From d99749f90a300acb2a823ce65f5d1f4d5bece5c2 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 12 Aug 2019 11:56:37 -0700 Subject: [PATCH 001/358] starting new branch --- windows/deployment/deploy-windows-mdt/TOC.md | 21 ++ .../create-a-windows-10-reference-image.md | 194 ++++++------ ...0-with-the-microsoft-deployment-toolkit.md | 211 +++++++------ ...d-with-the-microsoft-deployment-toolkit.md | 282 ++++++++++++++---- ...prepare-for-windows-deployment-with-mdt.md | 163 ++++++---- 5 files changed, 561 insertions(+), 310 deletions(-) create mode 100644 windows/deployment/deploy-windows-mdt/TOC.md diff --git a/windows/deployment/deploy-windows-mdt/TOC.md b/windows/deployment/deploy-windows-mdt/TOC.md new file mode 100644 index 0000000000..e0b70bc13a --- /dev/null +++ b/windows/deployment/deploy-windows-mdt/TOC.md @@ -0,0 +1,21 @@ +# Deploy Windows 10 with the Microsoft Deployment Toolkit (MDT) +## [Understand MDT](get-started-with-the-microsoft-deployment-toolkit.md) +## [Deploying Windows 10 with MDT](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) +## Scenarios and procedures +### [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) +### [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) +### [Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) +### [Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) +### [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) +### [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) +### [Perform an in-place upgrade to Windows 10 with MDT](upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md) +## Configuring MDT +### [Configure MDT settings](configure-mdt-settings.md) +### [Set up MDT for BitLocker](set-up-mdt-for-bitlocker.md) +### [Configure MDT deployment share rules](configure-mdt-deployment-share-rules.md) +### [Configure MDT for UserExit scripts](configure-mdt-for-userexit-scripts.md) +### [Simulate a Windows 10 deployment in a test environment](simulate-a-windows-10-deployment-in-a-test-environment.md) +### [Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-10-deployment-information.md) +### [Assign applications using roles in MDT](assign-applications-using-roles-in-mdt.md) +### [Use web services in MDT](use-web-services-in-mdt.md) +### [Use Orchestrator runbooks with MDT](use-orchestrator-runbooks-with-mdt.md) \ No newline at end of file diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index 8e20ab78c8..b94535a356 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -19,60 +19,60 @@ ms.topic: article # Create a Windows 10 reference image **Applies to** -- Windows 10 +- Windows 10 Creating a reference image is important because that image serves as the foundation for the devices in your organization. In this topic, you will learn how to create a Windows 10 reference image using the Microsoft Deployment Toolkit (MDT). You will create a deployment share, configure rules and settings, and import all the applications and operating system files required to build a Windows 10 reference image. After completing the steps outlined in this topic, you will have a Windows 10 reference image that can be used in your deployment solution. -For the purposes of this topic, we will use four machines: DC01, MDT01, HV01, and PC0001. DC01 is a domain controller, PC0001 is a Windows 10 Enterprise x64 client, and MDT01 is a Windows Server 2012 R2 standard server. HV01 is a Hyper-V host server, but HV01 could be replaced by PC0001 as long as PC0001 has enough memory and is capable of running Hyper-V. MDT01, HV01, and PC0001 are members of the domain contoso.com for the fictitious Contoso Corporation. ->[!NOTE] ->For important details about the setup for the steps outlined in this article, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md#proof). +For the purposes of this topic, we will use three computers: DC01, MDT01, and PC0001. +- DC01 is a domain controller for the contoso.com domain. +- MDT01 is a contoso.com domain member server. +- PC0001 is a Windows 10 Enterprise x64 client and also a contoso.com domain member. ![figure 1](../images/mdt-08-fig01.png) -Figure 1. The machines used in this topic. +>[!NOTE] +>See [Deploying Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) for more information about the setup for this lab. ## The reference image -The reference image described in this documentation is designed primarily for deployment to physical machines. However, the reference image is created on a virtual platform, before being automatically run through the System Preparation (Sysprep) tool process and captured to a Windows Imaging (WIM) file. The reasons for creating the reference image on a virtual platform are the following: -- You reduce development time and can use snapshots to test different configurations quickly. -- You rule out hardware issues. You simply get the best possible image, and if you have a problem, it's not likely to be hardware related. -- It ensures that you won't have unwanted applications that could be installed as part of a driver install but not removed by the Sysprep process. -- It's easy to move between lab, test, and production. +The reference image described in this guide is designed primarily for deployment to physical devices. However, the reference image is created on a virtual platform, before being automatically run through the System Preparation (Sysprep) tool process and captured to a Windows Imaging (WIM) file. The reasons for creating the reference image on a virtual platform are the following: +- You reduce development time and can use snapshots to test different configurations quickly. +- You rule out hardware issues. You simply get the best possible image, and if you have a problem, it's not likely to be hardware related. +- It ensures that you won't have unwanted applications that could be installed as part of a driver install but not removed by the Sysprep process. +- It's easy to move between lab, test, and production. -## Set up the MDT build lab deployment share +## Set up the MDT build lab deployment share -With Windows 10, there is no hard requirement to create reference images; however, to reduce the time needed for deployment, you may want to create a reference image that contains a few base applications as well as all of the latest updates. This section will show you how to create and configure the MDT Build Lab deployment share to create a Windows 10 reference image. Because reference images will be deployed only to virtual machines during the creation process and have specific settings (rules), you should always create a separate deployment share specifically for this process. +With Windows 10, there is no hard requirement to create reference images. However, to reduce the time needed for deployment, you might want to create a reference image that contains a few base applications as well as all of the latest updates. This section will show you how to create and configure the MDT Build Lab deployment share to create a Windows 10 reference image. Because reference images will be deployed only to virtual machines during the creation process and have specific settings (rules), you should always create a separate deployment share specifically for this process. ### Create the MDT build lab deployment share -- On MDT01, log on as Administrator in the CONTOSO domain using a password of P@ssw0rd. +- On MDT01, log on as admin using a password of pass@word3 (credentials from the [prepare for deployment](prepare-for-windows-deployment-with-mdt.md) topic). +- Start the MDT deployment workbench, and pin this to the taskbar for easy access. - Using the Deployment Workbench, right-click **Deployment Shares** and select **New Deployment Share**. - Use the following settings for the New Deployment Share Wizard: -- Deployment share path: E:\\MDTBuildLab -- Share name: MDTBuildLab$ -- Deployment share description: MDT Build Lab -- <default> -- Verify that you can access the \\\\MDT01\\MDTBuildLab$ share. + - Deployment share path: **D:\\MDTBuildLab** + - Share name: **MDTBuildLab$** + - Deployment share description: **MDT Build Lab** +- Accept the default selections on the Options page and click **Next**. +- Review the Summary page, click **Next**, wait for the deployment share to be created, then click **Finish**. +- Verify that you can access the \\\\MDT01\\MDTBuildLab$ share. ![figure 2](../images/mdt-08-fig02.png) -Figure 2. The Deployment Workbench with the MDT Build Lab deployment share created. +The Deployment Workbench with the MDT Build Lab deployment share. ### Configure permissions for the deployment share In order to write the reference image back to the deployment share, you need to assign Modify permissions to the MDT Build Account (MDT\_BA) for the **Captures** subfolder in the **E:\\MDTBuildLab** folder -1. On MDT01, log on as **CONTOSO\\Administrator**. -2. Modify the NTFS permissions for the **E:\\MDTBuildLab\\Captures** folder by running the following command in an elevated Windows PowerShell prompt: +1. On MDT01, sign in as **CONTOSO\\admin**. +2. Modify the NTFS permissions for the **D:\\MDTBuildLab\\Captures** folder by running the following command in an elevated Windows PowerShell prompt: - ``` - icacls E:\MDTBuildLab\Captures /grant '"MDT_BA":(OI)(CI)(M)' + ``` syntax + icacls D:\MDTBuildLab\Captures /grant '"MDT_BA":(OI)(CI)(M)' ``` -![figure 3](../images/mdt-08-fig03.png) - -Figure 3. Permissions configured for the MDT\_BA user. - -## Add the setup files +## Add setup files This section will show you how to populate the MDT deployment share with the Windows 10 operating system source files, commonly referred to as setup files, which will be used to create a reference image. Setup files are used during the reference image creation process and are the foundation for the reference image. @@ -85,89 +85,95 @@ MDT supports adding both full source Windows 10 DVDs (ISOs) and custom images t ### Add Windows 10 Enterprise x64 (full source) -In these steps we assume that you have copied the content of a Windows 10 Enterprise x64 ISO to the **E:\\Downloads\\Windows 10 Enterprise x64** folder. +1. Sign on to MDT01 on as **CONTOSO\\admin** and copy the content of a Windows 10 Enterprise x64 DVD/ISO to the **D:\\Downloads\\Windows 10 Enterprise x64** folder on MDT01. See the following example. -1. On MDT01, log on as **CONTOSO\\Administrator**. -2. Using the Deployment Workbench, expand the **Deployment Shares** node, and then expand **MDT Build Lab**. -3. Right-click the **Operating Systems** node, and create a new folder named **Windows 10**. -4. Expand the **Operating Systems** node, right-click the **Windows 10** folder, and select **Import Operating System**. Use the following settings for the Import Operating System Wizard: -5. Full set of source files -6. Source directory: E:\\Downloads\\Windows 10 Enterprise x64 -7. Destination directory name: W10EX64RTM -8. After adding the operating system, in the **Operating Systems / Windows 10** folder, double-click the added operating system name in the **Operating System** node and change the name to the following: **Windows 10 Enterprise x64 RTM Default Image** + ![ISO](../images/iso-data.png) -![figure 4](../images/figure4-deployment-workbench.png) +2. Using the Deployment Workbench, expand the **Deployment Shares** node, and then expand **MDT Build Lab**. +3. Right-click the **Operating Systems** node, and create a new folder named **Windows 10**. +4. Expand the **Operating Systems** node, right-click the **Windows 10** folder, and select **Import Operating System**. Use the following settings for the Import Operating System Wizard: + - Full set of source files + - Source directory: D:\\Downloads\\Windows 10 Enterprise x64 + - Destination directory name: W10EX64RTM +5. After adding the operating system, in the **Operating Systems / Windows 10** folder, double-click the added operating system name in the **Operating System** node and change the name to: **Windows 10 Enterprise x64 RTM Default Image**. See the following example. -Figure 4. The imported Windows 10 operating system after renaming it. + ![Default image](../images/figure4-deployment-workbench.png) -## Add applications +## Add applications -Before you create an MDT task sequence, you need to add all of the applications and other sample scripts to the MDT Build Lab share. +Before you create an MDT task sequence, you need to add any applications and scripts you wish to install to the MDT Build Lab share. -The steps in this section use a strict naming standard for your MDT applications. You add the "Install - " prefix for typical application installations that run a setup installer of some kind, and you use the "Configure - " prefix when an application configures a setting in the operating system. You also add an " - x86", " - x64", or "- x86-x64" suffix to indicate the application's architecture (some applications have installers for both architectures). Using a script naming standard is always recommended when using MDT as it helps maintain order and consistency. -By storing configuration items as MDT applications, it is easy to move these objects between various solutions, or between test and production environments. In this topic's step-by-step sections, you will add the following applications: +The steps in this section use a strict naming standard for your MDT applications. +- Use the "Install - " prefix for typical application installations that run a setup installer of some kind, +- Use the "Configure - " prefix when an application configures a setting in the operating system. +- You also add an " - x86", " - x64", or "- x86-x64" suffix to indicate the application's architecture (some applications have installers for both architectures). + +Using a script naming standard is always recommended when using MDT as it helps maintain order and consistency. -- Install - Microsoft Office 2013 Pro Plus - x86 -- Install - Microsoft Silverlight 5.0 - x64 -- Install - Microsoft Visual C++ 2005 SP1 - x86 -- Install - Microsoft Visual C++ 2005 SP1 - x64 -- Install - Microsoft Visual C++ 2008 SP1 - x86 -- Install - Microsoft Visual C++ 2008 SP1 - x64 -- Install - Microsoft Visual C++ 2010 SP1 - x86 -- Install - Microsoft Visual C++ 2010 SP1 - x64 -- Install - Microsoft Visual C++ 2012 Update 4 - x86 -- Install - Microsoft Visual C++ 2012 Update 4 - x64 +By storing configuration items as MDT applications, it is easy to move these objects between various solutions, or between test and production environments. -In these examples, we assume that you downloaded the software in this list to the E:\\Downloads folder. The first application is added using the UI, but because MDT supports Windows PowerShell, you add the other applications using Windows PowerShell. +In example sections, you will add the following applications: + +- Install - Microsoft Office 365 Pro Plus - x86 +- Install - Microsoft Visual C++ Redistributable 2019 - x86 +- Install - Microsoft Visual C++ Redistributable 2019 - x64 + +Download links: +- [Office Deployment Tool](https://www.microsoft.com/download/details.aspx?id=49117) +- [Microsoft Visual C++ Redistributable 2019 - x86](https://aka.ms/vs/16/release/VC_redist.x86.exe) +- [Microsoft Visual C++ Redistributable 2019 - x64](https://aka.ms/vs/16/release/VC_redist.x64.exe) + +Download the software in this list to the D:\\Downloads folder on MDT01. >[!NOTE] ->All the Microsoft Visual C++ downloads can be found on [The latest supported Visual C++ downloads](https://go.microsoft.com/fwlink/p/?LinkId=619523). +>All the Microsoft Visual C++ downloads can be found on [The latest supported Visual C++ downloads](https://go.microsoft.com/fwlink/p/?LinkId=619523). Visual C++ 2015, 2017 and 2019 all share the same redistributable files. -### Create the install: Microsoft Office Professional Plus 2013 x86 +### Create the install: Microsoft Office 365 Professional Plus x86 -You can customize Office 2013. In the volume license versions of Office 2013, there is an Office Customization Tool you can use to customize the Office installation. In these steps we assume you have copied the Office 2013 installation files to the E:\\Downloads\\Office2013 folder. +1. After downloading the most current version of the Office Deployment tool from the Microsoft Download Center using the link provided above, run the self-extracting executable file and extract the files to D:\\Downloads\\Office365. The Office Deployment Tool (setup.exe) and several sample configuration.xml files will be extracted. +2. Using a text editor such as Notepad, create an XML file with the installation settings for Office 365 ProPlus that are appropriate for your organization. The file uses an XML format, so the file you create must have an extension of .xml but the file can have any filename. -### Add the Microsoft Office Professional Plus 2013 x86 installation files + - For example, you can use the following configuration.xml file, which provides these configuration settings: + - Install the 64-bit version of Office 365 ProPlus in English directly from the Office Content Delivery Network (CDN) on the internet. Note: 64-bit is now the default and recommended edition. + - Use the Semi-Annual Channel and get updates directly from the Office CDN on the internet. + - Perform a silent installation. You won’t see anything that shows the progress of the installation and you won’t see any error messages. -After adding the Microsoft Office Professional Plus 2013 x86 application, you then automate its setup by running the Office Customization Tool. In fact, MDT detects that you added the Office Professional Plus 2013 x86 application and creates a shortcut for doing this. -You also can customize the Office installation using a Config.xml file. But we recommend that you use the Office Customization Tool as described in the following steps, as it provides a much richer way of controlling Office 2013 settings. -1. Using the Deployment Workbench in the MDT Build Lab deployment share, expand the **Applications / Microsoft** node, and double-click **Install - Microsoft Office 2013 Pro Plus x86**. -2. In the **Office Products** tab, click **Office Customization Tool**, and click **OK** in the **Information** dialog box. + ```xml + + + + + + + + + + ``` - ![figure 5](../images/mdt-08-fig05.png) + By using these settings, any time you build the reference image you’ll be installing the most up-to-date Semi-Annual Channel version of Office 365 ProPlus. - Figure 5. The Install - Microsoft Office 2013 Pro Plus - x86 application properties. + >[!TIP] + >You can also use the web-based interface of the [Office Customization Tool](https://config.office.com/) to help you create your configuration.xml file. + + Also see [Configuration options for the Office Deployment Tool](https://docs.microsoft.com/deployoffice/configuration-options-for-the-office-2016-deployment-tool) and [Overview of the Office Deployment Tool](https://docs.microsoft.com/DeployOffice/overview-of-the-office-2016-deployment-tool) for more information. - >[!NOTE] - >If you don't see the Office Products tab, verify that you are using a volume license version of Office. If you are deploying Office 365, you need to download the Admin folder from Microsoft. - -3. In the Office Customization Tool dialog box, select the Create a new Setup customization file for the following product option, select the Microsoft Office Professional Plus 2013 (32-bit) product, and click OK. -4. Use the following settings to configure the Office 2013 setup to be fully unattended: - 1. Install location and organization name - - Organization name: Contoso - 2. Licensing and user interface - 1. Select Use KMS client key - 2. Select I accept the terms in the License Agreement. - 3. Select Display level: None +3. Copy the configuration.xml file to the D:\Downloads\Office365 folder. Assuming you have named the file "configuration.xml" we will use the command "setup.exe /configure configuration.xml" when we create the application in MDT. This will perform the installation of Office 365 ProPlus using the configuration settings in the configuration.xml file. - ![figure 6](../images/mdt-08-fig06.png) + >[!IMPORTANT] + >After Office 365 ProPlus is installed on the reference image, do NOT open any Office programs. if you open an Office program, you are prompted to sign-in, which activates the installation of Office 365 ProPlus. Even if you don't sign in and you close the Sign in to set up Office dialog box, a temporary product key is installed. You don't want any kind of product key for Office 365 ProPlus installed as part of your reference image. - Figure 6. The licensing and user interface screen in the Microsoft Office Customization Tool +Additional information +- Office 365 ProPlus is usually updated on a monthly basis with security updates and other quality updates (bug fixes), and possibly new features (depending on which update channel you’re using). That means that once you’ve deployed your reference image, Office 365 ProPlus will most likely need to download and install the latest updates that have been released since you created your reference image. - 3. Modify Setup properties - - Add the **SETUP\_REBOOT** property and set the value to **Never**. - 4. Modify user settings - - In the **Microsoft Office 2013** node, expand **Privacy**, select **Trust Center**, and enable the Disable Opt-in Wizard on first run setting. -5. From the **File** menu, select **Save**, and save the configuration as 0\_Office2013ProPlusx86.msp in the **E:\\MDTBuildLab\\Applications\\Install - Microsoft Office 2013 Pro Plus - x86\\Updates** folder. +- Instead of installing Office 365 ProPlus as part of the reference image, we recommend configuring Office 365 ProPlus to be installed immediately after the reference image is deployed to the user’s device. You would still use the Office Deployment Tool and a configuration.xml file to perform the installation. This way the user will have the most up-to-date version of Office 365 ProPlus right away and won’t have to download any new updates (which is most likely what would happen if Office 365 ProPlus was installed as part of the reference image.) + +- When you are creating your reference image, instead of installing Office 365 ProPlus directly from the Office CDN on the internet, you can install Office 365 ProPlus from a location on your local network, such as a file share. To do that, you would use the Office Deployment Tool in /download mode to download the installation files to that file share. Then you could use the Office Deployment Tool in /configure mode to install Office 365 ProPlus from that location on to your reference image. As part of that, you’ll need to point to that location in your configuration.xml file so that the Office Deployment Tool knows where to install Office 365 ProPlus from. If you decide to do that, the next time you create a new reference image, you’ll want to be sure to use the Office Deployment Tool to download the most up-to-date installation files for Office 365 ProPlus to that location on your internal network. That way your new reference image will have a more up-to-date installation of Office 365 ProPlus. - >[!NOTE] - >The reason for naming the file with a 0 (zero) at the beginning is that the Updates folder also handles Microsoft Office updates, and they are installed in alphabetical order. The Office 2013 setup works best if the customization file is installed before any updates. - -6. Close the Office Customization Tool, click Yes in the dialog box, and in the **Install - Microsoft Office 2013 Pro Plus - x86 Properties** window, click **OK**. ### Connect to the deployment share using Windows PowerShell If you need to add many applications, you can take advantage of the PowerShell support that MDT has. To start using PowerShell against the deployment share, you must first load the MDT PowerShell snap-in and then make the deployment share a PowerShell drive (PSDrive). + 1. On MDT01, log on as **CONTOSO\\Administrator**. 2. Import the snap-in and create the PSDrive by running the following commands in an elevated PowerShell prompt: @@ -179,6 +185,7 @@ If you need to add many applications, you can take advantage of the PowerShell s ### Create the install: Microsoft Visual C++ 2005 SP1 x86 In these steps we assume that you have downloaded Microsoft Visual C++ 2005 SP1 x86. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to E:\\Downloads\\VC++2005SP1x86. + 1. On MDT01, log on as **CONTOSO\\Administrator**. 2. Create the application by running the following commands in an elevated PowerShell prompt: @@ -639,14 +646,9 @@ After some time, you will have a Windows 10 Enterprise x64 image that is fully ## Related topics -[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) - -[Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) - -[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) - -[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) - -[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) - +[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md)
+[Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md)
+[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md)
+[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md)
+[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md)
[Configure MDT settings](configure-mdt-settings.md) diff --git a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md index bc6f898741..af9311a894 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md @@ -1,98 +1,113 @@ ---- -title: Deploy Windows 10 with the Microsoft Deployment Toolkit (Windows 10) -description: This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT). -ms.assetid: 837f009c-617e-4b3f-9028-2246067ee0fb -ms.reviewer: -manager: laurawi -ms.author: greglin -keywords: deploy, tools, configure, script -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -audience: itpro author: greg-lindsay -ms.pagetype: mdt -ms.topic: article ---- - -# Deploy Windows 10 with the Microsoft Deployment Toolkit - -**Applies to** -- Windows 10 - -This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT). - -The Microsoft Deployment Toolkit is a unified collection of tools, processes, and guidance for automating desktop and server deployment. In addition to reducing deployment time and standardizing desktop and server images, MDT enables you to more easily manage security and ongoing configurations. MDT builds on top of the core deployment tools in the Windows Assessment and Deployment Kit (Windows ADK) with additional guidance and features designed to reduce the complexity and time required for deployment in an enterprise environment. -MDT supports the deployment of Windows 10, as well as Windows 7, Windows 8, Windows 8.1, and Windows Server 2012 R2. It also includes support for zero-touch installation (ZTI) with Microsoft System Center 2012 R2 Configuration Manager. - -To download the latest version of MDT, visit the [MDT resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117). - -## In this section - -- [Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) -- [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) -- [Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) -- [Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) -- [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) -- [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) -- [Configure MDT settings](configure-mdt-settings.md) - -## Proof-of-concept environment - -For the purposes of this guide, and the topics discussed herein, we will use the following servers and client machines: DC01, MDT01, CM01, PC0001, and PC0002. - -![figure 1](../images/mdt-01-fig01.png) - -Figure 1. The servers and machines used for examples in this guide. - -DC01 is a domain controller; the other servers and client machines are members of the domain contoso.com for the fictitious Contoso Corporation. - -![figure 2](../images/mdt-01-fig02.jpg) - -Figure 2. The organizational unit (OU) structure used in this guide. - -### Server details - -- **DC01.** A Windows Server 2012 R2 Standard machine, fully patched with the latest security updates, and configured as Active Directory Domain Controller, DNS Server, and DHCP Server in the contoso.com domain. - - Server name: DC01 - - IP Address: 192.168.1.200 - - Roles: DNS, DHCP, and Domain Controller -- **MDT01.** A Windows Server 2012 R2 Standard machine, fully patched with the latest security updates, and configured as a member server in the contoso.com domain. - - Server name: MDT01 - - IP Address: 192.168.1.210 -- **CM01.** A Windows Server 2012 R2 Standard machine, fully patched with the latest security updates, and configured as a member server in the contoso.com domain. - - Server name: CM01 - - IP Address: 192.168.1.214 - -### Client machine details - -- **PC0001.** A Windows 10 Enterprise x64 machine, fully patched with the latest security updates, and configured as a member in the contoso.com domain. This machine is referenced as the admin workstation. - - Client name: PC0001 - - IP Address: DHCP -- **PC0002.** A Windows 7 SP1 Enterprise x64 machine, fully patched with the latest security updates, and configured as a member in the contoso.com domain. This machine is referenced during the migration scenarios. - - Client name: PC0002 - - IP Address: DHCP - -## Sample files - -The information in this guide is designed to help you deploy Windows 10. In order to help you put the information you learn into practice more quickly, we recommend that you download a small set of sample files for the fictitious Contoso Corporation: -- [Gather.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619361). This sample Windows PowerShell script performs the MDT Gather process in a simulated MDT environment. This allows you to test the MDT gather process and check to see if it is working correctly without performing a full Windows deployment. -- [Set-OUPermissions.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619362). This sample Windows PowerShell script creates a domain account and then configures OU permissions to allow the account to join machines to the domain in the specified OU. -- [MDTSample.zip](https://go.microsoft.com/fwlink/p/?LinkId=619363). This sample web service shows you how to configure a computer name dynamically using MDT. - -## Related topics - -[Microsoft Deployment Toolkit downloads and resources](https://go.microsoft.com/fwlink/p/?LinkId=618117) - -[Windows 10 deployment scenarios](../windows-10-deployment-scenarios.md) - -[Windows 10 deployment tools](../windows-deployment-scenarios-and-tools.md) - -[Deploy Windows 10 with System Center 2012 R2 Configuration Manager](../deploy-windows-sccm/deploy-windows-10-with-system-center-2012-r2-configuration-manager.md) - -[Deploy Windows To Go in your organization](../deploy-windows-to-go.md) - -[Sideload apps in Windows 10](/windows/application-management/sideload-apps-in-windows-10) - -[Volume Activation for Windows 10](../volume-activation/volume-activation-windows-10.md) - +--- +title: Deploying Windows 10 with the Microsoft Deployment Toolkit (MDT) +description: This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT). +ms.assetid: 837f009c-617e-4b3f-9028-2246067ee0fb +ms.reviewer: +manager: laurawi +ms.author: greglin +keywords: deploy, tools, configure, script +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.sitesec: library +audience: itpro +author: greg-lindsay +ms.pagetype: mdt +ms.topic: article +--- + +# Deploying Windows 10 with MDT + +**Applies to** +- Windows 10 + +This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT). + +To download the latest version of MDT, visit the [MDT resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117). + +MDT is a unified collection of tools, processes, and guidance for automating desktop and server deployment. In addition to reducing deployment time and standardizing desktop and server images, MDT enables you to more easily manage security and ongoing configurations. MDT builds on top of the core deployment tools in the Windows Assessment and Deployment Kit (Windows ADK) with additional guidance and features designed to reduce the complexity and time required for deployment in an enterprise environment. + +MDT supports the deployment of Windows 10, as well as Windows 7, Windows 8, Windows 8.1, and Windows Server. It also includes support for zero-touch installation (ZTI) with Microsoft System Center Configuration Manager. + +For more information about MDT, see [Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) for an overview of MDT, including a description of many of the key features and options. A list of components in MDT that support Lite Touch Installation (LTI) is also provided. + +## In this guide + +- [The proof of concept environment](#proof-of-concept-environment) used in this guide is described. +- [Step by step procedures](#deploy-windows-10-with-mdt) are provided to guide you through several deployment scenarios. +- [Sample files](#sample-files) are provided to help you put the information you learn into practice more quickly. + +## Proof-of-concept environment + +For the purposes of this guide we will use the following servers and client machines: DC01, MDT01, CM01, PC0001, and PC0002. + +![computers](../images/mdt-01-fig01.png) + +DC01 is a domain controller; the other servers and client machines are members of the domain contoso.com for the fictitious Contoso Corporation. + +### Server details + +- **DC01.** A computer running Windows Server 2012 R2, fully patched with the latest security updates, and configured as an Active Directory Domain Controller, DNS Server, and (optionally) DHCP Server for the contoso.com domain. + - Server name: DC01 + - IP Address: 10.169.5.147 + - Roles: DNS, DHCP, and domain controller +- **MDT01.** A computer running Windows Server 2012 R2, fully patched with the latest security updates, and configured as a member server in the contoso.com domain. This is an application server that is used to run MDT. + - Server name: MDT01 + - IP Address: 10.169.5.148 + - Data drive D: with at least 100GB of free space. +- **CM01.** A computer running Windows Server 2012 R2, fully patched with the latest security updates, and configured as a member server in the contoso.com domain. This is a System Center Configuration Manager site server. + - Server name: CM01 + - IP Address: 10.169.5.149 + - Data drive D: with at least 100GB of free space. + +### Client details + +- **PC0001.** A computer running Windows 10 Enterprise x64, fully patched with the latest security updates, and configured as a member in the contoso.com domain. This machine is referenced as the admin workstation. + - Client name: PC0001 + - IP Address: DHCP +- **PC0002.** A computer running Windows 7 SP1 Enterprise x64, fully patched with the latest security updates, and configured as a member in the contoso.com domain. This machine is referenced during the migration scenarios. + - Client name: PC0002 + - IP Address: DHCP +- **PC0003 - PC0007** These are other client computers similar to PC0001 and PC0002 that are used in the guide for various scenarios. The device names are incremented to avoid confusion. For example, PC0003 and PC0004 are running Windows 7 just like PC0002, but are used for Config Mgr refresh and replace scenarios, respectively. + +### Network environment + +For this lab, all server and client computers are on the same subnet. This is not required, but each server and client computer must be able to connect to each other, including resolution of all DNS names and Active Directory information for the contoso.com domain. Internet connectivity is also requried to download OS and applicaton updates. + +### Organizational unit structure + +![figure 2](../images/mdt-01-fig02.jpg) + +The organizational unit (OU) structure used in this guide. + +### Deploy Windows 10 with MDT + +See the following topics when you are ready to try deploying Windows 10 with MDT. You must complete each of these topics in the order they are listed. + +| Topic | Description | Required / optional | +| :--- | :--- | :--- | +| [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) | Installation of MDT. | Required | +| [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) | Create a deployment share, configure rules and settings, and import all the applications and operating system files required to build a Windows 10 reference image. | Required | +| [Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) | Take a reference image for Windows 10 and deploy that image to your environment using MDT. | Required | +| [Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) | Replicate your Windows 10 deployment shares to facilitate the deployment of Windows 10 in remote or branch locations. | Optional | +| [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) | Use MDT Lite Touch Installation (LTI) to upgrade a Windows 7 computer to a Windows 10 computer using the computer refresh process. | Required | +| [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) | Use MDT Lite Touch Installation (LTI) to replace the a Windows 7 computer with a Windows 10 computer using the replace process. | Required | +| [Perform an in-place upgrade to Windows 10 with MDT](upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md) | Use an MDT task sequence to completely automate the in-place upgrade process. | Required | +| [Configure MDT settings](configure-mdt-settings.md) | Learn about configuring MDT customizations for your environment. | Optional | + +## Sample files + +In order to help you put the information you learn into practice more quickly, we recommend that you download a small set of sample files for the fictitious Contoso Corporation: +- [Gather.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619361). This sample Windows PowerShell script performs the MDT Gather process in a simulated MDT environment. This allows you to test the MDT gather process and check to see if it is working correctly without performing a full Windows deployment. +- [Set-OUPermissions.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619362). This sample Windows PowerShell script creates a domain account and then configures OU permissions to allow the account to join machines to the domain in the specified OU. +- [MDTSample.zip](https://go.microsoft.com/fwlink/p/?LinkId=619363). This sample web service shows you how to configure a computer name dynamically using MDT. + +## Related topics + +[Microsoft Deployment Toolkit downloads and resources](https://go.microsoft.com/fwlink/p/?LinkId=618117)
+[Windows 10 deployment scenarios](../windows-10-deployment-scenarios.md)
+[Windows 10 deployment tools](../windows-deployment-scenarios-and-tools.md)
+[Deploy Windows 10 with System Center Configuration Manager](../deploy-windows-sccm/deploy-windows-10-with-system-center-configuration-manager.md)
+[Deploy Windows To Go in your organization](../deploy-windows-to-go.md)
+[Sideload apps in Windows 10](/windows/application-management/sideload-apps-in-windows-10)
+[Volume Activation for Windows 10](../volume-activation/volume-activation-windows-10.md) diff --git a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md index e7742fa773..ba655d0c6e 100644 --- a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md @@ -1,54 +1,228 @@ ---- -title: Get started with the Microsoft Deployment Toolkit (MDT) (Windows 10) -description: This topic will help you gain a better understanding of how to use the Microsoft Deployment Toolkit (MDT), as part of a Windows operating system deployment. -ms.assetid: a256442c-be47-4bb9-a105-c831f58ce3ee -ms.reviewer: -manager: laurawi -ms.author: greglin -keywords: deploy, image, feature, install, tools -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: mdt -audience: itpro author: greg-lindsay -ms.topic: article ---- - -# Get started with the Microsoft Deployment Toolkit (MDT) - -**Applies to** -- Windows 10 - -This topic will help you gain a better understanding of how to use the Microsoft Deployment Toolkit (MDT), as part of a Windows operating system deployment. MDT is one of the most important tools available to IT professionals today. You can use it to create reference images or as a complete deployment solution. MDT also can be used to extend the operating system deployment features available in Microsoft System Center 2012 R2 Configuration Manager. - -In addition to familiarizing you with the features and options available in MDT, this topic will walk you through the process of preparing for deploying Windows 10 using MDT by configuring Active Directory, creating an organizational unit (OU) structure, creating service accounts, configuring log files and folders, and installing the tools needed to view the logs and continue with the deployment process. - -For the purposes of this topic, we will use two machines: DC01 and MDT01. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 standard server. MDT01 is a member of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see -[Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md#proof). - -![figure 1](../images/mdt-05-fig01.png) - -Figure 1. The machines used in this topic. - -## In this section - -- [Key features in MDT](key-features-in-mdt.md) -- [MDT Lite Touch components](mdt-lite-touch-components.md) -- [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) - -## Related topics - -[Microsoft Deployment Toolkit downloads and documentation](https://go.microsoft.com/fwlink/p/?LinkId=618117) - -[Create a Windows 10 reference image](create-a-windows-10-reference-image.md) - -[Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) - -[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) - -[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) - -[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) - -[Configure MDT settings](configure-mdt-settings.md) +--- +title: Get started with the Microsoft Deployment Toolkit (MDT) (Windows 10) +description: This topic will help you gain a better understanding of how to use the Microsoft Deployment Toolkit (MDT), as part of a Windows operating system deployment. +ms.assetid: a256442c-be47-4bb9-a105-c831f58ce3ee +ms.reviewer: +manager: laurawi +ms.author: greglin +keywords: deploy, image, feature, install, tools +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.sitesec: library +ms.pagetype: mdt +audience: itpro +author: greg-lindsay +ms.topic: article +--- + +# Get started with the Microsoft Deployment Toolkit (MDT) + +**Applies to** +- Windows 10 + +This topic will help you gain a better understanding of how to use the Microsoft Deployment Toolkit (MDT) to deploy Windows 10. When you are ready to try using MDT to deploy Windows 10 in various says, see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). + +## Introduction + +MDT is one of the most important tools available to IT professionals today. You can use it to create reference images or as a complete deployment solution. MDT also can be used to extend the operating system deployment features available in Microsoft System Center Configuration Manager. + +In addition to familiarizing you with the features and options available in MDT, this topic will walk you through the process of preparing for deploying Windows 10 using MDT by configuring Active Directory, creating an organizational unit (OU) structure, creating service accounts, configuring log files and folders, and installing the tools needed to view the logs and continue with the deployment process. + +## Key features in MDT + +The Microsoft Deployment Toolkit (MDT) has been in existence since 2003, when it was first introduced as Business Desktop Deployment (BDD) 1.0. The toolkit has evolved, both in functionality and popularity, and today it is considered fundamental to Windows operating system and enterprise application deployment. + +MDT has many useful features, the most important of which are: +- **Windows Client support.** Supports Windows 7, Windows 8, Windows 8.1, and Windows 10. +- **Windows Server support.** Supports Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2. +- **Additional operating systems support.** Supports Windows Thin PC and Windows Embedded POSReady 7, as well as Windows 8.1 Embedded Industry. +- **UEFI support.** Supports deployment to machines using Unified Extensible Firmware Interface (UEFI) version 2.3.1. +- **GPT support.** Supports deployment to machines that require the new GUID (globally unique identifier) partition table (GPT) format. This is related to UEFI. +- **Enhanced Windows PowerShell support.** Provides support for running PowerShell scripts. + + ![figure 2](../images/mdt-05-fig02.png) + + Figure 2. The deployment share mounted as a standard PSDrive allows for administration using PowerShell. + +- **Add local administrator accounts.** Allows you to add multiple user accounts to the local Administrators group on the target computers, either via settings or the deployment wizard. +- **Automated participation in CEIP and WER.** Provides configuration for participation in Windows Customer Experience Improvement Program (CEIP) and Windows Error Reporting (WER). +- **Deploy Windows RE.** Enables deployment of a customized Windows Recovery Environment (Windows RE) as part of the task sequence. +- **Deploy to VHD.** Provides ready-made task sequence templates for deploying Windows into a virtual hard disk (VHD) file. +- **Improved deployment wizard.** Provides additional progress information and a cleaner UI for the Lite Touch Deployment Wizard. +- **Monitoring.** Allows you to see the status of currently running deployments. +- **Apply GPO Pack.** Allows you to deploy local group policy objects created by Microsoft Security Compliance Manager (SCM). +- **Partitioning routines.** Provides improved partitioning routines to ensure that deployments work regardless of the current hard drive structure. +- **Offline BitLocker.** Provides the capability to have BitLocker enabled during the Windows Preinstallation Environment (Windows PE) phase, thus saving hours of encryption time. +- **USMT offline user-state migration.** Provides support for running the User State Migration Tool (USMT) capture offline, during the Windows PE phase of the deployment. + + ![figure 3](../images/mdt-05-fig03.png) + + Figure 3. The offline USMT backup in action. + +- **Install or uninstall Windows roles or features.** Enables you to select roles and features as part of the deployment wizard. MDT also supports uninstall of roles and features. +- **Microsoft System Center 2012 Orchestrator integration.** Provides the capability to use Orchestrator runbooks as part of the task sequence. +- **Support for DaRT.** Supports optional integration of the DaRT components into the boot image. +- **Support for Office 2013.** Provides added support for deploying Microsoft Office Professional Plus 2013. +- **Support for Modern UI app package provisioning.** Provisions applications based on the new Windows app package standard, which is used in Windows 8 and later. +- **Extensibility.** Provides the capability to extend MDT far beyond the built-in features by adding custom scripts, web services, System Center Orchestrator runbooks, PowerShell scripts, and VBScripts. +- **Upgrade task sequence.** Provides a new upgrade task sequence template that you can use to upgrade existing Windows 7, Windows 8, and Windows 8.1 systems directly to Windows 10, automatically preserving all data, settings, applications, and drivers. For more information about using this new upgrade task sequence, refer to the [Microsoft Deployment Toolkit resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117). + +## MDT Lite Touch components + +This topic provides an overview of the features in the Microsoft Deployment Toolkit (MDT) that support Lite Touch Installation (LTI) for Windows 10. An LTI deployment strategy requires very little infrastructure or user interaction, and can be used to deploy an operating system from a network share or from a physical media, such as a USB flash drive or disc. +When deploying the Windows operating system using MDT, most of the administration and configuration is done through the Deployment Workbench, but you also can perform many of the tasks using Windows PowerShell. The easiest way to find out how to use PowerShell in MDT is to use the Deployment Workbench to perform an operation and at the end of that task, click View Script. That will give you the PowerShell command. + +![figure 4](../images/mdt-05-fig04.png) + +Figure 4. If you click **View Script** on the right side, you will get the PowerShell code that was used to perform the task. + +## Deployment shares + +A deployment share is essentially a folder on the server that is shared and contains all the setup files and scripts needed for the deployment solution. It also holds the configuration files (called rules) that are gathered when a machine is deployed. These configuration files can reach out to other sources, like a database, external script, or web server to get additional settings for the deployment. For Lite Touch deployments, it is common to have two deployment shares: one for creating the reference images and one for deployment. For Zero Touch, it is common to have only the deployment share for creating reference images because Microsoft System Center 2012 R2 Configuration Manager deploys the image in the production environment. + +## Rules + +The rules (CustomSettings.ini and Bootstrap.ini) make up the brain of MDT. The rules control the Windows Deployment Wizard on the client and, for example, can provide the following settings to the machine being deployed: +- Computer name +- Domain to join, and organizational unit (OU) in Active Directory to hold the computer object +- Whether to enable BitLocker +- Regional settings +You can manage hundreds of settings in the rules. For more information, see the [Microsoft Deployment Toolkit resource center](https://go.microsoft.com/fwlink/p/?LinkId=618117). + +![figure 5](../images/mdt-05-fig05.png) + +Figure 5. Example of a MDT rule. In this example, the new computer name is being calculated based on PC- plus the first seven (Left) characters from the serial number + +## Boot images + +Boot images are the Windows Preinstallation Environment (Windows PE) images that are used to start the deployment. They can be started from a CD or DVD, an ISO file, a USB device, or over the network using a Pre-Boot Execution Environment (PXE) server. The boot images connect to the deployment +share on the server and start the deployment. + +## Operating systems + +Using the Deployment Workbench, you import the operating systems you want to deploy. You can import either the full source (like the full Windows 10 DVD/ISO) or a custom image that you have created. The full-source operating systems are primarily used to create reference images; however, they also can be used for normal deployments. + +## Applications + +Using the Deployment Workbench, you also add the applications you want to deploy. MDT supports virtually every executable Windows file type. The file can be a standard .exe file with command-line switches for an unattended install, a Microsoft Windows Installer (MSI) package, a batch file, or a VBScript. In fact, it can be just about anything that can be executed unattended. MDT also supports the new Universal Windows apps. + +## Driver repository + +You also use the Deployment Workbench to import the drivers your hardware needs into a driver repository that lives on the server, not in the image. + +## Packages + +With the Deployment Workbench, you can add any Microsoft packages that you want to use. The most commonly added packages are language packs, and the Deployment Workbench Packages node works well for those. You also can add security and other updates this way. However, we generally recommend that you use Windows Server Update Services (WSUS) for operating system updates. The rare exceptions are critical hotfixes that are not available via WSUS, packages for the boot image, or any other package that needs to be deployed before the WSUS update process starts. + +## Task sequences + +Task sequences are the heart and soul of the deployment solution. When creating a task sequence, you need to select a template. The templates are located in the Templates folder in the MDT installation directory, and they determine which default actions are present in the sequence. + +You can think of a task sequence as a list of actions that need to be executed in a certain order. Each action can also have conditions. Some examples of actions are as follows: +- **Gather.** Reads configuration settings from the deployment server. +- **Format and Partition.** Creates the partition(s) and formats them. +- **Inject Drivers.** Finds out which drivers the machine needs and downloads them from the central driver repository. +- **Apply Operating System.** Uses ImageX to apply the image. +- **Windows Update.** Connects to a WSUS server and updates the machine. + +## Task sequence templates + +MDT comes with nine default task sequence templates. You can also create your own templates. As long as you store them in the Templates folder, they will be available when you create a new task sequence. +- **Sysprep and Capture task sequence.** Used to run the System Preparation (Sysprep) tool and capture an image of a reference computer. + + **Note**   + It is preferable to use a complete build and capture instead of the Sysprep and Capture task sequence. A complete build and capture can be automated, whereas Sysprep and Capture cannot. + +- **Standard Client task sequence.** The most frequently used task sequence. Used for creating reference images and for deploying clients in production. +- **Standard Client Replace task sequence.** Used to run User State Migration Tool (USMT) backup and the optional full Windows Imaging (WIM) backup action. Can also be used to do a secure wipe of a machine that is going to be decommissioned. +- **Custom task sequence.** As the name implies, a custom task sequence with only one default action (one Install Application action). +- **Standard Server task sequence.** The default task sequence for deploying operating system images to servers. The main difference between this template and the Standard Client task sequence template is that it does not contain any USMT actions because USMT is not supported on servers. +- **Lite Touch OEM task sequence.** Used to preload operating systems images on the computer hard drive. Typically used by computer original equipment manufacturers (OEMs) but some enterprise organizations also use this feature. +- **Post OS Installation task sequence.** A task sequence prepared to run actions after the operating system has been deployed. Very useful for server deployments but not often used for client deployments. +- **Deploy to VHD Client task sequence.** Similar to the Standard Client task sequence template but also creates a virtual hard disk (VHD) file on the target computer and deploys the image to the VHD file. +- **Deploy to VHD Server task sequence.** Same as the Deploy to VHD Client task sequence but for servers. +- **Standard Client Upgrade task sequence.** A simple task sequence template used to perform an in-place upgrade from Windows 7, Windows 8, or Windows 8.1 directly to Windows 10, automatically preserving existing data, settings, applications, and drivers. + +## Selection profiles + +Selection profiles, which are available in the Advanced Configuration node, provide a way to filter content in the Deployment Workbench. Selection profiles are used for several purposes in the Deployment Workbench and in Lite Touch deployments. For example, they can be used to: +- Control which drivers and packages are injected into the Lite Touch (and generic) boot images. +- Control which drivers are injected during the task sequence. +- Control what is included in any media that you create. +- Control what is replicated to other deployment shares. +- Filter which task sequences and applications are displayed in the Deployment Wizard. + +## Logging + +MDT uses many log files during operating system deployments. By default the logs are client side, but by configuring the deployment settings, you can have MDT store them on the server, as well. + +**Note**   +The easiest way to view log files is to use Configuration Manager Trace (CMTrace), which is included in the [System Center 2012 R2 Configuration Manager Toolkit](https://go.microsoft.com/fwlink/p/?LinkId=734717). + +## Monitoring + +On the deployment share, you also can enable monitoring. After you enable monitoring, you will see all running deployments in the Monitor node in the Deployment Workbench. + +## Related topics + +[Microsoft Deployment Toolkit downloads and documentation](https://go.microsoft.com/fwlink/p/?LinkId=618117)
+[Create a Windows 10 reference image](create-a-windows-10-reference-image.md)
+[Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md)
+[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md)
+[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md)
+[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md)
+[Configure MDT settings](configure-mdt-settings.md) +======= +======= +>>>>>>> bc07494f1704b1e23c818d59e7f42c56fefb83d1 +--- +title: Get started with the Microsoft Deployment Toolkit (MDT) (Windows 10) +description: This topic will help you gain a better understanding of how to use the Microsoft Deployment Toolkit (MDT), as part of a Windows operating system deployment. +ms.assetid: a256442c-be47-4bb9-a105-c831f58ce3ee +ms.reviewer: +manager: laurawi +ms.author: greglin +keywords: deploy, image, feature, install, tools +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.sitesec: library +ms.pagetype: mdt +audience: itpro +author: greg-lindsay +ms.topic: article +--- + +# Get started with the Microsoft Deployment Toolkit (MDT) + +**Applies to** +- Windows 10 + +This topic will help you gain a better understanding of how to use the Microsoft Deployment Toolkit (MDT), as part of a Windows operating system deployment. MDT is one of the most important tools available to IT professionals today. You can use it to create reference images or as a complete deployment solution. MDT also can be used to extend the operating system deployment features available in Microsoft System Center 2012 R2 Configuration Manager. + +In addition to familiarizing you with the features and options available in MDT, this topic will walk you through the process of preparing for deploying Windows 10 using MDT by configuring Active Directory, creating an organizational unit (OU) structure, creating service accounts, configuring log files and folders, and installing the tools needed to view the logs and continue with the deployment process. + +For the purposes of this topic, we will use two machines: DC01 and MDT01. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 standard server. MDT01 is a member of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see +[Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md#proof). + +![figure 1](../images/mdt-05-fig01.png) + +Figure 1. The machines used in this topic. + +## In this section + +- [Key features in MDT](key-features-in-mdt.md) +- [MDT Lite Touch components](mdt-lite-touch-components.md) +- [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) + +## Related topics + +[Microsoft Deployment Toolkit downloads and documentation](https://go.microsoft.com/fwlink/p/?LinkId=618117)
+[Create a Windows 10 reference image](create-a-windows-10-reference-image.md)
+[Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md)
+[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md)
+[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md)
+[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md)
+[Configure MDT settings](configure-mdt-settings.md) + diff --git a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md index 2e1b06b5f4..d714edfd4e 100644 --- a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md +++ b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md @@ -1,6 +1,6 @@ --- title: Prepare for deployment with MDT (Windows 10) -description: This topic will walk you through the steps necessary to create the server structure required to deploy the Windows 10 operating system using the Microsoft Deployment Toolkit (MDT). +description: This topic will walk you through the steps necessary to create the server structure required to deploy the Windows 10 operating system using the Microsoft Deployment Toolkit (MDT). ms.assetid: 5103c418-0c61-414b-b93c-a8e8207d1226 ms.reviewer: manager: laurawi @@ -19,50 +19,89 @@ ms.topic: article # Prepare for deployment with MDT **Applies to** -- Windows 10 +- Windows 10 -This topic will walk you through the steps necessary to create the server structure required to deploy the Windows 10 operating system using the Microsoft Deployment Toolkit (MDT). It covers the installation of the necessary system prerequisites, the creation of shared folders and service accounts, and the configuration of security permissions in the files system and in Active Directory. +This topic will walk you through the steps necessary to create the server structure required to deploy the Windows 10 operating system using the Microsoft Deployment Toolkit (MDT). It covers the installation of the necessary system prerequisites, the creation of shared folders and service accounts, and the configuration of security permissions in the file system and in Active Directory. -For the purposes of this topic, we will use two machines: DC01 and MDT01. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 standard server. MDT01 is a member of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md#proof). +For the purposes of this topic, we will use two computers: **DC01** and **MDT01** +- Both servers are running Windows Server 2012 R2. You can also use a later version of Windows Server. +- DC01 is a domain controller and DNS server for contoso.com, representing the fictitious Contoso Corporation. +- MDT01 is a domain member server in contoso.com and has a D: drive that will be used for data. + - The data drive requires at least 100GB of disk space. + +For more details on the setup for topics in this guide, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). -## System requirements +## Install Windows ADK for Windows 10 -MDT requires the following components: -- Any of the following operating systems: - - Windows 7 - - Windows 8 - - Windows 8.1 - - Windows 10 - - Windows Server 2008 R2 - - Windows Server 2012 - - Windows Server 2012 R2 -- Windows Assessment and Deployment Kit (ADK) for Windows 10 -- Windows PowerShell -- Microsoft .NET Framework +These steps assume that you have the MDT01 member server running and configured as a domain member server. -## Install Windows ADK for Windows 10 +Visit the [Download and install the Windows ADK](https://go.microsoft.com/fwlink/p/?LinkId=526803) page and download the following to the **D:\\Downloads\\ADK** folder on MDT01: +- [The Windows ADK for Windows 10](https://go.microsoft.com/fwlink/?linkid=2086042) +- [The Windows PE add-on for the ADK](https://go.microsoft.com/fwlink/?linkid=2087112) -These steps assume that you have the MDT01 member server installed and configured and that you have downloaded [Windows ADK for Windows 10](https://go.microsoft.com/fwlink/p/?LinkId=526803) to the E:\\Downloads\\ADK folder. -1. On MDT01, log on as Administrator in the CONTOSO domain using a password of P@ssw0rd. -2. Start the **ADK Setup** (E:\\Downloads\\ADK\\adksetup.exe), and on the first wizard page, click **Continue**. -3. On the **Select the features you want to change** page, select the features below and complete the wizard using the default settings: - 1. Deployment Tools - 2. Windows Preinstallation Environment (Windows PE) - 3. User State Migration Tool (USMT) +>[!TIP] +>You might need to temporarily disable IE Enhanced Security Configuration for administrators in order to download files from the Internet to the server. - >[!IMPORTANT] - >Starting with Windows 10, version 1809, Windows PE is released separately from the ADK. See [Download and install the Windows ADK](https://docs.microsoft.com/windows-hardware/get-started/adk-install) for more information. +1. On MDT01, sign in as an administrator in the CONTOSO domain. + - For the purposes of this guide, we are using a Domain Admin account of **admin** with a password of pass@word3. You can use your own administrator username and password as long as you properly adjust all steps in this guide that use login these credentials. +2. Start the **ADK Setup** (D:\\Downloads\\ADK\\adksetup.exe), click **Next** twice to accept the default installation parameters, click **Accept** to accept the license agreement, and then on the **Select the features you want to install** page accept the default list of features by clicking **Install**. This will install deployment tools and the USMT. +3. Start the **WinPE Setup** (D:\\Downloads\\ADK\\adkwinpesetup.exe), click **Next** twice to accept the default installation parameters, click **Accept** to accept the license agreement, and then on the **Select the features you want to install** page click **Install**. This will install Windows PE for x86, AMD64, ARM, and ARM64. -## Install MDT +## Install MDT -These steps assume that you have downloaded [MDT](https://go.microsoft.com/fwlink/p/?LinkId=618117 ) to the E:\\Downloads\\MDT folder on MDT01. +>[!NOTE] +>MDT installation requires the following: +>- The Windows ADK for Windows 10 +>- Windows PowerShell +>- Microsoft .NET Framework -1. On MDT01, log on as Administrator in the CONTOSO domain using a password of P@ssw0rd. -2. Install **MDT** (E:\\Downloads\\MDT\\MicrosoftDeploymentToolkit\_x64.msi) with the default settings. +1. Visit the [MDT resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117) and click **Download MDT**. +2. Save the **MicrosoftDeploymentToolkit_x64.msi** file to the D:\\Downloads\\MDT folder on MDT01. + - **Note**: As of the publishing date for this guide, the current version of MDT is 8456, but a later version should also work. +3. Install **MDT** (D:\\Downloads\\MDT\\MicrosoftDeploymentToolkit_x64.exe) with the default settings. -## Create the OU structure +## Create the OU structure + +To create the OU structure, you can use the Active Directory Users and Computers console (dsa.msc), or you can use Windows PowerShell. + +To use Windows PowerShell, copy the following commands into a text file and save it as c:\ou.ps1. Be sure that you are viewing file extensions and that you save the file with the .ps1 extension. + +```powershell +$oulist = Import-csv -Path c:\oulist.txt +ForEach($entry in $oulist){ + $ouname = $entry.ouname + $oupath = $entry.oupath + New-ADOrganizationalUnit -Name $ouname -Path $oupath -WhatIf + Write-Host -ForegroundColor Green "OU $ouname is created in the location $oupath" +} +``` + +Next, copy the following list of OU names and paths into a text file and save it as c:\oulist.txt + +```text +OUName,OUPath +Contoso,"DC=CONTOSO,DC=COM" +Accounts,"OU=Contoso,DC=CONTOSO,DC=COM" +Computers,"OU=Contoso,DC=CONTOSO,DC=COM" +Groups,"OU=Contoso,DC=CONTOSO,DC=COM" +Admins,"OU=Accounts,OU=Contoso,DC=CONTOSO,DC=COM" +Service Accounts,"OU=Accounts,OU=Contoso,DC=CONTOSO,DC=COM" +Users,"OU=Accounts,OU=Contoso,DC=CONTOSO,DC=COM" +Servers,"OU=Computers,OU=Contoso,DC=CONTOSO,DC=COM" +Workstations,"OU=Computers,OU=Contoso,DC=CONTOSO,DC=COM" +Security Groups,"OU=Groups,OU=Contoso,DC=CONTOSO,DC=COM" +``` + +Lastly, open an elevated Windows PowerShell prompt on DC01, navigate to the c:\ directory and run the ou.ps1 script: + +```powershell +.\ou.ps1 +``` + +This will create an OU structure as shown below. + +To use the Active Directory Users and Computers console (instead of PowerShell): -If you do not have an organizational unit (OU) structure in your Active Directory, you should create one. In this section, you create an OU structure and a service account for MDT. 1. On DC01, using Active Directory User and Computers, in the contoso.com domain level, create a top-level OU named **Contoso**. 2. In the **Contoso** OU, create the following OUs: 1. Accounts @@ -76,55 +115,55 @@ If you do not have an organizational unit (OU) structure in your Active Director 1. Servers 2. Workstations 5. In the **Contoso / Groups** OU, create the following OU: - - Security Groups + 1. Security Groups -![figure 6](../images/mdt-05-fig07.png) +The final result of either method is shown below (the MDT_BA account will be created next). -Figure 6. A sample of how the OU structure will look after all the OUs are created. +![OU structure](../images/mdt-05-fig07.png) -## Create the MDT service account +## Create the MDT service account -When creating a reference image, you need an account for MDT. The MDT Build Account is used for Windows Preinstallation Environment (Windows PE) to connect to MDT01. -1. On DC01, using Active Directory User and Computers, browse to **contoso.com / Contoso / Service Accounts**. -2. Select the **Service Accounts** OU and create the **MDT\_BA** account using the following settings: - 1. Name: MDT\_BA - 2. User logon name: MDT\_BA - 3. Password: P@ssw0rd - 4. User must change password at next logon: Clear - 5. User cannot change password: Selected - 6. Password never expires: Selected +When creating a reference image, you need an account for MDT. The MDT build account is used for Windows Preinstallation Environment (Windows PE) to connect to MDT01. -## Create and share the logs folder +To create an MDT build account, open an elevalted Windows PowerShell prompt on DC01 and enter the following (copy and paste the entire command noticing the scroll bar at the bottom): + +```powershell +New-ADUser -Name MDT_BA -UserPrincipalName MDT_BA -path "OU=Service Accounts,OU=Accounts,OU=Contoso,DC=CONTOSO,DC=COM" -Description "MDT Build Account" -AccountPassword (ConvertTo-SecureString "pass@word3" -AsPlainText -Force) -ChangePasswordAtLogon $false -PasswordNeverExpires $true -Enabled $true +``` +If you have the Active Directory Users and Computers console open you can refresh the view and see this new account in the Contoso\Accounts\Service Accounts OU as shown in the screenshot above. + +## Create and share the logs folder By default MDT stores the log files locally on the client. In order to capture a reference image, you will need to enable server-side logging and, to do that, you will need to have a folder in which to store the logs. For more information, see [Create a Windows 10 reference image](create-a-windows-10-reference-image.md). -1. On MDT01, log on as **CONTOSO\\Administrator**. -2. Create and share the **E:\\Logs** folder by running the following commands in an elevated Windows PowerShell prompt: +1. On MDT01, sign in as **CONTOSO\\admin**. +2. Create and share the **D:\\Logs** folder by running the following commands in an elevated Windows PowerShell prompt: - ``` powershell - New-Item -Path E:\Logs -ItemType directory - New-SmbShare -Name Logs$ -Path E:\Logs -ChangeAccess EVERYONE - icacls E:\Logs /grant '"MDT_BA":(OI)(CI)(M)' + ```powershell + New-Item -Path D:\Logs -ItemType directory + New-SmbShare -Name Logs$ -Path D:\Logs -ChangeAccess EVERYONE + icacls D:\Logs /grant '"MDT_BA":(OI)(CI)(M)' ``` -![figure 7](../images/mdt-05-fig08.png) +See the following example: -Figure 7. The Sharing tab of the E:\\Logs folder after sharing it with PowerShell. +![Logs folder](../images/mdt-05-fig08.png) -## Use CMTrace to read log files (optional) +## Use CMTrace to read log files (optional) -The log files in MDT Lite Touch are formatted to be read by Configuration Manager Trace (CMTrace), which is available as part [of Microsoft System Center 2012 R2 Configuration Manager Toolkit](https://go.microsoft.com/fwlink/p/?LinkId=734717). You can use Notepad, but CMTrace formatting makes the logs easier to read. +The log files in MDT Lite Touch are formatted to be read by Configuration Manager Trace ([CMTrace](https://docs.microsoft.com/sccm/core/support/cmtrace)), which is available as part of the [Microsoft System 2012 R2 Center Configuration Manager Toolkit](https://go.microsoft.com/fwlink/p/?LinkId=734717). You should also download this tool. + +You can use Notepad (example below): ![figure 8](../images/mdt-05-fig09.png) -Figure 8. An MDT log file opened in Notepad. +Alternatively, CMTrace formatting makes the logs much easier to read. See the same log file below, opened in CMTrace: ![figure 9](../images/mdt-05-fig10.png) -Figure 9. The same log file, opened in CMTrace, is much easier to read. +When you have completed the steps in this section to prepare for deployment, see [Create a Windows 10 reference image](create-a-windows-10-reference-image.md). + ## Related topics -[Key features in MDT](key-features-in-mdt.md) - -[MDT Lite Touch components](mdt-lite-touch-components.md) +[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) \ No newline at end of file From 9a50e36b7f6bea6044fc5905fe96aab21d43a8ea Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 12 Aug 2019 12:21:13 -0700 Subject: [PATCH 002/358] missing files? --- ...0-with-the-microsoft-deployment-toolkit.md | 221 ++++++++++++++++++ ...ith-system-center-configuration-manager.md | 197 ++++++++++++++++ windows/deployment/images/iso-data.png | Bin 0 -> 36882 bytes 3 files changed, 418 insertions(+) create mode 100644 windows/deployment/deploy-windows-mdt/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md create mode 100644 windows/deployment/deploy-windows-sccm/deploy-windows-10-with-system-center-configuration-manager.md create mode 100644 windows/deployment/images/iso-data.png diff --git a/windows/deployment/deploy-windows-mdt/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md new file mode 100644 index 0000000000..da477e2507 --- /dev/null +++ b/windows/deployment/deploy-windows-mdt/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md @@ -0,0 +1,221 @@ +<<<<<<< HEAD:windows/deployment/deploy-windows-mdt/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md +--- +title: Perform an in-place upgrade to Windows 10 with MDT (Windows 10) +description: The simplest path to upgrade PCs that are currently running Windows 7, Windows 8, or Windows 8.1 to Windows 10 is through an in-place upgrade. +ms.assetid: B8993151-3C1E-4F22-93F4-2C5F2771A460 +ms.reviewer: +manager: laurawi +ms.author: greglin +keywords: upgrade, update, task sequence, deploy +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.sitesec: library +ms.pagetype: mdt +audience: itpro +author: greg-lindsay +ms.topic: article +--- + +# Perform an in-place upgrade to Windows 10 with MDT + +**Applies to** +- Windows 10 + +The simplest path to upgrade PCs that are currently running Windows 7, Windows 8, or Windows 8.1 to Windows 10 is through an in-place upgrade. You can use a Microsoft Deployment Toolkit (MDT) 2013 Update 2 task sequence to completely automate the process. + +## Proof-of-concept environment + +For the purposes of this topic, we will use four machines: DC01, MDT01, and PC0001. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 standard machine, fully patched with the latest security updates, and configured as a member server in the fictional contoso.com domain. PC0001 is a machine with Windows 7 SP1, targeted for the Windows 10 upgrade. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](../deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md). + +![fig 1](../images/upgrademdt-fig1-machines.png) + +Figure 1. The machines used in this topic. + +## Set up the upgrade task sequence + +MDT adds support for Windows 10 deployment, including a new in-place upgrade task sequence template that makes the process really simple. + +## Create the MDT production deployment share + +The steps to create the deployment share for production are the same as when you created the deployment share to create the custom reference image: + +1. On MDT01, log on as Administrator in the CONTOSO domain with a password of P@ssw0rd. +2. Using the Deployment Workbench, right-click **Deployment Shares** and select **New Deployment Share**. +3. On the **Path** page, in the **Deployment share path** text box, type **E:\\MDTProduction**, and then click **Next**. +4. On the **Share** page, in the **Share name** text box, type **MDTProduction$**, and then click **Next**. +5. On the **Descriptive Name** page, in the **Deployment share** description text box, type **MDT Production**, and then click **Next**. +6. On the **Options** page, accept the default settings and click **Next** twice, and then click **Finish**. +7. Using File Explorer, verify that you can access the **\\\\MDT01\\MDTProduction$** share. + +## Add Windows 10 Enterprise x64 (full source) + +In these steps we assume that you have copied the content of a Windows 10 Enterprise x64 ISO to the E:\\Downloads\\Windows 10 Enterprise x64 folder. + +1. Using the Deployment Workbench, expand the **Deployment Shares** node, and then expand **MDT Production**. +2. Right-click the **Operating Systems** node, and create a new folder named **Windows 10**. +3. Expand the **Operating Systems** node, right-click the **Windows 10** folder, and select **Import Operating System**. Use the following settings for the Import Operating System Wizard: + - Full set of source files + - Source directory: E:\\Downloads\\Windows 10 Enterprise x64 + - Destination directory name: W10EX64RTM +4. After you add the operating system, in the **Operating Systems / Windows 10** folder, double-click the added operating system name in the **Operating System** node and change the name to the following: **Windows 10 Enterprise x64 RTM Default Image** + +![figure 2](../images/upgrademdt-fig2-importedos.png) + +Figure 2. The imported Windows 10 operating system after you rename it. + +## Create a task sequence to upgrade to Windows 10 Enterprise + +1. Using the Deployment Workbench, select **Task Sequences** in the **MDT Production** node, and create a folder named **Windows 10**. +2. Right-click the new **Windows 10** folder and select **New Task Sequence**. Use the following settings for the New Task Sequence Wizard: + - Task sequence ID: W10-X64-UPG + - Task sequence name: Windows 10 Enterprise x64 RTM Upgrade + - Template: Standard Client Upgrade Task Sequence + - Select OS: Windows 10 Enterprise x64 RTM Default Image + - Specify Product Key: Do not specify a product key at this time + - Full Name: Contoso + - Organization: Contoso + - Internet Explorer home page: about:blank + - Admin Password: Do not specify an Administrator Password at this time + +![figure 3](../images/upgrademdt-fig3-tasksequence.png) + +Figure 3. The task sequence to upgrade to Windows 10. + +## Perform the Windows 10 upgrade + +To initiate the in-place upgrade, perform the following steps on PC0003 (currently running Windows 7 SP1). + +1. Start the MDT deployment wizard by running the following command: **\\\\MDT01\\MDTProduction$\\Scripts\\LiteTouch.vbs** +2. Select the **Windows 10 Enterprise x64 RTM Upgrade** task sequence, and then click **Next**. + + ![figure 4](../images/upgrademdt-fig4-selecttask.png) + + Figure 4. Upgrade task sequence. + +3. On the **Credentials** tab, specify the **MDT\_BA** account, P@ssw0rd password, and **CONTOSO** for the domain. (Some or all of these values can be specified in Bootstrap.ini so they are automatically populated.) +4. On the **Ready** tab, click **Begin** to start the task sequence. + When the task sequence begins, it automatically initiates the in-place upgrade process by invoking the Windows setup program (Setup.exe) with the necessary command-line parameters to perform an automated upgrade, which preserves all data, settings, apps, and drivers. + +![figure 5](../images/upgrademdt-fig5-winupgrade.png) + +Figure 5. Upgrade from Windows 7 to Windows 10 Enterprise x64 with a task sequence. + +After the task sequence completes, the computer will be fully upgraded to Windows 10. + +## Related topics + +[Windows 10 deployment scenarios](../windows-10-deployment-scenarios.md)
+[Microsoft Deployment Toolkit downloads and resources](https://go.microsoft.com/fwlink/p/?LinkId=618117) + +======= +--- +title: Perform an in-place upgrade to Windows 10 with MDT (Windows 10) +description: The simplest path to upgrade PCs that are currently running Windows 7, Windows 8, or Windows 8.1 to Windows 10 is through an in-place upgrade. +ms.assetid: B8993151-3C1E-4F22-93F4-2C5F2771A460 +ms.reviewer: +manager: laurawi +ms.author: greglin +keywords: upgrade, update, task sequence, deploy +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.sitesec: library +ms.pagetype: mdt +audience: itpro author: greg-lindsay +ms.topic: article +--- + +# Perform an in-place upgrade to Windows 10 with MDT + +**Applies to** +- Windows 10 + +The simplest path to upgrade PCs that are currently running Windows 7, Windows 8, or Windows 8.1 to Windows 10 is through an in-place upgrade. You can use a Microsoft Deployment Toolkit (MDT) 2013 Update 2 task sequence to completely automate the process. + +## Proof-of-concept environment + +For the purposes of this topic, we will use four machines: DC01, MDT01, and PC0001. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 standard machine, fully patched with the latest security updates, and configured as a member server in the fictional contoso.com domain. PC0001 is a machine with Windows 7 SP1, targeted for the Windows 10 upgrade. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](../deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md). + +![fig 1](../images/upgrademdt-fig1-machines.png) + +Figure 1. The machines used in this topic. + +## Set up the upgrade task sequence + +MDT adds support for Windows 10 deployment, including a new in-place upgrade task sequence template that makes the process really simple. + +## Create the MDT production deployment share + +The steps to create the deployment share for production are the same as when you created the deployment share to create the custom reference image: + +1. On MDT01, log on as Administrator in the CONTOSO domain with a password of P@ssw0rd. +2. Using the Deployment Workbench, right-click **Deployment Shares** and select **New Deployment Share**. +3. On the **Path** page, in the **Deployment share path** text box, type **E:\\MDTProduction**, and then click **Next**. +4. On the **Share** page, in the **Share name** text box, type **MDTProduction$**, and then click **Next**. +5. On the **Descriptive Name** page, in the **Deployment share** description text box, type **MDT Production**, and then click **Next**. +6. On the **Options** page, accept the default settings and click **Next** twice, and then click **Finish**. +7. Using File Explorer, verify that you can access the **\\\\MDT01\\MDTProduction$** share. + +## Add Windows 10 Enterprise x64 (full source) + +In these steps we assume that you have copied the content of a Windows 10 Enterprise x64 ISO to the E:\\Downloads\\Windows 10 Enterprise x64 folder. + +1. Using the Deployment Workbench, expand the **Deployment Shares** node, and then expand **MDT Production**. +2. Right-click the **Operating Systems** node, and create a new folder named **Windows 10**. +3. Expand the **Operating Systems** node, right-click the **Windows 10** folder, and select **Import Operating System**. Use the following settings for the Import Operating System Wizard: + - Full set of source files + - Source directory: E:\\Downloads\\Windows 10 Enterprise x64 + - Destination directory name: W10EX64RTM +4. After you add the operating system, in the **Operating Systems / Windows 10** folder, double-click the added operating system name in the **Operating System** node and change the name to the following: **Windows 10 Enterprise x64 RTM Default Image** + +![figure 2](../images/upgrademdt-fig2-importedos.png) + +Figure 2. The imported Windows 10 operating system after you rename it. + +## Create a task sequence to upgrade to Windows 10 Enterprise + +1. Using the Deployment Workbench, select **Task Sequences** in the **MDT Production** node, and create a folder named **Windows 10**. +2. Right-click the new **Windows 10** folder and select **New Task Sequence**. Use the following settings for the New Task Sequence Wizard: + - Task sequence ID: W10-X64-UPG + - Task sequence name: Windows 10 Enterprise x64 RTM Upgrade + - Template: Standard Client Upgrade Task Sequence + - Select OS: Windows 10 Enterprise x64 RTM Default Image + - Specify Product Key: Do not specify a product key at this time + - Full Name: Contoso + - Organization: Contoso + - Internet Explorer home page: about:blank + - Admin Password: Do not specify an Administrator Password at this time + +![figure 3](../images/upgrademdt-fig3-tasksequence.png) + +Figure 3. The task sequence to upgrade to Windows 10. + +## Perform the Windows 10 upgrade + +To initiate the in-place upgrade, perform the following steps on PC0003 (currently running Windows 7 SP1). + +1. Start the MDT deployment wizard by running the following command: **\\\\MDT01\\MDTProduction$\\Scripts\\LiteTouch.vbs** +2. Select the **Windows 10 Enterprise x64 RTM Upgrade** task sequence, and then click **Next**. + + ![figure 4](../images/upgrademdt-fig4-selecttask.png) + + Figure 4. Upgrade task sequence. + +3. On the **Credentials** tab, specify the **MDT\_BA** account, P@ssw0rd password, and **CONTOSO** for the domain. (Some or all of these values can be specified in Bootstrap.ini so they are automatically populated.) +4. On the **Ready** tab, click **Begin** to start the task sequence. + When the task sequence begins, it automatically initiates the in-place upgrade process by invoking the Windows setup program (Setup.exe) with the necessary command-line parameters to perform an automated upgrade, which preserves all data, settings, apps, and drivers. + +![figure 5](../images/upgrademdt-fig5-winupgrade.png) + +Figure 5. Upgrade from Windows 7 to Windows 10 Enterprise x64 with a task sequence. + +After the task sequence completes, the computer will be fully upgraded to Windows 10. + +## Related topics + +[Windows 10 deployment scenarios](../windows-10-deployment-scenarios.md) + +[Microsoft Deployment Toolkit downloads and resources](https://go.microsoft.com/fwlink/p/?LinkId=618117) + +>>>>>>> bc07494f1704b1e23c818d59e7f42c56fefb83d1:windows/deployment/upgrade/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md diff --git a/windows/deployment/deploy-windows-sccm/deploy-windows-10-with-system-center-configuration-manager.md b/windows/deployment/deploy-windows-sccm/deploy-windows-10-with-system-center-configuration-manager.md new file mode 100644 index 0000000000..9a2f80fc31 --- /dev/null +++ b/windows/deployment/deploy-windows-sccm/deploy-windows-10-with-system-center-configuration-manager.md @@ -0,0 +1,197 @@ +<<<<<<< HEAD:windows/deployment/deploy-windows-sccm/deploy-windows-10-with-system-center-configuration-manager.md +--- +title: Deploy Windows 10 with System Center 2012 R2 Configuration Manager (Windows 10) +description: If you have Microsoft System Center 2012 R2 Configuration Manager in your environment, you will most likely want to use it to deploy Windows 10. +ms.assetid: eacd7b7b-dde0-423d-97cd-29bde9e8b363 +ms.reviewer: +manager: laurawi +ms.author: greglin +keywords: deployment, custom, boot +ms.prod: w10 +ms.localizationpriority: medium +ms.mktglfcycl: deploy +ms.sitesec: library +audience: itpro +author: greg-lindsay +ms.topic: article +--- + +# Deploy Windows 10 with System Center 2012 R2 Configuration Manager + + +**Applies to** + +- Windows 10 versions 1507, 1511 + +>[!IMPORTANT] +>For instructions to deploy the most recent version of Windows 10 with Configuration Manager, see [Scenarios to deploy enterprise operating systems with System Center Configuration Manager](https://docs.microsoft.com/sccm/osd/deploy-use/scenarios-to-deploy-enterprise-operating-systems). +>Configuration Manager 2012 and 2012 R2 provide support for Windows 10 versions 1507 and 1511 only. Later versions of Windows 10 require an updated Configuration Manager release. For a list of Configuration Manager versions and the corresponding Windows 10 client versions that are supported, see [Support for Windows 10 for System Center Configuration Manager](https://docs.microsoft.com/sccm/core/plan-design/configs/support-for-windows-10). + +If you have Microsoft System Center 2012 R2 Configuration Manager in your environment, you will most likely want to use it to deploy Windows 10. This topic will show you how to set up Configuration Manager for operating system deployment and how to integrate Configuration Manager with the Microsoft Deployment Toolkit (MDT). + +For the purposes of this topic, we will use four machines: DC01, CM01, PC0003, and PC0004. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 standard. PC0003 and PC0004 are machines with Windows 7 SP1, on which Windows 10 will be deployed via both refresh and replace scenarios. In addition to these four ready-made machines, you could also include a few blank virtual machines to be used for bare-metal deployments. DC01, CM01, PC003, and PC0004 are all members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](../deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md). + +![figure 1](../images/mdt-06-fig01.png) + +Figure 1. The machines used in this topic. + +## In this section + + +- [Integrate Configuration Manager with MDT](../deploy-windows-mdt/integrate-configuration-manager-with-mdt.md) +- [Prepare for Zero Touch Installation of Windows with Configuration Manager](prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md) +- [Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-boot-image-with-configuration-manager.md) +- [Add a Windows 10 operating system image using Configuration Manager](add-a-windows-10-operating-system-image-using-configuration-manager.md) +- [Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-10-using-configuration-manager.md) +- [Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md) +- [Create a task sequence with Configuration Manager and MDT](../deploy-windows-mdt/create-a-task-sequence-with-configuration-manager-and-mdt.md) +- [Finalize the operating system configuration for Windows 10 deployment with Configuration Manager](finalize-the-os-configuration-for-windows-10-deployment-with-configuration-manager.md) +- [Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-10-using-pxe-and-configuration-manager.md) +- [Monitor the Windows 10 deployment with Configuration Manager](monitor-windows-10-deployment-with-configuration-manager.md) +- [Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md) +- [Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md) + +## Components of Configuration Manager operating system deployment + + +Operating system deployment with Configuration Manager is part of the normal software distribution infrastructure, but there are additional components. For example, operating system deployment in Configuration Manager may use the State Migration Point role, which is not used by normal application deployment in Configuration Manager. This section describes the Configuration Manager components involved with the deployment of an operating system, such as Windows 10. + +- **State migration point (SMP).** The state migration point is used to store user state migration data during computer replace scenarios. +- **Distribution point (DP).** The distribution point is used to store all packages in Configuration Manager, including the operating system deployment-related packages. +- **Software update point (SUP).** The software update point, which is normally used to deploy updates to existing machines, also can be used to update an operating system as part of the deployment process. You also can use offline servicing to update the image directly on the Configuration Manager server. +- **Reporting services point.** The reporting services point can be used to monitor the operating system deployment process. +- **Boot images.** Boot images are the Windows Preinstallation Environment (Windows PE) images Configuration Manager uses to start the deployment. +- **Operating system images.** The operating system image package contains only one file, the custom .wim image. This is typically the production deployment image. +- **Operating system installers.** The operating system installers were originally added to create reference images using Configuration Manager. Instead, we recommend that you use MDT Lite Touch to create your reference images. For more information on how to create a reference image, see [Create a Windows 10 reference image](../deploy-windows-mdt/create-a-windows-10-reference-image.md). +- **Drivers.** Like MDT Lite Touch, Configuration Manager also provides a repository (catalog) of managed device drivers. +- **Task sequences.** The task sequences in Configuration Manager look and feel pretty much like the sequences in MDT Lite Touch, and they are used for the same purpose. However, in Configuration Manager the task sequence is delivered to the clients as a policy via the Management Point (MP). MDT provides additional task sequence templates to Configuration Manager. + + **Note**  Configuration Manager SP1 along with the Windows Assessment and Deployment Kit (ADK) for Windows 10 are required to support management and deployment of Windows 10. + +   + +## See also + +- [Microsoft Deployment Toolkit downloads and resources](https://go.microsoft.com/fwlink/p/?LinkId=618117)
+- [Windows deployment tools](../windows-deployment-scenarios-and-tools.md)
+- [Deploy Windows 10 with the Microsoft Deployment Toolkit](../deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md)
+- [Upgrade to Windows 10 with the Microsoft Deployment Toolkit](../upgrade/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md)
+- [Deploy Windows To Go in your organization](../deploy-windows-to-go.md)
+- [Sideload Windows Store apps](https://technet.microsoft.com/library/dn613831.aspx)
+- [Windows ADK for Windows 10](https://go.microsoft.com/fwlink/p/?LinkId=526803) +======= +--- +title: Deploy Windows 10 with System Center 2012 R2 Configuration Manager (Windows 10) +description: If you have Microsoft System Center 2012 R2 Configuration Manager in your environment, you will most likely want to use it to deploy Windows 10. +ms.assetid: eacd7b7b-dde0-423d-97cd-29bde9e8b363 +ms.reviewer: +manager: laurawi +ms.author: greglin +keywords: deployment, custom, boot +ms.prod: w10 +ms.localizationpriority: medium +ms.mktglfcycl: deploy +ms.sitesec: library +audience: itpro author: greg-lindsay +ms.topic: article +--- + +# Deploy Windows 10 with System Center 2012 R2 Configuration Manager + + +**Applies to** + +- Windows 10 versions 1507, 1511 + +>[!IMPORTANT] +>For instructions to deploy the most recent version of Windows 10 with Configuration Manager, see [Scenarios to deploy enterprise operating systems with System Center Configuration Manager](https://docs.microsoft.com/sccm/osd/deploy-use/scenarios-to-deploy-enterprise-operating-systems). +>Configuration Manager 2012 and 2012 R2 provide support for Windows 10 versions 1507 and 1511 only. Later versions of Windows 10 require an updated Configuration Manager release. For a list of Configuration Manager versions and the corresponding Windows 10 client versions that are supported, see [Support for Windows 10 for System Center Configuration Manager](https://docs.microsoft.com/sccm/core/plan-design/configs/support-for-windows-10). + +If you have Microsoft System Center 2012 R2 Configuration Manager in your environment, you will most likely want to use it to deploy Windows 10. This topic will show you how to set up Configuration Manager for operating system deployment and how to integrate Configuration Manager with the Microsoft Deployment Toolkit (MDT). + +For the purposes of this topic, we will use four machines: DC01, CM01, PC0003, and PC0004. DC01 is a domain controller and CM01 is a machine running Windows Server 2012 R2 standard. PC0003 and PC0004 are machines with Windows 7 SP1, on which Windows 10 will be deployed via both refresh and replace scenarios. In addition to these four ready-made machines, you could also include a few blank virtual machines to be used for bare-metal deployments. DC01, CM01, PC003, and PC0004 are all members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](../deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md). + +![figure 1](../images/mdt-06-fig01.png) + +Figure 1. The machines used in this topic. + +## In this section + + +- [Integrate Configuration Manager with MDT](../deploy-windows-mdt/integrate-configuration-manager-with-mdt.md) + +- [Prepare for Zero Touch Installation of Windows with Configuration Manager](prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md) + +- [Create a custom Windows PE boot image with Configuration Manager](create-a-custom-windows-pe-boot-image-with-configuration-manager.md) + +- [Add a Windows 10 operating system image using Configuration Manager](add-a-windows-10-operating-system-image-using-configuration-manager.md) + +- [Create an application to deploy with Windows 10 using Configuration Manager](create-an-application-to-deploy-with-windows-10-using-configuration-manager.md) + +- [Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md) + +- [Create a task sequence with Configuration Manager and MDT](../deploy-windows-mdt/create-a-task-sequence-with-configuration-manager-and-mdt.md) + +- [Finalize the operating system configuration for Windows 10 deployment with Configuration Manager](finalize-the-os-configuration-for-windows-10-deployment-with-configuration-manager.md) + +- [Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-10-using-pxe-and-configuration-manager.md) + +- [Monitor the Windows 10 deployment with Configuration Manager](monitor-windows-10-deployment-with-configuration-manager.md) + +- [Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md) + +- [Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md) + +## Components of Configuration Manager operating system deployment + + +Operating system deployment with Configuration Manager is part of the normal software distribution infrastructure, but there are additional components. For example, operating system deployment in Configuration Manager may use the State Migration Point role, which is not used by normal application deployment in Configuration Manager. This section describes the Configuration Manager components involved with the deployment of an operating system, such as Windows 10. + +- **State migration point (SMP).** The state migration point is used to store user state migration data during computer replace scenarios. + +- **Distribution point (DP).** The distribution point is used to store all packages in Configuration Manager, including the operating system deployment-related packages. + +- **Software update point (SUP).** The software update point, which is normally used to deploy updates to existing machines, also can be used to update an operating system as part of the deployment process. You also can use offline servicing to update the image directly on the Configuration Manager server. + +- **Reporting services point.** The reporting services point can be used to monitor the operating system deployment process. + +- **Boot images.** Boot images are the Windows Preinstallation Environment (Windows PE) images Configuration Manager uses to start the deployment. + +- **Operating system images.** The operating system image package contains only one file, the custom .wim image. This is typically the production deployment image. + +- **Operating system installers.** The operating system installers were originally added to create reference images using Configuration Manager. Instead, we recommend that you use MDT Lite Touch to create your reference images. For more information on how to create a reference image, see [Create a Windows 10 reference image](../deploy-windows-mdt/create-a-windows-10-reference-image.md). + +- **Drivers.** Like MDT Lite Touch, Configuration Manager also provides a repository (catalog) of managed device drivers. + +- **Task sequences.** The task sequences in Configuration Manager look and feel pretty much like the sequences in MDT Lite Touch, and they are used for the same purpose. However, in Configuration Manager the task sequence is delivered to the clients as a policy via the Management Point (MP). MDT provides additional task sequence templates to Configuration Manager. + + **Note**  Configuration Manager SP1 along with the Windows Assessment and Deployment Kit (ADK) for Windows 10 are required to support management and deployment of Windows 10. + +   + +## See also + + +- [Microsoft Deployment Toolkit downloads and resources](https://go.microsoft.com/fwlink/p/?LinkId=618117) + +- [Windows deployment tools](../windows-deployment-scenarios-and-tools.md) + +- [Deploy Windows 10 with the Microsoft Deployment Toolkit](../deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md) + +- [Upgrade to Windows 10 with the Microsoft Deployment Toolkit](../upgrade/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md) + +- [Deploy Windows To Go in your organization](../deploy-windows-to-go.md) + +- [Sideload Windows Store apps](https://technet.microsoft.com/library/dn613831.aspx) + +- [Windows ADK for Windows 10](https://go.microsoft.com/fwlink/p/?LinkId=526803) + +  + +  + + + + + +>>>>>>> bc07494f1704b1e23c818d59e7f42c56fefb83d1:windows/deployment/deploy-windows-sccm/deploy-windows-10-with-system-center-2012-r2-configuration-manager.md diff --git a/windows/deployment/images/iso-data.png b/windows/deployment/images/iso-data.png new file mode 100644 index 0000000000000000000000000000000000000000..f188046b7f633b9dca2b1395159dc3d905328e66 GIT binary patch literal 36882 zcmc$`cTiJb6fTOQMx-gINUsrr0D{s&mrf|s2~{MBfPg^g21KNZbO<0-dgzAURZyCM zK*1VRr;Xg8?8x%bY!^Zs}-U+Q=Ww6Qxy5J)n(#$vX`n* zHxd%6*7JWC+MNqvBqUM!YKrpuUKY3}z>`}eY5OIxgYKi|nP-Ed-n99S`xBmGN6*Ak zrf#J!u`P65UOt<#b#xh&lreWoqsya=DP+ur{i+Y z@~_dJwNU)MN&+L_w&_&&)E0ElSkFzLHZE5Br1|PrfWU>n_t7D5VW{k)L~se*-E^L7 zPyu88&7vCCb#9^a4~$$HO6c`})u*{}(3iz}x=g*Qa^`*ej3H<_-Y@}N~^2XhN(put8#zTSV0I{q~pNfa4yUus{u z0tt3Px7lrd2!uO&mt4;?<)t!S!`^eQGVrJZYN+S`H@0X}DAqDe6&X2>*7u8ds)Vin zLSLzO$LsjK?D4CAHpb4N>k;Z?-X}4;dh@^0xc(c>tcZ$TGzY}9*eMHO=rOR57({)v z5+7o{qZxA0D5p}Gk@ssVd&O&L0aI(uCGvt%UZt8MzlSkBN9a~XaXqCICQaere7w-` zkIzj_O?~^ckS|UPs(YjXLs-(pfJA;~zEg%Ejp5kUXAXzeXyrm@CIyUSfDhHauG?A# zruLvu-(2WD*i?NL*6u21&i!iuS;fg2llw6{UG1Ky|NVAj*?UJu<_Z9$IRubsVhJhB zI|(n#L6Dy*R_&h2i2z%&rQHOwv14?Dk@PLOx4zXdOvwFJ>WT*&Buoi6QkhyxoD7hf zE^=phYloeo(u0+`#5Z;2Hw6}#q#|7+jd4RK+8fPinIfZddV}pSgU#=KOz9qb>X9*< z`D#Bx?+x@W>4j{XW?&Qba+ zfgmHn48zLJ2}u9u*(i=YyyfZX82n_XsTq%! z@;~vHJyWWG_JvA28Rj~i#`*pvqjYO~$K{Mr=hE!hn6VR*vN~BXx1j5P$5m!q%pcOi zXlW0cnTd^bNKs!rOk4)7NbTY~b9Ten#+W*EU1Jb#8WTq!RAF|+@s2>C^HF4$ZXG5y z8IjB^N*HiRfdflgj#Aci@2wHtr8j^Txx?&7vEVhCOxlo{+$I}OE)b-J-;3W4`c&wt z4%SA8W;Kt6PZx|ewbkfo!|3_%uoA9r@K^`Z|64l05c?gJ82LaLunZ{Jc_%F|sRC7L@azP3yR@*y{cmNwaQg3mdmQmqH)HFdaBBaV*ZD>r` zz$7|o-t0xmA!EbWQ>@3QM-;gr!(x^YWUw(B9tVVonV{j;^xXr`u~jfse$(4}@Ukg- zK+81IOf5xyBWL{GQ4m*}_!h6oCjZT-WhGunBpb@o*9T;U9&lWm4ItI8u+^SNSMKSW z#@8Fie;??q<`|dReKlUbPBvb9OlB`DnmitoaOO5 z+n+omi2bvpJQW5Fo1+h>91vZGv-|E9u1{PdhO$5z`Y6`c6!Z?R1E%(a1K)N@O;y*E4sSeH#&lN) zIxe}Hh`fi8Yhtzr>G&kpr_5xQ4EE-_hldOX541eqo%1X>oMptoXGO+$z6iemZ)iz= zDT06!Vb>;^*UOIR^cTxU+0(Zz4*{=N#m>xBPG8Tu%GP=pIW9RD2IZr#QtY*&sc662@Y zy{i890fZ6>8XAlk-qEx{f=a-O5diXnwKfWS$5d5rYwf<`b)|o7i{-)}O%PB1t;5)9;i}!VIYpR^zo>*NXi;KW@VtNlH z(q8z_#D1wkHLQwY!TT2-)A#szGyGXgOkc7x*C=j{rstzv4&sPQT)WceSc$m!3+ODO zP>n3-?+0Ov&5${|J3yG)Y$!maOe|qx#I?MLnt&%@(M+$49D^wfY|^|Ow;U|`jz0FD znr&e*wSf+CmsSz3i+-pj%*wKUL@}dBsRqI|#fRRz6qaInGN&!w-htaW>@SO(tSR?F zQX!EMl^@ZiAW{zI+%?bevw9LU5oWi;FE}?JA+Gm6nZ$dcYa^;br zsVAMf7MHsRtRP6L!Tysdy`z3L`25c`{g#^7Sbpz(Sd zc*R~Y@eS)`A(KFJp(bu{Nit)G#^hC&BeMge&SD~4UM5_>tLH21`|N}cU)gBaIm?F` zGgif^q~}D?`YGGEIc2-@QA)Dr5^(-`oD(4W$y2&Qrd?WVNuOuy4wUczGg<+unfvv^ zmSNx{=ErNKR#YPk1fK?1$&iU?(t}K4d&y%H=32KY)=A;_&D(>P;fTi*kJnJRprG!% zoDl4G;T#@IEg$)UbGmNcrb!!L3u7LmN~9cT#UFRQWZYp29*SFg(`(&`(CzN(sNPFv zKkahOVR>*+_Ab!}l-GRYl7zIHqQyY6-jHRzEmF&XBPN%T3CaM1t(F5JDl5nYJm#@v ztO-?A_V<%A9rGSN`19p^CSpggOr&uK`c*4ncD18nGl)o0DGj>q;;jVGx3&(ge4uI? zlC3j!v^LhBg}^M*@(PGM>$Y*RMSAr8CUa-@4+Ar#=kB*=7vMi%9lyWNUHSC;6W$bW z=^@AZ6e@#hc>tetzI8i;U8}FGXm#9%9P;`iCIpbKdmSTR58g@$G;{x4OjV#62rK0T zEaefHN(BL*&5W3tx(i6Ht5_}04$qF5`#w)po`HC=enCMK8p_Bw;|5WXC{(FWsTXuJ zF46rkcFs}$DBFTFIdd0<6f!p*O9at6XTT(+Cq)x=`l9@fnZ^V+0X6yQ)c89v?@RJp z+J7)j=YV@8i1HI`^*j1}JJmf&zd>{+%!Or$1S);HfoXnD)N!^O>cx(dzQ`u^quBk@ z+SGkelSaot>9;_R1R%TeJ1%#4rC$E6Q=i$A82DbY>_AMrK=xP=XM`haOa#}C(K&lq zH6$%xaulNHh6}7LT~Vog(UtN18%DPOv`XQ*{~^Az>{WSmE`IYD!-SC1*~dU0)Vc?<@)X8vu&znf)9Y;6jQ&IZr5%^jY>BqfJh#n_&e)Sp(6?tuhLvH12zU;G9o)R^4c5hTF^}%w z8+vg^-Da@w<1O0Wd}cR)K`vDF-lG_Kx595P^z_kOmr$)VIlUhC62=N4`7KI4fPK>=P} z5YUHx4NfOXy3)$zq(J2n*tI20y|I*;nh1^cy3T*J?02@E8XiIFA2}&|a%b-)YyBmZ zEBnamQBKGa8ADsUq*3FKiCT(85yug0`?&0MOL_rLAa`;4su^loXj&%utIc7f`PTSD zZSz6DOE|`MxaM`D7JuM47ld+OR=t~b>q+N8&+tx(O*=@fK8nFpN;#xPO5=!cGaI`z z5d`8to0Tf$JuTr=Pn~J3N%IhB6cvU(ReLIA?+jLM2(eI(5HwfuEiO|@?4hxYl6E1( zA+~BB+Ijt+;q82p@$z=nIwJIg#|)&sXlHe_n$fOjZ6^QQg1-Vpw)V9>@}&12FtF%U z@qoW5x5_zL`_7JKlmBhT}1j+pwFfjBD6=}}h;=~;;llk&y;6Kw z#Pi&CGe%~X#<&Olb|sK&OWQ%_Vo+`5oTF=lh0Kc#FK9$D-^5Z`BdB`^J&tTPr%Vh0 zv8$e4g`xa`3{YNK^%0|oCTLg~m27bPnKQ{H22oXmHN-8`be@n4t zm>`3ov)YJCcC3amb$qyzPk3!?E(mBwH-lG(FUuigDtgf}{t52ljataL4jIf#W_L@Q z347B?L2?6QNuL~zm7ULX)i$OCnYI2X`QQo7eKQmSb@Vx=9cHhG9AUNAn;(^B)r{H6~b-7AyfO*lIXJh9a(VZ(r*p(*&rycvE4vo;Cx9Xf#s5X z^u4b;u@P3Q9hjt2J;F0&vCYv86s$^JJf>dbJgt(A)XWun5Ter=Pj2@kNq+CQ%H~gL zzM8tHuy^%th_HBI8g0?CF8(BO;0vHHA8~N}0sCEsf0&yW!Z>{>;F$88w(!F#Wcpk7Q(PUiKUy z^n3nPac-V<606Ey-mqb`gLiWISnn)6JZ$>%a2Y@IvoXI})3X_WaZ0#l()c`X>n#2! zbOvS@!4C=Kw`0(?&=x}uLBGOZ2N##-%P(;kJGQU*oK{NZD*OxS<%wAeRvT1$X$5SB zxEVQ>!@`1yvCiXEsqKWssL+Bmj(;)yo4tcQD6*}kV(|xP8z40aD`^?);_n?v>86%s zJ)PZT`WLrf&uPhvLc`x)NnpKIq2Bl-3my(st}$TBo8ZGL?vzYEQyTv7$xEGYbL5fh zDqBu)mMTVFE49J#R`}XDxc*yLkD(KqW9?632A)mJ8WD zgs(F&h*qZtM-*ksYMV#=Cug9{b>t1ROiPSf6evOD@iaD@!;-%sQ!vt4DTA^4{pm&@ z-^wm^S&rbbjYyghT+{H<-?UJ)^ompVU4C@VuWo;yY{8Sd_s!xzx)eN`_oAUv!a{!^ zdcFQ-@u9F?Vy@s+O>Fb=ECZoSVQq!4b$B2##L&2VNqM`Y?eCK$Xh7UxM~*qNx7I%) zI#-Zf=MCszf{Gw`H$O(L0faaV74E$0f`UHZ5b4gA|s4puxlr5N~K|M2@pV`NQ` zl`BJXW%qzlN!n8=frdQx7CXdnkGT)?PYi+DKiOc7zU&Me)B_(&nOI5T9Ijv6NUEIR z!L|R@wT#kQ!bHLH)$5?n>AEsGL1?U2<$<{Ai)mwvWhYyd@VU597|JX( zmLHM?z4-Up>uFNnu|B@OX}NcZDgjAlE%GA=y+ze}h0_jUKu4KT-mXuIox*u4I~rP? zaeh#rg4E`xWP^!s*~Zk&kske0`Ic($7BcVK~Kh1!AI*AX&npQrPk)6J1-dOen6wQT&Ni!RrAIwCTG-tR8Mi%L?av9UI8J9GXI^o=3X>x>AlslotI8$Y`ukGYd4jt zhs4@IB8Hv~tuKkZLLbG`9hvY=wE~ze_jhLHRa5{GjAD_~zMInQDvdwpMu^thcFjuq zj%D(@uF1 zQ%%yRm^H0kp=(~Um<9dBG;0xaBioEa!fHFc>0bDqa~sIzwMLD8x^wH+t^T9U7VRRV zvfFTf*g;B^J}d_u=hxxX+I5w z^^uGtav-44`ll(;H*Bvc(8i7axY8X0HkPfzL{{bYN=|!5T9)37!d_NO;AJk<-^;Lu zJw4*Mee=uQ$-adVBIBEcZtpiXhbAelKE$8tiB{UO_E;M(p?#p{+fGRp68GMhe3Egi-&}Nnx8aA$?Pcs9gzb+-^gCK~V!!6RizR%d z4!gd0f%-ViOMZgT36M$^fX=IIE^_}uEe$4O`T?i!WeN;y0FIDFcmFSbjlIaLh_iSb zBvrP45N4H5_0y;Q?kWGf>vy<(%q^-H!+>3bxBp1+U=Om}{nf*P3Z=>Rhu2b^^~A0^ zCy1ZSX17wJ7mpVzJGr4y^v>~xLXZ7~$tXH)OWpQ|&-Y7rrTh}2KgYN{%=hXWrCb*~{5&ZCyogx=#1snb%n`_ZxXFu(IlEsX zpmDOmn(Gc*h1kX9p8g$(8r$N63Bjk1X>a`Nq3_*>=GDyrtqbXh@_Ct*XJA9TIP5Uy zOMClXh_(KWqikGu^NjovsO_=$D{ag3(gF#IOMlR6#FG0%TS)dYDa#whu)mA6?d)C& zF$=0rjjWUWu=>yE?Fs(g1`p2g5PxNR^8WRItCC5M|8B#miI)OEK>9x&lgRBqab=+I z(2f0nzOCAPzw)bkU4qD76`*S+W5ZOF83W<=4fQ#sCG)K>9+|>S4Jt@;AkKa({O$KM zs`al+OfzUe-v#V<=<5tMOY1{xqPj*jK1vT&Rr(r<7#QI)vE~iW4>qRsdr;NGP@$@z zf18WySvYY`3n!=sm1%frh{v$ouqq0Oz8`qDlpWMjk0{>6(NY2W>y9~D9hnwzJ4 znh{4OWt5nKfk*98te$6IpazkP4({f8PwHd9*nHi!Q@R41nOzLp_Mylo3(&O@>ta7C z6w6Q@k;!QqJot%UTW>ceSBw8#{hUX_f%P!JYZ40mSVS4oTzQrqG<{5;*n&E*_kq-s z3yX{4!~2v-HYC@^168#2%=V?2I_bylUTlPD1O`nyL_UU*YQ9wA> zQ24DBjPc1$10#y;UZgH~?9-&?NLZb|r9>Bsj41Q9{%g>MXg{<%(m4M2>)#F><)h`s zc!MP4_*(6BsQRUJ1lVgUb0x#}i#}Qjc?X#r8Ts^vw?byYrU$4qYW2x91K(fBA^7}wj?XML|W@71+<*J>+leTVd4~B+@@DS(+ z3Aa2|;kGy+RYk*#`;I0LklzH97ZoCJ3X1CUdW*jNd>%znNgW&vJlhfc4pp`|s47G7f23D+T7Lha_vOSXCSPW$sGarq z_HM@6B!6q!5cP$yi-;ESSCcwlak~=QdCmf?ct16*c8Qp`Q_iU9js4hwvaw=lMJjN& zdCNnfeT@boh)RuISU~(b3Oqt?)tCDQbz=|WeVnxDQ0WJXF*Bx`Gn>Dq(%x;ljCFOy zaH48QPi?F@6oC-a>K7l6k6*>K94`rC#>cTQ)MO_;OdH2neOiN zqiwHg)Ypew!X=Q)P0WbQ&uiXtAE`3Erm~d6Q*)pHJP1$pe%v0IdS6#s(CoCP<)lP> z14j6@V?p)7E7foT_&H?&;*O-;F?3s`kEz>`8mdhD@r7^w;!;z*b3IpUL;H( zG;czT{x;tqku??ffu!NO zKZ|1(o5=92!6236dn|qT)wB{p$%<-sZ&(RWsXA6^*JWXRp2p%MX0JM$?5UW@9*GLY zwZ*ov5E00Towt1S0-Y;7iDtqJa{$5>VND~zd+?%EzW!~bz?W- z>SR7Ign&RzFU0Ea@4}f(>t_)y^Y8dBDydGBV^1!8g;v=oBx%k!9!&c_eA;$(d)Iwu zu~RGTWh^}gXoAdr3)tQXL}lIWmzQ$(UrzI!JbB7vQvT$EW`>M8XxC?YnvPza`Oz0d zAvy>0QH?}ztZ&feMLy}NOq(_IbeE2dRkF+%i^@+Gnd91ReoDmgZsV}9p2vyor(aqD z?N-ULqA2B)Up?Js!w)5G-UJ29o@kvs2BfRar}W+&6KMI>TuY3(CMG6USNgM`GSX@z z7lo1s=yL7^HBq%t1MkExxb5yBr;$6X$rC{;M5iymMo(GALXD@FpNz6I!_{|n9 zt2Yl%%$0$zxk^*twm}R^f4hWly_Du$)mv`WI=R0nlr(;gb7;5Yq;rkma(4z=P;ozx zp8jwg?w6FgFj(UfTPF~f&g$MmKP~2dR-5j3wuVrD6PYlQGHs3BCi(^LiQ1hmzHi{u z9vQ(9MBhNSYlD2dGggmdtz*BAN>Ka5L$x2DJFREk&5$w6DJ{>6K$lM@HSxr_cx(FfqD;^ zBnlRCI5b?@z8r+T9Z9n~`J5=b?tTArccTTrGXooH#c?-9zdAWmUZJqv3H)rDdRk1v zIJUq>6VD|-;nf80c$lDfgd`R8w%8+VhhkH=JemQEhjXqwn=)Q$jnu#0ot#P~qZiAV zpqBi$_4!{3I%GwyC);vHGc~Z4?xS}{3x3`$iyDDU_ll0J!NHlkwD4C1QH#VM?mFFX zzntU{V>9O+DQr6}ycmlpAf`VzjH=lWbP88?V3OfF3-idhqiB8l#=E=i{ zB`FA*lJtGwLKApebPmFyH1~snQ5b6@=y6yk6;?dsbT2=RKkOql#T`UieR1=ztywu% zRn^*c`e8ODR*;Zc;zUe0DjNH#sGUs*@Q{M~6|4dKS-;GdH~*_UO$@NgIicL~ZWfrE z>BMLINpuvkRB?d~a^cJ)BhedaJUlXClsGh!n(23E@bFj1DScB@x$nc!=EgEF)+L$l z0P%yeU@|a(AgVRGO-w0ptNp5fNh2XU>Bo!CVTn_;EE8CpSUg3Iyg4FsP~hlOFoupb z`+!{2rt_(4dM1cFnPGRQ4c^RU0$cUt?p{VK!4=)%|1hJS^X~8C9gh>|41?HJ$%K=| zZSrnXYWpPz3AyEhK-W601WNZOKP zi9rO#3m&A6u?KwO*Zi=E?+@-6$yMY)KKfP@5GQ9H-TDk6{E z&nMiUs>7v(L8kq@EDC97?V`ugeX zclxSJjOH92j6C!jM_;2xQCaXOyV?4u{dM}Hha80;4gl2V_moV~yZTf~^N5&t<#ZjPG8thtri!4xhB$$w|==e7$`L>!l!IoEbCbxqlHh?&+cQiH2p zSii!RwILfs%Ifc=a?v|7qV9$di$U2e{*N=jW`@$X1c^Bt{3j_9?7E96dpo_oZVUOVszXLAJ~jd9ohr54^}x(5xP@4eU};^B%9YzFqZ%==QA^}BPru_X zYp{pMqMLi*uQZGqDOef%gulfB!+ehA5qYGyfieeD={DN4TiljzzumLqI5p6lxBeo* zYlPPT^Q5n{I32&wfok!0P676Dbx-o&z&mwMz5}GQDm`(e`l2UHCPH(s#)S?J9>v;2 z1aHzm%>Uq3&2wWhGZFx|YOx~!`tapdMzf@@2b~m1F2a+*IdqsGgT=X%Y<^IDAp*QY z=98*YLZ`14RCAd!ddcv!$hBjAO?bpYjG>h-J4sI--2v#+*mE(HZSXRBpkiF?|kA zSnxddL=d)x8hb0#=l1o9G_tvZBLOvdQ~itaXZ7jZUE4m>y=$5_LpEVjeog#gCW0&O zcM9({ot++G#>Q4(s71hLCWz6tgd>{EHt4rzcIyn>i;-I+DeH9Q^5Ch}&HAbjI&CZe1GS_lGZkj-a}+4lGx< zUdOrxi`33K^5#{$d!-OM!g;T4tKvt!TfF>jG6M|>MGZAm-?7mf(8Gp%&Xx3_PN=$ApVmP1C0&}{|ohgDRG2Ae#Q@iFDr1~b+a zWr^+FBY>(etn+N$orr5|g6FtEeGzeQW)NFtxQ24)YLuR^2~+d9Z}TQYcy7jL_eu0+ zrLUxIVl%Jw_C6twJZwvnVf&o@XjeH0AB}hIqF8JFM$Ky!g1g&|`{ND)q~=XHMO$ut zuT1_Wjju-^H}c1o8~43g7f;_JJ_qtXr)c@*R){o69P&6!sOK%&j5vuRYrE1}Z5bZz=t|c~!B=Q~b04xH zP*Wd@OgK#+plW83mT-|IsXyo{43Hw~n6;eYZ*i=#bm2jt{#Lf<@s0T~setGonF3=M z*hn<8zPf_vv{`Jd)I;tG5d&?hj`_f_gW5E$LOd5pT}m>3Wd^LKTjI&9nh0W^K28P7 zkA%~6_Esy2U4`Rji8jSiL-it&!Zn z9ssft454Ptqkr)1XHi)*FD%SI(9+x-_kxl;S>7B?Do2u}5uFQcuD8Q%qhMYV*cRG(Kkr|m zHX3&)p2fnqH0g+<#G8l(5LHv(-R_`)kx`JaK~#CIbYg`ZRjz2=AMM)sKklM+l*qomeNvt< z^#$KUyuHsK4eX$~Ln4QahCQVL((8G19R+?d^Z<;AH3Y6r)W{*(AWuk0h?dC_{PKj4 zcrAt45@*T=i3Z*$c@1K}I*|B(>+SlbRmlITzyKeFan(goW$C;`gVh_+eWcx1CjnVdaN3z^Ae`kt@W|ik?O|;@&S$q0?0) z+g?MeX`N?-*i`k^h!k6@enp%8v9pucYb$HTXqTB?#34&o&vl-O9b1roq&!QMCo9gQ z%9?U~=5zItt!^A}Q{=V_VET0J?Itc?aC@d@9PctRF=C4F592!a>xq;@qVO%qVJbFGQ*u;`hX8^xVf zpJ?QRkX$S2v+|oUYk22o_U`lHbUf(G0YRRo343`&O;`@Qo$J68k|P^tZpqhM6-MU#Swz2!>h0Q9 zXxAes*3K@oce^EPIy(;K@GA&|#!}jn-ziY!g={!SC*bE(3WyaMstzN!S9&ho!91t5k~^nKyXj0 zACdJ94XZE}K0LfKw8eVfhLd~wC#3{yc4{hK|pAeL6(*6~?84#x~6l#D1zFWJ3?q#fHdCswZ|&@0w9< zG*0OHQwXj&OTQW4$XE>rh3yiyF8P?GsbTse<|Y?>k5G^mJildunV6|P&LP{v*{>wL z|8rerbS_0=F6}~D-mp<`7V^MPy=3$3y~)g>i2IM`_XXamX-x-@m(k<}bGaDm#*^tKB?oens8C5AlBZ^Y{Wa!J*al z=joN|DcM18qD4xxmrcfOGW-(!1xA;@Bp6aP*JKQE;ZNPml-7M3HudQH1ZCs#P#rVQJ8({-ElwmwA3>N><7FvM&#t| z=P5u|31Hcj@PYcu=v5fcnra!*HwyoZ9eu*kiP^&wd`^){T*k%GdaRB9L~pHo`?yDU zdAk)Ob#TL;F#9O0De8uZl)V0#cz-ivXtgii$toS#G>zTk6iQKCJ2QZ7;xcl6 zb>(VxioYdBx)sX0Su%b|^Y6T}i`ELyd)1Ec5wbqhX$FLTOUmjI$*VCmezbQL$3^>! zV`-h*psch4*NI?7KDzl*V97dFsWWlMt8pfJ?if&&Bk#xHnzOk2?q&sUzGfv&>lUr4 z?$hLg9aH%1oZ#cu_eKRZ4c$Dl|1+@UM6(PC4Z7Pc@T|AaS6#pPxU9OHuJQeA@dJcaLTvCY=k` zX~+HIN++k?XTbk$L}4IzF_tWavQs3(%*mA@suMwbsHHmh#0Qk)@|AJKW)OTfMzB8* zaw_J&KC^(is*rdqY$xE_qxTr$UQvXP%GFps?#GdLHii4->Y^ru(mhh~Am@$x*<|iN zu)z6$hXqg$2)CiuM^bIS6zn^etPN|tV$-pTf++Wd>FTWMr~lAAu&C zf(SA@??5lIQTzjDs+a#%NaYMk{xMcie+sWO9oLAZ$ny`|En-5O6nYVQ0d`)eBUT6B z{Hc1f@ewOv=iguJ-~R`={_$|4ul*^e1{9N^{}P0B&zV2b!020w?2t4{J=D_d0}T3% z-oB7tliMRIi*_h`)p&^Z@A)O)w~;TrldzsrYWyll@v3tHByx9&)EXj^?6@`{2x-Fj ztk7efQslWCs7;0Uz|2#6at*^&xuwIG;b;d`N-y#$xU%ju3h<|?Fd1=pun15@a$TeL zg=Ec}4=gI!txo2zgtxqkZ1!J{Pl@HanLa+8@b#;*kL z#clTA@;_u#M84w@F{PcE3tybwB>6NIdK`U~WSha?O*vzTctPq#$- zxz9Wz;LDZZ=~bs$Hy|r$ZsedlXMS4@(BLJLcNd=rGLBsp$)>Z)Mgs*Gbn8;%%>4Kr zjp2eg)3fsEoZ(;>%&Xtbh30Mz<~-NUY)OREy0Tt%^)26gtd>@xs|!^;R7&W5b6Iei zE(WcP%Fw>td<7IQda?VR2kH3zJ$jRA_6a#^mdOhdZU9cex?D7t_* zXEIgF0fLr8W^rAE+RJR^@TsSj45AKT+=wgXPa|3X5P4s^J6c%%h z;N?DQW*A`zREq7;IIv5st=bunELMAT{k{H`@mV;W5j)iN1N1*#i zqtFIR4Y?x*kZ8bi=t1u1!p(Hx?0M1zU>5h;ZPTmOWZ2%m9% zLagJ>_Uimo<0l?Bf* z1njn!Caq4W=1s?oB*(_2!{uWaZeLh+8ct#atRe&vm-rG*QnXh(iY^?^xNy;pj;Ic!Ew|D8W+p74r0` z6u4I*Y1rSlVXiG(=l|g3cK~j00Z=oj%`&dG{JuC3k};v;|LTy<{6v}A{A|Oj9=~)8 z5e;_1g9#4Ue zsh&Iubktc>e9pIH;joGOg%faU=E-R7215!L`wuTm-J(~nTtf%Bq__!o{N4~FksE&r zz)5vmDbaG@CTUsTViR-ubid|HTNgo5A&$Grys6PrA0AJbtk%A+5ZTGgI$6zO^)y(` zF>zwi(Psi3Ik{0B`8HDqgEygs@>whde!{! zyH5Saly$t=#-*heL*yHf#9F0%vE+02VP9LsdbKORj&O;mQCR(S`|-Qoi;F)vs{fco zWP@ey-N3ejv#tV;ywa*yNq@gTq0(XXiBar+Sx+|cd`_W>=qSqWYYb!d%J{_OS`tQd z^Mr&Xl;k$R<}((-6$L2FyI}v*r%5KxcnoIKIqh8cW9Q?++P4ZzwNBksdY&k@Rhv3Z z-{d1t>h==a2^Qu_6^*A)IkNYe_dd{RW)*DKOoc4}zBmz?u;9SbaPWp`gSY0UBy!^C zn-CaE*q9C4!+j}Qk*s-@wce*1CjaeYGu(WEMm}H zdzPkMlz$TGA<(R@I?yaKqJt~s3j*QHe46wI-=0~xmN|@yXk-0INEF`)0I_J7%pY4M zhIHX1RzlTtf+>|C=xCth?bokWrY>zOb$y3x+?LupSP!8?w0x7PTe@}OaSrcYt*-r! zt5^l|GF-lRzWS^7vML^|S6|xpodmZhajGpQmL#up&iP%#odYdq5>cmp27D_i3cRbP zH5-|m_UJudP2^5oEYQMmsm+4wsDb_VU0>f~ewOv`*tXTy2gbvMa83u(uzRr8t^JQI zI^!*eHwu5Rn3+f%a*ThPb!Ar*;SpWM?ic(S zPNQgO6l+OOWoInPvP6(XZh*)Hx?2RZ`#ngjr(O#}MUBy4$$NUgD1J@{L?q=kXx(Cl z&am9;RzZ7htqtEw84`7m>B?=C^8Nmfvxowo6`iY)vbh_o+fxsC-m^zM|JkTM zI?udadMIFIz_d4={{2YVG#v>W^zY^a-xi_Hi+=*eIzM^Iq<9lu*|MV*bQ zzg~6q68>Z9NLRrDX}hNog`*F)V4@P;B|>%f8o>A6?J9}t?Q<}b07`S;aOb&KddRDV!IQ#U7@l87h}=P64l5Q0#9 zMgqOY5!=31Eu$hyJhN>|Jg{97UiQf~EjkxSJkpY~Y@s!wUUs8G&6LjECTzeQ4i|jp z`4>-7{>4)P0h%|_ZE#Pf-0Y)YItF7e3zNLrOOjkj4UDvMdkv2T{_thl82^KYI-P&> zfE`Z%uh1lM4*^#ndfQLxtEvpksE2fi=$VgYtj-pGtn~kesPtSl*Vprr#6i8thXh!a zBYb~}SILR~uZT9eI5sz%@fwi=HvxwaJ};cvy2L!Qdj&VWC+uFupA}~gnS!S#srlZX zS;Jf$le>w=jNMN#p^{PHKg#%+_n{yD^xz&?NBTpgfwX*tq_S>nwaQ8dG6dz<9*1#- zh3TEM_lSQVf#$Dg!#ZUE2mIC*z$ON&L%X}rA&2DfEWf*WxIlGvPkt#qG!6G zAN6X}(zmAIoX18&B251GbrLD|e^Wnht82Rk$3Fk?$g!P!AadT}dF#%_@!BjoRb7Wx zaeJ9#D#v7(Iz7JkPrJH1KQaO9f(&}A3+9^Lco0*$4Na#?7&MHWRtJw|EI{wcgUems zsx%)MPV)TW%#pnQ@%4Pu147nVi0nT*%=AOz>1a*j>F7_Dj>8F+)o^h~W3ZX3?qGn? z>hEb{t{&&9RdOHx<>ewz*(fxUrbAbl_~!ut?ocf81Ws8lW%x!eVvTjb!xQ&m0;i68 zoNC+c<-~4aa7)+ewk0=-aPt2z5LUlsU&mfnD9j`ZA=g7`y`nfJS-F%g`}pw9kzGl` z7iW!+n^M9vJtBfyp7vL)u2Tpl^;A@!r~c`QzVR2Sc70Y`MM4v|>2uT7Ta`{oi|^# zO{!6))EgC_jV*}ST<8MMp?vgGI_Gra#iC~4bS{sK%guNSXKQaEM+mokdr7P+{Vm@a zQl`h8#W>i}<-Y+Qk%&o^DEp`+VgXfmDh-LB&a*zU%N_p1Q43^FuBxo6 zJkb7W05M&eVKraGP<-XOW1yc@MBx-9^^IjPZY_KlbD?~gYUBoE8a}A^$D4#vYrkM{ zu-}~xNa?{3A0BsCa`J@zb?f_82`Hj7(>zip^2q$=75+zi-x(Ffwr<;qf=Co3i3F7# zMHG+>f=G@6O_ZELq6C{Du|+{r0}>@C2~CoWa!w6R=2e59z0bL4yz%aR@4jEx zp?i$o-4s=;SFJU_`OP_NbtOBc3!5XOgpNl^ZY*9b?C#r;bpQB}{^<|=nKf=zDqQ5U zNHS28r#`Mmg9)a_^^aWiq6S~vBYg^SUodrW5lfTT#<`pfmIbtbtSiu?st;ze(#o~n z6Czbq3e}%!+<_-auwfqv`65GKl1Cb~2Sm!1>VZU3}s$kY>})`mO0HaV%S?wfsU z!LqVOlf5OrMEL}7rRDh>%1y48Vq37-9k^rFBBy$U=G|t+320=o-E^9&t^lCussg|4 z54CQ{v>6a|eDhprLzA;Hi`+}n<%o}eWJYQ|;Sm6x>dYG`i}zRqh~?rmK&J@}K9h}2 z^^+JxENeu#atR3M{ap{GKBZNM2_aFOXY@Jm-b{S(g_6^k=-7mptyp*P*;f|v5xzfG z9I-S$1I!# z2gBfnpar<{%t%c|ZWZ2Ii|!lD$vgt4vx()6_;&o9zywAkzz=^@Jwl_7!a^?z*MU75 z9+H;|B#Bgpp&V~dpFB|ocKq*;Sqrn;<-MwU~ zJNsv)C)@Y*UQZO-zw0tY>MGVc#}`;)gKnY>K)_y!sV4MN5?Ld@UzwOzk=^I`X2P)8 zbX8rTsNTB4b&reXh z7BhIf_EeWo`3z@hVNhKjyu>MRqcG&S9S5k(`Kln9 zk`V{C9=^;%d{JuhHG$5o-+^Vn>qCcm4;&cH4GsHvl>skj+s2!f0D*J%UIctAR_P~N zE*~!*v!y1rqS^$0qQKEH;#W+$9Tq>hwj{-DP^Cj<$Cj+x@ z>?mZwv&S+`;gfZ`LXCUe`O=!?a_9ms;!^<007cr6JT_nHn?@6K93PFIkKUzI4>|l7 zdcEPLYz5Q_a`wYZi%JP6fr);*E(w6MLm*@$24g!$61eHj_8?SBzfR2m_sDlQ$b3`~ z1X`xf^iiVf<@eF1s>0B`Hll=4S_7uRRH4u}{uFkl&x1b z3=}KN?8%05t3#ag%fs7S&fk;NTwpW19AF%uS`REoaZ#*zR<|dsQcFgN&;yjhMt;@6 zL+K&ox4mD?Ym*mT5l$jxci_oCHBmDZgd)d!P|@%wtyN zV@`3lYnL&JOughM!Asx3 z&d=Bg%FlRe=pj!{oFG@EcgiGqx_%}W{em|c(do-1FZX%nzlNLz$!HbPf zZO!&3JIu9Ko*HnQuO;WODpdppZ+7`(-o0c}F-Wd%#B1nLj7HFvOO4ZhHxceXOl@-5l>zee)TOoMI{e!I9k~na{mwQs@(w0F=}h7D zeVr=<<{gV&-6Wqk{%;7}nB35`Z!j|Ao-Yy;&YQ`SdLALA>!VWP3<~K@*rdu*QdnK3 zw9+Q9SMnxv&7b74X~LyyS@)IKzM5uMT4Tho3t6@Gt~oj?plxXKM^tE%_O|7v+3;z7 zSm|B7mO+IY5l|~Fs+@ZYR~2xex1M<=7jQQO3;ZizE62G{k{TjDH8myAB+O;f`9{}U zmi|Kw;0fC(68~p}yt<-oWgV-a!{%UiFa=V3~wBB zPt|Qz1oQ=LI`CdnCENBpJ43RZ3k&m#!C_SfrYg1mNdBl>IdM&BBL4v!e@^XACm-~% zdc5)NyNcBnRUP98@apgvFcaC>7Zhb11-@C+UH;!D{BR0cHzvvy=08PF6)(Q#x3*nL znx57@-fqB;Cy_PlSBf*mQb{N|Pz}vSh`{WVM<;9Hy z@rS(y7*E1)XBA=B%5+&ZFK#7M@882>&I(*R8lD)1kafS+v^x-m^5Q$usm>mB8HY{c zyKZ7jGgfJ8OfVs^K`-xKm5kQ8xpxeTZT3jUAXZ=+$dAAZaNbS`+`>` z-GU_PPk?L1Yl6J2d@+xIJW!IPyJ0WVk?*>#XM}4{Y*&CWO}F{p9F$vpTLY%o!9BG9 z142U9!O}RzL7xP{C5f$bXgpDVJ@mFGyb-|6WeGp6Svk_JS7?{NzanHxG1zkVLbvcO ziMOh~YIVpCw-OfVpSc~+`rt3ezn%VCXxQBQ<*B9FuSRG>OxoKKA~wMni2739`!ZX# z7d0vqzVws=MG;yr^L$i^mGe#l6Zqy-CH%_$C6ON&;)QOx4!2LkSor4m3%Tvz^;|sL z|6pi6z8_)TZD6OX$ltbZDl+B)pvJ*s+Xxov4F;jqggn0Ss%?8sEqkJ&h$$u@rU+?f zF?z%Z%q5@IoQ6iAMkxPpp>dUuW__>_(}!({&1fj%95a0RY=^r4I~H|+BR)glA%1hE zXHla8v21jKi=VGVJB(P1+2Gd$Eaol5{fPsC)r_H?*}?E#`sD(Jhy*vW=&6dD;EMIsFL5G3?nB~wQzj9o9wPA+4Uj$Y*Ru|5a zlT!wlN+Ivb>}A!CW=n~&h`3}eDkte}2PR-n^UkJDv{&rQwq5JVkGJyQb0^a~Ujh_N zk^B#9(ufG!-h7=zKdyDommrZxsAXCc?B;nY&Me$3O|e>GruCfT)l`+Z0pY~^(pezakQCL;{kQTjKS6_JGOJ=wC=Mx)scb%tpB`-G5%_>JGbbFu1@J%Q=Wt~lmm2z_y2{$)db(=u_KHex|cMgFe?4F$2PeoYOvoY z?OSn5O@Ik$kFzOE*L8t-XXxYG0`RM73X0GE?Jo$|_R+qXf@ji`ZHq8Fg}}Rr4rAFh z;%mqO{~k1KRZj{_$@?<6ukhW)v+^tesk{?PD$hS&e#m^8lO$P^lLzo~4lDcea_GOR zEW`|XN4)FTz{90}x*eTFdZ1&Bs4pkmuceRLlkT*P5c$dyhB+#oSr!+__o>KcN97vTkM^sIzLQ+*)mDSawqIH-# zI5LKE)cH%Ce&K4!p?4R|>@sXmcLH^tUuOXBgn%;q z{lNb7t`Nm0$)*1GHqyS}8&TL&*t;k+0XZ>MUAE6$5S?BC5c!m$R(rsCif4$G}p`gV)Da+%l@@ z!lsFxh$XpHUnZ0h)s43|k^0=|;YPK9P34uy4ovy~6MEQ$mvgMRrxsb&;gHjPM>BAb zBR?KV6>3~0@eXa-^S>Q654RBp-Nq(Z8dBFw1MEXs-J2P->dBw zK%ni_(cc1(>$zq~Mr3zvCOsYSkmz8Ddp@x^9!Bdh{avoudS?ijzM}Az+bSDw*-pEx zeYg>H%_I-OLg7uoVg@Cfp@ZeM_$^uH1&burV)*D`PTlho!YNm4jdWQX(NGSso#R~;NmOnd=;b)Pc8vkj6VuH z$;0aEfGX3VfYlv+A>2=XdXHmJDT677x;mWM(8qM5O36OxY9C;D!n*QY3yMjW z3drvBC#1q2%EW12UII<{AFg~QDoxiy5P{=V)|C`K6~IRB79YIHl%!)Bpsc=jjc=@E zP|j3_lX6^pcJPYGjq&}h$Otqrk!n>wVZEJ975Zg2*1V(r=io4Jq#GZp*2JQUddI!- z+5;PT& zkAlD8*FG#J zU5?{B+xr_#l|xyPQg>8z<=KhVo&|xtL|l@nSqYs~m1!`GPrqPZNDR}c-^R3@)%nF9 zjZr5};ca|WVx^)(J!$G)SS1FyL$8gGye`BNkgVdkp$0(;NUaNDzgr`pZr(K*hsnPW z)}jl2%zRLT$(!^-W1{T^1rtp*QNbo(Z(dX|r}(KPrR^ z_4Uq6*{XAFkrGp;36*USHGVdPw_}!ldl?n)|SfKj-0n)K0ACAM$(} zzs8~7c!AsaMZbz*);RqT(QBahfAro!-*;~Fb{-?8FoOQ+V2udH zqPDm(wT@IJ49}U){9;_d!ptlw+t?@m3&w{%95F%#7%Q}mt@ufY*iFS>6O(y36Yu)z zNYOwh8uud5a*&|{RGD8eGDX++k7W&v!z1b3YZo4O1Wf0X_IS|I$=I2s3cOE^THxL= z-kcG|KdBxat@+HCwM^%sNHLf*d-Zgdd0ouLPABNdNJ8fz zNY+lb_hSTH4iRn|8F*W}X9f>c=k?#*yS~)ZE4B9j+;|T7sXX@{s_yia7u)Yj6dV3n z0Q^*HC>xv(vypjA*jn6|AF9OTA$3hrq>$J%vc&QPI4&@ckFoyWBa}ZAx%fy37{pw6 zuVGo?0GNV6NNG={>dXF3I#Q^%jPpxfY zYpem;T9_o|$6c>!^7-A_r@e&VgC7^{cU^lHJ${qLG6DxWoN=pch1{3_`o1x%t%Y!~ z75Rix_g9a5+S6fK(bvBOb4^{A4tg!I(1D5KweJ~x+nR12V_ZHv$3rLAK(wgj6B-#B zmOwGsf%^0cU~7W&n{^fI_3dIU^_G^G(zeC%*brH3y(2@5aZh_=;&+H>3ZE(Hbx0ar}n@9$oDqhdlJx!B?8lNb#4=^{-5mK~)nTd6j^ zF(`|vUnCTL``RqR5LZ!->#0;|FgLKLAyEE25txV?!GCH`=ZP=kx>6E)sa)l{T#j7y zW^jt5;|!4DNFh(m#gR(PWs|hpo;5gjcYo{s{VT0v#F&Cvcw41 zLK+}Ts@(PB3~9bTTKL3i_0AU|2wzv+(QRVVp7gM=a#bZ=dfnJ@Q8+_}7|gAr(!4KO zq8M@_&*utnflLh;=Ia%i;C3YnCw|fT0#G2RKQt;R-QtUOW%=$q?MH+5?MLhK?MGrn zpQzL&kTn$nn{H|THXe2yXFGk>sy1ze9pPD&wC;o@tZcef(ST?^GablY=T&4dlB(I< z5M2HK0a>t8k478(VSDG-SeW)U~i5b7BlyU589qEF3H|4nbylUKV#(MGK=My z3?8q^ns&SEl&-wksZ=~&L9I!#N-P#jdtON`av7ujWIm7R9*4>>b`oH z=*O!Qr7k_wg>l8Gc&wc1Sb`L6)Rv#1cD0L9_kT^Lx zkJb-1)f+X@$YSE(OZp<{4#;DTI3p#FA`*L;lEU~*(^BDqyFtwHH?VcPIUX2)QWj3U z^$u5q(fT@!cmtzYf0?Ve>iOhZ*x`77O4xf1o&9aOK#zBRC>{+{HIId-&b_R|W|zp6RBKLLx& zaW$)4JYS^8QI6g~?^k>4*x=g4$QT#x+MI1aXC;pvJ`n-DAhsnc!t z3io-Nip3g>`!YbP+v8I5jx4|l0~bu0zfDJ*Ce9{!}^KIq60Dqc4E4wj`ipBcJ$4Ck~^Z;1Vuu*+cA3OD>=OB6=WWpk_`W zcMu_|EENHFOby+t#obizUPdnVu2M=GaLEczlhXs7`dHvo5Y`Es5dKS4zuD)G#7Ej@ zZn8Aii&8LC0}!9>y?2mhi;NoK{C5gT0W+M5j3;$xv`=LWw;bG%OsA(!fyrA&yi;fR zcj`9-MxV|i!{4f@)e3#rg`$cx4-OerQAUj>1XNJK*TkTZoDbQPJ3jG*1f3smO{d1y z#)>2!)v_=mf9)d@mu%Cib*qAE5PA#67DM)&*v1xIFdDG(xrf;MW{e%UDCz!jrsakK-GBFn6`f1g-%kt)JU=JQWi7u z+Q1l+{IxB7I!||6eI`J8hLPZY%lrf>u|&PbEx`@@*eW?&t>Ms#_@U4`$o0;9A7(oF zM|9Q`b%r6GQum5#LRR5>6_1C5kM06F5U29-gllnbtJ}vKGdBDQ5LMIob!QE6!;{S^ zQuYp{U%njn{!Ztp-Irme7AjM{)0XR<+ef!t^0Suu52;?|NiLrdW&+47eWruZla{xG zP*}O;B7yLN5?CmSBKDvex%oHLa`Qcr+zaoreC@lVO^rDhPS2ij79oICLe#u@2^(}; zh3}3Z#ioqrhEuUqPz*NvcHA<7^}{lavZ{+F00kCJJT~bAun(Kx9AB0v>~Qgbxhv z4qnH1J`F+8sc{48c1SJuqIbUdih?IiPDG#S-X>9U)9l?06LN2|9`Bf}o%pE5P%5ao zzGrxEwxi~ogFzxSB(WZLR5Fw&;BlWQeGZ84nB;Ss4|d5*$>P|kGKaL}l@H`ilJ?~} zca^MJrW}~B&P?cy)oQlCb(fmWIrEyH{lyRo*|c#K2>MtF{ln5e|=C1T47bqjU8xSK=h9uchG3A zXkCiU`@;vuM324ZAUin8hRY{x2W?ZfHUn81FJH;VMQmhTku^$|DL`(x^VoN4>C?V>(`@D=PsAP&-pwv@%cv82g~<+ zaW{dYcm)ZkrEV}pVFXMzu(EUzDM#`R?8P9@cd(0}V?e6GXCMth1n5(cUc6-UG@uIV z?@yEYWZm5V7W}K=(UEC%y;0i-mn!^3|B(?O5DVBR(}@_w^{l_K<*`2HDN{6+#B_4n z&6sZz(tOt*!6a{u8?vmbq;K=!S29ZQ_{Oa_tx;##R7w@`LtYU)aO?#i_c)wy8_6Ku zqY+#ub5u4@Tw{d)d{LT$w;2cdDVoGjlx8FR^!sB|veSv>lRKrkwsVG^AnhM>gD%xh1CIM$@Ne#Kcux z58s$TFG{;__AoDyXnryJ>H03XNy@cYzEj9g>eD${LIgv#6?`MR0|eq&1&Nct+n#;& z=1wxMv*XV&6wqEP&BFgc_DzAZI z;*@U)f~I?T8of!>?7rzciFs!K!(l^&?CSe&Oh)v}a6o59bJl?DLK$P@9P@?t1+i#) zxnspndh7AxHWj?KP4Q<%jmeGmjRv%PqZ38Gk4j2PmEE-{oHWkHxnvJ&n-B*RwgA^_ z<$7B=4&XO8JHz~rU33#lm7{GG*4Ea6&mo73KY#o;b!P5iBe2r?evD+ zU;UBbmXMo?nM|27+1#?gl%q|$#c()wV(Z!ZzIw_rVcmZB`@W$XkYGTP0Kv&_p)In) zPBK$DX??p@Xlb2V#ZiZyNWJGi?6}$Z^!AqeG<{F42kxJNQPnuCI^=;J=2RpA@iv_a zf;Y8@Kdf#DvP)*nsCUr(>J6ZuRm;5WhJ9hcn zCG7&}20?MaqoFQe`A?Xc0DG^wxw+WN>Z-lP<k{jK_3=R6ghjX?ZZ5nhT+^BRyzV|G zQA-++{OW>#w6)-}CG#5iI(}af9W1ds_&`x#ISpzW)d}=C2p)mtiBT#>EUMhrA3^uN z-vRrO7#A2`8E)#d{;lC=I7hmCcBKPk%Tcgexg=$P1kY;qY;#j>$CRdpC(WrzrQ(1@ zd694ynX0%(_c0%&F2cjMe{%phm)Wc6f!14qPy&_+?9KOO<5^|nzdYIp3cFU1T(rPr z3Vlkd&t#^u?=hG@kV$>Cek2V(w=Pol_f**+=Cw^ccJ_3oZ18Zs$)8?eU0Bm~qAemJ z;SV8d>F{YTfJkHhRuY0bw;_6}^|g=Q)P&F;=^hYPl9nf+Af1BU4E={cEPyl&09bMx z*48id2|Zg)ZB$MfSkZReSp5L!NR!+IQlCAD9_F(9o60)tD3ueb}pdPYX*sb(tvf zYoExF%mtCPZhJi^_d29@=ft&mkI8>7c?@Xx5FnZLGHsKio9+?46H%G5UaUJpSo$|9 zKD%C*O052M$+B5DU%5;I?ojg|cw|B_s~4M+d-rZ(JYLkhgV2Euo~Y85cF8MJh@jMa zmv<^13PLB9!bn0MITbu|Is_`ng|20ThRt8C9|&l+aOA}%-dWQZb^;<|!c60RHxSMn zg!jjad%TL=xX!L$5As&|xlMBjzNvB>LoYOcThR5N3cIC-|nedg2l_ts$o zS{8AS6R57)VGD={$#pLb+j@RhGqh=Jm%nQ4g|Z`FQX-M8axstnG-G44UfooYk&Vth ze^);^#nv9%cO&(~EeBwSFuHy$()=HA0EYHo{tbr6gYsZ{5|nl0&C)tH{%-y(0Q?m;>yPIt6dw{Ez!XCYY|wwMM^2$!!|$j1r5pH?GtAQ5q} ze{i0Ze&?;Ma&#_led9t`ffr*)sVi;kv((O|WC@!1Uf#icASDcH z0W-XNer7(DI^Sv2x$E2S(mhY!&#JesxRy*X7*$y1AsZ>Jmws0G2tX^d#ctZucNLp4 zg3&h8Bd;WC;wHa9inGZ4cN~a?>fA_Du98i6SxXs2N*S)~pA%#>UfC#{NjH&!y{o6C z>e#~u?ifStz_YJdh4^}JZW9{ihe!oIZ{*$_&Vkb+zopgX+=Ou~5 z7dL~$Z~w#RPPpl)3nssT$ip@MpFc|fa%b$Lk#KZyccSOl)c^r%`*9ka@z^~xqD+Av z5;v^hFo;VF`)6XhUy0Gi3n~1FK*TksgGg27Eo0(~v-T~nle6}Th?B>=NcpS$Wx`gM z_bmVE{z{8$EkssEbK12((j(K_?XR682ZS4A|BlCjgfUWk^U$ zpKB4UA0&Jrt1U!yn@csJR{t_io{a3TAu%5<(3fK1DiD4xCgdOBsc>n|MgL8?H4~-% z3jwzChr`PLeF)%rQ&*ehpC17lD3>o}p=wXSPn_3nqgkBie~aEWl|@fepRl;Y|(+%Y%H$L8M2ZOGfnxhF1jT!@aHoE1#JeFU}VnA~&SX!%c) zALi5D1q*gxT}>^rhE^3-y;_w;Blt2}M& zGWr+rH=w#M2zPLHp5V)86g^1-6|HwO6Yi{STGF)Zm@cHvJtaFdn_K`lw z`^r;B0C`KT)ReyJYcM~5uj2laA)=6Ck(cFO?*2bA8c0xPV3a0If*^|V54lCoEDOY& zr<6M^eb~0V8j@#ML(cT=Da!Z106FH*pCRncR?d1ydn1X_KXZ=pR==XF_9uUTOa?ofQW<5!;uLf zCChRNOrThk=X-0?aQ3khH9l`z^z>Vd#%gUvgKEop$VRog5yiB%C^E(k|Jl}ayMg1a zAHSgmiX6G%UVbVAgQ;{I6C(;I7JC_NbVWSfd)T#LH3BgEnhL1Ud5EOh_M2qV^!TKpy~;>6_NVq}3r|?L zznQvF;2&O@g9Ej{I`gX?@x=~CQthIkOa5=@ zg1Xj_ka3Y`iSY{0kTYTzdm8L#hmAvy2c7DGCi_ThOSyYQU9p?Iav3w~$w2Rt`^vd` z1=Gb5JKtXWA(srRfP>8;?}CuZoEFFE4q^QM&b^beg=ajyR%^l@?|O8*Z-?yILEbvI zXKmr>9+j=xBN#mf*e8@RBM-cII5`;(&k0nT#CrOu= zi_WdNFC*(YP73P(1dwB7^EX{Yeo;(qC()UGP7Vxh9K}e9SeSXuVmycj`&6a?sjRIE z)~^-trBoR$)tFg?uqP!yXsChCEqI%a3ZYd^I z;%RK?^z+F)6soFyQ%i>eB>??7wEj$V=5*8kI44y2Yl!VR#qsFQRv&34`)xSF*0lP? zGfy5rd!gDuA>|!Rh+nru~ zeC4-W!X}uv=R&0fFKgo~6g4F#Ui`(g4<$%r?Me`g9iJHgSWkN%EJZ}mZrfa**TiWa ztm6xufrf7?zyqmX3u23*iy|Lt}{QU_sI5o$enlPtS4^{Bv$ae zJ~mx4XBTA+CB(1XkUEfDlSO@@8fR>IIgXot9sHHQMK~xNEgyGI5Qsm2lXreY$@M zIQ8b>F>fqr%R~sEYZ1JRfIo3ql(n$5F7eG8qLEe8)`wGf%7cHPqOZ+U*KP9-R*y7mq*b2(7^p!Dv9oGY0+gT&FXewW1O^qF#~7 zwSvQqw#u|iG4&UJM13-?{cdv&-grWb;jEATxQ9mRUje10mDgQ<(_^=N+ZfpqmfR`< z|D=(sOuR3miv*6skMwI9Un7t{ADlhEZ@cZED?_b|h>GMDq?hajVFCV<&g z^gu>@C~2HGy7mBwSw!Qb^kEudK8Lx~DNBTK@S3vfbH6?O80cQ-@is%p?$Upq3{Ma`Y5X;6yXhoQugC4GQt5Ls;8U@$wA%)(6!1{1wzgu!zu=C43vVgYPe~G4T>dq z=4a@40)P|_?O^Ip_G?hIG;YN^Yeri7!0#EOQmhPlh4xUXy??$fJS#1$jYIa=R&?qk zu$?coBlhQ7c5A*Q-@5gW$MIEW6TWQj6Z^vcq`EyEJNizbR>wiKz{iI-&%PCKd-eOt z7+5^a&7DXWVl=pPNY6YJArXa;cdWIjW+9Bnsj&_DS3&YQEeqe!jAgH(kIS)KtsqOl z3ZlpGI0f^VM-=IUQR^wV<;Po_Nw9@n$^7LS}QuWB#s>NJrHl zz*7^5SkfKzJwCRssH^s3yfpx2Q9mE_5!@GGTB0ei-4OWh8yU4$@_78&lMgJ*OJ+!) zood4$BjZKWj?_C9qi3&cD2v@&-_Mu=MbUAe=eoy#0kj|cl#e5>U|+@k^{Alg3?Q$YC4NP zbzC-i5vG5gg@P*Zm{i1CfO=*5!I2zdzr{mjCPQ-Bp~WW6lWK>k;vxm8K(qyQv>d%& z2%LRH`QSgPk}Rlr2xWLluf|1&wLfU*$aW-Qb$M1B81Yp4>>cy=)7M`CcYs4`+bGg$z1lEfMhjY%5pg0tJ9yhK9vM!kLh+eS_)2T{kwF?<@!Ey_Y!e!Z=y}eO z<~i<0ah7~0b!^d+hPXgX$|njsKZLAt)TZzY<)#Q%m-2sttIE1QD_7N6V7&&C=NAaX z`zO{+f;AV-23nbf?@ab@oxfW7%nR=`IMA!A|0$@(rOtGm1kL*-npt#-3*0}1x13)f zFgBw{=&Inlg}H^K-_XS}Lx<1*=23RU1&bVi8m=uDX1TBE1zd#IOdZ^WWY1k|Un%c> zC>=#?;|GwnB^v0T-xJD^Uz%#|}6Z+t&8*EmI{gT^4=^r3g5L;%Q4X<+mrZ8AlLxi`hSL3mUwutwt z(ZRdFiAA8krXxw45v=@_=Vr(;#kIhAc4DaBXZpn!8Q4F|U@ZldE!6{76%wv%NkTluG)x*G70aEFVgQuW_0{^rTn+ zHx8>2t)f?Ot8{bKgHTIDY$g~2|AE8SKm8L9Bga}dq`QDk*I*hfae7-DC<)_j_LL{) zwyItrZd4eFgA$#!K7}WLt(0QxR04}W3Ae-irssQX`$loOiFw8?Ou$( z-5$!YR7PAXEd^ItJK6KCJMEFQVvV z!tAlxD2oVo(_jGiPEPfP5uM<|kb~a)=0EvlH-41cDK5^AapYZ+ZA}f6#n7zWiTTg3zccxXk zonGZv%2>rx?(O^kwFt1vSX*0nD_dL#bkqH~bE_*rZ+5xcyk!#Kp_RHaD$f%Vz#?5< z)`J&CXNu9rwKf;?%AW8oJ+#lbjYYD_wY`%Vl(e<1oXoD3-{qrARlJNI=_Lv;#Pu9Y zHEye?bOEEAp`eR6#@5G`=zA`D0_ewN#~witdt~f{<0?}2x}! z>9T7Cy3TVQQ5UTrC+QqM19*DENTGq7?-ZVmD0P~wPLx=#hc1!*(;XYeCCwvmm3n_} z&3rrB$Kb_E2!~Bd(2H+rde4#(XH{8PXI;v#^z%MHxX&d9JM80+uW1cC`%Z0y<@F?4 z23om(@$C%`RdJ@z=pSKzFXrL-KSEe8NxXZfIiVYwKK!P7E(FWnyD0x^48+Jq*vFUF zEOwXgB}`y#Xe}9edz!?E$zc{*a3M(a@KA6;Tk^i@>i$T6p__2C*I$FK)YjkWy5|R? zyUU(&Fe>R*a}JaXNZ$fV&I#Jy05Bm~px}L66jdSeI=O>tH(xi}R;f ze4NgEOomr2i7$Mt|*G&Q+Jk#bMGNH2Q=nTG?ka?pPl}Xhz|8|IzW>75xBNX z9!nWjTmm%we~x?npOZih9*TwipON^Vkw6sze`n_Zi*tfi21rBizGD1A&?^Xad5?nr zIhdWs_Q%BO>huqpVXiu;JgU4hRG+3Q~YM;p*+rBCtEZ7Yz^y>+f$Y z!&Q|F<4xE#M7b8(Qt*W|UxrJMxRx>yhO=%=7A2D8XUj5cGf-9ZWC9u$tW$pB%LBfq zN$wyF3TrR2mD{yaprr>J9Ib3@$T2r0y3b@$q8>bO9L358iK#hHVUh6QT1+ZZ{_2cz zwkY|0Wna^@oEq(F2?e3w)`7XafR-E05B*vTTxtp2j{lxCAlZ|7na~hS)KLMQnAAhLFi&^-tufcObjW z>2iE~FT>0MaEkiyCsrnGa@qIY-r@FTK2H8A1J%ucFm4sO0)LzXT|V!x2Gh$3SUPUt zjBl{AliATt8B)6Z(H?{3c`8^T#U=qRh+xwQjfiGe&8@M7m-R+jyN7lbg|JvRDDbqq z;#rzLUx;{z7PNGqfUArUX9tj9IJ+aE=V1#ep2TF8yud#jX31MbMv*s)~NmAdw~ zQJNr)|upF`# zk{Zh(3;gRzM)E}TjZ-?0<%ZIEuy#LWY6d5`!0#L^ClryreRdE?Mb&U+nWDL;14~Ao zU3Vq){Oq`8<%CC2^x|ppXTZ(r;JBm0(Vx~MAmKCZ0kw%ezmJ>9$KGKA(+Dn(p}W9Q z2xNsWxHv_-bZ`r~2BH7n9&yAS!5@xoVdtCUJj)aKUFnmz9ac`2(j1%iSXNd^)doJ< z=4CL@Zzb6U;q|Vmu)t+utb_PEk1jSot6OPg3K*A2?u2>Z^Z?J3RT|-yAqHgkmv;l| zxM7|}i1=92pnTMT8inalZ-4&r`(CUQ5symCJU204N;nhq2y4rgFqYqVeO0hu-JYo* z*=10--MPt1WL8?j2DFh@M(HY0_v!;Q#*ScV$v=0n7qES&{)tWly`+)3^?Q2Z=z&Tipb-Iln*9NPtRr zzG5f>@1v5ef4}jZM&{~O;J^M?k8{6#4@XMs@`3V~|AQg+{!#nyr3{4Q_~*nyum9u? jgFqPn`xj?@mM<`AOpQJ_zpT3y21!ZCi|2{Ge*eD!EW$?x literal 0 HcmV?d00001 From 960e8574b6333b967c1a07b889102ec00358d35c Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 12 Aug 2019 12:30:03 -0700 Subject: [PATCH 003/358] fix file --- ...d-with-the-microsoft-deployment-toolkit.md | 151 ++++++------------ 1 file changed, 49 insertions(+), 102 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md index ba655d0c6e..b8b39b40f5 100644 --- a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md @@ -19,7 +19,7 @@ ms.topic: article # Get started with the Microsoft Deployment Toolkit (MDT) **Applies to** -- Windows 10 +- Windows 10 This topic will help you gain a better understanding of how to use the Microsoft Deployment Toolkit (MDT) to deploy Windows 10. When you are ready to try using MDT to deploy Windows 10 in various says, see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). @@ -34,39 +34,39 @@ In addition to familiarizing you with the features and options available in MDT, The Microsoft Deployment Toolkit (MDT) has been in existence since 2003, when it was first introduced as Business Desktop Deployment (BDD) 1.0. The toolkit has evolved, both in functionality and popularity, and today it is considered fundamental to Windows operating system and enterprise application deployment. MDT has many useful features, the most important of which are: -- **Windows Client support.** Supports Windows 7, Windows 8, Windows 8.1, and Windows 10. -- **Windows Server support.** Supports Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2. -- **Additional operating systems support.** Supports Windows Thin PC and Windows Embedded POSReady 7, as well as Windows 8.1 Embedded Industry. -- **UEFI support.** Supports deployment to machines using Unified Extensible Firmware Interface (UEFI) version 2.3.1. -- **GPT support.** Supports deployment to machines that require the new GUID (globally unique identifier) partition table (GPT) format. This is related to UEFI. -- **Enhanced Windows PowerShell support.** Provides support for running PowerShell scripts. +- **Windows Client support.** Supports Windows 7, Windows 8, Windows 8.1, and Windows 10. +- **Windows Server support.** Supports Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019. +- **Additional operating systems support.** Supports Windows Thin PC and Windows Embedded POSReady 7, as well as Windows 8.1 Embedded Industry. +- **UEFI support.** Supports deployment to machines using Unified Extensible Firmware Interface (UEFI) version 2.3.1. +- **GPT support.** Supports deployment to machines that require the new GUID (globally unique identifier) partition table (GPT) format. This is related to UEFI. +- **Enhanced Windows PowerShell support.** Provides support for running PowerShell scripts. ![figure 2](../images/mdt-05-fig02.png) Figure 2. The deployment share mounted as a standard PSDrive allows for administration using PowerShell. -- **Add local administrator accounts.** Allows you to add multiple user accounts to the local Administrators group on the target computers, either via settings or the deployment wizard. -- **Automated participation in CEIP and WER.** Provides configuration for participation in Windows Customer Experience Improvement Program (CEIP) and Windows Error Reporting (WER). -- **Deploy Windows RE.** Enables deployment of a customized Windows Recovery Environment (Windows RE) as part of the task sequence. -- **Deploy to VHD.** Provides ready-made task sequence templates for deploying Windows into a virtual hard disk (VHD) file. -- **Improved deployment wizard.** Provides additional progress information and a cleaner UI for the Lite Touch Deployment Wizard. -- **Monitoring.** Allows you to see the status of currently running deployments. -- **Apply GPO Pack.** Allows you to deploy local group policy objects created by Microsoft Security Compliance Manager (SCM). -- **Partitioning routines.** Provides improved partitioning routines to ensure that deployments work regardless of the current hard drive structure. -- **Offline BitLocker.** Provides the capability to have BitLocker enabled during the Windows Preinstallation Environment (Windows PE) phase, thus saving hours of encryption time. -- **USMT offline user-state migration.** Provides support for running the User State Migration Tool (USMT) capture offline, during the Windows PE phase of the deployment. +- **Add local administrator accounts.** Allows you to add multiple user accounts to the local Administrators group on the target computers, either via settings or the deployment wizard. +- **Automated participation in CEIP and WER.** Provides configuration for participation in Windows Customer Experience Improvement Program (CEIP) and Windows Error Reporting (WER). +- **Deploy Windows RE.** Enables deployment of a customized Windows Recovery Environment (Windows RE) as part of the task sequence. +- **Deploy to VHD.** Provides ready-made task sequence templates for deploying Windows into a virtual hard disk (VHD) file. +- **Improved deployment wizard.** Provides additional progress information and a cleaner UI for the Lite Touch Deployment Wizard. +- **Monitoring.** Allows you to see the status of currently running deployments. +- **Apply GPO Pack.** Allows you to deploy local group policy objects created by Microsoft Security Compliance Manager (SCM). +- **Partitioning routines.** Provides improved partitioning routines to ensure that deployments work regardless of the current hard drive structure. +- **Offline BitLocker.** Provides the capability to have BitLocker enabled during the Windows Preinstallation Environment (Windows PE) phase, thus saving hours of encryption time. +- **USMT offline user-state migration.** Provides support for running the User State Migration Tool (USMT) capture offline, during the Windows PE phase of the deployment. ![figure 3](../images/mdt-05-fig03.png) Figure 3. The offline USMT backup in action. -- **Install or uninstall Windows roles or features.** Enables you to select roles and features as part of the deployment wizard. MDT also supports uninstall of roles and features. -- **Microsoft System Center 2012 Orchestrator integration.** Provides the capability to use Orchestrator runbooks as part of the task sequence. -- **Support for DaRT.** Supports optional integration of the DaRT components into the boot image. -- **Support for Office 2013.** Provides added support for deploying Microsoft Office Professional Plus 2013. -- **Support for Modern UI app package provisioning.** Provisions applications based on the new Windows app package standard, which is used in Windows 8 and later. -- **Extensibility.** Provides the capability to extend MDT far beyond the built-in features by adding custom scripts, web services, System Center Orchestrator runbooks, PowerShell scripts, and VBScripts. -- **Upgrade task sequence.** Provides a new upgrade task sequence template that you can use to upgrade existing Windows 7, Windows 8, and Windows 8.1 systems directly to Windows 10, automatically preserving all data, settings, applications, and drivers. For more information about using this new upgrade task sequence, refer to the [Microsoft Deployment Toolkit resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117). +- **Install or uninstall Windows roles or features.** Enables you to select roles and features as part of the deployment wizard. MDT also supports uninstall of roles and features. +- **Microsoft System Center 2012 Orchestrator integration.** Provides the capability to use Orchestrator runbooks as part of the task sequence. +- **Support for DaRT.** Supports optional integration of the DaRT components into the boot image. +- **Support for Office 2013.** Provides added support for deploying Microsoft Office Professional Plus 2013. +- **Support for Modern UI app package provisioning.** Provisions applications based on the new Windows app package standard, which is used in Windows 8 and later. +- **Extensibility.** Provides the capability to extend MDT far beyond the built-in features by adding custom scripts, web services, System Center Orchestrator runbooks, PowerShell scripts, and VBScripts. +- **Upgrade task sequence.** Provides a new upgrade task sequence template that you can use to upgrade existing Windows 7, Windows 8, and Windows 8.1 systems directly to Windows 10, automatically preserving all data, settings, applications, and drivers. For more information about using this new upgrade task sequence, refer to the [Microsoft Deployment Toolkit resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117). ## MDT Lite Touch components @@ -84,10 +84,10 @@ A deployment share is essentially a folder on the server that is shared and cont ## Rules The rules (CustomSettings.ini and Bootstrap.ini) make up the brain of MDT. The rules control the Windows Deployment Wizard on the client and, for example, can provide the following settings to the machine being deployed: -- Computer name -- Domain to join, and organizational unit (OU) in Active Directory to hold the computer object -- Whether to enable BitLocker -- Regional settings +- Computer name +- Domain to join, and organizational unit (OU) in Active Directory to hold the computer object +- Whether to enable BitLocker +- Regional settings You can manage hundreds of settings in the rules. For more information, see the [Microsoft Deployment Toolkit resource center](https://go.microsoft.com/fwlink/p/?LinkId=618117). ![figure 5](../images/mdt-05-fig05.png) @@ -120,38 +120,38 @@ With the Deployment Workbench, you can add any Microsoft packages that you want Task sequences are the heart and soul of the deployment solution. When creating a task sequence, you need to select a template. The templates are located in the Templates folder in the MDT installation directory, and they determine which default actions are present in the sequence. You can think of a task sequence as a list of actions that need to be executed in a certain order. Each action can also have conditions. Some examples of actions are as follows: -- **Gather.** Reads configuration settings from the deployment server. -- **Format and Partition.** Creates the partition(s) and formats them. -- **Inject Drivers.** Finds out which drivers the machine needs and downloads them from the central driver repository. -- **Apply Operating System.** Uses ImageX to apply the image. -- **Windows Update.** Connects to a WSUS server and updates the machine. +- **Gather.** Reads configuration settings from the deployment server. +- **Format and Partition.** Creates the partition(s) and formats them. +- **Inject Drivers.** Finds out which drivers the machine needs and downloads them from the central driver repository. +- **Apply Operating System.** Uses ImageX to apply the image. +- **Windows Update.** Connects to a WSUS server and updates the machine. ## Task sequence templates MDT comes with nine default task sequence templates. You can also create your own templates. As long as you store them in the Templates folder, they will be available when you create a new task sequence. -- **Sysprep and Capture task sequence.** Used to run the System Preparation (Sysprep) tool and capture an image of a reference computer. +- **Sysprep and Capture task sequence.** Used to run the System Preparation (Sysprep) tool and capture an image of a reference computer. **Note**   It is preferable to use a complete build and capture instead of the Sysprep and Capture task sequence. A complete build and capture can be automated, whereas Sysprep and Capture cannot. -- **Standard Client task sequence.** The most frequently used task sequence. Used for creating reference images and for deploying clients in production. -- **Standard Client Replace task sequence.** Used to run User State Migration Tool (USMT) backup and the optional full Windows Imaging (WIM) backup action. Can also be used to do a secure wipe of a machine that is going to be decommissioned. -- **Custom task sequence.** As the name implies, a custom task sequence with only one default action (one Install Application action). -- **Standard Server task sequence.** The default task sequence for deploying operating system images to servers. The main difference between this template and the Standard Client task sequence template is that it does not contain any USMT actions because USMT is not supported on servers. -- **Lite Touch OEM task sequence.** Used to preload operating systems images on the computer hard drive. Typically used by computer original equipment manufacturers (OEMs) but some enterprise organizations also use this feature. -- **Post OS Installation task sequence.** A task sequence prepared to run actions after the operating system has been deployed. Very useful for server deployments but not often used for client deployments. -- **Deploy to VHD Client task sequence.** Similar to the Standard Client task sequence template but also creates a virtual hard disk (VHD) file on the target computer and deploys the image to the VHD file. -- **Deploy to VHD Server task sequence.** Same as the Deploy to VHD Client task sequence but for servers. -- **Standard Client Upgrade task sequence.** A simple task sequence template used to perform an in-place upgrade from Windows 7, Windows 8, or Windows 8.1 directly to Windows 10, automatically preserving existing data, settings, applications, and drivers. +- **Standard Client task sequence.** The most frequently used task sequence. Used for creating reference images and for deploying clients in production. +- **Standard Client Replace task sequence.** Used to run User State Migration Tool (USMT) backup and the optional full Windows Imaging (WIM) backup action. Can also be used to do a secure wipe of a machine that is going to be decommissioned. +- **Custom task sequence.** As the name implies, a custom task sequence with only one default action (one Install Application action). +- **Standard Server task sequence.** The default task sequence for deploying operating system images to servers. The main difference between this template and the Standard Client task sequence template is that it does not contain any USMT actions because USMT is not supported on servers. +- **Lite Touch OEM task sequence.** Used to preload operating systems images on the computer hard drive. Typically used by computer original equipment manufacturers (OEMs) but some enterprise organizations also use this feature. +- **Post OS Installation task sequence.** A task sequence prepared to run actions after the operating system has been deployed. Very useful for server deployments but not often used for client deployments. +- **Deploy to VHD Client task sequence.** Similar to the Standard Client task sequence template but also creates a virtual hard disk (VHD) file on the target computer and deploys the image to the VHD file. +- **Deploy to VHD Server task sequence.** Same as the Deploy to VHD Client task sequence but for servers. +- **Standard Client Upgrade task sequence.** A simple task sequence template used to perform an in-place upgrade from Windows 7, Windows 8, or Windows 8.1 directly to Windows 10, automatically preserving existing data, settings, applications, and drivers. ## Selection profiles Selection profiles, which are available in the Advanced Configuration node, provide a way to filter content in the Deployment Workbench. Selection profiles are used for several purposes in the Deployment Workbench and in Lite Touch deployments. For example, they can be used to: -- Control which drivers and packages are injected into the Lite Touch (and generic) boot images. -- Control which drivers are injected during the task sequence. -- Control what is included in any media that you create. -- Control what is replicated to other deployment shares. -- Filter which task sequences and applications are displayed in the Deployment Wizard. +- Control which drivers and packages are injected into the Lite Touch (and generic) boot images. +- Control which drivers are injected during the task sequence. +- Control what is included in any media that you create. +- Control what is replicated to other deployment shares. +- Filter which task sequences and applications are displayed in the Deployment Wizard. ## Logging @@ -172,57 +172,4 @@ On the deployment share, you also can enable monitoring. After you enable monito [Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md)
[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md)
[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md)
-[Configure MDT settings](configure-mdt-settings.md) -======= -======= ->>>>>>> bc07494f1704b1e23c818d59e7f42c56fefb83d1 ---- -title: Get started with the Microsoft Deployment Toolkit (MDT) (Windows 10) -description: This topic will help you gain a better understanding of how to use the Microsoft Deployment Toolkit (MDT), as part of a Windows operating system deployment. -ms.assetid: a256442c-be47-4bb9-a105-c831f58ce3ee -ms.reviewer: -manager: laurawi -ms.author: greglin -keywords: deploy, image, feature, install, tools -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: mdt -audience: itpro -author: greg-lindsay -ms.topic: article ---- - -# Get started with the Microsoft Deployment Toolkit (MDT) - -**Applies to** -- Windows 10 - -This topic will help you gain a better understanding of how to use the Microsoft Deployment Toolkit (MDT), as part of a Windows operating system deployment. MDT is one of the most important tools available to IT professionals today. You can use it to create reference images or as a complete deployment solution. MDT also can be used to extend the operating system deployment features available in Microsoft System Center 2012 R2 Configuration Manager. - -In addition to familiarizing you with the features and options available in MDT, this topic will walk you through the process of preparing for deploying Windows 10 using MDT by configuring Active Directory, creating an organizational unit (OU) structure, creating service accounts, configuring log files and folders, and installing the tools needed to view the logs and continue with the deployment process. - -For the purposes of this topic, we will use two machines: DC01 and MDT01. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 standard server. MDT01 is a member of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see -[Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md#proof). - -![figure 1](../images/mdt-05-fig01.png) - -Figure 1. The machines used in this topic. - -## In this section - -- [Key features in MDT](key-features-in-mdt.md) -- [MDT Lite Touch components](mdt-lite-touch-components.md) -- [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) - -## Related topics - -[Microsoft Deployment Toolkit downloads and documentation](https://go.microsoft.com/fwlink/p/?LinkId=618117)
-[Create a Windows 10 reference image](create-a-windows-10-reference-image.md)
-[Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md)
-[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md)
-[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md)
-[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md)
-[Configure MDT settings](configure-mdt-settings.md) - +[Configure MDT settings](configure-mdt-settings.md) \ No newline at end of file From 16c2f73371b3538f86007d439facac4cd06e5187 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 12 Aug 2019 12:56:44 -0700 Subject: [PATCH 004/358] draft --- ...d-with-the-microsoft-deployment-toolkit.md | 21 +++++++++---------- 1 file changed, 10 insertions(+), 11 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md index b8b39b40f5..566244e8c7 100644 --- a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md @@ -31,19 +31,19 @@ In addition to familiarizing you with the features and options available in MDT, ## Key features in MDT -The Microsoft Deployment Toolkit (MDT) has been in existence since 2003, when it was first introduced as Business Desktop Deployment (BDD) 1.0. The toolkit has evolved, both in functionality and popularity, and today it is considered fundamental to Windows operating system and enterprise application deployment. +MDT has been in existence since 2003, when it was first introduced as Business Desktop Deployment (BDD) 1.0. The toolkit has evolved, both in functionality and popularity, and today it is considered fundamental to Windows operating system and enterprise application deployment. -MDT has many useful features, the most important of which are: -- **Windows Client support.** Supports Windows 7, Windows 8, Windows 8.1, and Windows 10. +MDT has many useful features, such as: +- **Windows Client support.** Supports Windows 7, Windows 8.1, and Windows 10. - **Windows Server support.** Supports Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019. -- **Additional operating systems support.** Supports Windows Thin PC and Windows Embedded POSReady 7, as well as Windows 8.1 Embedded Industry. +- **Additional operating systems support.** Supports Windows Thin PC and [Windows Embedded POSReady 7](https://www.microsoft.com/en-us/download/details.aspx?id=26558), as well as Windows 8.1 Embedded Industry. - **UEFI support.** Supports deployment to machines using Unified Extensible Firmware Interface (UEFI) version 2.3.1. -- **GPT support.** Supports deployment to machines that require the new GUID (globally unique identifier) partition table (GPT) format. This is related to UEFI. +- **GPT support.** Supports deployment to machines that require the new GPT partition table format. This is related to UEFI. - **Enhanced Windows PowerShell support.** Provides support for running PowerShell scripts. ![figure 2](../images/mdt-05-fig02.png) - Figure 2. The deployment share mounted as a standard PSDrive allows for administration using PowerShell. + The deployment share mounted as a standard PSDrive allows for administration using PowerShell. - **Add local administrator accounts.** Allows you to add multiple user accounts to the local Administrators group on the target computers, either via settings or the deployment wizard. - **Automated participation in CEIP and WER.** Provides configuration for participation in Windows Customer Experience Improvement Program (CEIP) and Windows Error Reporting (WER). @@ -58,7 +58,7 @@ MDT has many useful features, the most important of which are: ![figure 3](../images/mdt-05-fig03.png) - Figure 3. The offline USMT backup in action. + The offline USMT backup in action. - **Install or uninstall Windows roles or features.** Enables you to select roles and features as part of the deployment wizard. MDT also supports uninstall of roles and features. - **Microsoft System Center 2012 Orchestrator integration.** Provides the capability to use Orchestrator runbooks as part of the task sequence. @@ -75,7 +75,7 @@ When deploying the Windows operating system using MDT, most of the administratio ![figure 4](../images/mdt-05-fig04.png) -Figure 4. If you click **View Script** on the right side, you will get the PowerShell code that was used to perform the task. +If you click **View Script** on the right side, you will get the PowerShell code that was used to perform the task. ## Deployment shares @@ -92,7 +92,7 @@ You can manage hundreds of settings in the rules. For more information, see the ![figure 5](../images/mdt-05-fig05.png) -Figure 5. Example of a MDT rule. In this example, the new computer name is being calculated based on PC- plus the first seven (Left) characters from the serial number +Example of a MDT rule. In this example, the new computer name is being calculated based on PC- plus the first seven (Left) characters from the serial number ## Boot images @@ -131,8 +131,7 @@ You can think of a task sequence as a list of actions that need to be executed i MDT comes with nine default task sequence templates. You can also create your own templates. As long as you store them in the Templates folder, they will be available when you create a new task sequence. - **Sysprep and Capture task sequence.** Used to run the System Preparation (Sysprep) tool and capture an image of a reference computer. - **Note**   - It is preferable to use a complete build and capture instead of the Sysprep and Capture task sequence. A complete build and capture can be automated, whereas Sysprep and Capture cannot. + **Note**: It is preferable to use a complete build and capture instead of the Sysprep and Capture task sequence. A complete build and capture can be automated, whereas Sysprep and Capture cannot. - **Standard Client task sequence.** The most frequently used task sequence. Used for creating reference images and for deploying clients in production. - **Standard Client Replace task sequence.** Used to run User State Migration Tool (USMT) backup and the optional full Windows Imaging (WIM) backup action. Can also be used to do a secure wipe of a machine that is going to be decommissioned. From 6d379ec3ce41ee74e1e9ec31eabec38c8ae91f6d Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 12 Aug 2019 13:09:23 -0700 Subject: [PATCH 005/358] draft --- ...windows-10-with-the-microsoft-deployment-toolkit.md | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md index af9311a894..e9f0d1b105 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md @@ -19,7 +19,7 @@ ms.topic: article # Deploying Windows 10 with MDT **Applies to** -- Windows 10 +- Windows 10 This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT). @@ -27,9 +27,9 @@ To download the latest version of MDT, visit the [MDT resource page](https://go. MDT is a unified collection of tools, processes, and guidance for automating desktop and server deployment. In addition to reducing deployment time and standardizing desktop and server images, MDT enables you to more easily manage security and ongoing configurations. MDT builds on top of the core deployment tools in the Windows Assessment and Deployment Kit (Windows ADK) with additional guidance and features designed to reduce the complexity and time required for deployment in an enterprise environment. -MDT supports the deployment of Windows 10, as well as Windows 7, Windows 8, Windows 8.1, and Windows Server. It also includes support for zero-touch installation (ZTI) with Microsoft System Center Configuration Manager. +MDT supports the deployment of Windows 10, as well as Windows 7, Windows 8.1, and Windows Server. It also includes support for zero-touch installation (ZTI) with Microsoft System Center Configuration Manager. -For more information about MDT, see [Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) for an overview of MDT, including a description of many of the key features and options. A list of components in MDT that support Lite Touch Installation (LTI) is also provided. +See [Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) for an overview of MDT, including a description of many of the key features and options. A list of components in MDT that support Lite Touch Installation (LTI) is also provided. ## In this guide @@ -82,10 +82,12 @@ The organizational unit (OU) structure used in this guide. ### Deploy Windows 10 with MDT -See the following topics when you are ready to try deploying Windows 10 with MDT. You must complete each of these topics in the order they are listed. +When you are ready to try deploying Windows 10 with MDT, complete each of the topics below in the order they are listed. | Topic | Description | Required / optional | | :--- | :--- | :--- | +| [Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) | An overview of MDT. | Optional | +| [Deploying Windows 10 with MDT](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) | (This topic). A description of topics in this guide and the overall lab infrastructure. | Optional | | [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) | Installation of MDT. | Required | | [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) | Create a deployment share, configure rules and settings, and import all the applications and operating system files required to build a Windows 10 reference image. | Required | | [Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) | Take a reference image for Windows 10 and deploy that image to your environment using MDT. | Required | From 552689efe629994f38ac366c26d044bf7daa351b Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 12 Aug 2019 13:14:09 -0700 Subject: [PATCH 006/358] draft --- .../prepare-for-windows-deployment-with-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md index d714edfd4e..49858e20d5 100644 --- a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md +++ b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md @@ -92,7 +92,7 @@ Workstations,"OU=Computers,OU=Contoso,DC=CONTOSO,DC=COM" Security Groups,"OU=Groups,OU=Contoso,DC=CONTOSO,DC=COM" ``` -Lastly, open an elevated Windows PowerShell prompt on DC01, navigate to the c:\ directory and run the ou.ps1 script: +Lastly, open an elevated Windows PowerShell prompt on DC01, navigate to the c:\\ directory and run the ou.ps1 script: ```powershell .\ou.ps1 From 6d301a30f53bfbbcf95799b2ac5a9ee730cdd04d Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 12 Aug 2019 13:29:36 -0700 Subject: [PATCH 007/358] draft --- ...d-environment-for-windows-10-deployment.md | 50 +- .../configure-mdt-settings.md | 96 +- ...sh-a-windows-7-computer-with-windows-10.md | 255 +- ...s-7-computer-with-a-windows-10-computer.md | 33 +- .../windows-10-poc-sc-config-mgr.md | 2164 +++++++++-------- 5 files changed, 1284 insertions(+), 1314 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/build-a-distributed-environment-for-windows-10-deployment.md b/windows/deployment/deploy-windows-mdt/build-a-distributed-environment-for-windows-10-deployment.md index 944c8ac8aa..d0bf3654f8 100644 --- a/windows/deployment/deploy-windows-mdt/build-a-distributed-environment-for-windows-10-deployment.md +++ b/windows/deployment/deploy-windows-mdt/build-a-distributed-environment-for-windows-10-deployment.md @@ -23,13 +23,13 @@ ms.topic: article In this topic, you will learn how to replicate your Windows 10 deployment shares to facilitate the deployment of Windows 10 in remote or branch locations. If you work in a distributed environment, replicating the deployment shares is an important part of the deployment solution. With images reaching 5 GB in size or more, you can't deploy machines in a remote office over the wire. You need to replicate the content, so that the clients can do local deployments. -We will use four machines for this topic: DC01, MDT01, MDT02, and PC0006. DC01 is a domain controller, MDT01 is a Windows Server 2012 R2 standard server, and PC0006 is a blank machine to which you will deploy Windows 10. You will configure a second deployment server (MDT02) for a remote site (Stockholm) by replicating the deployment share in the original site (New York). MDT01, MDT02, and PC0006 are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md#proof). +We will use four machines for this topic: DC01, MDT01, MDT02, and PC0006. DC01 is a domain controller, MDT01 is a Windows Server 2012 R2 standard server, and PC0006 is a blank machine to which you will deploy Windows 10. You will configure a second deployment server (MDT02) for a remote site (Stockholm) by replicating the deployment share in the original site (New York). MDT01, MDT02, and PC0006 are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). ![figure 1](../images/mdt-10-fig01.png) -Figure 1. The machines used in this topic. +Computers used in this topic. -## Replicate deployment shares +## Replicate deployment shares Replicating the content between MDT01 (New York) and MDT02 (Stockholm) can be done in a number of different ways. The most common content replication solutions with Microsoft Deployment Toolkit (MDT) use either the Linked Deployment Shares (LDS) feature or Distributed File System Replication (DFS-R). Some organizations have used a simple robocopy script for replication of the content. @@ -44,7 +44,7 @@ LDS is a built-in feature in MDT for replicating content. However, LDS works bes DFS-R is not only very fast and reliable, but it also offers central monitoring, bandwidth control, and a great delta replication engine. DFS-R will work equally well whether you have 2 sites or 90. When using DFS-R for MDT, we recommend running your deployment servers on Windows Server 2008 R2 or higher. From that version on, you can configure the replication target(s) as read-only, which is exactly what you want for MDT. This way, you can have your master deployment share centralized and replicate out changes as they happen. DFS-R will quickly pick up changes at the central deployment share in MDT01 and replicate the delta changes to MDT02. -## Set up Distributed File System Replication (DFS-R) for replication +## Set up Distributed File System Replication (DFS-R) for replication Setting up DFS-R for replication is a quick and straightforward process. You prepare the deployment servers and then create a replication group. To complete the setup, you configure some replication settings. @@ -57,7 +57,7 @@ Setting up DFS-R for replication is a quick and straightforward process. You pre ![figure 2](../images/mdt-10-fig02.png) - Figure 2. Adding the DFS Replication role to MDT01. + Adding the DFS Replication role to MDT01. 6. On the **Select features** page, accept the default settings, and click **Next**. 7. On the **Confirm installation selections** page, click **Install**. @@ -81,7 +81,7 @@ Setting up DFS-R for replication is a quick and straightforward process. You pre ![figure 3](../images/mdt-10-fig03.png) - Figure 3. Sharing the **E:\\MDTProduction folder** on MDT02. + Sharing the **E:\\MDTProduction folder** on MDT02. ### Configure the deployment share @@ -103,22 +103,21 @@ When you have multiple deployment servers sharing the same content, you need to UserID=MDT_BA SkipBDDWelcome=YES ``` - **Note** - The DeployRoot value needs to go into the Bootstrap.ini file, but you can use the same logic in the CustomSettings.ini file. For example, you can redirect the logs to the local deployment server (SLSHARE), or have the User State Migration Tool (USMT) migration store (UDDIR) local. To learn more about USMT, see [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) and [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md). + **Note**: The DeployRoot value needs to go into the Bootstrap.ini file, but you can use the same logic in the CustomSettings.ini file. For example, you can redirect the logs to the local deployment server (SLSHARE), or have the User State Migration Tool (USMT) migration store (UDDIR) local. To learn more about USMT, see [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) and [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md). 2. Save the Bootstrap.ini file. 3. Using the Deployment Workbench, right-click the **MDT Production** deployment share and select **Update Deployment Share**. ![figure 4](../images/mdt-10-fig04.png) - Figure 4. Updating the MDT Production deployment share. + Updating the MDT Production deployment share. 4. Use the default settings for the Update Deployment Share Wizard. 5. After the update is complete, use the Windows Deployment Services console. In the **Boot Images** node, right-click the **MDT Production x64** boot image and select **Replace Image**. ![figure 5](../images/mdt-10-fig05.png) - Figure 5. Replacing the updated boot image in WDS. + Replacing the updated boot image in WDS. 6. Browse and select the **E:\\MDTProduction\\Boot\\LiteTouchPE\_x64.wim** boot image, and then complete Replace Boot Image Wizard using the default settings. ## Replicate the content @@ -131,7 +130,7 @@ When you have multiple deployment servers sharing the same content, you need to ![figure 6](../images/mdt-10-fig06.png) - Figure 6. Adding the Replication Group Members. + Adding the Replication Group Members. 11. On the **Topology Selection** page, select the **Full mesh** option and click **Next**. 12. On the **Replication Group Schedule and Bandwidth** page, accept the default settings and click **Next**. @@ -142,7 +141,7 @@ When you have multiple deployment servers sharing the same content, you need to ![figure 7](../images/mdt-10-fig07.png) - Figure 7. Configure the MDT02 member. + Configure the MDT02 member. 17. On the **Review Settings and Create Replication Group** page, click **Create**. 18. On the **Confirmation** page, click **Close**. @@ -160,7 +159,7 @@ When you have multiple deployment servers sharing the same content, you need to ![figure 8](../images/mdt-10-fig08.png) - Figure 8. Configure the Staging settings. + Configure the Staging settings. 22. In the middle pane, right-click the **MDT02** member and select **Properties**. 23. On the **MDT02 (MDTProduction) Properties** page, configure the following and then click **OK**: @@ -182,15 +181,15 @@ It will take some time for the replication configuration to be picked up by the ![figure 9](../images/mdt-10-fig09.png) -Figure 9. The DFS Replication Health Report. +The DFS Replication Health Report. -## Configure Windows Deployment Services (WDS) in a remote site +## Configure Windows Deployment Services (WDS) in a remote site Like you did in the previous topic for MDT01, you need to add the MDT Production Lite Touch x64 Boot image to Windows Deployment Services on MDT02. For the following steps, we assume that WDS has already been installed on MDT02. 1. On MDT02, using the WDS console, right-click **Boot Images** and select **Add Boot Image**. 2. Browse to the E:\\MDTProduction\\Boot\\LiteTouchPE\_x64.wim file and add the image with the default settings. -## Deploy the Windows 10 client to the remote site +## Deploy the Windows 10 client to the remote site Now you should have a solution ready for deploying the Windows 10 client to the remote site, Stockholm, connecting to the MDT Production deployment share replica on MDT02. @@ -214,16 +213,9 @@ Now you should have a solution ready for deploying the Windows 10 client to the ## Related topics -[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) - -[Create a Windows 10 reference image](create-a-windows-10-reference-image.md) - -[Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) - -[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) - -[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) - -[Configure MDT settings](configure-mdt-settings.md) - - +[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md)
+[Create a Windows 10 reference image](create-a-windows-10-reference-image.md)
+[Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md)
+[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md)
+[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md)
+[Configure MDT settings](configure-mdt-settings.md) \ No newline at end of file diff --git a/windows/deployment/deploy-windows-mdt/configure-mdt-settings.md b/windows/deployment/deploy-windows-mdt/configure-mdt-settings.md index 4f3771b9d5..0eac636a76 100644 --- a/windows/deployment/deploy-windows-mdt/configure-mdt-settings.md +++ b/windows/deployment/deploy-windows-mdt/configure-mdt-settings.md @@ -1,50 +1,46 @@ ---- -title: Configure MDT settings (Windows 10) -description: One of the most powerful features in Microsoft Deployment Toolkit (MDT) is its extension capabilities; there is virtually no limitation to what you can do in terms of customization. -ms.assetid: d3e1280c-3d1b-4fad-8ac4-b65dc711f122 -ms.reviewer: -manager: laurawi -ms.author: greglin -keywords: customize, customization, deploy, features, tools -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: mdt -audience: itpro author: greg-lindsay -ms.topic: article ---- - -# Configure MDT settings - -One of the most powerful features in Microsoft Deployment Toolkit (MDT) is its extension capabilities; there is virtually no limitation to what you can do in terms of customization. In this topic, you learn about configuring customizations for your environment. -For the purposes of this topic, we will use four machines: DC01, MDT01, HV01, and PC0001. DC01 is a domain controller, MDT01 is a Windows Server 2012 R2 Standard server, and PC0001 is a Windows 10 Enterprise x64 client used for the MDT simulation environment. OR01 has Microsoft System Center 2012 R2 Orchestrator installed. MDT01, OR01, and PC0001 are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md#proof). - -![figure 1](../images/mdt-09-fig01.png) - -Figure 1. The machines used in this topic. - -## In this section - -- [Set up MDT for BitLocker](set-up-mdt-for-bitlocker.md) -- [Configure MDT deployment share rules](configure-mdt-deployment-share-rules.md) -- [Configure MDT for UserExit scripts](configure-mdt-for-userexit-scripts.md) -- [Simulate a Windows 10 deployment in a test environment](simulate-a-windows-10-deployment-in-a-test-environment.md) -- [Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-10-deployment-information.md) -- [Assign applications using roles in MDT](assign-applications-using-roles-in-mdt.md) -- [Use web services in MDT](use-web-services-in-mdt.md) -- [Use Orchestrator runbooks with MDT](use-orchestrator-runbooks-with-mdt.md) - -## Related topics - -[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) - -[Create a Windows 10 reference image](create-a-windows-10-reference-image.md) - -[Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) - -[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) - -[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) - -[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) +--- +title: Configure MDT settings (Windows 10) +description: One of the most powerful features in Microsoft Deployment Toolkit (MDT) is its extension capabilities; there is virtually no limitation to what you can do in terms of customization. +ms.assetid: d3e1280c-3d1b-4fad-8ac4-b65dc711f122 +ms.reviewer: +manager: laurawi +ms.author: greglin +keywords: customize, customization, deploy, features, tools +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.sitesec: library +ms.pagetype: mdt +audience: itpro +author: greg-lindsay +ms.topic: article +--- + +# Configure MDT settings + +One of the most powerful features in Microsoft Deployment Toolkit (MDT) is its extension capabilities; there is virtually no limitation to what you can do in terms of customization. In this topic, you learn about configuring customizations for your environment. +For the purposes of this topic, we will use four machines: DC01, MDT01, HV01, and PC0001. DC01 is a domain controller, MDT01 is a Windows Server 2012 R2 Standard server, and PC0001 is a Windows 10 Enterprise x64 client used for the MDT simulation environment. OR01 has Microsoft System Center 2012 R2 Orchestrator installed. MDT01, OR01, and PC0001 are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). + +![figure 1](../images/mdt-09-fig01.png) + +The computers used in this topic. + +## In this section + +- [Set up MDT for BitLocker](set-up-mdt-for-bitlocker.md) +- [Configure MDT deployment share rules](configure-mdt-deployment-share-rules.md) +- [Configure MDT for UserExit scripts](configure-mdt-for-userexit-scripts.md) +- [Simulate a Windows 10 deployment in a test environment](simulate-a-windows-10-deployment-in-a-test-environment.md) +- [Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-10-deployment-information.md) +- [Assign applications using roles in MDT](assign-applications-using-roles-in-mdt.md) +- [Use web services in MDT](use-web-services-in-mdt.md) +- [Use Orchestrator runbooks with MDT](use-orchestrator-runbooks-with-mdt.md) + +## Related topics + +[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md)
+[Create a Windows 10 reference image](create-a-windows-10-reference-image.md)
+[Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md)
+[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md)
+[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md)
+[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) diff --git a/windows/deployment/deploy-windows-mdt/refresh-a-windows-7-computer-with-windows-10.md b/windows/deployment/deploy-windows-mdt/refresh-a-windows-7-computer-with-windows-10.md index 6c0524658f..8557bade09 100644 --- a/windows/deployment/deploy-windows-mdt/refresh-a-windows-7-computer-with-windows-10.md +++ b/windows/deployment/deploy-windows-mdt/refresh-a-windows-7-computer-with-windows-10.md @@ -1,132 +1,123 @@ ---- -title: Refresh a Windows 7 computer with Windows 10 (Windows 10) -description: This topic will show you how to use MDT Lite Touch Installation (LTI) to upgrade a Windows 7 computer to a Windows 10 computer using the computer refresh process. -ms.assetid: 2866fb3c-4909-4c25-b083-6fc1f7869f6f -ms.reviewer: -manager: laurawi -ms.author: greglin -keywords: reinstallation, customize, template, script, restore -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: mdt -audience: itpro author: greg-lindsay -ms.topic: article ---- - -# Refresh a Windows 7 computer with Windows 10 - -**Applies to** -- Windows 10 - -This topic will show you how to use MDT Lite Touch Installation (LTI) to upgrade a Windows 7 computer to a Windows 10 computer using the computer refresh process. The refresh scenario, or computer refresh, is a reinstallation of an operating system on the same machine. You can refresh the machine to the same operating system as it is currently running, or to a later version. - -For the purposes of this topic, we will use three machines: DC01, MDT01, and PC0001. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 Standard server. PC0001 is a machine with Windows 7 Service Pack 1 (SP1) that is going to be refreshed into a Windows 10 machine, with data and settings restored. MDT01 and PC0001 are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md#proof). - -![The machines used in this topic](../images/mdt-04-fig01.png "The machines used in this topic") - -Figure 1. The machines used in this topic. - -## The computer refresh process - -Even though a computer will appear, to the end user, to be upgraded, a computer refresh is not, technically, an in-place upgrade. A computer refresh also involves taking care of user data and settings from the old installation and making sure to restore those at the end of the installation. -For a computer refresh with MDT, you use the User State Migration Tool (USMT), which is part of the Windows Assessment and Deployment Kit (ADK) for Windows 10, to migrate user data and settings. To complete a computer refresh you will: - -1. Back up data and settings locally, in a backup folder. - -2. Wipe the partition, except for the backup folder. - -3. Apply the new operating system image. - -4. Install other applications. - -5. Restore data and settings. - -During the computer refresh, USMT uses a feature called Hard-Link Migration Store. When you use this feature, the files are simply linked in the file system, which allows for fast migration, even when there is a lot of data. - ->[!NOTE] ->In addition to the USMT backup, you can enable an optional full Windows Imaging (WIM) backup of the machine by configuring the MDT rules. If you do this, a .wim file is created in addition to the USMT backup. The .wim file will contain the entire volume from the computer, and helpdesk personnel can extract content from it if needed. Please note that this is a data WIM backup only. Using this backup to restore the entire machine is not a supported scenario. - -### Multi-user migration - -By default, ScanState in USMT backs up all profiles on the machine, including local computer profiles. If you have a machine that has been in your environment for a while, it likely has several domain-based profiles on it, including those of former users. You can limit which profiles are backed up -by configuring command-line switches to ScanState (added as rules in MDT). - -As an example, the following line configures USMT to migrate only domain user profiles and not profiles from the local SAM account database: ScanStateArgs=/ue:\*\\\* /ui:CONTOSO\\\* - ->[!NOTE] ->You also can combine the preceding switches with the /uel switch, which excludes profiles that have not been accessed within a specific number of days. For example, adding /uel:60 will configure ScanState (or LoadState) not to include profiles that haven't been accessed for more than 60 days. - -### Support for additional settings - -In addition to the command-line switches that control which profiles to migrate, the XML templates control exactly what data is being migrated. You can control data within and outside the user profiles - -## Create a custom User State Migration Tool (USMT) template - -In this section, you learn to migrate additional data using a custom template. You configure the environment to use a custom USMT XML template that will: - -1. Back up the **C:\\Data** folder (including all files and folders). - -2. Scan the local disk for PDF documents (\*.pdf files) and restore them into the **C:\\Data\\PDF Documents** folder on the destination machine. - The custom USMT template is named MigContosoData.xml, and you can find it in the sample files for this documentation, which include: - - * [Gather script](https://go.microsoft.com/fwlink/p/?LinkId=619361) - * [Set-OUPermissions](https://go.microsoft.com/fwlink/p/?LinkId=619362) script - * [MDT Sample Web Service](https://go.microsoft.com/fwlink/p/?LinkId=619363) - -### Add the custom XML template - -In order to use the custom MigContosoData.xml USMT template, you need to copy it to the MDT Production deployment share and update the CustomSettings.ini file. In these steps, we assume you have downloaded the MigContosoData.xml file. -1. Using File Explorer, copy the MigContosoData.xml file to the **E:\\MDTProduction\\Tools\\x64\\USMT5** folder. -2. Using Notepad, edit the E:\\MDTProduction\\Control\\CustomSettings.ini file. After the USMTMigFiles002=MigUser.xml line add the following line: - - ``` syntax - USMTMigFiles003=MigContosoData.xml - ``` -3. Save the CustomSettings.ini file. - -## Refresh a Windows 7 SP1 client - -After adding the additional USMT template and configuring the CustomSettings.ini file to use it, you are now ready to refresh a Windows 7 SP1 client to Windows 10. In these steps, we assume you have a Windows 7 SP1 client named PC0001 in your environment that is ready for a refresh to Windows 10. - ->[!NOTE] ->MDT also supports an offline computer refresh. For more info on that scenario, see the USMTOfflineMigration property in the [MDT resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117). - -### Upgrade (refresh) a Windows 7 SP1 client - -1. On PC0001, log on as **CONTOSO\\Administrator**. Start the Lite Touch Deploy Wizard by executing **\\\\MDT01\\MDTProduction$\\Scripts\\Litetouch.vbs**. Complete the deployment guide using the following settings: - - * Select a task sequence to execute on this computer: Windows 10 Enterprise x64 RTM - * Computer name: <default> - * Specify where to save a complete computer backup: Do not back up the existing computer - >[!NOTE] - >Skip this optional full WIM backup. The USMT backup will still run. - -2. Select one or more applications to install: Install - Adobe Reader XI - x86 - -3. The setup now starts and does the following: - - * Backs up user settings and data using USMT. - * Installs the Windows 10 Enterprise x64 operating system. - * Installs the added application(s). - * Updates the operating system via your local Windows Server Update Services (WSUS) server. - * Restores user settings and data using USMT. - -![Start the computer refresh from the running Windows 7 client](../images/fig2-taskseq.png "Start the computer refresh from the running Windows 7 client") - -Figure 2. Starting the computer refresh from the running Windows 7 SP1 client. - -## Related topics - -[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) - -[Create a Windows 10 reference image](create-a-windows-10-reference-image.md) - -[Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) - -[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) - -[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) - -[Configure MDT settings](configure-mdt-settings.md) +--- +title: Refresh a Windows 7 computer with Windows 10 (Windows 10) +description: This topic will show you how to use MDT Lite Touch Installation (LTI) to upgrade a Windows 7 computer to a Windows 10 computer using the computer refresh process. +ms.assetid: 2866fb3c-4909-4c25-b083-6fc1f7869f6f +ms.reviewer: +manager: laurawi +ms.author: greglin +keywords: reinstallation, customize, template, script, restore +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.sitesec: library +ms.pagetype: mdt +audience: itpro +author: greg-lindsay +ms.topic: article +--- + +# Refresh a Windows 7 computer with Windows 10 + +**Applies to** +- Windows 10 + +This topic will show you how to use MDT Lite Touch Installation (LTI) to upgrade a Windows 7 computer to a Windows 10 computer using the computer refresh process. The refresh scenario, or computer refresh, is a reinstallation of an operating system on the same machine. You can refresh the machine to the same operating system as it is currently running, or to a later version. + +For the purposes of this topic, we will use three machines: DC01, MDT01, and PC0001. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 Standard server. PC0001 is a machine with Windows 7 Service Pack 1 (SP1) that is going to be refreshed into a Windows 10 machine, with data and settings restored. MDT01 and PC0001 are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). + +![The machines used in this topic](../images/mdt-04-fig01.png "The machines used in this topic") + +The computers used in this topic. + +## The computer refresh process + +Even though a computer will appear, to the end user, to be upgraded, a computer refresh is not, technically, an in-place upgrade. A computer refresh also involves taking care of user data and settings from the old installation and making sure to restore those at the end of the installation. +For a computer refresh with MDT, you use the User State Migration Tool (USMT), which is part of the Windows Assessment and Deployment Kit (ADK) for Windows 10, to migrate user data and settings. To complete a computer refresh you will: + +1. Back up data and settings locally, in a backup folder. +2. Wipe the partition, except for the backup folder. +3. Apply the new operating system image. +4. Install other applications. +5. Restore data and settings. + +During the computer refresh, USMT uses a feature called Hard-Link Migration Store. When you use this feature, the files are simply linked in the file system, which allows for fast migration, even when there is a lot of data. + +>[!NOTE] +>In addition to the USMT backup, you can enable an optional full Windows Imaging (WIM) backup of the machine by configuring the MDT rules. If you do this, a .wim file is created in addition to the USMT backup. The .wim file will contain the entire volume from the computer, and helpdesk personnel can extract content from it if needed. Please note that this is a data WIM backup only. Using this backup to restore the entire machine is not a supported scenario. + +### Multi-user migration + +By default, ScanState in USMT backs up all profiles on the machine, including local computer profiles. If you have a machine that has been in your environment for a while, it likely has several domain-based profiles on it, including those of former users. You can limit which profiles are backed up +by configuring command-line switches to ScanState (added as rules in MDT). + +As an example, the following line configures USMT to migrate only domain user profiles and not profiles from the local SAM account database: ScanStateArgs=/ue:\*\\\* /ui:CONTOSO\\\* + +>[!NOTE] +>You also can combine the preceding switches with the /uel switch, which excludes profiles that have not been accessed within a specific number of days. For example, adding /uel:60 will configure ScanState (or LoadState) not to include profiles that haven't been accessed for more than 60 days. + +### Support for additional settings + +In addition to the command-line switches that control which profiles to migrate, the XML templates control exactly what data is being migrated. You can control data within and outside the user profiles + +## Create a custom User State Migration Tool (USMT) template + +In this section, you learn to migrate additional data using a custom template. You configure the environment to use a custom USMT XML template that will: + +1. Back up the **C:\\Data** folder (including all files and folders). +2. Scan the local disk for PDF documents (\*.pdf files) and restore them into the **C:\\Data\\PDF Documents** folder on the destination machine. + The custom USMT template is named MigContosoData.xml, and you can find it in the sample files for this documentation, which include: + + * [Gather script](https://go.microsoft.com/fwlink/p/?LinkId=619361) + * [Set-OUPermissions](https://go.microsoft.com/fwlink/p/?LinkId=619362) script + * [MDT Sample Web Service](https://go.microsoft.com/fwlink/p/?LinkId=619363) + +### Add the custom XML template + +In order to use the custom MigContosoData.xml USMT template, you need to copy it to the MDT Production deployment share and update the CustomSettings.ini file. In these steps, we assume you have downloaded the MigContosoData.xml file. +1. Using File Explorer, copy the MigContosoData.xml file to the **E:\\MDTProduction\\Tools\\x64\\USMT5** folder. +2. Using Notepad, edit the E:\\MDTProduction\\Control\\CustomSettings.ini file. After the USMTMigFiles002=MigUser.xml line add the following line: + + ``` syntax + USMTMigFiles003=MigContosoData.xml + ``` +3. Save the CustomSettings.ini file. + +## Refresh a Windows 7 SP1 client + +After adding the additional USMT template and configuring the CustomSettings.ini file to use it, you are now ready to refresh a Windows 7 SP1 client to Windows 10. In these steps, we assume you have a Windows 7 SP1 client named PC0001 in your environment that is ready for a refresh to Windows 10. + +>[!NOTE] +>MDT also supports an offline computer refresh. For more info on that scenario, see the USMTOfflineMigration property in the [MDT resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117). + +### Upgrade (refresh) a Windows 7 SP1 client + +1. On PC0001, log on as **CONTOSO\\Administrator**. Start the Lite Touch Deploy Wizard by executing **\\\\MDT01\\MDTProduction$\\Scripts\\Litetouch.vbs**. Complete the deployment guide using the following settings: + + * Select a task sequence to execute on this computer: Windows 10 Enterprise x64 RTM + * Computer name: <default> + * Specify where to save a complete computer backup: Do not back up the existing computer + >[!NOTE] + >Skip this optional full WIM backup. The USMT backup will still run. + +2. Select one or more applications to install: Install - Adobe Reader XI - x86 + +3. The setup now starts and does the following: + + * Backs up user settings and data using USMT. + * Installs the Windows 10 Enterprise x64 operating system. + * Installs the added application(s). + * Updates the operating system via your local Windows Server Update Services (WSUS) server. + * Restores user settings and data using USMT. + +![Start the computer refresh from the running Windows 7 client](../images/fig2-taskseq.png "Start the computer refresh from the running Windows 7 client") + +Figure 2. Starting the computer refresh from the running Windows 7 SP1 client. + +## Related topics + +[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md)
+[Create a Windows 10 reference image](create-a-windows-10-reference-image.md)
+[Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md)
+[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md)
+[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md)
+[Configure MDT settings](configure-mdt-settings.md) diff --git a/windows/deployment/deploy-windows-mdt/replace-a-windows-7-computer-with-a-windows-10-computer.md b/windows/deployment/deploy-windows-mdt/replace-a-windows-7-computer-with-a-windows-10-computer.md index dee4dd39d2..6e3454635d 100644 --- a/windows/deployment/deploy-windows-mdt/replace-a-windows-7-computer-with-a-windows-10-computer.md +++ b/windows/deployment/deploy-windows-mdt/replace-a-windows-7-computer-with-a-windows-10-computer.md @@ -26,22 +26,20 @@ For the purposes of this topic, we will use four machines: DC01, MDT01, PC0002, ![The machines used in this topic](../images/mdt-03-fig01.png "The machines used in this topic") -Figure 1. The machines used in this topic. +The computers used in this topic. -## Prepare for the computer replace +## Prepare for the computer replace When preparing for the computer replace, you need to create a folder in which to store the backup, and a backup only task sequence that you run on the old computer. ### Configure the rules on the Microsoft Deployment Toolkit (MDT) Production share 1. On MDT01, using the Deployment Workbench, update the MDT Production deployment share rules. - 2. Change the **SkipUserData=YES** option to **NO**, and click **OK**. ### Create and share the MigData folder 1. On MDT01, log on as **CONTOSO\\Administrator**. - 2. Create and share the **E:\\MigData** folder by running the following three commands in an elevated Windows PowerShell prompt: ``` powershell New-Item -Path E:\MigData -ItemType directory @@ -64,24 +62,20 @@ When preparing for the computer replace, you need to create a folder in which to ![The Backup Only Task Sequence action list](../images/mdt-03-fig02.png "The Backup Only Task Sequence action list") - Figure 2. The Backup Only Task Sequence action list. + The Backup Only Task Sequence action list. ## Perform the computer replace During a computer replace, these are the high-level steps that occur: 1. On the computer you are replacing, a special replace task sequence runs the USMT backup and, if you configured it, runs the optional full Window Imaging (WIM) backup. - 2. On the new machine, you perform a standard bare-metal deployment. At the end of the bare-metal deployment, the USMT backup from the old computer is restored. ### Execute the replace task sequence 1. On PC0002, log on as **CONTOSO\\Administrator**. - 2. Verify that you have write access to the **\\\\MDT01\\MigData$** share. - 3. Execute **\\\\MDT01\\MDTProduction$\\Scripts\\LiteTouch.vbs**. - 4. Complete the Windows Deployment Wizard using the following settings: 1. Select a task sequence to execute on this computer: Backup Only Task Sequence @@ -98,13 +92,13 @@ During a computer replace, these are the high-level steps that occur: ![The new task sequence](../images/mdt-03-fig03.png "The new task sequence") - Figure 3. The new task sequence running the Capture User State action on PC0002. + The new task sequence running the Capture User State action on PC0002. 5. On MDT01, verify that you have an USMT.MIG compressed backup file in the **E:\\MigData\\PC0002\\USMT** folder. ![The USMT backup](../images/mdt-03-fig04.png "The USMT backup") - Figure 4. The USMT backup of PC0002. + The USMT backup of PC0002. ### Deploy the PC0007 virtual machine @@ -120,7 +114,7 @@ During a computer replace, these are the high-level steps that occur: ![The initial PXE boot process](../images/mdt-03-fig05.png "The initial PXE boot process") - Figure 5. The initial PXE boot process of PC0005. + The initial PXE boot process of PC0005. 3. After Windows Preinstallation Environment (Windows PE) has booted, complete the Windows Deployment Wizard using the following settings: @@ -139,14 +133,9 @@ During a computer replace, these are the high-level steps that occur: ## Related topics -[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) - -[Create a Windows 10 reference image](create-a-windows-10-reference-image.md) - -[Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) - -[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) - -[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) - +[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md)
+[Create a Windows 10 reference image](create-a-windows-10-reference-image.md)
+[Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md)
+[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md)
+[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md)
[Configure MDT settings](configure-mdt-settings.md) diff --git a/windows/deployment/windows-10-poc-sc-config-mgr.md b/windows/deployment/windows-10-poc-sc-config-mgr.md index d9a32a74be..6c42d055c9 100644 --- a/windows/deployment/windows-10-poc-sc-config-mgr.md +++ b/windows/deployment/windows-10-poc-sc-config-mgr.md @@ -1,1081 +1,1083 @@ ---- -title: Step by step - Deploy Windows 10 using System Center Configuration Manager -description: Deploy Windows 10 in a test lab using System Center Configuration Manager -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: deploy -keywords: deployment, automate, tools, configure, sccm -ms.localizationpriority: medium -ms.date: 10/11/2017 -ms.reviewer: -manager: laurawi -ms.audience: itpro author: greg-lindsay -audience: itpro author: greg-lindsay -ms.topic: article ---- - -# Deploy Windows 10 in a test lab using System Center Configuration Manager - -**Applies to** - -- Windows 10 - -**Important**: This guide leverages the proof of concept (PoC) environment, and some settings that are configured in the following guides: -- [Step by step guide: Deploy Windows 10 in a test lab](windows-10-poc.md) -- [Deploy Windows 10 in a test lab using Microsoft Deployment Toolkit](windows-10-poc-mdt.md) - -Please complete all steps in these guides before attempting the procedures in this guide. If you wish to skip the Windows 10 deployment procedures in the MDT guide and move directly to this guide, you must at least install MDT and the Windows ADK before performing procedures in this guide. All steps in the first guide are required before attempting the procedures in this guide. - -The PoC environment is a virtual network running on Hyper-V with three virtual machines (VMs): -- **DC1**: A contoso.com domain controller, DNS server, and DHCP server. -- **SRV1**: A dual-homed contoso.com domain member server, DNS server, and default gateway providing NAT service for the PoC network. -- **PC1**: A contoso.com member computer running Windows 7, Windows 8, or Windows 8.1 that has been cloned from a physical computer on your corporate network for testing purposes. -This guide leverages the Hyper-V server role to perform procedures. If you do not complete all steps in a single session, consider using [checkpoints](https://technet.microsoft.com/library/dn818483.aspx) and [saved states](https://technet.microsoft.com/library/ee247418.aspx) to pause, resume, or restart your work. - ->Multiple features and services are installed on SRV1 in this guide. This is not a typical installation, and is only done to set up a lab environment with a bare minimum of resources. However, if less than 4 GB of RAM is allocated to SRV1 in the Hyper-V console, some procedures will be extremely slow to complete. If resources are limited on the Hyper-V host, consider reducing RAM allocation on DC1 and PC1, and then increasing the RAM allocation on SRV1. You can adjust RAM allocation for a VM by right-clicking the VM in the Hyper-V Manager console, clicking **Settings**, clicking **Memory**, and modifying the value next to **Maximum RAM**. - -## In this guide - -This guide provides end-to-end instructions to install and configure System Center Configuration Manager, and use it to deploy a Windows 10 image. Depending on the speed of your Hyper-V host, the procedures in this guide will require 6-10 hours to complete. - -Topics and procedures in this guide are summarized in the following table. An estimate of the time required to complete each procedure is also provided. Time required to complete procedures will vary depending on the resources available to the Hyper-V host and assigned to VMs, such as processor speed, memory allocation, disk speed, and network speed. - -
- -
- -
TopicDescriptionTime - -
Install prerequisitesInstall prerequisite Windows Server roles and features, download, install and configure SQL Server, configure firewall rules, and install the Windows ADK.60 minutes -
Install System Center Configuration ManagerDownload System Center Configuration Manager, configure prerequisites, and install the package.45 minutes -
Download MDOP and install DaRTDownload the Microsoft Desktop Optimization Pack 2015 and install DaRT 10.15 minutes -
Prepare for Zero Touch installationPrerequisite procedures to support Zero Touch installation.60 minutes -
Create a boot image for Configuration ManagerUse the MDT wizard to create the boot image in Configuration Manager.20 minutes -
Create a Windows 10 reference imageThis procedure can be skipped if it was done previously, otherwise instructions are provided to create a reference image.0-60 minutes -
Add a Windows 10 operating system imageAdd a Windows 10 operating system image and distribute it.10 minutes
Create a task sequenceCreate a Configuration Manager task sequence with MDT integration using the MDT wizard15 minutes -
Finalize the operating system configurationEnable monitoring, configure rules, and distribute content.30 minutes -
Deploy Windows 10 using PXE and Configuration ManagerDeploy Windows 10 using Configuration Manager deployment packages and task sequences.60 minutes -
Replace a client with Windows 10 using Configuration ManagerReplace a client computer with Windows 10 using Configuration Manager.90 minutes -
Refresh a client with Windows 10 using Configuration ManagerUse a task sequence to refresh a client with Windows 10 using Configuration Manager and MDT90 minutes - -
- -
- -## Install prerequisites -1. Before installing System Center Configuration Manager, we must install prerequisite services and features. Type the following command at an elevated Windows PowerShell prompt on SRV1: - - ``` - Install-WindowsFeature Web-Windows-Auth,Web-ISAPI-Ext,Web-Metabase,Web-WMI,BITS,RDC,NET-Framework-Features,Web-Asp-Net,Web-Asp-Net45,NET-HTTP-Activation,NET-Non-HTTP-Activ - ``` - - >If the request to add features fails, retry the installation by typing the command again. - -2. Download [SQL Server 2014 SP2](https://www.microsoft.com/en-us/evalcenter/evaluate-sql-server-2014-sp2) from the Microsoft Evaluation Center as an .ISO file on the Hyper-V host computer. Save the file to the **C:\VHD** directory. -3. When you have downloaded the file **SQLServer2014SP2-FullSlipstream-x64-ENU.iso** and placed it in the C:\VHD directory, type the following command at an elevated Windows PowerShell prompt on the Hyper-V host: - - ``` - Set-VMDvdDrive -VMName SRV1 -Path c:\VHD\SQLServer2014SP2-FullSlipstream-x64-ENU.iso - ``` - - This command mounts the .ISO file to drive D on SRV1. - -4. Type the following command at an elevated Windows PowerShell prompt on SRV1 to install SQL Server: - - ``` - D:\setup.exe /q /ACTION=Install /ERRORREPORTING="False" /FEATURES=SQLENGINE,RS,IS,SSMS,TOOLS,ADV_SSMS,CONN /INSTANCENAME=MSSQLSERVER /INSTANCEDIR="C:\Program Files\Microsoft SQL Server" /SQLSVCACCOUNT="NT AUTHORITY\System" /SQLSYSADMINACCOUNTS="BUILTIN\ADMINISTRATORS" /SQLSVCSTARTUPTYPE=Automatic /AGTSVCACCOUNT="NT AUTHORITY\SYSTEM" /AGTSVCSTARTUPTYPE=Automatic /RSSVCACCOUNT="NT AUTHORITY\System" /RSSVCSTARTUPTYPE=Automatic /ISSVCACCOUNT="NT AUTHORITY\System" /ISSVCSTARTUPTYPE=Disabled /ASCOLLATION="Latin1_General_CI_AS" /SQLCOLLATION="SQL_Latin1_General_CP1_CI_AS" /TCPENABLED="1" /NPENABLED="1" /IAcceptSQLServerLicenseTerms - ``` - Installation will take several minutes. When installation is complete, the following output will be displayed: - - ``` - Microsoft (R) SQL Server 2014 12.00.5000.00 - Copyright (c) Microsoft Corporation. All rights reserved. - - Microsoft (R) .NET Framework CasPol 2.0.50727.7905 - Copyright (c) Microsoft Corporation. All rights reserved. - - Success - Microsoft (R) .NET Framework CasPol 2.0.50727.7905 - Copyright (c) Microsoft Corporation. All rights reserved. - - Success - One or more affected files have operations pending. - You should restart your computer to complete this process. - PS C:\> - ``` -5. Type the following commands at an elevated Windows PowerShell prompt on SRV1: - - ``` - New-NetFirewallRule -DisplayName “SQL Server” -Direction Inbound –Protocol TCP –LocalPort 1433 -Action allow - New-NetFirewallRule -DisplayName “SQL Admin Connection” -Direction Inbound –Protocol TCP –LocalPort 1434 -Action allow - New-NetFirewallRule -DisplayName “SQL Database Management” -Direction Inbound –Protocol UDP –LocalPort 1434 -Action allow - New-NetFirewallRule -DisplayName “SQL Service Broker” -Direction Inbound –Protocol TCP –LocalPort 4022 -Action allow - New-NetFirewallRule -DisplayName “SQL Debugger/RPC” -Direction Inbound –Protocol TCP –LocalPort 135 -Action allow - ``` - -7. Download and install the latest [Windows Assessment and Deployment Kit (ADK)](https://developer.microsoft.com/en-us/windows/hardware/windows-assessment-deployment-kit) on SRV1 using the default installation settings. The current version is the ADK for Windows 10, version 1703. Installation might require several minutes to acquire all components. - -## Install System Center Configuration Manager - -1. On SRV1, temporarily disable IE Enhanced Security Configuration for Administrators by typing the following commands at an elevated Windows PowerShell prompt: - - ``` - $AdminKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}" - Set-ItemProperty -Path $AdminKey -Name “IsInstalled” -Value 0 - Stop-Process -Name Explorer - ``` - -2. Download [System Center Configuration Manager and Endpoint Protection](https://www.microsoft.com/en-us/evalcenter/evaluate-system-center-configuration-manager-and-endpoint-protection) on SRV1 (download the executable file anywhere on SRV1), double-click the file, enter **C:\configmgr** for **Unzip to folder**, and click **Unzip**. The C:\configmgr directory will be automatically created. Click **OK** and then close the **WinZip Self-Extractor** dialog box when finished. - -3. Before starting the installation, verify that WMI is working on SRV1. See the following examples. Verify that **Running** is displayed under **Status** and **True** is displayed next to **TcpTestSucceeded**: - - ``` - Get-Service Winmgmt - - Status Name DisplayName - ------ ---- ----------- - Running Winmgmt Windows Management Instrumentation - - Test-NetConnection -ComputerName 192.168.0.2 -Port 135 -InformationLevel Detailed - - ComputerName : 192.168.0.2 - RemoteAddress : 192.168.0.2 - RemotePort : 135 - AllNameResolutionResults : - MatchingIPsecRules : - NetworkIsolationContext : Internet - InterfaceAlias : Ethernet - SourceAddress : 192.168.0.2 - NetRoute (NextHop) : 0.0.0.0 - PingSucceeded : True - PingReplyDetails (RTT) : 0 ms - TcpTestSucceeded : True - ``` - You can also verify WMI using the WMI console by typing **wmimgmt.msc**, right-clicking **WMI Control (Local)** in the console tree, and then clicking **Properties**. - - If the WMI service is not started, attempt to start it or reboot the computer. If WMI is running but errors are present, see [WMIDiag](https://blogs.technet.microsoft.com/askperf/2015/05/12/wmidiag-2-2-is-here/) for troubleshooting information. - -4. To extend the Active Directory schema, type the following command at an elevated Windows PowerShell prompt: - - ``` - cmd /c C:\configmgr\SMSSETUP\BIN\X64\extadsch.exe - ``` - -5. Temporarily switch to the DC1 VM, and type the following command at an elevated command prompt on DC1: - - ``` - adsiedit.msc - ``` - -6. Right-click **ADSI Edit**, click **Connect to**, select **Default (Domain or server that you logged in to)** under **Computer** and then click **OK**. -7. Expand **Default naming context**>**DC=contoso,DC=com**, and then in the console tree right-click **CN=System**, point to **New**, and then click **Object**. -8. Click **container** and then click **Next**. -9. Next to **Value**, type **System Management**, click **Next**, and then click **Finish**. -10. Right-click **CN=system Management** and then click **Properties**. -11. On the **Security** tab, click **Add**, click **Object Types**, select **Computers**, and click **OK**. -12. Under **Enter the object names to select**, type **SRV1** and click **OK**. -13. The **SRV1** computer account will be highlighted, select **Allow** next to **Full control**. -14. Click **Advanced**, click **SRV1 (CONTOSO\SRV1$)** and click **Edit**. -15. Next to **Applies to**, choose **This object and all descendant objects**, and then click **OK** three times. -16. Close the ADSI Edit console and switch back to SRV1. -17. To start Configuration Manager installation, type the following command at an elevated Windows PowerShell prompt on SRV1: - - ``` - cmd /c C:\configmgr\SMSSETUP\BIN\X64\Setup.exe - ``` -18. Provide the following in the System Center Configuration Manager Setup Wizard: - - **Before You Begin**: Read the text and click *Next*. - - **Getting Started**: Choose **Install a Configuration Manager primary site** and select the **Use typical installation options for a stand-alone primary site** checkbox. - - Click **Yes** in response to the popup window. - - **Product Key**: Choose **Install the evaluation edition of this Product**. - - **Microsoft Software License Terms**: Read the terms and then select the **I accept these license terms** checkbox. - - **Prerequisite Licenses**: Review license terms and select all three checkboxes on the page. - - **Prerequisite Downloads**: Choose **Download required files** and enter **c:\windows\temp** next to **Path**. - - **Site and Installation Settings**: Site code: **PS1**, Site name: **Contoso**. - - use default settings for all other options - - **Usage Data**: Read the text and click **Next**. - - **Service Connection Point Setup**: Accept the default settings (SRV1.contoso.com is automatically added under Select a server to use). - - **Settings Summary**: Review settings and click **Next**. - - **Prerequisite Check**: No failures should be listed. Ignore any warnings and click **Begin Install**. - - >There should be at most three warnings present: WSUS on site server, configuration for SQL Server memory usage, and SQL Server process memory allocation. These warnings can safely be ignored in this test environment. - - Depending on the speed of the Hyper-V host and resources allocated to SRV1, installation can require approximately one hour. Click **Close** when installation is complete. - -19. If desired, re-enable IE Enhanced Security Configuration at this time on SRV1: - - ``` - Set-ItemProperty -Path $AdminKey -Name “IsInstalled” -Value 1 - Stop-Process -Name Explorer - ``` - -## Download MDOP and install DaRT - ->[!IMPORTANT] ->This step requires an MSDN subscription or volume licence agreement. For more information, see [Ready for Windows 10: MDOP 2015 and more tools are now available](https://blogs.technet.microsoft.com/windowsitpro/2015/08/17/ready-for-windows-10-mdop-2015-and-more-tools-are-now-available/). ->If your organization qualifies and does not already have an MSDN subscription, you can obtain a [free MSDN subscription with BizSpark](https://blogs.msdn.microsoft.com/zainnab/2011/03/14/bizspark-free-msdn-subscription-for-start-up-companies/). - -1. Download the [Microsoft Desktop Optimization Pack 2015](https://msdn.microsoft.com/subscriptions/downloads/#ProductFamilyId=597) to the Hyper-V host using an MSDN subscription. Download the .ISO file (mu_microsoft_desktop_optimization_pack_2015_x86_x64_dvd_5975282.iso, 2.79 GB) to the C:\VHD directory on the Hyper-V host. - -2. Type the following command at an elevated Windows PowerShell prompt on the Hyper-V host to mount the MDOP file on SRV1: - - ``` - Set-VMDvdDrive -VMName SRV1 -Path c:\VHD\mu_microsoft_desktop_optimization_pack_2015_x86_x64_dvd_5975282.iso - ``` -3. Type the following command at an elevated Windows PowerShell prompt on SRV1: - - ``` - cmd /c "D:\DaRT\DaRT 10\Installers\en-us\x64\MSDaRT100.msi" - ``` -4. Install DaRT 10 using default settings. -5. Type the following commands at an elevated Windows PowerShell prompt on SRV1: - - ``` - Copy-Item "C:\Program Files\Microsoft DaRT\v10\Toolsx64.cab" -Destination "C:\Program Files\Microsoft Deployment Toolkit\Templates\Distribution\Tools\x64" - Copy-Item "C:\Program Files\Microsoft DaRT\v10\Toolsx86.cab" -Destination "C:\Program Files\Microsoft Deployment Toolkit\Templates\Distribution\Tools\x86" - ``` - -## Prepare for Zero Touch installation - -This section contains several procedures to support Zero Touch installation with System Center Configuration Manager. - -### Create a folder structure - -1. Type the following commands at a Windows PowerShell prompt on SRV1: - - ``` - New-Item -ItemType Directory -Path "C:\Sources\OSD\Boot" - New-Item -ItemType Directory -Path "C:\Sources\OSD\OS" - New-Item -ItemType Directory -Path "C:\Sources\OSD\Settings" - New-Item -ItemType Directory -Path "C:\Sources\OSD\Branding" - New-Item -ItemType Directory -Path "C:\Sources\OSD\MDT" - New-Item -ItemType Directory -Path "C:\Logs" - New-SmbShare -Name Sources$ -Path C:\Sources -ChangeAccess EVERYONE - New-SmbShare -Name Logs$ -Path C:\Logs -ChangeAccess EVERYONE - ``` - -### Enable MDT ConfigMgr integration - -1. On SRV1, click **Start**, type **configmgr**, and then click **Configure ConfigMgr Integration**. -2. Type **PS1** next to **Site code**, and then click **Next**. -3. Verify **The process completed successfully** is displayed, and then click **Finish**. - -### Configure client settings - -1. On SRV1, click **Start**, type **configuration manager**, right-click **Configuration Manager Console**, and then click **Pin to Taskbar**. -2. Click **Desktop**, and then launch the Configuration Manager console from the taskbar. -3. If the console notifies you that an update is available, click **OK**. It is not necessary to install updates to complete this lab. -4. In the console tree, open the **Administration** workspace (in the lower left corner) and click **Client Settings**. -5. In the display pane, double-click **Default Client Settings**. -6. Click **Computer Agent**, next to **Organization name displayed in Software Center** type **Contoso**, and then click **OK**. - -### Configure the network access account - -1. In the Administration workspace, expand **Site Configuration** and click **Sites**. -2. On the **Home** ribbon at the top of the console window, click **Configure Site Components** and then click **Software Distribution**. -3. On the **Network Access Account** tab, choose **Specify the account that accesses network locations**. -4. Click the yellow starburst and then click **New Account**. -5. Click **Browse** and then under **Enter the object name to select**, type **CM_NAA** and click **OK**. -6. Next to **Password** and **Confirm Password**, type pass@word1, and then click **OK** twice. - -### Configure a boundary group - -1. In the Administration workspace, expand **Hierarchy Configuration**, right-click **Boundaries** and then click **Create Boundary**. -2. Next to **Description**, type **PS1**, next to **Type** choose **Active Directory Site**, and then click **Browse**. -3. Choose **Default-First-Site-Name** and then click **OK** twice. -4. In the Administration workspace, right-click **Boundary Groups** and then click **Create Boundary Group**. -5. Next to **Name**, type **PS1 Site Assignment and Content Location**, click **Add**, select the **Default-First-Site-Name** boundary and then click **OK**. -6. On the **References** tab in the **Create Boundary Group** window select the **Use this boundary group for site assignment** checkbox. -7. Click **Add**, select the **\\\SRV1.contoso.com** checkbox, and then click **OK** twice. - -### Add the state migration point role - -1. In the Administration workspace, expand **Site Configuration**, click **Sites**, and then in on the **Home** ribbon at the top of the console click **Add Site System Roles**. -2. In the Add site System Roles Wizard, click **Next** twice and then on the Specify roles for this server page, select the **State migration point** checkbox. -3. Click **Next**, click the yellow starburst, type **C:\MigData** for the **Storage folder**, and click **OK**. -4. Click **Next**, and then verify under **Boundary groups** that **PS1 Site Assignment and Content Location** is displayed. -5. Click **Next** twice and then click **Close**. - -### Enable PXE on the distribution point - ->[!IMPORTANT] ->Before enabling PXE in Configuration Manager, ensure that any previous installation of WDS does not cause conflicts. Configuration Manager will automatically configure the WDS service to manage PXE requests. To disable a previous installation, if it exists, type the following commands at an elevated Windows PowerShell prompt on SRV1: - -``` -WDSUTIL /Set-Server /AnswerClients:None -``` - -1. Determine the MAC address of the internal network adapter on SRV1. To determine this, type the following command at an elevated Windows PowerShell prompt on SRV1: - - ``` - (Get-NetAdapter "Ethernet").MacAddress - ``` - >If the internal network adapter, assigned an IP address of 192.168.0.2, is not named "Ethernet" then replace the name "Ethernet" in the previous command with the name of this network adapter. You can review the names of network adapters and the IP addresses assigned to them by typing **ipconfig**. - -2. In the System Center Configuration Manager console, in the **Administration** workspace, click **Distribution Points**. -3. In the display pane, right-click **SRV1.CONTOSO.COM** and then click **Properties**. -4. On the PXE tab, select the following settings: - - **Enable PXE support for clients**. Click **Yes** in the popup that appears. - - **Allow this distribution point to respond to incoming PXE requests** - - **Enable unknown computer support**. Click **OK** in the popup that appears. - - **Require a password when computers use PXE** - - **Password** and **Confirm password**: pass@word1 - - **Respond to PXE requests on specific network interfaces**: Click the yellow starburst and then enter the MAC address determined in the first step of this procedure. - - See the following example: - - Config Mgr PXE - -5. Click **OK**. -6. Wait for a minute, then type the following command at an elevated Windows PowerShell prompt on SRV1, and verify that the files displayed are present: - - ``` - cmd /c dir /b C:\RemoteInstall\SMSBoot\x64 - - abortpxe.com - bootmgfw.efi - bootmgr.exe - pxeboot.com - pxeboot.n12 - wdsmgfw.efi - wdsnbp.com - ``` - >If these files are not present in the C:\RemoteInstall directory, verify that the REMINST share is configured as C:\RemoteInstall. You can view the properties of this share by typing "net share REMINST" at a command prompt. If the share path is set to a different value, then replace C:\RemoteInstall with your REMINST share path. - >You can also type the following command at an elevated Windows PowerShell prompt to open the Configuration Manager Trace Log Tool. In the tool, click **File**, click **Open**, and then open the **distmgr.log** file. If errors are present, they will be highlighted in red: - - ``` - Invoke-Item 'C:\Program Files\Microsoft Configuration Manager\tools\cmtrace.exe' - ``` - - The log file will updated continuously while Configuration Manager is running. Wait for Configuration Manager to repair any issues that are present, and periodically re-check that the files are present in the REMINST share location. Close the Configuration Manager Trace Log Tool when done. You will see the following line in distmgr.log that indicates the REMINST share is being populated with necessary files: - - Running: WDSUTIL.exe /Initialize-Server /REMINST:"C:\RemoteInstall" - - Once the files are present in the REMINST share location, you can close the cmtrace tool. - -### Create a branding image file - -1. If you have a bitmap (.BMP) image for suitable use as a branding image, copy it to the C:\Sources\OSD\Branding folder on SRV1. Otherwise, use the following step to copy a simple branding image. -2. Type the following command at an elevated Windows PowerShell prompt: - - ``` - copy "C:\ProgramData\Microsoft\User Account Pictures\user.bmp" "C:\Sources\OSD\Branding\contoso.bmp" - ``` - >You can open C:\Sources\OSD\Branding\contoso.bmp in MSPaint.exe if desired to customize this image. - - -### Create a boot image for Configuration Manager - -1. In the Configuration Manager console, in the **Software Library** workspace, expand **Operating Systems**, right-click **Boot Images**, and then click **Create Boot Image using MDT**. -2. On the Package Source page, under **Package source folder to be created (UNC Path):**, type **\\\SRV1\Sources$\OSD\Boot\Zero Touch WinPE x64**, and then click **Next**. - - The Zero Touch WinPE x64 folder does not yet exist. The folder will be created later. -3. On the General Settings page, type **Zero Touch WinPE x64** next to **Name**, and click **Next**. -4. On the Options page, under **Platform** choose **x64**, and click **Next**. -5. On the Components page, in addition to the default selection of **Microsoft Data Access Components (MDAC/ADO) support**, select the **Microsoft Diagnostics and Recovery Toolkit (DaRT)** checkbox, and click **Next**. -6. On the Customization page, select the **Use a custom background bitmap file** checkbox, and under **UNC path**, type or browse to **\\\SRV1\Sources$\OSD\Branding\contoso.bmp**, and then click **Next** twice. It will take a few minutes to generate the boot image. -7. Click **Finish**. -8. In the console display pane, right-click the **Zero Touch WinPE x64** boot image, and then click **Distribute Content**. -9. In the Distribute Content Wizard, click **Next**, click **Add** and select **Distribution Point**, select the **SRV1.CONTOSO.COM** checkbox, click **OK**, click **Next** twice, and then click **Close**. -10. Use the CMTrace application to view the **distmgr.log** file again and verify that the boot image has been distributed. To open CMTrace, type the following command at an elevated Windows PowerShell prompt on SRV1: - - ``` - Invoke-Item 'C:\Program Files\Microsoft Configuration Manager\tools\cmtrace.exe' - ``` - - In the trace tool, click **Tools** on the menu and choose **Find**. Search for "**STATMSG: ID=2301**". For example: - - ``` - STATMSG: ID=2301 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_DISTRIBUTION_MANAGER" SYS=SRV1.CONTOSO.COM SITE=PS1 PID=924 TID=1424 GMTDATE=Tue Oct 09 22:36:30.986 2018 ISTR0="Zero Touch WinPE x64" ISTR1="PS10000A" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=1 AID0=400 AVAL0="PS10000A" SMS_DISTRIBUTION_MANAGER 10/9/2018 3:36:30 PM 1424 (0x0590) - ``` - -11. You can also review status by clicking the **Zero Touch WinPE x64** image, and then clicking **Content Status** under **Related Objects** in the bottom right-hand corner of the console, or by entering **\Monitoring\Overview\Distribution Status\Content Status** on the location bar in the console. Double-click **Zero Touch WinPE x64** under **Content Status** in the console tree and verify that a status of **Successfully distributed content** is displayed on the **Success** tab. -12. Next, in the **Software Library** workspace, double-click **Zero Touch WinPE x64** and then click the **Data Source** tab. -13. Select the **Deploy this boot image from the PXE-enabled distribution point** checkbox, and click **OK**. -14. Review the distmgr.log file again for "**STATMSG: ID=2301**" and verify that there are three folders under **C:\RemoteInstall\SMSImages** with boot images. See the following example: - - ``` - cmd /c dir /s /b C:\RemoteInstall\SMSImages - - C:\RemoteInstall\SMSImages\PS100004 - C:\RemoteInstall\SMSImages\PS100005 - C:\RemoteInstall\SMSImages\PS100006 - C:\RemoteInstall\SMSImages\PS100004\boot.PS100004.wim - C:\RemoteInstall\SMSImages\PS100005\boot.PS100005.wim - C:\RemoteInstall\SMSImages\PS100006\WinPE.PS100006.wim - ``` - - >The first two images (*.wim files) are default boot images. The third is the new boot image with DaRT. - -### Create a Windows 10 reference image - -If you have already completed steps in [Deploy Windows 10 in a test lab using Microsoft Deployment Toolkit](windows-10-poc-mdt.md) then you have already created a Windows 10 reference image. In this case, skip to the next procedure in this guide: [Add a Windows 10 operating system image](#add-a-windows-10-operating-system-image). If you have not yet created a Windows 10 reference image, complete the steps in this section. - -1. In [Step by step guide: Deploy Windows 10 in a test lab](windows-10-poc.md) the Windows 10 Enterprise .iso file was saved to the c:\VHD directory as **c:\VHD\w10-enterprise.iso**. The first step in creating a deployment share is to mount this file on SRV1. To mount the Windows 10 Enterprise DVD on SRV1, open an elevated Windows PowerShell prompt on the Hyper-V host computer and type the following command: - - ``` - Set-VMDvdDrive -VMName SRV1 -Path c:\VHD\w10-enterprise.iso - ``` -2. Verify that the Windows Enterprise installation DVD is mounted on SRV1 as drive letter D. - -3. The Windows 10 Enterprise installation files will be used to create a deployment share on SRV1 using the MDT deployment workbench. To open the deployment workbench, click **Start**, type **deployment**, and then click **Deployment Workbench**. - -4. In the Deployment Workbench console, right-click **Deployment Shares** and select **New Deployment Share**. - -5. Use the following settings for the New Deployment Share Wizard: - - Deployment share path: **C:\MDTBuildLab**
- - Share name: **MDTBuildLab$**
- - Deployment share description: **MDT build lab**
- - Options: click **Next** to accept the default
- - Summary: click **Next**
- - Progress: settings will be applied
- - Confirmation: click **Finish** - -6. Expand the **Deployment Shares** node, and then expand **MDT build lab**. - -7. Right-click the **Operating Systems** node, and then click **New Folder**. Name the new folder **Windows 10**. Complete the wizard using default values and click **Finish**. - -7. Right-click the **Windows 10** folder created in the previous step, and then click **Import Operating System**. - -8. Use the following settings for the Import Operating System Wizard: - - OS Type: **Full set of source files**
- - Source: **D:\\**
- - Destination: **W10Ent_x64**
- - Summary: click **Next** - - Confirmation: click **Finish** - -9. For purposes of this test lab, we will not add applications, such as Microsoft Office, to the deployment share. For information about adding applications, see the [Add applications](deploy-windows-mdt/create-a-windows-10-reference-image.md#sec03) section of the [Create a Windows 10 reference image](deploy-windows-mdt/create-a-windows-10-reference-image.md) topic in the TechNet library. - -10. The next step is to create a task sequence to reference the operating system that was imported. To create a task sequence, right-click the **Task Sequences** node under **MDT Build Lab** and then click **New Task Sequence**. Use the following settings for the New Task Sequence Wizard: - - Task sequence ID: **REFW10X64-001**
- - Task sequence name: **Windows 10 Enterprise x64 Default Image**
- - Task sequence comments: **Reference Build**
- - Template: **Standard Client Task Sequence** - - Select OS: click **Windows 10 Enterprise Evaluation in W10Ent_x64 install.wim** - - Specify Product Key: **Do not specify a product key at this time** - - Full Name: **Contoso** - - Organization: **Contoso** - - Internet Explorer home page: **http://www.contoso.com** - - Admin Password: **Do not specify an Administrator password at this time** - - Summary: click **Next** - - Confirmation: click **Finish** - -11. Edit the task sequence to add the Microsoft NET Framework 3.5, which is required by many applications. To edit the task sequence, double-click **Windows 10 Enterprise x64 Default Image** that was created in the previous step. - -12. Click the **Task Sequence** tab. Under **State Restore** click **Tatto** to highlight it, then click **Add** and choose **New Group**. A new group will be added under Tattoo. - -13. On the Properties tab of the group that was created in the previous step, change the Name from New Group to **Custom Tasks (Pre-Windows Update)** and then click **Apply**. To see the name change, click **Tattoo**, then click the new group again. - -14. Click the **Custom Tasks (Pre-Windows Update)** group again, click **Add**, point to **Roles**, and then click **Install Roles and Features**. - -15. Under **Select the roles and features that should be installed**, select **.NET Framework 3.5 (includes .NET 2.0 and 3.0)** and then click **Apply**. - -16. Enable Windows Update in the task sequence by clicking the **Windows Update (Post-Application Installation)** step, clicking the **Options** tab, and clearing the **Disable this step** checkbox. - >Note: Since we are not installing applications in this test lab, there is no need to enable the Windows Update Pre-Application Installation step. However, you should enable this step if you are also installing applications. - -17. Click **OK** to complete editing the task sequence. - -18. The next step is to configure the MDT deployment share rules. To configure rules in the Deployment Workbench, right-click MDT build lab (C:\MDTBuildLab) and click **Properties**, and then click the **Rules** tab. - -19. Replace the default rules with the following text: - - ``` - [Settings] - Priority=Default - - [Default] - _SMSTSORGNAME=Contoso - UserDataLocation=NONE - DoCapture=YES - OSInstall=Y - AdminPassword=pass@word1 - TimeZoneName=Pacific Standard TimeZoneName - OSDComputername=#Left("PC-%SerialNumber%",7)# - JoinWorkgroup=WORKGROUP - HideShell=YES - FinishAction=SHUTDOWN - DoNotCreateExtraPartition=YES - ApplyGPOPack=NO - SkipAdminPassword=YES - SkipProductKey=YES - SkipComputerName=YES - SkipDomainMembership=YES - SkipUserData=YES - SkipLocaleSelection=YES - SkipTaskSequence=NO - SkipTimeZone=YES - SkipApplications=YES - SkipBitLocker=YES - SkipSummary=YES - SkipRoles=YES - SkipCapture=NO - SkipFinalSummary=NO - ``` - -20. Click **Apply** and then click **Edit Bootstrap.ini**. Replace the contents of the Bootstrap.ini file with the following text, and save the file: - - ``` - [Settings] - Priority=Default - - [Default] - DeployRoot=\\SRV1\MDTBuildLab$ - UserDomain=CONTOSO - UserID=MDT_BA - UserPassword=pass@word1 - SkipBDDWelcome=YES - ``` - -21. Click **OK** to complete the configuration of the deployment share. - -22. Right-click **MDT build lab (C:\MDTBuildLab)** and then click **Update Deployment Share**. - -23. Accept all default values in the Update Deployment Share Wizard by clicking **Next**. The update process will take 5 to 10 minutes. When it has completed, click **Finish**. - -24. Copy **c:\MDTBuildLab\Boot\LiteTouchPE_x86.iso** on SRV1 to the **c:\VHD** directory on the Hyper-V host computer. Note that in MDT, the x86 boot image can deploy both x86 and x64 operating systems, except on computers based on Unified Extensible Firmware Interface (UEFI). - - >Hint: Top copy the file, right-click the **LiteTouchPE_x86.iso** file and click **Copy** on SRV1, then open the **c:\VHD** folder on the Hyper-V host, right-click inside the folder and click **Paste**. - -25. Open a Windows PowerShell prompt on the Hyper-V host computer and type the following commands: - - ``` - New-VM –Name REFW10X64-001 -SwitchName poc-internal -NewVHDPath "c:\VHD\REFW10X64-001.vhdx" -NewVHDSizeBytes 60GB - Set-VMMemory -VMName REFW10X64-001 -DynamicMemoryEnabled $true -MinimumBytes 1024MB -MaximumBytes 1024MB -Buffer 20 - Set-VMDvdDrive -VMName REFW10X64-001 -Path c:\VHD\LiteTouchPE_x86.iso - Start-VM REFW10X64-001 - vmconnect localhost REFW10X64-001 - ``` -26. In the Windows Deployment Wizard, select **Windows 10 Enterprise x64 Default Image**, and then click **Next**. - -27. Accept the default values on the Capture Image page, and click **Next**. Operating system installation will complete after 5 to 10 minutes and then the VM will reboot automatically. Allow the system to boot normally (do not press a key). The process is fully automated. - - Additional system restarts will occur to complete updating and preparing the operating system. Setup will complete the following procedures: - - - Install the Windows 10 Enterprise operating system. - - Install added applications, roles, and features. - - Update the operating system using Windows Update (or WSUS if optionally specified). - - Stage Windows PE on the local disk. - - Run System Preparation (Sysprep) and reboot into Windows PE. - - Capture the installation to a Windows Imaging (WIM) file. - - Turn off the virtual machine. - - This step requires from 30 minutes to 2 hours, depending on the speed of the Hyper-V host and your network's download speed. After some time, you will have a Windows 10 Enterprise x64 image that is fully patched and has run through Sysprep. The image is located in the C:\MDTBuildLab\Captures folder on SRV1. The file name is **REFW10X64-001.wim**. - -### Add a Windows 10 operating system image - -1. Type the following commands at an elevated Windows PowerShell prompt on SRV1: - - ``` - New-Item -ItemType Directory -Path "C:\Sources\OSD\OS\Windows 10 Enterprise x64" - cmd /c copy /z "C:\MDTBuildLab\Captures\REFW10X64-001.wim" "C:\Sources\OSD\OS\Windows 10 Enterprise x64" - ``` - -2. In the Configuration Manager console, in the **Software Library** workspace, expand **Operating Systems**, right-click **Operating System Images**, and then click **Add Operating System Image**. - -3. On the Data Source page, under **Path:**, type or browse to **\\\SRV1\Sources$\OSD\OS\Windows 10 Enterprise x64\REFW10X64-001.wim**, and click **Next**. - -4. On the General page, next to **Name:**, type **Windows 10 Enterprise x64**, click **Next** twice, and then click **Close**. - -5. Distribute the operating system image to the SRV1 distribution point by right-clicking the **Windows 10 Enterprise x64** operating system image and then clicking **Distribute Content**. - -6. In the Distribute Content Wizard, click **Next**, click **Add**, click **Distribution Point**, add the **SRV1.CONTOSO.COM** distribution point, click **OK**, click **Next** twice and then click **Close**. - -7. Enter **\Monitoring\Overview\Distribution Status\Content Status** on the location bar (be sure there is no space at the end of the location or you will get an error), click **Windows 10 Enterprise x64**, and monitor the status of content distribution until it is successful and no longer in progress. Refresh the view with the F5 key or by right-clicking **Windows 10 Enterprise x64** and clicking **Refresh**. Processing of the image on the site server can take several minutes. - - >If content distribution is not successful, verify that sufficient disk space is available. - -### Create a task sequence - ->Complete this section slowly. There are a large number of similar settings from which to choose. - -1. In the Configuration Manager console, in the **Software Library** workspace expand **Operating Systems**, right-click **Task Sequences**, and then click **Create MDT Task Sequence**. - -2. On the Choose Template page, select the **Client Task Sequence** template and click **Next**. - -3. On the General page, type **Windows 10 Enterprise x64** under **Task sequence name:** and then click **Next**. - -4. On the Details page, enter the following settings: - - Join a domain: **contoso.com** - - Account: click **Set** - - User name: **contoso\CM_JD** - - Password: pass@word1 - - Confirm password: pass@word1 - - Click **OK** - - Windows Settings - - User name: **Contoso** - - Organization name: **Contoso** - - Product key: \ - - Administrator Account: **Enable the account and specify the local administrator password** - - Password: pass@word1 - - Confirm password: pass@word1 - - Click **Next** - -5. On the Capture Settings page, accept the default settings and click **Next**. - -6. On the Boot Image page, browse and select the **Zero Touch WinPE x64** boot image package, click **OK**, and then click **Next**. - -7. On the MDT Package page, select **Create a new Microsoft Deployment Toolkit Files package**, under **Package source folder to be created (UNC Path):**, type **\\\SRV1\Sources$\OSD\MDT\MDT** (MDT is repeated here, not a typo), and then click **Next**. - -8. On the MDT Details page, next to **Name:** type **MDT** and then click **Next**. - -9. On the OS Image page, browse and select the **Windows 10 Enterprise x64** package, click **OK**, and then click **Next**. - -10. On the Deployment Method page, accept the default settings for **Zero Touch Installation** and click **Next**. - -11. On the Client Package page, browse and select the **Microsoft Corporation Configuration Manager Client package**, click **OK**, and then click **Next**. - -12. On the USMT Package page, browse and select the **Microsoft Corporation User State Migration Tool for Windows 10.0.14393.0** package, click **OK**, and then click **Next**. - -13. On the Settings Package page, select **Create a new settings package**, and under **Package source folder to be created (UNC Path):**, type **\\\SRV1\Sources$\OSD\Settings\Windows 10 x64 Settings**, and then click **Next**. - -14. On the Settings Details page, next to **Name:**, type **Windows 10 x64 Settings**, and click **Next**. - -15. On the Sysprep Package page, click **Next** twice. - -16. On the Confirmation page, click **Finish**. - -### Edit the task sequence - -1. In the Configuration Manager console, in the **Software Library** workspace, click **Task Sequences**, right-click **Windows 10 Enterprise x64**, and then click **Edit**. - -2. Scroll down to the **Install** group and click the **Set Variable for Drive Letter** action. - -3. Change the Value under **OSDPreserveDriveLetter** from **False** to **True**, and then click **Apply**. - -4. In the **State Restore** group, click the **Set Status 5** action, click **Add** in the upper left corner, point to **User State**, and click **Request State Store**. This adds a new action immediately after **Set Status 5**. - -5. Configure the **Request State Store** action that was just added with the following settings:
- - Request state storage location to: **Restore state from another computer**
- - Select the **If computer account fails to connect to state store, use the Network Access account** checkbox.
- - Options tab: Select the **Continue on error** checkbox.
- - Add Condition: **Task Sequence Variable**:
- - Variable: **USMTLOCAL**
- - Condition: **not equals**
- - Value: **True**
- - Click **OK**.
- - Click **Apply**
. - -6. In the **State Restore** group, click **Restore User State**, click **Add**, point to **User State**, and click **Release State Store**. - -7. Configure the **Release State Store** action that was just added with the following settings:
- - Options tab: Select the **Continue on error** checkbox.
- - Add Condition: **Task Sequence Variable**:
- - Variable: **USMTLOCAL**
- - Condition: **not equals**
- - Value: **True**
- - Click **OK**.
- - Click **OK**
. - - -### Finalize the operating system configuration - ->If you completed all procedures in [Deploy Windows 10 in a test lab using Microsoft Deployment Toolkit](windows-10-poc-mdt.md) then the MDT deployment share is already present on SRV1. In this case, skip the first four steps below and begin with step 5 to edit CustomSettings.ini. - -1. In the MDT deployment workbench on SRV1, right-click **Deployment Shares** and then click **New Deployment Share**. - -2. Use the following settings for the New Deployment Share Wizard: - - Deployment share path: **C:\MDTProduction**
- - Share name: **MDTProduction$**
- - Deployment share description: **MDT Production**
- - Options: click **Next** to accept the default
- - Summary: click **Next**
- - Progress: settings will be applied
- - Confirmation: click **Finish** - -3. Right-click the **MDT Production** deployment share, and click **Properties**. - -4. Click the **Monitoring** tab, select the **Enable monitoring for this deployment share** checkbox, and then click **OK**. - -5. Type the following command at an elevated Windows PowerShell prompt on SRV1: - - ``` - notepad "C:\Sources\OSD\Settings\Windows 10 x64 Settings\CustomSettings.ini" - ``` -6. Replace the contents of the file with the following text, and then save the file: - - ``` - [Settings] - Priority=Default - Properties=OSDMigrateConfigFiles,OSDMigrateMode - - [Default] - DoCapture=NO - ComputerBackupLocation=NONE - OSDMigrateMode=Advanced - OSDMigrateAdditionalCaptureOptions=/ue:*\* /ui:CONTOSO\* - OSDMigrateConfigFiles=Miguser.xml,Migapp.xml - SLSHARE=\\SRV1\Logs$ - EventService=http://SRV1:9800 - ApplyGPOPack=NO - ``` - - >As noted previously, if you wish to migrate accounts other than those in the Contoso domain, then change the OSDMigrateAdditionalCaptureOptions option. For example, the following option will capture settings from all user accounts: - - ``` - OSDMigrateAdditionalCaptureOptions=/all - ``` - - -7. Return to the Configuration Manager console, and in the Software Library workspace, expand **Application Management**, click **Packages**, right-click **Windows 10 x64 Settings**, and then click **Update Distribution Points**. Click **OK** in the popup that appears. - -8. In the Software Library workspace, expand **Operating Systems**, click **Task Sequences**, right-click **Windows 10 Enterprise x64**, and then click **Distribute Content**. - -9. In the Distribute Content Wizard, click **Next** twice, click **Add**, click **Distribution Point**, select the **SRV1.CONTOSO.COM** distribution point, click **OK**, click **Next** twice and then click **Close**. - -10. Enter **\Monitoring\Overview\Distribution Status\Content Status\Windows 10 Enterprise x64** on the location bar, double-click **Windows 10 Enterprise x64**, and monitor the status of content distribution until it is successful and no longer in progress. Refresh the view with the F5 key or by right-clicking **Windows 10 Enterprise x64** and clicking **Refresh**. - -### Create a deployment for the task sequence - -1. In the Software Library workspace, expand **Operating Systems**, click **Task Sequences**, right-click **Windows 10 Enterprise x64**, and then click **Deploy**. - -2. On the General page, next to **Collection**, click **Browse**, select the **All Unknown Computers** collection, click **OK**, and then click **Next**. - -3. On the Deployment Settings page, use the following settings:
- - Purpose: **Available**
- - Make available to the following: **Only media and PXE**
- - Click **Next**.
-4. Click **Next** five times to accept defaults on the Scheduling, User Experience, Alerts, and Distribution Points pages. - -5. Click **Close**. - -## Deploy Windows 10 using PXE and Configuration Manager - -In this first deployment scenario, we will deploy Windows 10 using PXE. This scenario creates a new computer that does not have any migrated users or settings. - -1. Type the following commands at an elevated Windows PowerShell prompt on the Hyper-V host: - - ``` - New-VM –Name "PC4" –NewVHDPath "c:\vhd\pc4.vhdx" -NewVHDSizeBytes 40GB -SwitchName poc-internal -BootDevice NetworkAdapter -Generation 2 - Set-VMMemory -VMName "PC4" -DynamicMemoryEnabled $true -MinimumBytes 512MB -MaximumBytes 2048MB -Buffer 20 - Start-VM PC4 - vmconnect localhost PC4 - ``` - -2. Press ENTER when prompted to start the network boot service. - -3. In the Task Sequence Wizard, provide the password: pass@word1, and then click **Next**. - -4. Before you click **Next** in the Task Sequence Wizard, press the **F8** key. A command prompt will open. - -5. At the command prompt, type **explorer.exe** and review the Windows PE file structure. - -6. The smsts.log file is critical for troubleshooting any installation problems that might be encountered. Depending on the deployment phase, the smsts.log file is created in different locations: - - X:\windows\temp\SMSTSLog\smsts.log before disks are formatted. - - x:\smstslog\smsts.log after disks are formatted. - - c:\_SMSTaskSequence\Logs\Smstslog\smsts.log before the System Center Configuration Manager client is installed. - - c:\windows\ccm\logs\Smstslog\smsts.log after the System Center Configuration Manager client is installed. - - c:\windows\ccm\logs\smsts.log when the task sequence is complete. - - Note: If a reboot is pending on the client, the reboot will be blocked as long as the command window is open. - -7. In the explorer window, click **Tools** and then click **Map Network Drive**. - -8. Do not map a network drive at this time. If you need to save the smsts.log file, you can use this method to save the file to a location on SRV1. - -9. Close the Map Network Drive window, the Explorer window, and the command prompt. - -10. The **Windows 10 Enterprise x64** task sequence is selected in the Task Sequenc Wizard. Click **Next** to continue with the deployment. - -11. The task sequence will require several minutes to complete. You can monitor progress of the task sequence using the MDT Deployment Workbench under Deployment Shares > MDTProduction > Monitoring. The task sequence will: - - Install Windows 10 - - Install the Configuration Manager client and hotfix - - Join the computer to the contoso.com domain - - Install any applications that were specified in the reference image - - -12. When Windows 10 installation has completed, sign in to PC4 using the **contoso\administrator** account. - -13. Right-click **Start**, click **Run**, type **control appwiz.cpl**, press ENTER, click **Turn Windows features on or off**, and verify that **.NET Framework 3.5 (includes .NET 2.0 and 3.0)** is installed. This is a feature included in the reference image. - -14. Shut down the PC4 VM. - ->Note: The following two procedures 1) Replace a client with Windows 10 and 2) Refresh a client with Windows 10 have been exchanged in their order in this guide compared to the previous version. This is to avoid having to restore Hyper-V checkpoints to have access to PC1 before the OS is upgraded. If this is your first time going through this guide, you won't notice any change, but if you have tried the guide previously then this change should make it simpler to complete. - -## Replace a client with Windows 10 using Configuration Manager - ->Before starting this section, you can delete computer objects from Active Directory that were created as part of previous deployment procedures. Use the Active Directory Users and Computers console on DC1 to remove stale entries under contoso.com\Computers, but do not delete the computer account (hostname) for PC1. There should be at least two computer accounts present in the contoso.com\Computers container: one for SRV1, and one for the hostname of PC1. It is not required to delete the stale entries, this is only done to remove clutter. - -![contoso.com\Computers](images/poc-computers.png) - -In the replace procedure, PC1 will not be migrated to a new operating system. It is simplest to perform this procedure before performing the refresh procedure. After refreshing PC1, the operating system will be new. The next (replace) procedure does not install a new operating system on PC1 but rather performs a side-by-side migration of PC1 and another computer (PC4), to copy users and settings from PC1 to the new computer. - -### Create a replace task sequence - -1. On SRV1, in the Configuration Manager console, in the Software Library workspace, expand **Operating Systems**, right-click **Task Sequences**, and then click **Create MDT Task Sequence**. - -2. On the Choose Template page, select **Client Replace Task Sequence** and click **Next**. - -3. On the General page, type the following: - - Task sequence name: **Replace Task Sequence** - - Task sequence comments: **USMT backup only** - -4. Click **Next**, and on the Boot Image page, browse and select the **Zero Touch WinPE x64** boot image package. Click **OK** and then click **Next** to continue. -5. On the MDT Package page, browse and select the **MDT** package. Click **OK** and then click **Next** to continue. -6. On the USMT Package page, browse and select the **Microsoft Corporation User State Migration Tool for Windows** package. Click **OK** and then click **Next** to continue. -7. On the Settings Package page, browse and select the **Windows 10 x64 Settings** package. Click **OK** and then click **Next** to continue. -8. On the Summary page, review the details and then click **Next**. -9. On the Confirmation page, click **Finish**. - ->If an error is displayed at this stage it can be caused by a corrupt MDT integration. To repair it, close the Configuration Manager console, remove MDT integration, and then restore MDT integration. - -### Deploy PC4 - -Create a VM named PC4 to receive the applications and settings from PC1. This VM represents a new computer that will replace PC1. To create this VM, type the following commands at an elevated Windows PowerShell prompt on the Hyper-V host: - -``` -New-VM –Name "PC4" –NewVHDPath "c:\vhd\pc4.vhdx" -NewVHDSizeBytes 60GB -SwitchName poc-internal -BootDevice NetworkAdapter -Generation 2 -Set-VMMemory -VMName "PC4" -DynamicMemoryEnabled $true -MinimumBytes 1024MB -MaximumBytes 2048MB -Buffer 20 -Set-VMNetworkAdapter -VMName PC4 -StaticMacAddress 00-15-5D-83-26-FF -``` - ->Hyper-V enables us to define a static MAC address on PC4. In a real-world scenario you must determine the MAC address of the new computer. - -### Install the Configuration Manager client on PC1 - -1. Verify that the PC1 VM is running and in its original state, which was saved as a checkpoint and then restored in [Deploy Windows 10 in a test lab using Microsoft Deployment Toolkit](windows-10-poc-mdt.md). - -2. If a PC1 checkpoint has not already been saved, then save a checkpoint by typing the following commands at an elevated Windows PowerShell prompt on the Hyper-V host: - - ``` - Checkpoint-VM -Name PC1 -SnapshotName BeginState - ``` - -3. On SRV1, in the Configuration Manager console, in the Administration workspace, expand **Hierarchy Configuration** and click on **Discovery Methods**. -4. Double-click **Active Directory System Discovery** and on the **General** tab select the **Enable Active Directory System Discovery** checkbox. -5. Click the yellow starburst, click **Browse**, select **contoso\Computers**, and then click **OK** three times. -6. When a popup dialog box asks if you want to run full discovery, click **Yes**. -7. In the Assets and Compliance workspace, click **Devices** and verify that the computer account names for SRV1 and PC1 are displayed. See the following example (GREGLIN-PC1 is the computer account name of PC1 in this example): - - ![assets](images/sccm-assets.png) - - >If you do not see the computer account for PC1, try clicking the **Refresh** button in the upper right corner of the console. - - The **Client** column indicates that the Configuration Manager client is not currently installed. This procedure will be carried out next. - -8. Sign in to PC1 using the contoso\administrator account and type the following at an elevated command prompt to remove any pre-existing client configuration, if it exists. Note: this command requires an elevated command prompt not an elevated Windows PowerShell prompt: - - ``` - sc stop ccmsetup - "\\SRV1\c$\Program Files\Microsoft Configuration Manager\Client\CCMSetup.exe" /Uninstall - ``` - >If PC1 still has Configuration Manager registry settings that were applied by Group Policy, startup scripts, or other policies in its previous domain, these might not all be removed by CCMSetup /Uninstall and can cause problems with installation or registration of the client in its new environment. It might be necessary to manually remove these settings if they are present. For more information, see [Manual removal of the SCCM client](https://blogs.technet.microsoft.com/michaelgriswold/2013/01/02/manual-removal-of-the-sccm-client/). - -9. On PC1, temporarily stop Windows Update from queuing items for download and clear all BITS jobs from the queue: - - ``` - net stop wuauserv - net stop BITS - ``` - - Verify that both services were stopped successfully, then type the following at an elevated command prompt: - - ``` - del "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat" - net start BITS - bitsadmin /list /allusers - ``` - - Verify that BITSAdmin displays 0 jobs. - -10. To install the Configuration Manager client as a standalone process, type the following at an elevated command prompt: - - ``` - "\\SRV1\c$\Program Files\Microsoft Configuration Manager\Client\CCMSetup.exe" /mp:SRV1.contoso.com /logon SMSSITECODE=PS1 - ``` -11. On PC1, using file explorer, open the **C:\Windows\ccmsetup** directory. During client installation, files will be downloaded here. -12. Installation progress will be captured in the file: **c:\windows\ccmsetup\logs\ccmsetup.log**. You can periodically open this file in notepad, or you can type the following command at an elevated Windows PowerShell prompt to monitor installation progress: - - ``` - Get-Content -Path c:\windows\ccmsetup\logs\ccmsetup.log -Wait - ``` - - Installation might require several minutes, and display of the log file will appear to hang while some applications are installed. This is normal. When setup is complete, verify that **CcmSetup is existing with return code 0** is displayed on the last line of the ccmsetup.log file and then press **CTRL-C** to break out of the Get-Content operation (if you are viewing the log in Windows PowerShell the last line will be wrapped). A return code of 0 indicates that installation was successful and you should now see a directory created at **C:\Windows\CCM** that contains files used in registration of the client with its site. - -13. On PC1, open the Configuration Manager control panel applet by typing the following command: - - ``` - control smscfgrc - ``` - -14. Click the **Site** tab, click **Configure Settings**, and click **Find Site**. The client will report that it has found the PS1 site. See the following example: - - ![site](images/sccm-site.png) - - If the client is not able to find the PS1 site, review any error messages that are displayed in **C:\Windows\CCM\Logs\ClientIDManagerStartup.log** and **LocationServices.log**. A common reason the site code is not located is because a previous configuration exists. For example, if a previous site code is configured at **HKLM\SOFTWARE\Microsoft\SMS\Mobile Client\GPRequestedSiteAssignmentCode** this must be deleted or updated. - -15. On SRV1, in the Assets and Compliance workspace, click **Device Collections** and then double-click **All Desktop and Server Clients**. This node will be added under **Devices**. - -16. Click **All Desktop and Server Clients** and verify that the computer account for PC1 is displayed here with **Yes** and **Active** in the **Client** and **Client Activity** columns, respectively. You might have to refresh the view and wait few minutes for the client to appear here. See the following example: - - ![client](images/sccm-client.png) - - >It might take several minutes for the client to fully register with the site and complete a client check. When it is complete you will see a green check mark over the client icon as shown above. To refresh the client, click it and then press **F5** or right-click the client and click **Refresh**. - -### Create a device collection and deployment - -1. On SRV1, in the Configuration Manager console, in the Asset and Compliance workspace, right-click **Device Collections** and then click **Create Device Collection**. - -2. Use the following settings in the **Create Device Collection Wizard**: - - General > Name: **Install Windows 10 Enterprise x64**
- - General > Limiting collection: **All Systems**
- - Membership Rules > Add Rule: **Direct Rule**
- - The **Create Direct Membership Rule Wizard** opens, click **Next**
- - Search for Resources > Resource class: **System Resource**
- - Search for Resources > Attribute name: **Name**
- - Search for Resources > Value: **%**
- - Select Resources > Value: Select the computername associated with the PC1 VM
- - Click **Next** twice and then click **Close** in both windows (Next, Next, Close, then Next, Next, Close) - -3. Double-click the Install Windows 10 Enterprise x64 device collection and verify that the PC1 computer account is displayed. - -4. In the Software Library workspace, expand **Operating Systems**, click **Task Sequences**, right-click **Windows 10 Enterprise x64** and then click **Deploy**. - -5. Use the following settings in the Deploy Software wizard: - - General > Collection: Click Browse and select **Install Windows 10 Enterprise x64**
- - Deployment Settings > Purpose: **Available**
- - Deployment Settings > Make available to the following: **Configuration Manager clients, media and PXE**
- - Scheduling > Click **Next**
- - User Experience > Click **Next**
- - Alerts > Click **Next**
- - Distribution Points > Click **Next**
- - Summary > Click **Next**
- - Verify that the wizard completed successfully and then click **Close** - - -### Associate PC4 with PC1 - -1. On SRV1 in the Configuration Manager console, in the Assets and Compliance workspace, right-click **Devices** and then click **Import Computer Information**. - -2. On the Select Source page, choose **Import single computer** and click **Next**. - -3. On the Single Computer page, use the following settings: - - Computer Name: **PC4** - - MAC Address: **00:15:5D:83:26:FF** - - Source Computer: \ - -4. Click **Next**, and on the User Accounts page choose **Capture and restore specified user accounts**, then click the yellow starburst next to **User accounts to migrate**. - -5. Click **Browse** and then under Enter the object name to select type **user1** and click OK twice. - -6. Click the yellow starburst again and repeat the previous step to add the **contoso\administrator** account. - -7. Click **Next** twice, and on the Choose Target Collection page, choose **Add computers to the following collection**, click **Browse**, choose **Install Windows 10 Enterprise x64**, click **OK**, click **Next** twice, and then click **Close**. - -8. In the Assets and Compliance workspace, click **User State Migration** and review the computer association in the display pane. The source computer will be the computername of PC1 (GREGLIN-PC1 in this example), the destination computer will be **PC4**, and the migration type will be **side-by-side**. - -9. Right-click the association in the display pane and then click **Specify User Accounts**. You can add or remove user account here. Click **OK**. - -10. Right-click the association in the display pane and then click **View Recovery Information**. Note that a recovery key has been assigned, but a user state store location has not. Click **Close**. - -11. Click **Device Collections** and then double-click **Install Windows 10 Enterprise x64**. Verify that **PC4** is displayed in the collection. You might have to update and refresh the collection, or wait a few minutes, but do not proceed until PC4 is available. See the following example: - - ![collection](images/sccm-collection.png) - -### Create a device collection for PC1 - -1. On SRV1, in the Configuration Manager console, in the Assets and Compliance workspace, right-click **Device Collections** and then click **Create Device Collection**. - -2. Use the following settings in the **Create Device Collection Wizard**: - - General > Name: **USMT Backup (Replace)**
- - General > Limiting collection: **All Systems**
- - Membership Rules > Add Rule: **Direct Rule**
- - The **Create Direct Membership Rule Wizard** opens, click **Next**
- - Search for Resources > Resource class: **System Resource**
- - Search for Resources > Attribute name: **Name**
- - Search for Resources > Value: **%**
- - Select Resources > Value: Select the computername associated with the PC1 VM (GREGLIN-PC1 in this example).
- - Click **Next** twice and then click **Close** in both windows. - -3. Click **Device Collections** and then double-click **USMT Backup (Replace)**. Verify that the computer name/hostname associated with PC1 is displayed in the collection. Do not proceed until this name is displayed. - -### Create a new deployment - -In the Configuration Manager console, in the Software Library workspace under Operating Systems, click **Task Sequences**, right-click **Replace Task Sequence**, click **Deploy**, and use the following settings: -- General > Collection: **USMT Backup (Replace)**
-- Deployment Settings > Purpose: **Available**
-- Deployment Settings > Make available to the following: **Only Configuration Manager Clients**
-- Scheduling: Click **Next**
-- User Experience: Click **Next**
-- Alerts: Click **Next**
-- Distribution Points: Click **Next**
-- Click **Next** and then click **Close**. - -### Verify the backup - -1. On PC1, open the Configuration Manager control panel applet by typing the following command: - - ``` - control smscfgrc - ``` -2. On the **Actions** tab, click **Machine Policy Retrieval & Evaluation Cycle**, click **Run Now**, click **OK**, and then click **OK** again. This is one method that can be used to run a task sequence in addition to the Client Notification method that will be demonstrated in the computer refresh procedure. - -3. Type the following at an elevated command prompt to open the Software Center: - - ``` - C:\Windows\CCM\SCClient.exe - ``` - -4. In the Software Center , click **Available Software** and then select the **Replace Task Sequence** checkbox. See the following example: - - ![software](images/sccm-software-cntr.png) - - >If you do not see any available software, try running step #2 again to start the Machine Policy Retrieval & Evaluation Cycle. You should see an alert that new software is available. - -5. Click **INSTALL SELECTED** and then click **INSTALL OPERATING SYSTEM**. -6. Allow the **Replace Task Sequence** to complete, then verify that the C:\MigData folder on SRV1 contains the USMT backup. - -### Deploy the new computer - -1. Start PC4 and press ENTER for a network boot when prompted. To start PC4, type the following commands at an elevated Windows Powershell prompt on the Hyper-V host: - - ``` - Start-VM PC4 - vmconnect localhost PC4 - ``` -2. In the **Welcome to the Task Sequence Wizard**, enter pass@word1 and click **Next**. -3. Choose the **Windows 10 Enterprise X64** image. -4. Setup will install the operating system using the Windows 10 Enterprise x64 reference image, install the configuration manager client, join PC4 to the domain, and restore users and settings from PC1. -5. Save checkpoints for all VMs if you wish to review their status at a later date. This is not required (checkpoints do take up space on the Hyper-V host). Note: the next procedure will install a new OS on PC1 update its status in Configuration Manager and in Active Directory as a Windows 10 device, so you cannot return to a previous checkpoint only on the PC1 VM without a conflict. Therefore, if you do create a checkpoint, you should do this for all VMs. - - To save a checkpoint for all VMs, type the following commands at an elevated Windows PowerShell prompt on the Hyper-V host: - - ``` - Checkpoint-VM -Name DC1 -SnapshotName cm-refresh - Checkpoint-VM -Name SRV1 -SnapshotName cm-refresh - Checkpoint-VM -Name PC1 -SnapshotName cm-refresh - ``` - -## Refresh a client with Windows 10 using Configuration Manager - - -### Initiate the computer refresh - -1. On SRV1, in the Assets and Compliance workspace, click **Device Collections** and then double-click **Install Windows 10 Enterprise x64**. -2. Right-click the computer account for PC1, point to **Client Notification**, click **Download Computer Policy**, and click **OK** in the popup dialog box. -3. On PC1, in the notification area, click **New software is available** and then click **Open Software Center**. -4. In the Software Center, click **Operating Systems**, click **Windows 10 Enterprise x64**, click **Install** and then click **INSTALL OPERATING SYSTEM**. See the following example: - - ![installOS](images/sccm-install-os.png) - - The computer will restart several times during the installation process. Installation includes downloading updates, reinstalling the Configuration Manager Client Agent, and restoring the user state. You can view status of the installation in the Configuration Manager console by accessing the Monitoring workspace, clicking **Deployments**, and then double-clicking the deployment associated with the **Install Windows 10 Enterprise x64** collection. Under **Asset Details**, right-click the device and then click **More Details**. Click the **Status** tab to see a list of tasks that have been performed. See the following example: - - ![asset](images/sccm-asset.png) - - You can also monitor progress of the installation by using the MDT deployment workbench and viewing the **Monitoring** node under **Deployment Shares\MDT Production**. - - When installation has completed, sign in using the contoso\administrator account or the contoso\user1 account and verify that applications and settings have been successfully backed up and restored to your new Windows 10 Enterprise operating system. - - ![post-refresh](images/sccm-post-refresh.png) - - - -## Related Topics - -[System Center 2012 Configuration Manager Survival Guide](https://social.technet.microsoft.com/wiki/contents/articles/7075.system-center-2012-configuration-manager-survival-guide.aspx#Step-by-Step_Guides) - - - - - - - +--- +title: Step by step - Deploy Windows 10 using System Center Configuration Manager +description: Deploy Windows 10 in a test lab using System Center Configuration Manager +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: deploy +keywords: deployment, automate, tools, configure, sccm +ms.localizationpriority: medium +ms.date: 10/11/2017 +ms.reviewer: +manager: laurawi +ms.audience: itpro +author: greg-lindsay +audience: itpro +author: greg-lindsay +ms.topic: article +--- + +# Deploy Windows 10 in a test lab using System Center Configuration Manager + +**Applies to** + +- Windows 10 + +**Important**: This guide leverages the proof of concept (PoC) environment, and some settings that are configured in the following guides: +- [Step by step guide: Deploy Windows 10 in a test lab](windows-10-poc.md) +- [Deploy Windows 10 in a test lab using Microsoft Deployment Toolkit](windows-10-poc-mdt.md) + +Please complete all steps in these guides before attempting the procedures in this guide. If you wish to skip the Windows 10 deployment procedures in the MDT guide and move directly to this guide, you must at least install MDT and the Windows ADK before performing procedures in this guide. All steps in the first guide are required before attempting the procedures in this guide. + +The PoC environment is a virtual network running on Hyper-V with three virtual machines (VMs): +- **DC1**: A contoso.com domain controller, DNS server, and DHCP server. +- **SRV1**: A dual-homed contoso.com domain member server, DNS server, and default gateway providing NAT service for the PoC network. +- **PC1**: A contoso.com member computer running Windows 7, Windows 8, or Windows 8.1 that has been cloned from a physical computer on your corporate network for testing purposes. +This guide leverages the Hyper-V server role to perform procedures. If you do not complete all steps in a single session, consider using [checkpoints](https://technet.microsoft.com/library/dn818483.aspx) and [saved states](https://technet.microsoft.com/library/ee247418.aspx) to pause, resume, or restart your work. + +>Multiple features and services are installed on SRV1 in this guide. This is not a typical installation, and is only done to set up a lab environment with a bare minimum of resources. However, if less than 4 GB of RAM is allocated to SRV1 in the Hyper-V console, some procedures will be extremely slow to complete. If resources are limited on the Hyper-V host, consider reducing RAM allocation on DC1 and PC1, and then increasing the RAM allocation on SRV1. You can adjust RAM allocation for a VM by right-clicking the VM in the Hyper-V Manager console, clicking **Settings**, clicking **Memory**, and modifying the value next to **Maximum RAM**. + +## In this guide + +This guide provides end-to-end instructions to install and configure System Center Configuration Manager, and use it to deploy a Windows 10 image. Depending on the speed of your Hyper-V host, the procedures in this guide will require 6-10 hours to complete. + +Topics and procedures in this guide are summarized in the following table. An estimate of the time required to complete each procedure is also provided. Time required to complete procedures will vary depending on the resources available to the Hyper-V host and assigned to VMs, such as processor speed, memory allocation, disk speed, and network speed. + +
+ +
+ +
TopicDescriptionTime + +
Install prerequisitesInstall prerequisite Windows Server roles and features, download, install and configure SQL Server, configure firewall rules, and install the Windows ADK.60 minutes +
Install System Center Configuration ManagerDownload System Center Configuration Manager, configure prerequisites, and install the package.45 minutes +
Download MDOP and install DaRTDownload the Microsoft Desktop Optimization Pack 2015 and install DaRT 10.15 minutes +
Prepare for Zero Touch installationPrerequisite procedures to support Zero Touch installation.60 minutes +
Create a boot image for Configuration ManagerUse the MDT wizard to create the boot image in Configuration Manager.20 minutes +
Create a Windows 10 reference imageThis procedure can be skipped if it was done previously, otherwise instructions are provided to create a reference image.0-60 minutes +
Add a Windows 10 operating system imageAdd a Windows 10 operating system image and distribute it.10 minutes
Create a task sequenceCreate a Configuration Manager task sequence with MDT integration using the MDT wizard15 minutes +
Finalize the operating system configurationEnable monitoring, configure rules, and distribute content.30 minutes +
Deploy Windows 10 using PXE and Configuration ManagerDeploy Windows 10 using Configuration Manager deployment packages and task sequences.60 minutes +
Replace a client with Windows 10 using Configuration ManagerReplace a client computer with Windows 10 using Configuration Manager.90 minutes +
Refresh a client with Windows 10 using Configuration ManagerUse a task sequence to refresh a client with Windows 10 using Configuration Manager and MDT90 minutes + +
+ +
+ +## Install prerequisites +1. Before installing System Center Configuration Manager, we must install prerequisite services and features. Type the following command at an elevated Windows PowerShell prompt on SRV1: + + ``` + Install-WindowsFeature Web-Windows-Auth,Web-ISAPI-Ext,Web-Metabase,Web-WMI,BITS,RDC,NET-Framework-Features,Web-Asp-Net,Web-Asp-Net45,NET-HTTP-Activation,NET-Non-HTTP-Activ + ``` + + >If the request to add features fails, retry the installation by typing the command again. + +2. Download [SQL Server 2014 SP2](https://www.microsoft.com/en-us/evalcenter/evaluate-sql-server-2014-sp2) from the Microsoft Evaluation Center as an .ISO file on the Hyper-V host computer. Save the file to the **C:\VHD** directory. +3. When you have downloaded the file **SQLServer2014SP2-FullSlipstream-x64-ENU.iso** and placed it in the C:\VHD directory, type the following command at an elevated Windows PowerShell prompt on the Hyper-V host: + + ``` + Set-VMDvdDrive -VMName SRV1 -Path c:\VHD\SQLServer2014SP2-FullSlipstream-x64-ENU.iso + ``` + + This command mounts the .ISO file to drive D on SRV1. + +4. Type the following command at an elevated Windows PowerShell prompt on SRV1 to install SQL Server: + + ``` + D:\setup.exe /q /ACTION=Install /ERRORREPORTING="False" /FEATURES=SQLENGINE,RS,IS,SSMS,TOOLS,ADV_SSMS,CONN /INSTANCENAME=MSSQLSERVER /INSTANCEDIR="C:\Program Files\Microsoft SQL Server" /SQLSVCACCOUNT="NT AUTHORITY\System" /SQLSYSADMINACCOUNTS="BUILTIN\ADMINISTRATORS" /SQLSVCSTARTUPTYPE=Automatic /AGTSVCACCOUNT="NT AUTHORITY\SYSTEM" /AGTSVCSTARTUPTYPE=Automatic /RSSVCACCOUNT="NT AUTHORITY\System" /RSSVCSTARTUPTYPE=Automatic /ISSVCACCOUNT="NT AUTHORITY\System" /ISSVCSTARTUPTYPE=Disabled /ASCOLLATION="Latin1_General_CI_AS" /SQLCOLLATION="SQL_Latin1_General_CP1_CI_AS" /TCPENABLED="1" /NPENABLED="1" /IAcceptSQLServerLicenseTerms + ``` + Installation will take several minutes. When installation is complete, the following output will be displayed: + + ``` + Microsoft (R) SQL Server 2014 12.00.5000.00 + Copyright (c) Microsoft Corporation. All rights reserved. + + Microsoft (R) .NET Framework CasPol 2.0.50727.7905 + Copyright (c) Microsoft Corporation. All rights reserved. + + Success + Microsoft (R) .NET Framework CasPol 2.0.50727.7905 + Copyright (c) Microsoft Corporation. All rights reserved. + + Success + One or more affected files have operations pending. + You should restart your computer to complete this process. + PS C:\> + ``` +5. Type the following commands at an elevated Windows PowerShell prompt on SRV1: + + ``` + New-NetFirewallRule -DisplayName “SQL Server” -Direction Inbound –Protocol TCP –LocalPort 1433 -Action allow + New-NetFirewallRule -DisplayName “SQL Admin Connection” -Direction Inbound –Protocol TCP –LocalPort 1434 -Action allow + New-NetFirewallRule -DisplayName “SQL Database Management” -Direction Inbound –Protocol UDP –LocalPort 1434 -Action allow + New-NetFirewallRule -DisplayName “SQL Service Broker” -Direction Inbound –Protocol TCP –LocalPort 4022 -Action allow + New-NetFirewallRule -DisplayName “SQL Debugger/RPC” -Direction Inbound –Protocol TCP –LocalPort 135 -Action allow + ``` + +7. Download and install the latest [Windows Assessment and Deployment Kit (ADK)](https://developer.microsoft.com/en-us/windows/hardware/windows-assessment-deployment-kit) on SRV1 using the default installation settings. The current version is the ADK for Windows 10, version 1703. Installation might require several minutes to acquire all components. + +## Install System Center Configuration Manager + +1. On SRV1, temporarily disable IE Enhanced Security Configuration for Administrators by typing the following commands at an elevated Windows PowerShell prompt: + + ``` + $AdminKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}" + Set-ItemProperty -Path $AdminKey -Name “IsInstalled” -Value 0 + Stop-Process -Name Explorer + ``` + +2. Download [System Center Configuration Manager and Endpoint Protection](https://www.microsoft.com/en-us/evalcenter/evaluate-system-center-configuration-manager-and-endpoint-protection) on SRV1 (download the executable file anywhere on SRV1), double-click the file, enter **C:\configmgr** for **Unzip to folder**, and click **Unzip**. The C:\configmgr directory will be automatically created. Click **OK** and then close the **WinZip Self-Extractor** dialog box when finished. + +3. Before starting the installation, verify that WMI is working on SRV1. See the following examples. Verify that **Running** is displayed under **Status** and **True** is displayed next to **TcpTestSucceeded**: + + ``` + Get-Service Winmgmt + + Status Name DisplayName + ------ ---- ----------- + Running Winmgmt Windows Management Instrumentation + + Test-NetConnection -ComputerName 192.168.0.2 -Port 135 -InformationLevel Detailed + + ComputerName : 192.168.0.2 + RemoteAddress : 192.168.0.2 + RemotePort : 135 + AllNameResolutionResults : + MatchingIPsecRules : + NetworkIsolationContext : Internet + InterfaceAlias : Ethernet + SourceAddress : 192.168.0.2 + NetRoute (NextHop) : 0.0.0.0 + PingSucceeded : True + PingReplyDetails (RTT) : 0 ms + TcpTestSucceeded : True + ``` + You can also verify WMI using the WMI console by typing **wmimgmt.msc**, right-clicking **WMI Control (Local)** in the console tree, and then clicking **Properties**. + + If the WMI service is not started, attempt to start it or reboot the computer. If WMI is running but errors are present, see [WMIDiag](https://blogs.technet.microsoft.com/askperf/2015/05/12/wmidiag-2-2-is-here/) for troubleshooting information. + +4. To extend the Active Directory schema, type the following command at an elevated Windows PowerShell prompt: + + ``` + cmd /c C:\configmgr\SMSSETUP\BIN\X64\extadsch.exe + ``` + +5. Temporarily switch to the DC1 VM, and type the following command at an elevated command prompt on DC1: + + ``` + adsiedit.msc + ``` + +6. Right-click **ADSI Edit**, click **Connect to**, select **Default (Domain or server that you logged in to)** under **Computer** and then click **OK**. +7. Expand **Default naming context**>**DC=contoso,DC=com**, and then in the console tree right-click **CN=System**, point to **New**, and then click **Object**. +8. Click **container** and then click **Next**. +9. Next to **Value**, type **System Management**, click **Next**, and then click **Finish**. +10. Right-click **CN=system Management** and then click **Properties**. +11. On the **Security** tab, click **Add**, click **Object Types**, select **Computers**, and click **OK**. +12. Under **Enter the object names to select**, type **SRV1** and click **OK**. +13. The **SRV1** computer account will be highlighted, select **Allow** next to **Full control**. +14. Click **Advanced**, click **SRV1 (CONTOSO\SRV1$)** and click **Edit**. +15. Next to **Applies to**, choose **This object and all descendant objects**, and then click **OK** three times. +16. Close the ADSI Edit console and switch back to SRV1. +17. To start Configuration Manager installation, type the following command at an elevated Windows PowerShell prompt on SRV1: + + ``` + cmd /c C:\configmgr\SMSSETUP\BIN\X64\Setup.exe + ``` +18. Provide the following in the System Center Configuration Manager Setup Wizard: + - **Before You Begin**: Read the text and click *Next*. + - **Getting Started**: Choose **Install a Configuration Manager primary site** and select the **Use typical installation options for a stand-alone primary site** checkbox. + - Click **Yes** in response to the popup window. + - **Product Key**: Choose **Install the evaluation edition of this Product**. + - **Microsoft Software License Terms**: Read the terms and then select the **I accept these license terms** checkbox. + - **Prerequisite Licenses**: Review license terms and select all three checkboxes on the page. + - **Prerequisite Downloads**: Choose **Download required files** and enter **c:\windows\temp** next to **Path**. + - **Site and Installation Settings**: Site code: **PS1**, Site name: **Contoso**. + - use default settings for all other options + - **Usage Data**: Read the text and click **Next**. + - **Service Connection Point Setup**: Accept the default settings (SRV1.contoso.com is automatically added under Select a server to use). + - **Settings Summary**: Review settings and click **Next**. + - **Prerequisite Check**: No failures should be listed. Ignore any warnings and click **Begin Install**. + + >There should be at most three warnings present: WSUS on site server, configuration for SQL Server memory usage, and SQL Server process memory allocation. These warnings can safely be ignored in this test environment. + + Depending on the speed of the Hyper-V host and resources allocated to SRV1, installation can require approximately one hour. Click **Close** when installation is complete. + +19. If desired, re-enable IE Enhanced Security Configuration at this time on SRV1: + + ``` + Set-ItemProperty -Path $AdminKey -Name “IsInstalled” -Value 1 + Stop-Process -Name Explorer + ``` + +## Download MDOP and install DaRT + +>[!IMPORTANT] +>This step requires an MSDN subscription or volume licence agreement. For more information, see [Ready for Windows 10: MDOP 2015 and more tools are now available](https://blogs.technet.microsoft.com/windowsitpro/2015/08/17/ready-for-windows-10-mdop-2015-and-more-tools-are-now-available/). +>If your organization qualifies and does not already have an MSDN subscription, you can obtain a [free MSDN subscription with BizSpark](https://blogs.msdn.microsoft.com/zainnab/2011/03/14/bizspark-free-msdn-subscription-for-start-up-companies/). + +1. Download the [Microsoft Desktop Optimization Pack 2015](https://msdn.microsoft.com/subscriptions/downloads/#ProductFamilyId=597) to the Hyper-V host using an MSDN subscription. Download the .ISO file (mu_microsoft_desktop_optimization_pack_2015_x86_x64_dvd_5975282.iso, 2.79 GB) to the C:\VHD directory on the Hyper-V host. + +2. Type the following command at an elevated Windows PowerShell prompt on the Hyper-V host to mount the MDOP file on SRV1: + + ``` + Set-VMDvdDrive -VMName SRV1 -Path c:\VHD\mu_microsoft_desktop_optimization_pack_2015_x86_x64_dvd_5975282.iso + ``` +3. Type the following command at an elevated Windows PowerShell prompt on SRV1: + + ``` + cmd /c "D:\DaRT\DaRT 10\Installers\en-us\x64\MSDaRT100.msi" + ``` +4. Install DaRT 10 using default settings. +5. Type the following commands at an elevated Windows PowerShell prompt on SRV1: + + ``` + Copy-Item "C:\Program Files\Microsoft DaRT\v10\Toolsx64.cab" -Destination "C:\Program Files\Microsoft Deployment Toolkit\Templates\Distribution\Tools\x64" + Copy-Item "C:\Program Files\Microsoft DaRT\v10\Toolsx86.cab" -Destination "C:\Program Files\Microsoft Deployment Toolkit\Templates\Distribution\Tools\x86" + ``` + +## Prepare for Zero Touch installation + +This section contains several procedures to support Zero Touch installation with System Center Configuration Manager. + +### Create a folder structure + +1. Type the following commands at a Windows PowerShell prompt on SRV1: + + ``` + New-Item -ItemType Directory -Path "C:\Sources\OSD\Boot" + New-Item -ItemType Directory -Path "C:\Sources\OSD\OS" + New-Item -ItemType Directory -Path "C:\Sources\OSD\Settings" + New-Item -ItemType Directory -Path "C:\Sources\OSD\Branding" + New-Item -ItemType Directory -Path "C:\Sources\OSD\MDT" + New-Item -ItemType Directory -Path "C:\Logs" + New-SmbShare -Name Sources$ -Path C:\Sources -ChangeAccess EVERYONE + New-SmbShare -Name Logs$ -Path C:\Logs -ChangeAccess EVERYONE + ``` + +### Enable MDT ConfigMgr integration + +1. On SRV1, click **Start**, type **configmgr**, and then click **Configure ConfigMgr Integration**. +2. Type **PS1** next to **Site code**, and then click **Next**. +3. Verify **The process completed successfully** is displayed, and then click **Finish**. + +### Configure client settings + +1. On SRV1, click **Start**, type **configuration manager**, right-click **Configuration Manager Console**, and then click **Pin to Taskbar**. +2. Click **Desktop**, and then launch the Configuration Manager console from the taskbar. +3. If the console notifies you that an update is available, click **OK**. It is not necessary to install updates to complete this lab. +4. In the console tree, open the **Administration** workspace (in the lower left corner) and click **Client Settings**. +5. In the display pane, double-click **Default Client Settings**. +6. Click **Computer Agent**, next to **Organization name displayed in Software Center** type **Contoso**, and then click **OK**. + +### Configure the network access account + +1. In the Administration workspace, expand **Site Configuration** and click **Sites**. +2. On the **Home** ribbon at the top of the console window, click **Configure Site Components** and then click **Software Distribution**. +3. On the **Network Access Account** tab, choose **Specify the account that accesses network locations**. +4. Click the yellow starburst and then click **New Account**. +5. Click **Browse** and then under **Enter the object name to select**, type **CM_NAA** and click **OK**. +6. Next to **Password** and **Confirm Password**, type pass@word1, and then click **OK** twice. + +### Configure a boundary group + +1. In the Administration workspace, expand **Hierarchy Configuration**, right-click **Boundaries** and then click **Create Boundary**. +2. Next to **Description**, type **PS1**, next to **Type** choose **Active Directory Site**, and then click **Browse**. +3. Choose **Default-First-Site-Name** and then click **OK** twice. +4. In the Administration workspace, right-click **Boundary Groups** and then click **Create Boundary Group**. +5. Next to **Name**, type **PS1 Site Assignment and Content Location**, click **Add**, select the **Default-First-Site-Name** boundary and then click **OK**. +6. On the **References** tab in the **Create Boundary Group** window select the **Use this boundary group for site assignment** checkbox. +7. Click **Add**, select the **\\\SRV1.contoso.com** checkbox, and then click **OK** twice. + +### Add the state migration point role + +1. In the Administration workspace, expand **Site Configuration**, click **Sites**, and then in on the **Home** ribbon at the top of the console click **Add Site System Roles**. +2. In the Add site System Roles Wizard, click **Next** twice and then on the Specify roles for this server page, select the **State migration point** checkbox. +3. Click **Next**, click the yellow starburst, type **C:\MigData** for the **Storage folder**, and click **OK**. +4. Click **Next**, and then verify under **Boundary groups** that **PS1 Site Assignment and Content Location** is displayed. +5. Click **Next** twice and then click **Close**. + +### Enable PXE on the distribution point + +>[!IMPORTANT] +>Before enabling PXE in Configuration Manager, ensure that any previous installation of WDS does not cause conflicts. Configuration Manager will automatically configure the WDS service to manage PXE requests. To disable a previous installation, if it exists, type the following commands at an elevated Windows PowerShell prompt on SRV1: + +``` +WDSUTIL /Set-Server /AnswerClients:None +``` + +1. Determine the MAC address of the internal network adapter on SRV1. To determine this, type the following command at an elevated Windows PowerShell prompt on SRV1: + + ``` + (Get-NetAdapter "Ethernet").MacAddress + ``` + >If the internal network adapter, assigned an IP address of 192.168.0.2, is not named "Ethernet" then replace the name "Ethernet" in the previous command with the name of this network adapter. You can review the names of network adapters and the IP addresses assigned to them by typing **ipconfig**. + +2. In the System Center Configuration Manager console, in the **Administration** workspace, click **Distribution Points**. +3. In the display pane, right-click **SRV1.CONTOSO.COM** and then click **Properties**. +4. On the PXE tab, select the following settings: + - **Enable PXE support for clients**. Click **Yes** in the popup that appears. + - **Allow this distribution point to respond to incoming PXE requests** + - **Enable unknown computer support**. Click **OK** in the popup that appears. + - **Require a password when computers use PXE** + - **Password** and **Confirm password**: pass@word1 + - **Respond to PXE requests on specific network interfaces**: Click the yellow starburst and then enter the MAC address determined in the first step of this procedure. + + See the following example: + + Config Mgr PXE + +5. Click **OK**. +6. Wait for a minute, then type the following command at an elevated Windows PowerShell prompt on SRV1, and verify that the files displayed are present: + + ``` + cmd /c dir /b C:\RemoteInstall\SMSBoot\x64 + + abortpxe.com + bootmgfw.efi + bootmgr.exe + pxeboot.com + pxeboot.n12 + wdsmgfw.efi + wdsnbp.com + ``` + >If these files are not present in the C:\RemoteInstall directory, verify that the REMINST share is configured as C:\RemoteInstall. You can view the properties of this share by typing "net share REMINST" at a command prompt. If the share path is set to a different value, then replace C:\RemoteInstall with your REMINST share path. + >You can also type the following command at an elevated Windows PowerShell prompt to open the Configuration Manager Trace Log Tool. In the tool, click **File**, click **Open**, and then open the **distmgr.log** file. If errors are present, they will be highlighted in red: + + ``` + Invoke-Item 'C:\Program Files\Microsoft Configuration Manager\tools\cmtrace.exe' + ``` + + The log file will updated continuously while Configuration Manager is running. Wait for Configuration Manager to repair any issues that are present, and periodically re-check that the files are present in the REMINST share location. Close the Configuration Manager Trace Log Tool when done. You will see the following line in distmgr.log that indicates the REMINST share is being populated with necessary files: + + Running: WDSUTIL.exe /Initialize-Server /REMINST:"C:\RemoteInstall" + + Once the files are present in the REMINST share location, you can close the cmtrace tool. + +### Create a branding image file + +1. If you have a bitmap (.BMP) image for suitable use as a branding image, copy it to the C:\Sources\OSD\Branding folder on SRV1. Otherwise, use the following step to copy a simple branding image. +2. Type the following command at an elevated Windows PowerShell prompt: + + ``` + copy "C:\ProgramData\Microsoft\User Account Pictures\user.bmp" "C:\Sources\OSD\Branding\contoso.bmp" + ``` + >You can open C:\Sources\OSD\Branding\contoso.bmp in MSPaint.exe if desired to customize this image. + + +### Create a boot image for Configuration Manager + +1. In the Configuration Manager console, in the **Software Library** workspace, expand **Operating Systems**, right-click **Boot Images**, and then click **Create Boot Image using MDT**. +2. On the Package Source page, under **Package source folder to be created (UNC Path):**, type **\\\SRV1\Sources$\OSD\Boot\Zero Touch WinPE x64**, and then click **Next**. + - The Zero Touch WinPE x64 folder does not yet exist. The folder will be created later. +3. On the General Settings page, type **Zero Touch WinPE x64** next to **Name**, and click **Next**. +4. On the Options page, under **Platform** choose **x64**, and click **Next**. +5. On the Components page, in addition to the default selection of **Microsoft Data Access Components (MDAC/ADO) support**, select the **Microsoft Diagnostics and Recovery Toolkit (DaRT)** checkbox, and click **Next**. +6. On the Customization page, select the **Use a custom background bitmap file** checkbox, and under **UNC path**, type or browse to **\\\SRV1\Sources$\OSD\Branding\contoso.bmp**, and then click **Next** twice. It will take a few minutes to generate the boot image. +7. Click **Finish**. +8. In the console display pane, right-click the **Zero Touch WinPE x64** boot image, and then click **Distribute Content**. +9. In the Distribute Content Wizard, click **Next**, click **Add** and select **Distribution Point**, select the **SRV1.CONTOSO.COM** checkbox, click **OK**, click **Next** twice, and then click **Close**. +10. Use the CMTrace application to view the **distmgr.log** file again and verify that the boot image has been distributed. To open CMTrace, type the following command at an elevated Windows PowerShell prompt on SRV1: + + ``` + Invoke-Item 'C:\Program Files\Microsoft Configuration Manager\tools\cmtrace.exe' + ``` + + In the trace tool, click **Tools** on the menu and choose **Find**. Search for "**STATMSG: ID=2301**". For example: + + ``` + STATMSG: ID=2301 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_DISTRIBUTION_MANAGER" SYS=SRV1.CONTOSO.COM SITE=PS1 PID=924 TID=1424 GMTDATE=Tue Oct 09 22:36:30.986 2018 ISTR0="Zero Touch WinPE x64" ISTR1="PS10000A" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=1 AID0=400 AVAL0="PS10000A" SMS_DISTRIBUTION_MANAGER 10/9/2018 3:36:30 PM 1424 (0x0590) + ``` + +11. You can also review status by clicking the **Zero Touch WinPE x64** image, and then clicking **Content Status** under **Related Objects** in the bottom right-hand corner of the console, or by entering **\Monitoring\Overview\Distribution Status\Content Status** on the location bar in the console. Double-click **Zero Touch WinPE x64** under **Content Status** in the console tree and verify that a status of **Successfully distributed content** is displayed on the **Success** tab. +12. Next, in the **Software Library** workspace, double-click **Zero Touch WinPE x64** and then click the **Data Source** tab. +13. Select the **Deploy this boot image from the PXE-enabled distribution point** checkbox, and click **OK**. +14. Review the distmgr.log file again for "**STATMSG: ID=2301**" and verify that there are three folders under **C:\RemoteInstall\SMSImages** with boot images. See the following example: + + ``` + cmd /c dir /s /b C:\RemoteInstall\SMSImages + + C:\RemoteInstall\SMSImages\PS100004 + C:\RemoteInstall\SMSImages\PS100005 + C:\RemoteInstall\SMSImages\PS100006 + C:\RemoteInstall\SMSImages\PS100004\boot.PS100004.wim + C:\RemoteInstall\SMSImages\PS100005\boot.PS100005.wim + C:\RemoteInstall\SMSImages\PS100006\WinPE.PS100006.wim + ``` + + >The first two images (*.wim files) are default boot images. The third is the new boot image with DaRT. + +### Create a Windows 10 reference image + +If you have already completed steps in [Deploy Windows 10 in a test lab using Microsoft Deployment Toolkit](windows-10-poc-mdt.md) then you have already created a Windows 10 reference image. In this case, skip to the next procedure in this guide: [Add a Windows 10 operating system image](#add-a-windows-10-operating-system-image). If you have not yet created a Windows 10 reference image, complete the steps in this section. + +1. In [Step by step guide: Deploy Windows 10 in a test lab](windows-10-poc.md) the Windows 10 Enterprise .iso file was saved to the c:\VHD directory as **c:\VHD\w10-enterprise.iso**. The first step in creating a deployment share is to mount this file on SRV1. To mount the Windows 10 Enterprise DVD on SRV1, open an elevated Windows PowerShell prompt on the Hyper-V host computer and type the following command: + + ``` + Set-VMDvdDrive -VMName SRV1 -Path c:\VHD\w10-enterprise.iso + ``` +2. Verify that the Windows Enterprise installation DVD is mounted on SRV1 as drive letter D. + +3. The Windows 10 Enterprise installation files will be used to create a deployment share on SRV1 using the MDT deployment workbench. To open the deployment workbench, click **Start**, type **deployment**, and then click **Deployment Workbench**. + +4. In the Deployment Workbench console, right-click **Deployment Shares** and select **New Deployment Share**. + +5. Use the following settings for the New Deployment Share Wizard: + - Deployment share path: **C:\MDTBuildLab**
+ - Share name: **MDTBuildLab$**
+ - Deployment share description: **MDT build lab**
+ - Options: click **Next** to accept the default
+ - Summary: click **Next**
+ - Progress: settings will be applied
+ - Confirmation: click **Finish** + +6. Expand the **Deployment Shares** node, and then expand **MDT build lab**. + +7. Right-click the **Operating Systems** node, and then click **New Folder**. Name the new folder **Windows 10**. Complete the wizard using default values and click **Finish**. + +7. Right-click the **Windows 10** folder created in the previous step, and then click **Import Operating System**. + +8. Use the following settings for the Import Operating System Wizard: + - OS Type: **Full set of source files**
+ - Source: **D:\\**
+ - Destination: **W10Ent_x64**
+ - Summary: click **Next** + - Confirmation: click **Finish** + +9. For purposes of this test lab, we will not add applications, such as Microsoft Office, to the deployment share. For information about adding applications, see the [Add applications](deploy-windows-mdt/create-a-windows-10-reference-image.md#add-applications) section of the [Create a Windows 10 reference image](deploy-windows-mdt/create-a-windows-10-reference-image.md) topic in the TechNet library. + +10. The next step is to create a task sequence to reference the operating system that was imported. To create a task sequence, right-click the **Task Sequences** node under **MDT Build Lab** and then click **New Task Sequence**. Use the following settings for the New Task Sequence Wizard: + - Task sequence ID: **REFW10X64-001**
+ - Task sequence name: **Windows 10 Enterprise x64 Default Image**
+ - Task sequence comments: **Reference Build**
+ - Template: **Standard Client Task Sequence** + - Select OS: click **Windows 10 Enterprise Evaluation in W10Ent_x64 install.wim** + - Specify Product Key: **Do not specify a product key at this time** + - Full Name: **Contoso** + - Organization: **Contoso** + - Internet Explorer home page: **http://www.contoso.com** + - Admin Password: **Do not specify an Administrator password at this time** + - Summary: click **Next** + - Confirmation: click **Finish** + +11. Edit the task sequence to add the Microsoft NET Framework 3.5, which is required by many applications. To edit the task sequence, double-click **Windows 10 Enterprise x64 Default Image** that was created in the previous step. + +12. Click the **Task Sequence** tab. Under **State Restore** click **Tatto** to highlight it, then click **Add** and choose **New Group**. A new group will be added under Tattoo. + +13. On the Properties tab of the group that was created in the previous step, change the Name from New Group to **Custom Tasks (Pre-Windows Update)** and then click **Apply**. To see the name change, click **Tattoo**, then click the new group again. + +14. Click the **Custom Tasks (Pre-Windows Update)** group again, click **Add**, point to **Roles**, and then click **Install Roles and Features**. + +15. Under **Select the roles and features that should be installed**, select **.NET Framework 3.5 (includes .NET 2.0 and 3.0)** and then click **Apply**. + +16. Enable Windows Update in the task sequence by clicking the **Windows Update (Post-Application Installation)** step, clicking the **Options** tab, and clearing the **Disable this step** checkbox. + >Note: Since we are not installing applications in this test lab, there is no need to enable the Windows Update Pre-Application Installation step. However, you should enable this step if you are also installing applications. + +17. Click **OK** to complete editing the task sequence. + +18. The next step is to configure the MDT deployment share rules. To configure rules in the Deployment Workbench, right-click MDT build lab (C:\MDTBuildLab) and click **Properties**, and then click the **Rules** tab. + +19. Replace the default rules with the following text: + + ``` + [Settings] + Priority=Default + + [Default] + _SMSTSORGNAME=Contoso + UserDataLocation=NONE + DoCapture=YES + OSInstall=Y + AdminPassword=pass@word1 + TimeZoneName=Pacific Standard TimeZoneName + OSDComputername=#Left("PC-%SerialNumber%",7)# + JoinWorkgroup=WORKGROUP + HideShell=YES + FinishAction=SHUTDOWN + DoNotCreateExtraPartition=YES + ApplyGPOPack=NO + SkipAdminPassword=YES + SkipProductKey=YES + SkipComputerName=YES + SkipDomainMembership=YES + SkipUserData=YES + SkipLocaleSelection=YES + SkipTaskSequence=NO + SkipTimeZone=YES + SkipApplications=YES + SkipBitLocker=YES + SkipSummary=YES + SkipRoles=YES + SkipCapture=NO + SkipFinalSummary=NO + ``` + +20. Click **Apply** and then click **Edit Bootstrap.ini**. Replace the contents of the Bootstrap.ini file with the following text, and save the file: + + ``` + [Settings] + Priority=Default + + [Default] + DeployRoot=\\SRV1\MDTBuildLab$ + UserDomain=CONTOSO + UserID=MDT_BA + UserPassword=pass@word1 + SkipBDDWelcome=YES + ``` + +21. Click **OK** to complete the configuration of the deployment share. + +22. Right-click **MDT build lab (C:\MDTBuildLab)** and then click **Update Deployment Share**. + +23. Accept all default values in the Update Deployment Share Wizard by clicking **Next**. The update process will take 5 to 10 minutes. When it has completed, click **Finish**. + +24. Copy **c:\MDTBuildLab\Boot\LiteTouchPE_x86.iso** on SRV1 to the **c:\VHD** directory on the Hyper-V host computer. Note that in MDT, the x86 boot image can deploy both x86 and x64 operating systems, except on computers based on Unified Extensible Firmware Interface (UEFI). + + >Hint: Top copy the file, right-click the **LiteTouchPE_x86.iso** file and click **Copy** on SRV1, then open the **c:\VHD** folder on the Hyper-V host, right-click inside the folder and click **Paste**. + +25. Open a Windows PowerShell prompt on the Hyper-V host computer and type the following commands: + + ``` + New-VM –Name REFW10X64-001 -SwitchName poc-internal -NewVHDPath "c:\VHD\REFW10X64-001.vhdx" -NewVHDSizeBytes 60GB + Set-VMMemory -VMName REFW10X64-001 -DynamicMemoryEnabled $true -MinimumBytes 1024MB -MaximumBytes 1024MB -Buffer 20 + Set-VMDvdDrive -VMName REFW10X64-001 -Path c:\VHD\LiteTouchPE_x86.iso + Start-VM REFW10X64-001 + vmconnect localhost REFW10X64-001 + ``` +26. In the Windows Deployment Wizard, select **Windows 10 Enterprise x64 Default Image**, and then click **Next**. + +27. Accept the default values on the Capture Image page, and click **Next**. Operating system installation will complete after 5 to 10 minutes and then the VM will reboot automatically. Allow the system to boot normally (do not press a key). The process is fully automated. + + Additional system restarts will occur to complete updating and preparing the operating system. Setup will complete the following procedures: + + - Install the Windows 10 Enterprise operating system. + - Install added applications, roles, and features. + - Update the operating system using Windows Update (or WSUS if optionally specified). + - Stage Windows PE on the local disk. + - Run System Preparation (Sysprep) and reboot into Windows PE. + - Capture the installation to a Windows Imaging (WIM) file. + - Turn off the virtual machine. + + This step requires from 30 minutes to 2 hours, depending on the speed of the Hyper-V host and your network's download speed. After some time, you will have a Windows 10 Enterprise x64 image that is fully patched and has run through Sysprep. The image is located in the C:\MDTBuildLab\Captures folder on SRV1. The file name is **REFW10X64-001.wim**. + +### Add a Windows 10 operating system image + +1. Type the following commands at an elevated Windows PowerShell prompt on SRV1: + + ``` + New-Item -ItemType Directory -Path "C:\Sources\OSD\OS\Windows 10 Enterprise x64" + cmd /c copy /z "C:\MDTBuildLab\Captures\REFW10X64-001.wim" "C:\Sources\OSD\OS\Windows 10 Enterprise x64" + ``` + +2. In the Configuration Manager console, in the **Software Library** workspace, expand **Operating Systems**, right-click **Operating System Images**, and then click **Add Operating System Image**. + +3. On the Data Source page, under **Path:**, type or browse to **\\\SRV1\Sources$\OSD\OS\Windows 10 Enterprise x64\REFW10X64-001.wim**, and click **Next**. + +4. On the General page, next to **Name:**, type **Windows 10 Enterprise x64**, click **Next** twice, and then click **Close**. + +5. Distribute the operating system image to the SRV1 distribution point by right-clicking the **Windows 10 Enterprise x64** operating system image and then clicking **Distribute Content**. + +6. In the Distribute Content Wizard, click **Next**, click **Add**, click **Distribution Point**, add the **SRV1.CONTOSO.COM** distribution point, click **OK**, click **Next** twice and then click **Close**. + +7. Enter **\Monitoring\Overview\Distribution Status\Content Status** on the location bar (be sure there is no space at the end of the location or you will get an error), click **Windows 10 Enterprise x64**, and monitor the status of content distribution until it is successful and no longer in progress. Refresh the view with the F5 key or by right-clicking **Windows 10 Enterprise x64** and clicking **Refresh**. Processing of the image on the site server can take several minutes. + + >If content distribution is not successful, verify that sufficient disk space is available. + +### Create a task sequence + +>Complete this section slowly. There are a large number of similar settings from which to choose. + +1. In the Configuration Manager console, in the **Software Library** workspace expand **Operating Systems**, right-click **Task Sequences**, and then click **Create MDT Task Sequence**. + +2. On the Choose Template page, select the **Client Task Sequence** template and click **Next**. + +3. On the General page, type **Windows 10 Enterprise x64** under **Task sequence name:** and then click **Next**. + +4. On the Details page, enter the following settings: + - Join a domain: **contoso.com** + - Account: click **Set** + - User name: **contoso\CM_JD** + - Password: pass@word1 + - Confirm password: pass@word1 + - Click **OK** + - Windows Settings + - User name: **Contoso** + - Organization name: **Contoso** + - Product key: \ + - Administrator Account: **Enable the account and specify the local administrator password** + - Password: pass@word1 + - Confirm password: pass@word1 + - Click **Next** + +5. On the Capture Settings page, accept the default settings and click **Next**. + +6. On the Boot Image page, browse and select the **Zero Touch WinPE x64** boot image package, click **OK**, and then click **Next**. + +7. On the MDT Package page, select **Create a new Microsoft Deployment Toolkit Files package**, under **Package source folder to be created (UNC Path):**, type **\\\SRV1\Sources$\OSD\MDT\MDT** (MDT is repeated here, not a typo), and then click **Next**. + +8. On the MDT Details page, next to **Name:** type **MDT** and then click **Next**. + +9. On the OS Image page, browse and select the **Windows 10 Enterprise x64** package, click **OK**, and then click **Next**. + +10. On the Deployment Method page, accept the default settings for **Zero Touch Installation** and click **Next**. + +11. On the Client Package page, browse and select the **Microsoft Corporation Configuration Manager Client package**, click **OK**, and then click **Next**. + +12. On the USMT Package page, browse and select the **Microsoft Corporation User State Migration Tool for Windows 10.0.14393.0** package, click **OK**, and then click **Next**. + +13. On the Settings Package page, select **Create a new settings package**, and under **Package source folder to be created (UNC Path):**, type **\\\SRV1\Sources$\OSD\Settings\Windows 10 x64 Settings**, and then click **Next**. + +14. On the Settings Details page, next to **Name:**, type **Windows 10 x64 Settings**, and click **Next**. + +15. On the Sysprep Package page, click **Next** twice. + +16. On the Confirmation page, click **Finish**. + +### Edit the task sequence + +1. In the Configuration Manager console, in the **Software Library** workspace, click **Task Sequences**, right-click **Windows 10 Enterprise x64**, and then click **Edit**. + +2. Scroll down to the **Install** group and click the **Set Variable for Drive Letter** action. + +3. Change the Value under **OSDPreserveDriveLetter** from **False** to **True**, and then click **Apply**. + +4. In the **State Restore** group, click the **Set Status 5** action, click **Add** in the upper left corner, point to **User State**, and click **Request State Store**. This adds a new action immediately after **Set Status 5**. + +5. Configure the **Request State Store** action that was just added with the following settings:
+ - Request state storage location to: **Restore state from another computer**
+ - Select the **If computer account fails to connect to state store, use the Network Access account** checkbox.
+ - Options tab: Select the **Continue on error** checkbox.
+ - Add Condition: **Task Sequence Variable**:
+ - Variable: **USMTLOCAL**
+ - Condition: **not equals**
+ - Value: **True**
+ - Click **OK**.
+ - Click **Apply**
. + +6. In the **State Restore** group, click **Restore User State**, click **Add**, point to **User State**, and click **Release State Store**. + +7. Configure the **Release State Store** action that was just added with the following settings:
+ - Options tab: Select the **Continue on error** checkbox.
+ - Add Condition: **Task Sequence Variable**:
+ - Variable: **USMTLOCAL**
+ - Condition: **not equals**
+ - Value: **True**
+ - Click **OK**.
+ - Click **OK**
. + + +### Finalize the operating system configuration + +>If you completed all procedures in [Deploy Windows 10 in a test lab using Microsoft Deployment Toolkit](windows-10-poc-mdt.md) then the MDT deployment share is already present on SRV1. In this case, skip the first four steps below and begin with step 5 to edit CustomSettings.ini. + +1. In the MDT deployment workbench on SRV1, right-click **Deployment Shares** and then click **New Deployment Share**. + +2. Use the following settings for the New Deployment Share Wizard: + - Deployment share path: **C:\MDTProduction**
+ - Share name: **MDTProduction$**
+ - Deployment share description: **MDT Production**
+ - Options: click **Next** to accept the default
+ - Summary: click **Next**
+ - Progress: settings will be applied
+ - Confirmation: click **Finish** + +3. Right-click the **MDT Production** deployment share, and click **Properties**. + +4. Click the **Monitoring** tab, select the **Enable monitoring for this deployment share** checkbox, and then click **OK**. + +5. Type the following command at an elevated Windows PowerShell prompt on SRV1: + + ``` + notepad "C:\Sources\OSD\Settings\Windows 10 x64 Settings\CustomSettings.ini" + ``` +6. Replace the contents of the file with the following text, and then save the file: + + ``` + [Settings] + Priority=Default + Properties=OSDMigrateConfigFiles,OSDMigrateMode + + [Default] + DoCapture=NO + ComputerBackupLocation=NONE + OSDMigrateMode=Advanced + OSDMigrateAdditionalCaptureOptions=/ue:*\* /ui:CONTOSO\* + OSDMigrateConfigFiles=Miguser.xml,Migapp.xml + SLSHARE=\\SRV1\Logs$ + EventService=http://SRV1:9800 + ApplyGPOPack=NO + ``` + + >As noted previously, if you wish to migrate accounts other than those in the Contoso domain, then change the OSDMigrateAdditionalCaptureOptions option. For example, the following option will capture settings from all user accounts: + + ``` + OSDMigrateAdditionalCaptureOptions=/all + ``` + + +7. Return to the Configuration Manager console, and in the Software Library workspace, expand **Application Management**, click **Packages**, right-click **Windows 10 x64 Settings**, and then click **Update Distribution Points**. Click **OK** in the popup that appears. + +8. In the Software Library workspace, expand **Operating Systems**, click **Task Sequences**, right-click **Windows 10 Enterprise x64**, and then click **Distribute Content**. + +9. In the Distribute Content Wizard, click **Next** twice, click **Add**, click **Distribution Point**, select the **SRV1.CONTOSO.COM** distribution point, click **OK**, click **Next** twice and then click **Close**. + +10. Enter **\Monitoring\Overview\Distribution Status\Content Status\Windows 10 Enterprise x64** on the location bar, double-click **Windows 10 Enterprise x64**, and monitor the status of content distribution until it is successful and no longer in progress. Refresh the view with the F5 key or by right-clicking **Windows 10 Enterprise x64** and clicking **Refresh**. + +### Create a deployment for the task sequence + +1. In the Software Library workspace, expand **Operating Systems**, click **Task Sequences**, right-click **Windows 10 Enterprise x64**, and then click **Deploy**. + +2. On the General page, next to **Collection**, click **Browse**, select the **All Unknown Computers** collection, click **OK**, and then click **Next**. + +3. On the Deployment Settings page, use the following settings:
+ - Purpose: **Available**
+ - Make available to the following: **Only media and PXE**
+ - Click **Next**.
+4. Click **Next** five times to accept defaults on the Scheduling, User Experience, Alerts, and Distribution Points pages. + +5. Click **Close**. + +## Deploy Windows 10 using PXE and Configuration Manager + +In this first deployment scenario, we will deploy Windows 10 using PXE. This scenario creates a new computer that does not have any migrated users or settings. + +1. Type the following commands at an elevated Windows PowerShell prompt on the Hyper-V host: + + ``` + New-VM –Name "PC4" –NewVHDPath "c:\vhd\pc4.vhdx" -NewVHDSizeBytes 40GB -SwitchName poc-internal -BootDevice NetworkAdapter -Generation 2 + Set-VMMemory -VMName "PC4" -DynamicMemoryEnabled $true -MinimumBytes 512MB -MaximumBytes 2048MB -Buffer 20 + Start-VM PC4 + vmconnect localhost PC4 + ``` + +2. Press ENTER when prompted to start the network boot service. + +3. In the Task Sequence Wizard, provide the password: pass@word1, and then click **Next**. + +4. Before you click **Next** in the Task Sequence Wizard, press the **F8** key. A command prompt will open. + +5. At the command prompt, type **explorer.exe** and review the Windows PE file structure. + +6. The smsts.log file is critical for troubleshooting any installation problems that might be encountered. Depending on the deployment phase, the smsts.log file is created in different locations: + - X:\windows\temp\SMSTSLog\smsts.log before disks are formatted. + - x:\smstslog\smsts.log after disks are formatted. + - c:\_SMSTaskSequence\Logs\Smstslog\smsts.log before the System Center Configuration Manager client is installed. + - c:\windows\ccm\logs\Smstslog\smsts.log after the System Center Configuration Manager client is installed. + - c:\windows\ccm\logs\smsts.log when the task sequence is complete. + + Note: If a reboot is pending on the client, the reboot will be blocked as long as the command window is open. + +7. In the explorer window, click **Tools** and then click **Map Network Drive**. + +8. Do not map a network drive at this time. If you need to save the smsts.log file, you can use this method to save the file to a location on SRV1. + +9. Close the Map Network Drive window, the Explorer window, and the command prompt. + +10. The **Windows 10 Enterprise x64** task sequence is selected in the Task Sequenc Wizard. Click **Next** to continue with the deployment. + +11. The task sequence will require several minutes to complete. You can monitor progress of the task sequence using the MDT Deployment Workbench under Deployment Shares > MDTProduction > Monitoring. The task sequence will: + - Install Windows 10 + - Install the Configuration Manager client and hotfix + - Join the computer to the contoso.com domain + - Install any applications that were specified in the reference image + + +12. When Windows 10 installation has completed, sign in to PC4 using the **contoso\administrator** account. + +13. Right-click **Start**, click **Run**, type **control appwiz.cpl**, press ENTER, click **Turn Windows features on or off**, and verify that **.NET Framework 3.5 (includes .NET 2.0 and 3.0)** is installed. This is a feature included in the reference image. + +14. Shut down the PC4 VM. + +>Note: The following two procedures 1) Replace a client with Windows 10 and 2) Refresh a client with Windows 10 have been exchanged in their order in this guide compared to the previous version. This is to avoid having to restore Hyper-V checkpoints to have access to PC1 before the OS is upgraded. If this is your first time going through this guide, you won't notice any change, but if you have tried the guide previously then this change should make it simpler to complete. + +## Replace a client with Windows 10 using Configuration Manager + +>Before starting this section, you can delete computer objects from Active Directory that were created as part of previous deployment procedures. Use the Active Directory Users and Computers console on DC1 to remove stale entries under contoso.com\Computers, but do not delete the computer account (hostname) for PC1. There should be at least two computer accounts present in the contoso.com\Computers container: one for SRV1, and one for the hostname of PC1. It is not required to delete the stale entries, this is only done to remove clutter. + +![contoso.com\Computers](images/poc-computers.png) + +In the replace procedure, PC1 will not be migrated to a new operating system. It is simplest to perform this procedure before performing the refresh procedure. After refreshing PC1, the operating system will be new. The next (replace) procedure does not install a new operating system on PC1 but rather performs a side-by-side migration of PC1 and another computer (PC4), to copy users and settings from PC1 to the new computer. + +### Create a replace task sequence + +1. On SRV1, in the Configuration Manager console, in the Software Library workspace, expand **Operating Systems**, right-click **Task Sequences**, and then click **Create MDT Task Sequence**. + +2. On the Choose Template page, select **Client Replace Task Sequence** and click **Next**. + +3. On the General page, type the following: + - Task sequence name: **Replace Task Sequence** + - Task sequence comments: **USMT backup only** + +4. Click **Next**, and on the Boot Image page, browse and select the **Zero Touch WinPE x64** boot image package. Click **OK** and then click **Next** to continue. +5. On the MDT Package page, browse and select the **MDT** package. Click **OK** and then click **Next** to continue. +6. On the USMT Package page, browse and select the **Microsoft Corporation User State Migration Tool for Windows** package. Click **OK** and then click **Next** to continue. +7. On the Settings Package page, browse and select the **Windows 10 x64 Settings** package. Click **OK** and then click **Next** to continue. +8. On the Summary page, review the details and then click **Next**. +9. On the Confirmation page, click **Finish**. + +>If an error is displayed at this stage it can be caused by a corrupt MDT integration. To repair it, close the Configuration Manager console, remove MDT integration, and then restore MDT integration. + +### Deploy PC4 + +Create a VM named PC4 to receive the applications and settings from PC1. This VM represents a new computer that will replace PC1. To create this VM, type the following commands at an elevated Windows PowerShell prompt on the Hyper-V host: + +``` +New-VM –Name "PC4" –NewVHDPath "c:\vhd\pc4.vhdx" -NewVHDSizeBytes 60GB -SwitchName poc-internal -BootDevice NetworkAdapter -Generation 2 +Set-VMMemory -VMName "PC4" -DynamicMemoryEnabled $true -MinimumBytes 1024MB -MaximumBytes 2048MB -Buffer 20 +Set-VMNetworkAdapter -VMName PC4 -StaticMacAddress 00-15-5D-83-26-FF +``` + +>Hyper-V enables us to define a static MAC address on PC4. In a real-world scenario you must determine the MAC address of the new computer. + +### Install the Configuration Manager client on PC1 + +1. Verify that the PC1 VM is running and in its original state, which was saved as a checkpoint and then restored in [Deploy Windows 10 in a test lab using Microsoft Deployment Toolkit](windows-10-poc-mdt.md). + +2. If a PC1 checkpoint has not already been saved, then save a checkpoint by typing the following commands at an elevated Windows PowerShell prompt on the Hyper-V host: + + ``` + Checkpoint-VM -Name PC1 -SnapshotName BeginState + ``` + +3. On SRV1, in the Configuration Manager console, in the Administration workspace, expand **Hierarchy Configuration** and click on **Discovery Methods**. +4. Double-click **Active Directory System Discovery** and on the **General** tab select the **Enable Active Directory System Discovery** checkbox. +5. Click the yellow starburst, click **Browse**, select **contoso\Computers**, and then click **OK** three times. +6. When a popup dialog box asks if you want to run full discovery, click **Yes**. +7. In the Assets and Compliance workspace, click **Devices** and verify that the computer account names for SRV1 and PC1 are displayed. See the following example (GREGLIN-PC1 is the computer account name of PC1 in this example): + + ![assets](images/sccm-assets.png) + + >If you do not see the computer account for PC1, try clicking the **Refresh** button in the upper right corner of the console. + + The **Client** column indicates that the Configuration Manager client is not currently installed. This procedure will be carried out next. + +8. Sign in to PC1 using the contoso\administrator account and type the following at an elevated command prompt to remove any pre-existing client configuration, if it exists. Note: this command requires an elevated command prompt not an elevated Windows PowerShell prompt: + + ``` + sc stop ccmsetup + "\\SRV1\c$\Program Files\Microsoft Configuration Manager\Client\CCMSetup.exe" /Uninstall + ``` + >If PC1 still has Configuration Manager registry settings that were applied by Group Policy, startup scripts, or other policies in its previous domain, these might not all be removed by CCMSetup /Uninstall and can cause problems with installation or registration of the client in its new environment. It might be necessary to manually remove these settings if they are present. For more information, see [Manual removal of the SCCM client](https://blogs.technet.microsoft.com/michaelgriswold/2013/01/02/manual-removal-of-the-sccm-client/). + +9. On PC1, temporarily stop Windows Update from queuing items for download and clear all BITS jobs from the queue: + + ``` + net stop wuauserv + net stop BITS + ``` + + Verify that both services were stopped successfully, then type the following at an elevated command prompt: + + ``` + del "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat" + net start BITS + bitsadmin /list /allusers + ``` + + Verify that BITSAdmin displays 0 jobs. + +10. To install the Configuration Manager client as a standalone process, type the following at an elevated command prompt: + + ``` + "\\SRV1\c$\Program Files\Microsoft Configuration Manager\Client\CCMSetup.exe" /mp:SRV1.contoso.com /logon SMSSITECODE=PS1 + ``` +11. On PC1, using file explorer, open the **C:\Windows\ccmsetup** directory. During client installation, files will be downloaded here. +12. Installation progress will be captured in the file: **c:\windows\ccmsetup\logs\ccmsetup.log**. You can periodically open this file in notepad, or you can type the following command at an elevated Windows PowerShell prompt to monitor installation progress: + + ``` + Get-Content -Path c:\windows\ccmsetup\logs\ccmsetup.log -Wait + ``` + + Installation might require several minutes, and display of the log file will appear to hang while some applications are installed. This is normal. When setup is complete, verify that **CcmSetup is existing with return code 0** is displayed on the last line of the ccmsetup.log file and then press **CTRL-C** to break out of the Get-Content operation (if you are viewing the log in Windows PowerShell the last line will be wrapped). A return code of 0 indicates that installation was successful and you should now see a directory created at **C:\Windows\CCM** that contains files used in registration of the client with its site. + +13. On PC1, open the Configuration Manager control panel applet by typing the following command: + + ``` + control smscfgrc + ``` + +14. Click the **Site** tab, click **Configure Settings**, and click **Find Site**. The client will report that it has found the PS1 site. See the following example: + + ![site](images/sccm-site.png) + + If the client is not able to find the PS1 site, review any error messages that are displayed in **C:\Windows\CCM\Logs\ClientIDManagerStartup.log** and **LocationServices.log**. A common reason the site code is not located is because a previous configuration exists. For example, if a previous site code is configured at **HKLM\SOFTWARE\Microsoft\SMS\Mobile Client\GPRequestedSiteAssignmentCode** this must be deleted or updated. + +15. On SRV1, in the Assets and Compliance workspace, click **Device Collections** and then double-click **All Desktop and Server Clients**. This node will be added under **Devices**. + +16. Click **All Desktop and Server Clients** and verify that the computer account for PC1 is displayed here with **Yes** and **Active** in the **Client** and **Client Activity** columns, respectively. You might have to refresh the view and wait few minutes for the client to appear here. See the following example: + + ![client](images/sccm-client.png) + + >It might take several minutes for the client to fully register with the site and complete a client check. When it is complete you will see a green check mark over the client icon as shown above. To refresh the client, click it and then press **F5** or right-click the client and click **Refresh**. + +### Create a device collection and deployment + +1. On SRV1, in the Configuration Manager console, in the Asset and Compliance workspace, right-click **Device Collections** and then click **Create Device Collection**. + +2. Use the following settings in the **Create Device Collection Wizard**: + - General > Name: **Install Windows 10 Enterprise x64**
+ - General > Limiting collection: **All Systems**
+ - Membership Rules > Add Rule: **Direct Rule**
+ - The **Create Direct Membership Rule Wizard** opens, click **Next**
+ - Search for Resources > Resource class: **System Resource**
+ - Search for Resources > Attribute name: **Name**
+ - Search for Resources > Value: **%**
+ - Select Resources > Value: Select the computername associated with the PC1 VM
+ - Click **Next** twice and then click **Close** in both windows (Next, Next, Close, then Next, Next, Close) + +3. Double-click the Install Windows 10 Enterprise x64 device collection and verify that the PC1 computer account is displayed. + +4. In the Software Library workspace, expand **Operating Systems**, click **Task Sequences**, right-click **Windows 10 Enterprise x64** and then click **Deploy**. + +5. Use the following settings in the Deploy Software wizard: + - General > Collection: Click Browse and select **Install Windows 10 Enterprise x64**
+ - Deployment Settings > Purpose: **Available**
+ - Deployment Settings > Make available to the following: **Configuration Manager clients, media and PXE**
+ - Scheduling > Click **Next**
+ - User Experience > Click **Next**
+ - Alerts > Click **Next**
+ - Distribution Points > Click **Next**
+ - Summary > Click **Next**
+ - Verify that the wizard completed successfully and then click **Close** + + +### Associate PC4 with PC1 + +1. On SRV1 in the Configuration Manager console, in the Assets and Compliance workspace, right-click **Devices** and then click **Import Computer Information**. + +2. On the Select Source page, choose **Import single computer** and click **Next**. + +3. On the Single Computer page, use the following settings: + - Computer Name: **PC4** + - MAC Address: **00:15:5D:83:26:FF** + - Source Computer: \ + +4. Click **Next**, and on the User Accounts page choose **Capture and restore specified user accounts**, then click the yellow starburst next to **User accounts to migrate**. + +5. Click **Browse** and then under Enter the object name to select type **user1** and click OK twice. + +6. Click the yellow starburst again and repeat the previous step to add the **contoso\administrator** account. + +7. Click **Next** twice, and on the Choose Target Collection page, choose **Add computers to the following collection**, click **Browse**, choose **Install Windows 10 Enterprise x64**, click **OK**, click **Next** twice, and then click **Close**. + +8. In the Assets and Compliance workspace, click **User State Migration** and review the computer association in the display pane. The source computer will be the computername of PC1 (GREGLIN-PC1 in this example), the destination computer will be **PC4**, and the migration type will be **side-by-side**. + +9. Right-click the association in the display pane and then click **Specify User Accounts**. You can add or remove user account here. Click **OK**. + +10. Right-click the association in the display pane and then click **View Recovery Information**. Note that a recovery key has been assigned, but a user state store location has not. Click **Close**. + +11. Click **Device Collections** and then double-click **Install Windows 10 Enterprise x64**. Verify that **PC4** is displayed in the collection. You might have to update and refresh the collection, or wait a few minutes, but do not proceed until PC4 is available. See the following example: + + ![collection](images/sccm-collection.png) + +### Create a device collection for PC1 + +1. On SRV1, in the Configuration Manager console, in the Assets and Compliance workspace, right-click **Device Collections** and then click **Create Device Collection**. + +2. Use the following settings in the **Create Device Collection Wizard**: + - General > Name: **USMT Backup (Replace)**
+ - General > Limiting collection: **All Systems**
+ - Membership Rules > Add Rule: **Direct Rule**
+ - The **Create Direct Membership Rule Wizard** opens, click **Next**
+ - Search for Resources > Resource class: **System Resource**
+ - Search for Resources > Attribute name: **Name**
+ - Search for Resources > Value: **%**
+ - Select Resources > Value: Select the computername associated with the PC1 VM (GREGLIN-PC1 in this example).
+ - Click **Next** twice and then click **Close** in both windows. + +3. Click **Device Collections** and then double-click **USMT Backup (Replace)**. Verify that the computer name/hostname associated with PC1 is displayed in the collection. Do not proceed until this name is displayed. + +### Create a new deployment + +In the Configuration Manager console, in the Software Library workspace under Operating Systems, click **Task Sequences**, right-click **Replace Task Sequence**, click **Deploy**, and use the following settings: +- General > Collection: **USMT Backup (Replace)**
+- Deployment Settings > Purpose: **Available**
+- Deployment Settings > Make available to the following: **Only Configuration Manager Clients**
+- Scheduling: Click **Next**
+- User Experience: Click **Next**
+- Alerts: Click **Next**
+- Distribution Points: Click **Next**
+- Click **Next** and then click **Close**. + +### Verify the backup + +1. On PC1, open the Configuration Manager control panel applet by typing the following command: + + ``` + control smscfgrc + ``` +2. On the **Actions** tab, click **Machine Policy Retrieval & Evaluation Cycle**, click **Run Now**, click **OK**, and then click **OK** again. This is one method that can be used to run a task sequence in addition to the Client Notification method that will be demonstrated in the computer refresh procedure. + +3. Type the following at an elevated command prompt to open the Software Center: + + ``` + C:\Windows\CCM\SCClient.exe + ``` + +4. In the Software Center , click **Available Software** and then select the **Replace Task Sequence** checkbox. See the following example: + + ![software](images/sccm-software-cntr.png) + + >If you do not see any available software, try running step #2 again to start the Machine Policy Retrieval & Evaluation Cycle. You should see an alert that new software is available. + +5. Click **INSTALL SELECTED** and then click **INSTALL OPERATING SYSTEM**. +6. Allow the **Replace Task Sequence** to complete, then verify that the C:\MigData folder on SRV1 contains the USMT backup. + +### Deploy the new computer + +1. Start PC4 and press ENTER for a network boot when prompted. To start PC4, type the following commands at an elevated Windows Powershell prompt on the Hyper-V host: + + ``` + Start-VM PC4 + vmconnect localhost PC4 + ``` +2. In the **Welcome to the Task Sequence Wizard**, enter pass@word1 and click **Next**. +3. Choose the **Windows 10 Enterprise X64** image. +4. Setup will install the operating system using the Windows 10 Enterprise x64 reference image, install the configuration manager client, join PC4 to the domain, and restore users and settings from PC1. +5. Save checkpoints for all VMs if you wish to review their status at a later date. This is not required (checkpoints do take up space on the Hyper-V host). Note: the next procedure will install a new OS on PC1 update its status in Configuration Manager and in Active Directory as a Windows 10 device, so you cannot return to a previous checkpoint only on the PC1 VM without a conflict. Therefore, if you do create a checkpoint, you should do this for all VMs. + + To save a checkpoint for all VMs, type the following commands at an elevated Windows PowerShell prompt on the Hyper-V host: + + ``` + Checkpoint-VM -Name DC1 -SnapshotName cm-refresh + Checkpoint-VM -Name SRV1 -SnapshotName cm-refresh + Checkpoint-VM -Name PC1 -SnapshotName cm-refresh + ``` + +## Refresh a client with Windows 10 using Configuration Manager + + +### Initiate the computer refresh + +1. On SRV1, in the Assets and Compliance workspace, click **Device Collections** and then double-click **Install Windows 10 Enterprise x64**. +2. Right-click the computer account for PC1, point to **Client Notification**, click **Download Computer Policy**, and click **OK** in the popup dialog box. +3. On PC1, in the notification area, click **New software is available** and then click **Open Software Center**. +4. In the Software Center, click **Operating Systems**, click **Windows 10 Enterprise x64**, click **Install** and then click **INSTALL OPERATING SYSTEM**. See the following example: + + ![installOS](images/sccm-install-os.png) + + The computer will restart several times during the installation process. Installation includes downloading updates, reinstalling the Configuration Manager Client Agent, and restoring the user state. You can view status of the installation in the Configuration Manager console by accessing the Monitoring workspace, clicking **Deployments**, and then double-clicking the deployment associated with the **Install Windows 10 Enterprise x64** collection. Under **Asset Details**, right-click the device and then click **More Details**. Click the **Status** tab to see a list of tasks that have been performed. See the following example: + + ![asset](images/sccm-asset.png) + + You can also monitor progress of the installation by using the MDT deployment workbench and viewing the **Monitoring** node under **Deployment Shares\MDT Production**. + + When installation has completed, sign in using the contoso\administrator account or the contoso\user1 account and verify that applications and settings have been successfully backed up and restored to your new Windows 10 Enterprise operating system. + + ![post-refresh](images/sccm-post-refresh.png) + + + +## Related Topics + +[System Center 2012 Configuration Manager Survival Guide](https://social.technet.microsoft.com/wiki/contents/articles/7075.system-center-2012-configuration-manager-survival-guide.aspx#Step-by-Step_Guides) + + + + + + + From b78a73cb2e4319ff4a70c7c73edcb078d2f8be77 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 12 Aug 2019 13:39:08 -0700 Subject: [PATCH 008/358] draft --- ...prepare-for-windows-deployment-with-mdt.md | 4 ++-- windows/deployment/images/mdt-08-fig01.png | Bin 9096 -> 7515 bytes 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md index 49858e20d5..8cb886e2e9 100644 --- a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md +++ b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md @@ -100,6 +100,8 @@ Lastly, open an elevated Windows PowerShell prompt on DC01, navigate to the c This will create an OU structure as shown below. +![OU structure](../images/mdt-05-fig07.png) + To use the Active Directory Users and Computers console (instead of PowerShell): 1. On DC01, using Active Directory User and Computers, in the contoso.com domain level, create a top-level OU named **Contoso**. @@ -119,8 +121,6 @@ To use the Active Directory Users and Computers console (instead of PowerShell): The final result of either method is shown below (the MDT_BA account will be created next). -![OU structure](../images/mdt-05-fig07.png) - ## Create the MDT service account When creating a reference image, you need an account for MDT. The MDT build account is used for Windows Preinstallation Environment (Windows PE) to connect to MDT01. diff --git a/windows/deployment/images/mdt-08-fig01.png b/windows/deployment/images/mdt-08-fig01.png index 7f795c42d454b3bd2f64899ebd4bfa2b4789c344..63b459be719c313c92e780e07f6b919351e7ba8e 100644 GIT binary patch literal 7515 zcmV-h9i-xkP)Px#1ZP1_K>z@;j|==^1poj532;bRa{vGi!~g&e!~vBn4jTXf02y>eSaefwW^{L9 za%BKPWN%_+AW3auXJt}lVPtu6$z?nM036FnL_t(|UhQ26d=%C8{?c|+Hoa{M2?>N0 zNP&RVgn%G|h+sibMEolv`b6aEQ=awt6!i)Ah6=(1HFOYEs(=(}At8-~^j=6IJ=wJX zId^xKO;h0cN;doPyT6&acQQM3&UerKZkfTTod5$2=p!)JY_AJ(ad8L>3&S8kPxSBK zAM4hw)07xsz_sK3_uofUR1_90SRgob<;oRJ$-fWRMR>lUrAwD$$}LftbN5hu{?QXy z{>*f&|9X|E07s4-(VS@jgPr*5tFIdD(hb-)tJkbWbyG7G_73=T^%of6=O@UYot>>Y z>yO7ZOB%jGCi~obBXQTv@vybCL0elZ+S}ToYHq}d6Y==+>wO3b87XQmNB+JFb{IRZ zzOE2cCJnc2Y?2U__1Uhj-t30@J3B!`jcEM#N~PunSj&zGj!s;EM0!<|g)i zeSOi-+Z%O_El9qYLX0%VE3drKekee$6 z*_r5KtFv!uX@`66nSw3fzKDj}OMOb;@7%dl$hz#zQ`oWPbZkrZ~ zO&gcP$-Y|Hg>BnciO;rDdU(LyO^K+8aqtQpieV9vh`41c$Y40~%Q3jQx#Pu`UPe}4 zJ^}&*g=+XC(56j&0Z;Z5?b@kXL|jq7NY^u22x4qkdljb74qu z2u2gZ7d$Wz3CSr)zuboKlD=g}CXaQ7|Tr)s^7vM9o&@6XA8r%`NOH;#(jsH4amzKS}56 z=g23Mb&&bB>IiRQBBSQp0jj22 zs8sbxPrrz1w=bnK{USV%x^Pq;5$=yC9={L11N^(#rlZX?0ijdAsmuYfv9VaY{!pJ8 z$q64m9Dx+!BO@YUYhyz>#_$>Fj)uktRJX`+D5Diu8r$ISVGXH9}~3)}E;;vDmg{H5NXy1on>oy6AJU?X+*E z*_X=|u(S7qmBJa#&5hLSZYHO;pq+Z(`UGx{ndpx_`Vih*`7Bnge2w(wFs&V=tw_JI zudq?VSs4g(xeOH*<(jMOKUhK3)z?E|r9e1yE+Yrl)^f;RF>D@Sb>%AzI)w+0LC0y+>{Eu{L&JHghgnb zB8|XwaHixqoqdJ1D-^a$x>P$6y$NkZc0qVf?JeqG(E~_Btpj`YXLnZH zL$Zlx+u3HqmbA4bspsG{fQW7_T0vnSivE2CY(u|6{_u2n7ekRsr3dUBY)Pur!phPT zbrj8=9UUQ4RbWAA8>R-@AgQncF%{M@_6S5M$(li-BXRspEb(5Fh&kvNMi@JRuxqMvl@tPP3KCt%OdOo7)I&Dzv-~ z$)$ZY`Srt@96c;7sPo=hMO(Y8_F(&H_B%v%-fHqKiR88pUSd+EtxYZUgq<`2qOU}F z9{E#{W|zriaB#3kO}&Z&hf+*DnVFi3D9@Vya#J)##kWS z(*~z=nsKqw5ejDys9M@dLN{Z4WTcQw*8(l!W8<>%_NwoZmX?6DO9xS2mLWzGbe$-d zSrgH1VPZ^CT|@NFB<~REse`63sI9Fd@ENk78a$XHEu4XL~A(^e)^2)QSxZ7bPP zm*m1uTD$cf!jBynK^^^J$j-@ugQF`<%#2`UWJLX#O49NQ;+t9mD->3!C3(X#he=;o zPg2L;4gt1xcwveMWM!GCuWN=;Ya{IK>~QIldd}xspe6j+G5!efcgOM<*CKlJ0TdTy zqOu|j)mQS#In5NYEXbL1aqe%DTqo&^q>*soP&^V7vLUN6oO8lGg0 z1x5E}RWm7$dRQy0QCwOArK=KE)zwhCDAC$j2QOPWnrlkn?bT2G&F0OUuV2zI=FT3A zXP4fF@DNu#_|RYR=3Ado?a3hLNKR>|eRYRa+c6c*bjNhHOn*A93`a+6ytQ&CcK>i3 zWu>Xe%|4ClszM>{cu3Zi$S$J}sp!`*so74QZKKJTDgjSQ={q>O2MrklS63I5*VUp) z-UcHR(&|KZ*6Zfxax^qHqJj49ZEaCmRRvdPXVlczh>E~6NYzYggXB+Tc_p%ot6^@` zgz#ZQQBqop{QP_|(s(V<65iNEf&7BY=@EqOWdh0EW9Xn1$_dRF#L*n>FqiR!XgdzuSop|%%^BR6RXb25a$e^O(81A^-!8fy`h&{KDw2I3ShjQy{V= zMn}W=iVA3FZ}T0-1G!)Isw0ynpQ2pKvRgZziX*2bI&pDN1QT6-RT>|6;r>7_QM zPN>4l1eO+-Bx}y&?CGO$afuQ(L|ttyvWn|qZqh7Tfcl0;oIe+H-3#wJ5T3Cn`a8V&!JF{#9DtjrEJ8@=Sdq`O zf?D0loiWkz(j0e4>I$HbsH)7xpun5p&@dF1T*i!Q7@nRU7&&4%M&C37KknU&va&MFx%)0mnS3)Y zmseo>uJ3X1z&=b4^Ttz?17Oimg+_ZXT(|=4I24b(oML!;^b^s(rm6;6g%$8sD#Uf; z6B7{^8+&7GX>@TmCmplq&c%rnr>G-Q0UKKfkV(Bc(EOvOW*Bl@ui+Dd9N6 zhTVcOk@GMlbObr1Nt7{xyGC-|kr}BHa0Q^=njV0crVRA+!78Q{DZ^M zZPfXkdNVkxM@^Ur7dLm@apzsIwY3!^e2xwd2&1Td{M2cz{NO`6wkP@FiSy^r)3di@ z-hFeClaq@h6y?W`9u0fyl%}L!g3Qzu!$Lz~Lfa$9j^W^;LojZt!Lzd`qQ7YqYE;HB zGHb(-0j`kA&8f4R4NG(RHIKdPq6^`B0x$Iy&LXFEcBF2k?+bYCu>~0B;h{OY3L*PC z*+#MpCt)W|es9L3k3EJ(ix34p=8*($5ST&iRo`JgBIx*(%>EVukl-yig;Njs((j^hcPM$<{ zT{cGgD@AmVAt}RzzY#gZ&=S6^yau^>WtyX|=&sYMCOJ7**6hRD_4`m;+o1W&-i4;7CLBNcD-lpGWQ=Zvm$qC1VlP}k zT6#KseSJ_wTK==ut5IHAiJ5oIK;@N6Bqyi9+`IcfRtB{wUk5i=kGcz+WhC0JH@_HXbOL!+oYn=Es6~7!y(ByPPcb!&s6w@R+)1)YsM^ddpU1ke=p6TukzetSp?S&Szn9F^(KRiQ0w+n9AfxCY|2e z-VQ&1f5avx;)9Pqrb?s2$eV`4($WH#FPEXIxdru&4HV%$U`~>7#1#) zrMU&!qz%D=f#N$f7b)_8zk81u$x$j@MTEDvwG*?k-)!0hkAD5cXwH~XBav57h{H#Z zA%~*-(Vu_5q0Xv=4jMir*bC_yg%}p*kBy``Kl*r`SS`u;y-q9F*f-w#4o^P)8FuYH z1y?6aY}>XCiE+oV{;R(sCcYT`eS^iddMlXlygKN!)w@ww*Hw;m*J)*#SlXh()EVVf zGMtLJi2G;GrH+)gXILTfP7%?y*P2?Fh$`jjKWp&ntuL*V1BZV7z6yu_$XV{1M zR(E7(^VY+7@ZnW(u?LQSe-{pKn}XufDlE8v0@8D8ar<3=7T4(Q@bYv->ZL-2h77<5 zA8!(?C2Og}B|%rxNVZ|Lkc0{IvxU-$G$}05#Ou8q>d3jJsH5$;apS~!y$via4(#8D z*t2Jlo0E;C1k=2U%qh|bB!4}G6F095sk?=hafP(3t3r(RLcUW z!;y`mq7rc;J5x<^%?JdMJ|#5+^B-D)>IOA{`aUxtOfTtv&>Y9r=P%(-(URRXZ@hac#G`RON$`b9{%5C>IVE!M4FBUWDCXh&5SLelWX3X4>N z^j`g(vHZCQQC(e&xVR+LX!NCUCPgl8vbiJirzLL@sXxV=&nR(fTNv^)Q*iJ|J~B&& z;-A}!5F49}9ox5yH&})bAC51+_(EK#H$rL!`*}EE+?W6q6mqjW2(fX=Jx2JXi|II< zP>SbXdX}2&66CabkY3G2Wkn^7=-h&mLhRhT6HabUP?ri}XUUeRwU++BIKc zOZ0b0NlwB5A78B7xRJ=a7p_XBc-yISgqOBnByo87^4RecVw^oIGXp>G--~5WEy3Z# zKmSW#8tV)}c)nqtJ#%pl!hQ2!#kq4ym^^6=mOuXl^~giTiRupswcw2vpWyy^%P?+8 z2@ZT|2YZWB96DKtm~?L(Jm-ysizTQa9X4&+RQ&aY7x4Jv#rXQ`ukrNLPmAmHMsO5+ z?zxw!fAT3gMuEkPZpWpxTv2w<-P1|-@n=d{_Hl$)OPOj43I#<4aCdUY1hS!JV+>SQ z?uffmF8TrI;?E(-KL~eDnFV8&2}~@w8uV^3G0#!7zjewjSo7s-v^A^X=-`Mi)_#p| zH*bcujg6RjwN@wu+4rf#TL_hrS!-$WM7oTU~3Y9?*)|Z(?7S>IGIt@&Ol5d<(L&g} zIAHsRotj_j{a}g4QGea~^|*EFRPjBUtehO74(8374PPH0YAFj*TvCFPl2UBjwpB!5 zRvXu|zWsX9xAX)`H?5I<97O%hY518A! zigztzem#%TlSUzENB~9i!Dyk#@9#TEOuxH0D5*2sg3R1Zto`R2Ts)tOV@IyOIi)XP zpEH-%6Y>294Z`GGrii|eyPKPk%hA!%IDP6AKL7mlKUBK(gdPd63y#iA>iP5MV;#v8 znOugnv~+5Ak`Xl_iXvJwKKbMmta$THl$BjZetrQ}ibJ??;ev?#y#MHAHMy4sfDxVP7nA?T1@_wloWjQ&c~Q~$5i-u_DAG|NUU773UZi>N~4dq`8_b{ z|DDpMCtMfd8LY$k(`Nj_?PBVXDyRd((&g;gvxtn0M0$EUcI?<8KCrWC)24rUqM)~c z$-nH+%TQ5Qj{6^&E8fFwXsm~&g%xqXon(wXUVrrsw5i&~SI9V`|0kMo13Kcm2`_=Q zIqUWC@NiK9cwx`w%a?KS;zg`ju>uc1_@L&@z6Flj#a=G|UO<83r z3bTtaa_DFS(f^C+u(aTMaMxXTp`xNfyphftZ13K^)PWm_f`WoROLhj6dH1e8uryJS zjQJF%FoTZhK%atv@CNiL7zl4bpMrt#2J|Ut3IF!nZ;RPcDe)Tin3xz% zDa1bKN#(pkka6(fLGhA*7(Fiv<4Gt!j|suxztycU zy%o~)Na*fG7G7>4*@Q{UNwSl#udlY8_w~tMe9uy4=87uaKXZnch)ZRh7!r^8n74e) z=qU(D*XJ@Rz%Zoi+{jBsJxUsh(CiSt@T5tTuzK}sktczFm>-TS3RjSO?zu<%(ERtk zeRU)gl%G*DwzTE^?!Y#B?z!iBbc88^v#Gc)mIQQFaPDvorYS*l`kgpU>AP=n|M6!6f}Hu+7*m z-9ex2#r$BNu#NbcxB}}wD}%|(m7T$MQ=<1#+x^Z0l8ttz(jji5)u z^Tqi`xF+(C@_uJ@b{OyX6#aTDB*#cea#&AbJN4uYeYO`9oyo`q=I7^U?F`)tFWI7} zAkg_-hOX^y6x|Y@e~k4LJA)n0PUZ)ank)&DW2IWn+Z(NU|EpkQbCl<1^!Lcl_Ti?N z&+iWUXfKu{th4!fBuUm?aAZhiX7E-DrcxfGyL@T;hXe=GQv!6eEVQ(Vh~7^6NmJV1 zPFk&Io zd29y>`eZNWK+vF$ql_O(Du zcmoW$UUWxz25D?TR^4F0kSa7EbGZ~idI|!3ea_>*;cM#RMhS0NEonfX!f%e!7+`?D l!9aKe`V!00009a7bBm000XU z000XU0RWnu7ytkO8FWQhbW?9;ba!ELWdK2BZ(?O2No`?gWm08fWO;GPWjp`?BNa(R zK~#9!?R^JSmFKedS?fRdrkNs8~RxqZEvS>r>!J9s=bpPJ1O5B|<3Q(Kg~aLg*Sf=c>q2CwS;5P76-Ip5kN>!rWQ2O5 zIxZNAnOZNM>gRoCtvBE7$-i7t6Gof7^isELnlol$>g->@-}Q}*vDw(9b=iuQ=%FEW z_0)iWTBE(PLTe&2Q|(YuvJ+)Ro+vGFM}D?FtSlDbgAd;17smgqyN=Whc<`W)V6=Ib zTrYXgx?YrYWY(?Q3ozL-hX}(OfxfzO!f1MyH%7+UXZ;5VfN$Jlgw-4MNDRd9%T}(2 zqpMr%(iPh1_4@1lVy7o{>7UqWe;73gQQ=!rQxSr_RiX4f2-W5Os4U%uisClV=V#er z$hA)!TLkH_rgZZE>ra2^VColuhRirkFt0`M}u1UzecQPR-}2J^Hj!x0~4 zAqbtmmBRXuXKaeR&CVR#NgomBpj%V$Ns%BsH=^{zUpw)R5k~xnecndkE+f=bDiTJ(BZOgWFb5nWK1&-T-{;$Zdk53!%tdl)8m#Rcu|(e< z9-718>g^Aom?Ug-_Qbp;S_1I44vzP|eRtt2ishes?)m!1c|wmh+NF!9km5se>}Wn3 z59i>>p-db;n2tjSQgE<7kw70uppQmfjU4nLv}l0@dO!MiUPw)H5k~z?81Uc!hG2hF z>?2*&*GAFzh)xYTCfo>9HHSVkiA-jk?ytOj)yQBG_Ets+!f5C~7!e%_qqL1M(vz&Q zQFq!iLl~^5q2CV2FAEl-qN*D9E*?lqOM}%4Em+Rfgn3*QT%%Iq84(LT3meRww*d1N zFM*ej?*ltWC-nX2KRewRRT}M}FZ&^Sw=+&2FURSVRXEvHjuXd9aJ;b)$ByLT=x^Bs z`aSrqAq|K2C!>Kuzb_8;0`$A-diw3g!})hIl3n>tA>}x;d-s>G8gE%b_Z>rpL;z(n1gTdalLD??2}^GLx{IzIV)zLy?`~`xwHIfnI?yYGj1L9#L|4-rw(B(W&3Ekj;uE)ok%ur{C&3%v4Sl~ev@fTH2hj(_nXgvPz({vGwTD{i=h#0h$_1aq+@$xNzr&RXV7uu7SCYJyOzBP}@+A%)(6MmgFKnJpp^F>M+kO7fXB! zU>#Qm-}p4xdIdm7<1j%|~!(*n@zeUt;Kzyt+n@Wr?#kKU>x9v>vGc;E z#M?`1f#e4K4>I7`C^x$AGVnd0IaT{qhJ1uJN7^uN9B#;fqup9b0bPDNV`jP*`|Gla zFb@AIVH^{LLAsI=29w086XjRB13QIDZJ|&mL$q@YA)t zkasR$YP@s)?0z!#O0jUfQ0%%U#ch|&0?8_su2`6@$H4>nXufF>3dc|(wIhK@UQBm;B~`^JwODF}o0!-R3A`K0*y&k3VVS7%S}yK(O9{@W*ymywQg zNk^$jO|X|d&^0tPPH)_7fTH3OxOnbFXhbB6s|%4!ZaXu2dR_)9_Ld_xI}PPEWymSY zL2hv_!U_*ys$({Ef=XZ)S3n87WUM!_fv&zG^78ZVnOj)Mnf)K4_s3UllkxVP@z zyN#BX8@O}(DsIU@fBhPR{tT}CaSDH2ZUO zG0&iZ{ZL+-M8^9&ZGsm_CuhaaPin~L&ozVx3*I#3ci76Tm9)zX68wyGaP`0-O zMU{n!O^rioO({~cQUs%y5zy0fGf>yCkABZbet8K3a`t0}Q#RIzmcqm}7^^mHK}u@c zxxBnQ`B7yX&@+;)gdE(Te75EGHQc}7f_rywq2(gx7n%nQj2 z$O|W5oZ||M!wIPPsI5`~`iSA*eu2`W5ZrCK`Ba8X8^G-=S59BMM9j~O&rHv`4Nlr| z+-_&HLQ+6y!Z>lPwB;dTTzf2G@Fq$6YvyZ@=%}GhM~N}kQU`i~?#4}sOGrR!dOAD< zqR34zMESl_BxWQEMlY-=6hN=4s}!z#VR<2{_EpifR5ToJKv{J;_8vTh&Ca3NXyb>~ z>(-;Pvhvo>ojW@+y3IB%j2ihhCD0tOe_t#!(or(zn-3n`$NhUPxJ#hFclXZq`}gnO zVq@op!IxVA9u-s|ICmX_&2U!Y`#I)*qE8=e?M6* zl6IV|<9MADPPSHBk^?#u26=SnTJA7m+$FnF@DgQ&!J*-;o0kP)T)%eip^i>H)X_ni zj^d-YNfzkh?ELMwuUp&hz~RG(VX?!N03VOi+7jfHWDB5kjLxomPH_%Ot4iov680Y0 zOL2P&s_Sd$S{a&7oj`SMH9P{MvDVNUI~*KQP*{l3qeny5oAS_zSFV_fFTUspBSUTM zt4$Uz74N)v?p$x84|SC_%?rm2-@Z7)9evb*`Rq6*!dOy3H!)m*upmP|Cc8;&edYfB zJC7JL8!qYVqSy>?UKW7o+y>_~_?VL8bxt_(W?D<e z-PvI^KL7kvY&Bmgl8t$Ldj$-4+F(|qp?qEIkHynU(P!!gfxWLq6EB0h%w`eUFVd1(CKrhbsMtJaM6w&uX z2Ph`UkAcDFwXof8(GK+cof)u_tHo^26=0DedXjV9eZ4kf##Ox zke3sH=!k9Pc0F|6*(S8yq8 zVsi2o)3#%^c!mG>AzPiI^WWS|PfDijK!DF$_<64<*K3aedTZ+mraN?skK62xuHa=qG*B++A87`PK2x|}cy@`40m)YU$8-Q_@6)X`;S9UXjBM^dmOd9hXRxBrGQ6DDFQ^_CkL zo50b<6?MeqNhvAVpuZVQ=(;5pykzX5>dM9@Z1s-BLdQ7h1!Y2Shc7}RiA?v`(wTaN zNXDJLcowyFwQ%r`z*=Jmc;@>P&eHa?k4ftjBN)x*B(%f0j_mmDy|mH7uAAX^S+mA-K$FdMB6IApA>=4!pXFAXBw#X zAXE@WXrQS8IwdQcZiyOOsbZp%1IrBs~==4~ikN9;6a_ML-EZCt# zjLtEYva5Am?rPPwv3ZpOn@bhw9FinaHx)DWnbZ3b8e~MZ1V;tXxxh%yR2St;MYZo- z^L|JLQ%M=T$CnatzEq}KfRL~-tfzvRa$;{52PY@Q#Kwxv zz}3SOYw2(15!Wjm8PHryT2;|-ra|Z?o zW1G!(tk>6vw~r4pv$Aol=_G>Uv!LS=jSY4_h>nRxLQ?XL1xuIVd1`l6@wqwzonvgy zp7Rc?2=tpbFSQx)nI|(~DFgkx>0iOfapNOEzkU0PsC}2${-02){jaU;$W&4WdPtxN zCToqMNiqo?fKFadlcJ7JK7o$9k{$i+-FI(VZMPM`+-hYFb4x3jZMB36ooySNTforN zOpJ+|L=$4>%%=gXIXNOW_o7nO-BD5E=YXIf7}M*Di;J;4GLlsRKPP%Y({$9UlQY zS9x7luKlOhOYW=Y+J7E8QAPtN6m=w3p!2{8whi|B6oKB-a%Ebs2=N$$Lt*f>n+2yL6YC1vRMAf2-G^Or2cYp=fnl@n&3 z6zJ@3sdly67N=Bcaik1%E(nqzuPFkZla)NM zql!VpXBX&HPTk%gA!|jAi*dte{XfB1BL-po&);C?^br^}b}(EVR(3f%da>Kf_+-F9 zIJvoB_X`Mwi#uh*UERbnnuD{8IOn!?aKOyDzlvkFjRsq=e6_ZVviY+J^tR2gW1HoOABI71>v~LGG8z2_e~RG~hvBOq24T^HF*HPT z+cO7rE`x2;QMF7*nHW5%A50w$u`7BfbWB!a()>NYSqoW1 zS$QKf3%C;d8&FR=1KyavJChf{ad-qBuch)-SaSV;C4lSd=?nKiBs}8QQtefDhkQ2z zFL&>b$BoDC!00ol|45ApOQE%Fc8BgY20AC=%{Rf_-xbT(3AU<|64042?6$8}33MuqDXBJ}exJK&sn`TKBhM~A zyX8JK6q0M+y(qK3iClWEm8&S@9zrg?7qr)|698xT-#;k$&aQyKTNB9}7)crY0YkpV zf72tI{^avKG~#XMOE7!Z&+u|L#iorbL{p2rd+pNs!zx=*xp}29$AM;|-F>_^z?gu(bn!F_al#(~dfR5$vG$*V?&=pr z)lB~IiipMzZ!cVGK8uWkbTl;9WBM;*oUxIVfX;;BXs1hrF$={7ksW|eosUh*{SgDd z`~<$S@$m5VfMaATY<31BB{#EOMwpHHs~9GM@-QJ8wBW+Qc`bhGB6Y)p~sA$ zi1$9|^F*`n#fRZ%U-1HQzx8IlMWP>_fnJaoM~1s!0G)>dw6&t9$y!lE#RD6-c|~XC zM7;f0FU+4c2xs@N!f(a1@Y0Ka#rPllo{-AaSNRm4nKQ<~)kzQY=1zX3dyU(6mD?;C z=#IWYh)az{Je_}T_YTDG=T0InBL;aD*%&uPxTPbc0(92V4(k;FiJuN#nEJ$%y{Hi=0MkIO_v>sEq`9&2Yvo7 zvhQmtuKtx~v1jGvUd^R3PYF~88yBA-vg&*m9z}^aK4y!c418Dw#pYr&h@!UBtm~e1 zroNJxeeS}=;Kw%6LmP^o)OOm3`i=W(a9eEcXNtMMXd*1c3A=n9+Zmm!;gnlZgZ&Ng zVV~X@@Y$O$g7m;Df}j{-g~>MqjyN8fDNasj_Y{ z!b4qQV6YAc8!83Rxina@&C=J~2wx5v0J{)>xOuyZZX*xB0GzpS8oQIi$d!-4)Ww>T zd3+TEJw3@%44+uMXbP+?b)mgtK2nl`aiG2wvS~6+iv1BYrjNxUt%Wf4bBAMqKm0@d z1kiVpv9pf+qkS=F%}o3}OKgY%UD<}7f8mAtu|JIy=jsc!mWw8q;?mNq#U-UwEtiIr zlvI&`<1=w?HI0jp=VP~)jLgitW|XYs8u@V(C*tK-Ub*(P542F+b@npYb2Ht9JLToE zt*wtZGeH2IGwyO%t1#CGLx=Rm2k&-Al*a(H9R3NJ!CxUUP!k?5W|%*JK4#CJjcPh7 z(9zMs8*jXEt#9AH23@(eki8x@VxBNFXZCmm2iQPwlQ!MovUZ@Kr(z;GQ$q>Q(dlHONwF2R-+)i46RQ;7VeYW@a=>a2s^Rw71*f187;M)gkk5dXhXrCX zB4KQ`rOSIiT+E`;v*)$>ix$CZ`wlFo3OYVd&o3;zU0b{NIuCQ)lbMMM8bm=yZP(d_ z=Oeill$n3$-S_aXKFaISHoD%u5U^|OBUyKjvv_gl%=!WEzWp*bEz!WyjQ5b`|29$s zhQr2m2G&pB4uY(8Pycode=9PZ*YaeU+%n~53J#K4UH%bMA+Bm+(_NTx)~^80hO z=18UAI)J^OoINfg8RzM~t;666nq|>dL&uzhEkbOHv4PoG9}? z{QK|!?Wggo96ifVAsI5HKb#ybs0yxL0KKj@4MV^B6rcAc7Iz(raCc4kIZmPHqZ?wx zh!L1OcP_S4rOt#26A0u%SigQf4jeduu&}Uuix)3uR=+NR1rm??-RZemWZmobrNPD7 zs-4lfqfg#uskdP^1`i*EZ+{$yw7isiCw@P6)0d1^-+Ch*vpGQ5LWkyk)m}Y({18Tr z8ICFQG^O;Q3nzY}tc#QWBU$%zXO5g>9j(xsiZA5+Kk5rZcejQ=s^o*G^MaG>=UJGfcBfIkR z7c9U_FTHf~KXK20_QVZ-);Y~d`wad1{e%D0TMY*q;9zfm!^On~5fR~-GGz)DksD&S zV+Tf!8b#%M;YgwcLsC-G{b0%-PM$m&rlzKN@x>SKN@WH&AN5Sp97W@{B0FT=57g(7 zTmKUlEnk3flYeS`;l<~#OeO$tvC&6JTo3}H{aOnv^R6@;t-EvikBc~e`78|tEXFe3 z#dzzT-oHs~RFZgX)hC~P2qy<~N>c6+03(f6$nubMW8oi|@w{zb(~g)G63i{1;z*fpO!;;jOpcI{lx# z-=|r${xnhYD97FP^>v7)HaZhylN&`v^q3f`%bhWOI*uGUg3{6w>cWY`WY z)9E^G5H0j13Kxm(#2hPK`SjDiu(38nd|VVJXpSQ{J%frq;!#plgs`|^X!O!(9y4h) z%*=UM{F?oh2u{KXQjYDiYJ>-LQRa{kw z0bdQcIrO_BSf;ZCE7xhGq`dHEd2MOyO5Nr1Vbsv}ixuK)4(e3}=3{`u!yd-m+v z>OmDeIn;GStWDYV?Jbtuw%t8MPnaMEzZXGA0yD`C(bUvL@7}#z==Bv+eZI8}@C#*z zxYx~A?? zy!CGHOLpG2h|P#<-Axs6DLIKq$cjZ?c{cnacHxDWUO3ppk~}Gb z{^eJ?g=x~mDkGD_TQiH&3G}go;rZvv`f_Mao5U|nlrh{hX~1%CXv~Bk5tAN8%%0eq zSC)gce0tmv9p$EECE;1t&;J>q%jM&bKVHl(IX?-)i6&z3aoP_*{D4>JjIVq5?#rH8 zg_423{mxru?!K-J_y@%BNX<<_V2s}b8wV?>4fvsZ+C!s9iix=qV$-5qBN9Vei^>Y| z-N^55DnHv>E&q!^m&?2Fz8grf`#qLky?TYJmHIF?9Xw?4jnu4U)Y8EHpU028Ddl9+ zzq2vE|H1nWMkYph_0?C4o~2m4O95T(j#0Mo4Yfi$P1*&h4OlH*9_VUOi(1q`SBqNI zq6WHJ)S?zO(AAj{9aA=8bbE}CToq9rp< z4VfKQDcEGD^1tgsK-ZG}%Rs+m0s^H$CvE&Hl5kaWArszcKykLuCNeVvYj_m z#m(>r(5z~QR``2Y2704RMk`#)RJsNwj{_BT)0w?Ifxf(-7U-D@yQ==5EvyQ!Kng(DQrL~X6&9^CppRCZ zL9PUJ$?8kV3sM#>MaEG9?o36)RH4(Z4)jd<{i-6&PCUcL&g|t0^yU3DuDjgTnxW`= zD1EqrDs~)wi2+@%hjyhu0i#!S0(8mh>q!`0!Al&i$ZRtE>cCJc*sd$b=!$N3b0@EF zR$}zb&g|t0^z~#wR|x2|sSrI7to&bmWYvQ9!k z*HB`h#!j;CjVczmQI%^iHGMq=&<84ShDr?BsCe2VC7^e5dZn0kZ&dUE9%nCqqOZ<@ zt`@bZMO`qX7PY8F4Rp1rMJ;Net3@qpQ3G8qYEjGoto(nMq?AG=?&bOb0000 Date: Mon, 12 Aug 2019 13:52:35 -0700 Subject: [PATCH 009/358] draft --- ...prepare-for-windows-deployment-with-mdt.md | 2 +- ...s-7-computer-with-a-windows-10-computer.md | 2 +- .../set-up-mdt-for-bitlocker.md | 30 ++++++++----------- 3 files changed, 14 insertions(+), 20 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md index 8cb886e2e9..54134328e1 100644 --- a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md +++ b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md @@ -40,7 +40,7 @@ Visit the [Download and install the Windows ADK](https://go.microsoft.com/fwlink - [The Windows PE add-on for the ADK](https://go.microsoft.com/fwlink/?linkid=2087112) >[!TIP] ->You might need to temporarily disable IE Enhanced Security Configuration for administrators in order to download files from the Internet to the server. +>You might need to temporarily disable IE Enhanced Security Configuration for administrators in order to download files from the Internet to the server. This setting can be disabled by using Server Manager (Local Server/Properties). 1. On MDT01, sign in as an administrator in the CONTOSO domain. - For the purposes of this guide, we are using a Domain Admin account of **admin** with a password of pass@word3. You can use your own administrator username and password as long as you properly adjust all steps in this guide that use login these credentials. diff --git a/windows/deployment/deploy-windows-mdt/replace-a-windows-7-computer-with-a-windows-10-computer.md b/windows/deployment/deploy-windows-mdt/replace-a-windows-7-computer-with-a-windows-10-computer.md index 6e3454635d..61702992ee 100644 --- a/windows/deployment/deploy-windows-mdt/replace-a-windows-7-computer-with-a-windows-10-computer.md +++ b/windows/deployment/deploy-windows-mdt/replace-a-windows-7-computer-with-a-windows-10-computer.md @@ -22,7 +22,7 @@ ms.topic: article - Windows 10 A computer replace scenario for Windows 10 is quite similar to a computer refresh for Windows 10; however, because you are replacing a machine, you cannot store the backup on the old computer. Instead you need to store the backup to a location where the new computer can read it. -For the purposes of this topic, we will use four machines: DC01, MDT01, PC0002, and PC0007. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 standard server. PC0002 is an old machine running Windows 7 SP1. It is going to be replaced by a new Windows 10 machine, PC0007. User State Migration Tool (USMT) will be used to backup and restore data and settings. MDT01, PC0002, and PC0007 are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md#proof). +For the purposes of this topic, we will use four machines: DC01, MDT01, PC0002, and PC0007. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 standard server. PC0002 is an old machine running Windows 7 SP1. It is going to be replaced by a new Windows 10 machine, PC0007. User State Migration Tool (USMT) will be used to backup and restore data and settings. MDT01, PC0002, and PC0007 are members of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). ![The machines used in this topic](../images/mdt-03-fig01.png "The machines used in this topic") diff --git a/windows/deployment/deploy-windows-mdt/set-up-mdt-for-bitlocker.md b/windows/deployment/deploy-windows-mdt/set-up-mdt-for-bitlocker.md index 70a3a46434..fc28a7e492 100644 --- a/windows/deployment/deploy-windows-mdt/set-up-mdt-for-bitlocker.md +++ b/windows/deployment/deploy-windows-mdt/set-up-mdt-for-bitlocker.md @@ -32,9 +32,9 @@ To configure your environment for BitLocker, you will need to do the following: >[!NOTE] >Even though it is not a BitLocker requirement, we recommend configuring BitLocker to store the recovery key and TPM owner information in Active Directory. For additional information about these features, see [Backing Up BitLocker and TPM Recovery Information to AD DS](https://go.microsoft.com/fwlink/p/?LinkId=619548). If you have access to Microsoft BitLocker Administration and Monitoring (MBAM), which is part of Microsoft Desktop Optimization Pack (MDOP), you have additional management features for BitLocker. -For the purposes of this topic, we will use DC01, a domain controller that is a member of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md#proof). +For the purposes of this topic, we will use DC01, a domain controller that is a member of the domain contoso.com for the fictitious Contoso Corporation. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). -## Configure Active Directory for BitLocker +## Configure Active Directory for BitLocker To enable BitLocker to store the recovery key and TPM information in Active Directory, you need to create a Group Policy for it in Active Directory. For this section, we are running Windows Server 2012 R2, so you do not need to extend the Schema. You do, however, need to set the appropriate permissions in Active Directory. @@ -45,7 +45,7 @@ In Windows Server 2012 R2 (as well as in Windows Server 2008 R2 and Windows Serv ![figure 2](../images/mdt-09-fig02.png) -Figure 2. The BitLocker Recovery information on a computer object in the contoso.com domain. +The BitLocker Recovery information on a computer object in the contoso.com domain. ### Add the BitLocker Drive Encryption Administration Utilities @@ -64,7 +64,7 @@ The BitLocker Drive Encryption Administration Utilities are added as features vi ![figure 3](../images/mdt-09-fig03.png) -Figure 3. Selecting the BitLocker Drive Encryption Administration Utilities. +Selecting the BitLocker Drive Encryption Administration Utilities. ### Create the BitLocker Group Policy @@ -97,7 +97,7 @@ In addition to the Group Policy created previously, you need to configure permis ![figure 4](../images/mdt-09-fig04.png) -Figure 4. Running the Add-TPMSelfWriteACE.vbs script on DC01. +Running the Add-TPMSelfWriteACE.vbs script on DC01. ## Add BIOS configuration tools from Dell, HP, and Lenovo @@ -135,7 +135,7 @@ The Lenovo tools are a set of VBScripts available as part of the Lenovo BIOS Set ``` syntax cscript.exe SetConfig.vbs SecurityChip Active ``` -## Configure the Windows 10 task sequence to enable BitLocker +## Configure the Windows 10 task sequence to enable BitLocker When configuring a task sequence to run any BitLocker tool, either directly or using a custom script, it is helpful if you also add some logic to detect whether the BIOS is already configured on the machine. In the following task sequence, we are using a sample script (ZTICheckforTPM.wsf) from the Deployment Guys web page to check the status on the TPM chip. You can download this script from the Deployment Guys Blog post, [Check to see if the TPM is enabled](https://go.microsoft.com/fwlink/p/?LinkId=619549). @@ -151,16 +151,10 @@ In the following task sequence, we added five actions: ## Related topics -[Configure MDT deployment share rules](configure-mdt-deployment-share-rules.md) - -[Configure MDT for UserExit scripts](configure-mdt-for-userexit-scripts.md) - -[Simulate a Windows 10 deployment in a test environment](simulate-a-windows-10-deployment-in-a-test-environment.md) - -[Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-10-deployment-information.md) - -[Assign applications using roles in MDT](assign-applications-using-roles-in-mdt.md) - -[Use web services in MDT](use-web-services-in-mdt.md) - +[Configure MDT deployment share rules](configure-mdt-deployment-share-rules.md)
+[Configure MDT for UserExit scripts](configure-mdt-for-userexit-scripts.md)
+[Simulate a Windows 10 deployment in a test environment](simulate-a-windows-10-deployment-in-a-test-environment.md)
+[Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-10-deployment-information.md)
+[Assign applications using roles in MDT](assign-applications-using-roles-in-mdt.md)
+[Use web services in MDT](use-web-services-in-mdt.md)
[Use Orchestrator runbooks with MDT](use-orchestrator-runbooks-with-mdt.md) From 1292ad362d3e69eba098a2822b130dfa6153a934 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 12 Aug 2019 15:32:34 -0700 Subject: [PATCH 010/358] draft --- .../create-a-windows-10-reference-image.md | 174 +++++++----------- windows/deployment/images/office-folder.png | Bin 0 -> 32369 bytes 2 files changed, 70 insertions(+), 104 deletions(-) create mode 100644 windows/deployment/images/office-folder.png diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index b94535a356..068f9391a5 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -64,7 +64,7 @@ The Deployment Workbench with the MDT Build Lab deployment share. ### Configure permissions for the deployment share -In order to write the reference image back to the deployment share, you need to assign Modify permissions to the MDT Build Account (MDT\_BA) for the **Captures** subfolder in the **E:\\MDTBuildLab** folder +In order to write the reference image back to the deployment share, you need to assign Modify permissions to the MDT Build Account (MDT\_BA) for the **Captures** subfolder in the **D:\\MDTBuildLab** folder 1. On MDT01, sign in as **CONTOSO\\admin**. 2. Modify the NTFS permissions for the **D:\\MDTBuildLab\\Captures** folder by running the following command in an elevated Windows PowerShell prompt: @@ -103,6 +103,13 @@ MDT supports adding both full source Windows 10 DVDs (ISOs) and custom images t Before you create an MDT task sequence, you need to add any applications and scripts you wish to install to the MDT Build Lab share. +First, create an MDT folder to store the Microsoft applications that will be installed: + +1. In the MDT Deployment Workbench, expand **Deployment Shares \\ MDT Build Lab \\ Applications** +2. Right-click **Applications** and then click **New Folder**. +3. Under **Folder name**, type **Microsoft**. +4. Click **Next** twice, and then click **Finish**. + The steps in this section use a strict naming standard for your MDT applications. - Use the "Install - " prefix for typical application installations that run a setup installer of some kind, - Use the "Configure - " prefix when an application configures a setting in the operating system. @@ -114,24 +121,26 @@ By storing configuration items as MDT applications, it is easy to move these obj In example sections, you will add the following applications: -- Install - Microsoft Office 365 Pro Plus - x86 +- Install - Microsoft Office 365 Pro Plus - x64 - Install - Microsoft Visual C++ Redistributable 2019 - x86 - Install - Microsoft Visual C++ Redistributable 2019 - x64 +>The 64-bit version of Microsoft Office 365 Pro Plus is recommended unless you need legacy app support. For more information, see [Choose between the 64-bit or 32-bit version of Office](https://support.office.com/article/choose-between-the-64-bit-or-32-bit-version-of-office-2dee7807-8f95-4d0c-b5fe-6c6f49b8d261) + Download links: - [Office Deployment Tool](https://www.microsoft.com/download/details.aspx?id=49117) - [Microsoft Visual C++ Redistributable 2019 - x86](https://aka.ms/vs/16/release/VC_redist.x86.exe) - [Microsoft Visual C++ Redistributable 2019 - x64](https://aka.ms/vs/16/release/VC_redist.x64.exe) -Download the software in this list to the D:\\Downloads folder on MDT01. +Download the software in this list to the D:\\Downloads folder on MDT01. **Note**: For the purposes of this lab, we will leave the MSVC files in the D:\\Downloads folder and the Office365 files will be extracted to a child folder. If you prefer, you can place each application in its own separate child folder and then modify the $ApplicationSourcePath below as needed (instead of just D:\\Downloads). >[!NOTE] >All the Microsoft Visual C++ downloads can be found on [The latest supported Visual C++ downloads](https://go.microsoft.com/fwlink/p/?LinkId=619523). Visual C++ 2015, 2017 and 2019 all share the same redistributable files. -### Create the install: Microsoft Office 365 Professional Plus x86 +### Create the install: Microsoft Office 365 Professional Plus x64 -1. After downloading the most current version of the Office Deployment tool from the Microsoft Download Center using the link provided above, run the self-extracting executable file and extract the files to D:\\Downloads\\Office365. The Office Deployment Tool (setup.exe) and several sample configuration.xml files will be extracted. -2. Using a text editor such as Notepad, create an XML file with the installation settings for Office 365 ProPlus that are appropriate for your organization. The file uses an XML format, so the file you create must have an extension of .xml but the file can have any filename. +1. After downloading the most current version of the Office Deployment tool from the Microsoft Download Center using the link provided above, run the self-extracting executable file and extract the files to **D:\\Downloads\\Office365**. The Office Deployment Tool (setup.exe) and several sample configuration.xml files will be extracted. +2. Using a text editor (such as Notepad), create an XML file with the installation settings for Office 365 ProPlus that are appropriate for your organization. The file uses an XML format, so the file you create must have an extension of .xml but the file can have any filename. - For example, you can use the following configuration.xml file, which provides these configuration settings: - Install the 64-bit version of Office 365 ProPlus in English directly from the Office Content Delivery Network (CDN) on the internet. Note: 64-bit is now the default and recommended edition. @@ -157,7 +166,11 @@ Download the software in this list to the D:\\Downloads folder on MDT01. Also see [Configuration options for the Office Deployment Tool](https://docs.microsoft.com/deployoffice/configuration-options-for-the-office-2016-deployment-tool) and [Overview of the Office Deployment Tool](https://docs.microsoft.com/DeployOffice/overview-of-the-office-2016-deployment-tool) for more information. -3. Copy the configuration.xml file to the D:\Downloads\Office365 folder. Assuming you have named the file "configuration.xml" we will use the command "setup.exe /configure configuration.xml" when we create the application in MDT. This will perform the installation of Office 365 ProPlus using the configuration settings in the configuration.xml file. +3. Copy the configuration.xml file to the D:\\Downloads\\Office365 folder. See the following example of the extracted files plus the configuration.xml file in the Downloads\\Office365 folder: + + ![folder](../images/office-folder.png) + + Assuming you have named the file "configuration.xml" as shown above, we will use the command "**setup.exe /configure configuration.xml**" when we create the application in MDT. This will perform the installation of Office 365 ProPlus using the configuration settings in the configuration.xml file. >[!IMPORTANT] >After Office 365 ProPlus is installed on the reference image, do NOT open any Office programs. if you open an Office program, you are prompted to sign-in, which activates the installation of Office 365 ProPlus. Even if you don't sign in and you close the Sign in to set up Office dialog box, a temporary product key is installed. You don't want any kind of product key for Office 365 ProPlus installed as part of your reference image. @@ -165,10 +178,8 @@ Download the software in this list to the D:\\Downloads folder on MDT01. Additional information - Office 365 ProPlus is usually updated on a monthly basis with security updates and other quality updates (bug fixes), and possibly new features (depending on which update channel you’re using). That means that once you’ve deployed your reference image, Office 365 ProPlus will most likely need to download and install the latest updates that have been released since you created your reference image. -- Instead of installing Office 365 ProPlus as part of the reference image, we recommend configuring Office 365 ProPlus to be installed immediately after the reference image is deployed to the user’s device. You would still use the Office Deployment Tool and a configuration.xml file to perform the installation. This way the user will have the most up-to-date version of Office 365 ProPlus right away and won’t have to download any new updates (which is most likely what would happen if Office 365 ProPlus was installed as part of the reference image.) - -- When you are creating your reference image, instead of installing Office 365 ProPlus directly from the Office CDN on the internet, you can install Office 365 ProPlus from a location on your local network, such as a file share. To do that, you would use the Office Deployment Tool in /download mode to download the installation files to that file share. Then you could use the Office Deployment Tool in /configure mode to install Office 365 ProPlus from that location on to your reference image. As part of that, you’ll need to point to that location in your configuration.xml file so that the Office Deployment Tool knows where to install Office 365 ProPlus from. If you decide to do that, the next time you create a new reference image, you’ll want to be sure to use the Office Deployment Tool to download the most up-to-date installation files for Office 365 ProPlus to that location on your internal network. That way your new reference image will have a more up-to-date installation of Office 365 ProPlus. - +- **Note**: Instead of installing Office 365 ProPlus as part of the reference image, we recommend configuring Office 365 ProPlus to be installed immediately after the reference image is deployed to the user’s device. You would still use the Office Deployment Tool and a configuration.xml file to perform the installation. This way the user will have the most up-to-date version of Office 365 ProPlus right away and won’t have to download any new updates (which is most likely what would happen if Office 365 ProPlus was installed as part of the reference image.) + - When you are creating your reference image, instead of installing Office 365 ProPlus directly from the Office CDN on the internet, you can install Office 365 ProPlus from a location on your local network, such as a file share. To do that, you would use the Office Deployment Tool in /download mode to download the installation files to that file share. Then you could use the Office Deployment Tool in /configure mode to install Office 365 ProPlus from that location on to your reference image. As part of that, you’ll need to point to that location in your configuration.xml file so that the Office Deployment Tool knows where to get the Office 365 ProPlus files. If you decide to do this, the next time you create a new reference image, you’ll want to be sure to use the Office Deployment Tool to download the most up-to-date installation files for Office 365 ProPlus to that location on your internal network. That way your new reference image will have a more up-to-date installation of Office 365 ProPlus. ### Connect to the deployment share using Windows PowerShell @@ -179,124 +190,79 @@ If you need to add many applications, you can take advantage of the PowerShell s ``` powershell Import-Module "C:\Program Files\Microsoft Deployment Toolkit\bin\MicrosoftDeploymentToolkit.psd1" - New-PSDrive -Name "DS001" -PSProvider MDTProvider -Root "E:\MDTBuildLab" + New-PSDrive -Name "DS001" -PSProvider MDTProvider -Root "D:\MDTBuildLab" ``` -### Create the install: Microsoft Visual C++ 2005 SP1 x86 +### Create the install: Microsoft Visual C++ Redistributable 2019 - x86 -In these steps we assume that you have downloaded Microsoft Visual C++ 2005 SP1 x86. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to E:\\Downloads\\VC++2005SP1x86. +>[!NOTE] +>We have abbreviated "Microsoft Visual C++ Redistributable" in the $ApplicationName below as "MSVC" to avoid the path name exceeding 248 characters. -1. On MDT01, log on as **CONTOSO\\Administrator**. - -2. Create the application by running the following commands in an elevated PowerShell prompt: - - ``` powershell - $ApplicationName = "Install - Microsoft Visual C++ 2005 SP1 - x86" - $CommandLine = "vcredist_x86.exe /Q" - $ApplicationSourcePath = "E:\Downloads\VC++2005SP1x86" - Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -Commandline $Commandline -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName - -Verbose - ``` - -### Create the install: Microsoft Visual C++ 2005 SP1 x64 - -In these steps we assume that you have downloaded Microsoft Visual C++ 2005 SP1 x64. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to E:\\Downloads\\VC++2005SP1x64. +In these steps we assume that you have downloaded Microsoft Visual C++ Redistributable 2019 - x86. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to D:\\Downloads. 1. On MDT01, log on as **CONTOSO\\Administrator**. 2. Create the application by running the following commands in an elevated PowerShell prompt: ``` powershell - $ApplicationName = "Install - Microsoft Visual C++ 2005 SP1 - x64" - $CommandLine = "vcredist_x64.exe /Q" - $ApplicationSourcePath = "E:\Downloads\VC++2005SP1x64" - Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -Commandline $Commandline -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName - -Verbose + $ApplicationName = "Install - MSVC 2019 - x86" + $CommandLine = "vc_redist.x86.exe /Q" + $ApplicationSourcePath = "D:\Downloads" + Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -CommandLine $CommandLine -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName -Verbose ``` -### Create the install: Microsoft Visual C++ 2008 SP1 x86 + Upon successful installation the following text is displayed: + ``` + VERBOSE: Performing the operation "import" on target "Application". + VERBOSE: Beginning application import + VERBOSE: Copying application source files from D:\Downloads to D:\MDTBuildLab\Applications\Install - MSVC 2019 - x86 + VERBOSE: Creating new item named Install - MSVC 2019 - x86 at DS001:\Applications\Microsoft. + + Name + ---- + Install - MSVC 2019 - x86 + VERBOSE: Import processing finished. + ``` -In these steps we assume that you have downloaded Microsoft Visual C++ 2008 SP1 x86. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to E:\\Downloads\\VC++2008SP1x86. +### Create the install: Microsoft Visual C++ Redistributable 2019 - x64 + +In these steps we assume that you have downloaded Microsoft Visual C++ Redistributable 2019 - x64. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to D:\\Downloads. 1. On MDT01, log on as **CONTOSO\\Administrator**. 2. Create the application by running the following commands in an elevated PowerShell prompt: ``` powershell - $ApplicationName = "Install - Microsoft Visual C++ 2008 SP1 - x86" - $CommandLine = "vcredist_x86.exe /Q" - $ApplicationSourcePath = "E:\Downloads\VC++2008SP1x86" - Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -Commandline $Commandline -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName - -Verbose + $ApplicationName = "Install - MSVC 2019 - x64" + $CommandLine = "vc_redist.x64.exe /Q" + $ApplicationSourcePath = "D:\Downloads" + Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -CommandLine $CommandLine -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName -Verbose ``` -### Create the install: Microsoft Visual C++ 2008 SP1 x64 +### Create the install: Microsoft Office 365 Pro Plus - x64 -In these steps we assume that you have downloaded Microsoft Visual C++ 2008 SP1 x64. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to E:\\Downloads\\VC++2008SP1x64. +In these steps we assume that you have downloaded the Office Deployment Tool. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to D:\\Downloads\\Office365. 1. On MDT01, log on as **CONTOSO\\Administrator**. 2. Create the application by running the following commands in an elevated PowerShell prompt: ``` powershell - $ApplicationName = "Install - Microsoft Visual C++ 2008 SP1 - x64" - $CommandLine = "vcredist_x64.exe /Q" - $ApplicationSourcePath = "E:\Downloads\VC++2008SP1x64" - Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -Commandline $Commandline -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName - -Verbose + $ApplicationName = "Install - Office365 ProPlus - x64" + $CommandLine = "setup.exe /configure configuration.xml" + $ApplicationSourcePath = "D:\Downloads\Office365" + Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -CommandLine $CommandLine -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName -Verbose ``` -### Create the install: Microsoft Visual C++ 2010 SP1 x86 - -In these steps we assume that you have downloaded Microsoft Visual C++ 2010 SP1 x86. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to E:\\Downloads\\VC++2010SP1x86. -1. On MDT01, log on as **CONTOSO\\Administrator**. -2. Create the application by running the following commands in an elevated PowerShell prompt: - - ``` powershell - $ApplicationName = "Install - Microsoft Visual C++ 2010 SP1 - x86" - $CommandLine = "vcredist_x86.exe /Q" - $ApplicationSourcePath = "E:\Downloads\VC++2010SP1x86" - Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -CommandLine $CommandLine -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName - -Verbose + Upon successful installation the following text is displayed: + ``` + VERBOSE: Performing the operation "import" on target "Application". + VERBOSE: Beginning application import + VERBOSE: Copying application source files from D:\Downloads\Office365 to D:\MDTBuildLab\Applications\Install - + Office365 ProPlus - x64 + VERBOSE: Creating new item named Install - Office365 ProPlus - x64 at DS001:\Applications\Microsoft. + + Name + ---- + Install - Office365 ProPlus - x64 + VERBOSE: Import processing finished. ``` -### Create the install: Microsoft Visual C++ 2010 SP1 x64 - -In these steps we assume that you have downloaded Microsoft Visual C++ 2010 SP1 x64. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to E:\\Downloads\\VC++2010SP1x64. -1. On MDT01, log on as **CONTOSO\\Administrator**. -2. Create the application by running the following commands in an elevated PowerShell prompt: - - ``` powershell - $ApplicationName = "Install - Microsoft Visual C++ 2010 SP1 - x64" - $CommandLine = "vcredist_x64.exe /Q" - $ApplicationSourcePath = "E:\Downloads\VC++2010SP1x64" - Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -CommandLine $CommandLine -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName - -Verbose - ``` - -### Create the install: Microsoft Visual C++ 2012 Update 4 x86 - -In these steps we assume that you have downloaded Microsoft Visual C++ 2012 Update 4 x86. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to E:\\Downloads\\VC++2012Ux86. -1. On MDT01, log on as **CONTOSO\\Administrator**. -2. Create the application by running the following commands in an elevated PowerShell prompt: - - ``` powershell - $ApplicationName = "Install - Microsoft Visual C++ 2012 Update 4 - x86" - $CommandLine = "vcredist_x86.exe /Q" - $ApplicationSourcePath = "E:\Downloads\VC++2012Ux86" - Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -CommandLine $CommandLine -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName - -Verbose - ``` - -### Create the install: Microsoft Visual C++ 2012 Update 4 x64 - -In these steps we assume that you have downloaded Microsoft Visual C++ 2012 Update 4 x64. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to E:\\Downloads\\VC++2012Ux64. -1. On MDT01, log on as **CONTOSO\\Administrator**. -2. Create the application by running the following commands in an elevated PowerShell prompt: - - ``` powershell - $ApplicationName = "Install - Microsoft Visual C++ 2012 Update 4 - x64" - $CommandLine = "vcredist_x64.exe /Q" - $ApplicationSourcePath = "E:\Downloads\VC++2012Ux64" - Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -CommandLine $CommandLine -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName - -Verbose - ``` - -## Create the reference image task sequence +## Create the reference image task sequence In order to build and capture your Windows 10 reference image for deployment using MDT, you will create a task sequence. The task sequence will reference the operating system and applications that you previously imported into the MDT Build Lab deployment share to build a Windows 10 reference image. After creating the task sequence, you configure it to enable patching against the Windows Server Update Services (WSUS) server. The Task Sequence Windows Update action supports getting updates directly from Microsoft Update, but you get more stable patching if you use a local WSUS server. WSUS also allows for an easy process of approving the patches that you are deploying. @@ -507,7 +473,7 @@ The CustomSettings.ini file is normally stored on the server, in the Deployment ### The Bootstrap.ini file -The Bootstrap.ini file is available via the deployment share's Properties dialog box, or via the E:\\MDTBuildLab\\Control folder on MDT01. +The Bootstrap.ini file is available via the deployment share's Properties dialog box, or via the D:\\MDTBuildLab\\Control folder on MDT01. ``` [Settings] diff --git a/windows/deployment/images/office-folder.png b/windows/deployment/images/office-folder.png new file mode 100644 index 0000000000000000000000000000000000000000..722cc4d6640fb4b53bc87ccdb2a42da11cc9b4db GIT binary patch literal 32369 zcmb@tcUY6z*EZ^mj>-sFQ0bu3q)82(L_t8LgY+hZ(92LmfWSB+iZtmRq$8csq^p$B zJA_b&-h(8Nkc7Yq_&lhvJUjc@dp&F4Yu#(F6|SqTM)xPnpO-FO zqEmnIT>sLg%R-kf{Wg64D)pD@?^Y?)kKerY)s!w(46$ud8&@2jX+5J}in(!O^9Qv} z^VbVg?@O2HJI>#~Aw7!iE?o+~s{Z`hD}SrKR+jysWRZ6Ewp)`!lXKSl#q2G){=lS?EZCXBWE#hB)G1xMw5cyjT?O?u zQuo^A;>%~3?^PFHo}&J-x#;wF1rMs~1P5w$8#$Z`k-Ppd^p?`~hmw(rYFZuGD88wi zA4&GD|D698sypjD^6c6l{qhChS@tzr_dhXPpS)Vi$I+Kx>-g0ptUy#~o`?3vdGA|F z(f|96f@jh~HA!=iW{r;e@so^w__d9`ddLQoo0V6RtA$Tkne|_3E!f>Jh@V?EYcpu* zHE^*~yz0eW96xWXc8raWkAG5vm(Mtv%!#q`bAGrwS#`2eMu*twvhG>Pg!U}7?${yw zjeEKaK* zZ2}@%F>TspM9a^AV-W#;jCO03?D%`}XUa*7-l0O7$NZ)~NWQgL^|O1CZ!Y8%X2g`# zy&BCb=bn6(LLb4BWZBHi%r5iSH^(*bVypuvP}#4tT?@aL@$j0T!h^sD?WE)^g(pnP zYufnSuJpA%3koSCRv8`-~JhvdQ$AtCvjN2jZG zZh6)*t-b-G(UpLhAU(T%Emd-TRP0`x!!KP3)dN2n|a<#elPiPd*dJ8#o1!3N0li^YZP1Xh>_`qrU`m^>3eOYb{5L8k#Kp2S?_rO9SYrC8*d5E_Q9)v25*#Y<6KTb9Fwxz|L5m9GFeVxaU%mff0Kmb!+8E|y{VM38T?Q_L< zB$5Earh296&pOr*SLdr*ny?#ROwrYlj9oPD<3KtI26J9+7-YW(5FkAZqA+$G##Yft zgs?}hXxAHd*kTHIOH=NGU*R#a@YuuBmrfH^Wlj5(Skp#5`rRfeaY5tW1-ImW?*{mb zbp`(t1;sr+#NL`9WL6`&e~K}LXL#Yb?RBK~bt;lz?=^v!`dR~RImrlphFb#T!SzE? zYYo0gpPgV_$cg)4Gr-+75X$3mD&Q7j^Xz(EE>+Ku?rytGx_2!9+II6*n;;w4!9M&E zs;5FLrtgFd;;Gq}HA_;&T6Y(_2I23*AQ&2KUp%r8C(*`yz6MA~+?;y&U^t~oUR*Em z(H3gHaDK9g@{~h%N8al|Yvt`hnb88y3f+!lK{u?R5YU}UyWzr7@sPP|c2g8&f5x@w zBtT7 z=t@h}atRh@H9FN_Um$zJb}K~s5${#=RUtrZ+JB|eSs@x z5$BeA&xx`;4w?VK*(-SCk#hY{K5@bf^xDdC6Zk0F;=fi#7iMz+{yHYNx5GkvRuR5e z2|7GcL)B)p+-;bXR;zFo(!8Nmd>dfv^?5~PNOTMbA~-NVLn#9dIme7Y3kV*(o-K1 zlfW44^?Y7ls2}6su!|0g-8Bn&vl~QYLmwO1~tM$=TEUV!erDy5-NF7S1KS;y-R`bZ@HO-h)qat~xt-(p(8lDJQkxP@NO=Hd#=T># z4E7iK7-ujkA(TUW6sr5;*KCt~hci;d1WU6No^iBO-eP;S-uLDPg20h|eNLRxa-^(+ z^$Lw&;*AjFZ+;Yy2rP09aeCJhL}o(c$GoVIrfo+6wskn%)2;WuAHe_=c37b3iYAqI zt!mD7vc_!^Onlt% z6RPN(XF5>JsMc~zX$-Vf{TP#^Ws(g~EKvb5B zdmCwLN}47_*}#swV|wD$vo!}lZs!?`By<_HvHSv{Tve69-l6hzJG8o5Pj^Ig+}bFL zP68ukEuBemGWA{NgUo%Y12x;${Vas`;SGy=rXZkCgBq%Rg?}u5;(HRn;J;YAS)D!oen7o=03d{)jw*of zzQ<7H0BmPL1B3x%;lO<-#v;!{li8-~qq~w)g{1;TnbB?Bi zJjC+SFiQ<$`=GKfM9YG^rcy?RsVFH8ASgif*BgZT2V7M7SiG-U>SwXY- zJtnFY;A^vX-v{@TcpBQRlNQMjO%;zsQ-i;sCCZ1K`lb4RmtXC*R%7w58faU#jx=o~ zqz(VE^5DXs4s|Zg3oBs%Q>#hu%Wnt1W@jp1#3Skc{QlsFI90fDmK?#P5%+P_3H~^` za(~!gbtqFo`w3@AQe=BT=$toNZLKZ)EH4N;;7FXJ)cga#a5HZy4VF%X{qf6Tf8~0P z2Nw>prQm-#;KeTQsOIsagKzmc%3ZjH75Dz@PZM>{={D8BwG+NQB94~F{2D1#S6Tn& zQrcZ(VdndLcmK3MYS&Jimug+g=WEiwpbjHIrK}%+c8vY=i&4Ns72e$oEBNDrO*|!E zhy5u?t8wG^^NWAuZ)5LLar6F_i>{{jPi6(wtef)%pi|=Ir7ArJCN?H!w=S-|I_{kp zlptcSsSYP|RhT^RP}u9O-JSOAkDHqOUv3b|ayy-`R1b~tw$^9xCU&@t2LPlV{?8eG z>^r59*S@{E+^hG8@OYE`h+6BMg6V$AbhGfaGuMiN5U2M}MXKHPG>RPesnh#IRA{&# z-upGF;O3A=xVL2*=S!=+;1JckQN&@VK1Y_~V@6 zvafRcZy2@Y0pj(VRETK2z5%@2@Vc|BWuuL{~3xnRNlJ!n+p=S)2spF0C z?9S9_RJ5N4G?KPUqn?d|6Wgd_A742iQvlB9I@xWhidlJWbTR0yj<~h9be|kz*jnK5 zj1+El%vj0Z;k9$7Ds2P@8OodRb)MOQ&22k6T0l}(YEPUQF&72N zFMhs8wLqNF``;AWOensEm>EEKCbFH;k2h1+qUCRSA5tp{eu8Hsee0?EVS~hFe*dqf8|d)`yjq#Iqx}`pmOA zj4&;$A((>xsm+vxNLcTHyu(m5I>S?S!cW!574N(m#YDYX0wX!~o{O19&2sRq_S;yX zPvx1uiPgL)X#}37K8pOd+s?gSPrVOPr|ll7+II)H%>tVj?u-fO3U2{{HcS}KK39Jk zEfTC+f0Sk{7g8|AA{1<`7)=|=lB#)5`Txe-YW1HGaZzSsf*;R@SVLnlQ!`zG@haqkZaK)!osrOouSr;#T|{PR_+j1rt4(WfoAb=QGZ z+~d>`TI$fcmx9J~L*`Gj9Hi}mKG_aN2~_F-sH%NHy>{tRPi{=WJ77aDBnSD;;(zY_ z&;R>qw8uqNEKwoh>lY)=s8P|#x3fyf6dN>K%k&>mb$&hL}uu`!5?~{>tMXnPXjKHv1pWvWbUjaAw`p*4`et2pzvd;BYlHPRC~ z33F^5Dvj*s@e$jz3Mq9B*$P6R{vaZJyBZM?v@8O$)rfHFMI$^%nGwO?b=DFcLWFki zQ#9+_vASbaDSS@3xF|L@iW1`DLj*@DXF~K;YcDV&STS_Hcu&Ojt=v(}5AXf&9G~ z6O68*aKM&&_tSw?QLFsX@%u>dONhyYP_6CnhweR3G5(IAy~SOy)l{vdv)9%5W=vCm zG4nQa(sbhfZ^f$F zz^1+WS-Zo{QB{&zKTE-@FcpwQT*EP=b�h2O}*t#To+-i_FTQ=5*aWuk9~IEC8_C zKVfS;i&eYvT{lAvv$9B+O(_#GQF`d=(*QIcn~1=M?{{X(_2{Xw^C&7R8p@rW;2;#z z5ta~gMi7T$=JI|25GF^oA4j~-jOm7Tur7S+K5bnjx0VExVnkaAt@~QDRD-m`ecJM> z38S5R;5(eoY(5JOuu96AX3!|#DZe+vUU?7GM#iKCI_>NoVK_keX)s+oGU$X5-|bty zA4q5|_O97GVi}=azV6x0?9h|19v_!S^69HmAn(?Qd#%36%RX7rAhUVUFAG*qoYui4RZ496X^y2JbutpD8tyX zob+tlIQhC5iE{MMjVCX>H3WrS4g)=$Xd|p@0~#LL$s9ha3$vvTx$bfuKtISEHPe=~ zRJF2ooFkn#WV}(1+rMg2V>?;wL}RHrYjtAkY~;89)slX9@yU%sxZb+LPj*vT@_Q<| zhac#pTS}~xK&RH~l|u|KF*AujiJp>TUUcC}F3YRDhGtT}+Y_tB634hPu-1fRYN<*o zId>04?A1y0m6oWlM+FZ?qy8+%sLMP0TH_p{E%u{3Xuy>Kj-#fA!Y)jCD~7W2=5zJL z&&P6Yn72v%u&XBhvtm*S@kq`Pi(tx*b-(OJ1~|C>i+dY!J-=RRklQG#e)8lQU8q*Y zk^jMR*SasCV|P`t`d@T!0Jo=V9fbf_r!eno@@~NB;DLE8M!=MRt zx^P~o#xZJSfc%mQBc%@kLQVb@(dHPdZ&PIxfh$hU_WOR0+*~HXMfK zJGj-m&kKb7ycY6_4WRS5@kV0ZKb%O#diA-dcM6P99A??)enfxXBz%;6RLh8}ZiFJ{ zanb3(F?zFkl)}vI%1QV@bH#k?;RXtGWG;z$c8xtDn%E^0Oa-=$X>g1id0LmA1AeII zZLH#ZG-=%LRFr8S+!np}H$RNZw;&2;08)U?FCoytVx zhJgeJjJ$=tmYiAA;7OsFK&6n3>C}+CwpBntzQS1#Dn6@jwDTqBnm_e{XD3LiJvK!^ zP*#EEM6K%Xn>=$;vNbXB$LeXEvx-JrF2XK}Mkvg%#sPyCfX2^~WJccf_&$%&mFJAw zS>X91UH{U0wo`u=-7FC`(yKTs7pPb~*NUj5$dITZMf2b(Q-=ZyPSavR=H)_gGh7=; zT$RkSRDNtEY&NgPZh)KuG;S&!Dr`Gkn%jA?vCXlQbxe+JxC$L)>EJY&MJtY>ILXt< zvFcsGI1SzwM65z=BIMeQRU=K z4i`=Nq`@d9oE~<{Y1GdzlN2zJBDQ5RwM(p4cKHVnri%z1I;=~glkdpwZE|5d{DG&_ zyiUGaeeCIMLl+&vDH7^orsTQ3)ZkGcavha$%-aReRNJ(j`MO&>QRZsp{jSVf)-0=S zg8_S-sn&-ZSIbvjd&fuCT&}k3{yHU&3k7yG`p8K1m-$gwx;L`9d1OQ)$qNVdQ6z}j@feIl+fo0C~j=OJvA^rSnC__ zmflJ3ZA&7nf1OpecDds*JDrjPoEhRJu}It9kt}3ka9gomaR!A%*G0Pw@_A&E3<;fS z_f&S~krTBQR+^h^7%rQDWEFrbCk-wt%<6B5l+ee$@t2DM$6*Dxl^DlKJfNYJ#5#?k zL|G^&Z_GTN6LI`qglhLl;dypzd1`5$HV22`xU4!)2Eobwv(tS(K-BG*`X}OqX?Xb< zcaKhx&Xd4TXqd}?E1&Vq-+Bwq7kV}&l<-*Xa+pa6mxHta6#uMrH z#gH-AATSp@oXp$W6kJ}T-n5`KD(@Z8V$%^;+s?VD=x1Gu?bcHwmm^jLgIml{jvVC} zu;b~+=48xCf*BHaP-}r&8yc0iZ!-3aIjr+|eS-g(1ZXxMVc#5PFCFo$iDZ|bIvflf zQ>uJezSy91mU=2W7&+gk00cCUY{t;IjbQ?ktnC*eVwkGV{>;j`OR-QVw&jB_uRv9#z-vxid#G zLVMl~5#rfr8Ki>rgluSq3lwvD;>_MmvB37hcNe}`yj|urcMW{ZOR7N{mpa-~!3Fzw zx_eV^P<_Gu!N|pJ3qbFbojESN<;r3bO8h2_Lh(DT?rM!+UhXbu>{s+7H?AgE9_#m6e<^0^P91T_aTUXU3C1B&)>#MV3j%k9!`Ly3pU1PKsC@0{M+r&mp@`WG5rm zI8bRij+vy*tSNr?3|-B|6vxbYMn_PE={YC1BVgv$wOk}|ZReE2`2}6XDX-{0=7Uw_ z)T^)1S3wg&l4%c2YvIE2U}V39U{15-{L^OI{u|!y>0*K!oFJpDuX~rVKead${vdR# zc5QQ^hU5RZ87#YH$_nsrC#JWf<4pDDo_8-NukirWemd$G1-y;_Y^qcZuN{Kdc4w!?i|&n?~;(Gb^mgZeMtaG?Q)7=r3yira8xm>aFx{Ng*4o%E|{`fWpCc-?j8$h z))8pcJ`smnGz?i8z^ZemCDTVjM~c`F8`{%$o6cOTc)uB2c)nu>Fa3C@?v!G`KI&+m zUiF^i{n*?OxW&sI*SHE~QFko7AnoBzwJ;1V z9bivfNN^)a9&B_UbV3I&g5{^=kh4?Dy1PmitS4_W z`2JoI1)wcaJL4hhm~3N;n-j4cjjZhR9&ZyGRyS9iih)Bocy+?rV}iHkM-N zCPY;1*8&kXhAU@2+&-Xy_XVl)JRj>l>Th0pDi0&BC9g%xV?Jq!v`#SHr#Sqb{KPVC zV(RLD2-01b-&rW-74;~2?%4(potI|HWK`4mavqNLgZj2A_DNxDvs6#mB%wDBsgsC? z!Yw!&S6mQ2m~uoQaweZjgrCZOtD^d6W6bwevgcpnZjr!o_ucYhYyn{RZ5yo*-IK=; zeSmTznbub6x&M>2QVFCAh%>kQsa9y(6+y-N?%eqpu# z7rd~}rg}4zwv}vCfQ&jVPc#}m&hhN0UG)F$((A8pZGLkEb^NIM_V2e}q*&608V8N~ z!hFHP#Rq6CEvRA7k-r!&(F#+8XYc-#^ze}9f^uIFbJ6_&KY0C(gy=*;<3|?}R$j@8 zUqim^7|N6%M8V1UhZ6}vzlq-OUXm^Opep6HVz%XzB=d~LH#8l;i@tbmqARFhV|%Ye ztwW7lVeS4#!`$)-y(U##p8ekOPg&BgUx%(mRVi?7Y;7<lbsWwmlJ-@?A|`xP3uYO`3Q@2lRC#JBB|oY>(BG$)-G0A zJmv}sLS#snHf4CYUr*FIqKhCepjI9qd?6KtRl1Y1Vx^P)h0*)IgC*%x%trH}Q^jP| zn;#{x;3zS5&6i$5xW6k1*bCwL{HU5!5G3&ywR;}+6K%qDwpHSX6G2=h2?;kuQ{SsoLos5{up`2Y9qKRyP}zGbioJO1+F<+{Seh@Hqw) zLM1eK40{~Zyf2a$wph7#E3Dw{ZphL@G^`)gKhzu(cUfMVuRzpdE5W8WWUtSI0S>Nd zA5_mu*J{^G1CzCeBN!(QLzGpn(}i7iHu>R3365&nsMC^IRL+o1S?yzQ)@S6i%YnhX zOAM2T8jN-^uUx`-;xG-k&1{x&|M>%s{EaWp`^w}bw!He%Q)1L&CCRF!#o_YCYyw?- z_9#;lJ;Gsz02%JEj$=1&Q^A*KCMQrO0giGE^H3A)Jzk7E!O)4%IqfLZP)_tGMQs6xZ_UB#Vx1kG$shq zHwHbX_E3MBlf54W%#XlS_g-~SMbgOS82KJbKW?qfi|p7`ur->s;Eb6OioYBP?R{f83kl(ttpdp{WIjJg<%TON zj;$0ogsAJI9wr@Xc<5C61f(pzbfDAV#zkp_bi^g>NK26~&rYE6!HZ@{lH8$%u##id zBvp48o3}h{(@DX)`-+^~@lZBo|EcOUuL-(oij$^45DyaZgE~J5>)PFk@rc9C$vdAe zT)}7U@4YQb+kj5p-Dv6R76(dWh*PLGS!UqI?T)dl^;T#1&?lwPzNykh!P$y%pQCGb z8;bAy-;_&#aBWwmFFUQ+O*;@ni;@(veK5|rW8zgJsqEAfH7XT6 zNAB9#%gxZ9Xf+_Y@RC|2+HjPeW7g3mMk1jKW6%4k> zc_7NpjzIkj$VCCN!`WNcR*VQ_KeAmSY^{s)th%gy<&JC>RA;Q|ep~8`9;RDxw$d?s z^^i(2dc2GNv}#9O)JiV6Bz(zUpWEW4vu77|AyF7fVHx;d@f_FFL^ZNIxJ{KZngC6EI@YvMnkeZmoP!V^TjOV2S zV^x^SqR+)yZ?PvG;QYk!aR&l^>VrNVP;RteeY$!}dM>1>#S0mQ2q9GD-wnGlb&(VL zw3>Q$TdKr-|8KKj*`goSFHSE$Oa6ap(oR&J9H+@%%%?+XUiCji)^=1W)CGVp(n`O) zvkAW(c_~~fM=i~ z?S;GLekY7)OxJVI^5)GKx~_6ICWk}eVnV)}{R3(aX$Opkq2eDa`n?~@ajmL;F{th ziy-I8&?L4id(NbzN;9r4i(|`kVz!<8i_86}NkL)g`!t`qstHkH=T{a)&x^D8CKaZn z7s@KGCPT4Y+Wt?0f!Md$#%#^xv*S@o;zaNGY91f(F(+y1F7exe!D|3dbH<{VJ6I{Ryz+!r7Rz8WkcZ*~ntaSm zt~E|BLmMj;&bBF!0WyH5g|d*Qvx9)N)V%s~Y3mS>a|WYi(7gbWB5Y+1KpgKA7-eK_ zO);2ns}>cC4f_+oenznl=2gp(F$BVweTawrF+E6~G=5H?O<~Z#p=zseP|))QRyd_c zha*`hLslbNhM-P7`9r4{HPqTn({ZOd-#Q?Wl$&P%o$ACzGbQx|Q8Rq8b1fUIU-vU@ zY5PA24kt($>%`uU!6bCJ%M2Y(HbHJArJ~+Cm`L*P$8uHBO!}J5yI&U-Dy|vh2Bh0L z|Mnjak z64I}L0M|U{zxd4?QY4rD94?ygE7KvA7s%S9Sdtcb!(+i8nyjPBm;n_T1TR&zVr9zC zcGE85?~fNk0GrSQb%4PqlEj{an4b4K89bZ{OX{#i8lB!iZGW@Vqt2qWR#1Q{&~r#h zcKM_W`_39DVojVBC$5VWN;#O=g&z{|F9PDbn3%{tDFAU#Rx*?6+*DLSWnNQT+i__k zU0V27Bm}HkGSP7Q!K`sJ!3JIHZs2V6>OGs{vjv}>=di_ci8U>=tj}(K?hzp5GIA?2 zOq?HC^?6B1>w3$Tr}6*1{;`$vY4aGb;mqw9)j6`*B`h!{%#)1Ebb1FWyMWszbykdeZc8WAJhhlL3)S z;)~KJxZ6O``Q~_+7QGmZ`~$nc82Dnrdp8f8#i_uvf4UR|L($w=v*de{0L@020R6l5 zWltDO*KmyO+}3SD3G2)gHob);&s*(nJHL-1y`#|Kxq1!{bj zbMQwc>jD*6G&3YeJAL=5pS7B&_J>PYzT}usI8_}nc%8de!mGzK$QXlBTiMgkA8%{z zN2jQj{Jti2aO#BJG|q20@$uBRaqjPpI=ZM^7ad*<% z#}1N_#pUaUt`>wWRU00mz&nNq90hBn>2x60o@`|hUhcVn@?~f;W^M3Vj-S9weM+Zc zeAv%S2I;LA!QN>Kg`+Pc1(g3~4%_vg+$$xqHWv16RaP5tF=Pc&h{Y$Ny^8gfHMoj_ z-u+qA)T8GsVGQ3?*Qa}el--sogL6yjc(cUTCy0$l6*%zKb;-Ir2INgMx5xq6fk-!0 zdgoUjx%O0`nft72i5#KWcWa>um2RD!adRV?E>$j2_{w5D)BU`hA9FS^q{!-shvMUF zAv=1ojq2f^?~B%tubsXA(t^u}U_FW|5^hEXJOg@<3VN-sv91=EN~td%ncJ;aa(H~N z;)X0_-s19QQHS9%YHX#_;(|HY+MdHfpqJDa5#$4vSKDFI>|#RD?y#;-qdh~FD7dU6 zCrDdJM>cEoi9L6)+ z{d>md_m2SUJaXE=_INR=#=y6_&35sx8iYXAJ;0KsJ`DkuNWH}e{+_i!#b}24e}gi( z0b0=#VO@q0OgYp2_{T+_g1)KEEL-!@u8Tv0l2#Jlu6AuXQWZ9%0UjB(@CDgJFvz`j`_4Ef2!SMPUoX%vV!f>U%>LzACqQqj%S7 zBU~Q;zWxJ3b#K&51njxQ1!K{@3vlKSHV6AtwAONNCM*Eq#;`7K%$rpO-3lmRIdoB{ zWqyUlmt~w6KX_PL5|P04)`YIp5vG_G=V`EF&`=p@!SzJxax8BQH8Y>rSKCzB`_p5v zJxk%Z6^0b~nM^d0eg$XX(I^C@XX1ls(iN8K_=+)d7^2 z4(7tq)s1@ZMJ{D__>?`h6av|o%TCHj9n5>*>&+OpU(Un7AOKvY#uTNYgD0(oq4%;y zlN;C0&1_ZJ+I~!n&M6_8BUU;XUUAY9A{^HM3tN-OvSCIi*o14Tbv@wbikLjEYYSob@eOQXd-2+MiNW)^rl;FFBapn5Qs*5x4KL0o#2+NhyTlJ6=gxa zHA>t}c0G~}E2>|J7Jhfi(^dv`#3eP_ci?q^3E4sSRp>NlP_LTB;1c74aQHzc>piHk zt(>#TopIZHl*&hhCmO;XV-s99QcE7Z{Dd6=v6`6BF5C;GME3)}!YR`g@Ot8SMfY@h zxtg^LC%Mkb`fR#VxtRUWl!~J#q+M#^#f$33b`s< zL4-8i7ekKXaWSR=vi-y%CoiB?aZ45N*W$n#YA_{Sq^xV$Y8GDX0s(_F@E_;rl=6O zf-RmUNp-*KeD|uPy)ft6<~yoynarP)_v2XW3*H2pqr6v9E}fBsQBF|Zi6^Zc%Rx-- znD>}@|GIToYlo;zF>`7w{Uc=Omh<}(h7a5FPt>uuc;FSwS9Hn7eXi~6w$G2$f0SX# zhQp)m5+cNd?iy8ou*nZ^o!NJN22P7Dp;MLPowL~?R*QIbtu&8Yf{?)hJ!@mU`aSK_ zd8s!?soWBkz**3|_lCm6X>$KIn?v`MNseLLv*JFx9fy1N?F4=4AloH=w zqG(@z&5x?*ECLfgEjVShI&NBxgRM}TM#n>yM0p{jQJJ>fGZlNDw%Kz9RIV7Xqz}~% zyvuVnNB)-97j|lSO0les$)j_5UCp)q+ordJ>HTlF#DyHP;P!PkU%+OyF`N#?5KNdI zaQwVhDrZT6R)hQRoNp;%=iQ1jd|ql`S7_TZ)EXndHed8Gq1wkw%Fp4*wLQrg#&hSJ?g;&_IxI=H3AgiX#4XzXLLy^dH;h89bSUcY zuhCAdi#dB?6>!K6TZ&zQOdjs{eso%lT{CFo5#$7#NZ#(R!kha z4ii7C#!<5wT92Z81|pOHfWjYAm-3k*Ol3cVsY4%GI}qek$ZW0EU%xjScahiW82W2@ zre_mqgu{j!KHlVdl=S`&p)n*7I-k6eF2^FA|Io#Aq-Wh9V zU_T<2hV5M9czLjBf7;Zj9~8ooj|q7-XKRphLndcF00j z$SlbP(mx}(hL#8M)o>i=C@?#9t}(2ZgIYn8#=)?_F^QOOH$CGo)g^t9ycSl#EN5#n z5wttcKRg(y9Zg=~@2-mciq(|$KDx_%u&FJ(8@8e;Uv6IiIu)kqAEq+w;Cn|=hIYBm zZs5JVk?SLY!mh>lewcplRJ#@b{XoFIoaS;f;HPTba(AaoM-{DNTE2a}rWTWc`i@2V zgR)GayplNjBDYr{*>a!wTW~jWHh^Uj2tUH3seb2fJl4Rg{Q@wuAQ@7C8c`->fe zw}MTU{qsut6794B8}p_*}RG0%nD3Zz*^b*PtA62JlqvCNK!=L7HyMg2K zoT>YC^IBB4oH$g~qOenh0I$#?+~y}^O^J1`0ZYc>XZ2jG2Z3sRWiLWt%a_Lj$ya4p zD}=EHTeEAzMLJpm>$gb{Iruc4^lk4jlUYY!!lXP8mK`|_QWFTq!EZCPI$MBmJQMmn z?6?~5X=g8-2J>0%EwVAjYBMKk?MM~atN8YeGOTJfXeSWn;~R~lC=l5R^-6zDPijH%gpkiid?8MDVN|W5(fD&8v0G+k|h6i-VADT zLuBNs-=vd)+b4u4g|v;oSL?oOC;f1k%jHM+lp7})Nk1&h66pHc-M%&LGo8)y&UyN* zlk+U^A~kV8wn-8Tx2g&2vcSmyF8b%SgmgVl@Ibcn{%u z#DfU#dWRhd)#=TH25WJ&yM&4fd9byc2A>tOV+)uo>%Uhyw#MtGJ{NGRY-g^&H@dU1 zurLwnxO}@kn%ul65EJ_qjAG(b4$eN-OZ+zXQibS=93i)1w(k^a={DH|AE^;Vh9sjmY2U zFgFZQlueOIY-YLV!|B_yYq9Lxgk+gbH&@)IO&h$<5E zT2b9R@d=`sK}@`s(RDf{Wy17&FxPT%wUF!w$&b~K7>vQcE2X}3P)L}o*ZxO8ao4!3 zmscW~TylEfB`ITdu9H6PwnL<(7^;~j)@x7$kI|dDi|*u?C%oh|&%S%}H~Yoh#?W(C zG2g?YQlQdf& zi(q*7TTbAPmB*7IVsU^7uW!BRPsL*M^HjAl<|IH&rck+}Z?n{Q1~R|@0$}V?tnj7J0FJh}rb{;JFy6IU zw{)u9?`je&9SN{(rj)3_JX`l=zbn#oN>t`G&f=sj{XQQ^L(pr=G|fTbcb;sNjpU!Hx)L zC%s3qyVLfcv9)WQ9#2_fCynSL)W5}XVlg|RA7iW3Rqt{E1oUP#f1D?hoJ+cQV)CVH z3CcEJOqx+pAX7>xDlN&PQiA<5 z@ktCdXIeY(q{;h@HncDesrF zvfY@#Z)(VnFN7-F< z=LObYn@5?2@yvL8qXrfO_k&Wr%_4CO|B;`<$z>R1i-_<$ki{;07xiz$KuLTaC!g2? zc4e`rDJ913p&>`z#=_}h6j;;ZjJM2nBz9NxrGXG{H9z>^ui4^X%KD}Bw~ zRd(xBpVg^U?xBz7MpJ`bcQIoPevTHl#<3;m75PpFGB104m5T`ldp=;;Q+s@nhE6Y$ zyPiYipBBQJ@m%8lOIudw^zlWBD{Z%nGY7s>9naR}4<#j<8erTPIjPmi*r9Q){5Vg^ zrI#E3@|eAis^}e1*;vO|OW@q?=-xw~koh99)~e?f&zpE# z{r9}Spy==XmBbg?Z#JnXeVP%5hwUHdnuY3UHN3J)25o|(3e@d+VeZSM;*!$Nfi%P6 zD=97ysVr(O&8EmQs+!eWhu%II17JaV3>*q#JomhH4T0*MRfw;iC14{>C8f#0c{T86 z)2^}k)YG|%vSaU(dpciycTvv(Z|tlX6hI6q^3oX!S7yWRoPE$-W_o$ugaE$iUf`va~=% znLpOw6yFJjO!@A|^P^gHR4so3hJcP6~J_^kh&3P^z?lcn^o}iAP z0BE&r3%m)aSNtya3mDjkUz`o#Q1P&x%GomOy<2~Awm_7J|4jtazH+Rds*f?ah5l3G zi=j6#P8UlrU?gI%DfK@dJn+aIdotnClgrO#x0C?3TY8J^VL-JRV|GEWcu%p5t4PL^ zk(8wIJ2hUXTCjGy_qn4q9bTiG5du(?vRuy~m9vO}mq86GWFK~38oz!0OW(eQ-+5ai z|0hgx{Qjla$N#}svY$sHJL~78G3i+(mEWeyg6);l#C<>R&Xm@_YX2YYeP>it>)Neu-Igt&f+C%bG^O`mEC|vCsnUB1MF_>vvfa8- zYNQhgAiWcMFG??g&_hRQp|?;BkZ@PfbB^cxzBBH)cidlh>|d}FSmj-Bna_OYGhg`K zC{E4TpooZ)T4_hSeUvbo?dHc$pkN@r$=vLnWZ6<@^l?^aIHPpr*$M4QwK7~W7H|)Y zN$EB|v($E;!^&W94Xm0RC%si)w&dEhRXrcRaQhY<5J)wEEy+|FhlFqga9cl7-pNW= zRh6?C@+K)#07@>HFBsu>xp$k7$N>$#UPEagO(Y<&>DqgjrPH;SDDc^jTv+*NP`>d_ zKJo_iwI+6&o6xeXndtqGFR4{7S` zfk!p$wyH|od_6F6|MKa4&0?%k4%07%$3$3FSQn}>={nd2 z`wdnel@59hFH~fqJ~}^I49>k4nu3{WDX<$}u+JJ<=;KV&7FTg3x0ul7^(zV;Y5YuH z;%hAJ($U|5J9vz_foy_9K$AY8r*o2d-i_uols>TRZy3W}*$(6M5sZFc=A`G3W)cQt z>A*sE#IjPS-X5W2INp836Vp}gHZSCDKs-^1xSIc@QOG3JqULKLJtHmuVX_VKf7*)?C(~^dLm9zPc zd~V-{@|AbNn1W6u1j;;7!yjcG8D21n}Z4Rj`? zy1CEH)0X-s`@8yJS#b@ib)*?vo0fWUB|ABi-nCw9eQ3d9nJIdpb4` zm7A1f;>X$e64&3(iwL79nw*&&rECnu3MZozZjZ1iX?_r&meQK>UQ>fa#d6vwCQZ(v zOUNi@DkO8rM#pwU^*sx1{uP|n&R%BV*e5r4GKr(AvJBYm05K;`R0*YBeI0ksUi*fc zM54nQ4J~0KZzyZxcboa6{gDlB`{}VRmq*D;qi@3sC*|718I!>x2V6=?I zg7;~0gTwXnl@*v9_Rl|NlqLWXY;XE;g15TPf$^-JVcA*=Yz}c&HJN1LRGaww5hlPA`o` zV&rIB+Qpi*`c&JEBLl=D1eFoai5N7mt9!B((gl2<0w5)+IMqemrlowRv13RJ_o*+G>AhJSJE{sM&{Gn#w6Gma9`{2Grsm z(vEZHZLpNcA=%NfnJGG{%dZ8e*JkTCf#@tDh!mYcwq(QXEXO?I&G!O?U{gE58W~w3 z-89_KUJWbMU0U9vTA*al4VZIOdvLF8JM>-TCFx!N{gfS|%PIWVE?F-9NoqGfBlVaLlX#&4{xK6M2wn;MU zZnb6fQD17j?8*I|Msx2a7w;*!rrZ%#NopVjIyt)Nx5jxtjk30p0GLDue`UY z5f$HK!%6kFPw0e;YmI> zQN<;xKi3f2GMo@H$Apo(tdU}GTB)8em3=K(09RCgUA|}$-J-PSxp4sc6Gv2i=k!WO zKDja6a$Hu#4bccEU@9w?t_f;9O4d#?$mlZHP5Y4Ywi@QCLmMs?*fyNq;r7VL*#J=^ zZf+n1gU5f1@w8)p=++s33yS0l(pjQVoaj(34}9CtkO22)1zo8KLK`v|tu?p}9zd|8 zuod+ETIy*WBcmOlr)P<9F0oPo%ijCd7*q1=@>(|}XO$V6|I7(hp zlBIVJkYs?+Az2+WSjjEpD(AoSTjiyQbRD(AX?{{b!%yH-vewrrXCvSaPz~XrHj&}vL>6JMyQjZ+tG{XVS|iNA9X5D7 zn#Jau=r!Wi2T?sN{JfJlCt4=1>v=;VN=g3l)2P~W93|J-|KJ-@wjT;)Pur!(ZO^O1 z;{ho))ze_YPW}?rJbDs!-x)tBMxH*NW>(kpBZvfvQ$(!gi*9aFS#B4w*q z3|`mL{4;lCEgnf*4L^%AK(w*;=w1_H=vD*HqR&C_JE1dJ%=4nWb2)Y8dKc@pZ?^60x7BkV^(}A&k9w!O52|tU+h9Kzk2|| z(8Qvq=tQpaA~_ZO!t@rG;DW1d1+wCgO>30OE~S-jGRVBq+HWj%qh~BsJC} zs%?=|F^M2sikMchVX^EcyDNUI&!pjQ9p(1E{5N%V;j!&Y&pn+wX<3u96Q8or+c(Gb zeO4{ML~jxW59#ZjZn7oOF26V%vkEN)+I-wem0fNO?E7nOy~eZ(?nT6JBe9!junc6t zSG#=Iu-N?dS#hT8j0{}by9fmr<`m_G$?U#YOOZ3l(nxZgm;s|@m0eR-ndg=$9=D%+ z8^E1U;97KWEA}sByDJqOne61GI>kqlZ~$Z1thaTuE9^miD{6%jh;+@Q!_~~QC$Q>WgnD`wNK_e{u9M}|W>1fiwE+*$Szt;5`g>IOc`xfJ0aA!!i z$e$vwn{(xY9<{iJC(5HC78USUKTR#)v2F;0Aok8n12T^X@6Oq*#=PhVVAP>{x+MA; zC;WODt1bY!Qc2EEya{g=jJ`4Y)ON77?h@T>rQ0O7ms9v1;^IAtqRCOCca<lcmu@3aVE&}^gCq6>;&6@d@iQPHT(mMxZ$TyDPb7MC-9_CD0 z6z`{2atyqj$Q!g4R1VeEwbJQ*0&@}<@>WWscKCyTdpf(o>kUR;aY3d219{4A^Py^G}1u*T>6x<-sSPE?kdq>UD3s zt)H>s2o29PV)^{?Kjh77DWcYEz3-nh|Dq7|aD?$MnFNPx=LAkj@sKuM?4)ax2@qbm z5{bbxk^@a;?jySTUGaie3#C1L!b=M3-OB^%nN3Y*eAQomNuPUd;U@UsW2`wDN0QY@ zzd8xF-Y36CrWxvBFMO6AE1nDcM{M}U(%`Oal}{MLeU^sS4X*~5 z*q3y+H7K(UD==(ydP&}s(fEyj{6{1*ImAs+jja8g@o(YCmnn|@#n3g>eVG(Fcr*ju zpBtRYX4?itx7LgKmNC`NA94#%z+aGAWpzFYVV z=Y5;Zjhrr!I{e|}+wR-X@6gC28{QeBbGio9^1G5W6*66-hv}Nj^Iv>3rp@<%LvMLl z?KKsi>WkfYSHxlp6~>KL?vH+G1?z12ecnzR^%ZDu>WkcxT%s#%Y;@E(mj?>!EsM3s9vC= B1db)9vVm+D&pIlo#{t3HMpnQ6wD?ATx!(S+NJhy z!re}++c}l(9|f{|%MEBHe8N1$3UMWv)iTFQ%;e;`v%{bFLcFO>%o4`nqGJSrsvMWS zHeaP|d5b;2AT2`lam(w2BBcC(45DX7E1O^&k)72r|-_o)9dyq|n@tmJ%-5Od9? z2P?x<9(>BiqFQ|!v3rL;-i96&w_D~g`r$_KHS-O^v!UL#;eXG|fG;cNiai~#CMmmq zdm-*sn)m@5A!=c@RtYPydWU5QlNA#XFEbUjNL_IH@KQ~syDeEyNk6N@6YkGc+%e9Hw_@Zh4clP`4{U7olR*_CKO_>}Dv7 z@8LaAu+v<0l5ZxgP&4@5xiZ%QuHzZ((aF z|9SstUb#MFZg|OtPZUj5`r7Y9N>6A|*q>a(Oc$%1OLre%Dv^021VE zI$;f5>>DeNAIodV%V~~#b8vN@-R*utJU-~7`tV$>h@dD;$%blBMdDC`URdMGbnOHo z51aFC!?D9YK=yn&l3=V7_=MY7p_v@P*d$AQ3Rf(3a3Q&V;3{)&9Z!Jssx@=U;w*{@vc`1`g z=f3d&=)BN~UMGpMqE$=^wht3sfO`OpU4W7EPvz8mFlzwIbngdRX|03|{X|3-xvIh<-y=Ux*3B*Sh&D*w)MRrC)b`$C zsor|j2;9UF3Ch;ib=BA`F~hLi?=IV2anQc=iOnnZVt=O8Rp*If1)TsZrU1YDRKiv~ ze!nP}$Onx0S)M==B{Me=t)sL}mcInb?TCVD=?i(w#DC<0B$oPUqStHGJANB(`z8qL z&229U+Ty5-Kz-_MefK)bPK~!KIkC=`IOB_LK@3@*McB>7XM`dA<=RDD&8;xmrQNF| zwHbFo#^stH61vp^6ywl3reZ(}i3cg3#h*1WV0^$`RCkE)++SoX&5Ssqy^t?(^= z4yZg&#puGwVqb$ES=;oakMq1}))K3?8jO;TTK&_|$>bNd1W6sr$!C)YVlvBi*aJlL z!s$}EP}Y-4-=Lhl?s5^alsv1)eKadF(+XU)N>oK26u@g8TTVb3d$?>8MTNH%M{n5A z(?zg|^IQnKet{J$8~^!CZiPk3GZXix8i2JMa41uGtOS^#z9>jL)m@me$+aJ2<4k)dOU``Ca#%h&jr zK_|wyoh@@I;TCU?^76DS`GM|<`=NwRTvZm`#tRAl+g78U@kcM_Cy@aS+G}ITwM)MQ zz2$fnz#-u6BJnd0bu_$J68e;Ci_YF}vfVjFJO#zzPWkamwTqD}n+>a%NlN8>~HaA9!JVcC)R7O=L1QHjqB=U=U_e%n8)_7wQtefACCI3S!8 zdUHvt*;u|!LjE7i{M8nrrEbAo3zARhL6=fgakrJoc*aa@RYE_cgJS?@^&MxPUY)6r zcl*jZ$bp;u8($XaN&vsO>MW5YA_7KAhKRLx+py>hBpA~?|C8NinaQq z|HS*Rp0uTeFip}(Dz>x#z@rZyWqO~_qnc*Ra@baZ+& z5_s>)i=&8|z>_1VQ;&(heeGj2zI^byNz>OKTCL^>Id~?u9kh}=1?t#fZHhSVHLdn9 z_+~6}l-A8ioo~-zHgI~kjB?g_K+fcyGT*cUZ6Ncs{kdR`Xd0bqtrwD{umovz~i!mgpj_UF{;}@aGy*ne61Ued)%EQzqw0_|Sv@UoYv*<|&C} zQAV0@zPoL=k>(#MTLWr-)6o8p%HIvQZ$$x@Ud^!>ul3}9#CYdSVD)kAdsn}0`h(gh zp}D_+1e;!Aq+K$EW5k#c(j1ZOvw9ycY!^Ndr73s6%nnTocj2|q7<8D(;TGdfng>nw zDiluRzmsZ0&b+L8Nf`p*G>+Qst7b3NJ$gkkot_vIPAU$y4Ws4#AXt_b1VpX4u=*%gQd0*c6c6kM=NZN=;3 z?8nsd?9xSY&&2`=X4V8>qM4z$J*<9rb5_8tcMVE#EnWNu>wdkF7|>0+y9S0L<^-|&=p%0l1xO>x|36}vEEbY#4NIG@QsoWi)(gDJE1z;k@bcLD9AGkC%Ed<(4YQ16U$nYcHo$Yl)Q9*es~F{k0-1 zoGw8p_HofL2eU@ z`%&D6!BKCQL6d0Ss-P}|Y`MF_;VGzZY**Dgi-AOmR4^spN3rvNNC#YgJylbs(f}T~ zw-J0{Lvi-bKG{Rl#FsV6Yd%|xPLP9!mHjS1*JXezZ_c|BxEOd`6b*CQh#0bC;MJ5T zlu!BLdUyG^8eR}rPfb~5p$zcYQ_rgU{q(Xh2mG=)b+?@&U#xe)iXmigKxy%44SBu2 zJkQ1;Ky1@)iQ>J#PC;J7p+uakoFi@Q2DmTgjc<75Z6~A@+iNbQ>(FO788lSHJZ7oufX3y*N01t!4(&1)}0X9?$4=Vcv||ZCyFSsJIm+{dkk};nJw2 zn4S3!dVmd3C!TCUZOD3{$LT!_705beB6b!X{a8*`Y35|dZsCij96$5~S!TV2f-kwK z-OJKVwh&B_Rc4x<26!!B6aBv9_rwo*Y?)jdnT2yz$W_-8Tjiz~7t%`J*tXKPgdzj)LQrg& zdh0DF8}$fvL@5}#SF*3X^Kt0Y6jpJui%I98>a`Sj8L8Q!dLSGr+i*1LZbY2|-nhdB zwp{T`5{pq~cMzA9f-0MA*Zx7>mE5vDvs7_44g=ld?t>Ki@cUpCi=p0U^RfWX(PxM# z58&FeRk)1RHXQ<2?wyR*>|ih_#y-TCp?mdT18}bl&?)K>$)~P}nihA!A?vc$i$z-M zDwJ#=P3(g3y@SmVe&@A-<(UMg!pT0y*vec1Ab0X$RhuXIX3#|IQfll&Ex#5@6EoWM zuay8DdYUE{dOrMNve(zepA4WE662pj7sq6~7z3;`(xF1`sdH z*jmo%k0$wFY-5R9J|^Mwa%e5092RF!F6N14O42k!IuF&1=3i^*lUCw`_}^~oo76<| zHFybOu9n|9W%#QT^!&c-RB@|fc3yXGh%N$0ve*FDqyyOFBk1qDfZL~Prs9)KZ-YIv zTi4pkfpW8wjozfFdlm(UPYo3P0yCYtLM@ax4Xi0oQ6`}Zo?AKh0F0eYY_54@)y2sD zs8`1WagaMgZ7z}C^)ZD-;p!8YxfS-KuazTRAb_X7E2=#3Dz&3XNYInf!F`kJY1Y3{ z)gXYX#?1|1KTnR9O&zUo@tirrQ7VIb$E=0>G0&v+h*Kw4_MEj_#N$3rWEk%u@-bL8 z1Cz=w30o>khRQX7or++V2;BD}Q389LYhhS!AEA~g)_am~aX1TY!e59u>R@rLS){I6 z$x2)Zq<0a3KGi;D7Zl|l%GLx%xZ^tutz3tlt@2?Jo(L4Hjn>`HCQ2~@@>q*;zxCtE zUD{Z7Lc?vadFaDsH-N~G{U(Skw&;SCbK4udA|v~x6cyyO`Q?fa&Rm|fdT1gFaUR^Q-STgfgiXkSi3ISvDeO#&db_!Jxry@N%bV+$enoW<%E8XvF0i7 zdzhA5BMmN;lCM}@Png2Et>-BWC%p@zTFw9FmW0#7P3*u@ovr)yDIm^My9royB(J#l zg`qXf+E8bG?U_dWtp%{-!oZU|x&-wY-F!W`(kCX!!cD6edwd}?x^Qt<(=0}=Dk%p8 z>(hYox&?=ES)9wb=ay(GXxFp!uq*d&K6UqN=R|AF1#z)MT58cu#lGolr#tzrG0Rpa zn{HW9vlKf8pG+iwBRD;8$|Pt_dsa(S54!aDaA{L>`|;s~82N7kY6A+tgDCU1sukid zrtTW~7%@A7D9N)6xzsJA-kR!)DvlWMjkS073BKXPEO%Q&UiH9>v-tp524mA5vMm+)FUh)VS+&S z!JbC+a{3ulIL#tF=y+tF|8nk)LNrZ=va&3|5>G36{%Me^$4I6$*irZK{`aN!*VGqu zw_4^(twL&gN(s$YHbYvjG3v7r7F3pUD|Yi zbo&gyKl}>=xcT=G34p&tkGpxtXoh(X3I2Of1Ew?C-x*-8`aslohS-S2Qisz~zrCdT z+jsCDPvV$6$gX`d2Rvv10Cqj9Ay!=g%m%5zbB@SVLfRTQ2mgyG0im1Q9nx5T> z32=wiA8~oV2o(NFh4q&JkE(tnn=HEi;n4zBDfBepxz~wL#EfJF-vkfm#&Nyh!dF;l z(qXT-r+~~)VIT<+f2o{YthnR%Y{qY^L~2LerW4fY zrK$blMhxs*m??fSZQ<3uH~y8RAjKQACso`TSTn3Dx+=CaC5ae(vOyMsd7>@6 zd(_mRK?G`GBWDST`@4%#2c6gXCU`rD?kOkRc@4WGT9b=*aZ`X<$y2q@saxO3SHOuP zmef+t_W)O9!0+}SeHv(_-KBKsZQ9s(nb`N^y9utdtWEgd%M0ExUpX-zs87<~30?-W zG23{TRpU0T|Kxdm+qVYynTrwVL?gMbjt8LGgQHk}J&@c3V^rx;w8Oc79eG zZE8u&`jU)n(DOl?Y3aHcctq6WDr5(T(vK3B6Q%@7?${j)bBW7?{P)!xIi{ePFaxSejn-s z(AmKD6F6xoyDU`Vp%2kMuYQwPvj^&TY=ht3F!(X3_Q%l)@sKy@ZEl8ysehCa zy)}_lB`*4ayAP^Ap%kX%s6E`dr_(-A>o`=db~L*|L!Wc?r`d#sEX4iv4SzTNED#|a z?1}e)sOvR+Od)T8+69^AxItVk_ua6#(*x{bm%RVFG6WqL+x;-*#eL|}^&vW8o?uZ% zml|)S))}qbRr-oDSd98ndmW+!72Az(7;vLp`!Gwxa@cy>31?{#rfQR35~qj=ajIYV z*6-b@H)EqtHVhai0}b&^jWoXkh|;jsI`PDQuVHtTTkiKJ$lByWP!0E@C)6hyK&5y`re=nqex5nS7>U-Y*@3HXrSonJ^ z{5=-_e^?etk;S<`ezsu!72Df!QqM}q10YX8-9Y;O*~?*LHR#uo${)w)oX@uas;{&E zU1k#CVLHQD=lSJhQZ7|7fP)KKlBGj|9ZTEq8a_KGwewl@{%Z58@o-Zwv&HbqDt0$L9-RQXc)JJrF zi6FBCZ=;tEbHhPqM){wnX3+f+X=_9Gf@8CMLVrO8;9Un?`sEI=orEy%r)#;Mm?h|}-Hm+5z- zv*e#^w4`0dx(!9WsrAqo8aJlIM;afDbVet6xs?Ypv_z&Rj!J!~DW9l%9T4%kj;F!v z(MAQ&1Q=ux%2Mu|a;GT)VWVp zL?|nhg)r55>z>TV>n%;(V5(JM3SNT<3Z5X1Ue-{=l@HIO3E#xk4A>TL!PCC8a#p2)RL8EWB5 z?+%tJk4NRl#o;Jaf91cg;nqVCn{kVN(B739s}z*xf9oE8>QMrsHidNnBi7{<*+)x# zS}_<{QF{?%0t!VyGM(qFWf;ZVKxW`j6-uP-98!qjm=2@XYagv)^Ji>{oDO+`^E?=$ zfw9F_*~N6w(i^8^nrQ#|nvQ8>|3Zd5Kk|YGE`Di5ci(~Hc_j}UC$0Nxc}sDhOvnAq zQ|cLLW62}Dl$=wbU)xIQspVJ7tGiO-u1GbtRR&WvOI^+IMYQHHRmr_^G?*ySi|enY zr)5Qk-M?O#|Jl>NM)YbR0-~?wEFquioCKeHTr5NUi^9ogwc6l7$q(`^|{uBf#ho$jQ8IMXGW6%qksSFDCg z@Ig<)uewWSzp3Ux8}65|lx`HzcE_hFV&Vl}Vd#Lnh`v2r>~SQ_k=<|rP9aL^t34DD9zYw zZC!{iR-&Y=>DTM0?UIRPtFCRmt|;d;M@ki}_)3;c^n)b^r6ABmRl953V~^2d5A#Ak z$eN3Fs5$+UN!{)Zypt2-%{~MjzQ3X2`PaPei^~RZrK(85HN*vfV^sSdQq@G$rdN=> z(5)Z&kM~uQVgXqbXBIJ=1iHAb&Z<&#@FnGiZG~QCVHmjL!r5~GQ>Km7O{*o=blyYlwj1EWvHuf9j%zz%q1A(zkSkaHh>fBsnXPEx-)sRq+ooTo$X zTRq|xhJj>z1NcKaK3!#bH1lXALi)${hAhJr|93kfj(@k(0nEb9@4<|}FGA-8hJW1K z|Fm)X_u&8BITL_e2A&J3-2|xPvtK-TzpqZf4(tjU^YEz(!YPc#&Y9-067 FzW{&|-);Z^ literal 0 HcmV?d00001 From 00c7178feeca18cdc39ce5489d78a919296e2131 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 13 Aug 2019 12:24:51 -0700 Subject: [PATCH 011/358] draft --- .../create-a-windows-10-reference-image.md | 163 +++++++++--------- 1 file changed, 79 insertions(+), 84 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index 068f9391a5..d5935eb3fe 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -28,7 +28,7 @@ For the purposes of this topic, we will use three computers: DC01, MDT01, and PC - MDT01 is a contoso.com domain member server. - PC0001 is a Windows 10 Enterprise x64 client and also a contoso.com domain member. -![figure 1](../images/mdt-08-fig01.png) + ![figure 1](../images/mdt-08-fig01.png) >[!NOTE] >See [Deploying Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) for more information about the setup for this lab. @@ -137,7 +137,7 @@ Download the software in this list to the D:\\Downloads folder on MDT01. **Note* >[!NOTE] >All the Microsoft Visual C++ downloads can be found on [The latest supported Visual C++ downloads](https://go.microsoft.com/fwlink/p/?LinkId=619523). Visual C++ 2015, 2017 and 2019 all share the same redistributable files. -### Create the install: Microsoft Office 365 Professional Plus x64 +### Create configuration file: Microsoft Office 365 Professional Plus x64 1. After downloading the most current version of the Office Deployment tool from the Microsoft Download Center using the link provided above, run the self-extracting executable file and extract the files to **D:\\Downloads\\Office365**. The Office Deployment Tool (setup.exe) and several sample configuration.xml files will be extracted. 2. Using a text editor (such as Notepad), create an XML file with the installation settings for Office 365 ProPlus that are appropriate for your organization. The file uses an XML format, so the file you create must have an extension of .xml but the file can have any filename. @@ -193,10 +193,37 @@ If you need to add many applications, you can take advantage of the PowerShell s New-PSDrive -Name "DS001" -PSProvider MDTProvider -Root "D:\MDTBuildLab" ``` +### Create the install: Microsoft Office 365 Pro Plus - x64 + +In these steps we assume that you have downloaded the Office Deployment Tool. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to D:\\Downloads\\Office365. +1. On MDT01, log on as **CONTOSO\\Administrator**. +2. Create the application by running the following commands in an elevated PowerShell prompt: + + ``` powershell + $ApplicationName = "Install - Office365 ProPlus - x64" + $CommandLine = "setup.exe /configure configuration.xml" + $ApplicationSourcePath = "D:\Downloads\Office365" + Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -CommandLine $CommandLine -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName -Verbose + ``` + + Upon successful installation the following text is displayed: + ``` + VERBOSE: Performing the operation "import" on target "Application". + VERBOSE: Beginning application import + VERBOSE: Copying application source files from D:\Downloads\Office365 to D:\MDTBuildLab\Applications\Install - + Office365 ProPlus - x64 + VERBOSE: Creating new item named Install - Office365 ProPlus - x64 at DS001:\Applications\Microsoft. + + Name + ---- + Install - Office365 ProPlus - x64 + VERBOSE: Import processing finished. + ``` + ### Create the install: Microsoft Visual C++ Redistributable 2019 - x86 >[!NOTE] ->We have abbreviated "Microsoft Visual C++ Redistributable" in the $ApplicationName below as "MSVC" to avoid the path name exceeding 248 characters. +>We have abbreviated "Microsoft Visual C++ Redistributable" in the $ApplicationName below as "MSVC" to avoid the path name exceeding the maxiumum allowed length of 248 characters. In these steps we assume that you have downloaded Microsoft Visual C++ Redistributable 2019 - x86. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to D:\\Downloads. 1. On MDT01, log on as **CONTOSO\\Administrator**. @@ -235,33 +262,6 @@ In these steps we assume that you have downloaded Microsoft Visual C++ Redistrib Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -CommandLine $CommandLine -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName -Verbose ``` -### Create the install: Microsoft Office 365 Pro Plus - x64 - -In these steps we assume that you have downloaded the Office Deployment Tool. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to D:\\Downloads\\Office365. -1. On MDT01, log on as **CONTOSO\\Administrator**. -2. Create the application by running the following commands in an elevated PowerShell prompt: - - ``` powershell - $ApplicationName = "Install - Office365 ProPlus - x64" - $CommandLine = "setup.exe /configure configuration.xml" - $ApplicationSourcePath = "D:\Downloads\Office365" - Import-MDTApplication -Path "DS001:\Applications\Microsoft" -Enable "True" -Name $ApplicationName -ShortName $ApplicationName -CommandLine $CommandLine -WorkingDirectory ".\Applications\$ApplicationName" -ApplicationSourcePath $ApplicationSourcePath -DestinationFolder $ApplicationName -Verbose - ``` - - Upon successful installation the following text is displayed: - ``` - VERBOSE: Performing the operation "import" on target "Application". - VERBOSE: Beginning application import - VERBOSE: Copying application source files from D:\Downloads\Office365 to D:\MDTBuildLab\Applications\Install - - Office365 ProPlus - x64 - VERBOSE: Creating new item named Install - Office365 ProPlus - x64 at DS001:\Applications\Microsoft. - - Name - ---- - Install - Office365 ProPlus - x64 - VERBOSE: Import processing finished. - ``` - ## Create the reference image task sequence In order to build and capture your Windows 10 reference image for deployment using MDT, you will create a task sequence. The task sequence will reference the operating system and applications that you previously imported into the MDT Build Lab deployment share to build a Windows 10 reference image. @@ -275,63 +275,50 @@ Because we use modern virtual platforms for creating our reference images, we do To create a Windows 10 reference image task sequence, the process is as follows: -1. Using the Deployment Workbench in the MDT Build Lab deployment share, right-click **Task Sequences**, and create a new folder named **Windows 10**. -2. Expand the **Task Sequences** node, right-click the new **Windows 10** folder and select **New Task Sequence**. Use the following settings for the New Task Sequence Wizard: - 1. Task sequence ID: REFW10X64-001 - 2. Task sequence name: Windows 10 Enterprise x64 RTM Default Image - 3. Task sequence comments: Reference Build - 4. Template: Standard Client Task Sequence - 5. Select OS: Windows 10 Enterprise x64 RTM Default Image - 6. Specify Product Key: Do not specify a product key at this time - 7. Full Name: Contoso - 8. Organization: Contoso - 9. Internet Explorer home page: http://www.contoso.com - 10. Admin Password: Do not specify an Administrator Password at this time +1. Using the Deployment Workbench in the MDT Build Lab deployment share, right-click **Task Sequences**, and create a new folder named **Windows 10**. +2. Expand the **Task Sequences** node, right-click the new **Windows 10** folder and select **New Task Sequence**. Use the following settings for the New Task Sequence Wizard: + 1. Task sequence ID: REFW10X64-001 + 2. Task sequence name: Windows 10 Enterprise x64 RTM Default Image + 3. Task sequence comments: Reference Build + 4. Template: Standard Client Task Sequence + 5. Select OS: Windows 10 Enterprise x64 RTM Default Image + 6. Specify Product Key: Do not specify a product key at this time + 7. Full Name: Contoso + 8. Organization: Contoso + 9. Internet Explorer home page: http://www.contoso.com + 10. Admin Password: Do not specify an Administrator Password at this time ### Edit the Windows 10 task sequence -The steps below walk you through the process of editing the Windows 10 reference image task sequence to include the actions required to update the reference image with the latest updates from WSUS, install roles and features, and utilities, and install Microsoft Office 2013. +The steps below walk you through the process of editing the Windows 10 reference image task sequence to include the actions required to update the reference image with the latest updates from WSUS, install roles and features, and utilities, and install Microsoft Office365 ProPlus x64. -1. In the Task Sequences / Windows 10 folder, right-click the Windows 10 Enterprise x64 RTM Default Image task sequence, and select Properties. +1. In the Task Sequences / Windows 10 folder, right-click the Windows 10 Enterprise x64 RTM Default Image task sequence, and select **Properties**. 2. On the **Task Sequence** tab, configure the Windows 10 Enterprise x64 RTM Default Image task sequence with the following settings: - 1. State Restore. Enable the Windows Update (Pre-Application Installation) action. - **Note**   - Enable an action by going to the Options tab and clearing the Disable this step check box. + 1. State Restore. Enable the Windows Update (Pre-Application Installation) action. + - **Note**: Enable an action by going to the Options tab and clearing the Disable this step check box. - 2. State Restore. Enable the Windows Update (Post-Application Installation) action. - 3. State Restore. Enable the Windows Update (Post-Application Installation) action. State Restore. After the **Tattoo** action, add a new **Group** action with the following setting: + 2. State Restore. Enable the Windows Update (Post-Application Installation) action. + 3. State Restore. After the **Tattoo** action, add a new **Group** action with the following setting: - Name: Custom Tasks (Pre-Windows Update) - 4. State Restore. After Windows Update (Post-Application Installation) action, rename Custom Tasks to Custom Tasks (Post-Windows Update). - **Note**   - The reason for adding the applications after the Tattoo action but before running Windows Update is simply to save time during the deployment. This way we can add all applications that will upgrade some of the built-in components and avoid unnecessary updating. - - 5. State Restore / Custom Tasks (Pre-Windows Update). Add a new Install Roles and Features action with the following settings: - 1. Name: Install - Microsoft NET Framework 3.5.1 - 2. Select the operating system for which roles are to be installed: Windows 10 - 3. Select the roles and features that should be installed: .NET Framework 3.5 (includes .NET 2.0 and 3.0) + 4. State Restore. After Windows Update (Post-Application Installation) action, rename Custom Tasks to Custom Tasks (Post-Windows Update). + - **Note**: The reason for adding the applications after the Tattoo action but before running Windows Update is simply to save time during the deployment. This way we can add all applications that will upgrade some of the built-in components and avoid unnecessary updating. + 5. State Restore / Custom Tasks (Pre-Windows Update). Add a new Install Roles and Features action with the following settings: + 1. Name: Install - Microsoft NET Framework 3.5.1 + 2. Select the operating system for which roles are to be installed: Windows 10 + 3. Select the roles and features that should be installed: .NET Framework 3.5 (includes .NET 2.0 and 3.0) >[!IMPORTANT] >This is probably the most important step when creating a reference image. Many applications need the .NET Framework, and we strongly recommend having it available in the image. The one thing that makes this different from other components is that .NET Framework 3.5.1 is not included in the WIM file. It is installed from the **Sources\\SxS** folder on the media, and that makes it more difficult to add after the image has been deployed. ![figure 7](../images/fig8-cust-tasks.png) - Figure 7. The task sequence after creating the Custom Tasks (Pre-Windows Update) group and adding the Install - Microsoft NET Framework 3.5.1 action. - - 6. State Restore - Custom Tasks (Pre-Windows Update). After the **Install - Microsoft NET Framework 3.5.1** action, add a new **Install Application** action with the following settings: - 1. Name: Install - Microsoft Visual C++ 2005 SP1 - x86 - 2. Install a Single Application: Install - Microsoft Visual C++ 2005 SP1 - x86-x64 - 7. Repeat the previous step (add a new **Install Application**) to add the following applications: - 1. Install - Microsoft Visual C++ 2005 SP1 - x64 - 2. Install - Microsoft Visual C++ 2008 SP1 - x86 - 3. Install - Microsoft Visual C++ 2008 SP1 - x64 - 4. Install - Microsoft Visual C++ 2010 SP1 - x86 - 5. Install - Microsoft Visual C++ 2010 SP1 - x64 - 6. Install - Microsoft Visual C++ 2012 Update 4 - x86 - 7. Install - Microsoft Visual C++ 2012 Update 4 - x64 - 8. Install - Microsoft Office 2013 Pro Plus - x86 - 8. After the Install - Microsoft Office 2013 Pro Plus - x86 action, add a new Restart computer action. -3. Click **OK**. + The task sequence after creating the Custom Tasks (Pre-Windows Update) group and adding the Install - Microsoft NET Framework 3.5.1 action. + 6. State Restore - Custom Tasks (Pre-Windows Update). After the **Install - Microsoft NET Framework 3.5.1** action, add a new **Install Application** action (selected from the **General** group) with the following settings: + 1. Name: Microsoft Visual C++ Redistributable 2019 - x86 + 2. Install a Single Application: browse to **Install - MSVC 2019 - x86** + 7. Repeat the previous steps (add a new **Install Application**) to add Microsoft Visual C++ Redistributable 2019 - x64 as well. +3. Click **OK**. ### Optional configuration: Add a suspend action @@ -339,15 +326,22 @@ The goal when creating a reference image is of course to automate everything. Bu ![figure 8](../images/fig8-suspend.png) -Figure 8. A task sequence with optional Suspend action (LTISuspend.wsf) added. +A task sequence with optional Suspend action (LTISuspend.wsf) added. ![figure 9](../images/fig9-resumetaskseq.png) -Figure 9. The Windows 10 desktop with the Resume Task Sequence shortcut. +The Windows 10 desktop with the Resume Task Sequence shortcut. ### Edit the Unattend.xml file for Windows 10 Enterprise -When using MDT, you don't need to edit the Unattend.xml file very often because most configurations are taken care of by MDT. However if, for example, you want to configure Internet Explorer 11 behavior, then you can edit the Unattend.xml for this. Editing the Unattend.xml for basic Internet Explorer settings is easy, but for more advanced settings, you will want to use Internet Explorer Administration Kit (IEAK). +>[!IMPORTANT] +>The current version of MDT (8456) has a known issue generating a catalog file for Windows 10, version 1903 X64 install.wim. You might see the error "Could not load file or assembly" in logs. As a temporary workaround: +>- Close the Deployment Workbench and install the [WSIM 1903 update](https://go.microsoft.com/fwlink/?linkid=2095334). This will update both files to version 10.0.18362.144. +>- Manually run imgmgr.exe (C:\Program Files (x86)\\Windows Kits\\10\\Assessment and Deployment Kit\\Deployment Tools\\WSIM\\imgmgr.exe). +>- Generate a catalog (Tools/Create Catalog) for the selected install.wim (ex: D:\\MDTBuildLab\\Operating Systems\\W10EX64RTM\\sources\\install.wim). +>- After manually creating the catalog file (ex: D:\\MDTBuildLab\\Operating Systems\\W10EX64RTM\\sources\\install_Windows 10 Enterprise.clg), open the Deployment Workbench and proceed to edit unattend.xml. + +When using MDT, you don't need to edit the Unattend.xml file very often because most configurations are taken care of by MDT. However if, for example, you want to configure Internet Explorer behavior, then you can edit the Unattend.xml for this. Editing the Unattend.xml for basic Internet Explorer settings is easy, but for more advanced settings, you will want to use the Internet Explorer Administration Kit (IEAK). >[!WARNING] >Do not use **SkipMachineOOBE** or **SkipUserOOBE** in your Unattend.xml file. These settings are deprecated and can have unintended effects if used. @@ -357,19 +351,20 @@ When using MDT, you don't need to edit the Unattend.xml file very often because Follow these steps to configure Internet Explorer settings in Unattend.xml for the Windows 10 Enterprise x64 RTM Default Image task sequence: -1. Using the Deployment Workbench, right-click the **Windows 10 Enterprise x64 RTM Default Image** task sequence and select **Properties**. -2. In the **OS Info** tab, click **Edit Unattend.xml**. MDT now generates a catalog file. This will take a few minutes, and then Windows System Image Manager (Windows SIM) will start. -3. In Windows SIM, expand the **4 specialize** node in the **Answer File** pane and select the amd64\_Microsoft-Windows-IE-InternetExplorer\_neutral entry. -4. In the **amd64\_Microsoft-Windows-IE-InternetExplorer\_neutral properties** window (right-hand window), set the following values: - - DisableDevTools: true -5. Save the Unattend.xml file, and close Windows SIM. -6. On the Windows 10 Enterprise x64 RTM Default Image Properties, click **OK**. +1. Using the Deployment Workbench, right-click the **Windows 10 Enterprise x64 RTM Default Image** task sequence and select **Properties**. +2. In the **OS Info** tab, click **Edit Unattend.xml**. MDT now generates a catalog file. This will take a few minutes, and then Windows System Image Manager (Windows SIM) will start. +3. In Windows SIM, expand the **4 specialize** node in the **Answer File** pane and select the amd64\_Microsoft-Windows-IE-InternetExplorer\_neutral entry. +4. In the **amd64\_Microsoft-Windows-IE-InternetExplorer\_neutral properties** window (right-hand window), set the following values: + - DisableDevTools: true +5. Save the Unattend.xml file, and close Windows SIM. + - Note: If errors are reported that certain display values are incorrect, you can ignore this or browse to **7oobeSystem\\amd64_Microsoft-Windows-Shell-Setup__neutral\\Display** and enter the following: ColorDepth 32, HorizontalResolution 1, RefreshRate 60, VerticalResolution 1. +6. On the Windows 10 Enterprise x64 RTM Default Image Properties, click **OK**. ![figure 10](../images/fig10-unattend.png) Figure 10. Windows System Image Manager with the Windows 10 Unattend.xml. -## Configure the MDT deployment share rules +## Configure the MDT deployment share rules Understanding rules is critical to successfully using MDT. Rules are configured using the Rules tab of the deployment share's properties. The Rules tab is essentially a shortcut to edit the CustomSettings.ini file that exists in the E:\\MDTBuildLab\\Control folder. This section discusses how to configure the MDT deployment share rules as part of your Windows 10 Enterprise deployment. From 7366d4bf829e5bb5d159ef5b9b97f8ab65169151 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 13 Aug 2019 13:08:26 -0700 Subject: [PATCH 012/358] draft --- .../create-a-windows-10-reference-image.md | 10 ++-- ...0-with-the-microsoft-deployment-toolkit.md | 56 +++++++++--------- windows/deployment/images/fig10-unattend.png | Bin 110335 -> 82793 bytes 3 files changed, 35 insertions(+), 31 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index d5935eb3fe..e0ae714207 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -360,16 +360,18 @@ Follow these steps to configure Internet Explorer settings in Unattend.xml for t - Note: If errors are reported that certain display values are incorrect, you can ignore this or browse to **7oobeSystem\\amd64_Microsoft-Windows-Shell-Setup__neutral\\Display** and enter the following: ColorDepth 32, HorizontalResolution 1, RefreshRate 60, VerticalResolution 1. 6. On the Windows 10 Enterprise x64 RTM Default Image Properties, click **OK**. -![figure 10](../images/fig10-unattend.png) + ![figure 10](../images/fig10-unattend.png) -Figure 10. Windows System Image Manager with the Windows 10 Unattend.xml. + Windows System Image Manager with the Windows 10 Unattend.xml. ## Configure the MDT deployment share rules -Understanding rules is critical to successfully using MDT. Rules are configured using the Rules tab of the deployment share's properties. The Rules tab is essentially a shortcut to edit the CustomSettings.ini file that exists in the E:\\MDTBuildLab\\Control folder. This section discusses how to configure the MDT deployment share rules as part of your Windows 10 Enterprise deployment. +Understanding rules is critical to successfully using MDT. Rules are configured using the **Rules** tab of the deployment share's properties. The **Rules** tab is essentially a shortcut to edit the **CustomSettings.ini** file that exists in the **D:\\MDTBuildLab\\Control** folder. This section discusses how to configure the MDT deployment share rules as part of your Windows 10 Enterprise deployment. ### MDT deployment share rules overview +-----stopping here for now----------- + In MDT, there are always two rule files: the CustomSettings.ini file and the Bootstrap.ini file. You can add almost any rule to either; however, the Bootstrap.ini file is copied from the Control folder to the boot image, so the boot image needs to be updated every time you change that file. For that reason, add only a minimal set of rules to Bootstrap.ini, such as which deployment server and share to connect to - the DEPLOYROOT value. Put the other rules in CustomSettings.ini because that file is updated immediately when you click OK. By taking the following steps, you will configure the rules for the MDT Build Lab deployment share: 1. Using the Deployment Workbench, right-click the **MDT Build Lab deployment share** and select **Properties**. @@ -382,7 +384,7 @@ For that reason, add only a minimal set of rules to Bootstrap.ini, such as which UserDataLocation=NONE DoCapture=YES OSInstall=Y - AdminPassword=P@ssw0rd + AdminPassword=pass@word3 TimeZoneName=Pacific Standard Time JoinWorkgroup=WORKGROUP HideShell=YES diff --git a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md index e9f0d1b105..1e1849457b 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md @@ -21,21 +21,36 @@ ms.topic: article **Applies to** - Windows 10 -This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT). +The topics in this guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT). A summary of each topic is provided in the table below. Complete each of the topics below in the order they are listed. Informational topics are optional, but can provide helpful information so you should probably read them. -To download the latest version of MDT, visit the [MDT resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117). +| Topic | Description | Required / optional | +| :--- | :--- | :--- | +| [Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) | An overview of MDT. | Optional | +| [Deploying Windows 10 with MDT](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) | (This topic). A description of topics in this guide and the overall lab infrastructure. | Optional | +| [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) | Installation of MDT. | Required | +| [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) | Create a deployment share, configure rules and settings, and import all the applications and operating system files required to build a Windows 10 reference image. | Required | +| [Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) | Take a reference image for Windows 10 and deploy that image to your environment using MDT. | Required | +| [Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) | Replicate your Windows 10 deployment shares to facilitate the deployment of Windows 10 in remote or branch locations. | Optional | +| [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) | Use MDT Lite Touch Installation (LTI) to upgrade a Windows 7 computer to a Windows 10 computer using the computer refresh process. | Required | +| [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) | Use MDT Lite Touch Installation (LTI) to replace the a Windows 7 computer with a Windows 10 computer using the replace process. | Required | +| [Perform an in-place upgrade to Windows 10 with MDT](upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md) | Use an MDT task sequence to completely automate the in-place upgrade process. | Required | +| [Configure MDT settings](configure-mdt-settings.md) | Learn about configuring MDT customizations for your environment. | Optional | + +## In this topic + +- [What is MDT?](#what-is-mdt) provides a brief overview of MDT. +- [The proof of concept environment](#proof-of-concept-environment) used in this guide is described. +- [Sample files](#sample-files) are provided to help you put the information you learn into practice more quickly. + +## What is MDT? MDT is a unified collection of tools, processes, and guidance for automating desktop and server deployment. In addition to reducing deployment time and standardizing desktop and server images, MDT enables you to more easily manage security and ongoing configurations. MDT builds on top of the core deployment tools in the Windows Assessment and Deployment Kit (Windows ADK) with additional guidance and features designed to reduce the complexity and time required for deployment in an enterprise environment. MDT supports the deployment of Windows 10, as well as Windows 7, Windows 8.1, and Windows Server. It also includes support for zero-touch installation (ZTI) with Microsoft System Center Configuration Manager. -See [Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) for an overview of MDT, including a description of many of the key features and options. A list of components in MDT that support Lite Touch Installation (LTI) is also provided. +See [Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) for more details, including a description of many of the key features and options available in MDT. A list of components that support Lite Touch Installation (LTI) is also provided. -## In this guide - -- [The proof of concept environment](#proof-of-concept-environment) used in this guide is described. -- [Step by step procedures](#deploy-windows-10-with-mdt) are provided to guide you through several deployment scenarios. -- [Sample files](#sample-files) are provided to help you put the information you learn into practice more quickly. +To download the latest version of MDT, visit the [MDT resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117). ## Proof-of-concept environment @@ -45,6 +60,12 @@ For the purposes of this guide we will use the following servers and client mach DC01 is a domain controller; the other servers and client machines are members of the domain contoso.com for the fictitious Contoso Corporation. +### Domain credentials + +**Active Directory domain name**: contoso.com +**Domain administrator username**: admin +**Domain administrator password**: pass@word3 + ### Server details - **DC01.** A computer running Windows Server 2012 R2, fully patched with the latest security updates, and configured as an Active Directory Domain Controller, DNS Server, and (optionally) DHCP Server for the contoso.com domain. @@ -78,25 +99,6 @@ For this lab, all server and client computers are on the same subnet. This is no ![figure 2](../images/mdt-01-fig02.jpg) -The organizational unit (OU) structure used in this guide. - -### Deploy Windows 10 with MDT - -When you are ready to try deploying Windows 10 with MDT, complete each of the topics below in the order they are listed. - -| Topic | Description | Required / optional | -| :--- | :--- | :--- | -| [Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) | An overview of MDT. | Optional | -| [Deploying Windows 10 with MDT](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) | (This topic). A description of topics in this guide and the overall lab infrastructure. | Optional | -| [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) | Installation of MDT. | Required | -| [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) | Create a deployment share, configure rules and settings, and import all the applications and operating system files required to build a Windows 10 reference image. | Required | -| [Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) | Take a reference image for Windows 10 and deploy that image to your environment using MDT. | Required | -| [Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) | Replicate your Windows 10 deployment shares to facilitate the deployment of Windows 10 in remote or branch locations. | Optional | -| [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) | Use MDT Lite Touch Installation (LTI) to upgrade a Windows 7 computer to a Windows 10 computer using the computer refresh process. | Required | -| [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) | Use MDT Lite Touch Installation (LTI) to replace the a Windows 7 computer with a Windows 10 computer using the replace process. | Required | -| [Perform an in-place upgrade to Windows 10 with MDT](upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md) | Use an MDT task sequence to completely automate the in-place upgrade process. | Required | -| [Configure MDT settings](configure-mdt-settings.md) | Learn about configuring MDT customizations for your environment. | Optional | - ## Sample files In order to help you put the information you learn into practice more quickly, we recommend that you download a small set of sample files for the fictitious Contoso Corporation: diff --git a/windows/deployment/images/fig10-unattend.png b/windows/deployment/images/fig10-unattend.png index a9d2bc16df9ad8b522d955f768aac5e2c3751b27..54f0b0f86f5cb7e39aca2aecf717e1fdf57fe89c 100644 GIT binary patch literal 82793 zcma&N1zc0_`!`OPbO^!-MYgT zjavTqiEsU%@ALeAd!5BOXFI#^bJhELU)LS`z(|LIj+>5zgoHu&zV<^B5(+9367tJ5 z#8;AM5>X?>H&Wk+I=4w`#sJ&I9SUbHLoE`LI>;rg9VKy}*6aQgUlJ0={y(0iFwYMT zBqW4VU2QGXSJrzt+78~kuSMvVEuQ)Z?j9(ruiA`vWCc!pT0@+z7nT$hq=#QDES(z2 zAa_IG1kF2UWDI~d1{VDG`BD$Y3GJDY4Y5dwd0vscvi8?T4DQ!kjoZ6q;LuXl!R z_Eh5F7C{2^VSj&zCgRd<8uGlmH01w0U~5ThSI|IXNAi!qV0M?dO7D01>c9QSLntbI z>{=A*zlKpAB|GtCkH&7L{cOKrdD*({bl%P0I$-Ig-*VvQBtLGFe=_@)+jpPQ2~YNa zjHaybr@{X9vITi;3Mw+Wo_3mBJ0}(EIhRzexz0P`81=UGbW0cH#;70h z$Cc~5lYb1`_6!kdaVnvX8lDl`tied^T%^TsgZfd@YtZ~Np6^K5?ss40C>R4%N9k{> zL-kV7{f%=E+}-wNw}(C>kU6;g?jkVHn(LeWJ=nd*{o~oIp`VAU+~&6%aRi>mJyIMN z!8tQ26L9>JRO?d^Q4F`*+TP4xwAKqog6+ zIA0OqRYu5#AdZbyUhc3jT`ao!VbskUz=$=mokRYDZcKZ(iN}v(xF|D4?*UOoE}ZnZ zyu#Hy!51nRhMiop6Kd%)8#>A`(fy3R-4E+|f~vQ<9*6l~X>yf}-gC0+p}_Bmvj^FP z%aTN_Jo}WU*~#*`{%ZRZF0T{xcf{zMcwzdEkd-^H4@MzdUlo_jm&Omvovl?}k`!Mo z8P4p#O3@$;9Zrnn*1-j7ok80XeS&_&`BnH&zPr(IhM7D(8g zOAk7M($>lAT~-O-dLz;|+_OmJH8y9aqxeTsJx*8QP85wze85k!d-nnjk9?O^YHL2! zKJ+l8zSopMkb2%&V!=>gQF=1od>HX^+NnEHt03pp4Ud)!sm@%!;D#1;9lE->C2K&d(YbO0F&xd{_QSXAMtfzIPk|4ZbiUowKS1!*=Mbr#lca*pB*X>8Zs?07~9cjtAK%(I}) zRzdf8r66DD{t$cO#iuNd+Rw#VZdotf?u&V1)J1nsyhZ81%dR^Y%T;(SFI1e9MA**M zWod?J%+;Vbg1&0D&-&Y~lx09N)5t(w$8{{^*Y~j}r|Xd+5OsZ3>tHwyd4K<1l|Y1p zL*7UHM&%{Nj9gRYL|WeHIgOY?eQ>k;nA3)H?Y7%?+DYb1sbF9O zT6O6xJu6g!J0)>wTwj%gpD0U}+gw|cO;%j5E~+C@gC@08r<{xvX^?KmsjdKmks!Sq zVLr%@&?MrzdJxih{A6tDux_($qg2q&1b_JesfH}XG^#u` z1OKR|Q*63tymi@rqcrczDkVj4%{5|>e75i=+%5n043;ju!{sPFPbRDJaJjjkh8)y+ zE_|YnVXR(4aCH*!)Ek_%fIs4LWvDK z^h_{tzCf;y!>W9j%;q8ej!U5A*o)vOgA-T3#rLD1y0a?At?#L3x23<#JiW;c0_VPP z+gY9(94{MKyWMPZOiG*$F$VoP8-DeGOlzQ$0jR@&7R%jhA7oRge;D$`eLau-%mW<$ z^Hg2`unS}DFh|x$LKD$io+U}0V#j8SX4`TS-nYgNmhoSIoTHUoR+1GPES|W#Ay8kj z5)LuE$bQ`rLGCtAskE&rL?0TJca{DNjt9+3Irw?I&;~gHkp{i0?!Y&i2ET6$T~}<; zsFhp*VU4lAsrC6xw|$pVy-kt6fhRk%`)-bs(IMhbCG7;ZEVmC^j26b8Sn1bRUvcku)pWTS8V;Cz!+)%EijVX$4&xMHW zSY+pPh!{j94uqDt-}7%EV>bZ}>F|7MLqCsz3X^ru-?-HKAyEu2o`jo$_1YPZe7C+23B|G-GSjP{XXYKK(}dl|yWDI;bIHobx_b}>@_ z=7;S@m!#>jUWact)*}&P;rg{*@1z$lxN)QQhZ6y3fCtF&^gls~7W3ZqdCyQ5W~T?* zY#wP}AKF{b(?$r)zIp0pS77xwgtK*)wHD@+|EQm56OK$o?H~+9uKd z8y=+#{`<{%RU24Qb&2k>n0}KTV)RIPgZ55sD0HA^Eg%7* zYk4uBkd!nQXK!!cx^aH~szzB(j&vh6B_*YGFznn$dw)qM#O zkc0u`s!Vk%RIUNyT_6&2%8-e*#8XQL<#=~cu=pc!v2=hS@aw(Fwe=euMiS-~*HS|Y zOLP>zZi+*~#UYob8DBupt!l0(EL@X!oI>GzbnvKXm zPm%gsb5RxBZhGw~!E-jlr(qYqH4ksujHH{EgHec6t`BDP$;>(#ypCQiHI{~AM9suY=y;h_EzY0u}cq^*HNTE~EPAb|_0_JE}>M$=fqlIY4 z-*VuOdNyrcJV>0zhk3WlRM^pnm(r2iQjf>jK8LZ4P=B^n27MbGUz1B?NH3NmU=uR5Y1zP)^;sQsE<7WK z)V>2~AvJYBaBw0mp!b=zvbvm+$!f8DZ}_GXb%8w~hE7L4=|2CXIDjORZ_iK&%(Ad# z&Nm70B^#R_o5-4&UV7M?fC7JXPleXL^D?dBpdMNUTnBl5Qd1ry&80;R%WFKkHS_X4 zM8vR_b=2U~VQ|fmKTKy>UR})bUW?=c*RR*Dd?wxJS4o?mp535c6sm#l)}MSbJRq+K zDEXps#YPaESex|Q_i{>T49+>nB*lK?r%ya>q5!6$U} zDxB`EQq}V&Dm{AXf4!Dsvx%Tn>TWs~VsCTDxu3!tFmim0_t#2bf`?)HEI(u1S8zLP zln3I3FNf<_aQ(BWZ?M&;<6Kbwn=c3Jg8~yAqJ|tLv<(_(%-@{qSRmP0kR-38zY}EwO+s`POgk%3egoUe&!ljb-UD?@excScq9Zy zdh(dv9g<*}xzeVh;Mi0=QfFKzxZutBf*6MLJ!IYa_E%QiQ-^6`QLDKbVlY8L)*guW z(K!D2_&Pz0=L&x@YX-lVxl7StctZ!s)}b$kh4qv9T=$R?=4+}Db`>F|igEeEWCCMP zOal3a^4$bH)wk79zTv*CF01CBFtoQzGb7d)jYt~Kbv5p<(wz`>E!H+5e)RWoHl zbYDKi3GQp0rr-si4`7eEZ@ljPpeLQ5ecS;{E2 z;+bxNJ(%_GBS}O}>mc49e34T@|I#;A(a=U+oqUJC^CbwN#yC;837MEZHZEclV#6kx zDrY7P%}@*}7gNkTGQJmQ1HAHGk?h4%P-9G32Yrqn-|Fq6zyZSader6IyGHrMy{|lB z5a?B;Zb%7caFFPIl@|G9YAZEx5*q9)qrWy<47h#azeKUf`aMpz$6t`!JIpnT>f$ti z-(2~;I?1a?<8|(bb3mTjnBv*CTz0PL6lzV$cwLk?Z_Q5N;_E35^#t13vTt|)WkqA*FYbqYu)?eSaK>H_(=iKA@Cqr@c|H~ltm?t43?~YUpR8YA9 z^6jMyDY)VL?*Ld5E0uVfp`Sm9=_DAFCSQB$%juS z?_oeeLk|?U(dLjTuVedcZq<7~Zcv-OOO$<(uc|ne^*aT2Q_*Q%HSbYJAEvgdV0tOk zu1A)*R1qV9Eq^6rvYLoZ{t5~BX_sq8543;ln-*if z1WJy&{%d{kuGKG~!m8TQd70`hJ(J?QNCv#^%j_Y0K|n6k)ar)6>LnjUVVKOZ1B6-M;}=mN3b@#cVk~zF~3VZp--F3>vzwwZqlCfIpJ7jYg_|2 zz7<{0G+|mdasrufFw>4B9waOuPBF+ZOlhyPClVv#*M7A}@qP#{jK!7W=j$wJ2$VqH zb}-6Sc1DtGGXlPY}ObMKDZUoP*DSZqsy)cP|Z{}GGH?#c51bt)6tH&2Yi?9XNB zbEP0quaOGbBhS}(s2|1>=2{@H`F1%l`{T4wHdkgDgc?&ZcmheNE(a1SWF|OjGqygk zP&v>xNt!e(ye|ms+M>kn1j4F!4+KO$#{+yUoinN^Fxci{bF+2=nvY46N+Uf;+%(2r(qP;lXRp_ z>lCEWTfHA?YXYGm4Qsn!US{Y7J^*7W(&GBH*<_}{=n=wg&Tfr9&R3a9MtLQAvBTa4 zQZk!7DL+VVnsns-Ue#SK$I^v02HbwcV&JU~Q?hZ58_@YVZ4-?4YjcN_Fno*W7zRw} zTdu#OIxQV?9038ce~?cO(H0_a-ql5Nt>*!9itJZmF3-B8y8Q{FXv1s7OEqFC)k^CTF*cQ~0=Yqq`W12hvUcTJ6K zuZ!Ez@%`V3N0y6H^{qu1kcT@ckdtZ*a{(+sLQ^^EPjjHJcqBj*Z~bDD41KVV(=&cm zmve(7AmYxtnEd?ludg&V7V>?@e;DAGNuJ%aS zZ_f!P>+Hf_?y<8=Zpd!;)Giz4T0M5oeQfr z2b-*q}TTc1^0(harMQ5LUkHF4N%nsw?!a+FkrAA0(6KN76iGOwF z-PTd>!uB|!w|3f)2U_g&QZS@+vw8bB=a9BY%#h4e?QUKfB#8POvR@^S@GzTVg2}jZVl{Na2uLD5%sE>Pv$ z-L;#&7r!LrHJaXd;H0faNY8@SnYQO`-uV+isOj8*ix<}}eo(TAk36S6g~yRi#)S>q z=pd*1TC8G~Y(qD^&t((SW~R-9LZJsi8C!#c%nXm>O>4Z~n)8**oM5@FPG6^KWCN~o zJ{1B&4VGR}O+&;7^{osv&TlkOs1L*od%&2K~0aR~D& zpwwUa$bW#r|07kwX|g~4J<=fSb-D>04xilI;y=ZzFNa3scb0GPs&^&fo5%6?Z4Lxo z@iawW*;C54y>D77^WAZgJz(98&ePb>b-xT4Cv1+%HZN?M7t6_x*Fwl^tCaG_-}Gs= z0O9Nlu3!z^=R{LAIlUAnf*7t3PN4I+aLGg~;;DC(cdulB%q`falY=|ICbh8P@nT{$}6oub>Ek><}0?J zZr_3v+?hha{ql*1`31jIC{?OA30j;!`E@2d+g06!c+_X=x33<)ir8A;-Lml#uzr=7 zbE7_QZ2N+|&BrE-iVuAgy*R`FD;CMlkbj+u9_;A&MV|V2>hh+2+&$(M4aXt9 zOYP&^i%x>{sTyU7o*el{ZEw2p(}b{ERcd7SxiT6xPM{Ata0Yq~d@Fw)3hnA{zJK!v zW=mhaTYqLRSNLP93$~_q0@!^@F3t$=w?Ff1Lwvr$z}p!+c5o4hMtRnhD3+JCJ@M-f2iRWEaxQnt` zqgt+(J*lGRXvjoG3ePr1-KONQqgTrv4lV|twu0{yj@#W_{9Z*fdP9st&O^}E`8Fjs z*g%$NE%49{BnlY%k~fh--DnfP*Im*b5*=gj%Gh$SS#ScKyd`5~QW5-~-0{hj%`G60 z=rhe$aZg-xCG~Z$CM^pK0L>fHz?yCq;ciyh{!Pf_n;df{Zi3OHWWI3J>cMMNQy!)0uFF0%M1sb4z_&W$V71;eBKy4b-#Ql!Q7;Y8q$HXVg(MJZ#Wx zJ1)`9#J_l#|7!yMlLE3b<(U5_+%t3oIt{VTF2E0wFhJ-{0uzW3fRPaZD(_wx))J-u zXhT48ZXp81O+(hHQ5bcwVe@5RjK>x!>S-p+Y`_OuudmBjvp*Pl9bqVN$1+%PtK%VE zZqduzO4N*?s&gyi@bP!iQyUJHukm*rU7tKzi#?S&Y3BsQ8cj)5VuyB`y@$G3fZfEovsZr&5wm#OZ- z96tAWe@q&A&?-OLRqF%?=he(A4s_{Tipw_yaNu^z@ww;$=dF}$khiPFs6i+mAO#L{ zIZ8a7aD^(T@bRhL1{_WstTW7GIn_}a5Y{yDYXBT$^(&7A>rMYWfa*QaQ?x4TVmvsh ztK%I^=kslQ#K9Xn-x58=)6YU-XaJ+j4~2&pauZfanEb+P6JU+ADfL1Sgq=Zmv-THMkN{nIz)t-5l?b}q=Q zus6<@j;&BoAVI=!uJSH2^zG!N`4(dODt)8g|3ELfMd*0BrjWlbq&W2fP+_Vc#KU=2 zjkwN{P_$Ir-kbUh+D^I#@hXkm;EOq%Vu}2VDDu`s)cQD9!wS1YKRM|E$UK?w#I5Dc zM)PTozj+egSrRZ`O!0I)-ZA^PhN{B30PY)zaM`L8R5KrB%7>59C}Trmneeo@ImmJe z6Lr8u0A5BNwQIgt{L4PKR7Km9QQtO%2{-3#RLoJ!G$qnsJ0*e(n9c~@klD^PPh!n` zl|wGeLMp8M0V*G%Ij5#4K=jXCN93O!zJ}3S*xQAPg(q~p0sBRK+<5aoXG;c%%xV1n z!#KO<(~?P~X>MpTzJ8NnV6&iZ(C?SK)#HI055gz^WU8-CY2OC59uj^e>bS(c?HwL} zdYiE0Ot_?e`i+#EzZHUS+dSKD+jQ*gzsfCT7NcIyDSh5OIfFm-`1r}DcopGBWyZLo zZXAYrfNkvUW~0J#kT1eE7P$<)F`$HF{?aYD;R3zaR1dWp}0~9_QSPBAvd>a}aa&9`Fu^k?J!_Wv& z9IjY5etO9odyo_9~NV-mEEuv1Zx)8*+N*aSDd)d<+g^K;+3 zo|u?h@N36g+^oDPgQ+cmzC}PviY~Jtjob}(9BZ7NyI~tmjx_FyPMhRKIYS8^ZK%&I zD%Q$ctHGo39GJZcV#zty(eqpR|WyD(fYjq$MaUFfdwR4vpA&%ZTv z_SWTf+}8Q51-fz^E7A6nX%co8k{F6E2kHaiNHO%DGd@aTg#MwcPwqXZ0T+Z4M$Qoz zYm++Y*QaR#SivVw!?q~Scn#UkzVe}wARISj_{_CKvgo@~8m!#)xdT(ku1U9kfZ7ts zr1T2nySkx-vWjHf^2=9iSt|A3PG*s+Z5K~*F7i3v(&0< zFEdAn`z-&(m;aO9{7>R@B+$-qg+|&H9Uk&(@lRy09lAmQ5Zw^XWJj;F_h7)gWdx6O@hUKpE@9U0xHUKx@_yZ z7)!jM8MmbRIG!0366X>eVGX=--{c32xDQWKQn~>T8uK=$Ot=EP_bE`U?=1k!30Jz$ zKW+T6qj$5FVb#QGl(h54%fSw~ttnqXCf6@Co3Q{bmd86mxD^K@y7o@|rt8`&%ll=3 zbN9fyclfdH>x^lUB!l}I_1z|ZD-+fqy?6$wTHmdwpf2w-&%|0g+a!Gx1nh1Nt9R>W zbUiFAEQXe#t2oeFK718_RxbYUlHmHo@`lk7!K3?X(1tedqYEVDlDD^b{lW<;Vp{EUnl{+h?YZ$Q!inu<*G8;0EPdpBc zz`TqSe-FVtvi{^8Y88g5Ra3Ktc5mu#41S?ML+WZM-i56zV|}vp`tNdA59vjUFRV5m zi+)Nkz0ga}zDv6@0wQEV)p8vyr{#soCMIMtaz<(OYR_eLr(v^av}1xYC#z@(yN*kX z%Fs!YkF9lC#iX6IO&MLYUBYykFl;s*iz9<2d4MfJlHPHF?%fTum zQP3wFHWT@=lsR#zgc+MFd7oHbRt$n1Ayh{edpS&Z#LEE8ZQ>rJ#X#E$# zKRR`OOv|0-e6IY7e^v9afOd)yN) zLtTZaBrO&McpaT2H=pO|khc(YO5i#}2Fr>Ut;+(M9tINhgQ`>m1HxGyj@|c^T8Jj7 zer;1}P{HG4ssXdcQ{LjZ)LRfS(^qP#Ex|v6F~BiAD9M{Uga1m#5BgQpHE)wE7n%3; z0P=`gxo1=v{26JY52>Mwr^<$G6bX>qO;-+es=Vf|L5#2DT%)<4^W~?~%*}6`Um?#? ztOK+f`M;6V_Sec1eA+syymN=vjm6E+ExasUcV41XKsdIxm36wb+3|V&^CW4_F^NAB z|G#*z|DeRelx672iD+S(X|I3v(ce`#V!5dzwZc@~=g5H^Ogpy5^N7~LP}7pHtZsKcYBZ1L@!I=m^*sv;7S-Im~(iw?vQGry28`DK$vIzZPz7!a5iM39SG@fBt$pJV* zcS&00T6#y=L=5wdC+eXi?xS)UdA~!RObT?R>Y42v)_U=H*zoh$vKpGTBnFSn)Hc;- z7sKI!C4cCw-6xujxBsQ+`QLPwG%&cJkF=bkmi3jH^6V`wCQz_r_w`De^F>kWj{3Bf z@eToLX&WBmRafg9p^+u;>SzxX88ffDZ1k9>??E8G1w**Uzci%NTL?T~N9#F0T~zgYk*+%oQKV8X$Z<=(>~ok_qQQ&u@>x$K z{tV3pw%3_sWv-lumP5t#fIZ(QuE_KIU)NG#q7G`Qj<;g#?1qgD^j1VqXxV^Ogr81( zoSTaKiliA;PM^raIcR4Ur3IS|fyc^Xg8qv`m)SlT8fI627pbJvW>2o(zrzO;V(Ix3 zt@c9pw#bMo(=3y{%yBJ8Ti2KbPCyxgBEKtZ^IzD%|Eh_P?~#7wY|O&33yD^18w~y2 z80I%j-l8lyu=Hf}g0z$(-aAJLXCi8%uRk`5kj(Om6OeTkhANyV3lW6FG6d3xvs3~X zM3r7{t_B;c8-*o1o^J$()PSPMOfuH&Fjw%Er$_iw4si3ufMt%BNrj|26IErOJmWrH-FnyE`uk!UN43+{SLF^5@UpCIpaJxW;bGCF<02qn>tReUZ(hsJqUh3 zKJPrRe;Hf_I#z}n^8~938-8=ctstZ8xr_P&ixq}2OsO|Ur-(N0_-7XR&l3Ls;GDge z--L^?ohKMSS!R@x36wB*(a!HqcbsNj%d$-*S47??G2x?3hEZkKV^taDoppgq!-Ai~ z>J~mwzLp-%n~Asz?Dp3vNrxMcwbPcnTZL}EE!Ow#!p!sl;gUk#5^(WbL4idmtNd+< zhpY`Ma!u_9eJb+azbO9yQ;U$&^aem9x5*T5Wuc9jw zrDxxReb6t)C!qmCw6N%fUL@bo9v0btFHG9xj_Z)_b{86*yYy@Cz6R|I4vS2*02+Pm z`bW?7ta|EW`@)JJ3-k-p^njeql2zEO>sZil3Tow>uqu)srI!eH#c0)paen*!6`Tnx zSKbP;L*}A!Ao8M+Vkl`o>~eIV!)}DzT!yXnBl^Lg>+eG94l^=BGB(Ophm_67){(p4 ziq;t3&_azUl0)E4097clN%^my_04z>PO2o3k@r`Ci}$kqUJq)Gf*OCCvywurF(6Y| zoRhp)uFFk%u|(k zfRTYwjt*^^@*w!vS5DWNqQnB>~oQrSo@Z^afsCV&4L=>}Gm*U!T_TqJH00 zbq#_qbu1Zy_7{!DHO|=g=W(Lyr{|3Gn7tI#j+;zHqC2s1@tBt5wYkYJpAAE%DRds@ zdvN^MNRXM!p%sSV3>frDOmBJVP2|VUImC83vZiQ8F}2oI=W|-2nlS zQS+|VpB`+L-U{)&4(qIR-SvHI&<3r&(xz#@uh-tWsn`Akp)hRNyr-b>LSiqyZ2J3b zs-2L7&~Nt1c?plK&oi}V9x4aRotB0(El#7{ZTn3N4_%v=UrQ|cO&eA;I*Hobd3ni} z0l??K-a74WrfBW*yQSJbWv|sMy*&;jsHtQ28t#$2!t6JX)~&|NblsQf#@^UpXdXW* z&9J`V%9?s9?*sEg_u+>*;o+p{tzyVlB$Gx#06b(ShVq(d41|n@E4O6@dl_yWxXv-( z9#DG>N_z8Nr|F(JFnb2@ocaJa_u4kEpGU+d?K-*^WF3Tx9LIZLM9ONbd ztbx(AsIRTp{d|7e^(5~eK`jXG)U?ZEJ@bsqcZ1#VpdG@v*zmp#KBtQbeORy)ZY7WY zK8nIuhCKZwerRv6TE3O$95DInLe>MW9^l=xc?V=+TwrFWNmi0!-JY&-0G>}4r&h8k zc?|fVGn!xgMC@oFw5|HnC~7J7OQFK$&(}z)qpvDjwPu`lcS3(!ck6!M7VS;dROLiW z>hRy{ZBp&p%nuql&I?%18k(VRh$1y4Ug)g4{Q=p_Csze3$)8Si+rt>|)QL&3mULbN zbPyM!I8lbL!MnlT$Gvkb?Og&_d)s5kf9K4yztb8D#va2qoJoh*eR9o*V#5S3n0Qqj zb}q+=3RF^EhkXBaiQ?f#9gOeh?Xb$33%UNlTo0I8fP0aLCmS!IVP>9_x~bE+aN*#C z43)BzRnQg4s3szBZ5-LKAXD}$H$`cFG6Az{S56s< zeXr41N$nLcNV|1B(=5olBnE%p&OuJi2$1bPZF{-<9C7Q8*a95xxfMkUwa7}APR_8k zh#A; z^?c|3532X(0)3I+r2>U!GY}7dUTi1j9U{0QX5ah17v9ufOU6Cmnr#e~st)-G-;0+O zSPY1AIlS7=vE0)PV=hJ|Wzhio)|{I&g@nuGpR^`!4PQ5EZzxc)A3#lNz?0SdO z_#_SaOpNR&vCEVcVp?HhaBfvQO+KN=!{K8ehkt%l;I)!1{X=e{!#gCjHFpJ)dmH^d zLNHJK`ob*bRiQ$5V|++Wh82&C5(EgG=& z>~xG`{3dfKp!6E`VVk;|&)McwXqHnAd(-SA$UEZ$e$L^~IUce&X{hArPodo0HbJD`S+K>d;@SU88>+*k@nypWf9)GuwT<7tF z@T4l7Mp}S8UQ$`E=QtLZ;-q@IBF+7zAxj)+eW!Fd^!C@jAK1y3?=)juroO0>NC2`bK!qCT+9c^5G2ASyv!lHhddZ?KS47*Bfny+!Bf(b2E|=R|Bq z=d-gio$h!-%MZy6UpNLe%a~3UScty2`lb<&$ zq2ZdiL-wtc;Y+AVCq@e=;TE;YmM5-W?~&hz>G&V;?3rkXnTUvNe_spo``Gfvh+$E; zT%$|+GX0Km1Ls4sk0wE5AFisOdE8;4q-$35Y^tUqZ&%K&>m#AoSbiSPJ){icO2#6^ z=b_6N-rHC@|)e^6KqeOA8U9 zQOeQy+9XUrsL-KM|HbMNb&GxL&jUF!5qkI6I|7^SQf5Z>H~V_nKx!=eEP3Cyo%3DK zN^3Pj&#rO@H)--$VJzp(l$r;U?g`Q?q8=KsP~|E;=nUlLklq--!~0x;w_#ooj@9q3 zUfR(Y@wk08f`)wBob0gSVGMhGo30tZzbOm#YS_Uu$|qjGIS_UatH$k;Pa2y?{`t3s>0kxr11>jVytRoCGJR_MWD{v^9%t<=bfO&s; ziYaqckFs(uTyL(w1Qk^ zxglTF%R$+;`{suqavE6Z#^0SSJr~Nt!S{Q7PD5+&T{ut%E-_fkF`L1rH#foeHzM&@g$Es~{{czBcD4^AK8SH=t?aW?KS3bf zU~86-11lDYgg<2R%Lr|@imto|pUj7;T?iN&9e@q9?l=oBQoQ81l~2atp%Nbr?abc# zLcQ@W(qv?EhvLwHEibpk1A_Y6YkoOV)|T&T3uJ3c%5R5e0h3G)Wm3X*YSYk&t;+{p z4Iv^H!mdK+a4_U`){I9eq-Obu(W?EJ*8(#O^HVQZ_SPJ7Jp}~VWYLh5(Nct&amlAuzWm~>ZZv(;1GH0kor(6oxMG0t$PTz5-=>5!pePF3ox9q}2;7RqS38RAUy_1&H>Usi1}P#eI0Gsxq$9M!A7#lWf=^)ZOqp27j}j zOZ;7$?aOm_nL3(c9|6JCRs?OC>RE3wjswpl<%(&(i*?dwm7Z8K`09!cMcBf@k|8xb z9eIsCM${{(P-=S7ng4Gu+8)cw>H4>YZfw#)rhUhOAk}8z?MQMR*XKSFW#!k;vx+KQ z84H|@Za9KdHI%(%I*+#kT#vqTG!oEcovrw5DvRa?yDz%a>C9`1x}+M|*A-94=}{JX zYUda2vMC5DA^cQ4OCLz*6NWG$xwU5HLD=g*K>&&sTJYD zzHx|~Z!DIbwzWwv=753WP)j*xI&#*DcozZvle^cGd*(Q4zNBNQY$7~pU4$kwILPb8 ziLz=*BYS3IeM7X8TAL<0xJy=G-Aa=$jx5xQk#%Iam;$1Ph@sv2+6B<>yv9g_CE^%$ zixmnIUEk1nhK%tGIbn$x*LadDYo6$0m;hC}oYp?;dbh0XJ2fqiu7gjPTgo-51K78U zaqWo@1h89qd8lv14wHIfHBb^P%?C#Ha`Qa#li>%zgRjomzabT&Q?gr`#6hN_LwL55 zoIT5zMQTdp`PcoP-10hm`X=0iMRBtA&1XMhu)?F|`V25UIxo@UI_O66;030Vq%^8i&7#aiHoS2dA3d#WM$sjnGQyY)2RDz{5@uS zegcbT6gXm}CR#e&lc`+Lv+Rk;d^HV$L-CS|tIJmkyD&d17)~#eX~-iHG`$SkZ)M7V zg($3KKp(q(A+FA}Z^w6cbbh5FU$B-$;H|`xMswvCj(Ewl)nOhP`{jm|7ir;3P7;TV z$srP#ANTgek#KJc)8Ai_ycQNLAx+wdHHCJ(de9{{gHR-{3J`i6K-x}mXvF1JNwfBN zC*$nl{Ua%@hT!&tT0Uk=>Ev|zV`Ie7b5a(LHOi>lECK+>^)QMfL?uPGtiWlmhfaXx zrqCAW)jOsNv|FXtwC6&QDt6|DDH}3n5&t(2mx(f5@a+o=nk*nTXWhF8d&Un?T$0do zFLYYhtkiNBv|H&J22Cq0gD=v_LXKpSX`}Mz-&9e{r)0cyUZlKj6`DHmdHY}{4~I!w z@{}BzmDhV8NzW?D`}#J>mfD&$6&KA4+zv%2)}IFa5*gvYX+CDe6~iyIG9F2c55_Az z*jDD6Hn-Xf4l)V4Sr}bz*b1Kz%|3Aj^dB+P_Gan@_O@|lEr(u5330s)k=X*|tZ2IV z#0`{{Re){7l0XZdPo2w@lI`Cn`L0}N;DK@x!}%IJ^<(?h#@+C@i60(h zuFzsmAP;|iv@&gZnm-ADA$(l_OjGj3l8?Ee^P9!j9MnR%W@g^j?2n$awqVp8nHf~< z!NoT+4ydihi#K7chpKuSqt=7kTrJ8%^qH_r%N(Sd%eM*$;^9u?-V1jzE+%%+i!@Re zQiZG^ByJ3jHZ7+`9>Fizs@EEC+i_T3(*j+mclismrmUYLs$2GesEIp`9t#R7HeHoy(}Em|~40V%I<+rHmdc>-Ss_m)!&)oZs1~ z7OC$MbL72t--p(r?~htH^KagcJr~`)-hD1`D4Wc2X^K%dfSspHb_FA);nEk@vGSlP zX#wq@qeHn^7g%Af4YavA(spXZ#q8cfu%7ROjU$~mUouWHEy6nXgH>LQ2BN;5#vAex zlYXLY_Juv+WsW6-LAu8uowDS;%C6ZQhg`PlP9#FsbBe^o zBokMM)PX=^hdf9`iCIMmjzv5QEw_p&J3f|M9=fqBrlR1T;P3G{1#9mY!DwEld)aAN zFT5BAnqc;PLoTvk3#ixHXgm4m2xx zPeTqVy-PZpevkIU`?E_OI*^X1H!!iX4k|1wO*1fFge<)3ax#ogJdJK2 zY!BQIiHp2~^zgCZn)oYxijYFxiRp)pV6rAAKj@&a{h&=kLlK&qMp_@CN%n$vcD^0ga>VUK$)UhHDSyY4NJ+xXo+~?HErjf$k?Nu71=gMxu|7lZ0FUKK zj0*RbzA1)DF=_P07^$51zC}eI5|Ycx-7i{YcjqyEVJnuwSeIXtuUoyOJAJ=`%kN0w zqnmu@V_h$_E$jpu-`%z0O2)Cl&XCkWYEM3j&Q>286cK~O101Zf2Xq`QZbke2QN z=|&oc8SZ;{9-rs)`F+3lu6x)0gSBw+_WeF*pM75Ywd3q_Y4DkyB!Z*lWYTXAi9aJr zaGcceM4|jo_ljBdvoBhIh0YQepw=+^l> zL&-oP7qM`iEG2Ge9Fj;Fjg8MaaEA-ul9h;n+H}6^lo1SQaygAD^Z^!Z`KWKFfXBOvqppLo(~x8`b- zjRLkw>tOBiE4ub#$>kR1t$`*-F??TXi7(^lcv4iDuftXFjb7fC5CWXkD))VlFRzgi z9Xq$_YTxC$-b?*vpqisBGLR?NFJy9HTO~h6-?QI$`HkM`ZF`X0nb57)=AE45VYKMd zI02QWi9SLmPN&Et}b`g}nbWFI4xgLnb&m+Q(GNw>^oqBe!j zv9kwREByvA-1 z!KIUVoN+6F=@sJc;NWz_^1#BLzABo53~qT~>nRMZll+00+-7E`Vq*3Wuv#Y8tQ#txb9`xD3Uvj}*JKZI5}9zg*W=HqywX-_!o!UZ_q z=R@RWhYEmKwWE*Lh0M?UN6Iqaf^@yXq9kDJU{|f9?CUib%d9x>A3e-uMt2$H{Cp>n z1Szkoka%vIX;)mjms&hXj^5N6aqAl-1ou5Df7fm~#hMRVaxLMP$0(lgj1t z^Y4SDB<9bXw~brZT^-|Xdvb`sR=C}K+y2FSu?YZT&j6kQgEj19Zd(g^+hsa{!z49& zFHh9?MVi=3@R01G7h|Lyae@WH-Q^lMOPBEOo=A|$CcBRw>?+Ly&NH)4ue8xD z)282vnE>)E8bgo1363pG)BR)x8K`e5){RI?3EKl_$F~KlV6r4Y2;<4vIpfJs29Cj@ z`goN>Y2e^GdtVA3jvW6Z)d4-)kIzxtUsuNEpB$JL&D441)BUCSw}OTs@h^I!k_20> zi8>oF{DP{8NyxLZKKrK4^)&B8-|qJw<=}UU!k~j5pmOMAKeMdo49;-8Ydg-|KGwSo zeH@VZ$L8n3F4Va_;g5pPzL5?-;*^4m%~vrT9e;wU?SIEFF6EhW$W$^V$(G-kYtF-ue0ES93LgB{w>%cE6@vaCv z+RF23wZ7u8td%x~v-yy#h)e@9n3_s8$~jQ9wS`htS(`XA`GiOcO!DTez7WAC- zCh)sWx|)nOuLNHuX5O^u#kJurj%-N`Vl-`QFl`j<$UNBc%6@LvJ;szX{cAek!l0v= z^~;zBhTN|{UJ?2G!)$J+$Bz$8d9P_^Y_~RBzXK<8UJ5WIFU`M7<#1d4GLOKKW`MS1 z#b!PH1)N!lO2LyewRn-({p$Y5QENNv0j0FWOrka^EOX?$?Nfu){d*p6@C|E$e&%W7 z8%SQ&tt|T=E}Q}9DSv;rM3+g~0fRg{mSZV?pL5TE19E`0aVhbXvjs^%s$Ae}2K$kr zxytBFK6J-xa>hSOER$7;-+<)A&}(zbi;vM`t;A*9PL}9W?k6h$OjGGH=d*mtoBVlu z$$+bh6PBsCdg3sabJSA3ntm`G_FNXDgQ;y)16~(AfL}8)OR~C1tkxF}oa(;XI*-2% z4(_o4CkGSp-rj$DH|7D><^@C!{#IRf#W7{OCtIH z>C3>*@W=%Gm$0sh$zJ_QQ5!+eCk=!4ae`R0wGnJiF9xD}xa$eq_6avfx9!KDOsxl) zw8?;grKx{QF70V!s~=Ny83G88Sm|;%@^4`kJuZEko!QP=7;xwWMCta;T1ttcB4dWv zz6-37xFyAeY4s}gloBQ-f?7fssdGp=JHpt(Q*Le+g$~lj`4yh@LKn^5rDL=h74&j; zee-0R`xlxV0Bqjdv^o%uXSoJUpIbIK9464xock_$PqOyASjtu7e`@x;dl#`EEdIIS zHKUUO{%}EbSFt{~gDv&_LOzT*cjmh$Uf3o-oVmoPR@l-lVlcy!&Z9gr5p{Y`Si-9} z_k|5Mau&KfpB5Zyp;agi0-|b$+#gT{#is|{?q6C;m;St z)gE(=tJ}&5RKET^#(uRNdxM`d^Bk_bTw;g;?fV794WQfj&Izgo0!|(W_+=(}G zP;Sw^vmn?v0j7Jr-~W+#*;mUTL!>eee@=E#xN=|buNg!GGw4Zp^i}5354rJZI|`hG zmXkRoM`hnH`PoZaz{|acf2y8lVh`;RYD&>h7Yne;h3QI?ue?fp+bbz~=|4J4a@lW< z2?Y{^cN-3(`|m$Yinc#bIE6YW=Tzs1#L{q!2~ zgl%JKjrzpHc=9tnK~g2=@ZOTRPl(b=yUM-ZJ$CrKjj*FJmmy)^0 z`L%u`Eeik6&8hL|V?X%*Pm{E-pTQ#AT@gwwbmC8vn|R3wW9hB$<9|5tfFK3rA5|QX ziig)(sbudOB>gt+cfg)jaxlwXRyiOrHe{aDU6W^WX8z)1E>bIJVi3YI@e{UP>7_Nz zUFCimb6G`vfy}r($)HDH7Ypz+)=ySx4-onqz80u-fNVbMgY^#xr_+8~Kzu)~dC07f zo~|P}n5*mEv#LVr<69+`gY-0){ccrmu8Hb8zjjVB z(OV$NO*_6gUn$v!Z=*kB%(N(xgSRey$uOO#{OQ&4dy(5+a59%Bix2n4yU##Xs+buc z+=#(q%5lui?obgj=VZzxT!L8-6mxkn#5DPsf0@%&PJ~4VyOqXtTM?O40_=7f?uYzK z5acVAzfrs%d@<;cqApDpCwmenYZ>r~ssr|C#Sbq;*~+(kuOW8KpW2j&yraC3-n%g! zv-Neu&7-#Jt{>H^)3(zKvt+%T0E3@jFQdmcd$`ZHl^A_xMA`<`L*PniBc${Aw>iXe zWa(IMWv;pCaC$F#&pyn}ua@ZsdSoeHVyUKItjpeQ?NR6}KZ}0v$ju@~Ur+ndQmuhq z1wWICI-r#LU}D|!{MC(BjlsQx_vZg@TR-IS`V63wD`*t2pX^b+fR?x-l1zIBi_sma zg{qJ(D@_;DINH^SFYoN1ljFUSt=|j2g zbHrVMMl_OJ%@+NHF2d!y)uX1U6j%IefoZY zC8x8EwLAG*{O>ty)fZ8B^mEJwzlOM>Ck{^pt^?R+0^bXc!2WTye;Sc5vs-=Vq$O&b z@J>!gP(w|!u1U2yRx_E4bu-dq%XSx{w|@&|7HnvA7;wg&BU+U2OesHK3rDd3uH|=H zGS3td7DEgne){;`V9Y<9j+5|2&D_2(8FkKf@Vr*W*>7kGmSO4_wPks#RV@3&1LydD zfK*doDZ<#rXf?Tq{=EM#PhU=X_Yd)ydw$DN_k@lGw}kiWHJN*-E)~X=_k~Ng_p8pm ze+aZS2?1fRn)%jdpj;>SpfB^ciOjj>d$j-LZK`-g4s9G*!e@k(TYPy^02Vj1o|oz5 zv%c%5bZ534>A!`)`)IWsRIF za?>w>LDj#haLyklYu%;`0J(kqz|L&Klx1l)G5}`0irm$7vsyvc&zR4aHqRxae63(j z!Y7B#mL1X(chhDx43n1fPeijc^^Tmh+iIWU6qCZ$>UYoYd)7K8w46~+|ALXC71;C) z>FH9*r^J$*G9#0kI$a)8Uf8WwKkBiIbty_q#q*2vD6D8|Sr@iqH!NB|Q~o;3))^g? zpLq;BzPMX6XB2QR1z}a;J?2Lvcsy#DoR#7b^R;uak$&GvI zw2v)Ly%YdHlhy$8@_5q91MU;b7S*mKvHwjaAU=BH!IvT5!!6%CUeH}>B-5q-+acd| z*SJSUY8!jq6EI4@`cmd6;nL|TWPXG8mLuEoTxZ7>61K3eJ$-X~4*BxqR#&{8=W9p# z4;dP&`tVP7W|QeL+(3gt%bcC7Z~>wi?U&Ul920)>J$ky^Tc>}@L5l6L^xFRDQV8=I zy?_m*ado>h{VwT&6rj#H`pa4x@Yug(Z9Dg3xA0Ew4Rxl^I*Um2Lob7R<8LPlD5lhF z1Lu-)DABC=GNn|#gBl5U1(iqkdh7UB;U_UQ!$r~G2`zRKj(=FF!CY1yE=3&84+0)- z9%Yvo4moLTh|z&f(cG^*>H3)u?P!vJ#(K|wQZpi^$%CsShgAb^t7#OO7s|@Pmok1| z$Yl1pFp+w6kMbYii^@_BIWNC({3BmW|AdKS&FXa5{(q5qL`!3R=7drW@|ODWr%VD` zghq`{^S6VHzog8U>d~^uU(+d7F*0wc*kq;>mWa1&-4TxVTzRbGeN}ca0tbwEkzE%2 z@UNTv78nsr^3orME4?LBg*`yhO-v_vG7PEydMd(VXvswIUK< z>?XPsznw{WFS^P1M?_ht9F+c`U$&EC+ZfptsG>&F{{$M!ovH$?+>?ko0On+y-2QRr z@^|CZ+-jWuEd+j?QXq;xW0r5R=}ad1(sx(&>#APwyp!T$+4H}oe1sQ}U~iaWsln!^ zTC8Ea>Ti>7JH64b@7s5%0h^iMwSLo$SX8}&X9veupa0TgOKE27$HwOMQ7a2R0pC4Y zzsroCQXA+OH_`R)3Qb9E!ijDmlRWy8i)EL+LSzyfFQbZ{y*;R(&`=OMbL;+BwBM;U z)?f>5FZlybgVlWPx^7dDHd-9qCOljShq0pe!fF~MmxpY->EP{m49ir^eLN9wQ1hs# zpSp?%2TsLG^Twp}C0Y-Z7-b6AvklgQOQI`Y?<_i2xx! zoEGh~i5)9|SXa4TlJ8dUz-@L4f1?EI*uS0ha1@tzo>(4uW&K1T_nZ`;c}@hr;G zytjFg2Q@yhpkK0#B&!^lai0Z>rFA)!KNYsUPXK&aX+NmJW_skGZ(6S{IA`LtSkb3i5f20Ha8#t)>$^W2>)JgB`d%rto@;J;RT zdmuSPbAyFZ;%TyEyw^!`N>3+C<9aqJe0@KA8~$k_JpEFWD*SLf0#%izuY^WM~Y&+YEN(AXbghhiibuiYW- zfZD1)>N=NdUw6Ts(-kTZW!s3#4t*`#kBC68a$KlZ+HeEzKvlP)WV*6L`NRb({RU#Z z&6i)OL3VtGFQf?>{QLf)L8GsGs<%p8(@l?V%S%H7KN2((M`ZH)^vNa@Oz6k%iBd?@ zJDcgqByXy6NBXeWeLew?=r5(o@-DaO84elMV^P(jZT+7+{NnryEd`jZe?1pQ`xc+Z z)ddpbArAKy7FpqV`=4@ai>{aQp~c=W)-AGR_Pr`!%a3)LU6^nyFwaRtM4dM~SD}4T zPV>h39gDd~1H_Pjq+8{LAOjo@piHvwulfJQ{eM1U(r_q`K*|z$Lejm{J5;|5L5poy z51@xF@6G;!?ujY~dV*jNjIRO1cqBs@&t$@M#*KyO4RW1k8^#nNqxe7NFa-DIL6Pw zRQT}n{Ba}yeHBnh2raRg^WAOye|}Z{E}R~xMFPWoWH7Fo4dvf1+P^AUhXo&)zo4*Y zn)>ei`7y_}BsQS+dP&LP&Skz%F&@U{^fvuVNH}MO@6BO2(Nq=RWb|T8&N2C!2OR;4FX|%C!pzj z;90omWjN5MmxVytM3#0*9Wqh%+ec!*-|y+gybRq7|HGZs!(Tf_Q>7N9jVH${!p?`R zbX%7km7^5M1}EIqx#9cLOan8q73>Rm5(kGg6@02*%L6m>*}IuEIc`Zkh>U1btFHs? z*OKp9Xyni!-(9pu`XbE2bli(Yf$TxfUACdIR$>v7JVKcy|{Ab1x{LGx(f6Lu$W>7)E}) z58T3#v6wM?X$6$kF(|7zr76#&=Et{Ti~0H?4cjcCARubdGeZR4@8r&6o`)f)5!%&d zRP!$?2Z|^l4YQ83%0W6?RdutDF$E|Qr^`+5P^|6gi_pAh;5<-DkK+8c5uL6mXndoK z3h$zVL&JKQ(aNC>wgA^q5)DXXwVWh`{iVv`wJ^sD8Zh=GdCaO?JCq?7*{S)MIfjRJ z4Y^vrPsf`%C&L%h9RItAsMQ=$D6&A$%k(Jzc{HB&YLZnW4S4*)s+9jibqF7q&l(r` zx#y6oHY3o9V=p72{93yFW!cuAI6DxQav=ahLykW{!+_d)JobPfv$wN9FcsMiR;!=$NJh@9gc*2TDte+^++|_xf z-`D#ge=IE}o64@;!FQ1ni6lzAFY$QjOd{TNhO3$StNw1$|1lVu8UZ~RWP5c);qNFv zhMYNV)fJKpaBGF`Ilwba19@BJI*33CvNOe$%n*O3Aj?M-Oke;}Ko!V<{MNwU)FrrV zKr6JF#k#uXQqsMhcB_>1boLDKm22+s#IN3UtGm{%?lkr~ME)i;dUJ9zNus(Y=00$B zMSt{BC>A9yLwPJ0P^HJ9M_6Llsa@`OxvXX>iAJYdO74}Ro&~oY1++~!WqWC(#GM8* zlldx_Vc%uOacWwIkR%=Xco+L+yTPaYjd>DD6nMWDS&DrhG>_7Ze=6#c!j4@}D2X=Y zV~nBdC7t?S!nC3SvBv8Ig7Z%h`c-_f*~s^?H!|?^NoJk|$O2tZ_pAd`^6PKiOudBe z3Q8%1K+sOP`pfEDBx0ISF<^#eW-Lephq>|M^KA~07nXmc8&T8w5uV3sr=#(LPIZS_ z;7x5}pl5SfFBKk4E+b8B@Te8qrGORfJP_x*Hkhn2_*>LpwbQsR_-lGoC|erOAbUO0 z$iT(k0(Rq(Nl;o-6BH>zyO!BFKFAm*(HeN!8TN^6BHmV^G9ER#c|99`~ArFc(QpvosU6t@FTM zv|7nd3~L;3a1hW6cz&07rj#GGFV_d3^g2u6QCS66bPZ&Ea%p+BO+CZ-n_HSvWqZGp z?Vk48ZA|=LlYLUcv8x0`pHmp`nL??t%f1H{UBjajAf}qXNDgqjDcvwy1QC0gX-LTb zlF_Nj4Qrb_<)N$u659u9mOR(=!?AeDHQ<2uMk`3n3Fkjd1aYMq=9Uy|#wk?O4WN1f z6!m;=MUQ^VDm{5K6Q?NUm?P*G&Ip63IlIqoQ%&Oxz&wjdS`vckK8Eu1)52CIanI4@ zMDD1g{I#!kybFP=*eeLv`2dkwy;EYJj6I!0dsFd7!_({AcT*mTxq(Us{5`pfjdb6*o+NFG-xe~IG1k78)a&_A?79s=A&BcBZ6 zy$(lhJ3aEn{8b(xEnZDmtfN03mO(a9jMb#ThuqZg&8ixF%>#-PSIj&xNOuz6ibC%YMMT zf6Q_KUb(q~)f0y#cK=m~%@|M)9WK7U)~J?32D}6UXigXv9w;L@P=I)eajH1FQkeh@ z8nn0?&%PGJ8gs1}CGK3c)RE(Dq6WPT^J0BXll^7vMwb9{(|KUO?Wzq)S2XZR0CFk$ z4uC$!mH}glZAJsfuoCY9|Af*4v#%nCe@krl;gIPMLN6#%#6H7rP%EU`dl2+Hf#}c& zY}y=w-Q%+kbyppE)Kjm?AU3Gd^JE(sU~bqIJp%zkg09SCTH0ny{h6w#oFiR0IdlID zR#OubTKw~UNKmyh6eq~s>6-O-+gz5R_N-Y{#rR^Y{I zPyix;3lALb`5~vdtdUUn8BV;a;WsqXdCR}#YJ;}9dKc}Z^NruCS450!4-~@mZ~Dzw z*4kY-f;Xb{YCE_rrA=r-ajM(2|fw+?oO5R zoB_8@a?c*lM?_~HpT<0bG-1{Y(DqrNszL9`Y5|ys_F5$!gZEh!M=U3jt}yLcEcdeZ zK~rQH$rxfIkEaL!^*`~q6vqlmTW{GE{IY5P`O*nYjWqM89 zgJV2#Ef1b)L@{bibcr7d*mZVqjB=HjfpqsVS2Br*iU`=#rtmvY+2o84(&D}F&a9H= zXcBa8hMNo$VDkaBZeiF_KQh6$h_-khFW==NNcrW~>Lp?s0nRg#fWA~GZm#qzOu<=s z?xXFWz~r}>?tJ6u_?|hto?PH4K&MZEp*aA}Xfp(idwg4J30<{^H)tHa>n}-R+7kE= z{he(f!@`qFfoU;@BAh|fa@ASOB8^$Gjwi+UQgwZ4LcckE4fT#Cu-2mC|xBI z<_vDe)c5IS45eW=Iw#QJ;!GF)cz%xp#g8qmsPf~y`fg0 z$_8v%X)f#G?hYi+`Nr`gv{bzWl0e85&yRfm{3O$}mu)+;)0RkCHnC99vaizCERrrc zW%r(!OduDnW9D#hhX-~b82}=&_W?NaG%adv_TAhf#%KTHMc74*xBN3`Lkssn>(woy zYs_}qkk}fDO&!7wZj{$qrQf7a&`Yfts?(#+&h-nn#>semwqk0jjR{~=6yN*T>ibR%K{jzkjj!bviwW4aL zsvg@OLb^%ntmr~TQ`DPaWbXxUG0mL|kp&k(`4|A=H64mY`1F0T!i}GzNqu;Grgcpo zEwM2L`$a}P&~DCQRUa;ITw9;RsM4OSWz8M|y6kY|-4`SDj6_>cj@)JKY-ZmaCaMMd zr|Zcp&XDW*@l9KHmIE3;a#fvR5@u5ZA3HL4J3t)N^g8~Fag&6yK>Ny$8kRN0{IK|cMl${28cfzO5TfYFAS z)T&&uXzEU|IZxrVrlcjcqHm?=*kQ=Ju|+T4i^!i(eT2yxH?xdry=3~W9tPe{FHe8Q z4jTEhSDi~)0t%i75rE^0uje-8K(pD2gc%61qkVPsO`)gX`+z&afWb>(K--WDPw*X0 zfn~NA{gVFNh-fX8{Y$n$a#*&YWst$2_m$|gv^KZt&{}UQuRQxmZm5^R<3RwtLHEki zA4DCBHlKd2k{ldL?86Sl%6NP-3^Vz)`|XEIKY_GnkjS@5%2-VRseW>n4iDZ?!JjkSdh%~x$=}tLlf>1 zK9-2tG^UN;H8b}V#1kaQLC{CQ$1q+Z@cf@`R->EPQ+?qIw*AiC;MWtNsyQEuHECH2 z=XVbDNvJjPzTOJW4?@cmf#HUiFF$YKfHHUhD94Ndz|F1(J>t{k><^fk7~%nYHY%2W zaG@<+Xi^c9K~4l5!(-{Z1%jQaTt@ecEk-6rg<*x?DKTTQ7`G$GkO^CW1yvD(_dAZA zkWQP`_GbwfE1NnbdwAZ>_r)xY^$jJpNq-N=HB;dNPj}q};!kFB=&t_jpRepxc62fo z9@$1~;NF&#zt9S8(`kDxG1#xCF&@XCY0_As(NA-b5f{Y;$wl?V!H!z#@&!%?#o)Q)m zGRcK!aNa-!W>7!jEyt=QoyrVE;7+5*QmMbU)c8HUsZL9;Tt|3ZxNv@S=AR^i@?#ey zV5Q#>|2(D*=mX^xiWv|b=EB53uWfII0SABOShDy?Y9uZkI7mWC22ut1S_8kYiiqv% zGZj*l;2%%>(3W%t`G!t@J#d^o7Yp}gmv49ur2ty|>;jyWk$fB7wAKp!0H4*b+t#)V z@2OR*`_Yu7UF^KBIk+;NfU21xn%d!1%f^H}D1q5g5P%m>4>}(UnNxryuKmM=3D`-* zB;=Zbx?hYVh67ZaIKEcy>8L$1^YZZdPnN4zQlap^Q`)k(a_qm2U=Z2616 z0PBHAjlgx4?ot5M>W2l1J$79RF5jk5n5Tcd1=qbe5b`;WT3!kzzf*@Km)F9c~-&vmOxc$d|xuC zCH15S;u?FL^rT-F&y^JTvNadp7Z>X2&kE)gA*5?2f9RwqtGp=-KyIP)*q5>D*G~J- zR)q?{|9iQdRm5 z#v7Igyp1BDTl}Z}LOX5$fK7Z?GQH(5_gN5+I}2Lu!>}w!u%Y;v>oPF}1OPS8bNid3 z84C8eRHs%bPB}Z^FCeHD<}FqH^SC;W>j4z*>oHU~F>Hw!>+V|W2l!ogfW>_L2tqK> z9+UGTN)EJU@PBSff-KeXPe8UQ(dKsG-cEU+A!d;9ODV#s|Fl8Z{LtVUQ znsTwQ!xl+k*Y%)C(0^A%+jS4~dJPCchqbM$MI`Y0$A5&xdwq#~1!h`QWiXG30LD2> zw2elHU@#BzpO}Y%QEtC09KFJvKNR>1;^rIN1`1U$2$nGoj0n(8j0^LJkM>F`C`5Pe zLb`6v2>^1a{=Y%W<7g~O&>VAOR)TEO7k0AVK~ynArhdAlde|c?%!Q(ZN5J0J1>S)9 z`J?I07X%ojK%5xQ(PoRh;$naJ3pHo-ys999?18ss6xhD=?Aj<62rBbGhh@OsyR7eD zi*?WJ`Vu>#9}&=mXqtPB8jtLd_uzXV;OrDkvNXheJmFpq2=OCadkAsXcY{BRXtWsF zB%*)UJbF(>c;8ALjSVV^{r`cap+OY4u5rI*-Iv${uNR;uvE?K{Af_v#6I6ht+|h#K zLmA869*R{VKX&GyR6GkSGb>qWkh35AP;IPm$UU^$Wqg#IdE7&FV4=M6mgwx3`SpCd zX_w2rO=lEyNyo0|=_pas9{oSc$v;j5hErhtgZ~A0uZIOi(tz{m%P-_A0tnjZE5%pQ zxj55CyDni9{@q2@@+|xJQ?0EnR2h40YE}8=_1R>ZPxNH%U4i4s8cS9OXhCzpKj*#; zj2|c?pE0jI%99pwk#|P14eWO*YM__3iSTUR!2w2QiQQFN1j9DO> zF6Ws*+=8tFn;$zRlM+WG7hXJ@Et`{Jb)QCA<5)#*>l%zx;I_Zd(KDS7jKI>Ilc6Mp zY099bEDAT=93tSKV-6l5E|TrHoIVs)tL>j3Ti`+~iv80X<8jq-D10^3zdLxLA5DMM zW*j^1jII0S=`EA!Ct0jHz0r1dZD%~Bht^?uyTmv)(R|b^0KQ!KtDuw>HxrgucH?*! zjxW@o>Hf!FI)+l?F{HB01D!NT*-irxGRlt=fY4zizX`gAL)0i_@9S1H%H6@Zhkb8& zQPw?*0;So@Nj=u$t3a`b3vQZwI!Ex|QULm>r?=C6Pxp|tiDIu*FNq|>G7-p#*2BNt zO<=Cb#;!RxpT>dj7s83>->bTm(BXF;%_Gh1-GCEiJ+xXHhbJ> zkKLtSF187G8V1Vb&n+7Le{PL%(N9}FSiaY^y)h_*nffD4jH%VE(Hv^>9gFOORQe{1 z%<+SuuS|Co^M>dI(bi|8P7bm&-Qsevlq$O+R@wKmk(7eyzz&O62}lRtC6std#FS3@$PaIw>M)3nox^PJ1=nEB|HcVN~%vLYgJu0LK70vW7O z&r2udn;;*|gl}hc7F;-Jp?A*ApG}i@mIW~2f4Q!Wqsa7dPfy5eZ(&kcM65*n^7z%& zWSO!fQ}1&aGt?~l9Lqx}?|{(W2Rh2I^Y_T7@gjpX)}F8pM;i z=w~iM;Dse=+`{`@6_d7&SMyvbB{#n^{8SjjkHOZc38LG31Lx0zwE=5aL2%-L4+0UB z0XFp;|6n8sOM#q}KqX@Ej!WRB8YhUGY{*PhlruiE50i9Uh<1}V{v}ZRQ_AuFPhYi5a|4Ty7ZLgi&h_vVkS;>1#j5U2qc2);Z3 zS!o;$7YiM?Z7x2o(-HY5y0bq|OjubcQ?_xetJRN5F#TFADZa3yIeMg9Z2KtV1L?L3 zT1=xkm+xO1;-)7+VfNoFX5&qeB_U`QCsL1P_YWDt0eH+unJfDQ&BqCJl(&k~yQDWs z*F$^@M?6|vS`4oslJYeX6+bK1S}vqAO;}L2Kw{KgXnkf7Jp0Pl|^`A*vU3P z0tDY33}b4(FDU;pw}Upj5DKh$RFIO-S>|1zU(F=5m)!z&N41MjU%KOAh@l~d^greT z?t%r1#c%%YAl>Ab1rm&e3@XcEZEs`t3abEaNp$6NU`{~)YeoL}d|et;=huMKsa1Lf zK3+JmpejOzw-yp?%0bdqN&qrO4>e^9 z^^37u-Zy2zJ?onxyYTZTzy`(I0gm1=5mG*uf&H&|ReP&} z4#}x};6+DOz|04J=f|{op;iG0$pU~^#|N}rQ3MqgLipF`LML$7^9~gsM+Bc5ZT}AK zz38zy6I5C()Zyi&pF9L!5hMFuHY{rr|8J7ZPSS8+2i7vD1K-b3o4y!blQ|eIlru_K zS3Q+*aNK}g)gk_2g|iVr?)YyyKmf+~N%-{Iaa$7a1&tiVO!B;xuHiiXEg(qNu>2Ds0Rt4}fowOl)53v?z!mz&T!!N@SUx)ipY=l$PW7OEKi<87)7e6#Bu7~j(VEfg$ zbDVf!Zl`;~1Zai(4NN%0w1^9ju9QY`KK&>kr?AO9gRramG|y=R3xLk+z(oHf__*s> zq|QXTA~6ZnB2h z=)D>}Q|N}v>ag%?YXZ5C2!JsO5*X(ES9I!s!Ay12jNvuyJ2f;o09trsvSOHc%}oHO zN)7=OIbbE>;G#;*I|1^&1S=o@Y`C{!>dyt7=W18S?qGuES77LEB!H<3dj2PWx5CKE z+PUaO^1@}#SO#z>2QB~P-&p?9r_aNHK4CW_!EuNCkF*ZI2i>T@=A8=wv6krnw?K^nd^v&s zF{`DV|NFrlAU;>tXQl-tg%+e8uH(_+qIaZlut8n-t_p{)yx9M*sOi?)jJ07{75S0R z_!SMNWZ)`t9To&%9vLo={H6b*KCGvNN&MJ9+r-=W1KARhM<+LE=^v-|ZCGs)WDp0d z^J{2ONF6_m6fzkRdDhP7Un*`2WowYimm16`2EX57OJ8aDl);;`+%uEqF5d1oH1c9J z`GH&XvWt)K>m#akzi)e>3ecG+mhdZS2@qirPfvpR#64kUm{6Q6 zkWy6B?pt~~gmS9*qU2!Qv2-tGro)p;xQH4Qn2inSrI9IgN63|V$v2_CX{1(`hv348 zZuB+M#4%Rd5{rfTk68ws@y<6v!|IZSuYlA18++9NVHA||QlJJ7BjW)`M7ps&eVXLd zz4cBy8W()h*LXte&x+N&jaJ0?`wqNavzXR;Iwp*V6o#Uuxy6o{eWRN3tB@s6;1rrs$ z$|lh-ga&a-m_kDc(TM68s*!AVvJqOm_ZbMQF`S>gi!nHX{Exk;mtGES-t66_$nm9q zAuByI71y!)@+c@}7(>o~U=pQTkXX>vteY8DXYqUSd<2Dx+Q}8?rqYOpG6PGfWb8U8H{sji7vnuB*AaV*t>pKEvErVa`RV}sAp+PB zG8D@<=6Ac+5qfDhhor&$z#kia_lPHE$M=|p5(1lkg+>X;TO%H&`dWTPftBh@o@e-e zj?n{kk^iAT^^`!a7Ke9_eEmVtZc2cR-vK?sdP5VN`5S*Tf6GhZ&#Lgdiw%zNKP43? z$1-Pk1_w85#9(_n?Qe{m=Bm545!PMh0zfKQ06aPX!GZwW?}~iR#kCp__hO<52I(8q z19x>AwikVkV9X=mdwq^=DPHIE#-xk(z{6kO({(3tCm#_Y28jca{J&$${|&-KV71I0 z92y{n=MMlECQB2Xrxa(*p@_S%KB}Uy6^V<>Wh5cF4wW+GC0wHM{ply_kgVy{4*lp? z?jdh`+cPVf&>gD+_=InY${ zXa6xBUM@WO-qDZ57xa`sWKAD43rx+3#Et*gfw|^R*c3KU;BxJM2JV8+f~2AciJCn7 zaW$1N<$!<@H0HRvrre%9C&zLHxOe;yrF-&Rz$64Ucl{-9Dk?<&DIFlw1znzX!cyN!^1>n1^L)_OFm+Itm;}H(Pt)cCBcf38^^=mzW!(pz z5#>gAGn3iguJW(^~pdqoVQKF0ZD?f;YOY?o&*gzSX{ z0wB!eF{22nG1~?ix*;e~FWV?kOF^b}+n>MC;Cp_sM(q$u*W}1gr`-@}ZSM96sjy{T zoqXPV4R0p&_C1?>ak0w`BU2SXQHE!*)p2It>tq56g}CcNg#Agg59D0V^^ZtuUdR3& zdOH7dIP%~}(GzF*NY%~rS2F!^+}kJY+dk8`i=B+MK@X4{5Bl`=<{yAcX^)ghDYPnl4Oe&Akt+-E1V<+xWUajkU+T=hN{kRoX9EwiSTfg{2rROa~qgyGdR`F_py`;6y zOsAg1Z+rT8EZx-8!&7uD{hMu*M_b8Dz&VWgtnp)=S50@BZy{j%3;y<8J^0z=i>@BA z&#H_J;c7gF$Bi;dH+%Z2FyWVCewOja9f`;br6(On-@JG%{R)ExDjNe)&HkLC2Misco zW=bm+y^bbN2<=}ssIJlyx&PR}s&n1W@XlfZY${(GU0E(sMw^V zI;Pa#&-zoOgnQzatF0OyY;(}Z=x9%bOuTK*m@M&Ulp+w-JPRl^=^oQfSdFbl&s3hO_Kd1}vT-JXd zMQ$a%fS){E@6i56hI>~M?f1F=+owTxooLE{kE~+_NiOIYlZvT2`z}d(dgkXN@*Ap^ z_uz=G+WCW9-oS!14X>--3m6(u!TRxkvGx{FQNHc=@X#PFA_!6jpdcyTf(TL~QqtWF zAc({aEg&Eu9RiY)LxZ$*r{qX?_YgyT<aY&-wo6J?C8u)?zIYW^V51zV^MZz4sLx zh0L`|+l-i4Zx1Z+=&|MK#gward1m1KKDcX|{=6ve%VAU;4Q1TifmOPBs=ed4yQH5i zv=6X_7RopaYo}M!Js5ygcRC_YuzKAh*|dOt3hTOxZTx&r;nw$srUc((va5$R4Ppq! zx9BYBcOtZsp>h#f_Ix)S->K04Du-~WNUXqN%393BqqGDLak~H zWay|?xfY@I+@;=&FO)9;PDRs(YlDC0ns9G^`KV%GwOgbkSmtyIcxY|LzgQ_Gvq!Z9)Rvgi0=J=_hp9d0yPPOELP4tr@gAIDcp0sB_xH4nq6 zN)9J753Trnqu=PE$&vl#W&@-Kj}>#+tt;REJ^)t3(1wPR;}mF#$?#bhvs2aV&we1q zsXHs%R-QHO=sMY=&AUxdDNEa=(0LZD#GLu(oh`9%y4lLdV}AlUNK{4`Sfi3?QLnff{GD9gex`(A+~4-xw)X zMTmSW?SirBz{=XnCwUc#khw+m*6#j31s2g^ga$^6c$*)`5pOzJS~9d(6JmW{@Uz<*4!hSVDdF@FIu zgDKK07!1@vwB*M0h!Vx*fKp7sjTDxxaB?&s$Md%tEQ7@b!LbRN~*xKVRDQ zDd`=eyUXDfFZM}B;gS5?jq}Q2_cXc;eB9`vSSIk$f3Bz2%dl85*<9|dY=L9i3(~?$jKS>{ex{Y0k+V9T9OGauL|GJTcVv%r3?VacG%NiKZ<`e(a&CSLGtw7dZbw1jEWI3b)0ViiP>z7C-KYF{+6L~PP8 zvai^i_FMBwZQV&F(DlTWEQ4|867V~_N3a|N>GiGKOt93%9r`YXgo=ovIumudN`vyn z`y$7zel}sH(!6K;6TF?<6JeGy$xjd;&-q2tYF}1;5Hop&N6%xbat@ynjECa3jSp_I z=vzEms`{I@R8k+o0bpSyA17G08SNwk{Wj5eK4ajk8+SEi=U#)``^GC>Fc8d?MKg0iFhTpzsH<9MW(nqwyvNfjK(A4)A`n|Ew< zFS`x1Ou0&|;M~zb&@*W8BYU0RMBVs(7DxGLM-fEgay2-OF`08_c-F>h0*qui91q#Y z-Wf6x%Toz^>daz?=_BAyeu*SV-hJgqC2>LDZCU5mfh%{ z=)aC))N*`<1_9)=2Eh*~{;Js!AHzm(wd7%VE`a*4{JvFD;L91bG`Kg`vjOx<0zTSL z+8Ov)R73p-6T>0Ku}xy`r6;uP{W;ywLr0vXn~wthCn7S2u*{ONeD*@ zCLg|>h5EIb(QGYW&vctx*JP*_0nb>fa3-O3mg*&ZK)3$A>AF=U_|rMjX5SMC{^q`W ziK<7`*Jltni|5}S=pk12}`5Xuk*yyP|$s7HoHhnbILe zIU2sJ*aaFw;-laBq{OB;q{LkGV{P3&19K5*?!K(Aenh;L-Cu4d9n4YaFiD?3(e6@y zo!bwsLU?MxeF%*1&n@t|%pwamrXRDDaL(KiC9EqzL6DHKujvK8b}g%3wJ!xQwN`yl}@LwEEk0=DJNpO&vrNjbsz&Yg9%>aYG=;kbNzp za-GbMe@zWpmG+1F5DB^p=NEz2&qYz2yMf^Dv{~BbftElZahL z7wRMb$ezM&gh;$S?Xlg`yA<6~v$~KMA1_YwiZaSNbb>sUMS9A3I_N4MsN$&fVjU)} zj=$gZe;teZlLPEj12P{%F$O62W|9+ZXvA%Sele(>^!MYq|NhGr43-gsepM@+)d`uK zmG`dVj2w_#OuoNr^Cs_+R#M)epC7sov|@oeotlrBufnhai=g<>Cp^C4&YNgm??L8% z4lkH{?zVTh#vK{&;b>p4N=3G9InU#1#s%=| zV>0YF;4e2TBq{Bj9zOw*JfbN9h28#BAtY$i;)#n6WQsQo&w?KVsocHLm-eF|9j9&j zLx=u)%QSMFt+AKs)u$UsOkQE#%zb>UD&s?t&X?Ey!q3A1%qHH5pIRz@`#UiP{`MHA z((ac#g&!Q5u#b^(!8Y#*i8ju_(-68xdX}9y$ZVtaECr4j2X{5i zaN_n#R=<*6hU`k73hHVyT-eo*m*2Aq>1_VlhR*rjhQ6(LF0A>QDr&ehi}}27F?BtC zNqD}hVlIHM@(+|>H?M5oGhsDf-Mw2}m9+|iU7HZ0gf$ll?~Cdaj*KmY0h zxcmUeWXKxFa?H@4$;&E3CYJh+V%DeYpG=lC@lvS&u}_Hp6x?;Q6Mmmkig9SDpW8xv zd2g=a+{dx0m7(h7>#fOMyYMY&snpTt{h{$?3jS^7D(fDQPA!`pWtey%#(URkc}t{$ z{w!Ua*JlwxFT0?One5bp)|XlI)ywJZ0c=}xCFr?m8H|S8rf?n0&tM8@UQ+?h>sP4e zHND(uQ%Y&vX}l~7XtSicZr;aosh2nlacr*4*Ny)KX31j;3ISU6k8;B8+zOs*2Y*PROXU4*-i+7ubDQ$}h4K&5`RL)ZC{bH3I%}R)X)Ykyo4# z5{5xB(?%^`>m$U2gb5o#*xT-v#?4;r9-D42DmC{U>Z)SdnmL|T42rXR*y~5I8=I^m^@b!Fpiis+v18spqr@G5Mj57mSq`mQ zc@M2}1a^XbXdW(Q`Z}Lf{fnKj^9=8jI(s5=Xrl{wlP{Dm(JASI*$eOWcVBf4_I})> zd9J;XItp_siNa5GH=jfbYF))HJ@|IQOcH92p7RSKd)zlC-p@I7kx+lfTlfPZf2}OZ zI$0gPft)?Gzdy-BjUDMgQ*)sXU*pcT4dq$XzEPi-tUIKBQTFcicAk1!gfed_`^mg8 znj~7wStHg_t`O{G2Hv$-q?}Mpxg<+tWkV-P?s0dR?OZ0!itw^>xPrYU|m(T_t z#hYWo@)frC9H!98ZO@vQ9(@0BkHAykc3gfZi3|l|E>rO^w)ly1xT8;SR?9-Kay*1f zq}YZlKY6ALc_`jr@x88%o~2&)h)zp}mJcLI{i8fe{M&fdQVPw>L+5(vMMbJ;NnIe$ zR~KWruU9YK@~=WdKRL~aK=`~7Q@URm1FBUNc-8*(3x221t9#~7v1eW1s`7PWdR-Q@ zBTjbtC5`}1-``JIlNRv+HEWi~6&it-IQ1CR)d;$)k?r?289SudN$vJ z`>!YPEN=FBWK7dfiH=QQIr8Xal{!{28zgYCsyrey9-!_ku`y1e>AS(cXco6#`rwf9 zcw9R{vF(m|QHu^&OrvOpRn`86|va{Le ztaAeq%pCSKIm2#9v2=nDA2P`WyyssM*f1arV~0=f9!fh>MKICKu^pB$juO`2TP~r` z1r=!WNsYqjQmOd}haPCXwcx?Iu&RhzxtJt()mMt5g}VBdi-}n_d#&?N_h`K<&4hgu zH4s#$K(w)>_~dsdwTF07<^gM!W(N7a?^T^vh;sPUW{N ztzNV}LKcQ0RN=3Md8yvf_^Tl;KEbrGft#X`pI5<4yg9uzwSrOYR__hBbM9qP%i)-t zlGG)(kK+xV5UYV=g?_`KpMC}kbVZ@f(r@;+4QAezVL0|cBoF2ZB@ZHS-maGWzf-$8 zrkr{Rklr&%S8Uu&n{hE%MhORVLK4laI8`WR6r^KKMGYC>bfK_hmn(APDzt=70of>P z@{r+S#BQFf!cQpanPB{ml4Nm{EIft%sglB@&5D}dmHapC4;kmsos>V-iHhF; zP$%kc3pP*2>^0@WTE*UeBd_>D5znaGJ`S~SFIszYO+TTyV=TPpCET)2M}PX{ zR-DSA)aG+YBw76C9gm#hm+_(9t|hIi7~u>#u-!5Q5*X*F%BRwsG57{<4TpmO@W^J+ z5PbL|VbhF%Yg^IBBjn{5-F#hm)!|s*OkP{Jb?3r09^k6)taD!jT^#@a!UGG0=hG#A z!@NI*`J7(D;$b%DPe>VYN9AT->sNb`<2p*X_LNxfUdy+pi+7$RIF_rzjOH9Tfl8U8 zCCTA@1$}oIkvuYtPR~as0^N^#TX^MblP-%kQ*`X<%*t9yY^1!Im8_MltURTGu}JcU z&yxiXx?F8uz^^y3ulKegZ)|=HvhmO3!aiJc+U#BNSt-QM%v*Z(vF>2gViibpBctz9 zOaL}L{5ApR`8Xji%%Ws8ci0O4IZ18vBvx)b@snw{AgO?NK*AIQh*jV}hb!BS-}^)z zYe~nAnJCasLiy1S-YbB}0S1`mHv^nGHbXz6koX7ymp9K2IF#J2&m&&9T^KLs8?j%! z6^!qYMQ-rT7=UhIE`LI){#-^C80VwN5%iV`gKE;9M`~-)kb5zPFJQ?}O6C#g#qsAH z3jNHJo1;ZE6>%`x&bOhgfOk1TAYBzt@p`Fv*i2!gwR{JIg82dIY16ncsy@X3NzyJ_OZ_hL`?1!;>RF$>KY>S>A zEt43f&zrrFIIC|%BpvsC9#_rJ-kLl&58Q&QW|s7^+fAi8j>n@_x#~o7&_{@~huM<} zc{G0BL|UL<@)Jot*uZ3plS1YR?e1DrQQvGnA=@1D@29{K6X{NiEFv2}@EvQQ87-k` z44~w)SKO1Kjy`e_;Nu+G03@Pp$joiGw4cz^i;v4diMu>`>zR+PL+%7<94vZOO!}sB(6|eR4U6kD*2{C;GPYX_(#gp+W6_ zO~RubZF=n3GYhe9k*4vE;?>(t(C@TH^Jy*DlX_eLBFtnT#R^ zwY`~geLF290QAIqR}W0QQL;d3OJr%w%K6ohUyx4om&T(uV| z*HwS=6huBeZeSSb zHqF$19w7_)beu?&@Vstm$|Q8q>9qX3D$Vf=Q=C1U5jXA531HM(yqLRGAP7a%&;HFG zaBSoHd4&=B0VEiBJu7HyB};CUpr8Dx{hg;o6;$#-4vTnP?>_%J_42b>ro^KW=>G9n z&1Jya66?v7*x*N2lXqT8pk%0BCC&)hO5{4RvK*WrT|`Mj;rhM97C8i6S!W7^=ZGxE zIs@G@QFdIpuZo#NHj!Mq99tU}&{L;Y=o?7l)1yx5!&V(y`MTlqQ}Y#-G28m-wDJ=Z z?#=cBt}S=ur;jh{N+0-0mp7f!HlEqX@TkB>a5O*9zl#1C3Erh_U&-RAzt^;E>26C5 zlsqk8G~3lgb#Gr}NN9FSC3Wm?yD}p!%7ce1hQDLx;cw%`O()u2vUrHB5ox z{WwI^!y<#3&?e^o?i?}0oX}KvXsu~RxIo)Ql|!9KhWveE$vQ%CrJ;2o04QERmTo?N z1Y|q>?iBpQWxnPu(WKaS#`xwMl!1mHTj&*neiLU+`J30|%=AUO zWU9eri?zPy$c9@}VeyMVMI3$3pppGh>a|(A=Ai{lBTjsx$K7S}jf`d_W%v{xIF3+o ztc(Qua(}>GTgr`!M}O?S{}kL6{jcCICpt@g$f0-j3#0&O>0DHgHEh4+#I=S7%|wj` zwKRPdwJU{bg^?3neZW;|^BQ*J^x*c2>OC$t_agbQw4x7u#vuULhyR}gw{~6gDiLPf z3_86M`3hPia5EH7Y94RNSgbp4j&8*`ugSf`%&h2Z-aC!Fb)gkEG){6o0v zm7nO=6+pM(tn(QOaKggjX4e%@bG?tHa#QVfWN6L0-WN2`hKk2217)^c}4 z8Gg~Eyfe?>@!pVYsY}{JqS9Upkz#Hw;?g4CRBpU5ff4J>wWqCl9wDkyi!W^>dPr&9 z4u_8$;N5-EW@dOm4XKc$v!Po@UYpT@fa)Mp)1>VqFCXMQ?y_yZ2>ApmZK z*zXKA3GWsiDoxNJBcdwa*S;Bk{4gyB@nC!3hpd9`H%L`KBcYi41EsFGT~Q4Fyc`s% zz?mb&JnATNxFI{`TIahOH;0p!^if(A_w0;K=chWs9;Hse#Rxg&chWiQGb%<;H;sB> zH>DT;p>{3j_2YLP>k#Y({vx_yVz5~CdqGkBJ4)J$TN1oCG_(Oj5vcvf@26$||IBy> z)af`!v|vZ5pmYWAF_iHET>+WeZ(RXV-Z`H02EcdvB-1V_ca8<}DIrSsMt-7B1EoF6 zqLi4fFDc?BEU`9K8wr3KXRR#v+QK=u?oC6I3Le2;={v^X_8*tbCm(g0H0EX{)!ONW zsj9!ZnfiN0M53|+`$n#!WN+>U4Ofgi+WNIf7YfuXw+j-SMdlqCo}Wax4zAj|Kc1fw zW6wT2dAL|pdhL1n+OhRS{BfcMvAK{X>hU1>{dfQ(=>G+vln6r*76Ceef_c0w6ubEq z^K{pm2g9It7E`c^LQ72Pt;+NcFDXInAJnGLal=>VxyVf|J%VhDC%*s6YZfQd+XQ_I z!I5|yT255Z_mQ~kaeH1?xJZPCS-0ydkCQJhBq)^I{j)l(B%*j+>f$coZb8}3-}KTT zS10P!dUfrzz7+Ks8zm5wD0#>3EE;gB-B`keb{E zER2AS@y=L%ellBCS~8msAR+mFn*|+v^^|acom|-1BYP$foG9s+Y&WHa?3u?g`*>czD^?4cUWyr2r za`N10s7##K-C0Z zook(GKS`F`Z&%V_6J6LPzeJZKb23L3_tZQ=3;L&Y^WTMr8drBPZl~P-d50cr5PU$S ziPlz!yiM9CFDhWp+5W!kMz!wF$1<)vPB#N(3yCMTXAR3^XxfbzTcwe0=^3VM2c-Y%k`W6RHL<(!3Zx(J=sqSOR<_KCj4 z(TKY9M>vS$7hjo)can5GKV_)0AL5uSHi=bxHB;D5?a#5aLZnAHGh+pGM$3rvoXVW?3`{O&_jBIdTc{enjW7eSX z;qJ`4J%lX%2t`KqJ|Z}dUP#XpP6CmnTb5<)`AuvtCd>iQuh|VP@BbJ1`IwJapyf@B zT-$Is-buW1yGRA0v6sGi*GTG!`%0>UTLPt)!Sty`yiUaTcVfzy>1VU01n_(Odd01o z0lBRD&j)AC(=c)oSPPS)3o1XAbI`xHFV2j6J*=~-m}33->V@i0tT)7>kQXRFSI zlXsB4n`Vb*Z|anx#JlIsKC%hK;W?QX6HhXh2o*}5?nzJseGR5R=_$Y?pq6(dC3l2q zuq>S4P6e2lx5_eDMRRvzN5ijNSTh43XceE?cJRsY+0xqDws?v$9Qp*ud)|(vfBK9{ zVQo$}8=nh>6mt|zt^VrPzLwtNr6U-MN7XGc7m?k!VYU#m&K=kRB}}i$SMPi&6uv$6 zW$bPC=)PDvO)1OPd|vsR@(>x4#lTGqn_>M;IA~y>r+0gU88KHSZ#Wk!5ZoJAQ#Y9+ zrmf2dHLN=2-r!wSYIRZwA?tY!ilI#oEdZCCm~`1V)ESS=hsD(^(jgJ0j^m+l8i4x@ zLftP&vAv<11m=*@&tgscJqI2NNiNn%>j}_9zkkU3QLWGbdXk?8LN#A6xvh;Xa%aMR z)gz+k>^SGSyf5u%-seBA%I&LD(r=nK5v+ffBBw^&A7zEpa~mtJ(Nq553?$D8xmZww z6Epcw72#FRy^`f%Tva64IpQXTU!%UcAX~VOE-?Lzv?HU_x=f!e64P`6jNSD#?{D#0 zOz(+$cyA$mW_U^g{3N*jj&APJ*=CtYz(i(g6zOS_H`6gcoUv!);fl~WMfE*t=!px} zCiPgAb=i&A#1Cgf!9z6uE-&B`Vl5`=iYC^UD0VL13kpoSKs>wIUc3m ztpcmZ^@`RvxP%Ux0N0x}Cm`LI5APag1b0Nydhg+` zz^49BxNlsL`!^fn&)ZO2w4aw2Ff{o+w1jGA&n=JNZt_&3${+$VF!PZ(CYXO`5e5mp z!Y8NO>wKh7W6+SG-+?)hoGu#=;M^-ZNs&E{qBtJ65&{c#J)SeK-l!Wpb>WIX9Vrcz z&FdJ_Z(K)`!AIyt?d;&Knj!plFxCRmpBoKLLzO~<>6Nt628*^|v)s|%y<+_~70awZy=aUsc>1V~eR-Lzx$SkH+{IfDp(@aS3LdBD$;S7D z)zZa;gB8*oz2vng1w7EHCDyEEDR*WERhCVPsfODgs=i%RxnNv{B2~!dIAAZ6DdaQs znTl37hk9~s{?X9w!Pn=e`*Qw&yW9Qot#`xtn?^6f(eV|3^Z+_w8L336(uglj2 zJS-)O9)3=zt3@d!cnpC?sC>TvHRL9nq;e&DqQA=!;atadVTq>CP*^HT{F`&l)fLP1 znFl!6Pf+ok&4dRyQw9PNcXdKVmJ9Cc2~A5Yh#EEIHo;GM*=7190l3R>yeD1Llqb0C~&u*NfTJq|pAU;s3%@CtJz z7!%C2(dU8%UQ%Ru)5X_RCkyv5h=oW3z=5E2_J-ML9aZ^;HOTqF?cQPSQT?K1IX&Zl z_0<7A@?t}AThowOKQLrnn{0)z3BMa*S@lXQaAcFULYYzqr;g{A__aH{cM012d``Tg z@Hy`0Z%V`*N$&_c1(Af6_FPPrm)@5B!23qb;QC!YDJ{5ATSan~JGs_VWLgtdY1zjI zscA6HW#G;J3IY7*6>gIHfLO4gWR&=x+)GJVEX1 zvj$y+4M%FZs-NCeYMlMm(d`LFWj9HyN`k5rCqy6 zrodL7>lmz@zc=_2&A$z@6WrTJh(B1OGlD-n2upbwUmDw>&REYT^OUP4BKc2^s^OY} z$769jD2|J~r!`RxUfkHfmx@#}vp5{KH+fjJET^62b2yIObHO9qnQ2{B{E0>^R1JJx z{vuD*cE(3sE(X%)f30|9fdJ64@A{&(Y8O0F8_%@q)QISdtfuI`y=0Ww<4>4k0SNZF zA)$YL_iWeyuj15p-zH3JQj@(|rAMXbb|2z^uum1@6R1TrEY`Z&8N?onhS?a-f?_i^mOqlP!Ciw#`4A4xmL z77w-KcqLC~Sn)!H3@&a0CPelej+xdn=icwIRI4RXiV|I#+emwXqw!Gs}M_jFgH&!d8Qw}^`=tBS?pyh@^#ee#y)=H z5wlLYsb_(13~+d*Hz!C{cKGw*?K0h2bMg9X;F2@fDhecXeT=6!IhmWu@^^{kdd(G0 zL`Cr39x#Um2QZMW{5FTp{?#1jZsWqT%_rkc7*v@*VE@2a`*=BllF2*o;My(thbQ}A z+2MKTz%@feD8!xQ_(aF`zEZ?_1UGQQXd%Z=O%c8h=;YW=)T0@em!P@qojA^a)^)A5S6i+T6NP*m;|Rv>05y4mqnrBs#a zQ(o=?r-zx&2&*6(kA)z<2D;!i%B@Fzc>EQwEa=QaZEaXE0qeCKR|8 z03;~edE^*~)6sxP2VK$n_Y-9gU4*p^Zb)A4Ur!ve7W^i6WJBpdv!y$_;%=O2fNVUS zw7)Nsw(Xe-7~)=fnCa4GOgEjqJ>1#`6(0XSrMrb50lAuzD0&fox|%9Dnx2;S^L`x^5tJ5bG-C zmsd|47@c?%{he)xn@JxjQ$LZT9fKpR9)Zq{(5a=;lZTzy?KR^e}%J)f^W`Y z<*JWKR=A4W@Q{mHMVh z&kdA(^a=)>fXH)G3ZPhb(4MKQ^c2gD}4mljRm;2EfU0eu_Y zCOJ_3pUl|5t7!!_3M>fN-M}GKPOx*#Ac?ar+(S)3-d24ftq@B6=z2K*PPr9VZmDDA+% zTB(54o_nawQqaove}!>CJc5hAIR4p$0EN_Dpq+pHSMJRJ+hPUU2J#V7Ai&l9U&2bi z_s26Ae$Y%&2vuK6q+?6rAgNIuKWqNrCh4#zxJkK(>>`{t+?;y%@jloi8gNs+PMC#; z>RCMZoiR(JL=X;MXzgyo(*WHo{l+|&*YWkbuX=J?Ql%5bFE7duOsEGwZ4UgA>HHfW z00q*d#q)bNaFv=q9r?o84}MD#yE*K*Tz)klu4$Xb5k};0B?ao}TK*Zwi6g8$zO$S# zfx#|bpi=QOBtia1NWw3=*qPQ3ZF>6T03v#tA0BdY;LIBv%KI7^iu2pU#Wgzow}j3m z8V7D6_hUQ8MfdB*&~E9~P2Ymu*%gEQ`U?A2LTw^nZ)bVT12Z;h5+Ha}mpA;zJ-8gxg9KX;eSe@8HI)c3OVLAa0WfsjeZ$cB(4HG2HeGl8%(^f4+^_i& zLe5|EpK@%#G{=sa_8jKMeItgM95c~vS&XKp#npd9q1X5mzdepHDsdFGdQE}VvI-vN)_2!W zxP>j{f|Rc>gYb&nbUGc{e%qu50dFFMQBNmSYI+r0v^ zOPgiNp*zpX+A+zr@SdjOMd7(GYC$M!?!?Wd0JdNHf`~3;n`T|C>zE!X$(%mt$2QFN zr3QT8mVYzjps|bW_S3EdZcn+RzN|f0XuKr5N7s4ESV#9Z!)KTJ=b6Ui#mO3;fya=5V6WA^mQ+2UgW0~e;zx7C<{!C||q~CAz z4!_bmIio@!ZwB3$NgLu9rN0cQGsJ}tINdpdjX2q$^V z#AW)m-tno>7CRlFo;K!+l`qJ{dtQ}4gjuVHohtAJum6(SJGz(8GiPWt9BX92xGaYq z?PJmsXXgUhw&7LF#r$0MmIO+!qRr)9)2}bp*t+lJyZXrvnZWgsWvP=JUwUX4k%WUC zRxSlCP&ymaYXmmV-fr!dTFaz)u9zQ1EkxAf!!p%r*k9v(&IM1@of6#EUccK&bxC1G zaP7$1qP_i)HHo4_@95^q{JD5P^_60k@`$s|6~y7|z}*VQ6$EzYwR9(@dCOyXbp1XD zV(GkKEiHYWzM`_Pm8)P*Fm*i*2tx2EqB*QyNl+p_&#NmqIa$Q%MC9yI*bp8_4v)gz zykFfQ+fTw;A)&+o(KN?Xvb{6W;v{)k&S^IaFE}cjhw?OBy3q6CT%5wUtLi=YFH^s| zU2dlH;Xt=NF0$7ls(Yptn&0LErBCH_ zlt1cRu|-1V9+`->)%d%^a|owldG03XX*&MJNu6gc5C%eD(U&eJOr<*GSy%4ws~p$CvwctAFYb+#`} zUA6_c#GpI%q81*J4LFjnSECd?*UG!N_TJaU)5|toeIGUOjLzZ}tC2X_VA^~OW@Q+d z>jB+iMRGx(*p-Q)8dJCXGC}Pa?~iY0$aA`oKZ2-EWYxp(TOu!+DKqsR%2v*6D0$9u@Im@uN82r*7mfgPYd`u5X0{ ze={Rh8VlF4(N(p04px!Lk#v`w0;}jIYIMOBSZ8uMIbx`M5Vf8~LPSd<`27qV*dW0G z9!~9RU8RQlu{k@fKnlUs%{TDLXsk0sqV^-)?>D-=o=iDALyn}PE0$d^cM^ob+sXGs z00a7F1Ms5E2$+ZDaa>IrbTH#i-NZ3#?@MO5`AFYqfy>GZe5~&#>vyr5VCj0X5WeYE zg>lY%Dz}w;8k>$pywwi!Ld*+d!<4)>#Q@5 z-HdWtJc|6-Mo0O%`o*}6t~wM-4hbHNNa0T>)*47frVcfhhb@h^p<}G7LV9;>7%kK; zI-%Vw+O5qsW@v(#tsrrnBF48thMH;w@;-ck$meLO0sck6F4XWcoG=`k)OTeCDe+dmzN(!-0t6P1J*93 zLu3B(^$iSM2H&MLmKd1ggJ85D-%8QKl@DA_8p55~zEHf^eXT@Sw^nyJ$KyOYML3GQ zPz8Rdx$wwwD5vK$HXvT}=d;Gp-AEZwFX1|q5T9id3Dz2!o=BAS=;8%=@?01Z&`08@ zbp3i8mCV=63}=QtPCahneWeU*yHCi6UA~(&;LRB(dfk5?5p`o$!JG4x`xzaml+fy| zjZ&PMLOkXxC1{0yq`A=Q4fo8b2<#hW7=#l9-LAhZsNQX*mLufBE*C0PT&F7+V*}30 z{5Gn~WmAHil|z#$Y7YaUmwF-YX;0UXAB85n(lV`jD%nHb?-b;IdqT^-uWlJxmu5ru z$FHzcW_4)sP%;z%6o0dB{f;GnAEaZt=Cz<(EIkf=qiJSR!m7R1t=Qd>MS{z zlLV_4_J#dIku*%{Dv5g3jf{e-x)pb$bENh#k`_`U3Jm@<#YcjrFGnQYtP&A9A$IA5ShD?2dE!maqDEQ8VMMX>t4iL zF2EpJApPB6n`(^5eaGX@C9_0+qyR@PCq0?pJLg%aXCjuauI`|+`zailBkHP1tP@OT zAQ=NbB6Qb+)`}VweH~bcJWhJK z2d}fk>Z=kduQAB5!&$n5o*U6$1U#yjf9yIwf;)=VqYW7($2b=k3*8=?-{YbT_Szw> zzF4>6pgL}+Vdeg#c#EAxh}|nsgilPod*K(g+!@8P6 z5U}GhPhG;9p>J)J?iYEXRXsU2AdQy*`1_(puz*&AsXS1fQV%yp()DF) zF7EMAv2G5#WY^s#iI-2tl;C(s$sv{kj0xaogK=qq{P9-G=3*JnsR#>=|9F0TlSH(v zThQu>PE~UD(jOa(DShyW@WEo(Q6iW3>T^FG+M1_Bj?e8MacgAjP{`7)W{>iFl z7%kR!3)dUI#ESCRF=B{tqbjAUo;RyTg1e;TjOf5YnO4+#=|_d3>gAAmHji=DSgz2f z#wR&ic4$!3f!++U#>qvvS7ccI#>3-aDXJ!?!~ygGg6+4cZhQr(ws4?k4Qe?$+lVm z=Ed<2t&^-t!81hDs4!d?KW+pKh#p&sj6A_JzM{fCY(Y3HTy0mNfb;A5eazWKj)BoW zn?l;(D$ao^ij3=9Xl)4L;~k|83%z!S>?#n>J8~?hZq$II0(tz^ne?-NgVr@jl3vt0 zHHPfV=jybd{e|yW7OczZd?~h8O-Z7{h;!63slPv{I-S4nS*{K_^@7@B6BLl(!t%5C zMqldGJ=^0%k831IXf5@!OVZ&V&HQy{&!)x>zw-h{omVNj&yigeNfB8QGGJabVS@T! z02{})74%51z~z=oY<#w&74Gu5-zyuzKlZYX4kx`#G(9k8$SCBJ5(9S;eTD0ff0R`t zz_m!S0)BD=xNcnM%lAuFZ~GHtwK_$BGxE&*Z~ljqOF3`JftTdr;YX2bWoVmtRQ&m( z4={HU1NT8tZ<4^W35``mqs!}AZHnx_7p!hI0`2Oh^(yz(5AYhO2p`U^wRJLYPP>JV za$A0BF_T07uqtrvo1V!s=cdCt4|1S%QibwdfMbB-b>}Z7wvw4qhx1v`wJ1T}AXj&t zS6tW!71x-i#f5qNN56M=#^+wxpsh3Ec(}{<(30Sn!S*oQnhulRejWA2Gq$XI0BlR2aqV*bUp~N7GJx zQ*Vs2fxBMb_0Nze9#5a&MnQzu<{zc7J(gVU1$n%s!Eghm#!JHAOr zm2kntLCQCiyx73Ri`~$e(|&)^hupXqPPsq`V@pc;mbe5m${0WZbE&<|G%d(!kq}ymc$eT@fMg?5W*#tj#~l7H94@W!PCl+`?@vubm=q zU~`{53E{)gh3RsV47TxLtEs6Yy%2>JuNu>DebkObb_hK&c>G9J;MFa%!Ec=RmMix0 z%pQ&t9AZa+Krj7xF4%i1+Y1M!GjcYVoqCIPN(xBPyY8nBn`w%SBdU1u7mf=@V`O8O z;!8bOk|wv@aPC(oJ?c7b;7+C?SqgxFqqXl3qb!57r?us!YmYD!u|nLad| zGwi;|>-oK2T7^H( zNP}RYHV!Kc=jMM~%jURPeVuCG%kd~kM@c4VO~=Vf*<+-usPyKx|47FByQ@}fHK#BN zOIBh=&jog_NR}%vCU*}zx`^scTb$HgPGJU3vG0tMT}IZdBTM!f`(Vt>_g3zvuVY@0`wg zo!6MTpZ9%V`*l68>j|dkhf34?azUiM#DrcWQ9^+xdx6L$uOP!ipcqFDvEx?+pv3^!?kPEQ**#8^d4RppV>Pe zNS<`@@hbD*_>_Cfy4P1467NRxXg)jcoaeDNIvv$sCevgYa-fi>^~UsV_vc!o4#AT# zr?ahIRJ~IUcEofKxKgR@-f_PB*dVX1M>iZ13+&al{m|HhLrMHjDZ~CaKUk-fXOG~;HxiOe*E-li3mA}Tvmyt=u5*Vs+ zU8#^@wFCE5>(cpS?+jZ7c_{~{i=7yS@!kou_$rkEwdnOK>-?r0inzjCD#%jzF!uH% z;dAD?ejXcdPFagCXaF_MbhHvhnbs=BFS$OOIAD18AO0E9X53Uiz`Z_tu)K<8 zEoFCdwV5)>g0K+m{wOi{z>^~^%x^qJ&SMrnR>p`NWDOQkirl=!T70T9DzJg}*2}aP zaqr_MH%R-tE+aqjPP24f52ub}13v%xAg_=Ihs3ny)@`rtg27DN9h?K}R4?gjU1{cM z^fE6DRen6)lbjifxXW8rA-;}Jan3h9(ad3>7cbouI3H;9#dqZc*!Lrc6PGI}(!SXZ znt?Js7Sexfs{l5LG1I*=her32ACZGy8QK9ttyYh%uK7L^OXXwS%`ybtt~;R|q= zwOkO<@UD+qTs~a**L#d$umf(+OESCb-WcjkNGyq*f3N(b`3UJM+OIafnf^_?)(x!X zOo*LMNN@1+QeNLTm}!%}1Xt4F+QyoEys|^UWK2+YM~LO|UR9Po@C*}(&jc9ngoDA2SPFgD_+6%+^vFq0#GYvcussoTHzMr1DMz%&1+pe3J z1Ri8PZnrQnRe6^<9`PpbvL8v%`rg9QYk9CSb-oJ2 zqi_cj^=A$(R+#c!ifOWZSER?MozW$K#Q}4y$KqSzp$b(We^-=YRO!t(jDJ~IolVh? zKYk>`r3BFD1%mVVg@{j~I^hRsC`L3?=D_qoo& zAZ1*o`Wg=S@j$4ktbmgP!oDBYOjP1LJC@p38`K9pgMxwpa^=@z|JkGb({37{2r6vJpXCyPlnW%s$&NeIOl&S3g!LHwhYX>eo@ z7|OD-;2oZCCf9`LOg(_z{(W&XrwRjXW;Vj!pgULgc$67OtK+LOyY=bLPrnssV7akM z`_tnB&lzp9){c5dk|%>V6K3Jq5(7?1>E*Rs-tC-c7F&-JK7DP*P1R@*78_Lj!1a}X zcfq3l!Bc|3E_I}+s{Oa(-(L~!r9pq{b?ZCll_pxFmx9R&w0RE=nUYV_(Nz_G6C*pv z=Uzc8x!hSUzHa940s1K9gSLWJD&X+$_`K6vOiVI#xJrTnA;{XT#(l|)egI8wMwgV6 zr(y>XXrex$?J4udvMa8tyy5Kg%_AS)u>?{(XSUxJqdTG!drUO8fm70>_2D6V-HY6ZCa>%#;L7o3a(Scxj*}$` z)>TuuDk83l9MPbv4;JK$u>cP0(wco!_Z|WD*?BhrisIqD3ycUnu^cf5xcQ}g&lGx~MQMG~#*m&fJygxW zAY-~XpV!s8RV-fUsLtJ=Dk^hLU)fx}{?6%l`xJ15H=|c0rCYPJvs*px9U9;Cl?ss8 zz3hf*npRlZ)V10B!E}e9%l_2O+^H7=y`IuDyO<1r%QeA4DHD|0mwZao2Cj23#M-MI6^Ic8brcpOax5c+a{#Xw#mQAJt6SG^K>0u(*6`hZP@F$X*la6#Dc zrxM>h&w<`_VHk36Lz!MT-WAcn?zo0PC2D>hlaqi~B_#D{J~UHmG_itI-!=}S>^V*M z=}FqlTCs@50V5rRhO*C9E)y6`{$%L*+ZQ^gFNc{t`m*4l7vk>zIM4b$lU>yZsQYNK z^k6Y-JB;EN4R_YhtM{_(;U~^@8BHI8DOuJnwIACcWO|%jw7lg`fnoC(PInQgs_ndg z<&prSX*1CloM54(y!u#gAT_UBWjy@KPi$I3i|J4!^qPj4>At{+ObxUjqfVt=^%0&` zf1NFySSa!)UXnHwuiPN4q@z6e0H*LO#y{}O;h=3z`kq>sX=D-t9FF*eF0HEUBO*QH zbQ^*Pt(X-~MqcU{P=lqJuB!RPhbM_8h+}5eZko#Iv56w zTFnbw@8rf2rh6A=`tB&o)t;=D-q||mJt>wpr|Nh81AQ%p5o%RtDs=ohQj+t$koqCJ z6ik#8VZgq)zoP29tek9Ax$;`av!O!`G)M_k+PB1}gPf!U+Q$0=@y3g=P=lM2ua}RY zTYE5?aUh0gEq_GAv+7>j))S9)IjsUyaPihG+)JhQ0ywGNoFd-oi+7cA7x5Ll?e5W! zyq3$tOx$uzGOh5py&05sw9IXA!J$9F`-0=Xq)am1bh{(3!NVv%r;5}EaWMrF7DOZH zHPjOW-HQ$w-JZlnZtk9AU+`=O*3|D{fE9~*^jVE>v@z>Y#~XR;BL|(AmNl$J%nCGb`aUe8Haz|- zHz4@sj8^vj#nBM%iS(w#sm1U>ud@dlxX$S=OJ$UeazPw3r0v9Actu_&QM(E(7k@jE zHjQk6&X!=gzV}^Pm&sK0Coi?1jCYllC+x?g1IYay&2t?2 z<=<4`Iqz!Sx9g~CJVX`v@>ei{wfJIU%l0Vr++BvEH@RY&KG(caz~{17?TR&;?jLFSXRkG^QlxykHGfX8Wv?3FiF6(l9_p!#xh zh8}LC@J6w%RgKjn0|d{_w{xymp=B|lrBxBf#SrfHGW}tP>W-ZLGkH;cKnCyHjh=dy zHusnF_pH)brO19AIrhcFxpJt%;q)F7D#~7uC(JzueVk&|7{=5r*_!pSLG$80 z+sK~$dpf<}XLfELQ@K?-udL+!8Tg$R6BXJv-Uola&+5Sfk-w3?yI8Yqgzr27Jrz_bUksIima4J=E zMU*bZPq^SV)vfI(kapz?gi(coXZ%>)Nzmznz(wfemfsYYAY#eF#m=>*Hw^I9R4oh0 z@<3`Ijl%z@oXMq)4BF#*dOWy|x=Y2m&W-x^+5@$*cqg13a(v*cL`hH&<&)K+(pr55 zw~X@DjO(a5yPkayl^Q0DnRH%>J_;{V(sWb?V zvkNom8*i=3X|61tDB2`4rYoz(pG4S=kEN?0{@nlWHsdX1g&j5>b6K&EDF5s8sGT0@qWX=c(9%lCCUkwyMl)wj$ew zm6HSXaR4VY(CZ#+Z#}28G%k7-vT+sSwpH<<`kC*^@q{03NIo53#QGPzepjFy>!JP3 zP;&BhEa$Qq{aEP5D%%{2F$p(Xe3tN_8!J>k(2a6=ywnv_PHs9`ys&r@F_)x|Ya;6n zCb<`v*%O^gH8FTQzbZ0v(YuQ8sh6jL2cl$6f5NsJS0BbG=?_WmdwT-M1s%8gfkkdu`NYDD8 zjLRZc!jur>NipRG$guJfycPneva)<=WmmLI_QVj@wVYTBUA2pJ(bVGQOnjqIh_2E- zP2DUUc+2IEx~~L7V5`zs=u}^sXG#ri0*h@RQg=GAbc`ryze~yPS6{rfM|spRJwGbxJw*# zs?@7Xn|l*-a$nIeYoqjSc>ur8)q_(+#@a`s$j{2xMzU}tdy32UK+#>%NQ3Lt>!IGW z3n|5ALd=v1S0WZVGqm{YftTbYyC} z@HO>gDW;XRN4f~k-mtw?ZO%aD+19D}hRTYEA(Sp#GO-)K)YP{z{Oxfe zNBhc(CNW<(qT6(X@QAWfL~+T&<@--~TJHWQl`SZ?Yjd=4a{&}G$P0E0B|twzuT=$o zxk1<{Mh_35tZjQdoHG=J`FXyTH%B{XPqc0pOx&c5$s(rf%LmfTtZnJhwgLTpgk6a7 zHA~zSa?KKK{c7A_~4S@@;?Lo|q>*GFE zDGZdx4t{S{M3gI#-t-SPnpq?8B=ay=Vg%X-y|xis9^_sgTTQ@**&q8TGlRYK+2Voqg{T&UDQ>g4^!n_>QJU_cNk0wd2H33&=qsPeOB&j$dtu~jj(c{TP!g^%KDN_oUC%DQLY03xIR%=}rz)H5I!>edJ| z4>xd}Su5O_OmQiz`pSTU`szTguu~~~00BsY^rI*}MN%@L2Qt`Cyj;;%Z46KK&P!Yit3U7(J3NGMOV&Ma>0p*(`69em&#bq7P zvM`D}UVqGi}MMPms!939$spiDtUrDanflVizML zpYBEp^(MbTF`ij#i!I+HF@$Svs;7@B8;o|5?qIgI7e=<(3sdx4yz~akp%t~fB?SA{ zIqdkV+bCDDSR(c<{ZV`i#qS)-r8hIm`dZe3G*8^^c5Pz|A8_Zr^3 z%y*XLKvnPda?hQSnofNrw0B>CLxwf1ALjmY@pE{OFw_v9&^Ob5W5iYVUaWYDdbX=W zmiCz0N#XKjPDsw9-xojosN@9Vc*h4kISsrNI z)lHjLDT@yX!*FsgaRRmZp?t<3`GY);LQnFoEn?3gq)-s>F5ImGi;CV0ZRs58I6j=t zq`bP)%AMTPT(|i^an1<9)gI)8l8_%uXYi)|Fo|K{bk-%y9iWv;MH%$Bpc`1I;zobg zXsAGXaGQ=nMl-tXbMOYfaXosbqOo$u&nhBL#fuWB2gdTPz{^F}(E6Z^ma1!piCW5g zS$OqlkP*-s+N_Nt7?lHv->4#; zvH3>t+nt)G?$QGZDsTep-7&er#PhTwXN`jse8bZgXrNLq$dvW8nXXPZs!?u3emRW% z8e8u7;MGw6OvZ&6M2xjL*LL1emTv1eTbWy6>z5c3&nt8k$Z4$R=;?78?_;vGHke>$ z-H***)C|t(MW3E`JKwymjdG;6Hg!GlG`YByli_+t49w}Sdk3H2v#oGIQCl&#O?um@ ze#8WxMa2qIRsphfpI*lgVWbu@mXbIr{M~L!R4ksH(}=*JSCzo@m<1^z4eL-K|X~7CERO zUkzE7>D1H=ahcf?^~_0TasSDfELUZ^81)&xk@aUkexuM{eEz!FC-TwJo4M}jH-jU} zlM)*sTR}P%z~FWsE&+w2OfjlDV@=HRk%-T^Sgu8hA{n^ z^ue;x+b~n4+l3q|5WTvSJ0`>wG0MTV%nO_6A={ou&czY)Ey8Glq)otS05#I0)_j{H zN!#wJ+p~Yw(FLaaM7!AAt@Ozke`p0+1aki_4xz` zH^Vk_9z6h+tL6-e!xC!MQY=j=PsV?M_Rt1+fi#R3_6UpDP7bGxBm)si!+{Iykc_S5E8_M|kuMD+q6Wgv;bf{{4& zyTS-redwjg0O!**q-E^e>MpSViO*;xNjzR^caD$Cs7^WR>^L}HMC$JTkw-csZan-eB$xJXj^x2-qkfxd7rJxw#8dV zf2YyE$2`m4E{Pi%t^;7fB7xc?Mw;*TJ`-@(oWGD%kmgcjmA>fsxo0apREDL$|Lm#7 z4Pp53{Tk&ljb2Z_fQ!IOg90gm>m9Oyu{?o2={IE(@L_rQQr8Upw@w>iR22F+&5c6_ zKPyA1T4J2JAyhZKUD?a_0d*lFMK>1frjW81{FaIV>{WIkzs*sSj^+GmfEl0x5<=An z6p-g$g1AF;Hy5ORzfYS@5>k$Oi}I09I=;OQ+ zh9!Q}TbxEru2f<7tp^PE_f&#JvH!Apxw(vJ4~jV7ckPvyTfxT(8Sjk{T)(cpWjgk$ zhnEr4#X0Te{)Zet&QoGSCr)}Oi{ihI3~`tE`An|!nH4ft8=EId%@4Wa1$`dgzrh4~ z3e^@d*W4KFB ziSl`KsZq%dGfT&1s#{{YAwtV~DK!Itxtm-Cgbs-ep{+u~bFS>`0JWI0!6B8kmp~PS;9Qd>>FB1tommF+zb1fi9?lKn3MCnEUH2jvN z8tl&8OW>)_YrkePT-akEvl3~4>Dh#bOt{myk84eXStyr28a!PL_nD`A!Fh5oV#FVR z@pCEmuJbKzz&F%XaU^gB1A)|>pHHzF?zh35?*TNPZxTa=%WoR&7lb=wcvmgz2YMBc zj%F(S=-5~8QB-qleSvKnJu;;5h&MLj2$ zV5~%NlCwnlD1A^K5soSH`TCN77ST#5ezdV@i_n;ZD|-yL%|}vEUAS@e;<-CHSky@P zSlA-@ZZ7}TSk;2qg1KPfo~s*aeQDVlBNfdg8^tXCFM8ddS$^f%05r#w<$UVdhe=X7 z*4V0Ryk|puoY&_dwX4Sw_pz^L;k}9@tIwG7PMChG8dI2e+W$?BD-9(QmQ>{)2S?~Q zO)iu`iRVdSSSNb_yp)@b=-XsZR|V+gjC=_G$xYtIne+q>BZr1q63 zL5LyK!Rd;uQ>UOhtQP>YLA%#5po$3I@K6BiSh&)ObjQj222+hDxNk|b3++;bc6*7? z{`ybfFI@FNwDY=5g}-^^(cgm*>2G?qDL9j4BEdHIY&2{jH*BLmzomBJRMw>581#tM zGu5+)rnw*KX|5{#+y#bmmT-H>CYOKXLu-;a>IKGf(pfLn((8xtzu03d(FHW7B5^jq zs}I?!|Mr@MK?}cn#dHT;={xJuUMSxndo0m5?<9fQk>FmP8R3R~U2jo|S zGci5I6mtXlf?n%lc=7;&_m$JC0$hB`Ix!E<)ouF<+y-(XwLf+)%zcS?DbfRhw7WhX zfU$hNbU7gOv=l8cEI(me0F6ZjG(wEW#uT>_en>oFQry9P$vKwn7Bv~eybgCpU2(%y zE^bC%qKdI1j-u}CoyAwiFZwQ;k^^vGCRRLjtIqHhhAj+u4v3#Fmpr|_6+=cA6W*kXB1JaZ`NQorcVT>xZngWP-=dM0M`2k{iP6&;P8 z#h~aMe7#&{2T&O^m%MGhWo6yB7#(08xX{M3b!iKqSqtUoAK%I?A0GOqmxy;4>KA)L zP=O*N*7Xr_EpNb1>GQIp5X@uiL`SoGB^qNW^ZJCBM;#5Gm{`YXY4u^s2|*?7A6ob= zP%?RC2<(aJih1AujF}}ON!mG@r0g8Hz$U-*jTm?z-IDszVCYNswAe$o6C@eL5byd6+e0Vr z?Z|{gCvcfr6|KywFG==r(cyYWO5u9?wnjz)dT>XvjEK5Y;S#?%LBOkPLxd{7AL$%} z3rl{3GPPtGKYP9Ev{ME5b|f9?ti_aB2GdE-!oCV!9x`xeoarMI#hW?EAe zN61)Y?R4}8cdAG*raLItQWj1-GaZwIi||^${u)!Vj@ulG%N)K{pma~}Pu)$oSS$TULbQtu;> zV&gaG1x~#31%r-mmBF^l;DlbThDv+-Ry?|t-XWRKt#{GRWF+uFUR_Npa`f=DiU-dV z3Rd*~>2_>$Xmh@?ijuF%EAVn&@1vxbSsE}DOiMa+9cC!^P_IoFtU0Ny<2Z9*SgnA+ zUA5B8!Gm=75Z{^Xj&>_gt3v@6SWIHn6zS%qv`PInc*Ng%u*lW5K=hdD~@bL&)TPcNb_dIkJ60u~89pL%)c zRwY8EhMykOdCg0ck^>j-c=yRdDG&bR_*jB;!lUZ2tL>L9e(qLpWk7X`jSyZXtnDAG zcxT*O3g)QzQ0O7EArZJmlFU`)72-WqkA3V$r|_T|lxTr=Z$44(pHTDF{j#}&snNd; zpXX8EpU!GE?Q=$fjrK6~@G5y$hY(qewFy>Qy%M3ky9~o%l_H+`LJ&BE{98DFDqz5? zIXU03Y$BH;DYI1+QvDzXN%mH7UVN*7Bv-h8e?}6Dg#7P*_Y~z$%2u4m4%#EZn06eT zpBU3m?BFjiM!L7~DlGHkUiqQ*xFI#lS|J1ky5GHKU$MP9nnFZihn;4>O|2dznzhc_ zDj+^PUv4K4;(U3W%1Pb15o#N$M7O%RULCi`*9z=|oAj=1aJ&=?a*x@gNr_sTc;q`F zxnM81ruh7yqhL>(Pzm~I*ms^asopqTbO*K;N5MmJE|d@@kE974xf?NPFR?km`(%9r zN2IKV6Z;h?*{A5p{Yai#&W5K=JWhCt)mo8;RhhXVc+?x_xO_wF0Ylr9bt;b^jZx?B zzLHS1WG{-TZ;|mX8g)xf)r^soqN+H~(k1n|fh*~YMXMvGm0GCo(|b-DDitE=^Z*75 zjAM^`Q&+8LT?tE*HyK7|;#wdSG+7MMj~yE2BNOTed-%y^<@k^EgEH!K_Q;iW)Z4mh zRSycXga=uyEt)i&Pitq&622?6ca_hIozrXRO5aPBvfGUcT~}jGSE^Ow6dzN5xG2{g zY%Tt@oZ8{U1F2G9NT=Sjqm_S`Vh(h1K`3}U@VM3}HQG3PDEWKv0EDoa;5v+R9bCf9 z+QW&FsItM@1EWy-ZtxKy?D(>kti-wxvUE1z(e{U9X_Tcia+a&49cP5wKYcrfo zaOl$FYMH4vC|WYqmUx9nJsa{29omVi*_*}rEg3}@ zD0GWsD-jb93k9b(oby^gXe`_MU+;Ei`q9`l?UJCpjIxc2xw;~B+V~&B{^rpucg&b* zH4PDXSpou1rbl44(YTn6kIaK=L?q5*xw8Xjrmj4*s=S^^JpT%hC!1Q*n#57E^J!C@ zRl;`lDYt3julO0}GB60q#Ih{i`Z=OK%jCi^V&gw*EP;A>0H(+3y3L%A9>2?Ja`sj0%1L+m?( z4|;^!&~panNt@pZ`>!IgN@>=PgA?zSWY$kOuYVzS&BBAO$+QZ~r$j7Mr~hn?`>JCy z4B=m^_AHRH>9`@cSCKpl^(d62cOurKNz>30Yf>{G;SEWmjB>`Ky>cO=23Kkpvs@35 zM=|?@yc9#4u{ZX4nSZ-Uqa~ITbxNs!A6^{a8&Oy&tQHn$k7+%e+VWK0`5ZUHH2tX$ zQgK9B=;LU=N5T^C$-M4o>7#|SggKcZ&Vlw>4~1Mkfc5Xc651{3+#&7goLS*GRja%e z@ZR~A!)&j18ZgwJP;YKMY?GaC!tNMs%#>&~S+H}IkN#d49mVK;1~?m53d`}fl*Rc3 zT|+2cf=7&X$?QCrr{kE0r>lq&Hbapk0)^A!%KJ;GmAHL0kEmOxf`B? zm&$c)VwIW*Ja6$AIhw-C2@uM;+By{vT{70X3`P_SC3Ji!;y3sG<^a5qnC4@+L%2g-B4Z}A3XFid++Wg zL}h~M1Z>Jw!MXfHPyKS=lj%# zv)c7>Y6Nop{5KA^p5vA5c6-mqh`8JID{ChNNmnAP$}&ZEkHK7q{MHm(6fO8ya^t^< zD9IngSZv>UHqb)|`@M?E^a~$*}@-EG) zu^Dhl3c{u?^oK5g)(|1`x4$t&pMqSLq>EqLp9WrpZK&`|rmmV8hF`u!M z`QRk)J?p1O;(G8+5_kIAuD0;L`sbQKXJwqC>{c^o=eSgGnjth17W$^%YgkDvLz{bT zW6@+GOzdU3v4E5?-OCzrsjYU_uV+mR-(9JOrr&mm{VHo78ANRv`gt=^Tl)E@hjiuY z|EL2*H)jKR#TVc%se7|Ug@Yj<-7mjKt7siv#;&Mq@i3G{!Td7sOiCam`#pONfAwh_ zoAa{9_QdStX^i9`~ zprOe_wLPW@cIo>3nH*Ce9<@J^JaloPp3%-k@KC_Uo6c7WfeeGOaSf)P7Tc^PdEs%{ zRI>3N!&1;$`73hW>Q<>fPy?c8dJ{vhdmGLe{ed2P4v%gCn&`7P^BAyCLB3T|?yygZ znJ#^!&h8RFadR_nV#vd7zI->;v5z~p6r|9${&{gp~87+r~r%nSA53DyDkJl2hiSL6VQ*v??b=(}qGKFvEC-W1474#k()4 zXffUo{whjsy8GUmGp17UGv_4Idw_ z+rqs&IoGP`m09MPW$4JGt~zm)%NVQ5Zu=g1p*G{1#4)$6>TcqMfm>=FCnx)LRj6$O zk{N^(?9j;kydnd#&r6C$^w<-fo2i-BU$U}%mzNP97hEy?@-2=ulxVU zEow?;N!cuygU7ineD%t?He5>!oY&6>tl+X@M*eE>*1yt+P=Ker;coi zDd^ga4mZ17*+o^KndaTEX~|q%;aP9C^L9IQo{PCJ3KTAO*e1KKdgGzR>Wmz9QGnyh zj|+)*i?3L|oQqStvn3wXCWgDcr38FcM6H;7;9^(!;bCyDGf~KoadNZG|Pq6sEzXq^g)QaZTigOQuJYo49gdu0DqThK~^(S@wDSPA&}0sf%?pSuGaYS; z{{5jubK$Q_8ThB^R)Vuc;>AHVgC-GxG6H(zGY>>!0xmg;Rv%6~rzs#!S5*bty&ri0 z`%2vmt!S^w=Wrig;})*`_T_32b+6pecis;ttCmuuL5A34D5L0EjzsVPYnzQE-GeJ@ zg!=FYcU<`i6Q=u2o1$K{6F^bZ zWJnLEuZehJP)&aDQ&+t6zA9gne4wwa#L38ZjQ-Sn068F-I9O{9$TccOVkI^_Ae=#2 zSqrDdBPXc_p6yMG8Z#I+zWW$~i@N!z48WCA*n)iaeQcohP zR9=VQG8L<0O*;ab^vlkl9ejL6W^u{ZdleKF?a&SO(StILl@>!!$yY>#KArJy%mIxN z??F*V=KcWCeF6XIQ&67lKlf0S>U#A(U`cmpRwKh7?5eA#DP3NQDKC+rq5Leiq3jMtf4BQdUZ~TTvUzOHK8ap&o)~K3gJYIw zu3O)ikFs1c#ONcFCS><54}^xf;M!_*-B*S#Q00A@09uw?l>hP0>$fa%Njwh?qyu4V_pJ3oSVi2tjO#H|hr$~<~nN^cl| zio&5OPANtdib zLn$6|$+%q;=!NhI-?agnMGLQ~FnL*`XG_JSKRFdUfRXnr*OqH$x?=H5d0NG zrUJelcKIFoB@3LUQ=a!?zDNXXQPvE=1%0*GL#+&~XwSiD$N`M8Go>=nsZtL9_inX7 z?RKd$Evsi7oVuk{yI{0(g)7v6T%rDUh%&|Qv1pe2*S$A;tztdU*6Heu*}N+fa1pN&pZ+qZM*c>-~do3-X(XE?@$dqv!?deob+xK1gc_(iDY0MndS%UqPZr`k!y%3mF;f8v zV;N1TrDRmxUq~%OshvY&ADUFZk3CpU#l1c6<$td9qds$98CqvvPhV6kLvo;vFMZ5$ zao7myqFPsFy(=YYy>mc(pw#e$RLj}woikmxWIE&`N%{0KpccW{z`@j{O5dv3zXUZE zNv?h&Y-Y-o%JFHXYea#{*Zr-)g=z8Tmv_~BnT7P5i1mh&SNKe2tMBb_H_{@I8VYR_ zW9qV{luT;{u=xp9riB!xteUMvUv1-Sab=IYV90d++(V{B?pn@oXTI5U#Nbf}&X5w^ zl04l|z=-0ZQhQ8P_N}02C0sr%ee{41q9u>5jF~QRd~9+_H@K3pL6k^zTOT(5xA|5% zE3C0-?>iRcEy?jUcuFyz((3y~#g&cP-MohIVLE7Ef_3f50?6-M74V`+b_v#1heGPM zd?|C2IKn)OiJ?wNC~b{FrqPETf}jtASA|IJ9tluU&NRN>ys>#fYwz8;UG1yseGF6b zDD7vBR6(`dyg{=73O4H;OdELCClA{WJ`eOl;o)FLfPrIm!1&@n_GXb2aybqatar{e z*Yb8m%G%`pGm@EmoezyC>}fLx7i8G_$jT}xOUFwpN98kT$?|PXv-jXmDSj?B zZ;kA=4|YG=5oWKnkrYFG97OfNYe%y*8!<7|5e_^XCEFg|(-1Ifp~SA`x+{O9^@uq$ z@aiSawzcQ4fhId{clD`G+Vy@qY((er2Ob!j>($*4*k^;&z#)DP;n`0ASrQ`RzkB4lbnOV+{PJyN|ljd}@14i2eQGQj< z{_OSowG?Qi1_g5P@8|H9e;2pjLDpA3+HP5=pQCQJv&Nuco(X5a`x(P>E%GahdDdoA zRPZz5(b_Zrs~&^K*T&4GljfF_Gq2Hy?+5jdtx-(BQg4)-+>o*_mzJsDyYvSLRf1@2+CM9<4kVr;^aZHHmo9 z%5_5~an?VdkR(NSzn`8_RAU~rP)}crsmd$DbvMn$C#Meh^KdI9ku-=i86RTqji=A0 z23>y;t7^{k?%i6D)zBra=9=Ry=s6FI#9P{e}Z>S5d=^LEmG`wc?`j-0&QN=`Pyc z`s&wo;eGT*?~9Bq0A7KGVHL~B$CT*D1<~sDj}#hEn{u~EVje(<^^!!K$8sCwG8Fee zo#--)nt>rQ$$g<2To+CG>r037&-hhIg}8>ntWN(%t88=a5{SoN!=GjgpQnMaeVdVW zAa5U7b?<>^r>ymRKbGHQptdg4t-gtw4jUdUewEsCCPQ&I65VV&6N6Hi=;eYO-4NQ9 zk&yt$M?}@Eazpg=^h_+Zwm~bukM@aEA#G^}Pg#FsKBid~JB*Ks65-TgbI&DvGZS)ES@ZV19mq zsciHlOb1{rc8kSWRD@M~?9Sk<&2z~;-dv`o=^k}w4+UdB}@{EI3& zh~3qhiJ+$o>C4{IBJZ9GTH8^+h^SXQJQr&zxMVG;ZE!3x*zUx$beA!Wuh`o{ZyUqs z&Kfe^+0rK}JGKlM>o)cyXTIK|FYxXi%zx@7S)KaG>cK~H_?92|ZwYnchCIb@j=w*0 zS8c}FRD~yEP$@u)>I?0!c^vQ)_@Aduv+$ zA2R;OWTx%ae|e70UYi@kC4X-ZfbPI-iEHbw-9^8$9$y>T z(6!1p_0`rkza04YAh>Pq19U@?!u<7VLb6Jy0a?c0UWVQQ`N^s4^p#-dX4HbS)`;8d zV-G&&y>Ws2`+BMj5j7KW<2gnF%1^AjzPoW_tb~p zLbZN`d45YrADa(oLdnCeI#YNbn_5+7+Fv@11F3+MChl<*Hd0!;ko@DZ=JriTjb`4& zFCOSTX;5!$t=_6PUMf3sB_`gw3~TFhOormU_Z`<)wAl=<_Hb5%jzNFUV4fw-;P$M+ z?Yl;^m%Gy`Uk%ACM}^Hg>lFZd-M=EK|DS>4^V~-mGjWh;=58^iSEJ zm^$yUw;ypMPVdhP;V3jV6eww*(u!Fe{5GQBU*_UqfD$)X!wUA8o_1W(9nTu|o}C%K zM@UJpN|$dRWm`85^<*A9`W&yiafy%7AiwNWuD|@{YdsSqN!}yA02H|~00OypaMnro zKe>8bj&5wwdUWtxnai@>n#xF)0S_BT^L;Dm@y?pEu|m~JEoysK6#^XRF( zp1lF{F4?TMBP-h4C=>`;D4!K?4lip{rSqw32Zxlj zSBQ#FSL(ddoBk2=U*V0f?SeiYQgA*nz0k8#J8JH;3|b9R8~k z0k}1;TyqnZcZK*XT6?M+92R4CY5Yn0-$Bs7_2YlWYCor9{-blYpe6tB%K*v){Pm#* z6!XiBzitnx!JKGpA8N+HKX&i+5am#`ExIOa(bZec?^mheR|EXErJ4xznv>l}Hw{N* zC}`bV7xT7rt54TsUN0(#N*?%k+t3c$L*`f(@+-;f)z8GMpcknCH0hgj?$nFPs-z1g*)FAeqQg1lQcCE((-ccO&XHM_M(T^va; z$MjH!O!jZTn=DfNI@HC6Nvh75Q}sj$Z)c02Y4hv1q8T4krUADl(0Lgc`tomsOO^9^3+a|7 zO?R8M`Wow>)cMJzRPUq&%!T5b4zm2WKf>xfL4&ENrV5~fIcQD!3+k0FL+2y^_aF0( zf4&49BowwVyr;ItApXY7{j2kDhhMkQNq;IzAmrotRrPZ>cxN)c7gJcXvN_IPK2jhR zKt6AB1rL&Yup#9E{vFu)_DWV#bQ_uFUAzFk4(3R;T^(_C@^O7mgy{b6-}oI;2vD2E zy}3x36~QPG=nI$_!RzRNJ5aL|6~m9&fdPwc;%}>3?=HBqfCP~DPV@@L3xTkvL&RM_ zcZ47SVxL_*p(1)n75psu)<&6eE&d!h(Vn{BAqTQD7?cQZBrH4D`eUDhdu9*Z5s_}Q zi~G+re7O2wpLWbney^Yp%lnI9xvidxUp@pF6A3nv4|eviT>~d(Ytue}10;7`E-;Ca zLGaWb5PY3t+95+mkeAZqiI=>ORnxZs6%WX^Y}44O)j&t_F4C)Fcz|^NOcx2I zkWAz$>X`8b2+oHwTZ#ZoY2B8qnjo)>ro)+#fk$xksD5NjhBedYCI~(e*EdeC**Kf& z=2mfP&w;(%kob>9#QKbvK~DhrQ;q(-CT*Urp`~q;e|`$4i~{C<_UH4qc*5s_;2%r@ zasxm{bQu0PFqmcv_>BF3uq3QbWzD&Y+KOO3i^tAAe%|*MOO{*Q`=*nXbYBoGJa_O9 zQ9`bP(KCajv*e;GIl4QpZ|K&x_H;`7Pnv}dafTPTZ;9gjj6Y8>$_*h4(M^xi<{@iZ zqjgxSI_4?_#VP7T3vy6)js5c}b)Ng?6Ux&2MB2rgSBN1V_lzfEJW25~MM9@l_Lm)yC`f|cf= zIzT*>D73K&*Dgv>suQSX>*H=cJQw=<)J+cD`5oMg+43k6;K&Eey2u zCDu<*?;!$8T>tab0M+g-m}8c*J15JqkACQCuMxM1X2mEvB{>L`Og6m7Dgr}kVJo5I zK;h~9NgDP0Olt)ryiUF9-uQG=vW2pyMT{Nteei+1?pIpXTK4_C%DaDPI!a@p*N7TD z0*@iM&%0e&sh8?}V5KGhn^Dl0S7I`0T^nyX~)mj=x`DYIADd_93o=c{<8lzXM;q zA;xR=+gZ6vF*K!&)CTtim#ZVQ-GxM(QCe_i7 z^-U)Ad6m^{gdrms-LHLjp8dV%`goWXuS<{q$tFg#m+Vujn1jbZnG$dxG=8LZsQTo! zsFX%EU5PxpaXlli zE2T1?d5*VU%0v_fC52J0XVP>fub3!Jgdt^;XOohc@+=H9UgI%i#&4fv+g|S&CaTG`NEEq=W`4k*o?xI_%idVwjF^Z*@g`Fr`QSiX=XNt zk!@JA^L6pJ6J>t>6PDJ_PPzmAvOWb2TlvQm&uHcpCk3|5aJmthFPSW8WQ7FyxJB2` zZ{cX*+m!Obct+TV%HS7Fjlf>?%*nDuRA-oa%MjiU>yyOtyg!$S@u=L0FX!sE6eyk1 zWW0No#kuioZ=V`{<06~6#~>60iUQ6Z_&BtX?UujUNW0ylH<}ry_9cXwH1csbb8hsk zA~->EbKv>x*U74f+E=G6FMTX7Ntf;n?;r209}^wLRU$aZCM|DL$Y(?oxLYW4|Q@y<+*ZUgg7(TzgvbxHf< zk9<<*TaovYw$JwANhW%lz0Djo9cKLeOO5!&w$jV^Lc7Ea`QrD;DS*;~y3n$Y)3Ukw zlwb~(-*KJ0`J%wMcfIp;S~AzAu7!8KFLuqJ_5yEQhc*5$+Zd}6 z1`q*h_n&3Y7I>WR%Vv9RcvV>Hw`+@>d~$;9;FcfJvzlo4FpY z(heHLwwAjgD?pvEEk%AQ#CXp|L7tSzy$3L>F311}Nkr2c$mNoaO5X;(ph}F&qpI@S z!iO?S)91v9h0kOP=p{YY7e-!_%*CFUCMlls*wcB7rg-FIkq51iVcW!O>g!fcvY!9>Hc)y95svxOQ!+G4V7Y*griDK@cGMV zf^%c|3n|-;i7t+5f?1M?H^_t}1UpMKn0#i96=p@%nlawAjNYbnYlY=Jv{1E1UCpBk zj468r@jkctZkbjnheVUnYj}!cpOpxhZtwUE_jV!8Y0_3!oKGLn?`CK*o<1mGsTHV@Kk3(%;;^^n?BKxgWcq2NmIOC zDvqfykQ1SHN7>t!pgB4obAK5_j_`Y6)}(+_bHT3(U^UE_NYVI|e188EnbBAWuT#7Z zZRdYi9r^u2?s*Ghq;mPM;r7kWLfluX3uDa-B~pky3Bs~+@0h@#Xzk7IxVt9{F7?n@ zH51h2H^=QvB*ZsRn3k+mCbghj)p3+C!#VJcFdU03!6zFt0;}E-8f`8z(&QXbHrTI2 zs0*m+c9oEf_I=Yc^K)Q_$$r|oy&=ow!e(tFtSxjN|3^2wAsa>K zQuRlD!~3@jp{+I{jKq^yRCDzoip(2q;fndMvy?V(yUb3QxMgi)V*7Q=gz?-B?pB!- z#ut0nizkA-;0qZB=^3}%_IZ-A!DTY-Z;zmQ*iGZoDRYMQ-VMX#sk}cjOGc2H%G{aj z5OzIz2;+0ZN#y+kA-Cc9S8Y;=i~1YMYK+L5N53AB6Fec(AE5uO;i|UV-u@xaxox>c z+-16VHasol9`g@Z6!hrulxqB~H7{cDAhs@imrja?xDqv*<&cxpna{91(&qWB$c#4m zysjSm{_4Sw%w1iE`K$BeLqTHD?>RVyY`kiZA@tl5C>y4ED07uc@441hcd6gMd+M#? z_xwsCENteLrUohJ_B2bjGN0b)MQ<8?Kh=`L3o(K~!`>S9R$_6d{ru|$ps)^9>U$j; zYL?gOldh<=g2(^_-?=}-9pDIitPu1~u7#j)5XzPc(WD?yf7e(yWY^P>RnUDf^yf@bc#Yi-A`{ygOL7#wdFPfv5- zya9T_X6h!y+n0=ef!~Bl^_wMsiD{#xo!u7I`eNT_ItBTPE@&W1gD}d&eLT9!&CK`? zr#iob$-Go)%4C4kYHK)z?}~vt465&_szI){b2u=B-4!sG~1}JC(!llPi7zo7s}VzXa1KG7y88uCDo z`}MZt1IXuM4_k}b&J_$xCPVe+_WZ4{r;atb59Rdlu~`!plhHp!+$L!&uYlSi!is)s zpks7qd-&8NH3*m~RV>^cEWY>E$zt_3^x!vAN9}_#T$sM?{C%%ee~tDCQfu9alJ@6-p8>jqZmX-y?x_2?0b5X zC_Hmp-@a|;?Zlm2)ru`3h?fvs3w>y!*3K8>BH=~_bB?%HYGo+6BfQk!ULml*1Qcw4 z5dI0MMP(+BT)gg@pO~F^GAk9knRgjtjrgyM_KqC;jz>6awSp-anK>Cs& zjREue(T!lcFRT(j6y%4U2?+duAxLxX;ye&I4`?$e-6Q%R>4Ew<0bH-8XuhvatHq5 znvf=qxEnNljq{E&4Xwq&j*WMW+<5tV$_>vdI8wV<*aRkvi@(5-;JWBm!B5L<_@8cA zxc|jku1-D%j0cMp&H%8!NUg4X+Z7P_70E|-0sUzH7y>@Etk}$5Xlc@r=pPPiaF#P*7-ZbZ>KLZ*U+IBfRsybQWXdwQbLP>6pAqfylh#{fb6;Z(vMMVS~$e@S=j*ftg6;Uhf59&ghTmgWD0l;*T zI709Y^p6lP1rIRMx#05C~cW=H_Aw*bJ-5DT&Z2n+x)QHX^p z00esgV8|mQcmRZ%02D^@S3L16t`O%c004NIvOKvYIYoh62rY33S640`D9%Y2D-rV&neh&#Q1i z007~1e$oCcFS8neI|hJl{-P!B1ZZ9hpmq0)X0i`JwE&>$+E?>%_LC6RbVIkUx0b+_+BaR3cnT7Zv!AJxW zizFb)h!jyGOOZ85F;a?DAXP{m@;!0_IfqH8(HlgRxt7s3}k3K`kFu>>-2Q$QMFfPW!La{h336o>X zu_CMttHv6zR;&ZNiS=X8v3CR#fknUxHUxJ0uoBa_M6WNWeqIg~6QE69c9o#eyhGvpiOA@W-aonk<7r1(?fC{oI5N*U!4 zfg=2N-7=cNnjjOr{yriy6mMFgG#l znCF=fnQv8CDz++o6_Lscl}eQ+l^ZHARH>?_s@|##Rr6KLRFA1%Q+=*RRWnoLsR`7U zt5vFIcfW3@?wFpwUVxrVZ>QdQz32KIeJ}k~{cZZE^+ya? z2D1z#2HOnI7(B%_ac?{wFUQ;QQA1tBKtrWrm0_3Rgps+?Jfqb{jYbcQX~taRB;#$y zZN{S}1|}gUOHJxc?wV3fxuz+mJ4`!F$IZ;mqRrNsHJd##*D~ju=bP7?-?v~|cv>vB zsJ6IeNwVZxrdjT`yl#bBIa#GxRa#xMMy;K#CDyyGyQdMSxlWT#tDe?p!?5wT$+oGt z8L;Kp2HUQ-ZMJ=3XJQv;x5ci*?vuTfeY$;({XGW_huIFR9a(?@3)XSs8O^N5RyOM=TTmp(3=8^+zpz2r)C z^>JO{deZfso3oq3?Wo(Y?l$ge?uXo;%ru`Vo>?<<(8I_>;8Eq#KMS9gFl*neeosSB zfoHYnBQIkwkyowPu(zdms`p{<7e4kra-ZWq<2*OsGTvEV%s0Td$hXT+!*8Bnh2KMe zBmZRodjHV?r+_5^X9J0WL4jKW`}lf%A-|44I@@LTvf1rHjG(ze6+w@Jt%Bvjts!X0 z?2xS?_ve_-kiKB_KiJlZ$9G`c^=E@oNG)mWWaNo-3TIW8)$Hg0Ub-~8?KhvJ>$ z3*&nim@mj(aCxE5!t{lw7O5^0EIO7zOo&c6l<+|iDySBWCGrz@C5{St!X3hAA}`T4 z(TLbXTq+(;@<=L8dXnssyft|w#WSTW<++3>sgS%(4NTpeI-VAqb|7ssJvzNHgOZVu zaYCvgO_R1~>SyL=cFU|~g|hy|Zi}}s9+d~lYqOB71z9Z$wnC=pR9Yz4DhIM>Wmjgu z&56o6maCpC&F##y%G;1PobR9i?GnNg;gYtchD%p19a!eQtZF&3JaKv33gZ<8D~47E ztUS1iwkmDaPpj=$m#%)jCVEY4fnLGNg2A-`YwHVD3gv};>)hAvT~AmqS>Lr``i7kw zJ{5_It`yrBmlc25DBO7E8;5VoznR>Ww5hAaxn$2~(q`%A-YuS64wkBy=9dm`4cXeX z4c}I@?e+FW+b@^RDBHV(wnMq2zdX3SWv9u`%{xC-q*U}&`cyXV(%rRT*Z6MH?i+i& z_B8C(+grT%{XWUQ+f@NoP1R=AW&26{v-dx)iK^-Nmiuj8txj!m?Z*Ss1N{dh4z}01 z)YTo*JycSU)+_5r4#yw9{+;i4Ee$peRgIj+;v;ZGdF1K$3E%e~4LaI(jC-u%2h$&R z9cLXcYC@Xwnns&bn)_Q~Te?roKGD|d-g^8;+aC{{G(1^(O7m37Y1-+6)01cN&y1aw zoqc{T`P^XJqPBbIW6s}d4{z_f5Om?vMgNQEJG?v2T=KYd^0M3I6IZxbny)%vZR&LD zJpPl@Psh8QyPB@KTx+@RdcC!KX7}kEo;S|j^u2lU7XQ}Oo;f|;z4Ll+_r>@1-xl3| zawq-H%e&ckC+@AhPrP6BKT#_XdT7&;F71j}Joy zkC~6lh7E@6o;W@^IpRNZ{ptLtL(gQ-CY~4mqW;US7Zxvm_|@yz&e53Bp_lTPlfP|z zrTyx_>lv@x#=^!PzR7qqF<$gm`|ZJZ+;<)Cqu&ot2z=0000WV@Og>004R=004l4008;_004mL004C`008P>0026e000+nl3&F} z00E>bNkl%vjBa!{y3q;Ujm`<3bFOy_4K_g#%m4^beZPak zty{Nl-9Gi#x$&Iy+V4FB+!y8FK>EwIxUHu%r@z{yFF$$>Foi}JUJJdscaML|#pfN* zD?k45-BX1zzc_d4^$(8x@1Gy_z?<9`6<1K$pB($lhYVd|8h>^+{4&}4^AneTa^%cU zKL5}yKg<^=edkit$vM^O!o*W3!!NF<|1e?lJD&&d7E@k(?KKej&;RZJwKL^E{muV% zpD73VeR`l(`~OgwDSEa3qxU{BXbd3o*>66qNX-KgqmlqpOnM!Nr(SgdN1G1Lke=3M zv#CMkk+e4fGDG`85LD0BZ8Bvy>D6G$I)7b(N&rb_J$#`)FB`HzT0Nvw>xPGhLCP|2 z860U;8aQGxSlPO4j-mi@0)ZfEji@Zio0~?1(>s;8eX9CiQt66#11TCk9*YM@qX_~> zz!7kyk!f0`R;$v2xPT)7M-fj1j)2q(wLM}ddwxI)iF|ANA*DpbGRzc-ShDLRTbJ)e zv0F(lQSL>tH8d5>l<~1~Ar(D=oM)_?j8Q4EPokM`Qn0;PgdEtJUtnlwA+=v-5JoOk39&U#u{i zEJ7Za&*hqSk11mQ%q*H$;+Cfmvz zx`#$*A5$h{jj|qvEn`!_ zCArzw?z745?Ae#V6cDnrvUgdg=&X8;$)J4(vgn?WVZWJ@o)86&Dc6H{QP65MW<7uP z?A6rDzTpqw{BJMb`jnTI?+a6SFjHu&G>9D!H+apHbgee#bo3lsy(@y&KpVs%wBR0 z%)8rzLbTo~Np$!1h51P6Ecn%zv5jNw9hm|`oJSluc6D`az4|Zz_50Zon-ZjUj&N|9 z0zzb1Dm;?b7=c9S97fp()@=i*$>Dj&IJ=^>La&CWEOaWpQf(5;bX!N^+n546Q8wGI z(MwNH5X(?xPU z=a%O2rAki%r?DwrV=TE>P|>lOKNkD5mUs*l(G# zzAl@cLGSK>@NhF_95If^5n|K(8k)PNIvYU>i?6Ql9Oe>6tq}a<$P^(s_Ab)30xX3p zm|PKD4akzHElu@z>+jxu6jNpza&84&42VlvRzUgnQ;j(hgsxjrk#$>h3N35V_d4(CmV;;Gl${ zFF#r1DNGKEH^!bchnoPo&m5tTyQCTNoqlJ;Vfsd4$qWHLROh6YE6hsN$R zrJ=r|xv6;vYHr>+{i&#B8&mSq;`V|ml)+-x>*=|@bAwBw^1h+EI#`;FkMtB(-JeX7 z+4NUaYoA%B5U_;Um{^0(;CuFWfkE-e){sT188UHk9eI2nBRJ{?o+n&JwszpS5kaBP z(IitTRA?<0MB?+2?TflamIjGv4vndJai##75|?u4%GD5f3~?r}F#IeT-Fw3I^5yF( zV;JOSPg?ZBZ6lPl_bV!1oDO#lr zUXxL7qG4ikhk0r6V=-&erz+EA+K+z9-UYQxtB@$vN}WlkHydprZqymo5`{sj2Jx+A z)@ZFd{kFs%Nu$slZl;*Dme=0+VQ4_mum96qZt26n2q^j1oA3VgM25?yD=)HZ;?Ofi zsWf92v7kqUM`P9*WP@7w;#)}$JyUjhXN{97FNY}$#LhjXs+RQX*4?MQWeRhR$zlRx z9WL5irgU|7IjFC_bL;6rrahM_;eP($ShXZp%hhI$(J!P@DAmZ<nqjcM5BRH_!tbG4*fH0)Jwx3pZvNcG^VbE- z-gxD&-2L3pkoSt|3X1%L(B^;t@U!oH_~l1|F0N(SCsMD!ojLgW`8bay?e|WEzZrb@ zSZ3N!FPu1ARs63%|IG(i&i=~9ZMP~0D)4?<70iOyUb8dh@Ba30?=$7F(7tJjz2-VE zhc{R)knBBwqsC&?z!9JpX4e%1gyrZB>dncETg8)(^jA#-YGXG4K2x5Fz*e+ZoGC8z zGO$-nBA4Qa`q^|*Rb>?o6>2tE@QW0X&!9EXsdNy*v^1K2v~3j!C$DCKfrr zu)<=?)H==csckKh2F6Fn*O?SPae>X3;TY0YEOi&v!e*D-0i@UPRK(~scU{eqnbJryx`b(H`V71_!hqY@I+BPP!q9X$8LKBls{h|AGOjqJ3R~Jj>TfJ zspjp8)#+KgHHH94vG1lA3D@lri(wbk!q{x?CQ}?w+C{Z6z?Az-xhm1F53C$a*;EL- zcYIjc>*>|SfLa)xzP6nyyBHiyv0AMPB)o@7u7gkv?(Q-L{F0cM)A85ldYk&^8;VjNQzqDMjhvj`52k>S7@vr$zEm20 zHt}k017dXrWE9t)ppH3vCMsC3T6?*>IwJt^f1lk zWR?t2*EaSx(YaEiiA*LxH&YA-m??{cPnegrY;NX(^%g@t{2l4(u|+c4G#oRmy#%IM zHtLm?SGCJBMPqs<%`o`qKS?cY|CplRkn9&OT-aTv*oA1_tZa6wB_%TWihuA6wmuv# zXaAU@lBra*$=vX>AAIJA#jSbEtEDna;>&h&ZVtN@BDDd+U>G32j3x`|WPAF2fBOSEVHPW%#NWmgXhSm$dbEBRc=*$+g}nr( zB;`!nnF0uGFngM53WHrOOs3kVF1M8_c7-t86I!1Gi4>p#b)z1BR(xzzO~_>sxtWlbbm!=r@Mib_S-w{4AF*u6%OB4elud{Sq8=x;F=kkb%>Qro|+7fGDALQ}@rq!(($88GYm-s*J&f zHL`s!gd?&1Wn>41L_&2pP0V0zk7i0)TW|Q4pm`2IuWGn@oPIqlyEO8Ww@b)Yrg%rB z*556@!|H~ga_ zGW@R>W91OAwi5F7k>p!LiP=LBGv$UyU|?#6x4-{TTasr;dSRGPTvi2*j+4@YEv)%rrkpx?YS)=RI1P4=g*7365 zj{|w}^lD){G|8-<5E+MQkBg|whk_{z0a3}LvJ^&}Mre9O=S?V)3bfYeLCW6sQ}&1{ zV4ST4dSHMx8naHW1gf$+xx%Q@?4a)@R~uF8r%?;jtBi-6DgW}?FW&m&=Rf=PWzR3( z`Q>-M_3aN5@6v@o{m<{e$R2c{E_1k<0?8I|D4ay5B`;xgkXb5NfANj^hn^{Wp{?L# z%DyuNLmJvswXivS$6ly~0d2EAWD3}yvY{Dv$kf6(EZ$xsg*@ocwVGR|92T{(?#`aQ zlqrP1FHe27LZ?!3@LI1`XBikp>qHc_LQ_^&rBiByuADJyOggY-Ok)HpVqyvsH#P2Y z*>eendx>gcdn{-P4+z?=x?dwB_cg;thPP{mb#(N;M76NKUc`PdB_gS#JS-?8`Br~p zUd;8~*9?=2rNREeJry_lyPJ2V!2LtYAqq~WIGN&P$^m7{VN?s-WD59mYJ)wf87ANK z1a%Ru92+0=ofjTPy)I9T#uKA{_8Vn@Jh7TbUG+pOpP>#o-63_B2Iz19$KTsMg*i0j z{_nr}8@o!F-Cx*!pp4B?^NQ;V3X2aTP+aQD-pyOOOtt*`pFZ|w=v?pIe)A8%Je3#o z-Op3rIDhqr9%XO-@e}_w>4(7qE^}tbUH|>tAOEj!fBZ&NhaU#_yYww;!nUlc@j;%trdvWW%xSbs9Yt}7!9=_4KC2rfP1lxmq zJ00m;AGftMC%sexh9B-r6rEOQG#D3_i8J#w5W%$EjvEn6t{|sf{kw` zj+7^KW9OEY3Z>a(9zl$N41gFk#tMD~IKhJNUB<1_R;BAw5T6*IkV@f*SR@9=n#vju zn++mBgN{n2ipENm3Kcj-m8MmU=VTPbfIVP9U&<%8FfqQ{Ub2&3I%O{~?gPaNRFMw} znY89ZRNI~EZ#i5Qen6rSSBOfj&1O)NC~GXfgh^wv**q~{z~^%rOdgxX6N*F}9uH)L z`yw16dyOU(3iw*8~C~lfz%*OT{uX zV~r!=^T3OeFc}OA5pYZ-6!O?>pnQQ$$5~qyiiB(~m$=o+b*gr|@Rc%gu2 zuPuc{eE=wxcPeXZY7YTb*MT)h$7vG?jZKH6=JyByrQvQ9@KLZ&)bNB1ckAvxF2miX z2Y>=l43zKfFdyxyB(x+f%r7MSUlNHVqh;xV=c3P^3gIc?U9g##{V%$C7bbhJj28v| z<+981aOj>I!u|yN-VTErHi*yVawRG`=sdycUBwDQ&tzqi--YzK*0$E%9M98k2XM3r z_KpDa?O=nY?;_%daf04bj*B(LQ*X$7zm*KcNIEb-FDr-k~-1ljgQn#jHabRz&@I~qg zR0i!@gRcls98QC*w$0&tQ*(PpH_W5?agrn3I&;MlPfSS2N=-UwKzWhyOk2snsX)2s zGYE{UH$Tl0#Kh#pfvvw2C@&c(L_87prUcYPYTeJBy9gp@U0ur~FLqB*N=s{3ksW6* zM!B4Jb9I6JW0u`&h`o6S=!*OLy1x{lfY8?334k)!Q8QYR{o+8W8$roMGtrTm)TyFi zUpKW4>Mkp6Dy{(9+fp8)xDk0JqBK6UmxdmSN*XaLmW-SUJ-MHUywl#<*4tS{pumPw z2IpaCxU!|1@}gU>EKrJziotLW-*Bz%=Jg8~V4$2i=N%k!DPJ0)&FZ)L1 zD5Yf2kf?(oQGC2FgCk??mQt#`JG>Nq>h<0kLgOH*rR()z5mI;1>i-y^I4rj~7SNv3 z(#zA^gn1^X;;$x9EcZUE$+1b)0tz_TO|6wBWWw6V^Qh(Zbrl1_WGXA_i>Agj@0*3B-G z%sTZ7a+JtbKzivqYnhBDFv%#j&iqV3DUAz!a{f1A{q)W zxhI5QOpFMx>hAAMjL+g5Y(wSQEoDVlW79rAcBvq_W~)RISvj5&Y2g=ra#I_e66I+n z3NRpCQ&n5kDi6O21I7Q`iR;%2r@7F%l-48X!p&MkYDr&oJUl|aa`kq7Ru~veON3J% zDUE9aMtpE|L|{l{aJYYLM@C>sVtRdiShkceZmleutj&G*`+rO*o-T+_2)Q0{?Q)_J z5kDh@LV|;@hs8xjgaYR)0lo=e{r1m3k#+G!W94DNNyQV72MV?>t-SEIYfz5Y<ELua#I zbISdO0M!IiKKS+7qNY)`&bT4rjRuX1vW5V=YtDc0!N?5U^A8B$)O7#@l&FAgE2IRs z8+Gt(9weEv55z4-?e)O&h%y)oHelBI-d>4~u{y)3(?VLzlbarcKyQB77>tUoxW5gm zrzquK!LmmIr9Rznclpd>vj9y`&AzfgafFtpmX_w$gI52oK(Sjkd2s>@0=rVqR@#Ki zD>H@vFi@0ArNLmp2rqUgkgb%}VYr)RXIr(%lb8kAjL z41S=ZJ}dsq(*aFAD_&=w{D{41dR~2?XcgM&$!Y8oF1Ja3EwLM<(1yxFL+`d@REarL zK|$9+N_od}QsND>lpf_DH_(p2NuhPYv<5Z~WlRc9i;gVx4Zjs|Ys&w<-$kD|)`FO2 zuGP<=7gky_Qd4i<$%3s4k~M~*>Wn!5sQ8S2^5{r$N={jJQFvg?y)A@dgFyiq(FKY5 z(xs-y0OfjEBc}CcW^icfjoix@gN~dG%7~AQP0LM;OKm8+LFz01>Vu>Cx2s0+EWtwm z-Q4&~J_V_vp<&)<%dWaRf%0OVSqnVyArVNmgWB}`5s(lV7MEIDlkD$(I<>v}25clK z!t+u^WrxSL@b<1sWKG(&3!c}nodfAfnQ4=Kh(?t3ctjURLgHJ+*D_#xbGV-D+T5(} zE-Vnq#cdNKbG(d*s~|l$Dd1Mbb&&xo?wt$@4mLfzL|JIe7{)$eym}_>BS)P7bO-=I z$>j4mbf7%kM~Mtij|_jn_PbuXX)lPl##cOONeM&dg6&+awawB*VwK~PjJK{( z8J@MCqILDt00pd2y*PnyWLL`BO5Xs9vJtQtd}P*aNXX5HOJFjYyIw23QX*06pQDdr zGsBZ^Y_U=(QGp)-HoWmTEUQVO0vq1Ma!^&PR;jT-YAdAG!#~h!Hrjww9IF}RH0w<) z__x?hd$uEJJ5c1(!$C@!>hVCanN8~>mwen|qw}Xvc?Gy$yykZP+Sv<*d8yu4Lfn4; zn@d+hi=+H%x|gd57%zR)1Lj{n5l{mes#%6cm{2|uDnvq2?GTm^T^NLZcpJ*cLwy9O z2@Sd5-NE?fRx6lag!Fb@Kl0DNeK#%PMR!nut(T7k3UUHDHH|^h#7k5uab^)9mW;w1 z!SB!uu?sUmuFs;tehwR%!WGjALbXM_N}Qd?0z0z%Of$&Y$8=_aZ zrHOYF@&=458HfvYW{|%=CTAZ;JwUVo-2#J*Q(e=LQV&mPo^|_rbHZvC{zRtlq#y9L zp63oPXVg=Ednh-jZ+HL$W?g_dHyKP%ByiV`ar^21438bbU^F>4F&)70>HtM35KfIx z!L2?fRym#|q~JF+3?U(%xJDw5k`x%8W_}8fS`#iTk+akG`!n6qaGsnnBS$7J%x>ZBKj2>9v^m~XvM3K zX*Zf1o@&nk07~EZqRk+4PPn~VK+yt^T#$LArw%k?(x#N%v;S?tL-HU5+_g&3Q!IL2%JE10>udw2wEicnhjPb?GM>Z z&|wA25@}#+YDQzwu>=aGV%?zEYk`+sg&eHC$~mhNsa&nm&Cbj^X;)}&cHz)AJ%m2X zBf=6Ihg!rwjutRa$gmU1B?`yzI^+TP!#K#* za{|Q)lvf=n(=%wu8Js|I0>udwCs3R~aRTL=0F*^S4{D|VP!N|-JuFpyHE0tkhtWZg zlb)MAmLBkc^=I#3NBk^Gx#`L2LAro9ZK9;Q2NCG!`|2^p6Ro&^ic&dv1bYm_YCM-z zj!WBa^jg+G!qu4eQP1*vq$jZhjS>%(68Qf5(dkPLlq|U(M;!kg?RxwHlz1#i$Cl_9 zua3AcDh}btp#`t!i-@xyv7|IY2`yCtN5yIlVlulHWR zkl@i+@sI!dCj2@vs!syleth=Aks-hJ~t9{R!i?|kor^4dn&ijp@^dT&L^z_BCS zQF3`vQrADP5DO0@N-nUNoy z4gB$0|6fG3o@wv@?uGInT?qZq>$vCQ%0ZJQTV2Ba(bdNhKQqSK!9Cp3zg!@go&AzW zGxUiLCsE25y8ZAFj1t(Oj?;;t(}Un6!X`>=T6k5^X0@c(4;Q!Hcm8Ly+EQyK@-9U% zu|!8AS$lt5FPp2_bStR0{O&h@v1^j1yGL&+!D6$TKw@PV$?$y3l}`78FN=0WiTz?x z>!?bhb-0cMbmcE6<39Isyf(aSA@F)_S5qZ*sHmc!@6pK1ppm#UCzVN3W*Pqf2l) z1AW=F1tn%kGLV28sYA`p04ryd@k%ybXb05TNS}@n4aV8h7b90AujBm)Ls%#c_tZf|a3 z3T(w?HLu#Id1(C`-)nKquv1bzdUSQi>seP%- z6>;6kv6Ub*NMAxN;g)cAho;yiEbwpwZdAw>tE;O3B_I*_-2&DnfSWdZe&C39W@^T0 zFoASnOT8^VY8`P0T$-Lm6IOM5RztiK{?VfOKHg#Go~R{ih%f2*d>(0f+!u zBI1bv!G-9I_N#Dyy~%2_Ix;)b?Uz9LW}p$N+3;YX(Ub7Rtr?v35(&JW`@L7EH(;kj z=10}`K1w8F$)TV*dTG0{meMcxVvnUYi?sL3F@+%yjg3wasWdE+Ymkc|E10oXaYTy6xdok4 zu!J05TP1^>3@maIfdKaHmY0@bml`}NY%NSH<_HzwD(ET-S!_6B(JtYbR>-1J%jrV3 zL}!)Lml-U9S-mdjaRoFYus%G8V=06}sR>#W%2~^}@$pG`#EQgCPU93pns{BO(Q3#H z@idC6(Aju&hJeKYdF&MidY1Q4VlW*RpW^fQ&YG&b_uZm5!v4h%m0R>W9A$X_e4;-m%XrUNJRn<%krU|VlWzQ=O;}olkKboU z{`k%r$YyOUOXE%5*<9VS?yG{#+%jzJb#fehl*p~=F#(Nszs{|#2Yq8Kkm1`LHu6M< zt*3UIm@n6dBp7*&K+w=8%#|( z@_AfDNNHGDSarhrrRC*2(bqzQeD@zEs5ume!GY^664}!;6M~XMZ{Bnd47!?~6W|*V z-;op^agb4RyQtJ)usf*N_fFu^#eVI>2?~`|b_}TfZFA*iF z$*DV_WLp69U|>!7X=wjZ@^G+fL}r!fP%Ol6l_jvxoqJ^1SPQZz?wDae2~QwsH^LK8 zaxlX-l#C|(H}sCIA=p?Xk=cVZ-+g9AM+ z4aniX;l8%6(W&n40Ro*pPZoXCQL5i--%K0+Xfs!RHZOuL1wM`A>EmhS$O||va zb;$c_l2ebF;lqLI$65#9{hsJ@3xIfV4%o!j{u*+D` za07$9g*8(;odL{Ij+G=xtiV+hywB1g6_8j8N3Ui7QDQXg2}UTE~tl?dhHb?!pYOGD=oSt02PZ4VbC+1}I5zc?X;p3@i@L z(ry)XGSPRKi;Zdpv!>#%S8Pi~m`_DX1!i?^Y2Er#P}0@eZ%0XF;;uNf7lg)TNd+@T zawl+E_~E;6fTa4X?`Njp;w{3Cn#*s-QwHxuCH2^33xzSC#U&O;MP@}t=B+NKm0>xv zOtwG>n-WS*%1TMhnnIyw7N%eE7N@GVU9DCh=oUv~vXeo(R|FpPBDW)k5U(Igma)rC z^-XLJThJG<((32vy+#IReD;}lXmrK#GuMh!W8$My()uQX@+V(GS5aA%o5rHa0>TBKm?c4~h|mC^F@QBqP;@~WW(I2OY!!81-O@<2`d)Wh>7 zJn|CUeKQ>tlssmPW3jya0otqCd&QtJ8U-vrtn?^|9tTh|P<0EO`g(a6RMd1dmSn}H zHG>`;ar~Np>VZOu$GKCP*%jdhW0f`a{_bC|&(~$AhbLtZfBo^1!6Cd8C41F-H5fKs zl7r3Gz%=Z+!*3R;7mktuT(_#YM16Dqpt_Z!xvfxC*UIpiu#z%2qmdfwVX$ zlY)Jda4R;uh@G1S0c+8SGp+?$EHJy|V!4n?>hJH@DC8uroX8L<)MgSx@ErY;*c*tb zpoDqqN^^bVU|W7(PC;pY?m%71)wq<4=lqf*6DsOzGE)*iaLZn3$WITw5*HAZ9FzIr z&&D*)%-83nCMV`QQSwwRj$8q+{U#^ej112RjLveX9Ahx_S&E#*k^w~_qgtw0ZLz|x zx0=*?k;0^1r-M_2#(3XCg2sp%?2xNW;4TQLc{t1|7%UZ~6|lVpm1HLkXB~V=Yp|Fs zk8g1t&C1JdV!l}|4hTdd5s$|w*J|p9)ls)P7wU2Yqf6t1LIYzOBZDq|9a{&P^%cdHk5Xb577*ee_$$cs5<_-cc^~?vNHTyba`Ci zc+i!g$Xm#F-#gVXDOl%;R+S>3)0ZKLR_b%i+doOKg;>bCuz>5sJ5 zK)87`rTwN)Q{ttPmYEc9FLHls=t;Mv_!jpQu34Tg&fe?Z%98lZ@w6hiWqJ53S4dR5 zW)ea5z^Ou_*p|WaB$OD9#%&n_14`gyWb=b6{7#hY9!g{~*(?$U$Ia5IJ56&bx4SJy zASP_!T?IvVVW+xoA~*ITtrTx$w;Js)QHx$TTT4;v{IQY^kFOe|cFT;5#n6Q0Zsb<0 zR4SgFrO}zyT3E>yBua<~Snt_p-YgG(95h9Ta|*3b?w9!c@8I&AFM;=Z&m%^`aj1LB zKQMH2)<^Zosgyp#Zu%b{LyWQ5EI_X&N+c2q0SnK!CRIwxdbHOP8YlDP(lXl;k~=R% zwg=p3E?F+9dO>vko(zBV4-C0;koOY*$va?&*_ z>gGugAIVdo#E$L8!jg*im4Z7>Nf|lG@yR$kkvUqMoLm^>aw;UE9OOU`))N#^cU?J$ z+_mEmPfZHjMLq*x=9{%8y`n7+&=)m3UsQ%gZ%#X+7g0gDPxPc|!LUxaw3yPl68 zscG@b%$F4A7Xpcr*{Eq5Q^(|WYIzHOr+u%*)t`*%iLallT!dvwd2wMw?)6hgedEId z^UDT<(^E-e?VY@``jiyEq`H`#)|8U|(V4FD@Sp|c=&`S_)MUqbo;kP7-~^rd+B-ZJ zz1W@<6^)>(=c^(In#v=h(tW%F354mygwp3236G7>qNoh|3VLaJlubtKZO{p~3rqrX zjf7KLUk;yNaajWNLxBD;h$NOOb6SmaiXcS6AC}hnf;04PZf-88 zu8ekcfA#*CDS_uEmK7!5$5;6J!P{YN{lqo|eMO>iqGXp*0`@Xe$ne}{WN2)BOj>Gb zkK&Vc1VgLp%pbus~YIt!>Lm z<*2rv(uq`XOo=RdQorQDg;yLUpv4&;7zVCF6RTBKL+Xg^uB_v}k%>)lkp&k+n{GzA z|24D{Wb-TNPl=4V64BauJ0ZZwFC^gx_+UL<|Mbg%Zp4bN6Q`bFS^n_Rb<9AQPODKY z)eVs8-XXCDgR;J$urN6{J}GCYf50cEWw<)S_rz7BUVHQ0r?F8TX^9yv)BM@i(!$u# z?D*8^xV$Q#Ymw1UK#7bqT^bd3J+XVDF1LFUFInehW#lbXr`W_pw=;_W^nvGzgqog3 zQE)`kHQ)T`%(0M!Tm`AOsG!e@k{6vXS)5;*n^`=7KjBfbWRduQKR;Z5sZ*Bh;YirN z0XDbY3|9LR3Oa#P*yfVF+@ZA-5pe5My5TrV+@E1oF4pE{glD!l%u9y4G8-2Kg;f)j zfsFj5fFwWf@QWT?n;46pfV;ZQ_@LN~pp^C?pX<1u@?U%$I@CVchUJ6xwI;M|g~!c} z^^XcjSVE6K2TF2tb444GjNtPLw<)O2Ay!)Wj6D zvD#PIt_g}MG)YM`x`09v5-4JT1rBTR`4xUWo@Rf}%eF&V0HruA*;D?(B$AQM24kD58WQtH~gVuOrcNIzU)zP;)IkTP7akZI|nUTo@QPB~;#c;de zl3N)TUU)sIZnmLdc%UOTHX9_y--x>ESJky_S&~95aGFxI+*S~A+0|b1wQHBAI`3Y) z3fA_hkYdsQ(naxNTWZwJh>$d(=&&(P!unr!r%kno1XOS z(W|&ptyL>GD%Qn(mPjCFu>}v=6|!1P+WkNYu+gYdst*N$oga_?d7{B^KmV&>-)np7 z{r#;m*KdLsQC&U;&t4QvADl7HzvV%>3((I>ptnk(^UaV;1N5WYkY6)=3Mg}CGxF1t z&B&u@w}M)=xyCs-IJg5!-tmt^qQdeT2Jr_3CEvLT`F22MSf~&Im7*b^X6UP4D03d_z(7rS=wC{pA67$Y z^G`&{`VU_F0gy3&Iv4zcD2b1a_xJT58XDS;5@5-bLLyPfOtIQbqg=gXbZ@=$2YPCp z+HOzrt!>-3ZQFKxdTQIYZQHhO`}X<$?~A+cnKoOIlYdo?M`p9?Cz2j&O>61vDHKMiSJ6ki*!>G>byaIiE4~x=E;X6GvvcNUH6>)1 z-9xnK8lVIwHsjv~`EM7f@n0_WOjS0;j~C+8BS;`d+`ArE)xP$pBP;sLNCiaMT<0wF z3G!Hbjm?HQK)SzhFdCXzs~vYE74+<#8>xxN=-^)z`yV#x%^tAVLtsTBhbj)vCYF9= zr=H>-l3tOwvAMA!9fR}HYT2{~@L+{%Lm8_VGe*tEkWRe)U*y1N@Ps1dj*!$~bp`c1 zZEp8_CZW$OnD{OGeaJXW>JBL??{fEKbQJsc?m|e7)>sVKldH;XgA%091rD`5`PF1~ z`L$j-$QM|w_e0RfuTQ%eo=l_!92`JH3TFikL`o_P_#~q3-LBhe$-XDi<9{KL zeeEFRgm8l1G%-y|DMXQ%39+Ht6!g@MV92XQ{BjW;%a@jEnQKCr_wUsfmdR%rjZUIO@PCS!%Bb zQ2KaNpPZ*y&QWfeSMMN96_mjM&r0dhBrrH*`NH`)ZifWR!&Q&sZ*Yw)fz#W8lrI?4 z(+SV=?pO12YI*`M909U6WSSTG0@ti8$a@nOu{73A~8%KQ8b z_S2;H;#o-A(*y3+Db zs{{`>Jw0<|R!U0FRId!D6Y$#s%F$@B#-k!Ka*QyI;l)%r(94b;TTjOVWf#CpO%AwY zo-3m`H`jiDhJynaGqJJ7>O#@lkALFb1|ajU+W5fa+KaO2_3}hc>&h?DgMJ+p*$R3LE8=5 z5St~;Sj{@#?gv7nl7gc{zM59ro}0v<-|nC7Tee@D?Y{3CUne>GRNKdYx3|CN(|ZCS zOL=a5yPszvw%@9KU!J}h&Ld?KyzY&lYSi>=Fm{FM1BGpyPV@ykJeb4M`P#&7R};vv zI@L{`GC1V#A_bx7h1OHcW$B{q_ z%M49RA`d%TdgvEWySvF13WvSOVN}a(;B62);Z7jit#Q+Hq)8q(q*s?&vlKvnhbNIZ zGC{Xu$(JyVml&{$^>Y8gz^OIxnH)SY7%3q`mUB_KxR@-7w+l!X_zQ-|{oquqrm8|q z;wKL;6Rrx-^ZG4NSMI`c7Ek3PR)&#XpuPvV*3E%HmQ=cGomxcu_+aA}@&0Kk^J}aS z5-9+)JYv}Bav$#|a=DR?Tlr03<)?@;SUBC}rDa^5I&2llH8ePFNp}bAV=O{T@4oKq z`Ad_>f=KRa{81;K_Y-<;`;e%~M#R8SEn~1{VcwotplA#=+d0F5+7^W>b2ZCFUom4f zE&#bl9$HvXBIy|1$XU`zK~4mcw=euGfTO~XKJ9%vm>n7iAL~;QEhiKB%{Q8Oe+)vS z4GkrB3p*uQF2o{Rfdoo8BIxR6;^1&s^Q_jCl@>uhfbm2tDngSF>Zg_b2i|T| z%E0nsU}a@&FJNJD@feiSgB|NL9Q}q(+J zAOT1w!HG?Gt1I{vvjLf8YDXxXkxhONMke7W6$(ct`TrDfkP@V%^D`RYmDCp<@JV8( zf;3KfQ3m#q;3buHVfXGz)5%)H6xc?^qX{ucx}RZwed9PG7J?ph6>O!Q5R#>5TB zz0of3;Wu2G~T5 zkrQ5gly+1Q1IP!x<#)X>-|xB_dEfUM&{gj16|ZgPCMnW>;0bV6gS%{WFT~ z_)X%WH@WRIJ(v#q`PuEeBVG5oqj7mnXwgZhVcXG*>yx)DU>x-x2Pf2%&u@P9n?d&9 zn4$Q7SHZ2$QUKBv{6xnt*3EeW-i?qPvTMQ^c6B!$+hx7Muh-6G=PR;8beZdLl|Eyd z9^T7s-nV{|4xjuf0(l6eUK02gaz#H+ZXg$V2~RMtB&Y57CCeN#+koBfkCOmWk$U+s zm?*zEbXFTsUQnNsDINbvY*ZaKxrzy>0#XU&9vV*f9A(WyC^zQn&L@o=3}_Vo?eC38 z`MID=cQhkI_cm_zG$Z{W*m@LV^GYzF_PS1O`TYdIJ3xBt<$>+R&-ZH2ooO%Ny6ljb ztK8>l_Ov+)_m?L%jm>YG~UOqb_$~S%a~{CcR2^% z+o>th+w*7Fjj6bAcH|e`OPZ)><9G%p6SLhb#^W`OsIO9FC_XF8>-l-C595ys7^-C; zL?_zp{qT0*M{Pq_LbEGPv3+^7Yew!$qNznTI*YIB^GoD08{|W`JHwZY^^-IiyEpkF zd{$d$&+FZ2YkJ!KW8v{GxT@>>-uo@O@0$DPGp>(#9x@(k_P^P`}Q7c(Ic z@8x@T*L58BkznwaL+7On={ks{*S^*WuQ$$n=eEwHR>&81&Xe!gFodn{Uv?HqhVv~a z?&l}W>*fyz-yM(3`G&@Pc@N;)Yx$RcVe$&gGbkBBX?>|pE&wQSKDl# zb=EB~|8J|63!&M0F=PUl%L9KEoAY!w8h3+*=r{n`^8P&baPe9C3$?_@uvyMP1Y01) z)`=JLyBPGlrqi|=6W0v%FW`5|Z86mzaZBujyS=q(t@+Gm4t&LCPvPW0M1GppJ{#2S@n!H^ zrsh%*_^Gb@>i{W)rrYIW#k8AS(ShV;)7CeelHO|EM9CoR3{{o(`Ka(wQMVPk0N56P z`f!kib=&dU>%bVuBo3c~<-j9Sefa&Z0Xwef;p@yuZ%A$cUDdEt_K`{)f6D9ZWHBV9 zZDoCgjJ8??xYp~J_wF8ZH#Ue!F_XQ-&-g&ifyGFc{qi+(l}DW!XhKPqxIU=E*|k_y z36C8Y6(Tjt7DflpaJd-FoGmKRP)L^PR8r9b6NL@Q4lOb@rj6_T-*-bJlt-DsGlN^l zYA~c6@Knp2OA0KODEdnnFH_w2OO&Bsak?g~61Unoi#J&%ucmeq05axv^-S{Yr^q$IGo8n0~Bm}r@%%K(Ou8&TSJ?~AV#khwvs;5H0u>u8F zFXZdQ^;;7LwFvo;Fwp%uj8=ejZrq384HncH^Uy$ndK`&x#Agc}qOV@DRu<;Q2=tw) z2Eix_U~YSxZSBa|e|~I3@S0{|OEfG#s^2{^ZMni(ip2jURz5~mAlb<4b%kMImy}tX znwvPrT;t+1jJ{XORZ!u@ktq*eZeBWX$7&ZwgMoTnm|K7#t+Aj)|$woKnFkFd3wH8pp|$2gqX8Q^k=GFtH>wHhXHq_ zn28_KqdWR)1j0AhQ>< zYZu5%{Zy>ZF?dD%XXX(|YGUL>Rkq0hl}i4aE`XLPhk3IYmAy`8!ionxhH0C5cD zRpwgwid`I?#-`<;$7^Q5B3{c z1uM@n!3$Jiw`&4vf=qiK8y|feof4MaqarF6F@3tzNQBVQo;~w8=AC_skz#`tg-*4K zAsK1GnrIhl%_34gJB>deqUh%jO@*!IBPO7h)Sz{Gku{JKhIX$vQq-w`3Xpp4#;H7l zhm-F{++wVK!p)Q_%m2;neQfl7^p%T7+>;SV`*HqS0QS(gk+BXrGNI$3*S4wClVbwP zgt0PYEJ3MUC6+%O=yL{-EY&&=G^P&`6YT9JiBVH%6p}KL{58FZ^*ebKSY+AM^jKHi z<#LuXMcZaLCbWk#B|Q`3H-y7z+mxPq?(G8B{n*^z!~&twV(v}30*icJ=n7J2&~QP0 zuq9~17IkdmV~rp-)c*m{n_JG&Jbe8}zPx zJn+iVs!kIXsO_>07-nB7QvJY+fO{|Xf`I~<&NU*`Ml}0k!GO0WKH`KaK`CR$DL0sL zuox)hDWwvFY#aEU{L}uXYc8iIAB`%&O_s$=HYTAG8fNmVp_Uw+2NbSi##o#CU`Z+M zEia{V#md-{Ixqg@U6+PLUgl8V~6@w2!3aUvpZpDjvdwQ;kg6K zw&_EQ)66^W)A)>9*yZj;YUi=EJP*${V{Cd2UX23-B#LmprI!|{?I+2NO=4AJPt-30 zeIaa}k3h=(N%?CIR1$N`4eU8(qtSml3--%(GjLC214!(>ytW<}{DZrx|9Okjw7*o_ zHF|&1&w*vDlso-1avf;f^V)i?8|7UUq}Xa;S74{PLmmQQGXThw-Ol(rai6UBYp}7| zIY6Ydv$GzZCihsUku|I3mHUZ}!nYbgAQ=6Laxf#%G?m0MJnVKo-pE*7{>+oS6W3h( zzvX~1zr&#PW?65#_e9Lc9H91aYh0@6z8>$t%b|sCk7g@}nlcA*P1%LaXt5s`8MrIM z5U^A{|~rG0#U%$GOgV_#*LiHP-lgQnJj|4cQjoGXjfY8K|{ro;Q{C z`gnc4-)d4_u3S}XTZwM z>r)8SzgL3K*ZE$`c9himRwqb8It8W(*KZQAESJiiD@r6EWvbQ4ORJBFGQDpY`a0p`iJW$E<}9VxlcB)@H)RZa8azS@|; z!OftO#)2S@Dkx76d;jXCmzMnf@bArnJa%6SXv)3#-#VC)cO5g^yli4P{Nyb2jJg6ewE~T|+iVcJ|8z0EBRwU(fzM zjy-O66W2=M<@o^olbnbr&MERfvZB}llLL~~lWUz5?HfSgh=Oe{Y@nD{MM}82!R5+) z8#EMv&t$?;INF;8;M!VJq?4vRidb}bq(B{F^(B*GL6i4=4_QCmKi1Y>#A4pa(4dA= zwd5}_jH(SXd1Q8xjg}Q1DiX{iiB=qT&PdHTOKm%9O~t!#TbEKW;40t?oM3+qn}cgp zOtXpyeDiuQx6CX+Cj?H(80p)x{-}(L*2*^AQ6R z^Th~Fu^(qR{v<%)=D+|06TeZ$lnlo+Rc?>~6ex)TAq5!iV_&Sr#YJW2MP**44|HtS zt@Y)0%5Lq%V({S}=N8kCp2A|wukc4F4-c%f_V({X0iZupB2m4GQ3 z5fL<_`1A~0R3qbpLgPP7t?__|NX(fZ=`{Tpd*{lw?d;6^`uif)!^_D=4`@hOu2c?& za$~=&-G&fFV9qG&(+f&tzM-3$$M0qd0keRVYQcCxX-moBzNC(vbh`)uOO}x5jnW@f zGGpLjZd?CSZ{qLn3_uPrFE?<}V^-M%4h5ui7D-wRWC7)uY93*pm=F?Pv~H;rden>U zlGdDlKT)+#hcNQ^;e*T#X{{AADUY>VDr?)Alq7A3JCU;A)xFz0?Gj&kQ;!lPKRC(F;35{}x#F7goaR7O$wKW#!$2EB{i# z-&Ea-HuK|_f0pBAGkA)ZPPsOx#%m^hc3ZnY7CEawjuclMZA=tRjr&JzX4%>bionc}vC3Dp zVPS|3$-q7}5iz+ptpk)%N!){l-Cx~B_VYhP&??RB%@2bu(pN6!l#Mqtxp4zEcIifz zMlXtk0D2YPvPCuOk1Uiq9nP4)T^;30nC%wHgoqbD9v+zBuVDBoQnjiWY;(~jrCD#>l&{&NdNSlkFdMVP&_l{J-Vsn%P!JhjBaBy4Y~O;zDMZRMw` z-DO5Ok0)eO6q7YoFNmCDq)M&2KIu|Z2K%L|FGrr_^d$AJ+1GOSUJcmo*ipcOW-e)d<4f}p9%Z?6` zmQ&98z8>!@zzW2x<7KNVXesEZM9myvo}6y9mk=|P7t*oPvN9r9*a_A>$Vc|^c|GRadUIAP)DfL<{2*i}r3JGgc`9X()1syIH2QJ`aDzKSrBL&5+pZ-49s zZdfebPID!_V(C_!`P%AYcCJ596lM~GN{|jXWTbrjQh(02iw$!$E=N& zwgd&g@VtjgGd%tA`_I12G~oDav=-u!rJoTL05te3SUZZ@;kZetY`vF-3inMzc_Hy0 zFZoLAJ|GqA<1S;?@2lVYpNwx!{u)DQGM7pk7dLn=lmQ;6^nnAr4T!3SQd^Wx@~Bb$ zyyK|!+MbQ^e8Q8-o0t+$hjPKw*yL!)#mmFi$;nj1Ne45%6Qd7ZTb4$a+i86K@fViT z8FX0@x-UmFCs8LELmlKs$k0>pMu`CPF>N$_@qp;~A2KdN?KX&M%xNnIuK*bhtF`AU zcvB%$TDizkdUtFEG5|+}d7!}jF^{uk6t8nYBR%@1=MUNwKvD$G^z~a&afZ#ynIA7l z-pfK>>W$A;-^AK|VU9)OkGg!=OswgY{;Xr}ENsT&*UCRU)iT08Z~%7sW|U4QHii^U zACr*@t1MkvsQK(4XMTSu?fZ^lN#t7zRcC%hZ%c!(2NP8jJ`2a1Y309R$OzcUitA`` zSw7rdh%X9O(eMwAO9unTLJ$R{#aX<#XUDGIh6Q&)?~gYZUkyP8QU0SJYiSn~d)UdJ zB9?pNB~PQdQ6GPsDi-=4ZgzeQaV_Wi$F#u^S&rW~Vke(wd26`Y`IK|}`*HUcSVRGN zhUea!T)aGp(KDd*(IEgDkf<+v^%N-^%XKN$X#v-31JCstpNKw_Zv}t6iS_*0cEYzf zH+T)*ZDNkl{@a6ffOBRLt@~IuwF=iq3-lZd|3rLVxJNd??LtLAInQ2=%Wtj#Jra=I zV~u>YW@l^-VWMy2W^au|i&a+5j=$u>)i$52@=t~2X!=G^TSaC6b$V)ybY2qcjT&5E zT>5zE;sqRSlU*u@>dC6kDROX-Ny*sV{Q*)O#zScp*OJw1vlK-Aoa{kL_wy*qrKaoX zVzQ_z&Y&@XmWARF95X`P9B=#AU(Wu3dP2d7-K_Af0E_8i8=Hmasje?mS}1pOy)1_L zd3JX8HD1}(vxxW#gzW5 zNG4c)ow~-V$pJD}8yf3UNkHc1@^)t(6UV}=JbhaOswR_R^GX+#^a%HAR@Sj6*7>y; zNj1a@yZ;3fA>h~j(DI-=qD`cBs7x1 z&X=Bq9GQ6o6HS9h6+I<;gLwlXCyRLr1GS463ND6v^fC2PwR+M^ByVH@-Nn=2|&T8qbFp<%G<3TOa z79xMR@U8nirs4Y-tb>FHa6}oy++92&@}JI`;bJl#HtPls>cfL##(iWXT$EU?9AyK( z&8P7*8nUq=2Uo=^RAb>|Whu!$!r#LsM>Q`=al1H#;+9Zw-*|eET$wBr%Mm7EQzKpOmxGXM`3VKi%}4d+oJc{c=1)i z-sP!zBf1^|fpLra`2D)#Ezifx?oRgw<|$;w&O|iDyQkq}p7#lmK{|l&k=@{fGL#vu zRy$TINu#e~+OK%G{Fzh9({o%Q9c=hXYN%=3$!I8Rs_E4v4FN$xb52e~ejl`v-Scx9 zM0$F!{McwH*v?t`xYKh~pjEKkKc(#UsHL&S1PK)%0PwOx2Rn9>h2)}D?fy!jY-Q#` zjlCI=Ch53h67o}dS!;J4b)8&!bBMaOx~P+2@252YM4I%Cnt&4?W0@OkVH7@^e9@8x zJ^|{R$jU!%!PljIsoKj~uK-&7;KqQkp6sF{eW>W4n85P2D_Xf}?Zs#kFgvp}p&ysdq6P=ZN=8v!GOlAY<_}WDiGgfR;kJCdIii28Qvv zI!dHChxu}N(}BmDD?cLA_OL1$wZeNEd@a3UQN$x^!t@UUE(I!M0Da2Bv&h|-lX=uO*q1VL)(?rjW ztF({*DJGbgO>{stV2mXNt#E`esoPLaAtZCZf~8++$c3O zwBwkc$2fyqnEml-pmJ!Tfk;6~KFml)){GqZKlULOFL>Hc=HehgmQ9pkv$O)FKZUI z<$jpf3y0C}&2f4wl05*loiNW?1;y8a1Kdr-wdhy{CbKhT0m1R{Z}Iw}q3`-S5d_40 z6Dmojog?oarZzHWN@8Ls-_Z*wgkh7|G51vW>)U&|bZ#*>A+4`N2LZ_jD`Zxw^%yxt zdZBiBS%u7RIGIuk+L3PiPX-%!oxo^(D!8tTpTJ3hf!=3-#|a=l`Ys4A|oT*?#021JD8>5}7G@N)))y>5SHEv~f%m89bv z+6r<61sLpNnxG82jMMxs+0|fNem6I^gIH#SE~hV$DW)w5cMc_FgvX72`opYeQVQU@ zqDnb~T8(ufjCUdvK7G1fKD}4aID=V!3*5nV1b`Lddns> zbE}~k#k^hIjdBJyZruh}K2>keuVPVy_&+~CZ{M`9#puo@s4gVvdYu_gTPlC5a?^A> zpNZtSYVdnW2@O2%RwXqgeC$n_*(IfkP64|;!;{WS#6w3A0o!hsR6M+4cMZX_;kDaQ zGm!hT?Z>$aiFl2fIh_d!*i1Jbpj-!iq@-{mdzLZpza>)M{v5*ZG0g6Ml`r#s#!?u=m)Nze*E<%uKM*Suy;LGpguGOrS&aI=ahwc<;1wEQ^qnSL${W@zu-mHo0g} zQwNlLCr1e_emNaMQ_(~eKPry-9HO&7`o^xlQWjN@;WMCSsUgVM-ug9M)BU6#rIha# zvLD6S?ymzzOO4au!lLkq3-YLevD6W)RfPkC%psvB#RaafU_pfkDmf5i`PJ_tp6>r5 zU3J^Nb|*};_Q6yIszKj;y{4Wwrv>-k@R9&~l~Y&D{034^Htvq53N5;Nvy+lr#~*(Y z(g==X8>MqNRhDdRualHzR9Gh#S!n$}sl?!jtbaZMq%>Zhb)Doom;{tbvEHEA3ak}B zc5#($v!_Oi3SEpAbh9)H&d0>u8lGu#-~K$Y$lTb*VoU72Jhut^Z$>qRy0-24+n0kl zccN}Q9Y^Cdogql|b+2%}c)}$68bYE54o;G7+_bE!RU{x`>83gIH&|KME345X@NjXh zBTL+Y!&bi%o{0^ngPDL=1WKd1Q{!{an;7eGh>FLyJX|u;6yR}&q9T(tqnu7}r;hRzai7nXxAsl;#1YK!dI_X0F!ke|lHS-VD6vQ!lmRY?S!H%3BbpK8s_uCA^+tm)2;2oXlFu1t@M zG$Dp8+*qLO@J}%V8c;f|_Ai9tBM^^|d<3O&*$$l(>9yxXl|nLj#})3@H2m9;qkelD zUIwZ_O_>d}w}M?uC1gEzs(Vp4R2jN=aXbx_Qd)PWh>FD@+PHO!8z_uUd?@TXZy(rt$B#U_l?)ni^16D2*QnXW3RJf3Ep`HY3Y%od63f~;Y2(h9h*bDk{3Ekk*C(STLv$AX`Y-#vC zsgQS_4b{dT#uiqtWIzq$%N~?GFI+Ww*{Mj%DVsrEh-n#VG2mPYxtI@bY=sFT{J2@&VDBb6QFg8iEsWHc+MNWnMG>8j0ej zMzQ__O7lAx2&E>d&k7iiW=sk-KN=bS;BmPpj)NuWO!MHsthw8X{KD8Xjd&-I;4A%- zhcl%jC&{QW*K`l@5+zQ!Z{ny*Z7}XI0<~r*)y&&rfF7fwWagsuKk_u86<2q2G zo%By|as5y1S_h?^L@U)I-tP)o0tEAP>=b6I**wIRKb${NR5wxY%r)I$mf+Nx(aa1Z z3HLAACLE&rq*eonJg&gn!{0-gV)xomR+6x4iaVP~$-7q4M8WcQ z9si9aq1xmPBKZ*g6;!7(eYGuBiGBvENpVTp4M#UEV<(m1nGsR_tN7eu?9ZafL!_Ko zNZl&xt$r%9FjT!{xgwLKl^lm*+2aU=jeY7qeK>cdIy<}&@;M6z#&4(=th5+b4V3jY z#_y$dQQnuAGe$P(a#r$#zn+m2rDdfRqtoN7oBC~91qP*Iv>t1q4^$|!>9Lgf;Xd(q zb9HZLXK!a?qMl{!KgwM4_Xo(A3t43kxWv$`d4AgbNsszTJxA1sgMovyx~AH%-j9h3 z%!C;$PzpnwN7jADh~FHZs^_6Y`+|Y8UM?97DIdM()zz*;S$E^mZ7PUYiYZtcZd;!z zeMYQim)5FrkleR1Ds&<&a>IW)JUl|y{&G)e!g0KTCyTc19nb2-eLS^iUO0iC8aC~!azcvoL%SII^(%N2ROCf9TZ=up)yTm zeU?&?7Saaq4KubloJ7W9bw!e{Wixjux_Y7NM4_UqDp>B3Zv7d9!EyXAW|# z>*lgThxg0DlZ0LUI0~^;#Iu(LoLoGK$+aEzllzy)4Q^f<%aliJU2PJEi~LA^p+-7c z+j=Nn&ErY?9xQ?rj+ zv;yOpakj{pFJ&xgv}hg5nNx!WXHhknJ$)hu@02iHN}ceaOmDKBPxmvel(J?~b2X!i zm@-o;$5aAOCS^W@@hFtAY+!71jkGXyd4cuk%Z)8xbg29{4$M8dX$`)z9h#&Kp$}?Z-o% zjbvr}m_^#E==080t~b=da>tuBj++f9UjSyTK$}$AjA|ChzsERwIW^iC+)*;k?e9G%Y(OlStA(8GEB3&f~rjXiL{u_PO%dhJ`{c>q9+ zu86Wgzb~Yq8yk1Z5r7JkBIY9M>2gKNZCLN`p-r1BOJmiU5{Wpu)5;pVN0@*_ z132nY&@jzM1;kjYNXL)kFB<^KpgT7}n^W1!op%+>c?)-+t z05*ZGZ?HR;vvk2}$h0CMwp7h~&QA^SbnT>+!ioff@0u~o1bc;x?<+{2Ke_QEj0CE3 z;jn}^>y}Ts{7+(InhC0(^V#hKyVs|sNYGXL8rHl7<#Dcxvow*+xW;gb{wFSz##Uvr z&?gx05OC^V2$el-I+vn%ohq41@L_ptf0k(UXi(=+$j28P+T}WXGbIxkb8_VJuT-zS zHM6qXT(!zMujp+f%11Ab_C3p8wvpB6Ea6+MxAEZ2J_r!zj%8Li2Qpcf)ueVfvl(@N?r<;Dst4b@b)&hCZg_ea)(lJMDwSJE#K9rpqYNZ?)dFY!O6?m zfBn>X;onv4jF4;$ha2wwd8~Nrz~bpbIxCmJn8&(ER(}?p!Hk1VKvj|G;;dVN&O~vDwT-Er%n8iIsGQJ29X`$)SaWr@3*Pw-bEY#9*RkHX}+p} zz5l73BgEo;zkR=E&*Qgq?K4j^Kf6E9XC+6~ec6xiw{_fKv%gP|t3P(8Z9kHe%WXTZ zUq>wyxcg+cxZbXL--w)Z4<^8>gJ>jX@W1@Ynga6qzb?^z7jDsf?{`h*VX=8%it)dn z;E#QuzCUj-uYI3~zrV0fIR7y5oBi;;;GA%A(+vQl*?@KYl#}fsojEKF!=h0gZVSc& z*1kRu;{RF+7ekSKQas_v{moQT%Sudz_8^VbSN*JhbJizO>4Z|)S4{U9k4Ne~9bG0e z?A0kspAA=y`j{NPBr~@@co@#sfs@!Yn+CFwK?o!G-+Mu;ewlOv^{>o}35jseUGe=4 z1(bf<5Ac8082^c~Khp01HKqRn6=0{aP3-*Qp(Kn};j1EKa?fL;|F!4@jY+tjM0Th^ zAjZS>V>HCh9gWY23Sj`Cjt_bo2qCynfudN+bs(m3v8VY(!k{1})_|Q`>&5I)qKYn* zB|-zGQ!0=vVNpbaEv)}ep(<3!jfHATCA5?A``1jVY~H|u>p$`9iUBA>i1<&yh$2aj z9?`o~7M(QU$P~S(*fat9w670Xwn8f~q6H=~(MfOcwfk}zOo{=e=#!?MYw?bea0rLCzaC*g^xADth=2<{pr zt%=CCex|*X0cY+j6B-ztXckFTtpaPk)~MyLLMeAuj-ZvEOG-*oufn3;ERqj(K|+5z z$&t8J!FsC10kXo7w*V9&Zu)DvU$~Uf0){1ju!J!{Grf0iofEXZJd!2;QYKpjcZIXO z)0XWS((RMxn*g(C7BzNIuh+)r&wSws481@+sVH)eG!so>ToIiUTpsNbT(x3pI`E5= z=DJIF6b~#FEQa)G+=MW4r9%1Epq`7nAeo3+jH~)DdShRkW(dgsHiR};(ekMXrC<>y$e*K)p$!COGce85_I8K|3u&{X1ckDp#$h*H=ij`J z2W8u>tltl}k11!4q_nutE%bsh+b~gGC&@@IxS-ft^YZO8>3fb3S_kY17xoAhe`R^j zF^LVUz`)+McwXUjOBHj@F_Ddb(5Pk^^7T~n<&XcjsoeXR+~xN3!WE#MoYE5+BE?O? z&3-}T`ZHokW8t#BPJnKoEkf(Da+u~gON7r=>^{)mN_$v}=yj-OCO&HEA>p{xvKkTo$fo(cy?D1R^b|Mqhc6m+Bg zwPO9KRdcT>MFuzSY>Map42bfGmRj>0i$#nm|DV^_lz&>l*Rez?E@;6vtOe;LI|UybClxgv4NuwqVXv{Huc;}jXlZCIElvt@ z4~ZC!co-qgE1gMQr+1~IseRD6BFt;tpm{x3%1sUEzd*M>Hc$s1UCbw8mqDxTR%ubS~v-> z8;|4-coIv~=*leaqc$IA39e+&`}+C)e8WU<2uwhz1I#_fhaa3~tsb)4!>X%P&s zvLCz{=*IsT(hpj_@6^ri_;F17`B}oU1GjhgC#B_|v|pMkn81m$1HZU)nq1@P`lJ`w~9dAFT4NY~v z9$vzg@Oh~|hi&Y)Iq^K}*zR4w=)c#gua!*B%6sW;RpPsj*I%B3dEe%8m+wh^&oF-i zoA;(0eQjNDf$(?weqNx$Jur6X;p4&kw42SA`##R5cXuK^ zdpBFnjNGMaf7|sv$yR^9iu!&mS_0*EPwIXVFdXpmer+T}f8KP)^LpK@eyuO5PW?Xs z%Rn^0Uw`RDiub0vC*TgZT6n!O1KCPcVXnI`Uc06pWr0DIpUi-)Y z^TYq~-&#L<_sdXneqFUjG7J6euV-F*)6bg#{V<^7|Nim1_qy)ae+u}6r^o97)qhLN_axbV z@RtuRI{)+gk{xgOobd7Y z$0l~($!>NZT{^WQ{plwc|KrUgCo--9oc-Wr-furV``Wpq=jsYQcdVZ!2Axd0^83(~ zH!W87atuuRsv-G-0`m%EAiM+jbnF*=5Vbet8@ZE zy(e&AMo{vE#Cyx|!@qv^gFk)Zw`2WX%IwEc!Drjre|GBnOINx+2=aNqU+^!#c-w1y z_N6mE9}h`?9b9{|B*TNO`u=+tzxUoppGNq_!IBw zLkB57PrY^=r9Y7xcznZrG&R6?o&3oZ^vYk4yET{n{7m4#c@~~7%K4d_&xiejvlXew zR;>T$r9WR@82#Ca^KNLPFG=&gH&6WF^%Gtc>%aW!Pk}hvkB|Ew8CCrF*RNe#-v0h) zm)n4Ornm=*k6A0g8$^?X_WHczz_V>@e^4$e87umOMmkAyTADCb3eN3 z`){3o>F;k}-B$hk+oyjSHu$@fClQo<8A=9lVC~q2S=K|z^}oNjbmT$B_w2d5#!6H{ z%bd#?g(tz}xn)AW!IKm(tkyN;36H#P!Xp>p)(ZpMo#P8|#!cz(6aNF zYLN2trGxq^Z!o&_kaCG+^?YEtL@*)iN)Y*)Q%;Y7o*0eS*P11S*|CXyg{O6i+69#O z{E`Tfhn7V|9*ejk@{9=hSYCIcgsCt=CJQ1DCuR#|L*y|CVxB2;3az+}5~@UxoO1Zk zqBA1qaTtfy0a+nLo>IBToW4IwOqiCGGiT3D*H(;X#M!KNaJcNf6^Sube(LNwgUJTj zI5YSyEMFy2-RsR-bfwe=4zG2F0AFD{u$Xxy3OL>NF8?|n>BxJ3K65R>X0qIVMUKHq z9EYX>+fksiI~L25&353y+7};gw;Y~Y1SJSc5cw8RvRE9_)Yd+p8Q&chB*F~(oeg%F zEO%8TLU%@OTc3tKd)D85a+h9Ml=NshW7Tz zv!BX$R{}0x>AZP$AmQ5S&)(6S?FdQ`lpyl$qhvZK1o-HU2EE$!i-5D8lQ{ki~kJXLNNOtl6m`sxH(|EK@aI^=Z6%0n(CI z#SnrL1SN=k>nJhml^VFaq0j)aTWm}^^WI*AL8E2SnO2jX#o04x^m?s@%NByp%U#~I za;-+LF{rf4y*;T!Z_%ikETLARHEY!}`5^-|dKGxbXwj-gQmxHwXEL}JtwFC)aM-f@ zc?PMqSsWmddZnSp%R|T)nUM|-f)YfY29!LzVo>XmVOInthi9ni}o7rLPsFmsicaXgO)Y>5qlj90sE|DLE)-k@Zutrd;_S3IXX@DQh z8fL+1=4R(6CZ{#T23LYjIvb~;P*L3^P0WV0M%OD!nbP$$L9&~hnj7j{ws82{KO7N6 z5P>VB{ce=N728=)tP+M8lepay2`VHBx9Y0xcC($fFh!pqvKk%pQ|kv!P&@`dH8Hg~ zH&U8Y1}Wnf=htD+2BT&Cb+5=Uw0nkV1uaJ)Pt%%Gd(jgK5@HdLJ$KO8ec{f ziG(7UR_KlWb_WFEMq`Y$IakyT70G1{OODn-c}#Y9*-aOu0L5IbkNQ?rYnPnHvF7HE zaRIiF(t`*h2VydxT~mFrgLA8vnx%BnV#0Q3@XYj%0n{Yd|8124GA==TX%0q$gPwrt zs&aY8U}=IekGv*EX)m*`u^)|sQDW0OTC->W0X!J?2TOG`_)(PM-CFQb-k2XY5W%z8LPs}1TKo^iRjP=edU zRb^+p<+XM;l+UII9kjxVO8Y2$<8VRt2xlx~KGUEx9H0cXu#l9n78BRAw1^3fENE}- zaAgQ0h#&%sPJeD)eH$e-rBNc5SS%K^$!xbf)GGc2dS_~ZZL$L=*ioaMYcI02M7nC z1U!|?Te0Q>6lD&PxfWsry@y-p7ttrjal31bItuTZH})FR52LLjVN z7L`o3TCEH^1N4bpo&idL1w=$4(@10rY93{`??)lv3+#3~2%kgSrZ=SQlm;?cY}Zc% zC}A&0q@ zSO;9VbKD+y*xTFN-Q5N3&}hH}i4oM#4hXWeumrBauG8uC zdcDgtKnbu=D0KA7iYvf_zO<={5gIP0LtL}sFp ztoXKs&e;T?fV8uSWX0nU^6nC3f$m1hJf=k^ks>UusPe{6VP_C zNLD-!p)>J^pk!{Nna|||;j*|~Hg``TmJ0R`TwE3~R;mz7l~S4O_Rgm&se;ep-|4>p zlnsZbkSPy+`g{wOh6Cl8NL_Q?^5CrCJyZzJZ^2VZ-qmDRhvP0xpY0-2u4)J}zyWD&R2rLLr6B02x9iQiPzSa5-cW8RR^L zOc4mdE&&^Z$rbGh$z}+_QL{}2rJh0|k-@@G z7Ig>I7aohQGTD_|M?dV^1XF?b6s>0h`0!CR3PzpG+p?uyXhUAhaD0oG=Ol!~m)* znM8wgfJ71scwC+Utnvn66mXd!`QRy$!T<@_q2HaoYna(XP%??GTVGp8ui+yVoN$?3~7KebH%#x_&U%0cB7oY*yB<#+brImfQ8=?%Qb3=M5#AgusdQA zU(VRX*-Q$^W+Ko;JT^zPv!%8`ERk9$QmRCI5++>3**m*zzL3k@rt($WTV#ht&!m%u zdwV++yhvl+!qCJFvK_=LF%Z^KHc$q*dpZ%=R%TdU+cL;FKogi$Z)bzG*CwFM9a=zv zQeorsnVaMtyI!`nBW7%%A&1#whkp@zWY=T2K?98?XH&r9a6m~Gn{QPDPFYt_Yhb6$;@XzgqBkhTIt#>=8Ds)B zVRP-S>;+}}5R^=;)GjV8&d#qvRs&csGQC1H8H_9@h>0Z9SXc}?$dt+1WrsxrmYbPv z=G9GxQV6t_$?1D~9(xz0K%q0J^d>Z#$|d4~=h?YM!j6=`%T@|^0E}=14wp*S!(R*9 z<|wFZvxIG)kja#D86e*0QYNPd;SE7kJ;2V@I99>hdlFO1;iv=*z*C__xu-C$EY5=r zS*1zDbS#}Gj7FPuN|RnWiy}fAzS0J*qZY+n zmPsR@pI=;6RLY@e+7&r{-0_=j)TObaNFQgLSGC<%-g**mJ%-dxOKpC)Wr{*>c zGB&6?8(6x8%~A;1pe8bRK`+6<*=2$$yIw*7ZRK627;fEIXJ_Y3 zcE>h@1F}M^*RpsLP*(X;Ee5@CSN4ug^&End(Z#Bf;SnH%1A~KuLnFgrjrb6-4+AT( zIPLILr^V&LWf>jM==gf1C3Y zGypqX>V`&~1>03Do%uQFEQ+^EtSkRrk6fkQ<#>?o;6uQkL7^RTelw@bu=7(6yIvo3 zen18ywuPn?p-D?&jp^ zkh5mpk!(1|A!l71a{a*DKYzp(psThHO>PP)>w|;C_ryEsDyXhfdQevH5>U1eLCMfu zIoL{%$Rm{6hB8o&Ya5I2ebm<4*4fbsOJ^sNQIGo*G`5wsx3xc~0?apiy|wLYzYa3? z5R@zvI`4O6&Rsf#EQWnmN>-!YVYXSp{$HmO6r0KE*>p?Ml2eXc~R$Xv) zZrg`lOg6h^|LOC3)R4|31Latu<=^{gVSWL#i2<^_ybN|8A;&U3CZjhiz$a+$s-;qP z5c%dZJoJS=L}SZgC_!y?xN;xtl*4XfK}X1SJJeaYGF36!Q#C)_yuR#Ik7O2jg`}0$ z0@VT5mIVQ%*f^gsR(ti&V&QC7Sy_6`aCd#-=cleOw4{}m<*qQbMva-ay5t*H2VT9F z&>NW02h=zNyByO5C}PqW!S=!DvK%Y5d!QUklx*0pP@TZ2AaXP&HIT~ZQR}ATddHR_;LMb zG#S6l&vP$2-Q6XzuBrITP_j+h_VM-sTmE%Uv$0sq+NxkJCvNwo7Gx(oQ6hf(4pqUf-7cZP?tjq+X$RSZN(Yft`VZ~?D zhC|bbY$iuybVN>3Zca|+z?SSqKna)2CE-b!b}iEv|9- zXU=zk##_;akekV+QKcJcaWNrb2`y~}D=gmS$e8@X+{%`QfvK6os@g813c=Y41uK&|NT4PCC>C}A&5+3 z*nwsoIveb3ePK}olm|QzO7?hrxmmgE=ylg^eNEZcTrqhv16LbTksb~^nRvM^Gn-fn zpC$m))GZxt+w|Er@-%B_Y+;KK5?2OblT(JGc4rbun^AGe1pLVLnAn@i75U98XXAR@ z{Bp6F!Py;__stvVt(CSF;R}Ki(7!Y5&1>j22%cPDbl7bYl|mqq?C$Kk{2STm*{!XJ z(i*JD5uQ@fg=1feNW&2)DLl$3h1*b`2mF*&Hq4<{J27$u6JG-*4hK|_lP{HO@2nvO z$KI&!>K1b*(^kd*{M}EweE#s(e|-tkZT;bsPmlTr{`8Y~KfKoY)9<{}>ic1|_g}pN z17E+C@V9r~??&ysm?%-HRK4B3u0>B@ffAtrtl!x?=)eaA#Fyvg!Ns9uU!kBXW#jp4()E$5_Cbp3dqIXti2+T76;?SR7U`U}OcVSdcpZWKe=$*#z3T?y4a*J}0CONF$glU6x*b z=k+&!|B=V{|M#bV|Fc9X|HB7oE)-OHB~Bdu=`X6{e3&BA-#wEyV9(dF&nYBcP>^{C_^8BeX~bav1;*WY34n@heCN)Yp?Py!l&G#X7R zmF`b@(W4-CGDJ&ukdv%tXKT(RJLTrqG);T(NQDv|lJgIO607y;N~-OtpUDLO_Q_;2 z>6Y2v-ma=GKv44SqXabWbSfQCB{x4k?{YB{q9Agz37c$0C)w<9tE4d_+x6(<EU<6D{Q49B|NP)(EXBkboTF$CMH}y-McA6^8Z0l zB3|y^;#ux^!?3irb#Q}Sm|o~>=J9D9^=%*X?IU;`%$~+{q5@*;YkcnJ~KgyWwF5mc&1CZJT8Kgrv)W63T<<3b7_7Fv>UZRN$pyc zaWh%HoXqNrB~Fb1Kjd~8C8(ZqP|RYIvPHY&{OyV8h&t*>c|uI#az{Z@&iH6urMFuc zZfYvE5>u0wTRq5_TG&W$Sw`~zK~U1&-c-{$+%bl0?-}l2+-~n59UB=NZ7QuPD;w?Y zpYHD+orAZtl4kojxS9T@Djsd6qkW>kZ*F9c*x5eF5Lx@WN0&&#xv{~H?h&z=zA-n* z#m^2jRr9wOjf$tV14y$b6I_PF@h4Lg9EKBt*o!EyXJJ@e~8Ob zs>Nj0e6naHc5!gr0VTplRP`0smAjVB4g{46If# zk!gg7S`hO9C~;`Fz!EmrbbaUe(9(Ki*ZBDA#?au%)_niW==j1wQ(1n|)=byT+{h|w zdc3b^q<2y;B6RmH_Vz4xbPm^d&G!yX*0l_Xjk@7QbVL6H2Di%Gni&TG>YFr(aY``` zq(LX9t*$SvtSt2R_6&5jcl9pZ4<%NUX?>&)v`0tV8V9?&1}5f~=)%zn^fG}tFg!Cc zG>jV^m>+B%8=1i4s0{;in3;jO@lgaN2uhs8uAJLXDU*G~iQ%q-?5*)(yVY`l64c_- z^3u`@dIibS$23;L7QrV=3Y8BrlQ_`PK^1Es=U9o}@RVgHf|92jCG5MOZf$Mdc{@Kl z2lkn_Z$sfB!7dl0oPEC$!?i8pA%(swKclQsMO#cvOx)mG5R@Rpt_Vt=f0R(RD1F_1 z>nr=~1MQS+b4!?sj3Y;no{Wl)ayfF>d%^!J7HV9<+m>+fb0}hLWASSw&^<#R*YiqvWXNU={Xe=zK;?i zb`YS%F2$uKWEEtm`+2P3V4(h17C}3SAuTl<=qS<4OM04w?&0D0LR&u3Irwh zqNK2(W^e>mR@K@xxH&)8-8;EfUfVgdh2No5I@()+wxiy*TD{{5p#+%ehDjk|sS%A$Sse&U5R^Q0t7L3w49w{a^$p$X%ka>>MZ&H#?w$eB(b4;TXerCpHpj8m z(-hJADh>?7ZV<$!>1kx9HY+U+JVIk>GdQY@GBtqPTUnt37a4syEiG+Lp!PmJ0_OCes`MO|LIfqxPOAj0 zd|h5xo*0?f4`Ie_acQkI>b(1z(~(imu@buh%s>Vg^Z_f4#u&^^Xw6R^Y_43#u|@1{ z&=TL-hE)@%)ROo(ibBXT*dY;@VX{M7DHmuP1&f`Tge|>V!Ix{zDltnaf1yyKQkeij z?rfFxPJ?aP_VHE0)7dJiYsU=aUMm^}>r?EL^!?f4(;@W^1#yBR`jWuHDhA=gqGqt| zP}sF}6=j4j*Bm^qZ{IldwT9ZM+(2)4cXtpIes;v=sMDK~R>`y1Dw&&_`{2C~08KDh z3~q}E@e)a$H*~Alr}9pRNA3^1PSqyLjSzka45J!z@+ww`T4&m7v(gJdZAeWjxN!Aq zTojK<}L4{({TbgI4GLv9+Gv!%@p=rbIc}1CZ8%1%2FBD3Kh9(*s zS}m5_C@JkEoIT@KJk5O?P=XuCx_mvVC@v~Iy&!vxbLI3I_w>078C_t}OKx0TD_-yP zXpIZL#_UR{t?iI9`p;gzkr95qp*A%rwWB-pdLv4F_Jmtob%ejq=febe^F&M6Y<79+ zdQb9b$3WZ-kLGn%z^OCmGv+QHKS$%P^DVm^6Ki?8$2+DTc#aIM5A{pNZaox%ZeT?2f{qmLYtCyl&trDyJ z-J@r72DTi=y;CR7qsM#Dqur?Co|>vg@K2|fb0VQQV zH+oA_60(M);s#Qpb7@8>B4aAKN0=S!{n076kE2^$C}|(XdsdBRWE4k4SAogu@TAd@ z@Ydn-?1j;h)Z|$3vm&E2Bs{nXO<`H5yiQpxqR%3xQzNsmJX=ysF2fAP#AGQTD7J9r zvkRFqr%p0fCL=H3Se%=Pk8F&O?*}jPh;!qubxHZNLsjMZt;Eki4j%97&uhZ7kygpG zJ61v>l1qy73X2NM%F7;Y@-`M1xf1;gg_5~Bcx%#~9UP_Bx{6xV>8(!#N~~Jm${Jqc zJUT-x)>76`VyRv!q==k78>K-r4a_W7p@G*KN~NIDVO+-3q+%5~_=X`e$+-lD4cb^< zbgBX}@9x1p8nuK6u3D{CDwY{64v|DlUPVdeCfv%BGZ3jnqX7rc5P0yOL$OH7rQ#MB z7cCA*r&da2T8%> zQD?bJO!{X|_9vyktppgfCIltVOsiyUcnrIN9r^#+dk^rolI%d&pS^zL{XU0%>-Bzb zpS{nsJ06eiX^%bjc;a@?O!rI&wL(kkX3jb11Og;T0w4+IoO1wk&N&kx0T3j?OoAi` z5+pzpIj8#y1Y51{mb#@DrKY4hIv;dzp>E;w;@%&pPF0=Laq02mv^h^rku#DAVJIvr zGQ#8qs~REK4R3tyr(*($ODqXQ$ybGmR)7hnOEq;J2Ay$Nr3P82a_Dw_ zd8`u3H0AC`cfl*0%|759B70F&ZDq1?4?>W`

