeFlash | |Data type | Integer | -|Allowed values |
    • **0** - Adobe Flash cannot be used Microsoft Edge.
    • **1 (default)** - Adobe Flash can be used Microsoft Edge.
    | +|Allowed values |
    • **0** - Adobe Flash cannot be used Microsoft Edge.
    • **1 (default)** - Adobe Flash can be used in Microsoft Edge.
    | ## Allow clearing browsing data on exit >*Supporteded versions: Windows 10, version 1703* +Your browsing data is the information that Microsoft Edge remembers and stores as you browse websites. Browsing data includes information you entered into forms, passwords, and the websites you visited. By default, this policy is disabled or not configured, the browsing data is not cleared when exiting. When this policy is disabled or not configured, you can turn on and configure the Clear browsing data option under Settings. -This policy setting specifies whether to clear browsing data on exiting Microsoft Edge. By default, this setting is disabled or not configured, which means you can turn on and configure Clear browsing data option under Settings. If enabled, browsing history on exit is turned on. -**Microsoft Intune to manage your MDM settings** +**Microsoft Intune to manage your MDM settings** | | | |---|---| |MDM name |[ClearBrowsingDataOnExit](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-clearbrowsingdataonexit) | @@ -80,7 +80,7 @@ This policy setting specifies whether to clear browsing data on exiting Microsof ## Allow configuration updates for the Books Library >*Supporteded versions: Windows 10* -This policy setting specifies whether Microsoft Edge can automatically update the configuration data for the Books Library. By default, this setting is enabled, which means Microsoft Edge retrieves configuration data for the Books Library. If disabled, Microsoft Edge does not retrieve configuration data. +Microsoft Edge automatically retrieves the configuration data for the Books Library, when this policy is enabled or not configured. If disabled, Microsoft Edge does not retrieve the Books configuration data. **Microsoft Intune to manage your MDM settings** | | | @@ -95,7 +95,7 @@ This policy setting specifies whether Microsoft Edge can automatically update th ## Allow Cortana >*Supported versions: Windows 10, version 1607 or later* -This policy setting specifies whether Cortana is allowed on the device. By default, this setting is enabled (allowed), which allows you to use Cortana on your devices. If disabled (not allowed), Cortana is not available for use, but you can use search to find items on your device. +Cortana is integrated with Microsoft Edge, and when enabled, Cortana allows you use the voice assistant on your device. If disabled, Cortana is not available for use, but you can search to find items on your device. **Microsoft Intune to manage your MDM settings** | | | @@ -103,14 +103,14 @@ This policy setting specifies whether Cortana is allowed on the device. By defau |MDM name |[AllowCortana](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#experience-allowcortana) | |Supported devices |Mobile | |URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowCortana | -|Location |Computer Configuration\Administrative Templates\Windows Components\Search\Allow Cortana | +|Location |Computer Configuration\Administrative Templates\Windows Components\Search\AllowCortana | |Data type | Integer | |Allowed values |
    • **0** - Not allowed.
    • **1 (default)** - Allowed.
    | ## Allow Developer Tools >*Supporteded versions: Windows 10, version 1511 or later* -This policy setting specifies whether you can use the F12 Developer Tools on Microsoft Edge. By default, this setting is enabled making the F12 Developer Tools availabe to use. If disabled, the F12 Developer Tools are not available. +F12 developer tools is a suite of tools to help you build and debug your webpage. By default, this policy is enabled making the F12 Developer Tools availabe to use. **Microsoft Intune to manage your MDM settings** | | | @@ -119,12 +119,12 @@ This policy setting specifies whether you can use the F12 Developer Tools on Mic |Supported devices |Desktop | |URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowDeveloperTools | |Data type | Integer | -|Allowed values |
    • **0** - Employees cannot use the F12 Developer Tools./li>
    • **1 (default)** - Employees can use the F12 Developer Tools.
    | +|Allowed values |
    • **0** - The F12 Developer Tools are disabled.
    • **1 (default)** - The F12 Developer Tools are enabled.
    | ## Allow extended telemetry for the Books tab >*Supporteded versions: Windows 10* -This policy setting allows you to specify how much data to send to Microsoft about the books you are reading from the Books tab in Microsoft Edge. By default, this setting is disabled or not configured, which means Microsoft Edge only sends basic diagnostic data, depending on your device configuration. If enabled, Microsoft Edge sends additional diagnostic data in addition to the basic diagnostic data, from the Books tab. +If you enable this policy, both basic and additional diagnostic data is sent to Microsoft about the books you are reading from Books in Microsoft Edge. By default, this policy is disabled or not configured and only basic diagnostic data, depending on your device configuration, is sent to Microsoft. **Microsoft Intune to manage your MDM settings** | | | @@ -133,12 +133,12 @@ This policy setting allows you to specify how much data to send to Microsoft abo |Supported devices |Desktop
    Mobile | |URI full path | ./Vendor/MSFT/Policy/Config/Browser/EnableExtendedBooksTelemetry | |Data type | Integer | -|Allowed values |
    • **0 (default)** - Disable. No additional diagnostic data.
    • **1** - Enable. Additional diagnostic data for schools.
    | +|Allowed values |
    • **0 (default)** - Disable. Only basic diagnostic data is sent.