TKqZ!B?-{NuR>NfXQ>Wb4a7{3TV z=RMX~VeRi@M=w_LboKru-j&ZWicD&!oTb?)GLDg*&qBV zs3uWJONuKf?N|q5?RWn87oB;Pv%Nh9MU}t|C@U&$A7j>3)h@H;5G4R5oI}phF-SCg z1W|IWt&;8a?dpnZ29;sj<&8zlD1L@*Y)gVQ$~1zb6@}xoO9z?K{i*E2+|h~ls_LSI zge1hUGBZ$AU6c`lN$-n}$ip}%;?mkWhg_mETXMoPqX`ftKtUScvf|PQVWJfmK8XH! zt2h4YuY=K%?ilx4uKfG|JIMUczIW@te;-km4jfe;{zzDEUgA$=o zDG(?=o28~flEU4b9o-PU$i>BTW_djj*X-r$nIDeN3c~6{do9bye*S@f`IeKdgIj6u zh6-9G`+Ge-J>_NPwKcU6B`?_s&gk%XR$4|*Mn-r?`>?RmijeJs|6gLIHgx z5G5}aO6XKN1N@`XO}oc4WmA(=E&bEkjWZG9A(syP)t05lM+=>07?-G@uXK)0EWob- zuEDuNfwNs-rVb8Bjd-wourR-%yAXsGIWkH<>#(+Wa7TaYc1_K%0$~LC%LDdKzP5L) ztz5zzqP?8lafOktL0-Xmbxc%vXh}^AmQYbgI)cDHaw z(a(?o;((4rarPr5#iy$!G`GOOxZKK!oJt);2}H?twn{cPHkTHcwl+VT$2~YUS08oD z&fX~~DCou3QeLMJP-PFY-4= z30Tx;9RD&Prctm5ucpF_okzF%aLp@JfVL}d^J-P6gD81FH{Zi%yA&N{)$2P0Oqmh#uj9RUCmO0{aM}yg70}|!zetQ1c^nHCP zt|t;Bp6c_6$O&alix4AH9{gC!IrEPRCw69KYuCN>a1t*=&-7QWwKZrS7nuyq(0;Hz z(boFBJ2=-zpj86p`C26)+G|Z^jrjZ$C9ydx1s%%9F=hMEZcz^+5E%oGc>DPcFRXbv zeiG&MvFeO$ar4cMkz@t~EEPWuL0zugnQW=eojY<4h;1I&^!wPRcbpR79c^xAb0(8I z+nGr>S{;4k|NTe5{^5_`1(j#Yvs$`J3)?r-dZtL_6*g98D*lZ5hi}Rb2Fz^Zh!MF( z;d#}#qF`62BjZf-y-lHEI6G^qAtSYVEY!_8vx`#QyY{h#ReMvsLCN;^j}9fICvVFPmMd68s6v3m`#^#`V_E`um$uVX=O`?xftp=Z%ux zTECe?bu=0$Jf7|7?ksERude%Ck`NbEY8vXXtDm;WgNGaRkQieC&Hj%1j=`z6p`uSQ9(v%kp_^7bo*D1matRtbn*;_BqeWH3+9P6Yx%RQh}h zNm$e&EN)s(uGb62040LbE^06)`TUeBIHh6H2?%$1pI#1*4fS{Z;8#C1#ZDiuE9}AC zXsN16PRa&%_t{dH@YMLsq*aX8<|q0_WFM33un8^b=w=RcLMK}F3GJxG-%?9f;_$hM zh>ArgBHZyPbgFE*p0k|M-rbQmw>8k)FuZxN%$f&5cq-!wmgZrD%^lfI`zaw&sfotC zf*`A$vpW`#ZAM48#mD9(G)?rjRr2)+4ns8c&E&g7;59XlFveii7N>)493gFKxMq8# zioqC&Pe^~>C_%@>c*i6r#e=g|S(=%R3^v)j5pq2(oXqV|x9;brWEnH$AV|1hh<9{? zr*C2?CNrIwFgVybwJ*kEgRx=3y^ZBIX7=HM!G!3vcwC|%t{Icvi%TLUCuElwDb&d=Q=P012a*-wA^TkK2E2a+;fVHz?5K~%n zb|wI!+dgepOWWibGz!pjR_hTa)s$CIH%B3Z^U#R6yQlJi@G`Lmktp@^6tb4LRyVPI zdMde4={{r5m`Tup2qeqq}BKJwGuP4eVyWpv3~7^Wkf776jk7b$;^ojjtY(lz$cfqFe=WYaYRCMU5WK=-|*;I0)~i-OY`(9YQS28k1lFsR`=11D;sMYn}$Yuo0_Vc z+G@yilba&dqpcDI3G&WMHTN#U_{HMNvMNYLg;{fRgZnBSLgU>25CwKz-Go^wtlnz=EW_S5#IC;M`R`pZYD zC1=3asVpgL?j@@gs+EmnP^ePql@i65E9*6gT5?`dQr0>!uQs(TQ!mq3RWjw{&gx-( zxLMxrrb?lH))AbC#$_(`!8i_bIll8^6pr9PdHz<(Lnw((n=NSN)erKTdzlpjMz^a* zrOD4NU>^(WiVNCG3J~RKN|YO;FV#32qE_F!`3|DhfCq1wlwG|d{Mk*XX&SpFCx^oq z)|WOHW#@neCPjJ0hVz}uX3Fp1cKknYnH#i7Yf{uudu4h*E3mMO##qnEElmkyv*F5qO94P!9esjhNqA zo5K+y<#`2Xf)k}uU7zSd-rA}wZ7j$woNmeg+8^?-wMyRn)h%pxb4}l8!|jaT>Wlw* zAKNy;!dCN zICuZVqp7NhgobcbS$~%A>FQ`$V18kY^#OY(G&~ZKfM%l*?xbfRL9$Ri(-{?$gihixiu+NT?_iuW|CY0Cp(#-9g_qiN9clWIHqUkE)iIN*mNY8Fr zy?@`Oe{I^`&3$Nb5Y*2|$?$e_T4!xqn|-2(D1j(>d3`15BnrObG^0V7Tf;~w5ekF? zty=5j;aSww$va->aaSa#On1K^V2irDyMy|hGp*nj(5ZAQlYM$ELL2UDA6~<|dd||8 zrCNiVtA|#t^zsQ*vc`gvTbt@e%YxBrjZUXk*Nty8yBoApc1ugAhG%LvSav+`6IUtc zEQkcsjT5b(o3}u$(TUky{(+~vXFx)kPNQjUX;W%61LH$o%SS$Lp34g}d&?6#&H2vx zxu?7P)=bNuhyyBn8c&aZ>z<`obZKYfU^PC7ws$nQF04Wa4bfNDIbv|mh>U$K(XO7SyPKvE%tKv=o;uzYqZZgf|EvR3--xM&jr?1dUh`G3Req3iJJcviQo;Sxp~jryWX zcsabH|J03Q(5it^#=R(4t5w3)c4I0XWBn_h;s#Ly<@uxJA*%!kHYyPxmkKl%gAHIUe7+@Bt078W<_=CrOUK;I z+{DPlrBxDBomnA;z`OsdH6y?=ObmdaMkF6zq^3aN2Jb}^`|P#Z!Vv;4gBz;@LW}Qf7N*y>MrP|vwcWjKQ zRT`(j=v30n6BbZ_^Ocex33j`OR%B9RIdH6+{uYx+B&N!jQ|U22amd9IB$+}L8c^_z zC^1TLub@eSXmyK@MoW-n0VMUj)reh_e*&w`_IG+$0 z;DaLW9WU;kEGA(w$U*}Th|0f zrHrr<6k#CNKOiVNb(_)l?%gQkbGbhRET{xr{K-m7K!9)CvT8%d2xCN?sbP zWT=SekliHAsi7xT=>$S!UL^}>cQ;(tDW87En`bYP%6Si(gxDs(-P` z_eb6BU5H7QX|aW;%RR#dF=p?-A8FRckr1*=aFG zQwS5B;p`bbwTqy=uvcA6lU^^&k2$Q)HU2u?4NGE1iKgns# zbv9R3RUIkxFUxh4ovecs?wj0r_NKnJgF_o`7+>S9Pj;QD^ru4ExmdQd!xHfi&rc4H z)<+xK$9DDw2RnP*mFeE8H5P58s=A&$*f2<5Zy?o3bjU(?BTuOWzT?{Js$&hZ!-z%vQ-4mh(ko5)z5|Ny+)dq@1$0eUsbu zi*hn97g7pp8#hIW?Qj3(vV&6>wyQ+G`xpN>G_m=(lSy$5D=slQ3o|iJqPfP7Q@xE@ z&}UBW`(Qw4V_m3w zekd_nB}ZEeyJyNLX-aTnoX{(hKCkhn>pvI_t&*49DlrBbaCT)bGC@)~5M%(G#Q=_y z>Rw@e*IHKFrQ0)<@#4E$<0-#>V=RP3=rHmS+^yrX^qrle0Ml9Bv5pCe$aAxDw6Y0mnm!Bn46h%W ziO%jTNRADT&D{|_Uz8YBhhP{*`145xy&HOljzMfbHG99)oHSb9TAq}$-y9&H1JaXP3fPO`OiQ;N53 zZOxlnI>7i8s93rvYbtLBPLDp^-qQ*IC>enjx}epyvY)fYgzao4kHl-a4?8*L4{tIxr}(ylv3U>3+EL{R2j&>;2zu zj3lO|rX#BDto+NIeiKdA$vuk^(aG7>6elx}{JaYPptw(LJQi3id%L^q1Btc{K5zZ( z{eSz}ZBTis5v2FaEv=zejZY>=g?KuDazHD0x%b=Mscf_Ro>7iy-<$5qe(|n$HY-9S zYP`LJxSJgkM2W`{&1`*tYoC=K>_y1$u)hB>%Ex*4T<8&s!(y_=im;x6DQO;d-Y#x6 z^PIa@o@2{H!Qly>fq@JTm?JMwz{N}!MpNiZfq^b{)eTN&w&t!F)A^g-v2s9HrUrQ? z;f%A?Jwzw2_;XKJVGQp4{IF{J?8{B{^e(^-4wP@xDgkcSsK}^e&ao-=Cpwjq zR4XcI7Zx-u5$g;WVWRmxTT-9!_*3588E-Bv7A0D!=CL|KxcQWflzZ>|tKh-_7^%)3 zh_`C5sZ2;IrJo~{wYd`U5>J7oly;9dX9Y*ZGJA5PV;e$4DvjwQR0lTU{S~OU5XE{l zHUkk-(qbcp3$-cH=)KV#39ERLJX1*DA=4?1Oumw5w3xhtTYmm8A2A2Ik{v&;>}UDo z8YWvh1}N)e3ma3*Yh<==oRk^j61qJ#-q|zb?`$uYZm?wtCLvvVGPNmJ%`mwN)%hru znL03^n?O*hcHpvAF{QQ3-|36O~;PiI_;aV4cAihKIT)#HTkG6}SZ##Q6Cq5V8ok)T)8) z%!cmbA#OxgcW!fASr#!o+`l9*qd4+*O<{h0mT_i1F(7o~SVl-rVUX+QXByOJ3DfQAE(pq?2pHgL9{I37J zv2I#zr_)|eZ|wwAxlyPs=|i(!b(i(^7aO{ZyZCGUx0j3fK4-Jjp}Pp=@vro|`bS>7X7c>K=jz^d{A!664{ zM&k%E2O3#I|M{)RmTHU_3Kh65R9JhX`bU}$H@o(iJL<5(9{2Ag6Eetq8gz7(jc?c* zUkOnHf!07H6Zi7MW(`oSrQlyF2aMp!()HO$<=82#prTh zT^S-=+0!BAnN<&PrR1$V(%4WRFM4@-c}Hh|W;E!HAK~TgeRw(5`iYQdcxYg|t#jeq zLJ4%cLX^CkR>{=pR9kb~Iq!0$CN_Jyuv6YNrf45xmGoV@U4ueHsVol4&pFB88ANS$ z_~gBf(G;N&Ohu8n`#6{moNOhPEDOxt(F4=$XeU?l>NX}c!QI&vjC}fgyX(1=0ntVO z@#A;@`QL7U%A-XoojsNLy?cbV>E5nBS63I{G;#R&U7e8b;+L0~MC#0H>&$J83G@?Q z&}BN$$dTaCQ0D$Yh=(g*x~n*yCvO{F#UY`g)fn@EQ84jeGBD8P>g;p*cXjs|n^m$x zf|Gljhh^NwpZxgkx{^#{dSpa=b`-Yh#h~OP^AK!!;AH=28Tsa#jS*Y=N{odjFq_+Wtw6NHWQsmORWcq=}U9u}riahs!}^3z4W4?2aZX)`kAHo8dvR{o z>PQtZU+{5hATQwZ#dP?5d?q5Hg`1hRx6}m&70TB7V^X>>;kBiH5lP`;u}PgT1|?}# z484@)7+daaVckPJ#9#s|^YMAm{z%X1ZgB=i4Sk%*$lAq%h=_`54Qw2=E@xCp4rNi05B`K%T z!OL@Wy=7EnJyySuv%HnUX5AI2>m%h0*F(yFakl}TT_VwII2uTwc2>cp%uDy7#xmIb&tC>)4 zR7#stdtsLng86@w(LcrYb54WZVK=v7G2XgqoD|7kH#m#;pnl9L(uxn6BRDEwqPJhID1#kM|0pefkT`9Rxc(| z4n4Fe?z=qlwy<)vRqNniRqJYDp89O0fQr7nk%^KWK1yqkBRnWd(9m;nqzG<-uIz)~tsnbaAr+EQ_ z$6M5wbQ)Y!@hD)ezTUyQ`?S^N8#@-!eg7U2;iz-<_Bc8P4N@K2fRW>11hNwLB(<0n zmFQG;BqD;GzDNXL0E6rfdL!u1fe=5@nr&Z`9F9;#^m7Dvevjw5<2gnCkwxHx zdrX5VJ&ZqivE{@sMT)TK5AvFHLMBObY;U#a{A;~`2zH}=N@3}dN7F%Y@3Aj?dAo`? z=*{Y6-@eAN(;AzGFzXPxmUpBU` zRtCO9kNJR+k>G}!tO+V4jowbv1>xJ&EscX3s+GsR^NDSykkE zT;)AK|KaYO2|}Hn&%5t5?$tF_06M~CQ30`=mdtkgEtFXezkPwilos1{2d#hKeZr`N)R&09 zer(_pDowpSR5}f&7E6%P*f|Sx)W_IgC?fssi+ccF%wb(A*%V! z_4V@QRv56&13|8@T$5wHDCk=2S^;nE2jlw7i?@W8N-P{J>nqJDHijIGe9%{s^8YRh znQJTS!+a`+0mW_QF06xF<0{<-9${KY*_ZokYwV(J zM(XhGDYLpPEZ&!|nML~I>bB2k?xH*@`Mfpya6+ z7u0L*RhWR*UpyOSsNi`PLA-bw(!2*(yAH&gbr3m!_pNY7unGT7u_C?|tFcczwv?`z zH2TORvG3v|5FV=ppMqEartB205#JhZHXTT zjo0)0AR?;%C|W;MoLuQ#=nTJ6%h_wdKUqNuiRiNeBVzAiwKAdib9XDR?9Y>>fWEzl zR5dbyW>|9l%ym}$$TbT77s+8z0|2zw%P}zBT6@|to|h6 z;+>seM*d+vw4KLnrsePJQ>cEDkDI5)ya$RLhCM)k&-yp&^qTC0Z(j%rzl7D1?tV6 zYx(w!jh&UhV|{k^R+JJa7k#qYRk%}_K)>`8N^SIP?QAK;#_pQfhPIXJ7yDrrmL*;U zyBMM36p>^fe1NtP7Uoe}91QmpbciL>m@{>DoE$9_T2EuP8Rl!RAM9Tf9{BdPKGrQI zUkwcdNkI#DLmy*DMA6ajN#6v~qe;Gmg!|S}77*_AFcP@JI3Mx0?{LNZM1*g?!({&f z#;O$BZM`hkIa6o$oLTk03~7G6$AwC9 zOtIB`QU-Sxy_j3wl&;wMWU*-5m2 zQpDQ&U>y-q*}-{7{_6_qla!CHF~kpenLn_-OcdKM04Y6G%0}EZ#S}Kqx8t-bVelUQ zqbZgFPGIr-)v;T5p~OW&L3PFb+sV?>9foKo#rzG5USMxv{K-g33+z~3UcrGBH)n1R z>T)EfJISoc!6Y+TY^X*f@hj^=r`N$GE}12E>%8H{haX~sxX2cj@CJ08KfS1*W(bgV z+hU|cJ7_>LP9Kw`yIP2uBHEr0URo`z!YmEFSWrJ95nWzZ5#DWoZ?EeSF-C!sb+d@z zQhuoyC#?b;OtjezNtKj-1h%!k35=Y{DV8(W0S|i}4=)36z2~;0sjIfW^T(55tD+zi z7dB{ciMrKTo#+2J5|_GWeltDv`x;(mQsU5)fkxaM<7IWsvo zvl#sVBGG<~e3MfcON}mitxgYu&8m6jq`cl*Xl`ECPtaT^RiCkRS=;E)1E9bUY!n37 ze`nOkqkWqr%%pL9mUmOf?0vAPk=ND`5LipjacY3NY*lh6Tc}aPTuQ-qp?;LD($+I} zc4tRU77WA2OijaU_d&FlaBPD=aw5tcQ$IlvWhhYUrI^+C%t|Nl60bOLU^KLHD$cKB zYb^zk?lC`J@J04SA>O5Gt)1d$W_-V*wArztX6%wcB_4xDFfN>=kBSWh*I|3rxh0(*H$;Qme%*+Y* z-wUr6hg^7i&fgY|>e9{QagOGvXSLn~$;DRT_J)>zU3NJKBgQ3^Mgw1Kd)I3le^!$Ir%AUfpgX6-PtR9gJfDd zhEWDl^3~aED)810+*ETkwA$=$dZV0Sq4rbLz>kcsklZm)jCo3AlHWC}wmJ;|h}xJ9r0Io^xpl9ac9sb(^|vSC|TZBn_slIXYJ5SJ@1Il`fU z=3x%O#oifWY7zOoLM(9KJ;%}uQsmOF&`7(n_zEY&mE&Gv%bLC#4@>AOOZe>a%jMJ6 z?d<%}HBfTMxoxbdZ*Oj2R{?K&_wwoy*Vp&wD4khfUR<1?-?S~?*j|QaZ)DOeQmc90}=E({feTOu|bq1?*}&6)%Ckm8i@7v)kAkoMWm)h6_t(W?`MvR$(88Js;YLm8vSh>o4PJm zeE}l-_hN?b7X>FoS^A=%?o^#=qxHO_+-qtL$oW^?Z|&n^bao zQhdqDxmtE+wQ8PEwVlS<-Os(*v!*kmJuTX4Ap_`)@-9+1-=Td^bM5yo8`47BYiTXAb zJ-g-euT4WP*7ZnJWM0X#ot<6g|H=f79Fx=KkytI{z1XK4&a98i-k`=`TXg78vIEZT z*OKuWDTXO1wSjdwLZTWoVrg?jLr2A~WBn43>gxOl`-vH=D^WIlFhrGTG!3BMJj~XQ zD~IuOZwNpno*a+f7jII^%BsuYY24zVfOrX9Y9|(m?Jh6IsK*$lg;Ng>yjnEk%sij% zG$B*ueI3@F-0Dn?tsP9Aladlmu#~Exl7trc#`EK>q*13@{tQe&EpBig*qEM&kbEvM zQvp_3>iuSR_uFG)n%GS0K8BmkhTa7_&NuV}ZlkFvb{r!H(WukhylZ9#7f-PSfbLr6 ze}W_3JzUc6vtq5(UobiNpQH(7hhFsitM~9|kBx2X!eIvhZ*zyA^j&JXb;<*#I>o@uW$9+L*OHXGyaQ+)V%5wr+N>J5uxOBV@_ii)}4e{1i& z8Flb+n_*_s3H)(ue^>fsKJIKt>H13PM(=B0Hly7kx&u zn|yHb)OtNL{RRL|0Ro-RV3-y#4%ou!84-~N(I)|7xz0reXpw0*$cPZJ=FSKDvi0bH>6MYzlXZ;lL554X|6gehb zrYGR^zJiM1jv_20)7W^VF{y4equHmd(^muQJ$YZ*XCA2Fy~*#M+;3c02y#rrHmkU) z#z~47p3v57P5o3<6y)H{Obuz->XD6I*MY^JCP7Tx=wlnIHu!uQtNgeP_09S`imT9Q z_$+G)GGXKO<#!pBhpmkUHd?`kH-+&03%dYpFx zJMyY;l0Di6q&Vy4Qrt#gqY=SK_}Hiv6}M>eQ`u!74md~lB%!L25MdrFXsh#+RhdYG zgf<*RNfaeRNDsw`M1AN}WRi^n_YADH>D4Z6ZSj(<$|T9bbTP`pDHNy$i6n~SA}|sX zgPm(}U8GvP-`CIAQR9V4N99_K(zHr=$LvYYRkT_)s?;ppo;|c8!pBo@M=*%_ zSDuElg-DDp@xx@=(M*{cv49pVg_`xtUo(+QYv?$qMSn(6PbuN9V#v?9={70Im$DO6mYk zAw0Nx8xjb|ym$IotxQ-|EjG$Wqk>QUJA4WeVfYXeeQ7auFaPJg^PV;Qowc&C(o7i$ zy!q-`OZ&s&O0!)@H+$IE(d;`QK=%fm?5*75h4f{&K7GKglBM7zje zQ}ND}YJ>n0c8p<+XjGC7s${m5fxO?6p{~jbC0g1U67Fc!sv*`(rsVysAgaHByHmPg z`AlCrsph%64JFP(x^gjCCsS+l{QNGUD*=>PPVg^Hj;Vl3rKpa=$E}c-` z*(B8^KIrRB^IB<_bCS?3%6_dRLmX!=S0x6ro!c;^U&Be+HvRDMig$JSCSE?c1DKG6 zy)xgu^RQP3@cw#WVE7B#b?1(Mu8D=~OI!E8yh(ZD<~6h1$JXP4GAs$Ra-SVIP^`7s z5+jGN%gC~lk6l&jkH?;_+8!+918knmh5A`5EKCThb^EMKIV+F$tkLFseh}p_3KAm= zLPN!hvzWCBJY`*>=?s?m%X?qX&&O>9QW$SnjDl+r1d7t-dqy0oX$1_OY zDt4$+Y7J1I*j?>xxqqcblU8F;NLZ`M35mGQ+`7!W7}!q`lv40O_lS=CzJ7cQVkgy1 z`&)`2+K!v5(8i+|+ke=7M9DM+SY3l?YwOC(&Bt)*h>F@i4>$a!S6G5J?>Xd$ml_w3 z5yDcO!AqgO{RG2!bE2tf=>bkT3wUcYGc{ElF;_FiN6IV^Fych|k|KsvqMi?I-$Y-zRYjcE` zDX_nb8n@i(yU&5CXBa~Fik*=QgfV~LPTOZByz*;Fq2N*#EOqzu9DeV*{PDh#78=x* z31fbIqy7UxP)T4QYnc1YoIvT{p}`-GCAY_w)pAueE;ni7?B>Z}Th?rJDB9)g&^3;M z(0nvFj8`HsFkF&z6>JDu1~)rAjMkiz7M|YBJLfc{U5c;kIjMM8Gh#lQPu1ao@4tY< zw(P!prhbosB@hIAdn?;TPRIXw13^~I6tHq~dwXkC$=o-6H1Ms;fj6I1(jGhT!b2-* z;7C?ZZGcSF-2K;F5EEtV9SA|CMyn$yGu8VdM*H|c{AY5eFPZY)U(Dp3HLtFUjDmvx z!6r562jV$hWNeHzQjCp=MCyW)=OqEW;^#FK}OpN*csx7ZgNU+Iou z&PH4=+&^O_b42wpnqDZVx5LK{r7qNd)dJD_>=OM*D5f{Ih7*>vqV>m2cd|HtyVtTO z*K{~n0B9qOR1qAwwsY$1XLV7Jot@8*jp18$e18EKv@bv-?ZxeFMqyq;QOt08GiYRj z7yEB-(FKU|I=7grR=coZIrx{rd{yIi)eN=Dg0na2Q4R}vz3kf+3C#6wCohQ^XSZvp|_qpjfl9zqWYiF zMY3yq*VoqjcfRi~Pz1E>i8B=oksgD*pB~u${K=N(`zKK)_V?U%`~J_0214th9`?t> z0$$&fO2VMEy#NX^@en?}5^{R{x2A*^|B&+`#vTQwIP>CZkl$b5=SI;2@NJc4Wn>~B z2l?^buZcbfd>Ts_>8qP@ujjiQvbE%v;jvaERP4VXbX3HIR2+=$Q+4k&gae*eQXW?2 zF&GcR?12e$IcFG{Xc88;uFjZ}5TBpf%fn63%9(0vYJ%AJ&{|?+{@h6jPd{RiVuM#7 zigkC~RO4=Yggj;<)(iF8be$_ohd%Sd4l|A%O?L@rsZ5nK;HqatIe295SLl;6hBr&A z0%B>~%g&oC3COI%Q7M(z$|39n5M{?%K)>rXN!2Ynj)^HG`?4uVWV8?h;>ps($r7 zmtJjbc4w0|wnX~n38h$gdUY;Wn2P~&R=o1RWLR(gPC)G#`L?1 z$PFf+6Pr_q)1TxuR3J(JQfcaJmY1=~1&lOEF%eK=5-u$0{9<2x_CI%N;n!K_M+!l6h+&Auf|h6HDv;Oj=mNiZ2;asMeAC0XlR;22?9UmvoL{LuusAQ!RuO9+)%p z;s;_61S(1i2GAP>=!la;xh^=-7^5q*aL7?Sm?x43Toj(^hiF{JWvp*|4#T?xStG8O$ zrw{%UK1e8-l&crNI(By+-LD}!U$gvgfQRneAU049;Q90Q$Ju+c{}T)Rdu+Lvb@=yt zftSIL>#p;w8;-C3@qX?C-$!$Smvy4g9q;hn1NqNev|wqzc*h*CAdQc4{jUT2Pq#Mm zm#Im84))>&1lA7Uab8OkXiy|LC>H$jCON?3fSSO;%_4AKBoC5llx;{oOU=>;5;l2( zxu~p9Ow^DuDt{rMDthjOX*TfJOpp#d+#=RvGFD|Edv9Rz*njc`Nf=Vv!+ZU`-5XkG z_Giu?=d0Z%c6ER%uR|T&G+A|}0LFjKjTtL~yX{}zoAOqP({iqD@^GiXbGB!qA$w#L zC}9Kb3m&a6nUOi&-_aFJQVSjstG6@_C>P%#sYMW(Md%qQ(YeEs{=-r(cLo1kHm;n1 z=5e}XX6{FAcLx9N|7zd;e)DV=&LorBd(3yg1_WQug|KqgLZ-IP{T(1L+irP$g|CWo zc61pm4AyLIvzr8m`aeU^C=o%=QwWZpkE^!z@!GyS7+iV#srR>h7ARhcs&I7m(QcOU zLB*bT+K_IcuA?d~*ZuXYp8W1=I7RK`pH7*c`pQHAC{_#H20lcw?u^qKT`<# zKe-CN9#ICu{WrBB|7W}*;6TVrSaeV)P)q-J;Qsep;lJtq|E~X32q~rIWhs>PQ?6cX zlj{;FVuCX%YHs{^nLF2yhI^_MN?%CK+C~)~lR%bhT(pn^g>aww6xQX#p$m{ZItNj&5>FG$Rsgq@T zU5~VaKh@j&$^RbL4_0kcs-W)&`OGdl8YwbL>*^8G+P4>u;KY| zb2x<8#M24tZt|}Z9ryESi(GiK74q_s88mpPWk8?-nu8csDx)UFv3dS}r)@8xay|!s zWFs%3zR%cUB$-u_k(n7LD>%kk<6Pb?Vt4{pSi)7{Q0;7O>tGh(?%-sB*WN$4sm?QqxsT6G!EDNdV&iggQ{;xo-qbF^-wO`aI2JJ`Co40P@FM%x6BxW1AFntAqf)vo z-P`#?@orCHZbfT$b@ui5+S1(QZjB~QLktB!1oeWw44(ElDDE3yn%e5#%GxShjb@An z)U_imop{*)o>LO1p5rT8SZtmtjhrr(iNaXp-CtdQ)he1|L5>!3kLQ6pvo0F$AOO9# zMe+hhhFeLqJjyA*b3U3)^8zcwG(-AW<6VE&Vbk2`Vdc-VvcmQXeext~0CSooJyxK4 znlv?ZwNtIITkX4~>R6Ihh#WxiFJf7lEyQWA327N7*`I_FqH?Omu|@sasnm2;>%*}y znI6jklTF+>H*Fi66!vBVh4bCDrey^#2|Q%LHn{W&-6~-%1YjWh0%u1O=p5iv>g(x zoCtKK)hOWPYh4U4%9VZER2|8i8L(1y3N>JVaDDcU9K7FGiTu77k5`k|ncG zD$L?g+Oz>96DvteZq-3DwhX+ST-B0*uGsGIgBFX)T+hT*M7d3-Okgsn3!RsAzXLGkh{Jmo9B~b)dY8TRSoIt*#*+ z?d?5VwhuHL7pj+<{MEGedD5p@E0~UIl)5b>!lTXeD(<(F4oE)1Pr&tIk^G_QM@JQ- zRSWaK`Zy%t+8+K4|WVTS+!&J%#oMbnh1m6tE_<2yV zD7e}iq<^0;q`U@?ExZ6@0P-%hw)(g`SZ%HRnYicUhAsxaj5K_!UA; zxq?P!EZ0r@jEqgo1gZJaf`n(&l63TU%-o26XMTfiz(8$Pxf?VaEH;x58A4b`P1Awf zN~pk)R_MDJPsNc}M$wlKB*6b4#C>E!`dVmSUTw+ZZhS;uZ{%gSK=9a5OXsUaWu7)Z`W&`zvrd=uOK~f7?OCnoV>RUTkz~>htdIZEx=k%jHxtL{MG5 zIVEK&w+mZWZz}+6*D`r@!=!cvqmUG|lK&)JUh*XizaGMEe5db_-u_&6A^#031GzE1 zQx!_tszYa*>xILC$}b`FXD$l1# zW%rJIFH**H$U9DPym_@}Kzp4JkyDsABh^|ohkwgSXgDZ!Xpl$WMJw^p7a;900{P46 z03RGZpDt?}}D6wyub zP`&~hi3nyG^|?h&HEmsfrnM#TE)<=+1q&)dy!hmFd;)yz0QoWEO7XX$UK%LHJEb@2 zbSTXmX<>bk@e>^dNF#U!%T>Gw@z)`r!K-!ZAu;sLQ@6O1NOut=^;CczVxawJASwUH zDCP?OXIcaQv!5W_iB9>Sy;J~MNYEAdpU3vUruF~p*8hFt|EHq=X2@{}D)N!PS11(5 zSw&&&FFmIE4VeEqX9rG%qbgB#peyJ}m6g(YLP#&UnORi$DpV^Rr|A+WlKWO->A{s& z7Y2FbDOw7MM4R7{Uh8_+xKky)_p@Hr@V{c7rxUM;pD~Bzr#+NrS@xY z&NfbFHhH5|m`n;p{7`p%aSg#ssAioJUg$Q6Ex7+`h6DA$G!=&SeTmLXjYw_1))%Yo zW%M$EtKxmr-M(SV&wp+2DnD!W?`l@c`t^^EZmHTfe@Hjbi`xh|GB*2Kq{rr~mF*kt zV^TVcZ5qeigL`lY`ZlT@$Z|E|Y&d0N@yv_TFR*0f*}ktjr^<&>61pehDPOh`JEdc_ z(3fwd7EZ|nEm{J?d`!m8&K}PB_ehE&vdlQu`rGAHYR7?PlQSuNnkT~EK8Iz#k$JY} z)Gv`_ax6CEy}CCgIL#$)bfHfKp()oK^xS^ZnG*Q?lTG+$c-0de?S=Q?setJ5g}2MQ zymgF%BV%6mxBYa~7FtT)zfQ*`P>~~^G4_kyX7ZT4PuxEH?}pj-i=#DJpAUq&ky&O) z6Ff@<$6`00fp2H40D9KipJ`uV{tr2ylWco>-(S^UXFA_j1->%A9)sJT^t4A3*8wak z&uSNRN`4;|0-yZ?K>M#(`Ok;1xBYUYEzLTX98Yooi2Xt9w?4&D;MCsP6Unj37mzlX zpKW;OvR*F18Q!KuzKg38P1^%eN>5-RrGHwmnI_YI@3=i#_(ziO=8U`KgB+v|4kUHf&_af`4Rhqbiz@;KRSwZeaXZ13IrdAjZMy!@-g509d|rUobm)gR(zBf;;U zcD#yUui-kiO?gp|FW{^h*FrZ+hxcxWF25;H;WtgQ=?S)?jT$-Bi{!*($6ndaq}ud> zaKHO~SuCP|q-}DBgmb{oW6~(Rd@+IjkT{+g-Lp}61hBz5_G z!kFpPjFrdcKf4$4*<3zVt3_@^cAH`ddW70jZD+i!ug@_1?rqO2@vTODop$XF$9lJ3 zQ$>&F!h18ENlT%#HsU4%4IpFpet(^&L^=8ca03%?RJet77dqj+L?^L2pDn(J63wRyzucb9SfHQJt+l8CB)wwtwAg$K!Z z)bI0bTJ~`gI!Sr1XE{tamw+a++eTbtlLf^w`U`d5Rq;wTwRKkRD%sUnfz_0)#gJ{t z)o^66KlC#_W;h*$Pt^dj{{vqvj=Qvnha)_VfDsV;}1w7$_I3 zdbzv?5V-xrY;C>)_?6a32ORu*?zA^cHR=2~$^p(2eWYIdKwE5vb^EKe55!a76=gHK zLEg){^%5tua&q(+`uGv|s$>W1|1-+F^U^b%ZeCrGOnsq{Pmfy5*>I__moH)%-p&%sLYWXzivn z$z*)jTfLdOA5}f~mh_j@dIx@nMzf`6zu(xDgRg1ng5axbm3)%|nu*QYU<7D5{#{q{ z-JML{3MVrA5YJ4%ySM({)lW)wPp0vf{?_~D`9bmeJJIc=F}k|L0l~KqrZYSKZJgQg z&0suMsoveOpGc?WN$>c8rggHt)Xso&MSAz++Pw)~cfVUA47L zQw##oNO^a7Q@4A=&C=L>Ja&t#%^7h`qwb4h_51tkUQXBBSdJHv;^_EuAE}*x0M7q; z>4@VUD+VX;7gj7Vhrsldb!hstX5UwKCmd7ywCZb@Cq!G~&9C9;fW6}^mPhY%m@U;k zo|B=9ug1^f?Nz_y`Ks_ToHjvNpV_#ogKzeCPHwd)?jY|4w!sX5aY) zhB&sf=l_zJy1bK%CcB5UwcZS7484?!p?60}-B$4S@XT?1wJfq;ZR-2=OrgA>pkzGS zZPT4X|L4lsg5xQE2{ZfieVHXuV^9CnavV45>o1{JYWsW6{Ml1{an9Fkj-NZuhvWNA ztp9zV%;TRAUXBTwnSq>=!cJAc^OALjt2Av7$ML}C3N8NxADf?3%{k{AY@<5cGmrfO zRi2H?&8-(N-FEbw6(Q{CIi7wJAK9-bdVgGed2S#3c|JXdD^)fI;HxjzsRLpvNEs+P zABAD58qbHG{cArTz53el8mB+bk{gZZ^gG|zDtxQ@?<{bQ{)peSdcxM+T#{#S{BR-^ zWbUmwPJEh$K6b>8nd}EbSFJG>c`SKm?#3>;RQqPs9R3uPV8j!E=rA$r*Lpin8QVK(=a;vSB^HRTHbi$B1h|2kOx_tO8n9kc(^*P0JOS)XILDKIm>%! z7uoiA?uU}T>7Q@+a|ZKP!1ex;9fA+D>-Gem#6Cx7A_!W?TmhT;Y$c9dyWcoZ8|C^H zOLYxG8sAjo82xWO*7H#PHHIsPTktk3Vh^9oIQus=kq|jo%0wB041Fz&MYB%1wj#8DEfQQZk-i_-%CUReM zLqGgqfz$e@3j_&*cyP}j2R2{)Ll=>F?EkWY5S=|4fR_8~1P%Hfw^u~kuEPj3VXIR9 z-H&s6q#t1nT^~!ibRtNXHve9B!%V#odfo4wa^5F17}%`c8dASLruFP12TR-9fmm&Yc7|23{6WHDFJgSU&NPBQ`y>Izzj5Ro0+XC>#vuy zTQYEu%;qiZ2BKx5Yr@SNf93NhBSwLj&7nsZ%6YKMBDz8*oAD=9*4q%<^(E!JO2F{f zQ^@vbn{bj)&zHk+#3jV8yx)Cq#?L@yxJiHD>7_bPV+K9p$KolW!Q`3))A8%2sx_RG ze@)q`#XSm8HIcfDJSV-4 z8b3Pfj@ZZtQHY$hRP>818Ctmo{_k5W?q_Lp6t$fJsWlw_lABGt@I&(x`zFj2lNv{l zgbRnE+4ap{O_`j{ROi5@d90>vdXKMxR`fQy=#U#!h;4SP#Lgf=X7LWofKF54EP5F5 z%^YF&i{c)7Vk#43R223*iaf{+C^4#qkWF-J-1Yh}!!7o)ZJ}=ht!{EK&H1jUL6X#p zZJq(0o;oRgcg0H4qh#LPN>hZK2PNN1|oO!lm#cr1u zU)q68u$f?6bfYF{nH2rmvJ1VR^t8iMjtVRrx+>Fm9jGtKRx9j%y8q;McUegg z8r{`iPkG&iK?ouzB(;Wb)Z_BpTdu?N<{|@nniow^p65ySbeq$|ZFnoH z^PTz0XIFAFBU3+n2+8lyHqGCe)yccUn$EItO9(JqXJ7v#qaD-r zq2s0)88;T*Q=R8je`N_&afEG0@EZEB{VabJV!<6BRt6zqQ4+y`Z=lCvy54r8knT`# z`U%g3X>|F9l%i`EV32)U4Jsr!LBGa~L-U}bJM{ryWKs97hX}sRo3|F;qjKCGQgVGn z2wo_}FA2NwAUbXiNz_@06*eSLrPHA+CH5=JWj}0+{M7VN@4~*@#X9$%y1n_x#V%vO zy#F-RKhbnW9ice6r9Z59V#W{u-QgFzx&Qooe^zwhIjJ?IFVNxS^!f@`{AYv)G0-LA z!w!$KaQpg++t#l8IFe>aiSMP)(BGm+PA%p-$MdO8%mWt0FxCM97IY2H02|07t2;GO zO-4(HjrhKgd|)q-pyd_zU9N==vwjxC6V4Y&2-Z#ecJ$w%?o2_gBqOGS$7c2_JQ4Xb zEbk7Ju$$IUh4#Bx)k}%Cosl6&iGfIb4^fDZP^zn8?-AJgv-pQl$*2+2YVfDVz%ko7 z9ickq1ya}sSgf|Q>3ebHWRwCWE>Puc|GWH;TOOG@xrX2Z>=7>HnzLVs=ERs$qWz9J zn`Z2^5Wxxqa-%-(44Y6wa_v&~Zd~8x6_FgJKUyy`dyB9{N=L>R(jZ*V8tMK<+riv5 z;!C%#^+GeST|8<;H5o8sK9O`lfVl7Ug1&+E$)tEnMS1X@2RFV`SE(7AV~Dg4Q@6qT zdZuwe!!A-?cen9>>?}1mtLElv>?wOj)O^iBS6{Vgs7fTBhE~+U;k7DAdYxR-xfk{A zxq8o*uSVh_p-v*B`{3&J(XDCGyD`n_Z!wy}Ia@h1Gd#F#aW=7Zvml4b9)xaxt;>WV zUVHz1)v#YrUWmr>L0)h+(ck}z`e!&t+_#Umyz^jTR80UvlX7yMf5iD)vD5oQNN9|< z1R|FEgm7Gmi$HknFy)3%0^@wW+c`rX6glD1od=rYRyfOt0gAfGD?^I&J8{Hj1#L2{?Gvr|@ z@=K{agakuo8^0tDHLo%YYYBkO=V1u?)O&6mdZkwKLixdwl!UPTZK+ysyOjsfj$*tY zW21k+^&~dXFf|Zt^(=Ha`UQ8)0-Cm)#WKp(xIK^ zuCBeqK;h03SH8%vg9Tvu4B0ele&||Kx!&PDK73pq-wCGI`&5rW__46-t1TdDdwi0s za4_!_!=lY_bo~5|n#=#Qg@)_Um24ci62nGRd@03%Gk|cAY1Qx87DLh5ZD&3A=03e` z6oy)hZ1n#|C*UT*`x7~DhA%d(XkU!hOZ}xkzT}zhHt-=n`N43d5&WqNrdJLl^6O2| zZnxw~4Ym@9r$awyWSBC=Kp4Dng|&sH1-w6HJ2@-q%DGnp7( zRi(utbttL7M-_9Kw2iw`=dW zb#Aed8xHC>bPY&@jKluJ8$rpXD-^O}!P=TS{yZ{J0r(_4!f+Mp4GEtnya_I1r*VMz zSTY!RQuvIe&e+~Z@)VIlphuD8t(!0)hxF@#44c1#sPN9#DJ(h$Pi?uhYwrKS6ElD* zKSbD%PxL(h{n$8`+8;s=>P)|c4X>dX`J(VnAw3y>R~=JjR7JYX2@)=%&n(oMn(zTY zx(h8+r$Of!$w#IfqPkY2MKp^`%54nZg3hN9^+F+or|IVnFJ2*@w^Z?%H&`S)(hLsj zH!`sY>RyCe$nm_V6fJt>@ZK|qJoq2ZMQ)WMyYf+4i|70I+`j~r1o3hGg|nElOVDf_ z8tgVT*k;H5T{YuiYCVF^sQvMYsU_qvNN3b>5rVvdRx_5CTab-O5FXD<3~rG|*q7f{Mm&6|lj-aUAb85H$8XPrN1%1o%(JtyVQEbDM)Uw_joT;Dqq2elN6)MtDlBbOmqtgfBSJcO&R) z^X#Z%QFE@6fje{Y5tDvG6id(Oa-kst`tm#&zb#D&@6_W1M+Qc!O`hO!o;{^{@Q|k? ziE;@7Y<6#7dINhkdubJb5gL2(LwF%7U<<9I26NVraA`q8rW%uKvHkbNJP{)N%}9}h za1h|hN<}I`Ulrd5jF>Qk0jLpjVfXP(DUyt&$&wLdalb9*G6;L4_mFFrD3ks`b3(^b zWOMY0PN4m^@f#rw92zkyv$*o>MU7jvSUPo)L5H}ZPLpM3P)kFILHyh~tw1v?*et+V zd?qZ}F8d}Et)~2gP+3Psq;;zx9TTd?1n0==e(`SZ?7Rp=6{~8aLqSm)M~69hYGWW z{`W!N zWIY5;8e(15n)=a!_YShFF!HgN$`A{BwJK!#@K-gk>4Du0PTGA3zRSB)ITDcv4Lxw7 z05AlkAJ1;jO-&6(vn#_>%(QDV-w2q_qQSETS!wP(eRSB>dr)Sm9^T2L2T8#y5E!Fx zAblFeE45G?rOD%aJAMngtP$=3dPGrW0w8(@_8h$gNqXrFhS2=s^uTH910~I^+ZA90 z)M-%%jbOPeKhbPX6FYuS?#zs+$la?xTC8eFJU?3Zi)%GD0nCf5*TF6{ZsmE|f=T|0 z<&bXB+Tr9jC#CFGn=LaRZr<1t2M(K0?02o=dVgIg&+O4i0FR78I5EB)nNTs4cvU9p&$Im=GK`M<-1SWg`TO8bOBH zO9mA(m|Hi`1{r2Pe*Y6JR?WPIZbhwIKQ2_(Fyhu6)>c&wk1*)XcsIpTkx9xYp3^%o z?`!VlhO%XU4zSY&7t&|cNV{lAh6(~gc5m|j)l^9I?TQgT;@B=e&de&SGGk+F94A9n zz&2rn207G0Fr-K@3U2%vjhUp|qYu0hpz(S9IRmJ8#8hzN^ZnRQL<8|4|7hTjlrwfL zlO^{Ho$)EL6&ntg@zLu}Vmw8S(pV|LeB)CH>xc<)p#2m~3kX%NSTry)bulq9aX7g; zIk5`3H{dswstCc93AWwUA5XU^y|A^jEBn`>r=z0eP_?6D_t{#Hp(;jTRRpCFhoMKB zj#hc%>M&&19JoF?HMO+7%#t<{mi*Swy=B9!ETxhs2=f;rXP5$QG(i5}5x}6>42~^C zIB$mX!B;j{F|jo56laICEpD_9c)5tnp{f#Jie@Ow3+j)Q}}^zTeV(?gsF#>(h#&kVe5&hC=jaEnWb zOGsQHJ|Rs_N})wAI6P{9r=9#iG<}0Zrrj59wrz8=ZTDu|wtKUu$&+nPO}1@Mwr#s^ z-~HYDA3S?M=bWvz_OfHC?sx+7mn>LO4^gk`@U7{3>twXQdi!Y0K>^yXWjNK7U7eY-VmS;F}Uo7BphRpLG}nK^NG(cjN!4|D+LK^Jc^N{_Y7n-99hf zvj!{VuEqbq*Kz}5CfOtA@*RUK;zDe<{Qnn)pA&(>JCD=@OxnAYN+f-$+hxI^ZB96# z!PN{S?}A}Jq3PN2HVDGD!qs4cuPm5;+qUFkTRoT*VUs*tfHr6`dyD03Rjl99c0eox zV6qgtsRKcJm#{<}m#s8rL&bUuGa2xf@D9bgU{n}jx@M7bp^ z^r$pPFyUJDs8m%leBTdwWw@n7+G~4&BqnO45hLM#c=> zwBTRKKh}e+dSFeK!iAqvANaMR$sl>gvC#uL2wDHQ-3VJhy>@6+iqmuQfX)8aga`Yz zKCVZlOFuN0`>!~-_ctJ!s$$~^GGDgSU@2I~8tP1604qeCzdOl}HUK9oV61lmZN;S5 z>^7Ny$21JAmkUldEJFxjxI<|Ns$4v??uf%0wgOsx-<0m=^1QI+C^TNJOVz#Py)y*z zncP1K{^@=~jl2GNP=P;fqO0S;AJzQ(kGw+e))D07w7qLTzI^*cED6D|VP%4U!2_A_ zHRS_XvhYCO<{l+IsPP}{z{QF=U6H+pwdlM9Iu0mi?sjZ?qnhZSAH0~q@M+t*vKX7c zhNB~&_>hiO0eg=sS0Ey3(H@5USWTy(b1XqOYX$ML6i-7c>2iM-TYUw?wV~SrF$uiv zwu`1t@4e0yfS6&Lg-PJ%q{*^Z?p#3M9BcrB1sBc`!;dh#1CN@jKmZuE?mxn9!Kgw1 zywIn%ZarJp_D&%i+d2HX7uUcCn*Oyua8 z$OR_9T10xPpTttUOtTpxO^hL;2-3pLXbO7o`W^*N$JJy}p4p zWqQxK#Z|+R0n{|3&GUst6rs4-(`av-K4b3qAx-o(T{MJmAj2eFX#HKeF#k@y z?t}*u#?vT-D-;T(IF&N4z7l;I#+1#30Z=nbspqIJGg_ghHCC_SKGc-4GkSQ3UXUr+ z5emYWG%Qwkmy+OyBK{}Zt!1h%eP(HsH#%vYj%_S8nNGy-!R)6%t8UQJUWiAFRLx<5!Ki`*42Tcr4OK2(cjB1V$Up z)5d6ZBI5Y5YF7}Je{G7TX_8L#Ni6w(^<~1~B$XHqR42>ETq+G9f`Pb*xJnq{1~YYG zUx#80-J>z>Ocla5j20X899$RS;p0^F7RBn2{p0O(!k{TtE@=t|ohe{_?sEnbXq?hZ z7UHt&%+!Q{GA%z%93sD5;3cyVMB!lG;a#WW-TW{|%Z6olO(sXVp%08RlVU$tjiTfX zpg_H`7XDV+TOW7$2a*j7Mio@8h+>v8ykm>~ev=3I^Y5)s*$MU-b-QBDa!yuFSY!ZO zE^l1;TWkaOmxS*kPy9N5O#6g)$O^6^gz&Om6g7d9E(acf0&kuULs%1n99UZk>hiW#X=WZhEaNBX~g$Ff!G8sQ81$N}n3<+hJWLs@2>PQ%cE=anL z##IzFle*5^w6>=&OBgrwY}lsBOIXXf)oO7cDTF2k>e|lLg$@V$T(VUZJ5n-QrFOGR zOFutwc*pI{B%)^6s3y2Y8!BC^914_VeatIe0Od}5UZt3*jNvMn$O#{uza=yVZgf3M zn!OY$P(aR3qh076njAq7|F?d%{Vg=UH+Ln+m$aJ-nxB)CRwBlY^M-c35 zXkUf;!E9-92JgWRxjjViWP7emeb8!kD)ruoM%I`GY~+4KNk@YjX-gi0O>`Y5s|ura zsKTeYn*<{q32QP`X$-V5QHU?|%=OupCAndf7uK1-Uh5&q>~Dc7+b=RHxrqKyc2^ahmzTXo|nDcOl&C#CUN z&PR6&BtriMHU~w31=MRGfM8O<+|JpL63l z!)yEc&>YT>Yq_x;Z)niw4w|`Yffd3xY}ABKtML`yXbm{b9LF%Cj14*_)&t>s6nZFq zIpc;gZ*d5c7vS5fe@l{}(E_;8Xm)bwkC>ft_!XgI#Uu-{uhE*}Ll4~nVPG}w=rI2M z1=59jlRIca$U;cS zjj?=Ltbrm*T3NgGPS-?+(BHLV#U2Net(NoN~E_aDrnPYRS{ePoY^d`;9OHv!zE zUT5z#SD5LbFp;6&$$BC1#`K#zCrbjcISWI1V#s?usefBsLv(@Bs4=Auf%7t4vMRBt zk_dCo;5mWuE7=WLgXv#IOLjv2kby|RISS*?#~ZLwaXo>v1%cz^p`edv0N)E7Co#l@ zPO?D8xS3G70g`$4Vm~mHrJIrJjpEVf$-;JfrNEzIkcN+Aj`Ud7lkDY{S{y!XCvtO3 z<>X|5MADB!#|B81y0O>wAizUMAb)PFE8+ zV#3Mb2Q`e=-)OHfdAF=5s5nyWidf~eZhMdbTU4AMA-o&e`$!c5nXEQ~UDv~w7?u~@ z(dPB8cHDY?m--g>EE|C*(taG*Fd!F zAv4zF0c$cC0B=aPXg&)Y1YEKl)TA2=G*z}-UjcQm7g@xR5%Y-}Ub6T=fwI;)LJXXX z>2FvJyfCm$B8Q9tGiF?NJfzScnHf;HXf@mfvBJ6&xQMBU7)VmZ3@OGexHLFnqLjgE zTHLt)a3Q&*bG`N__k*`ar8gAZt_Up{7&wS$G6mqFUuipG!bOhGJu%{-t`s z+5kJyv$Wq~r3z+J3~1J!nDb<2Ksu=sY4&mXJ>V3JXQZF4(ITcG5W^LyjaU*Btq83A zG4Md6vV(Pz?4h7DzRivxWolx?3K7W~3Tc86CEDBe#U2k7Ra8ve9?<%Y6B8CkJ21Ey zC6>?3P4>+csVd07SfoE>3?Qf?+ zvMm=UZi~``B7E!1EL08i&i^au#q6HL-r6y3B)tkFKhqG!wDo%+Q}zs zU#=f90?DOP!i_Th-1Yj6B2^gFole1zbWEN{DJ_hO3S-5NRfc?RA1M;TIwK4#f=sCx z!ai=w4fN$7iBy2zNK`0P9ZjPA7%WQAd}YeQ51Yyh&YV3FwpXGFH6H{W0)5tGh4lBp zLygNwBU4Tt2K{%-4e|`>U5m3_hf9y=&(2E3$0GL(ke_Q{-`~1aIixsuh5Q;tS7Sp(!-s`aTlFOk zCHLa;_ImvALDI&^?aU?kp_B_s-%&MHS9jHq>@`IB@8Kljj7#Z(Ov}dNyvkj}cl!-K z;dx_5HEPrj_oQ7$m}^g2-V{8>$cG=8x$;bQDZ>s1miSgQ|0iXr7gTChjXH9dY z>O=~!o)Mud_qjGnJ{4|4m^8CVe2p_i(6nj#<&|CA!pvegsH;6`qFqgKZEJDm#Z>ms zDVbI`hrflGW??0xea1DxmOL(c7)1@%JOp7vC{Xz`guFb4W%ali+gnP^9SQWu@II5L z#b)_FBA0u$+@T{}QdtJ*@*r=Wb>e#(rLVNrVDJ4Vwfs(KT1r8MT+2RI52Jw_G?`qz zx>Qp7tc>TlPcIbZ$#e`=%(uHJFJOZQ_4L)~Ihh1F*3g!_Hh@Lh~DIwo>GEb zG}wfQe8gc$;MxEXZ6LM=& zdtOer`Knjymrd$E>73e!!1?XEq5nnLjeKvY2ST2&h*x*cF7v=6QGlyMvt0#;d}g_7 zW>Q-m1kSWrrW4?$3(mSfOBs6}3WtU}R8;=4zZ@)o zNre9Adg`!Akd*}=^5L-#!}OAJjTR%x7Lv_k70A^oSvn8fD!OgjcuTjeylTZh^G7dn z(;If{wDiCUJ7H-z&HTvuyWDUD#IHcLKotT{&6)TplLxS4s`N zc*4@!#LB6#*bZir7cl6i~D4$4Gj%Hy+mCp)qDgr4JDBI$2Hf+5TYEoEc%Sp=0V$QH9aKhY93Bb$xx`SK1i`4)PssFy9?e+Dny7STvidYJ!=UA`v1o`V}Ym2V(FYra^(_jDa zgzNLj@EdG~-(;tMHyv=-%v8PhoICw-gm~|^8uxkf^5uQC_hj%odld(J;41a`yxVqf zO8oKo@-&^C13VcHc)IF-2ln%Qz4?6ES}NOaoDc^1)`yN>d3_Btm6#Lw+n|VPhP)vYfN=Xo zFrwvO8C4qTw+kIEPR1^}Hy|0yUrG-kOZ+XUy2LG&S8;!(kq+R0s+-3HKzxg^Iw5hB zq3_p9Pf+z`tpuRFd*?q^E$!IR3V3h#^uFI})aY5c0f9y;+l#7qk3`D>tfknL2EP?U z2DZDx0giE=dVFpmNu-`YICbY!7;f!Z8Bjoz=m`H*^UqW(cXDv@Kml+MFgymRu>6ES z6-UnZyaL=flnJZU%7oub38CN(Iz&rA_#A{rj%oGNadB~v9CU-HPHJ&GsZrUdW4}2k zv&XgMxZ%jT=LJqs<6{|;C9AT4wHnsy8i}j6j0tfpqOg)!vQR@z2c9PPO3|aKkX*%Ft$oh_>oOc6{OC>pA2p z7U@*Ye%kK}I-5$$_Vs&j=D}v7HPc5mv7H%S$DBQ;Iw80xqke~L#qE>O+o#ag-w5)K z{q_L>9zGuRknvogXg~|;?v5G}`s59ou*lmivA%7Ihmd;Y5!4_$tzHqJpG{zGfrMcmz zTmQbp4v7LisNmXRp*m(!>^L#HzrH>;O32t@2*EOQu#fmdNZ7FnD!?A8K@#}_p90~* zyMR{KP}ER{mv=uyuI*^f`_SM9z)7De3Yxm%J0PA@`SVX~8ef^>Q%SxtL%&k_Nl0{( zBrCk0edopD?i3^}@5tZZnYn~UCXoN#g*3P>{wdJf7ui~HqQUsiR3YN437Nboz(9fi zmW@{VG^*u8$l5(1u)Gt6SVXBj6p^-PnAsl znsKQfeUjGbKEOZ_|7)M#At*reFG#TKX0sV$t*N;q*v)qK?Yq!R#QSYuqZ2%u%LjTx zq}bk1tQ}zRy1rjkBuqfQBv_CVhS$|EUw?zT)qXyQRK*?ZoZ(GU`fSWhVY3IRw8T9; zT9`({AYa~jCrw)^J~5jZp`k-7)ZI%HnJTAqT>Av)8kari)B*n0o6nrssit-akL{>> zcd)Rw)j2r1xgvY;D8Z9&gIX#SIKbLuKR=#E9Xh!Ja{zdW^ zk$sruqZ=M;FkhMP+5f1-v0S^nfj54PH_;>zTsiK7o!%-=H4t%n!+$owIJ#& z0tokYjYZF;-rkK}uvoPfvUVSvNJ`@VQi^e`==Od&O-cO%UN6_WJ5~#&yWc7qAdl1? zs2mJNX=V;3J+8#hH)ckiK}q|9-=3nr>;fa=M9`(5`8iD$suK&K-d1&A4<{8uTs%x_ zN-NE^F6!b-Ys{bws~(=|3qGr=B5*x$HYbAC7uVIa7k>4kD_c$ZO`$dBLGxwmQcr+3 zr;YbVyL;Y0%%+9jx*k}urm~gBND(}@`*~*QQo&|v=P#eeQU_xRY7UsHUOjF~D9R(m zJtD>_UboDThaEuVXwm!|B!^Gisp4bUlg!oa+cO<**X3D z+=XuQX)ndOo6XA&JF&eWo?9mOzErc-q*g!m_U5gLObtCgzIj}f40fRn7SbT1NyUMx2oX$oF6v8Jpf+-CIuJ)mqVc`h)}5jp!khy5De1?5S+D~ zLAPquLtI4bACFMyoyUQ*^K}=x(~itdKsUkkDq|*hMvKH^mN@P02#oC=HoCOjpPkp| zZeZhZKZ=cWj7hlhbP-(6$jHzf-z{KFDU_F$lc7{#8dNvv@Hcs?%BKCZhJ*5!w;sWb3Wd zLWGr9TW9UK;F72axR+aE7y$U;!Ri%NsU&XzRrIxam`?D?-~@l5eXe5Hvuj`TW`cok zRxW1IhYxr&{bf77&Zu&g7iICIJNdK>%axRWi3l@rS^*7GqTgGy(IK!v1?IW9St56X zvTv!vseVFH?_Wb%Wfb%GR#h9Xo%hgeSz{t7()%z&V4HciOLE&uj%R;rr>6`TDI&xw zg~72zMP?H8PdMdl?$-7JxW(KL8k^6??yB$SdZy}(Y;kZ?p-ft*jg&k4A&@)3V``dh zTZ*fUqx&pajtLgsbh)e}K*F#spojm6g4qyAmF`NmLkn9epAX>3=H2peG(=eQFq3lV zRSi0|$o-HY;rhPiJCwhCm%K(J11~~FkiDKeLKK-d1dP*0IHC{nq+IP2vDrgfUG-P~ z&ED;v+*n=}5=Cg?i)`YO8PXXfz~C(WG!G-ZQ@C$zcq*`#ixK7P=#*2|^a6pbCwW>ALbH5N3Hmfy1<#m{T4Lw9q zuE?@2i|!Wb~c-TE9H_C(bQEds-zmm}&(-?A&cf0BQCjRb*#5gUJxkGG%WXT^)hl~<-Tjz*c z;&x6m``q^M$8K3Sy`^?TzGLAg53#o}kZ%YW`4Bv2`A1;LXt9?FqZ#~_M2(riknN52 z(5R{Kni(^lr9of>BH%x71y3H_S`F~?#&A|cx*C9@CL^3)>+tN>^%HGVY>^4N@b&D&m1`x7C9H^H@nWiTZWBeSo{;b<=M^~i;bAo%;JM3c*cc&Y|UIA zA8!t(S|_OH?vJ;)xlCevR%bx?a2Rr~#nSGuR1 z4na@|j$&t0y0C8(m%Rv#CT46?*u%##efJTJ`>yUnU=#sreMb*MeaIZB58mKg87G67 zJ~BPVYCn>B3l)mhaLxsbYDpizUG#Fd26)yJ%$y>^!&z-|Uqf*CDPk;rND1GAXA3T= z-EMa6CK_)llAY1YH=~}u*L$ANPR#92!$8Z!K}~%G>Jt&qrUGoRw>FQ(+i>e@@xRx3 z%`oNI6PRqZ1i&$=nV&DKEedkDRg{%^6zu)WKV|e)6&V^`-B}9@KZOoFI*-T%H#JW` z8a=iR@D=id6VlLHbmL$!|9Z)Kzw_f{5_)KCZaQC%cc~G-M7(K>GW0jUh$ZApc+yKD z#lI!#*uUuzAEHvRyyBRb9&uQdIXtrav?AMA9z8rfEUwD4v~YOl$;Wl>) z*Vo9FX1{{zXQIt5p4OBz#>MP z!Wk-F-Q_>LYJByWL7%bn_sC%S0Nm#XXgyo*Wa{`nUAJVG_nBKtTsA7InPgZgsd|2@ zAD(6-1GVW>`Z=^$M9yq#_U3Un*F8tBUZQ_8<>iRCyHBm?_YP_=(la^4WpG)*NObYq}c_k(Em}A`jkp&_wVaCn5r-wcp+*Q|OIHF$ZiHC!OJfMGPe~zD$ z<4$^GY>{uyQ+6&^Jq84qFp~@VcS-Pd!tf0mCH9h#EO-=;yEmJw1;H?6%!m*xvwc%p z=}+j@HT=^{gqSTt^bnkMWp_ou)yVwBy|kvbg#9;b##UEzYa2%j2`|mnDRBF<3FlC7 z6kwNT!Cr#fWb>G|!zt zya@+^#|_{05b*+n(~Xm`4>YotTLi2XZEQ|sFZg1K1R|ePNp2sGDB)$j$(N(*AkXJF z*LnCEW&>B?u+v%3n5CuK9Jb1<&xlH$ewlJPE^;)*Wo~#N#W*4Z!zsBW^Oay|H5+@giplW4g?Zq&zrjjH~c5$^~+^@_shL+JIcXQEi4-Z3JolT z8(v1rhUlnl#;B!2c84QV#LKKbc7n&{N(ZG^lD+RX7W~AHUwacfXLGi+c51xl+NMx{ zx}P00czdMA@02df=~#W-#-VNW!#i;PHlyC|+ga>XSco5HqDSq+fS$HYr)SmOPO@8Z zpKtJP=Qq;4OX2am@j!<@PA>^~Oh1<<=`+32cuP&Iq5RD{EW#a^ZOmmz$MxvYnvz*( zzqF|@(@y;80~w#f%UGm;8h*iu+Fo`)vpBzB)PInw=^DjuP#?xc*PeOV5Vp|2~Xr_lb5ns!PbeJAv zId>iTM^Bf~U!JK(GTzg*Q9xkyh6FL6w~6)O6}cDepEGZ3a-S1mU4C1WVYJ%G+#OoG z)3F@s7`?+**IBSi_1Q&dA+m^q!jotp)2M~do}1+=%3fG6Rk@}NayA#T_t8xqpG4a_ygJ9;XM=?fhca&7MZ zN3DmLfbn-VQ->8Nb~FCe#DLm++2IzH4TB{C4!&6(Lp8VJhBC7DJVZHbcq*N!NXIOB z0ddz*H#x9)UPVg<*z9X=Cx-xs*+1XBkQSw$$g>N+R71hR@IpHeLZ372OaLK~-$K|a z9?I|=XGd+U)v1HEh=jGWwlyJPwEaV|W(6G+wnhw9UQhCRgTfM< z*FtwUV8Qb_ZQBr+SNrq%Al(uCTZ4<*;mM;BeXJuL{dv)`Wt+piUPVQxOa|t9Rat9> z_Ne-->{LqbW~v%nl?PzR^%mb2t{zHD1M%~5c6X@!U6ngMe8wPYE%2f(iDQ1L#$)bq zDyX+^t>2#d=}OS~)M6t|Z}d-_9VXN>MPYI7;zKljzseS3Nd4%A3%@Q0)(zPq}4az{<

OS5S z0Si2WU@pC5W+HuBRBxV$RwI-i<-QwQyV^=qBUks1OXcQcV`F8+AY6W)&3PX`ihRY6 z9#FOPrf)krzYBRE1&s2=mDqbxpS%N?EB>qpknCyQMgS_OAP6Rlzg};6%Wd6r$Qw1+ zSXg15f6}SDZ?zcs?x=X7$IquWKh2~^i}}#WR%J~PM^k4J9wm5KX30*sgK=UA)Vq$y zNB3)9$>rfGTrB&1L(=c|26kLq{T#ULmjHawX>^AvJz;SH0WFvVdvROKZ{Nz8Y9qr; z+TG7&yT>IdoL_PvU-l!d| zWtr#h*|-_KS!hQm4<6B+27sijlI$AZuAEcmD%yc37r#WQD9x9DDe(T?{tc}DCQt3x zUneL=i6KkFGJmUQg7vTwX;EZJQ<%g{lcDDJ%6qyakLaVQL%RRUi|YT$rai1Vxkq8= zdaU~Pm|J=28bEpmYnn0(+OdflEgsMC{+&c>@6J>o(mbuXfx$uLT)05M5J7hnM~KCJ z*Pq`34mPa?)W6!Hy}h!Pfhf`ycYVRX+QJT%Lg;{EUlHBwf{X6Y0`Uc4v(0!fwkW&Z z#fA9RC#H4P^){oFGAaN<**(nX-&0A>pXRU*Rm9Y~I)&I7^LqAw54&?GCnpbDlq77; z0GB$}X%-C0K55;{*{p=9u$5MAYQ-GNiQ6By741?bFJ$JP2SI*5s^!oS3WzLxY;;#D z6}Z~6-vk*&u$dDHxCG#~F9lTV{QZN_bEapUTK4LFRQJb$WaMENDW%z7_GXTRn|Rm< zmm?fkdmxAz{;mP$8Pm5QYiTSuT{A!dyTJAl6Rveu{x{qv3QG8&aqdQBKO zn!rF2A4reo^O&9$w^-@P8$!oO1%Qzv=^kJAGoFq!^tC-JiDPO&uW`o}dJfMe=J7i; z{Cf2f@_i@{c-ee8Tjcl%s!%rP+5Jm}*nPs1=NpCG>G{R#dov#rPP*1Py1ywCLMd4|EsfmR1DT<+W%Se>rSjKrunh^qkl1Ycj@y@sAO?k zRO7VT{~5dbLi*#y@KYbsqUvZqqubkSa;0G&T>Is1%V)<&X!(a{ut#i}WoT+oM^SZk zb;sY1Q`v>&NV;t{oN+NU{G{ixc-n(XAP^5}iwmGV)!}iRP=6vH!@Hi6gB| zM|p9b-UA`43zj;ITUg^A$~Ur7ukYq6MmNmJmhmMsH)1Kyj+5fwSdpMf@LSp{}IJ)Pn-^)wb!zn1#!#``|OX~Hx0*XZk>dTjN zFs&0aeq(?s8>UdrmJtmA$qoLGaP~bYJby&P3Xy=^nXow8Iks{Ack;&?CDQ*u^FpgB zE~71wmq#qmb3SE@r`hW)Wpa(vem%49jkH_yDtm&^vBZ3m@#+OX@y^o8tcn_KaqQ4y z#%ihqG3!BhUv*o{1_&i{GBqR{$dn-7TKNvFU7|E;csD z0(rs>$0xSxuk0k~Jc?f2K+j?M{0iyc)E+aox}1-fYm@YSrm-)T@b z2<>@Y&XvL*9)_e6cIWS=(2i~h)9K*ey=sS3?m{06(0i^LpGNB5l0!GH zh&G)&9#fy$nL>2Dcye&2k<|46c3i;rmhP}AlvpwD)KHVBZrGXbJ>BNlFDcYT|4 z(Ldd|sQh*%Uw8c8JSd9=Z2}0ko`Ja@&U4Yf-K&nThvrQO#cwx~8Z$j9DG%mN#cr1Q z%drS@TV@WgU$r(;Jt-*74QzVk&Ij>wirCAeJA z&N<4JoenPK!>lI658rIp26xZe6Ms;LLg69{ta@_ROQQwT@2{n&&RB35)-7-9PG<>t zKdNY3ONd}HnvfU&T^XLq3@ljdAC!eo$Y|ZP)97>-jvOhflKr_y@4Wk$kK++^3KngR?wp;iU zgVX{_y-VUj;)?FrKR$38tl5X z{(K9Eor9oCh9yv9PQ)>4FnCFxJhV92Y|(RVz8!LM-?)Bw-O2Q%a+r6=(l2*RzfM`l zbLGBJ)Sl0SOHLOsQ$@a5_SP|O+PZK|@*!<@yZzYuC_wmvZANnmIEfP4qP?afk(qn? zI(gFMn*~Phu5^1I-py4-HV$;0#~wTgId4_&_BUG!K#6XZY<+a;W3ukxtHc@L4&4#w z2*A-$DP&#xLro8--B0YOlq??1vqUOn=L;UTd)M8ZHs-WWZ(4zMth0HZPXkc{3R-WG zo_63)X_#z9zS6nc-roJIozL{1df1t*a45()qsI47dSnP~I~p1q98idTBUxvp&V+Yg zN&Aj!!^Agq;Ph*40%W0+`QJuxiK9?F>ph_iwh3GdyxS}%kyBZEitpsArmZ6MYEx-s z7#j8WHhs(^-w-g$A<}6i&i`v^xHqRRUwFX9|C?O}1=9jW)~->sbN>F+Pbmqv?b`_9-77bN;T zxl#=69b2@rbY0IZ1}6c7n3R~42S-y=Wg!Y2mIYP(UYZeF!+g2UIu?i?8rc=6M58`m zoqx~d3&oD3c(j4Vaf_Pq>b}K!d2@M`X6BqPCa^l5&ITVvL4qo}s_MG>@+knFv5G1S z^_t{+z)Es!xGLkrR5*Q6);ceWYz?uJb32|wFe=$OQ(b0UzBea)Kbu}-dJU}XAfME-`nBf`W$ih=jEts`c+rk&VGby zDN})%!^t1;VYu-s!|FdwBXo0XogCQH3*Wer7N=x!LIEHCx0z3XD9d5bl*uQ-rLTzU zWUc*~C$V5cleO+`t$@rMHKibAE#H-$_2Ua)$%x+rwnntw$8*aVI$kw&5a#LJruWCl zAJwzXcV=?B?rSK*2?cfxL&i3z8w;k?o3Hw(%~^Yjlg_d&uYm5isn(;{SN-rKeZ#e- zqgC50-K#1t;Bb3=Vq%eUL7KP<#b6dX>#r=fH1ssrDITy1SOg<5bYbQY3Kx=B^+b%~ z^jU=j3(5M+tE4;&O?P+q{Mm;yruQy51%%?2!v?oQc(mPjAt!)QtweI?+Lo)HN%<&4 z`H%7Hic`mG#sbx4HJPs)4IgQkJyzn&2#c!U=y&x2?F$V+liAqXx{9|x3krbXpv*)g*wn? ztH<9T#>5a8fTPuBBY0xcaey@^*wxOWf~cUg2!8Y{&7QVr$K>0!7LPsbD-__CCuy^O z>Uv<8arP36)d5~?-2tu+G`W(c^>c9Z6>tPyw^o+HQiYMWJ)NM4DVBks&?&LMOId=y z3%PyWg;ZaE!JYp8{>@l}@$}-xT6b%IYfD>b=6-`E#t8-!EjZat)K1}Px>>-Fhm}bx z=N&VOsswc>BC!hIMPdVXc21N%aI^?iWWif;mYbq~og1?Q&wYN`1Tl2EXNk`(&;lL- zM;>l}Ho7v2h_KK;n3K{xK$v!`Vzamnrm3A|4CC25y&YUdSxWRAN2c=rF{dQl>UO~7RwNCQ8tJkRm@XR1@+ixa)`d>i|Y;QRWBcjDCNEJA=fP2 z*~=j}!*u73z#T9)sDEus_B_t|&vfd_pS{Mro%?N#4EM?uu32IWI8v{-9}y>`V88rI zUTgCy8mEMyMu{i`DjRbiO|@^r)*44>V>Wtex2lI6$OUZ8q)BPztistRQNMo^9oXsi zc24l*r0Lg|?(=Vw@A}hgKb@C<4ct$>Q`oIGA+F+-Q?L~)H~XocCM#0gHZu{a!+k=x zP?S29X`o??kqk*Pw?n^1bZx@I?l^8m$jMv2_$DQ#kjqr-Zf4rUdErP?Ky-WXW%Z#X zc{=)4JCCkvdDU3bV1?g#BKOP<_(H`EIC|>$a!N5`p@*2?aic|+t+{jh?&WUw+`JG# zb$;8!k{Lx#fvu)dUweN-z1nuurlxYpzdS<0A~SmaFE)7xN?ZHrpOHLi%s^3TTu?b2 z8c%TzE2KP_z(xSd;9;qTTeV_SYG8X3{V6zN+u-@KI9^m@pRp`AJ!~AMY=uF1)(