    • **1** - Enable. Both Basic and additional diagnostic data is sent.
    | ## Allow Extensions >*Supporteded versions: Windows 10, version 1607 or later* -This policy setting specifies whether you can use Edge Extensions. By default, this setting is enabled allowing you to use extensions. If disabled, you cannot use extensions. +If you enable this policy, you can personalize and add new features to Microsoft Edge with extensions. By default, this policy is enabled. If you want to prevent others from installing unwanted extensions, disable this policy. **Microsoft Intune to manage your MDM settings** | | | @@ -147,12 +147,12 @@ This policy setting specifies whether you can use Edge Extensions. By default, |Supported devices |Desktop | |URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowExtensions | |Data type | Integer | -|Allowed values |
    • **0** - Employees cannot use Edge Extensions.
    • **1 (default)** - Employees can use Edge Extensions.
    | +|Allowed values |
    • **0** - Microsoft Edge extensions are disabled.
    • **1 (default)** - Microsoft Edge Extensions are enabled.
    | ## Allow InPrivate browsing >*Supporteded versions: Windows 10, version 1511 or later* -This policy setting specifies whether InPrivate browsing is allowed on corporate networks. By default, this setting is enabled allowing you to use InPrivate website browsing. If disabled, you cannot use InPrivate website browsing. +InPrivate browsing, when enabled, prevents your browsing data is not saved on your device. Microsoft Edge deletes temporary data from your device after all your InPrivate tabs are closed. **Microsoft Intune to manage your MDM settings** | | | @@ -161,12 +161,13 @@ This policy setting specifies whether InPrivate browsing is allowed on corporate |Supported devices |Desktop
    Mobile | |URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowInPrivate | |Data type | Integer | -|Allowed values |
    • **0** - Employees cannot use InPrivate browsing.
    • **1 (default)** - Employees can use InPrivate browsing.
    | +|Allowed values |
    • **0** - InPrivate browsing is disabled.
    • **1 (default)** - InPrivate browsing is enabled.
    | ## Allow Microsoft Compatibility List >*Supporteded versions: Windows 10, version 1703 or later* -This policy setting specifies whether to use the Microsoft compatibility list in Microsoft Edge. The list helps websites with known compatibility issues to display properly. By default, the Microsoft compatibility list is enabled and used during browser navigation. The list can be viewed by visiting "about:compat". By default, this setting is enabled allowing periodic downloads and installation of updates. Visiting any site on the Microsoft Compatibility List prompts the employee to use Internet Explorer 11, where the site renders as though it is in whatever version of IE is necessary for it to appear properly. If disabled, the compatibility list is not used. +Microsoft Edge uses the compatibility list that helps websites with known compatibility issues display properly. When enabled, Microsoft Edge checks the list to determine if the website has compatibility issues during browser navigation. By default, this policy is enabled allowing periodic downloads and installation of updates. Visiting any site on the Microsoft compatibility list prompts the employee to use Internet Explorer 11, where the site renders as though it is in whatever version of IE is necessary for it to appear properly. If disabled, the compatibility list is not used. + **Microsoft Intune to manage your MDM settings** | | | @@ -175,7 +176,7 @@ This policy setting specifies whether to use the Microsoft compatibility list in |Supported devices |Desktop
    Mobile | |URI full path |./Vendor/MSFT/Policy/Config/Browser/AllowMicrosoftCompatibilityList | |Data type | Integer | -|Allowed values |
    • **0** - Additional search engines are not allowed and the default cannot be changed in the Address bar.
    • **1 (default)** - Additional search engines are allowed and the default can be changed in the Address bar.
    | +|Allowed values |
    • **0** - Disabled. The Microsoft compatibility list is ignored.
    • **1 (default)** - Enabled. The Microsoft compatibility list is periodically update and used during browser navigation.
    | ## Allow search engine customization >*Supported versions: Windows 10, version 1703 or later* @@ -298,6 +299,15 @@ You can export a set of favorites from Edge and use that html file for provision |URI full path |./Vendor/MSFT/Policy/Config/Browser/ProvisionFavorites | |Data type | String | + + ## Configure Password Manager >*Supported versions: Windows 10* @@ -498,9 +508,15 @@ This policy setting specifies whether you can add, import, sort, or edit the Fav >[!Important] >Don't enable both this setting and the Keep favorites in sync between Internet Explorer and Microsoft Edge setting. Enabling both settings stops you from syncing their favorites between Internet Explorer and Microsoft Edge. - + +**Microsoft Intune to manage your MDM settings** +| | | +|---|---| +|MDM name |[LockdownFavorites](https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-browser#browser-lockdownfavorites) | +|Supported devices |Desktop
    Mobile | +|URI full path |./Vendor/MSFT/Policy/Config/Browser/LockdownFavorites | +|Data type | Integer | +|Allowed values |
    • **0 (default)** - Disabled. Do not lockdown Favorites.
    • **1** - Enabled. Lockdown Favorites.
    | ## Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start >*Supported versions: Windows 10, version 1703 or later* From 96e90d2f9f791aa5da738c8e896c9819ac2b7cd3 Mon Sep 17 00:00:00 2001 From: Patti Short Date: Fri, 6 Apr 2018 06:11:38 -0700 Subject: [PATCH 61/63] Updated the voice and tone, plus deleted duplicate content --- browsers/edge/available-policies.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md index bedff7e283..3b66180dfe 100644 --- a/browsers/edge/available-policies.md +++ b/browsers/edge/available-policies.md @@ -274,6 +274,7 @@ This policy setting specifies whether Do Not Track requests to websites is allow |Data type | Integer | |Allowed values |
    • **0 (default)** - Stops you from sending Do Not Track headers to websites requesting tracking info.
    • **1** - Employees can send Do Not Track headers to websites requesting tracking info.
    | +
    Category Scenario Description -*.updates.microsoft.com +*.update.microsoft.com