Bl0B+&j?(d^PQ1*|5X6dXG0bPvxxh_(#0 zt{HB)y2%{b=uF3tKv7vrmIgwNY{n~6#g86iXT2KtYRG z<%YcUvJ6PZxt|{SYp9PuU2N$Yt2iyMm@KY$91@xBLI0C}W(OOh*Qv*zsFoQcr2vX)yH=akR zGi)0AaIexA{V@cI@{e@!VwtxgOG&C`gjE*Ku#5#>_-{1~i;&Ou!^i*sd>rf~q@F&( z`O4>X*PXIY#vl@2R1(^!7FX667B;rFHvAoO6FIhL(Fztqg{uyLFCkG{*=2&WpbK!;tm@J%RMjwfy#tO=r!UDiO=fC z$0C2XvF7MO%wf|py5oLxTOg*nR?>fTrNguh$zlCt z`0#!LWdy<*a$q~Lu#~2|HYky>x!QAKk40(O%RetMtCpECjF=8Fw8`BF$wArZ* z`gP!VS$_Z9uk{`J>i|0KJTfJR=L~(J6Z}4)_0ceA7V>xa!TYTqR>j~w1a{U{oxuA5 zCZt!GA64nNMGa5fLJ>@JIp&*lz-ITyWL!m4HlM)B)0SV-Y#y^-JC2ThYT-BY8bY$f zu%A716x1k)Ffh)wg>H$5WWJj_{(CYS1xW+ESB)1*YHi%v&h%84%NHjZtG*Nv1Q%<3 zI#fl6P?R^dw2=@Qtl2nlF*x+#@m!fyOnDry<(uxs6zJt@+F5+YRt{iSRtaC5`4R{h$2xn?KSoh6n@_!IluZmrsukc!z;vj_Te z1vCy6gm3PU2InHI_X3@3NC{OSb_41$H{h&gUz;!XY~91RreZb_0hR<|`NSzl=xbx? zq=qj?V@2+juu`&OP3X(iw}!;I?^oA%)%7WTPuUY&-`(x#EjeLvcRj-_!ahmMCG$hE z?o0trSE2k(?m+%Wd5yl_SzlE3yTOIV(Ucn-X1LF}AMrHS%cdK(ipf^MQmRPA&ES3$ zW&x2DtBO+GW*n39JnCl0({+9-bhrOz%j$HA1{U`AoKFKtY8sPsME}1O>VZ7xQET%- zG$<@7lI@v@^MuF-D-1zZaWNJ&W#X=n!0d$h`)8z-cvKu5mDRbBw`~n4JCq<@Ln^q) zfg-9f=pmJa%XJ_{{Pw2zbhWGVmzArRdcBZtHm!+8ky#D=D&N1*14slpFGX}(B>anj zIkxDO{wU09%Sp|NrYKM2fm?e#Q-uj@&Chn&rv&2`_w90x!3&ISF9$YH8Y?YkVv z?K=(emGrmJ_2mw63eGNJf;i$+2X+z(q4sj4?l~5SQS1;=*NZnAT_O>&bgDa6!n+?C zi~r@O79K4(X+K;xSBXl;rT=@rr;AVL_QsNc>-d^2;2Eekpg#@67$>1{_A%u=>cktK z1n0AcF|=)}ydS)X_?uj}v&q}dgXKqsNM~C)U%g!OK3hFC2+4}U(n_`s92Gp&_Rsi% z9y^dtk44R9x0>*o8~Ox-0KmK-;5-J$B|92)vs2CS{+Gb93DDC#6NQN{{SElKBp~B`zI7@IZSU`BrQp7yfZuQ_gOFTwK^LU-4Y=N29OvN-j%m1B1pN*ZgI$x% z9CXfdU{2iU&Jq_DGcKw)ZAFt|3`2>+e$YkuKTKWIVqnp-jBO_qXJXs7ZQHhO+qP{@ zY}>Z&jjMH4&lvI_@yC4}!2bQ& zn^ZPi2H74-unHN=;ZgD1oBOHgApg-{A`U8)R21y^`JEgznW}lJ#n2sborTHaH}H^r zMUI+0m5)92t8)p+mpZmnzE@Z-X zj0+bBI~3B!wuYLW-Bo-M1;3BsWj#QsiNU;iK&f;Z)S%$PIc&Q`zAa()C?l*01@M-M zF*O?-;f7Yt0{mJ}JIp>}2paxhCRJ!zfNbjzn-`3E+ii2*0iAJi{HRIY~ z7=X9w3lOp4y*Y?`J8!3hfmLN!jcjAZtnIwtr1j|jd>C~?gE6J0fmy{;`8K|-$Ed^9 z*)+?x>!_}`108u$&`NoOTxV}S0TAoZh}yEtHj|54z3@IrVHAk&KzjLP&=gR6*?(@o z1l4i?0G}M`V>K+>CAJZDi;44(7BwdkdIAFD;i!)Kx$>^lF9br(7~4fp#2?%QG#W=_ zRmq86GA7dGU(jQDDG3Z!-hfhwn+1H2QRf{pu$_*YwV!3o(U?Dt+qRy@A{y?sLB-bQ zCgJ)qoEF^4QF$%xvW?q4PG3?*P36rZT$gnY!7IQ?J^N(oj=%3%W1CSs`%(1@@BO1w zWd8Azl2S7a&C~JUt&SIbm322Smw6iTu9LGjwj3Q51@*-a8_t|?4-A&NhKwOvIUF77 zMHk=qtv}b-^!-cO;bE~i?d~4$c?&I1q|(3L@~?bTCmo%T6Hh!(w+>-RELWz9Ls2{) zHw=yK+7^N~kpKS9-|tRY&tdyFFKH!W^>P2vYe-ADVpiMX}Z*%un(GumKJ!^51+zYiH@k9Q7nEKv-kpmb;3j0Ubspl+h^&SNcDaJ@v7?-83OC z()51_rAu@37BR9tR$zJy#{inM*8wm`AUmKBamV+T-%6UB9JpJvxg`D)><}T8u`j#J~`U|ww=Dn{)BZ*cnPsL+X z_9fDiaQBaoPA||_Ig4FgVfr7_&oyJ;>EAGp*d}j#6A$R#_C2aX2;O6?1OTo?zn3;h zsu$}!(!Up|(~~}t3?^$Elk3M*r##o)4i|I%aI$pdMK(oC>No0?1{=wRTX*Ts41#M3 z%b>7?jssG!TFGqk{Jp(cpnwXGkTdzcZyi=ILOaN9)`G_2n5F1%*K1z4pB213EG6wp zPcwOG=PfKcLAKVnF)1W&63f@$3%9l*4*So@jkY?~iO}D<;)2V~^K@%t{~u{u*4j{E z)abGiz8?jlfoiV}wg$O=Y6tX=1HTUPWmEZrDDI~Q; zhrQ8y=2A(^h*!|n$fTj77^lk3E-NZ_eoQq+DRxNT^WWBix1qO4iB-M$vh8f|ez}0B zfBG0FjD_E{*^0T+OhOJki!`N}7yO(I*U0#1SwjZ#bk}tzsm`oJvzKvk|ORd`5D6wC`WOu5C4)bR0j zFGbs+ym&01Y3tPFq|skeW|>pn`8+AEC_4{f@krBXEAI%2?F9Y;W~p=@$5Awzh~6gd zQ17T3+_ZGuD#C;E?14s{ZpoPoUtpZ!w9Su_0RNib%3RJKgr8+SN0u-WPJ0yjrE(uh z)l%_d^mf$I*vqS{xSX0&HRyjQ(D{*=j^<4Z_q}hs@9OEQEUc_yzoGevc_^GMK5(iwa(w^w4z;lnAm~sIM|DXc)3`%7glbzbbk&m=FCH9(k?tB z6df&0GQ(NDf}Wa#L7g(5qYdp^$i$2!6uj=BN+QK5@+{SKReR-%?%4c-QT!FruOq znC&2pK0VRtqi?F%-QY+!GT=Ch!vBPzH=>~Z%wF#;hy4|%#L?ASeO^T^-EUfBj&{2G zn9OKqTS1VXIRq_bmA#{w6mD2A1=Km`#39}XRo-@(13TKhjgl!u6z{Mc9cR-;lb$*S zD`lm6H6|Hk?}nD6;bO+7rKwq+Kh#jEA44^=Eucul3#JOx0`0EEkWEXGwG3nI{x;wG z{0wfXiS}Hhswk>0BB4*J$Eur;T)Y`JQq~mHo!vY=jAejrX@-1i7=nak#wL;TY?mA} zz1d`0ydB@H$cfBMu9wB8(AQV#FL|knLoa@`(oqv^LLWh)I9@3zZpAM^#oe5RgF`b` zdnngt#l^uuU#JujOL}-HzP2WPv0lyrL~}NsjZYKlv;$nNrM-`&7TiFEox;t_i-;YR zxvH^uAdH+LIqABdG%!F6x(Q$8NDpWqz+!A#!b?yXf#Ca7Z*XzY;iKYXO!nCeQZ z7mqI_1Q_lmUK0GcX^F|O$S~MD*m08MN;A4oEm6`Xk;61@HQx+1d$Lky(U1gGDb4^! z(SrjY-CbgfO14U4qo-Lj`=tx`Y{0q|Tw2ip7;nkUvuo4GNJ}L4Bh5#-N}=a|E)+Ws zOXmWe9EoImg2fZ09aOi*JD)B(Q0wxIS(9ho8U(hzI~m)-n6T(ci=v)?htmYt=Gwt7say~Y(f4z^zm?U@{$Yjehypq<8UfTx?C zfioKowip$MTUO|@Z1y|naw;Eiuu?A@Qd>dW?P*um=3pHePq?2%YH?%GRKy!sOr9r_ z*L?yciul~1m|;qjQ&%rVWU7YLL+m6i`D5n=s;EBk17K$qb#{McMPT@&& z++TKCDCFSM$YbxE7Gp_V+P4nlXk~+e- zlXgDuakH`B8g(~q+yeYH6fqL!&&nV&j;JoQ+9j+vZGbtF9^Q$gi}4NHKd3gBRX^ZN(@cZ#G3Dc zbXQO25Mc<=ql?2?`5O|h5J{3LCNEaEuu2TqUJn=FDj(}Q4)bPPNQE#;t{_>GDQL{H zt@gh!WN%m}M!-<$qBPTUuyHcW$S42i&w*Cw(z#tMD?Nc?j+sg6oB+Kx_EJSl6jP`; zNiHZxV(IB}T2v=&y~VB+1W6YTY?Z_KNMxjeCbZ18HD*F9B{{tvcK%8p5K_rD7`pI4 zhet-<-b0=zd#UV9i#Fe@S-YWo^c#fBl_URK<^6A8rw$X-T8;eb-0lJ0?fLJj|FjYg z5Os2Pln$3FNmdje6*E6+xSNCWGx1Y1-Ag=@E5BEHc*}!Z&NR$V4;R;R>*i73C8L(?4hVzEYuG+Q3^2gk@%`X0 zn-T4O1xWP$lq$2a6&KMM6BC^GWOWZNPJfds36ee;&TptqqUihzPpfD&6!sDzf3>XQ zQkI+DNf{YRBzto&-=p*AaAH!9lr%_Siw64w@mGV*fK8RRPp>xFGW$z_furkXz(Zx? z(IKpK_QXg;+dJl}?&oA&QU4m8sqp8*P4t^jR7w|ejIvWB&uX<8lfP`uNd4(WFf@Ztiv?9l} z8(z3CNkRtVsBv=pE&Zc$)s5s5HvX{Ep-&mD5pvniHfF>4~iCj0hP$m;*FKe1o z&il_TVq)Xo$ZuLhk?}lqaYeNV*G9hTU$*6Mk7f_%h7@@q zv9NGK(+^;=;*UZVpzksRU?7Rq749-0oHR@JFu7ke|A{Hq&_4h>Ih^eDO<;+HFHFS1 z_&F}0ZV*2=RIKRX_$Ca04P!evCiZo$ECrn0%oIg4ru?d}Q9C+zE_SYpu9gEUGKqf# z{ZTHfX3i~HGKF`InXqyB;z`TgosA3%U>2YaCGpEzGoJcPScT4DA>zZNjLi&;^z9(n z{!@m6jUuO7YiaQ7FErTz_wink*~4fok5kl?8AfMI-g;oLeu~BtgFst$SYRY0!)P*A zJC2+&6Ir1iRA#zhigWV##=Cb-O)Y^>{$y0a!e}kARO4>@+vd0Adb?zQ^=Ha`SYm`` zjsT>Vt>|ZjLkjDKT+H#>noSG|9jB$B;dOkW6So1csZ4-y28r37lX*Wfb>rt5>T(_p zBk2=C*uF8VoZjxmAf-9VE-6c98_D+K2SQVpdY)VIng7dt_WkNN+75|7x_y>=jbzIE z6C>36;d~^}X`4fHmr2LZ(M_8gG1A9}m=7g|ekaR`bu~;h?m>meXRIBz(-6;)HBG*W z)Z~714i!q~g8x?yMW0FbP{Dug2lTyW*$HG$Wu(&xlFr|%9WMmv@5&X`srBEDt)*g9 zK)5t(&^9h%Fl%ZKms07fY>+N2a8@59A1ndsGydsqi7gy(X!CrXL~X}5IVfhWSTJhR z0-eK}@^x#{eVhE)$kgQY)YXL6XUzr}|CySa$_`BBLo@+Dv!`VQ57=ZQNj&%ipUcsz zVSS=|x8I9PQ@>WDvO}xRcZxB}`uJwO>)+X<(OPQ)NN|+*iKsQ|s>zqe{lA;pwUCyb zhsUPOTuz4k=*vNG91|1k?EJK&1_v*bPu>#r%`u_Be6pdutKw{5MA=6jK3X?t$3;fE zy7$?W8OKtIV(ESz4g1Dm*0#DD8!MXgJXw&j3-{W#Dyr3V2qA-Mf!#*lU2o=k{ImyF z<7~|Rr?ocxF!%R(R!p=#c<%TEpS(34ivGB;b~d;=X#ne9HdvTz19vcH7`eB@CQdUG~BVYK~#({fUlsxC7JAYlyw=U}Ri?kr04dgcd(9^Zgy}m2(HXI=s+6Zp zTb=lc8{1l1U+lgbxmqG08?z%N6h)%b*>(#L@4f^kQkN@je3+sybT&7%xR+c#I}c1> z0It_nrYif9<0@t2-q==KPD_za}gtIs5{afIr7l^uuw#cHf9>0e z+FvCL3>mO(Y2%Dd+^lnR@Gz%QwUmy77nY<-rkv6sY>W63E3O*U`@(H<-Xzj*ZgzKd zb1!6=^jz*@AAfxEhficio!hgMuIq>qZO|D$Y zU_^wA7~^Eo6bvXl%P3P(GPdH@-m1SA|(42Lio_Z9k}@U24|JgPK`R){5P28A`rtEh>!yo{-zh0yvea_ z@v^aX=XpwV`@`KCunf>pL3cYN2~ZJq_D1C@Evt*7B*UTD0SDrqptvfd8K=71PASLv zzGeRTB#j7#n!rSIYyD+S25rd?>zYyXAZO?WeL?n}JszcO+N7hFbgG@l;P6MZ(-^bCf9PyDA>%tZd^lnF88Mx# z*c>|sRP&~C*C8V*aLsj#OVAE9Gqka(>@-i07Af)1^@R?Deaq@7Tx=9f%noX(T%7hW-hV~GWg z7`S9ForAkRCf!A!wmCG9m+kCMRzr2`6BE6*Y^E8>e!EMAL6AcFMT4hG!AW~x_=@{Z zRp-Jt8+>c;DmQUP;$s$!D~rico&Aori|LE~bZRCK!XL z(zb$_fv4rTja#!sp|251Lc|?!X8^CNC^UZr))ztk!7z0$ki%YURvF zL&m@hmej<>M9}9N>SKoy9aM#SMzA`juA&r0n8d(SXF1n7vHh##!JsOqBk)}VmSCRc zxUnG0iO^dGnXTNP;%}7~4*6xMlRrkx5B{B{x@3ywom%D5sF?17k)ffQp1;0G`W|Ot zUSZhRduQ$+IJQ3unJtVn16v1u(XN7KXXWI{7rOMrC&G5&6Ae?5 zQW)JBo$jv8k$`TSuKq2NNn!+w#omb%zeA1r?Y|bxN&F_IO8&Xw(b+=N5{L=%?S_U^ zh6{KrsGN_n|XRDiOm4(bXlVL*lvXDB{vvzSJh@KBJVim#S+P-Alb z@J}&%G8Iao1x`E^(_6VL94s2D^G#hWaY2y=zoJ$`KtWS;s~W@{F}>E*_+uYrNU!ob2r#;@tgItTM|=&Ml7wN8NuQkU%dxHb^kp%M+0`=*6b_HJ$0@vW%vp3j}P!Bblxh*2gFxPdFU$J6m311 z2Fz#pXqSt%zW6EqbzC4rtn@YR#X#hn8@%)@n$)d2SAd#lJ0mkYnGfSNb%g)7P)F@t zkEsmwJn@9mGt-maC5Pg|4~bAN%{+9@PfePC zQx-DfQsz8;>hRipH$^wD$X=w+>2^^Ve|VebZ|Gvur@JTg&BOX`@+@mKY4J zRs$}Cg6DN^hT@lP{JpIO}oIb}Y7KTVLDW{%F!cIOP&C>D{!QwQp&tatBS*?NQTpsN3Aw zO2sV*|*uvbMGUg;1Af ze=hz&?whNW%foO@q6d=(TI&dkI*gU|=W7@?g^7Vur{h=M5wp zf`XC!je<4@eay5>m}GiR87v&yCC1gm7U)`Zp(gN>`u^gilm5qNR#a|cxZ$WW6j($g zq>E_rb6Ke+QaEUE00{rvsX*i+FT3n;#F$08?F31I!v+*&y>#^v>yBq>UUT5|Od_!` zH%zz@orKBK1hep3bz|r4=ukjZg1B4uLR6jIs_3;28y4>gCZM+PI3;b4bsJ3?bUDe8MxHUc9O4x-UdZGm-?Tue;<55bk1v=#;lA%8~$$L*_$-AR^>V^3nl zkjIvH+GNV##&g~BO$OR9$wTF}a%H;M8255q)a+%}4l_DzrzI4$7P3i}3p>Xgsgxc1 z9;P{Y+}zQrsWDZX+-GGYqorC5SCa?hh7^LOp$Km!3M7dkbL|1n-P*g3`OC|$H^I7` z4KNAgHTGaV6@n8TZ+;(r5=)G?@W%j1&` z+a8xzGbi|l3yKGaaja79IA@c#-kv6Y`epSvUAl65pM|zVY#9dS@9)gmjFXsUQ%xfV zb#d>J?PWSFO?@^^N?I~A3{b1kSuNc_DHXb2L!q4EUv2~>UR6vN=>7oa5r$8utfaui z*#5}u2EwjaXQcuyWtIw*_$E!K>?HNPSou8*t+36G0Z4U>iYwN1>0FjZ8HY3&F&?8l z3i)f6J0_qX{pt#CMC9n|A_PfJ_?|<Mj{u>>vX;Lz85>XftuJGqjn{+tj!MUGl5Zo}KNX+HOj{Bb zzG-6vY}9Cz7O6jZ2YqTv^<8MV)byXzTZ0Dfm@I4&!4a`icxs_76+CVOrqZQ%-WN|5 z$zML?JU|05FOX*%o)u}QhjhdYev&ftUxH-rpg{mLe1x>~L}|omp~OfNnG$z{@36*( zb};x+C!wK8+~!b7H!S2BjAg;>Z6MRtlK4Nb2-wJrP`jF`sWoyZuBqJYG47Wjui3QkoE zZU9|eO#nz7-`Sk;4Fk9QQ*KJkV_DW-ARYrj}{V9 zVb{B%u#As%)-DNZR+^HP9x0Hr>iS1yZ9~r+^0QGjzCIXilp%pOJX#oh^F@a6uB^W! zyoAchKuJT!9hd!*^~SAmPJC}}a!B#eJ?cLYz&-g>k`K6Z3+_`VHYWBGZrA3;2{tQR zg+w7F+^8P0=AV5Gs?&_iQg7JQ@xG*qycr*^7pvXp(Q#WzL0ki+t;!90&Ct>7Y zP!LxQ7Pnn{OEJAZL0`T#wBNY&5F8X_%+a)M4fA5mdj7%u;cMLP>vwzd^>I%%<7nL~ z)*m!1Y?OpKp3T1o5YQqrFDQ4hf(b>|XcsQpQ@3yJg7Wi; zI+e|lW%TfBV_n?gEWp5)hlv^m=L_o_y}cb=HItp$MGdAT4D*U?19^1@G7CsLNs(-o zHp11ZQ$zfZzC`O@`%Kb`6!3ARMl}I?bXZq=Cur;D*NRhrPvo-u+Y#r_KUiNPk^Ug*2@}MHtHBO;jc5^ z_ltj=cln?2>ogp)*sqH`-kuf11qQ#C@_u@vZHiZhr2XZHUCy zR1d%S`Rso_P3w~l8yRu6zm>Bp`+D+_PG#6-J0 zT^#Hls`c`TR5obtULXg;cD?a*@GnXC?%^TgplZ{5!(>yiE2--vs zW4`O-v;3ulm>KGQ@nnT!KWFWIFiYpOTb(4S^sZM)p`@6mMLu$IIX-@LHBO*B@+M3O zL&4caMGzDM9Sr2E&*q}jkoq?jd%Ls%YlOE`G@|3L&W$t1V}EcFnA6+6QLdsuRK|dI z6<<4}?b^TC(+BkKaw*|88pwf>`UvrN@HFgCEAD)`(2d;t=CDsON@^O$C35{r1iXQ99s(2%p@{ij>6p4Vyi zZ(f+lUaj&*D1owcbG^5B;Q;rSaCNk~6FD-f%M4MHSeRE7Ew6V6+u2$yw^u(BL_Pdn zyCJ%_NC&f@U&HIw`GMC2>TuKT#rCuS@K{u|j$q{<|>Qrq; z&mmSSOmb=cgI^|HQB?tHB-UX!vR~njd8n1pS~QJ(a^g-nc!nxv^fcxaEi z^?pR{aCF9K`%mv^v?~2-KUA-w(-PW238)fS=Zyi z?{m_*r#NSN_Lz`9hjo+a*?R0?nHjymhfY=0tr4F{#pa8zCBjixKzzGQrrMCnjf?%5jc=XxR!)m1}nnA6BV);z;EEjH!~Rkr~g@+K?LE zx#^LDiRc|DMX`(vE{BKWy^sisr>tgMP?8Mnt5kN!J-GdzmnHy<{)V8yUBoC8H7h?! zNlA_D%X?zc1oV%9Er5TF_t%-HM+I%lJPC+;P-*{@JVv^W+P6W#EQ*3nHOsZ|cZw2P z-t8FZSqtws7XKZ3a;WxkFKFpVLim+ptxQC^=bKp&YP6JJheuPgH_MRrWY*cRq&kMt zyK$tEUE8G`D)Pt03Uy;5dwa32c`V0P2Jt z-13{`Ve4SiPPl%;s|6Jn-SK+Zib}b=UtGju#}02~otq>;v#EM1EG)e7*^My_EBj=r z^R4dXBH`HI+VNzPwq3rHhZn4uB4MnS>*-v%|DN&fFU!!fLHK%ZhA%7(-0}G!h)>JX z0Q}ih;+_IQX>>nFVUUrR!)Bniv^Qi=CPAw&-~6PH+l2_ur!ru*}%m*xB9O-P+jN*j>1}Z2s!B#!?^G1=rGN%V_UtB`7&*NiE@deT{Ktt7&xg!@WdCx<5_50TT;uV)cFE z|3~DjU@z(E?!*6}F-;y602#RV1VG~K_X>p>WDcY zPhP8;!nc@q_ziF@z>X(;Vi9@U>Z=+_ur3|rmMompgT3dV?Pbk*q&xOynWYQfhR zB%z24| za(#Up`DTC!sPC-MiT%$63wzWzFvPbSJIJ7_PTkwY(0oV*o?fqf0I18<5J@c)&zCkU zy%Hz079eslcVo#Fx9dTH3)eDQdyVO;cka@+rrOfhvNnP8#^>^^x5Sf23TFkcram*b z_m3*sr>=wJE1X5T?vEiuhT0=zmZ~eUC;6IQ!#e({A>R4&-)VOFXL!o!^VnzmeLk zH}gZ;c78YmD*NKw^2vTvfl1~|5Cs3J6xfR@=-U_SgZ~}K?FD@#+b-wE=%DFc4}eZs zF9!4ZRa%;(%V%vWIx;apOhO4^xj9$v+<76!KTfIPbbC_%{knN?eJc6y=CbkQrQ<9P z%bS7k95;(x>WGq&7pzLI_2$FPlY3B)er6Xb6XxI{()F5KDvuiH-$cNL5m7J(5+b71 zM9qb{c{Sc_z_i2sAJ-Rjclqxe*PX8`U;%4K<;5%ApVw%R=ArF${}ITDl4F+qgF6ty zAB=$E@iz6~;-*v4oOrWBs~fz$kDTaFKLhuL|hQcyFSHWMnJ_#o}WmW8(aiU=(o;qU=fW6z{XDk z;FluQJKksA^ABjosXJkd>0RPg@ z%N3em3eq}l>2lin0V?UK$aVcm#NMQwhQd2LY(-_o#>R$j4$g=XW*UXF20`djFiKHZ z#*lF!Tx<{bPlEcBO7_;}#FzjT#|a(%lI(*$D;a{QL~oCR9TAenL(kG0n#{ zqSaGNjL}djQ$TcdK7&%6okIgJ&2OlToe}lNKZ+qjyHO#DF$BGs&7!mXObxmP09d||@hUj$>3IVBgO{TNBo7l4Jw)Gb;N%QEOw&<}IdnSsJUtiwy{N~gft||@K!SDg z-6lYTr)@95;_m1nU^NVgy=$hMgNvzbo!dzzdB7M7H|o*^s$qRb4HtR0sK=ZQ$Qiff zR>8|mxM=;`)(m`4_y!#pMbv+T8n7j$YWQaK9W4 zuc=h>GudV&+KG&Y^gQ|!e%<>4v7iGF+)vqjTbZ}4hwBBL!Gr8ws##{+WtuQmkfg*7i?(YrPbV4=G7odk>b=P^n)~Nb%h;2HSJfEocEHh zzODOjtmqqYP3$oZ#|Vyb?~1#H{9StJqhG(aYL zIQwZR-TYrRJ0o+alaT{E%tvH}b>)^mh;|xv-rQLFoB@}5jy4AuH#ZN*;vZ_0uj~CN z2jh!b3+A&}St_`Zx##oE%k%KLB3=%L3~KPq3G~Ebp>aIXbj9h|s26X}cO;BdFB>iy zTUA+M;i+LvrUt-dTD~l>snSm!f7%N@Npt(JxVH&8Ee=`b$c-5$Cku3y=jq+k9OSFz z;bZ!HDWSt(-6m4(L$Cv8tfO(rmk|gQQpm&B-~peBW+s=ZnceCAmMlFR9YgC;9Uv6n zMc;9RhNqQ3t94~!;K9T{8k?;(4j}#gioLsEqm}kIu}CP3$Jef;ePW_7ys z?WSz4xn?9K%h@y|@1K{)Jx`l$y zcLU&9Q(b1V;+|mQ#4oR|Z*Hulqu}6S$7*Sy$afwXsPN9NEpb(ry(QlhPWF(bp_f@u zy;jp_H+WSNhRgA{96DW3u18wGy1IGxUOar#u>WZFI04E|qEn?D2gZzFW@T+|t3Tza z6fOg0Hkd7tkNl|DkkcQ;c#>)=z~ za46RavicFFWX5}5OUfKf9MSqywJhgfPRC4N*IY-=FRd+cw-zj!w+_E|dVrBKYiupg zONn}p><%K)-A>MwHLXw8=lGYuId3gz6x2$#1LZt(W>8m~cp4U!Hrl$0RDzo1;yisi z$%=ZKmU=l$mTG5QUE*l0&zh^Czw`Y}>Z*jxcj#JiYkcb6|% zNx{QUQQ4R;K^q!6VpXH9?xFJmN2@dzugzJMhIqUmE@*CGO+5p)l|QSLa%ymtD(&*k z(uUD!;GSPygQz+<%Zt7Fq~_FYAGe&xqmK~lPWOU*{!7YDT5Av9qtZ2tbX)zCZw<9x z15YPgi0^!FvFFX7;0kn(skJ{#UyoSaC|V(5rNANO>)yghDm|!I4~e%KQ`GqCPHo2( z6E{kvSFUWxN9*v9$RS+{GM7@k(r-`7m@D4}%EcRpd_1m*70n*W5TdH%U1Dda`z+Ou zpLqD*Ey~OZ6G;4*w|jcift?`y*=5sDF6d#J-?-}L%*RpGR4y1TE8E3yDyvbu|Ne8s zd+!pPlERX7bhIS(d>n@x*n#mq>|Y;}2%-RT`v#hfI#iwz1#uI)mv4`_?F0XX2l5`; z`xLp7FmWQ2dU5TGFnaP3tR-WilI}-+mBA?RZZFahl!AebaEiWbA1GgMz>94hR17=j zn2yR^zLq^Pl^zgr9+0%Zy_Zg9vHIudyY_VdtcOBENhwH{tfZ%B_@vMigNm7bY-VKU z$F#RgyOhI|{1;u8BBp%4j{Njh=VYFy2nh?nfrOy0FwM82dV>n&hUVb$?oU>lxYg&& z%g5R!zyTxOJx?7Vc{=)Cy`TvCoz{dax&=Z-)Tmc|fZ#il*Tx)v#SZ*B+eR&7v zVtV(U{kpiG38$5hRCy+i#IzPqeDNME>YPe96O+O_;jGDx@l>`x8GL&mMu9?&S(hCU zSM(|B?akFy7^qiMOOLu6(NnmNO{1Pae#H3sm-nkiDHo@(*8jVfTW1#~CcKh~espt_ zyD?m+Ax)Ir_Ajn1G?ODUB>VUT4@0pZ`EJbn0gDXUU$W=>lWpzk8B?FFd#${EsXUzc z@BA*C^_fqdBnS`Be5XKlqRG&n-Rk0`#3SnJfN-JxcH})HbigJd%VI}!sNv(&R7aP< zeE|*x+dy>N>f&mWOtOZU1y0skEnKhT0Cj~xUJDMxy1_iQw@q_Y*=f>ZnbUp3x(fp) zN(M?SrTS*88Ow*D;l|wawnM6~J2xQzvr6R3jxS0#DSNrpRIbK0h2)(@k(d>U$?Kb0 zyv#~UCQ@=*yaE^X_H}Gj`K)GCy8d1^%pI$ut^s_WS_}*gZ-W(ycUZopb0cg!!5wBe zxij)150)Xv*pZ5onVyqOtqduqIp+3~CO##PDb3s;&ygF|{J!5ofZl@er@@k85(95R zZ*A^#k{}%(B6aI4Ro-1m>o$4ap(SV3rJ)@S?=kd|REXey+{caT*hNv2cx+s3EGDdc zbePjB$8c^vAnAqDpF_tb123+*Y)oqp6fr&ev!~oLG`jQNLvt&pER{WV=@QdHKTRpH z?mNq&kixg0$5K%NRpW0XufV>%pJCjx+;rJhzwI~06T$9VT-(;uCpqc2YCA}*P@j~g z_a)ibW2-8%%E_teoGgsQF!-^*4*EX%0&n4vGSw!PfKz8?b!kl^k#i9>z|?85Xp|Hk z(!Y<%D|zMP%Eqh<7SAGI7?je;r5`Y)jUHF&l}!7}PTKIo=8y&SG} zK;z`qbSg2mVaAkms^#|QFP_WW6@r#{bE`D$R)10Q_}I*N&b+M>#Ec@NK-&5n-DeR} z*F>AD;Q4tKC1~3i%k(3x#lZ19ZBUWYe+Va4%gS?j#4H604$7mgYe1igP=bMDeD3>J z$c!0%TL|-5>IlgI1QtZHYl^jn-Nx(NfymLIntSre#;C|>C}@~u4rLs{z{|L^uofus zK&rVg53xGA8U>D8)_Ok>zgLk!!9~-zz6;6#Rt<~+o%k~hNQ5pjXqFt@%~wkh9KczG&RPM5Y=76@+uTc~cx zVCKZ}8*I5G5mTh`$fkPXMA0oygjYV0{o8@aVP2Y(3Wm-fAv-`4=)xR%W^YRMfF^Pn z#zjonu2QWS1V?HVUx-If^y`=`)Nn}uJmf2Iy!FR|{h?l|AV#{YAFpCOYc|PF+u7mn zAX>ICVn|mqT+WQPh<@D_DsOU}aj8+s~2)85E)@To2o#5+&&TsbT%v?Cn*%PZq$I8)p|R6 zM?1bUoKGA08dx-^$RKmGF^O4}7EpZj{_G|k!i}%RgAJ0Ao>@vhJRWp!Z)@w==|n#~ z!9)J@F!s$BBRZ;}>$7lbNJC$_ltJ3tt7L&9V`@V=S&O$@!Sp`TtK1y(#IkS~v{TL0 zRCGvJiq?`l%d?LBwA{FA1WFHy>kpnv2pWH5gK5bs3Svoc8Wx)aZe`S4TRGUrL?$biCBE?(0xTh3%*WfOJ zP~4?>uoicRAjK&j+_ktn#odd$Lr-|#?>%R&@8m~TvNAK7d-mS5uWOI&Z7C#H`cD+j zF)l=|jP|TySm@}5)YXTLdM$BeR>G2yo^i|Z!jOejHR0#Ps-KE;v-}13uD+ z`5ppph72#`ZQ@pM=R&f((S4v$4^4PPPwe+t_{GnAA@Cd0E*s~0xzbvPb*0idRc^L_ z9Fo|Oa51q|!)ha22bXulWk^T<{JGP|9_7VzwCWb8Oi0 zaMEmQV!msFTXG@RQlW1#{G+rmc`hK}9{bova<9Z5gnsVkans6loRJ)at?S_>Gv6>* zGk@TNwRu9wC6Q}RXR4mKv+~r>(3t00Q+o=_d|F_lUu&IRWhu2*8tZ~C1LPU%eM_zw z`)p{NF9zs|_7{-d{EaAa!|L$}7(A)D{&CuT3~rlf2uL6S;pN+ke$=x$4OQ$24vr`# z?zs#Sv1!(5j!%9k(EI!2=kGR8ERF+&Gtdg1!_bM)ikJ$wRS#~|%z%a;t(^u2u3KJs zH@bhU7JE*v?$~r4;(Icz(4+)#7vvj4&%TC6g+Ady>AA?w)|jZHu#(u-$uj+48`8Mj ze06ly#f<&Jeqn5+_Ib0bn!nCAXj>#R;83Q%UZ@Fo%k3eW(D(@J)us>|ch{6)fDF;d zFWLx2H~7JOYjKcZ#lY5R_F<`N@2D)W8zyYv(&N7B+_ZhL8(+t~hU0|`b=8dT4ChXW z$^8b*_;8~e8!Z(rtrWZI(L$K*5#ZPjX809&YZ!hfJsIT}6B2UzBk1Fxa`g}fp}kUO ze#+IrXz_j<26iix03~IC-H$Pn2vi1sNlQ&7R9ZeJ?0BF1$jNfICL~-ecaxK}dDXxi zcK!knb&Ki{tB@yS4E$EL*J;~@l%M+-hg!X#yN%{Yu};sk2xK{8v z_wCIJiYJ^9|)DuPfC6!PeZ$(j2#D0PTb|Ir<95j+nY{1yu%qOH)Q`g-fzGe@;W|~SjOvX*r)(gMbu-ow2lZIsW8D7)h31hz7^MA z;rBK}Aq~gJ9)CvMT5#hlQ&>u-<#sQ$Sb04-n2$+EgdE!cY`Q$btmnwKUkQ??HI_&p z6`tbW$WKGZ3HQQldeUL(qLXXcdk(H&lj=u3i#;Y?KZDz(ukm8NU7MCMhLsfy>>+dT z{8|({YL4Y`+sS!3g3Fr(A9w*wYpEBJ&1@L(OeFX%%~R>tc6Z_lu}l4{ZJzL5memek z;QT7m+slFR20H3clNMTYO{$7sNeB|SefxYqFb zwn;zZzn8p1O~1rUIYlG8`4w^PI-2p%`(&$^7d9r zMN_Io5Ow{jQZeQzyjqxoUB6k5?~YQ~Q(owEwShQ0AS~?j#9ljt``99*^fTK2saeVL zWNbAS9nd#H#ZsnVtEe%%KZeYFWLEYjNx<;B$P*bUhh`&JAO6G0Ggu zTuO0q@lD4wi?)&7v$9C!(z*`WH-<=iX=^xFuj;EqL&T2At5je=68n}pEoe5EyMwad zT-xl6+|10()LyDdHXr0A1uZNnejm;gz&Vyfr=2%bvt{u}I&j}BA-m3jjp&_A-^B?| z`A0QYn35xm7YmXcSV;jq&65%s2N-QHF1LyW*YEScaZPLJ>9yM_StQ$1$}5hW{z7ZmTm- zieAADHeTIM<`0D!R$#Wfc7>+{nXenEW_Vt!zbeCHot~ZH;<$p@p}H^P#K)~FmeNff z1qOZN3pgGd{7!VfuCo9cHM7a|fZ8k-vYmxMSSKpvrYjCL*^8(3rcSZ_Ms>YI zb?U6N%Q?>XF|4neenUp&TFn{_s@2O4xw0uV8}71B08om9E3RpM^hf#3-qudaS)0_#owDkiAm=DSj6 zKSy3mH~M80_kF_Tu=VW#%Y&2lOq_WA=G$SlkizbFAaXB*EOu?Mk$Pq+^CUdb#1-9c zL7~R+l&gML_yK1GnL*3@5x;`ycOP=_^=3*!b2FVqM``?FXjEoGg_-}o#5uS~rDAW} z8tCk7dyo@vf05)GO7#I0Q zo5Vh`;5s||`FzjHc^7rRDKW*VIkgF5O?!(`?)~|1-^Xe}f%l868VB*oIvFJXp~JEm zH=#MdA@Q_aDUAGOm&!Qe!u0eB_n^QeBoWcNXApz zUQNt3a}xzNdUE&Gao3j1@|0onpZ##`2H>G)Z1Gaa4;HxmJPWn4vlSZs865#pV`!)j z>d{6VHzN=ot1;I)5)l2Y`0jE&a=0Cn*9A zk9=3xS$=24kM5dZGGbzgWkt~+XZ8qWe)53&rAOz!uLLDKJnp$?Hk+dr{T#kXV!|YJ z=T^8^cB+6dJDZd$ zhBL%v#J>382~4oe#?h#; zCM=+(WnkKitzer^&~FZmi^pM4mDbX-ybfPKT*$T68@ zJqwX@bI(=!htOr(5+C2vYWA2Sz<$1OcDA2J_2)pIkjP1TCDMACc?M9TIp@v(Yh8K( zi|~@5z?@*#sA{I71BZc`Zm*>!;>c@JLGhTecLA-kgN=S&oJ|giSJWSVvQFUY$RhCOXDjzP2=*o}%AeZJP#6?NPO5N1tUChbNTi+yf8#J_6 z_xgMsI7E}_>A)o^9x5r3qfcQ$k2ue|2 zqs0`kE<;N8OJq9LWBLSCIdtS_$y$jI$6+&(H7A=KNw;dc4m7ua)!;e3B< zdgYctv;MYddi{K9Cuy+dvU9<`p1&5C_>{pvg9$pvX*Tv_-=}+6>})x~ zM&sXU^!n-uq3Hb!yJ=QjjsTrT7b`6JE79(aM?&Y z=c4W5y?%le8(zU|io?mq@M9kz1Gg^rCaqn51plzzUBcU7xp=d728`$q_rGUihEnjH zwy4;lb<{^bt|5K)tF2L}myLh?Hoe8akVS78L@wn8xF#C$G8W2}ZBTb(PYCMmecZ`6 z1K({ElZn39+SQ}+E{Q=H26Z}*SHN%$D4^dK79QW%u4gHoIANrXJq2!06>PICS z%lvqWt?sUYh`QpiO_%Fg!R3j4cX0rgkmp+5ZXeA;%6p98vHG!e@p)MBnD@A}vcIP@ z%ItUWS|%*Wg(KSCM7c*09ZR!L{D6q;7~BA`o2zRS%kgCD7E3Kc$%X&-QAO6X9OIY7I9#{s&1Yn)3VNk?C0M2@z>_SzYAw zDP7vz>w-~G>mrN!$!X4;9UJe(94S8B(0%-ql>1-)%ezEV3@i+;3on-Epy~^av5;52-$Ultz7EYZ zab(g3`tX>i0W(5sJ0TpF`*fywrTiht=^s~b#b+~-|R-r z844hP{Aig)#J|{`a*h8|vxq=8QMW#Kemx@Bs1Q<(isEW75JodSDMWh1_@l^Y*Nwcf zak&xy2b0$|bL9O@PEOgpAblL1r;$Uyi2%gCQTLnHg*n?qeih5|y{FSzmqs1~f|xKkZRtOgtYrL5uS4VWLE)@%Jo z_3^K5~6(+q49V zK)OAPYZ0+K<}U?UJ*_+BRpxH-_FksB8vp@X2xyX%xK-Em>DmmPi++Xo__m~4q#VL-mk70;mE;*_# z3DK)(VqFvDC8kJ;nYk=!Ro2;qU7_PYNHv%aZjTC$5coSIT@+~Ab^`j9G<_9aI)XK8 zsx|M}T|Cc-5r%ft1mCYtzqYcS#+r?)qkv&4dID}D{ICIeZn0KYe}!gc8|~V*c1XDI zxZS$QJILNivsdnijjdjhTWjIEixL~_#=06I$2d%HTM~ZW9FAI2O194eyj^>;j*T^F z_gQwr_Bj^{2hNq)Ta3-p>E12|PwR2@%ds{Q}U{ShREloel(CvrIfQ-^Ee+R|WO!C-ZZ&`8;DS6oo(aoV0lY`1trZ zs1q2~?V`4kJo=3MjRzU6a&be4E~DI6V@yCMnkr6adA{04V~n+Yo&1yxJUrDlQl4fF z-T69UD2#%2GW!VL;wS^h;Ba>2HS-%UoBmR^^c9AI7gDK-gg_CKQ=}^J~p`hy@H({J_gAi&+p)vrZfW~ zvkhlwkb@N&5#>aJ^ChjFI6#!=^71kQ>#LVP1~5aJ9fQ*r7|jcI%<>DtR)gsHk$sW! zcDAL~L=Mbj3DmbujSX*l&75nw%&DQHqpAnh?2JT^&_+}XZ%rM##^zUqBzu3tL&HN) zZ=xx#qi)nqauies@Dt`!I^DtCH!)2~QOLZtn@&!9$qCr19%f&BRCqrwEsy-J&v%<~ z%&A;xN&WcnMqaC+FK5}Qr0Ie0pz`A@JJuD+tF5WG518H%CrI)6(<(T!kUxo>U78_{vQgAp1Xai~ zwdRTQr%c>JHHqu#dEcST|JCxJ#S*{f|u@n1jfrVA|nSb3nhY?Byi zdh{pfD_9KnNW{W={>$AIigBG-NkmGY+eRJ<|tpcKR z0z8ehw{q2+vom_g&aOO;@Sps>{=GUQPl9GPwDLSqvb*AaQ6;^g?%N^!G!Njjtj<Bj9K5*|?Mm&`taEjqmM~@ZYUj`+{uJO8e*X_P=Yb;K#eM&d-!S zw}V(Ma!5RHu}TK_lj;l7eNNrV0e&qo`74=_iH-1(ofgHZTA=4&-W**XckpE zh>F7Z;pD!T9nsH^&_s5pbeBYrb+W%F1;W=XnYBJ3B?KhaSN{>?suSx($(2>8iJMcr zf;lVeSH&%c^#}sX~lN zf5Fl7!QS4=3B$=QW8wzH21G>oJl6UNme+&&cNCT->T=f-xJRZUFJp;5iuCMEJ)!0eqWpn*7Lfc3C@>Qaps747ud}Woc zXk5!M|H}UFdM>|ReOdFYBK&Bh+1q`=Y<9lax{>s)Jtq8F+{k^niJED@S1LOVS{)(u z4^_JM651E;f&$(h|4|^6ec(HB?Jd8vfW>e7H+6Yvt zM!;iO7bw5nJ*5Qa66wvXAW%eATr>rh3a`HoqsVDE_}>`Fx8yaD!3`T8e~MS<>MZDo zHoFcov_Km&Sj5KhdVBsfcB5@}qjvbYi>2Q?W3njV%iJ0YEE!P1!|j7Xt80Pn^|;yR zPK5X9@bUT=EHQt5)-F|}C8tp>g%~{dQqY3; zPcU&J!R8Mw(kIec`E!)yA>r@^)nar41gly$D|{kStG!BY{0~aRq4K(W$8X_E{~yPf z3HfIarWrs~@QU&i2g*xlUPh)(ob}a7^kAxQ{bW0`^;cutV9SNsuac@20W#XR+nXIigyhA$#w29eHkLtw)-U z0D28sZ|KgcF2ZL#8+aZ#BYXddqYG0ennsEggT-Xh;~Adb^qu3XLl$cwYdGWKn&7H# zQc?r@f(kw}9b3as@6m-Gq-eMp>*0ARuV}IeV}S2V5El8F7#nq26a703KiwV@C(h~d zGZkLKAEq?~)cIk};g7T@9da`==E=$1SS2VH$h@Jh|^X$UF>pt+jsx@6svsed1i<(o1)eL4FWQ`B6+}HfRbu zZF=w8@sDI%0+?J|eQPaXR(F^H=4|h6y=pUMUk&AXG)831@xGkQ7g#d-lypQ-#Xe^f zq`>8!GNK3m;xxk(&cSDX(Qn0$%FS&8DG_ZO%7Yb6$V%!xA_V@X*2`u`G)f<#SmjN~ z37=mDePJ!Pb(llvL(oThkB;Qu{;RNCYMbl74;~TWqE@iWFqQBpROdPfF*exHRzI6N zypDSdDNUzo$N*o*R;mNd*fp-xq)J7yf8n!JP!%=jLh1e!=O|J9=jvhps`=7B=?AH_ zBlk2(@RF!GHq0@KQ}gI-ha@q#QnyDBv=Y^6rdc|wVs1vDnWTk1Q#xLF0o0>SQ>g7r z$w(H3zC!ZvSOa`wtPJjJf@>sP8q8mVn`AJ=5xV>l{QD7}p0uerAlbzpshLtuD1sAtdK_L{0(*u&PE3Ah3Ix!0RwX?1>Ke#iEL`xdTNfj6T& z#~bJ9-K~D`=Ci9GtWyUwZ~jC`89M=Yahw8W!OwOh20IB$<)wwC=G8o_cRgNI20A;= zE^+T`Xwo`fUj%*Y01Q0xG<$-Q$&oLs90n$=tiQeevTBk(7$s}}!Ft&7Z~dx-l`Yqq z{0#W9r@V+#)WD{fN9$~wY$ow~X)x(Iz`};Ak(iK(ZSFT-%B-yqW1wQe$q}jYfI1rd zDyPP}YNpumZL~Ag=*Bi*=J?G1Eu;DGBEJYjB6VSp+O)VsJ)X^J0QT~NPk0&=@>0P3kT|`$`Q-5QTsOt#{ z)uj{4ii$+Xh_EFqtoht{$&Q==oPIc{vD^<+wN(#m-3&eOP81=vXJvqhBzL!i@ODCDD8c%N2i65ZB{G8zBh{`lkmC z^co2P3I~w}!}mBePlN4G94RIz_)EI#35hzY$}1op^_T!acDW-E<;@iFAe|)(ab65E zY4C8y+#~_V%78p>o%?x=7`lf@tZx!9;p@@8gd}~LihZ>Zv*KVO6+3+6UXzUc=!}Cn zHf!tk`f!-4&u3u{^-S_3(kbS-tQ(iB>*!JYNnK(0S#S66LZ2JH$$a^eEWe+I3#8Tq z33>ZX&+=39C{tP}GjROCrXFBxZjCFuzJPe423{_~?{F1QR#i~?m{ zK+yDrM7_9>v1I~s4(h(!+s3D3TXT>cqY#|8$zWneWv~ zPft3c%-4w{rtTjggCPC*`96=kX9xY`ii;hmb{$YBFOy1D>9j%$7 z1%Hm4RB)d(?!KfL8W$ch0nU6aMSbY*hPbgfWjx*dq@bCWvo=Wi-Iwj|U*t6R%NLCv z>*A}00SyUBg3kd@R{q9PvzJXQIJ6Xe?{PV)Dne6Wudr+3w$P^vn=!*X0Yud!c?8q+ z+_zs}xOu(yvID!l?V_E%tWbc!R4oZ2m$4YFcB8dCO|Waxyw#%2=ij%N@Dy4|SV-Bt z`L8)pv~5{hV(#qA^`b|EKNAsq61duoS@k(`z!NDVhs!31WV`(Iu@`*7ht^uc4WtIY z=hQU}R8$3NH)2`<;6~>sGe{3&Zo%3@?E!QQtY~>Sc#bJQ%G_U0w6GcZM!((bjy0)m zw3x9}X9s?LCmvK^vhw$Ij+GHE0ak;k_mY#}24Xv{&+7Aq&8GdJO z?f1c}_X2B?xas9Qyu8i%+Zss;TxXc-5&5Mh*CnlSGt-HG@RQ^8lfj%V^+JA)u6O5x zBvMk?ZSNe~#4LL~uK;jLn#N^F3 zW2i3EV*h1m>Vg`E>4Uyw(?;5SxsY~eU_lwMmeHc`1uwzl2ES;)S|LCgZ-1m(0~Re| zduw&wyEbhvdPyvsOI4agvJ;t0BABk(s?`h;Hq^Q1CfOyw+|vZ6>P@*;4rdi*HVj+3 zkz!9QE$Pxp4AE{;338FWJ|6~i(~TpS+9J48YNQrOj6Gs)?bW8z;1J@iy}C0wsr`!| za$udXazUphqIhmh=IdiFp-@yDQBWN7?aN3lQ2x+wvEJOCY`;f3GCUb`R8NSG)IOJy zAbM(y3aZ+fe{afcM18_ ziIXu!e|EoZ@EED}3%DWL?26ypGOkP`k8bnq z)-ULb;1Xzj=-L)%h`KMXuUy_b;!TFkoBB7Gk#7^n3KOJEIpN^4VGGz`k~vS3$+oAx zWwcx^A?0}T6p@!_L%UyIJ=QPZZO*BfV|zI>Sy)(@6pByg*+$9qk+#t}L(-lF5E35t zC;zMUChPMt-xt@Y&Xpw6$^m*)o!uO{=EYg<%#3&GI{bOxqcJW8*KicX6|EjF%Z%rn zBv`}4!j7|0Cf;h=;}8B$>>^2bFA-p3V_+z9GGe^!v_IZBFgM%1&SRVrc_Sxph7x_< zK+4&3rZQ1WWz*35f|4Bud;@_MAH<_14K&}eZj5d-`84F@Ja&dfr3|#?lm;BuJeHOQ z6n9K@>aNB>g$9?XX9<2{<6IE&T4(eXA%gD=@?%`*#-VVh6Vd|4===x8WXE$-GBeXK1iAhPC3tY#0 zEH*!i0gAvOut42Hl+K$EA2h_7Yg}Ejuz&tBw>h8X=@cK}GB<4ye5i}})zv*-idx9g zhK&@HnSZLg{#`XPa9LABmfD}UF~+U}HGT^nct>Kr?vIe}!CHxG@uZVN|2O})QdON9 z-{fQ!gWk0x3O8BKcFoK@OPbDvMtXWul8S7OO*O4mxLyH)j!~kWaWN+gOE9atoEvW` zh6I-tpNmRy^)FJS7j0K%O-cWm+gARy2=sm9wryOs@>0Z^0_x>42&j__-Du?S-4Ok? zb~0ljHn{m@+<>*VYo-1<_xwZR0*tNg0YJNvp}L=t%M#ot zB*`AZ_g*uR$$I7$A7Bnlzu=J7Q#(k{mezQx?*4w)G4#Rj^7t_J;xhYU82g1Tz-OR~ stIO=SS94En3Gn?`@EZTJ2=TwZd+ek5`ga4v|G;0el8O>#VupVI2bt8RYXATM From 531893a0f904582576ff594575359e71aecccabf Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 13 Aug 2019 13:51:05 -0700 Subject: [PATCH 013/358] draft --- .../create-a-windows-10-reference-image.md | 41 ++++++++---------- ...0-with-the-microsoft-deployment-toolkit.md | 8 +++- windows/deployment/images/mdt-08-fig14.png | Bin 96303 -> 27473 bytes 3 files changed, 25 insertions(+), 24 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index e0ae714207..ca7b8f391f 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -324,13 +324,13 @@ The steps below walk you through the process of editing the Windows 10 referenc The goal when creating a reference image is of course to automate everything. But sometimes you have a special configuration or application setup that is too time-consuming to automate. If you need to do some manual configuration, you can add a little-known feature called Lite Touch Installation (LTI) Suspend. If you add the LTISuspend.wsf script as a custom action in the task sequence, it will suspend the task sequence until you click the Resume Task Sequence shortcut icon on the desktop. In addition to using the LTI Suspend feature for manual configuration or installation, you can also use it simply for verifying a reference image before you allow the task sequence to continue and use Sysprep and capture the virtual machine. -![figure 8](../images/fig8-suspend.png) + ![figure 8](../images/fig8-suspend.png) -A task sequence with optional Suspend action (LTISuspend.wsf) added. + A task sequence with optional Suspend action (LTISuspend.wsf) added. -![figure 9](../images/fig9-resumetaskseq.png) + ![figure 9](../images/fig9-resumetaskseq.png) -The Windows 10 desktop with the Resume Task Sequence shortcut. + The Windows 10 desktop with the Resume Task Sequence shortcut. ### Edit the Unattend.xml file for Windows 10 Enterprise @@ -370,15 +370,15 @@ Understanding rules is critical to successfully using MDT. Rules are configured ### MDT deployment share rules overview ------stopping here for now----------- +In MDT, there are always two rule files: the CustomSettings.ini file and the Bootstrap.ini file. You can add almost any rule to either. However, the Bootstrap.ini file is copied from the Control folder to the boot image, so the boot image needs to be updated every time you change that file. For this reason, add only a minimal set of rules to Bootstrap.ini, such as which deployment server and share to connect to - the DEPLOYROOT value. Put the other rules in CustomSettings.ini because that file is updated immediately when you click OK. -In MDT, there are always two rule files: the CustomSettings.ini file and the Bootstrap.ini file. You can add almost any rule to either; however, the Bootstrap.ini file is copied from the Control folder to the boot image, so the boot image needs to be updated every time you change that file. -For that reason, add only a minimal set of rules to Bootstrap.ini, such as which deployment server and share to connect to - the DEPLOYROOT value. Put the other rules in CustomSettings.ini because that file is updated immediately when you click OK. By taking the following steps, you will configure the rules for the MDT Build Lab deployment share: -1. Using the Deployment Workbench, right-click the **MDT Build Lab deployment share** and select **Properties**. -2. Select the **Rules** tab and modify using the following information: +To configure the rules for the MDT Build Lab deployment share: +1. Using the Deployment Workbench, right-click the **MDT Build Lab** deployment share and select **Properties**. +2. Select the **Rules** tab and replace the existing content with the following information: ``` [Settings] Priority=Default + [Default] _SMSTSORGNAME=Contoso UserDataLocation=NONE @@ -411,27 +411,25 @@ For that reason, add only a minimal set of rules to Bootstrap.ini, such as which ![figure 11](../images/mdt-08-fig14.png) - Figure 11. The server-side rules for the MDT Build Lab deployment share. + The server-side rules for the MDT Build Lab deployment share. 3. Click **Edit Bootstrap.ini** and modify using the following information: ``` [Settings] Priority=Default + [Default] DeployRoot=\\MDT01\MDTBuildLab$ UserDomain=CONTOSO UserID=MDT_BA - UserPassword=P@ssw0rd + UserPassword=pass@word3 + SkipBDDWelcome=YES ``` - ![figure 12](../images/mdt-08-fig15.png) - - Figure 12. The boot image rules for the MDT Build Lab deployment share. - >[!NOTE] - >For security reasons, you normally don't add the password to the Bootstrap.ini file; however, because this deployment share is for creating reference image builds only, and should not be published to the production network, it is acceptable to do so in this situation. + >For security reasons, you normally don't add the password to the Bootstrap.ini file; however, because this deployment share is for creating reference image builds only, and should not be published to the production network, it is acceptable to do so in this situation. Obviously if you are not using the same password (pass@word3) that is provided in this lab, you must enter your own custom password on the Rules tab and in Bootstrap.ini. 4. In the **Windows PE** tab, in the **Platform** drop-down list, select **x86**. 5. In the **Lite Touch Boot Image Settings** area, configure the following settings: @@ -446,12 +444,11 @@ For that reason, add only a minimal set of rules to Bootstrap.ini, such as which >[!NOTE] >In MDT, the x86 boot image can deploy both x86 and x64 operating systems (except on computers based on Unified Extensible Firmware Interface). - ### Update the deployment share After the deployment share has been configured, it needs to be updated. This is the process when the Windows PE boot images are created. -1. Using the Deployment Workbench, right-click the **MDT Build Lab deployment share** and select **Update Deployment Share**. +1. In the Deployment Workbench, right-click the **MDT Build Lab** deployment share and select **Update Deployment Share**. 2. Use the default options for the Update Deployment Share Wizard. >[!NOTE] @@ -479,7 +476,7 @@ Priority=Default DeployRoot=\\MDT01\MDTBuildLab$ UserDomain=CONTOSO UserID=MDT_BA -UserPassword=P@ssw0rd +UserPassword=pass@word3 SkipBDDWelcome=YES ``` @@ -508,7 +505,7 @@ _SMSTSORGNAME=Contoso UserDataLocation=NONE DoCapture=YES OSInstall=Y -AdminPassword=P@ssw0rd +AdminPassword=pass@word3 TimeZoneName=Pacific Standard Time JoinWorkgroup=WORKGROUP HideShell=YES @@ -564,12 +561,12 @@ SkipFinalSummary=YES - **SkipCapture.** Skips the Capture pane. - **SkipFinalSummary.** Skips the final Windows Deployment Wizard summary. Because you use FinishAction=Shutdown, you don't want the wizard to stop in the end so that you need to click OK before the machine shuts down. -## Build the Windows 10 reference image +## Build the Windows 10 reference image Once you have created your task sequence, you are ready to create the Windows 10 reference image. This will be performed by launching the task sequence from a virtual machine which will then automatically perform the reference image creation and capture process. This steps below outline the process used to boot a virtual machine using an ISO boot image created by MDT, and then execute the reference image task sequence image to create and capture the Windows 10 reference image. -1. Copy the E:\\MDTBuildLab\\Boot\\MDT Build Lab x86.iso on MDT01 to C:\\ISO on the Hyper-V host. +1. Copy the D:\\MDTBuildLab\\Boot\\MDT Build Lab x86.iso on MDT01 to C:\\ISO on the Hyper-V host. **Note**   Remember, in MDT you can use the x86 boot image to deploy both x86 and x64 operating system images. That's why you can use the x86 boot image instead of the x64 boot image. diff --git a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md index 1e1849457b..d15bf46848 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md @@ -38,11 +38,11 @@ The topics in this guide will walk you through the process of deploying Windows ## In this topic -- [What is MDT?](#what-is-mdt) provides a brief overview of MDT. +- [What is MDT](#what-is-mdt) provides a brief overview of MDT. - [The proof of concept environment](#proof-of-concept-environment) used in this guide is described. - [Sample files](#sample-files) are provided to help you put the information you learn into practice more quickly. -## What is MDT? +## What is MDT MDT is a unified collection of tools, processes, and guidance for automating desktop and server deployment. In addition to reducing deployment time and standardizing desktop and server images, MDT enables you to more easily manage security and ongoing configurations. MDT builds on top of the core deployment tools in the Windows Assessment and Deployment Kit (Windows ADK) with additional guidance and features designed to reduce the complexity and time required for deployment in an enterprise environment. @@ -60,6 +60,10 @@ For the purposes of this guide we will use the following servers and client mach DC01 is a domain controller; the other servers and client machines are members of the domain contoso.com for the fictitious Contoso Corporation. +## Hypervisor requirement + +In addition to the servers and clients used in this lab, a Hyper-V host is also required to build a Windows 10 reference image. If you do not have access to a Hyper-V server, you can install Hyper-V on a Windows 10 or Windows 8.1 computer temporarily to use for this lab. For instructions on how to enable Hyper-V on Windows 10, see the [Verify support and install Hyper-V](https://docs.microsoft.com/windows/deployment/windows-10-poc#verify-support-and-install-hyper-v) section in the Windows 10 deployment test lab guide (this guide is a less detailed version of the current guide, but with more instructions for installing Hyper-V). + ### Domain credentials **Active Directory domain name**: contoso.com diff --git a/windows/deployment/images/mdt-08-fig14.png b/windows/deployment/images/mdt-08-fig14.png index 21b358d1f8f4653fc4d6a2e3e5fc913fe3432a73..4e5626280a2580307a3730f44946ce5179a2d48c 100644 GIT binary patch literal 27473 zcmc$`2UOG9w?E2Q#@+|9P!v$4DUM|2cvQUYQqDgr7c z8c0GYiIrZYB|r#KDFH%22uY*_-uDahYxmuI|L?8!)_SbP3MprwefHV=vulX`!@+Xf z<^!9hq@=c4TbVmaNv+`lzle>$0?} zbv^KW(@iS~T1smBNAUNTI@C*;l+=w8Yx6S~!#w#l^wNp?^uo}A=U&gYol;I4Is5J} z&!;tKpxAZK;!ijgl=h`O`>@X=@zDONZJF>;$bqfv{B2+A4UOKAnmap2yB!`M6;pEg z{pI)4aq3nh^z8WNDfPw4qcPJ-&DhB~o$aY}{5=2@5XA8*IpDP9Zy zA^RIl4t)Ij^e%BJcgc6z;PBm@XEz=m+CsE&WjHQ>TUJ_m4*R*tL@j^jE>C+&c=s(v zcD8JTsI0uBEeFd6SKNIR^XuO)4Lv=>*t9~&;QFIr@V%X9w;%ZD$3}KTmPLGMOU_Km zA>Im&yX&a8;Osam$4sT(aFu~GTDag?=~>(J9(RiO=!7lJqlT8Hmb$qtdR$WO(nqtX zrToR*Pn<<>%>@>H!8LAqZSvx0j-;WylV)^6(rb=gh@$8uEDUnJ@RAbKnTl)!>!4iq zIwsL~(Q~3Ag0LWq;m;HJx3cBMeG0=QGV^D@e*#4qkq_}CkeI`drwQv156wp~_{-Yn zb>ejp71)oL%CmRR!3MRLUP~ul{{3N3@Dg!A-8_!A%;rQdogWu#FFz{@bs*ohAs)FD z!Bv2_{k*#Lt6*GQzKpy372D0xAE{P z;Os-=FzcO%x18rW=Axo6B_7O-y@xDSkYlNvU*It7(_n-@N)iHFWJU4xc=sk3h8A@a za@)uW#}&R~E*&EXPkB%7M}?oC&@FF~t^UvK)P}VO3GL=FDkdRnSbb4bxybs^ zWmU)l7ufleo9Y*%tx`g|#cqFA`A0=?a|g|j`m=UH6UwKH*ct9(*-)&mAQ;n(h)!cx z>eG*B(8x|BLyV(_N%xN92iZ)c3R9jSZa%XXF>p-RyU@RJ-hv*GbJrN5dB|OLEXqRz@A5 z7zZ+AGNO&NtB`fm-kv)52S`wn@G-!FnSE)r5TOpo8nmEC1WV#_M`pL+f!^y7qW(f5p_T3K~o4uMd@Ra`5FiEKIK~Ce}8Pm9pP3R z&^^sg$u!RU(Dgd^NdzjeegJ?T6_q`@yC{Q!l5KltyjtbP{wd-aYV(w1N(J<5W0cZ? z;Vk9|Gn<~VyJoxRs8g?oac7q6u=1lSHnT>_rXz}987chxpimllsc+#YhLTwtBQxUX zzff@HHRbej!rVQ{VnU9$vFMf@5EHB{ z(~lw#<}S*FDw}Iv<-~=kAyae%(qCd0tq$~|vxeS@=)cwJrG{1f=7$*3fGg@ajLzgO*G&>g%aefP1NU!YTANeLexO&JXqfi?=6t(MFR9bu~ebb@4{YHw7 zmR7p@Aesj}s@B1ryDBbf9HL=ng%$wl*Q_9VeM}5+qVWIK3;eIn;t9TKK3Ys)Hp^Z9 zxI7=dd)0@8m@gX4+-UG{VJr`OE!|u3Iy;F<$&QGBcp3S}^@Yp$WuDo{KRk=^@nlD( zzrBp?p@09Ik$0&h`5)eCC$Ied&LCL04J#DO{Hr1&2-MP2bQ7cNprc?h_^p5|-S-lMbDDE1yv81*}!0)1ztF1<_o~ z@a%;|ODjA@+{S5|EWw=GZ=w=}^yJUi&sjukfxdR;@#Q271|hx~i?gbxz+@rOm;din zv5}BvVO_|j`5k7_ORBF!+ZM;TZDzM>aa6+YhvGW!7)w=xy1$`*zAgHvXl{@oSjvrB zI#)RWcw0B#;{2R<ICuQyRGvsUNGMozoa-|g63|`G+94k+$)A zpX1z|W4^=Q?pe2D_qgL+23Y*iylbp}*cjxp4E%T`$!xmdVyp%zNg|jvC;Ivz_HdNLQH62<@TF zjKtU25q5YO^Ygd4$M8DnO{K8U?#Sq98!b@=!E>C}0u{>TY;9l<2EWM<~2anuSk)c>A(U`gNSl-IXYa~Od8Ie^1~#lo9oOw3LO5xx9z$vpTn-S_7KmeHmMJ~9 zWGY1{yd+3Ubx%E5T#V-_1sQwL{qEIJLt27)9=^_61n3_*>y7EVj$<>JrS)H>l3lmDK3lA&9gQhCT(=>K0=$Ssk>888uQ4dYG*oE%Fm3P zJ@3{ixg62NpDwAaA({+VPW^|F0L?MA&5M;z8BjwwUeV*VQ9L#J`b_NsZteo_R7jqV zQk2;(jp3#0XT1_R(`yS1Ag04EadYlv@0PP#%?Ni2i36voE8Rhd{B1I}pM5fE?W_wd^9 zrwhl(8`XUkJFR<&Ve6K=w1caj6ANjOGwJm|gPO&DifDy|Ng;z*bWN*)@F%33f%rzS zW}^sbT0)+yXI*A(_S9N^CoKs>|BsHk#)GG!WbWmiR6RD&d!bRFgLXHvG~2)yn+c}n zuy^@(RG#+2 z*^-p>?>vG?4e&8I2AlmW8F6w+_;&e@@}>Yeo&P|fRW!XGubn3b(8{&S^gnh<7OE=& zqI6AdM=LT%x=a6KgVFnql@HrT_a}_XuH-TG%%d~j0K(sInjei1+unAQ{R@yjS^Nsw z0H#r=kJTH3kMGW$VSukoZQuNVOuP;O2_^8eVg3KlB>q|+;w(C@=3`m7h&#mxC$VqA zLwu$F&TwAM8!L`1&pIyO3SI{@S!MS&^f?i$T3`8heo0ve*|E=tVdjv_0sPjYNVGIp zHL<+3GAIJdY2ANsMUNj_Vana_{@2A7vo35+s{@D137zPCQ>V! zd0Xjr@rJEOcuO%kmKE%w4+dlRz1wo=%ZD_8o!+G$B4Uw%S`1$$4n$mw3rcLh!A7hL zYiF2@pLk)shc=P@S#xA7@X4FMUnFa<2SjtX*h{G<9p4y!t%wed54BeS-jvz^C{Wl# zoN!Svi&1mD_R29Xc_uuy+J&(nZpHb!FQ+iw2vR^B@=dcEU`qjN*bnr;A~FYExY$UN_3QwvQK2XDZGGHE)WF zikbe__cQ!`)?T!*4m6Qp0fqdX5mR}-!_2|w(qa}an1%Al*VjdwPlOiJ7J{N>fe&4| z35c~2C!F;X>+SOjZAVcF)vCNV*AaC{?jzp#!w95z0BP5d{TWk+>Qw7~aD_jxf{POp zOVq#B3}UM4smX&aJJQuc;#1VP`}t5OmoI$TnSgMmt9?9o{0xQis--dOZ#)9+kiM1j zdK*ATDs+WEx#59XkD_t#g_|cI38hwVI8llye|tsK-|hOHv3AwaPp_#Dms*7`ODXVd zD?qRj5a}ww$^P;mYO#u8H`o1tN)*sFg~B!zfFw~75zC7bvA9jYSI+>O7OozdC1N5U zO~d+$M$-%21=c+Y$lvd4R}iI0T6+kyn;Yy00*g`pa*dRn_M;HY+SNn4Zy?J5Fec_~ zbfs^D)-hL4Hn|yi@ggz6wRJeG=KKg>APF@nSa6oBIbxAoC6ef+M9mxHSe`Q_r}I|< z{iaEM_&an%W&dWSYo%tSp3M}L^Jw?<@EL_wkP!lsa-Y5+Ur72G-lqL{l8Y(6i za);mi&Bl(^9q$>=AM)$8_!Lz)UZpLr+w-sGZAv_m-|@+Y<4&%w{fL8N*uF6%1zwuc zin|D14x}j{_XGTnMK?@ISvI{yr zCoP%8qi)aiOP^BsLyzmsH|Q=#5OE@Du~l8OO_fGNL6qspc=%f~oK|xP?pYwgP)!B*y&MbM z^btJjK<%kb^L>hO;hjF=L9M+XqTcraSAN_SxCiI@`6vB2?phRZG~zdh!!Qk4xQXIi*XWqf61YeY{jhcsifeUm^NX#>pQhpalU zQ&YBO{O$AaDmre7(GOlkT|VsY=d}q|!*r;1@3QZiv9cm*7>>k_&xa6m?FVAZ8PKYu zG=e61yeSYuZSy1iS^e!X3ZGf(H$Xv8Bhk~5P4?JrhQWY-e*Fn3McZNCo#g7#kUf&j zSxtft6Pw>j+ucyPvm82G^4RpitFH3hP*&5!YDRmIbD=4hP1=*0Ei=P$dxi@qMcuTA zRb}E|G`F=D4$TfEvUNO^j4~Frx5Bq-dbO&{)FNe=PUHx1uPcBl-sUC;$JD>TwN`5? zX54j1jD2_N?C2Z5x(P)8dX-wzb|`Hh=YbC@fL#4*PkqQ3A$j~f3y0{KCB=~DfjnhO zb*kHXd2CK|;I3Un6BZEBXMWbYAh>LWjg;xW*9f`Z%X2wR9n| z5}MobI7O7hqnU^3#8{SiYVQm@mefB6DQhnEHzAKnu1WH1Mj!W-{FFCLU~ z%!zsB)%ID$G`e5uH4ru`jPD!yjwv2-dHhrh;9XV$X7UxXil?=|0;XxrDC~C0y)F&n zzLdpU$c`)Ul{))>0o&RX;pn-X=?!LWAEJ)E9rD?+Yg*yCY;2^5p6R|S;o&}#Xf7;* zeZ=@3;LX3D0s^5&!n-nG%DatmN3OLOd>jbR`1)DQ7_`b&{6h9JYR##0E+tV|z?MH| zK&TE^OsUmO?pJ>z{;eaTDPU|_G9>^0ab1@$J|pP-I!|>1IrN_&Zd2yr+t`dt9F5q* zwoZInKKYq$tAyO#ii~rcymWI zw!k3z46KLJ7y~GvweYS9fEnYYV!ZdIee7`p&N8~H_Ur*8^*VA=&hj%9rkH zdtPEH&yhIm)b4&C8|KU&4#whNCZ;dY^2ir*(_cnI>C8G8Oz$?o@fW1->vpt5zW9Sa(lB_D{JrUesix7$7oK;K zJ2|wtcni^HIm8f0{7Tw+CxS63qCPbM+bM)?fWJvEc2q3YdVIm)x9Os@MT)%xyLGx% zccYF39!?-%b{PgvS||I4;X{J!7zFFC9|mlOb^Cd zGJsEyN6>vi(m!+nHuD<7b*eS;f~9-vJ@>7I35((b zJAB0fh+mt!iue})f%yMzH1O^ZqI~3`_Nbk=wk`kCQp2aEkFCv%qmDVd8YWkch8#vpOvZuO$Ex> zgI}Y0c1m6~Ocn3V{%dhWk)HZ^AYPYK-*<31ZUpSK-P8uK;Tzn9a4bU_X5fihdjhV$ z+X%~gRTZpEF~H`G3;Of51(Bg+ZQ`N@dsdf&2(cW&(f!TZ5v6m~Py6SIgIPUbziaES z0C%)vUgMl{(KtCcIQ-I0IXC?+A`Qk>FB<1fNvkIFI!o8e0^zOI#~N){3n^3J!a%vXuhy??`84*>is=X z8Q|kzrGR_<*i@N5=N-%`3D94s(CE%1*(=B4?7r;WobHh4a#+l?0f25MZpy`ZNbBrKk^u7&iN7H1aGq9!9 z&7FW?pTQ(W56r=UQwj`(fCH{Z3SQg)hsf~VP2zy@%<-S^3Kn+y2$a(!`uma#prV6H8!G7s#w&3Ys_859q=5R=xJ##*zem+Of%@@VCXl6%(5u4{e;K<659rS*y zbx~2&tx!x2JHzPm9L0WBVuOd(MNjT)~Xbn(74n^3vlo_*P>yx_#K1WUmY3t*L$HgJIBX~p+-G$<*TV{>6)yKjWr#@mn{ zk~JxkAw$0i`*+A_QK2kivPl0L;rcQhyfUdrLYd2u&2ZCEwabA!erqwqV%7Vqk#Z@O(&L_8WzFg&= z;^%R*2mZ`4tA?ERh1ZPPy7YF6?w9ZaDDAWeNok;i2SD|<%rC$xZ5a1_y2Gg*15q2h zVzJ8IK6J_LS7{HPwn=&h4aju#y2XFvA!{{ocfRwFJNutw@W0Z8i-$Xh@7t}EWg|WYP|2CE1{^O59S^t_Hi1Xr8VOFG&iNo5ssQt=-iAN zaM*Tfrm;;tD%w=y9Kw%UuoF{TW-$CS5E{-hpF{iQ5kJUN$HmW?H!>~Ea)LOkd~WUT zEZ5{WJu7O3t7Q>VbDa$o{8W||XW-myUNd(iu;~iu*fYw0>`%^u1y;5^-%OT-v|C8E zkmU(N!#kddm}&PvSo?lyLBfsHPNMW0WlV;r5oUY?_?h(VeoyWf0~9-8BzwGuMJ{k` z>*c0c4GuFuq#qe!Uhgx-_Rm#sp=OJ~i1Hj@0r5w8sV^YElsE;z?Zrq;xm@?2aK3R+ zbK4O~A-cGz^=jtn5#`i5(W9g;X8B25lx`u3I)`<GPVHfo8y zWBAQ|3noC2g~-)6l3@>gkK&r-rhZ`nJpY64v#qahkL1Fo^*6!x8mWi1lb2QN?s^(o z?mZ`WGRdgBY*_8Z1&A6FPAqkhflYK2*o5ga-3qfp4ayHu?1Lk7=f04*DaX*g>4OV7 zV&!G$Cv$+6y?X`(Miwc-6}z>oL$B@*#KB*HSSDJr3GGiAt0@&6Q0V_QcLk0siixo& zo3&RYMAlDxV%6u)B~P9sCRLpJ9Cf;EsIRk&Ir2QJKQaK*aFXdh=)kI4(gL)%`WO%m zKUU{WUWf_ZH83`PM?Y8_=VZjJYR0ZL8_7q%zRjEu=&oojn?;c& zCDK%S^jYi+>9LOn+j2KWvcpo&6a&5?gF7Ba)@OYoM<@Wg1?^SM9GZfcjna%73QRB zioJRI#B{bzXHqNDm(?g2EdyMq=T;z=o^xTu{V-?ElqFwOx}W*`F{IfYev#|I!92gz z+8N1Da(f`1&l;*g|LBP_rkR;-h|7+VPikyEGu%VTkd$DAwd4h;q?ojg%A8UJG=v8L zO?6H&>yltEgzwp37_hL*->YV3U|(rMaR)uyA-}oi!h_ma@~|(enuH7H7Xqa+jrQph zJ$xFI>_<|Hg$3I*|p&(z#et_>@ zx+mwY(KjTp+MV6hZ*X3{`J1RQ%w(_N4@2}1@1bz(aMaC%&EG5UtMiOX6Ta*>N=j}L z&vqhMABC^5y`~@eTRimv(W?MHFH936^P;3wx5(Jx`;hB1^rr%%6;AS|?bFDpYv*Qr}zIs@#kD)xZrS&?GHz_WUb+t`yxNt&il*Z3J?7&!cE0P zchI=P7qg~6k8$0ST3!Lk=<~=h*QO^ld+M8R${RgOq`atlo%7yVI!_4XGq<$?Zx?0* z;TY!ZyqcZ+O6#nuqvWPz0OWz!eYruCl(N=SO>YdQBAdH~+#5~((~B=;PF>?r4#Bg@ z`=R7hlv^-o26DMQ47i6M#{uhLx7TXa9fIDsf|7Z~4J@~5^cDIDw3VW$WB zdtESUbK}gQ5dmY-Z7IU*#=s_F`vAP?A!-$slmRt8cjh(a`OEAy;dL+@xw#RLZ!!#f zIM|a0679_n*pv*l86j$rre5XraT)vE((fJL$ut28Lx+iM4~TXhx%HG>CVb!#E2Q-P z7ZX#Dq_L3a4jl5*4UW;s-tOLUu->~Jtk|U#Gog0oUx>HtbxucIyLm7kS9Y(s;dK#o zTL#S;Qsae1#J_sOE-k7;vfK!nmW9z(iW;K^`V!VWbi#mXu61&7WIA3-AMNVmLO@1v zD6Q5!l(6O$<*qTdfGXSJL#sHm3?AaQ)kCD5f}9AMdEB&SOb|qVM6ymh2x$rG+5B~U zUzE|*(LWic{!ru;cb70XE?+@2qfYY%t6Z+j%a=>tEHt#egLu2Iv-;b{L`Uw`d#qW> z)p3+iv$#d`WH%w$Kle=zHc(R4JI^(sjA3y%NWjNE`I$ z|E25-CR*$@#9(Os0L$V<4i%m+zS?l9e95P3O!W9OpEvh0RYjao5a4iD*A-ZO`#s?O zax54Tcly;)HyzJ6=(xYYl$BgXXzi8Do6tjFMshL{y@0(*?URO?+{Ovb39UKgy(RQA z_G0`k@#W7X5w~>{@b(oj6)1FvWFXOaD}n#4TR?8}Zj%_}3-gg?E!fYL=M~a{5`%8{ zXYmUow4UoEtZyl>N(vbD0LzJ&9@!r_lLI4H68blIHnI6i2|FG6duOsm2hVu%nwHbN zTQYvyz4bIr_!h8|Rf+IsF;p-H+zQ0#KW?e>Xo;F$8*f_Py7Z%sZ%a?;q(GHkM>s6Z z`vBf=wGhrs5!NVtO4|`wP{|d+lMq!v{uHtm$e)}>+(aNN7GQDI?g&K_5~Q@{2G_ZR|c_*x_BS0&JDrn zY~%DQMmrS@bignlkadyMfj1$M_cuPQ&v7W^>#rvh z{o5&ferSvr*yk{f9g_ufeb!KnVOt~S!4KB--a$a|-j#vmw0X=oy}9-I4`3-hC4p0# zIE2Kq?ga?oK8jP92VT< z_Fq|04R+3-3ojTH&Q}PINrqWTF9J@Rf>)^ofOA<%G1EJ4269VAo!XhhqFnPIVp1;n zQv<~FQ@9MaM-R*PxyZh^1YXmX>K$jgyEHQ8mikB~zgB=w=iiJ3$b`(HNqfka+FF3QcAKT1urQ9g zV2+Zr8wj>=E;q`O1MA)Y?@WawxLWt1 zKVacwJhW%W%Sri#z3aHx&S~wM(j8al51|$hGiSbehHACURSeddI0E3uTrGaYsATzX z&e;3}SvA`9Em1qyrX#r)-SZ@dNXfbB;PIJ4y=BZ!Y=kYiSmm}jBbrm;E_GXGce(x_BlO@$uvlKHEbW%(QD=hNai;VNF1au34ieH-m2UwdP9Dz8`)r<41BdHg)Q~ifUTRV?tY`|s>AZy5k ze#`VTD)%a%v*OzkP%{24j@oj|$nN!3o*v&2{fHm1Y&0T=yk95w;C@~@aDj~zwM^Z8 z*9d_8yJuiuEH${S@jz+$_}gv2_zxNRyWSnBzY&lpbeidjqmi;Dp zRJg_t$?3q~?<>SZjqgWZ@wkb_7tjpuyUF8*Thp1nNqjN$!Fb;ZyV-O3{0%-_=3YR; z@<2BbC{(RP1Dz{*EAXP!|6I$lND+?ssm6|dOcI^D)4AawLQZ`3BekSUpr8c|(vxFJ z-d^^zhnw(9jzQB*bv4!%cxlT9GZ`7(@S5M>Dy+$&XJ0ZKD#|o_<4+*fbnytFbCIlO z(a9+g3-i65v}Hz{TCk!zqON+emsmos@!s)NmEBXY~W#0XCIlzg?5-u3KCHtTrki2rwoCf4#dv<=+QCj zJ1Iw+Y~rq&H`@?#PabOXNYc-}0~R$r&L`SOK;B;5)Hsvjc+HEo_-lTB#?k1Q*Na`T zEV7F!pFD=nId`|Y$xFrAXJLkgsU9=zo`f$&1;ipR#CvML7v}OBWcy~q6ETSgnTl1$A!CPCX#uve0$;gQoc~ zn^`L+OvvhMfZf5^AB~7TIrOjMdoS%qNu=Q#q^)znvU~Zb8I$bJS@~bUZR^02(or5H z(J=`BPD4v^FXmpamYmj`4>DHvj(_POQ0p2`_|a{THTAfB5|eT0P^a8B7NcE{j6^|y zEJ$Y-=BBE%4&>>lYqt@`j5{VH7+AB$fxx^O&upT4{o)K#-DvzT_*p`U<`nXv$VTKd zH-Z3-CmL|Y-(V(j(3B&H-RG~>lxvLd>xI-mNXC)K5^sST++s*=ccuAcUgp#ic}t`m zn=%~5dNB1pGVPY<7ODV_@E+oes%I`c1@Jbv(12n7k2U(Xla<5a9eVp*L&68OYNyIe zD4C`70VgqXuFYT!*J7Nn04X;^FyFZu;|8~mAqR$A61QJo=sgh%EWB;B8WJmJK;#qL zeZHlkPIa^NA1;=rJ9doc+DeY9i=eyR*HfM@%$(eff({_?dU&pTVYBm=oKE(vGZ5V< zl_ww(P2`c4Jl7J?nRb{5?XkrX7qXz_IOG`j(zkid1Tb0FRPPVh$T%`na`=2&$=4f@ zL~Q4kK9}Zk456e@bOdEnT~Vl~5MDjOGM&h>t^Ue|#`^c>{7WJlklatCUF}x7aI@W0 zPpfT;1}49;j*%lv9F)oAYNkuQP_NbgZLn{uSK*ktbp_u{O!>DH9^ok_COl4uUL99M zzu!FSf=QlDN-cE=odkNOk#w8`G=dXKDS;kN8o7}?qtPBUZ1UC{?oq$2a{=}5k^(?j zNR~M#?NBz)8u+zSmC&JdD0T>^ip}NP+B{P1;o_Cqwp(sW1gPo-YPy zX9Bss@DpSsLdn0*qYUxt$7{l#{r1hSL(5FYiLIWSe=7P-S7_E}QhD4^Pr27uR^LN) zqyQh=re@MpRW1ll7xjb^ zhDaN($Y4*$aNqhChsiu4i{^O4+s>r_q}oR(a*MV%mX^onLPm>%l#`j;OVqa%IAZ4)Ig3 z(32RDz1bTxb7!+%8C?CtU_tv`4|xl~l<*~*oj786jBeGa zK2|+EfW@x;3k;i9w4l5g>K8wB9F~`$naZzya$dfv@m7~hKIAe!sjCbn<@Dq#EHRE; z&^()c-mpcLB1Vg`chQ?av2rZ0E#w3r$?^W2F&0Irp4i;E!6rkHh8e?e0!KPlrtp$s z9xs}0VCgovN~`UAd?_d3YJaA??M?JmCZEi$sXtwE2(QDU_*;5w)rP7s<9@HklSj7M z zy3+)TlpxdScJ%D{kyFWa)>w07$t??k^(GW|W9;3Ew0qtv{+Q!YRN2JK)p!K?dQXPX zC(&o3FG-Wa{mRSmhK$w3y>hia&1o8t`$<$%P^Pk8=StfbvPj zwRqgjsF!ZYKMm@?p8&WC41zs)JOxQ7j;_t%9uiv<*inITCw^PLYGab5M8phqYHGyI zae2LSPhXWxB`S!(D#<%G7@nsD?>eW{1(^*om4nAD{-k#<3ME@aB2r-v0bOfM&#K{e z8q3vII~4Ja2)NXRs$=Wa?zEdoZxh7lw@=*CGWUOAnUqFUCP|~@%h05Qz^txj?J`kQs-&XlLv36nozuHH-ggW z@MYXpBVSvj_a`F?j{mZ`y0`wjXDvZe&b>%D7eGLdW>Et41$x4}hC9w_Az0<8^gB%O zd%T`NvVO%FqOZHg<8E7Dp3Unejn5?)-5?rcr0L=Ikc*C^BtiWNvy9o?)dQ#e8bW&cd!p@=hdAg>z+#o!BE@M%p z&En789M5|Y&{azjvM!iBW0pP>Xs-pPwE|N8TnTuh#>mw0z(SYT{M@tUpfC8&zW#}& z9AM_vFRzD6A!f7Avs zzppWT;TJoVVX8&)@4Fx#a&2{~w-Hrt%o3Qolh=H!8Oi>J*Mb^9@9*YiqTeLk?xZWU zR8bz6-(f*6lY$;je`|{mmwQfS7!FrAJ-hT=K*VO2qmJs1B!DgOYFWSsTqj2DN;U_* z&`K)!uj$x#wtsgM<^N+67AVh6u8o^3OJ(+t?2eS`h>{m*1O!*LJkK3Fmq)=kHO`hl z{%kN(r&GD3`$^aQD5?e=$IhIE8CIi?Abjk{u@$Wo{LG>qt*ttjW$%FgU@4)FWj z5iJ;!MtiunJwr>Hv_OVVt<+b-9hF_zqhroPcXe!8Kih%%8RBDRmNVUfh8`Ba*MK)c#n=3hU5yiG|BAak z@BL6SsZTs_Qs^E#UbK;CzzC9tw_J2|=@h)OmDJX|J{al5d*97I2nq`a3ahEIRM9t9 zdM-qrsg~pUJ3q?NfjK_9L>jgsES0CWsdB;J+houj$gJe_l7OG5G88 zC9u4ATOEKHF!vTopK%Q-x#IS$I|!N{$3`Ac&e9v^<8Kcjk5i2)fxDruPucibckPDY zTLKtqOgar zU%dn{DWwlyu{}duF{PvMoU%Ly7@)cx2r&LgsPeQQ->M`H=)n~juy4lS+HCwEWo%%U zh`r&EV1q89x+Q<^_)8H6HgoE_nfttuGH<7F%fr1W(zdk$JBYZ6%wqz*Y$?wJ04!-h zWX|ZOJh?}Ba8>!W(K@}jaOXm$XX0yhvNA76`$95i(V7@}(YcZlAtc+88>~?UEd250 zZv~dp-g^lXK!rYAx}lXB;U_5NxZP-^&0n0sXB)?k?f)S>SBel|zPJO7fBie!F*t`y#rzcFXJsKtla-R?SsMO$?D0YqXIYhErmW%OvoUK95?s>8*fp3w5BaFCck2ixqk#qYKG$$Ys=2F_r zVq1({6IfQPJ_^{F711>M@!Kn|jFQOLKmDkhO`p+bn5tx(U6#r1E{h*okmvl#%MMm~ z)WT(t>fT3s_Stti+UT5C@4D09LVPEPRgKq7V*&lf%B^733eD^4JpO%^I6K1=%{tdn z3JrCfl*sfDhpmP4XnM(;O1+Tc>k;r`AK6!_Nz(15*NPWXh-U-pb}dFJiai<^=Z0pk zmqr;Kh}iKyGAJ|qTrALviTtN9EmDPX4`4H%k;9jPBS<-}15*RezSY5Z#s6K&Wd!%n z5U9dWLf3`J-wbnoc6X+_EpG5``_7eM;4E;X4(`Bi18)(e z`xfSLx7FmF`+2S1btY%2F9+qXhS`R+S?2!c{75JHO9>e%1g8|N(LS3Ruj_)dIQ5agy-#C#L8n})Gw zmC_5?&uiqglc&xxnKy0tmS0XZ1{B0I$z{QJI9q@X_ibJccSf0A(Bv|P@8=6q>EA7W zmAth}?tGa&g+f-@z#k%gd7G{(DCYWY4@wMjAeZp8f+@2;#D#Hv2%!-Lat$~TKV2w1i!m_*1J|2n(ZL$a^DBhk(d3M`9cK?XmtqKJ3uUqa^QSoRxF@OO zTUQKepx@?j4=z~Rpx5O>C+H`b0Wohsa2lhL+&ZYg5oA^{>s>130;6D*uycyRjQK~% z5*0YLXW-YeJo@~|x$y;@_^zC9aJ5{|TO43gl7CYk(4;o#*VH?}FlCgWp+S_jyseRX z5HLHH`(BM8-x(58-73=E&`C(+1+pwgg}#1`!!5T(9?F%>`vFakW(o#5y`$Pwtz2)j zD{c#K2D@^z5wv?#&__D_CUaENrf6;899ND3dfpC`C@RjyEPOZx7K%=Sek8bJi#zZ? zZKO``0h&igR;S*#16A37%Nl@^x%kY-u|JP8`-66wj76x=9QSBkY26;k@wf*Tz<*XjRpb@xdskU1TTDEe+8l1u7=W&E zS(tQZ5<%toA^o@SI88|DC!`2JF^ma@NwIU8gPr)8N&Q5(fa5DM5(!k=l47G@E*`SiV}mSY8842by%;iWGBPjdP7Kow_c|*i-ar*i=cC`lKVuCk)n0v?ydej@ zW6V+e{Fl1eDyp&6p11`x z1qHH_9)u}Xbr60V3Q=oT6TUyV1{bFOG0Kd>3~~4?PcYi8T2-V`>tGJQHyNx6BAArd zFMo&N&umvhaK{LQ4N$gxQCSXsFsj@^;+*$#o?HCIZkJz)7i^&E%>>iXxp)WAObmkZ zLk$TPt=kn(>=;pMM{g#muW$zDP)B((yBff!QnG;U|J&CNtM9J%M!*#B-$HOOAw8C9 zR*q>wYKg1Q`=B`O2Eqz%q_)rem5FNuGZ**Iy?Jd!|BT5&gOSmX@>K-0dKMw7XuP8Q zCgM|wW43K?cPKZjaq^BW7r|l=X2}TjxFo}YOfEPXQeir-8cH*w7u8(N;TK@w!q;~O6NW_F648V=ns7$Y;VEZ zR$cLgyDlJGUom~k+FE6WTb}=4#eHd1Q_0r0w;KiRMx1FyLBm@ko$UH=*1PFr)Az%ndAV3ll-g5%2_P6f6>)!RP zcfG%|R@OOHr>b`C+WXmiKlSvv4Iw9gC*hVe^8gz)c7l3v=3-<&WuVTQ=S}N9(ar@i znF3Hk4lvj7H3UjGDLZYC6#A@#C<@f~yp-d(HKJbnJ?r5KFIt$KeS*NjCJ4A9S=9mC zK$T!x>RJc7M@Y)^No^Kqarx|DFOt+8yO^ZFs9!y~!39l9kl*eTxHiM&@RJat&lD6&fB|XrX4*?Q(E7(NrwM5huoA&r?LE%pZRbk+ zQ|X@_hSm&=A=I%S%?)1+>E%0Tw(9Eud=Q$y6)GYgJF_Xh3 z?{e?Am28*)^gVVbm;v=6m>vn*+Mjp!f_W-8?tM$12Z8i|V`1OhI&<#;w!F1AV&+N= z>U85ahhY;0dJP*{CYS2u7&U4YR|M*>8(>Db8HFCX-*^Fcs3Je}Vkmu2$NXK(y-?Zw zqYRwRF|K3c9U6i_-5XV*O?8yJ41N`uRj&x0GWEwU9-35OYNgXo9c0X*k1W}rC)?$G z+I62OvDmrT396!g5L3XUaK_ETXSw|;#`l|N-g~$-&yYJA2g|a3>+e4eKgbkr+a7d| ze~zP@Hn@PSKI(O;Z>=YWPZy@A=V7#txh01x<&dV8-)148YIZI~Lu1f5 z=}=CYBRX^=mP0Bx;}3>!YDF<@0>W%e278Wq;88VoL7-2Q1|~0BQY0bnwhD!J=HIJR z=imKy<|)fAk^j)$ZjN~k317T_rA@;$mE&M%#_2|s8yTF%<{BCO-f35X#xM1|?52|f zfG@m`1eWSg52w|Y>mE61;6Gnk-96>?8q@PWjzMot2M2lL+_U2iI3M6zO zl+|46C_?9pWMWFF5w9=wcVO$RQe6uSG!dif>r!0Mr4$1>QPv+hRz`ULi{b8+8a1{k5Yq-2 zL?qVu%V3otyP0Lll_e2%Mpmp;RtO5oKtNXWE8@#%xzY|$oxL4?K)_c^_$=PD& zQgKknqWgaNY>JC3XweBJbY)NY(laQbgC2;w$y-lh>ro7$o5T_ zyq6}+!TXZ^n;%Y%QnD5($t1F}DwPSG_2=s%E5{r`gzSb67`z1W@1&Sg2=`atPv<{r z(q|r&cos+u$4M>IWJk~D{5V^ z&t`%2jjubvZPC9S&@jiK)%VX_6p0V$Mto1i|2OvIr-sFki4OgviE=lu*NJQC)eKxa zin`RTzpyU}Tk}G9eJA=umm_>nsHm{A2(;wQC`M{A=e;f;a@`)u-u}~J%ahvK7HJW! zRk1;J4<+#fd8n+Y=uTZ$t>aL)cA)b;ktON37C5HP;|4c36wo2NN)&PF3bP&PqU@S( zhTrxXM0dW4IYmqP8~#9Ck+ah;jIdh{vH)3SvPT9(H###Dcg3s8QI56q+)!Cn z^yNFwgc;OWNsrkma-WY=UUWO?MNviby$)FaY4?FgE_dOz9rn-9VnEb5%YOV2)VsuX zG9vYwB(b&WI!Pbj)EN<~;#C;R7v2FX*s9hq15}$tx>0XD*x7VjaSNLTDX~3Hy55KC z^-W8+k%Q+>$z^MjszMFS%Fc2s{SFSD`Xb@5*5&JHl;9O zyFp1TPKIqYIZW^%UY|6<3zPy?k`B}u!a`BK#caoZnR{KXiGc_3B!mR-VzkCqf*V!q zC%U;w*fsSkgFQ;hT}VX?Xc4}V{7X4zje`<;ygpk{c?%j4hY}a^QS=Id%T)-$eS-acCOte2e(5nR}X8qDC!;z+G)X zD3=^nA#|LRJ6|SswQ;0gGgYcklcAkQ38|MBfQ^f`$suTnCA{(0cutOMuY7HvNpB%+ zksNT{F4v*|ah$|B0eK{f=v?3yT(q3Rx&W^2pYEgsS=0u&V)@P2X#)jy*1qi~_qf}~ zI*;}-hh?aBuZKbCQdABTU51+!yKvPVQ6Z~fkmUI7l%MfCva68@e` z!1cOM3@M9;Yrlc5{iKL)QqNd8GTO>5{) zdfe5BQ@LeRw}!~)5E+#|b_6dkm6=XeZ}v#qU;^%}|;R-#v= z>H(eJz=C?il#)ra69YY>Yj^FMVNjJh!rR}}yHPaC*`gtGX$NUZ^P%BUw8>zNy50RR z*x7bc(ema{UKYQlfL0kA9$0m~BJG}7CbFM$Wxyc`9GD)6s2 zI>8L`SYeObw4{4@c`e;T3NPhab&L!y>~Q|>T!QwbqbOzjhU(vsUDZ8Ia4r3=|E*pZ z2!B^foi�(an5LzWh)>zTzPQ{n`zg7_CjH)n1R91YY@i4v74i=KL(O z7lRHwJ}aNy3ER_}wvWC7zfNAZi<_TKADiXO2@`0Rv=?)fX+!=wM3{11`V*p@(HGTG z!lSJEO#UtTh+UG|V0X*jEGR{{v?GhEyXDIZe_u^YR;?;Vl#x$&r40=tbYYr-v~ihr z+WEL_04YLRT(zvhD~|wzGwbQ0qza}XuhIo8XMw=j81=Kmo)}09$LrwwJV-H$r&*=j zH+Z6mW}9UbUU>)ejA4_&1=yr+G37S{$0|Z~*_8$Dwo(l9B_h=&Vd`p1c}3xam(mp5 zn;Ix%m=Cg)6r?*3hrD_cd>Tx;c%cl0scm+|&7&j$z^CK^Xrg_s1twR%k@tBn<;qq^ zyzTKa&^saK`sO-2hPiQBg~MUI)-xpB7w5B@(Ak9hP3r`r(JzDoA`hVdG%2qW2gw=_ z?lgVjm>eY64~;rlX2t)3+W!n)x)Q|#+CX;BX7Yns>-hQ?uSxJ4Jc2Qa3pGWf=Ah&8 zMtV8RN_wN|#HUZGTfnJ33<`S7ZHd zy{&&1pE3SIHENn&sFu&Z*p$LGqJoos=_K&c0Q&i!qW8q{u4W=b&sw&-_ZlI82oW#L zkV?v!ag;4U=rw`v%bPR6#QfeEYUzkgV7y}0C0#7qj;&d2nHi7D{<ZT31n{3p}=J z7iif4p7UmCUIJwtpE%k}=Q74;lKU(OQNL}ByF*QF3?{WcEoJV?wIi}hy5{w|^Rj4} zXT$bnxa1+gjl62jGAwh~^t_CA(P^3fZF}j^=heq(6WV^lFqVC^hZa zI0}74w&ysv?Ar*)57SDde2hUK(4Lay%h)<`sCDlU>+HhmA~S#aHwnK+&1x!-tscr< zoK^l5JI-7*%LZx|&?;8Yw3sj!cqXm~t>Q$C$g}lux=UGC3dTt%d~ZV=UY&(2FHOVL zCR=ZoHXCqKx4bBsnM=N+@@a8@1@#FS09X|bpxuC9%PX}m^taCO-V(VLDpaI%7aTT? zb+oO6Db^UjqnE>}r5lS?>jkLkyzu!#wRXpeh5dbA*S}917%JKV`a!FXZ~9v#==xeP zJz>?28bG$bGyDKabpxo6IJCs<1DfN+y;I(~CJMQgVYq06`O)cko!rx)koW;r)S!^$ zyml2k*6fYE;HtpXQP2mXLSCU2&Asoc+%N@=j7)|8ShxDt$G$ldNlf_(;Jp=Od~oyU zC?jsP*CV+9^v*#zvm|eV_ zmjS9C|E(QYyGgu?t-VUb$ciZlK?VXD2THTJgD3PN2a9nk4KIbX@e55S81MAJBR~yI z$v%T~hHG0*G=(a>wV!<7GnYh&S!J215-{N_cNH>yyJ})*fLu1d%;Ia^JACAozF#^W znTsVOnfd{_G6f=$7YCI+%!4HO;I+}_Kr!@@k+s2DBmm>RFDv!FW5*;5UY_K$q2*7i z9vn~8)_~=qVczu=%|uyi(iNAwVh?B!c??WU__!O`=1&@VMq-I!>V%13fWKBLfue-o zFS7LCIQ=`#0~kwR#1)54cI4b;TH+S|=prp34H2?`jMreJw3(Z|ZZRoY!yg!+T^6@u z3xU`pp9EbcELY zlQV+a#cjzm*8%u$Vdl!1=!4#@Q=+Ba!er_i1Cd3s1A90GcQJy?bBRm<_c=cG)U7Y~ zeLut|*4Ct(jdLjGWDa{H4)@^kvDoUMm2+?_5#mwF-J5ri(o74!>qx<09TYPX&CM&2 zlOP8pGeKP_P%|#5=9O&GVvonI^=1Vc%>Q{LV^cSwhiHuARSD)O{sV&#lYryUOkw6~ zbogqj$$lUv!f+O;GcdRXfFXAGN}fIlw=5t=rTD3)1{)-{wFWCIFH~V4q20hBC}S#{@1nLS?c5{x8HYCg=l&jW}s8okuwCLKdcVWUrJ4)yc1nF*mD z-K1n6+?f2vl&w6`a6W*W3Y5(ad0<$);W6e&1n7Ihs*K)07|sCN@r>9})3WcmT$@IF zX$q2yZwKs+*F?Pomxsj7Bu~i^TVicDMf7yPjs#YB)!2qc9-kl9do8jlAt=cNkX1t* z7w2aNCVK2l%E5%G$2Ez$4~RkKHV|cNF=$YU?TkD_S*^^_vyuk5@>clp)>~RqR;SG7 zJpbi8>7lzh<*o+!(B|b>h;L&m27VI*xC>yHN}wYCXk5?5vNt}JJ%w}1}-#j3#(*fE+< zS!L-^nXYTg?(fe58iYnja06(k7n>RLo)KR7QGCec&uhMYxb8VhNnj=o`qa5-Nif5g zdUnW%3WdUXfk7GUA^nH|x5c?mDf$9|EQjXh=?%6h3l^PYQ$}c^87FK=wK5Xf-dt|d zxYwloafXcew^sX|C{fXE=^n(vN?~(|eC=rdlqGJ=W(o@Dx3C3*G&J()AJA;FARiW{ zn-(+~Lk%rz(?w&8v?Cmx8G+TinfpY_cW3rJpmZldwZOYWsXoJ&xwp>&Rg_9rW*IEb zIyjKw%qmpPt1(Mv4>A?!Jn($c;`{0hH&@)Blgc#^;My4wWTPsVl6=X7L`l&S_e>#C zUAmSa1J7G!Z(-6z0_hjHYcI3C@E`<2eQFyEg<|=3{cDo=uLzyTx$x0p{SVjRpVaA@ zgtuKnNYm7J@j!$CoHtR)BM#;h#R~O>m`Vr)B*;6LXmLWy0rExFx7%Mp=Ni#N*5RB*H(I=DCl+9;t*g$I!Z-dPN<#ow!_Oih z(+^04q5ksi=~EOJ)o%+e4vhf#%U5Pi)?L8)KC=JxrHxwbP@>i{y!B5=VCR}Dq?Yki zKd_}|#wHGi?2V;?re?E@Iot1hfu(Xj`%H<$7wTl(L~)WJI`MCwQC+(_rQ zD?G&av#&}n)1aSj_<1w8^c$J`&B$6lEvrIOXbTw`fEcy`=;pKL(ZbR{Zf7O}$j}@9uhL zo%3XuKo{W=!X~;fV2K{Ki858)!m3t_i{~8r64SrP<_eVW2rR6FwzMY?J((J+ju3wB zgnycD)jfYAEZyp6lXo_>S7d+jABH#%B~$B66X8$zq^fW^ z?eWm1ju#OgyHqneGgC*y!>HzH@sMN&f5=G4VmXAg3}Y`xR%_x9xf}?|W=*BQGnqq6 zF|nS^9me{FqB{?C54or?(H!$mqL-5qbC9romQBYER_be49C4m2R6wqM(8QV^lzH}C zn1U?7(uCAF?Nn48f#|68wL)@H0(#g~Sp{qtT2e#U*K>qRoC~AVj8OyXKkf!@DAaO# z{xPF^ zA1?bX|4^rv5C`(?oU!EDjPUMio-S_(#jskw%x8H1?7UfJs8d<4j@OUlkxB?M-4;A! zNr$}uc~3(`ac1>cwNhMsP-9?KD9ZC6Y&sLC!Z%Vfv-hX60|d93=qO#tF^=Q|W%6f5 zs;X(Fv$)=TxNInW29QOm)N8xKB+VZWB|P(?&%X?Ds#g4QWWWZLN(8poQM%gW@y(G8 zd*tSX4s6)W^&ao*7Qs$bzQ>Or*1!WW6ei+g`|Aso=IV7QIzw@Nm?U{EZg78w7@)d7 z-^O6Yq1F19dorZf|Hn$;U+Wq}h~Y>|4v1Mw>G>nToD=Y zE`dw`u_hMXkHNQGnqovORSSleNxS1^H%7$1whu^4S-I7sf%9MAz@d`**SmreV?~ku ly6Wro|N5xf!(Cil`bSqr{9?O-qsaa?HL@@)I(_NZ{{ZN@T=4(^ literal 96303 zcmX6^1C%67vmV>FZQHhO?AW$;Z0^|H;f`(FwrzV}-~aWAIDM+C6P1-2_#z@wNkI}G z1_uTR2nb$UN=yX^2qX%?*iaBaK)@P73@?Biz%DA1B0x3McxQkMFbiRMVIZKoc-T*4 zaKJURqm;G_5D>!Pe+>MG76BIs*ke#yOjylx{j$qLPhGqF>ca13(_`mMz^}bSLEXd6 zO|z!PvK)-rLKqDUja4{-PMQph$wcTkNFf%qNpH3b85K;#VYcx6_Ad@@-yOm%5&9;X z%Efu-xETxIRobbh*QvVUOqXixcQ_?AY7OP3DpX(hiVC<2+z%wka;xPhWx!9Y@yWL= zR!*9~&Ge{KU#!#p&jga2@kaO*`m-DECIzx0gnu0ce`crUpT)uw5QR2bu>7Fz^Dr?V7 zV%5so@8K^nL4X~aX2L{Q_TCA6s(T;?V70+Na6vbd=WuBR1%sus{r0lvtP!un+OF}l z3i=HCN0-p!@eEO4-W}K8J|gXbsjr_CUt3;&7WvUVP1Zr{hg>8gi6h@a(Q091FAS;DN;|AVSK@%qrz6)>i0lZt{!l z9LkI~W$hK`S5U>hjKNUFP=~naqcnJrPf%U%m_Qf!C*p&FF)?sJ90UlMQJ?IiQ&WE3 zLd&4^=xKLN^`N`)0jeURMT9t{0_J<4e;n+HX0o|O4GeOX4rvh&GfC&-=@i{~DGFbs z(Y4d0r*n`*W+?Z5@v4j6r9r6Ba$$m&(E{lqu0#A{aoZE93LXc7YV{1(=D1jEaUe85 ze<$LFlqSfoMhdzd>avhq-Q5!S%W%6N1@?TkL5W69z`;nJkR!B;qiOHS1&rOxUszZ; zb_Od9*ObMwT2sQs!9R_vjfuNI8QK;S)!2A z9N0A?{m7|jKA%QdkbmnCC$S~2?#5S*U;VctPF%Qvunp5=-eHq$(c+&MFX);QeZa=n zD!e+rlKP$J-mSkK?;bLAh~zf$u{}lOGKdO}4lgt!B4!krQeF$T;m?;^wj22P>cMqn zX$6Q3sQleC%heh!BKc5cAlj7jv#Si_Jj%87-zP06n;#%>GcyF)cBPEAcn3&cCS@}c z)lxZR#HQdVj6Hd$L;CIXTCxCZtQr(!nfkNU>B;=DVt=Dgcwr2glNPjrcttPxyqXCvlm%5B z2z7XYJ8BGLx<=>*0c1ui`H4S;#kU<(bC2u$6@Dkg6K5^MbzZIn`iRSx8M#g?MihW2 z)m3LoK%*>xtztBp&g=>$F2J8aKtKRSz_ao}w03^h_x0O6ZmY7OnMkEuRT3L;Yk&E> zTxdAl4jATc^*pQ-+ltcO-~uY=ogJw!C#QxhRHLwmA3c*{@8)LasL&jFln`>BmCnnT86Yz0wtvi>zWsF+EtqD*yJQykgp2SmAlx1_bwPv_y8YQn;s&2 zi7^$#+KBVVeewhYN#-JIA~6l##K4iP#!`dpJv zzkUz7oU&SRu*jnAr!rQ)45bwnLP~%$7LyS0(6@$zJkd;^prW+&SOcVUWCco&{+STJ zK<)&zVVSf~N5}*NkL$8zgOC%1j0}at*1&OFNBE;AK}4s+K=PcU7rI%`Ls}~%8DM?b z63&F6hcD`}IGwqaCR9)*16!1$dzcc~@AWO)8tN>jf;EnQwoYaos!589im0imkXoLj zm5S@??f?UCbyxmY+$}w5S@nFR$cht#67RN*5CU1L(Ld-70-ccuyq&&*f#A+gzWe+8 z)5}XTPR{t$>FI4Z#UiLfMKI^Zzsi;u|BfB}whwsaWxv16ZX6%ACZI40K`MOabvhrX&HX`q^q4Z%G;(m|v zGr)5Aj!?m4Gjb1o9yEJ+|u5@w5=^;ITb_4$6s)gvP4x~_e+bXE6CQN zN^+U#Rn{s|NtTeA?ed?+&1~)OnUV036?Fo(s+t*D!ZX%xoQXvmwq^ox+E*S7{)2rS zJb{N%|F9ENrubwd-){;DOwit;++mr0E504y z1jkM&u9(iW(T>m0J$kE-qLy6Y%3*2hxu?{jMqP88gkUNBr%yLBZh-9b@~=@8L{Qy`iDxDiA5BARYD z3nnSCA_{a|>spDU0F{VD?)TlJ5YY7z6D$I+FKkIwRFOB-gk`9*Nmbqm30T)a?JGju z{c^=Qao%9gZOg@xCO&3}WEP^d_>B(x@=LldRXJ~#X`&*6rmzb>ujrPf@czGqki8X!y;UXeB zx~PHy7#tiNZ)Mzv{PXGNd@|$jgy9cgl5}tiu-4V?MD==2%ZGc7y_YkP^~SD0YU9cu zC7n4bPfxDBJx<`iRLRif1U(sHzmrgMLd&cwBZ*4tGMvtril(wnkMBT`2Tm zw8h7A8WFR-;}pJGd)g7@AmB?_f^52mlDordw8xJurab7?C$rf&9d|I+)QFx9W^@>V zjK|%a*eU}}_;eV={ocvb=A?w~tV0Kff9j9|!j$_{yua6Hlszt*%{5c1%D?qho| z5;{)DF+3)Z+bU_w2%`puWZLQRh9m+40%G6YzeGHnSk#x;3ck8=Apu)Nc&2$Ed~4O= z@8HwEOebY5its13B3X;Yb(Qy>ex@LBIdO9-8Q**YcL=8RaVa`9tvCsBNlrmRLGh>%QKn9#l=iphADV<7a1;4hI@jBZ?U&4SH*uIo6^y<4%NF}=`~W^#>J2b{do*MkLN&O2d_Shi8BA5y9me&gycVSvQkAp zT15VMrCzs(J?r_@fLEi7XXjPcO)eQK%8IfBT|Ke8&Vr0uR;7~s(QtA~W{>6nhlfkD z5=kU*<(}Hq-9>n2I9kcX3d*=CLbB%6m5$y}wT725W4-{5XJ9ep?dMi=rPY^Yl`JJM zFYaYm0kxl;V#za+ympWR9oIgC^QG+S>Q=P$kFb(~9hs1DhU>;LbEp59YzBR>g5?cs zOI==&zehqm8fsrPxOLhK(zN>=ve)(r`q${XvYJ{xg*huVraSQc`~CG~TnkMEIXSr+ z9~1X_CSU&#dwM zw7*}Kkg}o?@5UVIVScH&Z&vJY?D528uty{D!@nbBip~CUMIJ2MON-(BxJ_>$iC}#1 zLutRMjTmJV(s17{3Wn{XzO;0BA7eIu`ueA=qw}6@I#8q26m_}TnTKcktRsfz^K$() z<{F2`eQyqtSd$tqCqVdgW09DgywSlxBM@6vMfc_`jIC~k`S$(c-?(g{yxO2>WJJ_r zdf+{hL?6K;Z~N+&6m8aZQL`Q4`>Xdslyd>AxH(Xj8@%hHv#V=oljwVKwY~*)er$aF zeXPzbI5@ZsA9sZ}j!sC^19Nt*<2sz^Ta70kOgRSeW5No9QW!4$9b{EfT)ja7j*R-X zK7++$os=~H+mmf^o494?F<_CVIyzu=Yd>HyyS4`@%qu%Y(9e9}*M$H5Rh@Vh9b^CH zzI(QF4U@z}yf2GA*iFEf!}o0{0zkn+*fNgr+%x2TUigK@_{GO>2Ot7G&wv%(@czd; zE;QHtRAATz8zr67uqAzHLV889kIs;xHfF7|#@%en1N?^I&Z72|Al-%6kq{y|mA<;# zEaFlGx*D(vAC>Nvc?l;?o|_6CR;H>DkCUoCfajfJV;2(v1Rl-rd(sG!{Oi=A4sRhv zAqBI#_wyWhxC+)t%o123bPJA|RmdfdM^sT}hl=_8?&lNI@BQ)3FY2xY!8Hfw*a?wk zUZQ?(YL~M-+1d zC@lDVFDF?`Uf7N?(fD7OOU%#@kI`YekNG_I))$7Tx=o-v&;JF8#DF-|U@7ikETBN~ z5ngX~NSd0OGIA0i1PGhND1?S(kr8SQAFrA`nll#EUJ{fg;Yjhf1g?1-TrR7kx>!Ly zl8};uN=lAwhea{U#f&(Vq7a}CsOa)q(hgD9q~Aa&nC47KOqeGm6OD z;RU<87nO3PH&Wc*>U^Ze_!HeSP3Q2gY`_#YHa>z!DZ|N--DY#S9LqU$lkey2{5BzwK5=^ zp`&Xks2k^xLkVaq18ZZ5F6v{yy~MxyKjR1}t5ER0^sO!mc+H-~OZe`TA^v=J5|%|B zUO-m-B|?3p9DJoS;d7!z7ZemkHV#_p!&Z%ibkCmI)sVm;RWEzCPd?t15T1y=?+AZW z&=rU?Gr*lRyaeqXt&3Vz9XnQ4zg$0<{>+GmhJzclpJuV$Is&=*=Y#xr-wx+SKH^TZ za~(LMDrM#xa|uQ>lfX7UU|*?mY0%qp-(L)d4FsJeJOsgfr-(ZplevQ)GiY~uT*WjVLe9PMP*aBx z*#cw?=)Mrfz~%SXD)wPii6H@}$9esM2?J1#4@-HcPm;imoUp2Dus*Lwp}iZb{M0|7 z*~P`fnVY{%+N#NC&zg~=Go>>DG)3j*VPjDnmK78DtOp^S5a-V!H_qm31t<`H>;_c3 zcE|_F@#I)sysR_ksMDpSj+xjIC;Oz0V*i9aX3*9Cz-!kXK}=7prkfl`HPoOu!Pove z)`IIN|65T}@BJIMBkg9tu!R-KNq1^C!*XPF<{M&dqxIB6!Dmc>LOy5wY?3EVj`hH? z0!;TH8UV4NbJGn{1vD*yh?%$W*ZWVN&e;ln8j6TquEX|Qb| zoA@S9uL7f?pVV6{1S?y2b#_K5{wpknoi1ia%DWw~rNHmnuu??fCLMe=$#Gg(uD;x8 zNp$JPz0Kmo>Je9Eo;8@F6b(16v=Mg}gGzni08Y%N0ZpjC8KqXZS(Q1a=4^h~HZ5um zni8dp+_{3DHx+{1n89@1o(n@Ski2u(74fkq>hQ=$Yoi`~b!EPWfv2bMLJF9bn ziqPZ*0hys2=JmLC{CK{?WE>WRYaTRiLZ+{-*77wSmf!XKjb>R=0&6RWfsBm}-8H9ia*To`55IeQItI1lYR@Tzl3&(|$fDkMmL{N!Ms?@Jx-sfXG=c;x0|Fw6Y=-sEx?x z#v&>Lw$qzAxAl*Nw>Qt$)QHp!9T7i&P9V6(;x=qAJ;9^K7%gV#3y74WA|=26wwe0+ zoV=I}8|xAW=-j42dm-o4<0ILj{KW2Vj_sQhXD73^SHglovuzvJ0E(t$Vx>q-AqeR$ zPV}9@FS2=+G17|?#SBC?9-8};f6c1bQA5&^K!cmzk&XByMK@8|XeOUl%rrDK_1k8Y z?HaOJ59)%~@ATm9SfzhQ$K5CcMHsSSO+KsLo*BH zVSUgd4vu@$EA2EiLzoRI=03yupT5}T-TB}5=;n+%tBwQhTTjJ^Wg^qZWCF8*oTbwUwqP$86I*^_$nQXJW3 zhhF6XYM*DXU7o?ry@8S17jJGCjS%44Uvm_Hxx^hEnFQHXqOX}3hIs`@EJCpeQ4Xfm ztP3o*uiLjr9^;i=Y-pQKPJnlRwcaM$dG+RWT>!VnpK4MKzWydyZ~})XSqJHf#Zr89 z-RES#1^tyx12KBF<{hn1y~`qkNs8)Gnt^xhFHfyBsNQQ|unAAkN2+zwooP3M;PNXN z8pz{?!DOk<)qEpoWYjThRG4_!!beWBF)(qO#$8X^=m$a<=r?IJ6AMcrs|R7nm2I8A zi;jSXcJSv=)6(x;YOZ2sA=2ea&{|fGLiV3NIq0nH@cmtChaWA*d!-0vUj#JIB7%kW z^>r-EHj_3JcvHx7klHsHWcvx*wp`7)9Xj%T*qi+7>M6%i=&EIQlTHPu_4TN(vqR9I zPj@z-1D070G&{sltbhVm1a-XdrbNOI5=B<;Bw(N>A2}zTgTQ0RsO)itJqZPpgC6X- zyd7_~VTa@5Xp$9Jlk`$;6^B<2K08t%WW!_&zCR4t*VnBb9nqU8CZ9(pF&jM@ zik4$4_5Sg+!O%?S3XZP<{Um+?W3{Wtj)F48{v09i{#WTzsHg(8-Dq~xa1r% zHi;iF5f5Wt$AEzJWMF}V89;xpGOK0boAKtnQ<01nb59d73l?$cBx9@dm<*U8mMrKwC!%uAN{S3p1?Qe+4aA1YJU z)RffFSU&g@mx|!*;*wXsiGhVBrLT_U^{JxP!OfIvlh zk8Q^BG7TLO0|SOOZEnRb0tW{N;^7tPn4JLr+$Q5Y0C-YITXWks^p|Na@W|%#&G4pT zjv-dWW7RV*?8d}102U@sG{%h_nyslX<6>`2Jxph)VPEZO3B? zO;)Q3=1G&I5uBXPi0?J6$pf;}oQ{#nhm5YX%uvd)1wm)cZoG`R>AuChFT<<)%#7x* zQ(W3Xu_ElpvxRV7Z&m*Qk$uTjG!5jcvK(iqPudfruiGO3TJ9OrB4JUs{Y=;r1t(yC_I_i+i+_eY-a`|W#Y z&UNl!#t+|1(M=%WwTvVW?$x0ikNLM^TJh}8;$1AtetP`3bo&?`!%X_;2kJiMa>3)< zW<<}qUC~Vq1O?B`Am24HF+*n`WdQDQ!orkq_dP{3_%2#N9Qo2{XsZP|0LE>>R+~{X z);+l*aZl^S#wOLjQ{Q`hd9iyg`Vy z^>lLKP3)J5ym4wYB{O-kZ@PH`T_5U)5~St-#A*JJR8Hle zOP;Z@vq#GLFN8wjs})NiwX6L>+$IDbd{}aHi;1z-X0fA@#ZTiS8*~Pulla&pXwQJ{ zE&XGlXX#HQR<0J66U|%M;wK>SX?I|bdN4iuBIAKkJelbzyU@4Z4g5BM+W$BRSHRE zb*YMuB<<`XO&(@@dD|N?@i$+w3N?OCPNQqn!X{Z!yMn*1x*clLxD44mO>q-Tu?jT3 z9lcb^{g^SCiq$_Pv!^9Cwy~L=WfetJQ`8)Kx7j&4Gc))nc6GAswSn6vi%_HhL=igr zN+QOdTZ@b=&D%*4-_*z4;g6D|p3~ONO%Ue?7;r-u5Jil_z}`yn7No*J0R6`R>ivgW zI2>|EVh%DBIy^jVu$+q7jYa&;cx5DkGjXyHD_d?<(oG`1=E3atG$dvi-)Unbb_kvu zwSHfSNhubc)6(Yufn;M|L;Svo!|~=oFr0vj7_UR6Xv*>m_`GvbG=h4OOw$t*2nj$X%| zvfFS14~)Q@OE7QKW|o*W)iB!bG4}V2B@EJ$z`;V0zySniKufG4`Cd?Rw_EZ&Nd4Z` z6U=c_R0kh(j?xhp z2$%D^7@l6gij5%K$Arcup&!O#!X zu;TCIWf@3HQ6XCl^^O1U8xWhQV74Ga1KZS>OHg)jO=TSZq8B_jbdz;8;=#PWxGNiN zlU6Kz&NsRe(&g=5k5+P^FY{507DFGR9J`HX=73|IW(SXLo4k1Q()N!hmA@`$tx+7RwuO5Emou3+2Bi`Kcan>LjZ$m$1MoMH zEr-&{Xd93QgRZ>nH8jxr#6FiN|DWYJICq?LQ2naxi{AOz%2mf!y~BK@LeB#F+e}#I zj|xI|3;3g^_27s6`%h6_M*cf2w>+)>L24=js?O7UyJ!Q&x5)_Vx8!TsgYPcG;K z)L&T0R4XtvJav&_?i+*Om!ffMt7>Be!;l*~diAqYs zaC;tdDrmt?`Z#fieNv^PmGX0UfT%kE@iZh1MZUX%nAOsraa*Mol0eVGAnpx1~3 z(pSTz-H|`>u4M2fCfIX%BG7)f6pljzUD=B>Lv{|`R#0_FB#R#I;vYgUPnNjWvqvG8 zR`WZMrn{C>9#${)OwQu`)MDsF`jt<{>Vv;pL?@caCvzM_4ouyJRF?;68U5Q}-lK8B z77N?s;ZF96pWVQ@Xt z`Nk3oHkiq9d{Ao_!FTs$!|`eo4k09@Y5F4SZd}yRPK^oECA;bXd}2POEw&@WD<*G$ z7`kIjDyt*nJ{yAG!?OKCVYTanipn?io)bn*&wbBC0iAbX6Z^tl^*bH}R_>%hs6fyi z$3!ZnMIr*dH{`6Z*N)<8shG%;D>F0mab@w>WQx(IVp{%Z3C?y|^sA#ATIS9VVnY1# zE4rn1#bYrFLSRKHh4#ovy{Rk^ckEGB=4_ts%Z4M1iuqLaFBA`kBiN!QrLMdH#5uCL z5rRLV1}Ov?Q&hNbY1wi{=W>ih$=Wcc36Y%v9|TkQ@+zklg$-@@8S!V=wqWN4mAS(v zZ;x1edwYoFIwJf?OAQQsd?1$K?Fq*eb9DC_P{=~w7Tl>84!2_?MSsERmhFtAuWVhj zbKdr6ilo=-Qezi-j6Q%FF(%)_1{?WbxwvW<*D_dfaCwprmNUNjP}wP{#(G! zwec1P&e4nC*c4e<0tSCNKM(jV=pi#52?|19u2>Q~96FFDrs*K-%TMi%F7|9;bas=# zrvJFJ3Q0qsxU~TN?Pv(yrKOaD)0g6860*P^myzi@yPW>rd#mzkyXd_FzC8{}^s$P9 zQ4L>GjGDa?mS0>96_`{=Q<>8em5nYE6151+U%~?uiqij|@SmY;Sf+2%}Rx@-JG(V(m-SGyexdTILk6Q6% zMeX_-uq@2xyJsPgp{Jm*YGE;J=iCtGbg^ro^?4beNcxg@uXnr9=%+n$cyAA6*d_*(r$-W15R)@V|>pqEioj~t6v22q?VW-4WT=1-n)`d#}-s}_JyoTOWA=z@{;DqwvAl;y+i^*iZ=&%m&9U*J76@lC5@x! ztsax0flZv&)btDxyTv`|YPmyV4y4|}Uw>0H7Ko|`Jxh6;rkpErp4P&#GOmG$%9?c# zQ<3%`pqZ}*C8p?u{PPqF@J83{r9N_E(|lwBPLNqKGEZk*CD*P>tqLYcGY3)E}J)(P;A!k<_PCHy7O`S z_4JutJI7eeiX`L8fv;VADLTr1E1FVW&YDiAxcX4QF^^ZLMr>d7G0q9e=>CD8&_^oK zJBS$@AB=Cd9m6^D$r+T5DiIHcBOzOkz`>iwZ7PV&tj8p3+}jtEzhMH+E(`XK3pcdp zuxGrH{|eWc&&3*#6r%=i#(2$(BEIy8gzc^!T3AlfXFf`wfhp=>h~}P_)MB@z z+EB6P-tUNcOmQsTXh)&n9)Ti;f%=aD)VVAom(2EMDNhT8ZYGH1*QGkVHMyVHHG3Qf z`E(uA4+Dszlrt(Ib5n)9qKeqkjvUBAkIQ>9glBDy zsx4661Hi2Y%V6t@1PD+3yoAup;;)S7_Z!eaYmUETGMX}04}kFmyW$}N?Y%_7$i>B* zwc$$dQ&{zdTplSHe6Z%zeUex!Es|9k12~fdTo4mN3kyja!Xx7}L?Q$qESuNyzeeku z!`4YBgulZHwYSd#lEhUT3A8a=hHwJcbWm4)DoDE%ULjH3%C?C<|onSTC~%m>PPqO8-s8t!D=2H#C+`4n%-*;7NwG76C3zxjH= ztR8a`$ToVTD`0b5B;Gad^<_T0`Dit$E zbhW9>=c{N`bT$vj=2{lMRS=A$oVdN+W^|T=x?2lfUDNA35yb>X%2S8!g(|s`s_}J( z&3w#;bg78Z#T%*$)y!+%c|tD=MA`m1X|e5r1cihN2bdSwl6XvGp^A;aZ`Zm*ANgUA z3O9SO@a=e=U+B#y5EKZrh8(pE3``?&6LQNMgp>)bRb_ zBR47;WcGwH6@WsVP%mH^6#0OwkcA@`_ zX-snFh0S0P&c|0-?2Us?X5&Xqzh>z55KPxhl(2ycuQ1k6_7g}AjP)YP%TGxff;Y9G zaLFtF*Tp|yHV=ykD%ejBk;#tspy{L!Axv#?x5Wt_ZS_g$>uA( z7fVA_RF*_UAA%Jq=g)aEbuO&RD+{|0`h?^=E?rl1=?rz4>>4J$|DTlrada;{e6k9I+qxf$uh(vZ7fWu!#g;tP}-tCST-&^j}zZmG)J86jKarkkrx zLEYyQLj{ z5c2iqOQw{=;3f}w{S=YoIT{vf5NfBf-@9r6H2`eVbZ39N}#<^f?RZ}$G_!?TX7 zkk92n3glxK=Ey86u-*LF%$X3?+{|G}6H`{K9RooT@(N2Zg{^p|@D6I7nfpbu@Gub> z6;&usvc3#OETHKz&(b-)ebV};llN@257lYgEqnD!!?%YD4RS&H5^G4R~U~Bba^`v z@J$XQmMm>-UP=oVSv?+zOa&8pMIw6SBI*QPDW`Y`zID~Xu5U})$ik!7Vgbl|!`v3W z&V7)(^S`V9jjbGBY4rHwz3Xd)-YGri&mN?GMkEsp7jQ#3UAW$^OC2D+;c}%nJn+t` z5x)PzK02T&R;XU2A+NIdbw2}J(jHl&R&10n)guxC>|Xp^(v+uoU^wXq=OdwB!9f_$ zA=jj%W1;WG_^)qQg(TMhMzM(p4H*U@xqjq)@DWgU;=m1RkuL5T^1rKrZ}WN2{$^Cp zy0t;@rSpA4(&2DLb!DQiVxx)KsN%6g#GtkjhrF8LDR1X2!tT%m1lwWc$ec4qXc@3_ z_NGZtZaHd0S_l#f%Kd7cuKbg@Jrr^GsiaG5L{+Z?>ELfi#_4|voN@eE3^xkre;^9V z5uex4l|MpAWzQh8A>jw)<>e1YbwdDw0|O4J>z@1-PJFvp#peET-*&*BQg(m|%%0eo z%WQ@EOMWWDt~A`IyQJ6UofG=tI+`Lab;sE+V}V>ki5b0#9QO)BIJI>~QV%i{f=;W^ zImrS*eH;!WE}r$#(R>-~`Mev_E)X}7;;3$UL;;>8fB>8i35kH`X$A)mk1m4d$#Vbj zKzOEk&w`DIM;AhMdns~xd0E`a6#ec^?d9clcs#xWO$^hiLd>AmlXV_t^XWG0`+a|H zIWE)C<~9!cX26$?u8o|iVcTPljc#J^2*AAi3wN-ha1C5Kui*FAX}YD_ciMZ3WD0(+YR05 zx3{-NBK~DklA`8*#?f=80sa&{K}J& zkpVbsn8e#~`obDcq?~a+DB3&kn<9_3Y$X5k(Zt2Y^{zI#v(~0xXo>)JGDcC;>nAAt zTceH@=l5L5iL$eCK+iYpir#~XCm1GcU3P4m67|;WmhP=QOnQ4h#DgpP5r0bBJn3`C zhk$T@TTmzdWQ$ZybcS>dX&rmn8})~XTXO3UE_=cy)A3<*_^-J@)kVU3(cA7^_D$C| z=ppt<>?WeIkWbCf58ij+T9vmBHzwk6(KYp1EujE<54CWhP|-{OiGB-4qNSmsqNDp9 z`V@`;nwpx5zlCJu|3~RC(}<&jr{@)JizApzhWv>kK+9N-7E$D9>3zr9EnA|oD-9( zZ#DBwEkGu9A4vg*aTMSf^#D%o-M@hRyR{KCt<$?9!|%zna@0`jZsMdLi}_%1M8mjBADv=Wqq-3aLHgL>i@jf^#d^^gke;Z_ae03}!r zSk%)fjx|6JKJb4n{f75(92p=R(q-P;8Llt=vrHogLKcC z;{O;q9U%Cq!}hpy=vYM2-egyHKe|+?UDq~49A;0k$+0tkf**B zr;lhDX~IpT)J9bQsyUHk>pz+}_852UKAU;NO!)x?`=lPo;YM?j{Y~G4f1^EmQFcZJ9GZ40PVYqjWDf{0)sv1tlF7w z;pn6}ihktLfE6%QH|2FunpqSxL_5~=SCoL?dx9-raKzerKiUqQ>g7Ib*#TATXIP0Q z2h+U~Xh2Q_{0FSD?^RAPU@@~MVZOiHxSOF-D0H7q?OmsW4-T#$ET;Zg62hGLx#3pz z4`6vHjQ3wkb$fLG1|;yWVvNeqQQIS0pInmP(wNhykH&B@2?h|9 z9NfOE;dU>T|qEG>6db*1N;xYa+?D(*W$4d=Ixa{7~gX)v+Vjoo!{hl`FBipd4GUv6`%T+a}qh@BbR@p=f97bHHt; zzIW)s&~&)HVLo`XT;-BOA@k*Ng;Pb;Ga4UqZv0$f_1(u3XyFgBbDr@swVBNkz=-Bc zuU}6MfX5z@92hqBd<0{?W;62F91fgGVd_YZJD-y|#yn*HawT{uLcu0T34S{(^5t>n z`@t!U^TSOaRx?SQ?QJE8tyQcX*f-$+qOf@YO!!pH-55hN`kaj(qK2!#)eU)atrM?d z(0rIdH_T22o^{LiZAFWfjq{_9s3qe&Q}xa9)Dz-{&f=6#zME}lpx14Md95QfvZltD z&6xw1wL&Y&DI#&>!CN*;f_Qr}(s~e(m-d_rq8Lg=9o?m>&Xfgk^E{fgrtwZkNtY>3K{nh=2? zd{{mGm&JJaKvSK3HS$Z}zeC%9TOn{~vVr3*GebGSJ*Ll(YyD{8-~s5Sv>AEZLE2Rj zLpPD}8HG<%BycmuCY~DqrA%J|PnQ{8?Uto>Bbpe!pzHw*j zCQ6Ytx;OsU!rnog#OqThGZQyaCikixH*4b*&~2TBNKREKKt=QLtoyvI5xQp=7MghZ zk}bJ5j{VFmKO>N#jJXV-m0@F{NT{kNBh}^aUKmBq4$a%0Sfw<9&aUalO&3RQQdN-s z+VH1PSS+cB-+XMW)$s_kDT`im~Qtue;KtfWDHKTZGs zb0mt=e~ju(3!h~*p_J8)dOlsdH;aDUk!P~-Ig~!xQW|Qxsj&6ynoJ&#-qz~e-v2kX z`@-ftu#k@|zP=s%=D&p5tu+ZuB~ACd_GbJ1KlAnDc~sOgXZb+_egZ(d2ZG;}jTS}+ zwJ~PACQ|%eVY(}vwf81)Kd;s_{uIFx+^raC$tW04KaAs1*Z1Ae2JQ-~M~_GPmoXjj zjWwvE?4rN)r=)CjwH%6NJtyfI3_9i1Nw=T@y3H5T?q%!m z*-hxUsO_VRnNP3CK5WI@9E-`yJT~5w6Of74MO}<2GkHjL6Z!EhU$a5y0N7O1B9tl` znlHaxT~kwN0)P1Fsbxu1$y+GW?(JLyqif(Mt>%E?>JvXBBEEpQy805V!pq(Y1fmIH z{R1430k{G9PTiVveE-f%b6 z@cj7~eV9yMpO&%`w0SCe5S+-Fny<0O!mndykAOtaY-lJbzTYu1F=h6Z^o%A4d$%hS zXg_K0wY~)cvG^Q3V)|M$x7rP!KR+L66XKNAF)&~>w>$W~(^#WDwXs5stU$Ka&CDl^ zJ5Jvc2td*C#jxOjIrA-{+1c3&;8n=ENZM%gk zhtDF8qrm{4&eKIU3Xrs&1i;=qp07kz7hnPlc_FPnoFZA6LbiCH`N{vVK>TGe-|4=3 zHSk&0W35Ak^4mwIz*)9^-39^L@c>q%6?{SR)*edSQX5foG#-iMezPs_@5g;?KL^wbr#os9p!Dld3O+9T ziBfxcYT64Y2Cs5(PgQp`Mffxfp3ZPD`p7q+00TIv1yHG;P0Yx6!;FE6nVgsVnwepu zHvaJCF}FSWG>Xwi2Y6p{02fL~C>;>a4-8}y2L=YTT0(OuMJ8;-U~ z&d)wyK*!#F4wF+^{Qt;$%cwY-s9SjO;1BMQKyY^p7J|FGySqbx5Zv7z26qWA!Gl9^ zcX#)%$@{H)-?c7(=;@j1s_Cve=hQiS?;^m5x`p7j7TA}8T0hz!tQG0N^3gn%n)?y_ z*TIgC9{L05%{!i$>AJDJ&hO(@>E*4TyC*KWKoFWqbhWzIgBRc+g48XgAyqRtkm~%2 zVc{*!$Djr$is|_e!Vzka7KF0i&xdWR3aXBI{0E;pkh!7$cX$sC5#PNO}QI8vxMs!kC zQo?1|<39@#^A&FK(>aQGCn~8-hsJFUb7iLeIh5EcIf1R9z6{!cNMp4aobR7qD$%}6 z4LwQqG_|aRYymQqRe#0kw!h=ZlLV~o5R?mOhYjuTXwM%b8E@1-pqG@CDF0amsK}pL zS>v6o%;GZA!rqS2+?V7i*l$V0qcVE9Kc<4WSB{tJBHAutO-FS`;N^tldX__m!@Ake zKO#O?8d&kG6srIaeluE{nMGqe<^A#Z!IAeV|H1ejlZ+D%&xJj{?~t$V*_fuEPF)*KZ`p}gyhoc#vToUKk>nm zu6}zcFgAb2&6?k@8WFie8)~KjkB^^H`2oDSFG^u)K4F%^y7rRG z*qq$RDj^)ePjmF)E+aH32p0b+inVRc9TQnq@DU}*+?;8J^uGb2mkHd*Ppza-%nf&j zi<_7c3H)XuY5W@yvY-)Mqt`(f%jkMo{Sm!KP=j~wmk8#U;AzMdITq-yjqo?k?_9{)wwC1u8WX4Ci&eRY1)fZrC@8&`H`uaMeS)FY6 z#`0lrq2~i{BP_-lM#K~XB4==_3$UgPACAf&{^>O~(^zacVA1>!0x zu^ys?galmMmPGh~f&2od0NX=ceslKZS&Mu&2WV!_=vetlA&&$BNy#uaS64pA%F3s` z!B`i_1}YkwJm8WogB(eRRCxtV>9)B<|5_8i!P8&fpKKzIi%wh7@Q$0zA5egSzR&ay zQZD6oc!X5jBx&mjcgz+e0uk-gf1y|Y1lX>NQKmkn$r5w9g{3;>h&_Mf;!t6Y4JF%I zR|DH>|Jb#%shPxHFfC4v=Ekt=T!lJaJA|{-xjvQCi4RalG+BCZl-`v#_>(|wTo08P z%&jy_gZV#~rKNuK^l+dSv(>+0Zau$Tg%|w2LU&4m33XGD+!IUG@!7d+wQID?r>(86 zDPC95)s^94N8nL@+A%wAmLd1U`!BM~qP9)H7K`(GDTCE1tBXEP_Tb!&-Fa~>EiNu* z8h%@?LPy>z4?M9ukb)@@f7eYA#T26 z8E5g|5RwL~6AcH`^gK)tOskuiL;CI1($Cv4^qFSR$2CFS+g%wI_Bn&<&4SPl&AS?H zmZ%Q=k}_CFvMTy-f4YlW%8>JZO3Xcr{QPRlGoV`PGORa^Nk z)Lj$ev1gfsh)SJgFW2e9pz`a;racBG%E)f zB4x@B8$?UL)8ofIq7j~Z;_)#lCkB}+0yk=wP`G7K|1Q$eHC0Q$^AdKrAJt_0{EXXs zo`A}5XH~HrX$9|m;Cloiw|^HwGvO-9H-OyelBr?cO8TqkF%P$ch&xU$0h?v|GWaf| z8TxePn?d|f@-Zv>C8gWmHyO7)R&1%f!Oqj+kXW+R<_T1sJk_l$TO|QO4s?%DH9(R$)L$@jUkHH8&kD4(nUkzh<)?0L|Ih~2%)YAq+a(s z;5H9x5EN5mt%lt*^98iey9y(|3owPuf6v~NHac;Dn7n?w=IR2m#tNpKNYQ4~HBHg; zY@K0=w=Onf{!J6ZN^i@$H4n>O%mU17E7s*ydbJ=nMSQ>seE*mQ?E$v=A8QsH> zfp<=)(6ke#bT@fWpd)mNPbLu4I?CSKD4KdzU0h0yjJ3QcRGTGYB#7m!;x=Cs4gp<3 z{&h~9fSU>~FU#k0K6;YBhLyR@6VhEL2s!A}Gt}y%t~jMw@6PD5bbRdau-HoaX~-uE zmIzG}?ftChcb~E5-6d9BVZu*1Td^)eGA7)OtlNd%myRCc7Ogdxcu$hkMofC1fxrp9 zy~Qv`e9hKW0WYk6>{en4-|^oif4{ZV(Ki#tb9b~K5vlCh5T6y{Aol(94DHev-4h0} zKaa0AwqsoqAo~~l>4@0j{b=`w=P_Ne{0^Y#Q_t`rYU>F3_l0RDTo}=utmGp0f*tMN z6zl8j)m_-Iip`QDpUY}$x|3F~Dwn(<{A%^q+n^7bC3 zy+skctkzfz2@c$h8I#U_-;m7GeEqy%{6d8w>vuT2>V-R4`2c@^2s{rQ`M;|pD?bev z9U1iXYhjzl3w3t6ta;7{xyP%rMO4Pmw4QwL2V;9@o-M5t=OETuN5U9Be*aa}_L6;# z`|Fewf}T#RIXTj7yC(yt86Wb%I-07xYaSz9iD}FNZ&{!poVewuJWDi)UHZ>35`x`_ z0$@Rvb*zJ#UN_ZNeU8|z)Tm$YlAaBi%Q;3dTmIu?j*@mX22o~jJA+SdTj$?UowxtBg63&ALxD{+W+2(jk6FZ^Wka#V*Z1v*oQX z(y~}?QPvf%*M@L-iomcE``uCGJ^qWsFXq0Rm-OGML=YyW#usgNlku81g`e~j zKs8r72PTsHwYRU&VM;jt8SL3{G#Bkl#qhg(FkvVj&^=Ny30k5)JcF_4W{86EbWK=R z4=X+78Z(hdWiuu`d$}R`w#?r}SJ>%9bx4=2Xq9pv33=#Rv|!lz?-1)L9YR`P@tb%x-g8c?#jh-U(_7@0&u1G^OQ| zv9=L+8JWlDWFD8hXR5R2u@96+Z0wXd#%H0EVVKsPFHv0qN8AKF(KcpoPV25{P#rVh zhAer*>!l%Z3u|`7-fWl`Z!a151K#$W9@x2TjBO{pR~qgbR>1^SXGY}5X7UUKAMYls?BZuXHdn*@hpHYF1Q4M#GO>$^$#tRBQBmg5Lozy!F6^vCM3ahFU0#cOT!%Dq2`-?Qhh3`Z`oc4PjE~V@ z*Y|%gk1+8HiH#_h6B4DiQi1%20t5=nHV}v%ChYs8@_)QU??i6%Bn&=_ev@l>lb|lOV+Wds2T}dY*Z8qnLnKZT zk)Gp^chTxjmpLQ`!x8?P91jd&bgpXcU^fBQ0#<>T*FS%7Jy(r8T9o8UN7eVU`#jFw zsAy^9Cy?0}6bR?7Mc7ETscfo)UO(sQ z5n|6&9iUKANmvkR%Q1gnqyFOpH&HOLvU)ZXwcx=v4)LDy=O`STa;~U~Nb7?oK5^6wI zTFhi+gRqog4JwwImleWso+H_b51jL3=y<)Nd|v`g9ekvBYgdq05E2mygxhKHRQ1w^ z?y@<>e<(f0eWd!+dfz@>gc>urw?>`EYaP=Ukp^-G^bj9#6 z=M}xG`p>$yn(_n*`<{P^t!%2;1s8?_ArQ#TDLtnivf7`?gAlf4axb7m*-#TP^U_xk`k_A%K}oksppn~7_`&LI zN?%`(UK8S&&@1fbNttPNXyY2sGql^!&I*n$lx{uPxt&L_FgGX0nU_0=~dX_*cSV|eSGMmU&CU|8Fysk3@5SG z&FcTrx^izt3-Zt&c`)#SceRSkVbAJ~vdtBJA6A_?60%;jpx5{cCWRTZjt91nsM+-V z8FE&iUIsl|s11f%Ffw=vf=)ai{OS;|)eI~^At;m`zsOAXN;c@KQDr%lX}a<&B_o6$X&3 z94;OAP~)8V;GC4iqUOstA>!jizaY}UHm9brG!OrI)2$LMgtW9hK24IEr~+Ae=FhO@ zOq^r{m?5{J0%{-JP!Z0cK@^wf2}!g!H9s2}n#F0>jzoPF6t(L~Q-*JDlay|&G@Q>@ z1t;x9I^l>bAAZ$H66Q}|EQ1oK7FQ_q)#CkW>3!wwOfUJY7fUc26ne$Pe!f-zqA%Fr zfAT$pCI|qA<@l+5x^%$K|GMHwV-0mWh1Z-C@*-Og$rEqGl=>g2p2hc$I*DWqu7Hcd z4XR6gjX+Z|l>j$#sFncqS5Yea4G`GS=NCf+tUP*}U(mGnxE(ZtdfQfTt|`GnJfeJm zE!4sP-;tZSJ#6EOOh$I~+FH8abb)`yOXa5d_!gTqZD&}Nr_9f}QLjTx!IkA{xx(Q_ zV*M{mt60mx0>LObm{68PATaQbm}5LsOe#1*pOcJ(m}+fCL)js9Q(`B(qsBaHWT;)$l6#xlqSh_sxxT zXNPm%;Zt(?i1XC+w8bfGm~d!fBgDdpEB{v@>@76W*tcyHeY}Yzl&rv#d=I~=@a^8$ z3QEs2;CXFtyjG$~Ww##(baJJ34;z38qSxJt!7Z0bLVpFcqNhOpeB|Z&GN}t@hjLNl zHW%y`rh3g{q}`}+$nA{j^L?zb%F5n+s16r?*@SN#^?yPkt>jo9&C+fc1$ES!HCqEt zCF(!=<&j}WoQw*7&wb8V>2gMfA(ShaB&^H4*b-BiQ;r%N^rv%RS%30x`C0BFETsZ5 z9=_o2erED#LgD&Fnq;4ppFivV-o3?d#)!Y`P@JP)TYtFb!{*l6qy#~{=|WrrJ#6{E zRb9d1)u?iuY=w}NRJgyX5Ux36ek%)p_>R^5eqA6l&6dIx8yv#J5>C%#8du6+TXpa& znr2UboR<}={GSAop%Hu|;gkjCdWtgrS|3CR2-;>9_*R@$ki&7CLVq(~=>0e+nAwam zzoEWbuQ7e->P-KOE3u4+KjDgTmpeUu{qtC??;l+H3g+Xr*5pXaFo*poH`BuNJnzfzK%?Co0FHzr7wR2vs?} zgE7Q7bFKgSA795kqs-=yjPon4p~7PO4z<6V#~LJ-UeeAdr{dn;-psYNeeU=6idH-q zw>KhcY9!)cf%=n#=PYRCb?psaaLPZhxU4L{vg1FVGTcJ89}RGQUUL8DaP66s4}Vx# z7}wdbQTwoL4uVb@c?N%DFtgr`(bVSF<<$1+1CVq4l$(C@h#;+vFX}e!f{BG?ZcT0E z`wg!)K^}OKYTk+Ew?QL$eO4trMNE5ZJj<-C5&QbWPST1JEpq8kg}`77X!N21Af`hC zD?lQwm*b;qvE;kaEvw)^iX;k{IWwu17b$#Dv^b}>MOf6o*k$~XWLo;}B?TP%Q- zjZyOCLgHBe2?X6r^3dy!lK*p7)%eQ1rEE^SJ?GNd?pBLHWI5|ACP)mG$nf&`X1=_6 z5VOI8aM7SY^@l2c{9W$#idX_$g8m^^P{*TjhK|p?1&_aQFl1`&KG!Zvx|TN}Pc{xeyr)Ge*87+MGyoJtV$SguKNZLD1L3}$Z?G&z|>TAZ7wr!cjI%k4Yy zV&o@FVdJleg4_hlE8G}~V<+>DJhi0ucQMJZb+Wd-D@P#EFG!ARfkS@oUt3;dtq`Dt z6Qw4vv!AolvZBl6XWt1nTHCoZmt`%>y&F4HQkF?{e0Z5dFTYPZ6n(XKa~tp(P%w`i zSXt4b`sWoHS^LIz5gq~QXulw^m`4Y+CzQQ9T7nbmb@=da+@|+o6IO^?Ib&z+q`Aop3n~jj=A3= zAQ|3`3sw>)j)jIkYdPZ!9iP9m_Y0>3e~EuaPnPntyiXL(&MX9pH)jO|X((;Q?`{j) zvlpGf4YG!&n6**vB7@6A*9`{8rS)fQJ?)h*5Gi&i!ve2bp&LDv4qqCQfCcuCfPfOX zQViEmcGnnEU4;bS&W4d(`k5Ruom5It&`h9H3{~> z8@0;kBo&6wR=Y(rK7E~?U>%}rbt!VXIV87EwlQ6(d>YBF3&H~j`$2L%csO$Fh#q&} zIM=V5RR#0!h2y7w@nDIklmkOjwYMWT)30snKclKW3wNeyWwfnP{iS%n$uqJJ_;)|4 zW$W_CuU}UiuEGW#fC_4MZ!DSE2UJww2u|DOoLZ{An~Y6mSm&hWv&_x<+~%b6JRVK_ z(voBsNIb54GpLOWdRqO$P>4~Y9L}X*oE4S_s6A0GpAuF5uesdHcuL|`A>?Q3+8abf zdxY87X6Gx8W#jW~(IlM*TUKvOe);T>xc@nwrgtX)c-{|Ca<)pAEQiB&d#GirV4>ET z9f-lO9T}dRm__7Vu$Uk`^?PgM9@u7&gY?1HOQK)dpsxR3BF*I-A=jPHX{PWMndVi8 zqGH#e{_{OX4?<)RvS9-XcIJ40;368bPmsE1x*FQ&k}w#uJzc`b*cN|Qz9SD_Z}qa% z^&T;c08j!DYXVKbgzlG&{VC!a)gMTN2518Fo!v=0{0@Tf_zag0ScTM=3N?(`QJc?& z;p#R>eQSdWNl`SAYAI-0_|d{$CYEGhm|4<-F}c<|QIfZYCRB%V#dd3|%zkT&QB-h? zXkAtYKi@MP{XPmzdvCsD^YE&IjTG_((0VooM+JC?P3I2}(R2jgsrmxCl^6DDC@we- zd?~$|IfWU#4VeU~sZ^2Gy-65#f>ST1T&}*)eqt(o>B6+?q zlH~GPBXM(bD(PTEUqagiA?XEP#h|9LD`o#6$sBNu;|HaR5v7z@L;}|EGa(%wNM|WcCgXVATY<4{QFc7=F%VBQZC{% zr$TiCo88`L?w_L9(hfWd(P%wjC-3H~fB-;o>f%C3W(}u7E}Z*T2+g6W?DxfB?bvY&-1y5F?;tbzM>Ea zMyA}39V5UNxy4LrC^>I_B?TmnVh#x`$z#NO+cxm@&e7rbdu^{f^b z@H|>d0BpLKF;BW!OmN*zTT#2in;QfqL<$ND+E!=G-hmrx3O-3g#&&`?fTulbC~F&^*~|VXi%p_`r4aez>%&yWhoX(YI~IwbE2y)BupsJ>DA9j4M{XB8IN{PdwCNz6!zva)}d?NiS; zH|GBS;ZzF`zdQhtE?I|L)`VaDd&r)2F7A?hza7PBsc?{omU+_k>wrGaLoBbneEMi; z%+BA2)!xMy{Ny$|JQi)3;hiIg6++qDn^D4%p`yZTBrCoohhtR^FAh3`&^o>ymeBWX zga6trrjuhhAQCia%p!@12ps&KRsL8(SExWi#>gAIy!_?R>y~YBj zw7qn7c}f;PL`6lHFRCda;(-=esB%e6?UJm~MwXSdDCt;xRa_h=uc<04VZcvrf~Bmi z9G4zX`!CDUri6L+4z|+ep`oQ68XhJS5O{Nwcz1dL7z^~jaae7FN(tfx+dEhv5D*Yv zPgAn>#D#@lu2S=I0MPl8AOMi-l$x6P-M1u>kcjz8(UzVeq~&CEc4KT}0zd*p010`! z-+W%Tple+@XK6Z6MMXs?d{v;>%DU8izGwAC`&Yk_dCr(Slf5NOpM^FDUWORsVcNO`E3v6*i zzV6t~npsp`9U~;HP4%4m0tp30!rZr1FtBO5LbJQO&i@u~H!uZIfS-u_A_U z;SuCaygNe>8=Yzhun<^Z#&_J>;hST>0+cd}G?D@?#^|;minFOQMdkUs%}cCF2?_5A zIPg8!RVadnsJjx70&&^*=8Z3IkJ4`T@^=`Pa}p4^YqqW5UYa$HQw*!lBu zN*%TsY3nR|)N~g~ErwkGtSMzih*?=xoV(r_K{7vR%D3w?h1{K|1$cgTK{BNZuJxB4 zDZ{59dHoEAvV?oRfl`8;20{beL<;@g;coM8{7JiDaI$Tf$z5aJ$u_bhMs%Hd1?SuS zvllE4t>H!+J{*A-ek}7Nua+bLsY7^ei8Iu-W!Pz;7vy~4UcgLN0rab+Y$ezmOad9_ zFt08LM~CuCi1trOd8@=sSSF9kO5JzXA13l zbF|FN%=WqXtkk|l0yOQ8*QN8#nIkqfwrkySz##e7%>y6&4+uX^&^bKpn znHi=iyyP7%Xooy{`VQ6ocg#wUZh62eE>kBfqVoRf(VdSj6)gr(n1}tPNS?M)ii(v4 z1(hmAd8Hbhf(nIA(IQ_f+`j^&zhi;C?aO@eGqQq{b5{Dm0BS!e37}L}42WjI10w<$ z6F>$LxS$PFAMc~m!!zTX%wb#Vh}wM=~%#p6YM&)ux9X@CvpEs=({01fN7VmToo}IMst?kWqH%x$^X%; z6{ zkN2ZaRYBZ)an<_|i{^N-ehSiLrZuRI*vIqax2Lx_6CSMu%r(qI^}8*(w1Mi7M12kDv+vjZrX}YGpIw&I z3=DJ;-kv)9*JBpLoY$}?12HZC46Kna`K_{*9baN6oP1dLgzJZrRMh%bbll+W?Xs@o;g>Ool zX8n!6v+in~_vvF;J01c$ZG*qYT@6w(U$5+X9OxjQ46CE6dclIk7-e3GDQi|;92E-0 z@zB(}H9PZIL%-73s0TPu3CXKB(@5g;yXi_0lYeLeg9X4;6vZ)&82-^vM;P0Aw!Fdu z-#aUfFsBP=^ZUp@Z3`>zjRN)$EI%xoYLMnrGgN8xs;U#TG}iYSo?ne5+$js`sm9Q9X{49m zPZ{Is(Rg>I2x9?&dyzaOm+&DZ7srj21A>}nm*~#hX~XTQzBaS^@CW$It3_A_!6!#D zj=8Fvv^*P4^0%UK5cYAs{&pw@U3?mzIa88d5YF%kXEdcT zwVSlfPVmS8Lse$SpS9e*FF$={b;ES6@qB&sLc0+&9=g7KI69hp=uuO`Ywiu~)H*d0 za)dvlv1Iz@^)a5*^5L|H-`l7@RAD#&L3s`(Jb?dtZRW?!f$LoWhz5{&kn=!rnx$IY}(s8>8YR#L0`)3tQl;3O0&diI& zZzg+NTF|s)7vC=z6|X1`YMcGmFEf zhfu9fuSJP=DeSJ6_Hq_G9}2h?KVJ>Ow1!2w13!4-hTwW>#?L~U4C;+9sD#$^D(mvU)e}x&D}@!)u5$>k z0u@7FXDCZb1ZLhgqD0~I4LIKoJ0C3fvo#VH@`g+|{%6RoR-#Q}cL^{qw^*=qyvDbY z+1=G;i-PnKQboX`5h}3_`T4&*=B#IqMC?p6NyMpTs}1WL*z%vfSP{Ao#T5bR4wWCn z?LJf& zLlMzv2G&S%s{c1e*#x)NLry`lRk)5Q*{%co{$i9MCoGa%xv981ku3WCxvXVcq4rP#flLa~V$h!s2F#8Z%qtdvo7DGg zir;uAWYLvfBU6HX=YRi5ch6*IqZ=h5%~!{f-CJG&^YYPG`iz}*$b#VwpCu}q^1hl$ zOE;`eIxe^VRQYTG@~TyF7rK0_CwJ@K_|_ELbe84ql<2jDg@}F}D#h$CGY=E|^w!g4 zGo8_QQ7jTvqT!z_I0^!~0A-~xmH7(k0od!r+t$+$k9hXkXQ}{hp2(b?7k=r zzd!V(orHWhdG;JNK7PJ$?;`OKnjfDd>(dfCo@oPCnLE5I-Y>j1vdqvj9E143ezU)s z=vdNItH&~7JVuey3Wovu*wi>V!c&%8A~xCu66&9K<^JXWe1VHZMK`Ez#;HZSc=C{- zOnoyu5*i6h!)qpoyh2Q#;9BZ>Zd2taVUF5JXJj_@Me|&my}USg@Md#{mBn+rHy^|` zJzk4eF<{My`g(6Uhzkq5V~~WhcAXyJqAO=Torc%Q0bS;$II>kbu~bXkK5sgLp_S6; z3EaakD0R+Eyl%0tWpbBtSnSeqi`C*#>{mn2Rw4LT=t~M(^@K;?;FD4#z4@4I8W5N)%MMkUrO`t$O3^l9<*m9JDc9?9fuCnL&~fe5w<7bAl~(M3xMCuy<*{vTkbpv?V(8D= zMu5u26C?Tg(q&vcv_2@P#S(a91ML?vb3;nz6%c|7=ALz0oPDoeogFz#mA-iHJF0JF zQ&Q0p7LJ6Lkb$agu`IR3H!n{5vY}~NQdZ*Gc$B0(Jvk{P=EaLHk@)N;23O1Ta6wN$ zTCQ0a3jp!~@yAH|lfTLmv9o`tr{u4+nIE}1*oWS4Z-*>+ev*8ntYeMIF$Z0%hqd^7 z6hYeK6&+$&{v$lNX>FxpPmK-^BmMw#3Zpi~Y#oMv;r`wlX1(i{zJOg|1#>u#OvAH1 zptMdFH;5v}#TAAl_)MPG%KcjN4{G(1B(}=9;|je(+na_!$J43R$8>?06Ixhg!jQeb z%>kL3N{qdYw{(I9#GBE#_a8*{(mwD*gR)_^+$f;HEKi zdQ`8ezEN3oX$@&xM5KvqGInciR%x)d&n^u=4c+2csxJZjw) z<3DX4SNE3!{A5r49E%{ct;Biy<^FBo*8p-Uq>0-^!x~gfgYZ2Y)5piKq=DE8wOcoe^5B<~P5? z$Ssw)>kWe?X#y9Wj!~)#84NfJ3)c6uA^gfUAEA|w^*c5^v9p?cTu4-oadbAHVYR^N zL2>Ss_*H=z4g#6IeLbxY17b%0s$g^J&z&Xsoj11gEyp|S-QsK%7LG*-mDUbI!e-db zQ0YMBm!~KzWph+_%&+vg^be7*YapIok`UNeN0h>?+CBfNKIz z2rAUK>VtfOoT>@y6V_EKo6?4-C$gI}hMb;rpCCJU=g?-5hW8HQ2zXLoDq*=Q5lkOW zo~XR};zF+Al~q)PwvbI1$|>F7RLms|BTms>ZI?tPo3}&3<|S6+*jq5tuE^aEJEqvS zQKINILHc$WG$1E>uMv8_$zPpgEf$9$>6G0+pWBVBQ#zrIbf9t&m5z|r%R8V0pF$a8 z{}I{f%f_1xq_qhC1oDkVxVA>TCU`9K?fMsGLt*)K|MY-vji6+IK(HNFtuY?f(eB6; z)x6dP(`ogTc2TNjFKKCcb`t+`7F>9F`pZ^7wY&`L?DX~>4>W^i!sa5-{z#WNi$=hN z)p~`FZ(C`aAV!z2gKcPKBFsx~KC&7%*<{droF>w>6Q1%Q%4}Q85Hl)Rmp^~^Bv9|V zCN{iGa&^)2cSc!wMME`sHD8k^aMr#5=*fO(Q{=Qjp!v}{$28RL`pH@zrN^kMPEF1JP}YPKOe{zP2jN?qoPgLk z*+`Eb&d-gMo*Uft!xT%8(qm`DVhBU|9*3FVvUo8x2Zt>%ibWY#@R5V;tXk1 ztNA%mQIo*RBBnu6LqkH0)0u5(?L_7MOT%SViHR!hd)DzY{1?JfQd)@Up+6-h*egaG z*oH9jD{Js9Ovo#2M(a5^r(oI-W|UPXXBEYqtXS#kWt1gL{dn5GaBSMS}*2S}5;__cL)7S`6@ zq)tvw4okjUH!LE4{Abik*)G9n%F4KAp2yuNMCka7ixNYnWXy-RuNl|$V_y$kldWxZhdRqWr&t;TT+=H z*u%ltMfee(4sur za7S}haPEc?Rprzu_(oUxsBGSM#J61ZIW*rWSy<53=o9x=`Msi* zN!xctta{Pw%}6vFbVv=Mf2?r>;)Ta6t#^TojWz_UaCU8;U@og!%hTo1kCzkt^@&0G zhlzuqmP*8ZD@A2iKP44Q=9;y|pcdUTbss=ya&kIxbw&bvi^RBdMuyCcfv(*?$4qEP z{|G~<43<6bPbZ0)NeQhDLqKd}G&HM0rZV#xdWJZpmDI0%ZjV)%yXbpv!OBuw6cI1cPJqL&3TJeLH;4fFbEKZBm ze1jEE>s|J?Uve+zfsFous#F3NWv<;p82D6GbNGzadg?Pjv28%^2}2H{KhQ4WzDrhFdA_VtU-DCg1DZLS)HE&K3C7?wW7Dmt_%Ip8-IpD`U37)v75ohGw za(@+#gz&i#?UZ~6iVqqN*71JRr==_pez`Vr_mASA z^s?zlAqA>?>|)0{1CsIyU(&ttms4huGTi=lkBT zdiG_+QOyjZz=qVR3>y=!S%K+Jevs00s}SpvZV8|d3U92Ov^n%Pyi*;`_hSjbRts4* zmM!BAvldx|fXO=!{XWTj7nh|(Myd!r#(TyTLo=GJWD)|2FZ?Za7FGwsy1rQFA6_DV zWotD3oG`)@q%|r+jwn)hiXAX=9Z%1d6Fcapgl*{e#ZZ&v&8pP(NQfjx5Tu@cm6&jf zPDwDr1ku_EUqm!ZjjeKXRZ0HV7=KxctokxgC)P4I16t#QS#H+w3(n+7uC066mqG?G z(+w8TaZ%h`&gT^8A8d4l(JFvJ)<^OOGxv5(!C7U-52;Zn)YK@2cG62#;&O1gtcgyM zh)VWm9uuN;p~aI}jM0v=L`pHHOG-4nzqIGxdL^vva-cp=SXzQIT5*iUBn9EWzV=0) z*(ag_TO9-kSu#9MQ%oh!gc?O)3z+g*Ca)WXdL4`lO|Iw)tzYO4ESW!kvVId4b-b+> zn29D>As#Lfvv-XrYhA_$>6h+Arh4IbYnFnfS=V~5-{N*ewNd(=J_m8lTm*%vzfT{x zbVIkVAj++2_(m;A<4w0(Lg7G_42?7Bn}HA9>HX9K1ezc!!xw+J3C%&mx8VXYyLEL_ zWFyRFakMqTx7(es!riTS-iW1mS@VyYLmbq;;UC_ABO3m+l zeyA50n@+blOc&R!>fX6_HigMD&PwAY*rTc&Qc1k-Mcfxj2noS@pVCX1!e76BfQSFY z&?%uU^nZ;2zfoArnWS!lyKnQkSJ=XuX|B$H212(P?%;f<$%>w9zF*oftTN-Be_z{Y zb=P+{Y#3{d3E$}J@Qc6B@S`P{u!crN824wm2oeXp7Q;B_7kgl@1;%;A2Frz*V*(Ao zI)Tk;kI0)Nv&@G^`DDeTapkxA!vl)^^%6sT!4A`2Eh2?x(H#3%Weq4T!}P>#J#UeaI2;Q8 zS6_6|P|s#&Nu&Nn2i4->)0e|TGU^Kyx6|d^BFZGFC#d2A2)DP2rXUKan5G3}D${{g zdGtS48pbY(|2dJJE;kEb@?Esazt1AMw7e~MR1joBxx|;9k>|pvdE4TM%L0k{igTgy z(=Rbyw-8EfDb4BZe*hT01D9A7>;x1SRg}qPlL4F3T`%SgjtD67p3cQ+ZpXipWykH_ z6L1JgjRS+EKkBp~?R6MR4)=~7eNc9qhTTP_=9ZTJ$+qS)O@Jpsra(nek(%4sOYB1^p?M?lqZ&lWq)05hZ#~+^^`8rKL!Z1CYDzv~pdZa6AaEWL2e-;+K42OClJCTKdvw z3*pviG>2Avnz767Kh9At2l+r>(9g=cWWJC(=5WRf9O{r7zf!&X*qI6JNx-WpVKQpI z`RmKu5>{oPHI@zG?(Mu;w{;nTn)E30y^10Ru6sYiA>1zz!(z^(WLGc~D4wX+6z z^hq+HRd04_hg^ftprU#g?p6bQhTTI#8M%+wzo+*+#W>*5TTIc^P|CZ;)&e&gAx7e| zekb;vIzz&;mZy@jCp8cs)xaa0#2%PF){@Dqs+#(zZ`Y;g`r;xBrtCN;Bql28wE=+9 zm?XtranJA&;(y-OAS^s08l=zeMa~1}^@q*i5Ucwl9w+45z>&u{B3f0eBj8n zFvOta-;EEUe#I@VtDL5;tb6yO>4rKZJV3dSKh^e&2t>P|(S%QM`65YU7XhW5<8iaC zi%-*&9^}WZb5BhX?GMlZe47X)sdoiV7HwPBlIzPSxJ_1DBiu{DZ-GGAa=~dF)*d6kR3IEu z&kyRrcO0~Y6MWK$I(DI`Z9*LM48Oc7ArM30hVoXpd%TE7_y4i=l~HkY z!L|bgNJ4->a18|4;4TU7?(XjH5Fog_ySqCC5AN>n?*4l6t$Ww|ar;lQW@RSbr%%<{ zRkdpuU2n7;pgEA)VoM1M5nK!k1cRK{S<4K!q*HQC?G3n>&%sv0hn!Ywm7qYQH&32J zA0{-*RF2PlFXY&aFOc4jKexP>p~ez7MSxLP6Dn2Epq1Vu0seo_=S!mJ9tE<(UeU4j-cpg%lhrwiJL`1Zvzb}4Qy`-485>QlArCqdn;~GLx=Z6GfX@$>C@~&%;hat1G-#QmsUfVW z7$Fw-LO&=D&V|@T-Pl-AX%54ixEY4gDc0_LT~vz>`7}@CX!o&o_;$C$TUBc4ym-$E za{T@wz2k)A|K2rI%|Gx@as~nf_5Z+<4qrIb}js+oz?v+MZ+$Xo0i}zG*9LyhBYG4pylcAV0VCcYN2mN zIo+J2%jRi&>@_UQyn9XLh1Wykt2(~@x8Q{=S}E6`te)tjNY2fnVa+)rQi}trk>;Xs zwtq)Q^UGKehrD9}wbW|uR8$2A1;DhJPExgsr50Z>TKU{rWfT452N1gQJ0vySxXvh` zp$1BqvBD~D#donYh+ST&XbK9hicB*DCBd#tj9bpV7f`5;uhQ$^bZC<0PXtE}U@#3l zUP!X8^Sx#6s)qReMHo@M#~tfZf|MXKl8bi-{Np)n!^!=_*HgyMxDiR7MH2ckuV z5h?|qlzx+eI{1uV*NQMK`$V!C?lz~i^zTW&=JB;hCB4?r$&1-R3AaC>QkgEqkXXTW%>|K#{ZM0@G|JEGkM!T!UfdOH4#etg~+&1phlmMiEOw!-%C>OZZz( zdu*A{Z0qe~z%h5#2X+b!0_rdU>8=<(nHd`*rUtZ@idFq9u5rbr!CXwcpapb4pM1vO zDRN}&2i~>Ud!=nNo$AEIB!$@4E-f6vlaKop5nEdgJZ`( zvvIWQyAnz)NtS`BxX}$1ps_U4&cJfP=*j-xqHvUvgnZC?yOC!EYD%3kK~J|SWZsv+ zx%|>&ql&4=ibTHweLN!m8KduSsLmZTK4`dh_WRf+mbCX<7A#dHZpiVui1~+0NSbJM z_=~5xjz1`0-ovf&+K9m~mOCjM)MIfiT!<$#Ce5_a1nr}P8nCDPgdwhLKOI5}h*tIg(|Y z>XYC4|);gz(O7#5hG|f{>O2f`@{-Vyyj**%54_ zoH#!f6j&z|O!Ny@zqWp??e`4Z>9NVhbLbsfinlO{!yv;Pm-Y0O>7#MK&q6cRiXgDQ zp(o*J{N825VyDpRt&77s`;Enrz%&Qdn;ned6czJHSc0F6OZaCMK6_9GXar#vVvA^M z+be2)^(WzeO4V6s&3J>2UC9Kop-*zlSU zlr3#U^ zmHCK?9rkR}zxa%q3XQEn@(U0V{n*$fG8k`aq6S&%SpN+q6hF#mn9h^ea0eA< z&KWOtK|rdjrW0O_<@E}b=j#G|EcFfagWSi(Epy?kzw9(R-=cis#_r@FYFjgnInf;` zdyIeBy@q&cWBWTeSWR$9ARXWqm^*eOGY6fUxOG0kB@g;xTk^cG*gB@IBqU_7^ef0JnwVj+4^Rc9$psl$u zC#SAcm}YW z&hzfNvt&_|YXKXZbyOM5QG5Z<)~a>CyJ2VLmR9`0QeIeCwGa)z(oEj%Hx4Fr=S9U} zi@{n`&U+JRNuVSB3zcqwP$_F$qAYBb!W^f*N;{s*8t#pOlx-S;5%s4K=M1kFU{u|$ z5Z`Am1dL*H#WdBY9dFMP5;u<*YLd9zm@WQ6$Imj z;v`*N(W2ao0hQ%8rB4zI?~WIRJUsA=Hd5x@L?*?y$MZq;_=CChYL^fWgK6fO2O=)h z(bb%)?J|Fh>-96aUh2$0A`pH3>dm>nzYD4t%nuIy7YDh5GnT-+%%JOy@_Kj=2%0;l ziFq1Y!YAcXL%q=e;+|y%HSAWG{SRY^>#C7)h-tlyZTtgMH+H0iv@gsCWhcXQ(e{|r z3R)sFFHpJg$5vMZ;(Y@Vn^tdE+?VXwbTOE}T3b1>E7qV*F{vp1Yp*#$yBz*Mwb;Dy zx8ND+hYpG4-nelEe<@8t;nb*gUH%<1_PmA;VvF|R*gry6gG3+A%`P$fbA^99O=mf=RrPV{ zyK?+{@0@a$8Iyph5ZYXAtZDra)x+>Q;)KV2eQxt)8gEfJ~Ru z0^bl#IEr`BEk*pXMd!*NP5wOahU!nszEp++i0Tn#armxSXdo($-QM&>Z1H5Sh~p)e zBs~wj#?CawN}Ssc@kmeKn1->>GYFi6y?q3qRV8g$C(|sovwp+pUyXp2*FTFLH~I4O z^GB|LYWJ!aJkb_LsKt}@`*ufCFbnntZ+!XmA*2WMW0GhYd$Bd!hczm7*WV|rFp{Pw zb3MLGNs_hIp*1Tb+Tt)h6tcElvi&vN7*hBzXT&NeuYp4Hpw~lq$}S{PTO|qB1+e==+hd4EHMCi1J?H>CeKfP=-YScoEfdH*VmA2Gj9uJZZ(B{MuZ<#^qRwSRXM@G zS&pT|76+P@NI5y52WmYaQZyTH_bbr9;I$`v+X<}AnYCU43}sPfa>Wo#PWtf#?$)swR(c);lP)zin=u7X!YS*}qwh3XN?U(2FfhPzOx>*W z`jpp@_e*4O(649qOHFrJZZ1)Dv@J%(fuwC90)FcQjFMbHsAY__A|9WC5G|G| z9uYCFPIr>)E+r+MO+B8HlWQiO!FOAjlm#bJm)&g0P64^OE#qqg>exKh>F%CH;J_UrF*_of(#~8G>L#(N zK)c15ZKaKEzGAIwGVT?`dRQ*d{|fWNHD9XUZn+=R`Hyzfg?LI!;-=e$ute(L^MiC_ zH4WX0dgQ?`q`HU5!*M4i8O)ixUu8L-Y*=c2+u`)>|48aFkw`{usB6NpLqRF)sj6G>ZgOIGWH(bb_QWdebgDx{l8HkR@*n@fp`)YY=kGs($bU}- zo%xL=HP|XOWV&tWa}LEvz)L~gA0ujI0{SuG*mnbq?C?yz7wTmGE^@;ViMNYiUE#VS zmE^j4$Wxr&tjKB$=xtl+Z1w z_g5*kuNfjS@mU6S{v928e(}4q^tU5FEe2UP@mD+VoRJ>(=A_@kwpI?wFb7Lnj3~DX zO0x6w1s!)k^hqk}JsW!f*rs#LIJl{)33%WtqcJ?kak830dnIBt#D8z_z^yg5;M15Do!iZ}` zFF(=jIZ}~B^B6?M&`=y^IHHDzh2=S{uSxXQbsYAFg~h42ULMQq>ggRo;1Tt}w`Q8S z(QAGE?7jqaqS&6_-uCtP!y+Og4h{}#YRIM5Zr~k6=};}&rPj~GGfs37rit->uz?R# z4*vksPHSa)AjdX=q$&H9S+T+C^!Qb8jG5i5T5f(Mypmdd^k7FZciSMm&KGf_Jp_~B zHfWC=@VQ0crA-!r(zny9O&h-SAp zYVi8}Fq}x|3-o0x-QBv>T~f5pQ5i(+A<($c!hD^!XQVKVHVQ_Q5})|^Sb{;yh59z- z!b@Az7y8GOk8!8KU8TY1TRYN3>yy_PI$Z9+UA+4i*{@k*Xw`J%scPu0D*9*Q^H>%@ z!A*JB(zhglD@Gv=lU{M4}2TZ*`?l1U|081rExs4jKQ8bUP$BQN`>iUW^T8v~5*g5KXl z|KvhYEz5M(;t$)^U6&9cWXR4C@hYI(B!4N5H6c2kCdriS<>OTvgcuRu-KmRmoWM1w2ZOH1t}JZ)B2*K+wQIUUxQJJ!sY zxTDmAJm{jTp+=i6k_MW9Nf3^*nK!@#vut1e!-vC+u2;0vOPKS*`vLnWv-PDWoKk~m zdjzA6qsuBv%cymma`eZ?L{+iH{2l-H7lUGvABl zDA+t$5wjEM$%{ZT$n{-r!~t%!ik=?s=)yKlUWCp9;;Xr(5lHR&Awv;tQK{-zNfuCl z0{NF}!O5{D-7B^WAlTB>4(=#w7_(3bScr#~9u7A%7+(uHVZ_wWgFk>(tqCWjq#QbU zc63eo7!?=SOT7tk?MO)bE#$WPikE4!x|*M>R9|2m7ldPo1r=F8hN_|>fVY#rwSeV0 zbB6%IbT1gcdD0vfUz_$HYQ$zjN+V$}FIxIZ+hfTyy^a`m`VdGTPj@O>|^OHqdE^JU|JIZuKc+ z4g1xFB9c}7>Yh(YNpCkWiEdR-9F^K^)d4TEh%HPBd_5)_ud!te2HKyEuo?`>J5tHx z`!%}0nIn!%sp&CESiIQZ-O4IyK-*Vp5Bz9`cm$+=j8|iBN>ts(>3E>MOXgh6-Dx2* z>y!}#Nt!+s(^}8yAi%SMxJ^eJC#f%*H35TKxz3um+v> zUV?Q3TU#w#!ipI3GxyNcR4VHPD3NH|Tbe{M*EDx-`QV}u4-l*4{dbCF?5bq0l+{(& zUu_8+2PUGnLbSC!+M}s##`{awlWYFJ`B~^Eb3UxmU{<32*%Gru(f~tItzC{@=oEa2 z^=(GqSWi}5b5XxKeT=t@$9AgvAj7m8Bq7-lRtr{W@8%M*pkd=5a!zwGC*;F%_Cwe? z+JLH#x+@fjqks%5(+as~88iCqLGrhYZ3RJqz$@{%rbGr)G#S#6-1+Po$ZSwP(B8I25bI*qqmTS-3jskQLU zz?Z>vk)NrJNtC}HM!UMWiur`|!-^PHA_9=uf_#2v#Y=L);q(}2Ye0h0!pW4hP_v|V-;4!c_ zX?wqR#(ywG;7;G4(Ow@gFP{8i+V0t>r`BVbO7qdV%zmZ_jgA7mR|w=%nFY=U7%fIJ zeY{Ys=V>1YEG{n7qLJQ***8E?AGae5-4~fpj=n>nk{bv&d)Qx4_v}o6RB7R(hrDYh z9tA1yn`_^!80yxOf2sV2f90PJQomFaU>Tot@f~u&m9`CZ2wEZfEt!QbY@@~Z?X!*{ zB(HbaN=%zG=8@gAB*VCOdpozAWu1*-4D^o+1N9~CPb(~J%`89pi@@(Nz%rv{0VlKn z_tMBdH=V#fWniC06%j*9?&%J&J;sx5g3U&>+vj7_#8SVjJAFEWcaajOBesVZ7)#a# zq#%uc&T>OF`_wRxGD2O))wJvvkt-5gNd0j__& za;rX27M!lWOVY)k;`%lqz8dnB^l_Jh4cs3-;w$_tm1jdfpN@y8vyMsIUTXmIZlm!q%zskP@YI#Um|km#J=Z`QsIb^1k6QA%?d=d#|YB!&QpIdWGx zMv5tu$Y_{JCd8sbhp9^A19Iy0De)+Zk1vz@7xa*vOEpNc<-rj$U()7TNNtT!&^&rq zm!80wR;phO;ZJZ1)GuVaV4<_#D1Ouczz{myuF?ztlU*MAdg%VxwE0(Sv z@ftzBx&*z=5}oZHx)<(tkdm#&`GAq=EGkN!}$)3%&1yL3Ch`Eefm&izMp z+EP0Hs+g1&2WS!Q?rn&4R+MzTsY63(3^bT%h943$TTD9jGP4W$*|n^84SJH zDYY_5QO<>16a${8sF2{Kai5b9a|~#dA>LJGg+eGJofO86i&b~b-}wmkK8uK z0+W5>!;63VCohlpl9C}GTI9wyH@?ZpV2))G&VOn3QE%d!J}nh9zlu)9WVad({Bh6 zjp!vHMyI{)`1>?f?yrRWhNSO%LGb?KF$s>AL2OYzXh&|TJLNa@?r0+om+S-$Yr02= zwd1L`Ir}id%}ms^AS~-@@qeA+QrIsOH%Rg!b#(l(zmN)pSLy17`P((3rVi~Itzzfc z5VpA4w6SvPcV?n!HZ2~%+YUVQ2{XaPsZD(a-F9fi7my*GQkIcZIBt1#rzLzHBzf~b zSYbZAMc0Q0EeSu4s-*7rK*A$oJKpm`+YKoU?DD-vQJhpG0J@9M>MJAi&{I%l`be=v zzshO8Z)hkEmv_#ACJ3)r(DrdzRNqi?*KrxCxcSf;PE;@F3GMlr&_>Mz?=K(&E~?mk ziajsK)5oA686TZjz<_SjG_mdENG~WFKkny9Uw1+{frUZ-t@}m@mrBD1xlkuJ z^b?$The}Q!wvp7pxjr_$d}LJA4?%&5de{`;ZyT}}34#BXQtIiJ&9+~}MgZV}b!3p& z@8M_Rg&mu4Vx>vgYkLt(jgpe${rq1^`30Fb zR3gv@!kB)XNpoCZ(X7a0??_0#2>UcWO^gYL&X036)1 zN7N^iv^i{;b7KfgBAPqe?EK2Wa%gMwGfvXmLV`+@X?@s0rwZ|%pGh|7bWfDoGEXdN z{9Se>zHb$#17HCv$5@p1No)d4m8a}E$nEWI3?@ft5SreO^ern5p#<2+*d^)mES*Bt zR@v{+Z{nkVpDT%#sHe0^Jwx!0)k9v*cZ4!ys+ng_#$Egf3T0Uce{{E6XH=84%!Qdh z*!{x{s{qP=@vvD^{v<)#r~t)H;mfx76*HIl;hehMuLTLi1twS$2on1sTO2?bG}kcN zOM?ZzU8}6Xh|ohKjtFifGw>eGpp+{OUI^6sW0@H?s8}e>F8Wgu^Okw`{z1gDtmbqT zU%4cJqbOQ+7#l`3(=l$f&+6>QBD+pZ2Y!o`NU(a@-PIOBrPH2ZX4GN4Wo80gQ<(Y9 zRnDhEwwAajTIbLtcOhFGcs7>vtE=uYsmqJ{j12q*3BvJzkg#iMZ}IRk>T^AS{m7lU(=qf}<9y z|2fU8HYyy8rYUbVzqrq`;~^A_DOe^Ze?lg%*CpJ zR0vv4P~KU^+bVmGYScgZ_!jCpu)Hak_%NBzqk)$JK%xZERG8DXzbD0p`4Y+j3B986 zrioEWE-5asN8{A+8l*;Di!9tuCSGd%(RcTDVJE*9?$`Nu@2CJ-g zvU@9uO?X$9TUd?x?TGhdg+EfOhV4;F$>IAyYQC%Mts%I?sHlIb&iT79Vanl#GY`mY zJ|LO9Np~(n4;@&Q#m7ogmxFlq;t@ffeXc+@Fghu&8_f!eo`FF|)($BOOlW#O(5f9y zF@MNG@ciBN5eWj!6g30$YtOArf+m{-0hex^3u|9|i z*`rP`v^dc|jjgOlr_e3ko(k9;D*i{WL{HhAe25WlN`c^yS|0ZqJU{R|d#_jaB&(k* z^m*+=39M`Fbbdx=c3t>bZr()%Z7;7vK!p*e4iVR{%~?$#+@doXU}tvo+cd66HaUn& zEj#X09YeqRW}<$Z+LI08}mAhPaPH!MzY(ol|;n^ebBje0C}BHmSyRd zm_~V=l&{_QE>DENXGPF0A9=ESyUD{4KY(y9i(Mpn#ealRX*)VP`lqD;!^(_I>$eIK z#7g~oCUSCeebiYSvu?uhzPvzTaN_cH{KSr%(%1KXJtU$C#{F1nqw#0-$w*Rl$R7x~ z(jm67;Iil+8o1~#S!Qm@flOjPD3ba5bOt@|V7#(Ni%~lh7yKY*Fv>-`Juhr^)oUks zV!frt4Y~2y!^s);suq{9g-Pk#VZ?GAFsMVI@zy&!lVpOo#>bg^{`Mg5^Ephuv)my@ zcFqm_?dBE~_=)8EJUWOElZ8T-7M$jy$%}`gHeO7J)eg#EYY6wa%yl4C1;aF2`d-gI zNsKOYRJP4aNhF2YfZ3Mr?{pfzEeDW>V~RRPf*jm-`rtyzB6GX6<8NBSvA%t6$SI=} z{ggC@mi(z-{AtE(@IHDuM%pA7`E zs2ud_7my&MqYD|jP>!GH0s$%D5GfTl?caV72Q;gD?3rI>&3#y!u-<&3qb4>rJb21>-vl7_5$S)h|c@Yf-nlEaq zRvGdxER1QaSnJ83ihC!XBqcwMB>odl*@7F~e@VmjE>KU(9$I=VI!=lw!NonL{LEf} zKOXF>XUJ_9rxC|}vqL|LIzAngNbnm@V+^`JsW1z|C=9(EtJmRq3rtS_{rfj^ZBFP_ z$4Fm4_k-}DpsH$EYK`UJzrtHCrzzb*D_cEjrkUu_imRL_2So<4S27$F%+%*o`ZoEB-*->UmQmJZ+(n2w{&$bSnF4#1nuBS*g z|Ix3c;#jF$ejfuE%tExwq7L;Uj4K+spxAEz)KdF67-beAQCDwP2SMIGhjlG7=2mY1 z^t4Zb!S8SwqszCHt&+#Pg>?Bnt9xRWmRL2Lo{NgS2hA5wH_iY=tFGyRm_SMvI^{Yj zN_bS7({bX8mK2F(w0(}=s-JU7--U>qQ!eQu0(GaKrP&!ArPt>Cnw!~yLB#eT7N}$6 zcg8JUNo69K*bV~etjo48M%H)Ic-?d|P;E3Q41XUa|x}A-jePf#J#6>LoH3%X#DfM89QIKwCH_uI9TjDzDiY> zYJDCTbJh9MCed5#nNuU-F!9H3upR5y+|$Ox-SnS9pU2x(XV@EL;Q+VYa}-ZizoJJ9#2E$I*uyz)2D$m-@_xf zbn~@^Ki)4QV_xlgdi78zbv8YM_cqHj`vauBzUVk8NdJ(-gIH>KV(Uo|`7P9lNx;Oc zA_*ZAf`Nt}{npll>2^WSG`xBF89|n1O=Ilm@MRo}_UC@Jc`UKe$#F}lSW=lXxI0H3tXDUZ^5d3XD6vv4{R&7Nf zFW8HAXl~l~6+`K-!5h77As2jkIj>h9kcGFauKAMG#su%Jz(=H#Gy2`An4Y<2Lz$>0 z2F_ZI9zEmSHZ;%P#B@kc=P!J94kR0nSD3?G@w`rb@(5b9zL8PRrpMIDWv6Hf|55P|V_7{gNlMO;WPqxY915`{IO);57E0bMHTjilIBgx* zXH8}E`Y`Kz?AuoX<$2BJxqh!b=A-KD_i#(y*(1`@{~h{S|2#v*0h0nb&WTp{XgAfp^5j?xUy> z<8f%ew~}NRk)goN2o5VdR7oX%)7EUwEy)-qxqfEO6kHMpfC62lqB2A*y{xDY!XLi5 zz}Q%nQzOpo{cZYRqXl2n(ZHsrl?JRlB*0p*Ox5sJZf`^RLhWUn?PP0Qh5!^MGp(wy z_W2Eb^fMROLT(|#oXgI2j*{q$qq|r!O@k+MKkO$rjjJa9N#}B7#d-mOB%nlWp7LO5 z)=ZB|=^P20|HV4uYkPEG+66rp$#m_Ai6xoVaDN8@$rcH;%yM8%BqCA6wB;EMWb=1M z&9I3@^IbC57)Mv8lbMOXMMXKeRj5}wzTZ`;Fl#qV$IYh|NRSj#yQ;YsV*BqWq%%U7 z86EmUwJyqT#bx5{$<@ml)#=Z>b-#2yGXkU1jYi|m{=0|l9w3hh0EeNJO|e*3XtKZL zucIzZs0utACdV5xHTvE?`Iov_rf|T>jxEDYE)eqOX5k@fCkYr`FNmg=L$QBw15Ts| zk2O3Kw-H%^;tsuSMbeiY{?m@vE*A)da9$+LI9%El=CvRS-fs-owCm+h*CSU5zP%v7 zME_vpFJLgKN-SxXsr}8s`|jqc^{qqCMmmOs;q7aPIqtpcOq2yP_pnxLxLkUSjdi8A zi}fc0>|d32Onr(joC8e(jj{2A`~C>-bZc-0Q5hS%>)umA@9ar2&kuO)3&rPqt`DZ@ zRB4NFUuLz4wwTJ(IMNTM3Uc&3BHOdY{)VSWiu*g`Q-hzTNpKYgFM+l0LUrJE*eaG) z!~U1F79vdsPk%8qR$?ph*}J!jh9k-TF5@a7G;Dt;?TWkW1w*5T+&UO7 zmB9ZNfiu6c+mwiYGUnhwYD?0EXG5_@8Pzp)M-12*El-`D_K2V`k(7IRO-xKSzQ@He zdXHSjT{qhg4r`$acLb`ogi%pZ1PwVMm|yfGvFPHK;lw_0HDnAYE9Q$0tb4Yj;qL*1 zMTdOxE7kQduIAF-6rWNPGTv!Nj8N(8>qjP){!p`IrKhLIp|nJrAo=_Z15AL-tFMo* zuCBH^0ERAf1RxjSny=Afa#VHPG8>$1h6MoK29`i(Juo~R+$*BS?(xW|39GBgC1*ay z6_~xrm>E<%h>rNljnbVMsH;i^z(PHmA(Oq}$t}0$LSd;xNN zoRZt!-Ew3U#lpdIAAlCrQgTmpR8-W`@KDzq@e2ddRM#-AciuPO-RLLFb80w0iXvKf z$V_%NRn){S{+0wKo0%COK(q-!@FGg!dR*5s$*8Ttym&Bvily-wzBf@_Rxc1|dBG?b zcA@v^L%|1K!eR6OD@$mVAs4t^_k9DZdAC=H*4CeTTs)9b&hWqYBA}%_N;~$Xmd=-@ zI?s>jh>@c0vjS6z5!*ag3e6TP&FTEx2W0F2_TaV-xIX6Dm zSb9-!`%f`eQd38SM7IAf5mJ(Yh{fgl`%7hMo=xkcai@ODb`QUw3*@?Gz7J6TN*DxL zRv$fn%f$N@QBbGJOzH&XL1o)SLnsC|ZPPebkNfrNTt8#lW$IGBx!EvYc%PZ!Dzt2rbJCCt&8#!^ut>;)AfgWW+jz|AL?bV{b= zQaPL6;mnM^E=6%{#X0Sfxfu)nTCuY?4nCPKR z<;?}Z2XpXVff53cx_PCR_-93>reF+L@R@B8!e|*m|pBQ%lRrX4cgBU&xVecoYRqrampVI7JjQ3-cWQ zX*rDc95%IsYIHioLmgQ$SI+*^=C&yi41Qm6tsbL#27$RfCh$>HZRkWT3 zDNU1hzG~+GdkjoD_aNkggOhnPW2o_1heRl78~38}(P*fP;nbFZ_bE1oC1Q4ThbZ`k zRDE_+EU=*x+7IbenE`jNjDYU0gE+H>(d~6s;TV>fb2A2xIM~Pr4T9GUgC0Nrmod*G zZ@v_6;}j z5|YO)4AWottcc2PPOpyot+zPQAqu-yujXm2zJtcJIT=JiQ&}RYna9L#n#d)wB5A{R zr#`lxmi}WggGRODJ3grft#JV+zbqJ*Ea;#0Y{Z#v=i%rXc^}1`EP9-NB^3U8pB5Dp zbCq@l@IbUCq8fb8C~Zu&F@w_bw%1-Xa1#d)Y)?$TZV3HMk7aeZQHHG(B75iPT&nXB zd~>~f@^ycaN!N;h>gD`njp2xHc^*p&?lDMuW^#A5=!TPq_p612G=C)TSIZ1954qHq`fm3S5XffDjRAMUT4p* zi)#PSkMn`J&Be7@1G^meNPSdJ&ToI4u0j<>!RzPzjs z#Aup@K%R5~~L1@PBml z|D(kMXc?Gg{U0~+{W~5c;1tJUwO)5B0I~y@S6ARt;;)2)hK7X6$;q>0)Jru*DJewY zAAyUDoe>PZKoc?`o$KjTTvW92#|P^Ft2wUkG4(!k9xgWTpPb|svM1=9Q;{wdj4;oy>v_ZjAp@R2u9lGM}uD7np0V{e; zSVugkY(`t}DBq952xs3op=fd%Dni$gZ&?#``_#2LWTPorS{|MLyLdPS5!)r5$&KM& za8JH>D&K#EUnGY=-<;*lZ|jXYv*G4TX7m(d!kF7K=(H{iLvBuykrnmz>a!U(&wj#Y zj{Tds)c8&_PZ_-a_jM97X7NyI_CLg^n(=Jp^H099IupN|ow&@)i2cw(Qu4(Wfxe|? z)DOLNTui11s@+CA@%px#j+LWpJ^?Fj%GBus!uJBxwRhF(Yktk?$SCdc27mXyD7U+l zJDk)Rf2zwYt%Vutt>33n5wp|4GE_XBch>qxNA-MJ+Jolf7L*Y|62Mhjj^);$Ol(l; z==87rEOC6>C#$O56GkogcUXQars75zeolLEU*?$d@TXo6tZ-OLZy47utG~wf$(si@ z6t+|Q{nY!=(3_$Hl%k6-E>BYUpPSv0M2n{?IdI1EPIL;7mgvmtxyo)3l}nGjU#l7Z z?V}3w;0G6ZCdR47MNu<5E&~PlT4tt;a~)`6gPCci_-HL@UKtfsKwX(}Mm|#OI&gMY z@uRI>QK?mST~=^cv?x}wXrY;9UVCFHT8p1&X72Y4K9EdsCMoZFT{hK8rs8 z`;7-+GNq&dzmlJsDGXfuP6daD$@oUWKY{BF0Xd(H2)M*$_Sb%N?w#t^Qa>t9CFcZ5 zElvV!V{QE%5M+6qLBYp=%jE*J%u_qu!%8MtJej!KH7v}{bKBZ*wY1i>PL=_|>8X_! zYT$S7sB=!}7!~4VG!>siO6ptRy^PFd7~)%4+&@0bDk|QV6z1jm1GAk;PYzBG35jnY z05#%{;Qh0l+T)FwTYE>x=;Y+blC+Ez7OTm%HQIl_xOGA&AB*}{xRGyr6|#SDkX5ux z;PT+l$fOvV5+mfKMET(IK--o!x!GlvlpPTO z>4`VvaI?L)3$Nayi*9M5brl>_V$jazL85;bU$UGTc z+=@dM@^#ytQ|x;7{IqAMRx#nZ5PyM3FPNIiNqN&Yaq^in+4YY{777sQEO$61?etBC zsu@c;Nl|nMAokxq^GQA>eWhjyYMIFDc?ks?L=^_YLg{JxbM0=91%5#}O-^Zb5BzQO z!wvk##hu)ZJ~lD8)a$>Uow0@@R-9OJC~9Irt+^|LK8Kz*p*-N}L$fnnQw4lgDqB=?cs{;^+O1TQt^*_tO+VSlSV3`7 z(#z?iIK~wdK}#!ZilRhi3B#`7ETcWslzL2`+1uTRoE?3eD@Wp2BZgjP(~#(eMh|rE zP9Zj1DulwV`yvLS+&SqO%GB}%|IMC-Fjna2Yoi9a&U>`Puz zOM4=h`LT-Ao7LJhPGd>ByPM$v8T!)*R}!Nqot+VdoTe<5xQy_=md8YNjMh6|vy*R^ zmvAN)<%B%60p+iwTDt;bCa56z9q8%WYe;DoO$ikl?wK3-ZGCh|={K^B>SV*rh|TE1 zj1vJdBOy{!NnBDw!stLKp@sIB=3FUtH7pi8HE+#kpWKj?0q1GKCEDxkyr#VH=Vwk+ zEUbZnc=Z|~f!=W&v<8obam~9NdN-ZmpKr|h%4(WFO>8!3%Y&=4(LJN(04<}E!m6qZ zwfsc)Gwzdo7-FWA@B+My0b+^=E^T& zun?h1%gn5pm_2@`rP+@>vF84w6l2H#Y=>`Eq0xfI!_%Q9AtNIrB~h5;JGDn^Lwwj* z0rsDJ+$356?y7LKk2Wj%)qB9`K+n}Wipy7UOsh{paI-wA1HV)lI8T*47CHK?a-ZXV`BF0~Xr8w`B0{>SB@Y1n2} zHZaKpe2rI7)<7nrBa37%f1bSF`%=KPXQY%psxCDMw_r2s$z>u62!CYc?El-Y`~}&uk3%YLP9mAN+;#g*$j13Eo#=eX?b&Xg+C@{ zg`cQ&gS=P%acWzY3a?hrrs6Sg@zI&<>d8Wx%lHpt5e)DnYwSX3PG&?)Ql))Vb(llf zBm);7c59ev%3fxgO!+}GiK`Y}hZhg+-`H3b*IG%E#!^fAZ6a@e9mP+Cy4a%T-z9g@ zwLxDcG)Y1&)eo9?au$7@iiM$?TCBV;KZ;e4Fi<^;sZUw4>OSne!mal*_R7CgtrU-` zJwo`S;*To&UFKV37>xT&+k}*r?Mioym?8%~ z6bD4UJnms{@{55YF!KT#M)QR{S6XLb>lz0#t!(PyEHE8oJbf)$Xi*Us@EG`uUE@{s ztxUR%ULF>oeP8b^G~ZOiS@Mhs8i?WgQw;~Wqs^*>X^i4`lwsO#$*sh~c2=UaF4pj+ z^f$|el=o_NZZ+Q6NawWEWe3FVP`TwV1zS+W>*p_D-?5S49(5D6ygvBRW1AyBT|PP+ z=sR)ukT*OWu>FOuX*+#B8EU|2Z-Pwt6_3x{FpVZ&(est#g$t&F_GR`}GxlpT5tGhc zCdPxnrMtEV%20|ECd(Dq>zW!L@t$qsCo2RwgUMAY@v{a!xy8SnM!2g_wgiU<+9~YT zRCgTTBZBniIeam$lQ7}vJGtvV#^joc#~f7-mh!Po`@LC>Ke=zF{8pn*v~*gpuzF4F z@F4GA`nK(26pQ2abWO=!&+6BihGssb?NdN<77@8uR?)uR@#gmV?W{~E+EGHyN6?=1 z(TwT7qN8IByIb(8d|LYTeD%9Nq;1uR+1o17AZJ;K3nlvb1_lS?>92*2Fn78QIl+^o z9`ZdGT4u4c{@Z14Zh4HMgjW};5(tN@iu>+b1LL*Q{%6Y(L{03WpW}B5d$_$S!;Rx1 z7OE>#^|?-Zb{AiLjl>OPR+Ndn+&tPGt{#@myteB8A7k$rSVLpH_;zk8jt7Gj(A5VNJARko@9 zRPcZ4FfPY2%x$zMVR$OkOI+#hmGUMPG1S%iCcKvM;(98GD1EP=r4;RieH_GoeNfNl zS=yP3rmgLn-+}sqWh4`~kZ(?D-%aTWQx*M;SYn05dIU!pHsYjew3zFn%hG3De0MU> z=2_5&kdZHKdDlkUf;nM2F%z+wG6duz#VwcKrxNrw-L@9$B;2t-vbkr_u@t(uK?+K7 zM$1GAGxqLnnVT1rQq>K1`IMP1F_(`%ex+<+yGt0S1*@yM{=0OAzcc+Tm=9aEP*Kmj z3u{h7PIA^AAd#Spi6f;G#W;tVu`y9OCllW3WYeLy+tG)vaHD+qx*vpFUI)jMNm)feSjt9?Yzk|Yk{Q1?UQO(+(hV~|t ztKSuiM^2H9uoYn-hY`NCb~B*p#H}>DO>xAKZ0M(D3`IQSlG5Nr0#$`byJp6nMQTpF zeE$u!Btx}eLEpU#tmvGaaUJHxvXnh*lF{TaP~7sijjqEP>VZl_cFh4b#f(^V#SOPj zHtfso18OscH7mwc$tY0%y0o4$Br@4Xvtd5n zh-T81663SD2N#s}ynd!ULA&fROC0Iue5OEVC^8h7&tx_qz>DYWbG+DP(+~jY5#E4! z$Rx_$%ugVFCZSwX!g~awFt72(KRZxK;D_ZpJsw%fv^*G^;d7`g?(_m$Q}iw!WL0OD z1IM4?2tsrD?B%!Ss>fI3Bw480-Z+->I`ndqmAo6$F<+i{P@A#XLvK1A6JOAD0uP|9 z360hJz1%_G^uZ-Z7S*29fd-Q>hCwBC>j&h<0~N)`u!na@Gs}ovX{3*Pim^fK+fy(0 zYMhM=+nYeEmvhfqO~SM{vKM1SVPsCp>%$^f`k=@O+px_U>Vse2Oke|h3(Lft0>-^x zw&<6svH45<1$6TN94sz&t&SXtvg9;TkJ zo`UY8=DQIF$S6`gDuCveJxtG|gs!yVDo>J7>Gj$B5(o6uRs#nAd5sgH_o9q) z$_s~w>Rf8_p(&}c^@oRrBzZhzv!tDr=8HcR;*vg%}+hKI$bbMtY3{ z#AZ9=Q-+{wL@ivonozkP`g6{g6f*+Dr*EM57`eGo>qHEJVm>%{(wLYOd#v{DF0IswR3&B8ez+ zTQh+-K1(56H*<8S##dbKY+UTi!|s;dA%07E(grV72ZqJUJ*-=L==fRb1vHimJ09mf zjxeCsuIKP;D3`k&s+;JHUdM+vpr>+)w%ILqCu>~fK%5J?gsT~m5SPOeSs5O&^G*|({O~i~i&zZ|JRImnlY+U{R@$GIBL+7UC!`tx^QLl9^ zV@U*!_CXLN@uuld)*VqFv(jF?La>-V$76xmuqPdw+SgigegiaN7?Uc}W6iV?q`>%6 z?K3l=m+N6+1>SoKao++6b|#rlFh+^WM9zdU^FGcJ_&7(~sLk;=`#ZEI0+h5|?{R8P zUf~BQVauz*4>?NtzJxzFto^Q5Sc4a11MH8)vv)|H1ajqlgf+bU;Mi#0Utk~Ny`^c=r@+SW`S>>qJ>Hk|3X zl17a78@jk?|446MS&0~d*3SCE3e~4@J|L3RDeu?WOr7lKa-nUH z4GCM})J|&yD+8sy*XVvL4Nq}`IiJO-8MWf2n9qRYq2=Ymvcz`O^LV4xk+#!+jo}>c zN+ESGx!Gj2QtV}zVN3Fxj6|noSgoeIFv^?|v*u+;vTLRM;*K=a8ASc2WV zBZubxnclNORC3zfmg=ZDCVASEPo6RyczT)YqUI++!nEf|Ibu!ulGliy0j}=y{39dW zIjEzUn6rN}#hT<4F*Cbs1sE|<;se}upJHI&!^gdi%{wN)(rSS^o`X7zHToDYIke;i)u4p`4@R7r7nGsFC zaIRK#1{)D0n9=VF=TRbfW}_YCc%a%DpVz?TBWxk~+z!}77$l`vss}q+H zWH(*p%O0IC=8z?mD&x{%9)k=|S@4$0+zD;Z=N<5%<{)~j2lo7-uBq%VMdQ;I^>TzO zJOZYWuV>NkXlt^CRy(^~>{E>ZA{2As(zurMl>q`3$T6^j!ODo;Oa`wPcNg->wDgp0QAjt!L)}#OwEm6dmW2`mNWg8 zJmefx(e>*vNW|mvupkBS=gm^rEzjs$wRIp7hU4=Y&ZmEuWWCAzt*r1F+3gWaQLbYt z?AkngIr-a6{o(;d_=PD^Ba9<%tR_Vn{KC)dXgP_wrBwrRF_FLimGPXMdr zt6t{UZ#W-&44Yc#qw@&Sv>b^2B(qg?_9kGJ2iaX?kuINCRi4F1Bl!zwsN7qKYSD1JwKvos3nrfmeA zT!@$7_HdU$#H}GE7e4F)#KE4(3D1a`bQRdECm^dQPI@Z8Sz^yakNd1j&v{%dC-H2- z9sv}#V$W)*F_V=+7S*^|5djum-CxWenAuG?Ybnxepqt+4Lv^zv_MXxEl9hr^?6mjf zQ!A)=)_CA^a#cljt* zM1?MCH54)B7M^XlBaU~Hww3P27zw~fx6TK=M@7o#6hwEJknYtZU~PWNl6w@@!yv)w z%#sKcv{Dz{m8h1ND&my_`c#WT+w|2^Z|&BAmr-{h16~GLMZI7g4O8bK@5RGnf<}$B z)We-&+LD|05#|8ZL03YPRzRdHO1mYb3M|{o~W?oB3ZjVVEi61Td6~M zit;rQ_W*PEQi18$p>T%FYGDq1hHMKthvX%E*OdOe##D!TI*WYq_6WAmX@U;Ep42|5+)ka zV;_B@CB0PHki{DdQ(>j>A{T!Cs@plK|Cc+1_)rMV6%(ftenJP3eE%KZL-b-LA9jHA z_ArYq5-s*DNdfbiyYdcydBA^%w}`mt#Lno3X1PtGeyrvl0sKI|`FLz8S&3D4MM=z{ zFo00}cjRovt)`*_PIp`4J|O@s)&Cx%h#DFi#pUIMc%;!FNxE04Dr+&KO z7ZX*a@1N|>l;K69v)(QxE1JR^6Nv$P-9+Z5g-30P7gu>jZAqPoNg8IP4s&J|sg6Lz&lohDJwWMg4#GllbxF0CGRMot;sCJ$p;b zip`JxCWHGkc_a;8S$ASYn(d$P?wjNkl!Tn5A`Mrv+r1#fx_ zNGCJ9Buzv(8XBAwxhW5Om;Kg#>t5#=pM4nlyfdjHjuzq+b6HUT^{wKvqLd za5U1?+9XkKOIGFruCXq4HAuO&jlc(gskwgn(t7|T^?S5A&&Ty z6`hfR{p&?m=}%|1SNdWrIOXAlKs~REkMs z+I*O2Y+_nojVwx}91er!BwnevVXmsemf%tz<70~j?IsPH>E1dz4&&AvMz~8xPJK;a zesu!rxW?2$bDrf^*5gHRW(AX?^5X33o2xh{ASFLUTddSrT~Sq6%Bc8A9M>vFafMYu z7I!MSh3RF2X7FH;N$tTVvbi~EY|$XLY4h(BAQ5N5g>SN1?ZJTtUZf;2K2R2z0<&2b zDl!sS3kwT8>7>k$ynRfX<&LP2J(jRVh|^md60?&a(64*4j$TzWkC6t}l_f%(>EH`{9Xv3D>r-GjSAh|7wRre+Nu)jolII=ZYn`A1A4cb_PMA|Gx6o)glebP_ z%P830K@({ZYqha2cS%2+EqEv@ux>u&LU#!s-zxi=tG7qu9}U<^E4jqiYhWmA*?kGO z#EnyC%zGa}432*G&RkSRczeJ~e6(NRLK<$(2;_5~=C{1U?(|?EPbwLxnPN`xFw2#f z6tonD-rud+C3mLAk9#e*Qtk2bk$X4dX|~%ZOf;^Zi-{Yj)gci-ZZ?nO^du3?s~(<( z`#0jBj#bM2>BLwg%c5VI!Js)SX=j#?)(RcLbc!|FeP?=BExt_%BinHceU88m-x;(p z9B{pT%*G2y;@tfmNnH2fwX)ZVxzWO0{*XMPlC@%6lOHtr$}UE~l-YfYR_poNKp96I zEuieqPE8X2+w*Z*`Y0n>gjVlXa4;HU$j}ImI!Srv8i0auL}8IAbQ;a^7kJi`_A8Sm z7AVW+#v`TQ;Kn^|6l@nD8|e0E9q)uJYJpaN9ktXt!+t%_(Ut>yUEj>>uAeJmvhPog zm$<8%$>XgnX3UGE7>M!%htR`@1N!4uh-4UL!hd(-M)YRF3o zXl=xigc;vmEPLiC+T(g@F|srWoLRL~mfNi--@H5Q4zib)S!lD%F=mO&^66eX5yzMUS2`|pIEj2%{4Z{%&pM6BeT-hwiD}+zM+Mr5DSp{#-Y6uT1Y^M zqGCj&{H#*9^i+c-+s*ICOX|zZI=%98M0xqy;ZbvV`*%_eV3yh=P4)>bDw-71&sR^1 zzeBvB&EJp0H`(;8=E$3b>!M zyh85?*Cr)In~aSNTx6);F}VaD0Y&gi)Q{4$)Z&VYoWdOc%b>L9*4Nr6d19%I*gGwS zEq)gjGL)q>ToMZZ`1p9iT7#OEG(iJ_J~)yv7%Z7x-K_)4)V4Jja; zK^-6Nw1`3iBBFs~qBSy8N&6E@^}uX!pcM|$`NG#?GOhD=04Yk?v~|m8RtG<WDGTE+|R#TFW4h zr;m)MFvx0D`<=BkFfuZSOj7>O9Lcl2=kn5e7vZwnK;;LwH^xd0MJ(4F?61bBZHgkV zUm~g~)uDGNRb7BbM>emyzJVfOyWJ;n2JSC_D2urgPWYZfH%kSyV1IZwye70+jc9WB=eFCgWqz zp#U(eMJE?m#X=L>jzNtf?WC2H6a~|rPPa7_5cg$fwwM^2rqhcz@bEU&J@BO?zUj3ucx+v1&^oZ!p7n;;DEIrPTB#HQ~*zIo6o#R~y4 zb*Y(YOeRXmH>}2MnT`$vl9ENb4O_Lkr$K12!WbdZR2m6YiyGrc`L-=PUW1!RW8!x6 z_@%vA@uHL*Id3B;Lw09KJr+-7PLxAr-6fr1kXn`QpQAJ7AMB%99rs(+o^Ye3@0zfLv)l+f+EYXMRUpD-#x2obyL7`hhTv}K%y*w!dIKcLv zzY!L|K?|=e@GH5o9VkU3RBErTt(g{+6H_tym!}h;jx*{`d_tqAotm9oc*H_CHn2>u z-sLXFSFbscIs3|7furv#Gq~KqiogEubS@nmBcrJ*?C460>g5_&Q5Vn@;+d9mkYWR< zip3|X%&c#~-OtTz3hD6h@@!~nIXV$-o41Ei*np5+smxJ$>->X__reyRFYciz zECLpmBrrJa_IN-jPP6?1BnaA*st2huVHi(5sq(-J!|8)eOiY}Bv^65~+U56>L1}fCH%>73*k9y?Q80bISgQf;N)Hs^qr>H8mucZ)Angi-zxXR6Lbu6v1nIc6q zaT@%>HYh5d8_7jZNThiEa&avVNAxb2nuk<&_?_*kc@`OTT5;F;US3)&=kuDqLBMIW z*gT;H!LWA6)AsvasRO5x+^A~SBrW#Y0QY&~B3P{5X*`!ga`s=|gs1{>RQU}+@ii6? z=E_x2y?qSHUT=Q1P0&OD*|m2-G~8d@#Ucy?bgY8*_H;i#za)7xGctez8=`SxnBa{O z{J{HJ4<%#7eoInq#gS_5a9Y~H!oILg-zt?~Tw8>yX{`W#7hODEU6TDZFYYTci7%wH zhkM=R65LP$U%JP7%gZCE_FEee>=;ln(6Ojq#s@wiUPn$vMWnCWH!Yf+b-M#Ii3%?3 zoZI9M6S<0eVnP&devo~Jo3`Ut9>}HAQgFzW!L2^Fwa@n?%NjjdBdQ~YBS*xaHU&A% z(85cwQadbVOSqj=V7X}w&S2;xK5PpRAr9z|fI%I)`$QOKXBL}YUHCh{&4}|!xw$FU zLyT>{!D&Wafp=GHr0nQ$oV4)=C_HKmKMt=2gqRD?_l$T$!&s#aL4iXgXDhC5f9LE& z<}$^ImiG=EuE)7#pSTdNG=NeXAuVmla+ry+3$g!0rKiGG#u^*6Y5!LPp5GX+nu zKjBeDb%$YLGoEaK{vi-y z7yxTF1#gaWt4{FX=p9OaB|QIU%t8d^{?FX~{j~ozf})6kz2g6%9T#5c|Lowu+y58W z{#^hp5&xM=-@pHO2CznHvHT+?98S-Djyl%HLUGP`Zv+0g zk4_r~FF%DeAG2_qZj7EhL8y#08nM8KeEQVHSKp4UDEH(05ce16Tb3#PwEy?{Iw^uT zn|vyUUROW`0j#SAU3dp0_7_Mhb}7ev>JAKIIf)S}a(qHY=oC>Ix*xq_?T>@Or0AG= z%@5c;?vQ{SQ`xzU=>9M)!yP{85@XfA6efWVb!Q5pngupXFl13Y*J^!uhIO2)kX>+1r=^uF|U1_`A zrsU$drZw;aBvSgbie}u2E{De>x{ei3H{bvfNh%!)QQM!D68lDRi?Sk)JVk!!83xNx0##(NuuJ?D1)3(ju9$e0rH(FggvW4FJ0V8sTi|851!B3TQc{VW)m_?>l)bt~P7G3u;K(WUP#5 zNaQ8w)}_&=sp00V;-n zZw=kG$zF0`0U5Cq6cYONg$p+#u}gh=J0~_(m7V9KThr-Gep^dgYUWdGEOdyKo0}Wb z;*f>>d(xcVTId&&lmA-D$a+*X5jlC#8VGQQ?rWK7Xfy%wDe=ohhfLbEoTO#EVaIuD z(cD|xDVb!)L}W4P-)Dq{5q<2`ahaDkV=>Uuum^@s4ylFyLswm0Jy*WZ& zz!)0FbJj`1!GN6PA0^D)G+R6QfF-!8Auc$I0p$?-uidbKuEGmBdcq%AZFw1cP$*Hov0M-Hxbh0mwF}nU1rXa?cCyA< z18SLz-_VI(eHnTmbW_Y4s25t>3^SV`Ao*iswUIAK+2g*v^J37<959(HeN}A6S^G_k zG8os4X%uRY2Z8a=IS|=?VimCRkGM=quN8S@Kt3B(utR8oK3}&Ngid=w&&oLY2=bH~ z?Xir%T00)paKDfZTZ~Jq_jCV~VvULqA|wWVmgFcnol(mYTdDTx=tHdMdR9v!T`$(Z zru{p>Kiy>z$M%4x(;3snM(1W6I70UCde&GmDvZCJW$u-62-%rZ`W|7+w`yPsjx4^_ zZ*crxh}emcm*tzl4Ou^GROi3`;lLkl#3}Zz#HYK*XmmJ2R@g0wIL0OIgo0z3GvUGT z{+_GO8ZC#u_4(X`*Wf}=kq2u~(8vfN36a9)LOtkvgLsHDAnO6lg7XNJk$>qTpyoz= zhvH_-+y%!@qhE+3sQ9j=S$`C_zSz@q;H>&W0yK@*h2J4SM~B< zGa!+4x5v%R)u!u&_mvw5Gm*f_kqg9*{uBaVj1X7hErdA91BgZfn&nQYOnR^uod&}M z|Hd3(F#$h-BaP_6ZhGPUYNEYQUMRH+7hf&Dfq3sS zv-)z6WTzvHTG#pLNv!rRoV&aw0^ozWrU?BjXJ3C{vifyZ;&CvnWsM;8$*Jy(E^jcq zLlI2VabMp**h>AV`}BGIWFQZx>Urz(;QDe3ZaIqLn$vSH+!OQi6ZtO0MJy<&_=A9) z4Lk%~6qzs-SI&=6XarYx@>hZ`?=M+Gkr6fmw9cvUGa$B-w|mE@`xAz@I^~XLauqqH z_r=Opk25s{h1JnW;GiEHC7BMi6+hHf?XK@JaDn?WI`<#H^)V5yQSGRdQL>_I!0j8j zb%*EAbF7awPZjK8pEF(O1j4>YmV^8SSm5d}feVv~fjTk?aU?8CRM{F#a*}btle0EYf zgI;q0XYdI`Y86{{t12uT8=G?FQ_;1=nHAAMcUpY}dSO1FUHc1NCOSPpIvJ0oEumV3 zfy_L9NsM`T81S1UymCp(y&JL=GUK*qRBlp0FEKc-#l40`-0_K~aOBV8@Jq_+pnStMXMIY_W3Bvt=G@dU7>XT+`eVUZ#37?mHFOiJ7lcEw@H#7AQoXLbt}l<^86V1D$ZV3 zPYx?s|FwA#4a%=_e(>BvU+5+wqQQaH0bIBBOS=6cuLBSi^~im4wkIYW1a@L(QDk$C zm*`%Z&z<$+eoe*l5xH{k2SlOozOm_VxRHhjN}hs^TcYVysnoA}IGLV(4fjLIr1s{E zeen|oYAlC7`gb;(DOP<`)P6}U^TJU!9L`tb|#OPH^w05|31&WkiHW0k+39xAFRvsZt{cs&-r8PzBAPj&Em z1f4;6DQpgagatVvpy>*pHc%#|bj}6;O@cXHzqh|J=wdMzF=X9=RnV>bKrmTQU`IR- zlyD)!>M)2RHRmv1Pq?gis|wP|k+_ref()v?W7_E7 zv2;cTu^P~+fH~2vIK<`Y+#JgVs=!s%lAI{Kie`ei#QMjP`iDRr;j8J9cr}MIpPHet zg{~=<7_e+YYc$hj=)R!&%}5cuVKfkDH^5AowPZk}5Y>3RDK}atKo9yZon(>rNDpO{ zy+p3_v_x)?85w3k3@&WoJOP8TVXDxvDBZG8;`Gr-12Tr3VBwxi^Bg2G+Ofq*^-S10 zr)&X(imkQ<>AW8@AX94&_Xa}AE&m**xY7LE;s4fT9(i5FqR~#H!7mfzqD>LEBBq(8 zD~G3Y!o+>HN`5ncyhmj8 zw(r6aO-q7r{lL^5R{fmsDUO-n=?SFaPYnkX-D+m-oX%Nn33lh@pfRn171m*Hdg+dV zLPZ+&?I=a)H7cRT96g&cuL2VXU`}e`R+`2_>!#Szyc2#8B0J455c%hPDVfPS?#!0) z>Bi2+JG~!wQSNrPD6@x0<&bv;TQGq5cev21mPHMe*=-ZSx-Vk3k(yQ4lFWtpybQ^# zm?nYD?{+N3{K4qk75j_C-~jZXvfzTdJ9hl`{rmSH0h{?&g=XoKMd^?bgrtY~NVED~ zpGi+4(BQbZ_mCCct{yN`P-z8Q%aO8o$M7Tseh}c`+p3E6SLmfD1W(3WYj;o_GK`R` zb>1X{gb??4HHOnSN0#`wr&259iFQwIeuJl``&{}BzMVUH^;ctab{Scn+koII4&&$# z?NK`*Krv-TU*soFW8d)sK8bs?Yso_$DzOKvI-7WhhR1CNa8cXNE5BXo|JD%zWPQ%4 z-~aZl|L_zI5l4)o&d~kt>SG8a%_fi$oy9fM803yuioJ3pd-+e(iKBS4MZ_2 zX}&CiYR9>GO-aQR8Qru)Ob-w(vbPTjjhuwT{9u4MOvn3)W^Jxe1$l6nX}+Q1 z$lwQr`a|}c6&fCsyg4;UiA?(!;}pht<~Td1@ZQ{`^-iB8geVU?xOP6HJ}OHm$LSe5 zBBri4I2_d}rujvxqu+Pf$fTzB4G7ubPaRP|w9#Hi$3Hm3==DNN&(b@K|H1xGKDi$Q zJU7r?iHHNl zTpF|fc*m(kjKo?siv;Lhc?S*d$eCXSR~t;JnJKVNRkPTV5aa!r)4Jru01gvK{^IfO z9o=YK>ClMDdSA-Y$J7}VRQY8xMHrV(i8i_6!}lb4#>BNWvxUe%VQIna6p(TuEHoBb z{NJKTY&^%v_*D_X#UMAter4RG&C_+65&x3&U&{kNLFo5s8#gJL$8C9YG9b$Ubt}2v zv1iz5OcP-$6 zajG>NgN;AI&5d?372B{sAYVb1Ypvu~%zZiqt7Q{0UR^|LyW;r1Rg0Xaq@6angbMm@ z+RuO(Z`_uQxO*fbgE}`ZlJHbh^VXpqtI7UNpT2onummIkZzd5`8ssdT-(yqDo;YFd zjrcfG|E@ati_6L}om!TXYj8J~J~d4O;&IwYWEyy+nZuj3l+B?E3{rgtILz;!40v#<-%u+%`Zu@8^gQbP?Ch%kXAlCg>cDR|p@@ihKMZ$P3@UkVOW>IcZhue3j@nbo87?z)` zsGR~sxkCSBw!n1dO&9MC%KP>%GTjx#f2w^(QJG&&Ei?hc`H!~j&`Wln>s#Qq_c3_P z61r}4U@yv)>!T$7e$pZxD-3NfNN@t>o8fo*;7WY-+W)COA=!5ekbzK$dZUZskJ))m z=c?)6GvPj!MDrmT1D3XSZD6)!3%9s*_}`nK;iBv*6oYfm-?UNCPh5Y6T^1&kGq8Z&h8}Pr{o4VAz8rC$x#i%+H0&pF0^g5qcT9 z6l_$vXc+%Hj0U>oWf2q9{sYv1$bgPmbYf+lU*EWgahPdX+!S}%n8Ra{)`!Kk&*LL# zY)qWO)>0qojYC~y=f1jTcJ|pgJ7TuksB*Upclq?A0VE~%Bqha=d$QF`jSxZgqGZx{aix-LUmOlo)0*iRbSYe|CF#qFg-nl}3gt+&fh zU#7>~YkqdIrqxa(caZOkkIjQjVm>@QmMH{qtwo=QC@X9_D32aT-edFj@01sIGL{LS z-T^E0B(=f6Ye21AruMRw*RJ0wc5d@~%olOk1=h0K9P*lE*LFntV+gBB%&YbdFPg^J z>>z+QOjG~AWm1*JwBEi<5x}$oGbgBKbqxVCkaaPqqEJ55wXq2u%|){0${dC$i}bwy zROU=)RJ%R_rF=}wt}#M*`-lbSIUn!o<6E{$5IPK}V#TQ)a&5!s=z#L&o?I!pIg3uL zcD_(wq*nK}ll&zBjKwMbfX7G~QCoiPja`G7osUZWF1Pqk6el4{Kl2q z0soL{GpcL}0%-i`F0d8&@iEo&aTC9>z^V7%;oONu^w9=TkTab9gKLdS9L0mBE*)~T zE?c5OJ0eL*7W@557?s&NYho#+`OX9_o0=1u#+0MNNkm|wqg&{5%@mcNz7>c9cNHqi^LsghVZ2- z>+C8tKBR9OgdR9Od!pZ{FF*TD9Qifq*O;WmB{tPVoNIgV^Wh71w(Cvm@^_<3$xn$Z z5g!^IdN;9~0uE`ix^L8XfiCFUZ)0Pdy*$}%AZj`8RcYQhxKp3lBoNn|6>btwPJ|(` zjpERY#}1iZHH$BDKb4qMR0x*ys#CdQ8YG=bwq4hQD$Mx|Q8v1THe#>$-XJW1*!N`V zors0p(KxT4Q9-;+B(*Yul~^s*b{w?r2?eU8^9m58>Rhe=n}UXAKOcb(jLC@W+5>e} zP;1(xrZY5ve`#U&7i4ssmjT(=)>1Be{@xFOA{-F<)fSrFD)aWLEK~9CVKHr_)72cM8?y1U!!klmayIk zz!)eQ`sh>5%_Ddpqn4~x%*rB#2Ss4omm$~c=E0a$E_scmxC`X!eB&!Y+M>OnLJM9{ zEh(0f6b40exw1XFMcQV>4vA z>VMxhY9080agL`=P;TBG`5(^y0QBfCGE(hW=ba=wNi2}S1=2EW{kujOQgYI4UF@eT zpTL!u-@xks?H*?Tjtyg9d%y}E!FXqQdWA7bUl$urU8!q|H_{=b?7Xh>M0>o&J^xmE zmH^m*)QwC6#n%z(rMuwJ+Sy06S3^+El8+F4f z_5yY?>W#Q%`GoCP9D!A8;S(%z7EZ3Md4wt$bG?%+EU^6i0B&uC**Qi zP$vhGg2Me)y?%=lVhRNEuvhtDLnT>ZVWxhC*;J?on;=Go(9{K?nHgQOjdo!BCRSld zkJwmZ^SSk{f{QI7UGx#k`!sDFbYg4(=a-}zsN@Mu~RSdzaAH%b! ztAiyv5DKN%uz_tUl_G;8(8Hc3dI8+9YC&M>fljPA;Uo-Ji4bJ)?YX)*3Y3OpOQ%XKunsHC8wSqy#FFVUR!?) zqA(9TU7Ja!g5Z^3eno|nQqhNx&MC_lQ5QpSBcW1l-9_b6kiulDC%9iV*nKL=-a`ar z;l^j?K#JLbAIo;Vg!o4qcyIadI!Q7{|4HACj#^R6j*RbfM#Z55fvldt$356JlSH;5 zu`otTplQii0g1Qox8^7+?QEY|lPF*Y_Q>rbbj+;# zpqS!zk3$|UyKi%QJOHsK0ob+nUrw_`!q^A5*JcQcI)jQDSbzlO^Yio5)lfxdxoA9d zz(3NfUgT*V#k|gZO2SBw+3W!NS^tx`Dod&TF zOT+drzG0U5a!hl(nmJdn_0Vyer_KdC^y-1MI?*DjdNm)O>H4XIC-+U(4k^6DG)9gj#jT!2764Z!Fpx)tgy_+P8Su; zG{NA%Cv!aJAn{T~oyCVHXa}KvzLwX2QuEzFfH`u7NJ01ZzY`{SVR1@57$-Tw%J%JW z1&6e{en$~9+BJcc5W#59_(Y%aZ~C_k*nOfVm7Y;j8XPNni1nF|t3W(Vn44A|2~U#h zCXF2gNRXmz2eQT5(lm1!Wh2zX|ONsZI%+gThHo1#q>8IApRDunJ=(O zWg4OvAw?#i29s0>^UMJR%%8lx*JAQj2Xho`FznuDF-AuG+>W{f9VoR08AqHK z@J%v>H~IOAudDRhiDK^C#_fUcM+wl9zy=Tb!9RZ5-ZGjs>CCQ>K}4F7_(OoR3h$pl zAu28@s3-~BIbBIc5R=eF{O;D3*7A~+ayw!<-)9uKaB3ef<+o34C3BY(_7Y$UtU5)- z#3^X2@oUee)(xqBS5agX)#gDd68`n`C+~QJ%5EqLU^WzzO=`{s^=}0ilKt$0h^Qg< z&}iJW@nMtf5pj46MDNhm;?V4y`(vDiYDX|*|7qGu;`2eIYv?F2UtPed6ole4nqK8g zmueZFGjhBd=4~yBTtHCGy2mPt0oq7RAe-7<c5p?l_N+nS^Mgc*`VdeJme9Q&MngJLtpGTW>aIcZ&c~UqTEdB5iq7hJGakknI z7SGaCDJuyylBbfJ&vE)Yq!q7w$iRv`Sq%T(uJ=^8@cg-bo_z%v7yH)ltIdwG;aj64 z1T-}M=la02nG^G-lS2mx43mfr5z=Zzuooh|A(=^jEW=LxQ#4k5T(aCdk2;6XdkxVr?Wad&rbpdq-s z`|aeM^WE{rct7qxMp0E=yQ+5WwdR_0&BcBme*~9w3SSZ-z;&;p1j0;E13m)pVJQu* zS6}3X8cCt}AJfvHn1FZggs=}yTXua1y0<^1qsDrq&KkZ7Z3qG(3_3q&C1}OsK8`Sj zK}C&0nVJL{oy)7r<5azvCUvp*q`w_#bT70na~c@D(e;hr;*~asM7N{y@=`5&WahOt z#q+t_eKfQlUf)D7wrq?nuR!DV_9+k;nsvJW#(2C51J^n_M7HZl(p0JcYr{OOqylY+ z@%B!{)rOAA8>B-3`KigpuCugX${tr6&gzF(>vkEp_6iFjmOYry$k2h1#-Ky(6H~tZ zYRgGjwVYrw^kV)38KR0+xuM_(+f{%I46&82qOfv8;nz8oezYv=q_q9cluO!7M(y z+B&jS=d_ki-D)~*j$ZSKwb#T?f(c3-|7`a|A&vjRNB0!tjo&NDVgR@Lb){B5yX4yVqDFr3v z7+RBkX!0J-`UMj5O5g^fn?uq2M$kg=pIXTy^~PACRr%0L)HJsYW0!GFB41~;JcSGo zF)qyk28}|WA3uL0e*WCO_|T&7%&vU_F;Hq`?6^xBqe#CL)|^Y;tnAO`O3-Z~FUEtz z%VlSa9;Bf&5nTB;`OH|zHv_KM0rnVvfLe(gR6c3XGHiOv5I-iR0@e5%6cXKxxDIOu zHee@%C*D|(Pp}X4FuNZSS5LMf#T(|;M7NE@LXV4cD*xqpzVd(1VOT{9*Kdavz8BIS z2yOb)qAX3rlNX-Y&gLEw+4QG!V!reHN&lUp@6nW*DIS?1`{w!p< zVHsm~!vwx-4i@^Id+y4L@Lhd9O;^@&AODJr4>Ris5Tl1!8CtaG=@{2Wh=oK;UwBu8 z8hM58T*{u-Ifs+(p$6U8G>XH8`F%8%;>6n#@+2BYMyh#RTd1XC4LB856 znTV@YJI#yN=RNaeNF3*)vUh5T&@Ax4aURVtNj=KuJ99e3c@d zluNyZt=AqaCwsz*yzgJJE!z~1qDzyrmlOw>7=aYg;IdFIR3Ms#dxL#YST$0nX`?pO z|Bh52BlR_LzfhFZ9<9)-zPCDQkD&$ZPZ5^GRRnIFO`fFg!@?EX4IVO!ukE2tns4{R z$`7{f#eN?dNjt7EFx&q=l8~JF8KykiEu9I2`1L(tGz_H;r_00-hTg1+92BI?_ zGTIPXS&Hi&@})xfCPVul^J)_E)Knj>>hLMIEq?b2Q2o8W&ot1X9Sc{V2xC~K#r#T0 zl7RY$dU{SBedm+hxSt_%5s+oS9W*N?F>dJYO)g(NmC zuq@VQ4a#Uv-|H)CE%#s<^P|lgwPE!m*2KShZ~s zu`o-!hNoas6j5_P$&J!@KM&~cmBAq7LRzijyIE2!{!jz?BpV{700#yfhE)N;5( zN>+CC$YEEtwARc{NK;DBf~4`;F5_N?} zzszB_9`>Fvwj`7z@~w~Kj5$d2Mez6=2zLCXt37i)?fKJFUk$;OPh^0r4N##pbowVn z{KrP8Lh(!oMfJpYGO9|dke}V(bf2>LsrrnW(ne1tdvtiy)c71)3S)51*)`j~LJ{GD z(Jb@60vV(|izW=;Y3#Z3fL5=^u$bH=zV&&U6W&L=+2s+NhhuMgjcPPiRn;K_r{to9 z+p}to?%fMQB~?|^>!6tU)#_x4b@PxPP@{D1?1pQ&=7f`D!Xy5&)wJ_fPYiT+bk~ zGeNcNt`}}TaYIvnO9#z6?1cjIw`rUY@B@23mr-S-vLpiD@-L<4Cgx^w_qm}j>kTey zZCj4@Tl|8IUOh>Cn)rXNLG)1HGf%x~PQLoelE9sMJ2{+Ie@$T{ye~P(gIX3(I-_|4MG>Ohi}(m6>#G-=^3*Sj?^XaE-<0LdoqRGk z&nAf*tpk?}scbeU(p)-Z);9cdp8{lQ#HQg{67Bf;G7(qKRBP!^QQ*LVgw^gHHtG1tAtuTLqr5jG+i;g5-KR zf5Xs!Ujp^_5w_qL`uhdXG9@)}P4KT7TmVRBAVGy1qV#ZvS)WYOIX{or7ws+C=!nX9 z{CuZBMgduj@@1?@F4OHd%W#P6cGb9B|6&7YQw^#75$DLt(bM@=@SKGtKMMAq@#s1x z-@_yD>F2f0_a#7iIRhV;UAM)UTOyO*1l6Xf-nK+;Ge`RHLs+my>x7ZBwvGGXdG$Tg z`_ggHw)$!H)ZiQKL4b8zgu`UjHL0`@}tR)Wuo00Q~T|EbIc;K1Sk0I&P9JOUrfY({eZwkDkPG zkcb8eulNv+ta`s;D^u*s5k-`HisBGW4ppK@_`gK}8tDga=+n_iOJh||qn>e}^E zA{g4Fh;Gw-MMjcnOoVja$CEEv6OjnoJ3`B8 ztxW4iFx*R~{^fhi*>EaE3JyTElC6CaH38b(Vc87=VmJG?v zu*=&YE@_03E&oVE{MLecYycLn@^dy3X{0SEL4(usc-v}>f;`VTk`kHu#e<3K;K0+5 z7K3=XjAzEFdh%jR@A#95t2=k?(9ft6o?TH$=v`Tg#vOyO<1LGxi`-b~2(vTciV>+J z1cF%f^ATlil<%BCflgpH?+ZoOr7QCYeVvj%=GS9(S=BYlF>j<(%l=rmHl!b28yarb z;?r-U7Irae6hi%N$DM zhy=jxuM!rnA$`A$cIjhsl9X+%obsBn=Bfw`V7 zmtMa^5~p8EuAJmQ1QiPUzD^7O|AN3QG}1CyVP7f@T1??0ppBxTY7x?lAL~MmF4&G} znL2}~i7zCdUfp7VKkOUn_ZpyhZiY@l+*;auGm=l1JK^kKX&J! zZN#GLV&)+`lQF1eN{U~F4H-fMlJ*`*R_OC|(YehUv-tFXn}7fDNTOh5uiv?5glnx{ znJIuyV232Br=^Zzk{uct_~uI}8b2X6I?4a8d-rCv=5z^qzsx7W7JVtZad&L95P5G2 zToE={BVJ58Ic-j+R|b+>z8_>2r0(L&CxS4*9ypi!h8Zv){FNh}iBQBc5T5{_d`$+o z9FE#D6|$&prH?hq&ObD`?AN^1f}fIVW|AFtbK}NN;Kn9YRVz47n}yJru|dx;P6=!x;nA^?4p(A42n?WHrDP#1R)H*HVq>H@
OR@yjzYhk znwyfBa9>N`acu8WL}FYbWN8LVP9!|jYnOFJ?^x~$0xAsO>yK<N#b0PN+miqPenIL|j@N;yqAinYMQ~X5nv`JZ#H<^a@hZwk* zsh)Uk(VfVY{L(kuUlnn{MeaHF_|nI-SRDJ08n*s{E#a$2_2Y(K&FMkSoOk*bcf+eL zaaM)>PS+YlDHD#~495x7XTd=Ku}#Gt*k zTQ{#toNT2n^r~UunD5!1_RV#F%8b6@!b?xhJvYQyj$&jMW@-SWflNmd!DRd(IW6** z$XZ|c;(h&02A+)HGUC_nr{^hU=~w(^{V(5hTn;{|r*qagtn&+M=8Ks?vOO;T_iXMe z=0P_BkEc{S%hiUL!gkmu#vrkvw4OL+?$_ru4cy5$TgL4(DIlhY0NO9pTxWT&)$ecf z`SLyOjk7wgf_Ga$IwO&wqE;3sPo%Gpw6-{QRRs=i#vD34MlrDkxb?7NUolCthCVQB zBQ6fi@Bx0ZFNWUSq!0{GFi+oZ%~~>Dq3yuVq_5q-(?(lK*R@`6(pf6fYQlHLQ<;dX zB=)x~Cb-0{FfPwQxNhB^4G0Q0g*D0UAW!}hN)yG~`EdKWK!)A8WcTaQrkYoTF}R#? zBuP7t-t1NA3y{XP#EhQ_MD4STCWAdCGM}|$PTLkdO!3d_f*Q$js zJZW>WK`!i3CGPCVvLae+kTx(q#$h8dUwR}BA;%(F$0(4*F62l|PR`bi`^ABZh7;)0 zn<+p7FuS$O|NMb?lf8XD(DeQtKT~V+GuUA&g9#^ek}*>N8q;*I87h{Qmlw3Oq-ADi zGNHD$waqRpsOai41a7#aMNALVV?wr9q5u?~6X-%hLLW&QMpHnM+UqZO@5F(cd~6lb z-R6Dl*Q2eGnfcXQAKdk&q}K^*#y=eGN(^FKZZ6x8G+`0SPd}$%e|LT{f${V6BjWQ7 zw=-z0|J54juK%E_7uB^k0r*)N1u>jf zQ<}WXB<0277Y|KHmxThXRMF=q?X!sP2!f?YirvQtN1>-T#vZeX%-_~$)Msm@^tw8Z zi+8}0p_Ny67pmm!@oiKcF5^kS9#oSo0Xc^suPv9qT$0Rw#GuF{+^_HAN^aBhdDmzrJzPvREMIjd@tVOvO>ycs zV7&o;_Q%CgLL~%_Jf`g4=EKEB*5x5O_IZcOt%UUO3(l7_h_+P8@A+kPY9>hTf|);y@!gIaFu|ldYYdi>)Cb6Doj2AQ!3- zgc^22>%P{Ct;yu~Zk0QQq;zT-@LK0W1Ob&n9P@@sTeHFwa>$9nI555|H!~*tX#VX> zBhGW>Kxl<1+sv*pZcX6;1fMFSkXNGxNU!uE;(|D0+ES{@C;GZh^baCB_kUFY2)H@c z!V=eoT({$B`H+PHep*F7=nrUE^5_s7O~y-rLV9Iu$iL#ENQLzW}qnP2F>* zsX05OHpq`cHdjXCTo~XN3`&})bQGOP?%^t>m>~z%(7PjR}i#J}H7PrjAG=Ok?(!D3c+1j0Rd?cqP3)ha0ydgrsI z_&$Utlf0+2_b`J9gAPybLZ2;LKX&N}2wX*>IjAo!O(}w1%dV~`*={Hs-et#HCsjC2 zPhrgb;LdFI`<9$ZHeby%tu?!y?kXU`A;KT-CT_pxIizaPh7)P5UR>HTd=pYSIXTxe z$q-tpJLRiTrDHj|$)#}aHa~Dwk-vZY5R8iVRyS9Zec>T0-&7 z*z|OMzTUpR^Mg4$X#XYXoH-Fzx;XIs4GN}HdUQmV|Fn36ky0FhI^fqt-mttn zj-)ZC6B+ZVTPwSX&Tb+&g%M8sl9uR=uPT z#uZ{Fhj^|Z`0jW89~chVIi^;cf?uy+(*V~~A~wr7RORt3Lx-ct&|ye1rn5<<0|Wve z>OElW!231Nf2_0Lnago)jK9rk>xor{@j`NS=wV{SndqS&`kevq)wl(Mn~9vZhsk=( zHFf@JJ>6r=Bt0NK4rJmOW_yV8wQh)0z*(j}U z(b=X|f1qYC-}BWw!6$R$ z1ABkhf-NSC-`0LpLg2U1W>DNEE*s>$_B?m8^7(p8xc&$&F>wQ8erP5mPZexXGm}J+ zO*I$d+G76(7>uX6o(9c3KOqcuxTB#LZHh{WI*j%K>3Aqn*pq&#QnrN>Y%(ua$W~qP zqo}S@Q+22G=t(qYq=a|O*tHh4%zAs0^2KBp=zZ`0OXFxa4$m#Veo{w_V3r#Z;CopH z`1NO6$A#(@D;Vrgyb1~OQ5ytrO81Z5OGUl19^I zD7fY2&=3#GdBjksBKO^xYj^MN3P%IRqX7je69rZb2-$Zb6eSx7C?@wbpDf^{2tM&*>ZZ}48Xj6 z(itB73B`?MLs^*3mdTi9tuggix3YBQGH9?f;}Fbswpt%nT!g)XR%MVCg3fYYk7s?d z?PN*Iv))YaEGV@n859ycm!Nn84%j4$hicen(?Sw#fnBr1E2k$A!> zR0#d-lcbAkUgtc?;QsmWBJq`nQ~P$qy&VUyFt0wN0ke*x(SqFGH4}Q_)1%wWS51SE ztFN3q6422OYpTPsyHhD@y1pxaehhC?m$qEzNw4E_+HpnZiUHU3@JB^6eDjvKS>*V26-euLeXk%pneRVDc215(zG&{b9D)<*E zc*!7RqXQ>(8`9*K-Y@FK`zWdHl@D`5qRW;YBh+BTElU|bpNb(}GsL|_@acfv*l>Zol zwUS1LuJJ&WkUkgGhF>^afEIVGfRmlKIwgiqXE={hZzQ9gM0}4Od3Q5sW7GCV**0xl zvl^ZMtDhnjhZ04{I$fIRhf5PdI>ITQ9V^2nwFaXZMxGC5D9KxWL&h4#nnuK~D6elV zg>44=ret`2TAj8fmvsf=>Czds(28#yaDaO)>Kg&n=%t_=h)w?oa6Vr1`ag1$s5f< znC$~ZU}OBTf|<-C4Nnb%zyk3JkXbmkdWVW-!M_L)8sq_j{xQCJLV-up=_IJFY1|IP zZGEq4q|bYpoVJQ0w!qJo`sXp6#{EhMVLilRe7oYEQvx;fA#(uSD%mupGD`$!(>$q0M zCA4IG`bmw+2AoG{MOCEYhjw{49eyzpBYpNZ#uxE zFP@$jyjJM5Fw`sld%Io?0ykW!-+{p<=0b(}zJ(#14Ydt7ti1Qv2lyFtAzLQqK%jc? zR%9y@JVGcQkssITtOY3pLz}Z6gTl0is)X-Ai#kZfp0Ak3N8HV=-es_$LcO_H5_gU% z3&_UDkQR90*56*wh3Qi3IZ_-LLIo|+~i4AePMjR~c^ewOL z4StLl!WyLSJorIV3dVswJNu%%+sdiy!N$D@`TqfdLgX}pU*NM(a)hjqpUvRbY!_fY zk1sF__@F*Rx>}D?9@9V<9^`WL zV^W#HDbIlI%`Hq% zatL;UK#7a#=_(KtR%97tTQ&N{p3O{JgJAP@!n-Md-5)(6jDL^{Q(v~E`E+tNzaVgy zZwx}Id4ylqi(9Fg%=~u^e}l3_k|<%%6NjYVkT$T*pQB_Em)e4QPxR)64C^piU*>nIr4Gy28SV&Y8nW^D(g)*O`@O5#=xu-GRyWsCB!CtbFbYe;CPu0yC9O3q zrI336oW$aOCHu@1r(}Mok?68VF#n^+upX+rUHr{BiM3`FE`pnv^5qK?u(D8R*L}Uh%4fwixo>Dij_*^DdL|}bi zeI*{5CvZ^V7y94o`Q#k5(R;U-zR+VFTykWVWe;n-(*Kn%s;0@_p=bb~Buz#1nkt1M z%X3DKjs=0Z3Q+9HRld#d)qIXJGZf7xh({v1-Bq5p(wY^Jwj}>i@B77t8#k}o?J9%H zP7iBd9={!N5!310rJaWM_REAM=Be)@s!)xFs%pLVy(04^r}q{kqgf8WZG8KiOsmZ$ zB=nUYx&Yjx1&8(F5l%gX3gam%f!vYQrX#~3D5gb0b8@w%H#UmAi>9oDW?+!SvCO%# z5NNdP%6^-&8A}=N2WU+)%Fz0J9Cm*QRgYDFdT-ql_LYt75&e%#jg6buBXHAZN|4-l zTQ|BRgpVvoF!=;|$F5*&dEyD=XQ8=jVw4~IB#}b#XbsXF`Waa#5(Q9zD~}h9>gu|I z;kyMp6-n_+{@=a3h3^aCHKND)L=BZiA6XH7jGz!Mx@1I%Py9qjN0(BsoRs|AG4#@B zu~n4S?w-ItQy#X~>BQrcgz>8HEw_eaNYBfzhu14RLc{$<0d84&gTvGr#f=lYyxwj5 ztf+kAE{>0K*3@?=q~j3Q!QmmPdM4_yK;1WW#{OG>s4fw~_}xIT{VROqF^T*}wSmqz z;2-bKvx2EUl}r;l#%D+T^man&(ID+&HRO#Uyg zcjwB^(_(#}{|A1*rf1XmthqY(O<`a|J2@$kBeDBS z+xh>x@yQUrFMM5%glOLQA@WFe4{LjnXjGZvGA|L-+ZEgt^PC{nx%DW) zmGOI;u#xlYS?~_``+1H-Xav$~_kEXly=8(k#d*bG3savZ^4zv|?v4NVWV=BL%i(mS z56k-H#OB~SaAbOa!y0pSLL+fjwv|IrN@neTbI4BR_bQ%*;F%NCr=445C~yMh7-ViQ zk2S3!v=wkUeAnsSy||!%*fY1OX_qP8>(%^E4fY9eaM-kM$$hAH7{}3ofMb`}0S+2f z`=RWEisrCk2WwAoP*O?%`S4yP&UbWbhV75ym$rUb zIDspa@Ao?6>6Z$bj*s&Uxx^?esIq_d4+n@A*m`-%0I~ZG@w-XT4!^@0gbGarg<+YQ zEUQp%B&u^mhVa6t7`J^K+PJ9{>)ScvdTaMD2Y{;o(Y>$v<^8O<4gHqr7yo?i-b~}R)fjv{eT`o$?vvj2 z?3sGDdz*zgAU_Zh{B3A)8c$`XJi-hQPny%<+}^LR)s!ywb#K7O$Sd`6R|nk6_EzfN zfXv%fhdUPUXL~5A{f`3^^LY2QH&jTRu9Q!~q>1x}>2fY&s&n{K6EgyDQ%(k6Oo)F4 zjDJBr0>FR3!5O+Awc3A)K4)I}0QJzU|H5RPvySwhwMX%V33=*9mXaD2aq;jOtx}_N zc#I%;t$gP?68?acd(&+(t0v;wtbwYD9w@<~+fZ(@|^Rsq^p0vk@7 zw7a_-5jpbHz0(KKc3k;{WH?HXgf|@W@%Rjt^nWH7R5RwL*m~9YHu*DM|3~aw6KNS4 zTHgK`jNuvScs)pkux+t>F*EY4(~KBEjU6cWXZT9FAQMj|} z5cQ)8IFFCrFz}1n<#S5&nrT>z51yDOGQsdep zDJQ`KXkXF}b{c?^&ovF9J9Rs9Ab+P~-;X>g@M&U6Szgf&0aao%cOjNCG<~-_5>`79 zRpy{2LHU>71#aBdvyRBsmoE*Z1d=(1{Nw8UlP>=I_g{57_4|mpVfr=>E=SF3?88Nm zjZKK=YY8LSRDjLQ#UF90)ARxY$@eH!8%ARdWp!8$wug#~+fqJ0{7QB$N)T^5s8G<| z856b7mx6!)F6Q#~>=OsUE4Ss|v4Zi8m9||+N@%r}Pqg2_Df>4MMV>QgSM9NhZ;G#A zUVbL2_K@_0!OnGO4ye(~=YCa89!i9b&CLRl&rPVCwOg58R_B~V8=K*P2J^AU7M@Hc z>Jy89vrhQ@v{clwah)+{S>4F<0_px8rHjHFeuD`{f4!@i$!Bh?ZO<=6yw2ghdm3?Z zm}hRTCby{}gTp>CD+KN&fH(1*#x)2tJ-CAt6V$uuq>rPY8y)$g80Zo-sPnp~fJz=m z>gy`__&Z}rH|vMx@$duo1s`tT_e{(VAzHsS{v9%zdc%4}pv#nmKX4pC*MUR8k@ z*9oJ*SYfy5k9GsO;LCHSyZw&hj}IPrg*D)Y9-PXyv^y|DsEM?YF%c=vcKp4W8ZB*3 zts8pL>Gp?4f22dWVHgVqW-;eivJ1Xu8qWj;zjhNE`qBdbj|TCFVX7LJ=co5=t^~(3 zFbot;$L1}b-A7ON@9M7PWv3p$;BQ8kawn%N_z8nss2u->2!An&)7v>`2820T9;}bO zFQ%7w+hHB1FM9qI+uj940)K=hH842Cx*PAMm8I2PIe(0mD!@hGr7f=e=h%)vzz@k^ zd>dgwr|Gk5KsIckm{Wlt9yc!9l(z^*XqFe7zIS$k+~!Q8D||%` zD=rDUJPYLI?U=q#XvyJ+C^>!}9HN-gAvCoSx}3tosPx}RMbgmfI?-Zoh^od^I>WUi zQ+Mhd!9EO18~3PN3c5yNVZZXWu1DKZ;5hZ$lRM%LB~=l*>!hc>T|RDoUl`XXfT>zw$rjy?gQI@l?%MxQqq_}$v{ z<$U)d&bbIW#3h{8%7oYyn+c!$kT}Ou-0E)5nB8OJjhKJxv=3PRdkLDXEXwZd^JyKs zGS*QG)uB%(T<`Dn{OC^D|MR*)g}e5s5i=QB&?GkFIXMnZ%HhD~#K7W6!4~3~{*WtS zVr~w6<_5%^&TX^HYTIH4IWLi=lMv^F4lD7Y`eJ&f{QBz=ecG5?&dcVq@RtDi_m`QH z%R;)gQvleT$P>J>+DL}eTr}@MWoNbR}rht5e%<<@xmR91hv~V48FuT?>ZZ7e|wow z*lwC6yWs)(l{b*v#Fm#G8@;SA z&k*rePnaaVx=8B(fnuaOx!m*Lb{yr}f9VDdKQO%2v44|kTtPY1lDu_P z+IZsJIkQHJS&%?uGugGY6rV8Sj**@6VSJwp&a@yYi65#v$7P-X>kQJJ-;|s zeL~sZ=GCzD>l#3glJpdm?77C|J~-{7W5=@h*5=1a;AxWX7`c5m+j&{> zNe@fvqB?PNaXf8g^Nzt{0jEg$IDE><$?*VNRoxDn+KJ*_j=Z+PD@e%T_&2}3&Zy@m zs5Gx$$Ny~|DOESs&CVV_smR8DLquJA!7!T-($;;4jXhM=Ll(#?l|+xC0~y(URfW$B z3j)D14@oDi`CarKJst1?E}e+>hN-*MV8QRc6c-=Fy;yzaNB!^Ie7(!&W)U2|YtfKc zq+-+2(Ph>ujZSEwdz7sQ>by}5dWCfl> zE@}{W&0R9TNX69wk|>O71_1eu^(wz-v+hMAZNe96+wtu zvk1$fOU8fa#MzzLcX~{={Q^hAKe(f$#%am`7llKW)20i}JBPCOiNu=NX{O^t>*W!d zTFl4YXeFSmVfn*{VSV!m=m(F7Bmb}}rD*It%1g;w>%Sp6I$FeYUHXy`sivl;i79rK zLWQBz1BV20uIDN%s!MFGezdKbyhpJ9pM#LM>F8FVhrEf{1l_^VAl&^Vs^s(3$Yi^C zsL{=oQR}G-n;?&rQXDE&@;k`LO0j;8I75!^$dfF;tid(GB<{p~$8i?ASrMz#OcY(x z#X0X=52Fb--6I-FyaMWYzXL@hQyi|=5L#D`#CHhxg}!6md)M}+zsa&rm({mV&u*R_ z=*{w;`jvY6=^9I+g_%{_o3bN}4yk%6{3S)cFpSio~m;9aDmJNMY}VUgo|`nLo> z9nPuOg%MC717Ma6&cb~koFO-S=sy54B+ zHzkR=RlhmG4~nWc+pH1uA~CJUJkQ5IPssi6cjdYAnqODk>55Ws_BlZ>3=JCt*Ee!F zQ^^tGZ}IydMVyxgO+8&$#*w2`ozB?p0clb}YwKNvR@iHB9ohx^&Zh&y1kE-tj?#q^ zpvDWSXA`^QD)4fo-zx-xfG;^IH)eY4c199^3dX_5t+KU7rTZNHFjV4u`$zd8??Rqb+WvlV{G*e6 zbC2|r5~T;;mc1m-AvR75O@DK9+~*$SP7G6~5sN({BcC_@Yi?6uu-NIOtjBP-S0w_x zbedGzLD0UiUa!qghi_Skc09#dH2O7kCn@zx6Vk$>LOf!U+y+qOOSmPK1pMCqiJ{AH zz>%mu`>noNRSR(Zq>HE0uZUukw*?O`mgup!_bqu)+m#C{E9ZUU$vC4Iyu=S9w6w)d zVtq+_cj^p?uPm#af(mw}^m0mirqR_gjDT*2%k@k3$644o+lCriPQWVlfMTq!yu}O6 zuO5=IPkMgk30dmgWy>+kDen7K>(_)+8GlRo|DxVCGMaH(rF4sC00B*YFGm9Z1?=yM~w zobMU&LQCg(b}W6=tZ^a;fY@Zb;2qqH#tl6qpZDLXqOL2^1Xf3Q!_^h_$N_4N)V1@Se2UNsm6Hkqm(wzXpP z_(#CS&Z49Wf2vC8rQscG<>XoKF0lGT{U|6%db+OPeo)g^;@}pU*rKrA9n;8mj*B^O zz{+qnzT6oD1wDe*C7u4zFnuQ0XxVuSipGi->UEi-_Bl&ILB?f-a?2?9NSga(?R;>| z1|ve8d@j~`bx7SKivI6i_vfb>cUf0=VM@dV*%G(+xwnzUFv=fIA#FQ4qpFuDR$WWN zF^e`9AP>j~8-XARbf|HZ7e-MU20(=Gn|4mW&iGEH`|Vn64NgmlY7|ZkBmEll=TG*e z5`QnnrGJbH0P|!=o1pW_`V9Z@p=U=2x^NLevX1kC9+sr=>F=Fn<*xPL&+eNDd(&O| z{wR_u214w-H)@vfDiqAKq+r4g?JQ0`KV`fUmCoJ*J=ikfA{(6ScVG_bhMI}P3KEd1 z?KyEAH12Qs+Ga_@x2b7c2AthTC(wX5pUE)8?77 z`@xit=Q{r{hE1zv zdIUfLh8AF+>W*J@--jwMP6RBY`;`8aK9iCx<}*1&ku2Q^n+6Iq-0w4NRJ4ZH^h}>CYf1MuP3=Bh zXE=9kddt`j$y`KGpoTS=<*%P^2ECS`g#K8KSm38SdG|o;rPiA^{()+ZQ&~|_M%|ih z7nA(_^1O@sh%p0XI}>$A(~V0?>OamO$DXKr&z|*L%@SYFn##~m@NMr}4(6VR?$>j| zA>_65RW7V8bwz#szQbH2|C?yNZK`}p{9lO!=^()?XO{%KzJh0hh(zNt%~i{t?}-amt)W)>iF6P?N2 z*#BK)ZrNz$(HhRrehOaVG8#?gqI;eqOR(y%^o@2#@?k$aCms~tft@etygE$FAry9; zUF&~z&4#a1FXI;ZCW8DGD2~03Cc0lA=}d4KpofdmFBcD7{}ylO$wX6D*ON2eJzehzWeSwjY&7@~iSwMf zHoibrQl-is%J6qJgaQF)Rss$DsOAtW-J16J>i;jWA2>TX*KnL{Aqt$m7?%~;x52!G zzoQgL>E-3k?Q>a2@m&tb*(Zwxiqm;eN(si%d!&oxb}(@61mx?YeVgG=TaP{{?DdH#|pSL*JVr?8U!-Am}?4nBCwtVpUOvFb__whZYv5c|oy^re0O<8BVG#u(vGiuf8I}!Bq%Gzj^C_3#lJgr&nu`4x$k&*cX)MEy)YOsX&tA* zb;nMG3c2GUv;Pra4u99%26GV3JR>4wO()~mfmQ@`BtjRIH!5^Fnfm-Dx^`-Mse1!G zDHmG{t=92X`h9qKI22Bc^LgP-0KF@uTrA~_i-S--KPR?QP$yQhlGD@6@}}>qKDNXS z6)??a z!YfH*s8QW=uVmlpQ?-su^_8It=qB=|drU&8}) z^I2u|#~5_f?bbW@HH?gPmF`8ue(f3m{{g@_NYiY2i4d6{kdL=N@i@lNoJii!6ZA#% zoF65vMTpqYS69!|v{#OWANAWOvmy7mK6qr6zQip1jg<09d1TSNOXYE;2#yaM^WQml z`L*7J*@rz)5+CE~H~JHsblJIK>my%Msj(+};Nl|mLX4%_GewqXKXDzQPOVr?3@vKB zxv@1FYo3{nFc11W04RNfR4JEx#Q}HVn68@tKKLo{V>2}@NtJn$5R;e0o*z-f1wS@g zMw6(K3%%43l1B?~jrZ6$6H`G6yJ$Xu1gxI(9i8qS%X8w!mM{ICEPRTB=@hEhAPh6a z8T*k5hn$?er*)e!oXKj#))Qstcd3%HveDS@0uO!0ouT`$ZloTay^>r>MD8`;q>v~> z7~Za0n^}29v4*E^YC)s>Ja3sj4>3#a%rLK>Q1h+Ym zuwDw8Hucl;4lMB;dSVG&U)w-F1s%02R0}O2%1*B72>bcH94XFm4ze>(`w%W{cl^=E zIW+KXlAm6g_@jEosp)i~731>qW_az2wGR*Mx4c+vJJ2_9-}?ImN8vx!9^rHQ>w_i& z2@VyVZ-L;BBR0SLF8e#5N+DvHc&Do$2xNxBi$w1?cS>PlevdzZJg+UYQ;hZBM;OQJ zT#7(U3JF`kJlzs+n-sIP+)|#`JddEt-R>4S8;mJ$B{G?BPfuvJjzwNwejsv*`8;Hc z`})Kbsiak%zWx3HPs78x^1O6AYJx?Pnf%iV{`T4sd50JNNK&O)WFqVoZVbrW9?x>9 z-NL6i`Q1oTwa@(*&f{sy&#OQPe1NF#>D>kC!>FO#5fIH5+I318l}oCDzmJ- zGDStb1kc7{q<(IGltVrRiChM-RyJl5YU9w@*a%)gI`2C!fr+?c2F8RZ>wgE{UQ~98hWW-hbP&ZL*kO*x#@4n(|t61XGlY zUek3(LVkRUxI#6M8*NowuG_mrTts7Oy(Jt-d5OcAXk(wiUy4R`S>yh*`B2;@y@7;- zL(D{w<1-H}k_sGhjIMn?*+RfEa=fC7is4ikp@S4dQQkeuO{s~-Zz!@hyn8e+B(9v! z(D88Y^d?ThxOpHh4>!%y%c8eNAt|rkj-y5^bEU#_h=o|-hJ@}{{5TGYgw#;lf`1h# zfy6FYE2r4=1ybA)h&J@}t91Qj3j6kk8jMb#f{6E;f zj#Y+A{D5)Ai=0vMf0d?nguZ>o_oUmufS2(#XhTVUx(pd8(XUA5aA!~TPJbJY1_P2lU} znxDeAXFO(MvnT}KFnyM3KeT9t`OO46xsGymW{sTjoH#?r+kag;pm}i6$G&PDR)FnJ+KNH07d(L1^>yg=IQ5B!>eT z&hvT!m90FE;On@oAk>v`0clAKnw%VO#ntVB=joze8#aTE4!RZ`24Q!5nAL%AKZkzj zY+Wf`saqS9IwisW80R-CQ~N}o7Z~vy7FRkfK#9cT*sxL?dWsl}1EQUyLz2`JqHo%| zaMsq=v$#Hkj}H=v*Q^qoKWe|pdA~WtMvqle9z~rHNPYm>0s*Ae!+fw4^s?;nz9d5ePI>n@ft3{%S1G6~K;mWY zf`t(QfwXx6K7nUsoazmZ<@j7lsb6TQ@vH-_Z)qW)4l0@>SANnvOx0mE&NCj)aR1?_ z*Ru--TY5Y@i*hQSg3odk&{dd@eEx<5?1-^wXnK;8(%HoShkgs_#=sqvb%|C+QjGXN z=(m-P@pB2K6&#@jj-kfyvoHR+zsF4Kv%rjv`OwpBWUX97zU7WgJQY>%!-*3%v|o-c zM>#6`jWO_{uFkrHpNdo}c^+$HW5emHiGUEF0{-k!@m3>jH5`SFjU+lfLB#ztk{16W zZzl6D>yNV|DQmPB7}$IL-etJ4-H4@z+4~~%bTn%BYN;wPw!S_$Nf%SJEo=yMH!xP0 z`&kneJsqAz?-Q?P9f#1L@bQ}>c?Z#>T5-yifp-)XacRZY{aOfkjIzR>z0_Pbu_!4= z5NElmbxVB(Yc>8S=#kcjW7}XNB%iho%&UV1T=~v}l)E}y)8TB9bZW)zS(QBi?3OEbg5d!LenHYQ+~jL;xCU)ICLP9xC4Y=0^IY#6ax^L}inub;`d zvpwv>r!X&tyUUzp%h5Y5H{3cm0}GLA)7T^?L9?xCDpJ6lAZxFfij569W<|fJcatdAs1~a=eGC=Rt_pY(Z_Ew2btjrG-vb42t5SMl|H_}&tS8zcbNcfAYIQ~(RuKiqq$jESi-;VclL-xzLu)0~xj;k^$_V?J?swLb1-an8RX zN6BMVE=a53_^@znP-DUhbb#tBo9&#F{@-jHOl#l0Av`w@7g9ucO`^xQ!GW{9E!u%B zQs#F2cCnXy@ER_=B_{ETKnn_W;4ep^~%t<{Rt z&AF$cXL0L#w1qbXl*-e0Y8F3uN_~jKF*L~24%&7x7k*7=P;g(u$fAbgL4D!c~;(bZk zVf9u5YpQAKAY#O2UH$aDYG)LMV1D(#gLN&QR-VIjwMq@G{-)J1c}kPu_S}Bf1gKfM zZLRLS=CJZ2P9@JxyUy`Il+uNedm~L}_}Yz`u2frd@8pZCNfeNi#XHo-6BYZMca^C7 z^@2?SRB!vx4MfdG$m`vj=9k*b>ewK>_SvIDOw|Ccz!1v+7`0Oa?d%f`M+6(9L z37eRE#dN4d2?|zEg{m&`=Usgwd+!?UCf}X40tgAY-Ibf=tGWA^k5|hAz~TfX5R15b zQnKIYa4cOIRsze}u}`FdBiVCun!nFgD4q!(derT>J~bF$dtJ)iHP#&>$d@HxTe|jh z>TL~)#go8Swa#m^A&S;DjgDeks@%*y!7uNQhc)kj8vPsW?X$drZwR1~B5tVB{-^SG z8I!Jx-a?`GrF1$M^AOXa>p9MN-To~(Gj42jzqzfw-f#TAbRCB2e7KEIdtM0@^pZTP zh}OB=ALyVyIUJF%gtgHzNhFnj81r<2+*l#K6mn?x|yZ+Ii0%*VU|DU~Soxi?(w*^CX zpWuBaJ2s^#rKE(dicN*3ivBcxb0=}^(k0&aN;*RzE`CdH3bdVDh7M{ujaPVzqUc8D zn_KV>(lUgybB3R~x6v*o(U|l?h}6rA{Dvv> zP2}Zt>|K+K{Oeu3O9f^pa)y&75K$OqCGqzliPMKzhYz(-99Z#Rh>_V?wqwAz;E6|o zeHro}@VC37;~d5$&f0^)5Gj4kWiwLd`ee z9KwRG4+9y&=L&rzW#Y;Sd5Lj9ZlU{xj@O1ypMcT9zgXhKE73zXOfE66z-OKy&4d29 zamP@ZJ-oDM2zu*A*-;N95=`52PjnX>RUrOd{s&VtW@R$3Vjt8}>IqCDTUzKo@cQs9 z%Fm>WYKr0aigCzh_v+8axM*1j{rPk_Eeg8sdbg%o;=}oSX9Yn@p`x#WM`Q?uj#846NyJQo z?^97d@5@w1m*2AI4|J&4Sy&r179s-C(yxJmZ{u#$mXjgiGG0Oq=>muc&Oundp}F+p z+@Ey~kk~X$pKrX?4=u){pY}}40+IsH{6t-BYp7YaczXDrZq}eHdM+n?riT}p)3yx^ z2DAmU5Y--Zvx8F4&UUWnEPe^r$F0TMb6gDaa_55&JAyyMk5sTHO;&YmR z(ctTbi`c6xg7q{M&3(7DxRz-sQImqiBcpRI>DqkG{`GEY+lD;v)*Kn_u7<xdKDt9Mq_Og}WmjQ@XlD9i5yY{r$J{og2MT zygm;C)p^XkDH#+%bq^5jzltXKA)x71($jmSVdm!Hk@WGTAd!LrS$kLCX$uF()t!)M z60~{j`4VR})IWm8$S7~|7ODj5l*akZ3K3$T`G?eLoHJULbg6twR8S**$HkRM>xvwX zPUQrX=ZjI=sdEFxsNfboO)8BP*M!71W%x+M7#cCWw_5B2(i|&CL=?I;!-X__V;(D$ zWg=MuE|XsBY_8MEY(tXX5)$(BFEa0%7HpA$q_yWrNo1^xX?~Ix>Vwx`W|zPFjm)p3 z&_jWAU7s^Ypc3vy&9oEGjW6K#kYG_!g?3)L+RwJUEmEn+YGKH8MOuC8>2eb{!!Hb* z*q|LzSsP83q09)S;N|tru|*vFs1;m1xWk~c(H^Jt#q!y-jbYfF1rjncq!}-~M1%of z^EIB$jPT(^=GlbL6m_*T5du?ICI44-uv5znp~r{lD>hJK%vxpCMQ|BmAfz@v-PQQg z48Y%mBJO$&-DP%$mX0ahvZMCh5#7jY`rzuI5a0J5C|ud!bGs}P?sZBm^P#4%QWML> zl}zy?Aq4DlcK51ZlFI{f(IlxH>K+r zGa{l7sUC#6Ng5cu)?JSi`Rla=5n#0z|G#+{dI)!@s@eTq(=ErSR9`6Z0eYGR&5!tB zssyuQFV@zvgw4MrqLBr}O4%uo-YP3Hw2hs-3sTXd5=t#I%Gv#}DTU5~Ch*t~S~i14 zJ%;$)uYwcj#AK{+zpa;hynehI!!7>QlBW7zyIjaCKF3>v)xqNn2Zqy*Avw?+6v!0C z$n*{foy*W7G01a@t_xxuUuhNy7W69x50mo7$+_7s1ssj(i0%jfwHfH8WjpHX0-6E4={~nx@3S*5|M7WWEY*S^+zL4NKQn=Y*kgSYv&lZpn6)_JZO=)GJnZ`T zFwF_=+P@=<>d-czeJ?#S6DY>8xH~lUlgy#^FG$N~LpC-n@DA3t>w5Wzum)IIA^3Nm zC9$=f-wcKFG?|5TLs4E_)~Qgl1N0%#kYs1`1gc54v@(HgWmp%nHWqE1=ZbnznJ5m1C1+#` zt}9xP?GKC0$ElScNx9#~N)Etlu4ld+2bO5uNj`_JvOgP?muiIEJ?y&SLHb7`>Yj}{ zp_QyaFufW>Vgj9@M^Xt0oxD9q1}B9W>Unng+P0Ky+ivOJ4w?U<(WdXTsLn==#w0VF z$a9;YP=N|e`1sWOUs35@2c6ek2_rahMAPg=c5|?yDfpG2hlFuTDmH{;ph3_OJd^a8!pi<@d#KF8jT^B#eIu`rC?WQ5+0UnhV2N0bL3>b3>rE!yUzj0c zT#$&C&-d(jyWG;$8-PWh3ZH#vogj?Z%FHRKz@Vr-&qg=<@1OsNci3(cCZ@2C!)GdG z!Yi5TSPw=vrRJBUds)!)_=UfHt$lVj(7sZ1JkntICa1toX7%ubGH1g{3zMih0^%ol zop$w4FFetC(}K`LsEprM?GIpx*t+HAoHDw2J9-|i)dg(Elz(Kop$)1!7hP1 zTV)Yvthmw0E=_!q{C zpoVUMIYm=PB!2h7PF9_zQe|hoC$PJV6R`SC7I3U|{UHmO?6!uD4d|V#)4>7g0UWOuwEViT zw1}{GJU2@Lv8C+j&AGA1_S7kosAoIo)~AhL+F%@is*1io=|~YZwL~gYgOA~;DsL;} zw%B4FQm-h-I2dh}|2|4YBCJQ_2@}fnCdp4rZLs4|ih+9i6PwY+Lqf_{P6q$DU1z?(v@gwm95A-qFnOC9-jIZ35^W9a3@cD;-xNFj23VM)%ljMB?xGhILb z%0jA)S!LW}2^>DuG@MTIBfl|qISb=qlyDg`{&AYlZez9x)K5OCG+7b$l& zvrSqU{=w#kOxjG`xmsCi3=&_r@~;o^yJ5hmY@V?s-w7?=&F#lf6E!mn=t!r*H&#US z)Jom4fL<`BtbD?MVicRja3@FJjg98qI$M+7EU)iT8XHsab?!`ZAOUC*4!apD`|Qq% zT3x7iuxKbde9g0=kfve0+I>k+^Xr$wR`W4iuhfZ`;V~JD zTvDMSj8=i~zOU|zEb-Rl8(izABR|SF4pi55yIYj)d0*AIe@WUtOquBN$yFl-xO@^-P(_(wm91N=?|iZyNL+)mbm_M z*bwKkT@2on7a3L`WJrjre0T~UQI+vQSFz`Pqubc4$A5K|fBItQV)#Lxd&;zVIIoPO zxws$D@Qbb7Okjf=cS;RbreOSgkF}3tGs-DR1LIO$G}wxaGYGwcC=nz{<`AU z&BLOEN00Br5x)?S%_;itr2JR6>yz@wjZRr8_@j3E9oiIXL#PGZXlULDJRnS?3M#U! z=MoL9{|D?B>$csCXnVJG-Vc6${mXWmR?IJffG{15E(}l^WF6SeS)>l`UmefSu0E;8 zuI6x!dI*TBN$9I?-EK~J`Z40UtP+eRiBSs@&L$`Fi7oZpklAl(!mTw10tg1hOy~K{ z-FLt~0R=SxU=AQ#V3J)_HDP=>MMn^`DA`HOHz?LFk(lmVVOJZH&7k`NLaHD=<>1cD7h{$@t!y8=!eZ9Wz|b#_ zYH4}h{!QkwZ474}OpAjarwXl4%dPT>&48O<&G$M`3}Q4Bf6%kcHfvz{;!fyq{uY+` z+unPXadL1(164L198NPi1i-iPS*19DcdV}nA1~T*I8%0#Tc;UjsQ zLu(tGp~=0vBch|ob+?0H@@Ltv{E%W)HnFnbzVW5}PKn^>`|btBtFJ^aqV17cSt-e2 zVtp^AT*qC9k0{e~Cw3Pf@86iIbvyK6o1wUSt3IBIG|0KmEU2Q}k&?Y@x}f*T%-^F( z98B$Pa*w-)q=)f(?FoMJ_NG^V3f;Q@2G<~Z^FhOyBR|YDYah$${z@MY@1}XIU3;#D zKlJ-IJ+k*X=(PI7Lif*Mg8WhL=RZy>ec*&WB@Zt~ex+~bx&h(qkcbGXH66ZT5PhTC z9VXt)(~{TLI@of1H~z(%gpioSeK*^7&0CPGcBAE6O)nTeJWN<|lN5=zpjo-wPx_{H^wcbP(+=w60SE~ z+9lWohwf9x6S86v8y$_CSU1M^Bhu@w4S`?Qf!$w#pb7`5&k;5>afYF)i0ZbRhXuk2xATQXg}K?;K%55YXSiCEKc}^BQ}~yHvk|p@ z&5XM-^qX&UGPq79SU%Gu$3plOru$9AIK#;G2jzxVhnFj<`;2-QM0p zkB?^*;nX6hkBH1ra3?C7>pD&xs;2pb!d zE42xxH-oOo>A+c;_G`YhLG5xnX}Y|4WuuA`heC~%c}^@b;QX77`B}8U(d2)wK%V{o z*jRZkA|g_(+n5N2nnx1x3d_od6TBoA@+R`}@c~BFpL1?DvI362n;Q>cUy_DQWvSx` zUe@a{85$Z&%F0eEVgdJyDwg->LIk1Gf9}$@G0WU0dn%*Tv&i&pA;`P4?yiUR=;6-Y z?ba|-_wajl`&Wo^R5Kh)+wUq)$)bB|URFc|lX1vp&vIY*o_1S-VB|S$ zd7!LUu**t`E{UJ7kbCBSY(ZJwtmo6p*UE07baB|XGWO(hJ_3iDNu$z|I~-VjA0jsxv>QHucclYrfLX2iVC`qei>9QuzXC6%}f>X4#7}2!e?zich~RdlGbJ9;NL5# z)B5L=H*0mG^sqR?)M|Bxh&DR0$-SP2Q(V3Ytwzec}L4vjo#@Pyhv97aBFW;`|o>D}*vOk2Ibblz>BA5@v>Sboh2FA?CG$~=Mj zX;!fWyVkyBG23z=@Lc$nESrhi&39&~w^K?AXLr57{dCm$$dsXjC+AxjKDu*kWFz~! zq{n)iIk~^mb3$r?F908TCHwp9v+SMowgK&sFr5*0=Va=Vfnob%O4*aS2)TbA*B6yx25Dz;v zR|WK}F5_-X*EK7ikx*PU%ro0p%pkZ^;=yoE$-ZO0wEVV%rC26pWccB207HMmYj()b>6*&yomVC41365Q#{wwAh0*cR>{5d=h zi!PQ=&CMP!@-;5@q)kEh3`)F*U;O)K%vjuwP!RP}!&e&I_`du&e^|U5B)GEG9zZVp z@r*h$Ks46tdBb~`^Uak?4R(X^aI{tm(TQj;ST@g)_1`<_*2d`YHu6C6a(rnD^DY4 zPSEA175_{-{0)&Y!~A6}srhpAngDAu7MAGm-`_nG$*EJ`=}L-`lpIZcAx2EO>r74c zGFeBOIlDn18H|x7n%UpEY1wAUW>lTTsw1-@If=GBU+2rsZL_5>P3H0q(G~o%m!jrP z9dG>Xq-6tNT2&2qw3DNd9bz+NA&AYwx$&2d!p`dO8}cZhQ z&ZTCthg*^=b2m+6GgJesv#_NUn2o?PGmE~ppvK>|@Jdnjt^UL;Xhj_*2=%uKMiu+_4|sc%y|!lH=jS(DVS;R6 zU|<=KMM5$>o+rZ#zODK_LxO|h?&iNw931@b=Kp;oJSNNS_CU<#Xj#D;F7e0yT4Gf> z!Mx=&o3EG9#A+Ah)YWkT2?ndTKB=b2ruPnTo6jomp$c(V4JVDAqA= z!AsnkHzyvfcqqkstr?4pI^z=)y&nOJ86e#qH~TQYq>^O%K6sxYh1Gdc5#~<>EGY^7 zu(Y(@7Iu8^A_0`5-1*U)Use{ys9j^fH%SKsrF$mJaRbaaRS>YkgJA29uNoGF3p z(NR=)?7XR;BdCM0;~*TS71~3_ddIa3cUw|H*v95bhLU-Mn}yusqpwOVX&CQm`lVULpwX>wY4=YY;1$dIpE40_B?%k zeecN0{eUM6EI#q$itvWLg6heQU1!IQ4Oe%_u^4=td8czwYrZ+1LklI|)JImf!vuwk zerOrAHz7pXCX^I+!^yK}lO%DfSX{)Z?|8*FsUhjSYPda=-rMm_kE-yef21jW_2=3n zQ1X!JPZ{Oli2JWdaW~q6wmyYf(9>JIlWLldw`)lT|V-PJh_M_y+&~zT#=7#2c-RP6c{DHcd7`l#%G=x zwGt=YX61K_>)I^Qf^y7%6gGxcfCp|e?=rXlIqZWCpt?n*&0+M15YgKl$@B3`SX#O0 zm(N-_aE-0+;kiF*r(!nF1&^6$WmSVWD~N4V4yePcO^M`6M@m;dSjG8U;dUf(3C3H; zz1*iI3I(IA(hgJHt&^<_F|J#RvEQQr(4cK~l!awbzZE^IS4PiA$X}!r1wE<>J$e~O zdVJUcj!E&vUvSAyVCmutoo#f+$rD9P8#y9xY|v{DHPTGoz{+`i$vL280GItSVuIt! zd31W4gx7_y@q`oim**0jX^Ug5iq%08U6~Hl$23N+CNI_EOnaOOh?^R_qlV0pCI}SMNt=1jq&^9-9B%ft;mq=P2QPT(5H(oM zn2KP=F%5PIBZ9{xLAa&%aQ|wCjD|=U`myoNCZw3xIgwpy0RM6Jy~`o0>2{jEqxhQQ z#TDB4f^&L!Sg$0fJM=wBez2Y)yhnKbiiA9G(XW{ytnPZlc%^`x;_A8K@TRgAXUu1= z3`|X`kJ~2pYlcWW>xMjWCOr~@xY?MH>Z;L+jb_F`L#G=9Q+Th!4P@kKd#Cl93I;!u z_lD;<6o-yboAi>yw{I%%PRN$8GJDU%{9Yq34BoaWKFhdaj2e7JPIsu%@hPRRu3F;P zyxl#%=idnwS2=$;iIcG%(M!6KU?h$p4w4zTOh2!iu%q8q6?c5gbv}7uPJoxa_nox$ z8iqKReAKlt7oKO!k*QQQy0|32T$(5AH5nyJ*!D&+oePP{The%yUI5%nfb_(Ji3O(V zBkYR6=4p#Zm%!zrbvBFfE08nQ_196JX7QY707=`7Z63!B4}ap|W_u8q@@p0i1zTmd zopo+@8?{*|Vd(OwKo6}#hK4Q)d>8%brylj*WHFVvLhF*kOma`^`UHGJ&n=R3Gg>4w z%AY?mQ$;!@%~Og`9}K~wzff~p-*h*Gbt_rhbZqQ5=P`>tc8}14?x|_ct<3FfCU*L% zCVf!tz8;dV#z<%oB>N(s%$CKuZqpuH&q=o34mGvtV{4;*duqR7`~)Ts4q^*BOl&18 z`8^H^LRU@%Ls8xMQ)s0Y+u|^(Sq#RVU33a^t9wN%s{^yEHV#5>@kIQwW&DHWH}JUz zfiVSQY9HUk+d5X_Fm$x-uS-tVkt6JftbPZj(ACbQ zVRKB+@{*Jedvfd4lk0OdF=jy!`r#1gN4@INy8xjVGf{Lf4o|c$M>ev^PKgl}^RuUy zl$lbL+y6YHi6q|ficBVJDA#EfSIWbDa@U~ClKk?QfTdHzkGRIet_wcg_t8uCx`p^>+#q;^#9U=G7PPr$k+3kdiJBa0V zQ6+wuCbJ+tV72ozE(>>#Z}7!3M!hMze8npep_bpa zbg$-)M2z$trfd4x`!Zf_D%$g~C#kTYDJ3^t`BSiL-lJ8Zp}jo|;MnLidwiBP;UEYJ z52xhfy0U7OVC8Rp6O~VxKfw884+?$9dwDj4)*T)FMp;FLj-H-SrB_}|?4{XongM`h zZUL|!PcT%!M10-Q2;Dy&-6!_E1YhaFNZq{n`1wz7ye@#eiu$Hc%%DubOr8g{PTk!Z z<>&YV(4aw(L_k;9O~8m1Jzeh{P7u~R^erljne@+!3ix+>^b?97{~(Q8Z`x8?>mLov zQcjg|9>6YXy3g8EiwC(4-p1$PoUFRySxCiOTp4Mte}RV0V#V7TIsTIWDtI Date: Tue, 13 Aug 2019 13:53:33 -0700 Subject: [PATCH 014/358] draft --- .../create-a-windows-10-reference-image.md | 9 ++++++--- ...y-windows-10-with-the-microsoft-deployment-toolkit.md | 4 ++-- 2 files changed, 8 insertions(+), 5 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index ca7b8f391f..02b7374862 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -563,10 +563,13 @@ SkipFinalSummary=YES ## Build the Windows 10 reference image -Once you have created your task sequence, you are ready to create the Windows 10 reference image. This will be performed by launching the task sequence from a virtual machine which will then automatically perform the reference image creation and capture process. -This steps below outline the process used to boot a virtual machine using an ISO boot image created by MDT, and then execute the reference image task sequence image to create and capture the Windows 10 reference image. +As previously described, this section requires a Hyper-V host. See [HyperVisor requirement](deploy-windows-10-with-the-microsoft-deployment-toolkit.md#hypervisor-requirement) for more information. -1. Copy the D:\\MDTBuildLab\\Boot\\MDT Build Lab x86.iso on MDT01 to C:\\ISO on the Hyper-V host. +Once you have created your task sequence, you are ready to create the Windows 10 reference image. This will be performed by launching the task sequence from a virtual machine which will then automatically perform the reference image creation and capture process. + +The steps below outline the process used to boot a virtual machine using an ISO boot image created by MDT, and then execute the reference image task sequence image to create and capture the Windows 10 reference image. + +1. Copy the D:\\MDTBuildLab\\Boot\\MDT Build Lab x86.iso on MDT01 to C:\\ISO on a Hyper-V host. **Note**   Remember, in MDT you can use the x86 boot image to deploy both x86 and x64 operating system images. That's why you can use the x86 boot image instead of the x64 boot image. diff --git a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md index d15bf46848..f3741a075f 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md @@ -66,8 +66,8 @@ In addition to the servers and clients used in this lab, a Hyper-V host is also ### Domain credentials -**Active Directory domain name**: contoso.com -**Domain administrator username**: admin +**Active Directory domain name**: contoso.com
+**Domain administrator username**: admin
**Domain administrator password**: pass@word3 ### Server details From 0c1878771f21c0fbc42c90a5a8cce368662bd933 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Fri, 16 Aug 2019 12:11:20 -0700 Subject: [PATCH 015/358] draft --- .../create-a-windows-10-reference-image.md | 108 +++++++++--------- 1 file changed, 53 insertions(+), 55 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index 02b7374862..6e8d2d2d33 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -529,37 +529,36 @@ SkipRoles=YES SkipCapture=NO SkipFinalSummary=YES ``` -- **Priority.** Has the same function as in Bootstrap.ini. Priority determines the order in which different sections are read. This CustomSettings.ini has only one section, named \[Default\]. In general, if you have multiple sections that set the same value, the value from the first section (higher priority) wins. The rare exceptions are listed in the ZTIGather.xml file. -- **\_SMSTSORGNAME.** The organization name displayed in the task sequence progress bar window during deployment. -- **UserDataLocation.** Controls the settings for user state backup. You do not need to use when building and capturing a reference image. -- **DoCapture.** Configures the task sequence to run the System Preparation (Sysprep) tool and capture the image to a file when the operating system is installed. -- **OSInstall.** Must be set to Y or YES (the code actually just looks for the Y character) for the setup to proceed. -- **AdminPassword.** Sets the local Administrator account password. -- **TimeZoneName.** Establishes the time zone to use. Don't confuse this value with TimeZone, which is only for legacy operating systems (Windows 7 and Windows Server 2003). +- **Priority.** Has the same function as in Bootstrap.ini. Priority determines the order in which different sections are read. This CustomSettings.ini has only one section, named \[Default\]. In general, if you have multiple sections that set the same value, the value from the first section (higher priority) wins. The rare exceptions are listed in the ZTIGather.xml file. +- **\_SMSTSORGNAME.** The organization name displayed in the task sequence progress bar window during deployment. +- **UserDataLocation.** Controls the settings for user state backup. You do not need to use when building and capturing a reference image. +- **DoCapture.** Configures the task sequence to run the System Preparation (Sysprep) tool and capture the image to a file when the operating system is installed. +- **OSInstall.** Must be set to Y or YES (the code actually just looks for the Y character) for the setup to proceed. +- **AdminPassword.** Sets the local Administrator account password. +- **TimeZoneName.** Establishes the time zone to use. Don't confuse this value with TimeZone, which is only for legacy operating systems (Windows 7 and Windows Server 2003). - **Note**   - The easiest way to find the current time zone name on a Windows 10 machine is to run tzutil /g in a command prompt. You can also run tzutil /l to get a listing of all available time zone names. + **Note**: The easiest way to find the current time zone name on a Windows 10 machine is to run tzutil /g in a command prompt. You can also run tzutil /l to get a listing of all available time zone names. -- **JoinWorkgroup.** Configures Windows to join a workgroup. -- **HideShell.** Hides the Windows Shell during deployment. This is especially useful for Windows 10 deployments in which the deployment wizard will otherwise appear behind the tiles. -- **FinishAction.** Instructs MDT what to do when the task sequence is complete. -- **DoNotCreateExtraPartition.** Configures the task sequence not to create the extra partition for BitLocker. There is no need to do this for your reference image. -- **WSUSServer.** Specifies which Windows Server Update Services (WSUS) server (and port, if needed) to use during the deployment. Without this option MDT will use Microsoft Update directly, which will increase deployment time and limit your options of controlling which updates are applied. -- **SLSHARE.** Instructs MDT to copy the log files to a server share if something goes wrong during deployment, or when a deployment is successfully completed. -- **ApplyGPOPack.** Allows you to deploy local group policies created by Microsoft Security Compliance Manager (SCM). -- **SkipAdminPassword.** Skips the pane that asks for the Administrator password. -- **SkipProductKey.** Skips the pane that asks for the product key. -- **SkipComputerName.** Skips the Computer Name pane. -- **SkipDomainMemberShip.** Skips the Domain Membership pane. If set to Yes, you need to configure either the JoinWorkgroup value or the JoinDomain, DomainAdmin, DomainAdminDomain, and DomainAdminPassword properties. -- **SkipUserData.** Skips the pane for user state migration. -- **SkipLocaleSelection.** Skips the pane for selecting language and keyboard settings. -- **SkipTimeZone.** Skips the pane for setting the time zone. -- **SkipApplications.** Skips the Applications pane. -- **SkipBitLocker.** Skips the BitLocker pane. -- **SkipSummary.** Skips the initial Windows Deployment Wizard summary pane. -- **SkipRoles.** Skips the Install Roles and Features pane. -- **SkipCapture.** Skips the Capture pane. -- **SkipFinalSummary.** Skips the final Windows Deployment Wizard summary. Because you use FinishAction=Shutdown, you don't want the wizard to stop in the end so that you need to click OK before the machine shuts down. +- **JoinWorkgroup.** Configures Windows to join a workgroup. +- **HideShell.** Hides the Windows Shell during deployment. This is especially useful for Windows 10 deployments in which the deployment wizard will otherwise appear behind the tiles. +- **FinishAction.** Instructs MDT what to do when the task sequence is complete. +- **DoNotCreateExtraPartition.** Configures the task sequence not to create the extra partition for BitLocker. There is no need to do this for your reference image. +- **WSUSServer.** Specifies which Windows Server Update Services (WSUS) server (and port, if needed) to use during the deployment. Without this option MDT will use Microsoft Update directly, which will increase deployment time and limit your options of controlling which updates are applied. +- **SLSHARE.** Instructs MDT to copy the log files to a server share if something goes wrong during deployment, or when a deployment is successfully completed. +- **ApplyGPOPack.** Allows you to deploy local group policies created by Microsoft Security Compliance Manager (SCM). +- **SkipAdminPassword.** Skips the pane that asks for the Administrator password. +- **SkipProductKey.** Skips the pane that asks for the product key. +- **SkipComputerName.** Skips the Computer Name pane. +- **SkipDomainMemberShip.** Skips the Domain Membership pane. If set to Yes, you need to configure either the JoinWorkgroup value or the JoinDomain, DomainAdmin, DomainAdminDomain, and DomainAdminPassword properties. +- **SkipUserData.** Skips the pane for user state migration. +- **SkipLocaleSelection.** Skips the pane for selecting language and keyboard settings. +- **SkipTimeZone.** Skips the pane for setting the time zone. +- **SkipApplications.** Skips the Applications pane. +- **SkipBitLocker.** Skips the BitLocker pane. +- **SkipSummary.** Skips the initial Windows Deployment Wizard summary pane. +- **SkipRoles.** Skips the Install Roles and Features pane. +- **SkipCapture.** Skips the Capture pane. +- **SkipFinalSummary.** Skips the final Windows Deployment Wizard summary. Because you use FinishAction=Shutdown, you don't want the wizard to stop in the end so that you need to click OK before the machine shuts down. ## Build the Windows 10 reference image @@ -569,41 +568,40 @@ Once you have created your task sequence, you are ready to create the Windows 10 The steps below outline the process used to boot a virtual machine using an ISO boot image created by MDT, and then execute the reference image task sequence image to create and capture the Windows 10 reference image. -1. Copy the D:\\MDTBuildLab\\Boot\\MDT Build Lab x86.iso on MDT01 to C:\\ISO on a Hyper-V host. +1. Copy D:\\MDTBuildLab\\Boot\\LiteTouchPE_x86.iso on MDT01 to C:\\ISO on a Hyper-V host. - **Note**   - Remember, in MDT you can use the x86 boot image to deploy both x86 and x64 operating system images. That's why you can use the x86 boot image instead of the x64 boot image. + **Note**: Remember, in MDT you can use the x86 boot image to deploy both x86 and x64 operating system images. That's why you can use the x86 boot image instead of the x64 boot image. -2. Create a virtual machine with the following settings: - 1. Name: REFW10X64-001 - 2. Location: C:\\VMs - 3. Memory: 1024 MB - 4. Network: External (The network that is connected to the same infrastructure as MDT01 is) - 5. Hard disk: 60 GB (dynamic disk) - 6. Image file: C:\\ISO\\MDT Build Lab x86.iso -3. Take a snapshot of the REFW10X64-001 virtual machine, and name it **Clean with MDT Build Lab x86 ISO**. +2. Create a virtual machine with the following settings: + 1. Name: REFW10X64-001 + 2. Generation 1 + 3. Memory: 1024 MB + 4. Network: Must be able to connect to \\MDT01\MDTBuildLab$ + 5. Location: C:\VM + 6. Hard disk: 60 GB (dynamic disk) + 7. Install OS with image file: C:\\ISO\\LiteTouchPE_x86.iso +3. Add a checkpoint for the REFW10X64-001 virtual machine, and name it **Clean with MDT Build Lab x86 ISO**. - **Note**   - Taking a snapshot is useful if you need to restart the process and want to make sure you can start clean. + **Note**: Checkpoints are useful if you need to restart the process and want to make sure you can start clean. -4. Start the REFW10X64-001 virtual machine. After booting into Windows PE, complete the Windows Deployment Wizard using the following settings: - 1. Select a task sequence to execute on this computer: Windows 10 Enterprise x64 RTM Default Image - 2. Specify whether to capture an image: Capture an image of this reference computer - - Location: \\\\MDT01\\MDTBuildLab$\\Captures - 3. File name: REFW10X64-001.wim +4. Start the REFW10X64-001 virtual machine and connect to it. After booting into Windows PE, complete the Windows Deployment Wizard with the following settings: + 1. Select a task sequence to execute on this computer: Windows 10 Enterprise x64 RTM Default Image + 2. Specify whether to capture an image: Capture an image of this reference computer + - Location: \\\\MDT01\\MDTBuildLab$\\Captures + 3. File name: REFW10X64-001.wim ![figure 13](../images/fig13-captureimage.png) Figure 13. The Windows Deployment Wizard for the Windows 10 reference image. -5. The setup now starts and does the following: - 1. Installs the Windows 10 Enterprise operating system. - 2. Installs the added applications, roles, and features. - 3. Updates the operating system via your local Windows Server Update Services (WSUS) server. - 4. Stages Windows PE on the local disk. - 5. Runs System Preparation (Sysprep) and reboots into Windows PE. - 6. Captures the installation to a Windows Imaging (WIM) file. - 7. Turns off the virtual machine. +5. The setup now starts and does the following: + 1. Installs the Windows 10 Enterprise operating system. + 2. Installs the added applications, roles, and features. + 3. Updates the operating system via your local Windows Server Update Services (WSUS) server. + 4. Stages Windows PE on the local disk. + 5. Runs System Preparation (Sysprep) and reboots into Windows PE. + 6. Captures the installation to a Windows Imaging (WIM) file. + 7. Turns off the virtual machine. After some time, you will have a Windows 10 Enterprise x64 image that is fully patched and has run through Sysprep, located in the E:\\MDTBuildLab\\Captures folder on your deployment server. The file name is REFW10X64-001.wim. From bb72e2c135a40eef5270459a20beddbbc9b764cf Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 21 Aug 2019 13:37:31 -0700 Subject: [PATCH 016/358] foo --- .../create-a-windows-10-reference-image.md | 2 +- ...0-with-the-microsoft-deployment-toolkit.md | 84 ++++++++++--------- ...d-with-the-microsoft-deployment-toolkit.md | 4 +- 3 files changed, 48 insertions(+), 42 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index 6e8d2d2d33..7433bafabb 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -31,7 +31,7 @@ For the purposes of this topic, we will use three computers: DC01, MDT01, and PC ![figure 1](../images/mdt-08-fig01.png) >[!NOTE] ->See [Deploying Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) for more information about the setup for this lab. +>See [Deploying Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) for more detailed information about the setup for this lab. ## The reference image diff --git a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md index f3741a075f..643f22fa3e 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md @@ -21,11 +21,13 @@ ms.topic: article **Applies to** - Windows 10 -The topics in this guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT). A summary of each topic is provided in the table below. Complete each of the topics below in the order they are listed. Informational topics are optional, but can provide helpful information so you should probably read them. +This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT). A summary topics in the guide is provided in the table below. Complete each of the topics below in the order they are listed. Informational topics are optional, but can provide helpful [information about MDT](#what-is-mdt). + +This topic also provides a detailed description of the [proof of concept environment](#proof-of-concept-environment) used in this guide, and [sample files](#sample-files) are provided below to help you put the information you learn into practice more quickly. | Topic | Description | Required / optional | | :--- | :--- | :--- | -| [Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) | An overview of MDT. | Optional | +| [Understand the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) | An overview of MDT. | Optional | | [Deploying Windows 10 with MDT](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) | (This topic). A description of topics in this guide and the overall lab infrastructure. | Optional | | [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) | Installation of MDT. | Required | | [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) | Create a deployment share, configure rules and settings, and import all the applications and operating system files required to build a Windows 10 reference image. | Required | @@ -36,12 +38,6 @@ The topics in this guide will walk you through the process of deploying Windows | [Perform an in-place upgrade to Windows 10 with MDT](upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md) | Use an MDT task sequence to completely automate the in-place upgrade process. | Required | | [Configure MDT settings](configure-mdt-settings.md) | Learn about configuring MDT customizations for your environment. | Optional | -## In this topic - -- [What is MDT](#what-is-mdt) provides a brief overview of MDT. -- [The proof of concept environment](#proof-of-concept-environment) used in this guide is described. -- [Sample files](#sample-files) are provided to help you put the information you learn into practice more quickly. - ## What is MDT MDT is a unified collection of tools, processes, and guidance for automating desktop and server deployment. In addition to reducing deployment time and standardizing desktop and server images, MDT enables you to more easily manage security and ongoing configurations. MDT builds on top of the core deployment tools in the Windows Assessment and Deployment Kit (Windows ADK) with additional guidance and features designed to reduce the complexity and time required for deployment in an enterprise environment. @@ -58,51 +54,61 @@ For the purposes of this guide we will use the following servers and client mach ![computers](../images/mdt-01-fig01.png) -DC01 is a domain controller; the other servers and client machines are members of the domain contoso.com for the fictitious Contoso Corporation. +DC01 is a domain controller; the other servers and client machines are members of the domain contoso.com for the fictitious Contoso Corporation. All servers are running Windows Server 2012 R2, but you can also use a later version of Windows Server with minor adjustments to some procedures. + +## Storage requirements + +MDT01 and CM01 should have data drives (D:) that can support up to 200 GB of data. The system drives (C:) are 100 GB in size. ## Hypervisor requirement -In addition to the servers and clients used in this lab, a Hyper-V host is also required to build a Windows 10 reference image. If you do not have access to a Hyper-V server, you can install Hyper-V on a Windows 10 or Windows 8.1 computer temporarily to use for this lab. For instructions on how to enable Hyper-V on Windows 10, see the [Verify support and install Hyper-V](https://docs.microsoft.com/windows/deployment/windows-10-poc#verify-support-and-install-hyper-v) section in the Windows 10 deployment test lab guide (this guide is a less detailed version of the current guide, but with more instructions for installing Hyper-V). +A Hyper-V host can be used to build a Windows 10 reference image, but is not required. Instructions are also provided to create a reference image using local server resources. However, a place to host the VHD + +### Installing Hyper-V + +If you do not have access to a Hyper-V server, you can install Hyper-V on a Windows 10 or Windows 8.1 computer temporarily to use for this lab. For instructions on how to enable Hyper-V on Windows 10, see the [Verify support and install Hyper-V](https://docs.microsoft.com/windows/deployment/windows-10-poc#verify-support-and-install-hyper-v) section in the Windows 10 deployment test lab guide (this guide is a less detailed version of the current guide, but with more instructions for installing Hyper-V). + +## Network requirements + +For this lab, all server and client computers are on the same subnet. This is not required, but each server and client computer must be able to connect to each other to share files, and resolve all DNS names and Active Directory information for the contoso.com domain. Internet connectivity is also requried to download OS and applicaton updates. ### Domain credentials +You can use your own Active Directory domain and credentials, but you'll need to specify your custom information and use it to replace the credentials below that are used in this guide. + **Active Directory domain name**: contoso.com
**Domain administrator username**: admin
**Domain administrator password**: pass@word3 -### Server details - -- **DC01.** A computer running Windows Server 2012 R2, fully patched with the latest security updates, and configured as an Active Directory Domain Controller, DNS Server, and (optionally) DHCP Server for the contoso.com domain. - - Server name: DC01 - - IP Address: 10.169.5.147 - - Roles: DNS, DHCP, and domain controller -- **MDT01.** A computer running Windows Server 2012 R2, fully patched with the latest security updates, and configured as a member server in the contoso.com domain. This is an application server that is used to run MDT. - - Server name: MDT01 - - IP Address: 10.169.5.148 - - Data drive D: with at least 100GB of free space. -- **CM01.** A computer running Windows Server 2012 R2, fully patched with the latest security updates, and configured as a member server in the contoso.com domain. This is a System Center Configuration Manager site server. - - Server name: CM01 - - IP Address: 10.169.5.149 - - Data drive D: with at least 100GB of free space. - -### Client details - -- **PC0001.** A computer running Windows 10 Enterprise x64, fully patched with the latest security updates, and configured as a member in the contoso.com domain. This machine is referenced as the admin workstation. - - Client name: PC0001 - - IP Address: DHCP -- **PC0002.** A computer running Windows 7 SP1 Enterprise x64, fully patched with the latest security updates, and configured as a member in the contoso.com domain. This machine is referenced during the migration scenarios. - - Client name: PC0002 - - IP Address: DHCP -- **PC0003 - PC0007** These are other client computers similar to PC0001 and PC0002 that are used in the guide for various scenarios. The device names are incremented to avoid confusion. For example, PC0003 and PC0004 are running Windows 7 just like PC0002, but are used for Config Mgr refresh and replace scenarios, respectively. - -### Network environment - -For this lab, all server and client computers are on the same subnet. This is not required, but each server and client computer must be able to connect to each other, including resolution of all DNS names and Active Directory information for the contoso.com domain. Internet connectivity is also requried to download OS and applicaton updates. - ### Organizational unit structure ![figure 2](../images/mdt-01-fig02.jpg) +## Server details + +- **DC01.** A computer running Windows Server 2012 R2, fully patched with the latest security updates, and configured as an Active Directory Domain Controller, DNS Server, and (optionally) DHCP Server for the contoso.com domain. + - Server name: DC01 + - IP Address: 10.10.0.5 + - Roles: DNS, DHCP, and domain controller +- **MDT01.** A computer running Windows Server 2012 R2, fully patched with the latest security updates, and configured as a member server in the contoso.com domain. This is an application server that is used to run MDT. + - Server name: MDT01 + - IP Address: 10.10.0.8 + - Data drive D: with at least 100GB of free space. +- **CM01.** A computer running Windows Server 2012 R2, fully patched with the latest security updates, and configured as a member server in the contoso.com domain. This is a System Center Configuration Manager site server. + - Server name: CM01 + - IP Address: 10.10.0.4 + - Data drive D: with at least 100GB of free space. + +## Client details + +- **PC0001.** A computer running Windows 10 Enterprise x64, fully patched with the latest security updates, and configured as a member in the contoso.com domain. This computer is referenced as the admin workstation. + - Client name: PC0001 + - IP Address: DHCP +- **PC0002.** A computer running Windows 7 SP1 Enterprise x64, fully patched with the latest security updates, and configured as a member in the contoso.com domain. This computer is referenced during the migration scenarios. + - Client name: PC0002 + - IP Address: DHCP +- **PC0003 - PC0007** These are other client computers similar to PC0001 and PC0002 that are used in the guide for various scenarios. The device names are incremented to avoid confusion. For example, PC0003 and PC0004 are running Windows 7 just like PC0002, but are used for Config Mgr refresh and replace scenarios, respectively. + ## Sample files In order to help you put the information you learn into practice more quickly, we recommend that you download a small set of sample files for the fictitious Contoso Corporation: diff --git a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md index 566244e8c7..ef86557a63 100644 --- a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md @@ -1,5 +1,5 @@ --- -title: Get started with the Microsoft Deployment Toolkit (MDT) (Windows 10) +title: Understand the Microsoft Deployment Toolkit (MDT) (Windows 10) description: This topic will help you gain a better understanding of how to use the Microsoft Deployment Toolkit (MDT), as part of a Windows operating system deployment. ms.assetid: a256442c-be47-4bb9-a105-c831f58ce3ee ms.reviewer: @@ -16,7 +16,7 @@ author: greg-lindsay ms.topic: article --- -# Get started with the Microsoft Deployment Toolkit (MDT) +# Understand the Microsoft Deployment Toolkit (MDT) **Applies to** - Windows 10 From 32892e5fb6e47d8f18dcb7b4dfb235f3985538b0 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 21 Aug 2019 14:41:31 -0700 Subject: [PATCH 017/358] update again --- ...0-with-the-microsoft-deployment-toolkit.md | 2 +- ...prepare-for-windows-deployment-with-mdt.md | 24 +++++++++++++----- windows/deployment/images/downloads.png | Bin 0 -> 28948 bytes 3 files changed, 18 insertions(+), 8 deletions(-) create mode 100644 windows/deployment/images/downloads.png diff --git a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md index 643f22fa3e..a0e24ac16b 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md @@ -58,7 +58,7 @@ DC01 is a domain controller; the other servers and client machines are members o ## Storage requirements -MDT01 and CM01 should have data drives (D:) that can support up to 200 GB of data. The system drives (C:) are 100 GB in size. +MDT01 and CM01 should have data drives (D:) that can support up to 100 and 200 GB of data, respectively. The system drives (C:) are 100 GB in size. ## Hypervisor requirement diff --git a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md index 54134328e1..ff77986d3e 100644 --- a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md +++ b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md @@ -29,15 +29,16 @@ For the purposes of this topic, we will use two computers: **DC01** and **MDT01* - MDT01 is a domain member server in contoso.com and has a D: drive that will be used for data. - The data drive requires at least 100GB of disk space. -For more details on the setup for topics in this guide, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). +For more details on requirements for the proof of concept environment used in this guide, see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). ## Install Windows ADK for Windows 10 These steps assume that you have the MDT01 member server running and configured as a domain member server. -Visit the [Download and install the Windows ADK](https://go.microsoft.com/fwlink/p/?LinkId=526803) page and download the following to the **D:\\Downloads\\ADK** folder on MDT01: +On MTD01, visit the [Download and install the Windows ADK](https://go.microsoft.com/fwlink/p/?LinkId=526803) page and download the following to the **D:\\Downloads\\ADK** folder on MDT01 (you will need to create the folder): - [The Windows ADK for Windows 10](https://go.microsoft.com/fwlink/?linkid=2086042) - [The Windows PE add-on for the ADK](https://go.microsoft.com/fwlink/?linkid=2087112) +- [The Windows System Image Manager (WSIM) 1903 update](https://go.microsoft.com/fwlink/?linkid=2095334) >[!TIP] >You might need to temporarily disable IE Enhanced Security Configuration for administrators in order to download files from the Internet to the server. This setting can be disabled by using Server Manager (Local Server/Properties). @@ -46,13 +47,15 @@ Visit the [Download and install the Windows ADK](https://go.microsoft.com/fwlink - For the purposes of this guide, we are using a Domain Admin account of **admin** with a password of pass@word3. You can use your own administrator username and password as long as you properly adjust all steps in this guide that use login these credentials. 2. Start the **ADK Setup** (D:\\Downloads\\ADK\\adksetup.exe), click **Next** twice to accept the default installation parameters, click **Accept** to accept the license agreement, and then on the **Select the features you want to install** page accept the default list of features by clicking **Install**. This will install deployment tools and the USMT. 3. Start the **WinPE Setup** (D:\\Downloads\\ADK\\adkwinpesetup.exe), click **Next** twice to accept the default installation parameters, click **Accept** to accept the license agreement, and then on the **Select the features you want to install** page click **Install**. This will install Windows PE for x86, AMD64, ARM, and ARM64. +4. Extract the **WSIM 1903 update** (D:\\Downloads\ADK\\WSIM1903.zip) and then run the **UpdateWSIM.bat** file. + - You can confirm that the update is applied by viewing properties of the ImageCat.exe and ImgMgr.exe files at **C:\\Program Files (x86)\\Windows Kits\\10\\Assessment and Deployment Kit\\Deployment Tools\\WSIM** and verifying that the **Details** tab displays a **File version** of **10.0.18362.144**. ## Install MDT >[!NOTE] >MDT installation requires the following: ->- The Windows ADK for Windows 10 ->- Windows PowerShell +>- The Windows ADK for Windows 10 (installed in the previous procedure) +>- Windows PowerShell ([version 5.1](https://www.microsoft.com/download/details.aspx?id=54616) is recommended) >- Microsoft .NET Framework 1. Visit the [MDT resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117) and click **Download MDT**. @@ -62,6 +65,8 @@ Visit the [Download and install the Windows ADK](https://go.microsoft.com/fwlink ## Create the OU structure +>**Note**: The following procedures are performed on **DC01**. + To create the OU structure, you can use the Active Directory Users and Computers console (dsa.msc), or you can use Windows PowerShell. To use Windows PowerShell, copy the following commands into a text file and save it as c:\ou.ps1. Be sure that you are viewing file extensions and that you save the file with the .ps1 extension. @@ -130,7 +135,7 @@ To create an MDT build account, open an elevalted Windows PowerShell prompt on D ```powershell New-ADUser -Name MDT_BA -UserPrincipalName MDT_BA -path "OU=Service Accounts,OU=Accounts,OU=Contoso,DC=CONTOSO,DC=COM" -Description "MDT Build Account" -AccountPassword (ConvertTo-SecureString "pass@word3" -AsPlainText -Force) -ChangePasswordAtLogon $false -PasswordNeverExpires $true -Enabled $true ``` -If you have the Active Directory Users and Computers console open you can refresh the view and see this new account in the Contoso\Accounts\Service Accounts OU as shown in the screenshot above. +If you have the Active Directory Users and Computers console open you can refresh the view and see this new account in the **Contoso\Accounts\Service Accounts** OU as shown in the screenshot above. ## Create and share the logs folder @@ -161,9 +166,14 @@ Alternatively, CMTrace formatting makes the logs much easier to read. See the sa ![figure 9](../images/mdt-05-fig10.png) +## Next steps -When you have completed the steps in this section to prepare for deployment, see [Create a Windows 10 reference image](create-a-windows-10-reference-image.md). +The following is an example of files that have been downloaded and installed (including optional CMTrace) on MDT at this point in the lab. + +![downloads](../images/downloads.png) + +When you have completed all the steps in this section to prepare for deployment, see [Create a Windows 10 reference image](create-a-windows-10-reference-image.md). ## Related topics -[Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) \ No newline at end of file +[Understand the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) \ No newline at end of file diff --git a/windows/deployment/images/downloads.png b/windows/deployment/images/downloads.png new file mode 100644 index 0000000000000000000000000000000000000000..36c45c4a88c7682f4980d3577ca30831c24b0164 GIT binary patch literal 28948 zcmb@tXIN8hw=RlZR0Qe07wH0_cO=q5dJifsAVnZ_0;1BJbO=oXp%>`}2&f1cdI-IW z)PVHfckq4Jch))k?CY!_=LZ*=$(-{k<9^1tM~ir_twMB<_8tKN0g;-jvK|4!br=D` zHT%1_@!#BD!6ESfu6gLGC=pcj(c|zJH|-U*6bT5b;_jclyoJ9ee4}dWK|t`Z?dtDZ zr)!Z70l}MMHDyHuAJ96AFu-6Db(u49y0&?EIqg5`X!sS;y^d-?p-}6nx;mJn@wsW8 zS;L?a@c9!*-pKn+;ob>QXlY38nG z_HK^{rwCe8A~9g5MXpb>->+Su! zpL@5@{I@{BRKadAnDy@s-ofA#UJ|XFiX=A`8?~5W7x$FOu0DTsAqy{Py^c}Fez4X>ZI8rl{B+(itMdI;!Dya)-u>46-k>!|STxH_ zlV9sj@y0+CBtPK#`V1g}cFkB);Z*e)OAhK4vDByVApz#kSkJ*`uS?Y=RJoVM0-({i{0BuoH zl@9V|5k5fu@Fg6ARk@dy0!fTH_)`U0UAgY)Vq!fE)sFG(F80IDcL?n@>jq>7ChvXu zB09YGGQx?NJLBn6xmfJWuHb!d-Sd`IoX<9Od}E1tQQ4N3qfC}V#QtqwNh5b$PnE&M zHZG<^=vBPxCez>jE8eaF!&W8Mhdto@FnY;KTK%TJe0{h>H>WNxRMFt0+`9u82Ckbm zxn4q9a$-3L3q(S(xnZ|fLkmH%CIEAD^GtxgMij;CruOj^=c5D6Et(Fuy+2moT)J4N z_@%^6{poD`Vw?8fTG>rcDK{S)QE|KHyXkd95S}bAs9%;_v&?Z8-y{dnlr=VfqlI~!`@=?QA=``fQ({^Qh8_7b9O^#Mz)(Z zEq1rFWR6%2T>^ecgfdbV$!q&?y~5ZO+n}9n(c}(rJ6=7&a9RhZMt-gG8fKwZtSA5X zP)5;<^KOGQk@18TiXk6&nk>nxB(J`v5s7Dfq`33<%+vgw=tg_PN9VJ<{t;XCW~0e? zl!oI$7|rMI5?kC-6JY|-*?kZ!*gENJojZ3%rSn`vG_2w>koV|oQFy&xDR(*H0)s=7Bq`)HtCr58hVF!yG~!o8T{{1ZlGFYlrx{af5*(z_O0b5pR`BILyl z#}a55ZJbu_ci++H8_Q3*gNC28U^=_3>XlD`Jf_>m6Hj*S<|X`w?&!o7qZq?E2eD-8 z0MpMG#iQ-lFu&_dd{#@d`M@P(YA^LWmz@Ptp@#AEQg!m1rSS2Yv&>SJ7INx-gUbF~ zro6zuARm9l7j%k#e$23Sl`N6Woj&$g7#TA$0p|41LmdRHi@VnLxHqY0L0}?F=m~S$ za7IE=K|!dx@EzJtU92u9sWe52kN=yK`@&!!jiZyqQx&70Ptg9$kXRk0`Og9ene-h* zYyMJW@sQ7Nen$zIW+5?3)!hCP=AI(2i8L~S6L0!;k>W5A@F>>c$+;tbU6jVd{vAUg zVr4QMj*tV!2eG<5XeGqxH4KY2_b*!XPnP6we~~|(e0*|H87TNeo8hVYC!T~=lj_zo zV*9{4i)YDJl|nv@hJdFrVa&3UbKzD1tl=)uA6QdLS_K|Sigr_53QkZKCt;@DT*YO`Y4LDQb`K`FYmUk*EV^w*zi}P00 zoe^HlFjXC$#~2%2!tbBo?M~c3^0?|TBKcEuE}7&DbM=3U#5)Z{U8IL7^sL9+UYBR2oE%8z*EW0Tyg`?rJd)`~{>{gcK znQ)fW*7afII7DJH+hh4f^{%tM%37CiR{RkyIVB#Oc_mZ9N&xYoBrts^`92Y_W2le( zU*H)EJuu!|@M#t_7WU0K^F>igfs75`%#moC2N z3ZTn=GHKIMS!$SiR1{kBx{|#!tv|4f4|G7(@}4tZO`Hd&B+zf-KK=%_dSE#44Y-L# zLl>2Vi31NFt@|J7Kp^itW!hX3%PAG2v4{ennPiCLrB6vI?bEu&wv`_nEJ=qKi%D|J zMqQcyr5qSCOjIGo(a&c|`r{+^o)^&fCk%O^iL z(h-tzgB>BG&qw~ec38e={=~K-rz*y)0%!kMxh398MC?G;g?Q+Er5T{s1j*(ND#EFe zlh%S$>i*Bp;+JBGHV=I_V9;B`>oi(*wmO5`3Ev=2%QtGbr*j5j>Ee1FW%AE~OAJOX z4a&Qf06QyKYIub&=^=g)&G}9KH z#sNzg38G?$Azr)YdX`S6Hb0D7O4o;+)Fw~l8HoM%DuEt?q_*wkd6?Yj80fuu8K^zk z)-ShwF*AVJYz7g5LNY`gb{pP`#V{OVuOx`Bl#}CU#%Q;w1ZAg zt694;{E%*$&m# z&=tP{T1}(}#+kHFRh_tK2;ad@ntDXf7tvTgXJe0a)!O&V2Upu<<29jYj z%p745oNfM6HB7})W$~$N?n##K%P70K+MK~EOJWRW{YJ6fnk>X;*UI5MLq1nj#1$Sb z*`PPvabb|`pL6sbn@x0x4Sg7Hr}EdH-+c#}PgCA>>V#z4bMpmG3-LK^(_-frxM7){ z?vc3U=wpCu``s=x2%A=p8*z;JnUHK%U{e*emJO)C{3DdYK3s6F>oiq=W+;acZ6UPY z-{E$}VA<{d-LyyS%1V(-;}4_qvfa?G1O6gQ&sUo&2kQx+f_L*(9MD7D!G2f?KgRwk z^~Av?jQ?&<;V~0&{^I70DzDXvAnnct`N`xmvP15QNDdpPASUW3OZlopJY^Iww(IYo8D#ui3 zmZl-LMMNs9MHY}4tIsm^ExXhAPWz0J1E=i@z~+E9N@3 zSOnWBw!KZvM0i}?p0C)c{!H(zvR(aksbSaUwX65PeIta-*X#k-^oJ7-*?-}9-&Vdp zm-6CacV1NJB+^G&!17gy>$(XXmrty+H`lV>?!bFuD%@Rl;BSf?=mNHh4~VOjQO$!S zSZ9&ud=2CdkK+Bku3k)_AdzOF$GHUe#T01``P)=*_(($LRHacWE}!#VQ5+#D?Dx2P z5TK{KKg#)|W(ZXuA11@OJK`4)s8Qv6?(Xr1{c!XmRrJ`x6u&c^@Y~I+cdk%#rY1!o z!60Ef-hD<0)SH}Vs$v$B2VKE%8k-ant*dG5k(e+eYN}pjOHBV68f#AV zWPaYSo-Laq%Pmt1BO)ysiRuIocAVSQ{ z-`j?Ce-R)(O8Bzs)EvoeEG`&S_4eN3aFiF{r|KA-a3h+-_LTq(n%$dc=t(rx)%vNr z?%T<%T9>7z*0MY_X~fJw4iAZo`MKfR{9;%~Ye#D!IPXZ4<5C?SmD5$I(Lp}g8f~I7 z8^oG?(Voy7#ejYgUciwaU3MY z?Bs_ioJhJO2vlcWYke)*c1or5AA|%!5z&P4~yMa!o zAif_7hmy^`__?0Wz1k6bXeBo5u@@cgH*WFlza~p8tI118Y#xSDnk>J}$rq`0UKMD3 zGbW}1(7}{e+G1NDlztLT`2_`xC$wSAaf|%rwGN5`95SYgHLE&C$?Eo96+roUm9gbIh!E0+oIbMOB=dY&&IjX53#QO| zJBpZ>M#NeO+V2bfF+E3^yEpP@RO@pt_tW7&TLFJ)%+ zEyVWOSwPi0NzYXS{A#OJ1u{e$YtT>5jy3fe{_A}0X7j*@wLJG`N_`>d&jC`dW49Y$ zKsfhl4K=L*S)WF&x(h%$$(WK6yOTFNc8y>In%>V3Pxc#xaZPQ;*wL_MOpsiPBC3;I zZxfTDc5&U?5U}o=E3KDc~W*CfS2S( z#F=J6l9r+Hu;AU0_oJ!7M;Xf?&z4i+fnyy*Y**;}Jxqo)&O&2PfF@oIr9zH3McrUu zOBz&a=2Iw0N&%Ph3(;)hg#P`|ujS+kgGEc!h36ja>aKyDrHq|4bQh=B=u^v)A%IyB zJQ=G3ViVL20sO@a6q=O18X@4FoKHi*#P|e<%jF0Gt!Pg6Mgy9)@8bve`#9WKUYu+f zpQe1K2>}=|$^R;Q-pAjcZ@+o|LoSeWNK&=7g)c21wdKe3$gRPDliB}JjDd!Zs(Q@|Qs zJDAZ1cUV;7g@9jhB=E$2mR-3p)t^gqn%m|uhM)TG+y;;{y0`J`*?LjOz3fsnjo9bK1Pjb{ty ztZCN6wz`#%*7(P#RH@9JTh0wwEQS5> zdbT^O*TAk%c&Vm-v8EItlMTnI+Nu7v&IBu=TO4lKWnp9w1ZmO!*WzhiEHxb6{u0g+ zti7>8x6ChsaqvMJ%`HHH14iL9;m$=*kz&UZNq&SareJ z;eu2Wti?$I2QokgPxWl3IbdKjcW&%B2N=I>JP-TukD-4h>i&hpSNkYRk}Bqx`NPXD z7HMc1^rC6;%)76BR?7QTLrst?=cOU@so;(6&A!@>nv?yd?u~%%)Q>hGX(w6PtRK?2?9*h=O_^CojCsOi5;e-tH=}>%YnUpi zRDtVBDn4E*HUbFaKeWxCXj%akdPNwsDAYkQ-E1Q-TY^yex??+0D&E)3#X-`fK?GGs{pSZC0?rNo;=s+pA?e)Xe8TCnR)3{iFA-b z_Hb4 zH71W+*Ue8luGPaPCFYzT6bCKJWIuyKaMXHx3ng!G=P}$V0nc{;YdsF- zc(|vZF521}sTW6EGrTs%x$soQ(p@D;OodQkEO!S3H3hh>$$PGs)ITZkc~(zm*)*c0(DZrUp!IJ!8VwyzBGP}r#XpKwuB@q5MDy^ifD=uq&{ z4sBKJ^JoaS`q?)tm1=cXb?SMC6)KEhvNvnOs6sR7ItgP7Rc}Yfvyze$ctS#gf=^Dj z7R2b(U!sE>v9R`Um;`!1Bt=l>m<+syqBS($4q#mXnHSBTan(*jl5AOR8iAB?FH;gsa$5{Rt4 zii+5-?(X(X&~-F#CLcT?8qZGM)SK>n(+M>ynUzn6Y4aDP6udX^Ua^$YlMD88rB#dB zFD*g{v3(3}G?=iG_=dxK_S<)q$=Ex_XV^D{+}= zO~?2>;&4uaZ=W;xExvp#&`f9jJ_$0;&^l5F9M_}BO{6kw#xu-RVU(Q+h5ddZe`!vBNw4*X7bBxRpAzrL z=Xb@#jb*+1`S#k4$1E%?j}y6cD02|!7l*B`7Sl`B8iFW5S+Xl*As#}(Rjnt(mACij z1w+r5#9Ik#=bQziI8NN$j+(6r=dHHVHKjp*Zb`?G_o?lofU0201W&I!( z9Cv5p*C@gm{XCSi-?YXq;@pJPSt$Cz=M&Mzbus@BcniNJ zmg;6Hp}eyhc@-rpR8BM&KJJ#6I)n3C@l7-V`u6!U;=d-0&n)vTCXQ-|9d|2&c*`v# z)P!xn$7^8|bN@$4yD$xVDcPs`=H?p9+5QzZRFVbai(r)Q+I-O|pDtfkiOn;0mHuf+ z;Fa6A3{=^qqI5z^QRAipE|ppREulHe?_*~wLCXHk**{PA*V=hFm*?Z;3*6>AB1Y?u zcbBF4mB`R^uf90@itd&-%&b8;zKeWo>e#DH1b>i1kyjyiCkHvrx#1rsUSZz zH=!2$WyMvr1)>fZkM@jTpt6utcomcf$95DxVq1#yWK++Zmb|e@-IYv9)vrf*g5BI8F7ZqJnpIZG`ux@p*D6V|N!zZI# z3cnea@&eDOtWu+uD9bUgi6NyJ;(=&$X*r58TMtyUEcOMoiq8-&Y#B<6dv^GD%p}x+7Y_JjFQ0WIP37 zRNvj(OBC%4Gq2a5?O*Vbd6>tTL!UEe{dWpYU<_R0xWusZ`uU<;+DY2dOU=Vuc?WZy zCb9O7ItrcfaCBVyhXy2Hg>qs@9PtOB?svg@ixJQe!W=7+`{J7o#voqj?DELJhz`E?t!yTVeZ~hLn#Y5T zt^FPL(KvwccItjrzWP1lR>@tt)Y5h26uU7g)afFOvvZ+Z^=6my72f(94b+C}3j#?i zr36~>1s*@jr-((xRc2J8XIf=ndFH&4mA|ua-nPDA?}^luBleLN5)xvL59p3RANDF( zHYoBnP}-k6Hj&!5UaLq09ZKz*eF->r$27p<-?>@Ln!L(uC>Y~=7}U%S1DkKgbbGQG zOm5Zll(}o_Gr4qnPK9qnW#Dc$*d+hReA%8Ykr-ED&EvSc25 zZam*D`moxzi!Z3?ye$>yhs!h;m2~sPO|geJH==FVIY7Wf-F~)-6*$eqg83qDn)!sD z8yty`gK$K(FXtExnwMNy(hTYDJYPI%`ax&!)&bS-A1HeD?Ra9eWohU`*hwfqrh8A^ z6WKc_4&kPdnyQcEAlMnh1Ce^8d;aG+UhQ}o_bYzaLsZCAfBNZ$s7*UbpD2El^F|rF zR+E;ys`+D8Zf+%x>OOsr{3x1<)@MJ#_`C1r&v>@ri<6_(md4&~SeVfCEWMA6~6Ka*5FKszIMI&=}5DQdxbz^FO% znPqnhR91_iP;w18@Mta!-UE0I~4kEY|BGud^K8~b#6$)~q1ZR37yW)7xv z-mCHL`=4{Iu|F%L2DyfQET#sVQ11)w6jh@q&#uE&7M(1mmc=7g1+q#Z3++7g3yCbG znw{=%MpaX7jHu+E`f60<{W%ub$CR`vJ>ebMN9^=W{z$9uWiLc2-J_+cozUQ#_Aps z#pA1=?k9}b*hlrdgt8_aOZ%1aDe&o?$-(ba=B1SWF6>I0(FVE}Zfa;QuBH`iBM7?Y ze+!C2chFpLqS>7mas_CBr`7aB(Kxfh87g`~Ow!hQk2_BYh4O6;&e_gCkN()xU-Zh+ z&ph;2jEmTtjl6Qsc5Im~#h!lKmp$%Q;K7jgo`*ce=lkO2GsOfNQ>vFNbefE2IB(WC zt@pB?52`yDpUC0?rdsu)_-@_zUm-XxQ$hVht#z6}wo&7lX8h)8Sq1Gb*Uts6HRmn6 zNVUp!A&gs+Q!9}%&5+WoO@iNhM24Pv(4fyza&-zY zvFp3Lbn8HCz8eaie4YLLFk}?rK_QUZdE>iEa*qSHK=_xe~N)?@E>JYO%+hjSaV zE$TexIs5+2GxK@1uUHUDH=ozNiqq`>Bk{Yu_kai=%{cBdmSRtjKH(I^bPqv2GiJw3 z9VMV;;(itSLNVoSo_x35=?$wV^75AZI@>#WmxmA^mY3&$HFgWOW>%mMCKO~VE8HY! zL$9_`+ux&9nB&m5;!VUb^!rvzK-r$(j1ka$b~NYyY73~dp}<#ZdUn-A_gwh7KOSYz z@?DiVk4i`@>p$lgwaSGfY*vSgU&UHBc}XJdSS4fMOsaDyqz3ucX@B43US0I4NW6|d z4UpSx-qlv9FmSWpt1@lg^C}38o*89#Y!-~usa$q$A+||xVOo{glWGy|o%ghQ5>T-- zHY|9fcrhSQhARAl7dLl0Use`JLXdGZ9&Az^um_c3uLG)je@ijKTX@PjyueivO(@3* z!tBxE!S`>ndH*d*Z%=ybebU~+x`u%br!$(ajqCSy*h>>gT`DU=uMZeHP1eVN{MSXd z%{p>e<|)KmEc#lP9%u4CjBjRncCtjM(EPR4_PwnLZ36m=@DfE57ojv3q!`w@UZNKa z(W;jv&s9!6Z(ZSC8iauNT-36mnAS}^;*zf^0Y>|poA+m6X;f6g7rJMEayFyac zTxV7s*YQ;Y;Ahps=r^aTrvxPY4;f`tqo@Q68fF8{!#OXdJ`E1)6^a4=YZf{jgF(D_ ze-2j*7Uqizcs>WZp30k^Whq-+T6!N@UEJp0oj~Jq>hpCCJpfs{%TR2l#vy6Vy;+k1 zp8l<9VD|Yf?JBVZKR&#A@sE$i1&cl_BMPdCSk!5y?>n6e6|7TXMXa+d#tVjI$nkc4 zHrbg9umCy#rf7b1oxo4{uTvoiOnjNX(Eqyn&5mMM<*0{GP8%HUPOWt$ED^zl7b!F-P185( z-xa^7(k4*Q!Dm_&_O?;rcNI4TGx1R$&3t^yR@LXPU#b9@r^hDVz}H7|-6DA7h3BCU zl&{hP_`u2)LsJ0!8_D_qnQqO!8T#hC2cc<-AgoO6o^?|D$-OWbIenpM(?eo6LGve@xquTz$mj`F=fs5_zkB2?HPPppOYkhgF&X{A_k9qX4qHpt4ude zlbLl|+9%+g?(f=zUEktMOb65dAFn2{#7wCR?k?}o%s4&{idix!w#C0M>;vVaWl=@+ zul7@-^)vd#{nFL@v}G+Ri+%O|uY0Hribq2zE?dPy{Q^c&>w!+Tzc+v^YLRTR6 zav8&5{qHtbk@QL;M|2L($XY1YKg(Q0huUKItQAAdH4ov~S10T6tx)7E*NjRJ6Wl4d! zi!9Dy$L`TSH3{>zhXop!b>yBB00cycqjoB&Y}rm>}@ciHNH@DbEsAsx^A1Ocp!f=_Y}EakVQ zbU_37fg2&3faK~oAmZ;Q;!L>L;r?}e%t{u^#~7wcXXn{9pQo|w{SXrXFrD=vc=w^p zTH~hHVFvc0+f@q9UJGEpMm&I%Y|R~+ufgqAXRPdndS}uO=tmTTZyO0DxsTp&J_*e` zB&yn^y`lKACOsSvghRTGHAR!lCFw(2QYZ#M@A|XqJUuq5VAy;6^(&y>3~Z8zcj~2V zU-*?8Z&U_kl(-io3&PD}Q}nvyNgZXONwhl!1LCQb5A1d* zEgk^T;K)TI*(sX zoq5K8X9kgCT~k!&B2cF%hS?sC;5pTOjp>Eh?Jq(c$BByr(XG1spFJEdGl;S2Jc5bu z!CvBUUVO#PUhM}iR@LT$nmE^AY=ptWuG~P@s4GGK5rOq~9%9go{d((Dbj65ONjPk| z+@!(qMnq(gPVJf_{CkexdXKB#zP^0^L>X|%eKj9D`JrJ2!O5LEl&DvpK&q~-$y~*) zrUn1-!=|)D$%52%4Lj18&Bo1*;nAr+SjY@0?SDB(8#WoGB;>s{rf}!VG}vFq{F%WG z&3Bh3R`ln)Gs7@fT(ohoTcMn2-=I|vUo_ej3A^u7PydHF<;4XIeA*vTe;)2=Z=oJG zb3vBHEeP@Zpp+<^_k&xw>s2w}1x=mzy4!WbivE`qp3XVv1|1&GA`>m5IV**|_nWWE z`0+Xx(Bv(3aMTs2oc4hfPE&qG=rn+d4pJ7{qMKGv?MF=9k+ShcTS4LX0-5zBk4g<1 zIHn!O85>u)KTqAdX+ZH5*#&lPG7_;x#+WOiZ1hU8MnIqsNukV=mBH%mf3-X8KiVCF z1ZPjAJQHO)BNkmeOEcRERH(}dNQ4PrT81yp2vI%n{oPPhSB!CBxMz8t!Q%JN)bh!R zBzCTQbBPVwFUf&e+1Pvi=$(jmEmvl|4F7NDq|pKp$49HuDR(T8rG74663{HZo^@o; z!*s?_lC|$FwT*5l3K(K4MjoVLrN|lKG<)M3TDQp(AEVVXHn$~C5FVyX!Cl_cn21A5~xX$hCd4|@Z1v*p^~ z+L9kk|KS2x)i1w^|2692Az-l~zE6$N#NrA+;b9|9IGHUOP8r88WwdjhfuB}KR5~a3 z>15}?9GnW@#bH)Rg@2mhZyM%`ali#(<^QeEgFikXH8x4-({#o&J?nEGM~9xf`MCng z2UOZ`POiukvju)q^SqeM3sa-Q>%TKh%E0&jMxBdH^H~pBCbDHyv>7ZFdWl|_HTD-* zxkwti`dREiY-mxFKf;>t z%}dYb^4@9DG3J1(wqBUuvpoIT30cP0D23bcaB#3cf0yuMfwWLS&!Vq9i-vKUAb)8YQ=ql>^>2k zHvzOilmUl0__$`f>A6GqDp#@NE;UQqzNpB`!Z+e#_jxw2!Y8U)!m?qR%PGsmq9?og z9}>u>u~C}1R`@)4P5)k|R#R40IW}oM_7$nofe9VWhXH%Ttt>X{ZJ^=1b z^AC+Nq>1<8aTUF(ynA`^2iOSx;n?V@e0y5Tk6{`hoDnE5lTks_5*sM(#Bkoxh`PYh zHy$G`8li)nC*8am4g>j!N8trPHDL};c2m)Ke6I%wo{uH^TRl*x+WNk(aGf!xQ@pOqkuM!^%$(|fuk5RA!N<dyUa*vEDc5?J3 zw~qr{uP~r2;cUR_z*OR#zuR%8A+~1`yE&~&mzz~}duuAA*vgzKO=Du-e5(huz*g$2 zs0v0)&Cysv#3ZO3-r9_eJ3)EB-8fxgK0ojE%p%b$mlH*&+*un5a7dbTgwq1bU&zL?I3s`)jqNnK?+_OOj6oIR*#ou?*F@&cUFX+r%b%>ImZe73d6?qB^BZ*1K8)P1 ztLLBkHtTwuxYx5AP?cGE%VW;#KhB3Yn!T9jt?BMu>E2ZMabmF5KoF6Ij{L=>*vU3q z`<}c`5;i&SaG5KKwb#2z}jgJ zC1rb8QoE;9zY_I}rbbKc|F$OclO|BmBn*#>(TI#rc%-!YfgG$yvqb$Usvv})hfjww zwdiS9#+_@qL(9Zcj2$VT#3JL|3RlqVIkpZl}CAC6h7a=`B5ZxfY^lk36d!jfYI`k(-9w;M1IG z3rck6K}%lidA`y%z2KGE~c>~CL;t0uus0WML9vumtJVX$AFptHBv$8Ubp05{#_7c`!* zZ8SknNV-K`(@@NK@JuF@&6*ySBUevO)`SXsYnIm6%a8B!oM=``t8EcbQu_$%tS(^+ zGQOKMD&vS8c_!;RkEH8>?CY-8)^}OcpL8o2{b&YtGBN$bTYTF+Z%C1c+ntf!$CUL1 zjd7&6n-br}^kg14F=O~F{qL{$b>!sU{IvW6h0HKIV`ZhaCLp=uw|LGop8n$wiI(6i zcU(YcsX@|sj#vI+9>eR6Dq)52r3rkG&0J(lt;jiJRV31Se>%lR?wQKLFOLUTtcm^V z4aRUnKd~wjtpZ%nBPqSQ1aQDT7@E~Dp$7x|wqrnw8K?)+^McDgbouQ5(Cb>V$O{GSFF4>3!B&<3BsCEV6{ zk`c$B8wv}l_1K=)793y*PX>1_>%V?os=64e0`?#A*{0VEdNbaDi}>H(D2&uHBTfm)9)X zucwGF!cXHmXwl+2WXJaDxO)4AD5Z+1$RsxY)*(^?u(43W$Df}^Y5;tJH9nR>JSL)< z2TO8mC*N#!`tlUdwZ@HFG8mgIj^`Hb6CE5lbOQ}}raMl(1w;xi3r1J!-&*L@O<*Y^37Jdb_UCl2mm@JMG8fUEfN9xdfOjg>TbrM zWZaA#r4UMjS+zgn#Lm@k-u{tC7oVgWVR+iaNPJy`UYT$rI8@}eYj?}bXntk%5J*kJ zxoiix<72Ttxf)XB8)-M0=E739*3q^5aJ6&Lz9h=4xzAin!g*+{(=}n|*9ThZLEm}7 zD=wG?-l+tX$Vz2sGhUde+G*|kzgl#kuVzWgIH896k5MHZ;oKViFlwu<^|66FJ+y^| zRGgB$xeGsT-s5w;x9wzZn6Ox^rcMW?-(cg(+F8g~xUARM4V4S^rOwt!X)-cTmWx26 zyL=8L(>fxJU$MXnd93cK+MP%E4vqPQ*Oy=1cLp7NHu+}rZ9(wvw)nvD;BiH7&AX0| z@x19JHYM?cKAlz-_dw~HUh*7MqK{R1SYUStfiIDI?2*QFme;@ScNj_n8E@F~J!~v8 zCA5D4V$q-YT#Gbjp8m^@+g{IWZ*6de@=r?#6wVj>0|!3%-Vx2&u$Nf8P#*GPvt*Z8@lRgwUbZCZ5nl%rYX}=$ucYNS}o_~d)SK& zOw$nQl4w;JD{F;kVdaJsR7_twb8+H%e>JrZneK!XIWAkdIcXK}p+4wB(1d-kz zTuZhoOC6N(TNiGe*Eqa0QT0h~8>_6#7z-}>4*U2-HF~~rsKNp^Dmbq}n8I7>g_I4& zwd31BwGCb_hzGt0(->F0oBW4DU%#TzBa?UbiHAcw#Uk?L3dwD>Iwrq&=0_$p3N}o4 zPJ0EdL9Hn&eKk8*hqjL+DU4%rLMfhIosTS_Lrg}^os6#u15W=#pXdKEU`W?CuvFtF zlqEf^+bZvzBhg{)PX_nvIV*1a8CfMjYr__KR@0~8jb52yLJXwq!xmC7?~ai$Qb1_j zvDen<)BstzM@(x))&69u%KLgX$wxKYKsso1#n~(UKM^5dMnPXW=Jd0+?)a|J;uq~& zwR1Ir2K8Q7>2Wz} zE|>tR7t9ENdmIj<#QxDSx--9~m43SJEQx!Aj)&U&rsSH1SShr0nZ_CfEAKGG8PjP2 zd|gv@1oTwW{8b#c&MxJ&E$iyXy?+Y0%A5PT2nl@hQG?n%8e>f`X z7dt)D*D^bqF}gt(@L>DVKQ^pGBIZ8KqfCd@E)EaRMhd zzTVd-8qTQ&;u2I13GIi!`3q|&JY_WwjD1+EaK$DS&~4svH$~HFgY}NFcCJ5mzo7s0 zP7B-LXnW47XSZE?5#8#UaeLEJY}L-?v zChsl9+Kpwas|Z}DT~3LwGh)%mNjr=acc;79U8zR^p2cl5(#RR~owmlEkd{|5QUOQt zZ>~E;dwB}$kmueI-E=aOFrY!dy3l$R06~qs#j4X|%@4Rd+T7xW4sE!NwjW$g_93V$ zBC)}+MROO&o{NGLeoAp1n&u!Dk^OI zWk)dzW5AsSo%9cYtR6tM#2sdAzc=GQ)Am*8X5z-fOX{g83ytmu@QdODtisOziq6^q zK5ypGPZx4H*KiH&w;-^y_{r6qzoDP;HafAgY9RftR{2y{_85m>h;NdbV6Ew_FLd=M zH%ccXSwSVBV}+re!wo11F-;m7<;h)E1=gaUgXchPKX5u-NPFASd8SvekC{Pt^-<&O z&PyxWrS19A6XE4$ui7~y(sznhpMoVErg9gahodf{x9L?ShoWiyK(lgY5~60_qJ+gL znv5c2Wx6|%l_Yw6YdxVbOHWCPmo%JLK`;aYR&#zCRit$5v}M0Y@j_>NGP5=vyRsnA zHU*R7d`1p&I8EPd#uBf7XWzO8$iPmrd*;&?AL+zJ_YFH2pVe8HkA&0|F!dIiu7=SB zHkc^EEo5{OS4kWWwmd3E+9~3e@>UP4lKtwo#P%~qpZAsH?*v;l9xB%KF|`N*gJ6GK z18^O1{V*v9F1In$;K=uvQIn0h1m$_|5zhg zR_9eHzrT7n$!ev#-3VO%U{6FD4C!;sH7f``6?IO=_6*}uhn+WcTvRFzXUAMTdHXvd zVFN7gBANNwJI``mtv0z|fAWn`O_BkD(w9J=vqwgZF(C#wePl{6@uZAKc7;zT+iu_1 zIQZUKqN!!$KN2$*?Os@eZYLsyTE@3lmAFkYN$#j|`CCJVZUsxI1;%L1po8JIJORur zAHNspObrmEiJP=j_azqD#wQ(s9Za3+e5D;}ilB$_B1wxvRd;~HY1sFGCF3X!T=>hl z=nFw0eVpAU@aeSve<#8TD87ZTE)#g}tCxV(0C0rz(C>7(1P|c*1jIGo$K8i_L{A~V zL)-SCe!IeInUhPIOeBSp#HEs?re+oog{H*TwCFw;4Rgjar4^b%t)IG|eUP{m30m&8MP=fzTg#RtQD z!p)4=`kj(nsRqnx)tON8lNU6@bsQfMR|>ljA_4IiBDd{Xcz{r#YfAPK^vvgO2R2Ct zuW>cy?4D7%sL=qgNlL<+tqP_fCvTbkF<69s<-By&-k%4Wc>v!^Bh(q&pT{(lBmMB~ z3NC|%MqOt(UGL4=15=Z4LaV*vnt~ovW86OPov~RM ztHy6-SaEl6*Y$N!>e&8_O|g@Y-8IMOp^kf}Z#V?%*tDq_ zzf0|}`WlkU{gGP;ZX;&-vud8H^^07*+5&yEZC}cArSsM36U$|DoS#sO29?Nk9awGrT`z}PV{uatxn zg!Szh?0mT7sk=^^R#4imi}iA-ihH&$C2Y0m!MSJH&>>XRCv^4htIdE~N5{OJi#u=^ z>(T}Cw%-2*8=ek({TU&git0vaaP{GODpFQq)1Qry4;M|xG8nfaIU)I?drD)R29H$w z#(wY_y&-L8DErotY!1Brk1xd?t1lIr@z*~ZgoQnv8_?j3{wWqrx&0YL4}>~so(u|Q z8?#PV2{*RXs^a=6XPu?oviZ=UyUZiv;ZzTO0yi8O)#`>um)5{nmkb&Q{BOiet@sTw zpA6XdtYIP60qD;)t>BpPtx@EsKx^|F@<;X{3dcy+n7$SrmRpz4tv&o;dD?6x>dBM3 zXl~Wn#;@+t_EA5+j(d+AP6$Wi4HZctrbEaA?6N1S$rw!r)Cz-AF?P`a*S|yiIAR&OBF*Es{5VV^w1~YBlDwB;{nUAVgIA$*7M#ky?dt8l=^2}(!jOC` zMApBr3w|;FqtkJ*e#Mr7KQ6gKM(M?;%4-Ou^czQu11bsT5|MjhHinZC(hkTL0^?ns zr?Y6#Sfa?}G5+QKsO9yD=;n+Pq6Iv+GE$yUgP8I% z`AEv`CW&5~`X|wJevjNu%iyd)w-~`i4jJs0EJbRr;d^mzifS}-)jS$$j= zyE&4KjNWY&%E;R=rTCNXMk3i_A|ol=c|K>4O9_WP@^T`VlEir-(u~!uL)9rT4<9}} zUx28osUZ}J=T$#HP%7?tY8%|mAic_gzX{Si-8sQQJK_ntt-G^qhgx3o&Or}{K;HTi zn2&G8F@Sv%=t;;*qUoLCRYw$3&o}t4e&HNsDy5nX!)tu&9o|+BD3h}N(LHoZdbMD% z087=%LPWVhM5Ki_`Du7+UDQ)2g&Y#VefeDEOSpB96KT{!E5|41phtZ%%knBOjB#l$ z0Y^BSj_|hDSk|cbFiRyU7)ppS7zvQ42-djV%2eTkQy*#cz2$(dfB_kulnlLw5 zM90?dFC2yiSu}pd7t!r0f%Ml*zoX3VGdympT9GX+ZIBN2k@=~Zk;S1Q{z3REwT9T^Q!<|h931Fj$iJYK48)pi$EP&zeDmYj^96x$veY7Q|zJZhcdK4!i zvevh!45k8hb9o%E%2o`fT7;P#bTjSG)+QKBUaX0&>gXOCXoaexyT%3seS3S?n)= zXCczPXE5hb`jF121kKoef~YpU3evLToNI>K%_>Nb(=2#?E_&kA#XC!R(GE);0+J+{ z0;nO9adFF>HfL!0HA>p=FWNi|De1v;n>ys4ngL6tx_yCU>&qreE5*-qZhOlCgt>g!M@lp%M#^tjmLOgD=19Pw5DbY_oM9Me-#-)2mYyOU z?8@+4n2`V@kn*hVzwq$?ma60F(YZ&4}PfIAaS z5Rf}Tmx{U2`DeXhqH-hTPW$zqMd-EsQa}1iunkGCW|HbI#dWcL!g(|xpmhndQGE_B-eaPY!c#jOz&pyXOFZ#Wf?HNIn?_W%Jk$j;< zN4)BidL~+N?7_l;)UKwb$KA1`oFXBL0TzINuSAcZnwS=^2{6cr^JTIlyH!D)oQQ+O zhVu|T@UrOAi7>v|)CPQ1W^e~r`44u!Z%{jvJMG&4GyQutO$7P1AN7>{hgGqY?pI54 zFUqhaGtt`_)fB~+c%cDBrcD6^Szc7Q?;bN%(K)+$Wn9#6=@3BP8<_|Ld}N-+=iKSm zle$}g1zG$CtKJXFbAdq4ns(s448&)JIrl@ZPG?4G>i?x zaXwvMbEP}r3gM(+QKc8(Y>9ycZM7&F@&OYwHfC-ES9vpmY%5t;OM7#wYWHmsWBRVi z5))7Tw7`{uSKn?0bBZMmKa(MU?_iz2qIJ@MWj&OBsq}hIZm>YfXlC%}swJcJ?+EqZ zM?oo7-L}TgGlh>(oZ_)FwH0HW(Z${Fr}P!wFs}YeIt_BvL}9e;O!e5jE$GrZ5PI6zRG=LA3Ij>p83r(jQV%T4fGEk!B&ox)2f_W2fa+N56!n; zd3KJ<-7FBH%4%Qt09N*{x7~PrK)i|~_Y_VLE1lVPgDv0G*#pk44?Zy?LHylvGL|jd z%2PT0X|8Ns`%QG1A()St4MrBeOk1hw<1msr6xg9lMt&Efnc9+%&I^lkW~m-+QuS3^ zM%>{WdOqN$uD`Y`&!V&DBqP$g+Mi)Ram1_ro=^Tw?12xs7L^a!zqlm`av9YWcD-7e zF$HNj(5VB`I|^XSWrOHPRL*nizr(HU<;`2?yDa$bqWDivtN_(zmr>UxNEE1B+&KdhI7h}ks6fQ zi?rX)(sVfps9*OntRR2{V**G>;Iw}K=KPH^nzoA|%+0o7k*aWaDy4pr*{Y#>Qqp!) z^Rh|3E|{An?yeiXsO~t7wySgwyI}Tu5M8lL!mQto?j7wicX;Gz?pwS?@Z9<}MGcV3 zo5mU;R&O|%dY-lJY)o`7enYA=y~Buw;Shf68jdYX?Tl2bO!+C$SyEd zuP^aY=KeduRRR$8mYJe*a!3RnM!-8i;xuOZG-PrWBN#BT91z%WnRUhekK`k7owC1( zL_KrO{NrwbE}yO|MS~1*I0{--<(dfeM%*k&&hX4jWA?9$WcJJs-+5j_i){ODd+9V@ z8d&Lp$6h8-Rb2>}AO5RRd=F0)?SY#RhpDz=CJ3v>6;ahYpKD@!@cN1OWL$cDT--H% zap)xP%pr#=U>)Axoyng=cb%d4X;5Zg%U*4kpWAlaOdf8p-!Lx}jX#{KDs5WJ?FigW zzmWwu;6^{5TCJE0(vGfR`n$nU5QXwLZ(it^nDgo1*cM89QnQCWlzMhBM7nxoqL-H^ zcx^47&HLb)8Q9%Updqa+F64UB8O#sJEK0yyO`A~_d<`z$RfY3kq-~Rc81wJ;ii7Vy z^39@7f+qV5zKO12`G;G%ybmOGT@XHuR*JgJr{DqWJ735bA380;=xLJS|e(aZGYDS6z{z#E`eq} z5L(LRGpXuH6L*<;(6pW0xSpxQH9-s!;Wt&4X%x`-G#y1fkCZtJLh&q)sm~3SB- z7t!&6^)P>zk5-{rJ7o6uLS@HTEf}zFtKCy^^=c+E4(s@lPIW8}CXl9m8~{VNe7`i7 zKv`Zz)T?^6ZH}KqZd2o$AhY1K!+q_5^IUUOu{{gAzh= zVIvaSZ-Ub60=r>Ke8&Q6KY&VBOEQ;ufZ^rlMy{>7F7vH*%N&~S-FH98op-@?4DZuHc5BSU=W2X(k7`A6If4(~#qOGk2KK`<;+D;r0`0<+6 z#-r5JxmSRorgFDNEysuSSO`u??E~c+3NJMO=zFY)Pey=wH87CFj`?(jF2G$I_)~Td zhyqex0Mxn}Jur&`pByR4m(N3qYA+oRivN=C{69n}zh313x!nD~`E64`^qoRyJL4Pk zV>3+RH9VSPG%RJlDh-S4CEf*#@g0>f{{9N^f*47CpAhCPE3$p7)>ZK1Ijfz~&u7=l ze|%UQ*GR(b>o8z2*U)K+S$V%!1p-!fg~KwW-9jEA4yg9G-qBYK?>LTP_FYGDcV>q0 zMXm$!@@t_6z4$RFh~ljtmtQ@EKnnx26NG0|t9ej5UO`j`0*Sc6WGo+_>^K!Q2`<~_ zcl8}yuduRy`Rb$;-QV2;n3h))f+J?q42pAEiaq0dHy-BXW8r?rBJS8jTp)=*BU%57KtX1G?FnkJX71*)TCdkAdzcH5I$K z$L#!rY-cd@G=CRSs3nC>Q!n|VX*+pU-%3R{uKjf0X_qgU$;|xX5HYQosoBhdok?3_ zMg~~IQM?ax4RE5Ej!fG1E7-5au*SwUw;jdrJh~&V6Xd~@RR8$)+i;T`6JNWz?tK}b zIlK(Xu}GV_W8k|{MbjDK_wyXb6PGI-Yr{~Px^?!bCq)S%4Fd|#EbMbSmhAi$_DnreD~CPHme%W1v`doWq)+jW0TC1#umH6y&hC2RQPVf~@W zPJ8nq19H1E!U7p|xX;P4H+ee#XQenWwe%tnz zc$UTk%KfF12DQVj0gstX&~`FtZ_{gyI;ktS#DBN*C*YRIlZ-RHmjs#UGoU}~`;o(W zA=XPf)+ImPsa2al{WQSjYYcn%`kfE@V=RalAlqme)gv!j#oW718OC{SN~gi~(R<=o zi!OEV9)O^`krIg#cK~oR&}&dqHDa+(o6zRidXiw;1kg!@LWj>r^w4y)QvD5LZ_d9z z{STEyt)fWr=MIsKnd zkAHNV;~f4GruZFI{r9*n7s7t95bui8$b1e62weLB3!Rv9LI@=b4sg^|EEjt0?{}4( zk53U0DAXEltzS`yhSlQ`$2tX|aRAY>Ek8}?3^46U0kwF5DxudLs1pV7mN(^*0elXy zKT$S?0^Qn0wsW0VACy3UP^dD`QP@cnfWTMaPd_Q-u=B-!^MhHpD?Iu}m$9o}<@QOfjBe&n$(RLep=j9gPC16J}s9j<_1PCo)dA7Ax_{y^Y(~ zOqaPQgJ?UKq#C09R^niqs7l}maCl1n{g^W*H0Bg$U>nMH{Q(YxYb?Y*) z{SKX%3<2*v&3FnzKtvee9aHtOZL#9M>ox|yVn8%XijLMvue89bR&>U;>+Ocw7@V^n zpj&vzDPfhsKdv>QgZa_%adKteBpaqW@eNxyld9hM(f6WL%`g|mnY6y^*+q+F9gRjX z>qDkIlg-$7=C<)uUqPlo*=eb?0e$o;m2hahv?Y@gi%{(98_jmd3csI^I~h;?)uNXB zjGgyb@_KqlZ@v1+UB0JXXa!g$7!EJSJG|!J%!ZXEiwVAuJ*N#`cTmE1d-la}n>;2? z`d;L0Vt#o-TjqKjR{JR%yE`)9QAkV7fPT^|6!Bs5EwRJHHpk<(KuzWA=8L!~%oczQbXOc5P|p%!%%#0|D@V;5 zhWwFjg6C-Bo`<2zh&e4gbZ$9kFW#~wq0ruS&4(#Xn(C?Hu5?{CcTlLo*EdU2gFK`T zn9)~=|7!NqgGif9rh{jV`?y17rldFDzTaL0_*=HtT9WM~{^hXC%*$-rx-*&a|W ztaV2S;alwg!q0Vlb*=BTMV7^LHIzlPSHdGNyj!iq3dD8kv}4bQi0R%hq(VUD1}IQL z9!VYwVyPbw=%~ECD^g59cyk7*OWVcVGDxUerFuYBA`)XNv1u0y!2v^8)(0>Ro9l-8 zWgq&iS!5?^eSb^u`k}?OcD3^1tf=)#she&>4L6&@YzoI9OQ274R7jNyyENyTgmXMr z?cuPTq&T7ZZg6;G1~H7Y3d#7)MQ>SR>GAZe=}si)p|}bITDi>C?Rg*e*a3x*o+IjF ztA(wMix|jcZx05#0-am{Zc}(%Cqwx6H(q3f4fq)U0$d&easfX8W0s>|SULZiiSBYm zD%O$%YYYi|I@{j8FRXjzXg5B Date: Fri, 23 Aug 2019 13:58:39 -0700 Subject: [PATCH 018/358] update again --- windows/deployment/images/mdt-08-fig02.png | Bin 84205 -> 86382 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/deployment/images/mdt-08-fig02.png b/windows/deployment/images/mdt-08-fig02.png index 50c97d8d0c2836be66fc8d5959ce6c5df64a9d58..7a0a4a1bbb2712eeb51d10564a9a05a4c6acf3eb 100644 GIT binary patch literal 86382 zcmbSyby$<_+y6aUNkuwMlrCwQhzg3dbW4MD_Xy!J08zR|hjjNS1?gtMfPpj{Ae+Mb7gl zvah_1&{$$WX3eDS2)l&T*+$dzi)L5R*{NozC$e5B`Cf3ixyhs{5fRbLfi^J(mzw8c z<>hTe94S;LOji6NomWCCohihA$PS3FW~b!D?KiE8YmWPG>=$fpXen;Q1%Qw18 zV3-bHp5b_|%YpL@;CKAZTV-3)PofW)ANxh;@4&z12S!y+>%d^Fzsx(nJ8#$lor%FFTuupsnaO7pvr#emUp6uR^!nak+;*?vyY_X zl6T7-MY5M=@*Lpv=Ws|DG=bS0S%%q8bsX1*_gqj}H-nU$9kG}CV7>mLH`AF3(N z+3&xai|N`to*H~vj-5EDfMSPzQ@P=JlmXL}qK=A3=QMDn^Yy^P?p`@ZZ zm2njW(dfF?0y#E+A_@7i+m?-m&bEuXGV#j0iQFkCw;ykV8jB=dk~LM14ZBlg`@|E1EL@RPRDHaLm{@RoIik zN;=gZ{od|aFw&DL0VRq3r7gJZ_oB(x&sW!D5nNU-^Yz>VsE4*kg*<2f=WHbD*f1(4;OI!V>-ZQ0DYp(;tiarcR zXw(F~0f%AV*<(H`iF~iYtf5t!q+cQg#&R3|jw`;<&M1eukFk_rTmyHho|X(MaZy{& zMe6y&Y8%liyT1kMd!QmA3*}i&#w`1vDWrU1fMi|TZ6-*^QQKHK1}Dyu5p^442s8j= z<8v^sZ8Mztv`s2t&?bc#P-c;rDr=xv^UytD&tmaP#Wz}mm_b9WiKP!9<}9saA+=gv z=Z{HPCTEPfwUYJNPNFz;IGQM<;T^oC-(u|7mJR){A|u-l#(H{me2i}uw=|zsqM%x^ zPh^Nkj<5Lzbc-PP&1v|-gBgqmc}cC7cIU(? zt&Q(wZ@*38L~X2DshbTtSc-!?qQ0WFHOitA z{EUTkYc@9nj+Z{%oAZ4ZkBNCSUYf$&w7AT~s2UMVyVIaZ%HXyT=ci>lY_3r#i@?p*&_G=#1Hu-G!&9}ZE{UG(%nu7+xE{>7V$0A#z zM7@)Thi>R|U;c0KiT>t`69ikIED$cn3C;nAb;b)HGf-V2Q7-| zI&__ycF2(N`cAXrQSDE2S_)&8scB&x9GzIbwOH4~^{X6AJX#mE<=ze}n1-*WckP+w z^_#R{{f%4<$7PZZ9rIv=2UmF-?WaY@>`?~{YtZm*?DOZVlWFcZ!ns4Y@6&PndudgA!4|3h7B_e}ZMH+Q3}I8112;gvd&|^R)|wLYv$Kr(Ln1 zK@ZVO_s-IDrw3)bH9LiJJ=jSPZ=WsQX;SKt<h+jonlk}2r z8XrJ4_`y{rnDd`jfgkIX+vl)RhvH#J9IsULDZd+Z9ZZpSRnFdCZp4h^jH|+L!U(Il zX4Q)oc@uc4K9}gk8J|Dd)MM%bOSj%VDwD&?z;YKYVUxRGdVxho2rMj>9|es|kPuSd zD8bL3>cmg-;CExGYkF-hv(~EJIi}OMzoEWyxna}G@kz=WK{-gHpzL=AuS(MG@s&aAw z*pW~FAj@9#sHPg>H`2U?IbZY*RDUz$NG8(hVb2vcIA?b;8ZTXAT6ONdB9CR3-mvwb zC@#g9Oxt92+4aASbiN0C8Bm@)o8>x(r9o~1B7h@)5pO=-5lds=ut+z8@LX0HGW0+V z2HWJi0ZzM!Qxp0CNHj4E9Q2I22|7mcq9ml;-RV$Dl?Y`m(4owZ_K|vQzV@ZDsH;sM z?B!Duj(wZW%6@>~0FTeFoNcE#pYYgWoPFPf(*bLnU7=U6bp)~kDGsKHOb?#Id`8p% z_{VpgqNR?EX9qmUPSIuHBL+UCwbMi*IU zlsTBOyMn>MuGQEt`!tU3V>#lm-R0<7`LvCl$qAp(k$sC*daCJr7>UHVasThSs|wgX zbl}+Fa0%DQW9ZXkFaO$|U=@=XBPJa6IhleBY_$MnOpqfjA!!}@ybI0b6|ICpGB_e*@ZF_TU651@F zrBfevQDkuuY(J^IX2k?EoHBs#AEjDfn$7{G&CBHb??vw(YdR>lX z`GZ7KtlN0{nkeaEL)5rn>x4yYSSLQ`Q zqXPljPmR0KbAdjt(3X>~z;ugt()07cVR+zCi}g7Y3t7RIUR(hjOdaaJ2%|`|+mwNY zF@9*mWXoYLt+~mC{eua4@#_}o#_$rp3iPjnY59SxXjJ@KL7)&i>wjdWA7 z_e?+UC|!l^%pKoU)Nm`x~LceY$f_25$BPZ zJOlrdM4bh0Ml=D)={krK|EJPs{;W~}Lh&)ZtBLk=v-=LB+7CvT4yPTS*MR>L$;?mO zk~}K$=TkC7yN5Ma$6s}B-U$^D??FVa5aEL1hKt~&UE^K&`CpvPskaihOLCG{+Xk&? zcxgfw6455{a&oEB#^TqdVqDsHAMns91-yqH)2))A|gTcZkTpj;i)aGJX6kI~>s8v4EtM9kt_a zT_=*_UDGrXt9uj7RSY)u*ECUYPm$y!$t5ee66)`uo*WPC`uMdQ6kdICdUn^o3TXMGt6?&j)vrvf94957e+?-Xdnrk3kkij+ zFXUE4geO1OAa>tqZwD^HL>K|dGR9DC4r!MQ19#UaQ|!m@T@2=E3S|!UjKNq9)P{3i z=|76ISc{Xek`p<9iz5Ujz6F)pVST zut72ghkfw!l6^}`q32KUFJ9^YOOPGsm+NW<)uqoXg7`&8Ke2pITlY!)$s$)U?pZ<_ zF;asa(G+D3oDzx9qnxIRgL!^}C`ig2Eq>n)dloJ^Kr!x)xmHk$JW(z*X)sbYR{rBI z*~X`WpgeABJ&vOo$L18)LYWE7LaYNCO3_NTN{g-(z>xlj;XC!|Q(xO1VhsV=pc>p!6?`c~|}aWl{gif{=-F;q++pO6vzYzQ0Zi=PzO| zl{gJB&{ZSsc%`R?|5rjHMIC35jZ?}&X)^u|0?h(5>WII8rA&kyi5zgickcyh6^FwT4NvwO2s z?C*2xevR`d)Of9VgT@)%NM_-cyFG0F``37kVKWI;g z>%ab3PU=z5d_-uEsEN=jF?gCLr?2$!PyCmp#dLpb zEN;W^3a=Fwk!s^iLeR*LT8w_^B7>~Eh*i7J1tu2<_jaAUqftbCpoplt7fcO z)E^o~y1&n6NAaN_=d6k_qPj*7H^vKRfj5wO8ZNCL?v{JL8oyV>2gQh3vmRj2m`DR^ zw|CiPl$n9DMit%e<#xnjB%o2!4W)ZZ>9EaJEp7ak)?`^gb?t_ z61Dj24dP%k!nQ*B3Y*a)hY`oXGj{39MVTI{2S!n6aXw=*vWACXIr%8o98p+F#%Ufp zw_Q$Sy>(YKqWrZ@vb=jiW-D3S8Rsruklm{!-!xt*IMoR_A73mCVcqT4#5h^9Dkb=* z7@-eYn}toT73%~VJl^?43Co2)GtOmV)ie3{kNR?7#uHvZ#t-v86sZlT8`?Cc(Lm9} zUWaTml~0d`D;tV*x||)rjTL`HEDeG$QY;74lu+=}sH<(|!Slo8`1wD7C`gp~3LZdr zr4DrV33Av1Ax4GXX$|OrP$S(F60FS`+uHuh`Kukn;UM90OHQA3ai^=@YdkMNw1MDJ;=dLE9DNAU^$m+r9$ z0g|I>#=7x*@&S(6+~9!9+^}a%&+XqvA|^-A9P4{ zr&lC{Q_JyBQbuu?JO0ND;rqY3*m|!a6NRisQp8=CP-?@T%0;3=d*|28hHnpY_;IG9-S}9 zoHV#~3o<@*u^q~i_rEowGW=^MR@kEdK2FCEKqjmpOTcmmI~r;*?NRoseY>6Jbba{n zcK+!6qMKQA!GBx28J-DEfMc@porU8LWmVf&gVlYt@{!LggwwY@h1*Ly1Kf;ufLHbJ+zDCAn3XpYz1R^ z;r{f)yMf5N5<+1UJloHud(zTNtk`lWVd$5y_`!W#xm7})?{hZqD#oe0dplDFPq~cM za!2LwS1=z~92av*$};gPr&~>&zdtniA<~J8t+1p z)%wb#xA`dYR*iHYugmd{^i%qo|F<&U1L8!R^pZIijt-ZU%mA%V?Ok1j-7 zKAt=K$Y4#-G?+p)tF?wU`LzZa-~7|FQ5fJgU1cNewx-G`Xih@TB=YhxZwGJ4cAfL$ z5?2(35WCR*qirNuj72Ysj*EoV5d1NJhbwb*TVr`xZGY>h{DZ6_^6F%N4ts->ikFm_ zrTd(c!csSZChOr_SDL;Sel7X&VDK$rqjlHvde!pGt7#8s#(o(L$42!YtB>hosSUiI zr_&4Px5%UV$&%V?kLtMgME zBfB${)b`}W_(dJo>x6p0FAX`et#uv)JFChHHB`={z8#``1K4}zVD&9N?-4v^W#s2m z#ig-T&?2$Iq`&j1(r)!;t*H9N3>l->xrL7dmi!q>qaU`X0#gY8xB2cpZ0#CYenAr8Xv~8}wCiDzq@3%;EaUr@ z9)wsM*McU22_~dLmNu<%cA7CXN82(r+X%{rQ*OUvKKzA|9L44S40fObUm?lV2B#4Ji3Tg8QMI8z5Z`4 z$5}qK?vqMXU|pmUk|mvOpdeF5zvs^UGeM;I^o`zM?Qcofab7pd8fFx?5YP7ZTd$uP zw+6RI5qq8Qlz!DJB171|M?*N^?8_^Eult&;%-n796d$v{%E=kxliU11qhb6wlLSV7Ni}C_cxAF_PGpibU>x|orIfpM{%|%+$LcL8ud>S zgW}m@zuj&*o3mSjI~TDhRA#e{r=&hQX+-9SZoWY;zVAQ zFf%9<04j-sZ#g-6)$E4}#R-!ZJQsrBPOzj`b`G~*!MACR0S^xdnOW}~60eO*2gZzM zxDMcu$OoM6HC_~_Gx#AWn-m7gC3x~4Rbu?>z6T?3q#h^w-I*EXQ>cNH7TZ=}FzbeA3aj5T{Vd%5;q2@$ zt}Cz>R5>&N5djjL{a?@ul;D5(^I=l+LV^IF+6t4&$)5|_t>iT|I)8qTCv7YUc3#KR zkKJKN65nvfxUGcFClGn>FwE*@WXTRzpIO4 z-S#-({}>QsVBsRUH^NhG|Brtx`;Cu@{>8-W)_?PXI?%s}yMqKyCuiS){`wt`t|#Kq z&Huvo|IA4rmK^&hhxi*)_xJptNP8L}%DQzbc~27ga?ljH@XH)sb3 zKyW3~F9Y0sfR_9%+{=Yd*AQR_0>Zz~!=nWI>N0YZB>1P=9iXJ300+XAIV+n0`e1ev zTgHczBs&f6sNm8_2FM8w6`8E66dsO%r@XNA29+fdUCx)rzq}e18Q`0U*<5JTN62F2rb4gn=CV#~55PTvt(nML zf0A1LqYU9a7CzQ6s?L?Mbtl5sUmuMk0>acE{Q~V2yP=A0V#@DJvEY(JPI5^!bigWE zPBL28adU-n7whF9se6%|A->{=o0oQjh;Y7Y8}=NZIQRLUZ`LBn1mvyjnf*2w50RD5 z%*Deqi)WTM_cJQkyG>0^I=2wUqU{(`E%s$(i~ebsomSZQ6&JEBWimL)o6vKAv9BK* zBNeps{K6yL3L$na7dywVdybW#@jL8D_f|P@H)01^wr{MjS3NnSo4Mz~W{&U>U-U3% z>CK$*Kvz}03@YblvaI}eSh1(q_~Ve?qS|BQ51H;49;rDQURx4WH^4xYk+9yQ9cziA zyi3aI@Tl@9=rT`3*mBz+zlgj^*5r33ooO~5==*w?3G!W5CqC3%u0fFkf>V<;KK60K z&v-h^)&)S@1YQ|)>!>LoNtms;eS`B3MqgSaq+BP8oxaC{{F^j}?ju`4X{{ZQs_+&28xrcb^<{D$QA?Jh=FMr?r!I@k7iLAk9qyZfZ6D6Y( ziZSy~t0@R{-!nl7*LZsrvh?NIC=^#M1{PaP*XP}A2-7yDSf9#BVJ1wbRHYU=GF)tI z7^;3e4>zs*oiQ*28@(*81va!H$_3;tMAON4)W_^P+1Wt{w7_O^Ytm zbcz*-jlQ62r1T4OJ`0;2Ke(_9CRPNN}Nu4`th(u74FV8{#8rU*{5Rf}i z#R57B8Jdwhj3Xf&-kboJ#Vwx3XMy(NvtFcO3vrfOMF2Y3h~+iQ@xzZ-!y|w~ca|U3 zpozrSJiSDq$@c{-x&jY@aGd=)=dl8abXo#1@ywW-Vq98Ddpe^=RG!>zKICw;#N5JG z$Q;L@g(R#XFnXhI*KLX_$zztM1T&-T#8~~=(x8@PQ|L}%8JmsdZk5HJnD_lYwUkd4%u8EB+LH#P>dX}{HFrI9JdOo z5>zkh5P-YRN%ku1{~ zhOK+AVOBN65oB=>73Q3J>v`c?I$&KR6m5Y&aak-=07LEVUUzEl1#6A;953-#UAWgc zpCo%gY_c$KU7R|Q)iNM#mAD!c1%fR5ZYJS;oqm(90LW>Qq!j<##Qh?>C9OgP6;RX} zE%H$cr-*q;Ok|MMkesWnMh;Z#5N%4rJaRdzvFsNl0I9xch092>nyI%`!^054pA4WC z3x7u8+(#WwA4Ium0g;HEhLKw@gD67G2qA{s2NlDB&NPgc{?cg)Ifa1AZjUOJF+P2V zH-CF;b?Y(JnA>}nOL&$%P^1Isuxyg&NB43eoeiNR<1WYoB z*L<|Y1rP^TBEYxXEtQ8rR*Cb{Wfz!hasN)4i#9PaL*!bRMFauddeH-^+`xZB@T(03u|9=7iF8?m8+Vg|-^824P{}XIR@SJ|d z9=tMK5y@N7dre|nkB6Hh#&#FaB;Yb|G9jJuo#dciajS#rNp`OJMb^Br21$={x`@=* zVe!HI1{xLZ7580De%%JlNNhpx2_dWf^qae9iMnFSkEq7haO02!v*+8yQ~^>KmChr3 zGAuZv^DgTyy&}8Jff3bve|)D+L7d+u;wh|-zis23`!Ug@D?c}oXeU}=Oo9hAC_J$& zweb!vq&qXk$m)Fn>x6KBB3fqkTBbdrIPMuKIjH1puIHsc}U--Op?X{mb@E( z@rR|de^k$&OkPFrqPfxfyYp8*RiX!LJ9UQC!R+_T|2iphh<>%LMay1ZldHxO2}QDs z&N9hBj=(D)pE4;^o~d}{?~>5;OndwLR_EArK(Ll_COo$^(Pb#S|S}iEPLEdw1U(o)PgH7Ehaesd(wQ?oDacbL@RELEZEp_Q|^bwC|~IS2eT$XgR~zMbdd=nQ)n5L@tG z_ITDyav5##Tv3!Q>n@V@bE$E$7$ubZeM7%Q=C^2-4uQUOr$C zi%0Ks_jqNnY+f5uir@0|ROrrG+?$5*o{71~scF7HN^B<9)oRsHYIz~02RQ2s*8A85 zc>NmqaEZC7>z?O6It`j94X;>=u_6vQk%0Y_=EEf~$XW;s12{88RW&#aU+LZU7jH?@ zn??3VW`0=cr7W}YzAiY+-hI24miXEGj`tPZH$TfOOey<>N*ru_;E^MXH;0XKAS!|s zepO2$1%8Wm=i{&29rN*dQYwg7a@3*|!)vkQ!cGA^2T5vjEHd|eT%KH+mE0k~9>(_X z??EqSB3~E&hGNNtiSnI8_Qmqy4z#Pl+Rvz^hX+kiV$hTdYuDIKtw!-w*HjsmHjj~| zS8vp!wl&l9>R-P*m$0u4fuA9kWthkBCeWdi=(PFtr}qF>rG}-`20~ATDJA)a(UaaThgYYIe}%#X?~u3vvASyEi~-2 zgO4+X;l?NTp3y(cZgKCel?u`5cDnUEec!gdxcT9h@6r@u+byj)gPLg) zXfE>u*n>e8GLqd=9bmG4PP=(ZQ%T7_L9xgCP~oBB51#l5kPh^)uUGcb80gg>^0s%~ zF#Q@xQibM&MwWihub!;^ov^LAora?OtAVaZ^5ixzF*TSC7sxNi5-fY^{3sX!T)UrQ4AA&1TF1;{d`C?C*v7wqs|7A z2`Fqsc=6NbusX|~&1(j?&3%?_c5Dbt9vZT|ok09?y_XI^ydGM0k6pe=@?PHvI2)g+ zyf%ArO=hAhlVY#$#MnOd+0o9gwP>5RDrdf0^+=7I7pJ{UF+R#~D7k*UN`8%U&YH44 z65lB0mj7@Qaj-_M-}&(qTX(?pQN?r#a+6gs&|?l-T%DSt!l_o>dBGla$uuA5s)?E%$+yE3+?lhXSbUudtIaSc8$?WO$$ zzy&IG-2l)r))Pt6IHkFslpF#0)u(fkw1f}PHh>c34O1WVMGAkictjBy_jQQjE+0wC zhHvSEAzSbh=EYaGakSb{Jo`7$96rR0Nu?I{d_tVRU3C%iPv@PZwbe@&-Rc8iX z)Qi0fJl4=oYIt*^K^ixbmJ?9o)?1NUCb2;AL3-65<9Y2UZFtM2JOOd22ku&NzluY} zN{6Gc;Vh_oHN&>Yk*$7-26e!nJt%`w*cv+cDrH_%GMaJz$sh7TscOhCbX<4OSS2(l zfUtB+&K5u_+fhZL>^PbqwS)S2F0s?N_aulE;{9!m0MceNBqHXq<&`I;Yf2n6DxXI8 z?Q7ORMI?D=)0vg1yN7h-yVD=*YL3CnFOw}9rpb5Yc@UAV?6bn1jM@cPS({CHn+^TMVFQ3wIJGvWrq(U7m#9bG+_usZp#?$KVR zd~AxUo)p4=E~WO{>JhDfb{=VOz{3SAC^yvIe|mp(uBjh7G}~#918^rP-($9xpW)Ak zsXl``3;Rs>@Z&>n=6m<>0pY-aJ@r`y%kiw+H}Y1soRI9V3f@!%)$}+UnQ>Hk>V_m9 zT|@c=Jl-T|nvquTWji6ux#G2f&;U9@pai4fkvPK@37bJxW1iIC9Z)wA8;cUYiKah^ zY(=?Zz@8KO`;IS?w{{nLmGyS&>~-X4ubuKCJiAU6x;>}kQ7dZq`kGj(5B(fHr`W8R ziiHAe+O=B#RL$waz>zDMH{!_Ow=&nt_30v&p%m+?DW%he~ zoox9HjXk`z0-0bl>$K)xV`|K_zMM?QX2miZq?9XXIyXg%$zXG`Z#H!i}Z zp=y{)Exa5(tqGc6a{eTIS;@5_(^ee)m5~jz)q|~tX_bcN0n~nnrsYX%m4_Q_lBQ6e zTGTL6%30j$M@tRy*$0%ZIN36f(?J*(;LMd6x@ zwQ+eclJV$ zkHyK41>0z>dE$h%GP)nuTvQ@IS)n!I{LTG(RmLj2ClS8- zy>gbtl`TM2N~-t)_`e$g+fVU0Y7L={;YtV0IQ1lX!2r7a{}8vJKKHI$m;>UGHI7+r z-Ck(RbMQ5e_0m%Pr+jDoK0XVsg?*>9rFm7v_lQwzy}T_)!a3M|B_CtORSzlDeUZ*M ztP4g+7xEO+;h%V#7vs+CoEqAEI*7gIy&++Tc(kpOpH{>AzJ6eP&NUCW z)c@V27rB4Z+CTE!=RN!VU&#oNGV34yW2>KIXI5*vmuvk5nmcSrDRoz6SANRknR_Lq ztssjpTq<$vdaDy$ReIL8%b?5N482Y!t)k{w-)C>2GN_`x8~*;BXz##%B+i1n7-o1+ z{X%Nb(7%!!E;|*_*`Nn?N1<9Hts29bVY4&#!snMZUafs`9W&*UR6t&*D_HpHhzw+XSXG|Bi#yimmmFiT&&7LX?C2XEo5Lq!S=GfJQb=B@ z%=O{YSw2Vx>b+``l(%PI1e#MBvkhIU=f>(9gGlj+_T3OOk=mCXZCrN}-j3`qKfm5Y zFJ@GUT0@!ZDWBRHGurS;qL>Q;)3EU<9(I(F`xJ}u1dWX+d3EokzlXi&>}+1G zCF6Jq1d3bSvDX!e72!@XX$g4A6sMG)vj@)BG>*v5sU#lyT90qD{;}5jq)*glfy3W= zIg`P|{)<~#WsultJM1_HT}Gb~*j175PUZ9Vn@gMl0LXP0=m2$6o(-XMpF<1_oc6Zw zJDyy`wsMW~1>D(tq0;pHuDnss)+Sq}-D4_(yIMGqvEC!+^wnqQ%k|uk-p(gXK8GzM zYqcRt-cEAfUh$~)E<>2WN?SkTIeF^`tEju223$?Swr}y@et37)@|xjE=vsUD6OM58 z{tVcw>Pk|Yz+`1QI51F}{r3_{{VdnJyFxp2|~6fvcwmCRRQ zQoIB$c#$7m(?FLr-2}&7RJ52wH6}~X1R_Sx#o7|+qL9@5aX-AA%*}jj--t2*wYK9u z0jtG{qhX}ShDw^+tEx(Eew@w1nyuS9UnK-ywQfJ+L}CSFm)x=o3)8agK5XaOn*}`C z-uL^4Th0}9q?#5=_$mdSBD+VfqP0eFeAw<|jlAlF5{$AzF}W6%Ooy3ky_s%th=9Rp z)$Id5F5%RvuN~{kx(j8|4qRYAMlUbun4qGNl0dOUV&aTrqj4up57A!0HgT8aJ$nn# zH<~>DV2I|VGI%syQH2smnuiCv@~u(Q!=Op`0?4{!ZuFgt+?YkBTjoth8qj_au`cNavRj_-0#jYnT?@sGS3U!Ae% z>X@y>b|&3Ca%j|8^IT-IUYS)>Y<&0oyA0Ahsl)2<=lObFoOGcQ)yz*{DDcnvWX%uunufFh>?2sAQ16-s)6hl z?L#NFoAe-z+Y&MEx#kArP?mpTtaQ}i>{Y2^?$P{yTNXSLp8o;zqK3<{`uRI;zq-EK4Yetg#z&OL-zvkrw4*(#iAem&as_b=lT?^AAV}$ zA6*MpH^8}jn{}DrxsjQC0Nq;32Bcjq3uDCWNbC)Tf@(^cm3$|nYUKlrsdo?&S8Jdx^0S*3(&X4}vdb9JU+pidLT&8x5L`O{#(kT2p5Af}wl1 z&!bpOr#vrnx`X;I)79uAq|ALV>zcdNscko|hmDAq>V|9p$g3wIXhF15V&;pj53V$y zEA#k7C1;qJF913R-GNtmE>o@@3LckPNRX3` zH~-1eak;#=#$aHkP@C_vY+tNb{zpwwqI{QU!1Jf!_te*asoX#MVcyW>dMEW_<4S|z zDv^ZDLd)7t!i7>L@tKek{mi>KB}NnZ;hZ$7ilQ&IL*23K=AUwM8kOIVC+JCGmlEUk zt<)`dz9r^NSUuIN`I&r5R}h($r;zeT*hn$8GM7iF*Tx^w2H;W;ucUfSZrAr^JrCaZehSbGdI@)=DHQx1iafHfyayr8QV2g{tR^ zcFsrl2@aLDqG3iZX*Y-5RCN7DcvpOuR0*|YaX{5F33l%*HM8zj$&4izA8w9Wt~5cx z#bEE|$WH~OhtEqbmb*YCyEk!U#>3ng-d}R8Jm}ZF{jD~9R6oRO^mEq*NA>#WXO1P! zkurrCHn;6B7dVBvb7VRi&=W{JcN#!Nf6xM|`Q@nf+Db(Z)53% zDWsQ+e>2#ZWu|%(1{ZIyC}$ygp>&Dbf>fyHDTN0Bx9v5bH7B}ZrUd?h>ZA4}4 zr}oY_`r!10Wjcs_^XZGp{t_b}U!I6W#Tc3VIM(wH_9W?j3B6iVfG5R;W!8OvdZjg?E<5P`)-v> z$+ETgO{c0y>O6M6dx9iJON+4q-Om(m@{1gFbV$7g=!`1-IzbJ-TnBD zZ{55TB=QO_#WE@WjKpqe9TqBEoYyrJ7b_#*cqL9_fC1}%!=pRQPBJv$21#RIJ6u9u z=g=BwMQWFrI(CrH1dq2*cwYM;RGMF9##U|#sS>&)@IFT zkClTu?=n%nGX9T@`WYcntkPFI%2e`#uamca{TX7cC5Trhn4>2VH*9QB0g`?9$_1}% zy^dzPyeK0wh*?`YGI5KCs_^qKFP4yx@!{FW60)k)`BV5#&dvg49cs9WJ`Qu!gCM%U zzD=NZDu5Or!}x345+ZT8_ElP9o^o4tzcn}JAbBAJ!qpmxaKMM);U}QA$m=!J#y4+p z$fuu%U7hNo=fBoUe^tc%`ORv2K*rsitJpv|E-oo;-QZBH zqLo1@Cwr(bYxQc#lT+`orq|OC(f6Ez`gdWQ>OGt=o5>QBDeui$?_9ySj>Rfy-iogm zoWG%aoNl$*p|nZC{bgiv(~OpjWLT;3v51Ll{h{z+0`JDdW2@^%wF@%g3d=7Kc?VJE zb7}q55G!0^VP&u{(_82naX*yivVDQm9i-#eB7QsadgP2Zg`&5Nl@xcH-ZOn#$odtJ z5_1~m=GRU>*|5TGnjy_zfgMhOvEeq1Ho5oRvI+8kf+e@WaMh!i{(_()M#NX@=@q@k zHrQj;y;mPV^L%+9vw3=RN5bAxqv26D9Tiuq+|I+RHVUJw+ztV~ho0;_slRA>peOfu z&ax?SN7+Gm#X&zE*OYc|5_gaDBX8M{scb~Hb33p5;vZSywJAi7g=rgA1*}JANR@Ud zby&w6OrU;M*huQ~(@~^qVZ$z7R#g#UnQz4kiL0L&3is97C$RxS$NyF95jGp4N?e5q z@C9OiHCCBw%E`zx2dBpsjS-r722kNK++dmfd^Mb7wQGTj-p;}xE24&GzRG;#Hhy~Q z3d8Nk$Z;uMB>DR-m#Z;EaP5DviJS+z%>DC79QC31Bh@`M-2T5;c3r0_p)r!JZVzhz z{)Djdj}pJfZVPgmU*rl_RE@t*PrZHLqLlaH16y{qW7B*vK`qaaHPQ%(m-#AE+6)vN zM&IltQ5rUpAB@tPTT*au+I?-`73j?xOKuOAljf^ia--C-KOTIdA{6^>MZtZnNykk7 z0bi}$G3C|%YmnYOnRr}%sgC$}eW~T7oWLkCz~*DD=b2I>GOJ_JLkZ_yzHy3!bU@GL zdD+J@UNCqsyBGoJ_Zc;&c)X+cb2ytRAKOX~(qF@rtT1eZ0|}M-y=tnf2Xi&vD*QOFI*%>#x+$&s=s@V)(C(zJ$+<;;zYnQG_OsQl%iH+P1Uiyuhw^eCv&yY zd;MA#?!6h*VmpVFCO$sNikFCPP z&i>SfeXpBc)tmLH^CD#R;&@K!eufD+$ZO)sIk$(0E48E(Y2cjMBX*E)n@#0_i_=&X z=y~ET6y6;!6~gcHKW;^dNC;T4P|lAmGFg;Rqcg3@c%+NAZJ{w<5(K+0sFyu%Sk?6Z z0m-aw;yydbHq%HxZVLVF5@L37sdE%DWHmq}W`iC=x=Ot~c&9-udJTR5N=r}&pIUcG zt+(jbLZ9KHX>06%h6i581s;k~UhNXuG zM;S78rO}$jT_WOA4pdrqXS}~hR8hR)18U-CO<2An%b-{C9!}uyVHFaWiaV-V^{Z}) zOJ)N0_ATKztU)jr#wrMMWHh8;-`bHhz*9!{DPsBwu?hS}#WR`bPSYL{b@>&_24m-M zm8no!J9XFK2zM7k*-u&KgeJt9!GVimYKEwL&$VEvx=d#3SwS` zjZd{?xI!;tU<~_|V+(CaoXG46C1TX7sl3)zGvz)CaTeqz_7qI)8aidc4{VLSOZO4< zVA}?MIh!4bjqP9ssY1w#O8_vLWzV}kenEu&OK09MP9LspPR#%bc@jcEWyDS+pEOC! zTPDZ6k5-7uhvc6*d^X+%V|sms8I%QIe|B%DK9PE2Cztl^&TG!(InP2qu?NBFlQB&I z^Ya5~kB2$e;hte?%)7Wu?E?$YWDt%jNL}>W>^o0TO*dHL*&B-|9Tu@UMxDX#&DS!~ zIM^t@wfpvNCm6BbvkD(gd~gvTM~MMRA2u=>e44Mh$|&+`r)re_$CDuXD@qsz1A<9` z71zdlb-24t=iqb@LsWWjtdY@Xo-HpOAtVCvz+7~u;DBjYXn2%y*L7%dD$*C>8gP90 zrUYOPMY>)V{YpuB4d5?~{vv(4WlSD;OH6_&-&-qrFr#~F9D!kCS3>MaY{l^a(VFXH zo-%XZ15H8f_hVx}14ZpP=C?IoNJq{r_DQQ)=ZXGAU)G{zOLnFlb;15IM~ttzpy8bO z=YhZj0>eaCd=}`Av71-lMeY>-dEz~?ttY+r$en^7|6sJ9%yM2~l2})5?=^aqA2(XO ztVrS#_i!j0D^Ok9LOK4<`>Js50wlSRPitnrhCleOKA~vMTx4Tl$sx1rn^Ke`6Iy6^ zgmK@MznYJEyJpqGpXsWoD3B)Mk?!8Sz3g0)Y}hRG|2TWgu&TPR?R#xPT0lw~MU?KA zZb7yYOb~Bnq$oK z{Eac+%RaqXW4iHhUyf|pO-d5*i)fwVYdu0x@^+Tm$O`@5<058KlDT)aKs}&yEnrkq zV-i{tX5^Ssjwk5Vq_u^Opy9p27p36V9`VT1Q`6_Wbx~)f(a&p4(E>Wa4)p%LT*HM6 z>hC}?TeSzm+FsiIk`K7);}}$`wVAiL4LWtQyyr*Xx&DmsdLgT4M^vo_Ze3qq_zJ2s zo~XdGr-0JDCpZ1WAm{s~;6~rtFlY7TF0&GhO*oe4 zNUE#A#EjCGL^E34Xs&7;q}N|C@#REQ6E}LdtFcQ@a6k_Hpg|;fhPBk-X=4FSNr`TN z*Gr+R%|GMUjzhDB>ow~x{=!c`&CLNHkE9Vpc^cfajfJmvy0ortHa;d*`QUrSaD0Ab z{V}i}#+F#`bBk1+;>L6P=j`5C8uy3{f{M~Q^d+i(XI&z+m-gE$2;14!!1}KDopIIF zwQ=nA&ZX0ETNa!t4=}DSHd5`pm{(#Gr#VxGky1}s<89aX=8qIC{S^BIESS{#YIDx zB=u0&eYIoaT{-Y-h=MwbO{xsa^%gDZWK$hiGBAy zYp72R<|Ug=`@DQplUzJ_0n+7fqDshb2=K>Em>Sp30wwne4znSHS&4O-$v% zhhI@#J0iTgQD!~;ldzY0U2qFaw1E0=n(0s=2^^I9c%jTYZ0~QjV|NZ+3GIzuJU+c-(YfC$GZ*_!&Y9mk8Z%shIDflw{BR8u4n1Y> z)Sf65U%FeA?LIu1lcmWv5a`x&rLL~8HOBEx8D3Plm6Bzdp7=_U^f7?c7fPKPqGw2q zg)}Y@@La4g;_97AjL<6*U#~JAA}#^((IHB?wbLq!vXyaRR9UQl^L!=*5G8Ssv1zVj zGRbz$JeLkE-GtV9qMs`Ge5)6{A>F$EWouz~MSZf|a#!Wh?Qcl@)CSGQ1~dW~`x+QnTs2)$m-rjYTnRZP}Xi+b0QvnWqzD!*8&nOx#e``V80O z2w1d)pTAGaj*UDWKcntgJ0B=wZn9>IV>8$e_S})mwqBQsAc(?9e@2T8;-OTivdq<} z51>*d7`Ga7r|3-qm(pAEpQW#wYN|@UU)}UoEh;4+!m<~=E>`UT(`o9Q@OG&e<2P?1 zUg&*?pNnEC!V^T_uvYg<`paf9=3~~B#q<2GNuP(v@r_tEqG^2k`Oa%JzJ$ANVs@PJ zl|j+=%)(3F;Pf%v2MCw8Zfpkvid#Mk$e@nG!UnuH9JfC_9^Ve`hy@6qxYAKVlQO*yTz$_FuWc% zX?A2uJjPYM$7ZJQ#!&r9K;jm3k>&r{{XGGArP%%_t<<$1<_+ep?1O$Q#L+=RV-<)N z?S;q>$=nu5+aie;y!>ZAq5))CPaPPJ%-(D;@l8R63^;u*Bg{d+BVS^W z-IxJ8=W8A*wYwekP`T0TxVUlr?jx!sjtVdWyo9K01p}B(Pdtx>u=Nqa_~y0w#M{l% zY56KSfAko8nk(xI?9)!bcQQ1W=1*E@5IZ_W!3h|x=bvuLTdJ+Q5l2&KFWr<&5*I=8 zcH&5kmV>NQ{#)}$wNPdTCnfCD{y8BeNpO5?l!gA2o9hZhK55kXe>RFZ*@|FD%UhWp zamQ=2u(Vaz-Y z5vlqu#Mk=b6r@T`^mA@0b&rk|=aO7zyb!geaQH^|GL4hZ{iu`Xp!L5D z4i4pw|4>m&dCYCc(w|<$oM=j>!IK65!7f;h`?$%bTMtowfvrOBjq|8b%dv+N3x1Xn z#IVzI8sXlq!}Nmb!5d=smdMFNk)vgvp2U6N`vU0rAXEI<2X`bBuyZ^naZk6qbP>Zo z%MGDPP28)_b%|0xZ0YW11)P{91b|^_8^!-}U|^uX^rR(`m+gb7A#NbuIt) zhbo8?aLb2^iV0l!5Fhae@xp}?6(kUi!f^1az)*D0m>io&~?Vh zDD<3o>V$dZbT*iiIMg$=}H~78^qL z0I@hUYqd3FP<5q$giImBIv2BVyvl}lv^6bes*X8Le@)Q>WHV;)JIkBcg^0FuA5{M& zSQMczHAU~(DgjKhIS+o`oMQI9KZkr^QKkw%)g7VUTW)r##zGEAspP&;NyPk|BT znmJx@p!ejC?~r;NExP({&+)lx8s@rf>6Avw5clK^))|4nPASmB77j!Z55Gc%J@Gxy z=}m@81}qw{Gc-aHu+85YNL&&5Ij}m4npFv$`ffDV8U>RB=3(8M^Ud4w_w(1+y zWJh?5e~SlcJVjTHWsn#%nB$9M-b<9vG1C~Wo&(fTw#?@)oKL1hKadE!;F4=`XrzAp z3Ad#@%exv2q@q=itpYwE(Mk6l_9$_qhOsNYPAeZRraZC^{yY%3`7!_IV2_x(G4)XT zT*fO79&;SCbQ%BOo6g{!sdw8ia+pBJ>S}2?ylfEBUndS|;Xb+YGnm+DEeo9ADKwl9 zlLDHf49Gt%2ITb$fLGS@62O!XsCjHU;Y7H-M8NMNImkhQ19#XkG#^L1y-LV^pj2o_ zWA75MOWjE+dP@UbvRU4tqJw0G54XLH`Iu&l?cK6pjE5640l9&QwB}h>humWo(^^~e z*?6zbKttfKAuX$D!@pNiiYFPZ909f^B_<%Da{3r+=$H%`Y+4;IbV zgI&+D58QW9dz-KGn77>)Mh5RQ&;4oxq+h3c1*XR_0Of!I?4Xxqq>PkY>&7m@`NCPs z2ZUMNsyL72%b(Mah>qSv2>ex`|JWs9Hf;TUIJTy5R|4a=Q}*594I=q#Z3&DxvW#b0 zuA_~T(lmhMLT(2h{EeQ>9*o6J5ZwDL*9PEEnsZES=yY>R{haE z%}x6{V-cE0U@;wHyJwKiZ<(5zW7L2$I==r6_3+~OSkQ`P=AYMa>FH8DJhXU&yOm|u zZ*eD}1B^0-c{d0L*~7Q~lh^z_4KsZE+B2NnT>Lesjyh}}Pq0YqlBB$Uh6yFP_$quz zl41B1_YC01Uewb1B~QTt3p z(eA8lWWzXb#>1q?JM?+k4dGA{!$+fm;_t1%r$f(1PHe1o8zQtV-&HhN^QVtg6IOLK z97laJSfpTAqgb_z+ZTa9h+v|g~|{Si=zA-gbnebAc)^9a{HXt1CJ zvxF@M7;w{CKFM?;IHkUjT}pfHJ;Sl?8slNe4V^xvgU$=8i|rRh+=A_F25*&8pZ+9R z-j_>N;(g`WbHbrnPajURq!#0t;wce=hwCeEtyL-YwK|d=@CDIc8m2kKTgKu`<%#mA9}&H z*tE_^Evch}W1CimVigy^7!oM$Npv@mm^{&){zNVeIY~UsWMD~xUKAiZL!?F$WqR{B z4Uht7o6=$_=Rugl*#5ZF*8DE=WkQy#zPni4esc~Yomp#g)!nh?ixY(%$D$K6M4JdK zU+baR(eBX6sKDH0ZJeUtmD@dd<*4>Cn}LzG{xp4IALXS#QRR0d0Seh$7%c;bH9~A) z^5y)H*vb+=Bx_75W2y@{Uz0=t#d($_ZEo2X}ZkbmItY7anh!l6l9i;^2+Uu(xl+(Oli)D>&=(#%}{*LyaY_5~` z(E>=3i}p&Fd?$UD_PXbP!z&8QoFi#FXg&D;ETRd+BIy^NIWA z%h!R)KGJTz_hk?rComGiTRX%IvQ|IpvvQrNTqk=^+s!nfNPrTtkV zFj`p_{kYc?r+_JE#N;m5kJd_cdlJc1%WDEk2oISl?fAd>Da6+pU(r@0PXxrz(G>!i z1qFFgVUn*YvocH0FHj88KGQqtj8c-K_~V^uL0C3<_Hlc)+3@T@zgHIR@9pIRL$W2` zgXeq4UC@DOSENz0<9e43Mgq6Lk$`A_n-+`+QbeUqe(Y%;L#4!T2zP=6zcmf-UCp%E zb=w*2C!Yhpf3Kq;PwOGkMz#D1@kItY5n4SaRbco${@NC_8_5-slw>QY5s(l`!BX*qJQ<9ytUA2(9WRi z)87pe%;Tgj!a6svfm{Wo?=)X3uBoU}20kzTQJ?bjqJnYZ(S$=j<%69YQw1VHUmZ0A zp@l6LH`)&t1Q=5O$8xLrb_HPPwy>_2!lQdVUNxWzF4? z_PiBg6`turhI#%dnjch#!YEbe^JmTX_eVDZQ+=dZ`sK1L2z=-avSize5n~IVlBnZ2 zx0~QRg;HnKFhyY&tpXV)WmBL-*vM+fQ7k<71!%+ELFcnxx!StVrTP$kJiAwRhvTWN_ z(=*SkdBJsMwtcgt^@m0G>V5Q#)0-@wNqy-w^;_)v^KPFiE2${{ks=v{B<^aSE=yT* zO+NLP<{%>NZ{^G_vS16w(Ylwu@?9L>pMaQp*Y=Rcn7K>o4eJVrp(G$ z={oKg*a7BeL)+%_L69oD9%rY?ei%5sNPaHO5XFRXJZoz{%y9Wv@R>I}waaGc)mD5u z`lw_~-_&|%bdqwiwU_pEA|?`Jh(FoaiWz>`3XX6Num8}Ew4`)IrvbR+@*X>xqrujt zMzZ;eK$3F+K2iyoGz!g>T12_Q4p}HqPbr;$IqbN~1yj*Z|JU1Wy>W^ND}Huc-#z?% z9J^8WiSO+Dwb5(D`v8T#kIBr8Zn2hUH(z}K(>f`i6Wll3NHg^rvCj-r1%kJd@(^_o z=#IHIFvFb!$48CLdu7wI=8<~o)nuL9krJNe9%Q7frRBrcd2t3 zzN719Gr4vk!K;&ce)IP=|4g;>=CyM1k+Q+9AG&|K>A#u?8o<~x2{P1TE%-;T16+G2 zg$3$Ua>H&R&;{Xd4#DT??Q$sHC$ZRzj0W3zSE;@{{wKJMY3TaBn4-#Hg^U3o+XUAU zL)p3DO!C65c`B~28$K_1tK=ge@BQk*mT%Lj)Ja<`f|F}+{!TpW-819YJq!V@XqXAwaDGE{nbf z!YkOzLviODJA$xmamAaUffG-?HoJ}!*VQXuu@Ob{XvHUwjL2J8Sad?&MTH2!0rJL} z%->E28Mrm=rxI;ci$?1$y?(c*lIX%#TS!6OBHQfvWHTz-)-QtxC#Z!@P0C95SFM5` zpP<@+7n=Wqfis^&qv4{PAZI#Ouw#VQZ)-r5NwpibB^RcA^At-|i9Td7(a5Bj5W5A7 z=8me;=Qyn@^Hg!81uC2+$#YA)hTX|@`-z+Q4+Z>-HA#gk&-4VEtSPuYOT%`F8b^OP z{wP|p#_qB5BEP_L+M}2DCiYg;FAgR5rFp@B4NI|&_+0;PxNva>HS*Ck+n?@yt54(H zW}j|9W}hkVmsRc%uvn6}FS=$oe>rak>!yUVP|TGGdz?q#qw}aymw%FLykaEf`0Y8qd3(1t zD~pPNGx?ZFwQymhQ6T=z!#KD;Zm{X!gxX_jOn6_QW1#9(ROrUFe$qSC`Ww0F$y1bfCKBFda{IvLW2U&5% z+E@{%#4ThbRnIKeAX(vl`bz5R^qZb?{KimU@Mfu>^p_sl5?L?|VbPNNg6sJ|7s&|p zxqk53uEyLNEh0bNyApUP6XQg*)3*;JgD`6~B`!SW4y1VF^Obv#Dcl~t3OVq|uxLSj zo{MRQm>es(`(PW+lz=&*F0G_T%_^HZqA>-X8uxx5a#!H?`{NaVQk=N6|2#(ryA2|$ zWnu`5?{*Q+9f^^>ipa%Q{Mgp-+Jf{A`X<-wl#@+S(K0bEKew33v&AD@;r*fBllL>Q zpu1Gq`T9xwi8em(72EBypX+A6?|MYq9kskRm%mM86AyVNBIoAfe#W~z0QR8mh^>>x z-J$|y!4EZX|FNofT?52%@L`}@@u0m;-tbeyFk#y+1X93~+PBBW;Hw*8guE1_q0XiJ zWoa~IOOW$~r*hl0%lF z@*7sHhGkO{FK4n)>AbgPFE{=Xk zGN7-^ypGUHWV86(=h%`EFMN9eohi5U1J$1ND|%(1FMS(6MgTshC}l8cw|}0+DJ>!> z#bt@3vkMA;+!S%QiE=M|)n2aZ6eHKoUX<@O!^C+c!!$nP;x6`G?aq6Jn9uwzLABGD zvoD&N-{VuWgy&8juOcFdp2XsjCpaMrj@7*uGtn({jLWeUk5W_7rL_9UrING;0fn6hrn{cOn=E(GxecL@&>USNr_;maj)J|#Y@_o z5j706N{94`1fIPkY12M8&a0r(4AZ}gYC&!;ilOdY9BafqA)4+GgI)DYk!lkJEqBvDzLplRA`F(89N^5)nIh*SKTEF}r}v+uS$_s4CI5RP9{F0c)gDpV zl$-2{SIfXL<;U5T|8VpN(SN>|;AfeQu?nN>YhA&KL0W-vt?&1{Es|kf;sIKK z9V5;TV29&97={^O(9HbP4$9zWZ5Nz(XFeH9rMP6w>asM1A#$mnC`M-SN38~r-ip9^ z@|?ncVrCuJs+!68gEfBg_EXB+OfYLgfiMVjM5o#J%y!Y)UJQ$b?Qcc=us+q&z;sQ^ zc>hqln69Q;2`Oi>uN^C$?meQ=zOj5&*Fne4O6u?c!byU)q29M*2cT{ZV(Tmsj`KTP zr_WT|mUwKJ7e_H7=B&Xn1#zub*Dg~%ecW>8!D3I0eDs3qxBjA^D1zRx@0#U-bLoaGdD{0?0v~0;%0QCk z0`&!}xck6^QG2C#XdycSxWC;8$r!XJp6e^b+matwLdV$eJH3i3tWO_mZi$frjh0Dl zB*i;(-$PT)2&WzCG;(6OG)i*C=(C8-2!}_*=~!h-58cep%hJ+oIQDbX=I(rUXp>&B zCN2G6*-13X;Bt2xX)+L@aYJTH@YziR<-R;nI!+X43*Wt{T`to`{aN&MR~VEaq+xWi&0 z+{!vEU$Z?7d^Kp&fEJPysemOm>Z_m2lg$g~aoi~uN5WuXKhS(U9X{scOmvyVb`Ej3 zoY`Ffc1RA@{vh<4Q{}G_r?Dv z;OrF(t!D1+Z$HCu7CmZ%IzfeXD>vjWe(Nvy0U8VZI3HRo=Y>fV9_ErVu=G^gR~p-! zX~%uh-T&bOipB;1BzCUbPGh6Bcw%z> z3u<5sn%SNurB)uvOJuU#U>+&Zq@99b-Dvf?-FARu7`*=L=$j15MPV@6H>;!-gYCcw zCeyyj^cGH1BGsDl262T%opSi<6wU#9JC6)gGCL(+X%IQYNqY#PNEr)lJ`7ARP z{T7W1BbgC%dEX?-Yq|oK-C?`)e<;=eLR|Q3fM9*Tj z3{=AqCr`5{<7#46)6x>pNG&<;;!hf|eaOf`u_z>8>mR`5y58!waOF-S%1+WUyFxV& z{WzeNtR2P51$TLl&4%OrD`S^b$WSsWM1W zUJ{`)47;PJZqduFjDlLgEM1Jux#MC>v*{1F=*w708LyWURyQmjiQgds;Sg`?FCYoB z9R4*e-sbf=ox71I=@oQ;cH_615A!hn|PoG$)M^U%V zFg`M=5d~Fb(q>G`2VKgK{l{a@pd7@Zx0T0a-R#Py z!arAvw*QP9C}788=g{qXoXH1kI#0V(x`!sppv{Kw)r4^f8|hP`7N$7?HB!E>y9HPP z(+%f5o#+^1ZzjhkUi`>pJ`VP8y^Nh1L}29WDeGff~3k6^q(>DiH!kH3&t(>!Q%Nd)VA&)3SUV~4i*8ApXr4+GOYZ?+4VraM1t8nW*-Cy2xM0Cbzwl*STuy3*aPZSE#`st8&2wefk@SFUt#1iCC*Xpb%sIDel5%NKfs?c!OxYVaFX&^i8JDdM7y{EX3sQ zSwU`(d#v!CVVX7FKPEFMXI(~`Fke(tYHR!~jYV2)>=4Fm+mGd2%nIJOv7S`xz{zeg z8RC|Zgvg_$LUDHeS)C>L5PXSSa^ zdsSz3-=3bHg8XtVed?z#AL-$yN_!9+O*6A?pwpM;S4w>%?~a6$KDt=6oR&X~0Bl+8 z>y~Cd`?SE6ROpnL?v@2(XzrN*Pz-P|G3vUt3i5_fcdH3S-FB%Bvf)SkO_D;v&{-xO z_vQk6RrbVlI^GQW${NX#;+<0~iCmymP&ST8eco{o62xQ1xPC0*N!RzINPuw!-+bR` z(7T{gS~;asCDUL6nm%t|e8<22qyRR2)OeK(sRLUR^!=>KYOucFMif2#qNu12Ff%iQ z#}dTbnX}1+IaevP*m}Q9qP*$k!oxL_-9_4t6pYggvR78#L^rzPeCP4Jg!=+kB8$DnRMPGFQ) zjCMz^_Ej*hfB$mAVaKv!UE?bZZC*X8sAGVM_wGvu%t0e5?$k(f0BW|%* z`4BiBq;PNz*NK%nKtF)6>D^&&Jv9vKog@>$nCV~*J?Ge|mlN`KODlzBR+9bU;Cd6f$m(wygZ zp3H=kwG|A`iWLz}UWq7qu8b-Z0r99Ha}~?)YL8gXMZo`p;*#L0tUA|9cFH=FTp|9e zPG|L%7qu$x$2I+GDxfN&QI^G^S=#L`fTcs;9b3_Xq3Nn{)7v4YoE}d9r^+k`D&$u7 zScz+qp!OwIkFMK|tv0m!`%5N7nI5>eqm7Ina{?1%+e1Q=16rGw^GDtIv<5_L|Dpq9 zO5m#yfI|?F@$#D$KB0e7d;&xq(0h+$*jzJFcNVYyO2l!zQXN65x8PH;nbyRZnyS6E zAEwq@WCZpii^XNZDkJboUW_BmG`}N7rbntek}3Hr&<^<-e)J1gwAos}54`as6H3jx+S(G8RII)s%Uq>jhl-V^c^)X`~HuzG&alplT8^ z)qLmCyn^@T?Iz(MjcZl_tT7}}S=H}G`@kyp&$ut202qB0hQW}jwGojISNwcJRihf9o`&5-Brg1{KCv_@sJRmmyk zld;Ai^;8)605z~u&o3y>F~NxMT^_4EjvceMf9>wRKY!AaG;y-{!{?3l#Ddh|4lFoz z{(u)cfM-bCV|{5_f}|1NSzBg=TBB3@YoAwAAEFI?wosC8GkF`dAgm(~|E_sW({wP& zGt$>?;v_G^Vqn~*`DS7a4Tz^t7bn2jD5+}LR3u{l$}P9!l-YJ;UAgO+sSs$3bmm&B zqN&Mrr9q=l>_5N#KBmjm<^wYb2E79Vzw*}qMl?JE9(&<-ZDXub;DS}3;PpN5KX3Y2 zpZFd-1A9j6$Mf-lmsdJ#ua}cVn3xRiuwqrvyqZje1l=xNPyX}?kJL_+ZiuyN&v?-W zyO&xi?hf8Xu9YQ=s{0Ad{B$DL#Qa?x8R2P<7lYU`4r%@}p|f==yqAOhSWSh=0KYMV z<92?qbLgFNZee9;VR%@!?r3S&_DHj$h0iGhQ_-|c;-Va0uaDHC;e`s-O$y+GQ=fkZvu?qCUJZL?$T?P}b$G|M(O@>yNa$Pm|M?lqHLgcb5l z(B25CXk&dFzeH{&XhS{)ZBU!>!r0pZFyU}%-9O}^^I2rz^q5dj;@%YqBWB}f21+S^ zfpKT;AF%0#=~J*dGp<>U%-Tqp<%6O3*{SP}5y8097 zPnV>tl)m(M1wmOeIfao*TW+P6(m^&WOJb7wmab_}vvm>Y3iEeDIeA_YBhB|_F=y)* zCjl-+`T72T##<$f3r5rC<+FadNsy;xwG_v1#8X;Rp_Anijg;oavykOgdQxoOM!9F- z5wto*Kt_)NdW@^a!3Ql-Kb7{kK0vFHjJg zdlDvT&~Y7V%F$k^j{oxpAUrfuO5H040XnzlpN@>sIgVu6!Qx!2I!}}iei9yUaxZS` z#YS)6X60oE5LJuok4%UR)98>r1j6U$#99r+2broo61z z*uhoN)w1T92+RzOtioJ_EsI#c3BaC*@JB&f8k`_7o1xROFZ`n zB0Ylj{vqKk=~)cd!z(l>bU$W!s&;#uPx{x2#_HCM_?v9X_10LBe$1hG?}Lq1_%Ou! z2k-x|YcvxpjPu?IsSVt|Rd9t}5b5k2I6li?26gV zAcNGk50LV7?KdjVsqvF6tz>CMj`K&)ZL-c4KY!|#m|oQx&Z4Bu?J49hY_1pe-C3<_ z9H>i;-{)siJE3!yZAg?Ne+K!Zj*rTiNikWS%eGSG+dipxE#eAmr2XvQ&8xF{4pVUEYRncOsE)&&~nC7GBU$Sby}A&K=f%nOT3sRa^fZLS;(rt zHC(QX>&j~Ocv27aXhB~+Xg=gdyLFmG{fIpP z8&i_7?!>AGhuow_@3t>I0%dAd^p-{loOI*I4~f8>ADe;uw_Nk= zXPoNzx>;T7&X+5T{bOvqnw)1bpQ)m(EX`Eog>B_mI~<(tE4tFC1}N`B?!3B$4i`K* z7=sMA=UOR&TJsANaDGuC09He!SpKiV_J|r6ChMlh2iyina<$8bD@xKvL#Ct6r@F>D zkJ_zIhN}>rj7B9$7Pb}8A{N*wFLLzKd$a24zq>=qeN~m2J(GS&fBy`8uxyXI{(HN? z+zalOCbz*fohB-&yO+@j7mjS{HPmyl2)%(6ok)O8#Z0oh)5p0|G|;!@Wo!S0cz}-x zFjP@545XaUsK>+)U#>)-j9txc6nr;OUamx-XJ*KVaDAKWlW?ebvVVR5#rtM@QRRNK zY-Eyy5m@Ua>&9K;_du`uF1`KB^n39$`eqp?6E?x~=*7`s6#7k1zV<@i+H3lN5u2wH zIZiQ_kHfNNN1CODqf|5Qzuc8xBhCHSYer|SUS4WxYB@vsd2X!xNAt>j-pM)>JjJu(cXLFI67z2N^7 zVqx_L)>s~+DA9c5hiA(Btrf~Pn~^b7TKof)l-1#k9e}x;RT1|iD6}RVA&23?T}Fdp z{>FsSpfsr34{$t$N)m}aV<}*-7@=Is8ZMC*cJaM5wNX}5^3rMfgkbB=+0}hxR(Pl} z=j+DCA>PSaZtBU(jkLvND>TN3FTVNv3qb2rMQIG&D#Yz%lB6kiNN)UjlZqD7dV@)9 z$P0?!IqZ?DG|9zs zEb$K*o~=u+aM5Tw4S;bme=845cZ|FHQq$)XtI@w4JQ1I%>aT)j&B%5nn6uk-UmTftNNHk1~G3X4nA zdn(bBzMZm-s~yRd2Da=en^+}w23ZkX62DEHo)B3iAYL`_BNGc#W@U&NJr=%_vwYyEwkYt75_WS|0wSU>Gs_ZP za&zd5N+HsY#O47US<@k8c8^W84M{bIsQ6^8X3=q)6x8g^$a@n)K!I`vAK-m-0roA4 zcJCoIs)(1D$$R5duk61sT~?LJ(;yVb4lq*2{;7Wnx<%4#5Y|N`xv4q`p`x29z^vt( z_0}=HmftqKQQ@L*-A4{ZxOo7zB{4Cm;7$PVIR{5;3p!}yti4#PY8A%>H|5g4$h4JK z$bZIJH_)06^LWfpuCwybNz0Ve7JM?j%bMTVHZKHUow)^Eop`0(jqN*c&0nj#*R9KO z8eO2eH@Vtsm(|q#t|5qrA7mo7M$x25bUxDV*6XDNm?o zcs1}f?<|8aD>dgGRHxe_p&R=@fKxY!vGuvStR)-rQNxZ*HG@55fwkm!YzGcPi>P1Y z2Ngl_9AT;0_@?mA`d~3Ex)dmK=@v0xtAaAiHO;jYWY^#pl74p~r+L|4cj{VnMx){( zCfiruO92vI2?>*#U`dUoygU{%0+$-Je{w!ZObu53MHX&M4xor$eR$y+%XBHvN|zQ zEY`iU&&1g99LPDwGLi8Q32jNK0oP3<_-qzzhXhg#fwUEFee8;ho?0p45=`vXt#Cf< zFFV0CB!oGV#UyR?l)tATW+ze2bUUvvKr;+qyQXkNUO)7F@1kJ2afH^Mt;*KM>0wb(5L zL+5R_jYG~28Pb>^dW849`%K7=AEdwOk5w?it)su#4&}Ihs*N=9E}OcYg@DE8dH)D1 zAX*9Hv~^4IX^4H3cLS7@6R0imX5O#(AI@lrF9ZtwXn?1dezK30WHkqC^KoV`GYij^PD%rQlizDN+>vX`WYYHo?6yeW)S^Mrgk%WM;WkKnxv_toIW!P zE&|?vF*TDvM83gb$2}B6;kVa>f-ekG&N-w7)Ukmz$?c>WnbB}2UIK^KqQ{Buf}-5(!u*!dHm|mbyzDM2=;0o#j~&%jJyfxT%gT zFG${PKhnNYOSe2!RCg9pNOVz;L@Lq3%j0!nLc&{BYCHvLr6eVg3RL^v5P|^T)?4E| z|H1)ghH)VD50i|}!}e(O221Dt#&NZo3=j%OQ;B>lov5(jhp1)6l+VZ9J27=NQsH6A zhSivUs*U5{W`m5e9UyiUNJ|PNz;QLqlbUh;w|e+f?`@BpGlZzg`WDyZwN3NWsHge!X$(Zrvlqj4w^!%A{dWYqDJy zKYH{TVz}DHh z+KFnZ8G~~@`Bzr!9$Ce&gI@7pkC7NE(;s(7ZJjxR{j}lw5%buBo4E7AI?$BxsY|pAsXtP)Gf}K zt)8L`uzKlF+Hg4B;n&Z&HyT9kWk`k|)3_`@PU(A~d3+7I+*DN4?qe!yd~D!-Qh5vB zrx;h85VBk6KI$gs3wZKA*$%U9^D2t3_z_xpDu^ag?t&~Ml_9Mp*xSwYaB+1fqjrRJ zaN&9X(6+B_udji?bps9h_mz^MIc~DoPI$#)+b^|L=fI`4+IwC{=Z8CSiQXkaiEcv- zx3!l1BD(EdxzwMMTrMk(k#O?a{Q7#?mO?TX8)O_!tt$vtcdQ24mcJgI;WM~$`5%K)Zg&o;! z-`o-jSQ|D7JrkiTlmJ+fswE(@jpItQzZ3iCuEXxs)byTF{roH|$6$W+q8Uv?)81Q& zc>r(B?0jr!MbhB&Tb;PQo50h+17d~`{MW2LNLwV*Oen-qeW1jS^J15 zuQ&Hd*EVj)(>BtwGc(%h3#Ptni{fRX+dFJX>4g! znMP9A>T6cbNmMFlJ%)I`G7bI{fz-+VbA}2m>>%|v_IqdtTrcGfKW&!w7;T{J=K#4Ogh_DTs2sVy zm_)7p{=f2DEit3w@VSV$!`DU3(&0oq4UH7jSXIk*d$_$nvC`MTKG|R!TflDA;-GxE zbamq4W$^V28g>_%?JGi8po zAaX3)LTP#OB!z|U^&$nXb9<&btQz+@R;95_kW*Os%o?VGt9+uyb^f`g_E`u~b@;OT zFBvbqeXkORF-CClO}{__Z1}-l3rO@nFQjD^XN83{iY$@DuBGPnt}9Mr_=dGie+wBi zZM?MzIrXKYg(CwK>7YGMd0S&}pfCv5|Af>E(w3b%FY!>7?W4(D2)b3Udjl?_&mz9n zAD7^2n|+Gg#-PGCxd{*Lxe`q{@g4jLnZjX725Oqef%MRDc>&4Gy13WAwON{$a?LmTo>c^mKsJu$Zin$NM%yC-wx;)e4h zRRbslx9}ppL&Dcfv+1m)rn!t`(8#tGR3^w*8eGOKtlTOt6kx{q?pOEd-t%y2_OMA z84ob!Q{PLzO!}L(vI`!tE$>!usrRlk-<8Lb6Y(yuib@3C5FvgKqUS?n0x4hUXlBar zuw4QsZ1o3nbZh-qc>&S~@zjyH>z7)4ja6@lg}DZwDjG&TDUoIjHQaH6WS`N?_HpjLdb{nZqNRIr=8RNpf^&a)8jv{}%egw8n zPDe!mFb=|yy|o`20oCgFrVBOADDRgJszyAHkmCT>2`0O6m;A?*H^bhkZbY8cny)Sx zr2*g3!3qU`60puNKZkaFiCc*{-Ez~?jmU)d#qCc5G+!bn9SJV=x{+#iaOp!e$e!tO zjM1!$t}#ebNJhHYYvhexBiom6a@flxnyAh+4s6&#^(I(un7gy*JGuV&Q9IS-oLf zEFbDqAL;d{ixRmHIa=A`;55#LuSnxI_huoKJ6x(7Ba}0pdkO#Z-~UO#|B_~F&pf9^ zSh5=4X>mN=eX_hiYc)i(Vm8(1<{Q*}wG zNl6p4o?N7&x_Iesp9QaQvmN=_cK7^t(y5qs0@rZ;%AmL8M_j#)1f8@F+)IM-V_#pD zl)iXYSG8)mgzPsq*&?m{ z%j0U%_hF2S2M-qSSR?2qs2-b!KISk8KoC_*;jJjmthcmRf#OjWmf%_pu<9~yw3^hV z<{Ow{rG-&&hoF~2voaeQj+{?CvflH@B(>2pjy(Z6>+{`N9#b&Jh*p3_!@&>uh?o8~PZUUH4kG{Jc!`x!V2m;nq>izZ1oG4`L~<1XdFv8jc}C|@N6z`VpS5zh zaKrZJkIv4Vo)W9*Zp=jm$jlb$2m5U=Bapi#m;Q z)RYOQ*_W7>n9ZS^RbYQ(O0Z(Th%Ty0fZ)quX_X(v#9lOo&`^jp6!al)cFiFc)K%>t z?S?QgSafwo#^|a^ND>gl=;}#`cd*CkwB@smjrgq>1{%#IpyCxH;mXDSF;6i>q20Q@M=6&qv; zX>#rrP1C1)F86-z1wS)`K>Ve9vi27{K9t{VtGD}Q=#^Oi-)bqa-`9VYOMm@aF6}m^ z*|wj2g@A>l22@{m%o!tojHW$ccyfC$!qQ~m(2 z#^0*zmK~~_qlZHZ&T~}3V;TO8ZGd8z>TeG0DK6?S&xRk-^F1k+$F7l9a;vxf55A)6 zzgyoL-2NjV@Pl11x}eem*6f}|PphTu^%mkr|3CDKEP1rv;kfhB7E4}mPp}|s8ho0E zTz}kTyXmyWr)Y3_c6i?9qWwG&_>;%gpMhv-2xZEkHE>}EAMC_&168c>d9mx82Iqf5xv{W zoSe6MiHEF<^CzCO8YQg3nL5`R$`18)sUS8?u{~Uh; zu0~+oP7fjiv>*mB98eSCp5FmG!Gk?y{MChX8guSt>oD$9Q!O0hp`*H2Rc2@(p1F?# zD#1+1sN)V#N{f}H3=Uq2_5;T3^IwdUuL&y*LK;{2+5ZHK2#NVn!zFig8QB7#l#}0< zVB`O77x3Rr1GED4g>eKfvmhDUUa`s0!_(%+H%DD8?fcc2i|3FQOi^^bN7mwM_(M)h z)5ycjsH)O2)Ib7cF8g`THN~W75Kr8_J$#^-ptUNQViC&or7d~Z4n|y29rE{^2w~&Oh^K< zt%9!2XN;Wd?f931LFl)ojpnzGaaqN3+0Arr7KujJAAkR^WW(@ZePSG3E^Yf46cACc zzD|>J+f-76B_yKY_Xw9rG5$F$0F*91I1SufTdbZejz-y+Sln%pZbthFXQA9(zifCp z_TC|^O{@SsoF^u0spv{|{~N9SvvK_6?r~A&4l^qK1g*2|;v8 z2qIe4=plM9qnC*kqK4=_dWp{HEjrP=(c3Ug^fKyqy6*B^_w(NCd;j>>XIZnBF|+qR z_dfQ~kKf_6AG~g5a8JKcQ;Mp1WeB5C;{rD66Y;s^NEUO8S4ygpPCoONItxpRx%N^p z`9XkA{HC7^UGIp#BxpKS2-+kFM_K)o`Y2$x8HDeaV}bJL+2z<07PVE;n`|BhlY=T@ zP-s6>$p@>Bc(}Pkr%JIO8Tw}U%03v%dg|0c$#d(PHD4P9QRK?iA#0~Scgjok3Tiq8 zht9S`vwvAn~g%TfcC|9Mcj+AdJS z;=2tiB53%EvylB+1vIFhg@PgAsIvT`qI9R-c0<}+xEkHq)bi&TD_pH;&1u3n0_wW@ zFYn}%*cV8DfXO*a{rBJPKyG(tKY74yYOsfA)7w^*ca{46^_yrjmmpkK?50OFDDJwxO+G#QjZ5!GaeRK$AJRldMC3!f%T?D zwf%A>-CyyHHhs(5YFd%rWTd_w%eRlG2DqTlJ2`Sm$G_lb3MEPH7Bdxt65JksrR7 zXv+TP;q$RK{i?FQf2n~-;!iGHBsbclxleB9mXpV?_2)Kd)VKIvLg{w^OYm0^| z_q@e<{VcQTNA4K1BXy1fTf+Hp4xf|U0bPNQgWgp!`%!A#>5nL?{R>Lm1?#a_N9MgJ z&@HLIiXX~9w2M)Y?6jZbKI>Ee7!c~3EVsu8PRCau0i2tQt`PcQ4*egMqwt!4kg6Yt zG7GFnscbez+?RaYvZPFJ5G^**RcIUkW8!Pc7DcO)Tc{w&W-y@l{N>}77^Dx+kE-{6 zHz;gt0`_9Aq#?W?9jE?kc=QNFFj3Bu^}03{5CXJHV;a)Y(OCJp4>Nj#obvO3-mw(( z)Xu0LuPPAeb-|h#?k^jH@@V1xbhU2ta6hxb5?5^F0beAw(EmkeOQZaT&Pg;m&zTWS(T2)a)| zhpovSYzN!1jz+-SpO=Ec~SxW%d!5NxjBqk|3DZ<)iGKG7S;GPrOGe6gpH znetfsIuzq5CmCUr*Lm&7k_Ed+n`deQ!dHd$3vxD@^=Yqn8)6!a zKeZv{sBeM=iNTy_p>Fp6-Z>FV--@>nYMB7=M(Sk)!L_}%+689vH8{_bCA;(b ziO<&t2>iFF--_$8wAL!y(=y#2HT&Es^~<+CO31T|=!!2tmdMbKBnt9RenbVk5Rm{2 z-yI~do~fX~(!gt|7T2OfQ&FMjC9s=OGw!BclqKB4p<;qB)ZkB+=MGe7R=2JC%_u(O2Y7XAx&DDp zYV%M06gIynOfKaG84avEl-nN943N4dr{*sKiNg&yu(=t&XFMA{Y;>=3Q@?(@BNsHl zs9wpvjw$>3Gk~>$>$=3{(dZ!L{Q1}G8oZMo(wpU_o?vfQR~%4AJWTkXB>(>!NMQUA zXa0|Wp4Pv0m!}=13qv0bom+S%@#2avk|m1@NnyML=SpBTW$?H_Wkfc;t^>!4zZN~; zp=b8-PwBSz8y-L6;vlzJpZ|l*u3ytu$biW&29o~YHnCvO7uRVrM(xE z=qRs}<3A8tK$I;|`QQC#BaDAN^R<+`29rut|F_-(4rBVi9)wmNdc-+4u9B7?iE6V} zNqWm^ApM5EX*>wWHMzSChBm@gHK=?@wWgywBiKY`8G&%L>AY>-TB_D>5N2*!yQ!Ic`#cQ;<}R^lOzb-7h{FJ#27#(;23H2()hue zmMe+W6j79_%_p^wxIj5QwJR1^uwk;R;vq}I=48wvnwqGUBntS;C>8+4Mw3Mo+qzJv z!H+67y(~92{j7UxMMGYxD??qD9#1?yB|;MnnC7Ski&JK7CO|)l|2aM|qixJI+Qz<^ zM}p&V4V&LPHz5>1e8vGK~aXzJ6}T<1MHJd zb{>|EtSYLJpuvm9TNVjIzGjFD=LkG_$SYPMH| zba!aCO` zqtm&n%**oZ?&GzII7@!qRM~7JLx1J|#ju10dc?k^38eiL1l@w1F$F6_orlQ#2 zWA!vx5#Fu|G0pn3R`BbbBgRy3HpvcAbnKto>FZlyCVGMUwgaAv)CpTFJhwX3()n3@ zIM-v(IUQl@;%xAnauYdO{pYY^%gww0PO50q-9HuFLY6itLoOw0qG}J_d8AH)A_C{g z6?D0WY}{JyumY33g+@Be8I^>cn-n*(K?Qmpyte+A%gClQhB^Xv69ffT%S3K#zc-4> zK-A2TlG1WYD{om4-bG$aFI_{7;88oXjcqG%5KQcyrt|-X>VTYn;<{oPDPyKSxL;Lu7 zx3yZ)F@gtcv_P^rO^|ApI-)N{< zA6lpX&PDlj<>}VJypH|5(iA89>Ll&?v}A8m<*K`q8aAi?{@+KkzprGM{cpmUL;wpb zd?0^bq5`T(-(!^kbz7WK{TcOSFdFstn_aFEjf%~7aM<#eLR4c0Y}ic;e~>GUhq*BL zX&jV-X}bN!P#9uA4}AndJv7c;*!a@spyEOtlAI~i=wR+^dNRvuOh{eX^Hsvhuv&S^ z=RwmeLK3P!TqrkEs0iNToEUnfeC46rFS%+G_6=AKo}n`6Lm3bITTRaJuf$ zx=RSm;70=W!ODU~HwSy8)zU^-#ezOY!DhiNCThJktS@4l1nF}-G%{ema90y z-2UPI z5~y7zgHC#XHkfkJmfH2eN)R(n;9PvuG1W2>QkXYP_C-cl-~Cm^Nu;?s{>j>AxCc(c zyg7jzWeiZyn<}#1lTnmToMUQ6SaN4=({==XEcSd>zPcPxNcr`fr6XPx7pDNIS3LM& zXzEw=^@z8(F)R3ZBi*3G6>Dz2LboAA$5U2 zAdfy4Q}E9`BUvlkBYbwC(N?PD?p~+s6T`B`Tuf*mY(pxVsElumFuXskM3;l6rVqhp zYd9od$*%anQvS&=ik-wp{?uvY9TnM|;Y7i)d5ACt2qo?g0m+=J15a|dN4U}->gSzR zx5oy_H6%8~8cg+Pv@@rCGIC^QSv-z>g#D=1oCi7|qdZ%N zJ4s+}hJ1sE<>{TljRzCGxxT#V%YTGaixtNm^)bH(CI7>mR4Q&5H4we3VX?L`m|RvU zN^2en?Ow^7gfNQ|T0{ZAi1437ZGTm&h!_mIEQ1%j52qwZjd>9T8rmbxHRT-pT;N_?eWm&3wLPhk&K)AeZ z2C1xAbJDRwstEW{mPzU`h}7H`D-`~XZ~g7J_O$MdU;Phv_!E_eorRIPXP00q=pVv^ zl{Nk{+Z2C#9HT{^baW9!j(-CEBjw|K*1hj+Dg)23*T;@;sHLj1d#w#JXAaT1 zI|yPIvsH2zv*i&N@4gHd3k;b4y86OJv)=G@Y$S>u5OWTISr2JhAH-DAi@Ly&hl0YCb)~ylaGqLi`kV%Qojg47k`<^AKVFg<+`{5JOk*;L)pU&*34o=f9ku&Oo zhrE<*%r|E03%8xQ`?75zUbMj0fK^@gs`S4Z*_&dlHPSv}$RBr|M=v;)4;AM<<3;Rh zUegO2W`7Up2);XyU!0Mi&TFx~WNy*><(axpg?6TGruEquwI%`D4UDY}#NFdlG-J6* z%ROafSElNTs+^7GWeOKvWXi$fh7PK9l^NQzNUDnmE4*|$J0d#NagM8He3<6;B{Y3F z2ymNv6Y7wB7-Q9ruuA{&mT{!_qpa$Ha6zt@QjxdI@b@V#Rvgh1RCT#_F%@pegq^*z z%Nl*H!;XHBs6^DO0pc8I*-kabZZiV)ZIYH_l4$$%{DNM~fpomwR^RjkeF`$URe`$U z^rjxHIo$N1OC+>&aSH`oCEs8$Xb^H#xL7_4S4ke5A-qt>zT$ zIsOkBK`@J}14IBa9#j^N-Vz4Ff!#=4I9Ok62X?nK=ehWzIB@(rgRn z(+kXV-as+lB8e9dZcWD7hTg@yH*ohJn%NjiSt<&$j+aMo@A_4TT%L?u-1Vx68ZIAD z(ZZS|iY8ug)HjF;SMFiY_HC6_^Pnf^)g`eHEjdZm&{dQDkPqCV6aRp+f{dDRN*FLCUw&_SI}j+!sfdHRz`XwGBRCl}3S&v#7|r=i6dDw&K5WP&)pD3k0?@?LM8e zug~H)lk>6p3zkZK=>2Ls?(DfL?X$%yu~=1QGZRaew|^sPy2NDoRQCDl-G6O-tt#LU zps%&s7jtrVG)$CWg_C#R;{D5h87xDsJOtcZq?9eVhag+c@sA5f^&U;K;lyWGJL;F_ zw?i|6tohfwKEMwyYmXnAI7i^NKt_klaR+w~>veg%t$n?0Ie)-KaTn;>v%TieK6Nm5 zXCa-GRF2UYh%3fZ54Yc);|NqA%kG7rhS0qbyVTXvW!LMo&&{p{?H`WZ{IbaWg8ba= zZ>pnizn`EI1;S3l=#<0-DOAE61V$~jegJ3tqmE}XUOHv#19RS}#$9H8#NN|r^#SsT z&(`K@Opm^Y`Rx;-F|PRZ(-L2-f`#6gE?RMLYrm?anqj{eo%1LsSbJRE%(@ObZ6LLw zTcmnsk0}~8_Ig}mW|&2sc+#N*S#hK2-i$`rHa=u59A%dsB_~NKebGkNOJCmZO1bK3 z$C*v#`UnU{^KX%#o;dJ`*X`p#DRxD7ku1jAZa>0|Xd`{5F5mcnpZ}ZEN4NQ{o8^b( z`5}6A5mDY!q1`ePe$h61Mrkd14sY2!JA0?L;&tO-o|w*>EAiF%aZQZbh~S5YTR>Q! z62eB!*9Ytins#z+-qc_{)dEVOKAho`dk^h8>9EQmu)09r6%%2WycN`Yj`}ANdjo#2 z12kQ-w@izNYG$$7kGl{qhZgqJwbg_TaLms@XN|b+KU`^=Z9QF$ul1|)0KNNICnmJ8 zx|_fn>3rA{upw1)D91Dudkf5E^kc%RhG##o2Fposf#3-#=x2v$IxI7KDpAG$mW+cV zFGdwFtn}ozTGPFUkLHA;X#mA6%{Eyo4t^qzr-Do5<}x_i{CKm8Jq zZ0|nT&}z)w<1BCY^i!%^yEJ%SETEVu+ff){yZN5g@Fys`zp-q13t3saRAp%Q|6X(Q zX4|y>MbxL2i;Z;T8oCWOJL{tYbPXT996T&j!&CCyWb0D2{D*1qbo^d9E7qf8mSWD> zmOJZfrq^3ZPx$R+d0x>U^&3Vx`eWHnhmZfMcw=d3YO&dX?$vx-Dl7{kFZz``#*Tc< z#Co!>L|N&C%ef0%cu{Uv_ic5DzX}f6DkICi2B!)KhB5oj7V}FVKm`J;ayD8P?R1i0 z{Kbfnpw6y0#{i+Qj(cOFm8e;b70`v5W0%0nNPu8hnTsOYB7DGi{>B0yRwKmS8V8uT zkqa-1w1PlB6jQI7AgYS=x9*-l7Oz2zRnB{8w}EJKW&3%X<9evZ&y1Wd(Y1Cp z()4bISf1AA2 zy|!%K+VyK-tnzFX!DKWOyOf`K%47`WQ@ddAjPEm>s@`AY2fKEOMS}{)bw_i_vifbc z4NTMao#9SzfNBLeZnG^epnM1LP6ZZrA+S_6V6t{opehI8onf{Sk+MXd!pzk4J3%>8sXyYB4)%5W z$Boz(XkG-1Fu~U0Grl=sw9}HvH=t}j%U^9DxM&B9P z+DLx0l`Vd}k&m7%_p$)w z_bQ##s0kYc<{_*ze<0#^KtpOXV(r6nn24^}PYthtwktt5&-4_^uebjOAX_z^oqF&; z(%T7Cv3cgXf>PsqCwdLCTp@v?`1t7RWoG)xJ<3&j`j=Y7O$t=E8)S5mk}?PhzfWO2 zbpb`D^DoJpE<&<-ZIqSmm&u!rNm;^cZ%VC*zS>XDs@n=AYCad!yV*?Sv1ionCPP_L zdzlU_EK&kmu_{m~tA^%;sz#cBzID)jfRK{1S9(=ITE-eVRQW-9@ay97n|`n2H#xJW zQ8kDDxGhuO-+5EQeB!6kwbE>jjiEigW-5x8)cG|>Shzf)*&oZV5*zi$qv2fJ(i34s z=`*eNs+T_`TvpFXIMl|)q>xFldFOpfF>nhNLF#1?VXf6Sumbj#Ky~b`=I=Pbl`5W5srU=T4Li$! zYfN+>?$#R#Cww zRACItALp7jxNDtu^hIJvVwLQCKfCsMhG_OzCld2`!N3g4mxjgOA0PM*N2F-`=>TR$ zI~q3=$YAXslA9mm0_~gO@Z_VB4;Z3e%zBD7OX0p4s_Cr{lx)b2VBEWRB3tcZlX{g~KhF zhbVN?BmS~lBD{8sBSYwR)X4YEppAI@;B`zP?kG}4qTwOxLKScl8oF(rxSyQ-f~ENx zAaNgX&!vUcY*S;|)%?$4ya;$kE}bvcwZZXCWR05RK3G>roMPpb4L>|OphlI=H^!f~ z^rG-Xh?_k<)C{NU=dMnIX-$b5lsI($%GFHHYmh)N=hN;e7;eJpk#{e7B>28MtO3+ z4P#UljOl4K>%N}w{;8JkT$_8viXqQkT0*EhYM!jHI|&9dn3ftt~K7PQS!;WN4?vM6FAO96nu#g*u{}zVXJ9P*tAx|_RwizwzEFZ=2)zH`G50A zH7|9d;AJ2X`)jdwxU=9#3klOLl1Cgswa*dz&0op5VoKUVso6iz{Kt!_pIOJAhe@2A z-b3wOUW{HP<~_0LGxoH;AoGNx4Lm))1fU4J+1)s-Nl07oQiBhb1&E(6P~=ViGwJ&% zGyuDKyxdL$_*1sXcSs}rDh${cLt0@qXRWqNYY`7#VoU;^cvbB@DD<@(laz?v!-@_r zxRbYL!{$;eVV-+k9N|*Ed9xF3B75rgHx{f9(!uUf<#svg_3zYOvu{TyZz-CBA&^;e z`%D36hMZf@h`}s0jSC84zA=~(uu*0q;Wb>mfuZ+i;ka?8APDSdgcPZIMO-fR>!Fz7 zT5Ir;iY4P@*j&>OL*HY+VJIj*dMQSIdmVcwdxTcW5Td#^ZjGcdfn%y2U{josTg_^g zzwTi*ivrD$fVh#vye6BljOW?J5!rl7!gzNYrZu0v*)Fc#sC!$sAMF=y)S7weqWGBC%J!q73P`~*%}|k zzow~k*nUyrxn{pHx|Xx?`l#H+7wJ4|vY`p~pvzlsJDO_WE5bJkj{^aUTtDC^#q^8BkpNAPzvMI)PiB*0iu-o_m!!N-5 z7C@x%Ka%{%FQ&u~++@H$--K$caH_dx?l%jFbU)H5sk1k!(=_Qwn4uH8^c3TZHTgDd zT&OaPxbM7YVh6QJTR1P-c>FlN-}I^ewru`?no&AQRwKxr|&aOrZEi>Ic)s!{-omX|}he1?T6TSZIKE5sW zzQU=iC#{a;vH?~z{rbT;6)ujX^2iz~I(b^BjVp&(7iW}kXI0hIm!||bYpKl?Pm)o) zg01;vs4)HaT*krB#(q@k=0kBFrl!qCD^!%)eRu$PYF*xi6%9T|t0O0%+e)4kAKmcNC;8p4ADn!WeUlz*aPL+4x`bem5!7$OWGz9e3E@=aK88ME-7!ALb zNSy$5Gb?g;6MMPIDKt~WR(SQ$RMKZ;bH^)3Y~tdggne)9tsxI%;k*?QTbP<;^xw?< zBt5Wusml3v$VMGlQ~iCU>rSw(@oK((#3?v$jcX{Ye6?bG%XHccO_D|5pIKqzvp%2{ zk_O%|*rgNF`e4?_{>^lR+q%uAum}_*mR#c=(Qi;Kt!ziOQ1>H}4~~yN#{<}drdc<8 zrh#bDur-2bP*gT(Ba1sH&suQaQAAlgstPO4K7rL9R=H0GopX;jpvQdJvX_6ytq}!E zB?HCw%{3L*D#SV}O?F-9%4=g75k6e=VSpTsc#VC-PinTQFXy0@HL5hgev1`w_riyX z`g!?_*wo1(8_&fx(0^Xzdex1r>W7bPpsR+4ORrvv=19Cw1l#B4z+G~_C-SeaWW!w^ zAw5I{(Sj(?68~x28fG9N)me|}te>SfSz6DM0Yk|&W7;c&f-l~O&bk;VdHkub@)x0J z>zUDdAa#_!!`eF)n+1~57FTA9Xwi^0q7c1bHYqU+H^_W_>G-_D9AeaoiX|dyC`>|Kw+c(Gm~A+1-X4J!~yHlg>5IZhq3NusjD5xMp}QR)5!7wzr+-9d{&;sv6YwKI&oPfaJCxZQiN4^$TJpN{Iib zP3;$kXQD2M-Pw=Tbc=&zlM~Q}`Mrd%BQ%FP3)2mm8N!*|NH^zv0$`UuxTA`5^ru0A z??M4*8V2YZBYqN+75lGty+XWT=!qz&_Syxm4~AX7d6IKsW(-#E8a47%`W(qexP7e+ zS}hXY%cI4f7Q}il#?ig-V1Y;9`>oq#j4~RR2yXIpnN$U}#@OyPmF#8`FI7=zffoXT_uejWHq%dFQKEV+}R-&q+Juy7vUt zeKQ>J(8;iPU1@sE3)p0e@vP`t;31W%hmL?B59nZ6EjY~O*u;Y< zgHRy=|I8GO4VAe~wtGBAfG?puJ7JJ%V9l#GaR^}&G9YvCj;=N1zeAusuPWVud%v-M z`>uG^ArVy9@9Xd}dDb>%sZ;eV39$dH8rdHV;oHyEIwD0?A3hOhl{&znSx4VdsTR}Y zt%|sjZBBS7H|C})@CIGN$uDeqPtC>ECPm_U(b;jarUoRib`kUf`t3u5c9B7}fj}4U*I%x?MRg(2 zzm$F*30*=0RptQYU`O~f)Lf-OCGBl;i>8aYN={_#%9?H$seb(t!vpo;=sUG{1_5>5Z`>T^X zrCwVkDormARAJt+X!BgJqsPKJU;y~%)i@#Z_~V<+G-sS`N9^fvh!PD<6raDk0PkRM z)SOj6#u12<{Q$yMK#U4PCV7tJO1U_f_6uen5Os^z@WfW$iv!VSlF_R+ES>$Xp<^wV zza9~>ML?Ns{z``U4?+@EFk0TU$J{ldtyp=oy1x|tEasjj@Z-@7p78uK(H>HxUZ<5| zhSgQ`E3+e~pLFcyaNPW;|WPO1wOyP+7*+pP8c zk))Sf`Fak_MVNrIXBVI6#rsZinRJP89B)pGG|&~nOua0k224o~wV36}vsja9oKKJRvOQKceX?;fA{lhafq6@SY^j{h#+FjTS6-CSgLzgh}k_hwkIPerwoBBu6>Qx1ckz`pQ{EceIqtNPX^3 zkS$U^0M>`=0{57T|FhKwmkPT#1~G3;d8*%RBHI|IS?@HzlKc&QBob6ckJARHTGJ}9 zcTF626$7J$=tSG@J!VCq?33FN9-;a^4p3gW8DEEwkDO3an%B2=7sZFWHn?xuh_adG z&L37?uHv*lN+J?`_D-P;^y)a|(}E!ZFfrK9Xzb?v2`4QKbE<|F|Nlf`j3(;Jq~sG<@|fNVRKq zqWiNktNQU-m{SXhd*tYSb<;V`VMtunwB|gb|NZ`9!%Js6wOaauh@XDKU{M9zM@5y% zNHF{3Q4;D}>v6$?(Q3Z~xMmEb4Dhg;=!H^q`s)btIwN#YwZ(EUj(HFTb16(=*jv0L z2RHBrce9!&LS}PJo~qgUZT&#aYkjZ?Z^gT=-oYGk&jC98G{!XNwRr?Dx3NNS^*P6K zcbx0laO_5&eQ;jyc)_SW@-6BCanFD$l^SB}xmA@wxQHETNuQf3e74(ljS_1z5!Zqc zEciL5N#v#RR*f<>PS$Z9g`j7ZW{f?fYj@#`}qAZDXNu{B4NsY;;KJbsHelZ#DIWCgB z2A;LH@!;QzHA0h}EKh{EPSB6!;j-Q0{X1=5*e4W@9}LW?A}! zzho>UHJK)0a*xb)j?7=lmw&x|@9%Ged68EyQt9PQDh&@o$Qv-lj^yB~@|bPMkq+6w z6XMmB=-qv>df(B>iJXnCR~*y$edWC{a@vuM#g(p8lWr=)hF{S6=jU|FR?YXXqHGEU z6;-2fA}Cq4W4NsYq$8MRf`a8fK-zuCslGAGePhyu=shFD!6IS$df0HG>DH${p?-V- zjPx2^hM(V^)v)KD9ijWpKgQp6J9{FMkEt1Wj|ZW{A~6E4f4<#*UCe4K1;gqh#(4?> z|9Sl*RhCg1YnL(~wVUv@x4QrKh_yTo`1vwytS|uo(O(}i@~y6&Jrvp49~d2KYS32p ziGDH&+#W=gG~E4Iz?pWojk`ux?zB z`%vuV%a;}|QCGQHv^>kTdJDRVV-vFVC{C@9S7vtHW63Bg53UZrP8ZRNjmk_Sa4}OK z09mOh$T{LRd{_kSQR`untTrd(CSIXyV^7`qd_bbEbuxemYOs9sdVJV(6LU9b~d+f8O70Nb|d!^b^bEbEZLWKD8=UPvcFYW` zLd;+Qqibi zvnS-}ywCPai#VA_5vivC`)N+O2Wct&7C4*dMU9Z>{TBfn?fkKCR#EjGj^FF3ufHds%h}1KQZXgKGYQq`{PRnvMt{8NTgm;75@C0IbrCR?D}Vh-T(S2oN92V5AJ^bD2eRdEAS<(xGVB^nvyrbTC@HB z$e9*A)vu))a^Ebxx|l{ov^%2(LpwV$`pesMC4Pn(Lh zgKCn#D2<%w<-=qY&S+ywbUN2upCV68e^e_@D@18TsLMnocKg0fSQdTRQMt4ksaZ9c zu*TIN;lyJH?^$)MExKMblkyICKbTTZ&e_P@c#@7kw^pWS=V$i1IN~Wa7+=Z@d(nBI z^X3K)HEc@?#=^7#vFSmo{B@Le>}9IG6`tl}T3dKCF$GP0ZzL!Q;q|pzc4NyEN1sW0 zYrK-kr*gRDXNgphA(tem2J z;p5vQ5uB+S3ry9Wa!^inSO>c~re_>*05_HFeXA2%PS<^vU+++G&*^bY=cR z<73lB{19uLv*LeTM)qdR^<4%}y_e1;^0`OBPXnIg1~_+{ZDm=*#(pK~Lc&Liyfc5r z&U}V|->GOH@7H8usxrT26Eh_2i-ifNwCs|{kFT%KrwoN1LWGD#-w&RNSR;>aUX%Zm z8v$hCRvpwB^6<|d{WShB|Hm}{?Vte&5x8dnu=n9_tO>xO{_D*Z?7!Xfe=*T6yuXw6 zf91$!HyupWoH-K6?x5;P@Npm?q?kx{1O7IFl;A%&C%}aNe;w?f?4616?|TaJ{_7P= zNjz$ZiNeCV!6XWvEXe(?--LM^{okKj%+dX1F@O{wCq0+tVKy8e=NDbge||0H>B^}B z0RTK8s}aLn!jQp?z)1rsL0bL9-JFq;;R159T9=JC9PX*Tt@n!@mvMO40ic}-yg}#K z;EHrW0YMT2lv^Af91IR+$hKp9{F$jyPm=J_iE@KNhXx0~jWA0(_|5Ph4=m>{?}=3> zAq7ZfCbwhNm6r=#E(b?OcNdqLm9|qAki_CL^p%q7YF>q97m`^&6q1z$0pJb;xcPgx z!TBt%#R)a!H)rAb0_J8BN0*O}kJ84;f^XT)qC4+X7zdo07mpQC&s&{cHhz28x-Xfc ztbAjpk0s@2krRUt(G^ybndJegnV0>ou6*FYO#d-(BW_$)BU|inM`l+Cg7*z+RR;4o%Hx53?=55bBW1|HC zg4>|v!{C9kv*Mb=q(Xl02~*~+j7{(U>~a#dOWm~Xd*lD{m2=cjoyu3zJSPMW%Y-gj z=Ipl&4CG_$<}+Dn|70fIDqsIS6l=LM%qP-_^hIr3xs+i6?^JYk6=(%*9FC*}1?^_m zZE&$6dPzxQ9+7uxch7nW8#(PTd#eY(`3C|QYKyZjbc&pLWyG9(yMFSg9vsrIq_%mz{vH8eE( z4P1YbExZUI9;&b$kv`uEkj%Wi^v!v2OJ=mRJj=Q9=)C@5R82X{K&@+muZR%xuPtcAiSygovC5Y>!cfKD86~9R2~2&U zE$!^1+J*6jaCR>5DmF=ZG>UC!o)4?9YQ0psd344KUEJXxbvqJ3Z6+ztcBXf?Pd+F+Y)2+)J@LSe^Lq~K+nTNnHt@xmdMte<@etTeFu;*l2ZN4Z7!-S30mA>02NgSj(2fC#@Nv1;B| zw?6D!L8FsETyHfGe$9EE@!xgGJ=W&)%pOCYtk$NA%=6QWNRy|$6Jy%_$2u3$U5*X+ zs@6jGj-k?X^!I*B@CwnA=>}J9{Nk zb{U}L>gws`wZX!O2`s0gW52nN9LVAI!}PM>q%JmE`M7%^IlljxVHAUMMha1lYPcF; zX=;5Cmej&hntqHrGifQl-BhZ0vg$x%xGn1Tr;U41!h5F$&v-0$xpKlF<88UwS7c?D zLaYeQ<)?ei^}ncBdyGlg>3Ds~62f;cPIqV#pA3m(8}@oQN5{v%=%$G;AbosqIqojW z>&`pGmc(Bks80 zqSvv1n;?9HV)6k~Detk<|}=m#E^)eClOzHM#DNt&*$UnKLmj zikK6p=b;n&dA3tj0ds4oo5jkZ_s$kXct-5Uj*RP(ALmKFIj>-LJtFos+BL*u0vJ5y zDptp&FJ>HQE0cNJ#QtdG#GNVkJWe=`zUUJ9qcDFwZT8wEanIcw$`kT?H{tfcRcR+f z;v>k`q4)RAU{iTn*#MGc5bP-d)U-jI-*8EWGwwkyLT|)=wqjyZ6*L(B@Ae-!FMes}T>5U8Bg@&-4lC3iFcnIlrt*| zu(y}$q^pJ&wIqq(nojO}O8UyZ(;PbE|DjNlmuj<)seudqcvZyHfPzzj2chJrtz>=| z`9^kx+~vHPXuAC1?)0N8E0KCvGX2R*OHZH8#0u}JS?=8h&o7Al)Tyu<^UL)S`c_y591RXNwAbkbRbk(?b zVekJk`gSI9;v#H2h6QPB0lb#&*wOA;Fu3t!$|c>GveL($5&hO%z&7bhSVYf<`*7== zuAzSIv8Pu{Rnpd0E??WOb<>fxQmACDoZMrzUf~sj1S0W(#ne4PD+Bauw9uTS-(~#? z``MCUzJr6ISkYYS403?2V2}Efck=BfAL3#}$Dym3-y!viM~uUzJI>Raow?imQw+Kd zjL<}u^+~ZWVz+%GxsWW2wHqTj%J?_ekhC<}7kYU=f8Mce_ya8McOAC2wkpX#s0k5| z@z~qG6(bZQT*Ix!CA^ZK6{SkdJGGozU#yUrlC!N)wwiZF=UwoKFw-Emknu}+aCkTG zg!T0_&-!UuuIHfO)RgiU;4y6E^5yNBAh%jjC;{YnK&7cG7TD)*+xwjH$&X$B=9;bA z{Y6TP6gQqKse(`UnnKQ5qX|LM3fn%%szg^OCb+%M$S#~uzrE&{qIt2!U*U$)%5AhF z6VTLuAzRh&P*$GNGgy4yQ;g#~@;nwt;<(=U2)w#=(x0jh4g0gTi~r`Ym4>U zYrI3FX6PGvpsMiNo%L;WJJZUh_X*m0h1ml2c>Vcr%rfc1eY%WB-eT6`&hgRk+CI|v zHpFvleEq9}p2QjbvcI6-gcUp;p9v(9>yI^0K8sWxdtMq=SVWxIlrYwWNRHR+5j-HI zzG8Uyc;vGJxA}$%W|>car5*%XI&HkKn^HUQSQBeau>SNe8~_O@7LzOll^`ox)=h&x z<}uUu#nA0-;u~zN=H}*-v>I3fFa9%+yDN4zGqpTR)NmQn0wqNaCr zOyhy_L0@On%bdFts#*w75kD6e{SEQO_vW%aB*EY2gF?c1ZW7t=b0pM89;qrwA8Kf; z>GluV`|xmbDu7VvnKll(?7W_SC<($KiAF|@2&3;=eIWzkz<~8(gx{V->?V{bHdF)l z-6@1mOF~Jn|4^@}m+k7wVTL^(P2#3vm2mG-HfBdKnD@&2c-BpASd4T5Nl&x<4(#ue zetX0tg6!ZIA@5UGGpG0$gL;&l7_S#SR0@vyD>Iw7mAU$~|R=@itoDNle3_-ii)vvW8_I4MK-XsLmYxrXNRzG~e$}zK9+1n0! z{5SO+q_nfbxjo+d?0Kl5V&dMPdOkM^kZ1DcbOQ>$iUnQrO!JVRZ^||pI4s@cB=*mb zlOkspg@}B2sr(+Zks7NDyORY*XPP27{$zVqhP= z{`vF1`9TdW{nehweX_Q#_gFpBzikq}C-;*H& z7i8b+xf-~J%{NF^)iaNctk^dfxy!ipx_!N_bFcSR5f1D25AJZDJ3`o-xLTK4C;aCB zZXIFBj5_RDqx~YfAGP>%Fz)Crx*8NTPj#$f5;TjJA234n)O3*q_Zs==uwu?Uc>t!X zl84I!OdifV3(rn>!~M8YdQbR+2E_J5s?qURbZ@@xQ+@$HuCzAI?{W`Xo*>rV`tRRs zy0%~bvL_^P-QT~L{+aFBol9k6%eLq`lXBMmxfCAk?~U)U*-flfa^U$ng%AK79oBx+ z=+ro|iXYE7KZkj&7H4I(=N(?F6_+0XY!dEkE|UZBzv1{eBiQ30Avt($o^($x9Qks# zh=?`q%DIsZ`N=obxi)aRw@+{$=z%V^C!i1n9RrVmAqZ9&%$x90YijQzUby7QDr;O) zYZU{Mxp(T@o8Akjs|W59V!SD-T1r3ssayb<@r}RFi~j<~dXCZYC3*Ymt%&JPlnk;9&5*Z9)0YNnXVZ#t$ z-57%XHNXQctd~qAEzDGZ=MPNH^H|NpUyi6UQnd5QjI zuLt5AFL#746aS|NK#n<<*N{>&ARvG=Flos!N8&w~>>aJ0U=KB6V`ChKc?W-7S255| zroQ&Hz<`hUAy_X%Shamk<4~mSD|3sZ-RTc`wzFQ95acLbkUC<-uu*8&k`m- zbP6SbRy@hyzP&;QD&6mTWM7}dm=w2~muZ!*&G2iNkreD1*$04yBybl8$I=)NoE!ok z{rUgH+gpc4xpr;i1A-tZAPR!C3P`s|D@X_e(%mB614s;@gf!9((%oGHN{4h0B{g*C zP~Sc7?cVO^ect`<=lA{I?=Oyn^+WFrY>m7iGN10_D>f#{ zUq8Id4~zV?kJ&7iOhmN9M4T>pp-GuJeTFWC6YX3E0u}4_?;o7@1-XT6AHkAg9Mp>kr}fp8c0ZmK5CmX?4G)ci{r93mCQKJ#ek;mbZ^ zZM%|?)(g#Ovq!5>zuh)Re|p*;TE2s?tK@p|hzRv&(+Lpt1H0%^C@b2#-K4`Pw4yAB z22z$_Jl`AlYHk!0=x2a$TR1MQhNi=B7S${o1b4bydVxOPp+R|aqbM3pCjsxAETN#V9skS3|4)q(IKs|jF&1vO-P`PT2)T8}V57>&KvgN4z{(=+EfU<35tqH>zLpxs2dFhK1l`*bD<3Fy+-TuEP*XhSGM#+qmdfzXTb7w=+~o~_m05OPr3Ve zYWP1sw!<6D2u>_4L!abiv5;}I&pAaLCiW2RW3eV%Eh#&?r8Ns$o{^@LX9e0>@mlp> zqG5%D;K^g_4|PUsPr9c9ok!r=lnrQI+C7wg(*;6ZEMqKCHT3ZEM?~i+c9j} zL+|35QKQ)r4Al3&9JYkIhqG4waL;E~%k9UcVeTkTdd8}@-?WXRkDJ!*wdFmXklg8N;5%8hZws&;TW(y$<`2;)y6mQPBtxOjxtd67OK1$V3*&8$h zE2Ps14JTf>t!txg#F$DuLg0QeMbrynW}m8Mb|`e^=|o&R^L~WoGT-DaYzxw zhxywT<6+|-3wUYT{b6l&Q?S8o#utmR*YL9BlrmW@(X3^+sNjp8p<(AMAvw6uSfVyq z)ng%Ipt?QzofmVHa<$Il#P(5u227JB@Ssxds5O8livni~HRxFj{sg+}sbk#k`P`xF zXIGx6^Qy$d+4FZvBIQnWRfh46Xi~FJHe9}ql>yUTjW&+8`?Qvvf$z8zescT)LN0Ih z!uoEf9Uu0_yXIf`R!T;|8gSj%i5$hvJ{~b!8O$xhPjvMYKXp^31#Xa9!p6YNh2`qhwZ6ohNhB9{VfIofi)qQ3Ib*`ZImFfuH)?pgzQE zZFEmDwuyA2;#=Tpu6f(0apPoECdwC9VT zKS@QnSD>9Jyuc8WiC(_Corw6JEO#7i$mv?sXJYYH<5^x;ghpC-Zhja|?qepZ61p7v zw6H;}yf)#f$pp*r-m><`3=9=r-T4AMG*`pz#ny+-r>U<46DPR)f12ob`t8-^I@;gt zA{46XD67j<*F(~5hBqrGRna&5eD&_KoX7M<_D&3AtLn|8>&V4#`&WnR;aUiS zcTFg9ZFu`4NJJ9%S2*E+!I9R9}T*tTig!1p5s12}xvB`#a&l}~(^4woo2%WgBO*g8! z4k+m?JU4aQ(ODVpnN9HwzhqhCo8Bnj0cOr`FGE4tVT3eGM#qO>aJ_u@u6A2PGNKf? zTPKeqYs#Ll@)(QF9$+x zuxNaqrCk3gDdM>e6?%-$BIS>q1Evswky?;jYaV|t2_ZcUd6$+o6?`+KzvgheKWD_M zf3E4X0+v5IT@x~E;Cub25v~TZAIN8c^a4Os|B5w`=>-6fUZ-^XE&2Nr?ML?H1vcO^ ze!An^z-vGt0QCL^aQuIK8Pd0Zwj(}Fj1z~@F3VZLNY_jtADq>f`@J*UbMo|_*pCXm zGQ$1#+3uEI&i2OJECOJl*QCFGb!Q_e1h`?yi4$x>9dt9X1nt;~*S$O;?pRR5^J3lj zjkOg0bwut8SgU3T2YC1~&d*s3qi-rIntW0S@|GrIXcG2dDI$E%$(U-QMBRRSNO$%=Z^<$Fz;)!~gnvBF*wlE=9Wqelx_1LH(wHoDHFj@#P`vSJ$mLvj zU%&fVmC;Hc%~izZUM+m}j$z->?DQo*#9>nE;1swH>5$`|Gxko${n~;>_q4FEFvSRE zPM*jbc~L{^49?}{rs!hy@hIKYsKhF{%}k7y#rJB$t{BcLgG<;_tE%6?a>OXeX;O3?Lb4QtNA*=@jP>UFt?dy&TK_ZuFhK!7js+%|l?P z{(#1mov7#TmzxU*OBD68I&QiQT6}ic7u|st2Ys`%!dEAA4v3y>u$DfS-l^w0&hyt0 zd*LoCvkXVCC#E8KFpEVM&?BQF)Yd{7@a9-=h1RpbmlC|$wNrFu={dYhcBahm;teHrLmCvEK@6+zN)!Yks!^8;W|+Yj;jQmE zbgHTx=#$e~pC%*lCheE@s>vQ2u)w5_zrHnOC(=@M?sA7+&ZXmx^-}v%rzKsk7V_TqNrQi zgN)}TQ|%2Z2jvlYeRKGm!qFUd{gKE>p0IhZjp30j_Na|CdM%+NjZ#`dJxuHEU0V4) zml`Q2US+#`iDqgm<(y3+bVaqisBvO-Nss35 ze;NyS-pn3fGBk`rTaRQMnMc@8ItAl`I#)r$0~ui zuvuvDDLBUngG`mr??`d_RRN#ny?K|)ORBY}CtAD}?)SN@t}=%Pz4oh>jZxR|wFsax z!|l@tPrGd|bB?HBxtsiL7$CG~1Zsr%RVyW&aViLQyKjbH5FMWsqfv)9(N80MC% zKVvQ`#9=L*PMVeINRX=jX*?fkc}Q)KOHf?(${<<=6>LVqVKM>Dwmt1o6pJEmAkgGko|qLf3arN;_L<$}CGj?3JC{ zBT~&YXx}PLggQ0C%Rt>You!lBdt_vM6=!BL#y6(0AElu%@1k!-Z13P8KQyY57^OXq z9|u)v`aof|0Jk~hRv%txv@;yHCrd{R7u{<<0eR>?p8rm$6op#`-jTG)yc@UYc^H}p z3P21)nM#QFce`wE6#Fx2Y*`L-V}hqnU2g(Xnj`BjrzJZk+gAqOC?O9s?JE~K86pRVlXy}7H?Z-)m)hI}i1StEnVv(wM67G?+$ z@e~Q4`+9g^>b%=SyEyCPTlI-{S!wfbIQUlOyjpnA5l+*T`}zJGrPfRQ2URT*>U$g7 zWTTI$X;DU1!ULjN(W=W#e5Bm?;+FfNBRc7c-Hl>FBvyFyF0RLlrdM;$R82t|mNx1L zT>&V8;d$(=`Pge_hNe-P;|1UHSrQszq~!?5XD5lyCthk7d4kT!5VvuC#HWJ+Xctyqyb|K%;liHm6tiHt!N?R$q}k1-Hxkytq8wx!x~yx7z5oE?v+0>CUi!X^K`Gu;AwJ z0F|;v-CgA=Q3>_7!jLPQ{Sc9;|eod9vYr zzuaO#N%1O)3CdomZT)GDdj_z?-|JVu*V}|fDPoMp(;!GlD)I6T9b7J)=h(oZQHN@P z2|5XbN~_K|m`1NAt##RbwTgTK7bJbT*biHUNa>aC3$%=n{QcjgsQ zC_MAPP6iGKWY$r04_3XYA?#7be6HyOsxrUC;@YlmH(B-6^a~28ZpYC5s{2yBl3*l% zF%1_qkCZ3={v!UQ$2TdPw7qPx558yR=&ehG-wg$U-!0r_$izaKso#-OJf3-zJIg7W zk0771_M~of96B{%l>(4l>$TrO?K63FqPyIBn5-P&CH_PqXjGiTxAZurvHqjTDmkf5 z_WLXCakl`~%{-EL{mH&bsQ#ua;`nJh@N|*98}Q!$6jMJ7Lq8Fo<`}jw{?NMx@#@`( zeMwg5_AE>A-6t9I#^_*+n)t~l(=Wxxt}rUBTzqST3vJZj`~60*0&1P#m`0CB*gK~e zOT&)mhP>|9IEk>Ur}h+(_v*Np5!YEPK8Jo`%BdbK^AEN}Bn@G`LT;7!y@tb%rsRi- zG2#stcG+2nH`YvIMefCsXBGNP469wSCJJzR_Hy-PK+ED2m65;822g|k2n;>}h_JR^ zy=4j8YTz^z%hahc5NFfL$GNv4_51rE<>@od@hYF-dKXXRPZM@HT5iA{)V<;zBcZen18Y)~B}+NDJ{)}K##NYgI}HQzkc}+mkn;G{^=L(B zM$u~>E=7=k&9MtsYv0oOhKmge?sZzp&fFV5NeExiTy$b8qPcqO1_{xd`qNF6f|6lp zm|9zE!WZ{u(gPCrbFvl)cn^9Thm!1%2ecV1A>Sj#i7Z5op`A&!h(UN7kwTi`7z z!UeT`q^F{xTK&9co7EGRxfaovQ_!LF}pU?$M%P)P)%W7mAl%GA~S zcGuW3S=dxT*mx|md%@w0J!9JP>EgZZ1(`dK#9NcxEA8Gcj5!uAi2V#~k%zD+>0?f# z8I>0QaU69c%aHdSp{&}aE3vwncrlm!6Hkm$xmExDgH9y@aC4L(B2WCuQ>F&im(TAg zMMS+eMUlm{K@gg#_2#**iV7A`SU#jr-1BE|W*YT*;$uTplKOak7%M~CMAUmQ8FDid ziWLbMzT=ZSbf*nd`-Hb}9bQi(I?JmNu;EIxTD;l9QJ&$66HKzantoqgRy#B+Px+!d!)}I95iOO|$-j#8jb#8e1+H;Y$ zB68wU&qDQ!nn~s9sw##8C`a4f_AcRMiz(O7eFHB(kw$9nUD(=@aRXw$-?)S@#wM~l zqu1LLl52t&5A4aVi0vycVsPp&2oQ6LFypaY4R6p@=b$B`Li7UMJSydcr(39kCXbmF zu4DMJAiua$N^0n9coaolL!3&Ox|VYL5plb>BMEs~3uo00U;|7|9~n!!o$oCL`O6nw8H9d7|!Y;CTWk*2ZnwmYu zLos1_CX;wih2&8B?l!bLFYj8QSrwccpB;|R{L@SUp~Vm%Me3FUOaJMDP==j2!^*26 z&B?~a`;)aByptv8yi`qB7NQgvZ7>z%uF74^Vg;J?CI}zcbV=oQLM}T)@{;HV!zKqp z<054mH6 z3LQZ8ClckKO6}Uyi^9>S>x~dra4QzHCD4^io~)vNVj!r^!;GR_V%R+$gt-1bm@hfx zIlx|%1GKkmp=hv4KI@!Kx?*lf2`_Z)$#&eLPI8@q&pMI7nGD=-Khj>aPI{U2>o1<( z)wcZ__;S1qTzE*gW*jGywMLPFd(S--5Kt*iR=x?to72&8_I5LyAgDFTM`hGL=VRF! zvG`aXBl)ESA>mgP*=-?@pMG4l#Q<|#s9w99V;j``hCHBwKHpaw1sQxj`DWe8qN8x8 z>>ldCe0878vi`a6_U^Po&V}c?H;CJ^rq#qmtZ`E<;cB?E&((EsOunD@%8bT)^;UQw z+xgjEQv8giegiNo5fPszs^5HjEJR*Pr>i#bhFh0{2fNst={2K0dDVRlAl&Z6a}g9O zbjlvLjf#@8ck}P3gFl71MIv7BBC*f%8ZQk4d$7*BLb;95leUH7!V295Qv*>TQTKy9 zL)w^@%I$%PD5v3p6SPGBb4)U!r=Ca9Q*^|zmTW(K3nGcRBTlH3s-s~Y3f*-J!P6yv z`-){tNpJXwOAha=!Ht}|pcxhh1_iGsadP%bfi}I^T{W%<3-bx3_R@ij{MP_s(MRgk zPu)nnMxGhx2z|yEr7d-9od$c?0wx$6Y?=57ty*tiF)QQ7*{(!D)=j5|>=15)qPaNg zp*)$1ClYy0N`>`$VQfC`I`7fOzd(;7*6(?sHf!)pGbFp^rQGcHrx)fqNV#FvR?m)b zSipD0Z3}DO-?3bvH8M@K>#4{EiBUTs!;P-W=WjU%5Iymr__mQYf4pB{N(qzW(5g@S z>SBr-c%un7+hX=Yv22Ild80FaRbhxc&0QNN+lXirMMSF9twtvaN#R!pTQ9z9Q!X~8%}}TNKy;k?*ZA8@3?(AgXPNW!4{D%j-4&?DpVCnu-9!=8 zax9W^J9VCHn5UntJTc`hbqK?o9sM@uUtLn`9c&&qU(Wd%Di8*CG98{MOx6+x#OcQ_!2Pn<7BQ8}j97xJy7d``>b#Z!j0CM|R^4Ki;h0vr%PHIhmYSD+DWKtM zsM#<_Ibu~mU=n+yC?*c=b$&2bS$S(oevdZOl0;F=+ajp|K|gfr20cI!@38c-(? zzSg~ei)bhYNEN!Kq2Fa$g?TMmWI4oco5LBockPu%j$%XE59)^IKL5Cm3nW7zAMHCgn`B@Wm@o?P4HydoKAMe<+ZiOacbLlt;ddA5DJFIJAtn)-wU2|a+x>y;aJs%;#ei< zw<=OK#ou%DTbqf0br_%Nt2En8Vp+U+Y{~0x&Tp0gI0g{N8<`77^5wvhC%Vh>ccDe! zaojCrF~T!Fq{#m#?f!`INBMvUQjGCOPW{KLk*fRO95rPVr5}K8fxrY%v;3+kxDI?l zD*7+63SfYMfBhOOSTBS=EMJ~>T-~IWG9KxQ1ZNla=Ahh3{J&%4A1Qg@YLseJICG6~ ztB1g4b<#v`1(gF81VH=UYf36ALv>L^-KrK#olmXjJch14e)IRS!F}SXF#q>ZdR{G+ zt#V{$!vES&Gm?%4^!N!~Cgh#Ae~!s|#XmLt3g}Osnvz0A%Mc#Ppu(&1`O^(#Y_PL5 z^1#(UddZ`|n;6U(c3Wml zT;XRyi&+?-uoJch)F39^%ZJ2Y>MxF9^I5U<^bB+<_|#pw3Arzt_n9;NX^g5cF*Q6a zZqS%cIFXE4I(x{F$56L8es-kRf)+;vkG#5f2#oWrL>GS!5JS57Bw?dm*ZmQ~=AfSU z`V)XZL%)R0+2xG8pI|a+RKCJw)gdKi*&s@t&SD-4g)(sR@=8iYG1@q@rue;4ilzQy zsBEGbsPu-a>Gbne1anjKaP=n5WaD=i@Od+_u~BF=Yj4JYgM`*jAhL}|Xh7zRYnBR++P5)^LxtcRP?EH^$4$!R5Z*#w1FSTHGN zPTE8$@P7LdB#Kl@I^6-QMI<&p&#ufal#R-y6}-W>O=>(J^KFXsDl0qv^o41&+G{yF8| zPad9$MNhULPuF^Uf{MqI>lNdb?wQ-2$SxI^JLHhPXo~}MoKt#>KSv4KsWd0~Y(-_A z>FQ0%L&&&DoOD0CpiWc5LK1Vc*4Al?xjNWzm_PY^9x`R}VKIAr|Jd5)RwEP%j9;N9 zNC7|Whu}vd7sPQUbpDA@P57*fp{So^G<1|wg>TvO(QIBI=_S}eJU7_O5j-^#WN%ko0L!fSuu3o_-Q=)KnLS80m z<1zU*H|D@BCJ?2O>Oq83{Y~OU=d{(w^6?+M#X=Qd{uUhQ#e$1!YtKg4Ircr5fbbv| zpD@3G*?JAypk;EHI3PpHfDKu$J{3<+^8+Zwn#HrFWnRm2UGzWfnd;Iv?t264R?HbH zaF$9p=9IB}P*H5c2GM|7bz$sT%^1W@*6vbn#``9#cHL<-R8gcbRMP-`bunt~(_W%d zt1*jFx73C5aAD?jrDf*|g>Jh9+CB!8(L5lD|DO=)FP5E@`iv~CgzQ&orEYa(312N~oj-9eT~gtn)8{lNY;t{h z->0yL+nHhUcO4ooVmJ_7DO-FCKW5{N=xyAp>{8d53{MsRZ^Fj-nH#`#yd^{-Jj{V; z=yNPDL@wa#5@=Mu;C_x!*=IT-0#f9g-y`U-&nVQb5nnF43- z3e@wm6{bkMI;l=G<(@18Q%2{`ShV+YpU0V zJqM;^g0q>rkxUwBr@F>6*t?{Y))vH#xhnv5p|5baZor#sW2$-z9D*d%OtyNuf(!CypYJcDQyFS_aY>M{Sjd+vJsqej+8%>bihU z+S0TRHVEfnCfWuM!Bui_36NmMqOj1Q^y}eMR`ul6ptBM-@+^k}bP^R32I1nLWaKL9 zRDVCEe)lL-d4n6v#X_LQ$|Nnr3QUSTg~v=IXKBL&Zw@F`viY(xQT7ois$DG~?WDPz zIl|MZ#Md~&Z^UhIv#LCO0Abe|HW=L6RlOFy&OcN=gDC+Rf}PlhxV4MNFQ%In_j~Ud zw-1`-=uN+&f?B|6hXxA5y+GXNNo(btDMC?QB!q?S%uVrk_t;AJrmCdY4YJRWsYlmc zLfI%qE&f-A^o$I-m`nX1Y3hmhyH;R9Qd0s%vcWY|vc1E+@E9{Clt9Ui`Zl@lNDI%N zx2cD*+$c|i@`4Dce#X4sludntXN)6bV?!w-A6MqScq#(bX+Y(zROi;wCd{Neim6<$ z`Fd#G+i&-?DuS7BZ9IwsS9{49PO62L-q3jc#wm9^W}B92H0j*j*e7S)$fOqym@;1#0wyk`VMrOP93dteI}$DB(J%v; zxi=3Xc}4Y`!^}ehBav{gS$d0J$kVWnl&Yb#%40(ca{Ue9V5@V9lW`kgY1?Lw?a~(u zUOoOTS<-zQHC~W5)=HHK0j`i+FV|dRJG#PWWN4|@-p561l7Ev2VzU-)NTL)1W#9m$ z@-K~xyT5A`I$EG14j_?~dpfRck?<>?xpY(%WgzZ^9Yflw8-rj_YP5IjU;7L(t-F_t zUhfCHBt*SL8^Z>jwuS|pGvumuic^4EFn(H3faGlTCqQCE_4;=usuPfl!?D#76`hP| zZD+qE_e&?LI>rV-(S1`%QL$e^R)9Kn$D=>{KV$n}YRk7Cq5=itjep=1Esy6m_&y*G z5tZJd(*?5}ld)I1YWBA*beu>khMCjeUkYoK0iYTL>R|b~>yiBaSA1P0T#Wgj@wP`X zQO5W8DEG-oAKfQ^aG$ucOYB7r+4Jw3mPQp66$lj2UH)HR3~V1SuX*19pgn<{{L2^5 z6_*OqqN;)eRUh!P>tB$j$mMx7M@{N}w=_89HoZav-Ti}r`aSL7^0O1)WEemXzJ|$__;g)yKX455 zs~zu-7m2!g4TSY`^8mHf5)S|ou-uxEK!^`>L3(HkN7S64EIcGiVSfh0q}ZJ-=%(e% z)@M2diG>V~lPGw%qeQTZ7BeQEy9oL1l>6Kjx`%3xE=vM>J^pjmkaFlhK>bGadh>84 z+<~{;fJSRgU99;UNkQ$gNwL+f#BrAp<7>|%4m2Osf=yz4SZ?+2EIq$p!~WvoH4#o; z&Q}jTm1_t*m2dhI+30f;c*@-LBP!YBsowl_!qc*eA+{m0q>gGvoKH4-+3$sAZo?b7iy6T=pYHfibzh2NzU6#BV;lu zsADRlyzvf6Y$^u|FC8+)J_(*L>#f09bnq#&(rWo5AGTXZ*Q^f?%V*?469z?|+V`@p zk6+}S>ZSAz@Zge-C??%cwzEwL;4fMlS)A=D+GYzR`NP8h*z0(60krVUMaR$X=t02; zau=EF#lG?#I_^xA#kB(_wBCp!yhrUHyr-HK6pD-AVwKm) zQdQ7Vm9GO$9qQ(IqvZBo_X3V>vTlT>>Gui2c*=Iy`NnM0evNG<0BGQH?iX>cz2y|( zgYiFsm)m|%$ncfCN}Oc9x)B_k#{znm z^#78{{(a30N7d*~H<8T$-xAK8DL3-gkBsV=mx_hoWiT4$HDj@YLO=U{)KF9t>>2#R z&>Aam+=V+TUWm%Lrf^o-^0ucPnK!1dG_R?Xo2Bfxf$y`eR6T<=)4?PADmvJL2(I%7 zM@SyBDYqX_E^CFKuiI6%Ta%?3&93s>Kud$osyY)yPX1+<`QqPJFIJ_Q;B0DKh)&j= zn+;d*UZ;Y#JIZDp;TGOQovL0U1dxHWvQj7kY^(2@N+i$Vx(WtBwA_~$e!CFHm3IEF zBh$lBG<@0vvdGv(Soy4E*lEht{PrVpYLSi8^Xlak{cbgN=8;o6;jDy(gHxq7kya!a zh|gP($?tgT22@73U5pcjDAbL9_zOt-eL6YB$-$l5ezhNSmJ?a}gEPkDn`=9TU1627 znQ0odH&86c`A2{q5Iq8@#com70QNz@{r@+%^@kA#O#5oB3!n<9+;;mr67+i+uu|#6 z>ecDo8f1WB>(|>IR`&3ISNdsXIl6>Cuemf;;uSNb8m;4zfch-`BpZ>OUHx7w>9CC_ zW}`}ja=U?yf=cwo@bzgY_B|;SR0jXc3d#=4ICfff z7uFdc@AVB;imJ$6xKy5WRXcxqo;&+44bV$5m9F-I%;xD^o*eUP-y&S16S)rZdX9La z=LE~q%5=$P=)2LVG?{Q_{U}t#D(jfZyR-Kg&!C7j8kEO_s7A!_YHm{-Ig@pl|7Ymu z_qnq^gKh&`%m!BF1+vmQsR4+`iE{$e8JmzHe2;Xt`v!r=Y#T394E~Kc0a>FX@wn<4 z1yFBYIrHKp_q4=EZkZDOT)eq&*o`mjx1}=?(h4oP+uv_-tM0jQCkpu}sp1jRlqh<# zMT!&0tpwYurslOg2HgFh>P{r-2N1qJ{gM0N%M*3eNv?2HpfVMvG9$)R(QW*h!t4np z?{&u5as$N{-BBVxrt6HIWJE99BSWcb+0DJn`kZ?XZs9!D09r2n#fk!IhG+Ohj67L6gNSSwSmWeh?M^gU+Jsh(U&A3 zf`L1nIp6gD0{q!QXmhqPMDX0Y$QN>EYP>xopr}w5k3%82QI7V1%TBh?H8D0sMn>km zLt@Mz?wQYq-7}d$*>HcZ()Memkvc`K3-XbT3F^w{HlN&4$TKd7_KjBtCGQjS8r;|d zrrVf@Ya8$)@)mqyuGGJ2v6eK@-?ja>PlNqKnEk;dYk{&j@mcfG^ zx8l-AmQm+EDpqy1NOVyo9y~w}h~<5s+u*ff730ly=ZWI|MZl2ur;I{oqd~kJ*$T!V z{UqzdLtzF?LU`)4eb=OlU@ynnFNKN`)ewdq(g@fbz&d>Dsk}4U&&0 zeOrm;wo6!98S%NL_)@7HY2~SYW;yxk5iOZAfZEl0#IWfi`yzglOHMQ=OhH{Q(xU{g z5(LA4HC(#?BzO7%l*rF2<-7fCTe8+wkB%%amU#`yI_snS418x%6QnOeP7L#}LZU(8!ErG(AGgsB@{eBTOAzmnyjeGzhAAM17?`Ec53b9?6EeKpr4 zMfe5+(^{tb%p~`*J$B)zRebt9+auz`&bp*&>_nRg8EgIXV2v|UJhkS-;vXv{(hI<8e&*bW&$U+6BUYlV`Pf9+H6Ih z3BA~(MzQ71?N;Eiz3CWR$1KgHRJ+zqC*Y+3CoKz}Zj7TKM35%#_sdByg03?Wt140WXTfHVl6;Oox>j2nYWm*rM3G%oK+f zDuFzN{=#=E2xcw+4c|$g6!*cKOX2f01S?1SMv9gSa|jH5tRyfF9@ zy|F<$v%e~5fy~7M^%rdJ^MuQcDlhU0TkMfhH;I6IESa*dZ&5D3ySqnT9?!r{+BevdN)`N!sdXuSAAYXN-CO}0JR>xijTMuatgiN>C;KQ zTHw|Jj<@EE#!Dku&H)3(;MIOBF9KG?IkbJ=OpciIw3zoBp$LCw9cyc53NZH7^2(8} z%*PePjoLt-l$1TrM3?mYp-_qa7Cl9KNOMSq8dHJc~F(aGvz3WNF;cB zc%)0lFssVE{O@T{TK}%Z{m{+I?O`XI3c1-AyIXbjwY*K$4lZsFsqC1)|5RDx9b&Ow zIXxuQg(k*c&9Jx^R;4f6(4V$as0no!6uVt6cPsAkjVSI7R4ALLhY4viD|_g;Y;tAY zV*%^wmP&bzJ1kN)@a8wyn1o7T`=Bd(?92Rf0`$7A^N>j6a{jtFWWNP0fOUSf>DJ@O zv11vl6@7@DiM#*L)DAaMj>2@r2GEiKAM_33>9iosFsMJ1+ZWg zf%dt@&eE{2g-bt}I@LEE!w-06#Cpi|#mHkHDVzRBMCUCury-Fk3(8s6UFh<=jB%*L zd7+Zn^w?SgxAowH+LuJ$r5URY&}*-Bubwt)GqKa%Ptqve{xo$cXB}!DOy=+PbM~u8 z#*u1ypYi=un{OhmQDxD7U%Hn+X* z4&;u8O$HAxe~UL>XuDNzIemt7r%Fl6Y_v9r1nDGo-b2nW z5&3&dEj~@WDi_?RY09*zD0%QlQAr?yuF#3bXKu?W<8$FW29?78$%+w9$1P3g!x5F$ zsTw;O>DRzsMwRq3tLS}%p9$qUPfp@(BQR3Zh`9F{U=6-qNCJ>2(HYRl|+5kn^@&;w_=b#2J?RxjxQ>B zcosYDzjZ#EFlsI6rzayLE4PEoOhO@iK;kw)Nmu*O!t^Wlkv>vVA;&jO-N;n8l{(!m zBnu}PMc@UL0KiwG3RzLxDKt?fT}YR}b^*^BtNx{*Q*F4SW_ zOa$s60h0C4B>jI(0Rj)V0`-`GQfjO~{0Y+0X8K^P`T~{&TkQ{y1?QL%-@-L7Uz^GL z0_6h#SC#J%lJK8o;(v;nfxj;w-9-`1z}{iyvaItvvN|CryR!EALk&C(J(H=EQwDOk zW!tTqqc57>C~nQiM9%PW6bsfIS?9vFcf62m?W|-*YT6pmmn$ zQuXZ&KeL!#`tNnLjUQoVe=R=yF`NGxl-r2Zi9TOOMmH(Vsag5+h8>h+B+}xclXn?8 z{nI5s9DHH$m&EB#cNrO(uF_79rC|J+Q_vGptZQNaUg3CiQ!;Nm&|zLxZH1%#n-GFj z8mZHxo@L?wH$>roAU(aNe^}KcFGG<)pzq`YR*xc+D|jq55{YHDvKrz>TeXFRhk=y)NCeI2_!M9z+FgV!YOQh{p8MWDb5^IO~m(&0tZ7>?T8GY`+`7H&K*C@dk?H+WWdxo;* z_+%?*`0~r4um?%i6rjzcY#A~_AAhZ*MAJI*s74z@e3XeH%f+Li|Qm znRDXSxOgwBxgPdisl@hzHp1t&ieS29E3@v{yHdwk84ti+JTl2T8G?$)ykn z*g})>zt%$Oy(hE!YZF!=VLV^Omz0u5ZpF z5rH=PD4fE3+$kt6%8W-?cL@Gy{}#4La^Vxx#Hc*}wo9E4hTcSDW|!ZQU2Ff4*!``B z5EVot7zKW#A@@yE5CNhT{L9h%k7|wf1PuVkraS-V*vt-M1~?o74Gq1ckAnh(eTm4( zDw?wrDMtk0c6C&8J(^o4K*=P*aQ!;fUy_n;`4hmK9$WtTEv-QX;omQeR)ORzmsku@m;#T7<2vVh4OU~@+IK$XQ6)td@npGv?f2qe3rXh z?yPTFK>0eg#VG(?2|V1tD^R)fREe?jasU@s&T$OgW|K`D$7~^=gYRp16QT*hi`eV>wfhlp#*`*e{$L_R842WIQ@-{ zM>r7kF9zWCFIg+eGgD#|?#qmj4Gi(sby=3QIG=zv2j6q?H0tC9KOeRixeZ)y4TojD zwLLf*Fmc8kZu%ukx;DG1=Y+-qfF7P&)#vPs4?HQuU(THd4#Y+Ca4 z-n6ouzb)L_qyok0K666>Y5)92pfe6e2=0Io6v22g65E*JsVJhsl8_0Au0@kelI(;O zY@!O?-U?itU6`%(-^fQ3zx|C$Je<&!ETj+LwI%fXa-m$@{wT4{w?m*K%$uglbKCT) zMe@e4@HwULdiU?^5tD!3+7iz`?y3Wa$|xM4Mz5X^*qY9qQQkT#N<)^R5v}B<4%sg$ zyMP|F)PhgfDp>StfJFPiPx&ie1*nMcoxh~1doomXOkDt$EK*k&u(Ex88?r`wZzW}* zXehe!ild=4duE(Gbk?{c-A>a+P$KZP8QhmE=_33%#Gfc5YQK`GN?i!Xd~;~3YD435 zoe~Nm&1aZL9V16Gp)T_sZ0*quhusYY&Z)W>V{4LV)td@`1(@k6-P=F=KG0%#_!cuO z+T7Z=K%B(zf+(;5Jb`=2hCL_kK})9m#VZ!{PKe|c+0hwMrFMs*zI8uAn?Pen3zyHV zhZBQpqO*_bQo`tzeD>tyN;H@Pc*9sRwpp>wE>pdmLv@IA(e_DIJ=DC^Jm3;2Thi{= zW30?Z50zE4kI4<9cdl^vuWqRU#kF+z*PNQe0**~qy6O^MF!5QXO-keTcU~*=I>9+8 zOz*xIHCPh2no92Rc(vvQcy*BVmd^dp-@83IZ4G_JuKO5+jbp^F7uYgfFCfBWn{P3u zzn(~h&!)d*XAPs;weyAH2KoXglkDdKa>cfOa^uolw($jZa!y8=71zMFfP??#xL$`C(0)O`>scAz9J7?iy?C^z3RW3&lCOwwaucBP z56a$?6%zFnh>W^fRL;0SmS_EIQJjdcl{*|&DncjaXxh>LNDXM(gYUNA>Nn_5ll4G9 zjy`+1ws()Wetoi7YZa{aO1Mfs$PORc~Xp8CnqJ$MCkzA zv0j#iKK}kED=G{K{&T@3NXu<8E_GJ}SR~oHz9sg7W7q zA3Or%>x?Z)iJt+g- zR)afpb(~XGVPfKlY_}o%a;xdYVQsr)yxE!XKDpx(EZ*96oGc6qFUs7(i5CPJaxbk3 zB5T@uIfSzbRx6GeY@f`1f@3zt$o(Z;*yG{)n{eTHXZS8-ek|(dmcoCptL<~>H9tr6 z+E4u+vkMJV4&blqi=WL?&4laVrEkE=OZ`kci^^Q^FtC;hb0 zNfBHDj#s$nZz8swO(O&kgDy8v&0j8eD@d*wggh~f2)LMzqGVuDX9;kwv1*N=9}sNt zH#cUnDswoDoLDANkc?z|L(%(=xXQGhn8xIr4kz|*Bpah!E`9>O?z)jBs(E(-ebdqP zv2@}LD&Xq$+lP1T$>OCsO9KmUDh@5pEJa~D{%xtAGn-zwWh}FI?NcAI4%<#!9d$jj zrFTH5K(DW1*?*00t|Oa%6g{TriT%2|rBTFv!}JqrW+i*PmlJ99V-;BL*^xuWh+|s} zGPo%VipM?RiNg#_3zLHCSpHhNsETSn2_LU7ioQH4s(jsPkenLk*(gS>cr8+k8 z<(OH#t-gn|lqJ_3EBhYYSABKSz_6+h7ychr5Ub4|Su3SPQmb}o#r}4i+>)Ak&8fJj zH2xdimI}&m8{dC5R5E05$I_chFrXi5E0CD|y1`|MtfrJ{C2wwsv-orw@fc=rTVF~) zM9SnEtR^6vFr)Yd-ZUfICqmIqcb$?}G1QRCCV*Tj%_)P0V@#7UKjbFQh?nX%pYN3O zvh^(8s-tqu2+Y$y-_@WdCY&CSL{B;N!N_H!@+_Lanvo7^ilQe!M#gBBFsK5&bwmtu zr?qZ-Z*2{C+gFY+&wM;k%|#{kBW*2OmA#UhEqMBBf)Gn| z%1&#Qri7{$EZWodlfIgCRqF1&g6@JmOsy}0vYur=c~r*5G3JFnJSmjr*t zFrX47NDjh~1j#w40d6&lAMWnAd+&4i+h5y%c&MrFsyeQ)o-q#ExM_smzw-Ti( zN1;$=MzC->&;3h&-c;mNvSWQZ>w<80;R^vl!DQp9bOky*_3tm(<5HLePO>a{V2uOW z1hXVtgN0r_lx^qH*m@ygs%7joq-uVfr)}r~BB94$R)gnOOsy+xXRS4teZDnKIsanD zR_LuUnFclfBa>L)Vb}#c(gn-sZ1rAu1Rloo-6E9V0H`LnQBtlZ1HoTkY&;w(!d0&d z=5*klq`?)KbrHeaCV$|}H&VLzo}51+`y;9*Ksi~YdU9PGQ)(LM?mD|lneiuEOVkD2 zuZnI4W?yXrW3+0)X^KuerI#_kCpcEODSlMNg=xsHNV^*8lVU%Ox8XUly`ra#9=jwFn zsLiZB6^={)$w8@AZfqVbw-=9ekc8de#uK+bi;9{_piAJ1w39Zl(%2`oFp5e4B1R=2 z&XB9jc3YkLHi=!mfh^@+_IC7bl zwRzm7L1e4i3idhRug+XVALjGMhCe>MPO;neX&JF=%(ER`F5vIB(G?ZDyX=f?Ms63z zFC)s=$hSx7uvd=23nXr&a2~aP&lp3MniXbVmEPEs-ZT(;78w?74g$>MiKn*X*ZQIr zxeA&`x^^(-#W2zA@w}qZV&}*BS!8}#pNQ8m8}!jP+Uy%zZEMEs*roRFO&ftez7U0W zVY#bwE|2Uv%7Upo<;jOI1+JIQ^a;q|TYef%Rxmv^DVzD2_{vOY|Las%b1g@E}!?CqhA5+D_^A%XS%=MIa?XBZkBOea68_h(fm3VC`3d<)>jJFmg%G=d6GYVMCzNoa!8$CmY?(c%$Y2%w0 zr*GKnYKlmeor_H7uBm$vB1Ip>Z?tuiBka7IJM(?B{02MPRwQB3*aMRBP}f!AYB;@G zYau~BMq%bs->tij3hU{uqrF~?&rUlDmLXZ??9pD7&X8XF(o)k=)Beqgo4;*JJz-_z zI>TOitcD-)*Jb`%mroy?6H|RP5=Yqlvv)&u?=V!agu5Sza(gbsLG?u~R8p;4NjNP# z9!7VMprGJQ+F}hwG#M|K!a;*{Eb8@q&CWU!=`M3Pv8LE@momJY+0>Jxv`J>ig4*SJcQd^ z!ctAO>BCwI-E4`eO*u;#pa9`7fIFUZ_4EgL8WkWn@@Hb68j7SvvTftr&Dc8xJ1>xk zE^p?lSli`~Ecth{)Lc(!hI9ugG}688Mn=WJr^2TuTab?$nZ`oqxBF}-dc_60cDSz2 zVMRL9ik}u_milU#gtUmcQ=0O~km`;EPevdagUwH&Q|=Ncoi!n>R*7l?+aTUwhb@Cc zeoq_O1Eg5IUw%c2^_s}I=Gdhx1?1l(*o(S-qu{HKc$}Q2h9UU#)7c z)ILU=5O8lNZ0G3%Sd5{rZRIm1k|%fcnC5`@Lty{e;)f|OUL0QF^}kL%@?63D;r#`f zaJ{NwWYpX16zX=t>y3`NzEK+1flt#+XC)j~$p){e3XjEoJjjUDTPiBgRQH zV!@BS{iJ@H@(fk>_pZR1d#11NaoOJFfm}O~n~7i#rdq2v>y$LrHQA#kTUy)`B}oJq zyy&#jy-Yewn_V_?R@}8hci>{DLq%TEa4fEE=)zzCO?5w)m4df(YV5(|noGFlN9nS8 z^lxxYx*rK;q=`6t&DPAbiiP6Ea@%11hHd=RdE1TevF&{#ubecZ-$n)V+rFEynluTO zk6by?)_v{rxYj4FNx_nC3y2Aflwe=<#Ja@C&IyhTZp%42J4JA^KT%74jDI2a*hN{j z2cce%*X zZn|bxel51$byJ3#>S0rlrrzxy9dyU<(d(T2ZqayKoz2h6*3|cMMHl{X*5S3pP_td9 zw#zI$zisr=4Bl9&&Q@ag7@2C=5&sR*ZZ}lZsla*64}Cpk>(1k68utCt`EO|7zB*z^ zuyAJlu1p9wNBrLd)PR#R<(tA?%oQIEFJBDNu=G4tTFrs`FfO`SL8FQ2ljei*I%nH> z_x#&@e;RuAO4A@Q<%O)Qtg@0u%Xbw?)ajDE#|^QnN@16H{c_k6O|qJN ztWp#;EayKKqXmTbZpb*9Q1y6yCIaQ$hBNJ1V%lHNAww|#fbK3|6;7$oQ?876AO1P8 zqb0k$2P)-$7uX?-Glw!;3n@Q9B$YRt=;4!a=E~MQ7jd}my`X!o=Kh<^>WzwLGOeFZ@kv*@ACgq_ZlsNt zx80DR6fJ!1)bu40AuKpv(IbX;$H+|WIP?a3*mw$Si>fq4xujjMRb&9%jQq_J z8*ny&q)yr{8D(rr?+@woa&Clu_hHN7V6te@Grp3!Y%m&L|9B;UAu*hI%JoQqX4C0e zLFVm7!dxfkEWaQm2ZfFDVTHaB%&a43xYjz~T>YW1UU+KK;3+96Wz-(yFj-pElZ1?U zxOP|j?ipRJ65;ZIm;51?f9SO*U$f;pbWm+0;@Mln1*LdGEVxCnuH?SUUlRMhdBh0(V3JL@Px zY=h)BxX2kKSAdQ$N-<|j$X*#%t$?o&8NGfRL6UUiS zceaWck$fb=tlFg%f^)cEA6!DSat!B;g9zOdK=UaaVXeKP_55_3`n`(b z8_6nkdUh_E=KWV|%S9ZVk9Pe{Iw(Zf_cJM`((iT0OI&p<$zZ)?qTkL-JZG>Ws?mwH znGucmOW@B#u22|{EoLeWSJQZ`(+&s+^@tW}<68~~Yfd-H;orMb%kcayTVM)H%9ci? z@k-l;r->KBduVJTTnErqe&hAi;hR<$-=8kLBsx5qdFsApI`{b|=MEYa?5~b_0xI4j z4(mjir94}$)fjIdU0S2_$e=s3>e;8Y){)Cit=$RH%@ft{ZDVHdr8tfe<>^i2w`W=8 z5Dyg0yqXyAlmUmEJc?v94N2@#gk0GT=N_9x!gXYhHH$D_53>P#t$8aOlVoD`jW*VX zP=DVIzW3>CSlIl(H8H@OMpO0L$-w|PI~Ut@RXaQ7SNZ|m28|r{7SlV*Gp@{S9>I(~sl!_%ms>NiA)B zRMbPVW^JBAtM7W^>h8-P`@U=cASE+R6`&bb{DXW~>xHNTuS`u32|JB~`J+HML@I zaNw~+503bjKYxB(_QO0qprgL5nYyJf+BcL4y z9}+|c?ZZ+I8K&V(k5sXJxR?3(Cl5=M=X117;D*Qn+Hfu@9v({2hAC!3eI(FQJFO zZcNl9F~7fNd&h-xeJISxILje``P0;R-Oc5uzS< zdXV4BJTDv#TZmO8`60Ao7r{{n#$pjTAiYiDed z+d`DPXkw)Px}-|a-+7IS2oR|ER0BA|5^CPN4y)^ol7|q+ zgA!yb4rMa`Dm*_*ZoE~1_8F9B$@R7+bm5eHyszqvOhVKTpXt1(92c1X10B;-D$F7XDnR zIYfu$Rg}Ura#Pz2N+T_XyA?qIoxn&u8QJW67CUBU16BW+<_lb~s{gR9$Yi~-Xkf(d zZkyj2Q!k8E0x6{sE@LEem!JdfaBN1)jxpZ?9n{#_uV}Q^FIBVV`Ubf2C&q&@5y9tr zKTf$4<%Js|9vIiDFkh<4;H@`KV5%3oSdhvk%w7L>W+5%wg5=2C&q|e_I8!+23?~MI zhU8eUj2xL_RQo%Gklwx|B=LCB(#AoEkkD$vLkB{?GGumE-edHN{91D7Y@_&e?$qRC z^cxv|p?v|<3CdrKl)tRJi0R%r8foGZxLURaC2vl(=iN&o9vCh`#uS{eAjWA>p7!N@ zXDxNLtaY;DV_1rfhe}$5i6f4t214F?y2Bq)KsI5Qz9aBqXzI059WPAkS4`N6Zqlr@ z2RSrZ{t<`2ek5lJ7Vy{f;hFsB{Wx?T{J7A-t2f=Z0 z?w-Rfavc7mfH>77o9ctGb-c~%4b!wX88PS|oo?~Z1ekbP*=oU;4iOP?N=;O)sn(cxCT)7ZvlMKRrxOO zB1ie>>SU|cU>bF(5~dIxNnFQ{)t!Bf%-1`I4HP405zKM%G(RuP0e;%LBQJ;7ogG6m1s) zH}&_r^a^qnN9P>QY!e*?O$M~cHcO%O7VvYC33*Scn#_^ihxvFen}1yVYog50!3|Zu ztpw@-aOjF(U;sZrty>pMrnpS{ol1xY&k*gfUPEc}xCZqU^iJi;@!hd-#)IL0IADW$ zg#ZRYm$L66V5j)UX9N*XCq(6sX(D4jy|IY6r)Vx6v#P(Gxyh6E zM&b)yue=c^H8QwX8k@}2W%L*r8mQidQ@YiPZV-yx9y-sDq-0&g@j5_};=*}#CS1l@ zO)e&~9xd~QE+ghczeI6okY=nE;xf2dC_o;S3!-xV_&EPI$ZIG}aGyqoBWw8B-%{`? zqvXrAY-RlB)}SxVWNOXiMSTy1F}6y2G7#q?E(^S34DCZ<%iqo*G+WYfZ6ZmuewPvqphmr zaA{KI&r{t9d63?ao{*Qmq6N|r_kT+35|+rZ^aFP##DGL%9vbCOQtRiU>%_?l zVZz)0_)d@=dIQhhs@`AXS<;0A1g+rvK)*2^3hv-M&oy!tyesMPJ(>M12V7$8&v zKR{P47-eEsKZqQm|DjKD=w|Pa9zq2#kJ`dBGWaD@JIxb=Obc7z%%vqVzgc}h`NTs8 zMdKg!)|ak*l(hF8&F0h%s5SjPhQ`6(m+sNz(EaoS<2VhAsf+Chgw~4qN2Usnyx7=S z{;GyV9S03(y#udBTns~Qux@`l?=CwPaX04HGFHB;jn1XjZ_dKX=XQ@;Ylz4Oz3{;7 z^m%;n65#qML7}U?VSpCcl3uXs^dEb^=w31dS9=&_wN5Y}jh&}=oxVP^EE@eFwmkDe ztRgna_gq=KbknRwtbv{RmCS_5Q44;^0zV66N*o2l#B6!xy2%dM5m+8ef7Qw^sg{0O zNiSc~?t?7w0>k-6yFyeKy>cZ=&AKXJf31?CQ}2O5V1w-W&(l$pS=02k?zVpw@@iFog71A93~`4X?oc*=>B zZa7+)K6%$pw>g#;afE$W?&wp5I42HI@!5#BB96K7`>9lg>Oky0D;bf%fpka;+{L+I=YL^ z*ly__b#~pl0dFQY=V;*_tIw<$XDkbtKi&|1<7pg@_;!x+7o@tbZ(3G4pA}RE*Qbjh zHDuBi-Xokkn$9}=IDoMTJrtklE^5RG<&TwqwjMUu1lyJG)-RqtzbkIj$(86j<}|)I zPHg9Yyp0NhYSO%@JHivqN3bvTEy65>1+xh7_U_bW8K~ATVH`GZWa1wI8Vo!cmDPNh zZ@LNQzWm%>+I@M>U52h?ifuEbo42i9jV@+)Wz($KwdH=X>x7Au>n>LhMt2N~^M_EX zD%mQ?rwqd^#8pRbpSlC6kQPa_AEBeQpH*`YchG`VC^%AOq<4Wwse^}s_k#wj*9z5Ob?kYM=FyX>ywldd&o(gd z_vCp``;V z0P0y6a&SPzu23&vfsoVys|2(ZLI0!lD{`o%B|Q(UU8rc-Kz?=@t$O~6M`Ax{-#$}g zds>#m1NRl)OY_5k2=>Qslt}RC&&T&P7*LQOIp--7?j4~LICyaS6-~ponOeioXVWdahaD-@!gv((T#>V2H0ws1%=R92#J75AoFbYZVB`Klm zs38Ds0b>D#dSF((fV7GjbQB971MyyxKpeBMw;-Sspq)Kkzz2J;HmOh)j6&!0)CVMu zl2E{NSiLC|4K$D@$KdMX^{skC7%-1lX;>iFpKA1#fjJpTjPTYyW8H>V7*T zc91;^Btft@A76l$%PG=`2Zx9ph1bm)ea>5x=sNo9|JGf`3O8WRc@Oz%siB@g(n0;~ z&odHO_tsVAVh zBwIgyFFK9>LD>TX7wO3#Di;R3ABRTwcjHvxbxH07jFJAVBKAVe9(6q985SBw&_xgb zZ^8dg9+xeCtuxS?5!3t;h+Z1*=H3K%a#%X@b8XrCL#mb47OvH0^Tz@PEm+S;p+U62 zq=}JA?QI5>5`(E$EUAd}OL}ae4 zsK|5j#MyhF--_}Qh;VptARr)!Qj(&|ARu6oARwToFi^m6{NHc0z!RX($`U_8YNiR! zfE@^PVL4$Ckoq|I4?{>`AJ#!q%NYa&Y4E=fXbK$?J_x8}kd&yfs>k|ej=K)VTIS1| zulvrH?@d>S`}H<1HMRLLdzg|rfin_JVl)ZdkF7x}WA#bLN$yxngb2{+^aK)i?vv=P z+2ZTcvAy@Nxk$2D9^+-6yqTK?O!=Hjuk(!=?y|~U9-b|437jsYDyc%+vDV2zB{bo@t2#{7n7g@=5^7M~3L}fy zpyQ`&!ID|R+Oayw%MVetC&UTb#Bqtnb{i8{+fO)3+yBI%l1M~aHVln$u5#!CkDU|q z7~KUYB&==}O8oPapr)6mKGKnTKLg(@)36(`N)^PV)29#3ZG?r$F~;n*0lU4BH4=AW zoZ)m&m1~6(jy>11!zmk6yoSZ0R3dw)V6^`QPcPEJH#-@DpM(Iz&PFyn2{ZC2?($Er zLHX|+wZqltOBUyId|)_2waAgjVGvg-UfLuN!F(S%aW;G}w^XQYIzf24kxf$58|Ck# zhyl#D<3KqZ06hCI5hQ_H)ZVq=W-TXr*)lWZbrsz!=qSpO3=2pA>f`TxBcPadh39 z-g-`T6CfiLltjRFQ#L}^ixA0te&vS~N`#BmdO@^ov%wFWXff*mtVRhF``iq0vb9g zJsE82O;k**-pZUEoj(W?jack37+#H5t&vpi91aW|T&Y5}e94N8oLs3&O;uGD2FfRy z6x7Al)idGjFyn!poxM}p)WoDS-r3r4^ol$hq|MjB&pFI_BGu5Q6|ak>R1r(q7X0!r zVQ76li`rfIsyp8oGAXV z?65ekMVkD#A5MXC(WNNXW zSGJozIcq{p!0PneF_?Hw%}fkvazhq=!~Mmz>E&gP3W!AeE0-R+M1lUOE{)ss4@!d! z{XEP;;51;dhsiNT5aw=xwH>I1FqakJZlEqBqSx*e`WgW;?hC!g zzKW;)DKMGg92wRD%~G}_1cGF?j9NbxMjFQ9zZze1udgMzLKJ^Tt869?wJ|d+;Le{Y z8E~i^(X$}5nFED(C^tCKv~brTes!ZuIf~bu$Z7eoHRWutE3Y*mB5*$^RiN0})bl)G z>C{RCLXTJe87})OHBUQJt0bqOzqTop#c5y4M;)kZ+cCpmVJ{ zP^YABf;BMjdy>I&14ku@Xg0%use$BOZyxL z7c#LuQXaiIG@o+f;GQRiZt!CJo@O-Kfc8ZGpvEur=TlO7p0hQ*)>oX^v$nxY?aWZb zY7sfBx?qU|aVcfSZWJDy37{ZBna1aAnuN`j`qV-U;vmow8TkB_JxW)&Q;lAGS^Mcw z`RCt(?G!a$V$K!FkFI*CvRK=@ZN4N748^RzAJ|u8?#=q+l2POerlaZcw)D;3H_fE? zq3ol?DVL(?dDahQI$BekPv#b2%8k;XlG4-p?1JE~a^O-@QWPae-RvU6KB^%Y0IVxkh#hmPV7d<$Hz}9%UFv`58G1lOb?t%@72nH=BDaNtDH0s;^3IP+j7S< zq5`LXssHZzViW1ip;D(E&SP+k!m{wlpK6#)HGkc6L5NotT^eQk?_9?b!2Ov!@w0 zJkUbWWnf`v59vf##FzG6^K`1UH=Dpvz@kU?`h)2CF=*LeyvMW_4-jB5uTtLeAX`{y zyyN%A3Xp-rVK!nlJaI27jP4Bz!!{n(M<(#R_*$jo;54CG5 z`)>LSB84P_6oCuFK%l`KWX?S_HnGYW%-`?JsrsEe1$59?n zmTV-2|VjnMaDAmzvKsznZ0B}P$0F*%?Od5WzkT%+m4F)D^R z3XoR7>VDT6ccWdZ7%rCJ*_1f(-8Tj16S3C)uJ}n%*-K7rLyRyjyZFUZvSRG3jlX%8 z4hoF$Pl7SJO_gH1W!8OLB#W=C)dOm6W`O;4&9U+*L||mZq2Jyl==D^f+VK4a;UvHL zh|i-kfbo<0m~E82RMcA3Rg9n14?pWbl=Xr&zQ(cFI)oA!RVu^8pMN8^xBJ0Km!MI* zUsc&3lSl8o{a}haHFBXZ{t0s2ILa?wKoyP_BV+scgJbk3;Dc=@{uhh_k9yOH&h}`BM@&b3A_u+}&TWw~Z|< z%DqcKvzTb7{vo4!BDzyR8~cVcDL1XpqaJ81ebs9oTVZJFvrDW_oFY|p(u#u(<)mxnIOU6m2rW~>dCXRZ*OdB99h(wS@Z7#r&=)b;EdT|eg9Z!3clX-Pt0m^J3#>MG<*}h zoqgeZKBCWt8%F&ibLED)B8F^7&B52AlxkRn_T-95o(;=QJI`Y%-koJIW9!!Yleg2h zM4|`1+e5ik8}30Gc9JTd7OMCO2uUe(->w=cZ61Uwe-w&W`p8w za`#hae^Qh%*B6@2dw%is#qjIA&)(OwDn}d}iQ{I($1}djhq+p+?AIBc=aGMd8=%k; zkGMYHZap!uAg=ext@~8AIxa2`F8w)?J7Xn&9OPiDQha$AfoYU^Q1>+V+OgM)&g$u> z-5laMo5t&n&FIAPUteE30*$E*t*$6p^hWN9nHN!$8GwG!E#gw^+QTj6fJ4G2k8{Ft z70w>lI6@*BBeTfI_Tdo_`pt60l8NLU|IQ@Zm9W4?Rkftt{ zC-Y%X#tUfV%?EF5?BCHYI<->~oHUBpR%K0n%JOw__dkVF4*`MgmJM;Ap4?~=V7;A5) zj~^~DIlM8#>KgLj3CH%EQrL7T3vzTeYJM{g}mv4gGmwh`&*OyPt4-p?r5SzxW- z@Qt2Xbq>s?^S7u32o*!KitleBa)m5yvD$JkcI2zx07ysx4jz*4RgA~t`{9K3{$_VQ z^4VBLgy4sH)RAAfeAgTW6$J&mLKY&vhbGA+RiXAe%mn5 zLqZQC0Jy2^(d(ecQ6f=dE{umDhZDz${(++;8H5V?zcxi*#DDE>Uh!-qEh^1@+{B|4 zlfH3SF@!(XbN&e?e+!f{CyS?Uv1*FE{VY3gwl za`=@VOhl}}oxir3_$CLZWo{2P@fyJ&IwTE69FJfZV_z~s+u$`3UdPC35dyuzMfkEe z^_^rQYmqaPCVbGu`7}cQJ80!i_js*eyC@ApV zAKg*hOT`j-CxbO_Y)ru6t+9*c0SgS^N+*>#M`Q&ndfbe6OI#FcvlACM`dmam3I3Sn zrx0Bsj4->+v6pT#bc|%ebU*wZqZWVmsqBGUxwL|kyHc33)#4iDU_CeowJ97wGqRFS zyCcWt>JK3fn>HVpIZe5HwS~36_*MpC2q71024A`234R+ ztJTDmbtNFpK~#Z?z;t?M*ol@P?^=?0?{p;rf4$irTwBWo7g`7zy>vHGA*(6=x&}GL zEImL@lSGM<+!j_UooT4kaYc_*Wg6|kgaN$67_&Sq16bxZ+|r_I58&jUe%^w8ab=|k z)hUYpFY-ax36t?KeVIn>lZn|dp!Med!yT>Z4EsE5ci7B5=y}TEY;B_L>am1i)qxcj zy=(3f$7G$` zEQq2~vaqfzzk|KU%&>+4&-=tHlDN1y6fn3G5)zJ2G`DaW`ulIL-#0i_(&@#`JWt9i zwuIf;N>a~cmvz^K?eFiqs{;T_OeWQ1*d^5cnkd&nwE4VM?#GsS-LYSgKg@@nu2#*^ z@NGBeo3)HcvKMIT++H0xHjzk2C$QMp6^@4&2O4b0bhNL2=f-fhfZOPEMS~1+<8%3R zCBAt#3tNF&Z!xF){vJSouM_wISG6ZoUOvlQpg~<&X?1(bA0m??J^XF+rT#&~#>RS^ zg5>}J_bGYPftw-aYE57(@Z6jZW;1*XIplDpVkg$O1P#<$dJQ{rxLy$(;_u>W>EFOF0 z-*YjPTLqd8CqL*gihcTFN|6dZai`gk^DqauePKTo$KO*Be9c!{yFK*lh17-UCUoI- z&IU=t@${D!9Y3l#VNOrI@x8l_%k|f4Qf|lDhqZAWO8i1aaKq`zD>4A|$2#l(w2NcC=1GbC~J+=9wD0P z-1wU5Jg2P8ij9cdDP+M=tQT=qe{ve~pGj)aN~x$gvX=DRmQN@xj-VZNhSZ8y{VM_d z(WOQ(Ol5+qf9Q26f?%S_kM|O%E`*>RHwjxFMd;1Bg zw^?!U^LJUr0JYDrL?7{!c|mvmq3|G^opl+1gTx?gy%e;s&T!+Kydj5#PQE|EK;Yrw zyWi`aA6mFMUlJXhFqMX4LcrT8k05lAN?2a7kE(U+nlEvi=*mWZD75tsG2~!ZV6t-?(HVo*G1-W{527_yFo5kXNFd8>MvCdKDxZmPScW>)>0*|h zqna0@msQu81hKVbU7;lNI<8pOF-a29W|7dP*2$xSd70LqobnmvBF(dNA-A5rBf1a) z61#>^(U{$|P*5}OPe&05b9P7EY$cr0%jf-ZpQc)Zh*tz1dp0Bq8COL0{&~35Qn&Jq z$N440&z6rQC_%z}RMln-8qxyQ_b_q0ztPG<8!naNrL#mmBj@q0aKo)FncXX=^h``6 zH##6yU3u62?azz;XUuT6;tbKUofJSPaX=bdaNmnRwHyQCjX4(BGbJi`d!5 zp;fqAwY<@-c9!9I(sJ^pm9HShv2!(wW$|i|L>p-;u-O~u((~N5=H_#O_>(%mMDJ=7 znG;eSo#^8W5mojS+7%{cS>PF*OsHrYLSBA+o@K}JPH$At&#^jNJsJUbxCYggm0o|I z0^-4b9}v zUa5WA^U&hXF{*~RHD;5?=(01G{UT8EmN8tS*lYkWK9k){y(s4fG$5#My0V)Mzke#d z*x-EK!mZigIul2U??8JLUOcbd$=28 zcf`-5wiAxsWTfeKX8!7Qny9Hd8So4C)5j7d|1;J^f4_hHUR4~d!@Q^$Ic$~--S|i> zL#tuf_rZ4B*$??Mdqy@$lM+5JtAaNRs6e`5aGtE1oDR49p9X!Z!Vn{7X<7e^{uW&a zx>psa;i-OD-@2G&LzcsIWuE{evQkK5+`s3d?>o55M7;Xn_JcCuRMr$YjM^WPC~}`< zEKgB3poOuqNR7$6TB39)_8EAE4ox4vC=bU|6t^RGgZ{6r>Lh-=H*gDaHv36RrRkx| zWHdEpQDce(OS9(YEIX%iy{A;GM*|u=O(ma)T3qJAYtjmnslWCzn9O?}5#`4)(?dfI z9S!)|ocb6lGV>6i7PcK|7nBPIUIrYx!Py%2QNq*irX!?ZD?|sl^Y2Ooh^FFz|fl37g$ojF#H4KR>^Iuvhs7kH&k_OZ62C^HQ2w8I7 zlBgCQB*-^^*6yWiOn@{RdK~sGifp`jMq(1mPGxu*z<)|0os<#MM3jiRtXv4ch^4W> zRPAPM3*JAJa;;}&8Z)FA=PAXM5roOjjeL!=3UKI-MnB?E%&P)9u+kgdLB#}6k+@?L z#vf&AmV%`wODwnLU|HnWb-$J7mt4pQM`8+YK*$N4tP%#(3^C(FbyaC{S#j(N;y&jv zeQeH$CLc8^_AFOR1AK#ma(##Iw`Pw#sCM=muZfznEXL!LtRDIJ&ssGNx<|SG5LeO9-w34vT!EE}g8&T#vJM-P`sBXqm*vTztL@8_w;acqJrdlbKF zvD{5ojLbs#r>Rgna$3NUUe}ozve#hCU{dGdTxE*B@-+@*;fU!Rv(E)0f*`u2&wwd0 zkOWgzhe3P1S1VH5fv&&2COI?~yp%L^!GINNJ`b!vP^C5dbVCnF(L153D9_hh@cKBT zS0iumxPo4v7+;)K{qFUcS6f`+_^HePrHA#W1@qCa@@I(+V&P}6C4p;t|JCVE{@z#H z{Gz!*;Z8VWL5XH2;o*4u(`ve05ywoeSb@y2{{XGA^I|W^9Iao6@-0ZjdLNqD&I^@C zFx?o)Qhz9lkPk$}F9r2w+J`PBt~}M#8{1k{+KTFGn|c8WT^b!2VFuyJB$^){K@Cp# z#O*rjn)j*`5U^g!hfZSFaa`|;l5|EY%F6%CX18=p_dR9}D=RO6{l(?w?WeFMA%>Kc zl*N@Dd;I5Cg}u!`RzHj2A&^N<$J81}3~7pjGA*1H-;d6tu$da%Z}d29R)uVAY}g{) zl^L0<1~J6e8Iz^e*do+YhD-)W>gc?r;8C7zgK6mKNI4kAm^<^SgUc%v3;geq#3GHx zCnn}B*hfuRk%$F0`^ihia>5<~s>4jSpoKqk2k#c3<3*9|LH9>#-nl*QImTdFg7zT! zbUkuV+Cx{XJ&?|XN1>yoEiW%eiDo<sasE0yKJG?c zkttGdg>sxo6@I+v00-G9m`>NG7iL|7rb8FeInfi@F@gfIK4It^6wO1Y+vMVQX7u!< z15tz^Ha;=ol$Dj$m*14P(exZK_@ zBFP*B#IZq)4=i!;FB(5rxT3{+m>o2kkg~_143Y*QVi`8Y8Q13uZT#9t`$DLqV`8-U zcknak>snj#3+N+O^P{SBogs{kqtfX3d`JHclpD}SNGkobHMHbd?f@v z;^IJFM_%P7S-xO$zBfXx^r5M~U(bx+A!;!OTS>PN5DMDbUjL{8_c7=XuQ@%k%F1X! z`>E}cj*8L_)>KlO^AUDlh%JE9b_i1?7v!bsX1%w%jJ>6 zFq;ojSbN11O~f?uF;Xr%vvx*X3v)W+u?FbnojJ3k`UExHB6TwLMErDdapA&>mlsk! zJ`j$EeQO^2_zD*A@29BLfHHFWploP_-yYlb0=kS1k5}*jCoAk!GP;W$=Z@>YOvbHu z2eQhrffW_*8+V8zCEwR-TYsz&4i@i!aXw4k*j;9?&d2kZgU-+U-0n!FzAmqaS$70~ zDNmH4R%i64n9CNTb3J1=GMs{@ZwhqFYR~4oIH?P*xX}s?`i6aN^eiX*KQ7`3B0}eK z-s>z1=)!ACTIKqWvk4JN~@MV012uH zj_!E>2@is*rFa>v=cgx{A7C4XJ1+2VYU~%!<-zaVn|d6P4|~cWGTgL+IxD#KWwv&n zbB!9+;%)%nV~dJ^{OI`hZvwdr($G~HkeW5Iddv+Untt9rPGvwwiQHzK$a+Z)Pk^#W z;z43USER{PNx(kHMN0|P$E6G>WpIp#z#4NXLsjeXrLE$v9=oQWi$k)dLK^Y(#-MzE zQoP-m$6>U1MBMRYhOKaOHwQFRZ3Q5V)&dYeG^L?YeLBeLsFdV;T;_4{03Hu@H z{IKZn9YsrO7p6F@B;K)})`n~FjPvhQt??aKyqneRr8Hfy3kz#S89e(dSWhV~_km?z zgPqJ=*#lnCftAlI?;T!Le2B!@6`oMHLG(^p=6J@RtZfw!TCt&d1 z5pg6;%JtGpWx0ZY!2~9XjC`e%%Hs8xL{~bs7XJ;fYsyW$!&^6FN?XyqyYCRP?={=H zDfEqMtjTJNcs_|=y^S5WGy~4nVU1;2zjv7eq!ZUN1cIN^8yFHYMt|2}k>3 zZSq|Gwise#Hg*S-2uH`ovXV@QdUmJ|V7A&){x;zTjR8;I`>iH<-Pq?I1RbO%9WhD%7JQ%Jw7{!qvJ$mKBi^p+_ z$1qTlL`_tZk^F&ZnoKSsG zxuljldnmO zmDq$`mpIm)a@Dbc<)-n29=tT#dW8Ki{QCU-fc5oX42ta&?R*WU)Ff1&R4OC9yBsap zL%p}K9VB-k>K$xre5MH3;cVrR55q?NU~Y`9Cavwb{9%!}w_gU40nfgr0vagfV9Sas zZMqiZ-L@pDDO=yS@3Fq!lRC^n2mf?$+!gI?|83dQsnN!kEP*;~m~YA4MPybFfe_rc zOYRqlro^F4A(lK%>*wKCu!gWD*aJ8D@WnjBKY@8*r zcbk&LYEhfouU7ek9u`u!j(%tk)E`2Pu{Qhm&~d* zC72&=@-+#y`I4(nDL^R|w0+;2y>v3QpLfB$Ag;G+i=SSIbfG0YsoNa_=2RKT%Y`nq z8)j4NLHoyUas9u3Z6a7Oy%|3cvceJqq*9eFo z1E!uZu-#ep>xt1T2G&1QG6)i6J+AnTl$FT>0|V{jBsyO#c>;=0Ka(lF*=N4VaJTrn z%6H;dzy?n;mTmc;ht;Qa8GWZ0QM!&@vA_wG=0zP2DOu%jPFmldFLNz_kB**Af&6EO zOH~@y8xd#IA$lF7FZw;uLaIJQS$3v|d{(61)X&sT2eSL)Xb!kGkqw1mNBiAO#Dg|; z(rCInZyfu#Z2WWFzTfH_w5>S=QniL_F+aeT8BM1lbm@l`47Qj!%e~Qse7J12&h7^J z9BcCz)^q^o+)8SG*?U{xIgoB_=^aKie+6;l+XiA|?kGP#v?Ri0o6YTBYTGn_jbm?> z8r|&OEeF0XyQ=?sjBoTSDP>J2-(DxRQklON>{Fy|wyn<3Z`1e%c+YN!)hV5z=J_#h z9e~Gb|6bUhBoZhqCH4%MCKUYX_Y12s%nKtUV>49`L&#@KIC<>4$5KhRGkl!KA+r@V zz|xqr&bb0#AJNIA-+&zC@ALA|&{~F^M&z2{a=fjE@+r3y&yXMd-6pnBSuHf1(_lI_ zRH4H=RaVHWqy_y+|J(bDyGs^Q-0IKwQaQwURmi8x&K2xI=o|9wHdOI>VZq7lTZtQ#Z4%~xv z`3ZUp>tnJqyT$LT*o zv$gqf#a6xC^v93nH|+^z=9&8qptO4bIwEaW2eI%|8(P@KW}RvbN3$2^<+4TI+Li}8 z=RSi)_@fQtg9Z{j2n=muwC{07H4u#w zbmYDMeR7u2hfNlDpR#T@QiDlTab@>z_6PBijGL1SBBX~juigV)fM+ao{UcOIzr4#h z&&vi=#^nkm{lN2g+pdU(KBnY>s15o^soX*Nj_ZdmH7rT@B8L$m^Me2*a^;1Wc18!F z&&!;x@O=>%YGo&oL>BOhChUWrI4kZ0E%ex~HEe202+hQ&n5DL)sI7+BNu=KZ%+R5Q z_>S@hCK;rurs6qj@wZ9|bp>!EM2+O(q)X!#(S?8}T2Jy%FWTgMA5DCE`9pqMgSdk% z;71c`C`Td4|J!4~1HLfsMhtYY6=ATy|L3CBlXWec*qkqlJp=>^1?gwT;y(GeKN-!0 zG$cyse17x)r`?Vmz=T1g zker=}|LO!tHh3BdjL@gIefOh3#B4Yw{!du1h27k`0oU>WAEM{udu@W=6zz@=E* zCWCSmIBlBzs-e6q0m{#tvnTqVwgIsf^V4OPL=9>zH5qDLr90+w7+QfMlUsZ&OREz6 zCQ;1X)3_vF5pqh!Xd{|p58bx?hjD_}bt44sPTV!_O$$a9ohjsKJB)w5W17D;P7vy1 z7k5!UQ6!MR;)+ApeF~g(;Cls>zjSg6ZC$u|czAs7Rfq*H|Dgk$lRx%;%d;#yfdSj; zJ}-cx4L|u&lLNtH42A=`-|*c-&*0sw8ygKCZ%)V44(3))gdFoDyeMU-eBC+jkd7Xx z3&_2tQ_0!X1TA5R;4j{y8IVM*{D1ZcLhU8I{AjuPKIVn^6+$(bA{*%KU= zvsX|7PTc`-Ti&^mtth5TB<8Jm82%HxeY(ai1cEm}mrmE~@Io9h)Jy4m;(`kRukYhD z%f&e}N{qJCo;B|*+-+`pI?DgUBEY&_&^An(S?^-J2?6kZ3JAU);F&cq#U{q_*u%q< z_TGr`VR1o1KZ)M+PIK)P90wn%GJo5&VHCWPJS?j1DGa}xiSGL2O48z(!c_vW$oW~E z*j+O{NgpzUIO!;_ysxD=d2&30b46zM82N_4qc&QW_sQvN?sb>3q%NDL(8r3p{yCep z&9RKYl{=yT&U=7?DszI^{_zxbbM~=-?Sjd$TbuW2=;p?)ALqW8l`Ae86nDQ?Z2Iw% zCdlHuW3!HczK2rQ&xkI->N4O|L{2D2b&x_RaWdt3`YX2VMVUzeun|zP;?cdRKPFVq zh?Mp`Yr4lE@LEdvsgr$LPm?T#ufbw+1jRGmCY^@lUleCTC1@kvJE$vLn{kb!Q?(y_ z9p-a?R_1Y7^=9YC%rSObk$@xRgUbd7_bTp`LAqaY%6Mlms0OfI|Hu(w>w5j=gj2LO z9I=pZn?`(Q%95aTBJ-M;5ET!hS9G!s_Vv$JpU34royZOT^+JO@J&CmJ&zes6IX7rW zRMzXb6T|nG9gYeo@9mw11i^tC*Wu!wp#F0&_a7oDH_Y#k7Gm2C|43a%m(0WdvaR=h zCB^CYEms!!(W47kJD-IGh>b?*)4gtpE|}L%FQ%5U*)bS3e_rT1I?0cOu-Kv=&GUwR!mC&Kv>07Wo5Jg5?+S#$WVru4{qH8Q!$ zy8g&ocu|)dEl}n=Zs%-*STwC>h+brvo)i(N9)=^c*I{RS#SNl9 zS~lp^olG!%u8u@@gBaZgnJ2dqV~gg}kSXhZr>7%AZef2koUHk}x(E-{SLL3uxagur zQt-vxblMqZf#ufAp1;-vO+-(H59WC8UwQ4;AtVW_$aru`eiY|BpzZ$U~(vZkA z9G^f$bd)~&pcPX~5Y$}OVC==y-U6*4PDX>6joaXOwaBQr6 zqrjVG?+wq;x6e%;!@U=6?j^=d9AONQI%=Jao}HT`wOlU-y0923rDW_D$;Zg^Bukdi zYTEb2<>x!B?E`1&A>Vc*@5tC|$F&WD8_{8&h>qh_#X;T|Ndxp3OG$KGX5 zP?mSy%5~H)C`c5zw62A~gA!z}2g<`kyq~!+*mH5Zs|X^_Ryu26#k7M!5bQh)3zcit zYZJ=;M-eX36$97BBbw`&1by}n@H@|cVvc{#}O}B1=8njN|5>f?!fpH zQ8t@1(h~RfZbgvQYyisZPgK9aDaZG+H)PG*ZHWcEy1>RPa$w%bIh#o8w8YDbCw34y4+<0uiXMpDikBCP%%Kr{eJy$IAkq24 zSt*IU;?5(c_S7C%J+r=FCwdGztr2z8q;Yw=1<8@~%yuI$T&|xO8sU~ciW+&r!+qnv z0>Ptuv?N!Kl&Ki8*aVO+eK`!#AiqyH!9Q)wEEk$N*`#+nm;?t;%aN(RN_-yIym36= z@7m95qZ1y7IG_b=IAK09;c@Gz(L1WrUS|w>9i*y`v|rHEZ+?xhQk?QQVX!rjzq)K% z`L$?AKJC5Xgbc)O@iG@t2U41sgR+0)G0?2P%F( zTvmu~b3?0xoOc;t2s+B_AGUQNsMgQMj`y76*$l&Hf0@W@dQW`+?o%ope*Y8DSnmb2e))oU0kh?EVfRdTr%251m`5wJQ=}$vI3Vq zV&O=#A^M;GW3{~2CYW%prwi+o2<6MdNd1EY#(sesums>}aVBTnf%l&U=$yhIh3TGY z`{^gdOp@^=!Z*p;c1KNak-#E=|E6(vS9Uf2&dzKe zp(l)u9Tivd^6`ms>j0|!4`dr{b#gb}*}3CwHWOhFVgHdB z$7p0fv*W{{&oSksz!!l+F!89hjhBhm6JThvOEvWDJc<5PFnh7;{q{C}{9cW${O{D^ zCmaXeVw%l;_R;ZM%bsN$tP9=~_#2+0c5;>(4rp*+ThdP162nRuwy>gY6 zS5y~PN&_EH&^F3(%J=e~< zYLM_q&K+wsG`%)xA;!YTYTLtr=eJfdpL!2k6C54oksDt&Y zFib0z=DOs}ozn1-VEWx~h4(kLOtY>7&3VjEHmzJzHUj&9bGQix)~AdemCK&{ofr=D z4-F41tEw(;M*1WlNdM-NJA7*o$;+8yu-9O`ZtZ)~Ku)e)mS^GN$pnXXd${Pny4>kV z0f%ly#YFq=FunQrgkW4YY5wu3h9j>PSwAE_zrYq6#UL4y1KYx}Kw*5q=2MjIO&)6~{Bwzj4_<+eP!Kcbgh0y^;W+!4dD`PqC4e4hUoH?WY< z?#c6)(n$>t!kL)TLXn_;hr!vA;M?8?UgXjf$mFkP3=5O5mW^^Uca;~#>0)E+ACM%7 zdF9mpb}Q~-hcO??w_|K4?YKBUMMMbyV@o+W&@!}yjg86Aq}qX<*;$fPS9KuU$Cl=3 zpPmG)paY76oBm{XplYX#hZi=DPgsJmOOtwCSQh`FH*pKPACtekT+MB%i>G?V!zrt@S9tam6>eeU}O>5qXD?MdvK) zt`GMAO9ZKWI}tMAEYT?L&g^_LO?^M9ZUu^8)GSNXh7(Y9%XgOx#d=>zw5WK~JCnKD+eqyU~4nPKn@bd)a;Ay373q>Snz|uh!NkS`I4786|>5 z2rN(tA`oR~e~~%U?pF!J z$5*33HuH_Bo)b!!iyY4R@lcP2C5uc4;hs|WW9GG}i{BrReT7i6UJZTAuIDLlo4}(9 zZHtRzG<8NjqPx=k)y--siw>pSX7g75&l)TPFXV#qa<$vjVQ?!Lsqmq20wq=H8x%5;KCnx&mOEXfzakM7QJZ}?1~)uw5%a!P^y zQj(Q#P>i0&>}q-nv7usflc@2xn6)YGm$B*T<70pV*+5Xpc0AgFu|9Dm3kyqIM~7gm z+%F#-(>ZyJ3Z!K5b%)bYq-jt7CsM||rYyNno(881(mt^{gyj~h`($uBjhaJsCrbSf zYe655DYL245{nJHqIc}zK-%i)rr*dtA=^RV)dU7YkCxWzH9Esv2sC+q%!!~^&=y`x zfg_47*D`8ozY~(s%NpTct0xF}UO3EJw^5MzMvbOVEpd1*hxQkG_Of)IwuO}RJc9m4 zvaw_RDch?D4R2j<4)x649vn_e+xQi+qxDAzG@xYZsO)VNb9PfmmpmErvQI(lo4xwE z<3>R{*C|w4@r)tBNL?Mv{94qJw?*_6k%q5g_o)B}6LaW~_KZDmi#e=>J5Qs14!1T3 z7dncXh~&qDdQ?+2l&2PCzWCarY;!eIKsfRzXnA#YiC$@-s+udI>k?+>ZJp|(kgCNG zU~%prOZKmxN?J-;y`fo4JTmE}w_M~0eY_ zrSCcER8pzj*DweK#Kz6(ceVLMwjOvROFQ_pR^ z+djdlx%^q8y4KRMdwj%KA9sT{GCn!OB6e{6tZFa~TD*f$LY4PIFp0-B$Ka~!oc*Bx z?_(xgw%YI^Blx>WGkwLAsQz}0bw;~g04}5RUbyn&T(7ZK z*E5<&6^mnLZ_FqCI~d7{owZbv8@GzQenWH`Xd^pvy72a98a+FT5QUKBI&!v1@U=Hkee_I7~^&Qr2PCxr8KTVM-Dr3ESq{O=Q;-CsedVqr7ng;D~(&O zbb1FhTxvVzrLJxiTG2K5bj@kFO|XZK#JF`%I31Yl{Bz^)e~j1^864fT0D*S&Y7;G+ zcgyYWQ0ORnDI=I%eYY*xal;2W*ffxa_T+SD>{jeM{jP$jB;%?*e_?{x-KY-abW0hrv0vh0bPchj`&Pq&u=l2!C)Ds316j=oYQAdDoB}U{a)vXA=C%*V;BW!+I zfy!vp-~LI||0_2O6lP9+Nn{ecE0N`M5WHb8)j*7e?e06>~sbjRHA*YG9L9x!vtt{a<%TXKL?dt}3q zI2o_d?vx*v^on~&SkX=+4Hb!@CB0(*at~H|U80Xr+fU^W{Sh9~E{^uUmuXn(4VeK# z>E6m^d9DCP<`*u}xdMqK2bPiuP8o`8#IXZ;Rd&|6L{~_YhD*X!tR3=Ww(LGqF@>b? z&lA^RV>^;>! zuIM*+UR(#1?dkI(?)Zf=T9cQZJ9tU9{xvLx>}GL$*xK3kPE1rTf zT|xvKZ|qPy+mYEkXwZPByBb96^rbLuM!Gfn(DUNx=e zqnax#x%y?ZR5qXu48Xy`;Y;S}ZG)-C=bXp8lUGhC@*EFh&?44|OH7)8-4y9_^UN*o zK5+gXzK%$|juO8eRx*>xc71AZ%MGe4QK`YsPw^Co;%vfn|3^l8`Saskk$u)adqIi$<4ua-}v>g!-)^H?JYGpeDSh`d+nL<(B zo;Gu=OBC|_tpBGfXGUnZ|f3e$?}J4T{49_vCH zPb3(s+WPZNG%Fb&kWhAwr9aB8D>fZWOMVRWaSKhK;8>EgFqx`*6t$hLk*GH^v2XmAy5#sRq%~F&PIP8>+Y{7`l59N2ZPQC}>Ai{Y>p9*3yAoHAtB)qX0qSz4=L0 zEw^|z9R1@)X!D0SGtuF~yCvD?`cmYxMCLNL7c!@O=5m)6X?ElZqHohDY#rfb&74ly zges2yV|t7r@|xFdwsYj$6tUrwK5QZXGkMkt1Cqu_W+J0#*uwxVCzit*H?~8A-q*}; z1g7p(QRjVj=|Qp76$73JckktN622u}RxpQlpa5J3%L$)QJlM+Hw3qkR1s>EO zUVX>7ssIG7u9e;&ZEJitx4~V@cY*9YI&dMqs~>8GdM(_Bv zx`Mc|&IgsKbDjg5oXyd}!bT8-RLVdSZ({E58f??O*5Hyd>f zUX3ac2d*mkUtkQ7F$!scHC>G^F5uUhat{eeRZ$rAr~Ms;eGU~Xl5BpN zlI=qOTc;Vh^5G@P#}2_{HQr!TXXyDV$ODJp>Bph@#4F%Y2T?LNeX)$}c446Tq*>Tf znp9|QZF%D+S+V5K;q0>Cae&cLRk82tOx+JHX_Rna>>kaOr&@+`?>3d=I?#pQ1rGjP zd}P4p$SffYe>4-zOvE~GXOYR`&5y)}t0mbezgLe%|1a^b-1xVRx$b&FBOqCcvG`2) z8{)FutmeOib8+~?OTFAK7+LY?t~ow;tZdkng&8n=nx7kreg}(h2_uP;xb-2&jUl^}Ps7(sUCaOmT73f+r$2ze9y|#Z)ydkZRE;-)16dC~3e+O+{2GY7TO0 zKr;PSnwKMt4}(SDILbC`ln*-Q>9&@*c~cPjc8QZy^@`FMhcjQO@$>Za;EuIB-q?D* zmpvZLR9U$>NQ{E%3vHo}gMt_Z%&|M=PdZ-r&Ph*DK^fFUixMM*)w|zO`fJ=REDHjj ze?wKOu$$Ui9n1mq#J^FZ%KI3CN-I~&+-2oqW+#7?ZacCvMT*n2vmoyxOm&gzFPWT_ z>}(k`Gjb3Bv|97GsR|msp<;)iaR{+D9lJw~3ctKO++L}Vz%mvH-$xmn$~GwqB0VFG zAYo%mNpA|~$I_@2f`2eMz-&aQ+ZbaWfud{0j>yQ^;o3 z(9|<l{-YY}+@egjVcJs?oCa}S(q=6*)%|=xw(P&%%l83x{4K{|4Sb-1eMZ{}55aAv`s1Y9H{cO*Il;Q?dH*6=KL?%Z{@uQ`)M&e3PWrU)@S zJbY$$c6T5YwVMaf4Xu~%sm2&nXPNe7F|M^cJe(O9kYHx7dhd(u4zk50-QyR zC=r#qL&AzMDc_+8RL($;JLc7f@Q5YYmGGlDS5bbf>X4Qe&nDaW0w(ul!gr zO6#z{t9D=z5Vtc2fB@F~(uf(jeZGI}!l+qnv4VVlUK4m2iXfSdUmJy#da2}i^gFvO z6?MEXY@G$;Ke5q+o&FHo0+8#TwjV0m!#e$P8@zgbD$I!WJ79|mV8j5FNTPDH*68Vk zD4{^am+BUi4a^WE-BUBzsHXPpA8?z-4sxNfRPP8p2#LF1W=elSD`&IO8!ipnizzE$ zOP48#Fb+nfD;hT8*yrJz*c}{t4u0L%HTc*Ryb;p`u&bQ}1`EN6{~$w&`}})8syJFE zK?jQ|CA=I?%T%AzkScXofq%u2M7hBROdhOzh;>y5LeMSuK&d=owb-albW)K!JG1`X zG90rxusQv*%-U^pI?GyfHXSC2vSG#F?tp-4UbJkSR%_^SFEu00VyHDT4LqY& z!a6+u8ck4cnRDLjvx|B0K;VOUenCV|IVhknx_s#)E8M`UAeD1|{=OkG-`cEq^cA+j zv?x5{IN$7ci5vYYWU0iRr9tiEJ)ULaw7K2szKon5>7CH^*eglGga*Id?T+x^7TyP~ zy%OLut^q$76T?@>h&nPUNx;Do7d!+dCuTzlxVyWH6)*e_3CRs~kS97Nw>>Oqt?HZY!@AmJB@@B+EVwmsv4TQ& z=uOeu{TWy2b>-{2w_~Uicu>TQ+8=jmdIt`vpa_S7lCxC3&d6a%dq=3W_$;kI-p*9q zhaDTJDuc6necF(N1H<&1o$gUs+D|RsGs(w&$=%_m#??TsACkkPJ7CaB*873^5U3(Z zd49i=5v9U&xEIdBJEq z-6*nvM~NH^v{M<=7$kZHFVy-(A|; z`2wPC2C2|jqCb~}#Pfb7f0vJTmpQoWS#%}P_*)-%4P=}&A1t(@y5)KS5D=FIou0(e z9qsAY9X=t;OX|4NQVwvIE^FjDWapK>c{MIS!XP0bK|xsCdwX+D)GuNLWYG%gmy%Kg zu0K8*T`onMg5GRW`bG>$fel<3@hj@n?;e>_{^Q}{U(ME_l> zhvuVo-EPj;?J1Q`G9qeP_Gd_9BYqIskEDQrNr81JbM4c5LIS`YG5>mf7I6-lB%d7L z&4RMR-R{77LxW<5=2D&Q4ToluWslQ|@$9VpR$5qXQtt${CNy_bd`lYif;TX@c_^NKY=r zzvY^Ia?7;7yHeR}&wzQ~iiq)ZDsl1AR`0o^Ajdu4)1H5JRlgsIzhkUzfXCQY)}=|Y zQnc)ILG7iMDH%J3OA6|JTCL4FZa>$pdfmVFw$8YO4Kr56ZJj(ibdg zL&}+d0x*Y+kgBs|3@}6d6Y}2PE%@#Dsvje8pJA|Y8qBCPB_2MiVOE|2VWs$(U;5lJ z004MT5_Osj-S8l~Tr9STlo1b@$D_92kYp2X8_d6vYUOwgfCPWT;Y{;>2h?mom)#sA z8fYYJ3dmI|&&|#f+{4|M3&^E_Y>gG<5;5bx5mO2rNwdxb2pCA{h_c$uGk`swVl`QnOLU9psM2eJj6iPr?fc-_ zQ&tZ59uZ=@Q3?&$RE3nde%_w8C~Ir6@k2?YASp^qf7*E&MOhqejBiG3xebF?OQ~<( zf2qa=wE1yUTCr&xvw*d()^$l&&e9UEB1=Fa{y$~gpoaB*2S5UXV8~$qPePRi$O1_I zw+a5&AP{B*>G#|JpYi{3hW{!867#>){|NiP7MMf!U!oBBpW^<*y5GXO2>|E=$_}5q z#9W;nL7N0GZ*QnSfBrrd_$v~Pi;RLIAS?T`x3?EWV~dK5yZQK`rDSS)T;29nGc8*o zc&m*#DB|b0Ya^IaF4SqZFIT=i3w0?WxpDElV}#_SS()f}0tP;3)@ zh33nnXSn434TSr#$^u{~ObWgqY0`yL_0ynI5lGa!YDP5noz>FrEO52`yvmBQCiVbU!&aXL!i`V9r_yChaa*zVA8>PbgfHU9nka>cb^Q} zA8{*Os!qJvPgZzz(d3QVO_mPR+?lnG8yqYTad$RlbtfNKJ=M8cA~;7=(uJ4KoD-f- z2+UA*1p0h7Z{5f>Z+b45LUSLje31bJO=R@!y0h*-o(UTo8vbT+J`@Yuy%cf|5EY>O zL=%+OBM0q7Sn|GM%0`qLUXS}pvY+#Bo$O&e`UiWh0S)`Mhg{3=VZs6a z&UAWRlvo#)vX>lsypNd8h*@_FR;AokXf4Pje$m~&U!qpVW_~{%Mk{&UaMsg`Doj14 zdn@)b#Gw`euJElYfkiZ3M6^Z%nw8m;;~!W^gL}q%2k`tw%auGSR4VN%7X_O^y<0@Q zM%t{m@w;)w^l-}$?74kfZto>hHBe*+ob(gz%-{jl-jmh7LcqqdaN>^QkI9vXlwrzR ziG_p>4!BS2ZC@ivU=?u3hyGK{iJnk~h*wLl6`ix~0%cNl7CE-;TkbI>b6 zQxfuIxtcOek{Gq;tsQg*?85!40NkEqO1(E46!NwrSd~!CZ%KbaD5_G$S)){1XLdTT z8&k>p9^z)?yAt{Hy57Q{YLXHrUFogqyIsoyeSu}oP_c#~!hmfg+| z*Nl#U&0avAw5$P^GWa6`+fhaR*qlC^N|+^rn#n*Jlj?o~b%*uIlg8yDv(r@`xC+#C zI|}ghXYq-fAPKtY_-3!K%a(~fCHMxd33)L_Gi5|yIHZ98-^2SRl?aSw12t^DLPzGg6X zO`SZWW-U~W(<{mA9@XvrVk61!33K+HTp0+W_vlY;S&0O{EL}co(nXUCHgM*4;KJ3z zNtS-X2~8PZtWgE`0Wx7H!?QQ3UE^(e1}LZ_93rQ^+DgV79N5Lobjegpg&*5n&SAZ{ z9*PgCpXFS6!))yJQk90tIASv$Jaz^z`gSf4B<}%GeU+P;$G1$Tt|veh(wk`3fJpVe zr^0JqN?1F5hkC7iI^2`qsFhLHduu@{FL1BO8>4H%mf3>2u#-;QjX|O`xTODw_4)j; zWj7MjoVf6x(N>PZw^xyuJ6QsCrZ&R+_dL6f*N}?~mICr_J`9aFBdp?$G#5bbmHuV4 zC6pQ&n|%$1qa|~4);k#4UKvj{K;f3&E)K#?w*DFxgM&o>_8Z{#r0#pozAo8!ZOn3D`p@i;D~OLvF9swObs>FB`cZ=h%E{(6t$ zb;b=y)%gL6ubOpwq*|5H>AQb$pdSmQZGS54zF`_#FUhfZ;$^U1acdjb9J)5sN;$w9 z$rf3gbr5wqG~(L=&du0mh3mN!`n+#DxJNw4v7bzrs^Gm&ruAgxYn&L?Cx2bAVzm#L zj}wm7OqmX`$b|_xvcv7o9=B2BhG>`o9Xc_?RoU|q?rkediayR0J!edyq;s`BOU{N^ zwK(;(zTrqJ>pKjGJ3Ay@7i;IIHhbZc$jskkuEIbp@!vbCPe2Da0u7lnV_nKp8pcy^ z)>s*?6``^}Ub;_g=%eXf4&EQqX-u=D1_|1}#d9}dm*;4x=y5Ai$sG`4R5PfnPg8RJg z!=WX!-s(l$Ii^_$O*UM@*Juo~N`T@=AAe{vSkyeQ`EGV%j_;jfFo;7R?do@>HOEf9 zO$>fsBJ(Wj^d4ol>FRvb(YWY4pB3wBQXPTzBBAqY1z&6hvFn+Ts5|TB%$f6G8~5bA zpaSvc|FM}+IyP764>S^dzIJ~J@}feJ@RaRM={WHp380|OC}GfK_U0I*vK7oT4jB@8 zWvJYqybEIBEe~8XYn*h^`}T5VPfysB#xK$8y*E9;^TdxX1(3`dgdxnK$@GyF;*OPv zoLDnKr)z>}Vi7aX7wMmRP!5F_^>Mc(m$FuujhJT)s?3GaI@Xx0IeqbvYE{E_It;Ko0 zo5j#q;Xgf}eMjebJRbKiAVK&URoO#S<~I{nUn4`-Pu1iX{W*^$$m(SocUF7PCjOK< zq%%hDzF%X*EJbIQUyGQkW6LJUtfg#JW0`go>k zH>;lk#z=a0UH;vVSTa-eA2VJ*d~nv0jv6q}^BIo!JCb=H(ua0ae(=oK7Qgjak9*Ai zqjF)jj7!5{^1+S@t%e@#e!vY(N>WbO409z0WJfM7xt~M}+|-UZ@;rZBv2i$m$9w;L zYB_`dIFZ$KAbi6>rLG4Tbt{eyo2HrBH#_M#^*e3jHDxOJ3J`G~(bY(ZB#GL&}3k8V8 zcsab#6?OrOfCedF( z2pE7=Fyr>=jD2TlYG$^x`fYA$!kC{R#XU=RHPNAAE_-6hoiPLyD#6eeg3FSvMVJ!W8d$ z_28S&mpvCEuyK5)+3zJ4)*Y9+pfjG8kXm?89!v|0y^f1G5qB;BrMVknpEA=7o*i2X z{iBsCe*Z4A6Hkj|e1KkJ&a1(*Vt}42%IE56h)u!DvVJ?fDtMgJF77ejx<$5fBda_4rYXTM+04lW#) zE8tKg2TuPxSfJguSsz9brYB*>8mj%yO)VO_zYL4^J){@MNGJ zT${^P&;A+fv-u$+HY^AVZTxD+e14neZy}dBG53O~&o56&ogEO#e$pR*tyKLrKWj9i z74g)rcm4hIsa`HcnEA$PYKw6v7Sxhj_)ilxG^E5N>Wf6=#VZ_2tE z^%>B{utuB03$HUiE%uR;ywz9i^9J9!SDc!zDbikQVH`-*}f2 z3y;%%{@3a-ysPIb=h*cOprtvL+wP5%nY=#4vK%c_e3jF^0EONE@f_aE;*M|iMMGO-c>9yw(Z{11IUF$nbDquOl^v!j*C0Kd*yAW`fKUfOIkzjTCR9Q zMO#HnAbVb~C}Q8`)Mrt`c|Fcpya)|Z>x?#I3D!Ke522GlpO`elcyv>~doA*FJX}Ut zv3qiOa4RHFnM`+KIb!gDAE7XJa(=+w?JB}&&H$73pWnkzDkR;;lgsyxXC53#JTwKr zguyRfqx6N;(6XnxrKWhiQeI0i!dp0?QaBk-mYI1jZAOkuacU=nqd$wreDzi(x!r@e zkW|M&B$#Z*r6(KB5bjw^DXtV@)=}ukWt^DB>uB!M8B=|n9>6_lEuOi)HtbK22&?nMj*BnD4&13*a$I|4BOEgA~{Fi2{hJ7$Gm1g6=brukvbQreFQv` zh>GXDT%bOjJQzM^aXzk_XTuS)Vbrrs3inQmEqLj;<;OEc;1bV3|I3oJRSt0wmQMAt4lW;bi< zHPjOm${gt;Ye)^_r`c;{sY`t|;(9V${-`2e@MO}**YSErPCAHmRLA<04O-8RQ6E-w zR7GU4X3TV5^JagNzCzP7SS_&#Yjq4?c|U<$1MS}BJlF#q-{?qlQ^~7XmWx&sYn0ApQgIOCEr<*u^e!6372h(Xie0Ka9Q)gT?l z7`c$`zznJqo^^bXX(x3rY8Lyc55;!GV(5GyvuG&5q6-A+PAJCnN11sV<}s=EMxWPy zLuAYrEEicoL1N#fsr^(65(N1^z9$}XgeGmLZ1nkGi(}6ns1`PCXD9~EJDQiI)FUFG(+ZJwKza z+&7w_)23dMkO~thoG#8`VqKtCn32UNVye@!k-wT^p>a;3RePIN&R}WDf)B370_I|b zS_Jkmb|lhsyO%1jSzhL*q9!c!jh217-M=|_^LTe9_UH0vwa>Y7Ppag~^t@cVR_Tgw zgb(+RBMjOQMJiJ)F(21K17IvYMzl&(%T- zdLNOi1N2-nB9N~PYtcd0@yDpa;Kv_)eEi(4q)YBzuA*HbvNjS$c^yiT(w`_OD6bcy z_{of{x5U&!OV6+XW(Grs$bveK34H^phiQ2vzQ%jA=P{zns>OlwB%bEZHg%|y*imn` z54aamqv>_{iP0tT;@AYJoT9e0v{hlu{n zf|#<|F9UbZX6jK@>clQ42h(kvuSalLJ_?0zG2VA{V0w0`Obrc1AiC7kw&X*F@?h=y zC4NC->0|=eIIY<>lV7L8Mi#gf<_EN#qQB75B=g{7xOgTOI))Y-%!lALKkqTh3U~cM z?Q-`bqoBm4*YqKAxecpPbNj^@aM3cwJm5MDZz|u}5Tu;7D~J%8fiOCB)q)z1POaa$ zDax`1W6;*iuPlwx_fGE>vk=0dJ4wJHv*~|Z2$|^Mc;iY@wek&CIWv0LwE?^yt(DQo z=O>gFC*L7GE;>sGkrhr?IvSnVr6&ACFzQOlADykV!6mO+dhXFP|Cn#MnGS?$kz1IJ*WxMiffIAJWst5@V=gxE-B&1+$mt_G<2fB{uOW?F2c}smS zX-#@3UIG#Zswb)Nz9-l&5g{pji$=H!_%uI2Jp)1wqA|24)vh8#0A7hd{+4A zwA%co6<+uTiQ<=l>PZik0uLBfD@_YxUoa zs`=-kgx+;dK3tOm&{XtU?ZI6xx&9~-woQRt#=PKRTRyep(Z=f>Y`60!Dj#=nFP$CU zVyh-|lnIT`T1b54=;;0+PjWP$otyx1WEsclX&~tF<}6cM?8FYEu{#hYIshcTGZ-BJ zWaZUg)a@k1DMv;q-$VAP{~H(_6lCNk+Vd6@3JJN2|9o6|auvk|`|kp9a&vQOEiKNv zC;(F**5>8}G&Gm3R=<8FCL|>)s4Ghw84)uxGfy3CEH6KMzTZ;7hK-VwQIK}mV2i0G z9;5t#f$3Ds&Qqkw?~?AN@7~87hws_k#BEgn2#~FaU7D>>bQtjAMUax!Sn`)7@d6KX za&j^>A`%D(s23O-6~!lKKZ%nGP^$+Js(H2ePm@kq@)8OT@6uCGH0~P0feHtbi5oGb zoml|gN#ccu-$Ok!#8d^)q$m(f&CSh4rKL%jm=czkRh28%2M;IG*PxiXkc8Z_;&CR)TpfJIJ(fI_W)heCe!YDrTi&=+lSadC25M^_$ zFeBT<_~bzLiojpnQJ3}^f(mr4M$9BTwlDYN#i2Ot$sD$-6f`k0LBwY3X>~Ya^L}T$ zyu7qrZ$VBJfA|LY<&;Cl=Feph!ALkft>~E=N6HyH0-)uSE0m8-LXnYPG_YsDjR$@O z=94GMLd&P#6U$m|BXLjGeN@D?IMTUr{8OFtC`niPKW%Sfn%A>u59;1BH}=nt!#@hg zXrTo@L5Et&Hq_VeJ>TrPy1LrF-kUjJtOm8WbHWCJzI0`LX>EzUOPun^O=wPsXaJcc z1?qB;<{us&3P^^Lua8OayZj{ozNRVtN*a&G6|I;5Kp`u8sTq^ccwDsWXGH~Z3z=f! z@NcaDmTm%BT>2T$oZ>K5w4}3kbYVlqH!(NJ2XUdb?Jz}(!h(W85K$E(F4td>bPzW- z?FA3z89z$*x4347?7GlZQmoiPYA_>z1xqrp@7Wz#GwWRY>B@VRS1bPrcH3+Z4_? z#Y$w!6e1X|iNS4AJ}vD#0JJBvd5ub)#-E5cb-hB)$dDSby}g|r!9!V68f(FG01Ki$ z#ZojdFvt$4Odivju6OhC5tptM@Z0r3Ayo%i3EsEC?0k>{3TBr)s#GZwKZ*W+By@m^ z4fI9^pz~IJR}b8zxEZfs&*K?rl#NucEGjJ(J4O&!z6(oij=U=TiH0ks`UgIAYN({xJ2(&morQ~yjm744hS%$k;+B>K-}ck_Ns$|Pj^7cawtOxaW+6E6g8X+$mJ3Hz(hI8S^( zpR3@gUNGpL^H83deyxlZzKP1qh8}EaaO{bC`FP#2!5b;g_MSykPPEM;`t80%A#WhP z*JRJ`V$WdPttS2N5oTSd{(JU^2Dq&TOLl;?#!A~GipkL=xb9r7X4C}3!DwDiVJ`=ks)O^5A*&`s{lo1*SK#fO}qhZdDxR+ zc#!X2nDMJRc^7;E*K4L-fY%QNKkPoVtxB*i&6eM`-!BBJDmQ+d z+LK793Yf|RMkZ>OobX15rEVk_J5H`<QgLs`q>31JnS@`gYwoSvNc=+WW#A5Jz#`lavwtM{$$%3ZUy}Ov~-09OQ%Wm zc-Rtd$y=}{<7(LL*~uJdQ}JEA`o!6fH8t}Rf};inF+hfa85u#1r|8|JHCJbRsLW~C zbq4M1T?COnMe^6SRvtj-SbzNaV485zoBBj^|H>gt1jM9h_z95gyygR7^Db?V%Vc{R->b#3g&>ffpu-m6emj zzmF>I=y;FZM+V}2tsmFRmjc`&K)1@ylL2_~!cGsxw~^;F3hL@GN{EQ56{gSd;0Har z{H)gMX6HaNU{*=SR*KLNQ3LfFIu5dcp(^OpEo{6HqPu4=a*!NnWcJvPC~IP6H} zCL75@r?I9FuI1A(6RMGfARr*@9URuYmnh*%tGoED9x2T8hmrBzaBa3sqp*1jT5rPM z$pt5u^0ANe>M@4>I$Pr9hg1dt4X~N!3O(m@(@EvqP#$_D$t1>R^S`VwF2M_^%{wDhQ z8%8$j@9(%jfFD2ENs<4^BL0TS&2X4xKdK-+A;UiL+~h?RgIY7dTEjSfp-*m?Juq<7bpOX=WcejpQCcPapO@#{d)-Q(`Y%EI714>dzQU;MmQYoA23 zIIlfstdtr)vWNO;qQs^p;K9?OK0f9 z1N)7Vz5lHFwM?mpxnHZ-cM>IJwdqhFdz{aa#=u|VH)0jNysg3iP*Qilj&`35=TWof zn9Q?%#HsOvAf5|d$Zq9VqHXjMVvRb(I!Km~bv~J2sxULJKoUR6ABdF4#7d5bSxX;R zTI0+9Rvwemsf>Q?pH}bhTroxmau^28cH@Ozbv|vDToeVHTZ4ErAW0pf)~JPqd7lW| zmfil)WApK>Ptg&I7W6wZH{)NJLgX|O#hR1DJ2!lr-rN-NDc)6WHw=8eS6yvu&#BHx zvnJp0n$`r!Y=FUYp&y0j_4k)vVuQQGAVmu=R$@dhuRsv9i^=pi+~3df-X8MN6KumW zrSfg?2aD`CIFFdd@rhZX>qx4Qa&cuG)T7z*TXAgSdi(=o8g9mY9FNoep4HB-NRgNy z!=zvK3TF@lp3w%?>2CldcvB^<_JOb=XR6&x>5Z$yY_A7gIoX1&_J2E?)8|g)`HPmm zhk>V7J`*XU#;Faa(4+n(uOQ{B4x|5~3+Y()D6w+c`#T2Y$>>BtqUCi=+%kF^gl-|7 z-%H*YZW+n8pIZtEwU|Uzrx+xyiny-BUGHbSp$UX3f7;Gem6C@zrb_1*7o+q(sq~~j zc`8V1*ul{ev!otKbVg1{nIae_LNV{9tU}2iF!#I-Nog}g=t^cWa2gNkME~~JIuNKc z{=2FsDy9N+DB=Z+KIkFvK!x$pXPkg{Ghop9iOqfw8*hBwzc`t<9Q_OO4G!rC9FpOp zFl*AdYqW=%yue-hjkq}pS!Wj9lfGSD>PTmU_F!vwZwCs+jdTeCQTN+PS9|Tk7DCuo z(bSRo&CD{ns$~PJ%Y_V>kj>Ux2G>#8RRCSs*s16w=pKp6*!S~!xf{vha-Nd|qo)N} zxfmM^fR{qr_20^EZ$r#glCu@OfCC-Pdi$Y;`}+@{{xDH2aHPjA96W^4SSHis2d#b^;rNWG`(`jz&04U=YvYi+1x z|8lvPZ3F-Js2WX9eN$L)c=_JjloHu_fpVb}0X$U)HM^oqxQkcAO z!BfL-TYkw+Udwi4#N9~*<;D2sT?k`!#GSUHYX!^vfi0(1VzkJFV?>Bzl(HfZ&2_1< zuiUn_#7Qbo+SZzm>`X*)+0|$P<@K=VR6wW2Z*osT;*m3nKeS)JH5|`2^}S<};=0vM z8Z_~V6B4A*ep{6QCdkAnl9D0izN^@(MLP};b1dyW+BPXc%U6wL^v(Qj2u=_TZ z!a$R`K6OF_q$zH;r|E!sT4wN^O}iP#Fii79^^P^GXp`-w3Me0+cQFo5BN5wqs%cT0 z+*szQP_fumnx3%6`lY$2;rcv{^)Xhs-qn@d87pL3;d0=eLfS4sJ zh!VH!b_z(VHmegqr2u+EvWluNm;9@AEzenA)RgeN*J`rSk`Z!4FfwxTN3+2P zZ0wrbBG3-q$zhAXp)8l)!HCT6(8im@VC;@Meh{jzS?lLkLO1uru2k^Grq4{Y1fx5U z=0;8pb%uY8Sa_CoAsux>VQ}gkE`3coVowx1kfIM&E{}k>D`A{>_g4G7Y4kB#w4y4E zHFSSKtRZD=Uo)$qsb(E@`n=%u4oM1o4bBjW&rIC8AQY2-86gNeY_ zoW^EFerhmgsan8i;tmk<(67;XU_~tMdy6lQ2RMhAy@u3oHl#wbSg#{e4p?sxY38ND zz~Ad-OyW17`HV!4dwNv-J$cC67vy2n1Bud^I{VJ#d(Jpa$-?#{GIO8kRUP+KPRFx*S7+TbD|QEw8Vp0 z4JPX2F}HWoCwI~TBP;p$*0AJ*W&%9(7H9*W3eTEOYE@pb*{&yF| ze0qC5dc33Ojpx#LX9q)b2>PW>{?IbiX#1hZ!V}8e68OJpd+VUMg0^1}f`#DjkOTJOg-H_kNzJ1 zt=xs7#U1Y&q481j?o`My5WJ^r=3cbvB8eKfljLK1W4Oq)06-sA@~yW-^u{B@-&UK`iMKgN zobWh&qo#j}p@f*%)&CrN3!hp-(8)A!A60@Rc}jzHpe486zhC#!}Zg78-8pt=PCKDPdDwID!UNVxHCoSLQ+|H&p3^} zeMQFicGb_;f`G{5it^yp2Vo5c)KbMlORr!QtR?0wr}HeMMwN>mATB4u@# z`Q9E-q4>=xmyt#ub0f~)uxE-=&aA3{>k-$Zsqh?qq^X|BfkUIXh#zx;DAMCx?Puu> z4}Q=~L-sGPtG$JvqJ#$y-VuZ-n}c#0^`X+Z3Uc7>{Rp0lpIYLGw=q7?278!4>&Xx! zmzI|PgdYA0l??9wes-DS{c+@MWAmxxD6`E*5W?^nhXZcC>@ENk?Ujt%`1bSlU8$G7 ze+>qIw{3seQC~J|$K~Go)va_8j0S}!J%K2MG-d^qF6)E*pWGLOmi&{NjtBQVULH31(ROu8tm1yNm~{wB80&i(pxjEgq}_Zpu^ zeP^|JFAAw{MXo(IudfeRKKS6v(^>1=LkeS?f9UUe`33$(J#rd3LG-irK%>ST#NJk+ z?s-;C_hqMsHKzTJ#9e&%=mhqv`XMqzXh$c?Xn1gPtQ~`M5_lmw>le zA01Ae5pPPh3b0{q56pcwI?$1?KSpU0EwphoF_!?uZ>rYfq3*D%7loMX6Z-&dzvL$v z!enkaxAgJEpY7210+kc%MMDz0WVm8+HnFs*!0sk6Av+M1IfN$i1_dCwF08`29BTHp zrv|ogVc;D`3@XTGWbj&8oMSejE4`Xghh~>xhi{lmcuc7gzXi=Ubd4>A+_oF{CK(w- zwX>9x73ViNAi;4FGjnn6C_oD%QTdGLQ=xpMFq&0n6uRz1`#mjU$DYxsCSEBfR}n|4 zLetN$hK)qpx`eIWp5$PezXiG5=b&htDVpa|Wh5URohvf!Z1Q-e^8(?xmaH+=7LbKk zl#PK~Mq0bLgbV zgx4*pn~E0A=`|MzlUjeudqLmgWy~O05LjVstoGMf7qhGXaHvNQoWA@911I;I)uJ-D zI+l`2NxXF-t#>Y(ka;G3VmsJh9rH${UchFLgCnf9BLAr~4+s^F!hl$jTG%`D`JNKq z1x0xOceJkFJz#pVq)2n1ShbXzA^f{5`o`m0q3NZJhBKA((Fvyeb_hkEZ6&8TYh6ZX zD5=4)3*D6W@g_-*7@^SLxcHo}Fyu-y$k^hL_zq)$pR=C)!@7@Eb>uuXl8dEFVU`!v(yy1w)^ z6_QgD;^lI&);w($nG91DN>W;SfIUZ#)j>*|=(@*c!a*&pF`p4&?kK?LM)s|s2EH~0 zcwU>Ts)inCjs=^&D!*n-{X)7S(ySBPvM9bZwJ!S}gcQtmw7)#tkJBrKiqJ2gh>|1_ zx>qP@k#OJOolPk*N|xVx@->K3Z=)vAOr{-|D}0h)H^VcZ!~%|U)oZVL;#2R**Q{9H zofaQ9v^QNT=$f>22S=r9WdKnL)5rosEZTm}q4xL<#AN^UT*l@|$I%NF+Q)F?sn5%~3xo!PZUhuW!t{7<|-^GlhSq zkv~+`A)Ch48iPwEbhY=H8ij)ZwiS)lG==s^GSKooID8#%EQux$|JXSIZrm!kHQK?j zR`52ZilV+fP?BUbD}vZ)^<1+`%M5~@A`@AVUR*S?m}F;0!!WYSN1~ma?9C&aIt5*J zh0sl&&RwH5;%&--x^|T>3t!X8weNSx&(N0>b^S!lFKnfNf1AAckM?gt1I|P3ws4Qna0qZ0N-CA?5=*kNzFg{JldB zcZ92555v{;o2E-wURu3&T2`eQTip|#xV?#_Hyq?;+fy~>DdWQ8stgH+hsVs;RTM>I zY96Uwh4`CqV_!b+>*G=Jkf-adYQ&<6%)9+j-RB~aMl!q685TB|Ab|Z6k$;l9CL$IPoOg#iaN~tI zd9`b3Muf(u<(@VxBBekT*TCnVbZ@i0ZUKGDuuT-H=yIQex1?QN?~)T%v&(&RJDh<2 zDN>}C1iM#Sw88K@Sx(_ss^8#u=%f^NHY-Hl{3}@TZ_wiT`uNy~`lm`47FS||_(MvY zj_`c;!pG{2xdJ@2a(aI-V#Tq2Z8NOz?c-DK_kJJrkHEh87bO*Nkw)HN5ZDhIXyt1l z5AUk8Hq!bB*jGpX2`e@+GxNQ0EI(LmYnYw@nc$x!zQ6iR3n5~sGU+P-9~u>wmzESx zZpD@y{AY%wx?nczc(aBsI&%~UZ5n$9C@U|7c@mT8pGBUbmQxfAQxAFf&N>{pU&52w zfY<+$pi@#Z^C@$15|6RG=a9SEwyH8a;`^$t05$0f4CLO-YPmvw?ID?xD66|J_c8uP zfE{_2f@#d%*355XC~Hn~u;1aZdzHznPXRiLFuc-00foudV6<)9FMU)W_2uT6mdk~$Fc34}k-LY7z^0wurP!7)rgR6dPtf4q9m?FyT3mVg z^FE!%G+tC{qnzb;%#LPsYRTJ0pQw6`&;~L|;LfpUm$yDY&KQD8^%Sa#=;iPC+MMSRi=C(q!zfpI2B#_-2-T z#bMOx1NUUQfAS@A0h8VL!j`OLh4_<6cGHtLrcaDbC7&_W*TZUS${3$nk0*%L6JY5W75DB)k2pHX%%yRBUM%_~R*d-4WjSf?L1gTD z5%I;D@_xyX_Jwujj3lH#17=}an*k+Q$b53ZqjU3j-(QeQkn*nDc9GPtMjF z`20FXTy>vfeZ<;fTOqrwOo=hrwQk#qCtjfLh1}KRjcPapH0mNw@?@Nt$4ac9d4rG`&iIoTsX+lqh4 zJub3*Yn@TZl&px0%36WD5O%O+*CN`0M*a!#4PBQ;CJFXrF4+%hBE%RUj1U552Cq(# z3Bh{k{2?2e`AcYxYxV7dY-jE!s%QvUKI5kI`yYJw4bt~9Lo=74o>^9Eo)uw zst>Xqx!pz`5?)i6N&MEo%c51E1kV4Sn^@G5N$28Ye9e2(waRbcDo_NQ2N-F~QtiN* zPW+MYmGN1UxYX%o=bbS?d54bQrr9iNvnTy|b#?VI^7Go`?YA^}9H{_iPyxiZz?YU< zuZ?-F-$L7(3fcXuZI_hdFeZ7((X|&tL8? zIXO5Of&g0Q*l}?@inLOmqJcEMpjff+99~bZl^uWK{&hSnW9dmIr++h`O`S}gV*?C# zz~~*YH`UMeg$1oeIk>TxXeCT5jKB4l!L4X&T$7dBSJTJhJJ+;0xskLBC()j+dd9Jdp#)Q6*+ylcc6~$$K+Z&Y@1tM)%Ef6!d!3&_+=ba+=U0-mfoktjKAj`|}d97MF!NPR%K`j)w z6&jsO*^k@OGcdGg>JO+CI(LCPnH-h%Vf&z`MHWgc@|%EMFMdyK$8txr3}ipGrvqoY zfK5Gs;D#yOCbeUXTz$Hnie>yr#?BPlJpy`4CZ4lurcoB-kyn1DS1)#ea-fOWU6c+=sB17|UtE> z=YItYzV|?5<7s?PMT_El;}cP4Or2j76jsed?j$K)^>~L)T;vi!*=ABRsOc#B{9E-` zUbql5ED1#GB9&=PW2*%6q@knF>n5|BKypyxgw4xq`UHPCvn}(}l7T!Z=xgdX7|*lu z@+*A*c*ZX>73B;}2Etv-df=nmif7|^s3j!MM$1=Jq?TVlf}-s`8`wb*3(yc ztYof-9{i`a*3oW-yLg|6$y7Pu2HsXOzYM3a4zqqrj?)Egc6q4ICeN)%>iS-5tHq+A zpa?16dO%{=3tMuzgHLR^2bJk8Bx&1o^2@pbHeI1t;zA~Br%#(r<|&t3 zrTvkCQw6Pu6fEGT87H7u$F}>Mz^fwNQpn8md?9Qb=4xMhlp8d2ZspTlH*nB!K#_E4 zUzy??^fClghArV_0#ygGf@1Fg2gTTxhT0?e_hJ;k3{$7Ya3EA%%-PbmFvYkDTnX{ljXnBF;C9$!$_L9Q10YUUeVr zi8df>T@H1wZWTWx5S+6ljTuLX<*Uu|;F#IYx+pn%V?t55N<2(#eHOzA0BysrE|(RA z1&98!@`U)8J9Ai9qwVLJL36wlcb$W^MC!Y%qk4{>PO|t7$feY{!t$mSR>+v#qXY5S0NrMIP@Jkg!fN6~ z{v_7K1R!7`s!~QtmH$aXds&UpAGrN)rGudU@%y`8_<4bzFT*WMsQ6!s^a-W?CVdYm zt=lhdKn!bs?=RcAnLxGv%|(F)URi}0%3r?+TcdKAc%yLCr&1e}WVOh|_wD9v;8 z0@D?ZuJLPl=6BX5aCqnMQkR%k2gO|zZLFKL3GxDNe3CxQ9VSLTx1^XSYD16t#qOW* z&%E#fTUH4ZYr<=j=rdaz;%?4F%)(db$ZlK>o(Tim&SG-($jEbBb129d=_-N5QW1(J zAJ;)d82Kki7boYEYu_$Iu3(0#7#cdJtUTAjpV3f^-QDjTVtQ1Ba4X9l8K2W@p`^>H zv|KdP{k*AVIw-MC^(h6ed2eD1k#RE}&(>}g$p0#_I+?v_ji#EWGf>UL zVe31SI0H*M^!v_AgN=Ok1gY4v+tOSjT@fcN&g_ayOU-|Eg`PwmEOF(VdnDF?z<>)E z!wWCJ{^~Yd+2&^ExzOTb#5d8&swF*zH8@Gmbb89t#|xVET-eBpii)JB)YD2KryV?$7+4 zA>wq3iJn#@Bib4crB?W=3@|`F-=T`)jJ8tt?rSBGf+FcXhV02jh>Y}#1Fcau){&;0|6{B$!-d~sMhP#3_(-yc+J^tAgY-o;|eF4SH z(LtB@M4NA6W)=$Bpz{|gM~o5~4=My5!CAlA&iSx|r^nQaijDBAKuBV16n1oga&+tsCU-{x0WiizbG!Q)Lczoeti-> zp19Cm$eCsIU1>o{{!f`;s+UR<>N~Y39sv(l72#_&5l4t6Ns40n2-Ve9y3J=Pc>aN~ zsfc^O!;kb`VP0y?yMg``%Jm{{v!&_KfsYv)D$W|OJY~%C1i`OY>4t3MYi$*=f8L6$ z`|+bH=EdYNLc~UwcYF<3*E2DRQ&a$>TgCkOsTE>LB|~iNcocSWlfg6D$9Q5pB7`j& zl%2Pxn}*kfc4gv8Axx(JbBh$Tm(Ax^R$eZ)MqOOl6LnM~v9>-unzD=;xm|>mTElW! zxV`5ibl_DQf8>jglv!y1I{ZS5EqbXhs^u1(fKLREGRnl;5|EH!bqTQw#DTqQ0z zSdxAqSXITZgJEM+Euiy!+IiGxeaN=F8_C{XV~}KT)!nHHp*5>WJSm7l8`ZA2oQ2z37mhrg{*^;skk?~k0Q8!tL>XOqL1Bf8V|9ipatoe8Z4ISWOo&P@yQno6Lc%< zOv&NoZVEKk)kNN@f6ic&!gtgOlU{0SL8dDrD))nnDZ9~mq4D1Z-<-F(RI z68G@Tu_vU1LAJ_M_nXuy zaTSur=V3#^Bn5Ktj*^cCJ~OfJqc)ueRnougkoG^gV?5Xvd0K%qwwC6f@lVXw$Gl@{ znaCfSXgHV7+6YL3MNJq~OYKKJhQDiRYfJZ9gv2yM!gi*1bniU*V6gR^f_qRStE(@B znVd8cW<;%IJ{1=;O(|bZ^@K#Wa9;b3YS|njA}W5g*4;t%t?sU>;Fj;&AGz=5+U!|%Z9l-^?uql#ux2L+(hN*4mGK!utUEz9__Z83seha+vI?u^TE-pep8_d zE#Jzf2bh@A-wN@RGdoiD_M9Fp<){{1>CnIj^qdZ6BYxf@M>u?YQBjsO4;0?$O@a%D zTk2|`U|`0&+oNXoj3{)oHyZFIPp$c-)F8|BEN^9QZp6PSWT}MKdo$?Nw(@)V!7#Xp z@|srT6HIv||D=*47oO-qUCUq41iBwlP6!5L!KzD%QLTWd)^p;hq|t(3u{=ZKhx7mT)Arq$&#MG%Ng$ zmZl&A6Rxwe?4#uh!#Z}MD9Aihh42==vCwU$=+%r-;9ASuCuKrXm|pTLWc==Yfc|!{ zO(I-ZD?s^Wbm1V`W~p2h|{eYL>;rR zxR98X^yAV2qSYk(Je)A+5tA-tCnP*4vslX!5#9TFj#dR|ym?1RwKI z6hcNWWQeALRvCw?L?#V#R!yzFa(LG}ZudJ`MaV&zQm5B7oBSu+TN<5LVb{M{i1%LO z5(XcJZy8Nh{2wYFhZW2)Ax9=sDf$}fOWZjYZR*`|<>XPh!91eM6T7|!2MIi&M)IU9 zEScHp)+hd+0p#UmjazZrufqSicIFu@mKxTuc4ixXnbGF5EkJ5(-b|3Uiu6sG>wMt9 zA|2QOMcaMd+$3^d-%Rqd6P##t{L!z zx03z@4kK7EsOvnDRxprLcl3LR8bhAzwm%rsBgV znK6y@fzrW8iJzIIzBUl4gVN$ox2Ol)=u$K{&tCWGN&kD75tEW0J?Oe^2>3YM{_EeI zPn|!m{gxUP(xxvUXmi7OOx<6o>@z55AS z)3rfHmYO_s@4i~=T9%f!`R&CaIeLgBB-w>~F)jynTYdg7SB_K0RF_E9Um(D0Z>)I$ z6)g!ZGw9WJO0iM%-&q+!V&C(-yN!Q!Wz01G2~bPqnoT1XRas93pWzn*n$XtGaMxHlbGP&XJ=&F39QcQyg5633=f|VX^g-*VcIrxs&?e zxrm)p(HkwT4cjtKtvb$m^@rj^8fO-><*Asj5~pXK zfukapd_f%F==uHzML^i|D?n&Y4h;s^`RuG4x{|k=mF20wuVN?>ni9@GO61WwqGzs> zXuo5}a9*2xY`k^5Y4uOzk^o*;j9d1Lv0kGIt--^##e1XXk$~Peuzp#*IT|GN(4^u7$lML6IYPuk9nY#I&;)izejVB3|RM$ju}O*)b@4@NDhXmms+ z`g+@jnm-jeTn)TJ>r*+y&OEjiC-uqtX0RPvoVBcjc7XZAayQ8uXL$+V$+XspJ9c)- zU;l0xf>-*&OD$N=kfNb3DoVL{AM;C1?Z4%!`toEr)%RpLw)bFmAmJP?UWR?#Pt&cZ z(QidbTvGAB*kLdst{(mS*vdF6YqvO;kvEYUf261jzMT>>^sSOBxIneD&DZ8$pBEi}%< z>-;)9KmRc-^ciC1+J=P~vK-`H&xI7(o4qqO<|RwnJ$8~O2Yid&`V;`pM#qs2#? zR^<2`;=cGZYz!eUo6V52%!0I_yE078Pj}j}xSWD=^T1d7N?W((KP;e#{b%ftf8~hq z2%R)#gl1DO%p;6~;Ox1LmqS+Ny8rHhip{`9HnQ92(Q+X;niG^-x9NM{NlCjA{a^Tt z-O@_f5JLa&m;W^W=llQT{{PbYe@ys)Z~Xt7HRL}GI;2qi*Xw_MEh7mDY5fll=YPuo zx$$3Z$mRcQ{eKzj|MC0R_hAJOZ}iH%wds*EB5Zdn=irO;>e!|RmH+-;wNf&wWyISNkB6iBQuBs*Zv z`-g1HvERI+?e+Eb)6;XkVE4W__1`eu$mROqGfYyVqN4UgS7p`JZ_gQ1y1En;KOhSU zu^TaA%mi}Z!p7!xb&4TgDqK}7yt?WO=C73*s{yaH=f}zJF?oZ zA>f7ouaB43gUcJOMnF2Y{1)q|xW(lEx%)#7(%nAV_Ahh{jQK3TXR`ceZAp#sI$Ts0 zFz*Z}Onx3scD@10MMu;jn3doN-A%=5l+bHNoU~V)b*KQt#Ji1(-A-Yv?S2zyNTM;$r4N< z?mir<(Yk2_ykr!+PZLj%Um&p5s3awdpN8+TO)RTnqcnJ}9N`TvdTr@=p^xKy{4NEK zaitl%y>bIbIgwOML&#&{jTl;>mM`X|ULT_xn z?-y53xxL`t*RxUM^lmV6OLGI6jxvY^5D@kvvIX80f}~k^GZ#@WQ#NXgeExWoe1BTs zc5r$4^=0|&wGBu7O^4>;vLB*1$UL*_-?&CS3uOgKzP}OwUL6;5WtN&x`7t&jfGcQ78 zZLe<}yHB!YMm_bsS>wZ((r#;!>v}})YTMJL5^m}V=L}l9$*;h@sstwQwk+&N^yqVb@N!ag9cnu`4zH(smV40akjC9SRxa z(w9-!q&}Zty@k~vW5c7vCG#`0s+W_cBwCe2_`aFiZnLo2o;p$0`aCaU{{!vB1J+!5F;~jh@SH@39Hb__sl&-;^UlA** z)*8(s8cxGOG00kj&<_DuO@N-SDc4cG#)kU0(Oq90qE?4@-px}7gWmM_X?V`XKo1el zM&xF9eeujV_WNgmZvVZsWMSQ(GY`*;m>{z2=kZ1FIzZH8aw^-Q`=_H2)?prf192j= z)fj3`LN>=trV>hqG7_NJaHA3Sa&%*Hnj{so^R{LRzs>OX*8Ni-L*hGsnswBCoY@$U zhvmi@3hhWo3kv5)5z8@tM>ub@6=533tuLvrpTZxldg zEwi%YV3!{$juCQtZ&lGkLYN_%{r@I%qngw~PHRf_9L8N20&+5)Gu(UO3EC{UJQsyq zwYc>(pf$fxN<)<@BM*%~ywiD2~XugUzIt=h|-whG`qGj~du)e5=1#`XHe+ zPd3doVCZ$;I%|ZeK;MyQg27-{qSZMN-Klc4Uir`DddAUX1!GVeOEdu+e4?XY@f;x4 zU02@7_ncJxZ9@>)4wp!TCogV_Q>yFz2SoFOhlikaFl@Eco(wu5z=eauVTvk^gQj)| zE^#STO@d=Srs?@ai54~6Kov2wf)b>~n!Zg#GE`>r`Ami2#jW$2a$JbgMs!Ap`Xn|}gNQNQO)K}f~OJi7pmlWSGgAe&}tGWv_p?T+n*dGfNa z0G9K~^Iu2=iM~zOP(~9p{Vm_@J)-I1n;0%&on>(<#ud(h5ObhS6YKfj%Q@ZY`)?fc zY!9~q6?PQ^NmCqW2AgO7-e(T7i}ol>7JLu=z24p#QGtTY7#yc1um|(%P^`3Br}9I! zv8uQbQNhjZ1Df#|9G98>t?;G?7MXQgo+@(7>MDI*r+-Nl-+qjG!#}ehGTOj@&m*!` z3JFGPGXai*X`@5e#UUhElMfB_MR1uJq<7w=10$@C8oaklxpOn9_mlZ>?4hQ>Q{%GyQ@ zvu0y7)%obI;PagL@ZQ4R)!joHW=3L}ICcB-pziE-O$)~CaCOE9y1MWRqkTDXoAVrJ z0uV#_(wrGlqcXllizWhgQ~g^ixpFgknLo5pQx@wUnizUNuH2s9_*HSYCP(N?i3*!Y zIhUH*ByE3ORkuefa{wfsZ>IFO4!LrpjeU2}Q70!s+LeQy)^>(#$eFT)%6xU15oZ@q zMx(mOPJJy^L;~CBDP965J&QEBo8iVSyCOd>qJ~N^)b)G%H}(A{DkS!pIs*)$JsfYeP;mTQF^pHps#I$yfk)kKF5bKLc@sv1lRY^!0)YNRwqnpf6Q zoYs;BWq>Zs3TIIIDB}B}&?w8H843~6!HNlPW1k%#R`j_tkZGi%1+DNmAO%cWKSK9= zEEFi`+BO}kL$I`%S8t0*mX_1UtQu-cW7BpuY@#~cSa_g2c=Xq|$!<%0kpXAE$`10E z1#p}vTl9iEksK;KBn9!S^8HxfG!jKT$q||oYxJSsriYLQp|A>?^JuxCLE90H(P3<; z0SGmihp+xbneV!oEN$kc1gz|j8T|@@>COPMu#utUPY(vvw@az)V~6@G^f`=}!qio#0u%!83n_2N5_=VIqga z#%DQ8jHM&tU4|gxZEcgyYyvZyTRTfPS9zyz1wEP6N)>!6{w`>jPVwN48u7$x#-wfd zM86k%ft*)D)sxZ|)xI~if>{=UFyoR~juq#lm12Rb&9WdDzyy6S0yj1;tLSvNcxjXa zLUBM1q&FAPcZzlq?{_{lK zsy1le4)G%?4z)7jsys8a^`M)-D`oR_W6TuW$=JT03{qxU$yyuoD$%Z|_rL!RFyV-Q zv|-v)Tk_w!4y%f`>!WE!nE+4EqDuF3*5b_10OWF8cT-gU(C>SIxOMzBOvy;atLe9U zLQbc=WHYqmnGv)HjE)BM7b9vhB#5pcd0M%|1R%q+OXp(M) zYY41t^ADT<7%9`0F^>m(npO7%n}#B%1_IAjdMkQ692H~^kbJxrL^CzDXG0RsWF)}i zyHuazWE_|-1{pbFCdnOF4i8vWr#~Mi!g1pPcLA^uhFs4ghqbT0Zms~&Uijs}eD~Uw z&TO~sH!Qyv!3g)izo+rIUCKh5QCa2Lb@(nYY$z3_$a zO;VYR@KZV~qMyb-Y^Z8bj;)~A=RyG9drbaXIeXoRVIF}F#%a0E_ww)JX@}TadeLYhJCu zT!ZT6*y7b5-ZmJq&RU;x&!`ItVSuGD?)v?(K`Q?e2iG{XxV%KLSJhd3Iy2^b`g8PMPz9i`Jgj5uDhLekJDN2e zq3bZtN*P<=`Eg>_l2^o=?RbfHZDVJ2L`?a^U2>lxL>^PAabX|k!kIg{gxPVN+bqY@ z7|FoLgaeDc`gvd>CQhSjv;}&}jDpp31RRa{$8i6vO_hSE;Vb=7&a|XoHln?cS)?a` zW+^^C`eg@AZbN@){6f7;V1jr)bw?Y2jLJB*k-jH`@@1Z&+!s3)6`;KwC+i{f1H9n@ zX2VH27V$6pJuRqevJ{}BBSX1T+`N~z9cpSp{1>670JuZj(HdDdeTMJpGBZe&Z|7NWl+%AlIEVNF&85^v)I=9}6Nh$W({Z}ATDk@uQRtrDNB-ab3^gS)ET zzH}asd9!<9tHyEdB2-PaO@`%yB%XbR%)F|V>$W09t6?echod=rL%r~xq<>D2M#kSh z8fawoA2+%x$Ne3=evp=!Y#DCCOj(`WXCmxzm+B*bf%SVElsXC%RZ_&ejZS5;vi)>< zor?cFWl};SHOSZ;9>SY@dmM7c5+f~aH~@RJ8LEq%S5`4#aSUh~H}$r(8U;C5Ke_tr z%8&ys~#$?P81jNk2KYnCn4e-FG3&EBd@Y<$w1qX8>h^5wTj#cF;~bGH>!<9Mw%j zSpRlQgL+{yi*}SLM!uaa~Ty8e`Lpgtq?oca%L_IP>rJQ|ky^7~ z9QHR^^#A3KKUj!K1Lo(Zzwa{pY7viVi zfVKRha73Ryg#W0tgyMgjE!uUvgeNDI6sv265vhgsT)C#T0KDA2c$}<559)>}tV2aK*7~_5B_WyJ9x%5u}spJ6b^%)N6qmoB%)laez5$H}G|5AdhJ^ zh@XoQl|TYo>b5O*o7C)Kme{&Ss-_b!FJSh}WP#Ec9QBva^tW}Q`Y&(vwqEX3C8m~* z7NQ-a7gob8N!!dv{|zI<;OcrrEJrckae-MqPf5?M#6eu?qfIdFPY0Eboe!ZrdvN8n{Rq!=9Ox4A+O^`g{a9lZaVxH8 zy*Wy*qKDh_FdFNKtJq8d`a*-HNa}`33`CKS)mYJ7fPnE?FKQ8KAVu`YOh&k$ik&JK{sz z5Jh*l9Nb)Ao_IHQpg|T~4&|6!PI1^=x(dJkok5#1QekpyV?_%BPSuD?w z+caR_=jny8XoA9_0?9WUIQ~o0ooTF+2JV|Mv3kVLUo3XTM(UKf#vX59auu@2SF($% zm}E@vqR|Li3xCH1?SQ|>&l;Dq_$YGPB^!9`)9*L$G;a8ocvx4 zl@{Zqv!i_f`U8W9+oZYMmu&bhp9@aHP1ToOF{%ucxMAJ5g}Nl|6r-YYq@EI~t)w~4 zMi%BvbFqf9?l< z=q1$>zq=W@M!lt8wR_EtrSMCHO40hznyJ+Ty~N@48FMC177^VK`FHncY3Y&4Dn5I6 z_Lo|rw+1R4)ntuP$5}r$1=!0H$^5m7Zt#kh1@b4l;MUW7qGRdPy*pPRsK@N6A_$sF z%e{(3J%8hP`gO$Yn$BX3$7mkduXod)rZu&RTgd@5Dj^-V`+314VPbDux!_Al=#mk++u^;#c{_(v;S2g?r+H7su zL9$P95=O01Cd@lQjwubzLqac&<9`CM9LtF4y-W*i# z0w8SW1}wxgM})E|Zt>m#=mN8!l*(cj@r~^7ld&p{wMv1qQpOO-`QiyU_|iZzBBv8N z7h+CrReoLWOyARIMo?u9UkeYoEFN}0>jvNkc#Xr1D9nrBzp$BsawY+}-2ChPgXa};Gtm*#l~cb0+Bd(S)9{y7C<<@VwDi?`8BV|?SUQN2Mn-a~n9_zu_rqNPhR6g#m zizN8+DqBLv*k6h#2P5z9l`e4PQCEW!-P(5jVB-few!4lG#MMgQ5rXQ`-MPgi-p^%K zvxP=tY;7oM!OC7-@-FJg#7R}W-s1MTa|)}GUKW8I)HtBU>`~B;9Dn5j{*~SY!u$m@ zDCl0kx(tw3Xy6Nd%;?bV=>K>hriHz{5a5OdAl94sQ~u-R*d_nWq>oQFuAXpZ4dHAZ z-*c_EA21(1ULLgY%Y?~5B3NIVjo*?*8n+@)<`%Xjk3&1PkY zKE*n--WJdDH$`ry$?&>Zg`e(#dYy*NQWZaE(ExY}wQt62qy$Cubxwe@vd;CBfUU z@i{WY@9V*w(P81=zMF%3*JDe%S@o-W5`+--vqW=*og-eK?tDGO=yjw(W`SWMbR4ZQHhO+qSLmy!XEM_tjr} zoxRUmUA4Nax~jXL2dAbSSjEzL@2V_&^~J}5*Bv>ucIr}J2v040bvozg%Fsl&+(26h zj?=s1%~k^F*}%5jDUu=m{M4wgoTvkx$@rJeh2;P~m`c|6ptz9kq=T-x0yWqS+U^#k zZ=VK{C}qt6y>_sa&WR62cug~THHzPpg3orwZr}L4WwB?q-}sm8C#S&1TCmGsf7{Zl z*KG3XKjyu6pRC{cxgplHl{OGBw+o$2a&aOpT-`L`DK2-(`v#5s`q~G#Pd7F*c;AH~ zW$4cmSZS5T!)PHE>RH(1Vh_c6t|dOFnBs7ziT#Sl+SDUOdh9dy^p7j1l@9nS>buE1 z!Sxwq@(~6fw_cTn5Fd@Am-Cu+QWkwx`A}Ol7O%EeJ$aFBm4gibU!TGhA!bOee*QSSm+j_u^OX0`kpVtUp$0!Y|hQt}m^( z@h(E`+<+HIEAkwh!lDdjADnly-ZbkfKDxvtxeAU(R-T$^K#sglgpSq56OCV=xf_? z|1m^kIIyL)rt7`jq~&eq@b~h@gYAhY{}Z6@T}-}S#Hz2e8Ke1^K_VxLz_6d)nofH# z3(`;mhcCI(&M;IZeJ06GH=bSAZ_wwB%=1}yxHC9sN9=AFcGw(~Q9}j~%*o5dI(je< zRjXdJZUX*5Wj3-shN55zT3((>e=qG9_k_E`-K>HC6}ZU-I-|x?;G5|mb?v1Xp+yH& zt1UlSBeH9{K9+9`CY96t-0B$rC2Q$<2wOU{k+R>FGne~YYp|7*c)eBp;a0BX;op7e zLsE7%{{$@_y#L0O9LN(6u`(xeWY8HV&xd(PuuZhA!X>H8NV)eIu&)=Qz0F?e+Nr!&g?Ho+(gP@ zuxg`ia0#xz95he#1W79_o-wOpIpx0UZBUDJ;7HBh97`>7CojdKcRSF&q$*6!{v+yU zgTCCRn5nd&cG`>-#kJ)6w=bNBH&SIuOkfJJY1X~cM%Q@nIU?0m%5H{EKkUUhIh(GR zK<;zBCfn4*mHthQCPQTRksC(@LTQ+K0grRJeA`Tvc~@gCMo0rGx@h;7J&{7AUFgfV z@)yGx<{--@Hd0gy!xTrXL^^n+P8-reA#SIRBm<2kt{HY15K^m{ zVUC{+RJV^w*i6Ox)ShvWp#`wkWI!2YHDqXLK$_)YguV?aO8Tq8&q|xQI;ZYDc+exo>%dZYqa~8TS;5?gWvZ+y2Kqe+E zqu-V?elL}3fThDWY*>AD_Rxi>uSm9egZ2XzQZsb= z^<(&B3`TCsLi8+X(KCMZ=CrQXBuVwU6`R-fIm7QT%S}m-x`|UmFKw8HzseXb&lI%E z0qiG^xk#NLNwLUUQiWYH5^1 zcYE5X?>Gj=>Buwln9OX~dV79Gnde5SA=pNjj3C8VQvFr@+>161`50F+Sl!hRq7~Ib zWbGg^>pG4B%?+q|dRPwXyz56^T3Y&OALUvRd8vrvY zMjASE$&v)H4-GLY`Luctd!v&`+Wqbr7FPB`UR0(35r(A=LbP1qy!&^`KO~u|-$(!je{2S+UYa$M8AYLd{sB4ytPc+3O(h{qL6V-7th&+E#>x zANofl>E--}t)$o3J`I)vXGVl(U(1L3#)(9o&ui?NC{;*I7jMqn_E4UDutPWU$E%u2 z`2~~vng%ME4!`k<;icrp>^h3?`IG%-LxubfhVOcmB)1OiE;`zTv z0=3U7_ogJzrr4c1wZo(|MnN?nvO_{wD#>DRo9)w=II1E0ILuekse1tvNK4jRTUxr=@`1!96ZPe z@N5?9I3VUKa}TOQzu;0)PFdbM4CzTOPR={a^B00p}n~j~HE^ zJnalPuF8I<$3op|m%i^+?wL{$x1$t7a{?$untWeN4VpA&uUGobnzpOu}9&3GndX*8N6Ju`1$N*uf|5j%lQ4<+!Ab3KOVdl6n!7vTmP zOwDIB?1jwx-{g2Lq1c1H4V(3#E*f zNT$ssbu$S0eu*zx0YTrcon z8Euu479V2)^Ogx%wv!kARhU}3ooVbnKp*35zLd3er+u_-dru+?{Qs3*A3Pr=WUB?u zT4|dh!Y&jk;QxxBk9fB|&&Exo*-t5XdI|GE!nU}B5YpAuR3kIw@Bhjt(fszNG~j36 zv#8XP&SLWF>3@0Jivp^q5I8u${!e~F9i5zKY0veXR3_+%!m|u06zwR`SljiDP5LE~ zsHXWQ@Q)XPWrK|6vvCH34EGkFpXZ6b(}HfUgmhA-w?Viy?Lrx`NSt21|5In^>Ou_9x3;@JG{kiG z@VR6EKUMQz1M95AT%E4~%tao1Uf$GdKLh+WDM%^@I=wHa^$f9vNhK zx*Q|8bUSvl_N@=EP_Q9y3Fuw9E?BL}ikfr2w{iJJ@1wq6KWvD&d4shlP6}@Q82#?r z8da3#W3?rEpgG5L5Dsr>SUA>@lbRXC`ONc1ZeMmJ%oG6)p>u~R%LH*@V^Na1kH%Pv z<{)JlLCnm}MAx2Ksp5Xt)@~XHUEg;r3S!tHDe)xwO#$?`@mL=%2Y9a0=h@zjg3J2m zwJ`>ESW9VV++8lgR~>NiYt%xtC=0ZRw6Om>T?CMQz!Z>I#0>bX2z2^R+U(9SMXqQz z?=*&jxAcjFaR>WO@y)^56x=O-v0A7!NSXpuJqt6k&;GcBp*hV$72@ay#gDn~BOC>l9heJ-VCsBQ@r`XR}53hYP0+o4a+1har4QzbO{)I%>$fboYNjl#gqw965 z<}{V^yC#n$y>PfFLT=aP%LTE=fLwX5zm`XDap|ak@kGSeZ^`B$*qhK>YP&XSKGx&&rjD50ywxfSdT&11+-kru%|JR#3^Mp^L$CwVu4_G~+qDOqrPIRx z-$me0{=Hw5{Sn*5Z5&k&68E&jY^~kQ)^B>^mA$hOlJ*XZ`EkL1RhuXw8LXzRS%2jW z&ZvH4fuh0qd*5_p&S6b_Xhk#DzE=!xr)29d?@su6Asqt?%aNKROVbQ(z1gBs>#Pu%K^THn*Yw^33{U7Gn|mOX{I4qYl?Txhpn z-n>?A+VsirNG!L9Z#oC5Gi+SI{hu$qFe-Lg7upL%`^S#Y!kZ zUL4Y6@@6boIX0Wg414jDevh3aX(a#izpE?%RVuI@K*gH*LH zXNWZGXl)I_4Fb{mr2%|yPsp_n#@BszUUx*-eNA(8p;BO}k|3Xb;l9l`9fC{ebHzz_ zH*YjHhktc7?(lK4ntG+Mu4)R8$1_ZrW(;~`0*|si|#l3IL*m z%u-bp&;vPaf|{BEXQd=3hxUastfr=E%X`So_{KIbt4jx{?4YiMhh|Y{=!p*B=D2ro z!9&KA5J{$LAVU4?oCLn~7LLwhIruQ@)s6&fWihKQ=N3lIO!D=Lb=MM(fC zLU@P*9v>a!6B2?t!9f34yb1pET2dD9EpA2Q@`{ZDvWwFK(OGfFM++D}14G>9r6o8x zxOYM)3F27HJ*OKSEbR9#qqg>zc+u9VJIUks?|S`ijqes--2Xc3ANEJ_b_5rvAN!hY zk$hM{E6prfQI$;K>j|@qv(wz>rnHh05)Tg#U#ql_4<95XBmjkmFkwuG?q(X6*h=wz z9U@koq%mUsN7GG;7_q#fLPAm!pN%bJGgI2$p+5L~Y6@`eCGGzHPa)5IPnwIa?hc%_ zkFET;Ujzxc*>LS3Eu`0rV=_l!zGYIs;>O>{&3T4ZaAlgG+h=};TNNBVOKjCxNY;Ss67NGvCwfp-cMRRjAfIvMV zAz@&57eA|JlIGPtpFCfQI#m<7s4r30TTUCI9+89wbpEfB_JSh zxzQ2>fCsTXohA7E{A72%#piOq+&#!ad{kwgRX_G?iyvj@rOrA1BKCT6P% z1$F~qsY3m)yXzF73D=c~(i%@#M4YrqW~7jeerSO0q$_E7Hi6|`X;5?Efl7fobJZRz ztZW7|Z+X>xAXHINsrUKu{tsbKo#6<(^CkL744&!Dc2_2cLok!+wC&@mf`34Oxus=c zPtQ-2CNfEvd={GQI+Dw$T&W#jf4tx3)~!9>*AUkk&3ag+E7?A_uHpde-1gj;M*ix? zhLo%|?^;?IG<4(qmcq2}BMDDd61LoffyApY_WaVCj@869tV?G@qeOXlVTGI6%()v2AAogkhzuIXJ@E>pXV>S27dD^S4yvjvEkL0W5d%X*K@Fxe^Xu!9Ha0gcq{rTX z`5TbGn89r7I;YwSX16@7|9LvODQ;R!m!;m_NZOX*YQd7ff;`mMCtzTB;0EuEVixT8 z2b`D#f5yKXI@Z{qJFP)Zs};!y3p}r(;DM~uJvi&*=3yjeGOfztkM<5~a#i)PqakiY zWDNblBV%941I;y(+E zv9Ynd*4EVgd_rJ9w&?hHM8<`MvZ{)amfD9WVLRpI-vhIj*MU6W+lQ+xOUlF~q@EWY z{r;YT#DzamW%nW|E!V+tGC#;KnXiM)K<@5^k56N#7Z)h-@UKZ{S8?+zD<8v)P+&nt zn^0ctf5rZ)?4O^H_XR+-xj#{=R%;=^yB4s!-4oy0*#T8fAn7M>KDy_dVP{V~aqaDN z06pLA%#0^dLBhb05EA~<*48eTPU{DNA^+&=a5IL5wwF_u|J(4s4`L%vAxeS!K1S)y zt%LwStns|d^14iU&`q+p)dOn#T+%JYFyf~*-9=mP0&c^8>&?}(^9e~zP#wMUKmZyX zCPTz{f^O@K+1}OxM3&fzqtT+7qrr3LDDr-GxS50pUJ{pI-<-Uu1k^ z+uDq7UW68#om>Fsna4$warS_HG|?Ln&Ww6BJ;X`_N{yFL_f;dJSj)!fPc^3e0BRA6 z*0}4DgmSWf+kksD3dp^I3f)g2#kCNM;JAWmXAIwGO%AJE&4BF~Z1>!eC%5T^1BuHn z8pRVBlUFB5HWccMXegm?B*?k$?Tigo!U9jD&e|4EW$Km0oy&c~M9)ty!|PTEz(yVy z06&)hY7zlJ;Gq5b+L5+dURx59vp_KY{941Xk8ziv) z&m$g6s)_Cv9gk^aY}B>{hR?RAGg431*MvBvkh4^Z)Q;9%E*}K%GB>UH>~VGyAA6<( zJH@4AL47cW?`+F0JTZYu;N%%rGFqmDj&4!4D&DaxtPTLAE?h4O9g-|EvhAE1YR>d6 z5#0mi1ewohzmvX^$+nnrK5I((`WW|7-(%Q>tsR4Da4^yeB5wWt0A%Z?IMG8W4^xU| zK{*B5P1`?9-UNQ77dEz&@e1q9PN(b#GFo^~=D5*^4+-(EsEc5H`=i+A4Qv@2A4Vo7 zNLD4|gCNsH5pc#Mx(L_5>Ox~r0hRN%CQ`Lj9y7#qv)W_nX$xw{&S8_28R&GZ1d@yW zR%9$D(`*Anb`%Y&5J*lx_zU065e*b;0FsmGUl&-8Qc|nACF99bfUVf^JY@pXb=B11 znZ@Y1d*EJTP-T}oDf*TTW%yR$Dtj&8E49VdQ(M}Wgw3(JW%9cMNTJqt@A=Ynspd_w z?4r=Px6PySWZkl=(9mR3E|M6-vd*{~3R?CH^z4SBXlM*og{sG1)4`vleF4{^Cq;gK z_#rk;WDy)5-$*6da8G7;WpowfbBjk_lGdGnWASzGo8C=J1a9#d0Ap zMZ`&VfC?bKJ_*+~HYS?RoCD)Adx`DR8-QYW3LnSmU}j*x-44J}(9(WyyXRjroqD%N zUbM9x@@~c)5h`7)IuT6qMISp7;VwVVE-Xm>_yz{NOP;oA5wNkLZUh}~mX)9QrC?-h z;>O{1;azbg6CWNUo}Yw&y;DI0QNX>>za6N9@=b&6-ZCn4gERztzZs1wE?-gs>4nsj zLg1nxw5+5VyLXgbo#mCZ#8ii4rOGlB7vqt4`Q8a*F`66S2#PFchZdB5BrSLMp)Sk3 zvGJ(kzk2@x+v}Li=t#re9l}semUHRn zas|SyRag6M&pw#_fm*r)>((J z<)&GhoP1DG(O+Cqc6f|Bzf5-GUq|}P%K#L3TE16LAxYo9qlO$)!`y!(&r9E%6fkT? zw>-T43R*;$-Ox9i5gYPyr>NQYbWVwDV{2%k_Xh~!8uryj3Us%-0wzR`hrlxjA^~Nq z_2U-dPU5Xm>H}0A9$xs)C!9Qd5E`gyPt(n2u!mkrIid{j2a1T)ZGKiU>Z=vuQ}*kY zs!1BnyFu)B1x09Q%K>BJCQ+q9!iJb=J6iyQzmkdQ`-T`6XJ*R{%FWMCkm zx0m1D-Q9b*swG1Eyd6}#;$6bxXlK)J=9wuJ)CFN4izFNb8u~Hb`-Rrdya@m}*Mcsr zd$?O<2JTz=aAD_sckucqe}1U_caWQyu|3|;4>%lm`#@q-3J?HB;d&+#PM(BLJWlns zaB%D%R|PI7big4X!1Vve48G*g(1JEjzo0}T^$Mqg@>a%W_B`)95I%1ohhd+Z~R^ z>3$wl-CPv>kU?vmnU&_($q=eV#BQT2d|LAf5|-YCak81ZOa?~V|%E*lIiEF=3W+@lXuYC$cwdX9V>R9v&-%7EN!w7QU;sxaU!mJT!7A- zljXtHn9Y-zGl6#+*q$1Y{NDvgmOHrO!WvZg1(#z))7U&>(h42&LOuHVspuXcb`MtX z?Rc|v(YY;Gm|j*Rv25Usuk#7bg8(S>v(EsxhzD9m^Go4r6PNEpd!Dt!!F4AWa#=XT zm+KA3&S6f*IjQ-4rZXT7#T$5ZTR-RK278M}AQd;}VccsXKd~6?Vir#yTXm0kM2n%*sO8 z&x?3y#l^bWB6^=Sp;q1cm23M#$?PZyG`d+B5I&?0lyZQ7M172>F`Wzn7YeiO8@<-F*J;II*Lv4P-CUAA z^w$MyXQ}nNP_OvQoN?NM+m?RWL|dA1uX=d(it^WPYcjCMfv&v0AzU|B0&wd=?)d9k zapkkEpj8ptilN|I>twW1p0ziT2*Z0H80SBsQ>z|mnT)X+?ul+L<;!-J$dx-mX&0k{ z%eb(3G1>`eo>Mb7j>pOQ#BtOT8stWl-JANLNmO4^S&sFC!_%PRVb8}eTmmp$tEb_< zNgOE{W#lTj`DG??$y~0B=0JsHtYOp-qENr*&WBXGzam0HF&#<05hIp%&%L5EK@($c z+^e}0r7gSyc2{=uNJOhA$kIFkjiOhg4&C6GQYLlB!USHuT`bjV=xYFYC*LBSlelN+ zxSvCEa4MC2Hi6l!1I#R_>sYH^Tn;3sBH)a_geSxI|Tv9_jaq2m?z? z>WyYAA^`jDL<-%{E~Ax95i;+535$A0`)JzY_J?nIMNi51=I{JynLOpq>EbUG><&d4 zduxjBju~$;ckn>?D6gkMV zF%QnlXV9?Ko0(hf#;366(6J7$x}ucSL$%!)O%;O(DSc+rv+Db(5z&m5q;a{!vX(fU zQG1P!t252g13u+R4V;9qoU%%y zSsk(v*ZzwpYa6i8UMrnGTBod5*KoL$B?1zAl;*&G_mA#pp9XC;Xj#uVkrC|qLjalo zT27wbog*&nOy!bL(Uze#)wRfpYtpHg)rE_BO|VIEz9;Yx#U;VQ^)L1Qdr|@Q{4MEg zTVUWLGPmiW@U8sjn(yuco>DH$qA|EahVyTO&#k4ngxSR9q9v3v@Jnh z5(I|R=8Pp7BL$S47|}7!vO)JaRnkgpeNfoG088d^lm!OZ7`X4xn^8O|eT5kYxz zJZJ)~wqa+cjT;gUK*zqH^%np1{BG8owf{_Y=dDHz(Ay<;%4r(3YwWo6iR77;eNhdQ3%@=Z2K>B;Kle8Cc|yQ2=t>UnpBZ2lMGBu#vf04Z9=--o#S5+Z_J(22j_7RLU1%wca=;m1Cx`< zqwc2^?GXV<9Ld%jzhfqF{{e6H{E2uXI6O8*^uGU|byRv{cuh^yH#wg^(3kLXzlV-1 zv*PDdAXp(M_mo(ClToX-*PHkz59IhANF2J~B69bd1$u4D>_D|g(t@aC&sCOOJ4o1h zReWFagB~@#ei4}bf{;Ep{?xIekoCywqte*V)|nA`N+rF(Y@)43MnPA|O>sp=`i{DQ zGF*TdD=t_S*^0T^q?2(c>Me{6cTe6Cw*g7lns)2Ym6j#U(>k1@L3P`?AW#Qwja|Qs zMB*h|7{+1u`G;$!*q*8(iEA#*a?L41X$Gs!^@6senhaitoxk@V4C?yLo@jaKNRT!* zAGU9F7*BEqoW7o6|GckRHX5rPVDv7E8LqF);3!F9W}roJ^q*f_jo{YYu7OcOL>i>B ztDqtXD)@xlyl_}lGL-?>4aQA88pqj|Z3?1)^@-RHsM?Zl<1-{+29XmDZ1lst) z28M(zQXA)ECe%R&lO^30SBC~31)IUL_iT-LGnQ8ijD6C%NEok4RFRVZ`nP;Be?Q{o z)Ot=e?YXwt9&E$><@3qlqoFtTQbS8)SV^rmA6%b>o!1c$qrM^{J*H(Ei4=0Xc&It( zG99oV#&}0mVHP*CqnnGlp|@$nm1SEeKMVLE!+CY|0}qLB|IOhPbwwbtIca&IqxDDA zWouVh3nb-clk8T5J5MA4v`RBNUj|53k+Ut~_5Q-)sApg*5G}Bn?f!BIXyKTWNq?L= zf5P20c42txgs!{kvZxh}d!k(U+ah$IF0PzXYHUiDjEyR5-yd5eJy1tM@O=bf=%yHr zPDjtoC^De|Dq2=(m5aS$d>R2tiV8r-{jU$Z?EH3Lv?U1sw=xijSL$c8~6ww zu|KCd)0(9?(`1UG<)PB|bfUZ&B{3kZi?QKQw@RbX?`lJOhasm{+Z#>;5mQiT5qcrR zK%tzILtWzn>2zd-8Hy%RfxY#)6#e;XqOsba98GYjYv0 z!4;E_TW54l&YND3d^8m9$tVI*gB3;GytLacjfFE}p+%SI!1ahdu0###x;(J$#7SMd zHXQZq_C+f=e@mdBO4oqXf_H*V_@NReUJ*$?lL^(hhuq*H`1wXukw-sHft*UtXl>eP z|Ngw~xiYiDu8Dip;%Io`~@=W@#3UpSytM$^R5S>*=*@X(e-?>gA_l#N{5)So1H9197*V;NgdWuX{As8tl;O}jjdy1Ae5kS@zc+v=;y&x#8 z0|Cbr!9m)CLb5~2XwRgu@uum0AN|YS+vyO6`xpcgBa)DeLb7dyD@3`@i(AU>(d*D$T z8NHDjVtP5s0qK1ph(|+ljDV09?YF0&q&>?%LLFAdOLn{LkEUHC=g_QRHgR{2(dd;O z(fKcmwXRsDN8~ylAETEuN5%@_6PKRal-5IJ=W918^&XY-4^;_kEiwY0(3PJZHV!+R z&~6ypMWx-BaaD=3o8!_!EK3#-{yw0@=H=Yi?Ga0^x7ZMv1L5OFcx6_x!z`#vZbCo9 zc|r;&2hcZ-yW)Ec{|OZdn@o~6=lBpX8qks@r1-bU+fUx>k)XOOZMRD#ckwZbgVawI zWZL9}?3AGQX|~rfuKQD+GJ+m*zbZsA`q0!}2@UcaY?VGv@8tbz6h@6=$WDV1%^p5q z^+$Ywxr9||ZHNE*uM|zSrSJ(KF6hT2=C9Gx#CQ*)qXfvSC5&aS!0DkY`8Qqa4>I2* zu){(kYsvCRwc3k@U7f=QF8g*oA@Fi|NALRU_cLPt9&;Bp6D4|KOoyEMx3A+) zq|Z?`Q*)706dNg;pYs^MR{uHvSZd_!fe|(H0w?Js>a0$6QL#fnzMOa*k8w5KP|~-E zx|*@eu@KXyT*Sww&3sSYht5@Opmmwz(Z$*B=z8?Bwz!@@JsjeFD>ULlZ%jZEqBiFj1Vg4zN7r- z?k{tX7=*0YXuky%t^IblOwI7NuxZovjYJ0qEADEqwl1$v&pB?Nm=5)QFc%7#*tnJ zq12^A^P5QvE)TX255uEOVG}LacK!RPY*6oEqwaQAKZq3gWqy%?d?dS>j5#e$)NsZ6?P4L1GIXCw zjCjn*O=ekXB@BZgG!_<-PhO=uYQz_nykgIIVyY_fF0gB}oZW(7Fj$dMhH5%EyM9%S z9!5s&wHAE9K|;u2{|qrmHN;wYwjl#{f5&%P#qN~&Rrdo{S>#=-T~-0(ekXy6=-oJH z#K6q&M&`ct^**<6fitSfX2x6D9iTyfVWfApS}z{a=Q*A#|LSZ(KfsA zfDWTJRH{EgLUPDt+dDDAWfc3GJHlM08iyTkvnUo8Qp7QwbIjag7J*cN>uLz=)pgL0 z%eGsC@D>(GnZF#&uPg_)4#~-)$Mz7EXt?uwOmkCH5QY!s*{L4JsHcnSSaGK3OUanL zOj9csa_OGDsy$M@84l9CX*0&}!y=&>5p!}ckfu&`OQ$WM3b-pQP5!|Y|3k8E>XF@G zqrabdVL9+ngv7wWNQ~)FV){ObUe&9u^NYsSmu$?%LnGHvPd`9P7Z7)ba8bkxe3Vg= z#Br%_|Lv_6Dz~U~UCi>eW@uf)YD-s;<{S8@dPo&1bDO;J;3WR%fO9^Fwc&2%*U;dg zu%)G?t-XE!z(GVEd`U4GBX0++OneV9}|el(v45PrET~DCUfYQZPOQv{Y~jf!kX4}zcuy#CgoOJ)kaarq!{dz zeZ;Z0^O|X9zbd|efl*FL6NpXDgj(;Id*5d+MWoS zb}Y#+&3J=!q$s*hrtZL)0}MQ_$?toArtumM-JL0?!~cLTHOo65VVB5;;c~{Mhpblb z3jTA(J%Zt>tfHY`*9fhsqh3!@WJ_^DeDneydK~PCbka4oyQO3z(xD~`3wWTzn0tk= z=KKN~yYmsVjek9HEr)cFaN5_<{j@xf>GChDqst>(ANqezLNv@0hk<{>%R=;MB

{m(k`N|@Zo&#O zVg?Zx-YEYOuOw?Ie5)~3==6A@U8&YS0Ne`E>U50@4-coiR8m*(>$vHf2uKAL9mk`` zDI351Dsa^05?&hea@~1k_0uSa*qJgv`>S%!}Q`t;`<3<)~w>g47D^sf_Wll=RyZFrrs#~tHSG0xM;TF z4^&hf`?@BA`co&dyZw!!l}T{g6iK7sIixNY8qExTGc}AQh2>w4z~ciEI}G>Ks-ho>3O*_1x}qSO=FHF z{8bK_*2K%dI1JA?5h0|~9Cd0M94AHbo%cwYn`Z;;NWn3W+0HV{`oD8YXn=4OPH*b+ zqV=oA@lFI#`01t*gN;^@_YICE$B(5?ZV%F1Aym5ZQ8?$2etZ{57MOMHk7NajRcT%0 z*T5%m%r_mIhsNKS-wvd>7y10eZsBXg531!>YpkO(GRV5?f)bk{kq#^4g9@o8##xHK=tpVb9-RqKOL)1vaf0L^g+FBSooNx79S^F4hmM+ z*T=$;WLrDjl++T3F8BW^qr7e2I__3yz|5&?iARR(nYktov8bv46q8gXocN@Lz82Sb z3Jdg7Br0Q<>Y{Rn<@NxWlGN1+sfeN~E2+s~u-R`={lkxyE2q6D&xLSAwPbC-M_D^b zTK2Aw`c@Ak^w;ji*$$DB7*}1K1aK zr6n0;?DRpwP(ZLElSAyZ)FItip#1ae)${|TT{w^*=@d0o$AxA-9_gnHTcnKGs(`)% zIkZWAfY8STUP7rQWs@^ks{kDc$0w*mYsp5Fhsg5sv3-=UV-I-F&i{Hws1=ZPx>>ie zL{MZNWkAlxl?;oUggG801d3oup=?#ao?b1&U;*5@s+-FWpdQ>!9Jc8-7_dX4Ug zet9lnV7vOqohvjp$;GL$^{4CcpgppIhG%7E2@d>z-~Q+9e%=8xWRri{ZdYCOgs4C- z-U>)-ccc-50<@&AihMlJ=(bgRtX(r_%DoKy((CP2{xC6oyv^J`J(!wb$!P|WT^QQR zbI1*}I0EXM?)Y>hL5I;X49{`~$8x>uy4Ng+fUbJQ?abRn6k^}~mfzt6MGEX$osuud zKXNr~_I*qNe5N32R#HPEC%>F(=x3>AfYU&(6cS%fUcF=D+g*4X+~^ zIBcnAUe>P=6#a^JS$G_NFY@oA zr4%o~F)9Ra6jr?5GJHk@H*t~6)^;o1Q?_6 zz%MOkw!XpDr1T&sQ45FAcFfRA8AXsUo&HUOhQHelf)1k-rMc3VU{B(x?y) z9}3Cju0Mh-Y}aCOsqxbX87{UCvtk41e`KtjGP$b5!>2joxX@-*9q|m2kS1q%OmIsf zVUB}0-2N)Z?4dsemgR9mZ@>0@9=C9@<7l_J;Zh-Q&K_iaIWzN~Y^rb{v9NnhgRr2W zXyLAa&}*OuXVpQ9lA@Jmf)AfVI@Au068OHqvA93n0JQSYa{1#U#h3O&Dp1!7Cpl40 zF54-o>P3B(1ZPIuBj(i2=frWnSi+^4U?%ehqK!DfZH}u^;-Cl`aCJb>{saB=^M&Ny zEtXLzk*ed{^aR=X`~|24T#}d@hdq3dFg%wT+nQuHj6=9;-jilwNj*+UBOU!4|Gttv zoRnT*X_g&fm;MEp1s%tIDt7US?c&4|rwmmBqXyI-oaZ3hsQdE!k+u&SB-J{lpS3i| zPdWQT6ufja&m>uri@x!XahV^sn`X|45u1X0Vvr{%yZi3$s zNj9mL(76@QJlZjN`&s1RNHnr#FC$^AWrnX^t_^fMn#jpfNxAR&7<)Q`7euVf5cnDq zn|O`P$?Atsv5dcV+-q;NoXty}@u_9mu;LAIwVX+suJ4}P@1JP?I(jPqxaSG!7uWjv zd|BC31i_nEMFq#Keq^}#ej0IaM={riKZpPa#kR~Z3!hAB?b)s+QXGZhoQ=V(8k|RW zMo>=;8?0|!DCznSco{Y>1EN@u&_v?v9C_)xx-?ZYzugN0cnN1w?A^dT9h$$s2+?P? zx}Ue7uPqI@Sz!(NmCG;}gL=JY9mYY- zV!qy?R^_p6*PjvlLoX zQ962KMx(VXcR0(ymjK(P0&$5^#^Tee5hik0X)~b6hp{SYE;EsP2Am#Ie+JLn3CKdq zA@Yf)Rh9LdZNapsC6}FtXX<*ZLqS#5$J|5u4!#KFwlP0=`dpKrGIGnfYa=C!RqXfz zI+gmbA)~r~`^C>Fm=eQ3ch=K%ci?ayq9iqPu7iuS;JP3-nFy-aHBG$(r0A)+hC%3< zJ%Wnyvs_egzwB;}%B7)JHT-g+`W&S2_!J5VaJGjmAjV%fZ(BV*A%TU&T!&qw*g@~; zHiO=#qe{7ikJu2~95V0xD3~^-h#ahAVCFQ{htRj9LRfa@Y`8^a1YgH^@^{oFaOhfo z_mdvj8|D)8$dR%FAJEXxDtqqhfmS`9I4mg!=N1KTw%CbY^f=H#GOZT!k`k+~Hgma{`{XXIdm!tfNUSe~xMtoV+EywuqX)A3-Vy8g5%u^mi0=)0gwu zA4$PSY!sSc8=wHCA`?-1CiK2>LCOdyj!L@WI>y7XOD3%2i>9-Q^&uy^2Rf5ZMw!wC zaKO;wkavPaW^*)9ZT#}4d5crJ^B12FW z*1aLAe;Ky5us;vW60?x3wa7&kHpA#;OWSBSONi$?DMA^30fD2LhH+N-CMHsc*S8O{ zP1en41dNk)#Pw+Xg5uGV=NsgekRVpR;saDm12L%T9R9!3zA`F~u4xcLfZ#T`ySsaE zcY?bU+#P}k_u%dXcXxMp2|BpD?&NviZ{^Rod(QT+K0UXqZb{Fry0_%Qkc_;r`a#CX z(+SI~gbR74q75|3ej>Ka(U)YU$2S79J@OTLW1$VYX`BJg4cf?>NyRkGP&XM8YKoz| z`P_+D%9{8W_MwZP6a|g^ogw*_U#z|=oPNWjzkrxVae<)>bvN+;Bxu|iE=59JDsNyz z$_<=CeJsIUCYta4HM~QPflCs%+?c$}DZ@#q^ZOQaQ~W5FEFRh|--kM)Fv_9wWDQll z;j^=&<^`RY4=Z4+&a7*X7?Dt!l1RosG)smK; zuB58kKQaO%BO? zMZR_O(YGX?QT(KEnDqir75yvceTY=2GGJ3w-S=8SP>kRH*FejsMBgf*y}iw!-2e58X}@+VA{wH9M9z)Avh{cWSeZInKdM{8`ST!fK_ zCsF7o*Wkv1FHUP{3IUDyDZhvJZ%mI<+mMhx(%QPf$3q}A%*83?OdmW({AnGO7n0j)OoMca z@rN<}7i>SVamXI-EfJ+PV!65e18*7dP@hX9oq!Kj)YtZA;dO0$SEDw-#%&n*NwavY z-Ka-jFKH;KW}***3+m0nY5|A=PQf(_ay)l^f{RfxR7Q;)+lScG^)>HXCx>31XQ^uz z3E{Y(~gWb@*gyF2;j)iWUxUPJ>TdCYfD(e9D=Sc=tB4aQOoc!Ivsi`z;BtEr%t zYjM@hL;XR;D1<&?m+*1)?j3i`h)bxNTKYu$@$?iF;yS*|-B9`cJQ{h0F42bpGz43q z{N`{}ftZueI4GbcI$KFQgL5^$aw~$+)b!o;ux!KRnf6>z2QP9o%Vt@^1rGms$Xe-@ z#gx4YIbM0pPTvpTO+ml5&*$g-I|2+(Rb1t*->~8{jLp4Y&VrYqlzEK3_k$f%6O&P- zoZ`CdTf{UgG0rufCd$)xgN^M4PGA;foPz!f)-8RwKvPt>@>1mRN42r4v+T?A*xK4q zjyVC;foP}08yty#Yo#WZ9^h%}&gR!#TlLWeCmh5LNi4obi2qdL5;F{hOdj9rP>zj` zs{B;Y@RFke1`maS1$OHY=Ls{?S$^JIn|W?N2d0=Q1OtDj33l9t{!2>9dxujtwH;I| zPWH}6bF?`t6Bpy^W*Zo3L>^z;L5>{;PqAoc2)^+&H$-3riC=f)#C+4y*yAf6N7qFL z%2R-Aq|inCuzs~MY)G=6ZNfRXQk$E6$8eh)c*p_gn#&csO|8fJ?^TmelJEk7DeaI7 z6uEw%#5?91>wW+{XFBT24skEa^2;65(9M`C&yx_zINCmS1?Mq!4B<6(w>Qw2A}@ z#6of$ZX2m$Qa??mM$Cc1>wARKcO`lp^$2be#LVa!hpUTy2(|%(!%V3%jkz`OxWtgY zPT)J=ug;B-Y!^)yaF{ucJi+?h(2}i`UFx^7*VHu*&T_}@90M{6WU0ZisJm}6AR2)_ z9+#@s60oRWm11)U>8V11NRF&du@b=|q9$(F%|?-wfw3E%LaJBDhEH!n`$*R%-f0<# zRMKKl=96q_j*LU0=^O1Yb4H(*{nbh-EPbZfS`~v#i1ao|MbM zwedUD-&-Chqu7KM@o3N+T|V@|>F_7p>?~!oJ`GRyQxO@TEW;dRIUD64!yU?6N7=nR zir>N}3Bx2UHS-}c(eTiPg>j3nq+OjsOuYJK>OX$D&+qMVSK5l2NHrnr=*5DC2Yi0h z5V~T_YcO3#PG$dP7EIpv`OW3lrEiyQeu0UVHZ6-2R7u@l7d?NXVf>y=Nl&MLe7$|T zB;Yel4wWPbfFFHSl)O^xIZ{Lq-CbKRE45=Dyp$Y#PHlHY{Oz2mo}j$A<7@V$MOpNZ z>906NUB39MwWuTX7P%cP=pR;6-nzVtk{+Mbz4NhAp3jjG0gx~tA0Y1^_cw`+nb|)e z;M3XJnLc8;aRR{fbGI^{j1y?5zM$un9g8UtgWO_6{Os(br>|{OUvJuolap`C@hXke zyyMf6KDdTKb3@?d>ZjLNTc!FIolQk2UZ08m^}9BC?~X5LwRm^Tg6Lzfv+yFied$8{ z$s?U!2!dVd^N|pJ=<7ERKs8AU(sHHqijj-=BV9UUIII*sgH}Hcw)tT!ho;xdHizWK z3HKS&s0u!>_>k-mdPnUc4&36nm!`^XH_nhwvD`U7{jW8ReEw1UszgYVg{8NsF5d>a z@vLQQT3O`n+}fsN|8nth%WI|y<4-4zSQZ+W1s`Wfmk2c)qr(=M0|KKpX8>1dKnj%oq$B6!P0pzqIVQUOTl+qL`KS zzKgI(UTjS~JwkP^n(7j*Zo~J)Xa~cQN>0ao0i=^=Dyg+S2cPN2@N+vXXId^E%3bgM z5wa|Jh;ZOG&4^myHmb}L-Y@y|EZ|UHK{uP^jL)y4BCiEC-Td0S#XU6v=u6n1f{+ws z6a0DC!Sl;}=!<}HKxrv>=ZwpERU@*6b#TWUb-{q!4%Q09?H}i_QL)GDYQQXmVydwE zdVm%t0qeZpgej6lRyp`B>fu?Wn=%12gSmZmli2eg0&k<)W)E?QQhwg*7!3Lu-lf=( z{7&j3N*n4FjU1p9n|aKUldN_)KQzKfb_&_S9)a&uf_~i+$Itf(qE%Xmk&-aN{!PIM z|B2A=Wq|}Vp?A!x0>c~&b!=7TeZu@p)(Fh=Gk?ZAwA4~a<~87`ndxm!oSB!>qcTBA zc!0x4spfCc)8>9mIm=5+p}&9AmX?+_x3tvM)?NquK!p~KL^}9OK_9Y!f?#bHCG_A~ z8LMoWnCnJ|=b;AJ`7_wux!I=Ni}1Y~6y`oYDb(;1N2z~fC5H7{rgy=MGUip{kT-#9 zt|A|3L^7F~R{W|nnOs@;?K;!B+Eu=w@(;(*L$-McIc$|>t<8`U8ymtf4i3fW+2^(W zg}Ai_=*+o?)YOv!+mk9T$9sZrM?zR(E3*@HVgxj&>%aX&>OWI3kkeHMH8s=O=JI#b zF`&`}@l_Jjj;AJsXi=4DB&>9h@RfE^g8Fpf^t$^Y%j^otHs~9bUoq#qpzzUW{!uc4 zLL$IG#Zl|?QP4CYN19$?MU32~C>0tulU0b>nAI6eH*8_|uLA|urMbs$(Rz;B+yV`M z=lX~If=G&h3$n=iqqYb}D%Qm8+&p!-j#VQdo|2Zfliu2b_$U^(WprsNb&NFS4^4tr>^vWxz&`aD4_Maa>e^Bn`vj5;@E%Lzo&hZ7?%507mp?jMnZGr*_4))XV#`y(%B zfE%QWavE;4ons;r67KH){=~wxbK37+doH60s#jMu+g8+m#3+Zi5)^Lw{pJWu2X=|Q zsReA;#Ja0g_#$zq^KwGBe27cL6NoH(>G9ZjbORpDbRTg*6@+oA#%WWbZ6nIA8>l{^ z69Hp3ZIGZ%!DB0$8BbnHI6bFz4I51Hw&tgUcp&ymJV!(gK;+(*?#R5HYnOuMzChb@ zcPCTMMhyoljY8*=J2)?Zv;uyYzEsQ_mnl7D&(HVgy9ZLccNMDAW8b6Udm#A0$cPju zwEz87Kq7`fOizyh5|VrmJw{ng>FxCe!N6Ap;9FSjOW*^MP^IBXzuLw7)&5RKE@CLF zV|mL0BP;R~RVOMSfpEj1zUNn=tCM*4sEX$Y)&w^=8(`3WgE6fxI$5f%V(Q}E1wvXM(_;VlX#gJ%O~eG!=Df{7l!duoVU;zp*B`*{CpAQBF{NEqW?M z_aN(JDwUItcCz+JMR}c&dYWMEHRy%X-Sn%x&WiHVAQjIg+i_JXmoFL}-7rfyYe37ZqW&g{ht(YfWe1N-S$ z@T?QNaPNTnh^$~IIfq01I0+E=n?EGr0KYFF|C*AMGQGVW5BA!Lnr^tTgekfA)w;E< zEvPsxrwfNl03L~GdMI%%nZ9|)JL55(0-oPtS2F~cIT-*`?H!nL^71tBu^jM_)IE_O z(o$(GZ!y^&5y^2djL>L0l`Hb|LcRY^oTge@w}7AbUXrBLM0BM0Qw)BF6a!&C{R#&8 z8yq09*pS8#*)rAG;wTe{&6K*+3r#4MN3=p>E#xXS~IGwTn^r;$BVehOapkT_yugQ}b^0jf@E>QphlFKq)7evdFq zm3m|h)Gyi3|*!Xp5>KMJCk_9mpa*E?mB786Yoii%EHS|8KSv$@_mjNRk{{dY_rJt4dGMD zWCn-mQ|xNL&RFQ8+)L~$seBU?8A=MTLY66JXG|^|WZsT`j22RgB@z;}Ra{?QHgIrI z0;K^>&Vnu^Gyo+frN_tH!`0>GW3Q9|bV;04tx9E&5df~QDTVOTs8cjFDTiNH_nn<| z#V+pTrK{QNVKg~b2Qno7xxjDm57+H7rjwJM*7J8RMo{sHLgrA{&cL${wMETb(kDa; zs9zf2TNK-CMRijs=W$lxRoJ5%_FC8}UO zi~szkasofFz7h&;d4)Clo2bgT`z+SL7i7G8Q?16iLk8tSKKXSbCPiqRa!xqiPOnn#G{DxRReP0#X=lsd&=L93+^8d{e` z*iB+F_25g0fMzh=MKDy?3L7s{mkND=;}q7JFu=m3k}jsB%AF5Eo-sSuGd!NTvq`>P z`5d0p+{)57-_8Gvf+UsjHdF|jU|=ivOzf2$L*3v*Nrr$N*y(J&B!YAcc*}y0%(Rs5 zJxgT2H~&9j;o&*ruhKYDy*Uc$#Rwb9!TVs%Eg|syIXSW=`TAlU zZg6!K=OT7iPS~brX!P?*cUysIGE-}(q>41ESQ3d_aM@4{bs5S43Vqmh|LW?m>2d*s zkfPRwstAuC=vQQbFP4>IbMQ0}U?j);eI8 zlWRnbQetPIiPdF?2>9*`r;NIz|MXZ|1Ypp5ys@dsS0Z!*4^%-jh1sH1)XB&$DBi(~*pMIRz!L5Qf3?$4(Oy7Us!}3I5Vn;fHTNM23-^06 zv;E?75LC{YH+_5(nOJB)Dobb+ym7cHF|GCiM$a!3z&du6=^uiOA?D~DTrvKRUi+KR_TG4Y?XItO+17U zCQD6zA4$=*RTNNIN(`%2EJY45QI{MOa5?9f=Uo6-_Z% zoSKzpY-<~wwJ8)7$04)@Ni{hohvvBv@<)c}v&VP)lUGAodEROLIhdvZs) zk?fRm$)z+sx);?`C#GjsI}{3dKhAliS>SNB-`2vyv=eh+r;7hA6z9J6CEw0q&&yHm zF2&D1Xib4K7>-VIdh0XQCo6Wz*OQOEoaEso6BjP*GdI-{O}*mRMsV#dK;Q82m$4jg zgHKBvAHAW7N!@H&s8vqg4YJMlf?vOV`*t;^{~o`%DA*A&jsyh&9vr-%PH=E=NEr?y zXha%Ya>NCvlBpG+*G~IHuZXKGrbjDby&^sYbb1FTx32MclNrkDNkHSX*Blc3>VCUQ z?�nW-yk&QrB%a;z0{ULPFVU8oxdsbDgBrql{bM6*f1gRN^T+OyPUf^3|@JI(NE7 zuq0@7n^wZ^&02DEpxKG2vrJYGx*XXervjZ>OM-z`<4%R=o*z4hhg1|46z(1#DA?Ff zqdwx|6eH5@ql4C8oP0XVA2d-2&%{kL>CtQ?H0WL!S*qSyIbW+-IXL^5_YTLf=?Zh{ zfjx8En4P`}PnZr|KGEy(Y;0Sz1uz=J9YM2d#;CvJ75%(0i$BdCrKRMYTM~G9h~3K5 zv#2^F3?Lz*AfpeE>r&TGt`}4BgRM06Uk#TSnA!def91Qr9>vzwEIymz-h3bMl9ZCF z(O-xNq1GsG4P2FYxrz=a>Aw9!W9Faujjwy<5x%n$SX0xbu$A$J%Uqkluz4t!GF`-- zRg57;dleKrA387C5pvc?Qij&9xZxGD%w}hDTM41K?e?i|Z6+~9=j-W49~O3Loytte z@+_OP-xH3Ox?^di!%h_bY*2C1EI-X-g3mWlw2QuZPE+vdd>i0kKv_Q_IJK1E=}7?_ zH{Hl(F4NOiV{)ml578Vxnte*Na&6es=$z+OjMw#PB zXg*10*tqYKM}}mmxfkABTF0eRBXTx*fxNWw5X_hLSXQlYN0TojL+4WL^!n!0Tm)ao zfgQ04u9-E?ID`9re2q|RPKeUHaST<9{UvyW!lh{f<)c3%w~&1Gf;->tT;aq5WsoqF z=mH%r6pj(gQT80l%E~IygFtNKm}1`}m&!L!W^ESrjd}CXqHVfubqs>mg={~{J$AYO zxyaD5h#PgnZDB-P!>E)JVNO^15fh89f1M7ql9x20`n{cc7)G zRYxjr2lVbHlc9vvErG4>!;8_uE_$;^n-b4+S^Ue-4)4&}b2~Vec5{VX%rC*vJmU%a@tY~PmvRzp9@1AHLYN?<%jlSRSd#hunW~3N6 zs(mrKcKPaHViNGGDwq;uX2=)$1TJ{cs*_^XXi%gTbvL@P_xu6vX1D3hy&KF>*_OF2 z{)jNy`ZRa7-eCAsQNf%q&+bo&g~W8A=%~zZPGd^>ICTvyWSd0y18%9R-CBw6Zpoyn24vj*w81=#7|vTwto4hk^+6)NlqL! z^vld10QmM@RPCFCh&=djUdHpN86Ex2ry)1yMrMhR5)z1-G#h+x*EB^cq81)E0qJw`K1B${vx$0QZo@8@99ZT&!`KnEbtJ%L90A7sgyd!-;_P^w=75ZWo? za7jo7@13cd?MJ?H<7Y(L0qJHA#Qb%W!HUP>dN6QX3ZoNM*rM3kU8g45m_k*3 zgKui2wd60rCg=+XX|D9z|6bf9d5$3=_AOOp=U|?>k6sL&fgca7$Ua$>n8@6JzlSff zzmd4GJTi65SmTszT{x}jo^bzANzVJG_;A#IXJhMJWaa*|*9TRIoAsIu@PY0D_NDRs ztCS|TDI~k_?_#Wz${slnL5aj9ZujmV{m0Z;KX>*BSkr#&hp!!mXXd67tPd=BEPpOX zH*S%LsK-7GXWF0OL~@u{ih;1h-!>b;k$FRk-FPD&rL13hZ?n;f{GChOgQQFDxA^1N zXCzSEd_Zjh;Cg6sX6lm?j$Q3pEc(h6Yzvjm*JCng^A_T}IIhvr&}p^^V|U{~XI^}| zQx%1Q7VrOswqz`S5#+KsL>G(M9O-V_4PCcQ$LUp^_REM58g(c3R` ztaL48hWH#pMk;v)xrE#4Xm%N4P` zaLpyG%Fh@TIUc|1W7EzT6sgScG2C*2qC$v>qk-z`P6zz!8|z&8wF#NW(QM;iY)B46 zVZs|4*vI83nK;>p3Sp5p72eqG_};0XgUjZf)oPgPzB))T!@>FCoO;eO;mJ*v1;r3>SXQ_68T@}jDENocfFak*Rq0VM$} z&phI(n~`Db%E)r=k0M&4zYAwlaYfwSxlA+XgpuCC|DNjowOiX)kJqTGXbtV|+ty24 z!P5o94~ooYzH{}zoqyFDwawhm+>P=kJ!4~Q{Pfk)HJmloWY9!eB8oq)L_-OHUZeh1OqH%CpMr!# zGzz~a#|S)*CfvE;%WUC;9>c!gsLweemWwQllo@5TlwOR}CeZ%8WgU_4Y4hUEyX7Va zMEU=QD6p<=Z!f zpH;Y60)+zRtfk5TTnHE*+8(gMAfSRD_dhPZd&~16T!&0M#h5HwFN_6d4FuPkCqS%V~t#J;<8^e`hhC+mJ zh?MO7&wqMbu#HoU3Bi6OH$cLv1%aFKnMaxI?9^dRn2rBffj^5vTDHEzEuY#Va*rUL zqwxBK+-l7-SClOr;Ykh1UfXwQwA+$5F(FImu*s{ry3t-69mQ?&?nMc=X5RYvQP#bs zP9C-)kBT_q;89xyAqhVNPds z{0DrQD|0}WS|S-fKW6_E2Hl!)St)jmgNnlgJn(cVzedw3=)~M@+V78O#;FbVx);=l zGirk^7yrwo*@^_~(aW(#dj!#tAKFF7Y&N;PJQw~g>6z`96LmWCgK5L^+i0O|*7x%e zqj`Ee_yz&zG-2k3^?*jJloKSy_)C=FIGJI@jPbCTVr8Z4y|Sl?b*|2A1&AyysV<(d zz86GP_4m6a3L3<&?#;KQC-I9-4s*xT-9S-HD|62{J5~S$1O&Ca`*UU_6C(LpQD^P1 zpm2?V+P05(D5%fM>Q(t8S??YGvP7OUjv*G_6Q>ZJBU^ zonphqjX`)=V?61}_Vq`7kw+>cjP8xuo|9p4y-QOu#?ctJHCj?yzg^Qm1VW8UK46Ze zV~orA#ncz%S$fqSKXzUePhiQ6Y%dGWve4<(KcbfW76ME9d2#{+jRpQxa7t_+d|YPd zj<(S`cxPvIWd&??ocrM`2eyN1`TjWwJilSXKv#;x8yZ1_=0=NOe)F-JU}H~2JL$+; z(t9MmL0WfzBu-_S#Jlg_4MIu+t5?ZN6V7=+7rsC@u&^!4bj5Lm8;Im39I7!Er94nd(l12v`}qoyi-m&|-qyxjtdI>Vrd#JF@8$Tsy+kRW(LFX6aqnuw zfE>KTs-(9uTxiwfDK^XsH*k`SsGQz{qY{mOaLa7+s6esr?Z@M2Hn(UW7xL3TG3!)l zV}$_TXLo45W9u`PJ+{@*!dj2Jwcfx$4py|^&T!H?38EGw1)E?nJ_Nn})ro-cB!AOP z`Q06*(T7%uCIJMIM<1VA)eR-@NJMbHtBM$QWqz^>7;;?iY`& zY(Rb(SYbI1Q$%;GR=b&oK^r~751)LBx-G`EIfk*v;W{t#)g1C)*B2QPWnk!jn)I$QYFfit9S8H-ZBULSDBFUO?h7@jwQ9I;)~DP z)*(^79(FXkfbG{MX1vY~*n+y-jZ&SeihieSceOKVaD%Dgnr0n_{O3((sE&0wZD@(X zjyr}MPRKlnyPs45vE0W@C6%Wi>Aq`W?H)gd4cvO)Hge9e&dBBK%~pk1xS+b$1Mjr& z{m#9#XML)(+5B_ux<;$~?s)PkWOqeX2h{a|74-MZE1AHXHauKOf%;TpLV1H;cQ~Cl z7R!Z$WI|ag0s6f~UGa_=<4+3hlQx9Bp9DO@Ze01X9z2nr@6JUm#TK0WveV&qE(Kh} zRlJg~CeuYOrDxKtNw&xUZLO_Tj8!=$C3~gRMI|Lz^d;mVaVYxu@K<%*ahDKyf zuKyUrn1g+_`9vr3@$oTthX;d7#bE8VMT!8^O{B1rC?I@cp~1v-9fHUI7bTQ*`1Kc< z7C9XqK8m>|-RHch-g;5n&>&<--n8pqb{Cxui%W_sbFWmUytpz_(On9e96zW4+0f+V z$HHDG# zDv*jInwvhgbJtyqcj)WOeE|*%@BC~6HN29TgZERuJ?R$TJ-!ptCHNN=6>p&*=8Pzg zEc!!e)N>~`-VgZ=1uRY)&luTtav6e37;(<5n-%aKARBvXp)Svh7r%Fc7@gGG%2Onl zKA6UC^)oW^b@m2bKyoMY#GsN8Z`^cgiM!=lY>|LVR(sh-qb2?ZGoS@8DXK4ow7{JI zv3HEB(S`B_T=r#|yS2kN@#!c^ko%H-E?*A6NOh zUeNJEO!`JTr^vdxfvHW@T`#_9f6z_XF2HQ6VTiIZlHrYr79h5l8f0W@$`0dZe7G5I z@ne!E2dAzyb}+=NzNyHG#R?@NA8O8^{Au*Ws@*LdMbHlt&dTb5$762UmdJSyb}**8 z*VK-VK7>j9eGiGQD??6YQmiN@OUhZ7Ivx7Xcx)dvEiGP?#StDjR>sA7#vh^}D3j3h z26dDMI#E9SE0>1S)3P+bzRJ5e#+;aE$>O=<(vvr|2qwUf(gobJTJ z;>)Y2pd(|>xaFB)ln6t*Rb+&2>JuUO^!B8~_8}__Xu76?hc!4Z;BH@1wWzdHrQu6) zSdc2t@L2m;FhbuUyDzoS)fL^xSerFctBhtlrmM(OtUUHw$OJ`6Zn#sU%5t?nG_E35 zIA}Q#&3)v|O-a`to

miB4?eJhYx9;@{?28EK*(>4c<5!JA0ykN*M(Ulj83fvf6} zDpjSGkW(xU2;Vq9Id1kEiukFhZq$clKjsHlXFZ6Di6$cLNK&ITQ?R8lV7&ktMG%pe2=l3VPzQ85{HeT^#l(&~yCW7CtWpj80jTcTE0wBNqzcX&(6n?a4#gyxcd zQF()0E#qTW#moNmukee`Uwf1-i*JU_#m%_+(EQ$!HN6xvo?+}KRp5W>T-kvtT0cQ!T>%X;A*?duX`T4kT(*m}IkZGY1&1y68)kKDBNV(G`mr5hCS}$n8xZ3#mGz5H+UA+RB6JMr*T^;@9ZvJb4!h_LTV}X~ z{*$% zS&OVEtf;{$e2i-^wD5s}0WKb%Pxc4n*ogQ%x4}S}mSpkfEt--wd6^>q5Hi{{lC6B= zL$~>t57b`Yal%(Q)f?(+8-c3k~>Wnd*2@_D(cEi zFN(nvwxIoxu8Ps9{!aKn7-S$godx}a`JRaNxq>3oo8vaSKbWrDJ$=CE0Bu2|yD`kz z9_cJ-QnsjLCA%*bLDVjNJm7Al>sE*Uxn`O*Yd)fKJi{I9M?Nbh%bTJ=JtV7NIqQ+G zNBIdSVTFn&%5IR&~C~5`BOkZFBaz?$i)dy@M23r!eD!x^CtdqVvd!uM&1LZdkJLKWqJ61(p=Y$Hst{H3@qdfcT6wc_V2Y zw}cC{>=bEhVOXhB?2I?(HKnW8-`RRVAv?n_M<-03##gq+Vx~FZ*8&&n67l zT;YBM^^EAsNlb4tg6Y7PbNtSs`D9vPa**&#r9Uu$1#B|orl_&;{6bIPBZU@1&pQS} zPj6ZCc4(FTaZR(0iSy?M?G(hcR+^ln7K%9k2JFB^UeO>AN$+bju2Xt>q=}ABV|-ky z%mW8MN^suK*Aro8ULg3Aca;+(dwPgCgw0uIL6IO4IeS9=Ep);9)XqVL#ty1-%kjxW zQm%&M4Om@hMNw^Cg8hVg z^%mht_-i8$WLiEJ!&HafGNB{Jb2kh=rCQMk-&P?V^5d zA?%Gmed(N;U72Xn5%Be&r@`k^`72AH;`s0|Icrx+-l`|f=xB3#tmJhEptiPdWP+B2 znLCqq$-9dMAYn+tP_~e#5W60$$CI;~Zn5K+Nvitl`WH;#`1$1Q*{%uZNg+ZA7iwI z!fbrK>fq(rlgB4Wd&Z`q-bDM?O6b^>Li`jE|8mPlJp(FRjcmC@oi;sJoettoIYVD* zs|@Mviwbv$zNzaKoN6HTa@_t2^ta=4fe~wt)F0jdF?PDz93K1VJlV|9!%B@7Q;N7w zGhzgc&9!b`e!EaPT#d8-(kyo?AhC&iG=mQxJ(pUyOM$ebz~pzUH%e_VRI3T-}HKlpc!sX=TbUKeCmNe}qz4Uv5JLG1BUDEn7R$LysyYoGP)*J6I z(1`fNL_}W_MsDfXr6H(uQT9~pk6;oA)u_}|Indl~(E+QoNgUX-A*e2^0oK_~mW-QU ztrnP%KY1y8v_j|NdS3Q)cY)~lp!0L0;rpj$0g6fzeDO zJFHx*0WhYN9#+L+Z=O$|K$!_eH0?_gk-?aN=lVnHqN2E8wO_*SJv{6rMp+LxqHRJ^ zoTuEVWkK|mBgl{}+0>69WC$NEw!dAS{>rN4&(DESu5($)Zqq-Z%{sKijPt<)Rk!9z zV;po_hXWb(#IRzZ|19rN(8`qi$T+{UB0t*!pSM%@GkS`Qh9Tij#%7rJh1FsULMPyG z>+4sLB;PUh-p?32RUWDu_#z%l+;{9wjk`}eRtPr=)SE$IIz@6VIMOX`ZHo#E#qvE4 z=0Hu#tgKFuI00R#{#%YjsY zsn3aXyA5EzoX3b4Q}Q_ZC@m60AsM~ z<<=HVQPr8Qs|R~*>e6_{C6)4p`ONBK5Ag-fX8NzM?m8ptdit7=N~c412R->JI9yCN zh%XHL-skNTExufuT&TbA5XAm7308nl0PGWCRi;_&gq*7fNA+OGuL%h)<`kkkUyQkA z_v`3yL^CkK`W`;$D50r~UKr{L@siS@WL)Zu{lLN66Hmy@iUoJu>Y+_v@HWQ6nPud` zS$`R+^Y7#aHxlJ;dPB`KeJMvc!fgWBrHZQmxCwjugyHG|wH{aOoKOlKqoZ$7iv-^b z=GF&_GB?`==aO4^*F4r{)0^9lKv>0y&&TVQdlN##xcF?qH#v8&YP0*b2`9~O4l1k# zy`$<2esdw|5Ac_*@OnZew_+}KueC7ZG6+s56#q|j_~GhyWS0@@2h0`$yf;ltOjcId zO{nQyJ{_?r(JPT!x_wrpNU9dG-o0qCH;J~0#z0^zIELP^h8XEuJXDv*@u zH?vSj_33<``hLj0z6X-N&d|hXch&|qFPGRIsbOrJ8BeX0eCId(kA!ak|9}B$D-{Uh zKM!gCI#yI5*dPt~DXatt2i^YjyI5|?KWg!RKKvH|Xe>zIK==Q`{l_``t9Adv0Ko&@ z|Aq4Ri=g^D@qh3C0{`b#5H+9?|DyT7V*hWz{Ri~FbNQEs|7KqQkQtl@niSwK?f)H_ z|BLqjPwXHb{zLmeZ1@j*{$l@ESO1~?zj*V%J^X)R<$psv2>4&lgK&dr{8u=j(MnVx zS^q1uf0zK8(#QH=1JQV~TyyW>;MhM7s1}hM_8c;3hY^0$d-LS}AcW}W880FsZ^@R% zm?F2f&gFLndv|xY4jW_e_AAphImnXDqVD zsOjl*N2bTi5?iYbB-EW=Zw!M*51m?M6}! zBWtWCys-o)w)O|U*Y?DQ4Fx66PDDZi8stxT5@kUkARvI+Pkj(wc!9b$$|2l|ii;WJ zX5@lM{j0&kN+7EK)h!SQME{GwKmSXKQT|~_cAsKBj5JVQG)Rx1goI=(KCO&~|I3uW zYeHNIs9VFH&&Ba!&e*)Tjt(A&(2+hP07y1(K&aFoZgsWnu{C4Ch7%=zGnEC0LU$Fm zxO<5g**75hODFtUXw&T_B92QZvj6Bi-aU%gxKzp0vEuwcX_vt)S_2n2C pKxfOpQ1U^*=za(LssK~p3DFb_13PQJnSg;VDKUA`N@0V5{{f>*{dfQX From c1676f95625c4d7961b45397909f8624a4d8136c Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Fri, 23 Aug 2019 14:09:59 -0700 Subject: [PATCH 019/358] update again --- .../create-a-windows-10-reference-image.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index 7433bafabb..57fb065aa7 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -35,7 +35,7 @@ For the purposes of this topic, we will use three computers: DC01, MDT01, and PC ## The reference image -The reference image described in this guide is designed primarily for deployment to physical devices. However, the reference image is created on a virtual platform, before being automatically run through the System Preparation (Sysprep) tool process and captured to a Windows Imaging (WIM) file. The reasons for creating the reference image on a virtual platform are the following: +The reference image described in this guide is designed primarily for deployment to physical devices. However, the reference image is typically created on a virtual platform, before being automatically run through the System Preparation (Sysprep) tool process and captured to a Windows Imaging (WIM) file. The reasons for creating the reference image on a virtual platform are the following: - You reduce development time and can use snapshots to test different configurations quickly. - You rule out hardware issues. You simply get the best possible image, and if you have a problem, it's not likely to be hardware related. - It ensures that you won't have unwanted applications that could be installed as part of a driver install but not removed by the Sysprep process. @@ -58,9 +58,9 @@ With Windows 10, there is no hard requirement to create reference images. Howev - Review the Summary page, click **Next**, wait for the deployment share to be created, then click **Finish**. - Verify that you can access the \\\\MDT01\\MDTBuildLab$ share. -![figure 2](../images/mdt-08-fig02.png) + ![figure 2](../images/mdt-08-fig02.png) -The Deployment Workbench with the MDT Build Lab deployment share. + The Deployment Workbench with the MDT Build Lab deployment share. ### Configure permissions for the deployment share From 13cd3beec7157ab2e0f62159fd635b77f577bdc7 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Fri, 20 Sep 2019 13:35:04 -0700 Subject: [PATCH 020/358] toc update --- windows/deployment/TOC.md | 140 ++++++++++++++++---------------------- 1 file changed, 59 insertions(+), 81 deletions(-) diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index 2ac2f8253f..4bb54764f4 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -22,98 +22,76 @@ ### [Submit Windows 10 upgrade errors](upgrade/submit-errors.md) ## Deploy Windows 10 -### [Deploying Windows 10](deploy.md) +### [In this section](deploy.md) -### [Windows Autopilot](windows-autopilot/windows-autopilot.md) -### [Windows 10 upgrade paths](upgrade/windows-10-upgrade-paths.md) -### [Windows 10 edition upgrade](upgrade/windows-10-edition-upgrades.md) -### [Windows 10 volume license media](windows-10-media.md) +### [Versions and licensing] +#### [Windows 10 upgrade paths](upgrade/windows-10-upgrade-paths.md) +#### [Windows 10 edition upgrade](upgrade/windows-10-edition-upgrades.md) +#### [Windows 10 volume license media](windows-10-media.md) +#### [Windows 10 in S mode](s-mode.md) +##### [Switch to Windows 10 Pro/Enterprise from S mode](windows-10-pro-in-s-mode.md) -### [Windows 10 in S mode](s-mode.md) -#### [Switch to Windows 10 Pro/Enterprise from S mode](windows-10-pro-in-s-mode.md) +### Windows 10 deployment test lab +#### [Windows 10 deployment proof of concept guide](windows-10-poc.md) +##### [Deploy Windows 10 in a test lab using Microsoft Deployment Toolkit](windows-10-poc-mdt.md) +##### [Deploy Windows 10 in a test lab using System Center Configuration Manager](windows-10-poc-sc-config-mgr.md) -### [Windows 10 deployment test lab](windows-10-poc.md) -#### [Deploy Windows 10 in a test lab using Microsoft Deployment Toolkit](windows-10-poc-mdt.md) -#### [Deploy Windows 10 in a test lab using System Center Configuration Manager](windows-10-poc-sc-config-mgr.md) +### Plan for Windows 10 deployment +#### [Windows 10 deployment planning](planning/index.md) +##### [Windows 10 Enterprise FAQ for IT Pros](planning/windows-10-enterprise-faq-itpro.md) +##### [Windows 10 deployment considerations](planning/windows-10-deployment-considerations.md) +##### [Windows 10 compatibility](planning/windows-10-compatibility.md) +##### [Windows 10 infrastructure requirements](planning/windows-10-infrastructure-requirements.md) -### [Plan for Windows 10 deployment](planning/index.md) -#### [Windows 10 Enterprise FAQ for IT Pros](planning/windows-10-enterprise-faq-itpro.md) -#### [Windows 10 deployment considerations](planning/windows-10-deployment-considerations.md) -#### [Windows 10 compatibility](planning/windows-10-compatibility.md) -#### [Windows 10 infrastructure requirements](planning/windows-10-infrastructure-requirements.md) +#### Volume activation +##### [Volume activation [client]](volume-activation/volume-activation-windows-10.md) +###### [Plan for volume activation [client]](volume-activation/plan-for-volume-activation-client.md) +###### [Activate using Key Management Service [client]](volume-activation/activate-using-key-management-service-vamt.md) +###### [Activate using Active Directory-based activation [client]](volume-activation/activate-using-active-directory-based-activation-client.md) +###### [Activate clients running Windows 10](volume-activation/activate-windows-10-clients-vamt.md) +###### [Monitor activation [client]](volume-activation/monitor-activation-client.md) +###### [Use the Volume Activation Management Tool [client]](volume-activation/use-the-volume-activation-management-tool-client.md) +###### [Appendix: Information sent to Microsoft during activation [client]](volume-activation/appendix-information-sent-to-microsoft-during-activation-client.md) -#### [Volume Activation [client]](volume-activation/volume-activation-windows-10.md) -##### [Plan for volume activation [client]](volume-activation/plan-for-volume-activation-client.md) -##### [Activate using Key Management Service [client]](volume-activation/activate-using-key-management-service-vamt.md) -##### [Activate using Active Directory-based activation [client]](volume-activation/activate-using-active-directory-based-activation-client.md) -##### [Activate clients running Windows 10](volume-activation/activate-windows-10-clients-vamt.md) -##### [Monitor activation [client]](volume-activation/monitor-activation-client.md) -##### [Use the Volume Activation Management Tool [client]](volume-activation/use-the-volume-activation-management-tool-client.md) -##### [Appendix: Information sent to Microsoft during activation [client]](volume-activation/appendix-information-sent-to-microsoft-during-activation-client.md) +#### Application Compatibility Toolkit +##### [Application Compatibility Toolkit (ACT) Technical Reference](planning/act-technical-reference.md) -#### [Application Compatibility Toolkit (ACT) Technical Reference](planning/act-technical-reference.md) -##### [SUA User's Guide](planning/sua-users-guide.md) +#### Standard User Analyzer (SUA) guide +###### [SUA user guide](planning/sua-users-guide.md) ###### [Using the SUA Wizard](planning/using-the-sua-wizard.md) ###### [Using the SUA Tool](planning/using-the-sua-tool.md) -####### [Tabs on the SUA Tool Interface](planning/tabs-on-the-sua-tool-interface.md) -####### [Showing Messages Generated by the SUA Tool](planning/showing-messages-generated-by-the-sua-tool.md) -####### [Applying Filters to Data in the SUA Tool](planning/applying-filters-to-data-in-the-sua-tool.md) -####### [Fixing Applications by Using the SUA Tool](planning/fixing-applications-by-using-the-sua-tool.md) -##### [Compatibility Administrator User's Guide](planning/compatibility-administrator-users-guide.md) +###### [Tabs on the SUA Tool Interface](planning/tabs-on-the-sua-tool-interface.md) +###### [Showing Messages Generated by the SUA Tool](planning/showing-messages-generated-by-the-sua-tool.md) +###### [Applying Filters to Data in the SUA Tool](planning/applying-filters-to-data-in-the-sua-tool.md) +###### [Fixing Applications by Using the SUA Tool](planning/fixing-applications-by-using-the-sua-tool.md) + +#### Compatibility Administrator +##### [Compatibility Administrator user guide](planning/compatibility-administrator-users-guide.md) ###### [Using the Compatibility Administrator Tool](planning/using-the-compatibility-administrator-tool.md) -####### [Available Data Types and Operators in Compatibility Administrator](planning/available-data-types-and-operators-in-compatibility-administrator.md) -####### [Searching for Fixed Applications in Compatibility Administrator](planning/searching-for-fixed-applications-in-compatibility-administrator.md) -####### [Searching for Installed Compatibility Fixes with the Query Tool in Compatibility Administrator](planning/searching-for-installed-compatibility-fixes-with-the-query-tool-in-compatibility-administrator.md) -####### [Creating a Custom Compatibility Fix in Compatibility Administrator](planning/creating-a-custom-compatibility-fix-in-compatibility-administrator.md) -####### [Creating a Custom Compatibility Mode in Compatibility Administrator](planning/creating-a-custom-compatibility-mode-in-compatibility-administrator.md) -####### [Creating an AppHelp Message in Compatibility Administrator](planning/creating-an-apphelp-message-in-compatibility-administrator.md) -####### [Viewing the Events Screen in Compatibility Administrator](planning/viewing-the-events-screen-in-compatibility-administrator.md) -####### [Enabling and Disabling Compatibility Fixes in Compatibility Administrator](planning/enabling-and-disabling-compatibility-fixes-in-compatibility-administrator.md) -####### [Installing and Uninstalling Custom Compatibility Databases in Compatibility Administrator](planning/installing-and-uninstalling-custom-compatibility-databases-in-compatibility-administrator.md) -###### [Managing Application-Compatibility Fixes and Custom Fix Databases](planning/managing-application-compatibility-fixes-and-custom-fix-databases.md) -####### [Understanding and Using Compatibility Fixes](planning/understanding-and-using-compatibility-fixes.md) -####### [Compatibility Fix Database Management Strategies and Deployment](planning/compatibility-fix-database-management-strategies-and-deployment.md) -####### [Testing Your Application Mitigation Packages](planning/testing-your-application-mitigation-packages.md) -###### [Using the Sdbinst.exe Command-Line Tool](planning/using-the-sdbinstexe-command-line-tool.md) +###### [Available Data Types and Operators in Compatibility Administrator](planning/available-data-types-and-operators-in-compatibility-administrator.md) +###### [Searching for Fixed Applications in Compatibility Administrator](planning/searching-for-fixed-applications-in-compatibility-administrator.md) +###### [Searching for Installed Compatibility Fixes with the Query Tool in Compatibility Administrator](planning/searching-for-installed-compatibility-fixes-with-the-query-tool-in-compatibility-administrator.md) +###### [Creating a Custom Compatibility Fix in Compatibility Administrator](planning/creating-a-custom-compatibility-fix-in-compatibility-administrator.md) +###### [Creating a Custom Compatibility Mode in Compatibility Administrator](planning/creating-a-custom-compatibility-mode-in-compatibility-administrator.md) +###### [Creating an AppHelp Message in Compatibility Administrator](planning/creating-an-apphelp-message-in-compatibility-administrator.md) +###### [Viewing the Events Screen in Compatibility Administrator](planning/viewing-the-events-screen-in-compatibility-administrator.md) +###### [Enabling and Disabling Compatibility Fixes in Compatibility Administrator](planning/enabling-and-disabling-compatibility-fixes-in-compatibility-administrator.md) +###### [Installing and Uninstalling Custom Compatibility Databases in Compatibility Administrator](planning/installing-and-uninstalling-custom-compatibility-databases-in-compatibility-administrator.md) + +#### Application compatibility fixes and custom fix databases +###### [Managing Application compatibility fixes and custom fix databases](planning/managing-application-compatibility-fixes-and-custom-fix-databases.md) +###### [Understanding and using compatibility fixes](planning/understanding-and-using-compatibility-fixes.md) +###### [Compatibility fix database management strategies and deployment](planning/compatibility-fix-database-management-strategies-and-deployment.md) +###### [Testing your application mitigation packages](planning/testing-your-application-mitigation-packages.md) + +#### Sbdinst.exe command-line tool +##### [Using the Sdbinst.exe Command-Line Tool](planning/using-the-sdbinstexe-command-line-tool.md) + +#### Compatibility fixes ##### [Compatibility Fixes for Windows 10, Windows 8, Windows 7, and Windows Vista](planning/compatibility-fixes-for-windows-8-windows-7-and-windows-vista.md) - -### [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md) -#### [Get started with the Microsoft Deployment Toolkit (MDT)](deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md) -##### [Key features in MDT](deploy-windows-mdt/key-features-in-mdt.md) -##### [MDT Lite Touch components](deploy-windows-mdt/mdt-lite-touch-components.md) -##### [Prepare for deployment with MDT](deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md) - -#### [Create a Windows 10 reference image](deploy-windows-mdt/create-a-windows-10-reference-image.md) -#### [Deploy a Windows 10 image using MDT](deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md) -#### [Build a distributed environment for Windows 10 deployment](deploy-windows-mdt/build-a-distributed-environment-for-windows-10-deployment.md) -#### [Refresh a Windows 7 computer with Windows 10](deploy-windows-mdt/refresh-a-windows-7-computer-with-windows-10.md) -#### [Replace a Windows 7 computer with a Windows 10 computer](deploy-windows-mdt/replace-a-windows-7-computer-with-a-windows-10-computer.md) -#### [Perform an in-place upgrade to Windows 10 with MDT](upgrade/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md) -#### [Configure MDT settings](deploy-windows-mdt/configure-mdt-settings.md) -##### [Set up MDT for BitLocker](deploy-windows-mdt/set-up-mdt-for-bitlocker.md) -##### [Configure MDT deployment share rules](deploy-windows-mdt/configure-mdt-deployment-share-rules.md) -##### [Configure MDT for UserExit scripts](deploy-windows-mdt/configure-mdt-for-userexit-scripts.md) -##### [Simulate a Windows 10 deployment in a test environment](deploy-windows-mdt/simulate-a-windows-10-deployment-in-a-test-environment.md) -##### [Use the MDT database to stage Windows 10 deployment information](deploy-windows-mdt/use-the-mdt-database-to-stage-windows-10-deployment-information.md) -##### [Assign applications using roles in MDT](deploy-windows-mdt/assign-applications-using-roles-in-mdt.md) -##### [Use web services in MDT](deploy-windows-mdt/use-web-services-in-mdt.md) -##### [Use Orchestrator runbooks with MDT](deploy-windows-mdt/use-orchestrator-runbooks-with-mdt.md) - -### [Deploy Windows 10 with System Center 2012 R2 Configuration Manager](deploy-windows-sccm/deploy-windows-10-with-system-center-2012-r2-configuration-manager.md) -#### [Integrate Configuration Manager with MDT](deploy-windows-mdt/integrate-configuration-manager-with-mdt.md) -#### [Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](deploy-windows-sccm/prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md) -#### [Create a custom Windows PE boot image with Configuration Manager](deploy-windows-sccm/create-a-custom-windows-pe-boot-image-with-configuration-manager.md) -#### [Add a Windows 10 operating system image using Configuration Manager](deploy-windows-sccm/add-a-windows-10-operating-system-image-using-configuration-manager.md) -#### [Create an application to deploy with Windows 10 using Configuration Manager](deploy-windows-sccm/create-an-application-to-deploy-with-windows-10-using-configuration-manager.md) -#### [Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](deploy-windows-sccm/add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md) -#### [Create a task sequence with Configuration Manager and MDT](deploy-windows-mdt/create-a-task-sequence-with-configuration-manager-and-mdt.md) -#### [Finalize the operating system configuration for Windows 10 deployment with Configuration Manager](deploy-windows-sccm/finalize-the-os-configuration-for-windows-10-deployment-with-configuration-manager.md) -#### [Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-sccm/deploy-windows-10-using-pxe-and-configuration-manager.md) -#### [Monitor the Windows 10 deployment with Configuration Manager](deploy-windows-sccm/monitor-windows-10-deployment-with-configuration-manager.md) -#### [Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](deploy-windows-sccm/refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md) -#### [Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](deploy-windows-sccm/replace-a-windows-7-client-with-windows-10-using-configuration-manager.md) -#### [Perform an in-place upgrade to Windows 10 using Configuration Manager](upgrade/upgrade-to-windows-10-with-system-center-configuraton-manager.md) +#### [Deploy Windows 10 with the Microsoft Deployment Toolkit (MDT)](deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md) +#### [Deploy Windows 10 with System Center Configuration Manager](deploy-windows-sccm/deploy-windows-10-with-system-center-2012-r2-configuration-manager.md) ### [Windows 10 deployment tools](windows-10-deployment-tools.md) From 1759bd4b5a4f4ae5ddd91c9351baffa15c660da7 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Fri, 20 Sep 2019 14:00:36 -0700 Subject: [PATCH 021/358] toc update --- windows/deployment/TOC.md | 226 +++++++++++++++++++------------------- 1 file changed, 115 insertions(+), 111 deletions(-) diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index 4bb54764f4..d57fbb46af 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -57,32 +57,32 @@ ##### [Application Compatibility Toolkit (ACT) Technical Reference](planning/act-technical-reference.md) #### Standard User Analyzer (SUA) guide -###### [SUA user guide](planning/sua-users-guide.md) -###### [Using the SUA Wizard](planning/using-the-sua-wizard.md) -###### [Using the SUA Tool](planning/using-the-sua-tool.md) -###### [Tabs on the SUA Tool Interface](planning/tabs-on-the-sua-tool-interface.md) -###### [Showing Messages Generated by the SUA Tool](planning/showing-messages-generated-by-the-sua-tool.md) -###### [Applying Filters to Data in the SUA Tool](planning/applying-filters-to-data-in-the-sua-tool.md) -###### [Fixing Applications by Using the SUA Tool](planning/fixing-applications-by-using-the-sua-tool.md) +##### [SUA user guide](planning/sua-users-guide.md) +##### [Using the SUA Wizard](planning/using-the-sua-wizard.md) +##### [Using the SUA Tool](planning/using-the-sua-tool.md) +##### [Tabs on the SUA Tool Interface](planning/tabs-on-the-sua-tool-interface.md) +##### [Showing Messages Generated by the SUA Tool](planning/showing-messages-generated-by-the-sua-tool.md) +##### [Applying Filters to Data in the SUA Tool](planning/applying-filters-to-data-in-the-sua-tool.md) +##### [Fixing Applications by Using the SUA Tool](planning/fixing-applications-by-using-the-sua-tool.md) #### Compatibility Administrator ##### [Compatibility Administrator user guide](planning/compatibility-administrator-users-guide.md) -###### [Using the Compatibility Administrator Tool](planning/using-the-compatibility-administrator-tool.md) -###### [Available Data Types and Operators in Compatibility Administrator](planning/available-data-types-and-operators-in-compatibility-administrator.md) -###### [Searching for Fixed Applications in Compatibility Administrator](planning/searching-for-fixed-applications-in-compatibility-administrator.md) -###### [Searching for Installed Compatibility Fixes with the Query Tool in Compatibility Administrator](planning/searching-for-installed-compatibility-fixes-with-the-query-tool-in-compatibility-administrator.md) -###### [Creating a Custom Compatibility Fix in Compatibility Administrator](planning/creating-a-custom-compatibility-fix-in-compatibility-administrator.md) -###### [Creating a Custom Compatibility Mode in Compatibility Administrator](planning/creating-a-custom-compatibility-mode-in-compatibility-administrator.md) -###### [Creating an AppHelp Message in Compatibility Administrator](planning/creating-an-apphelp-message-in-compatibility-administrator.md) -###### [Viewing the Events Screen in Compatibility Administrator](planning/viewing-the-events-screen-in-compatibility-administrator.md) -###### [Enabling and Disabling Compatibility Fixes in Compatibility Administrator](planning/enabling-and-disabling-compatibility-fixes-in-compatibility-administrator.md) -###### [Installing and Uninstalling Custom Compatibility Databases in Compatibility Administrator](planning/installing-and-uninstalling-custom-compatibility-databases-in-compatibility-administrator.md) +##### [Using the Compatibility Administrator Tool](planning/using-the-compatibility-administrator-tool.md) +##### [Available Data Types and Operators in Compatibility Administrator](planning/available-data-types-and-operators-in-compatibility-administrator.md) +##### [Searching for Fixed Applications in Compatibility Administrator](planning/searching-for-fixed-applications-in-compatibility-administrator.md) +##### [Searching for Installed Compatibility Fixes with the Query Tool in Compatibility Administrator](planning/searching-for-installed-compatibility-fixes-with-the-query-tool-in-compatibility-administrator.md) +##### [Creating a Custom Compatibility Fix in Compatibility Administrator](planning/creating-a-custom-compatibility-fix-in-compatibility-administrator.md) +##### [Creating a Custom Compatibility Mode in Compatibility Administrator](planning/creating-a-custom-compatibility-mode-in-compatibility-administrator.md) +##### [Creating an AppHelp Message in Compatibility Administrator](planning/creating-an-apphelp-message-in-compatibility-administrator.md) +##### [Viewing the Events Screen in Compatibility Administrator](planning/viewing-the-events-screen-in-compatibility-administrator.md) +##### [Enabling and Disabling Compatibility Fixes in Compatibility Administrator](planning/enabling-and-disabling-compatibility-fixes-in-compatibility-administrator.md) +##### [Installing and Uninstalling Custom Compatibility Databases in Compatibility Administrator](planning/installing-and-uninstalling-custom-compatibility-databases-in-compatibility-administrator.md) #### Application compatibility fixes and custom fix databases -###### [Managing Application compatibility fixes and custom fix databases](planning/managing-application-compatibility-fixes-and-custom-fix-databases.md) -###### [Understanding and using compatibility fixes](planning/understanding-and-using-compatibility-fixes.md) -###### [Compatibility fix database management strategies and deployment](planning/compatibility-fix-database-management-strategies-and-deployment.md) -###### [Testing your application mitigation packages](planning/testing-your-application-mitigation-packages.md) +##### [Managing Application compatibility fixes and custom fix databases](planning/managing-application-compatibility-fixes-and-custom-fix-databases.md) +##### [Understanding and using compatibility fixes](planning/understanding-and-using-compatibility-fixes.md) +##### [Compatibility fix database management strategies and deployment](planning/compatibility-fix-database-management-strategies-and-deployment.md) +##### [Testing your application mitigation packages](planning/testing-your-application-mitigation-packages.md) #### Sbdinst.exe command-line tool ##### [Using the Sdbinst.exe Command-Line Tool](planning/using-the-sdbinstexe-command-line-tool.md) @@ -100,97 +100,101 @@ #### [Configure a PXE server to load Windows PE](configure-a-pxe-server-to-load-windows-pe.md) #### [Windows ADK for Windows 10 scenarios for IT Pros](windows-adk-scenarios-for-it-pros.md) -#### [Deploy Windows To Go in your organization](deploy-windows-to-go.md) +#### Windows To Go +##### [Deploy Windows To Go in your organization](deploy-windows-to-go.md) ##### [Windows To Go: feature overview](planning/windows-to-go-overview.md) -###### [Best practice recommendations for Windows To Go](planning/best-practice-recommendations-for-windows-to-go.md) -###### [Deployment considerations for Windows To Go](planning/deployment-considerations-for-windows-to-go.md) -###### [Prepare your organization for Windows To Go](planning/prepare-your-organization-for-windows-to-go.md) -###### [Security and data protection considerations for Windows To Go](planning/security-and-data-protection-considerations-for-windows-to-go.md) -###### [Windows To Go: frequently asked questions](planning/windows-to-go-frequently-asked-questions.md) +##### [Best practice recommendations for Windows To Go](planning/best-practice-recommendations-for-windows-to-go.md) +##### [Deployment considerations for Windows To Go](planning/deployment-considerations-for-windows-to-go.md) +##### [Prepare your organization for Windows To Go](planning/prepare-your-organization-for-windows-to-go.md) +##### [Security and data protection considerations for Windows To Go](planning/security-and-data-protection-considerations-for-windows-to-go.md) +##### [Windows To Go: frequently asked questions](planning/windows-to-go-frequently-asked-questions.md) + +### Volume Activation Managemetn Tool (VAMT) +#### [VAMT Technical Reference](volume-activation/volume-activation-management-tool.md) +#### [Introduction to VAMT](volume-activation/introduction-vamt.md) +#### [Active Directory-Based Activation Overview](volume-activation/active-directory-based-activation-overview.md) +#### [Install and Configure VAMT](volume-activation/install-configure-vamt.md) +#### [VAMT Requirements](volume-activation/vamt-requirements.md) +#### [Install VAMT](volume-activation/install-vamt.md) +#### [Configure Client Computers](volume-activation/configure-client-computers-vamt.md) +#### [Add and Manage Products](volume-activation/add-manage-products-vamt.md) +#### [Add and Remove Computers](volume-activation/add-remove-computers-vamt.md) +#### [Update Product Status](volume-activation/update-product-status-vamt.md) +#### [Remove Products](volume-activation/remove-products-vamt.md) +#### [Manage Product Keys](volume-activation/manage-product-keys-vamt.md) +#### [Add and Remove a Product Key](volume-activation/add-remove-product-key-vamt.md) +#### [Install a Product Key](volume-activation/install-product-key-vamt.md) +#### [Install a KMS Client Key](volume-activation/install-kms-client-key-vamt.md) +#### [Manage Activations](volume-activation/manage-activations-vamt.md) +#### [Perform Online Activation](volume-activation/online-activation-vamt.md) +#### [Perform Proxy Activation](volume-activation/proxy-activation-vamt.md) +#### [Perform KMS Activation](volume-activation/kms-activation-vamt.md) +#### [Perform Local Reactivation](volume-activation/local-reactivation-vamt.md) +#### [Activate an Active Directory Forest Online](volume-activation/activate-forest-vamt.md) +#### [Activate by Proxy an Active Directory Forest](volume-activation/activate-forest-by-proxy-vamt.md) +#### [Manage VAMT Data](volume-activation/manage-vamt-data.md) +#### [Import and Export VAMT Data](volume-activation/import-export-vamt-data.md) +#### [Use VAMT in Windows PowerShell](volume-activation/use-vamt-in-windows-powershell.md) +#### [VAMT Step-by-Step Scenarios](volume-activation/vamt-step-by-step.md) +#### [Scenario 1: Online Activation](volume-activation/scenario-online-activation-vamt.md) +#### [Scenario 2: Proxy Activation](volume-activation/scenario-proxy-activation-vamt.md) +#### [Scenario 3: KMS Client Activation](volume-activation/scenario-kms-activation-vamt.md) +#### [VAMT Known Issues](volume-activation/vamt-known-issues.md) + +#### User State Migration Tool (USMT) +#### [USMT Technical Reference](usmt/usmt-technical-reference.md) +#### [USMT Overview Topics](usmt/usmt-topics.md) +#### [USMT Overview](usmt/usmt-overview.md) +#### [Getting Started with the USMT](usmt/getting-started-with-the-user-state-migration-tool.md) +#### [Windows Upgrade and Migration Considerations](upgrade/windows-upgrade-and-migration-considerations.md) +#### [USMT How-to topics](usmt/usmt-how-to.md) +#### [Exclude Files and Settings](usmt/usmt-exclude-files-and-settings.md) +#### [Extract Files from a Compressed USMT Migration Store](usmt/usmt-extract-files-from-a-compressed-migration-store.md) +#### [Include Files and Settings](usmt/usmt-include-files-and-settings.md) +#### [Migrate Application Settings](usmt/migrate-application-settings.md) +#### [Migrate EFS Files and Certificates](usmt/usmt-migrate-efs-files-and-certificates.md) +#### [Migrate User Accounts](usmt/usmt-migrate-user-accounts.md) +#### [Reroute Files and Settings](usmt/usmt-reroute-files-and-settings.md) +#### [Verify the Condition of a Compressed Migration Store](usmt/verify-the-condition-of-a-compressed-migration-store.md) +#### [USMT Troubleshooting](usmt/usmt-troubleshooting.md) +#### [Common Issues](usmt/usmt-common-issues.md) +#### [Frequently Asked Questions](usmt/usmt-faq.md) +#### [Log Files](usmt/usmt-log-files.md) +#### [Return Codes](usmt/usmt-return-codes.md) +#### [USMT Resources](usmt/usmt-resources.md) +#### [USMT Reference](usmt/usmt-reference.md) +#### [USMT Requirements](usmt/usmt-requirements.md) +#### [USMT Best Practices](usmt/usmt-best-practices.md) +#### [How USMT Works](usmt/usmt-how-it-works.md) +#### [Plan Your Migration](usmt/usmt-plan-your-migration.md) +#### [What Does USMT Migrate?](usmt/usmt-what-does-usmt-migrate.md) +#### [Choose a Migration Store Type](usmt/usmt-choose-migration-store-type.md) +#### [Migration Store Types Overview](usmt/migration-store-types-overview.md) +#### [Estimate Migration Store Size](usmt/usmt-estimate-migration-store-size.md) +#### [Hard-Link Migration Store](usmt/usmt-hard-link-migration-store.md) +#### [Migration Store Encryption](usmt/usmt-migration-store-encryption.md) +#### [Determine What to Migrate](usmt/usmt-determine-what-to-migrate.md) +#### [Identify Users](usmt/usmt-identify-users.md) +#### [Identify Applications Settings](usmt/usmt-identify-application-settings.md) +#### [Identify Operating System Settings](usmt/usmt-identify-operating-system-settings.md) +#### [Identify File Types, Files, and Folders](usmt/usmt-identify-file-types-files-and-folders.md) +#### [Test Your Migration](usmt/usmt-test-your-migration.md) +#### [User State Migration Tool (USMT) Command-line Syntax](usmt/usmt-command-line-syntax.md) +#### [ScanState Syntax](usmt/usmt-scanstate-syntax.md) +#### [LoadState Syntax](usmt/usmt-loadstate-syntax.md) +#### [UsmtUtils Syntax](usmt/usmt-utilities.md) +#### [USMT XML Reference](usmt/usmt-xml-reference.md) +#### [Understanding Migration XML Files](usmt/understanding-migration-xml-files.md) +#### [Config.xml File](usmt/usmt-configxml-file.md) +#### [Customize USMT XML Files](usmt/usmt-customize-xml-files.md) +#### [Custom XML Examples](usmt/usmt-custom-xml-examples.md) +#### [Conflicts and Precedence](usmt/usmt-conflicts-and-precedence.md) +#### [General Conventions](usmt/usmt-general-conventions.md) +#### [XML File Requirements](usmt/xml-file-requirements.md) +#### [Recognized Environment Variables](usmt/usmt-recognized-environment-variables.md) +#### [XML Elements Library](usmt/usmt-xml-elements-library.md) +#### [Offline Migration Reference](usmt/offline-migration-reference.md) -#### [Volume Activation Management Tool (VAMT) Technical Reference](volume-activation/volume-activation-management-tool.md) -##### [Introduction to VAMT](volume-activation/introduction-vamt.md) -##### [Active Directory-Based Activation Overview](volume-activation/active-directory-based-activation-overview.md) -##### [Install and Configure VAMT](volume-activation/install-configure-vamt.md) -###### [VAMT Requirements](volume-activation/vamt-requirements.md) -###### [Install VAMT](volume-activation/install-vamt.md) -###### [Configure Client Computers](volume-activation/configure-client-computers-vamt.md) -##### [Add and Manage Products](volume-activation/add-manage-products-vamt.md) -###### [Add and Remove Computers](volume-activation/add-remove-computers-vamt.md) -###### [Update Product Status](volume-activation/update-product-status-vamt.md) -###### [Remove Products](volume-activation/remove-products-vamt.md) -##### [Manage Product Keys](volume-activation/manage-product-keys-vamt.md) -###### [Add and Remove a Product Key](volume-activation/add-remove-product-key-vamt.md) -###### [Install a Product Key](volume-activation/install-product-key-vamt.md) -###### [Install a KMS Client Key](volume-activation/install-kms-client-key-vamt.md) -##### [Manage Activations](volume-activation/manage-activations-vamt.md) -###### [Perform Online Activation](volume-activation/online-activation-vamt.md) -###### [Perform Proxy Activation](volume-activation/proxy-activation-vamt.md) -###### [Perform KMS Activation](volume-activation/kms-activation-vamt.md) -###### [Perform Local Reactivation](volume-activation/local-reactivation-vamt.md) -###### [Activate an Active Directory Forest Online](volume-activation/activate-forest-vamt.md) -###### [Activate by Proxy an Active Directory Forest](volume-activation/activate-forest-by-proxy-vamt.md) -##### [Manage VAMT Data](volume-activation/manage-vamt-data.md) -###### [Import and Export VAMT Data](volume-activation/import-export-vamt-data.md) -###### [Use VAMT in Windows PowerShell](volume-activation/use-vamt-in-windows-powershell.md) -##### [VAMT Step-by-Step Scenarios](volume-activation/vamt-step-by-step.md) -###### [Scenario 1: Online Activation](volume-activation/scenario-online-activation-vamt.md) -###### [Scenario 2: Proxy Activation](volume-activation/scenario-proxy-activation-vamt.md) -###### [Scenario 3: KMS Client Activation](volume-activation/scenario-kms-activation-vamt.md) -##### [VAMT Known Issues](volume-activation/vamt-known-issues.md) -#### [User State Migration Tool (USMT) Technical Reference](usmt/usmt-technical-reference.md) -##### [User State Migration Tool (USMT) Overview Topics](usmt/usmt-topics.md) -###### [User State Migration Tool (USMT) Overview](usmt/usmt-overview.md) -###### [Getting Started with the User State Migration Tool (USMT)](usmt/getting-started-with-the-user-state-migration-tool.md) -###### [Windows Upgrade and Migration Considerations](upgrade/windows-upgrade-and-migration-considerations.md) -##### [User State Migration Tool (USMT) How-to topics](usmt/usmt-how-to.md) -###### [Exclude Files and Settings](usmt/usmt-exclude-files-and-settings.md) -###### [Extract Files from a Compressed USMT Migration Store](usmt/usmt-extract-files-from-a-compressed-migration-store.md) -###### [Include Files and Settings](usmt/usmt-include-files-and-settings.md) -###### [Migrate Application Settings](usmt/migrate-application-settings.md) -###### [Migrate EFS Files and Certificates](usmt/usmt-migrate-efs-files-and-certificates.md) -###### [Migrate User Accounts](usmt/usmt-migrate-user-accounts.md) -###### [Reroute Files and Settings](usmt/usmt-reroute-files-and-settings.md) -###### [Verify the Condition of a Compressed Migration Store](usmt/verify-the-condition-of-a-compressed-migration-store.md) -##### [User State Migration Tool (USMT) Troubleshooting](usmt/usmt-troubleshooting.md) -###### [Common Issues](usmt/usmt-common-issues.md) -###### [Frequently Asked Questions](usmt/usmt-faq.md) -###### [Log Files](usmt/usmt-log-files.md) -###### [Return Codes](usmt/usmt-return-codes.md) -###### [USMT Resources](usmt/usmt-resources.md) -##### [User State Migration Toolkit (USMT) Reference](usmt/usmt-reference.md) -###### [USMT Requirements](usmt/usmt-requirements.md) -###### [USMT Best Practices](usmt/usmt-best-practices.md) -###### [How USMT Works](usmt/usmt-how-it-works.md) -###### [Plan Your Migration](usmt/usmt-plan-your-migration.md) -####### [Common Migration Scenarios](usmt/usmt-common-migration-scenarios.md) -####### [What Does USMT Migrate?](usmt/usmt-what-does-usmt-migrate.md) -####### [Choose a Migration Store Type](usmt/usmt-choose-migration-store-type.md) -######## [Migration Store Types Overview](usmt/migration-store-types-overview.md) -######## [Estimate Migration Store Size](usmt/usmt-estimate-migration-store-size.md) -######## [Hard-Link Migration Store](usmt/usmt-hard-link-migration-store.md) -######## [Migration Store Encryption](usmt/usmt-migration-store-encryption.md) -####### [Determine What to Migrate](usmt/usmt-determine-what-to-migrate.md) -######## [Identify Users](usmt/usmt-identify-users.md) -######## [Identify Applications Settings](usmt/usmt-identify-application-settings.md) -######## [Identify Operating System Settings](usmt/usmt-identify-operating-system-settings.md) -######## [Identify File Types, Files, and Folders](usmt/usmt-identify-file-types-files-and-folders.md) -####### [Test Your Migration](usmt/usmt-test-your-migration.md) -###### [User State Migration Tool (USMT) Command-line Syntax](usmt/usmt-command-line-syntax.md) -####### [ScanState Syntax](usmt/usmt-scanstate-syntax.md) -####### [LoadState Syntax](usmt/usmt-loadstate-syntax.md) -####### [UsmtUtils Syntax](usmt/usmt-utilities.md) -###### [USMT XML Reference](usmt/usmt-xml-reference.md) -####### [Understanding Migration XML Files](usmt/understanding-migration-xml-files.md) -####### [Config.xml File](usmt/usmt-configxml-file.md) -####### [Customize USMT XML Files](usmt/usmt-customize-xml-files.md) -####### [Custom XML Examples](usmt/usmt-custom-xml-examples.md) -####### [Conflicts and Precedence](usmt/usmt-conflicts-and-precedence.md) -####### [General Conventions](usmt/usmt-general-conventions.md) -####### [XML File Requirements](usmt/xml-file-requirements.md) -####### [Recognized Environment Variables](usmt/usmt-recognized-environment-variables.md) -####### [XML Elements Library](usmt/usmt-xml-elements-library.md) -###### [Offline Migration Reference](usmt/offline-migration-reference.md) ### [Install fonts in Windows 10](windows-10-missing-fonts.md) ## Update Windows 10 @@ -274,4 +278,4 @@ #### [Get started with Device Health](update/device-health-get-started.md) #### [Using Device Health](update/device-health-using.md) ### [Enrolling devices in Windows Analytics](update/windows-analytics-get-started.md) -### [Troubleshooting Windows Analytics and FAQ](update/windows-analytics-FAQ-troubleshooting.md) +### [Troubleshooting Windows Analytics and FAQ](update/windows-analytics-FAQ-troubleshooting.md) \ No newline at end of file From 7ab753f0ab0d52da59d34cc5febe9e1a920f396f Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Fri, 20 Sep 2019 14:57:54 -0700 Subject: [PATCH 022/358] toc update --- windows/deployment/TOC.md | 8 ++++---- windows/deployment/deploy-windows-sccm/TOC.md | 15 +++++++++++++++ 2 files changed, 19 insertions(+), 4 deletions(-) create mode 100644 windows/deployment/deploy-windows-sccm/TOC.md diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index d57fbb46af..a9afa1f6ac 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -24,12 +24,12 @@ ## Deploy Windows 10 ### [In this section](deploy.md) -### [Versions and licensing] +### Versions and licensing #### [Windows 10 upgrade paths](upgrade/windows-10-upgrade-paths.md) #### [Windows 10 edition upgrade](upgrade/windows-10-edition-upgrades.md) #### [Windows 10 volume license media](windows-10-media.md) #### [Windows 10 in S mode](s-mode.md) -##### [Switch to Windows 10 Pro/Enterprise from S mode](windows-10-pro-in-s-mode.md) +#### [Switching to Windows 10 Pro/Enterprise from S mode](windows-10-pro-in-s-mode.md) ### Windows 10 deployment test lab #### [Windows 10 deployment proof of concept guide](windows-10-poc.md) @@ -90,8 +90,8 @@ #### Compatibility fixes ##### [Compatibility Fixes for Windows 10, Windows 8, Windows 7, and Windows Vista](planning/compatibility-fixes-for-windows-8-windows-7-and-windows-vista.md) -#### [Deploy Windows 10 with the Microsoft Deployment Toolkit (MDT)](deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md) -#### [Deploy Windows 10 with System Center Configuration Manager](deploy-windows-sccm/deploy-windows-10-with-system-center-2012-r2-configuration-manager.md) +### [Deploy Windows 10 with the Microsoft Deployment Toolkit (MDT)](deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md) +### [Deploy Windows 10 with System Center Configuration Manager](deploy-windows-sccm/deploy-windows-10-with-system-center-2012-r2-configuration-manager.md) ### [Windows 10 deployment tools](windows-10-deployment-tools.md) diff --git a/windows/deployment/deploy-windows-sccm/TOC.md b/windows/deployment/deploy-windows-sccm/TOC.md new file mode 100644 index 0000000000..1ff58027c4 --- /dev/null +++ b/windows/deployment/deploy-windows-sccm/TOC.md @@ -0,0 +1,15 @@ +# Deploy Windows 10 with System Center Configuration Manager +## [System Center Configuration Manager components](deploy-windows-sccm/deploy-windows-10-with-system-center-2012-r2-configuration-manager.md) +### [Integrate Configuration Manager with MDT](deploy-windows-mdt/integrate-configuration-manager-with-mdt.md) +### [Prepare for Zero Touch Installation of Windows 10 with Configuration Manager](deploy-windows-sccm/prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md) +### [Create a custom Windows PE boot image with Configuration Manager](deploy-windows-sccm/create-a-custom-windows-pe-boot-image-with-configuration-manager.md) +### [Add a Windows 10 operating system image using Configuration Manager](deploy-windows-sccm/add-a-windows-10-operating-system-image-using-configuration-manager.md) +### [Create an application to deploy with Windows 10 using Configuration Manager](deploy-windows-sccm/create-an-application-to-deploy-with-windows-10-using-configuration-manager.md) +### [Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](deploy-windows-sccm/add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md) +### [Create a task sequence with Configuration Manager and MDT](deploy-windows-mdt/create-a-task-sequence-with-configuration-manager-and-mdt.md) +### [Finalize the operating system configuration for Windows 10 deployment with Configuration Manager](deploy-windows-sccm/finalize-the-os-configuration-for-windows-10-deployment-with-configuration-manager.md) +### [Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-sccm/deploy-windows-10-using-pxe-and-configuration-manager.md) +### [Monitor the Windows 10 deployment with Configuration Manager](deploy-windows-sccm/monitor-windows-10-deployment-with-configuration-manager.md) +### [Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](deploy-windows-sccm/refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md) +### [Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](deploy-windows-sccm/replace-a-windows-7-client-with-windows-10-using-configuration-manager.md) +### [Perform an in-place upgrade to Windows 10 using Configuration Manager](upgrade/upgrade-to-windows-10-with-system-center-configuraton-manager.md) \ No newline at end of file From 2c69edd984a431981d8faee76a62742dfd32574d Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Thu, 3 Oct 2019 11:41:20 -0700 Subject: [PATCH 023/358] draft --- ...0-with-the-microsoft-deployment-toolkit.md | 219 +++++++++--------- 1 file changed, 110 insertions(+), 109 deletions(-) diff --git a/windows/deployment/upgrade/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md b/windows/deployment/upgrade/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md index 2a7e01c1d8..39e04d3640 100644 --- a/windows/deployment/upgrade/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/upgrade/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md @@ -1,109 +1,110 @@ ---- -title: Perform an in-place upgrade to Windows 10 with MDT (Windows 10) -description: The simplest path to upgrade PCs that are currently running Windows 7, Windows 8, or Windows 8.1 to Windows 10 is through an in-place upgrade. -ms.assetid: B8993151-3C1E-4F22-93F4-2C5F2771A460 -ms.reviewer: -manager: laurawi -ms.author: greglin -keywords: upgrade, update, task sequence, deploy -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: mdt -audience: itpro author: greg-lindsay -ms.topic: article ---- - -# Perform an in-place upgrade to Windows 10 with MDT - -**Applies to** -- Windows 10 - -The simplest path to upgrade PCs that are currently running Windows 7, Windows 8, or Windows 8.1 to Windows 10 is through an in-place upgrade. You can use a Microsoft Deployment Toolkit (MDT) 2013 Update 2 task sequence to completely automate the process. - -## Proof-of-concept environment - -For the purposes of this topic, we will use four machines: DC01, MDT01, and PC0001. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 standard machine, fully patched with the latest security updates, and configured as a member server in the fictional contoso.com domain. PC0001 is a machine with Windows 7 SP1, targeted for the Windows 10 upgrade. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](../deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md). - -![fig 1](../images/upgrademdt-fig1-machines.png) - -Figure 1. The machines used in this topic. - -## Set up the upgrade task sequence - -MDT adds support for Windows 10 deployment, including a new in-place upgrade task sequence template that makes the process really simple. - -## Create the MDT production deployment share - -The steps to create the deployment share for production are the same as when you created the deployment share to create the custom reference image: - -1. On MDT01, log on as Administrator in the CONTOSO domain with a password of P@ssw0rd. -2. Using the Deployment Workbench, right-click **Deployment Shares** and select **New Deployment Share**. -3. On the **Path** page, in the **Deployment share path** text box, type **E:\\MDTProduction**, and then click **Next**. -4. On the **Share** page, in the **Share name** text box, type **MDTProduction$**, and then click **Next**. -5. On the **Descriptive Name** page, in the **Deployment share** description text box, type **MDT Production**, and then click **Next**. -6. On the **Options** page, accept the default settings and click **Next** twice, and then click **Finish**. -7. Using File Explorer, verify that you can access the **\\\\MDT01\\MDTProduction$** share. - -## Add Windows 10 Enterprise x64 (full source) - -In these steps we assume that you have copied the content of a Windows 10 Enterprise x64 ISO to the E:\\Downloads\\Windows 10 Enterprise x64 folder. - -1. Using the Deployment Workbench, expand the **Deployment Shares** node, and then expand **MDT Production**. -2. Right-click the **Operating Systems** node, and create a new folder named **Windows 10**. -3. Expand the **Operating Systems** node, right-click the **Windows 10** folder, and select **Import Operating System**. Use the following settings for the Import Operating System Wizard: - - Full set of source files - - Source directory: E:\\Downloads\\Windows 10 Enterprise x64 - - Destination directory name: W10EX64RTM -4. After you add the operating system, in the **Operating Systems / Windows 10** folder, double-click the added operating system name in the **Operating System** node and change the name to the following: **Windows 10 Enterprise x64 RTM Default Image** - -![figure 2](../images/upgrademdt-fig2-importedos.png) - -Figure 2. The imported Windows 10 operating system after you rename it. - -## Create a task sequence to upgrade to Windows 10 Enterprise - -1. Using the Deployment Workbench, select **Task Sequences** in the **MDT Production** node, and create a folder named **Windows 10**. -2. Right-click the new **Windows 10** folder and select **New Task Sequence**. Use the following settings for the New Task Sequence Wizard: - - Task sequence ID: W10-X64-UPG - - Task sequence name: Windows 10 Enterprise x64 RTM Upgrade - - Template: Standard Client Upgrade Task Sequence - - Select OS: Windows 10 Enterprise x64 RTM Default Image - - Specify Product Key: Do not specify a product key at this time - - Full Name: Contoso - - Organization: Contoso - - Internet Explorer home page: about:blank - - Admin Password: Do not specify an Administrator Password at this time - -![figure 3](../images/upgrademdt-fig3-tasksequence.png) - -Figure 3. The task sequence to upgrade to Windows 10. - -## Perform the Windows 10 upgrade - -To initiate the in-place upgrade, perform the following steps on PC0003 (currently running Windows 7 SP1). - -1. Start the MDT deployment wizard by running the following command: **\\\\MDT01\\MDTProduction$\\Scripts\\LiteTouch.vbs** -2. Select the **Windows 10 Enterprise x64 RTM Upgrade** task sequence, and then click **Next**. - - ![figure 4](../images/upgrademdt-fig4-selecttask.png) - - Figure 4. Upgrade task sequence. - -3. On the **Credentials** tab, specify the **MDT\_BA** account, P@ssw0rd password, and **CONTOSO** for the domain. (Some or all of these values can be specified in Bootstrap.ini so they are automatically populated.) -4. On the **Ready** tab, click **Begin** to start the task sequence. - When the task sequence begins, it automatically initiates the in-place upgrade process by invoking the Windows setup program (Setup.exe) with the necessary command-line parameters to perform an automated upgrade, which preserves all data, settings, apps, and drivers. - -![figure 5](../images/upgrademdt-fig5-winupgrade.png) - -Figure 5. Upgrade from Windows 7 to Windows 10 Enterprise x64 with a task sequence. - -After the task sequence completes, the computer will be fully upgraded to Windows 10. - -## Related topics - -[Windows 10 deployment scenarios](../windows-10-deployment-scenarios.md) - -[Microsoft Deployment Toolkit downloads and resources](https://go.microsoft.com/fwlink/p/?LinkId=618117) - +--- +title: Perform an in-place upgrade to Windows 10 with MDT (Windows 10) +description: The simplest path to upgrade PCs that are currently running Windows 7, Windows 8, or Windows 8.1 to Windows 10 is through an in-place upgrade. +ms.assetid: B8993151-3C1E-4F22-93F4-2C5F2771A460 +ms.reviewer: +manager: laurawi +ms.author: greglin +keywords: upgrade, update, task sequence, deploy +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.sitesec: library +ms.pagetype: mdt +audience: itpro +author: greg-lindsay +ms.topic: article +--- + +# Perform an in-place upgrade to Windows 10 with MDT + +**Applies to** +- Windows 10 + +The simplest path to upgrade PCs that are currently running Windows 7, Windows 8, or Windows 8.1 to Windows 10 is through an in-place upgrade. You can use a Microsoft Deployment Toolkit (MDT) 2013 Update 2 task sequence to completely automate the process. + +## Proof-of-concept environment + +For the purposes of this topic, we will use four machines: DC01, MDT01, and PC0001. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 standard machine, fully patched with the latest security updates, and configured as a member server in the fictional contoso.com domain. PC0001 is a machine with Windows 7 SP1, targeted for the Windows 10 upgrade. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](../deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md). + +![fig 1](../images/upgrademdt-fig1-machines.png) + +Figure 1. The computers used in this topic. + +## Set up the upgrade task sequence + +MDT adds support for Windows 10 deployment, including a new in-place upgrade task sequence template that makes the process really simple. + +## Create the MDT production deployment share + +The steps to create the deployment share for production are the same as when you created the deployment share to create the custom reference image: + +1. On MDT01, log on as Administrator in the CONTOSO domain with a password of P@ssw0rd. +2. Using the Deployment Workbench, right-click **Deployment Shares** and select **New Deployment Share**. +3. On the **Path** page, in the **Deployment share path** text box, type **E:\\MDTProduction**, and then click **Next**. +4. On the **Share** page, in the **Share name** text box, type **MDTProduction$**, and then click **Next**. +5. On the **Descriptive Name** page, in the **Deployment share** description text box, type **MDT Production**, and then click **Next**. +6. On the **Options** page, accept the default settings and click **Next** twice, and then click **Finish**. +7. Using File Explorer, verify that you can access the **\\\\MDT01\\MDTProduction$** share. + +## Add Windows 10 Enterprise x64 (full source) + +In these steps we assume that you have copied the content of a Windows 10 Enterprise x64 ISO to the E:\\Downloads\\Windows 10 Enterprise x64 folder. + +1. Using the Deployment Workbench, expand the **Deployment Shares** node, and then expand **MDT Production**. +2. Right-click the **Operating Systems** node, and create a new folder named **Windows 10**. +3. Expand the **Operating Systems** node, right-click the **Windows 10** folder, and select **Import Operating System**. Use the following settings for the Import Operating System Wizard: + - Full set of source files + - Source directory: E:\\Downloads\\Windows 10 Enterprise x64 + - Destination directory name: W10EX64RTM +4. After you add the operating system, in the **Operating Systems / Windows 10** folder, double-click the added operating system name in the **Operating System** node and change the name to the following: **Windows 10 Enterprise x64 RTM Default Image** + +![figure 2](../images/upgrademdt-fig2-importedos.png) + +Figure 2. The imported Windows 10 operating system after you rename it. + +## Create a task sequence to upgrade to Windows 10 Enterprise + +1. Using the Deployment Workbench, select **Task Sequences** in the **MDT Production** node, and create a folder named **Windows 10**. +2. Right-click the new **Windows 10** folder and select **New Task Sequence**. Use the following settings for the New Task Sequence Wizard: + - Task sequence ID: W10-X64-UPG + - Task sequence name: Windows 10 Enterprise x64 RTM Upgrade + - Template: Standard Client Upgrade Task Sequence + - Select OS: Windows 10 Enterprise x64 RTM Default Image + - Specify Product Key: Do not specify a product key at this time + - Full Name: Contoso + - Organization: Contoso + - Internet Explorer home page: about:blank + - Admin Password: Do not specify an Administrator Password at this time + +![figure 3](../images/upgrademdt-fig3-tasksequence.png) + +Figure 3. The task sequence to upgrade to Windows 10. + +## Perform the Windows 10 upgrade + +To initiate the in-place upgrade, perform the following steps on PC0003 (currently running Windows 7 SP1). + +1. Start the MDT deployment wizard by running the following command: **\\\\MDT01\\MDTProduction$\\Scripts\\LiteTouch.vbs** +2. Select the **Windows 10 Enterprise x64 RTM Upgrade** task sequence, and then click **Next**. + + ![figure 4](../images/upgrademdt-fig4-selecttask.png) + + Figure 4. Upgrade task sequence. + +3. On the **Credentials** tab, specify the **MDT\_BA** account, P@ssw0rd password, and **CONTOSO** for the domain. (Some or all of these values can be specified in Bootstrap.ini so they are automatically populated.) +4. On the **Ready** tab, click **Begin** to start the task sequence. + When the task sequence begins, it automatically initiates the in-place upgrade process by invoking the Windows setup program (Setup.exe) with the necessary command-line parameters to perform an automated upgrade, which preserves all data, settings, apps, and drivers. + +![figure 5](../images/upgrademdt-fig5-winupgrade.png) + +Figure 5. Upgrade from Windows 7 to Windows 10 Enterprise x64 with a task sequence. + +After the task sequence completes, the computer will be fully upgraded to Windows 10. + +## Related topics + +[Windows 10 deployment scenarios](../windows-10-deployment-scenarios.md) + +[Microsoft Deployment Toolkit downloads and resources](https://go.microsoft.com/fwlink/p/?LinkId=618117) + From 4bf1d06874767011157329009c6e37bd079f975d Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Thu, 3 Oct 2019 13:51:05 -0700 Subject: [PATCH 024/358] new landing page --- windows/deployment/TOC.md | 175 +-------------------- windows/deployment/deploy-old.md | 48 ++++++ windows/deployment/deploy.md | 259 +++++++++++++++++++++++++------ 3 files changed, 261 insertions(+), 221 deletions(-) create mode 100644 windows/deployment/deploy-old.md diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index a9afa1f6ac..1bcb5bfeae 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -22,180 +22,7 @@ ### [Submit Windows 10 upgrade errors](upgrade/submit-errors.md) ## Deploy Windows 10 -### [In this section](deploy.md) - -### Versions and licensing -#### [Windows 10 upgrade paths](upgrade/windows-10-upgrade-paths.md) -#### [Windows 10 edition upgrade](upgrade/windows-10-edition-upgrades.md) -#### [Windows 10 volume license media](windows-10-media.md) -#### [Windows 10 in S mode](s-mode.md) -#### [Switching to Windows 10 Pro/Enterprise from S mode](windows-10-pro-in-s-mode.md) - -### Windows 10 deployment test lab -#### [Windows 10 deployment proof of concept guide](windows-10-poc.md) -##### [Deploy Windows 10 in a test lab using Microsoft Deployment Toolkit](windows-10-poc-mdt.md) -##### [Deploy Windows 10 in a test lab using System Center Configuration Manager](windows-10-poc-sc-config-mgr.md) - -### Plan for Windows 10 deployment -#### [Windows 10 deployment planning](planning/index.md) -##### [Windows 10 Enterprise FAQ for IT Pros](planning/windows-10-enterprise-faq-itpro.md) -##### [Windows 10 deployment considerations](planning/windows-10-deployment-considerations.md) -##### [Windows 10 compatibility](planning/windows-10-compatibility.md) -##### [Windows 10 infrastructure requirements](planning/windows-10-infrastructure-requirements.md) - -#### Volume activation -##### [Volume activation [client]](volume-activation/volume-activation-windows-10.md) -###### [Plan for volume activation [client]](volume-activation/plan-for-volume-activation-client.md) -###### [Activate using Key Management Service [client]](volume-activation/activate-using-key-management-service-vamt.md) -###### [Activate using Active Directory-based activation [client]](volume-activation/activate-using-active-directory-based-activation-client.md) -###### [Activate clients running Windows 10](volume-activation/activate-windows-10-clients-vamt.md) -###### [Monitor activation [client]](volume-activation/monitor-activation-client.md) -###### [Use the Volume Activation Management Tool [client]](volume-activation/use-the-volume-activation-management-tool-client.md) -###### [Appendix: Information sent to Microsoft during activation [client]](volume-activation/appendix-information-sent-to-microsoft-during-activation-client.md) - -#### Application Compatibility Toolkit -##### [Application Compatibility Toolkit (ACT) Technical Reference](planning/act-technical-reference.md) - -#### Standard User Analyzer (SUA) guide -##### [SUA user guide](planning/sua-users-guide.md) -##### [Using the SUA Wizard](planning/using-the-sua-wizard.md) -##### [Using the SUA Tool](planning/using-the-sua-tool.md) -##### [Tabs on the SUA Tool Interface](planning/tabs-on-the-sua-tool-interface.md) -##### [Showing Messages Generated by the SUA Tool](planning/showing-messages-generated-by-the-sua-tool.md) -##### [Applying Filters to Data in the SUA Tool](planning/applying-filters-to-data-in-the-sua-tool.md) -##### [Fixing Applications by Using the SUA Tool](planning/fixing-applications-by-using-the-sua-tool.md) - -#### Compatibility Administrator -##### [Compatibility Administrator user guide](planning/compatibility-administrator-users-guide.md) -##### [Using the Compatibility Administrator Tool](planning/using-the-compatibility-administrator-tool.md) -##### [Available Data Types and Operators in Compatibility Administrator](planning/available-data-types-and-operators-in-compatibility-administrator.md) -##### [Searching for Fixed Applications in Compatibility Administrator](planning/searching-for-fixed-applications-in-compatibility-administrator.md) -##### [Searching for Installed Compatibility Fixes with the Query Tool in Compatibility Administrator](planning/searching-for-installed-compatibility-fixes-with-the-query-tool-in-compatibility-administrator.md) -##### [Creating a Custom Compatibility Fix in Compatibility Administrator](planning/creating-a-custom-compatibility-fix-in-compatibility-administrator.md) -##### [Creating a Custom Compatibility Mode in Compatibility Administrator](planning/creating-a-custom-compatibility-mode-in-compatibility-administrator.md) -##### [Creating an AppHelp Message in Compatibility Administrator](planning/creating-an-apphelp-message-in-compatibility-administrator.md) -##### [Viewing the Events Screen in Compatibility Administrator](planning/viewing-the-events-screen-in-compatibility-administrator.md) -##### [Enabling and Disabling Compatibility Fixes in Compatibility Administrator](planning/enabling-and-disabling-compatibility-fixes-in-compatibility-administrator.md) -##### [Installing and Uninstalling Custom Compatibility Databases in Compatibility Administrator](planning/installing-and-uninstalling-custom-compatibility-databases-in-compatibility-administrator.md) - -#### Application compatibility fixes and custom fix databases -##### [Managing Application compatibility fixes and custom fix databases](planning/managing-application-compatibility-fixes-and-custom-fix-databases.md) -##### [Understanding and using compatibility fixes](planning/understanding-and-using-compatibility-fixes.md) -##### [Compatibility fix database management strategies and deployment](planning/compatibility-fix-database-management-strategies-and-deployment.md) -##### [Testing your application mitigation packages](planning/testing-your-application-mitigation-packages.md) - -#### Sbdinst.exe command-line tool -##### [Using the Sdbinst.exe Command-Line Tool](planning/using-the-sdbinstexe-command-line-tool.md) - -#### Compatibility fixes -##### [Compatibility Fixes for Windows 10, Windows 8, Windows 7, and Windows Vista](planning/compatibility-fixes-for-windows-8-windows-7-and-windows-vista.md) - -### [Deploy Windows 10 with the Microsoft Deployment Toolkit (MDT)](deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md) -### [Deploy Windows 10 with System Center Configuration Manager](deploy-windows-sccm/deploy-windows-10-with-system-center-2012-r2-configuration-manager.md) - -### [Windows 10 deployment tools](windows-10-deployment-tools.md) - -#### [Windows 10 deployment scenarios and tools](windows-deployment-scenarios-and-tools.md) -#### [Convert MBR partition to GPT](mbr-to-gpt.md) -#### [Configure a PXE server to load Windows PE](configure-a-pxe-server-to-load-windows-pe.md) -#### [Windows ADK for Windows 10 scenarios for IT Pros](windows-adk-scenarios-for-it-pros.md) - -#### Windows To Go -##### [Deploy Windows To Go in your organization](deploy-windows-to-go.md) -##### [Windows To Go: feature overview](planning/windows-to-go-overview.md) -##### [Best practice recommendations for Windows To Go](planning/best-practice-recommendations-for-windows-to-go.md) -##### [Deployment considerations for Windows To Go](planning/deployment-considerations-for-windows-to-go.md) -##### [Prepare your organization for Windows To Go](planning/prepare-your-organization-for-windows-to-go.md) -##### [Security and data protection considerations for Windows To Go](planning/security-and-data-protection-considerations-for-windows-to-go.md) -##### [Windows To Go: frequently asked questions](planning/windows-to-go-frequently-asked-questions.md) - -### Volume Activation Managemetn Tool (VAMT) -#### [VAMT Technical Reference](volume-activation/volume-activation-management-tool.md) -#### [Introduction to VAMT](volume-activation/introduction-vamt.md) -#### [Active Directory-Based Activation Overview](volume-activation/active-directory-based-activation-overview.md) -#### [Install and Configure VAMT](volume-activation/install-configure-vamt.md) -#### [VAMT Requirements](volume-activation/vamt-requirements.md) -#### [Install VAMT](volume-activation/install-vamt.md) -#### [Configure Client Computers](volume-activation/configure-client-computers-vamt.md) -#### [Add and Manage Products](volume-activation/add-manage-products-vamt.md) -#### [Add and Remove Computers](volume-activation/add-remove-computers-vamt.md) -#### [Update Product Status](volume-activation/update-product-status-vamt.md) -#### [Remove Products](volume-activation/remove-products-vamt.md) -#### [Manage Product Keys](volume-activation/manage-product-keys-vamt.md) -#### [Add and Remove a Product Key](volume-activation/add-remove-product-key-vamt.md) -#### [Install a Product Key](volume-activation/install-product-key-vamt.md) -#### [Install a KMS Client Key](volume-activation/install-kms-client-key-vamt.md) -#### [Manage Activations](volume-activation/manage-activations-vamt.md) -#### [Perform Online Activation](volume-activation/online-activation-vamt.md) -#### [Perform Proxy Activation](volume-activation/proxy-activation-vamt.md) -#### [Perform KMS Activation](volume-activation/kms-activation-vamt.md) -#### [Perform Local Reactivation](volume-activation/local-reactivation-vamt.md) -#### [Activate an Active Directory Forest Online](volume-activation/activate-forest-vamt.md) -#### [Activate by Proxy an Active Directory Forest](volume-activation/activate-forest-by-proxy-vamt.md) -#### [Manage VAMT Data](volume-activation/manage-vamt-data.md) -#### [Import and Export VAMT Data](volume-activation/import-export-vamt-data.md) -#### [Use VAMT in Windows PowerShell](volume-activation/use-vamt-in-windows-powershell.md) -#### [VAMT Step-by-Step Scenarios](volume-activation/vamt-step-by-step.md) -#### [Scenario 1: Online Activation](volume-activation/scenario-online-activation-vamt.md) -#### [Scenario 2: Proxy Activation](volume-activation/scenario-proxy-activation-vamt.md) -#### [Scenario 3: KMS Client Activation](volume-activation/scenario-kms-activation-vamt.md) -#### [VAMT Known Issues](volume-activation/vamt-known-issues.md) - -#### User State Migration Tool (USMT) -#### [USMT Technical Reference](usmt/usmt-technical-reference.md) -#### [USMT Overview Topics](usmt/usmt-topics.md) -#### [USMT Overview](usmt/usmt-overview.md) -#### [Getting Started with the USMT](usmt/getting-started-with-the-user-state-migration-tool.md) -#### [Windows Upgrade and Migration Considerations](upgrade/windows-upgrade-and-migration-considerations.md) -#### [USMT How-to topics](usmt/usmt-how-to.md) -#### [Exclude Files and Settings](usmt/usmt-exclude-files-and-settings.md) -#### [Extract Files from a Compressed USMT Migration Store](usmt/usmt-extract-files-from-a-compressed-migration-store.md) -#### [Include Files and Settings](usmt/usmt-include-files-and-settings.md) -#### [Migrate Application Settings](usmt/migrate-application-settings.md) -#### [Migrate EFS Files and Certificates](usmt/usmt-migrate-efs-files-and-certificates.md) -#### [Migrate User Accounts](usmt/usmt-migrate-user-accounts.md) -#### [Reroute Files and Settings](usmt/usmt-reroute-files-and-settings.md) -#### [Verify the Condition of a Compressed Migration Store](usmt/verify-the-condition-of-a-compressed-migration-store.md) -#### [USMT Troubleshooting](usmt/usmt-troubleshooting.md) -#### [Common Issues](usmt/usmt-common-issues.md) -#### [Frequently Asked Questions](usmt/usmt-faq.md) -#### [Log Files](usmt/usmt-log-files.md) -#### [Return Codes](usmt/usmt-return-codes.md) -#### [USMT Resources](usmt/usmt-resources.md) -#### [USMT Reference](usmt/usmt-reference.md) -#### [USMT Requirements](usmt/usmt-requirements.md) -#### [USMT Best Practices](usmt/usmt-best-practices.md) -#### [How USMT Works](usmt/usmt-how-it-works.md) -#### [Plan Your Migration](usmt/usmt-plan-your-migration.md) -#### [What Does USMT Migrate?](usmt/usmt-what-does-usmt-migrate.md) -#### [Choose a Migration Store Type](usmt/usmt-choose-migration-store-type.md) -#### [Migration Store Types Overview](usmt/migration-store-types-overview.md) -#### [Estimate Migration Store Size](usmt/usmt-estimate-migration-store-size.md) -#### [Hard-Link Migration Store](usmt/usmt-hard-link-migration-store.md) -#### [Migration Store Encryption](usmt/usmt-migration-store-encryption.md) -#### [Determine What to Migrate](usmt/usmt-determine-what-to-migrate.md) -#### [Identify Users](usmt/usmt-identify-users.md) -#### [Identify Applications Settings](usmt/usmt-identify-application-settings.md) -#### [Identify Operating System Settings](usmt/usmt-identify-operating-system-settings.md) -#### [Identify File Types, Files, and Folders](usmt/usmt-identify-file-types-files-and-folders.md) -#### [Test Your Migration](usmt/usmt-test-your-migration.md) -#### [User State Migration Tool (USMT) Command-line Syntax](usmt/usmt-command-line-syntax.md) -#### [ScanState Syntax](usmt/usmt-scanstate-syntax.md) -#### [LoadState Syntax](usmt/usmt-loadstate-syntax.md) -#### [UsmtUtils Syntax](usmt/usmt-utilities.md) -#### [USMT XML Reference](usmt/usmt-xml-reference.md) -#### [Understanding Migration XML Files](usmt/understanding-migration-xml-files.md) -#### [Config.xml File](usmt/usmt-configxml-file.md) -#### [Customize USMT XML Files](usmt/usmt-customize-xml-files.md) -#### [Custom XML Examples](usmt/usmt-custom-xml-examples.md) -#### [Conflicts and Precedence](usmt/usmt-conflicts-and-precedence.md) -#### [General Conventions](usmt/usmt-general-conventions.md) -#### [XML File Requirements](usmt/xml-file-requirements.md) -#### [Recognized Environment Variables](usmt/usmt-recognized-environment-variables.md) -#### [XML Elements Library](usmt/usmt-xml-elements-library.md) -#### [Offline Migration Reference](usmt/offline-migration-reference.md) - -### [Install fonts in Windows 10](windows-10-missing-fonts.md) +### [Documentation and resources](deploy.md) ## Update Windows 10 ### [Update Windows 10 in enterprise deployments](update/index.md) diff --git a/windows/deployment/deploy-old.md b/windows/deployment/deploy-old.md new file mode 100644 index 0000000000..56697276c6 --- /dev/null +++ b/windows/deployment/deploy-old.md @@ -0,0 +1,48 @@ +--- +title: Deploy Windows 10 (Windows 10) +description: Deploying Windows 10 for IT professionals. +ms.assetid: E9E2DED5-DBA7-4300-B411-BA0FD39BE18C +ms.reviewer: +manager: laurawi +ms.audience: itpro +author: greg-lindsay +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.localizationpriority: medium +audience: itpro +author: greg-lindsay +ms.topic: article +--- + +# Deploy Windows 10 + +Windows 10 upgrade options are discussed and information is provided about planning, testing, and managing your production deployment. Procedures are provided to help you with a new deployment of the Windows 10 operating system, or to upgrade from a previous version of Windows to Windows 10. The following sections and topics are available. + + +|Topic |Description | +|------|------------| +|[Overview of Windows Autopilot](windows-autopilot/windows-autopilot.md) |This topic provides an overview of Windows Autopilot deployment, a new zero-touch method for deploying Windows 10 in the enterprise. | +|[Windows 10 upgrade paths](upgrade/windows-10-upgrade-paths.md) |This topic provides information about support for upgrading directly to Windows 10 from a previous operating system. | +|[Windows 10 edition upgrade](upgrade/windows-10-edition-upgrades.md) |This topic provides information about support for upgrading from one edition of Windows 10 to another. | +|[Windows 10 volume license media](windows-10-media.md) |This topic provides information about updates to volume licensing media in the current version of Windows 10. | +|[Manage Windows upgrades with Upgrade Readiness](upgrade/manage-windows-upgrades-with-upgrade-readiness.md) |With Upgrade Readiness, enterprises now have the tools to plan and manage the upgrade process end to end, allowing them to adopt new Windows releases more quickly. With Windows diagnostic data enabled, Upgrade Readiness collects system, application, and driver data for analysis. We then identify compatibility issues that can block an upgrade and suggest fixes when they are known to Microsoft. The Upgrade Readiness workflow steps you through the discovery and rationalization process until you have a list of computers that are ready to be upgraded. | +|[Windows 10 deployment test lab](windows-10-poc.md) |This guide contains instructions to configure a proof of concept (PoC) environment requiring a minimum amount of resources. The guide makes extensive use of Windows PowerShell and Hyper-V. Subsequent companion guides contain steps to deploy Windows 10 using the PoC environment. After completing this guide, additional guides are provided to deploy Windows 10 in the test lab using [Microsoft Deployment Toolkit](windows-10-poc-mdt.md) or [System Center Configuration Manager](windows-10-poc-sc-config-mgr.md). | +|[Plan for Windows 10 deployment](planning/index.md) | This section describes Windows 10 deployment considerations and provides information to assist in Windows 10 deployment planning. | +|[Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md) |This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT). | +|[Deploy Windows 10 with System Center 2012 R2 Configuration Manager](deploy-windows-sccm/deploy-windows-10-with-system-center-2012-r2-configuration-manager.md) |If you have Microsoft System Center 2012 R2 Configuration Manager in your environment, you will most likely want to use it to deploy Windows 10. This topic will show you how to set up Configuration Manager for operating system deployment and how to integrate Configuration Manager with the Microsoft Deployment Toolkit (MDT) or. | +|[Windows 10 deployment tools](windows-10-deployment-tools-reference.md) |Learn about available tools to deploy Windows 10, such as the Windows ADK, DISM, USMT, WDS, MDT, Windows PE and more. | +|[How to install fonts that are missing after upgrading to Windows 10](windows-10-missing-fonts.md)|Windows 10 introduced changes to the fonts that are included in the image by default. Learn how to install additional fonts from **Optional features** after you install Windows 10 or upgrade from a previous version.| + +## Related topics + +[Modern Destop Deployment Center](https://docs.microsoft.com/microsoft-365/enterprise/desktop-deployment-center-home) + +  + +  + + + + + diff --git a/windows/deployment/deploy.md b/windows/deployment/deploy.md index 90bcabb6d6..f7939cccf1 100644 --- a/windows/deployment/deploy.md +++ b/windows/deployment/deploy.md @@ -1,47 +1,212 @@ ---- -title: Deploy Windows 10 (Windows 10) -description: Deploying Windows 10 for IT professionals. -ms.assetid: E9E2DED5-DBA7-4300-B411-BA0FD39BE18C -ms.reviewer: -manager: laurawi -ms.audience: itpro author: greg-lindsay -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.localizationpriority: medium -ms.date: 11/06/2018 -audience: itpro author: greg-lindsay -ms.topic: article ---- - -# Deploy Windows 10 - -Windows 10 upgrade options are discussed and information is provided about planning, testing, and managing your production deployment. Procedures are provided to help you with a new deployment of the Windows 10 operating system, or to upgrade from a previous version of Windows to Windows 10. The following sections and topics are available. - - -|Topic |Description | -|------|------------| -|[Overview of Windows Autopilot](windows-autopilot/windows-autopilot.md) |This topic provides an overview of Windows Autopilot deployment, a new zero-touch method for deploying Windows 10 in the enterprise. | -|[Windows 10 upgrade paths](upgrade/windows-10-upgrade-paths.md) |This topic provides information about support for upgrading directly to Windows 10 from a previous operating system. | -|[Windows 10 edition upgrade](upgrade/windows-10-edition-upgrades.md) |This topic provides information about support for upgrading from one edition of Windows 10 to another. | -|[Windows 10 volume license media](windows-10-media.md) |This topic provides information about updates to volume licensing media in the current version of Windows 10. | -|[Manage Windows upgrades with Upgrade Readiness](upgrade/manage-windows-upgrades-with-upgrade-readiness.md) |With Upgrade Readiness, enterprises now have the tools to plan and manage the upgrade process end to end, allowing them to adopt new Windows releases more quickly. With Windows diagnostic data enabled, Upgrade Readiness collects system, application, and driver data for analysis. We then identify compatibility issues that can block an upgrade and suggest fixes when they are known to Microsoft. The Upgrade Readiness workflow steps you through the discovery and rationalization process until you have a list of computers that are ready to be upgraded. | -|[Windows 10 deployment test lab](windows-10-poc.md) |This guide contains instructions to configure a proof of concept (PoC) environment requiring a minimum amount of resources. The guide makes extensive use of Windows PowerShell and Hyper-V. Subsequent companion guides contain steps to deploy Windows 10 using the PoC environment. After completing this guide, additional guides are provided to deploy Windows 10 in the test lab using [Microsoft Deployment Toolkit](windows-10-poc-mdt.md) or [System Center Configuration Manager](windows-10-poc-sc-config-mgr.md). | -|[Plan for Windows 10 deployment](planning/index.md) | This section describes Windows 10 deployment considerations and provides information to assist in Windows 10 deployment planning. | -|[Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md) |This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT). | -|[Deploy Windows 10 with System Center 2012 R2 Configuration Manager](deploy-windows-sccm/deploy-windows-10-with-system-center-2012-r2-configuration-manager.md) |If you have Microsoft System Center 2012 R2 Configuration Manager in your environment, you will most likely want to use it to deploy Windows 10. This topic will show you how to set up Configuration Manager for operating system deployment and how to integrate Configuration Manager with the Microsoft Deployment Toolkit (MDT) or. | -|[Windows 10 deployment tools](windows-10-deployment-tools-reference.md) |Learn about available tools to deploy Windows 10, such as the Windows ADK, DISM, USMT, WDS, MDT, Windows PE and more. | -|[How to install fonts that are missing after upgrading to Windows 10](windows-10-missing-fonts.md)|Windows 10 introduced changes to the fonts that are included in the image by default. Learn how to install additional fonts from **Optional features** after you install Windows 10 or upgrade from a previous version.| - -## Related topics - -[Modern Destop Deployment Center](https://docs.microsoft.com/microsoft-365/enterprise/desktop-deployment-center-home) - -  - -  - - - - - +--- +layout: HubPage +hide_bc: true +description: Windows 10 deployment resources and documentation for admins & IT professionals +ms.author: greglin +author: greg-lindsay +ms.topic: hub-page +keywords: Windows 10 Enterprise, deploy, plan, test +localization_priority: Normal +audience: itpro +ms.prod: w10 +title: Windows 10 deployment resources and documentation for admins & IT professionals +description: Windows 10 deployment resources and documentation for admins & IT professionals +--- +

 \ No newline at end of file From 5d563ffb3f870e7e3f6ed839f4047135bd71a918 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Thu, 3 Oct 2019 14:55:58 -0700 Subject: [PATCH 025/358] landing page --- windows/deployment/TOC.md | 3 +-- windows/deployment/deploy.md | 2 +- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/windows/deployment/TOC.md b/windows/deployment/TOC.md index 1bcb5bfeae..fb8ebe0f76 100644 --- a/windows/deployment/TOC.md +++ b/windows/deployment/TOC.md @@ -21,8 +21,7 @@ ### [Resolution procedures](upgrade/resolution-procedures.md) ### [Submit Windows 10 upgrade errors](upgrade/submit-errors.md) -## Deploy Windows 10 -### [Documentation and resources](deploy.md) +## [Deploy Windows 10](deploy.md) ## Update Windows 10 ### [Update Windows 10 in enterprise deployments](update/index.md) diff --git a/windows/deployment/deploy.md b/windows/deployment/deploy.md index f7939cccf1..112e915742 100644 --- a/windows/deployment/deploy.md +++ b/windows/deployment/deploy.md @@ -1,6 +1,6 @@ --- layout: HubPage -hide_bc: true +hide_bc: false description: Windows 10 deployment resources and documentation for admins & IT professionals ms.author: greglin author: greg-lindsay From 2a7b00e940fdb0e149ffd9ee9d15121815e2c96c Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Thu, 3 Oct 2019 15:23:14 -0700 Subject: [PATCH 026/358] landing page --- windows/deployment/deploy.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/deployment/deploy.md b/windows/deployment/deploy.md index 112e915742..65c332cf99 100644 --- a/windows/deployment/deploy.md +++ b/windows/deployment/deploy.md @@ -35,9 +35,9 @@ description: Windows 10 deployment resources and documentation for admins & IT p

Explore

-

Overview

-

Architecture models

-

Microsoft 365 for IT

+

What's new

+

Deployment scenarios

+

Windows 10 and Microsoft 365

@@ -54,8 +54,8 @@ description: Windows 10 deployment resources and documentation for admins & IT p

Deploy

-

FastTrack

-

Deployment guide

+

Windows 10 deployment guides

+

FastTrack

Modern Desktop deployment

From de3551fc68602b635cb9f6498b1b3c441274b70c Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 6 Jan 2020 14:21:22 -0800 Subject: [PATCH 027/358] checking branch --- ...d-environment-for-windows-10-deployment.md | 57 ++++++++++--------- 1 file changed, 29 insertions(+), 28 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/build-a-distributed-environment-for-windows-10-deployment.md b/windows/deployment/deploy-windows-mdt/build-a-distributed-environment-for-windows-10-deployment.md index 5b653b3d45..a0d2516a5b 100644 --- a/windows/deployment/deploy-windows-mdt/build-a-distributed-environment-for-windows-10-deployment.md +++ b/windows/deployment/deploy-windows-mdt/build-a-distributed-environment-for-windows-10-deployment.md @@ -50,35 +50,35 @@ Setting up DFS-R for replication is a quick and straightforward process. You pre ### Prepare MDT01 for replication -1. On MDT01, using Server Manager, click **Add roles and features**. -2. On the **Select installation type** page, select **Role-based or feature-based installation**. -3. On the **Select destination server** page, select **MDT01.contoso.com** and click **Next**. -4. On the **Select server roles** page, expand **File and Storage Services (Installed)** and expand **File and iSCSI Services (Installed)**. -5. In the **Roles** list, select **DFS Replication**. In the **Add Roles and Features Wizard** dialog box, select **Add Features**, and then click **Next**. +1. On MDT01, using Server Manager, click **Add roles and features**. +2. On the **Select installation type** page, select **Role-based or feature-based installation**. +3. On the **Select destination server** page, select **MDT01.contoso.com** and click **Next**. +4. On the **Select server roles** page, expand **File and Storage Services (Installed)** and expand **File and iSCSI Services (Installed)**. +5. In the **Roles** list, select **DFS Replication**. In the **Add Roles and Features Wizard** dialog box, select **Add Features**, and then click **Next**. ![figure 2](../images/mdt-10-fig02.png) Adding the DFS Replication role to MDT01. -6. On the **Select features** page, accept the default settings, and click **Next**. -7. On the **Confirm installation selections** page, click **Install**. -8. On the **Installation progress** page, click **Close**. +6. On the **Select features** page, accept the default settings, and click **Next**. +7. On the **Confirm installation selections** page, click **Install**. +8. On the **Installation progress** page, click **Close**. ### Prepare MDT02 for replication -1. On MDT02, using Server Manager, click **Add roles and features**. -2. On the **Select installation type** page, select **Role-based or feature-based installation**. -3. On the **Select destination server** page, select **MDT02.contoso.com** and click **Next**. -4. On the **Select server roles** page, expand **File and Storage Services (Installed)** and expand **File and iSCSI Services (Installed)**. -5. In the **Roles** list, select **DFS Replication**. In the **Add Roles and Features Wizard** dialog box, select **Add Features**, and then click **Next**. -6. On the **Select features** page, accept the default settings, and click **Next**. -7. On the **Confirm installation selections** page, click **Install**. -8. On the **Installation progress** page, click **Close**. +1. On MDT02, using Server Manager, click **Add roles and features**. +2. On the **Select installation type** page, select **Role-based or feature-based installation**. +3. On the **Select destination server** page, select **MDT02.contoso.com** and click **Next**. +4. On the **Select server roles** page, expand **File and Storage Services (Installed)** and expand **File and iSCSI Services (Installed)**. +5. In the **Roles** list, select **DFS Replication**. In the **Add Roles and Features Wizard** dialog box, select **Add Features**, and then click **Next**. +6. On the **Select features** page, accept the default settings, and click **Next**. +7. On the **Confirm installation selections** page, click **Install**. +8. On the **Installation progress** page, click **Close**. ### Create the MDTProduction folder on MDT02 -1. On MDT02, using File Explorer, create the **E:\\MDTProduction** folder. -2. Share the **E:\\MDTProduction** folder as **MDTProduction$**. Use the default permissions. +1. On MDT02, using File Explorer, create the **E:\\MDTProduction** folder. +2. Share the **E:\\MDTProduction** folder as **MDTProduction$**. Use the default permissions. ![figure 3](../images/mdt-10-fig03.png) @@ -180,14 +180,15 @@ When you have multiple deployment servers sharing the same content, you need to > It will take some time for the replication configuration to be picked up by the replication members (MDT01 and MDT02). The time for the initial sync will depend on the WAN link speed between the sites. After that, delta changes are replicated quickly. ### Verify replication -1. On MDT02, wait until you start to see content appear in the **E:\\MDTProduction** folder. -2. Using DFS Management, expand **Replication**, right-click **MDTProduction**, and select **Create Diagnostics Report**. -3. In the Diagnostics Report Wizard, on the **Type of Diagnostics Report or Test** page, select **Health report** and click **Next**. -4. On the **Path and Name** page, accept the default settings and click **Next**. -5. On the **Members to Include** page, accept the default settings and click **Next**. -6. On the **Options** page, accept the default settings and click **Next**. -7. On the **Review Settings and Create Report** page, click **Create**. -8. Open the report in Internet Explorer, and if necessary, select the **Allow blocked content** option. + +1. On MDT02, wait until you start to see content appear in the **E:\\MDTProduction** folder. +2. Using DFS Management, expand **Replication**, right-click **MDTProduction**, and select **Create Diagnostics Report**. +3. In the Diagnostics Report Wizard, on the **Type of Diagnostics Report or Test** page, select **Health report** and click **Next**. +4. On the **Path and Name** page, accept the default settings and click **Next**. +5. On the **Members to Include** page, accept the default settings and click **Next**. +6. On the **Options** page, accept the default settings and click **Next**. +7. On the **Review Settings and Create Report** page, click **Create**. +8. Open the report in Internet Explorer, and if necessary, select the **Allow blocked content** option. ![figure 9](../images/mdt-10-fig09.png) @@ -196,8 +197,8 @@ The DFS Replication Health Report. ## Configure Windows Deployment Services (WDS) in a remote site Like you did in the previous topic for MDT01, you need to add the MDT Production Lite Touch x64 Boot image to Windows Deployment Services on MDT02. For the following steps, we assume that WDS has already been installed on MDT02. -1. On MDT02, using the WDS console, right-click **Boot Images** and select **Add Boot Image**. -2. Browse to the E:\\MDTProduction\\Boot\\LiteTouchPE\_x64.wim file and add the image with the default settings. +1. On MDT02, using the WDS console, right-click **Boot Images** and select **Add Boot Image**. +2. Browse to the E:\\MDTProduction\\Boot\\LiteTouchPE\_x64.wim file and add the image with the default settings. ## Deploy the Windows 10 client to the remote site From 1851164bc58980ce65fefc533997c0349d9c37d0 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 7 Jan 2020 14:50:49 -0800 Subject: [PATCH 028/358] onward --- ...0-with-the-microsoft-deployment-toolkit.md | 13 ------------- ...d-with-the-microsoft-deployment-toolkit.md | 19 ++++++++++++++++++- 2 files changed, 18 insertions(+), 14 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md index a0e24ac16b..6d76ff45ee 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md @@ -25,19 +25,6 @@ This guide will walk you through the process of deploying Windows 10 in an ente This topic also provides a detailed description of the [proof of concept environment](#proof-of-concept-environment) used in this guide, and [sample files](#sample-files) are provided below to help you put the information you learn into practice more quickly. -| Topic | Description | Required / optional | -| :--- | :--- | :--- | -| [Understand the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) | An overview of MDT. | Optional | -| [Deploying Windows 10 with MDT](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) | (This topic). A description of topics in this guide and the overall lab infrastructure. | Optional | -| [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) | Installation of MDT. | Required | -| [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) | Create a deployment share, configure rules and settings, and import all the applications and operating system files required to build a Windows 10 reference image. | Required | -| [Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) | Take a reference image for Windows 10 and deploy that image to your environment using MDT. | Required | -| [Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) | Replicate your Windows 10 deployment shares to facilitate the deployment of Windows 10 in remote or branch locations. | Optional | -| [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) | Use MDT Lite Touch Installation (LTI) to upgrade a Windows 7 computer to a Windows 10 computer using the computer refresh process. | Required | -| [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) | Use MDT Lite Touch Installation (LTI) to replace the a Windows 7 computer with a Windows 10 computer using the replace process. | Required | -| [Perform an in-place upgrade to Windows 10 with MDT](upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md) | Use an MDT task sequence to completely automate the in-place upgrade process. | Required | -| [Configure MDT settings](configure-mdt-settings.md) | Learn about configuring MDT customizations for your environment. | Optional | - ## What is MDT MDT is a unified collection of tools, processes, and guidance for automating desktop and server deployment. In addition to reducing deployment time and standardizing desktop and server images, MDT enables you to more easily manage security and ongoing configurations. MDT builds on top of the core deployment tools in the Windows Assessment and Deployment Kit (Windows ADK) with additional guidance and features designed to reduce the complexity and time required for deployment in an enterprise environment. diff --git a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md index ef86557a63..7681e7743d 100644 --- a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md @@ -21,7 +21,9 @@ ms.topic: article **Applies to** - Windows 10 -This topic will help you gain a better understanding of how to use the Microsoft Deployment Toolkit (MDT) to deploy Windows 10. When you are ready to try using MDT to deploy Windows 10 in various says, see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). +This guide will help you gain a better understanding of how to use the [Microsoft Deployment Toolkit (MDT)](https://docs.microsoft.com/en-us/configmgr/mdt/index) to deploy Windows 10. + +When you are ready to try using MDT, see a list of available [Topics in this guide](#topics-in-this-guide). ## Introduction @@ -163,6 +165,21 @@ The easiest way to view log files is to use Configuration Manager Trace (CMTrace On the deployment share, you also can enable monitoring. After you enable monitoring, you will see all running deployments in the Monitor node in the Deployment Workbench. +## Topics in this guide + +| Topic | Description | Required / optional | +| :--- | :--- | :--- | +| [Understand the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) | An overview of MDT. | Optional | +| [Deploying Windows 10 with MDT](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) | (This topic). A description of the lab infrastructure and requirements. | Optional | +| [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) | Installation of MDT. | Required | +| [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) | Create a deployment share, configure rules and settings, and import all the applications and operating system files required to build a Windows 10 reference image. | Required | +| [Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) | Take a reference image for Windows 10 and deploy that image to your environment using MDT. | Required | +| [Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) | Replicate your Windows 10 deployment shares to facilitate the deployment of Windows 10 in remote or branch locations. | Optional | +| [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) | Use MDT Lite Touch Installation (LTI) to upgrade a Windows 7 computer to a Windows 10 computer using the computer refresh process. | Required | +| [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) | Use MDT Lite Touch Installation (LTI) to replace the a Windows 7 computer with a Windows 10 computer using the replace process. | Required | +| [Perform an in-place upgrade to Windows 10 with MDT](upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md) | Use an MDT task sequence to completely automate the in-place upgrade process. | Required | +| [Configure MDT settings](configure-mdt-settings.md) | Learn about configuring MDT customizations for your environment. | Optional | + ## Related topics [Microsoft Deployment Toolkit downloads and documentation](https://go.microsoft.com/fwlink/p/?LinkId=618117)
From 92481b87c2a0de528173d80ae435dca8f4ed4e9e Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 8 Jan 2020 12:55:38 -0800 Subject: [PATCH 029/358] draft00 --- windows/deployment/deploy-windows-mdt/TOC.md | 13 +++++--- .../deploy-windows-mdt/install-mdt.md | 32 +++++++++++++++++++ 2 files changed, 41 insertions(+), 4 deletions(-) create mode 100644 windows/deployment/deploy-windows-mdt/install-mdt.md diff --git a/windows/deployment/deploy-windows-mdt/TOC.md b/windows/deployment/deploy-windows-mdt/TOC.md index e0b70bc13a..60f0fb9b96 100644 --- a/windows/deployment/deploy-windows-mdt/TOC.md +++ b/windows/deployment/deploy-windows-mdt/TOC.md @@ -1,7 +1,8 @@ # Deploy Windows 10 with the Microsoft Deployment Toolkit (MDT) ## [Understand MDT](get-started-with-the-microsoft-deployment-toolkit.md) -## [Deploying Windows 10 with MDT](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) -## Scenarios and procedures +## [Install MDT](install-mdt.md) + +## Deploy Windows 10 with MDT ### [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) ### [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) ### [Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) @@ -9,7 +10,8 @@ ### [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) ### [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) ### [Perform an in-place upgrade to Windows 10 with MDT](upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md) -## Configuring MDT + +## Customize MDT ### [Configure MDT settings](configure-mdt-settings.md) ### [Set up MDT for BitLocker](set-up-mdt-for-bitlocker.md) ### [Configure MDT deployment share rules](configure-mdt-deployment-share-rules.md) @@ -18,4 +20,7 @@ ### [Use the MDT database to stage Windows 10 deployment information](use-the-mdt-database-to-stage-windows-10-deployment-information.md) ### [Assign applications using roles in MDT](assign-applications-using-roles-in-mdt.md) ### [Use web services in MDT](use-web-services-in-mdt.md) -### [Use Orchestrator runbooks with MDT](use-orchestrator-runbooks-with-mdt.md) \ No newline at end of file +### [Use Orchestrator runbooks with MDT](use-orchestrator-runbooks-with-mdt.md) + +## Orphan topics +### [Deploying Windows 10 with MDT](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) \ No newline at end of file diff --git a/windows/deployment/deploy-windows-mdt/install-mdt.md b/windows/deployment/deploy-windows-mdt/install-mdt.md new file mode 100644 index 0000000000..9def89ecdb --- /dev/null +++ b/windows/deployment/deploy-windows-mdt/install-mdt.md @@ -0,0 +1,32 @@ +--- +title: Key features in MDT (Windows 10) +description: The Microsoft Deployment Toolkit (MDT) has been in existence since 2003, when it was first introduced as Business Desktop Deployment (BDD) 1.0. +ms.assetid: 858e384f-e9db-4a93-9a8b-101a503e4868 +ms.reviewer: +manager: laurawi +ms.author: greglin +keywords: deploy, feature, tools, upgrade, migrate, provisioning +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.sitesec: library +ms.pagetype: mdt +audience: itpro +author: greg-lindsay +ms.topic: article +--- + +# Install MDT + +**Applies to** +- Windows 10 + +A typical installation of MDT is shown below. + +1. [Download MDT](https://aka.ms/mdtdownload) + + + +![Prioritize applications](images/upgrade-analytics-prioritize.png) + +## Related topics From 48b9924ff5526864d18b55eec41d54090e511d5a Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 8 Jan 2020 14:45:15 -0800 Subject: [PATCH 030/358] draft01 --- windows/deployment/deploy-windows-mdt/TOC.md | 3 +- ...d-with-the-microsoft-deployment-toolkit.md | 36 +++++++++---------- .../deploy-windows-mdt/install-mdt.md | 32 ----------------- 3 files changed, 19 insertions(+), 52 deletions(-) delete mode 100644 windows/deployment/deploy-windows-mdt/install-mdt.md diff --git a/windows/deployment/deploy-windows-mdt/TOC.md b/windows/deployment/deploy-windows-mdt/TOC.md index 60f0fb9b96..910e532682 100644 --- a/windows/deployment/deploy-windows-mdt/TOC.md +++ b/windows/deployment/deploy-windows-mdt/TOC.md @@ -1,6 +1,5 @@ # Deploy Windows 10 with the Microsoft Deployment Toolkit (MDT) -## [Understand MDT](get-started-with-the-microsoft-deployment-toolkit.md) -## [Install MDT](install-mdt.md) +## [Get started with MDT](get-started-with-the-microsoft-deployment-toolkit.md) ## Deploy Windows 10 with MDT ### [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) diff --git a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md index 7681e7743d..157dc310c1 100644 --- a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md @@ -1,5 +1,5 @@ --- -title: Understand the Microsoft Deployment Toolkit (MDT) (Windows 10) +title: Get started with the Microsoft Deployment Toolkit (MDT) (Windows 10) description: This topic will help you gain a better understanding of how to use the Microsoft Deployment Toolkit (MDT), as part of a Windows operating system deployment. ms.assetid: a256442c-be47-4bb9-a105-c831f58ce3ee ms.reviewer: @@ -16,18 +16,31 @@ author: greg-lindsay ms.topic: article --- -# Understand the Microsoft Deployment Toolkit (MDT) +# Get started with MDT **Applies to** - Windows 10 -This guide will help you gain a better understanding of how to use the [Microsoft Deployment Toolkit (MDT)](https://docs.microsoft.com/en-us/configmgr/mdt/index) to deploy Windows 10. +This guide will help you understand how to install, configure, and use the [Microsoft Deployment Toolkit (MDT)](https://docs.microsoft.com/en-us/configmgr/mdt/index) to deploy Windows 10. -When you are ready to try using MDT, see a list of available [Topics in this guide](#topics-in-this-guide). +## Topics in this guide + +| Topic | Description | Required / optional | +| :--- | :--- | :--- | +| [Get started with MDT](get-started-with-the-microsoft-deployment-toolkit.md) | A detailed overview of MDT (this topic). | Optional | +| [Deploying Windows 10 with MDT](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) | A description of the lab infrastructure and requirements. | Optional | +| [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) | Installation of MDT. | Required | +| [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) | Create a deployment share, configure rules and settings, and import all the applications and operating system files required to build a Windows 10 reference image. | Required | +| [Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) | Take a reference image for Windows 10 and deploy that image to your environment using MDT. | Required | +| [Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) | Replicate your Windows 10 deployment shares to facilitate the deployment of Windows 10 in remote or branch locations. | Optional | +| [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) | Use MDT Lite Touch Installation (LTI) to upgrade a Windows 7 computer to a Windows 10 computer using the computer refresh process. | Required | +| [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) | Use MDT Lite Touch Installation (LTI) to replace the a Windows 7 computer with a Windows 10 computer using the replace process. | Required | +| [Perform an in-place upgrade to Windows 10 with MDT](upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md) | Use an MDT task sequence to completely automate the in-place upgrade process. | Required | +| [Configure MDT settings](configure-mdt-settings.md) | Learn about configuring MDT customizations for your environment. | Optional | ## Introduction -MDT is one of the most important tools available to IT professionals today. You can use it to create reference images or as a complete deployment solution. MDT also can be used to extend the operating system deployment features available in Microsoft System Center Configuration Manager. +MDT is one of the most important tools available to IT professionals today. You can use it to create reference images or as a complete deployment solution. MDT also can be used to extend the operating system deployment features available in [Configuration Manager](https://docs.microsoft.com/configmgr/). In addition to familiarizing you with the features and options available in MDT, this topic will walk you through the process of preparing for deploying Windows 10 using MDT by configuring Active Directory, creating an organizational unit (OU) structure, creating service accounts, configuring log files and folders, and installing the tools needed to view the logs and continue with the deployment process. @@ -165,20 +178,7 @@ The easiest way to view log files is to use Configuration Manager Trace (CMTrace On the deployment share, you also can enable monitoring. After you enable monitoring, you will see all running deployments in the Monitor node in the Deployment Workbench. -## Topics in this guide -| Topic | Description | Required / optional | -| :--- | :--- | :--- | -| [Understand the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) | An overview of MDT. | Optional | -| [Deploying Windows 10 with MDT](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) | (This topic). A description of the lab infrastructure and requirements. | Optional | -| [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) | Installation of MDT. | Required | -| [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) | Create a deployment share, configure rules and settings, and import all the applications and operating system files required to build a Windows 10 reference image. | Required | -| [Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) | Take a reference image for Windows 10 and deploy that image to your environment using MDT. | Required | -| [Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) | Replicate your Windows 10 deployment shares to facilitate the deployment of Windows 10 in remote or branch locations. | Optional | -| [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) | Use MDT Lite Touch Installation (LTI) to upgrade a Windows 7 computer to a Windows 10 computer using the computer refresh process. | Required | -| [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) | Use MDT Lite Touch Installation (LTI) to replace the a Windows 7 computer with a Windows 10 computer using the replace process. | Required | -| [Perform an in-place upgrade to Windows 10 with MDT](upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md) | Use an MDT task sequence to completely automate the in-place upgrade process. | Required | -| [Configure MDT settings](configure-mdt-settings.md) | Learn about configuring MDT customizations for your environment. | Optional | ## Related topics diff --git a/windows/deployment/deploy-windows-mdt/install-mdt.md b/windows/deployment/deploy-windows-mdt/install-mdt.md deleted file mode 100644 index 9def89ecdb..0000000000 --- a/windows/deployment/deploy-windows-mdt/install-mdt.md +++ /dev/null @@ -1,32 +0,0 @@ ---- -title: Key features in MDT (Windows 10) -description: The Microsoft Deployment Toolkit (MDT) has been in existence since 2003, when it was first introduced as Business Desktop Deployment (BDD) 1.0. -ms.assetid: 858e384f-e9db-4a93-9a8b-101a503e4868 -ms.reviewer: -manager: laurawi -ms.author: greglin -keywords: deploy, feature, tools, upgrade, migrate, provisioning -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: mdt -audience: itpro -author: greg-lindsay -ms.topic: article ---- - -# Install MDT - -**Applies to** -- Windows 10 - -A typical installation of MDT is shown below. - -1. [Download MDT](https://aka.ms/mdtdownload) - - - -![Prioritize applications](images/upgrade-analytics-prioritize.png) - -## Related topics From b59808cacfb90fd33d3e3baa64e532bcb308824d Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Thu, 9 Jan 2020 12:20:30 -0800 Subject: [PATCH 031/358] draft02 --- ...0-with-the-microsoft-deployment-toolkit.md | 10 ------- ...d-with-the-microsoft-deployment-toolkit.md | 29 +++++-------------- 2 files changed, 8 insertions(+), 31 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md index 6d76ff45ee..c99f43f559 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md @@ -25,16 +25,6 @@ This guide will walk you through the process of deploying Windows 10 in an ente This topic also provides a detailed description of the [proof of concept environment](#proof-of-concept-environment) used in this guide, and [sample files](#sample-files) are provided below to help you put the information you learn into practice more quickly. -## What is MDT - -MDT is a unified collection of tools, processes, and guidance for automating desktop and server deployment. In addition to reducing deployment time and standardizing desktop and server images, MDT enables you to more easily manage security and ongoing configurations. MDT builds on top of the core deployment tools in the Windows Assessment and Deployment Kit (Windows ADK) with additional guidance and features designed to reduce the complexity and time required for deployment in an enterprise environment. - -MDT supports the deployment of Windows 10, as well as Windows 7, Windows 8.1, and Windows Server. It also includes support for zero-touch installation (ZTI) with Microsoft System Center Configuration Manager. - -See [Get started with the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) for more details, including a description of many of the key features and options available in MDT. A list of components that support Lite Touch Installation (LTI) is also provided. - -To download the latest version of MDT, visit the [MDT resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117). - ## Proof-of-concept environment For the purposes of this guide we will use the following servers and client machines: DC01, MDT01, CM01, PC0001, and PC0002. diff --git a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md index 157dc310c1..b567d213f5 100644 --- a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md @@ -21,28 +21,17 @@ ms.topic: article **Applies to** - Windows 10 -This guide will help you understand how to install, configure, and use the [Microsoft Deployment Toolkit (MDT)](https://docs.microsoft.com/en-us/configmgr/mdt/index) to deploy Windows 10. - -## Topics in this guide - -| Topic | Description | Required / optional | -| :--- | :--- | :--- | -| [Get started with MDT](get-started-with-the-microsoft-deployment-toolkit.md) | A detailed overview of MDT (this topic). | Optional | -| [Deploying Windows 10 with MDT](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) | A description of the lab infrastructure and requirements. | Optional | -| [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) | Installation of MDT. | Required | -| [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) | Create a deployment share, configure rules and settings, and import all the applications and operating system files required to build a Windows 10 reference image. | Required | -| [Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md) | Take a reference image for Windows 10 and deploy that image to your environment using MDT. | Required | -| [Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md) | Replicate your Windows 10 deployment shares to facilitate the deployment of Windows 10 in remote or branch locations. | Optional | -| [Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md) | Use MDT Lite Touch Installation (LTI) to upgrade a Windows 7 computer to a Windows 10 computer using the computer refresh process. | Required | -| [Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md) | Use MDT Lite Touch Installation (LTI) to replace the a Windows 7 computer with a Windows 10 computer using the replace process. | Required | -| [Perform an in-place upgrade to Windows 10 with MDT](upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md) | Use an MDT task sequence to completely automate the in-place upgrade process. | Required | -| [Configure MDT settings](configure-mdt-settings.md) | Learn about configuring MDT customizations for your environment. | Optional | +This topic provides an overview of the features, components, and capabilities of the Microsoft Deployment Toolkit (MDT). When you are ready to install and start using MDT, see [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md). ## Introduction -MDT is one of the most important tools available to IT professionals today. You can use it to create reference images or as a complete deployment solution. MDT also can be used to extend the operating system deployment features available in [Configuration Manager](https://docs.microsoft.com/configmgr/). +The Microsoft Deployment Toolkit (MDT) is a unified collection of tools, processes, and guidance for automating desktop and server deployment. You can use it to create reference images or as a complete deployment solution. MDT is one of the most important tools available to IT professionals today. -In addition to familiarizing you with the features and options available in MDT, this topic will walk you through the process of preparing for deploying Windows 10 using MDT by configuring Active Directory, creating an organizational unit (OU) structure, creating service accounts, configuring log files and folders, and installing the tools needed to view the logs and continue with the deployment process. +In addition to reducing deployment time and standardizing desktop and server images, MDT enables you to more easily manage security and ongoing configurations. MDT builds on top of the core deployment tools in the Windows Assessment and Deployment Kit (Windows ADK) with additional guidance and features designed to reduce the complexity and time required for deployment in an enterprise environment. + +MDT supports the deployment of Windows 10, as well as Windows 7, Windows 8.1, and Windows Server. It also includes support for zero-touch installation (ZTI) with [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/configmgr/). + +To download the latest version of MDT, visit the [MDT resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117). ## Key features in MDT @@ -173,13 +162,11 @@ MDT uses many log files during operating system deployments. By default the logs **Note**   The easiest way to view log files is to use Configuration Manager Trace (CMTrace), which is included in the [System Center 2012 R2 Configuration Manager Toolkit](https://go.microsoft.com/fwlink/p/?LinkId=734717). - + ## Monitoring On the deployment share, you also can enable monitoring. After you enable monitoring, you will see all running deployments in the Monitor node in the Deployment Workbench. - - ## Related topics [Microsoft Deployment Toolkit downloads and documentation](https://go.microsoft.com/fwlink/p/?LinkId=618117)
From 851b7a61d298c1e6ac28520a66b55cdc4f274370 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Thu, 9 Jan 2020 13:51:58 -0800 Subject: [PATCH 032/358] draft03 --- ...0-with-the-microsoft-deployment-toolkit.md | 53 +------- ...prepare-for-windows-deployment-with-mdt.md | 50 +++++++- ...0-with-the-microsoft-deployment-toolkit.md | 115 +----------------- 3 files changed, 47 insertions(+), 171 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md index c99f43f559..35d29b684f 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md @@ -21,7 +21,7 @@ ms.topic: article **Applies to** - Windows 10 -This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT). A summary topics in the guide is provided in the table below. Complete each of the topics below in the order they are listed. Informational topics are optional, but can provide helpful [information about MDT](#what-is-mdt). +This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT). A summary topics in the guide is provided in the table below. Complete each of the topics below in the order they are listed. This topic also provides a detailed description of the [proof of concept environment](#proof-of-concept-environment) used in this guide, and [sample files](#sample-files) are provided below to help you put the information you learn into practice more quickly. @@ -33,58 +33,7 @@ For the purposes of this guide we will use the following servers and client mach DC01 is a domain controller; the other servers and client machines are members of the domain contoso.com for the fictitious Contoso Corporation. All servers are running Windows Server 2012 R2, but you can also use a later version of Windows Server with minor adjustments to some procedures. -## Storage requirements -MDT01 and CM01 should have data drives (D:) that can support up to 100 and 200 GB of data, respectively. The system drives (C:) are 100 GB in size. - -## Hypervisor requirement - -A Hyper-V host can be used to build a Windows 10 reference image, but is not required. Instructions are also provided to create a reference image using local server resources. However, a place to host the VHD - -### Installing Hyper-V - -If you do not have access to a Hyper-V server, you can install Hyper-V on a Windows 10 or Windows 8.1 computer temporarily to use for this lab. For instructions on how to enable Hyper-V on Windows 10, see the [Verify support and install Hyper-V](https://docs.microsoft.com/windows/deployment/windows-10-poc#verify-support-and-install-hyper-v) section in the Windows 10 deployment test lab guide (this guide is a less detailed version of the current guide, but with more instructions for installing Hyper-V). - -## Network requirements - -For this lab, all server and client computers are on the same subnet. This is not required, but each server and client computer must be able to connect to each other to share files, and resolve all DNS names and Active Directory information for the contoso.com domain. Internet connectivity is also requried to download OS and applicaton updates. - -### Domain credentials - -You can use your own Active Directory domain and credentials, but you'll need to specify your custom information and use it to replace the credentials below that are used in this guide. - -**Active Directory domain name**: contoso.com
-**Domain administrator username**: admin
-**Domain administrator password**: pass@word3 - -### Organizational unit structure - -![figure 2](../images/mdt-01-fig02.jpg) - -## Server details - -- **DC01.** A computer running Windows Server 2012 R2, fully patched with the latest security updates, and configured as an Active Directory Domain Controller, DNS Server, and (optionally) DHCP Server for the contoso.com domain. - - Server name: DC01 - - IP Address: 10.10.0.5 - - Roles: DNS, DHCP, and domain controller -- **MDT01.** A computer running Windows Server 2012 R2, fully patched with the latest security updates, and configured as a member server in the contoso.com domain. This is an application server that is used to run MDT. - - Server name: MDT01 - - IP Address: 10.10.0.8 - - Data drive D: with at least 100GB of free space. -- **CM01.** A computer running Windows Server 2012 R2, fully patched with the latest security updates, and configured as a member server in the contoso.com domain. This is a System Center Configuration Manager site server. - - Server name: CM01 - - IP Address: 10.10.0.4 - - Data drive D: with at least 100GB of free space. - -## Client details - -- **PC0001.** A computer running Windows 10 Enterprise x64, fully patched with the latest security updates, and configured as a member in the contoso.com domain. This computer is referenced as the admin workstation. - - Client name: PC0001 - - IP Address: DHCP -- **PC0002.** A computer running Windows 7 SP1 Enterprise x64, fully patched with the latest security updates, and configured as a member in the contoso.com domain. This computer is referenced during the migration scenarios. - - Client name: PC0002 - - IP Address: DHCP -- **PC0003 - PC0007** These are other client computers similar to PC0001 and PC0002 that are used in the guide for various scenarios. The device names are incremented to avoid confusion. For example, PC0003 and PC0004 are running Windows 7 just like PC0002, but are used for Config Mgr refresh and replace scenarios, respectively. ## Sample files diff --git a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md index ff77986d3e..bc96551240 100644 --- a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md +++ b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md @@ -23,13 +23,53 @@ ms.topic: article This topic will walk you through the steps necessary to create the server structure required to deploy the Windows 10 operating system using the Microsoft Deployment Toolkit (MDT). It covers the installation of the necessary system prerequisites, the creation of shared folders and service accounts, and the configuration of security permissions in the file system and in Active Directory. -For the purposes of this topic, we will use two computers: **DC01** and **MDT01** -- Both servers are running Windows Server 2012 R2. You can also use a later version of Windows Server. -- DC01 is a domain controller and DNS server for contoso.com, representing the fictitious Contoso Corporation. +## Network and server infrastructure + +For the purposes of this topic, we will use three computers: **DC01**, **MDT01**, and **HV01**. +- All servers are running Windows Server 2019. + - You can use an earlier version of Windows Server with minor modifications to some procedures. + - Although MDT supports Windows Server 2008 R2, At least Windows Server 2012 R2 or later is requried to perform the procedures in this guide. +- DC01 is a domain controller, DHCP server, and DNS server for contoso.com, representing the fictitious Contoso Corporation. - MDT01 is a domain member server in contoso.com and has a D: drive that will be used for data. - The data drive requires at least 100GB of disk space. - -For more details on requirements for the proof of concept environment used in this guide, see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). +- HV01 is a Hyper-V host computer that is used to build a Windows 10 reference image. + - See [Hyper-V requirements](#hyper-v-requirements) below for more information. + +## Client computers + +Several client computers are referenced in this guide using hostnames PC0001 to PC0007. + +- **PC0001.** A computer running Windows 10 Enterprise x64, fully patched with the latest security updates, and configured as a member in the contoso.com domain. This computer is referenced as the admin workstation. + - Client name: PC0001 + - IP Address: DHCP +- **PC0002.** A computer running Windows 7 SP1 Enterprise x64, fully patched with the latest security updates, and configured as a member in the contoso.com domain. This computer is referenced during the migration scenarios. + - Client name: PC0002 + - IP Address: DHCP +- **PC0003 - PC0007** These are other client computers similar to PC0001 and PC0002 that are used in this guide and another guide for various scenarios. The device names are incremented for clarity within each scenario. For example, PC0003 and PC0004 are running Windows 7 just like PC0002, but are used for Configuration Manager refresh and replace scenarios, respectively. + +## Storage requirements + +MDT01 and HV01 should have a data drive (D:) that can support up to 200 GB of data. The system drives on all computers (C:) can be 50 GB in size, but 100 GB is recommended. + +### Hyper-V requirements + +If you do not have access to a Hyper-V server, you can install Hyper-V on a Windows 10 or Windows 8.1 computer temporarily to use for building reference images. For instructions on how to enable Hyper-V on Windows 10, see the [Verify support and install Hyper-V](https://docs.microsoft.com/windows/deployment/windows-10-poc#verify-support-and-install-hyper-v) section in the Windows 10 deployment test lab guide (this guide is a less detailed version of the current guide, but with more instructions for installing Hyper-V). + +## Network requirements + +For this lab, all server and client computers are on the same subnet. This is not required, but each server and client computer must be able to connect to each other to share files, and resolve all DNS names and Active Directory information for the contoso.com domain. Internet connectivity is also requried to download OS and applicaton updates. + +### Domain credentials + +You can use your own Active Directory domain and credentials, but you'll need to specify your custom information and use it to replace the credentials below that are used in this guide. + +**Active Directory domain name**: contoso.com
+**Domain administrator username**: administrator
+**Domain administrator password**: pass@word1 + +### Organizational unit structure + +![figure 2](../images/mdt-01-fig02.jpg) ## Install Windows ADK for Windows 10 diff --git a/windows/deployment/deploy-windows-mdt/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md index da477e2507..69b67b940a 100644 --- a/windows/deployment/deploy-windows-mdt/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md @@ -1,4 +1,3 @@ -<<<<<<< HEAD:windows/deployment/deploy-windows-mdt/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md --- title: Perform an in-place upgrade to Windows 10 with MDT (Windows 10) description: The simplest path to upgrade PCs that are currently running Windows 7, Windows 8, or Windows 8.1 to Windows 10 is through an in-place upgrade. @@ -106,116 +105,4 @@ After the task sequence completes, the computer will be fully upgraded to Window ## Related topics [Windows 10 deployment scenarios](../windows-10-deployment-scenarios.md)
-[Microsoft Deployment Toolkit downloads and resources](https://go.microsoft.com/fwlink/p/?LinkId=618117) - -======= ---- -title: Perform an in-place upgrade to Windows 10 with MDT (Windows 10) -description: The simplest path to upgrade PCs that are currently running Windows 7, Windows 8, or Windows 8.1 to Windows 10 is through an in-place upgrade. -ms.assetid: B8993151-3C1E-4F22-93F4-2C5F2771A460 -ms.reviewer: -manager: laurawi -ms.author: greglin -keywords: upgrade, update, task sequence, deploy -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -ms.pagetype: mdt -audience: itpro author: greg-lindsay -ms.topic: article ---- - -# Perform an in-place upgrade to Windows 10 with MDT - -**Applies to** -- Windows 10 - -The simplest path to upgrade PCs that are currently running Windows 7, Windows 8, or Windows 8.1 to Windows 10 is through an in-place upgrade. You can use a Microsoft Deployment Toolkit (MDT) 2013 Update 2 task sequence to completely automate the process. - -## Proof-of-concept environment - -For the purposes of this topic, we will use four machines: DC01, MDT01, and PC0001. DC01 is a domain controller and MDT01 is a Windows Server 2012 R2 standard machine, fully patched with the latest security updates, and configured as a member server in the fictional contoso.com domain. PC0001 is a machine with Windows 7 SP1, targeted for the Windows 10 upgrade. For more details on the setup for this topic, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](../deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md). - -![fig 1](../images/upgrademdt-fig1-machines.png) - -Figure 1. The machines used in this topic. - -## Set up the upgrade task sequence - -MDT adds support for Windows 10 deployment, including a new in-place upgrade task sequence template that makes the process really simple. - -## Create the MDT production deployment share - -The steps to create the deployment share for production are the same as when you created the deployment share to create the custom reference image: - -1. On MDT01, log on as Administrator in the CONTOSO domain with a password of P@ssw0rd. -2. Using the Deployment Workbench, right-click **Deployment Shares** and select **New Deployment Share**. -3. On the **Path** page, in the **Deployment share path** text box, type **E:\\MDTProduction**, and then click **Next**. -4. On the **Share** page, in the **Share name** text box, type **MDTProduction$**, and then click **Next**. -5. On the **Descriptive Name** page, in the **Deployment share** description text box, type **MDT Production**, and then click **Next**. -6. On the **Options** page, accept the default settings and click **Next** twice, and then click **Finish**. -7. Using File Explorer, verify that you can access the **\\\\MDT01\\MDTProduction$** share. - -## Add Windows 10 Enterprise x64 (full source) - -In these steps we assume that you have copied the content of a Windows 10 Enterprise x64 ISO to the E:\\Downloads\\Windows 10 Enterprise x64 folder. - -1. Using the Deployment Workbench, expand the **Deployment Shares** node, and then expand **MDT Production**. -2. Right-click the **Operating Systems** node, and create a new folder named **Windows 10**. -3. Expand the **Operating Systems** node, right-click the **Windows 10** folder, and select **Import Operating System**. Use the following settings for the Import Operating System Wizard: - - Full set of source files - - Source directory: E:\\Downloads\\Windows 10 Enterprise x64 - - Destination directory name: W10EX64RTM -4. After you add the operating system, in the **Operating Systems / Windows 10** folder, double-click the added operating system name in the **Operating System** node and change the name to the following: **Windows 10 Enterprise x64 RTM Default Image** - -![figure 2](../images/upgrademdt-fig2-importedos.png) - -Figure 2. The imported Windows 10 operating system after you rename it. - -## Create a task sequence to upgrade to Windows 10 Enterprise - -1. Using the Deployment Workbench, select **Task Sequences** in the **MDT Production** node, and create a folder named **Windows 10**. -2. Right-click the new **Windows 10** folder and select **New Task Sequence**. Use the following settings for the New Task Sequence Wizard: - - Task sequence ID: W10-X64-UPG - - Task sequence name: Windows 10 Enterprise x64 RTM Upgrade - - Template: Standard Client Upgrade Task Sequence - - Select OS: Windows 10 Enterprise x64 RTM Default Image - - Specify Product Key: Do not specify a product key at this time - - Full Name: Contoso - - Organization: Contoso - - Internet Explorer home page: about:blank - - Admin Password: Do not specify an Administrator Password at this time - -![figure 3](../images/upgrademdt-fig3-tasksequence.png) - -Figure 3. The task sequence to upgrade to Windows 10. - -## Perform the Windows 10 upgrade - -To initiate the in-place upgrade, perform the following steps on PC0003 (currently running Windows 7 SP1). - -1. Start the MDT deployment wizard by running the following command: **\\\\MDT01\\MDTProduction$\\Scripts\\LiteTouch.vbs** -2. Select the **Windows 10 Enterprise x64 RTM Upgrade** task sequence, and then click **Next**. - - ![figure 4](../images/upgrademdt-fig4-selecttask.png) - - Figure 4. Upgrade task sequence. - -3. On the **Credentials** tab, specify the **MDT\_BA** account, P@ssw0rd password, and **CONTOSO** for the domain. (Some or all of these values can be specified in Bootstrap.ini so they are automatically populated.) -4. On the **Ready** tab, click **Begin** to start the task sequence. - When the task sequence begins, it automatically initiates the in-place upgrade process by invoking the Windows setup program (Setup.exe) with the necessary command-line parameters to perform an automated upgrade, which preserves all data, settings, apps, and drivers. - -![figure 5](../images/upgrademdt-fig5-winupgrade.png) - -Figure 5. Upgrade from Windows 7 to Windows 10 Enterprise x64 with a task sequence. - -After the task sequence completes, the computer will be fully upgraded to Windows 10. - -## Related topics - -[Windows 10 deployment scenarios](../windows-10-deployment-scenarios.md) - -[Microsoft Deployment Toolkit downloads and resources](https://go.microsoft.com/fwlink/p/?LinkId=618117) - ->>>>>>> bc07494f1704b1e23c818d59e7f42c56fefb83d1:windows/deployment/upgrade/upgrade-to-windows-10-with-the-microsoft-deployment-toolkit.md +[Microsoft Deployment Toolkit downloads and resources](https://go.microsoft.com/fwlink/p/?LinkId=618117) \ No newline at end of file From 9ad10fe038cba3a0daa515e3bb911741e40b8aa3 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Thu, 9 Jan 2020 14:31:14 -0800 Subject: [PATCH 033/358] draft04 --- .openpublishing.redirection.json | 5 ++ windows/deployment/deploy-windows-mdt/TOC.md | 3 -- ...0-with-the-microsoft-deployment-toolkit.md | 53 ------------------- ...d-with-the-microsoft-deployment-toolkit.md | 5 +- ...prepare-for-windows-deployment-with-mdt.md | 21 +++++--- 5 files changed, 23 insertions(+), 64 deletions(-) delete mode 100644 windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index e661551810..affeffe436 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -15530,6 +15530,11 @@ "source_path": "windows/deployment/planning/windows-10-1903-removed-features.md", "redirect_url": "https://docs.microsoft.com/windows/deployment/planning/windows-10-removed-features", "redirect_document_id": false +}, +{ +"source_path": "windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md", +"redirect_url": "https://docs.microsoft.com/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt", +"redirect_document_id": false } ] } diff --git a/windows/deployment/deploy-windows-mdt/TOC.md b/windows/deployment/deploy-windows-mdt/TOC.md index 910e532682..7f51b8ca5b 100644 --- a/windows/deployment/deploy-windows-mdt/TOC.md +++ b/windows/deployment/deploy-windows-mdt/TOC.md @@ -20,6 +20,3 @@ ### [Assign applications using roles in MDT](assign-applications-using-roles-in-mdt.md) ### [Use web services in MDT](use-web-services-in-mdt.md) ### [Use Orchestrator runbooks with MDT](use-orchestrator-runbooks-with-mdt.md) - -## Orphan topics -### [Deploying Windows 10 with MDT](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) \ No newline at end of file diff --git a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md deleted file mode 100644 index 35d29b684f..0000000000 --- a/windows/deployment/deploy-windows-mdt/deploy-windows-10-with-the-microsoft-deployment-toolkit.md +++ /dev/null @@ -1,53 +0,0 @@ ---- -title: Deploying Windows 10 with the Microsoft Deployment Toolkit (MDT) -description: This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT). -ms.assetid: 837f009c-617e-4b3f-9028-2246067ee0fb -ms.reviewer: -manager: laurawi -ms.author: greglin -keywords: deploy, tools, configure, script -ms.prod: w10 -ms.mktglfcycl: deploy -ms.localizationpriority: medium -ms.sitesec: library -audience: itpro -author: greg-lindsay -ms.pagetype: mdt -ms.topic: article ---- - -# Deploying Windows 10 with MDT - -**Applies to** -- Windows 10 - -This guide will walk you through the process of deploying Windows 10 in an enterprise environment using the Microsoft Deployment Toolkit (MDT). A summary topics in the guide is provided in the table below. Complete each of the topics below in the order they are listed. - -This topic also provides a detailed description of the [proof of concept environment](#proof-of-concept-environment) used in this guide, and [sample files](#sample-files) are provided below to help you put the information you learn into practice more quickly. - -## Proof-of-concept environment - -For the purposes of this guide we will use the following servers and client machines: DC01, MDT01, CM01, PC0001, and PC0002. - -![computers](../images/mdt-01-fig01.png) - -DC01 is a domain controller; the other servers and client machines are members of the domain contoso.com for the fictitious Contoso Corporation. All servers are running Windows Server 2012 R2, but you can also use a later version of Windows Server with minor adjustments to some procedures. - - - -## Sample files - -In order to help you put the information you learn into practice more quickly, we recommend that you download a small set of sample files for the fictitious Contoso Corporation: -- [Gather.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619361). This sample Windows PowerShell script performs the MDT Gather process in a simulated MDT environment. This allows you to test the MDT gather process and check to see if it is working correctly without performing a full Windows deployment. -- [Set-OUPermissions.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619362). This sample Windows PowerShell script creates a domain account and then configures OU permissions to allow the account to join machines to the domain in the specified OU. -- [MDTSample.zip](https://go.microsoft.com/fwlink/p/?LinkId=619363). This sample web service shows you how to configure a computer name dynamically using MDT. - -## Related topics - -[Microsoft Deployment Toolkit downloads and resources](https://go.microsoft.com/fwlink/p/?LinkId=618117)
-[Windows 10 deployment scenarios](../windows-10-deployment-scenarios.md)
-[Windows 10 deployment tools](../windows-deployment-scenarios-and-tools.md)
-[Deploy Windows 10 with System Center Configuration Manager](../deploy-windows-sccm/deploy-windows-10-with-system-center-configuration-manager.md)
-[Deploy Windows To Go in your organization](../deploy-windows-to-go.md)
-[Sideload apps in Windows 10](/windows/application-management/sideload-apps-in-windows-10)
-[Volume Activation for Windows 10](../volume-activation/volume-activation-windows-10.md) diff --git a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md index b567d213f5..6c1f61848a 100644 --- a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md @@ -67,14 +67,15 @@ MDT has many useful features, such as: - **Install or uninstall Windows roles or features.** Enables you to select roles and features as part of the deployment wizard. MDT also supports uninstall of roles and features. - **Microsoft System Center 2012 Orchestrator integration.** Provides the capability to use Orchestrator runbooks as part of the task sequence. - **Support for DaRT.** Supports optional integration of the DaRT components into the boot image. -- **Support for Office 2013.** Provides added support for deploying Microsoft Office Professional Plus 2013. +- **Support for Microsoft Office.** Provides added support for deploying Microsoft Office. - **Support for Modern UI app package provisioning.** Provisions applications based on the new Windows app package standard, which is used in Windows 8 and later. - **Extensibility.** Provides the capability to extend MDT far beyond the built-in features by adding custom scripts, web services, System Center Orchestrator runbooks, PowerShell scripts, and VBScripts. - **Upgrade task sequence.** Provides a new upgrade task sequence template that you can use to upgrade existing Windows 7, Windows 8, and Windows 8.1 systems directly to Windows 10, automatically preserving all data, settings, applications, and drivers. For more information about using this new upgrade task sequence, refer to the [Microsoft Deployment Toolkit resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117). ## MDT Lite Touch components -This topic provides an overview of the features in the Microsoft Deployment Toolkit (MDT) that support Lite Touch Installation (LTI) for Windows 10. An LTI deployment strategy requires very little infrastructure or user interaction, and can be used to deploy an operating system from a network share or from a physical media, such as a USB flash drive or disc. +Many features in the Microsoft Deployment Toolkit (MDT) support Lite Touch Installation (LTI) for Windows 10. An LTI deployment strategy requires very little infrastructure or user interaction, and can be used to deploy an operating system from a network share or from a physical media, such as a USB flash drive or disc. + When deploying the Windows operating system using MDT, most of the administration and configuration is done through the Deployment Workbench, but you also can perform many of the tasks using Windows PowerShell. The easiest way to find out how to use PowerShell in MDT is to use the Deployment Workbench to perform an operation and at the end of that task, click View Script. That will give you the PowerShell command. ![figure 4](../images/mdt-05-fig04.png) diff --git a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md index bc96551240..fe04c1e68c 100644 --- a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md +++ b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md @@ -23,7 +23,9 @@ ms.topic: article This topic will walk you through the steps necessary to create the server structure required to deploy the Windows 10 operating system using the Microsoft Deployment Toolkit (MDT). It covers the installation of the necessary system prerequisites, the creation of shared folders and service accounts, and the configuration of security permissions in the file system and in Active Directory. -## Network and server infrastructure +## Requirements + +### Network and server infrastructure For the purposes of this topic, we will use three computers: **DC01**, **MDT01**, and **HV01**. - All servers are running Windows Server 2019. @@ -35,7 +37,7 @@ For the purposes of this topic, we will use three computers: **DC01**, **MDT01** - HV01 is a Hyper-V host computer that is used to build a Windows 10 reference image. - See [Hyper-V requirements](#hyper-v-requirements) below for more information. -## Client computers +### Client computers Several client computers are referenced in this guide using hostnames PC0001 to PC0007. @@ -47,7 +49,7 @@ Several client computers are referenced in this guide using hostnames PC0001 to - IP Address: DHCP - **PC0003 - PC0007** These are other client computers similar to PC0001 and PC0002 that are used in this guide and another guide for various scenarios. The device names are incremented for clarity within each scenario. For example, PC0003 and PC0004 are running Windows 7 just like PC0002, but are used for Configuration Manager refresh and replace scenarios, respectively. -## Storage requirements +### Storage requirements MDT01 and HV01 should have a data drive (D:) that can support up to 200 GB of data. The system drives on all computers (C:) can be 50 GB in size, but 100 GB is recommended. @@ -55,7 +57,7 @@ MDT01 and HV01 should have a data drive (D:) that can support up to 200 GB of da If you do not have access to a Hyper-V server, you can install Hyper-V on a Windows 10 or Windows 8.1 computer temporarily to use for building reference images. For instructions on how to enable Hyper-V on Windows 10, see the [Verify support and install Hyper-V](https://docs.microsoft.com/windows/deployment/windows-10-poc#verify-support-and-install-hyper-v) section in the Windows 10 deployment test lab guide (this guide is a less detailed version of the current guide, but with more instructions for installing Hyper-V). -## Network requirements +### Network requirements For this lab, all server and client computers are on the same subnet. This is not required, but each server and client computer must be able to connect to each other to share files, and resolve all DNS names and Active Directory information for the contoso.com domain. Internet connectivity is also requried to download OS and applicaton updates. @@ -71,11 +73,11 @@ You can use your own Active Directory domain and credentials, but you'll need to ![figure 2](../images/mdt-01-fig02.jpg) -## Install Windows ADK for Windows 10 +## Install the Windows ADK These steps assume that you have the MDT01 member server running and configured as a domain member server. -On MTD01, visit the [Download and install the Windows ADK](https://go.microsoft.com/fwlink/p/?LinkId=526803) page and download the following to the **D:\\Downloads\\ADK** folder on MDT01 (you will need to create the folder): +On MTD01, visit the [Download and install the Windows ADK](https://go.microsoft.com/fwlink/p/?LinkId=526803) page and download the following items to the **D:\\Downloads\\ADK** folder on MDT01 (you will need to create this folder): - [The Windows ADK for Windows 10](https://go.microsoft.com/fwlink/?linkid=2086042) - [The Windows PE add-on for the ADK](https://go.microsoft.com/fwlink/?linkid=2087112) - [The Windows System Image Manager (WSIM) 1903 update](https://go.microsoft.com/fwlink/?linkid=2095334) @@ -214,6 +216,13 @@ The following is an example of files that have been downloaded and installed (in When you have completed all the steps in this section to prepare for deployment, see [Create a Windows 10 reference image](create-a-windows-10-reference-image.md). +## Sample files + +The following sample files are available to help automate some MDT deployment tasks: +- [Gather.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619361). This sample Windows PowerShell script performs the MDT Gather process in a simulated MDT environment. This allows you to test the MDT gather process and check to see if it is working correctly without performing a full Windows deployment. +- [Set-OUPermissions.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619362). This sample Windows PowerShell script creates a domain account and then configures OU permissions to allow the account to join machines to the domain in the specified OU. +- [MDTSample.zip](https://go.microsoft.com/fwlink/p/?LinkId=619363). This sample web service shows you how to configure a computer name dynamically using MDT. + ## Related topics [Understand the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) \ No newline at end of file From a79b99886f61e60b9aa2151dc44fdba56879f5f7 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Fri, 10 Jan 2020 12:18:29 -0800 Subject: [PATCH 034/358] draft05 --- .../prepare-for-windows-deployment-with-mdt.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md index fe04c1e68c..5ceea1a80c 100644 --- a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md +++ b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md @@ -86,23 +86,23 @@ On MTD01, visit the [Download and install the Windows ADK](https://go.microsoft. >You might need to temporarily disable IE Enhanced Security Configuration for administrators in order to download files from the Internet to the server. This setting can be disabled by using Server Manager (Local Server/Properties). 1. On MDT01, sign in as an administrator in the CONTOSO domain. - - For the purposes of this guide, we are using a Domain Admin account of **admin** with a password of pass@word3. You can use your own administrator username and password as long as you properly adjust all steps in this guide that use login these credentials. -2. Start the **ADK Setup** (D:\\Downloads\\ADK\\adksetup.exe), click **Next** twice to accept the default installation parameters, click **Accept** to accept the license agreement, and then on the **Select the features you want to install** page accept the default list of features by clicking **Install**. This will install deployment tools and the USMT. -3. Start the **WinPE Setup** (D:\\Downloads\\ADK\\adkwinpesetup.exe), click **Next** twice to accept the default installation parameters, click **Accept** to accept the license agreement, and then on the **Select the features you want to install** page click **Install**. This will install Windows PE for x86, AMD64, ARM, and ARM64. + - For the purposes of this guide, we are using a Domain Admin account of **administrator** with a password of pass@word1. You can use your own administrator username and password as long as you properly adjust all steps in this guide that use login these credentials. +2. Start the **ADK Setup** (D:\\Downloads\\ADK\\adksetup.exe), click **Next** twice to accept the default installation parameters, click **Accept** to accept the license agreement, and then on the **Select the features you want to install** page accept the default list of features by clicking **Install**. This will install deployment tools and the USMT. Verify that the installation completes successfully before moving to the next step. +3. Start the **WinPE Setup** (D:\\Downloads\\ADK\\adkwinpesetup.exe), click **Next** twice to accept the default installation parameters, click **Accept** to accept the license agreement, and then on the **Select the features you want to install** page click **Install**. This will install Windows PE for x86, AMD64, ARM, and ARM64. Verify that the installation completes successfully before moving to the next step. 4. Extract the **WSIM 1903 update** (D:\\Downloads\ADK\\WSIM1903.zip) and then run the **UpdateWSIM.bat** file. - - You can confirm that the update is applied by viewing properties of the ImageCat.exe and ImgMgr.exe files at **C:\\Program Files (x86)\\Windows Kits\\10\\Assessment and Deployment Kit\\Deployment Tools\\WSIM** and verifying that the **Details** tab displays a **File version** of **10.0.18362.144**. + - You can confirm that the update is applied by viewing properties of the ImageCat.exe and ImgMgr.exe files at **C:\\Program Files (x86)\\Windows Kits\\10\\Assessment and Deployment Kit\\Deployment Tools\\WSIM** and verifying that the **Details** tab displays a **File version** of **10.0.18362.144** or later. ## Install MDT >[!NOTE] >MDT installation requires the following: >- The Windows ADK for Windows 10 (installed in the previous procedure) ->- Windows PowerShell ([version 5.1](https://www.microsoft.com/download/details.aspx?id=54616) is recommended) +>- Windows PowerShell ([version 5.1](https://www.microsoft.com/download/details.aspx?id=54616) is recommended; type **$host** to check) >- Microsoft .NET Framework 1. Visit the [MDT resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117) and click **Download MDT**. 2. Save the **MicrosoftDeploymentToolkit_x64.msi** file to the D:\\Downloads\\MDT folder on MDT01. - - **Note**: As of the publishing date for this guide, the current version of MDT is 8456, but a later version should also work. + - **Note**: As of the publishing date for this guide, the current version of MDT is 8456 (6.3.8456.1000), but a later version will also work. 3. Install **MDT** (D:\\Downloads\\MDT\\MicrosoftDeploymentToolkit_x64.exe) with the default settings. ## Create the OU structure @@ -175,7 +175,7 @@ When creating a reference image, you need an account for MDT. The MDT build acco To create an MDT build account, open an elevalted Windows PowerShell prompt on DC01 and enter the following (copy and paste the entire command noticing the scroll bar at the bottom): ```powershell -New-ADUser -Name MDT_BA -UserPrincipalName MDT_BA -path "OU=Service Accounts,OU=Accounts,OU=Contoso,DC=CONTOSO,DC=COM" -Description "MDT Build Account" -AccountPassword (ConvertTo-SecureString "pass@word3" -AsPlainText -Force) -ChangePasswordAtLogon $false -PasswordNeverExpires $true -Enabled $true +New-ADUser -Name MDT_BA -UserPrincipalName MDT_BA -path "OU=Service Accounts,OU=Accounts,OU=Contoso,DC=CONTOSO,DC=COM" -Description "MDT Build Account" -AccountPassword (ConvertTo-SecureString "pass@word1" -AsPlainText -Force) -ChangePasswordAtLogon $false -PasswordNeverExpires $true -Enabled $true ``` If you have the Active Directory Users and Computers console open you can refresh the view and see this new account in the **Contoso\Accounts\Service Accounts** OU as shown in the screenshot above. @@ -183,7 +183,7 @@ If you have the Active Directory Users and Computers console open you can refres By default MDT stores the log files locally on the client. In order to capture a reference image, you will need to enable server-side logging and, to do that, you will need to have a folder in which to store the logs. For more information, see [Create a Windows 10 reference image](create-a-windows-10-reference-image.md). -1. On MDT01, sign in as **CONTOSO\\admin**. +1. On MDT01, sign in as **CONTOSO\\administrator**. 2. Create and share the **D:\\Logs** folder by running the following commands in an elevated Windows PowerShell prompt: ```powershell From 33139fbefa0f4d682f967650b34206c25c262982 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Fri, 10 Jan 2020 13:43:45 -0800 Subject: [PATCH 035/358] draft06 --- .../create-a-windows-10-reference-image.md | 10 ++++++---- .../prepare-for-windows-deployment-with-mdt.md | 16 +++++++--------- 2 files changed, 13 insertions(+), 13 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index 57fb065aa7..a88633e7e2 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -31,7 +31,7 @@ For the purposes of this topic, we will use three computers: DC01, MDT01, and PC ![figure 1](../images/mdt-08-fig01.png) >[!NOTE] ->See [Deploying Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) for more detailed information about the setup for this lab. +>See [Deploying Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) for detailed information about the setup for this guide. ## The reference image @@ -47,7 +47,7 @@ With Windows 10, there is no hard requirement to create reference images. Howev ### Create the MDT build lab deployment share -- On MDT01, log on as admin using a password of pass@word3 (credentials from the [prepare for deployment](prepare-for-windows-deployment-with-mdt.md) topic). +- On MDT01, log on as administrator using a password of pass@word1 (credentials from the [prepare for deployment](prepare-for-windows-deployment-with-mdt.md) topic). - Start the MDT deployment workbench, and pin this to the taskbar for easy access. - Using the Deployment Workbench, right-click **Deployment Shares** and select **New Deployment Share**. - Use the following settings for the New Deployment Share Wizard: @@ -85,7 +85,7 @@ MDT supports adding both full source Windows 10 DVDs (ISOs) and custom images t ### Add Windows 10 Enterprise x64 (full source) -1. Sign on to MDT01 on as **CONTOSO\\admin** and copy the content of a Windows 10 Enterprise x64 DVD/ISO to the **D:\\Downloads\\Windows 10 Enterprise x64** folder on MDT01. See the following example. +1. Sign on to MDT01 on as **CONTOSO\\administrator** and copy the content of a Windows 10 Enterprise x64 DVD/ISO to the **D:\\Downloads\\Windows 10 Enterprise x64** folder on MDT01, or just insert the DVD or mount an ISO on MDT01. The following example shows the files copied to the D:\\Downloads folder, but you can also choose to import the OS directly from an ISO or DVD. ![ISO](../images/iso-data.png) @@ -93,12 +93,14 @@ MDT supports adding both full source Windows 10 DVDs (ISOs) and custom images t 3. Right-click the **Operating Systems** node, and create a new folder named **Windows 10**. 4. Expand the **Operating Systems** node, right-click the **Windows 10** folder, and select **Import Operating System**. Use the following settings for the Import Operating System Wizard: - Full set of source files - - Source directory: D:\\Downloads\\Windows 10 Enterprise x64 + - Source directory: (location of your source files) - Destination directory name: W10EX64RTM 5. After adding the operating system, in the **Operating Systems / Windows 10** folder, double-click the added operating system name in the **Operating System** node and change the name to: **Windows 10 Enterprise x64 RTM Default Image**. See the following example. ![Default image](../images/figure4-deployment-workbench.png) +>Depending on the DVD you used, there might be multiple editions. For the purposes of this guide, we are using the Windows 10 Enterprise image, but other images will also work. + ## Add applications Before you create an MDT task sequence, you need to add any applications and scripts you wish to install to the MDT Build Lab share. diff --git a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md index 5ceea1a80c..5d21695b0a 100644 --- a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md +++ b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md @@ -166,13 +166,13 @@ To use the Active Directory Users and Computers console (instead of PowerShell): 5. In the **Contoso / Groups** OU, create the following OU: 1. Security Groups -The final result of either method is shown below (the MDT_BA account will be created next). +The final result of either method is shown below. The **MDT_BA** account will be created next. ## Create the MDT service account When creating a reference image, you need an account for MDT. The MDT build account is used for Windows Preinstallation Environment (Windows PE) to connect to MDT01. -To create an MDT build account, open an elevalted Windows PowerShell prompt on DC01 and enter the following (copy and paste the entire command noticing the scroll bar at the bottom): +To create an MDT build account, open an elevalted Windows PowerShell prompt on DC01 and enter the following (copy and paste the entire command, taking care to notice the scroll bar at the bottom). This command will create the MDT_BA user account and set the password to "pass@word1": ```powershell New-ADUser -Name MDT_BA -UserPrincipalName MDT_BA -path "OU=Service Accounts,OU=Accounts,OU=Contoso,DC=CONTOSO,DC=COM" -Description "MDT Build Account" -AccountPassword (ConvertTo-SecureString "pass@word1" -AsPlainText -Force) -ChangePasswordAtLogon $false -PasswordNeverExpires $true -Enabled $true @@ -210,19 +210,17 @@ Alternatively, CMTrace formatting makes the logs much easier to read. See the sa ## Next steps -The following is an example of files that have been downloaded and installed (including optional CMTrace) on MDT at this point in the lab. - -![downloads](../images/downloads.png) - When you have completed all the steps in this section to prepare for deployment, see [Create a Windows 10 reference image](create-a-windows-10-reference-image.md). -## Sample files +## Appendix -The following sample files are available to help automate some MDT deployment tasks: +**Sample files** + +The following sample files are also available to help automate some MDT deployment tasks: - [Gather.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619361). This sample Windows PowerShell script performs the MDT Gather process in a simulated MDT environment. This allows you to test the MDT gather process and check to see if it is working correctly without performing a full Windows deployment. - [Set-OUPermissions.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619362). This sample Windows PowerShell script creates a domain account and then configures OU permissions to allow the account to join machines to the domain in the specified OU. - [MDTSample.zip](https://go.microsoft.com/fwlink/p/?LinkId=619363). This sample web service shows you how to configure a computer name dynamically using MDT. ## Related topics -[Understand the Microsoft Deployment Toolkit (MDT)](get-started-with-the-microsoft-deployment-toolkit.md) \ No newline at end of file +[Get started with MDT](get-started-with-the-microsoft-deployment-toolkit.md) \ No newline at end of file From db3fc130ada99a146d4699b5a0e17b60e16b9f48 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Fri, 10 Jan 2020 14:03:22 -0800 Subject: [PATCH 036/358] draft07 --- .../create-a-windows-10-reference-image.md | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index a88633e7e2..6249cf5603 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -134,7 +134,9 @@ Download links: - [Microsoft Visual C++ Redistributable 2019 - x86](https://aka.ms/vs/16/release/VC_redist.x86.exe) - [Microsoft Visual C++ Redistributable 2019 - x64](https://aka.ms/vs/16/release/VC_redist.x64.exe) -Download the software in this list to the D:\\Downloads folder on MDT01. **Note**: For the purposes of this lab, we will leave the MSVC files in the D:\\Downloads folder and the Office365 files will be extracted to a child folder. If you prefer, you can place each application in its own separate child folder and then modify the $ApplicationSourcePath below as needed (instead of just D:\\Downloads). +Download all three items in this list to the D:\\Downloads folder on MDT01. + +**Note**: For the purposes of this lab, we will leave the MSVC files in the D:\\Downloads folder and the Office365 files will be extracted to a child folder. If you prefer, you can place each application in its own separate child folder and then modify the $ApplicationSourcePath below as needed (instead of just D:\\Downloads). >[!NOTE] >All the Microsoft Visual C++ downloads can be found on [The latest supported Visual C++ downloads](https://go.microsoft.com/fwlink/p/?LinkId=619523). Visual C++ 2015, 2017 and 2019 all share the same redistributable files. @@ -142,7 +144,7 @@ Download the software in this list to the D:\\Downloads folder on MDT01. **Note* ### Create configuration file: Microsoft Office 365 Professional Plus x64 1. After downloading the most current version of the Office Deployment tool from the Microsoft Download Center using the link provided above, run the self-extracting executable file and extract the files to **D:\\Downloads\\Office365**. The Office Deployment Tool (setup.exe) and several sample configuration.xml files will be extracted. -2. Using a text editor (such as Notepad), create an XML file with the installation settings for Office 365 ProPlus that are appropriate for your organization. The file uses an XML format, so the file you create must have an extension of .xml but the file can have any filename. +2. Using a text editor (such as Notepad), create an XML file in the D:\\Downloads\\Office365 directory with the installation settings for Office 365 ProPlus that are appropriate for your organization. The file uses an XML format, so the file you create must have an extension of .xml but the file can have any filename. - For example, you can use the following configuration.xml file, which provides these configuration settings: - Install the 64-bit version of Office 365 ProPlus in English directly from the Office Content Delivery Network (CDN) on the internet. Note: 64-bit is now the default and recommended edition. @@ -168,7 +170,7 @@ Download the software in this list to the D:\\Downloads folder on MDT01. **Note* Also see [Configuration options for the Office Deployment Tool](https://docs.microsoft.com/deployoffice/configuration-options-for-the-office-2016-deployment-tool) and [Overview of the Office Deployment Tool](https://docs.microsoft.com/DeployOffice/overview-of-the-office-2016-deployment-tool) for more information. -3. Copy the configuration.xml file to the D:\\Downloads\\Office365 folder. See the following example of the extracted files plus the configuration.xml file in the Downloads\\Office365 folder: +3. Ensure the configuration.xml file is in the D:\\Downloads\\Office365 folder. See the following example of the extracted files plus the configuration.xml file in the Downloads\\Office365 folder: ![folder](../images/office-folder.png) @@ -180,7 +182,7 @@ Download the software in this list to the D:\\Downloads folder on MDT01. **Note* Additional information - Office 365 ProPlus is usually updated on a monthly basis with security updates and other quality updates (bug fixes), and possibly new features (depending on which update channel you’re using). That means that once you’ve deployed your reference image, Office 365 ProPlus will most likely need to download and install the latest updates that have been released since you created your reference image. -- **Note**: Instead of installing Office 365 ProPlus as part of the reference image, we recommend configuring Office 365 ProPlus to be installed immediately after the reference image is deployed to the user’s device. You would still use the Office Deployment Tool and a configuration.xml file to perform the installation. This way the user will have the most up-to-date version of Office 365 ProPlus right away and won’t have to download any new updates (which is most likely what would happen if Office 365 ProPlus was installed as part of the reference image.) +- **Note**: By using installing Office Deployment Tool as part of the reference image, Office 365 ProPlus is installed immediately after the reference image is deployed to the user’s device, rather than including Office apps part of the reference image. This way the user will have the most up-to-date version of Office 365 ProPlus right away and won’t have to download any new updates (which is most likely what would happen if Office 365 ProPlus was installed as part of the reference image.) - When you are creating your reference image, instead of installing Office 365 ProPlus directly from the Office CDN on the internet, you can install Office 365 ProPlus from a location on your local network, such as a file share. To do that, you would use the Office Deployment Tool in /download mode to download the installation files to that file share. Then you could use the Office Deployment Tool in /configure mode to install Office 365 ProPlus from that location on to your reference image. As part of that, you’ll need to point to that location in your configuration.xml file so that the Office Deployment Tool knows where to get the Office 365 ProPlus files. If you decide to do this, the next time you create a new reference image, you’ll want to be sure to use the Office Deployment Tool to download the most up-to-date installation files for Office 365 ProPlus to that location on your internal network. That way your new reference image will have a more up-to-date installation of Office 365 ProPlus. ### Connect to the deployment share using Windows PowerShell From 4c161899e2aec701180675dc1b600c0e423333cf Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Fri, 10 Jan 2020 14:57:56 -0800 Subject: [PATCH 037/358] draft08 --- .../deploy-windows-mdt/create-a-windows-10-reference-image.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index 6249cf5603..0457500643 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -566,7 +566,7 @@ SkipFinalSummary=YES ## Build the Windows 10 reference image -As previously described, this section requires a Hyper-V host. See [HyperVisor requirement](deploy-windows-10-with-the-microsoft-deployment-toolkit.md#hypervisor-requirement) for more information. +As previously described, this section requires a Hyper-V host. See [Hyper-V requirements](prepare-for-windows-deployment-with-mdt.md#hyper-v-requirements) for more information. Once you have created your task sequence, you are ready to create the Windows 10 reference image. This will be performed by launching the task sequence from a virtual machine which will then automatically perform the reference image creation and capture process. From 323e951400464344078e1bfb790c53850479e025 Mon Sep 17 00:00:00 2001 From: jborsecnik Date: Tue, 21 Jan 2020 19:32:00 -0800 Subject: [PATCH 038/358] first edit pass --- ...tral-access-policy-and-rule-definitions.md | 38 +++++++++-------- .../configure-machines-asr.md | 14 +++---- ...er-to-change-password-before-expiration.md | 42 +++++++++---------- ...nt-digitally-sign-communications-always.md | 36 ++++++++-------- 4 files changed, 65 insertions(+), 65 deletions(-) diff --git a/windows/security/threat-protection/auditing/monitor-central-access-policy-and-rule-definitions.md b/windows/security/threat-protection/auditing/monitor-central-access-policy-and-rule-definitions.md index ba4901004c..5ec17717c0 100644 --- a/windows/security/threat-protection/auditing/monitor-central-access-policy-and-rule-definitions.md +++ b/windows/security/threat-protection/auditing/monitor-central-access-policy-and-rule-definitions.md @@ -23,38 +23,40 @@ ms.date: 04/19/2017 - Windows 10 This topic for the IT professional describes how to monitor changes to central access policy and central access rule definitions when you use advanced security auditing options to monitor dynamic access control objects. -Central access policies and rules determine access permissions for multiple files on multiple file servers. Therefore, it is important to monitor changes to them. Like user claim and device claim definitions, central access policy and rule definitions reside in Active Directory Domain Services (AD DS), and they can be monitored just like any other object in Active Directory. Central access policies and rules are critical elements in a Dynamic Access Control deployment. These policies and rules are stored in AD DS, so they should be less likely to be tampered with than other network objects. However, it is important to monitor these objects for potential changes in security auditing and to verify that policies are being enforced. -Use the following procedures to configure settings to monitor changes to central access policy and central access rule definitions and to verify the changes. These procedures assume that you have configured and deployed Dynamic Access Control, including central access policies, claims, and other components, in your network. If you have not yet deployed Dynamic Access Control in your network, see [Deploy a Central Access Policy (Demonstration Steps)](https://technet.microsoft.com/library/hh846167.aspx). +Central access policies and rules determine access permissions for multiple files on multiple file servers. So it's important to monitor changes to them. Like user claim and device claim definitions, central access policy and rule definitions reside in Active Directory Domain Services (AD DS). You can monitor them just like any other object in Active Directory. Central access policies and rules are critical elements in a Dynamic Access Control deployment. These policies and rules are stored in AD DS, so they're less likely to be tampered with than other network objects. But it's important to monitor these objects for potential changes in security auditing and to verify that policies are being enforced. ->**Note:**  Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. +Use the following procedures to configure settings to monitor changes to central access policy and central access rule definitions and to verify the changes. These procedures assume that you've configured and deployed Dynamic Access Control, including central access policies, claims, and other components, in your network. If you haven't yet deployed Dynamic Access Control in your network, see [Deploy a Central Access Policy (demonstration steps)](https://technet.microsoft.com/library/hh846167.aspx). + +> [!NOTE] +> Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. -**To configure settings to monitor changes to central access policy and rule definitions** +**Configure settings to monitor central access policy and rule definition changes** 1. Sign in to your domain controller by using domain administrator credentials. -2. In Server Manager, point to **Tools**, and then click **Group Policy Management**. -3. In the console tree, right-click the default domain controller Group Policy Object, and then click **Edit**. -4. Double-click **Computer Configuration**, click **Security Settings**, expand **Advanced Audit Policy Configuration**, expand **System Audit Policies**, click **DS Access**, and then double-click **Audit directory service changes**. -5. Select the **Configure the following audit events** check box, select the **Success** check box (and the **Failure** check box, if desired), and then click **OK**. +2. In Server Manager, point to **Tools**, and then select **Group Policy Management**. +3. In the console tree, right-click the default domain controller Group Policy Object, and then select **Edit**. +4. Double-click **Computer Configuration** and select **Security Settings**. Expand **Advanced Audit Policy Configuration** and **System Audit Policies**, select **DS Access**, and then double-click **Audit directory service changes**. +5. Select the **Configure the following audit events** and **Success** check boxes (and the **Failure** check box, if you want). Then select **OK**. 6. Close the Group Policy Management Editor. 7. Open the Active Directory Administrative Center. 8. Under Dynamic Access Control, right-click **Central Access Policies**, and then select **Properties**. -9. Click the **Security** tab, click **Advanced** to open the **Advanced Security Settings** dialog box, and then click the **Auditing** tab. -10. Click **Add**, add a security auditing setting for the container, and then close all Security properties dialog boxes. +9. Select the **Security** tab, select **Advanced** to open the **Advanced Security Settings** dialog box, and then select the **Auditing** tab. +10. Select **Add**, add a security auditing setting for the container, and then close all security properties dialog boxes. After you configure settings to monitor changes to central access policy and central access rule definitions, verify that the changes are being monitored. -**To verify that changes to central access policy and rule definitions are monitored** +**Verify that central access policy and rule definition changes are monitored** 1. Sign in to your domain controller by using domain administrator credentials. 2. Open the Active Directory Administrative Center. -3. Under **Dynamic Access Control**, right-click **Central Access Policies**, and then click **Properties**. -4. Click the **Security** tab, click **Advanced** to open the **Advanced Security Settings** dialog box, and then click the **Auditing** tab. -5. Click **Add**, add a security auditing setting for the container, and then close all Security properties dialog boxes. -6. In the **Central Access Policies** container, add a new central access policy (or select one that exists), click **Properties** in the **Tasks** pane, and then change one or more attributes. -7. Click **OK**, and then close the Active Directory Administrative Center. -8. In Server Manager, click **Tools**, and then click **Event Viewer**. -9. Expand **Windows Logs**, and then click **Security**. Verify that event 4819 appears in the security log. +3. Under **Dynamic Access Control**, right-click **Central Access Policies**, and then select **Properties**. +4. Select the **Security** tab, select **Advanced** to open the **Advanced Security Settings** dialog box, and then select the **Auditing** tab. +5. Select **Add**, add a security auditing setting for the container, and then close all security properties dialog boxes. +6. In the **Central Access Policies** container, add a new central access policy (or select one that exists). Select **Properties** in the **Tasks** pane, and then change one or more attributes. +7. Select **OK**, and then close the Active Directory Administrative Center. +8. In Server Manager, select **Tools** and then **Event Viewer**. +9. Expand **Windows Logs**, and then select **Security**. Verify that event 4819 appears in the security log. ### Related resource diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-machines-asr.md b/windows/security/threat-protection/microsoft-defender-atp/configure-machines-asr.md index ff9e39088c..5f51fda91a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-machines-asr.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-machines-asr.md @@ -1,6 +1,6 @@ --- title: Optimize ASR rule deployment and detections -description: Ensure your attack surface reduction (ASR) rules are fully optimized to identify and prevent typical actions taken by malware during the exploitation phase. +description: Ensure your attack surface reduction (ASR) rules are optimized to identify and prevent typical malware exploits. keywords: onboard, Intune management, MDATP, WDATP, Microsoft Defender, Windows Defender, advanced threat protection, attack surface reduction, ASR, security baseline search.product: eADQiWindows 10XVcnh search.appverid: met150 @@ -23,20 +23,20 @@ ms.topic: article * [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -> Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-onboardconfigure-abovefoldlink) +> Want to experience Microsoft Defender ATP? [Sign up for a free trial](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-onboardconfigure-abovefoldlink). -[Attack surface reduction (ASR) rules](./attack-surface-reduction.md) identify and prevent actions that are typically taken by malware during exploitation. These rules control when and how potentially malicious code can run. For example, you can prevent JavaScript or VBScript from launching a downloaded executable, block Win32 API calls from Office macros, or block processes that run from USB drives. +[Attack surface reduction (ASR) rules](./attack-surface-reduction.md) identify and prevent typically malware exploits. These rules control when and how potentially malicious code can run. For example, you can prevent JavaScript or VBScript from launching a downloaded executable, block Win32 API calls from Office macros, and block processes that run from USB drives. ![Attack surface management card](images/secconmgmt_asr_card.png)
*Attack surface management card* -The **Attack surface management** card is an entry point to tools in Microsoft 365 security center that you can use to: +The *Attack surface management* card is an entry point to tools in Microsoft 365 security center that you can use to: * Understand how ASR rules are currently deployed in your organization * Review ASR detections and identify possible incorrect detections * Analyze the impact of exclusions and generate the list of file paths to exclude -Selecting **Go to attack surface management** takes you to **Monitoring & reports > Attack surface reduction rules > Add exclusions**. From there, you can navigate to other sections of Microsoft 365 security center. +Select **Go to attack surface management** > **Monitoring & reports > Attack surface reduction rules > Add exclusions**. From there, you can navigate to other sections of Microsoft 365 security center. ![Add exclusions tab in the Attack surface reduction rules page in Microsoft 365 security center](images/secconmgmt_asr_m365exlusions.png)
*Add exclusions tab in the Attack surface reduction rules page in Microsoft 365 security center* @@ -46,9 +46,7 @@ Selecting **Go to attack surface management** takes you to **Monitoring & report For more information about optimizing ASR rule deployment in Microsoft 365 security center, read [Monitor and manage ASR rule deployment and detections](https://docs.microsoft.com/office365/securitycompliance/monitor-devices#monitor-and-manage-asr-rule-deployment-and-detections) -> Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-onboardconfigure-belowfoldlink) - -## Related topics +**Related topics** * [Ensure your machines are configured properly](configure-machines.md) * [Get machines onboarded to Microsoft Defender ATP](configure-machines-onboarding.md) diff --git a/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md b/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md index 217b812683..f5599c4348 100644 --- a/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md +++ b/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md @@ -1,6 +1,6 @@ --- -title: Interactive logon Prompt user to change password before expiration (Windows 10) -description: Best practices, security considerations, and more for the security policy setting, Interactive logon Prompt user to change password before expiration. +title: Interactive log-on Prompt user to change password before expiration (Windows 10) +description: Best practices and security considerations for an interactive log-on prompt for users to change passwords before expiration. ms.assetid: 8fe94781-40f7-4fbe-8cfd-5e116e6833e9 ms.reviewer: ms.author: dansimp @@ -17,16 +17,16 @@ ms.topic: conceptual ms.date: 04/19/2017 --- -# Interactive logon: Prompt user to change password before expiration +# Interactive log on: Prompt the user to change passwords before expiration **Applies to** - Windows 10 -Describes the best practices, location, values, policy management and security considerations for the **Interactive logon: Prompt user to change password before expiration** security policy setting. +This article describes the best practices, location, values, policy management, and security considerations for the **Interactive logon: Prompt user to change password before expiration** security policy setting. ## Reference -The **Interactive logon: Prompt user to change password before expiration** policy setting determines how many days in advance users are warned that their passwords are about to expire. With this advance warning, the user has time to construct a password that is sufficiently strong. +The **Interactive logon: Prompt user to change password before expiration** policy setting determines when users are warned that their passwords are about to expire. This advance warning gives users the time to select a strong password before their current password expires and avoid losing system access. ### Possible values @@ -35,9 +35,9 @@ The **Interactive logon: Prompt user to change password before expiration** poli ### Best practices -1. Configure user passwords to expire periodically. Users will need warning that their passwords are going to expire, or they might inadvertently get locked out of the system. This could lead to confusion for users who access the network locally, or make it impossible for users who access the network through dial-up or virtual private network (VPN) connections to log on. -2. Set **Interactive logon: Prompt user to change password before expiration** to 5 days. When their password expiration date is 5 or fewer days away, users will see a dialog box each time they log on to the domain. -3. Do not set the value to 0, which results in displaying the password expiration warning every time the user logs on. +- Configure user passwords to expire periodically. Users need warning that their passwords are going to expire, or they might inadvertently get locked out of the system. This could lead to confusion for users who access the network locally. Or prevent make it impossible for users who access the network through dial-up or virtual private network (VPN) connections to log on. +- Set **Interactive logon: Prompt user to change password before expiration** to five days. When their password expiration date is five or fewer days away, users will see a dialog box each time that they log on to the domain. +- Do not set the value to zero, which results in displaying the password expiration warning every time the user logs on. ### Location @@ -45,24 +45,24 @@ Computer Configuration\\Policies\\Windows Settings\\Security Settings\\Local Pol ### Default values -The following table lists the actual and effective default values for this policy. Default values are also listed on the policy’s property page. +The following table lists the default values for this policy. Default values are also listed on the policy’s property page. -| Server type or GPO | Default value | +| Server type or Group Policy Object | Default value | | - | - | | Default Domain Policy| Not defined| | Default Domain Controller Policy | Not defined| -| Stand-Alone Server Default Settings | 5 days| -| DC Effective Default Settings | 5 days | -| Member Server Effective Default Settings| 5 days | -| Client Computer Effective Default Settings | 5 days| +| Stand-Alone Server Default Settings | Five days| +| DC Effective Default Settings | Five days | +| Member Server Effective Default Settings| Five days | +| Client Computer Effective Default Settings | Five days| ## Policy management -This section describes features and tools that are available to help you manage this policy. +This section describes features and tools that you can use to manage this policy. ### Restart requirement -None. Changes to this policy become effective without a device restart when they are saved locally or distributed through Group Policy. +None. Changes to this policy become effective without a device restart when they're saved locally or distributed through Group Policy. ### Policy conflict considerations @@ -70,19 +70,19 @@ None. ### Group Policy -This policy setting can be configured by using the Group Policy Management Console (GPMC) to be distributed through Group Policy Objects (GPOs). If this policy is not contained in a distributed GPO, this policy can be configured on the local computer by using the Local Security Policy snap-in. +This policy setting can be configured by using the Group Policy Management Console (GPMC) to be distributed through Group Policy Objects (GPOs). If this policy isn't contained in a distributed GPO, ti can be configured on the local computer through the Local Security Policy snap-in. ## Security considerations -This section describes how an attacker might exploit a feature or its configuration, how to implement the countermeasure, and the possible negative consequences of countermeasure implementation. +This section describes how an attacker might exploit a feature or its configuration, how to implement the countermeasure, and possible negative consequences of the countermeasure. ### Vulnerability -If user passwords are configured to expire periodically in your organization, users need to be warned when this is about to happen, or they may be locked out of the device inadvertently when their passwords expire. This condition could lead to confusion for users who access the network locally, or make it impossible for users to access your organization's network through dial-up or virtual private network (VPN) connections. +If user passwords are configured to expire periodically in your organization, users need to be warned before expiration. Otherwise, they may get locked out of the devices inadvertently. This condition could lead to confusion for users who access the network locally, or make it impossible for users to access your organization's network through dial-up or VPN connections. ### Countermeasure -Configure the **Interactive logon: Prompt user to change password before expiration** setting to 5 days. +Configure the **Interactive logon: Prompt user to change password before expiration** setting to five days. ### Potential impact @@ -90,4 +90,4 @@ Users see a dialog-box prompt to change their password each time that they log o ## Related topics -- [Security Options](security-options.md) +- [Security options](security-options.md) diff --git a/windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always.md b/windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always.md index d36aa5c106..c51746c7d7 100644 --- a/windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always.md +++ b/windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always.md @@ -1,6 +1,6 @@ --- title: Microsoft network client Digitally sign communications (always) (Windows 10) -description: Best practices, security considerations and more for the security policy setting, Microsoft network client Digitally sign communications (always). +description: Best practices and security considerations for the Microsoft network client Digitally sign communications (always) security policy setting. ms.assetid: 4b7b0298-b130-40f8-960d-60418ba85f76 ms.reviewer: manager: dansimp @@ -20,36 +20,36 @@ ms.date: 06/28/2018 - Windows 10 - Windows Server -Describes the best practices, location, values, policy management and security considerations for the **Microsoft network client: Digitally sign communications (always)** security policy setting for SMBv3 and SMBv2. +This article describes the best practices, location, values, policy management, and security considerations for the **Microsoft network client: Digitally sign communications (always)** security policy setting for SMBv3 and SMBv2. ## Reference -The Server Message Block (SMB) protocol provides the basis for file and print sharing and many other networking operations, such as remote Windows administration. To prevent man-in-the-middle attacks that modify SMB packets in transit, the SMB protocol supports the digital signing of SMB packets. +The Server Message Block (SMB) protocol provides the basis for file and print sharing and many other networking operations, such as remote Windows administration. To prevent "man-in-the-middle" attacks that modify SMB packets in transit, the SMB protocol supports digital signing of SMB packets. Implementation of digital signatures in high-security networks helps prevent the impersonation of client computers and servers, which is known as "session hijacking." But misuse of these policy settings is a common error that can cause data access failure. Beginning with SMBv2 clients and servers, signing can be either required or not required. If this policy setting is enabled, SMBv2 clients will digitally sign all packets. Another policy setting determines whether signing is required for SMBv3 and SMBv2 server communications: [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications-always.md). -There is a negotiation done between the SMB client and the SMB server to decide whether signing will effectively be used. The following table has the effective behavior for SMBv3 and SMBv2. +There is a negotiation done between the SMB client and the SMB server to decide whether signing will effectively be used. The following table shows the effective behavior for SMBv3 and SMBv2. -| | Server – Required | Server – Not Required | +| | Server – required | Server – not required | |---------------------------|---------------------|------------------------| -| **Client – Required** | Signed | Signed | -| **Client – Not Required** | Signed 1 | Not Signed2 | +| **Client – required** | Signed | Signed | +| **Client – not required** | Signed 1 | Not Signed2 |
1 Default for domain controller SMB traffic
2 Default for all other SMB traffic -Performance of SMB signing is improved in SMBv2. For more details, see [Potential impact](#potential-impact). +Performance of SMB signing is improved in SMBv2. For more information, see [Potential impact](#potential-impact). ### Possible values - Enabled - Disabled -### Best practices +### Best practice Enable **Microsoft network client: Digitally sign communications (always)**. @@ -59,7 +59,7 @@ Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Sec ### Default values -The following table lists the actual and effective default values for this policy. Default values are also listed on the policy’s property page. +The following table lists the default values for this policy. Default values are also listed on the policy’s property page. | Server type or GPO | Default value | | - | - | @@ -72,7 +72,7 @@ The following table lists the actual and effective default values for this polic ## Policy management -This section describes features and tools that are available to help you manage this policy. +This section describes features and tools that you can use to manage this policy. ### Restart requirement @@ -80,25 +80,25 @@ None. Changes to this policy become effective without a device restart when they ## Security considerations -This section describes how an attacker might exploit a feature or its configuration, how to implement the countermeasure, and the possible negative consequences of countermeasure implementation. +This section describes how an attacker might exploit a feature or its configuration, how to implement the countermeasure, and the possible negative consequences of the countermeasure. ### Vulnerability -Session hijacking uses tools that allow attackers who have access to the same network as the client device or server to interrupt, end, or steal a session in progress. Attackers can potentially intercept and modify unsigned SMB packets and then modify the traffic and forward it so that the server might perform objectionable actions. Alternatively, the attacker could pose as the server or client computer after legitimate authentication, and gain unauthorized access to data. +Session hijacking uses tools that allow attackers who have access to the same network as the client device or server to interrupt, end, or steal a session in progress. Attackers can potentially intercept and modify unsigned SMB packets and then modify the traffic and forward it to make the server perform objectionable actions. Alternatively, the attacker could pose as the server or client computer after legitimate authentication and gain unauthorized access to data. -SMB is the resource-sharing protocol that is supported by many Windows operating systems. It is the basis of many modern features like Storage Spaces Direct, Storage Replica, and SMB Direct, as well as many legacy protocols and tools. SMB signatures authenticate users and the servers that host the data. If either side fails the authentication process, data transmission does not take place. +SMB is the resource-sharing protocol that's supported by many versions of the Windows operating systems. It's the basis of many modern features like Storage Spaces Direct, Storage Replica, and SMB Direct, as well as many legacy protocols and tools. SMB signatures authenticate users and the servers that host the data. If either side fails the authentication process, data transmission does not take place. ### Countermeasure Enable **Microsoft network client: Digitally sign communications (always)**. ->[!NOTE] ->An alternative countermeasure that could protect all network traffic is to implement digital signatures with IPsec. There are hardware-based accelerators for IPsec encryption and signing that could be used to minimize the performance impact on the servers' CPUs. No such accelerators are available for SMB signing. +> [!NOTE] +> An alternative countermeasure that could protect all network traffic is to implement digital signatures through IPsec. There are hardware-based accelerators for IPsec encryption and signing that can be used to minimize the performance impact on servers. No such accelerators are available for SMB signing. ### Potential impact -Storage speeds impact performance. A faster drive on the source and destination allows more throughput, which causes more CPU usage of signing. If you are using a 1 Gb Ethernet network or slower storage speed with a modern CPU, there is limited degradation in performance. If you are using a faster network (such as 10 Gb), the performance impact of signing may be greater. +Storage speeds affect performance. A faster drive on the source and destination allows more throughput, which causes more CPU usage of signing. If you're using a 1-Gb Ethernet network or slower storage speed with a modern CPU, there's limited degradation in performance. If you're using a faster network (such as 10 Gb), the performance impact of signing may be greater. ## Related topics -- [Security Options](security-options.md) +- [Security options](security-options.md) From a857874b90dd32e9f9e57ebc84acb491a9c7cda1 Mon Sep 17 00:00:00 2001 From: jborsecnik Date: Wed, 22 Jan 2020 09:57:27 -0800 Subject: [PATCH 039/358] first edit pass --- ...loying-advanced-security-audit-policies.md | 18 +++++++---- ...-this-computer-to-use-online-identities.md | 30 +++++++++---------- 2 files changed, 27 insertions(+), 21 deletions(-) diff --git a/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md b/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md index c21ba65a4c..4691d1d6b7 100644 --- a/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md +++ b/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md @@ -105,7 +105,8 @@ An organization's domain and OU structure provide a fundamental starting point f In addition to your domain model, you should also find out whether your organization creates and maintains a systematic threat model. A good threat model can help you identify threats to key components in your infrastructure, so you can define and apply audit settings that enhance the organization's ability to identify and counter those threats. ->**Important:**  Including auditing within your organization's security plan also makes it possible to budget your resources on the areas where auditing can achieve the most positive results. +> [!IMPORTANT] +> Including auditing within your organization's security plan also makes it possible to budget your resources on the areas where auditing can achieve the most positive results. For additional details about how to complete each of these steps and how to prepare a detailed threat model, download the [IT Infrastructure Threat Modeling Guide](https://go.microsoft.com/fwlink/p/?LinkId=163432). @@ -152,15 +153,20 @@ Security and auditing requirements and audit event volume can vary considerably - If the computers are servers, desktop computers, or portable computers. - The important applications the computers run, such as Exchange Server, SQL Server, or Forefront Identity Manager. - >**Note:**  If the server applications (including Exchange Server and SQL Server) have audit settings. For more information about auditing in Exchange Server, see the [Exchange 2010 Security Guide](https://go.microsoft.com/fwlink/p/?linkid=128052). For more information about auditing in SQL Server 2008, see [Auditing (Database Engine)](https://go.microsoft.com/fwlink/p/?LinkId=163434). For SQL Server 2012, see [SQL Server Audit (Database Engine)](https://technet.microsoft.com/library/cc280386.aspx). + > [!NOTE] + > For more information about auditing: + > - In Exchange Server, see the [Exchange 2010 Security Guide](https://go.microsoft.com/fwlink/p/?linkid=128052). + > - In SQL Server 2008, see [Auditing (Database Engine)](https://go.microsoft.com/fwlink/p/?LinkId=163434). + > - In SQL Server 2012, see [SQL Server Audit (Database Engine)](https://technet.microsoft.com/library/cc280386.aspx). - The operating system versions. - >**Note:**  The operating system version determines which auditing options are available and the volume of audit event data. + > [!NOTE] + > The operating system version determines which auditing options are available and the volume of audit event data. - The business value of the data. -For example, a web server that is accessed by external users requires different audit settings than a root certification authority (CA) that is never exposed to the public Internet or even to regular users on the organization's network. +For example, a web server that's accessed by external users requires different audit settings than a root certification authority (CA) that's never exposed to the public Internet or even to regular users on the organization's network. The following table illustrates an analysis of computers in an organization. @@ -173,9 +179,9 @@ The following table illustrates an analysis of computers in an organization. ### Regulatory requirements -Many industries and locales have strict and specific requirements for network operations and how resources are protected. In the health care and financial industries, for example, there are strict guidelines for who has access to records and how they are used. Many countries have strict privacy rules. To identify regulatory requirements, work with your organization's legal department and other departments responsible for these requirements. Then consider the security configuration and auditing options that can be used to comply with and verify compliance with these regulations. +Many industries and locales have strict and specific requirements for network operations and how resources are protected. In the health care and financial industries, for example, strict guidelines control who has access to records and how they are used. Many countries have strict privacy rules. To identify regulatory requirements, work with your organization's legal department and other departments responsible for these requirements. Then consider the security configuration and auditing options that you can use to comply with and verify compliance with these regulations. -For more info, see the [System Center Process Pack for IT GRC](https://technet.microsoft.com/library/dd206732.aspx). +For more information, see the [System Center Process Pack for IT GRC](https://technet.microsoft.com/library/dd206732.aspx). ## Mapping the security audit policy to groups of users, computers, and resources in your organization diff --git a/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md b/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md index 01dea39c48..008185b850 100644 --- a/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md +++ b/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md @@ -1,6 +1,6 @@ --- title: Network security Allow PKU2U authentication requests to this computer to use online identities (Windows 10) -description: Best practices and more for the security policy setting, Network Security Allow PKU2U authentication requests to this computer to use online identities. +description: Best practices for the Network Security Allow PKU2U authentication requests to this computer to use online identities security setting. ms.assetid: e04a854e-d94d-4306-9fb3-56e9bd7bb926 ms.reviewer: ms.author: dansimp @@ -22,18 +22,18 @@ ms.date: 04/19/2017 **Applies to** - Windows 10 -Describes the best practices, location, and values for the **Network Security: Allow PKU2U authentication requests to this computer to use online identities** security policy setting. +This article describes the best practices, location, and values for the **Network Security: Allow PKU2U authentication requests to this computer to use online identities** security policy setting. ## Reference Starting with Windows Server 2008 R2 and Windows 7, the Negotiate Security Support Provider (SSP) supports an extension SSP, Negoexts.dll. This extension SSP is treated as an authentication protocol by the Windows operating system, and it supports SSPs from Microsoft, including PKU2U. You can also develop or add other SSPs. -When devices are configured to accept authentication requests by using online IDs, Negoexts.dll calls the PKU2U SSP on the computer that is used to log on. The PKU2U SSP obtains a local certificate and exchanges the policy between the peer computers. When validated on the peer computer, the certificate within the metadata is sent to the logon peer for validation. It associates the user's certificate to a security token, and then the logon process completes. +When devices are configured to accept authentication requests by using online IDs, Negoexts.dll calls the PKU2U SSP on the computer that's used to log on. The PKU2U SSP obtains a local certificate and exchanges the policy between the peer computers. When it's validated on the peer computer, the certificate within the metadata is sent to the logon peer for validation. It associates the user's certificate to a security token, and then the logon process completes. > [!Note] -> The ability to link online IDs can be performed by anyone with an account that has standard user’s credentials through **Credential Manager**. +> The ability to link online IDs can be performed by anyone who has an account that has standard user’s credentials through Credential Manager. -This policy is not configured by default on domain-joined devices. This would disallow the online identities to be able to authenticate to the domain-joined computers in Windows 7 and later. +This policy isn't configured by default on domain-joined devices. This would disallow the online identities to authenticate to domain-joined computers in Windows 7 and later. ### Possible values @@ -41,18 +41,18 @@ This policy is not configured by default on domain-joined devices. This would di This will allow authentication to successfully complete between the two (or more) computers that have established a peer relationship through the use on online IDs. The PKU2U SSP obtains a local certificate and exchanges the policy between the peer devices. When validated on the peer computer, the certificate within the metadata is sent to the logon peer for validation. It associates the user's certificate to a security token, and then the logon process completes. -> [!Note] -> KU2U is disabled by default on Windows Server. Remote desktop connections from a hybrid Azure AD-joined server to an Azure AD-joined Windows 10 device, or Hybrid Azure AD-joined domain member Windows 10 device, fails. To resolve this, enable PKU2U on the Server. + > [!NOTE] + > KU2U is disabled by default on Windows Server. Remote desktop connections from a hybrid Azure AD-joined server to an Azure AD-joined Windows 10 device, or Hybrid Azure AD-joined domain member Windows 10 device, fail. To resolve this, enable PKU2U on the server. - **Disabled** This will prevent online IDs from being used to authenticate the user to another computer in a peer-to-peer relationship. -- Not set. Not configuring this policy prevents online IDs from being used to authenticate the user. This is the default on domain-joined devices +- ***Not set***. Not configuring this policy prevents online IDs from being used to authenticate the user. This option is the default on domain-joined devices. ### Best practices -Within a domain, domain accounts should be used for authentication. Set this policy to **Disabled** or do not configure this policy to exclude online identities from being used to authenticate. +Within a domain, domain accounts should be used for authentication. Set this policy to **Disabled** or don't configure this policy to exclude online identities from being used to authenticate. ### Location @@ -60,7 +60,7 @@ Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Sec ### Default values -The following table lists the actual and effective default values for this policy. Default values are also listed on the policy’s property page. +The following table lists the effective default values for this policy. Default values are also listed on the policy’s property page. | Server type or Group Policy Object (GPO) | Default value | | - | - | @@ -73,20 +73,20 @@ The following table lists the actual and effective default values for this polic ## Security considerations -This section describes how an attacker might exploit a feature or its configuration, how to implement the countermeasure, and the possible negative consequences of countermeasure implementation. +This section describes how an attacker might exploit a feature or its configuration, how to implement the countermeasure, and the possible negative consequences of the countermeasure. ### Vulnerability -Enabling this policy setting allows a user’s account on one computer to be associated with an online identity, such as Microsoft Account, so that account can log on to a peer device (if the peer device is likewise configured) without the use of a Windows logon account (domain or local). Although this is beneficial for workgroups or home groups, using this feature in a domain-joined environment might circumvent your established security policies. +Enabling this policy setting allows a user’s account on one computer to be associated with an online identity, such as Microsoft account. That account can then log on to a peer device (if the peer device is likewise configured) without the use of a Windows logon account (domain or local). Although this setup is beneficial for workgroups or home groups, in a domain-joined environment it might circumvent your established security policies. ### Countermeasure -Set this policy to Disabled or do not configure this security policy for domain-joined devices. +Set this policy to *Disabled* or don't configure this security policy for domain-joined devices. ### Potential impact -If you do not set or disable this policy, the PKU2U protocol will not be used to authenticate between peer devices, which forces users to follow domain defined access control policies. If you enable this policy, you will allow your users to authenticate by using local certificates between systems that are not part of a domain that uses PKU2U. This will allow users to share resources between devices +If you don't set or you disable this policy, the PKU2U protocol won't be used to authenticate between peer devices, which force users to follow domain-defined access control policies. If you enable this policy, you allow your users to authenticate by using local certificates between systems that are not part of a domain that uses PKU2U. This allows users to share resources between devices. ## Related topics -- [Security Options](security-options.md) +- [Security options](security-options.md) From 5932a9eecf0f9f1273a54e8e4eed3be76b02044f Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 22 Jan 2020 16:36:25 -0800 Subject: [PATCH 040/358] draft07 --- .../create-a-windows-10-reference-image.md | 2 +- ...d-with-the-microsoft-deployment-toolkit.md | 8 +++---- ...prepare-for-windows-deployment-with-mdt.md | 24 ++++++++++--------- 3 files changed, 17 insertions(+), 17 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index 0457500643..f35f5fb1d2 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -31,7 +31,7 @@ For the purposes of this topic, we will use three computers: DC01, MDT01, and PC ![figure 1](../images/mdt-08-fig01.png) >[!NOTE] ->See [Deploying Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md) for detailed information about the setup for this guide. +>See [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) for more information about the server, client, and network infrastructure used in this guide. ## The reference image diff --git a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md index 6c1f61848a..1cc6f00b84 100644 --- a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md @@ -21,18 +21,16 @@ ms.topic: article **Applies to** - Windows 10 -This topic provides an overview of the features, components, and capabilities of the Microsoft Deployment Toolkit (MDT). When you are ready to install and start using MDT, see [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md). +This topic provides an overview of the features, components, and capabilities of the Microsoft Deployment Toolkit (MDT). To download the latest version of MDT, visit the [MDT resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117). When you are ready to start using MDT, see [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md). -## Introduction +## About MDT -The Microsoft Deployment Toolkit (MDT) is a unified collection of tools, processes, and guidance for automating desktop and server deployment. You can use it to create reference images or as a complete deployment solution. MDT is one of the most important tools available to IT professionals today. +MDT is a unified collection of tools, processes, and guidance for automating desktop and server deployment. You can use it to create reference images or as a complete deployment solution. MDT is one of the most important tools available to IT professionals today. In addition to reducing deployment time and standardizing desktop and server images, MDT enables you to more easily manage security and ongoing configurations. MDT builds on top of the core deployment tools in the Windows Assessment and Deployment Kit (Windows ADK) with additional guidance and features designed to reduce the complexity and time required for deployment in an enterprise environment. MDT supports the deployment of Windows 10, as well as Windows 7, Windows 8.1, and Windows Server. It also includes support for zero-touch installation (ZTI) with [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/configmgr/). -To download the latest version of MDT, visit the [MDT resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117). - ## Key features in MDT MDT has been in existence since 2003, when it was first introduced as Business Desktop Deployment (BDD) 1.0. The toolkit has evolved, both in functionality and popularity, and today it is considered fundamental to Windows operating system and enterprise application deployment. diff --git a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md index 5d21695b0a..965c2eb1f9 100644 --- a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md +++ b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md @@ -25,17 +25,18 @@ This topic will walk you through the steps necessary to create the server struct ## Requirements +The procedures in this guide use the following fictitious names and infrastructure. + ### Network and server infrastructure -For the purposes of this topic, we will use three computers: **DC01**, **MDT01**, and **HV01**. +For the purposes of this topic, we will use three server computers: **DC01**, **MDT01**, and **HV01**. - All servers are running Windows Server 2019. - - You can use an earlier version of Windows Server with minor modifications to some procedures. - - Although MDT supports Windows Server 2008 R2, At least Windows Server 2012 R2 or later is requried to perform the procedures in this guide. -- DC01 is a domain controller, DHCP server, and DNS server for contoso.com, representing the fictitious Contoso Corporation. -- MDT01 is a domain member server in contoso.com and has a D: drive that will be used for data. - - The data drive requires at least 100GB of disk space. + - You can use an earlier version of Windows Server with minor modifications to some procedures. + - Note: Although MDT supports Windows Server 2008 R2, at least Windows Server 2012 R2 or later is requried to perform the procedures in this guide. +- DC01 is a domain controller, DHCP server, and DNS server for contoso.com, representing the fictitious Contoso Corporation. +- MDT01 is a domain member server in contoso.com with a data (D:) drive that can store at least 200GB. - HV01 is a Hyper-V host computer that is used to build a Windows 10 reference image. - - See [Hyper-V requirements](#hyper-v-requirements) below for more information. + - See [Hyper-V requirements](#hyper-v-requirements) below for more information about HV01. ### Client computers @@ -51,7 +52,7 @@ Several client computers are referenced in this guide using hostnames PC0001 to ### Storage requirements -MDT01 and HV01 should have a data drive (D:) that can support up to 200 GB of data. The system drives on all computers (C:) can be 50 GB in size, but 100 GB is recommended. +MDT01 and HV01 should have a data drive (D:) that can support up to 200 GB of data. The system drives on all computers (C:) can be 50 GB in size, but 100 GB is recommended. You can also use a computer with a single, system drive as long as it has at least 200 GB of available storage space. You will need to adjust come procedures in this guide to specify the C: drive instead of the D: drive. ### Hyper-V requirements @@ -198,8 +199,7 @@ See the following example: ## Use CMTrace to read log files (optional) -The log files in MDT Lite Touch are formatted to be read by Configuration Manager Trace ([CMTrace](https://docs.microsoft.com/sccm/core/support/cmtrace)), which is available as part of the [Microsoft System 2012 R2 Center Configuration Manager Toolkit](https://go.microsoft.com/fwlink/p/?LinkId=734717). You should also download this tool. - +The log files in MDT Lite Touch are formatted to be read by Configuration Manager Trace ([CMTrace](https://docs.microsoft.com/sccm/core/support/cmtrace)), which is available as part of the [Microsoft System 2012 R2 Center Configuration Manager Toolkit](https://go.microsoft.com/fwlink/p/?LinkId=734717). You should also download this tool. You can use Notepad (example below): ![figure 8](../images/mdt-05-fig09.png) @@ -208,6 +208,8 @@ Alternatively, CMTrace formatting makes the logs much easier to read. See the sa ![figure 9](../images/mdt-05-fig10.png) +After installing the ConfigMgrTools.msi file, search for **cmtrace** and pin the tool to your taskbar for easy access. + ## Next steps When you have completed all the steps in this section to prepare for deployment, see [Create a Windows 10 reference image](create-a-windows-10-reference-image.md). @@ -216,7 +218,7 @@ When you have completed all the steps in this section to prepare for deployment, **Sample files** -The following sample files are also available to help automate some MDT deployment tasks: +The following sample files are also available to help automate some MDT deployment tasks. This guide does not use these files. - [Gather.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619361). This sample Windows PowerShell script performs the MDT Gather process in a simulated MDT environment. This allows you to test the MDT gather process and check to see if it is working correctly without performing a full Windows deployment. - [Set-OUPermissions.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619362). This sample Windows PowerShell script creates a domain account and then configures OU permissions to allow the account to join machines to the domain in the specified OU. - [MDTSample.zip](https://go.microsoft.com/fwlink/p/?LinkId=619363). This sample web service shows you how to configure a computer name dynamically using MDT. From 64780ece8ebdfe61151954a2248db59128cea3fd Mon Sep 17 00:00:00 2001 From: jborsecnik Date: Wed, 22 Jan 2020 17:16:43 -0800 Subject: [PATCH 041/358] first edit pass --- ...loying-advanced-security-audit-policies.md | 150 +++++++++--------- 1 file changed, 77 insertions(+), 73 deletions(-) diff --git a/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md b/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md index 4691d1d6b7..7fe6bec96f 100644 --- a/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md +++ b/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md @@ -1,6 +1,6 @@ --- -title: Planning and deploying advanced security audit policies (Windows 10) -description: Learn which options to consider and tasks to complete, to deploy an effective security audit policy in a network that includes advanced security audit policies. +title: Plan and deploy advanced security audit policies (Windows 10) +description: Learn which options to consider and tasks to complete to deploy an effective security audit policy in a network that includes advanced security audit policies. ms.assetid: 7428e1db-aba8-407b-a39e-509671e5a442 ms.reviewer: ms.author: dansimp @@ -17,7 +17,7 @@ ms.topic: conceptual ms.date: 04/19/2017 --- -# Planning and deploying advanced security audit policies +# Plan and deploy advanced security audit policies **Applies to** - Windows 10 @@ -29,29 +29,29 @@ Organizations invest a large portion of their information technology budgets on To be well defined and timely, an auditing strategy must provide useful tracking data for an organization's most important resources, critical behaviors, and potential risks. In a growing number of organizations, it must also provide absolute proof that IT operations comply with corporate and regulatory requirements. -Unfortunately, no organization has unlimited resources to monitor every resource and activity on a network. If you do not plan well, you will likely have gaps in your auditing strategy. However, if you try to audit every resource and activity, you may find yourself with far too much monitoring data, including thousands of benign audit entries that an analyst needs to sift through to identify the narrow set of entries that warrant closer examination. This could cause delays or even prevent auditors from identifying suspicious activity. Thus, too much monitoring can leave an organization as vulnerable as not enough monitoring. +No organization has unlimited resources to monitor every resource and activity on a network. If you don't plan well, you will likely have gaps in your auditing strategy. However, if you try to audit every resource and activity, you may find yourself with too much monitoring data, including thousands of benign audit entries that an analyst needs to sift through to identify the narrow set of entries that warrant closer examination. This could cause delays or even prevent auditors from identifying suspicious activity. So, too much monitoring can leave an organization as vulnerable as not enough. Here are some features that can help you focus your effort: -- **Advanced audit policy settings**. You can apply and manage detailed audit policy settings through Group Policy. -- **"Reason for access" auditing**. You can specify and identify the permissions that were used to generate a particular object access security event. -- **Global object access auditing**. You can define system access control lists (SACLs) for an entire computer file system or registry. +- **Advanced audit policy settings:** You can apply and manage detailed audit policy settings through Group Policy. +- **"Reason for access" auditing:**You can specify and identify the permissions that were used to generate a particular object access security event. +- **Global object access auditing:** You can define system access control lists (SACLs) for an entire computer file system or registry. To deploy these features and plan an effective security auditing strategy, you need to: -- Identify your most critical resources and the most important activities that need to be tracked. -- Identify the audit settings that can be used to track these activities. +- Identify your most critical resources and the most important activities that you need to track. +- Identify the audit settings that you can use to track these activities. - Assess the advantages and potential costs associated with each. - Test these settings to validate your choices. - Develop plans for deploying and managing your audit policy. ## About this guide -This document will guide you through the steps needed to plan a security auditing policy that uses Windows auditing features. This policy must identify and address vital business needs, including: +This document guides you through the steps to plan a security auditing policy that uses Windows auditing features. This policy must identify and address vital business needs, including: - Network reliability - Regulatory requirements -- Protection of the organization's data and intellectual property +- Protection of data and intellectual property - Users, including employees, contractors, partners, and customers - Client computers and applications - Servers and the applications and services running on those servers @@ -63,31 +63,31 @@ The audit policy also must identify processes for managing audit data after it h By carefully planning, designing, testing, and deploying a solution based on your organization's business requirements, you can provide the standardized functionality, security, and management control that your organization needs. -## Understanding the security audit policy design process +## Understand the security audit policy design process -The process of designing and deploying a Windows security audit policy involves the following tasks, which are described in greater detail throughout this document: +Designing and deploying a Windows security audit policy involves the following tasks, which are described in in this document: -- [Identifying your Windows security audit policy deployment goals](#bkmk-1) +- [Identify your Windows security audit policy deployment goals](#bkmk-1) - This section helps define the business objectives that will guide your Windows security audit policy. It also helps you define the resources, users, and computers that will be the focus of your security auditing. + This section helps define the business objectives that will guide your Windows security audit policy. It also helps define the resources, users, and computers that will be the focus of your security auditing. -- [Mapping the security audit policy to groups of users, computers, and resources in your organization](#bkmk-2) +- [Map the security audit policy to groups of users, computers, and resources in your organization](#bkmk-2) This section explains how to integrate security audit policy settings with domain Group Policy settings for different groups of users, computers, and resources. In addition, if your network includes multiple versions of Windows client and server operating systems, it also explains when to use basic audit policy settings and when to use advanced security audit policy settings. -- [Mapping your security auditing goals to a security audit policy configuration](#bkmk-3) +- [Map your security auditing goals to a security audit policy configuration](#bkmk-3) - This section explains the categories of Windows security auditing settings that are available. It also identifies individual Windows security auditing policy settings that can be of particular value to address auditing scenarios. + This section explains the categories of Windows security auditing settings that are available. It also identifies individual Windows security auditing policy settings to address auditing scenarios. -- [Planning for security audit monitoring and management](#bkmk-4) +- [Plan for security audit monitoring and management](#bkmk-4) - This section helps you plan to collect, analyze, and store Windows audit data. Depending on the number of computers and types of activity that you want to audit, Windows event logs can fill up quickly. In addition, this section explains how auditors can access and aggregate event data from multiple servers and desktop computers. It also explains how to address storage requirements, including how much audit data to store and how it must be stored. + This section helps you plan to collect, analyze, and store Windows audit data. Depending on the number of computers and types of activity that you want to audit, Windows event logs can fill up quickly. This section also explains how auditors can access and aggregate event data from multiple servers and desktop computers. It also covers how to address storage requirements. -- [Deploying the security audit policy](#bkmk-5) +- [Deploy the security audit policy](#bkmk-5) - This section provides recommendations and guidelines for the effective deployment of a Windows security audit policy. Configuring and deploying Windows audit policy settings in a test lab environment can help you confirm that the settings you have selected will produce the type of audit data you need. However, only a carefully staged pilot and incremental deployments based on your domain and organizational unit (OU) structure will enable you to confirm that the audit data you generate can be monitored and that it meets your organization's audit needs. + This section provides guidelines for effective deployment of a Windows security audit policy. Configuring and deploying Windows audit policy settings in a test lab environment can help you confirm that the settings you've selected will produce the type of audit data you need. However, only a carefully staged pilot and incremental deployments based on your domain and organizational unit (OU) structure will enable you to confirm that the audit data you generate can be monitored and that it meets your organization's audit needs. -## Identifying your Windows security audit policy deployment goals +## Identify your Windows security audit policy deployment goals A security audit policy must support and be a critical and integrated aspect of an organization's overall security design and framework. @@ -101,20 +101,20 @@ To create your Windows security audit plan, begin by identifying: ### Network environment -An organization's domain and OU structure provide a fundamental starting point for thinking about how to apply a security audit policy because it likely provides a foundation of Group Policy Objects (GPOs) and logical grouping of resources and activities that you can use to apply the audit settings that you choose. It is also likely that certain portions of your domain and OU structure already provide logical groups of users, resources, and activities that justify the time and resources needed to audit them. For information about how to integrate a security audit policy with your domain and OU structure, see [Mapping security audit policy to groups of users, computers, and resources in your organization](#bkmk-2) later in this document. +An organization's domain and organziational unit (OU) structure provide a fundamental starting point for thinking about how to apply a security audit policy because it likely provides a foundation of Group Policy Objects (GPOs) and logical grouping of resources and activities that you can use to apply the audit settings that you choose. It's also likely that certain portions of your domain and OU structure already provide logical groups of users, resources, and activities that justify the time and resources needed to audit them. For information about how to integrate a security audit policy with your domain and OU structure, see [Mapping security audit policy to groups of users, computers, and resources in your organization](#bkmk-2) later in this document. -In addition to your domain model, you should also find out whether your organization creates and maintains a systematic threat model. A good threat model can help you identify threats to key components in your infrastructure, so you can define and apply audit settings that enhance the organization's ability to identify and counter those threats. +In addition to your domain model, you should also find out whether your organization creates and maintains a systematic threat model. A good threat model can help you identify threats to key components in your infrastructure so that you can define and apply audit settings that enhance the organization's ability to identify and counter those threats. > [!IMPORTANT] > Including auditing within your organization's security plan also makes it possible to budget your resources on the areas where auditing can achieve the most positive results. -For additional details about how to complete each of these steps and how to prepare a detailed threat model, download the [IT Infrastructure Threat Modeling Guide](https://go.microsoft.com/fwlink/p/?LinkId=163432). +For additional details about how to complete each of these steps and prepare a detailed threat model, download the [IT Infrastructure threat modeling guide](https://go.microsoft.com/fwlink/p/?LinkId=163432). ### Data and resources -For data and resource auditing, you need to identify the most important types of data and resources (such as patient records, accounting data, or marketing plans) that can benefit from the closer monitoring that Windows auditing can provide. Some of these data resources might already be monitored through auditing features in products such as Microsoft SQL Server and Exchange Server. If so, you may want to consider how Windows auditing features can enhance the existing audit strategy. As with the domain and OU structure discussed previously, security auditing should focus on your most critical resources. You also must consider how much audit data you will be able to manage. +For data and resource auditing, you need to identify the most important types of data and resources (such as patient records, accounting data, or marketing plans) that can benefit from the closer monitoring that Windows auditing can provide. Some of these data resources might already be monitored through auditing features in products such as Microsoft SQL Server and Exchange Server. If so, you may want to consider how Windows auditing features can enhance the existing audit strategy. As with the domain and OU structure discussed previously, security auditing should focus on your most critical resources. You also must consider how much audit data you can manage. -You can record if these resources have high business impact, medium business impact, or low business impact, the cost to the organization if these data resources are accessed by unauthorized users, and the risk that this access can pose to the organization. The type of access by users (such as Read, Modify, or Copy) can also pose different levels of risk to an organization. +You can record if these resources have high business impact, medium business impact, or low business impact, the cost to the organization if these data resources are accessed by unauthorized users, and the risk that this access can pose to the organization. The type of access by users (such as *read*, *modify*, or *copy*) can also pose different levels of risk to an organization. Increasingly, data access and use is governed by regulations, and a breach can result in severe penalties and a loss in credibility for the organization. If regulatory compliance plays a role in how you manage your data, be sure to also document this information. @@ -128,30 +128,30 @@ The following table provides an example of a resource analysis for an organizati ### Users -Many organizations find it useful to classify the types of users they have and base permissions on this classification. This same classification can help you identify which user activities should be the subject of security auditing and the amount of audit data they will generate. +Many organizations find it useful to classify the types of users they have and base permissions on this classification. This classification can help you identify which user activities should be the subject of security auditing and the amount of audit data they will generate. -Organizations can create distinctions based on the type of rights and permissions needed by users to perform their jobs. For example, under the classification Administrators, larger organizations might assign local administrator responsibilities for a single computer, for specific applications such as Exchange Server or SQL Server, or for an entire domain. Under Users, permissions and Group Policy settings can apply to as many as all users in an organization or as few as a subset of the employees in a given department. +Organizations can create distinctions based on the type of rights and permissions that users need to perform their jobs. For example, under the classification *administrators*, larger organizations might assign local administrator responsibilities for a single computer, for specific applications such as Exchange Server or SQL Server, or for an entire domain. Under *users*, permissions and Group Policy settings can apply to as many as all users in an organization or as few as a subset of employees in a given department. Also, if your organization is subject to regulatory requirements, user activities such as accessing medical records or financial data may need to be audited to verify that you are complying with these requirements. -To effectively audit user activity, begin by listing the different types of users in your organization and the types of data they need access to—in addition to the data they should not have access to. +To effectively audit user activity, begin by listing the different types of users in your organization and the types of data they need access to, in addition to the data they should not have access to. -Also, if external users can access any of your organization's data, be sure to identify them, including if they belong to a business partner, customer, or general user, the data they have access to, and the permissions they have to access that data. +Also, if external users can access your organization's data, be sure to identify them, including whether they are a business partner, customer, or general user; the data they have access to; and the permissions they have to access that data. -The following table illustrates an analysis of users on a network. Although our example contains a single column titled "Possible auditing considerations," you may want to create additional columns to differentiate between different types of network activity, such as logon hours and permission use. +The following table illustrates an analysis of users on a network. Although our example contains a single column titled "Possible auditing considerations," you may want to create additional columns to differentiate between different types of network activity, such as log-on hours and permission use. | Groups | Data | Possible auditing considerations | | - | - | - | | Account administrators| User accounts and security groups| Account administrators have full privileges to create new user accounts, reset passwords, and modify security group memberships. We need a mechanism to monitor these changes. | | Members of the Finance OU| Financial records| Users in Finance have Read/Write access to critical financial records, but no ability to change permissions on these resources. These financial records are subject to government regulatory compliance requirements. | -| External partners | Project Z| Employees of partner organizations have Read/Write access to certain project data and servers relating to Project Z, but not to other servers or data on the network.| +| External partners | Project Z| Employees of partner organizations have read/write access to certain project data and servers relating to Project Z, but not to other servers or data on the network.| ### Computers Security and auditing requirements and audit event volume can vary considerably for different types of computers in an organization. These requirements can be based on: -- If the computers are servers, desktop computers, or portable computers. -- The important applications the computers run, such as Exchange Server, SQL Server, or Forefront Identity Manager. +- Whether the computers are servers, desktop computers, or portable computers. +- The important applications that the computers run, such as Exchange Server, SQL Server, or Forefront Identity Manager. > [!NOTE] > For more information about auditing: @@ -166,7 +166,7 @@ Security and auditing requirements and audit event volume can vary considerably - The business value of the data. -For example, a web server that's accessed by external users requires different audit settings than a root certification authority (CA) that's never exposed to the public Internet or even to regular users on the organization's network. +For example, a web server that's accessed by external users requires different audit settings than a root certification authority (CA) that's never exposed to the public internet or even to regular users on the organization's network. The following table illustrates an analysis of computers in an organization. @@ -183,35 +183,35 @@ Many industries and locales have strict and specific requirements for network op For more information, see the [System Center Process Pack for IT GRC](https://technet.microsoft.com/library/dd206732.aspx). -## Mapping the security audit policy to groups of users, computers, and resources in your organization +## Map the security audit policy to groups of users, computers, and resources in your organization -By using Group Policy, you can apply your security audit policy to defined groups of users, computers, and resources. To map a security auditing policy to these defined groups in your organization, you should understand the -following considerations for using Group Policy to apply security audit policy settings: +By using Group Policy, you can apply your security audit policy to defined groups of users, computers, and resources. To map a security auditing policy to these defined groups in your organization, you should understand the following considerations for using Group Policy to apply security audit policy settings: - The policy settings you identify can be applied by using one or more GPOs. To create and edit a GPO, use the Group Policy Management Console (GPMC). By using the GPMC to link a GPO to selected Active Directory sites, domains, and OUs, you apply the policy settings in the GPO to the users and computers in those Active Directory objects. An OU is the lowest-level Active Directory container to which you can assign Group Policy settings. -- For every policy setting that you select, you need to decide whether it should be enforced across the organization, or whether it should apply only to selected users or computers. You can then combine these audit policy settings into GPOs and link them to the appropriate Active Directory containers. +- You need to decide whether every policy setting that you select should be enforced across the organization or apply only to selected users or computers. You can then combine these audit policy settings into GPOs and link them to the appropriate Active Directory containers. - By default, options set in GPOs that are linked to higher levels of Active Directory sites, domains, and OUs are inherited by all OUs at lower levels. However, a GPO that is linked at a lower level can overwrite inherited policies. - For example, you might use a domain GPO to assign an organization-wide group of audit settings, but want a certain OU to get a defined group of additional settings. To accomplish this, you can link a second GPO to that specific lower-level OU. Therefore, a logon audit setting that is applied at the OU level will override a conflicting logon audit setting that is applied at the domain level (unless you have taken special steps to apply Group Policy loopback processing). + For example, you might use a domain GPO to assign an organization-wide group of audit settings but want a certain OU to get a defined group of additional settings. To do this, you can link a second GPO to that specific lower-level OU. Then, a logon audit setting that is applied at the OU level will override a conflicting logon audit setting that is applied at the domain level (unless you have taken special steps to apply Group Policy loopback processing). - Audit policies are computer policies. Therefore, they must be applied through GPOs that are applied to computer OUs, not to user OUs. However, in most cases you can apply audit settings for only specified resources and groups of users by configuring SACLs on the relevant objects. This enables auditing for a security group that contains only the users you specify. - For example, you could configure a SACL for a folder called Payroll Data on Accounting Server 1. This can audit attempts by members of the Payroll Processors OU to delete objects from this folder. The **Object Access\\Audit File System** audit policy setting applies to Accounting Server 1, but because it requires a corresponding resource SACL, only actions by members of the Payroll Processors OU on the Payroll Data folder generates audit events. + For example, you could configure a SACL for a folder called Payroll Data on Accounting Server 1. This can audit attempts by members of the Payroll Processors OU to delete objects from this folder. The **Object Access\\Audit File System** audit policy setting applies to Accounting Server 1 but because it requires a corresponding resource SACL, only actions by members of the Payroll Processors OU on the Payroll Data folder generate audit events. - Advanced security audit policy settings were introduced in Windows Server 2008 R2 or Windows 7 and can be applied to those operating systems and later. These advanced audit polices can only be applied by using Group Policy. - >**Important:**  Whether you apply advanced audit policies by using Group Policy or by using logon scripts, do not use both the basic audit policy settings under **Local Policies\\Audit Policy** and the advanced settings under **Security Settings\\Advanced Audit Policy Configuration**. Using both basic and advanced audit policy settings can cause unexpected results in audit reporting. + >[!IMPORTANT]   + > Whether you apply advanced audit policies by using Group Policy or by using logon scripts, do not use both the basic audit policy settings under **Local Policies\\Audit Policy** and the advanced settings under **Security Settings\\Advanced Audit Policy Configuration**. Using both basic and advanced audit policy settings can cause unexpected results in audit reporting. - If you use **Advanced Audit Policy Configuration** settings or use logon scripts to apply advanced audit policies, be sure to enable the **Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings** policy setting under **Local Policies\\Security Options**. This will prevent conflicts between similar settings by forcing basic security auditing to be ignored. + If you use **Advanced Audit Policy Configuration** settings or logon scripts to apply advanced audit policies, be sure to enable the **Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings** policy setting under **Local Policies\\Security Options**. This will prevent conflicts between similar settings by forcing basic security auditing to be ignored. -The following are examples of how audit policies can be applied to an organization's OU structure: +The following examples show how you can apply audit policies to an organization's OU structure: - Apply data activity settings to an OU that contains file servers. If your organization has servers that contain particularly sensitive data, consider putting them in a separate OU so that you can configure and apply a more precise audit policy to these servers. - Apply user activity audit policies to an OU that contains all computers in the organization. If your organization places users in OUs based on the department they work in, consider configuring and applying more detailed security permissions on critical resources that are accessed by employees who work in more sensitive areas, such as network administrators or the legal department. - Apply network and system activity audit policies to OUs that contain the organization's most critical servers, such as domain controllers, CAs, email servers, or database servers. -## Mapping your security auditing goals to a security audit policy configuration +## Map your security auditing goals to a security audit policy configuration After you identify your security auditing goals, you can begin to map them to a security audit policy configuration. This audit policy configuration must address your most critical security auditing goals, but it also must address your organization's constraints, such as the number of computers that need to be monitored, the number of activities that you want to audit, the number of audit events that your desired audit configuration will generate, and the number of administrators available to analyze and act upon audit data. @@ -220,10 +220,10 @@ To create your audit policy configuration, you need to: 1. Explore all of the audit policy settings that can be used to address your needs. 2. Choose the audit settings that will most effectively address the audit requirements identified in the previous section. 3. Confirm that the settings you choose are compatible with the operating systems running on the computers that you want to monitor. -4. Decide which configuration options (Success, Failure, or both Success and Failure) you want to use for the audit settings. +4. Decide which configuration options (*success*, *failure*, or both *success* and *failure*) you want to use for the audit settings. 5. Deploy the audit settings in a lab or test environment to verify that they meet your desired results in terms of volume, supportability, and comprehensiveness. Then deploy the audit settings in a pilot production environment to ensure that your estimates of how much audit data your audit plan will generate are realistic and that you can manage this data. -### Exploring audit policy options +### Explore audit policy options Security audit policy settings in the supported versions of Windows can be viewed and configured in the following locations: @@ -231,7 +231,7 @@ Security audit policy settings in the supported versions of Windows can be viewe - **Security Settings\\Local Policies\\Security Options**. - **Security Settings\\Advanced Audit Policy Configuration**. For more information, see [Advanced security audit policy settings](advanced-security-audit-policy-settings.md). -### Choosing audit settings to use +### Choose audit settings to use Depending on your goals, different sets of audit settings may be of particular value to you. For example, some settings under **Security Settings\\Advanced Audit Policy Configuration** can be used to monitor the following types of activity: @@ -239,48 +239,52 @@ Depending on your goals, different sets of audit settings may be of particular v - Users - Network ->**Important:**  Settings that are described in the Reference might also provide valuable information about activity audited by another setting. For example, the settings used to monitor user activity and network activity have obvious relevance to protecting your data resources. Likewise, attempts to compromise data resources have huge implications for overall network status, and potentially for how well you are managing the activities of users on the network. - +> [!IMPORTANT] +> Settings that are described in the reference might also provide valuable information about activity audited by another setting. For example, the settings that you use to monitor user activity and network activity have obvious relevance to protecting your data resources. Likewise, attempts to compromise data resources have huge implications for overall network status and potentially for how well you are managing the activities of users on the network. + ### Data and resource activity -For many organizations, compromising the organization's data resources can cause tremendous financial losses, in addition to lost prestige and legal liability. If your organization has critical data resources that need to be -protected against any breach, the following settings can provide extremely valuable monitoring and forensic data: +For many organizations, compromising the organization's data resources can cause tremendous financial losses, in addition to lost prestige and legal liability. If your organization has critical data resources that must be protected against any breach, the following settings can provide extremely valuable monitoring and forensic data: -- Object Access\\[Audit File Share](audit-file-share.md). This policy setting allows you to track what content was accessed, the source (IP address and port) of the request, and the user account that was used for the access. The volume of event data generated by this setting will vary depending on the number of client computers that attempt to access the file share. On a file server or domain controller, volume may be high due to SYSVOL access by client computers for policy processing. If you do not need to record routine access by client computers that have permissions on the file share, you may want to log audit events only for failed attempts to access the file share. -- Object Access\\[Audit File System](audit-file-system.md). This policy setting determines whether the operating system audits user attempts to access file system objects. Audit events are only generated for objects (such as files and folders) that have configured SACLs, and only if the type of access requested (such as Write, Read, or Modify) and the account that is making the request match the settings in the SACL. +- **Object Access\\[Audit File Share](audit-file-share.md)**: This policy setting allows you to track what content was accessed, the source (IP address and port) of the request, and the user account that was used for the access. The volume of event data generated by this setting will vary depending on the number of client computers that attempt to access the file share. On a file server or domain controller, volume may be high due to SYSVOL access by client computers for policy processing. If you do not need to record routine access by client computers that have permissions on the file share, you may want to log audit events only for failed attempts to access the file share. +- **Object Access\\[Audit File System](audit-file-system.md)**: This policy setting determines whether the operating system audits user attempts to access file system objects. Audit events are only generated for objects (such as files and folders) that have configured SACLs, and only if the type of access requested (such as *write*, *read*, or *modify*) and the account that's making the request match the settings in the SACL. If success auditing is enabled, an audit entry is generated each time any account successfully accesses a file system object that has a matching SACL. If failure auditing is enabled, an audit entry is generated each time any user unsuccessfully attempts to access a file system object that has a matching SACL. The amount of audit data generated by the **Audit File System** policy setting can vary considerably, depending on the number of objects that have been configured to be monitored. - >**Note:**  To audit user attempts to access all file system objects on a computer, use the Global Object Access Auditing settings [Registry (Global Object Access Auditing)](registry-global-object-access-auditing.md) or [File System (Global Object Access Auditing)](file-system-global-object-access-auditing.md). + > [!NOTE]   + > To audit user attempts to access all file system objects on a computer, use the Global Object Access Auditing settings [Registry (Global Object Access Auditing)](registry-global-object-access-auditing.md) or [File System (Global Object Access Auditing)](file-system-global-object-access-auditing.md). -- Object Access\\[Audit Handle Manipulation](audit-handle-manipulation.md). This policy setting determines whether the operating system generates audit events when a handle to an object is opened or closed. Only objects with configured SACLs generate these events, and only if the attempted handle operation matches the SACL. +- **Object Access\\[Audit Handle Manipulation](audit-handle-manipulation.md)**: This policy setting determines whether the operating system generates audit events when a handle to an object is opened or closed. Only objects with configured SACLs generate these events and only if the attempted handle operation matches the SACL. - Event volume can be high, depending on how SACLs are configured. When used together with the **Audit File System** or **Audit Registry** policy settings, the **Audit Handle Manipulation** policy setting can provide an administrator with useful "reason for access" audit data that details the precise permissions on which the audit event is based. For example, if a file is configured as a Read-only resource but a user attempts to save changes to the file, the audit event will log not only the event, but also the permissions that were used (or attempted to be used) to save the file changes. + Event volume can be high, depending on how the SACLs are configured. When used together with the **Audit File System** or **Audit Registry** policy setting, the **Audit Handle Manipulation** policy setting can provide an administrator with useful "reason for access" audit data that details the precise permissions on which the audit event is based. For example, if a file is configured as a *read-only* resource but a user attempts to save changes to the file, the audit event will log not only the event but also the permissions that were used (or attempted to be used) to save the file changes. -- **Global Object Access Auditing**. A growing number of organizations are using security auditing to comply with regulatory requirements that govern data security and privacy. But demonstrating that strict controls are being enforced can be extremely difficult. To address this issue, the supported versions of Windows include two **Global Object Access Auditing** policy settings, one for the registry and one for the file system. When you configure these settings, they apply a global system access control SACL on all objects of that class on a system, which cannot be overridden or circumvented. - >**Important:**  The **Global Object Access Auditing** policy settings must be configured and applied in conjunction with the **Audit File System** and **Audit Registry** audit policy settings in the **Object Access** category. +- **Global Object Access Auditing**: A growing number of organizations use security auditing to comply with regulatory requirements that govern data security and privacy. But demonstrating that strict controls are being enforced can be extremely difficult. To address this issue, the supported versions of Windows include two **Global Object Access Auditing** policy settings, one for the registry and one for the file system. When you configure these settings, they apply a global system access control SACL on all objects of that class on a system, which cannot be overridden or circumvented. + > [!IMPORTANT] + > The **Global Object Access Auditing** policy settings must be configured and applied in conjunction with the **Audit File System** and **Audit Registry** audit policy settings in the **Object Access** category. ### User activity -The settings in the previous section relate to activity involving the files, folders, and network shares that are stored on a network, and the settings in this section focus on the users, including employees, partners, and customers, who may try to access those resources. +The settings in the previous section relate to activity involving the files, folders, and network shares that are stored on a network. The settings in this section focus on the users, including employees, partners, and customers, who may try to access those resources. -In the majority of cases, these attempts will be legitimate and a network needs to make vital data readily available to legitimate users. However in other cases, employees, partners, and others may attempt to access resources that they have no legitimate reason to access. Security auditing can be used to track a wide variety of user activities on a particular computer to diagnose and resolve problems for legitimate users and identify and address illegitimate activities. The following are a few important settings that you should evaluate to track user activity on your network: +In the majority of cases, these attempts will be legitimate, and the network needs to make vital data readily available to legitimate users. However in other cases, employees, partners, and others may attempt to access resources that they have no legitimate reason to access. Security auditing can be used to track a wide variety of user activities on a particular computer to diagnose and resolve problems for legitimate users and identify and address illegitimate activities. The following are a few important settings that you should evaluate to track user activity on your network: -- Account Logon\\[Audit Credential Validation](audit-credential-validation.md). This is an extremely important policy setting because it enables you to track every successful and unsuccessful attempt to present credentials for a user logon. In particular, a pattern of unsuccessful attempts may indicate that a user or application is using credentials that are no longer valid, or attempting to use a variety of credentials in succession in hope that one of these attempts will eventually be successful. These events occur on the computer that is authoritative for the credentials. For domain accounts, the domain controller is authoritative. For local accounts, the local computer is authoritative. -- Detailed Tracking\\[Audit Process Creation](audit-process-creation.md) and Detailed Tracking\\[Audit Process Termination](audit-process-termination.md). These policy settings can enable you to monitor the applications that a user opens and closes on a computer. -- DS Access\\[Audit Directory Service Access](audit-directory-service-access.md) and DS Access\\[Audit Directory Service Changes](audit-directory-service-changes.md). These policy settings provide a detailed audit trail of attempts to access create, modify, delete, move, or undelete objects in Active Directory Domain Services (AD DS). Only domain administrators have permissions to modify AD DS objects, so it is extremely important to identify malicious attempts to modify these objects. In addition, although domain administrators should be among an organization's most trusted employees, the use of **Audit Directory Service Access** and **Audit Directory Service Changes** settings allow you to monitor and verify that only approved changes are made to AD DS. These audit events are logged only on domain controllers. -- Logon/Logoff\\[Audit Account Lockout](audit-account-lockout.md). Another common security scenario occurs when a user attempts to log on with an account that has been locked out. It is important to identify these events and to determine whether the attempt to use an account that has been locked out is malicious. -- Logon/Logoff\\[Audit Logoff](audit-logoff.md) and Logon/Logoff\\[Audit Logon](audit-logon.md). Logon and logoff events are essential to tracking user activity and detecting potential attacks. Logon events are related to the creation of logon sessions, and they occur on the computer that was accessed. For an interactive logon, events are generated on the computer that was logged on to. For network logon, such as accessing a shared resource, events are generated on the computer that hosts the resource that was accessed. Logoff events are generated when logon sessions are terminated. +- **Account Logon\\[Audit Credential Validation](audit-credential-validation.md)**: This is an extremely important policy setting because it enables you to track every successful and unsuccessful attempt to present credentials for a user logon. In particular, a pattern of unsuccessful attempts may indicate that a user or application is using credentials that are no longer valid or is attempting to use a variety of credentials in succession in hope that one of these attempts will eventually succeed. These events occur on the computer that's authoritative for the credentials. For domain accounts, the domain controller is authoritative. For local accounts, the local computer is authoritative. +- **Detailed Tracking\\[Audit Process Creation](audit-process-creation.md) and Detailed Tracking\\[Audit Process Termination](audit-process-termination.md)**: These policy settings enable you to monitor the applications that a user opens and closes on a computer. +- **DS Access\\[Audit Directory Service Access](audit-directory-service-access.md)** and **DS Access\\[Audit Directory Service Changes](audit-directory-service-changes.md)**: These policy settings provide a detailed audit trail of attempts to access, create, modify, delete, move, or undelete objects in Active Directory Domain Services (AD DS). Only domain administrators have permissions to modify AD DS objects, so it's extremely important to identify malicious attempts to modify these objects. In addition, although domain administrators should be among an organization's most trusted employees, the use of **Audit Directory Service Access** and **Audit Directory Service Changes** settings allow you to monitor and verify that only approved changes are made to AD DS. These audit events are logged only on domain controllers. +- **Logon/Logoff\\[Audit Account Lockout](audit-account-lockout.md)**: Another common security scenario occurs when a user attempts to log on with an account that's been locked out. It's important to identify these events and to determine whether the attempt to use an account that has been locked out is malicious. +- **Logon/Logoff\\[Audit Logoff](audit-logoff.md)** and **Logon/Logoff\\[Audit Logon](audit-logon.md)**: Logon and logoff events are essential to tracking user activity and detecting potential attacks. Logon events are related to the creation of logon sessions, and they occur on the computer that was accessed. For an interactive logon, events are generated on the computer that was logged on to. For network logon, such as accessing a shared resource, events are generated on the computer that hosts the resource that was accessed. Logoff events are generated when logon sessions are terminated. - >**Note:**  There is no failure event for logoff activity because failed logoffs (such as when a system abruptly shuts down) do not generate an audit record. Logoff events are not 100 percent reliable. For example, the computer can be turned off without a proper logoff and shutdown, and a logoff event is not generated. + >[!NOTE] + > There's no failure event for logoff activity because failed logoffs (such as when a system abruptly shuts down) do not generate an audit record. Logoff events are not 100-percent reliable. For example, the computer can be turned off without a proper logoff and shutdown, so a logoff event isn't generated. -- Logon/Logoff\\[Audit Special Logon](audit-special-logon.md). A special logon has administrator-equivalent rights and can be used to elevate a process to a higher level. It is recommended to track these types of logons. For more information about this feature, see [article 947223](https://go.microsoft.com/fwlink/p/?linkid=120183) in the Microsoft Knowledge Base. +- **Logon/Logoff\\[Audit Special Logon](audit-special-logon.md)**: A special logon has administrator-equivalent rights and can be used to elevate a process to a higher level. It's recommended to track these types of logons. - Object Access\\[Audit Certification Services](audit-certification-services.md). This policy setting allows you to track and monitor a wide variety of activities on a computer that hosts Active Directory Certificate Services (AD CS) role services to ensure that only authorized users are performing or attempting to perform these tasks, and that only authorized or desired tasks are being performed. - Object Access\\[Audit File System](audit-file-system.md) and Object Access\\[Audit File Share](audit-file-share.md). These policy settings are described in the previous section. - Object Access\\[Audit Handle Manipulation](audit-handle-manipulation.md). This policy setting and its role in providing "reason for access" audit data is described in the previous section. - Object Access\\[Audit Registry](audit-registry.md). Monitoring for changes to the registry is one of the most critical means that an administrator has to ensure malicious users do not make changes to essential computer settings. Audit events are only generated for objects that have configured SACLs, and only if the type of access that is requested (such as Write, Read, or Modify) and the account making the request match the settings in the SACL. - >**Important:**  On critical systems where all attempts to change registry settings need to be tracked, you can combine the **Audit Registry** policy setting with the **Global Object Access Auditing** policy settings to ensure that all attempts to modify registry settings on a computer are tracked. + > [!IMPORTANT] + > On critical systems where all attempts to change registry settings need to be tracked, you can combine the **Audit Registry** policy setting with the **Global Object Access Auditing** policy settings to ensure that all attempts to modify registry settings on a computer are tracked. - Object Access\\[Audit SAM](audit-sam.md). The Security Accounts Manager (SAM) is a database that is present on computers running Windows that stores user accounts and security descriptors for users on the local computer. Changes to user and group objects are tracked by the **Account Management** audit category. However, user accounts with the proper user rights could potentially alter the files where the account and password information is stored in the system, bypassing any **Account Management** events. - Privilege Use\\[Audit Sensitive Privilege Use](audit-sensitive-privilege-use.md). **Privilege Use** policy settings and audit events allow you to track the use of certain rights on one or more systems. If you configure this policy setting, an audit event is generated when sensitive rights requests are made. @@ -328,7 +332,7 @@ For example, on a file server that is accessed frequently by legitimate users, y On the other hand, if the file share has extremely sensitive and valuable information, such as trade secrets, you may want to log every access attempt, whether successful or unsuccessful, so that you have an audit trail of every user who accessed the resource. -## Planning for security audit monitoring and management +## Plan for security audit monitoring and management Networks can contain hundreds of servers running critical services or storing critical data, all of which need to be monitored. The number of client computers on the network can easily range into the tens or even hundreds of thousands. This may not be an issue if the ratio of servers or client computers per administrator is low. Even if an administrator who is responsible for auditing security and performance issues has relatively few computers to monitor, you need to decide how an administrator will obtain event data to review. Following are some options for obtaining the event data. @@ -352,7 +356,7 @@ Configuration\\Administrative Templates\\Windows Components\\Event Log Service\\ In addition, a growing number of organizations are being required to store archived log files for a number of years. You should consult with regulatory compliance officers in your organization to determine whether such guidelines apply to your organization. For more information, see the [IT Compliance Management Guide](https://go.microsoft.com/fwlink/p/?LinkId=163435). -## Deploying the security audit policy +## Deploy the security audit policy Before deploying the audit policy in a production environment, it is critical that you determine the effects of the policy settings that you have configured. The first step in assessing your audit policy deployment is to create a test environment in a lab and use it to simulate the various use scenarios that you have identified to confirm that the audit settings you have selected are configured correctly and generate the type of results you intend. From 3e8f6bc64d431691943f19622871b203322ad2ba Mon Sep 17 00:00:00 2001 From: jborsecnik Date: Fri, 24 Jan 2020 11:06:57 -0800 Subject: [PATCH 042/358] first edit pass --- ...loying-advanced-security-audit-policies.md | 123 +++++++++--------- 1 file changed, 62 insertions(+), 61 deletions(-) diff --git a/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md b/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md index 7fe6bec96f..3107cc966d 100644 --- a/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md +++ b/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md @@ -1,6 +1,6 @@ --- title: Plan and deploy advanced security audit policies (Windows 10) -description: Learn which options to consider and tasks to complete to deploy an effective security audit policy in a network that includes advanced security audit policies. +description: Learn to deploy an effective security audit policy in a network that includes advanced security audit policies. ms.assetid: 7428e1db-aba8-407b-a39e-509671e5a442 ms.reviewer: ms.author: dansimp @@ -22,14 +22,13 @@ ms.date: 04/19/2017 **Applies to** - Windows 10 -This topic for the IT professional explains the options that security policy planners must consider and the tasks they must complete to deploy an effective security audit policy in a network that includes advanced security audit -policies. +This topic for the IT professional explains the options that security policy Class Schedules must consider and the tasks they must complete to deploy an effective security audit policy in a network that includes advanced security audit policies. -Organizations invest a large portion of their information technology budgets on security applications and services, such as antimalware software, firewalls, and encryption. But no matter how much security hardware or software you deploy, how tightly you control the rights of users, or how carefully you configure security permissions on your data, you should not consider the job complete unless you have a well-defined, timely auditing strategy to track the effectiveness of your defenses and identify attempts to circumvent them. +Organizations invest a lot in security applications and services, such as antimalware software, firewalls, and encryption. But no matter how much security hardware or software you deploy, how tightly you control the rights of users, or how carefully you configure security permissions on your data, the job isn't complete unless you have a well-defined, timely auditing strategy to track the effectiveness of your defenses and identify attempts to circumvent them. To be well defined and timely, an auditing strategy must provide useful tracking data for an organization's most important resources, critical behaviors, and potential risks. In a growing number of organizations, it must also provide absolute proof that IT operations comply with corporate and regulatory requirements. -No organization has unlimited resources to monitor every resource and activity on a network. If you don't plan well, you will likely have gaps in your auditing strategy. However, if you try to audit every resource and activity, you may find yourself with too much monitoring data, including thousands of benign audit entries that an analyst needs to sift through to identify the narrow set of entries that warrant closer examination. This could cause delays or even prevent auditors from identifying suspicious activity. So, too much monitoring can leave an organization as vulnerable as not enough. +No organization has unlimited resources to monitor every resource and activity on a network. If you don't plan well, you will likely have gaps in your auditing strategy. However, if you try to audit every resource and activity, you may find yourself with too much monitoring data, including thousands of benign audit entries that an analyst needs to sift through to identify the narrow set of entries that warrant closer examination. This volume could cause delays or even prevent auditors from identifying suspicious activity. So, too much monitoring can leave an organization as vulnerable as not enough. Here are some features that can help you focus your effort: @@ -59,13 +58,13 @@ This document guides you through the steps to plan a security auditing policy th The audit policy also must identify processes for managing audit data after it has been logged, including: - Collecting, evaluating, and reviewing audit data -- Storing and (if required) disposing of audit data +- Storing and (if necessay) disposing of audit data By carefully planning, designing, testing, and deploying a solution based on your organization's business requirements, you can provide the standardized functionality, security, and management control that your organization needs. ## Understand the security audit policy design process -Designing and deploying a Windows security audit policy involves the following tasks, which are described in in this document: +Designing and deploying a Windows security audit policy involves the following tasks, which are described in this document: - [Identify your Windows security audit policy deployment goals](#bkmk-1) @@ -101,7 +100,7 @@ To create your Windows security audit plan, begin by identifying: ### Network environment -An organization's domain and organziational unit (OU) structure provide a fundamental starting point for thinking about how to apply a security audit policy because it likely provides a foundation of Group Policy Objects (GPOs) and logical grouping of resources and activities that you can use to apply the audit settings that you choose. It's also likely that certain portions of your domain and OU structure already provide logical groups of users, resources, and activities that justify the time and resources needed to audit them. For information about how to integrate a security audit policy with your domain and OU structure, see [Mapping security audit policy to groups of users, computers, and resources in your organization](#bkmk-2) later in this document. +An organization's domain and organizational unit (OU) structure provide a fundamental starting point for thinking about how to apply a security audit policy because it likely provides a foundation of Group Policy Objects (GPOs) and logical grouping of resources and activities that you can use to apply the audit settings that you choose. It's also likely that certain portions of your domain and OU structure already provide logical groups of users, resources, and activities that justify the time and resources needed to audit them. For information about how to integrate a security audit policy with your domain and OU structure, see [Mapping security audit policy to groups of users, computers, and resources in your organization](#bkmk-2) later in this document. In addition to your domain model, you should also find out whether your organization creates and maintains a systematic threat model. A good threat model can help you identify threats to key components in your infrastructure so that you can define and apply audit settings that enhance the organization's ability to identify and counter those threats. @@ -188,7 +187,7 @@ For more information, see the [System Center Process Pack for IT GRC](https://te By using Group Policy, you can apply your security audit policy to defined groups of users, computers, and resources. To map a security auditing policy to these defined groups in your organization, you should understand the following considerations for using Group Policy to apply security audit policy settings: - The policy settings you identify can be applied by using one or more GPOs. To create and edit a GPO, use the Group Policy Management Console (GPMC). By using the GPMC to link a GPO to selected Active Directory sites, domains, and OUs, you apply the policy settings in the GPO to the users and computers in those Active Directory objects. An OU is the lowest-level Active Directory container to which you can assign Group Policy settings. -- You need to decide whether every policy setting that you select should be enforced across the organization or apply only to selected users or computers. You can then combine these audit policy settings into GPOs and link them to the appropriate Active Directory containers. +- Decide whether every policy setting that you select should be enforced across the organization or apply only to selected users or computers. You can then combine these audit policy settings into GPOs and link them to the appropriate Active Directory containers. - By default, options set in GPOs that are linked to higher levels of Active Directory sites, domains, and OUs are inherited by all OUs at lower levels. However, a GPO that is linked at a lower level can overwrite inherited policies. For example, you might use a domain GPO to assign an organization-wide group of audit settings but want a certain OU to get a defined group of additional settings. To do this, you can link a second GPO to that specific lower-level OU. Then, a logon audit setting that is applied at the OU level will override a conflicting logon audit setting that is applied at the domain level (unless you have taken special steps to apply Group Policy loopback processing). @@ -197,17 +196,17 @@ By using Group Policy, you can apply your security audit policy to defined group For example, you could configure a SACL for a folder called Payroll Data on Accounting Server 1. This can audit attempts by members of the Payroll Processors OU to delete objects from this folder. The **Object Access\\Audit File System** audit policy setting applies to Accounting Server 1 but because it requires a corresponding resource SACL, only actions by members of the Payroll Processors OU on the Payroll Data folder generate audit events. -- Advanced security audit policy settings were introduced in Windows Server 2008 R2 or Windows 7 and can be applied to those operating systems and later. These advanced audit polices can only be applied by using Group Policy. +- Advanced security audit policy settings were introduced in Windows Server 2008 R2 or Windows 7 and can be applied to those operating systems and later. These advanced audit policies can only be applied by using Group Policy. >[!IMPORTANT]   > Whether you apply advanced audit policies by using Group Policy or by using logon scripts, do not use both the basic audit policy settings under **Local Policies\\Audit Policy** and the advanced settings under **Security Settings\\Advanced Audit Policy Configuration**. Using both basic and advanced audit policy settings can cause unexpected results in audit reporting. - If you use **Advanced Audit Policy Configuration** settings or logon scripts to apply advanced audit policies, be sure to enable the **Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings** policy setting under **Local Policies\\Security Options**. This will prevent conflicts between similar settings by forcing basic security auditing to be ignored. + If you use **Advanced Audit Policy Configuration** settings or logon scripts to apply advanced audit policies, be sure to enable the **Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings** policy setting under **Local Policies\\Security Options**. This configuration will prevent conflicts between similar settings by forcing basic security auditing to be ignored. The following examples show how you can apply audit policies to an organization's OU structure: -- Apply data activity settings to an OU that contains file servers. If your organization has servers that contain particularly sensitive data, consider putting them in a separate OU so that you can configure and apply a more precise audit policy to these servers. +- Apply data activity settings to an OU that contains file servers. If your organization has servers that contain sensitive data, consider putting them in a separate OU so that you can configure and apply a more precise audit policy to these servers. - Apply user activity audit policies to an OU that contains all computers in the organization. If your organization places users in OUs based on the department they work in, consider configuring and applying more detailed security permissions on critical resources that are accessed by employees who work in more sensitive areas, such as network administrators or the legal department. - Apply network and system activity audit policies to OUs that contain the organization's most critical servers, such as domain controllers, CAs, email servers, or database servers. @@ -244,7 +243,7 @@ Depending on your goals, different sets of audit settings may be of particular v ### Data and resource activity -For many organizations, compromising the organization's data resources can cause tremendous financial losses, in addition to lost prestige and legal liability. If your organization has critical data resources that must be protected against any breach, the following settings can provide extremely valuable monitoring and forensic data: +For many organizations, compromising the organization's data resources can cause tremendous financial losses, in addition to lost prestige and legal liability. If your organization has critical data resources that must be protected against any breach, the following settings can provide valuable monitoring and forensic data: - **Object Access\\[Audit File Share](audit-file-share.md)**: This policy setting allows you to track what content was accessed, the source (IP address and port) of the request, and the user account that was used for the access. The volume of event data generated by this setting will vary depending on the number of client computers that attempt to access the file share. On a file server or domain controller, volume may be high due to SYSVOL access by client computers for policy processing. If you do not need to record routine access by client computers that have permissions on the file share, you may want to log audit events only for failed attempts to access the file share. - **Object Access\\[Audit File System](audit-file-system.md)**: This policy setting determines whether the operating system audits user attempts to access file system objects. Audit events are only generated for objects (such as files and folders) that have configured SACLs, and only if the type of access requested (such as *write*, *read*, or *modify*) and the account that's making the request match the settings in the SACL. @@ -258,7 +257,7 @@ For many organizations, compromising the organization's data resources can cause Event volume can be high, depending on how the SACLs are configured. When used together with the **Audit File System** or **Audit Registry** policy setting, the **Audit Handle Manipulation** policy setting can provide an administrator with useful "reason for access" audit data that details the precise permissions on which the audit event is based. For example, if a file is configured as a *read-only* resource but a user attempts to save changes to the file, the audit event will log not only the event but also the permissions that were used (or attempted to be used) to save the file changes. -- **Global Object Access Auditing**: A growing number of organizations use security auditing to comply with regulatory requirements that govern data security and privacy. But demonstrating that strict controls are being enforced can be extremely difficult. To address this issue, the supported versions of Windows include two **Global Object Access Auditing** policy settings, one for the registry and one for the file system. When you configure these settings, they apply a global system access control SACL on all objects of that class on a system, which cannot be overridden or circumvented. +- **Global Object Access Auditing**: A growing number of organizations use security auditing to comply with regulatory requirements that govern data security and privacy. But demonstrating that strict controls are being enforced can be difficult. To address this issue, the supported versions of Windows include two **Global Object Access Auditing** policy settings, one for the registry and one for the file system. When you configure these settings, they apply a global system access control SACL on all objects of that class on a system, which cannot be overridden or circumvented. > [!IMPORTANT] > The **Global Object Access Auditing** policy settings must be configured and applied in conjunction with the **Audit File System** and **Audit Registry** audit policy settings in the **Object Access** category. @@ -268,52 +267,53 @@ The settings in the previous section relate to activity involving the files, fol In the majority of cases, these attempts will be legitimate, and the network needs to make vital data readily available to legitimate users. However in other cases, employees, partners, and others may attempt to access resources that they have no legitimate reason to access. Security auditing can be used to track a wide variety of user activities on a particular computer to diagnose and resolve problems for legitimate users and identify and address illegitimate activities. The following are a few important settings that you should evaluate to track user activity on your network: -- **Account Logon\\[Audit Credential Validation](audit-credential-validation.md)**: This is an extremely important policy setting because it enables you to track every successful and unsuccessful attempt to present credentials for a user logon. In particular, a pattern of unsuccessful attempts may indicate that a user or application is using credentials that are no longer valid or is attempting to use a variety of credentials in succession in hope that one of these attempts will eventually succeed. These events occur on the computer that's authoritative for the credentials. For domain accounts, the domain controller is authoritative. For local accounts, the local computer is authoritative. -- **Detailed Tracking\\[Audit Process Creation](audit-process-creation.md) and Detailed Tracking\\[Audit Process Termination](audit-process-termination.md)**: These policy settings enable you to monitor the applications that a user opens and closes on a computer. -- **DS Access\\[Audit Directory Service Access](audit-directory-service-access.md)** and **DS Access\\[Audit Directory Service Changes](audit-directory-service-changes.md)**: These policy settings provide a detailed audit trail of attempts to access, create, modify, delete, move, or undelete objects in Active Directory Domain Services (AD DS). Only domain administrators have permissions to modify AD DS objects, so it's extremely important to identify malicious attempts to modify these objects. In addition, although domain administrators should be among an organization's most trusted employees, the use of **Audit Directory Service Access** and **Audit Directory Service Changes** settings allow you to monitor and verify that only approved changes are made to AD DS. These audit events are logged only on domain controllers. +- **Account Logon\\[Audit Credential Validation](audit-credential-validation.md)**: This is an important policy setting because it enables you to track every successful and unsuccessful attempt to present credentials for a user logon. In particular, a pattern of unsuccessful attempts may indicate that a user or application is using credentials that are no longer valid or is attempting to use a variety of credentials in succession in hope that one of these attempts will eventually succeed. These events occur on the computer that's authoritative for the credentials. For domain accounts, the domain controller is authoritative. For local accounts, the local computer is authoritative. +- **Detailed Tracking\\[Audit Process Creation](audit-process-creation.md) and Detailed Tracking\\[Audit Process Termination](audit-process-termination.md)**: These policy settings enable you to monitor the applications that a user opens and close on a computer. +- **DS Access\\[Audit Directory Service Access](audit-directory-service-access.md)** and **DS Access\\[Audit Directory Service Changes](audit-directory-service-changes.md)**: These policy settings provide a detailed audit trail of attempts to access, create, modify, delete, move, or undelete objects in Active Directory Domain Services (AD DS). Only domain administrators have permissions to modify AD DS objects, so it's important to identify malicious attempts to modify these objects. In addition, although domain administrators should be among an organization's most trusted employees, the use of **Audit Directory Service Access** and **Audit Directory Service Changes** settings allow you to monitor and verify that only approved changes are made to AD DS. These audit events are logged only on domain controllers. - **Logon/Logoff\\[Audit Account Lockout](audit-account-lockout.md)**: Another common security scenario occurs when a user attempts to log on with an account that's been locked out. It's important to identify these events and to determine whether the attempt to use an account that has been locked out is malicious. - **Logon/Logoff\\[Audit Logoff](audit-logoff.md)** and **Logon/Logoff\\[Audit Logon](audit-logon.md)**: Logon and logoff events are essential to tracking user activity and detecting potential attacks. Logon events are related to the creation of logon sessions, and they occur on the computer that was accessed. For an interactive logon, events are generated on the computer that was logged on to. For network logon, such as accessing a shared resource, events are generated on the computer that hosts the resource that was accessed. Logoff events are generated when logon sessions are terminated. >[!NOTE] - > There's no failure event for logoff activity because failed logoffs (such as when a system abruptly shuts down) do not generate an audit record. Logoff events are not 100-percent reliable. For example, the computer can be turned off without a proper logoff and shutdown, so a logoff event isn't generated. + > There's no failure event for logoff activity because failed logoffs (such as when a system abruptly shuts down) don't generate an audit record. Logoff events are not 100-percent reliable. For example, the computer can be turned off without a proper logoff and shutdown, so a logoff event isn't generated. - **Logon/Logoff\\[Audit Special Logon](audit-special-logon.md)**: A special logon has administrator-equivalent rights and can be used to elevate a process to a higher level. It's recommended to track these types of logons. -- Object Access\\[Audit Certification Services](audit-certification-services.md). This policy setting allows you to track and monitor a wide variety of activities on a computer that hosts Active Directory Certificate Services (AD CS) role services to ensure that only authorized users are performing or attempting to perform these tasks, and that only authorized or desired tasks are being performed. -- Object Access\\[Audit File System](audit-file-system.md) and Object Access\\[Audit File Share](audit-file-share.md). These policy settings are described in the previous section. -- Object Access\\[Audit Handle Manipulation](audit-handle-manipulation.md). This policy setting and its role in providing "reason for access" audit data is described in the previous section. -- Object Access\\[Audit Registry](audit-registry.md). Monitoring for changes to the registry is one of the most critical means that an administrator has to ensure malicious users do not make changes to essential computer settings. Audit events are only generated for objects that have configured SACLs, and only if the type of access that is requested (such as Write, Read, or Modify) and the account making the request match the settings in the SACL. +- **Object Access\\[Audit Certification Services](audit-certification-services.md)**: This policy setting allows you to monitor a wide variety of activities on a computer that hosts Active Directory Certificate Services (AD CS) role services to ensure that only authorized users do these tasks and only authorized or desired tasks are done. +- **Object Access\\[Audit File System](audit-file-system.md) and Object Access\\[Audit File Share](audit-file-share.md)**: These policy settings are described in the previous section. +- **Object Access\\[Audit Handle Manipulation](audit-handle-manipulation.md)**: This policy setting and its role in providing "reason for access" audit data is described in the previous section. +- **Object Access\\[Audit Registry](audit-registry.md)**: Monitoring for changes to the registry is one of the most critical means that an administrator has to ensure malicious users don't make changes to essential computer settings. Audit events are only generated for objects that have configured SACLs and only if the type of access that is requested (such as *write*, *read*, or *modify*) and the account making the request match the settings in the SACL. > [!IMPORTANT] - > On critical systems where all attempts to change registry settings need to be tracked, you can combine the **Audit Registry** policy setting with the **Global Object Access Auditing** policy settings to ensure that all attempts to modify registry settings on a computer are tracked. + > On critical systems where all attempts to change registry settings should be tracked, you can combine the **Audit Registry** policy setting with the **Global Object Access Auditing** policy settings to ensure that all attempts to modify registry settings on a computer are tracked. -- Object Access\\[Audit SAM](audit-sam.md). The Security Accounts Manager (SAM) is a database that is present on computers running Windows that stores user accounts and security descriptors for users on the local computer. Changes to user and group objects are tracked by the **Account Management** audit category. However, user accounts with the proper user rights could potentially alter the files where the account and password information is stored in the system, bypassing any **Account Management** events. -- Privilege Use\\[Audit Sensitive Privilege Use](audit-sensitive-privilege-use.md). **Privilege Use** policy settings and audit events allow you to track the use of certain rights on one or more systems. If you configure this policy setting, an audit event is generated when sensitive rights requests are made. +- **Object Access\\[Audit SAM](audit-sam.md)**: The Security Accounts Manager (SAM) is a database on computers running Windows that stores user accounts and security descriptors for users on the local computer. Changes to user and group objects are tracked by the **Account Management** audit category. However, user accounts with the proper user rights could potentially alter the files where the account and password information is stored in the system, bypassing any **Account Management** events. +- **Privilege Use\\[Audit Sensitive Privilege Use](audit-sensitive-privilege-use.md)**: These policy settings and audit events enable you to track the use of certain rights on one or more systems. If you configure this policy setting, an audit event is generated when sensitive rights requests are made. ### Network activity -The following network activity policy settings allow you to monitor security-related issues that are not necessarily covered in the data or user activity categories, but that can be equally important for network status and protection. +The following network activity policy settings enable you to monitor security-related issues that are not necessarily covered in the data or user activity categories but that can be equally important for network status and protection. -- **Account Management**. The policy settings in this category can be used to track attempts to create, delete, or modify user or computer accounts, security groups, or distribution groups. Monitoring these activities complements the monitoring strategies you select in the user activity and data activity sections. -- Account Logon\\[Audit Kerberos Authentication Service](audit-kerberos-authentication-service.md) and Account Logon\\[Audit Kerberos Service Ticket Operations](audit-kerberos-service-ticket-operations.md). Audit policy settings in the **Account Logon** category monitor activities that relate to the use of domain account credentials. These policy settings complement the policy settings in the **Logon/Logoff** category. The **Audit Kerberos Authentication Service** policy setting allows you to monitor the status of and potential threats to the Kerberos service. The Audit **Kerberos Service Ticket Operations** policy setting allows you to monitor the use of Kerberos service tickets. +- **Account Management**: Use the policy settings in this category to track attempts to create, delete, or modify user or computer accounts, security groups, or distribution groups. Monitoring these activities complements the monitoring strategies you select in the user activity and data activity sections. +- **Account Logon\\[Audit Kerberos Authentication Service](audit-kerberos-authentication-service.md) and Account Logon\\[Audit Kerberos Service Ticket Operations](audit-kerberos-service-ticket-operations.md)**: Audit policy settings in the **Account Logon** category monitor activities that relate to the use of domain account credentials. These policy settings complement the policy settings in the **Logon/Logoff** category. The **Audit Kerberos Authentication Service** policy setting enables you to monitor the status of and potential threats to the Kerberos service. The Audit **Kerberos Service Ticket Operations** policy setting allows you to monitor the use of Kerberos service tickets. - >**Note:**  **Account Logon** policy settings apply only to specific domain account activities, regardless of the computer that is accessed, whereas **Logon/Logoff** policy settings apply to the computer that hosts the resources being accessed. + >[!NOTE] + >**Account Logon** policy settings apply only to specific domain account activities, regardless of the computer that is accessed. **Logon/Logoff** policy settings apply to the computer that hosts the resources being accessed. -- Account Logon\\[Audit Other Account Logon Events](audit-other-account-logon-events.md). This policy setting can be used to track a number of different network activities, including attempts to create Remote Desktop connections, wired network connections, and wireless connections. -- **DS Access**. Policy settings in this category allow you to monitor the AD DS role services, which provide account data, validate logons, maintain network access permissions, and provide other services that are critical to the secure and proper functioning of a network. Therefore, auditing the rights to access and modify the configuration of a domain controller can help an organization maintain a secure and reliable network. In addition, one of the key tasks performed by AD DS is the replication of data between domain controllers. -- Logon/Logoff\\[Audit IPsec Extended Mode](audit-ipsec-extended-mode.md), Logon/Logoff\\[Audit IPsec Main Mode](audit-ipsec-main-mode.md), and Logon/Logoff\\[Audit IPsec Quick Mode](audit-ipsec-quick-mode.md). Many networks support large numbers of external users, including remote employees and partners. Because these users are outside the organization's network boundaries, IPsec is often used to help protect communications over the Internet by enabling network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and protection against replay attacks. You can use these settings to ensure that IPsec services are functioning properly. -- Logon/Logoff\\[Audit Network Policy Server](audit-network-policy-server.md). Organizations that use RADIUS (IAS) and Network Access Protection (NAP) to set and maintain security requirements for external users can use this policy setting to monitor the effectiveness of these policies and to determine whether anyone is attempting to circumvent these protections. -- **Policy Change**. These policy settings and events allow you to track changes to important security policies on a local computer or network. Because policies are typically established by administrators to help secure network resources, any changes or attempts to change these policies can be an important aspect of security management for a network. -- Policy Change\\[Audit Audit Policy Change](audit-audit-policy-change.md). This policy setting allows you to monitor changes to the audit policy. If malicious users obtain domain administrator credentials, they can temporarily disable essential security audit policy settings so that their other activities on the network cannot be detected. -- Policy Change\\[Audit Filtering Platform Policy Change](audit-filtering-platform-policy-change.md). This policy setting can be used to monitor a large variety of changes to an organization's IPsec policies. -- Policy Change\\[Audit MPSSVC Rule-Level Policy Change](audit-mpssvc-rule-level-policy-change.md). This policy setting determines if the operating system generates audit events when changes are made to policy rules for the Microsoft Protection Service (MPSSVC.exe), which is used by Windows Firewall. Changes to firewall rules are important for understanding the security state of the computer and how well it is protected against network attacks. +- **Account Logon\\[Audit Other Account Logon Events](audit-other-account-logon-events.md)**: This policy setting can be used to track a number of different network activities, including attempts to create Remote Desktop connections, wired network connections, and wireless connections. +- **DS Access**: Policy settings in this category enable you to monitor the AD DS role services, which provide account data, validate logons, maintain network access permissions, and provide other services that are critical to the secure and proper functioning of a network. Therefore, auditing the rights to access and modify the configuration of a domain controller can help an organization maintain a secure and reliable network. One of the key tasks performed by AD DS is the replication of data between domain controllers. +- **Logon/Logoff\\[Audit IPsec Extended Mode](audit-ipsec-extended-mode.md)**, **Logon/Logoff\\[Audit IPsec Main Mode](audit-ipsec-main-mode.md)**, and **Logon/Logoff\\[Audit IPsec Quick Mode](audit-ipsec-quick-mode.md)**: Many networks support large numbers of external users, including remote employees and partners. Because these users are outside the organization's network boundaries, IPsec is often used to help protect communications over the internet by enabling network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and protection against replay attacks. You can use these settings to ensure that IPsec services are functioning properly. +- **Logon/Logoff\\[Audit Network Policy Server](audit-network-policy-server.md)** Organizations that use RADIUS (IAS) and Network Access Protection (NAP) to set and maintain security requirements for external users can use this policy setting to monitor the effectiveness of these policies and to determine whether anyone is trying to circumvent these protections. +- **Policy Change**: These policy settings and events enable you to track changes to important security policies on a local computer or network. Because policies are typically established by administrators to help secure network resources, any changes or attempts to change these policies can be an important aspect of security management for a network. +- **Policy Change\\[Audit Audit Policy Change](audit-audit-policy-change.md)**: This policy setting allows you to monitor changes to the audit policy. If malicious users obtain domain administrator credentials, they can temporarily disable essential security audit policy settings so that their other activities on the network can't be detected. +- **Policy Change\\[Audit Filtering Platform Policy Change](audit-filtering-platform-policy-change.md)**:.\ This policy setting can be used to monitor a variety of changes to an organization's IPsec policies. +- **Policy Change\\[Audit MPSSVC Rule-Level Policy Change](audit-mpssvc-rule-level-policy-change.md)**: This policy setting determines if the operating system generates audit events when changes are made to policy rules for the Microsoft Protection Service (MPSSVC.exe), which is used by Windows Firewall. Changes to firewall rules are important for understanding the security state of the computer and how well it is protected against network attacks. ### Confirm operating system version compatibility -Not all versions of Windows support advanced audit policy settings or the use of Group Policy to apply and manage these settings. For more info, see [Which editions of Windows support advanced audit policy configuration](which-editions-of-windows-support-advanced-audit-policy-configuration.md). +Not all versions of Windows support advanced audit policy settings or the use of Group Policy to apply and manage these settings. For more information, see [Which editions of Windows support advanced audit policy configuration](which-editions-of-windows-support-advanced-audit-policy-configuration.md). -The audit policy settings under **Local Policies\\Audit Policy** overlap with audit policy settings under **Security Settings\\Advanced Audit Policy Configuration**. However, the advanced audit policy categories and subcategories make it possible to focus your auditing efforts on the most critical activities while reducing the amount of audit data that is less important to your organization. +The audit policy settings under **Local Policies\\Audit Policy** overlap with audit policy settings under **Security Settings\\Advanced Audit Policy Configuration**. However, the advanced audit policy categories and subcategories make it possible to focus your auditing efforts on the most critical activities while reducing the amount of audit data that's less important to your organization. -For example, **Local Policies\\Audit Policy** contains a single setting called [Audit account logon events](https://technet.microsoft.com/library/cc787176.aspx). When this setting is configured, it generates at least 10 types of audit events. +For example, **Local Policies\\Audit Policy** contains a single setting called *[Audit account logon events](https://technet.microsoft.com/library/cc787176.aspx)*. When this setting is configured, it generates at least 10 types of audit events. In comparison, the Account Logon category under **Security Settings\\Advanced Audit Policy Configuration** provides the following advanced settings, which allow you to focus your auditing: @@ -322,49 +322,50 @@ In comparison, the Account Logon category under **Security Settings\\Advanced Au - Kerberos Service Ticket Operations - Other Account Logon Events -These settings allow you to exercise much tighter control over which activities or events generate event data. Some activities and events will be more important to your organization, so define the scope of your security audit policy as narrowly as possible. +These settings enable you to exercise much tighter control over which activities or events generate event data. Some activities and events will be more important to your organization, so define the scope of your security audit policy as narrowly as possible. -### Success, failure, or both +### *Success*, *failure*, or both Whichever event settings you include in your plan, you also have to decide whether you want to log an event when the activity fails, when an activity succeeds, or both successes and failures. This is an important question, and the answer will be based on the criticality of the event and the implications of the decision on event volume. -For example, on a file server that is accessed frequently by legitimate users, you may be interested in logging an event only when an unsuccessful attempt to access data takes place, because this could be evidence of an unauthorized or malicious user. And in this instance, logging successful attempts to access the server would quickly fill the event log with benign events. +For example, on a file server that's accessed frequently by legitimate users, you may be interested in logging an event only when an unsuccessful attempt to access data takes place, because this could be evidence of an unauthorized or malicious user. And in this instance, logging successful attempts to access the server would quickly fill the event log with benign events. -On the other hand, if the file share has extremely sensitive and valuable information, such as trade secrets, you may want to log every access attempt, whether successful or unsuccessful, so that you have an audit trail of every user who accessed the resource. +But if the file share has sensitive information, such as trade secrets, you may want to log every access attempt, whether successful or unsuccessful, so that you have an audit trail of every user who accessed the resource. ## Plan for security audit monitoring and management -Networks can contain hundreds of servers running critical services or storing critical data, all of which need to be monitored. The number of client computers on the network can easily range into the tens or even hundreds of thousands. This may not be an issue if the ratio of servers or client computers per administrator is low. Even if an administrator who is responsible for auditing security and performance issues has relatively few computers to monitor, you need to decide how an administrator will obtain event data to review. Following are some options for obtaining the event data. +Networks can contain hundreds of servers running critical services or storing critical data, all of which need to be monitored. There may be tens or even hundreds of thousands on the network. These numbers may not be an issue if the ratio of servers or client computers per administrator is low. Even if an administrator who is responsible for auditing security and performance issues has relatively few computers to monitor, you need to decide how the administrator will obtain event data to review. Following are some options for obtaining the event data. -- Will you keep event data on a local computer until an administrator logs on to review this data? If so, then the administrator needs to have physical or remote access to the Event Viewer on each client computer or server, and the remote access and firewall settings on each client computer or server need to be configured to enable this access. In addition, you need to decide how often an administrator can visit each computer, and adjust the size of the audit log so that critical information is not deleted if the log reaches its maximum capacity. -- Will you collect event data so that it can be reviewed from a central console? If so, there are a number of computer management products, such as the Audit Collection Services in Operations Manager 2007 and 2012, which can be used to collect and filter event data. Presumably this solution enables a single administrator to review larger amounts of data than using the local storage option. But in some cases, this can make it more difficult to detect clusters of related events that can occur on a single computer. +- Will you keep event data on a local computer until an administrator logs on to review this data? If so, the administrator needs to have physical or remote access to the Event Viewer on each client computer or server, and the remote access and firewall settings on each client computer or server need to be configured to enable this access. In addition, you need to decide how often an administrator can visit each computer, and adjust the size of the audit log so that critical information is not deleted if the log reaches its maximum capacity. +- Will you collect event data so that it can be reviewed from a central console? If so, there are a number of computer management products, such as the Audit Collection Services in Microsoft Operations Manager 2007 and 2012, that can be used to collect and filter event data. Presumably this solution enables a single administrator to review larger amounts of data than using the local storage option. But in some cases, this method can make it more difficult to detect clusters of related events that can occur on a single computer. -In addition, whether you choose to leave audit data on an individual computer or consolidate it at a central location, you need to decide how large the log file should be and what should happen when the log reaches its maximum size. To configure these options, open Event Viewer, expand **Windows Logs**, right-click **Security**, and click **Properties**. You can configure the following properties: +In addition, whether you choose to leave audit data on an individual computer or consolidate it at a central location, you need to decide how large the log file should be and what should happen when the log reaches its maximum size. To configure these options, open Event Viewer, expand **Windows Logs**, right-click **Security**, and select **Properties**. You can configure the following properties: -- **Overwrite events as needed (oldest events first)**. This is the default option, which is an acceptable solution in most situations. -- **Archive the log when full, do not overwrite events**. This option can be used when all log data needs to be saved, but it also suggests that you may not be reviewing audit data frequently enough. -- **Do not overwrite events (Clear logs manually)**. This option stops the collection of audit data when the log file reaches its maximum size. Older data is retained at the expense of the most recent audit events. Use this option only if you do not want to lose any audit data, do not want to create an archive of the event log, and are committed to reviewing data before the maximum log size is reached. +- **Overwrite events as needed (oldest events first)**: This is the default option, which is an acceptable solution in most situations. +- **Archive the log when full, do not overwrite events**: This option can be used when all log data needs to be saved, but it also suggests that you may not be reviewing audit data frequently enough. +- **Do not overwrite events (Clear logs manually)**. This option stops the collection of audit data when the log file reaches its maximum size. Older data is retained at the expense of the most recent audit events. Use this option only if you don't want to lose any audit data, don't want to create an archive of the event log, and are committed to reviewing data before the maximum log size is reached. -You can also configure the audit log size and other key management options by using Group Policy settings. You can configure the event log settings in the following locations within the GPMC: **Computer +You can also configure the audit log size and other key management options by using Group Policy settings. You can configure the event log settings in the following location in the GPMC: **Computer Configuration\\Administrative Templates\\Windows Components\\Event Log Service\\Security**. These options include: -- **Maximum Log Size (KB)**. This policy setting specifies the maximum size of the log files. The user interfaces in the Local Group Policy Editor and Event Viewer allow you to enter values as large as 2 TB. If this setting is not configured, event logs have a default maximum size of 20 megabytes. +- **Maximum Log Size (KB)**: This policy setting specifies the maximum size of the log files. The user interfaces in the Local Group Policy Editor and Event Viewer allow you to enter values as large as 2 TB. If this setting is not configured, event logs have a default maximum size of 20 megabytes. -- **Log Access**. This policy setting determines which user accounts have access to log files and what usage rights are granted. -- **Retain old events**. This policy setting controls event log behavior when the log file reaches its maximum size. When this policy setting is enabled and a log file reaches its maximum size, new events are not written to the log and are lost. When this policy setting is disabled and a log file reaches its maximum size, new events overwrite old events. -- **Backup log automatically when full**. This policy setting controls event log behavior when the log file reaches its maximum size and takes effect only if the **Retain old events** policy setting is enabled. If you enable these policy settings, the event log file is automatically closed and renamed when it is full. A new file is then started. If you disable or do not configure this policy setting and the **Retain old events** policy setting is enabled, new events are discarded and the old events are retained. +- **Log Access**: This policy setting determines which user accounts have access to log files and what usage rights are granted. +- **Retain old events**: This policy setting controls event log behavior when the log file reaches its maximum size. When this policy setting is enabled and a log file reaches its maximum size, new events are not written to the log and are lost. When this policy setting is disabled and a log file reaches its maximum size, new events overwrite old events. +- **Backup log automatically when full**: This policy setting controls event log behavior when the log file reaches its maximum size and takes effect only if the **Retain old events** policy setting is enabled. If you enable these policy settings, the event log file is automatically closed and renamed when it is full. A new file is then started. If you disable or do not configure this policy setting and the **Retain old events** policy setting is enabled, new events are discarded and the old events are retained. -In addition, a growing number of organizations are being required to store archived log files for a number of years. You should consult with regulatory compliance officers in your organization to determine whether such guidelines apply to your organization. For more information, see the [IT Compliance Management Guide](https://go.microsoft.com/fwlink/p/?LinkId=163435). +In addition, a growing number of organizations are being required to store archived log files for a number of years. Consult with regulatory compliance officers in your organization to determine whether such guidelines apply to your organization. For more information, see the [IT Compliance Management Guide](https://go.microsoft.com/fwlink/p/?LinkId=163435). ## Deploy the security audit policy -Before deploying the audit policy in a production environment, it is critical that you determine the effects of the policy settings that you have configured. -The first step in assessing your audit policy deployment is to create a test environment in a lab and use it to simulate the various use scenarios that you have identified to confirm that the audit settings you have selected are configured correctly and generate the type of results you intend. +Before deploying the audit policy in a production environment, it's critical that you determine the effects of the policy settings that you have configured. -However, unless you are able to run fairly realistic simulations of network usage patterns, a lab setup cannot provide you with accurate information about the volume of audit data that the audit policy settings you selected will generate and how effective your plan for monitoring audit data will be. To provide this type of information, you need to conduct one or more pilot deployments. These pilot deployments could involve: +The first step in assessing your audit policy deployment is to create a test environment in a lab and use it to simulate the various use scenarios that you've identified to confirm that the audit settings you selected are configured correctly and generate the type of results you want. + +However, unless you are able to run fairly realistic simulations of network usage patterns, a lab setup can't provide accurate information about the volume of audit data that the audit policy settings you selected will generate and how effective your plan for monitoring audit data will be. To provide this type of information, you need to conduct one or more pilot deployments. These pilot deployments could involve: - A single OU that contains critical data servers or an OU that contains all desktop computers in a specified location. - A limited set of security audit policy settings, such as **Logon/Logoff** and **Account Logon**. - A combination of limited OUs and audit policy settings—for example, targeting servers in only the Accounting OU with **Object Access** policy settings. -After you have successfully completed one or more limited deployments, you should confirm that the audit data that is collected is manageable with your management tools and administrators. When you have confirmed that the pilot deployment is effective, you need to confirm that you have the necessary tools and staff to expand the deployment to include additional OUs and sets of audit policy settings until the production deployment is complete. +After you successfully complete one or more limited deployments, you should confirm that the audit data that is collected is manageable with your management tools and administrators. When you've confirmed that the pilot deployment is effective, you need to confirm that you have the necessary tools and staff to expand the deployment to include additional OUs and sets of audit policy settings until the production deployment is complete. From d3ff5eec4e883494b54e79e1ec92c532dccf9b58 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Fri, 24 Jan 2020 11:55:53 -0800 Subject: [PATCH 043/358] draft --- .../create-a-windows-10-reference-image.md | 35 +++++++++++------- ...d-with-the-microsoft-deployment-toolkit.md | 18 ++++----- ...prepare-for-windows-deployment-with-mdt.md | 30 +++++++++------ .../images/deployment-workbench01.png | Bin 0 -> 77603 bytes 4 files changed, 47 insertions(+), 36 deletions(-) create mode 100644 windows/deployment/images/deployment-workbench01.png diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index f35f5fb1d2..96abe23e3a 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -23,23 +23,23 @@ ms.topic: article Creating a reference image is important because that image serves as the foundation for the devices in your organization. In this topic, you will learn how to create a Windows 10 reference image using the Microsoft Deployment Toolkit (MDT). You will create a deployment share, configure rules and settings, and import all the applications and operating system files required to build a Windows 10 reference image. After completing the steps outlined in this topic, you will have a Windows 10 reference image that can be used in your deployment solution. -For the purposes of this topic, we will use three computers: DC01, MDT01, and PC0001. +>[!NOTE] +>See [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) for more information about the server, client, and network infrastructure used in this guide. + +For the purposes of this topic, we will use three computers: DC01, MDT01, and PC0001. - DC01 is a domain controller for the contoso.com domain. - MDT01 is a contoso.com domain member server. - PC0001 is a Windows 10 Enterprise x64 client and also a contoso.com domain member. ![figure 1](../images/mdt-08-fig01.png) ->[!NOTE] ->See [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) for more information about the server, client, and network infrastructure used in this guide. - ## The reference image The reference image described in this guide is designed primarily for deployment to physical devices. However, the reference image is typically created on a virtual platform, before being automatically run through the System Preparation (Sysprep) tool process and captured to a Windows Imaging (WIM) file. The reasons for creating the reference image on a virtual platform are the following: -- You reduce development time and can use snapshots to test different configurations quickly. -- You rule out hardware issues. You simply get the best possible image, and if you have a problem, it's not likely to be hardware related. -- It ensures that you won't have unwanted applications that could be installed as part of a driver install but not removed by the Sysprep process. -- It's easy to move between lab, test, and production. +- To reduce development time and can use snapshots to test different configurations quickly. +- To rule out hardware issues. You simply get the best possible image, and if you have a problem, it's not likely to be hardware related. +- To ensures that you won't have unwanted applications that could be installed as part of a driver install but not removed by the Sysprep process. +- The image is easy to move between lab, test, and production. ## Set up the MDT build lab deployment share @@ -47,7 +47,9 @@ With Windows 10, there is no hard requirement to create reference images. Howev ### Create the MDT build lab deployment share -- On MDT01, log on as administrator using a password of pass@word1 (credentials from the [prepare for deployment](prepare-for-windows-deployment-with-mdt.md) topic). +On **MDT01**: + +- Sign in as contoso\\administrator using a password of pass@word1 (credentials from the [prepare for deployment](prepare-for-windows-deployment-with-mdt.md) topic). - Start the MDT deployment workbench, and pin this to the taskbar for easy access. - Using the Deployment Workbench, right-click **Deployment Shares** and select **New Deployment Share**. - Use the following settings for the New Deployment Share Wizard: @@ -65,7 +67,10 @@ With Windows 10, there is no hard requirement to create reference images. Howev ### Configure permissions for the deployment share In order to write the reference image back to the deployment share, you need to assign Modify permissions to the MDT Build Account (MDT\_BA) for the **Captures** subfolder in the **D:\\MDTBuildLab** folder -1. On MDT01, sign in as **CONTOSO\\admin**. + +On **MDT01**: + +1. Ensure you are signed in as **contoso\\administrator**. 2. Modify the NTFS permissions for the **D:\\MDTBuildLab\\Captures** folder by running the following command in an elevated Windows PowerShell prompt: ``` syntax @@ -85,7 +90,9 @@ MDT supports adding both full source Windows 10 DVDs (ISOs) and custom images t ### Add Windows 10 Enterprise x64 (full source) -1. Sign on to MDT01 on as **CONTOSO\\administrator** and copy the content of a Windows 10 Enterprise x64 DVD/ISO to the **D:\\Downloads\\Windows 10 Enterprise x64** folder on MDT01, or just insert the DVD or mount an ISO on MDT01. The following example shows the files copied to the D:\\Downloads folder, but you can also choose to import the OS directly from an ISO or DVD. +On **MDT01**: + +1. Sign in as **contoso\\administrator** and copy the content of a Windows 10 Enterprise x64 DVD/ISO to the **D:\\Downloads\\Windows 10 Enterprise x64** folder on MDT01, or just insert the DVD or mount an ISO on MDT01. The following example shows the files copied to the D:\\Downloads folder, but you can also choose to import the OS directly from an ISO or DVD. ![ISO](../images/iso-data.png) @@ -97,14 +104,16 @@ MDT supports adding both full source Windows 10 DVDs (ISOs) and custom images t - Destination directory name: W10EX64RTM 5. After adding the operating system, in the **Operating Systems / Windows 10** folder, double-click the added operating system name in the **Operating System** node and change the name to: **Windows 10 Enterprise x64 RTM Default Image**. See the following example. - ![Default image](../images/figure4-deployment-workbench.png) + ![Default image](../images/deployment-workbench01.png) ->Depending on the DVD you used, there might be multiple editions. For the purposes of this guide, we are using the Windows 10 Enterprise image, but other images will also work. +>Depending on the DVD you used, there might be multiple editions available. For the purposes of this guide, we are using the Windows 10 Enterprise image, but other images will also work. ## Add applications Before you create an MDT task sequence, you need to add any applications and scripts you wish to install to the MDT Build Lab share. +On **MDT01**: + First, create an MDT folder to store the Microsoft applications that will be installed: 1. In the MDT Deployment Workbench, expand **Deployment Shares \\ MDT Build Lab \\ Applications** diff --git a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md index 1cc6f00b84..22658affd7 100644 --- a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md @@ -21,13 +21,15 @@ ms.topic: article **Applies to** - Windows 10 -This topic provides an overview of the features, components, and capabilities of the Microsoft Deployment Toolkit (MDT). To download the latest version of MDT, visit the [MDT resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117). When you are ready to start using MDT, see [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md). +This topic provides an overview of the features, components, and capabilities of the Microsoft Deployment Toolkit (MDT). + +To download the latest version of MDT, visit the [MDT resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117). When you are ready to start using MDT, see [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md). ## About MDT MDT is a unified collection of tools, processes, and guidance for automating desktop and server deployment. You can use it to create reference images or as a complete deployment solution. MDT is one of the most important tools available to IT professionals today. -In addition to reducing deployment time and standardizing desktop and server images, MDT enables you to more easily manage security and ongoing configurations. MDT builds on top of the core deployment tools in the Windows Assessment and Deployment Kit (Windows ADK) with additional guidance and features designed to reduce the complexity and time required for deployment in an enterprise environment. +In addition to reducing deployment time and standardizing desktop and server images, MDT enables you to more easily manage security and ongoing configurations. MDT builds on top of the core deployment tools in the [Windows Assessment and Deployment Kit](https://docs.microsoft.com/windows-hardware/get-started/adk-install) (Windows ADK) with additional guidance and features designed to reduce the complexity and time required for deployment in an enterprise environment. MDT supports the deployment of Windows 10, as well as Windows 7, Windows 8.1, and Windows Server. It also includes support for zero-touch installation (ZTI) with [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/configmgr/). @@ -72,7 +74,7 @@ MDT has many useful features, such as: ## MDT Lite Touch components -Many features in the Microsoft Deployment Toolkit (MDT) support Lite Touch Installation (LTI) for Windows 10. An LTI deployment strategy requires very little infrastructure or user interaction, and can be used to deploy an operating system from a network share or from a physical media, such as a USB flash drive or disc. +Many features in MDT support Lite Touch Installation (LTI) for Windows 10. An LTI deployment strategy requires very little infrastructure or user interaction, and can be used to deploy an operating system from a network share or from a physical media, such as a USB flash drive or disc. When deploying the Windows operating system using MDT, most of the administration and configuration is done through the Deployment Workbench, but you also can perform many of the tasks using Windows PowerShell. The easiest way to find out how to use PowerShell in MDT is to use the Deployment Workbench to perform an operation and at the end of that task, click View Script. That will give you the PowerShell command. @@ -166,12 +168,6 @@ The easiest way to view log files is to use Configuration Manager Trace (CMTrace On the deployment share, you also can enable monitoring. After you enable monitoring, you will see all running deployments in the Monitor node in the Deployment Workbench. -## Related topics +## See next -[Microsoft Deployment Toolkit downloads and documentation](https://go.microsoft.com/fwlink/p/?LinkId=618117)
-[Create a Windows 10 reference image](create-a-windows-10-reference-image.md)
-[Deploy a Windows 10 image using MDT](deploy-a-windows-10-image-using-mdt.md)
-[Build a distributed environment for Windows 10 deployment](build-a-distributed-environment-for-windows-10-deployment.md)
-[Refresh a Windows 7 computer with Windows 10](refresh-a-windows-7-computer-with-windows-10.md)
-[Replace a Windows 7 computer with a Windows 10 computer](replace-a-windows-7-computer-with-a-windows-10-computer.md)
-[Configure MDT settings](configure-mdt-settings.md) \ No newline at end of file +[Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) \ No newline at end of file diff --git a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md index 965c2eb1f9..211b916ace 100644 --- a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md +++ b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md @@ -23,24 +23,24 @@ ms.topic: article This topic will walk you through the steps necessary to create the server structure required to deploy the Windows 10 operating system using the Microsoft Deployment Toolkit (MDT). It covers the installation of the necessary system prerequisites, the creation of shared folders and service accounts, and the configuration of security permissions in the file system and in Active Directory. -## Requirements +## Infrastructure The procedures in this guide use the following fictitious names and infrastructure. -### Network and server infrastructure +### Network and servers For the purposes of this topic, we will use three server computers: **DC01**, **MDT01**, and **HV01**. - All servers are running Windows Server 2019. - You can use an earlier version of Windows Server with minor modifications to some procedures. - Note: Although MDT supports Windows Server 2008 R2, at least Windows Server 2012 R2 or later is requried to perform the procedures in this guide. -- DC01 is a domain controller, DHCP server, and DNS server for contoso.com, representing the fictitious Contoso Corporation. -- MDT01 is a domain member server in contoso.com with a data (D:) drive that can store at least 200GB. -- HV01 is a Hyper-V host computer that is used to build a Windows 10 reference image. +- **DC01** is a domain controller, DHCP server, and DNS server for contoso.com, representing the fictitious Contoso Corporation. +- **MDT01** is a domain member server in contoso.com with a data (D:) drive that can store at least 200GB. +- **HV01** is a Hyper-V host computer that is used to build a Windows 10 reference image. - See [Hyper-V requirements](#hyper-v-requirements) below for more information about HV01. ### Client computers -Several client computers are referenced in this guide using hostnames PC0001 to PC0007. +Several client computers are referenced in this guide with hostnames of PC0001 to PC0007. - **PC0001.** A computer running Windows 10 Enterprise x64, fully patched with the latest security updates, and configured as a member in the contoso.com domain. This computer is referenced as the admin workstation. - Client name: PC0001 @@ -64,7 +64,7 @@ For this lab, all server and client computers are on the same subnet. This is no ### Domain credentials -You can use your own Active Directory domain and credentials, but you'll need to specify your custom information and use it to replace the credentials below that are used in this guide. +Use your own corporate information to replace the example credentials below that are used in this guide. **Active Directory domain name**: contoso.com
**Domain administrator username**: administrator
@@ -78,7 +78,9 @@ You can use your own Active Directory domain and credentials, but you'll need to These steps assume that you have the MDT01 member server running and configured as a domain member server. -On MTD01, visit the [Download and install the Windows ADK](https://go.microsoft.com/fwlink/p/?LinkId=526803) page and download the following items to the **D:\\Downloads\\ADK** folder on MDT01 (you will need to create this folder): +On **MTD01**: + +Visit the [Download and install the Windows ADK](https://go.microsoft.com/fwlink/p/?LinkId=526803) page and download the following items to the **D:\\Downloads\\ADK** folder on MDT01 (you will need to create this folder): - [The Windows ADK for Windows 10](https://go.microsoft.com/fwlink/?linkid=2086042) - [The Windows PE add-on for the ADK](https://go.microsoft.com/fwlink/?linkid=2087112) - [The Windows System Image Manager (WSIM) 1903 update](https://go.microsoft.com/fwlink/?linkid=2095334) @@ -86,7 +88,7 @@ On MTD01, visit the [Download and install the Windows ADK](https://go.microsoft. >[!TIP] >You might need to temporarily disable IE Enhanced Security Configuration for administrators in order to download files from the Internet to the server. This setting can be disabled by using Server Manager (Local Server/Properties). -1. On MDT01, sign in as an administrator in the CONTOSO domain. +1. Again, on **MDT01**, ensure that you are signed in as an administrator in the CONTOSO domain. - For the purposes of this guide, we are using a Domain Admin account of **administrator** with a password of pass@word1. You can use your own administrator username and password as long as you properly adjust all steps in this guide that use login these credentials. 2. Start the **ADK Setup** (D:\\Downloads\\ADK\\adksetup.exe), click **Next** twice to accept the default installation parameters, click **Accept** to accept the license agreement, and then on the **Select the features you want to install** page accept the default list of features by clicking **Install**. This will install deployment tools and the USMT. Verify that the installation completes successfully before moving to the next step. 3. Start the **WinPE Setup** (D:\\Downloads\\ADK\\adkwinpesetup.exe), click **Next** twice to accept the default installation parameters, click **Accept** to accept the license agreement, and then on the **Select the features you want to install** page click **Install**. This will install Windows PE for x86, AMD64, ARM, and ARM64. Verify that the installation completes successfully before moving to the next step. @@ -101,6 +103,8 @@ On MTD01, visit the [Download and install the Windows ADK](https://go.microsoft. >- Windows PowerShell ([version 5.1](https://www.microsoft.com/download/details.aspx?id=54616) is recommended; type **$host** to check) >- Microsoft .NET Framework +On **MDT01**: + 1. Visit the [MDT resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117) and click **Download MDT**. 2. Save the **MicrosoftDeploymentToolkit_x64.msi** file to the D:\\Downloads\\MDT folder on MDT01. - **Note**: As of the publishing date for this guide, the current version of MDT is 8456 (6.3.8456.1000), but a later version will also work. @@ -108,7 +112,7 @@ On MTD01, visit the [Download and install the Windows ADK](https://go.microsoft. ## Create the OU structure ->**Note**: The following procedures are performed on **DC01**. +Switch to **DC01** and perform the following procedures on **DC01**: To create the OU structure, you can use the Active Directory Users and Computers console (dsa.msc), or you can use Windows PowerShell. @@ -184,7 +188,9 @@ If you have the Active Directory Users and Computers console open you can refres By default MDT stores the log files locally on the client. In order to capture a reference image, you will need to enable server-side logging and, to do that, you will need to have a folder in which to store the logs. For more information, see [Create a Windows 10 reference image](create-a-windows-10-reference-image.md). -1. On MDT01, sign in as **CONTOSO\\administrator**. +On **MDT01**: + +1. Sign in as **CONTOSO\\administrator**. 2. Create and share the **D:\\Logs** folder by running the following commands in an elevated Windows PowerShell prompt: ```powershell @@ -218,7 +224,7 @@ When you have completed all the steps in this section to prepare for deployment, **Sample files** -The following sample files are also available to help automate some MDT deployment tasks. This guide does not use these files. +The following sample files are also available to help automate some MDT deployment tasks. This guide does not use these files, but they are made available here so that you can see how some tasks can be automated with Windows PowerShell. - [Gather.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619361). This sample Windows PowerShell script performs the MDT Gather process in a simulated MDT environment. This allows you to test the MDT gather process and check to see if it is working correctly without performing a full Windows deployment. - [Set-OUPermissions.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619362). This sample Windows PowerShell script creates a domain account and then configures OU permissions to allow the account to join machines to the domain in the specified OU. - [MDTSample.zip](https://go.microsoft.com/fwlink/p/?LinkId=619363). This sample web service shows you how to configure a computer name dynamically using MDT. diff --git a/windows/deployment/images/deployment-workbench01.png b/windows/deployment/images/deployment-workbench01.png new file mode 100644 index 0000000000000000000000000000000000000000..c68ee25db1a1588ca07ee67c49ed97a5799dd5e1 GIT binary patch literal 77603 zcmbrlRa6{J8@3yH2_XasIuP8Q!CeyE-DR-g?hXkO7+eOoFu1#0a2*IRxV!7%`se%i zC;Moh?1Nri)lz*|SM~GUt5;oMWko5p51&80di4rTMp|6;)vLFEi?0LUzx%t>GS74U zSItFLO7vC57}5UU%0Cug6~4ZDRUL!+XpHo?j^Ze-mYX0HKV>ScA(8Jlny=iC z=DKPv#{V4VgZ_KrV`c8}l|hTE(*jXj;j7D|`Gh!1srcB~HP`<(MfDQl>Epv;^!pVa zi~gRg(^=M=Kdl}P1xnc`bu#~c998^_nfKK}UnBuX1~;;EWz4@c{OjBWhA6|U|H*h? z{OUgnsb0v0?}@(?iyW=b9JhLUHX%+z-@5V>OXkWv5M~>7FOFo65=>1MeKjb=_`hBH zzs;?#t$HK>hQUI9f1H=erUveF?A{H18%+aft-_lg^4HzUPzl&~@%#-kJ^rVy6Dzv` zNm`{hApH8Kyjr*Xn{+~;YjM0vt*DATO~O>|f5pz`x*spVOEeC(3d~_?oDM5X`-dU} zPY*W)Le`L}Yhk>I5Y2L3KDz*P((+e(y`3p@($L%$Bl$22a^d)*Jyw$tJzIS$Ha1Lg z@!$_Wke!XB@PnRuc)>dnlD zL76kN4|F`1NRsJO&jNzHoH53Rl^gX_=;uWE9KqEiz_!NagH=jMKH37?sdL%X^Lg-6 zikOoDh3;r8o$ajE$xe7_YpLeXZGfpl7%CE zkU%0z0!CQ;r#TAkW=kf7VsKGIK$n}hnKf+4V_4{7U-BKCctEJ|X;o_dKFKN)|5^xB z5%Au^^k&G{;xP5C%NVYx zXlmlSZ&~N*yYi8vPgjJ5tR&;?zd6G>DNY|Jdo1Kjpli6X{UQr!cUS7z>G8Dn0NvwG z_=^0(J?@yN^w)fw@21V za9pLMGj%vcak+(WT06q4BkgvDrDW2cOm|vLt$meTrl9Me z;nDuIZtzE!YmUsAutSGyRi4&+A_vtxC2+E%lFBaOM6FPP()Sl7uVvR`N-0m$ZtrMr zE4k`DB*A%(i1oKTSUYW7Ye+7`JQkTn%1YNTW6zhXHYd;>D=<|nA8F*IGh1h|g*s=| z>1vjv0P^@Vfpl-sVXU;UPm8Nw>t!ka#jr^vG=6{4>G`Sqjw-9nek;-ew?Tq1v*JYt ziA=(Wwa)snU%d{${GoWFqd|dJhitz6H_@p5p&2Nkkv-f4X^d)~vCZA} z=!mbi&nz=3pRz>Id@R=B*oXr@AmwOhv8*3IcQ=XPPSjAJ)r%)o%vIgGH3N6~1L~rj z?az1m>^kBEl4@p_-oD;NnX?0?GVeFNl<8iWQ`wKM<DRo?YdGb$CswWc?Tj!k5!B1P{ZNBap&QVovLB}OQ=*J7V5=yqsESK6z2aSxpue1E^DtFSWH{St%pRpC_r{ zX)kQpA4$h^-{xA;AN<0zo~h)0`i3MS(*EG#=)#%!ko>!>f0p}uRW?nBKL+E&Pmesr znvmi{X9R6XIJM)>Ic9ezh2-#(*Sy;^N|*Hy@HOJ-nx@}YC{nY}w8s;1_PL^%u$pay z2!?Id_=vg`hT=b5x+mh}8g6PNLu`jWH$+NMT0c}p=%Ul!nyC3qyz6ds^tRn{igpg( z_OXHIrJdv^TRa?xUOHP?2niL>cRWuaeP(}CB;vlSLa5aP(NjT6AmZP)bA7QbS7SEb zb+c**)hu5~Tg>hosC>2OX2OcHeza}VM61|c9g&RB>HX0VgFrSLbM=qQ9;-J7;aHm8 zV%;IBBv2ec$fg@}C@DowHM=N;IWYIRX9!I$RnUxE52MJX2d}~}ASJZ2qSm)tJc+ca zzzxpg{g$PIMX`%Fkh!*i&FnzEL*(j^G3J3mV*h`DdX=4xmyn= zAslBh*m-u#e zL!+QGUO#)VcbA4rc;j@oc0=)4d~`>D{>jUXwzg2g{CT)M7(6y*5S%*bovtudP~|#n zCEO4*1=cm;qUE)~nx2=5aG{w`UUxuO@k0DV#PEgcA$bhfN$+e2 z5B;c>=?IDY3d!l3USsOfDoYoXVeBE+f_v!`?lzR~>@T7egq4=f1w?3JI5^(yXt*=$ z4L;TjypI5H{x0y6PvZ}A5m87IclkCgdj9D3=%}B$&FN&eX>7mDJNQlIr%lZA^wRa% z>cG<;>gbAVl6I|{s&stn!VH~#D0mo?8i%^E7e^*Jb=DXUi^2iZi4i-brj(>-p4Y7= z?3A-1%cpGFItpXsvj4aYRGmCPku2yqpthycTWmKv=Z~y}0rVA;@Dpy!=1ZV)QdcPG z7jS$2)e=wfXv@bi>7`xjQi@?9F(~?3_EM~YC9S&`WwV)#eYI!#ZNLp3x_@KVJgSzX zS|p(OGdksYYS2GV>J|KP1Sg6TCvF~A89n zx;>edh8&NH91l#dau>La-e;b+r8YC9YZgvC2CYRNA9!uQ3C3+)n*I5w~l- zc9M~5jR^7V>fjM$``e~=#uWZ;p0JKbgYL0Pqi*py5gQN8Jc(hXt72d!*q!mhsAt-6 z6plJ(FQAyi-PZ@i=C6*%efBu?S~6n`QjCLjUU<>_iF9!Rn!CIkUoPp!47tm^ zu;RqO`94mSW?*gxGB7SEe9f412laLhN1fhaQPs>TTz+L?c{f02**-pulAz;pg6|YA zVBN3}ua-23QmGUG`}l@ypwe)-&4^y3m?^>-0Um~eo0YXr!&FHp?O)n7eXZzKfy8<< zLKJp4QQ9+#K80jU$>Gb>YUQmuk-e^0u78-rLx!=lx6rRZXQfOJOWf&Db zZI?0Mk+s(NVJUs2jQ=t$m}hpb&WJ&+0Jf!n<~Nqv(hqYXB~tq)Z)zNOaCTS>Vv40{*(D{N5MU0T z1oNBR-NU6Sn9 zR+K`p`dh%*I!;D}|%in3qAaQ4SX<27DoGqXPd zxOPrl&%ZND_Bo(xakYFafH<0nzqi_SfIz^WsQuy6cr;}~y+nP;>uS75Wkdwe?d-jG z@Jm4-)naw@5p6U(g_*NvGIL)q6G8F$BmFQGiE6$ot;)}*8WnbZGbGV)d-Q(aaL+PI3<#_~e^x1L`{d5fgnMC)zqdt-$D%py7 zVp#*B9Y6uudL|L%y(6ZT0JI(+ju&%pYo+y&u$M%$pnYBw zjtNPD@YssBcu%LN2bRcXLWX}{y(P(Vn5#MyATN@1u|rUGq&kWQC;s+;NjdgWzTL;F zsIfdnBj+_(D>aWwaXUZ*lav*jw>Nhuf9eA==Z@#qw}IJ=ISKlz_5uqnSP?Y#WbEWA z)M6cG&sG}JFO+S16?{WkCuA|fpZxs}#2b+JQ7+}z;Oj!7Y~EerJ6u+r*F}T1KBGtM zVK5V-Ggr0J%&+eWstU!p@IZ*(9?yh%Lv-VZseee0(gx>D(VY&rYjj83w}&>D6N)tK zURm_O1hsFtw)vyBj$8yz02V6ESMIRWL;|(jlY-PQq>O-==kLmdb92ylXj)5MzzeJ( zff(ZeQ5^4Dq*4V)&O{!pgI8K%UcQl+R`Q=xt}v|$v^$DT$}x#vOrIOh##(jq+QDP7 zYqZ0Oj2auZH0LhwjrcGBrLdQ`|AHz%LRv=616)Vl9gzgc+D!O@ubr8Q`n28#N2&* zc-vIh#?yKC<9UHEWaKzTg_#W3Y27XojsDFUxBk}M>B;4v&3(c#29<%&>cz0|WTd@? z);!0~(WaSIM=@+q!>S@TCHOM6M+1{d*9SL-8HFXQPt-__7Vai<3lDQWhRzprVdHyt2NUN`sMmmcb)PEq)`LWV?S#kdq-R&=VmL z-;SLgAgOwry*7mG0c=Jgf1xs*wv&Gfd}56xRNC&PNJ7@+@YoSnIBO6O-}TTTa|TAE z9Y55Hx%!d3(->4uBt{)MP`6lqs{|b`?%<2RB(5NgXP4OclgAH6;pO7X6IaO!p?E%#64^<=9goa$mjD$d!Qe zmFWl^tI?y+tUrauH~;8O`;W;7mb|9lO@+H+eKn~QU@b!1mOSbjzlaPGldM^bWUxYJ z%kf9OZa*VmKO!n=JQ<$%NS;SrnmDyfcQEM$I(QVRfk65z+;Q}@#94t!)8<2|_#LY) zNj(_B3+7xV4GUFa9Wy3uCN&Xl=zOE`=K^54v>!Manrz#}sfAF(N*zBk0LAE%-g3}| zLC5wZD$*>1qiEq-itF1?AmD>it~6SmasPoHN~ zDhNm%`I)lze0H0&i`lKjUz&ey&l2HAoe!PR!>y@t$}I(MX3_HxdtE3#5+Vy|e4D|= zz_K?qe#zA9ZGH$_zb4yk`MB*HhTq!LFj;)^F0hA`-TjUxs~1(}X^vMHJ!3?ozEwyd ztt*|>(RNn00TlCv_FkHN;N=Zr+&Q|PT)Ef!I{7y_3Wk#K0RF5tRSQ+|zK7=Y2fdsV zW1v9`r`rMiE>Y!XdA6KUDcU!Axz&Tsc2C*FbkpkMZdY+ugn<0jlXxYlJ)_efcAeRp zD3!B5Ty2dD(L&u}sHBP12t>YAv#+-*)-O}h;4>@E*Paz~q-R8n!YzYw^utly12 z{*+ymNX8vWzmhG@XiqfSj-KqTkG}|V*HE#C*%j64cz$I=0&1lJ3~BU7hlA4$8MXQ< z1qgrAMIFkkf=WmXnN=9_?P*M)&Y)riiS6L9fs2_CT()3_AuJ!pTQik@{idSPVHNRx zkA9j*9SE0Q8e@CXGH&M$ogIfidDh9=eE7X=KD|$3oT(I}Paw|reIC}ZR;eN#Wk0%V zbSXxgkPdxr}j1gev*@y~^c*s*?LHDuVh|?H)ecBj8X-c6hh9907={aN&w>UKXaBC6K8>LX?$z zY15$#{$u-)NRxFXp4Gk`#a`npv0cX|Phh~187N0VO&0f+Tm#AM5P>@UWqfHEE`^?* zED6wBaPTkh)lbi_E9X=R_E0PqHQUbHta0{NcgjERPnNxHCXk&S?*y<^5C7RPq>JgR zoJwe=S6BdQVfCI4)|x^NLcHlQ;OP)CS&4&ih!jIY$v2fhcXY4)?LW}V(v^}Js7u~{ zQ|m`6eTG5^a1ZIkuB8};BXDI4Cn?2=?~wrg^uj_nbkz^uj9lj6LXv|*xVEEQvru8# zqwk|znWLgmpQQ?R)A?R2aU>BH)tes0X8_3i+)MS_Q)S6 zPK}LbJ*BqRY*b6=%<+!x`4(OK88!TnY-e~yHV7jleQWNGF^pa+v_JZN6OpN+Nwp}ec z!y96z;WMbJ*s2y7&)%m%UUP;Nue#1&>wvbRkSI*c52Pkc8Bs%{`Sc`8kW!JsF7@sB zY1$5lt(O5Dk8F89C~^vQ_SP22A3A#~k=pJ`T9=LZ86p1Un}5j)!79FgwL`Z(UmYil zKJGf~j`L#|RE117+N?wB!3m8hBe;3&voxN6J~qK7x_E^cL8lutBO(KbS8_I3I| zb|BR!F_cG%fuprS>mI0_?WJiYkG5Up8BHO2R17S#RW~T~FLxzv(tB(v-x%OXF+~+k)-zW-UaDYf~9WXpKmM|X>o6OL?YmcB1H_qQ#Ywuo9nvCrp zE^r*!Znr~|9p{K%MOS2i?d24;=M3uSXKTGSb4oFvm{aD6VK)%$#=Fu*iJIW2p+4&J z&3CA5Z10zF3eed0l#gYvdtlv$4DO2g2_-sdl?^AkD7kt~ zp=ZA&%9rc@iXxwxF8AoZ7|}v;KpAdLgZd+NGxsIQhMQl*<@ld2^!k$u-&R~Ie zAqlHdaj5VV5%Ij6bDx0_?*lp*y?-O*HRyXC<9(u>44$hdtT8NMvRg`%V}o)vm7ObIQQww+bav4eRPA z-F69KZlUVdku**OI#h= z)taOjgJfL+cCZR2>vTC3+lI+?gSi;Rz5Gi8AMsiwyVDXXET0Wac@Y~g0h?pJsz5MXKMIFn5eUpT^D@bFcslkkL7vpH7FJvnCod^X51B6yHr*EL| zQ)w+00YSLJTmTpyAh@C^V?a2b77C+Z#})Im1kvb!B&VVvp+4dlaw()>SdpAmM;`}f zOQNEwiqAF+R*VVGOK3X;P3{}8?L{^rH9$2t#Uc+@lPPg+;+6E}st#n5DCkKx8vFXv z;aUD;4@=TNaU)o(F`I9%2RTH0OjRgOIqDogcW*AqWXr=Suuo3jUE(pit7ULw-*Mv& z$LU5+mFbPK}2^O7bLdy{nM14ot)GFs^b1Fo4ea7Z)z|D zL7uHdwp~tP@rvo%2y7=!FxYD>{gc*Z3-9?-!4kU9kX%AoPa>OV%YviJd7qYm*R(|5 zKmkm!NaFC|{$wdTaC+zKedJKDL&UXnW<=QHqN~y1P?29_9l?1ktxxR2{v$b@K*J45 zlKT3Or@!ZNWZ=m}a0rg+ekmPDLPrHeRN#L=)f?_fgM0T2i->AiGfYz?H|$$UI)G?T zg5W@62@7B^J|jAiGTVtgkmfLh7BV>L%4QCCR3acXf*Gw6CS?2efAe;g!7S3klv(q^!g%C#|O5v4lK zOUdqT(;xA+UlcRdHV=0SdRQ(NdZyLVr&UH2$HlTjEvRo{i|uS5PF7ZKZFu@G){+QM z?9DM(eNU(FNSf8K2u>As>%+wV{(cpk(18neyEBikGApz$f2sMNw@_B8BDiR1fk|Dd z8WG*B$11v*kl!yI)7k=uV%-a&qHpE=xM)gO=d{ z2{T6|IVxPY(0@S~%Clz8iY-H)#MCZb>tD(n_etXV5xNuRzOkK|LZwSRksu0*t!x-K z*qaeutV%t`H^rW+8i)}OX%ii^*1u!VF5=;zq{6lS@q6clyjNv{MEbYo!!}cGQ`RSp z3MdKW>F09p<9_p6q$R3wo+4u})sMbqY=<}t@Mc3C^%SuQlQ{{H^b5Mf0EizD)L7)j zz_vjU)r|Q(JW;?B)z>)K2$dgqX^x9lKi0I=3t&ga>m_0XPaUkF{xIP%mQ#-fP6~Y+ z>vbPR)e+l`q%g3?M+f5TFQ2Eeat$X_D~4a+_RU#|-*w(7B0dS-1Bh7N3F1H z@&oNSiv2YG@)3B)ghRnD;6Hn0qgBRPjqTb2gfLUGVL0_n)p#<>aH|dsEj&VLcFua zu#miPdbqTddAuyK6;hkoNzJ0$D=&2scs$SF%8i{|PWwwA`;7~Uu}T2jPW_Q6gHt;q zJpG@TaN6d>H96eQ5huxE)roI{1_@mWmli+Jhtw&b^{=j^KFW(QlktLBsUZlo5z z)BZxy%6{H>1`%t{=k$B7Croh7by<$GBdxmCQm7co7J}a@NA~SUi==A* za#Fj)78DGTS@qWC#8&}^6RqJT!29=xamWYV&<&{llKO17?o+v^(vYr%Njs&nzz1ownY78_S5(yE(x|+~b~)2UhXe4aF!d7~#IHj<7VkPmva+ zRoMQLda;MS5nRQ>aEE*uLB~>KvLls?6BAAhx>NtSlZ;qkSd7kmgjW`YKd|5o zCuB3PX6JzTrdfhttG#hzlPtHIFGuO^54*L}8l}j?H zK2}0fxr~CIIkvum1Tq}5b~#=B(bm+K1Ku3bcTVG~L6981+jZwx#c)h23DDAs?M9sk zxq9rgY~I|c zCXTb)OxbL))enpl72XUgj8n?&1{6E~FTwWp&S4fG@+Be0wq;^_RXSK<;3yCGM01ru zYXX{F9h(sPD1nIGakJrYQZM?8ZtDnY5Wb3& z4tPQ|=DD`~)1b(A76TmQ9V`d-7If05?v(^9PV^%dXvU)$ca|XLbmawco&H{dL-n#S z657+luD3;djx?0VN0}2wi#PM!mH$ zwrI_Jt*u0l33JFuOX3eh1+$qt8U0ASt6_60#gAv!{&VI1*%y-eqMh|^`n4*LShC<_ z>P7Q0v;Fwu%R6W4ZB4(R1(-+9CG%-Laf@l_L!{07Paw zk4`n?%p;pOocTHGkypTi#$^{~0Dr3j5Q?A9q8E)pR%G z0xJ(;N@2MBfugw!RTgKu!!Z>UwordCyNm5>_KUS6baR+Ne_-=lZLj|9A1>B5iz{&V z&kopre=0v`f10r+KQa{jv5lbRaA}PbH5-W_VFu#b7#fd$pDxqm4z;`HNmDlA3KyKb z7-7gNOHz4NUbB+t(deLEZ~FnYk!1SX=|wQIcs4l5l+sQ1%Pi`kWQky!)OXl&14{$nq@Gn z`Y=GhMHwg~BwV=ZJkUXE09D6fm=BhcQf~znxj~;Iq_+2-_-G~V@-I`oyA8IomB+Ay zs~9;A11pa$Rx-AkK!O=4Hjy6}Cq>~>xQyo%^$s4o#l4QH)ErvXzRsjGw66JHD(^?L zLW0j=k!dyYG8{ZE3Tjjmt>KtY`JTbkwp5@;MaN=EIU2R{8|xXCl(k}-9bB&uWr;1+M^9-v+G(r31A-{-Cr(`PFM=yOPN}@DD7|A?ufwieoKGCh zk7UHJWc!?8`aip$87;52)$zu%`UBO*9cT6Y58nQ{i;I24N6ac&EL;=z>Rx)%%1XjF zuOjE6vM^07aZ>7D1Gbegr!SXJ3r#frKW>};aiuR&K00UpjBe1AcIU!NwQ-(R;T^!W z`~Wkr4%4bFp5337Rxl-_o@!zpXbmlux(B`>Ekl>TiGSdDxaffx1~LgBVal zg>6c11CTZ|biB|_BNtrJ#RbM+)8g>rauo19@vuVSgaFDE3 z&er55D@eXnYIxl?q?R!7OL7eb`~(0&Ro2rC=HppUSt`rw`L`ml!`Vu!g*tju$tZ7! z@t1Wmw`x!LkB6Pf-Nh;qIu#!X7X>w!Pz2?eJ2I{p*RA$`Ul=TtPKlh#PKBKr52R=RMri@6H+84g z8IIhd%Lw{-$Efm0ByDkAG;G!@R@lb>VtZJ2CU73*?9XNb)Av!Y+Bj|ryh*dj4VgSr zB*eGA@#UDZ{10jkqI@+}xCY-@n7xKA@_a)W^3HJ=@>$TROLlg)>qi86c8z}5py$Eo z&*VRUNowPhCR__jPZpt{%Fi+C!^5dJ-2EA!I7vOM%wlMABI2c3^G0LuPw_`#eytC6 zWkH9_jBVin;zAEyhMn=R!@>_H%3E$z=^hv#=Zcd#rm|k8kFTqp+ zmCX;LybGr;Mkifja3Pr~xOn-NP*2^j}&wGr_b{o_-_wS4hsu~c=qZ)EuF z!bd}XJJ%0d`3xV=#!)rVl;c{>A^cj8f*3;Cg;)qELma&A`?3o|-y0%;6{Jb5j#7g~kriw~;tW z$S-7iRdX6COch#Lb=vH8>RH2|rkuC&LQ){-u-z@X_=r63x8OIEv0R4SZ>G#~ulOPh zordV+c(Ai59vkz<3{uoJ4pg`z76=Fj_1TG23H=qT)va$%BxmlkdlLNw6{Y22l>#ap zwUyE>l|>2jLs^XFMe9(-d}*=gaI>P=m24X&W*neipdf)u`0I5v46%eiKF@%EKA5pd zOfcY_q3;%G?zRubGm|#Em{a?#XHa=eZ>Ccu7E$WRq;pbBgafGVPZU7!U(?&=3~$M1 zroeSvVpZT)Zb)=r;QK^glQy-P_9S3WH&>J!XRbWWY6z8h2L(mrLMH<5Mry_|MA21C4mG1p^QP@=VM(!kKQiDLRgU+H0m3ZGFbk8cggp& z;yruzl+63(gU8P+sa`I3gz5B~BcTmNc1+mK5!=0n!P}%M(Y8o6 z3H()L)QAVfTQPKJM;a+R)uaA|yu z`m>BomM};22lIX@c(yO>V8iQ%0*Ec1elaB7$0_Na-4;C|gj}vWO`V&~&$B0)bjvu( zODLJo4rR{QTGYYwy(B22zbG*Qf5D7@-KqZL8!$G(mHx3_2jQs(QNHHja6DJ8dE}hm zk_m_Fh?6F3_?*93=*z@&^SzrQ6g6?(dMKkbIN14PZsm+OI8ZAvi=t#0_`Gc$_Bbl> z-4JVX8^?~9HN^5Q!B9oRj|*HGoTu*q8l@7R)35E_sWQw9k){liu$Qf-G|KmY@O&67 zX4K4PireSSfPH^#yQt9T=~1PFZ$r|_W$$$+rJNqB8Ov!feksS_B(t=YN$Gg-lcLF5 zP?71eM`8lQA|3O$0F-;`x&{)H37lr$7rU5Vaq8uX-fu#FwVhuQJ15agRd5mv>F^4G z#b30mwcSdRQE{HC6-yC12rwrSRo}=W8RQ4u#P~mdY+(Of{Eg5a@yOq3l&XnttrTV> zzC8=4V0XWdP?AZP>7hTY9EcTUr1x_bMElTPug~~Si%HaI%r#G%akxksee#x;Mxmh$ zDuVIr+f$8Tr#Fe;iL7h6YVsQj;1tyrw%v$ih6h~ss(V3bGJ#XsguUxGFq z*KI$s#gWwM)}^#8)Y#w*>}FDE^ibd%4k-VUaY=)Wkjb(jZ6D&$+;<7Byw6#V7v$mk zU`8Iok7thZo7qf-{AguER-Mc(eI`#mZYfV8^9L1JRAMzP{KK6~JbMs6?T2sVWC{#5 zU^a@xn6HG$>^ozBb9CenAYDP@7S`sf-YY-~`&^f&zaE(v4>Waq~z z<2@nycTKpzJyt7q*9ap=eF+YQGQ3&qhQ)b(hjJr<$K=~$8wK$xw1+Zoq0)@P?LfRK ze^Bg4#(9PaiDJ~bX))HXF|roK?Z9R)fJJ=WHClsu=!KMoghX6I0>!KU@o&zDdtk{z z=+-aqvdOu*lhlhcr(F^se4{bX{6F>Ne#Q)<=5jdv}}uPO87l0r;I8MjZ=0hL2qzq(K#V zUvC_f?Dmf{a-PynVm7^+5+S0jt|v8jyIAf~(L(PM3Ku_nC*KXKYDET%o7FP26sNGcDP2ODy^j?l9m4ZplnU zbOsO+gQp6+rmFEC;;2{!L!%`l(0s{5UPPiU%?1#XdtgElnOiNkSSmZ~rBxx3b3-i2 zDcOhq$8eLKkM|HxLfaOqq2E(}J&d$rt~Hp^^-yDjowa z3~Y$6c>4M5KD89EG!Gn^nilrEW_qmb-@l9;6ZcqwyqID#-NQ`fZjxN@-9n;~N66T37thAm*ikBOBZmu((7mPN`I6mH& zd{#)dH8*aAD$c$bezec>^zu1#X*hI3;MkK?kTMwocrXN45x{?gZg+)e0}ZeCzoc8v zDtmhR5)yW{viP^6W6+xx;Yh((pA70dJ*KF-p4SC@$Tw5Jikm^iTahf>*?XN zKJoJ_yh0=0el^;>Cq9u#zG>hx`Z(3)n!b^{-28AKkk+ZSt2wb=%MUNpiLe7|0I&hv zz5~s6rIvG5BzDLO+mcN?R|!rqou6-ZEu19ldn=9O_X%|$daj~M@1FOtVdLqHjQh%^ z{2DfjTXBQnO`A{`O5N7(pTGiVIm8uYJ6*}N;W?w0G={{(K_p(lZcWC-5cm;F27eRX zQJ>pvToPpXpt=PeK-hCX~xFYM08rj$wG zt)?+jY%ip|=r_JT*6P#NB7Z(SXZ^kYBeyvr2d&f`jmDtc-@Pb)my~R0NX0&7L=7q} zWF2zytZ)dMX_vjMU1}orOJq22y zf&J0F)byOY7AJrQh$Q3ddCo2YTOQD=(!qEuek%IA2<9vVm)?LrE&c1K4rjq;mVC2Y`wN85XafeJy2k66}E0^zKX9GgvpZM4;o z53rqX*j+ruEFPbpWFT~y{$M{k4rgj|@MG_EX{1$0y6(nZIzKh*Wh?EiXVZI+w(B(FnjArX>0KwjN@U&DdAt=7+M7iPq z>`k`+w#&TH6n9^lO{YvWmdDrI+;T7YOLlf}d;2X7R505@bvc6ox|0|RxO@BXeq9hR zp(<3qTyf)fhUYTr;8|(Dl}U;aWw?L>eyS3Gz~$C`an0!g)fkS_=wvUU9J~yl}DBeclYQMg@}a^ZA*K} z#$lOED5aO~U zH~#+)WY28U|8pvL$mc5pulyda%?{wj_)#bh7&VVl=TgyYkpGTbxTmM*WUYmg`B=vO z{{_NXE!VyraM?!ATjF$|i6|je$>ILT`CRaHO-&_ik0jL?b@>)X1l{0#7xwe!uuBs} zlKzi5x)bfvDixB(fzS$Tb{gZrPpNK?Hae82pD$@W3<><&g5Gkg*0?dz*{-B&F< zp4Dc;lc$+Nj+(c1zrXi8S!o~X@O#K;Ff^^D7ne*A19L@mnp5;Tz{L6FZ4c_^eck6#fSlIDmGaHt=-COIFEDK|Xn zFu3wdMFGcDY9EkPXL%(9Wk@#uYc@RpCXV-D_6e(XHWs810fT2D6H`+HA#YBp7!tRZ zN8yt1&-7)&?P>WuJEoBjF4sKGK22&x(&Qfiqf&9AcLD53r~n$XFW=n*Rh5-vr*0e& zKKqW?#?tzh4{e*AT_@-0@cF<|FMvud*lx z2F=d1`}*dl*1HvxMwB0m=F<&tbV90i$~P)C^s7D*5Gb70?&`PtXIhMB@txkfy1Emx zoU=9c_Wx>Jq|ca2s6kq;!Y5V9%>(2+@4rW5Gv-K}o^ASnQTs1xF`BO^OkoiGnoLnH zM#S*RkG^lBn1PPIfnZPaFq-$+xDL+u&#VW}-fsOb<=~i@|HIT<1;o`n;hRz1onXP; z-3h_n-GaNr;3T-ayALq9I|O%vyUXA(xU=*9cYnKkcP`FFcc0VMRc}>2P0h#m4TM&J zh)q{ySIz6Z7dCrOLcX)Xs!(M;QQ#S!j<+7!|MA?z;%-ND0xe($*JAHvdOWH^=4EWQ zKiI!5&K|dySF6!Zl&^E6)@*n_kM=|H*j~PCKH=VYf^-q*hEpHOkJ`d!xNSo`OXyI~%YTjlcynlkvy!`_-Y!{{t)-8M;KCO>l?|4Fvl755%Jd2@s?vf>Enc~{?N12W$xgd@U8;G zgw7yI>O5|^zpt3Jt7qTO+ug2V(0~0B@P}l8G%uX4pFUUVb%ch-65;0Z*!ml}ZCmtr zYUIml&tI^@6;n;d{H><&l;OzJnvN3iAsih8Pt~?)z4d&H`JXAt9q+~>F$|^tXVGVN zYE=*UV7MlD+d?TFBUx+gfx{4$(E5Fvw*LAbKhf8#15-$C=p_Fp_;?<)Hyr;n^N87? zgU4(%DPOPEIf+p>Wv)!shW;bB{n~fc61gmXKnxVRV6z%1gpJB9tk>~cn#0SQOD!EL z6i>g9iZe>Te5Bij-$ub3eyu1QP|#=mc7vN68NBMOv7oJIrkX`=& znIDpoZnY0|a%ce_A$lEGmqT0TLyPjj>?KTmvz?<8JYvDvJqU;f!$2I7REU_l8Fi{0 zq-#F+JXgr3{_A}rlRGFR1OpvC-|nl*{T!(NL@`%rU~|*Zn|dquw2)gH8_A1QpuOE? z@+E@j;)^SHA#FN2=ZFe{RPIVN2km;$Z@ZZ$VqZFU^^Y~_H0t?eP;H&urs_tmG$S;i zxN}5lPRwylzMx`i>BQ#gkgl&MrpmBxTGOP|mOizbCslM%>(FUhNnhH{~F^ zw*9FWyEAOu|30DWLn=bg6SK@V&Qp*ctzIp@fCswGmS<8nuCi!aY|}4Jf@uQz?{96H z3|e!krozAJ*1FX{%=um$7#KV}J?(67|M_e559`A%(Z}1wf#b%#kwi>1w5^Wk-CCXC z-%L4fJcoQX3F~{e=hUvQ6S6YG++pEC50<}-Ye2p4)HyUo#;Sd|k1Q@LNKCoHQ#tFv zbQUXeU-y`zsfjM67S6b_rXkZQ-E_#kwYX;yw?BFBaj!_uX!RRrat<7$X$O?r76A~uq384&*E9d(?r3H zkXw=aHBT6WBVTgxFpWnr)0RBJ&lIvLa+p`M#j=v4Nwm^gJP^fRzXS?tj<0`*h9ui@ zFfo6&yPr9_V2VCd8`o>|cwO^FR_Rme#}QnwAICBK(_uy8*P}f#_Lh>YJds0nfu^s+ z86s0chRQV_3f6PuQ+XegN8iNjSe(b7UI@MYu2`G23%BGy7iY{A*Nzm3I#LE*jd zea37B^-IhCq!E>{xrG2(xh&QkyiR0()^dv>!T-k}z!;IdRIZLo8IDiD@k~tM+JhOu zXm??L;G|`AD8;nQbC%$?Hoq;9U@|<$y($DutWCCW0HIiu6~FhJquE3*I~|o`8SxAb ztIO-_-N|fz(}@gh001B_ZMojo*hF_J$&$%vdU;i%*k&v@q8%-VpO{CXHFt0Im#p8c zK47BC{#99%PDme~<(s$&lh@tp(#Wp&eXG~@$JHi1>MI$xB*ZGyn3?OFgG z$+ce>c`shDu=Gx;^nzL8%_tX4DZTkLVSKf-k?>V*NPg9qO8#CE@YE<8n7uHSZ zZ;Jd~fK2pdQ*4sZO8WRhwk^p3YcxHBNt}SKO3$!s_#d%hJj(qShc=7c-kEZlA1c0aBD>eeETVH&ZTb(-u6hTFVg^f3ho2k>C&B#hBoI!89%pLKMT(;hQ*~Fz zZ@#3z{bnk=!})gKFSmc5QEn?_^I2WMzVN5bCwdwez(ulRq{fNJb%ZZH@EGqHhhtLp zV*F6k!*W8O);i1eLr~IMB8XD{MFF{AFo1Dq)soJT3hho!?k5&qma3UyX+z#O1dzqI zcVAa2{`8&rzFW^}!~-ugsXg9r z&1<)>aWO~F>%6zvn<=Z~*S@DH8&Z|QWV@e){tu<(giSL26;}p>&e-J5Y@_`Y#9lqq z$EGocP3Kf>U6SzbSRNNfMtbWn`cQ# z9U{d@%rqz6u@Qd!W!iL{e4U_crvG>NhJ~1)E)*T&@6OjVk7j}VcK-5A`fWwNvRm(n zocvHP5#(DBeZ0j}oBsj>!>9irR_H&AkszFF(CNi$GKd7Fzjz~vbo;&HaahK=6M_w~ z-3CMiWp3UP-4GMnh>q?xKECPCC8Ny0#9yHO&!waw3H0hc7>*}T7kqwIrQKBh0Bsx@ z3xdadoB98gJ+jBe(#^HwSs*IA#iVN+&qMMj7N;Gt|34IIx0L<^iOPq!tU{mvjSOSt z{Y$sb$21PB1ig=OQg6l`b|vrUtgX<2Ujep=rp50fF-9)(sy>v4zPy~{MpyQ`pY;h)tXn(6CYULA~B4n1G?@Hdg( zbdcOx>?ScVon4FU$o9F?viTzm?6ZEz2iBbqV-dc5L6Aic9 zoiWVq*?9-_W4$fbtlAyk!T{y3B=NXCQC_{>{#rL$^}dfL(@Uqb6{~%sNB}4SkoLw> zV;3rQ{V(|qyH!3U6phPOpPywjp+NWAKpg4Mu&5~0z7XV!QJF-^_?cbqfQEpe{?eyt2Q=26d4-tWyfe&e4N0#DX^}28H z5@%7k3^uz4&+_1auTwqag^6GfJS&%#{}TZ|KIbVY$v_7roC)B1e2Iuv`2ZEj%CzgL z41FNMP1u$b8JsH^CFO9X%(yQ??)J916I%xLyk3tuL-%qeo`n!SxW}Z_sKQ4`=Jxp8 zcK+;J?qL5sW9E_@6xDDp;&05*hyw*)<*=41@IIX*0kkfB6&H_$jo;vqx3;JEqX_Ea zm4HMTJOaK9vy1x50N)qsj$dx=#1$QMu^!3LEjF?l+YJ2pYI?)u@%(7R7S(*hT=kmc zbnCvhTk?MCW>xe^!t(y#u$>RarDF(rr82p`LaAm2PK6~LrG~*{si;c%qJ9e50#X+n zf*x0U;ny*SdDn%m*Kgyw93icd+)A6b0w-Js&IV8!#N**%YkwPx%>p`+9`+C`tUY?h z7z|X~^C!Jh6Q<}=ORqE`G*9s+C1qOVsy3V23kZ>g3a)otLLgX*o{{|L20{-HR8N>w zUaVW`!O&JX~I@q0#)g0H+m-`23 zLE?cLyewTG4HS@pLk3|ytnpliD7*1ZuT(MnpEGA{z)W2e>d_7KNsl~S(Rn_O9 z^+HsJkx`J2k{AhrY#xq=5LGV9kMLE6=l+3GEl}D)^UXLgC^tvs{c#L`QwTAypaoZ-u6IaGip{)K#?nSNL8T0C z5B;O&n%sV1JBZtFEx&a#dlY0JH#bEP8^@S*>-Hm+jM+tzKLx{9)7CO56T8koGui1^w6jwTX%G6sRg40BMs1^R*X>J8ujT#a0uon|dD2CK2qs zO%>nnRhBz>Hs2fF*ZkPLZ~;5SdZrV1w`(YVlQGv0j&6XQE(%k4fTE&6FvQX2uPWRd zU=SDU)#4}9P+P>GJLD<*jRW}rxS_3p_R!G2>UIJcb-d|FZ?$&Ed!;@nz`Q9|=ighP zv>$lGyT$7lLdHm% zwpSGmLc~>=Br>}bsjNjpxa6ic1~u7JLTdG?>w5*?#(``_i&_FOBKeM)TKQ27*-m&a z9wmLL!6P$l1p8Y`uH<6i&LjO8o5ixzDHoz9S#(2&zrw?Mf2Dz7I0J8zr*D_(-pcm^ z3w3u2(Z0Ys?A+S-EdqP3#CT?Piyq6_0Ncciu92oi~^^By(Vv<^{cZ@Ov`ZI~y0Y4eMjVpo}ZAQ1POv14cMEe3T zE!!`s78e(cckhQ-G8ooa#g*K4;L+a{$Oe)3GQyU_l`GTAZ)Ro)+}>&S1;~Pl-D9nZe)LBOf{JvjL_{k zO3G}C+_YzXQIqQ9=;nUNPTI1=A)ZK8y z-}nySZq9sA7Rk*719<5u;Hj}k25D9rjg`R$tqJrtUsvbFBA5@o+4L9L4CEII&(!6i z!r1T(-PxMm9?#qI`-IaBWQsvhmpknEz3(o5J-6N3@_3MF3In1X&g=bO`82Ba1{Z9$ zRp8@ZiXRVG%5thRd7S9T`moOhk%q1fkfhIrwjb>Yn!a<}MNVFH+FmlDPhoYuuu z57hKSFI+)%$`;36-$UYX znS>=E%$Vap9UM|TTe#%5H=z-ta-^Q?X(a{sV@K1+hk-S|J13r2?F5mDK})nI7rB}u z4y5*xt3pUbf?Iedd}x^@bT^@qNyqWal{zq0z~g&Ar~Y?rMBua@HaGqKJ(E#LC9L3e z856wdM=9~@A7>C8u4V>asoVo>r>S1gU5p+mnn>GkLFRTx+mW5dR8~8LZh7w6`QI>Q z1TH*|{koh&w#-*GNouYg47RI@(uI|asO8U>UYOK=(r-*!(eX*&oPWD+E*jNqsNYT| zvi47LFQy5$;4@}68()5OJDZqntmJQT+{fGHYcT1FLJkt@9_#;;ZMoVh9BNR05BkF1 z=%Sm^d_0u#^Ed(;>O8)S05N5JL>us&)STIDTu6|po5OHuY7C7W>q|Incq0OT9H%}_ z*ph4{K%+O-Unj`(u>I>M1|-`HH!d1_^~OGaF_oCWf9+r&rvA;HXV%Pq51ZZ70A#&3 z|EzrZj2W9dF5@s0$<5`gU9!(1OuIkU*xjSkV&O!QlLD_Lr@PeYy<)N^$?bYP`l{l` zcx(Jw88ezq_exyKcMTDQH08w*D-S(OBIcwOPBFA_fHA9=9>A6ttrYwlSj>jvM zRYC})J0p~5A5gv52&x3V!WSEt)#wZ}IDxrN9tx=C&AGknkwbX1m0W>bdXl&e=_&G= z|4a_-na3d=fBkKGn$|hHOqNbb2Cn;PHDzbADti2zf1Ie@ zY`6_henVRLYznJg8lwcpc+9OLXgOfseCRwq!BimM5q0Pq*i0W_TyF_3$>7X2Cyn4| z8-X$jI4I`zHU|oguwVQL$05(*!!%6Pbh-hOh%ioELWoxDVk@&xCauq%C1O4LR8!2d z$!lZ;VtQ(Y#;h5`DkeOI2@?f<0Bi7hcxa0Wc=~ze_7b${`A9`l_9-#0-z!&7p9qpY zU54cqDBr&rrmWkJ4Z-#_y>_Ma|HFMM;Huod`G@SPPt>*|gRFhn0%X#vd3FCI$$_F3 zPpFpSjxWAY2^((a-ELFqyyBf)iC8r6p7jFW)b7ubO}CFn zbPa_m&S~z3W%Q<0T-?M`rqKpb_J&cg+_8?kQvzu+P*<7iT)N}ma*h!;qo=`;|#*)FS$ddT-~y7(_L=#5kLUx&4z}A{EF!4&i?Su z?Qc%<#cP?U&zhI;i>}1fehi|3)_mwu z`)=7{8~HN%J=-OSWT54jDY%*F(3yw!^NG2U_-2_cDj+J&AA7En$4MEL$K{kM6{mr6 z)j~D+#07<@GxTi3y(_IDcV@P^&UN9_U?ZdKhK{dgwq{g^_9$z)q#IJWZ}59R9tp{> z@glpT6Sh$4>lD_Vde@5d#;AXI>NShX<+m(UQRifPVVV^i*!?HeQ}AAn@rz%dSgMrm zF@n~hOQZg1`Bmh#Anl2i#Z5w)`M66tneG(937)mTe-I59_nv_M17F8W#c7(}P%VjI zABNYOpg6riZ_|>^n0DF5^AfpgtKj~uk3AY!21JI!+E4EDWJf|f2)PP| z$8sV+;~j&2{Pxq0F8jxZK4()Aom^hJE}D;kIOM0GhwkN}yGZ9HCf_ERXbs(u47~xV zd_Iqb{dzuwB6@v|FbG*oQg*r^KjMDlLrTfnFzG#$x_|R zg4Q7Y>>A1_rx-At=>47qdf6n*pD3y-sBx~j-Vmdr0t_~v^6W%cc|3a+EY=x>wl~9S zknZA=2*jE<11;ZP>XN~hJ{Ug1!rT*u0YCPDnV=sp2`||-c;r$B9(1?I>t@HTHXh+m zAiIxjLMGFfcYEX0e|D#*rZ*O9frZb*q;u68q2?1hDt*kbZq_OJM|&TWx@uB~jC%w; z_P?9xBo~N8m-w_h3dbww`h-+Nt?=h1J83w$VM*&%vxTf>>2AKqk zd6(8h-4x^W*R6Azrfkc>%QxgQ10XSPaNJ^*L+SOx=UBF z&*MSVadPM-ICfaCgdx3yO{vmHf;FOLyZm}k7Rko~b(QvC2j?wFb8pPAZ+O2o=6RD;A|HYujABy1T2ubH%SAw)dU3p0&`ssmThg7BAgmh#>5b*{q#kq#yu?f0 zYS|>mHi^{(gN}u4EmOZLBgZkw4W za2PE_VdYQqMC#GUwP$`D-f!txqLDh}`qxlbz1?d0nJ_&zWQ~l~J^U=q40{2^?&nDV zf~w%!pD>FBDZ6H6QRE>B#0M*574zRmznr z(7NcqgOXGjt-U!;iD6YOp9c#5F=v(z^`;gaIx1^kd@*lF(F|13eXP?y6`fuTXH|-& zr{!Kyp$c4iqQn@j03foWws z|D(s=@jziI0Sj+j)OwRKL?JL%_8-5bG$^d8aw!|M>;Uv~J#R2XAIm+}?Zbzk6Iy*j?hdu}f zZuora_M&?)a$ArGkMJa|7URtXlW^zHJf5VSTtL%`Su=h(d@Mx<64JNafREZIGo3cx z8L?X9fh>{_P>pJeDx^M>dbZ03z}I{+n2m&dv`L-n$o#j5SeavVG08rA^`GmC5Cb>Y zzYcv1CNYgX+b*#d7_Oq9W3WE@ZIoxL93~Tt{Pq#?TGJ&&1o9L8Vnasg0d0}Mn3I!` zOZ6d`s5O(kJB#FC8!n92YT)i~bpcEW3q7=FN})iaoh-w7D}^hSZ`Eqtt0)x`D1cOTGcw z9$)UiR+GyG?kQJdo>#kW7WF{t@^eGE;*)#F&48AIxXRj#h<=Ef(lgUXpO1KLr}@3 zWu|%BngMMu-`r%wN5|7=p$Sfdl?!3a%p=ZwXxVp_6i!E${X2q5zsY1yhxjqu{O~a| zxPj82St2_3@0QC0Fu9}@Ioi%}MBnj9M*y3-VsIp55 zSeQZ&VO(xVI>wUo4ii%d7FLB)l56;y*av3b&U?aYTMf2Udnx-Vuz=4e{HrfJ5kcj;{OwT)^u42RlJqzlGQQ9g2 z&p^PHUJ`AxJe1%UXwnR!*Ok(1zI+)as=#+i*tihpzKcociTvZ+)nnc01eIBF7&E*ylX7oUl?-7}eo7RMsE&wyqmvAOy4}Y?s)*b1sed zr(<`l=?8D}={ZF9$`5}2C^P_;)k&8x6d8v!7_@?$Xk@U^vC zgoun7BmT&@*&4Tfot@tI=1(_A3YxIcB9%1pJ|#tL*5T$=%7k|~5+JkyHsSrNpX|qn zsmlcE)=Xo)rdafWcR=&CZ`6O~uzrRgANGicC*-Mv{r`_H{|0uXR((t`y?eE>TYjup z+Eh-G_-5tD1#?DtiF!Rk{~@!=S;@C{cx*M%Y^-Uz*^nd@7OIak$J2j+ zN@=0*=LkKUfreEd7<8NDycJo64ETlh$l~GDARCK|sRiPZZ@jv{g@O}9HI!IV3E*L- zr}0f7>b+?l96>2|1c_)Qp^?UvJcp#Qq5_9=WrhFc8?KmC{!`u+uEd+z= zAlQm%N+CIdu~+ecFMa|Tnq`F3*Q1D_{glc1C6JRCS99p7k3{rUpl!Y6<$$(tAxyqv zIU`$g@aMZjuQ1;7Qtek?upwsmZPHnN+{Am#B?%zgL5RL5guzDqBQ4DV> z*&!oy?_Bqr44;MnQyDz+{>k3HTW~}A4e$6U=y*t`QUk;>BXu29yXyDso2#htA%;YF z61q1Vxg+1Psp`LC6x8$w|B67Q61oygh%O(rz}>i|Lp=9J z;M|rjyU($z{v$8d^QcLsEs5lcA7{#+BKO()R+@_3+G`2DE9i87oPO)hQl~GODY5fT zF=XvK3ABCQ=6U8u*^P8-ZbY*`(-w=pt314#H$PhghlZkF_9a-ko^)N|LJ9N#$A zqY9NK$cpZ#q-uK~rFNb&lm|}Gvf9~+PQKLbTvridsCez&aw27R#L5+qq8YVGUDy+8 zlVoMxd6Ll>mSfQufUeZ7xFs6DMe_|^q);$o6ZlDQ{x#!S?_kEo*e7>bh%%ip{FCuj z_3~kdn5&wfxsEeMnzH;6Qc#EkJSr+Ul*G@m%@41BBrKSQ6utW|F)r;X zb1j8HAE!`Sm?IzoJ4a+bMOM4Pl6Vt^BnXgFH_0y?6fhqb=^)tvv`p;s(O(K&1x908 zsl`-CyC|2L(y}!C}BcIdG#ODg3BicBAdQX|Td}ltxik6-2 z-Du!GR%Z2r>D&iMN602i`#yeCPUG%QLeR0B&c8}&%5RD!3T23^t*@%2hyR8KFd;k1 z*ND*<--BK`Eufa!4?TkGVyIU=v}Q$bIK2*vErb9_g77B}on7B4# zBqR|+q*$3ptx8`+gDwdIIL{j&yb~=HFRlgp$19S#m2SKQ1O>AJet7N1J@S#Y=;G_& zis-&lv1_z{tv^0J4=4D`!}ZqFH}qB{_mQi;uljh1j!mqZn+MY#y`Y2Ni_xFqP!Gui zq1NYp$tfshCCFI$Fn9Ln>aht2f|Gu=AM7A6PomS92oSbU$Ca69MV9Q_+ z)6qrHFH{uMuAb4>2J1kU+WvW_TINnwJKYbgE*MkaOcDhc@W)Qq4>(_MV;UO=@HU;{ zRSTDsrNi-g#sl9KsUd=`UdjCV4x7StR}W9hTve;X>8agn#pFEQCj6^ScKhwoCoPvR z!fpqi9E&K#`wIk>+)v!fEpE1gCkwB`6M()*@A1F&sD9H`yDfWi7Y7rYF8nYC+4@t1 z6RVF-7sT#oYojUI-kuasL6^F~WzWat>#p2zc)kIMZ0x3X8J6!1sGV@RE1FTa%VISa z*0ajZvRi&BP_<&!DL@mxJ7eVmxuT=PFZ;RL57evG@5U-2)_FsCK%PP+P6`Kl(ri zwEK;y!eq_GsXCig9A)lqlZ!Htn6K^a1C}cp;ymj$E=)EE&wqfYEM~D_`ViT^rKP2` zH^@E0-l6CKunooR!!Zu)EgFH<*dZ$jYi^4Z z$Q0&wzbgS>3Z42Bl2(ZfR=}VzpUQQU5O0??qtOT5XpPQvn-Ch#E9EZ6eT`o~R2HKS zDgopG2QFR}1D^M6MM9_8SWhA)T+ddbnG9Xco))h0*6G+TBc+aU?0-(#6IlwLp_xYp zw+!QfU&*@eq=L#t+T_l&bRH@7xz~V3>((CYnbO&V*+)+UspFk^K_Cx%y^dYX!-Q^b zYjR}hht)5r4p#98Yido|*Gu6CD$evevHsFP$fx7SnH-glqMgnWWv6PW{f-+cGgQ@6u!m7-O$4 zxSn`#7xW*1sg1v0BC-kB09nuI!l3{+70Gh7^vj$)l*L2sYN2bC9PnC3zM6GIh^%6) z)9C}3gzrW`&McSH&YX6Be{j8p63MZ~+3+*n?_?)W8P(!v48NSoS|_(z3NJu*Ppo9{ zOpO!Igs$Aa*HY;946$FDa^(t(30R*@j)Z<&yw+vwgZU}CBIl;j*qVL;Os6abKa8Bk zY_Va7*eyVewch5J!$FQqQ+C{il~xm}cQ&(Q@cBaoQ)Ujv>m^lljs$}8t>N|F4V%QB z-eY7FjXs05?@!1_nYs%ZUIM zP{eP>5F1<+XX--?{z17tiGWZpU7FCddFW+B;}z;!&UL;+3sdq%{(Rb- zWGp(_++L2PK3((8%!W0rKXYWzRiv@yOAMNqRD~P{!#X)ZVRh{oScE?Vrl~SEs;8bH z$Q2WL>Wr6Utb!<2+t+jDAk^IGOsVRrneCh+s@-NJ(oA;{H>1W|PcxCMYMVQ*dF6Rf zx8sBckf2YJd+u(nofg3cM#b*=LHvTa@aDKW5zcn>KlT&ByL*hI?k3hm_oYHPLTgdU12? zTh8J%h3DLP&&s7Z>Z;c>XtiFZ+{rd?%~|qmzt_VkZ}KIZfkYz}LETyzXsM$oNXG){ z@o=_*OpG?eY9cm%c5Wu>@2~AF&EZ6+sQ%mFcKuK%E?=$=lK8VXLbL9|^O+B;PrOt9 zs#!wcD5AN=g`WZ+K>oRvI3otu>B!S^xUXreu0TJ#P@K)7PRJc7-H0;T-c#71L|6^W z53^P?gm*y_|aNT;ImlK8ZH^rUOy{;J$DqFP9bJcdOP zeZ90gI|M-2w!s1cFU<7*Fh=pdC{P0rrE@!2Rly2of3M~n7)v=XQS%&~{#s8;zAxM= zilt^q1U_GCbCCf1NcKr}7mH0->f9LgS^qp~XK#1%^?WRZl~ygmWcANgYvYqk6O55w z^~>vhtL^s_%57!Goh}r`)?x;5*Lfx;FW8KJJsLp%UWHLV+I)411bBQrx;1}H&aIKAPO&#ORrqNHkgI%yM;%ux&_*9ZTz$7M;?Fb zwbr`or&*i9ZB4{2pts+xZrc4TNFuZyKzPyyHe2e*{$hyGdwl*w^Z_1)*+XPf;;~iu ziat*Jb)TsXo1lQ}3lPAfQ!M^HnRfy)FBVE;9K84TYxjBE<=l(}4&{L&rewn2JX zHoQpu{BT~3_TaEV!Iy{UhC%`kYQg$;gW&7K#MZV^nAr8{xUDC)v)fdzc|mj=t&-Ij zUc&(3$}kvNC{4y!$RV%md|XV#?UqCqM43IdRe%CTom>;c@m_~k9}3unx=*bWnH z*O%I``E4hiOO~N}w+929M(^+83ga8O@EwpZr!(|8zfEJ$a5_**4||j=DS701T(SRI zLTxPahu)OBH4}P&eT%iK&K$E?$xNY^5P)YB=~QvQXyY)!{MP|K=bq%vHNAZD%6^%! zEwPCWxA_`;{QFT*Hf}&2A11zJSX&&rYm#8_iK@O!EY*f> zFCK2;vKpihgFqf4jtD8;NPN!7Ovje*+Fh;eyNroh)L`_Nc;Ft~ZQ&QJ>>8dtIeAuA z#q=}!VAa@=WbQTxzd~&{7BQAMJZ;qA?(3#1x#AYw?yPE=22o6%tui7Z+&L51IWCXz zI*1MZn=Ce>I6K+MN`Ik1U896s)#c;=Rs3Qn_;G@&YxowQNJnkH_sskIpW?F_%kD(L z3N)F~-WV9tN;oCIa#C{;@`yy_@+I&3u0*0;=;owLWtGfYKse<_=LL~%d)&dnxP6awYW_KVj0@`*+pjmNoLEntO&t zFY(Jhj+1}pzR2y@ha2t|%RXy>r`&?x7|Mt@V@|D~l%DG3l-6fpa)th?I*O!avJ)2N z5e6|ct~(f!K2V{QKDPdAtg5I`n-GUaebp1Bf1_Xiy9&T*6ctUTLD93d9Sn*j7KejG zScXHKruzp6jR4ra;l_Wh>#ava3otbqcbcUFz2@?l%ZbAajAWoan^Xvi`b!Nwt5RW* zyt@a%8+)xU0JqhUztP-4F2_z4-3$!^(J5y6igi!LVZ*2U8JY>onyP30;KA#3Dz;0n07NoshyU*Vm;U^Xo*um$R z%uj{G^t#JtkrYyJp}48l%Ci!u7=UER4qs@QWxIBr%i zU>oZ;19AJ}a3!=)vkm)san`;!zij=EN3L9Al>!E9t2QiWT=hqbW^!3iVtPmHkCtC< zMVN{$$I8Z1AIeYdsdBwy+R?%S#{8!W6Um1$oHCCd2tPDgUw&RQ1;^hq=Y>u*!w19o)Rd^#5O!lQm<8-@dK(&-ev((U*R9`XT!GUJ##ca~f z;oa<$N-^2rS5}AK*t)(~L>Tp{aECj|pi{%Xm9ENRx)A5W`C}j8MDIYFrWzsrOv&li zV+|>pdQI{D2ho#?*<*dfKBgGD4T^mxWHwaO1o>=axx8)2A0&ZqKc}5Mc#q zPOU99K%=RkB=<>{;8j(C_d&#eMO{mr~^M|5c(JE({MuofVuvwW7Is&}7r4n)EChy6kl+ zIn6uZ;*-?bn0{_std_3!;!STmpj2+=X0^GaF!=Tw-p-p&8vW!ll!SCKq97sQ!Q*wXTBz3OMH19J@T>zo^PG>cAvE}v2H*y8`*<%liQ z*KU<`Kw=@V)(MB|DSq}c!ZJ7n5r0+D8aF4^ZGRiBenMsh*Db(4ntt7yD$qDvDN@`H zgz^y=ET3A7??LEr|J*w=?EqS8HE$f6x=Zqw_p{?p9-RMp^L6u zC*08Bi98g_Gw`VVzRTUu_btZgKPMj4^bK`9I%^;4?jI~@=>ol)oLgo211lAYb#jG>jvF7xPgZM4k`bxcK&D!-v@bkoh*o_}=^|LW z(+6JD4ZAd5U$TRjx>2SWZIQ7*UFCYd2c-y|OMg&wPv$)h4xOYkpJpEsL2{>|4@u38 z!l5x{&Z|CzIk>0hwrlul7_YY?pHNFU@e%cEwsNlh`THlU+xed*^UxNBtLLxo&O+OECfVtwah;m{nB+xB>7Ws!N)mp5*S%NNq>VcP`RF z&+npWi6Hl_OwRTeJJ#)NF<*F9>^uGJ&oKl!lYILS1P3=@zJ4H9erc+creuRRsGV+g8nT@lj7OX}VNE7|y`U4s%e@J+j1)}ozCU+ZKyE~7qf{6z zv;>b9@S^xTqykX7YS3}mRQT1{C!?`sQ0h5baPaMZIJiHSE_2gB^;=kNi_k~btB7tIgV(55|o{wDKr?m#@=hHi7J z7~+Hf+IECetk}Uy?Q#YgNtXr6(uO)3^5X4Nb^prj{j4>a`u40uAKn>1olI|;Glx`i zD{%p9z>iTBs(ftMq6P?-7xy69uo!VMadc6~0F#3W>n0=h)N)_;_`NN(yV96rVn|+l znm*D)N!b4Kt!#|v#^r?VvTpcznV_XEd4!dqw^P|e^G%fz_^nAji*{8zj72o6?D=aU z^+cZ54I34)hks&ZgnRj)dUo043YcIP?}3&MU>-{LV~>`LlI|Ii19qr+3S(xUqN!n%*xhbfYz!K{nhh}^jMZWf$aN@r zjj#Ao(nHw{(Bu4k-P_4VAl5ALX&cfTG|-ouRPApx_G`$d7`M4{ufvNh%7zY-m6}Ad z6ZYQAOlP(De$rB0>~$52MA(wJQY_}X03@~86PKt!Dlipq>=cpTm;Ve@(H1YrY|BPihbE z4d8j@kaD9d_G7v~+B81L4%1BYm`wdFS)c^nikV)E?wJsRzMCCTQO3S&Rc{=_vYQ})O8kVjv4o(~ zB1J>GfQ025{+;Il4Oo?2@MBrvFp%qNeL_!-DJS7mE^>)|or!B@)*nVdNAL{9-e%z#`C07h9eH<~7)1{(7jF>d3_V+Tok1>moAY?$G#VEvNaD zqF<8@t)e2^&m!yQFp-$Z7Nk;2Yv2^8OlQ1AuU@hd-`WHdRcH&7IlD&;3<&K`5$z;oZn*7;f38F zVPo0R9mlP*{`%g^=e(Ec4mX>hIu{tDMlgNOsEIbIV?gAd#DR2u#GN!PpX@9(Xnv|$#)`u`{N zDcc`|2T+fnUO^qyikXU|`=`i2P7D&VO54J3-B`J3Cda$WdTfSKk7hYD&ATx_OeW9Q z!LqYS1TXSDYm`uVFzNT~GXd|q!}JJyHSJ+2tugh4kzqDV&^MEv-e8mp?XHBfOpvjX z$5Zdqilhy3K6a;40Z_#n+OB^V?SWKjEh8QE0$`pGr7CR7_UbvcCeY}Z>+!U)(7Wl zKx)A!lDnxLKQZ;um%iF!3|?khext)nTtFe~ zkb?GhBFpy$;@T45j?gR%F@8;lYF}jYN&V+!V zsK7ns3xRstV@H4@Wz3|icC_ia>Xm4!E{qW(^k237Lc!w-*3Z6njjg?;uypOa zx{oDC0+n%eNA$WxLYM0R^y1vXkHY3hTsCzJSfMizOvb*N8<3|!X99+=mP zo2)~3%)(U)H1{?tR5;5*R+%|Hr)O;e1y%suUXDnZh!a0W3D4xdDli+}(pPrT53n)T zsKTX%qEaNWtvFts56;YdY^0r`qArMD$afl;S$Hci$8OfX*qls5Ur!pixIQON92)9m zo-oYTHEDm=t`P_44%$hNGE2}8$+ESdr^!`CfF=}li^#%FKb4lKaZSo&{p{{U{&v5{ zUoyVFjlPJ5>W8m_s@v|8kl(KE=yT^3{oIhyC(N|<7c!0?+1*`lK;#{v2%Ly(v@%X> z92+YLkR))sPjpA>`o5T&t=YZbU!70?+DA&NGk)#3LcG@ga!g)NG#=tKXQ}y>0T}>+ zvDH|2r}f}G2qhQz6QI+(5%vCw-cz-=Nm@thBDhkmm2f5_qyO`DD|1CU}_{P%2b|Mo7 zBxj@RVM8ieH^I1($omX`C8118hR1TuPX=i1CRbj{W@ou&!hDmdY-3+n|K<} z`U1&%pN{k_nP@O*f$+M%l+ zku;>xQw6l(-JUN3?iqiJj!q>HD4bPJlNKny+BU@kdKe2C zvk_+GqXIqSr-Ro~k~RAuH-x*?5?$I0*RR4G459abRHC(fSOvRL_8d`5#lN6%MIzLWJ8K{%?#!L2N>e6L9zn$w z9VUEs$4PgQxC*$%MWR(^ZKnhF#|c$)OV~N{ubWit;MKP=c!y<`O5-oHK54LQ zRvebmlu)M)oD3lWgH=eJ3e> z2E$!uoR%}GUhkb_>qV5i(gc8yiNM$aP;eWE3Ze*rmlHtAUPv3;%xEiZgZJZ6QM)AY zp~l$zLy$)fGk4;sP6A1TYTq-aQ@Gq5xA+2xQy?5$)30HLc!l0q9aAGk3PU(ZCMp}n^NKZbx z)0P)cFd_++0GK@cb-~W5P(o$`;6LT=CoMIENr)vN=eE3t;+@~1rY%i)mRxno}K2q-} z{mk^cT=rV&Y^+8rj(!4h6`O=6@LRDTxl@w$;KGaWm+Ep7jbtOA>#l0!6`zN^a1V-O z+Lt0accqg&S*OaqLucKKAGRduSz-@$R5hTio!9kW&)-dO3nlB~N>K7-fwMih-wEWt zaqF0Ymb`U}RnZT24y`tEx%yrwqcD zKhAic8tM$YYrINcX7-)IQ%38=&4cTdzTQtv?L9(F{y#gXXAz@qRrH#g3xa%s`l;yk z=%d>6LOVrke*RDRPsLHxD`(ooM1^ghf4a7ZKDH~32?=q*;3b6S);h`h7A^0Uy72Go zq7Xem@+s2U>**DF{Pd<Y7@)ue9>*v1k*}GJLYz07zcprcj z_+f>pnu{m7fP1RsV&;@Oe#(xW@D!_P%rQwWjA=C&jYik)qZtK|-q59ZtTYjdvqh&PRym;|89OCV%=aIifDjC>N_4 zNKU=H@Koka3?&vl1E_Jnh(CUNwnif-CJ{{_ck&e!3p|P4S~>cTsnb?CEcz=T*T|Mj zUAoHDc@Iu(+Px5repR~HlF#xs8%J@|rjXfXw2HA@R-@*VCp(?_b`OoM(g*B`-NP60 zy|^Tbvpo!F$aSk*T*ihvxo_Jy__Dh_tGYDIxlxSc#bSP5h9ru7eiMd;pACbKyY_rn z3q(#=*nO^k_Ll|7g&vdHmRx=W4_}3L%XA-;AD2cGDFeF^)t24A%!H%`scR`lLG}im zgK}2i52Z8xaa5y_9(PnY*#kWF9?7KBF=UVN_m_#1VJ1+gsOzNFH_VN;YbL@@L;-hZ zm?^PvV)@IzDOaH}ZDHCwD1WZpf%BQI;6)CXHS*8=o23I3dSmdoI{(`eO9#Yz zXR>VMqFsv2Q|r{p6JGv#7Ol)8Pop@Tp?R`)Ze!P6E%c4G3;!;O^{x25>H zfM<#3pyM4FDsI_iHL1KY(|S)hOX_)le6RvGSdJ%#mi-8z`mbTiqwX_%ML1nOJqKrJ z3}OG3_Ly`a0=H>qIl=<;7^B4D>hc~4kc$F{e9Ds3$o=HiF?I$+lJ`vjt#J85gA;w)LkAfD>vD$P(vEb*W$XATytsH}gP6yXhsOskSuX=PdB{@hFhx%ov(yuEhI_ttc~**9 zpT4w_1r5y2dZqu^+-zqwxi?!u0T{n^u{H>wefY=h2k3*7A9U5y?oJNy_PQcxGj~*> zpVO*a4odRE1Y5(ekh3p_y(i&~4XilJfzsDh7*-pF?FMQgK5L1eYd2gnx%iqrN18Ls zwx~t|ra$7ypBta8yHx04pEZc{ka>rxzfXivNM`;BmEmJceFY}5mFg*pg_3@Dy2EaB z*9`gfbbV1Ok?eP)8uJ94D{ZHVD9ohiAEA#V0Az2k@j^%O$`~Hx3b&4*!!vx!u+4g3 z25s70jzJ%#{eB#P!cPxtp0T~97yc-MzxXa)qJnu7=$g@|7(zn`fus?q5Y`6mHy8L; z5&q{)blV%NcS1&&$FjTFu9rRnv7;-4JH^Vm!z_2yQ8EM z6JWn>#k&M!?veI_|{7zu;=}AJ4!o- zGpOD!T_qp1&s4wW^EaE&>OEG0D1syA@eSMv!M z5Zg^_3qXGh3G*eZE`32)T@aUSos#aK#*m}0R-P9y8QqoJf1GLcgVKLFejm@~U9xlI zET5j*8-?HysB`^k^cb~uC}}VXKC0+qQ!NVq)IDXj;HxU2;FGr-d=$zxZuRp@yF(8OzL#6`<_p*7=pWY*_9aftx>KWp;HG4c{%1vy5)UHzw-bDW%!?0> ztnrA<{SkOROL>T$34&3Hwtrh;;#hyfRyBV!wQgX2#O z5*f2GGkYO5H2@kZAL#ExN44-s`F_Ki91JK$gLJr$e>qPViitr}n5%kAlNY{D9+45o zq^ZvS3!@_I&gJT9!h6DTBUlCgHFHVP$ltzq$(G^S+5C9bG+~X7x^0hPZwkj$Pa^bVl#E#AupBsVfOzLtw3QBZbm5Q zA5h)9cJ{MmDF}GZDsBYu*j0Zv{3w6m9nqpB7QV|zq81<8IS5(Xmr8~2Y{77g0mZsK zN}(6upyD{A^C#6fhk7UAde-kT9PW2?)Drd^*!z22;4%_P6~YHh2g;Alz;vbA0Lh0E=?+sF(4DRM#=J(e1Y z`=P~m$UwzBSdA*9FkWig3|^@do5u*^9(%`tr@%N&(K5rNypZ8p2+J6JX@v za`09&X5hHTn_|;eMIk)wYAO$6OKPA@100_CFslZJ|&>9&%&9aIQ~hLt|C%@+OZ@!bDY68YqRm9U8TtiwBvrs#y{b zA9FEd3kpTeP^R3O3KrQ_^VUNt1b_YpAWp5?VC%f9ryalWl9m@PckwkWp2}AXWD$4! z#4KLTw4{16KV0FNNzK9GMnA_*)vNOcxaWJkhC9kJ{GyCwqR%@6o9#zxWw0j}S)uXE z(s`z`=2vRkQ%g@gUeg|UY@O5V2Z_;5ZQms5gM{PYB&4OU*4#J3MP8em<7}4dg8M?z z`IG$s*3EHL_Mc!XX}_t8iFnyX*RK&S!?Hcui+(dv#;&fTD@$in(?NpWfq^9M8Z4Iw z!=s6F=BmK!m=*{65cHGz0g#1T#t&|y#_o4#BzmEQ^Fmc_eo2`Oc)jTuPs!5(hA7g9Y zhW!t&%Z=0$*^j-NV|*8Kg=Jk1R5xcI_YgtBL7FOK2$+5kjm7#@vc7YqPI(qWWd-Qe zd+X{&zO5=9UJ;{_)!cC_+uZfm=Nc7lHh)G>9~SnBKeC(TI8EAR_~iBMJj{HYl}+4L$P|KFfS+KjMmjVyLDrma#g{!-FO5NLjY}mb zVA8inBe4{F8I(D>a546m7fpvaTQZ@wb@PONk7Los??ONU?u!!?liQFos*`F16>qfo{-< zHW{a<*>J9tr1%hb7Z5N-6jeaUa1r{ket||- z#-Qj4%*9q`8sovp9~)h>!dc16baz?6ZjScxpXD&wb2^G4Zc1aWpj>&mPfL|UXgd_) zN|C*WP94trhJ9rp3T&1-`aw1#yv>!}U0Lx>gR|o&;i4VN1}4roph^CKpaY%W=V%17 zZXUCS;b^(S+>?ma$WtAa1d!8X@mm2`@cf^swa}JgwOoI%c;{jWAM;FUzdU3M?Fq5b zq`neI8jYmraKIC+X8pR0%4K3Jl=(uVRNo@5ju!c<-a+D9dyLNJE6v(oW&hb>!mudA z(+|6W0le}(3|%FD2e0KfwXFc#lzN_h=I-IgLRUj1=SOc2qk;M`J)a@1Ic&y@H>C5y zVVb%o{G*!5i*Yf)b|ClKnSt=0oS4j}__n?mZ~sS@4f$C$I$JbrEZuezwYs+7*uKE} zQ2Vf1F^th+vY7bKq)%J1#=241)oEX>op8wBhesmO%igMCfR9u%N4IFgF{`1YuVF7J z+-A2SK;16E;CqB@r#JoqFI7|ZedM@89Wr>6z{u?DzrGcr!dwWE@S6vBbVje>v4)E;BzWraGyLMp$v%n@y==bQ+z<3){WEtLZW=&iWi%;b;C(6|OHxL6_AJ%W!FPKQp{dzfefCD2Q;ctdeIhJ`rn` z%0&U!|EQHs!73i%eSAx2j6dV_UvxhcJkxugN;u&#NdZYm!%)>o`vaC6*-^~7`^Vb_ zzO+d@-!5PI285%NWAJnf5OHDQsz+=~>eBHWVtI$E$uik3XFqR5Z7%U5z*NN30)mI} z(n6g>tLk&^ES7y1QhyihCU^OL0z_0%d-~h9-4kQA?NU4+dc^C0c>=4utdfRiC-YZT z*+q|r$;E9}s(WdDs*X=5s*2t;_=Fsnz9ry|GG=J@wN~v_%7sDWmq_eGH+bBxwI)<)t}H)qy4hj69n`28N2#k$ntarW4Z42po`5U?V*^AU z`MOnRycX_=qXJapJ#2<_aL~z`*~Z8Dv>5Vo@D-|$>9(SqM;Wa(+Exg;{$9>wY}i8W z?Y|AjDv!;Duy*NPwT4+;o@c(i`$z&x3yzJ6o?)p@xuN~jkQqZ9qcjA9*xK?Mi-%2<{|iXsUI5FeIA}&lB*C<~=4pOi^USF@6o6 zUHD7to+?@>KlSn~6q2MY<#SUo6lo7(glYcTVJw_E@w{qwSiZ#8}Wa4Ii1w$10pI4j8hYP-N~sY+u<*v z_NMY^{KKo{dPm$Iv~xN(g@Xx$6z{zn6T<2l50`$^h5H^IwU~=N8a#q9;Ur@zB=2Eb zDwYdXBrs(W_oS}XoiLhJU;Jnt5wtqfVFm42&o+D?$Hrho<@d(7j3NO5wLD*ImAyXd zch-{_PxlWi#@N&t&x5&N12oq5O**zG@peXlPJ(Uy5^;@Y->t9?sweY&VllDDbTXWA zx{L-}w&j2q2FFDDaT+ByG51B{k{@uHCF&jTEQD&R@B8lZttUA-QJ5r3lk|9TaD%5g zinOxDi~^M2bs723<73*K%hqq(JRggHNTBWMpK%jtXxq?z^G&N)bGDW6{Rg}piAuoY zQvp);_g0x3vG;UKu2{%ba^8X{UhT1pZ_|}|bUw>Jugp~TUJ2fsZRKG}lE+Kx6JLt;kdocL!D4%58N21+oHPia z;6gJ^swB#O;YzQ#LTOS@>;9guz}q41Djb6tJH|Y!BY#CxjjD2=$XO^-cD2yHwXq8vEcrq%c_1Sv@EmY{Bja179#8rO;?c^R?b+*U=G&eq z5QX@SArq;tvqJ@oVowO=;A5+LylBv!oktj7TaX9FZgH32ukD+s8;&6u)U=yqdJcrnkM1n)7mthK z;SreCzqo}6HD*a6EhS6^{WL$Ys}tF~ewsUI`{+q%=@Rorv502TbJ~$EqMCu}zc_~T zt#-bgHD70GRX_5D1l=O5bz%tNQI1N)G(ikHX_lLrBJ<~`lL1LDZ9 ziM(Ie-~4(9+~gg%5AYwbKM@9;9{=+H#+sX(JNX{^0WUy&2J`qNupRT6L6Q)ImjCJX z+QZIYzw1{}NYLh987}B*rRj0IY%xk;^%|&XJ58Tltv)0mX{2HeW~+l!$nLcc_fy2-ck6JXj@xCtSguURc&#%jm($Vtg|MlCqz$?&KB*{WHJCNt}8UG9}<@Odsf_Wl2FbdIi%y!#B}OsPCMa5P*HyFJtI zebw8j`!Pp}JC@#ethQ0_G+>qF+Z<6SpTuh|^MAcew{KM{z%d(i1teR;cOuT`X%s(S z+nh>n%#&k}S$?kE5TEwiAlLbe1Ig4othkV_U?f2uJ90t7&+Em6>WJTB!P(N(AYO z2c{C6ZKhg1=Y))Yf_hYwWgPS^WIEhZNci0y!P6uzm$*p(CiD?~k%z4whh9y&X-)ox zSzT#%yiz+;Nxqst8H$BYuze6R!W|W+(=oi_1&F;P%A8*>n{5$+(xTyHu_*i8t~4TYa? zgWI8`?&D`yI~TO`ke0Eim6#0IZ1+^jrw`Mmp2$wxk*ghdf0Vt`-`_~&(EJT-WqqC%;sHfJ7!%fwo{{~ z)AjNl@%u=0&;2l3QEfOBOd7ZDGTvF|pnRpNjQMw{ zjxx=q_tbuK1?LgG-uRiPqUitnb??~;NqkAJx0b8n6N)H#$Hc9HPMx0ZJYZkqpej{! z=Wpkrgy;`H6S8>)<$rfXay>{1Cn_omlTXGfpBwr07Ewk)!KKO*nJD_yhU<%4J4qB> zMmyl`qGLOP4us2a>1JL*cq29QLJxM~&9?@6?tjgfb9f2B0=910@bC`U07D2K+|HDx zYs=GVel0OXv~g&*pO{Ao5cXm`OT=wULq-f(ZO84@{c-=q)|=NX>M8RspIY=IO2YY( zI(YAVh^C%38s7g{plW(r;B5|6tFWJ!uZ#X`LfgX*ei_b?_(X@ervkgq0s3ad zj*lt+j5T`CRNjJHB1Ziky>s{0>OeIGw~Da6J`C1?{$$oh=b0=1BuSUDFVb%!p3N4B zqM@s5;Xxbt1F>AAO&7*X6naK0bnFfH1f~ia5UME z-`1I)yU+VkXT9&_cJ$C>z8G}sDb!_A0%(rO)(#HrD@{CmI!0EW7`@k{K-dcir1~A9 zR>x4dIIDdLV^U)x*j$e!+EMT2GOTs&*tJmT@bLSL8{*g zvBKLZ;%jJ5Y9976kEF`P9zIfrqvMy)r5o|8B1+c3e}`!jc2MfiVT8q!N0Jg<&E@j+I8te0(mB?@$l_N~Lt?GfPJuEru5gXiQ@g4V~ zimgAV?)bt%b?2zaNx_cUO;>UdyhR=0jo0Y0)A_f1;-L`r@*cZ$EqcJJhr%!G)HR-b zV_@r`cyBD0sp9E@v3);szir|Bx;tBrW9M+4CsC`93(gf6g6hu8G==A<9-oLevGk7c=qVu(7VI|8uKt`Nvcflz>8+X~8#XaPSiUx8w6)!wc|Hr-DrjXnWr*+)_Ep_S?dbni zPoeg0`PD*qijr){XfF|!1^vyL>;7mYZ(=;Of3>@R8K$nI3koQu&+Y4%N>mCXz94&0#Y$S+@ac}lw&26s^NL){>!Zhfd-2+9 z(v-`+I2Ha`%e*eaP|K2ex8elbT5)vo^~R%XP9a>0gKnGbS5I7s(a|%{>x`Is#*O*x zBcG8iCW1FXSwUy-q9qZsGQzb{ao1%gm*hq!FH##M26CddtU}`tcJ&#u2MPt z-_Y0b3<++`n1 ze~(W2ZSvw`=4aG@IBU4Ci3yE<&(H5>QYhlLC)cg{JpgB;!9(vcD?R!~V~GqeUspz? z61m_Q4;bcgEkXJA;Gs>M6!SVnqbce4x-HBh`9wqnR4U$ix!Zv5Y#PYO${J=NdGTLw z0NPmq(;d){O=OXMYlPf8oU3n|b>BPly2}|eT zCE~7kJ#nG;q@!ZSw)q<%HJ8wi(~qdSPS|kYAW-)A1Ecn>AQAUizG~m9{rn#3zjN@o zP-8qx9iLF4(T4x#PN3m+*E#MZO-p(KsN93W>R?H9Dl(W>pB2v)ca5sRNEy?=E6Tl4 zpruUAaf&jY_(bV;EGt^DsP1>hr_hPo8FMQR#~?D>>BJm~bulm_S1PIHXEwU3vw?1QpX$qsMTEZ8&ls=d<;>Ie{Q01$%@*J1WS@mWO{-*QQ77!4aI<7oa z|(GTsi!Drjoc5ZEn89Y0@n%@7UFR{3w#y;3u;0ryK!)PUz>Y1V;U^ zo*C-c>9-S5|ASRWOuO5V8?kdVeZM!Q|G=MO8Y;nX3SIq|dkv5KLIfDxjM-SgoBF8V zjq-}a9Aq}8U}k<^{kJ9j@gJO&MY!Ox^ci@~g#GkOT&xQLM;x6o0=(qk>Wj;yp6+Xv zGllZs>{K77ssY?x;FUnpmv)Zb(JWM=#dwTBFIMME8LK&;jn=~dVX4l}_2qY)e_nl2 z4_DI31G`KPH$@w)pV(q!CpS#L{AbT8WzVu;poPbCn+N?2Vl?z8;u@kKu&#%~UgORy zg?8E_9d#03${a=HBa^8;m+|#~Eg!9&t5d_l41d1v-dBF^(z5Wr?m1}1r@=tc9 zkeKF7mm_jLLZVbL*LR+h;Xj3N(|K{*MaPJYYBZtus1J=7H%m#b?9J{KMgzyEV3M?0 zalt?8lRfY7kzRTNDTl#Ax6nREs)9n6Kq^eEnonNkbhR~}fWwR@ z*>5ytjm@Y=j}o3M9v4VXT8?zD1|ZAn@_nnL!b2!dIhY_U2RFg)CWSUQRt3>TP%LC? zxLF#sWa~C}@Hb;hQFtHqAz5H<(ShHUh;)J``Tl*$_rerMJ}GQ)zOx0v2ker8mUvk( z`1IudeW{%5ZrKCj%kxPM-w$5T4~;ttms$u#)gV&klRt;KV@G!c5K?*pCp8nr@;Um6sNriAQO_w~FW^iq&xPBbE^g_n^48iMJTi*dv*1z+_$h(Lf)%D~Lx8s~Tp zael;PlU=^fkr3nh6k_&B-&FW`7Wnwg12ysZtzVtUSgItd{dywWS9#uJAMfGb0&4Q; zhdNajemCDU&=mHa{Mx~+bu`6)#yZ;p=AXHcFw^jMGQ?kUSGxp4+g@*AOIorJMZ|r$ zP)!DNr=1c`7i$BR^Q9c0ZtF{)n!#>3xbbh&$uZj52-B6{K^Fj9zRw>jR!1YM?`k=Y znI8ovDRz=sPyXW4O1*ASs_J`qWo@owIn-tpFN7h2>z7-F>nKO16vRi>2+h(ZnyqCi z!Ipof)t*?buv$`cOvifkP?=7oPYEto(fRwv7%|2&j7_b!e{>D4hI?xyDUU3~4;4>E z{}}wbta{Cpgq7bj5k6VZ>b=UR>=hM4;LSQXUbn)cqs6VR;3Kiw>k7M#X(&Hq`E7nGM1EI1fEfr(^E!ZNK1cpN^TEL59s_lNtO_aKgC39hux+0(JLvu|gO z&?ikMeC@iDf-b}h~9-;O{FZ*sZylXEf)itu*02F&vqD(PF&bU1yq(G3KZHCnws1HD<^yI!*HSX zE6-y|-)8S@qQ%+`t=YZs>D&_^=vDyAzab729NsTLbD=+zU61%k=j4d{5)x(N-!kMH z7cVIdD;A6|9voITEMiq_ASHe0qZztTE+X%q3)kzbuw`D>G^kP%<|pmf+tKDp`KrE z6V4<&+3Xhtwhwmhi1((FtFZ`Ff95p&dKW7;!#k?^1vByH#X6@}r$%#(2XfL`pOPd^ z@8q>d81j{tq7JEkF%~&}JpB_WYj$x!7_l8EQ|KndxLj+tIh-P!@f{iAM{2z^!5WT{@fi}EQ?lx+;vi71Rd^SX%vj?=M9q=~FkYy%0|Oy+F_>{YDQWDVE?KV=*Jv6zitHXI3?ppOPQrck4DU1$R%sm%L? z#!>{sJJ5^SuR#l~H=6(aUzk5;;PC|$F1We5c}GqphEx!r!z?nta;AJy@|%^6R{+<( zP)I+GfXDW@tF@lpF~`O1S|Ebw@!w(HOqUqwy`4_8nNI8dfSYu?o9XeHPy$N&N%&Xo ziYne=Ki2{ovG3SqP02AKejy=w6-zS#6U?P6x_bDVD|m_a)O=Ol z(dE@h=X0*Z_%%O?c~=~jl0S2?N7QHs%_9gRs2;Das@G!#GN-=#P;cibY8ByY{$N1? zX+rgg_yolZeyfRfxbI=p3;?iN8KQ$eZ4ZocN}l*;e=sfM2|*F&%55`Fm;0jTVwar$ zN5M3le+dW1*)-MOV7LzcRz?r1Rv_WRIL^n7v3I(qH4$Zr9tV49G9WlM*lA;-bkkBa zx#z#Q@8QqNq46{Sx8JVq3+ou7nlhzO$)vuuWn4q%*R?Lq_?&iG0}($`^YD+GLzLEdwCrdNnkRP{ zpNjQzEQ>CDyqv$@bVBco(ARF56m(sK03iVKg%cskBLm~>AOcj#hMGwetLrTV!p+IP zF3cghh7j;u;=X-y8#JngiOCY|Pi9ZT=uI=Mp`=ZR)-Gqa7?OwvMXHV;@v~X&z6*CS zG;V1x41ec!{>{}h5k+-mUzCv(6&{Y^2qA+`QPI%soSevK3;Cu9`L@+_&Jj7k->mjH z>y#rFatdP7;jVGM15{}81@Ok7a9HcUaoS~;H8T9D&hirbtBEoRM)I2m(H=x609U;5 z*`zekQ4SP0twIkpd0Snu1Er&L0u-QC^YwV`q8>Eyj{*34QnKj7X~_f{RPz4swp^X|khd}DrSbaGp!_KE_>v#Y}n zZyEeOlW*@&rVx^7l_IM%-3dlp(pJ;#o0ZOcTj<-Eg8YwjlPTqKMMOlJocAN@_Nu(; z&;o>5o%gs*sW*dOOw5%X7ie1)^}FA=>9U`1-R*(AZ6#|K#Co^~07kH?+QScXa+4M0 z2u|Ftm2`uhCailTj}K-)WfB$sfQfGz-~Zd)x8G2oi|elT&Y%Z>rUO$O0IUG2h=jh8 z*pJmz;>!}FiixetHCn1@OQ5FKm`Ab-ZEu%rv2IOrZW}i7m#L$-M`Jm)J~)4@ISFb_U90 z{m$mMvHUY#=kuz|k3YHTV)V^@lJ)49bGlLz7d_%WHMGxS`y3HlXMrVqCJjs{N`F1(v{g*M}ciY+YkyssjSJ2>V`n3GgtRsH3fExI+I4=r^4Had(DW?y(J4mBhnPu`Oez_(91*YMO?=BOMb9GvLN2=&Eo@g@b;p~Ik z=pJpl`8ync=}-7;=0c6buFjp^1EHufK4Ik+<4HSw;`LLBzJHR{-@oV;X<8(%jRx=4 zxNDjI7Q@(0Ahu?x*+F#PJ$KRiJ*|X0fhfzww*9l(WR=Bz1fwk|b0}54ZpYUIPF8ef zN(vS{0}h(c@Z$8kzgVwAcmqetLFMG5R)r{Jj^)b=O#=)8UbobWlXu6*o18zq_Sc7q zT%tvU4{0!6Q17n_k9LXpPTHjQ-{t84bgBe6eRMDY8uJBNa4BA0Bb$BS0$NmfWUcju z2B((X8^m_@e@XUzetdZv+@ehpoe}v7t{SBO`w^EdxuthT^GMJcbTd@cZP=V0NIh57_RfBeo1W^&bou11EqO-E?MDu6$v*jqM@8*HCTqk9 zJAqZN9j;(-QR<72=J=cPc1Jj{7&pfI*7tVMY2#Bf)Mr%ljXzzc0t)4Xxz^V89_yji zX(=8QJ8F}g6GN`P(!KME|FpKwlL)8RK{lXH4r>knochIR;ea8EQ8yeWHOfEZLzCwz z_mw(P5j}Uf{Ml|NW@03PXLuL5r!V%g35;YZp0Gob5S0lKBrlT@Z=OssM)45~FC=NY7*wEqPpE$8VD!G~k7`xuta3Mn60q z7`0%z4^k(5(nRr~(?o1*Q_WoA4r{qEUS1u9@cDC0D~6SeG*IDCn!F>2<)sPx9HzyS z1pI@$fsq)a_VzoWT2kw=0B3)aXUcPr zz|=EAwZ9(n1LE6pAhJQKg0;_VFfZ)7TGMlA0)wQ2v-zY1uETz&mb_sI@*r{6NNTO3 z6tbW_D=6X3|4nC*gNX|K+2Ci^RHL>yxl1BRN9esNHzd5=FnR;9YO& zKVh+yi=Sc`*W|N4f!b}6mR+|Gk~e&U2%H~tLKW#D|OsJiAb^< zsV64^6am~_hY+v#vVf~0@io8Kg2aEROu~jEE40V=nbX+agU@v+tu)GVa7(+rj;)Sx zo4yuJwP)0gzX(ml$ziO^oD*K%=^3H-M)BpfJh&yE83@HW5A#LBe^3k>H?@S`JmRYK zafJAi4LZ?}#M~{=!n)%1lgUyGyQi=^UMXS+ZGG(w@$nyz{iDH<%1B5uGLKjP${Q(o zIwl}5?EGQPP$x2eZN_T(ah8`+5au!y9*4z~7FXWlcY z_nK)g8zP1RI+cs@+;8sdmq-wx#*RnYI?oI_YT}-|t`hsZ=j6u~B%-ZYrDs~>=C%?j zFL>ft4iO>*0Hnsj*zJq=cY3}fT+;VVPr}$4?9wr8Z%nme9xYPMpYc0zz5~0g?+#w$ zbSTuano$%Ufa@PLt9~>}k?8vRIL?+-@5;Vi6HPaKv*8`X7R|}W^F;T}B(ldWzKqiU zb1D$vg%P=Hp=#9Do?EAwF=Zx0w-UYfwN*Et2Q@qPjL>R|a)rCjo{552bAS3f;7rdy z5(zi8`)-faB37_KtTktj=IrEX;wD+l%@7NvGXbF_nNyr;ZI}3893yXEhS(!%>*vJj zFb*EnD3lTvLe%7=2~It{1)Ni~90CzQ3(6zZpJ`Ghzhw$2imnOOjL$}?TJ5jIL>%Li zUrVh&{J1oJ#K&XM@yKiZrqYOU=Eku>m_se@l}x8^jmOyvTR$GAom6_xNpGG=wx~qY z-8{aPrs?PDRe_a(jF{}~adqY6aA0sE4A!V0_Hw7a+4-$Z)rl1RY`1$iX~0~V7J*bO zzI9p1e{#7jR-N0f#WQg(6kbfFE8r5r+W(pKn&dwpa?C)27JwBVrf=S;*uCz#c?&({EG9SVo0vEEpA6O?eo2P z-Mmsds<2^=HVY+{$setnjN79>UXoDuSg{qdaw3PRK`AhdtOc{o=21A^4Wd|KTsThS zkI?&ob7QYiE4hn}h}?5{D<$k&4aS~z8oDX2GKCHH@8qF+18IUnIKEpKcl!vh2gooH zi)7xEKyD`8`s$2mY**4_W#m|HwrRXiYhseS95`dsiq~S!{C-YAU3gu$b*EHW|k!6&{jqh1pbQ3H>ae;pNj@ z&LPY~8m4HFtVmgDG4+vzyxH`ZZKwnGN-Z{S@&kqU!}eimPnj;4*TQgk*sZ@2hCiLv z=fz^9#S;&T$o;Nsm+ZxO`V`x_bnXP&WsaC<=zk_BpQlloLPrJKgUABddg;-&Ze>~Y zT^W5S9F@MbKhLJPOvxl=R^${On{}MS<+9~$-R%c~KKJ#G23N{|X6f|Dbv^?gSgS#7 zaMn<*EX_x8{NWaFijvnI6vY}?36Gr(-N-5tkomBVoeh`4`ZY~&Y*j2>!qx^O)(-2Y z^4FR*@;<4+jiXz4X;wW}GaP22bX+Y_p|_&4J?5%*mIWx;Yve7-EV^t-;l-RlKCG{; zwT_A?QUB~Yb<=~kFjHwC$S|?%)zB_aFT|%2EY0tC3^HC_1V1Od!AmHnb#J}t^)q4p zKQTr-&r>7+UyKpbY_XzyN>KuYAAX1sHES^;wF1g3z=HN`LCAY}Y~_A;;VM~a`1?<6 zisYrq^h3N0koR6Or=O4b%Kd#HPguYs1jwVb@*qT{^sSG#a8S7wb&0OKQ-%7i_`_{X zn*Pfq@jEv&)^NMztxaWmKU|leShICo21XhU5O$HpUGkPe-iPavh7pi4bfqImG-Ocx`zLlrXl<%ICY@;ZhQxOllGw|?=G zb}uSXsU@Z&V!htz>jja9`};K588#^XM$_KV<6=xVLgTb4fmr$y7xG4`M5etjKXm<> z_d%f`(oYkn0Wt4e>nxXj-u1nVHu$a<`E=Jl{)G*I%)O9NhBI>Seqn_NkSdp%9L(JI zQBm-uP#o)BFHl0^EmY)52d(^hC_$;vVK0AceqAz?TbyV z^u{Yj2ClpWKg<3*j0R+sv=L)Cwa7=8q0^>2#X%O$ScLmW!HNkR91dphsx9vAqlT%L z{@5|waJiU{pP1ustON%GK2D$HTO0otxe3|#tTJ`8K>X*gHq3FOStnvQoM5(|<%Qxb z|6GaJ@tTfjbvO6t&i3n>>a>@a3RFH|`~=^p8gLSp1PPKvP$?$rH|r<7r9x0dUE|}~ zN$7aMZAA~CTg=$W+{24`*(kjEKn@%4>VsBAt;QCZS0SdYa^S}tLesq=8n<}7H=aR*`$p2Ccvomw0EqiJMO_Th2QG# z4k9N-gF+j*E^6aD{~j1j8EFMdR@#&!4~A?$KapYnW$HAhM!mW`oa)!{>Sv zq?(%-It7jw=+==$ehl2{veROhWAid#3DN%OjIBMZvrjvD%Ta7@>APP6?|G_ssl#;9IqrH zS-YDkU#`SdkRNaEMN2~^8MPDfdvrlY|7B5BnWKTrM~1X_#w|Gt4cYn<65;}6K7g%f zMfp_-w-bCmCf=FZ8D))0rq^~5l6eU(ax%*z@nUQa7vmTr{ zZ@Z`cKL0wmE!Ka>t0(MdJ1v7a-D1)Bk7f{)etP^fBXjvLqS>kfdmA0?_wu7eeI_}D z?u9)MULMLnAE*h#keZJv=pe(I;XbRS^*xOnBurAdqPO5^s-FJ!hBM#{X^Wy);UhHd zK;3!4!_{7WQ|hUy<~!Hs9SkDTrJ$=h7H>b%it_&cc$}u4>hTeF=Q7a?XKH*D z-rdGX!VVm7e=*OE>lXNZUj3!bmN8#4#te8b!~PmZm`ruOjF^~zzBMv3EthkfX65wp zD6Rsn*iAmqGDEUFjXkDHLc!!FZ}3+PpY=EFQHlFst7~;_4vS8TdmM|LihTR>i9Yu{;(;Jt2%{_=9(>=J|9R`d0me$qz#_*p}@6RAsP@Wcg(u zJ31aM7dxp^IkQ}BTU{W5l%Z-e#>j+cS3g*Llkt~*-s_maRZ`rRSep*Guij+6ss4~N z`C!eRzi|VGK>Z({+kYg<_UFI?xvr?1$ASFdm50HCH`g$~EXX6GaX z?_0x2As5=GFlvr{6MTD$5Im2Si}DZU>7Vy4xRjP2l0h0?Sm`12Q|lAQg=De z%i62M3`~XWr^|kW&1a5@XjpWr{Az9I(X@lh?!g1&7@El#XyKOQUOV{B;RIYrifwJ} zS66Bo^L;3#rNYN;BfQiaGz=GvPS}XjM{+vAc#@@g4-d~>hLfgN+G5nPCEd>~H-qxF ztF0Mr#i6WrjbGFgut=KWi}XWWXk>%#FC7m_&G0E`rrq^B)~A}*xTEkL|~t|fp%>{Jd9vL&HtpxdLT8L zjL0y=VQ6#mh5XoHFIol)9fBv;D1%7k^!M-YI~cZpay`dHV_d-2t(a~~%QaMhlQdI~ zpRgyF)j;&5ZAvWr@sS6bP(+E*45Po*k_ZLF?xtnaD37qN&tayaOkCi^eMRQ)sj7Y`e0=PYSu} zAD+y|%;7orGk(#cjeCI(MxnDyRR!CrnT5DSwpAGo?#Y>l5Obq=dlU$ek3*2#6U4vi zTnlSx0k??HReQ#s9J`^yv_2wR0NQJNglE_B?`dU;ju zP5F-eZwm8z*{{#j)1^A><20H0Mu-$Pjn~xa5odys+c}ZFBVSZ&bLc*neuD^qI8mV4 zE)v7R(b3VhJU*MwYD#EvVNj6V_^?p55q*i2Yi@Ec6Jz(^7+^~pw%+M43IM#hKOepn0U|a#+iYKG-f)oC)t9k&AgQ8RFC87F`wK-W$woxhltgf z`k^BE&_u|v+o14|ox9QMp+ys0@edRA`HuXl3Y(ab-o%*Lh$))Ts!zp$S>FeS->?`a zYa7Ke=YGlQ(#pkfHhZ*p`=bY0L@X`h!cNtdrsLV+sheJ>WDCKnv+ABN#+C;cCUQ7f ztc#fv;3uSEiWu2!GoDScG2zZ~HXB;ZV#Q^@Im@=-oVrQwduTtam!?-y2cM+Zl1|e& zfeZ!lWDZ=`!{OjmvRIWwPD!`Gwj_H5kq72nE_d3LeD$ygbhJ|WAS=4#BUUWU{rXQM zlUKb)dn37thGrmk()3$#C&_29F&bn(&duVbhWy_&`HfL8(wzLfgTf_jMK;}sL`=X- z>X!j=%M$h>roW!jf-X9>Qb3?*9m>&h+r|Z<+*@EUbsWq4?&XJkH#*1{Wjyvh=!tu!TB_$IQ!iWxC^M z7o~HxKkTy%d$3Q&>X%X7DSy^c#aFZ!GCLZ4|M<(w{g4o{!T)pJ(Jb}<1j;Ns1;31? zv;A+8qc?rs@|d57OgpOdpp5D;4B+>%-zm|A<0CwcaRrU4|It7CAJtG<)piz5C|0wP zy(YMa$v}VcydLp14jW7e@7Z*wfF%m=9^=v3f?PIcWbUy5>%LQ4yeKjiE}}^USgiaY z=mQ}SMg}?lOQ%6as*uNj#=_@&`;MhNk@)Cy-CB2$x0gWx)Lp&3L7?MgHy}9ODIb>2 z^T<-r>Ip8BOVF_Aq1T7+9AWk_YiH|X(C1EE^DyP_=8(5X*A@Z`w?i*?k0}P*;vx93 zHTf=ZX6z8jZ0Y|h7eN}_5KT`A zf~d~z_FWFY;An3v6`Z$6%C4lJ;~K($+ZNK7wGa?XSadiA$pL~@5FzTBd#GWfiO07u z&ZpO$m3nIv$$-oz4==KB8d0tb|0NO>xc5R}CLT?#dGl6H0J;=!%}d9d7mhIn+1Tv_WY(IY)aE>B|N#O6X5WNEVwNzA^Cu;3(EV>HWq%_H)KF zREAPMV%M_}l$4lFS=`xjiU8M%@s;&NNA5zcW4DjRI99rJn3`XR5{DhKvinY7TlBuK zjB2T|`tK<4?Prm*@IoJ*MpVeOLc`99k4T6mb2-N2zOZxl;}JHPJ8p;t=JhgacC(=j z?pb6=crjBQwm3QpX?;C}st-K6IH}_!!^sB9RVtp=oLW%|N#t2t5`(bGr8@bPtAu>k z|8^dPDzmr^1CLoC6;F!JsJq1CTou~N2NxbrKKu+#aXb!5l%czly1Tv*37!p|fW!1& z>a^{a>@d%Y#6V7z{Oxqx$2rNX(`In7Qk2@oq}_ESokzb@tQ#op3Llpy9nN*}^E?7xEW4%_?1^`$-`_Suoqj z)&qGv!ZW=A#ucVTEP5U;&1Z||))+zzyER(-BhzYvJz{58oNYJ=)3zZ9W7 z1I`v`dt&g>;l6gP#Tz=?1BS_-C*0v;SS6EPSk=U z7f9n2%yyK&8#Bk{{jqctkZSnA#s^$Tl#=862n@Qo4)INW8{8u=^Y5v%yMqw2JE%ze z<;;31%>7#vP1~+q zcfj!sMfrk|71B%88-2SBEOY&luw<6eqJ43o`#WXniQ5DatS1ERYf)=He&Vs)-`5uw zwXsA0%D_iU--2%Ygw4$F`sWo%J~QV8u~qoY9HfjD9^E2M*_gfNi!ZtH5^TA8hh}kZ zF-9(7VJ4mBjPw;7z>DFUG;oRC(~W=tE{vA!K~G^sArT{{az?k0%566HbXr4Yk!vpY1h8M>hBOa5Spg zUHg;qf$2s@=lwGrH^y&6Ns##?m7z^HLXHnDGg(^IeKii3%Ju_zDybC5L?8(Ys1f zHG4iHV=-;IE%@YM*y*w>=5S+Ww*gZ6cQvp!z#y~(f;Qm@kK9A6`3&O_#5o%6WF1#L zr>}>>JPM*uu%b&F9C3{Enbp?;AsO=yGru+LHi)XfQ&AGosF}KCm!XfThPu6W9JsY% z#B0VC+xyNy^5N2%dCyKaJqcU>QKZ>crHW-2AcD1W(T^L$e81F5ToN!^ioPXxZak^0c9_TS&dZg+psVPgK{N5mL8 zLlt^3b@keTAJLHDVo&n=Y)iHe6wY8;IxR74ZI5(Vq(2Pb=&hlb1{XkV(&K6i8uHIb z$jSSr(TB#z$D0rCd*__U(i=Qsa$$MCi2vsRGDluM9W|ML$!Q)|q_VGj z-813W-RcVd_$RkvvPS;yOq)iHTBtt~>+mheJEm61IC3$eJnPmw-VCR^S&R$r zlK|QXy?OHx)!O;9pBtSzLN+MERL3<`KeMK&^FrA}Cwd_fv{D!!N^qeg>? z#K>=2GPpx_2xQ&Q69b~6Gh&};G5rg_qZFqu1@L!;CUw6NEVXmO&quG=Ipcr#*Vg=e z_7)2_6eQgUQ^5H81j3m*22EsC?TmU8g5Soex%Z zyZe`P)}KRK`8$e5Y{vVp?Ud&(+cS41-BGm4PBQ1wMZIj=Sp3}~Y}K~=4eyDATF&$+^N?~mAX-YoD`E=Je4RY%!Ga@ftTE&{uUjOL)J zdI@iqvkfL`n>SUhi$LXEAJT*)9u$FTP7TYuS!wfKn zW`^8me@)Ow9uG%K*IF;0(SKOrCq)kHIqY_Y*m3h`Ggh4F5_MV@nq5%IG&hy$IK!d|H(9{wVKMQW>u3(zkX zEtVayoHJrS!Y6wVUWPLMmlC)8MoEy>IMtBCNx{|;YL;Otwx$?jG3eNxfHutr*O`9A z5xeJfwr1wkiRlP-r1E5@7?Ta1gA)3Pr9>l-zTIqu+>o!7U@Y| z^s!HDo$O%P_3l#kJVy4PH)u?pi4U9c-Z~i1Tz=b)wcUIp6S4(|+X=n(h1{Ofs5V3a zM!}ef6e|eEYiSbvo8waH`gqK%y;fJF^H9=Hn;sDUZ`_n&8^3N1j&TjeI?3AwVF&IS zCPZlnG@Z%9uNS;MZ41G!uWIi$?kF(rM;^>SR_m+kG}uYM-j_|e9rzutXx8CQ)H-&d z>U&mfZ@8IPe@x6~bbCDkeYTVrQrY;3Gam!jFz9vVOMvmA`I6U@BK^ow^YhcnGh2*%zzI$HHXkgv&%G_d^q08 zo}^%-in8a_%dmNlS(Xs8R3JS zPMPH2PRu{|Ca&ssI0v^HDHjOZyua_SF=&1Y5HmRm2}epg1O$InrWu0pH2*r4_C zUGUg>>Stur#>~q(=_Uu>TAS`dsp;kOh|#O#x_A1Gv?O+QGAt$9 zYPJ$fRH89o=j~#RJb2kmaPO2&MiGX$!GAdznoTk6k$mCyLgXIWfTc~HigI%X#n7Lj?n7=WdOp8oA0b?7l+*N#G9eS;E%JQNQ z%mYSPZ~=lmuGJ-F1*$BiZ9@mg<;Z3%rJPgX+a2g zJe$aPL;}#fBsrcTRKOXnz1ng*@KK(g7RdM)ff7J>9{Cs0SNHc2#62&hGIo4<01DZD zF=Y+gGN{UWjP0+C#gGn=f>I%6DI+G)j=aqNW(op2kz-<>+HktmT;_|%kF#g9MR%N+ z#c$9--_zDL36_!i(ten>Jiu@S2s`jh9>7~sXWi_J`ly|7##ZE?Fgx7nB=qjUjjg3` zCqB)ZERYb&dBk3MaIvD(?ks7j7f@2rn~U)V4VSoqjG-<(np$=s+(2>`P9g!%d(Lt(gqWZMzG&v!f%J`mSEhl9|WHE-ou$4VTmi5h%J|M|52@|ik17= z^pk6Ry$ltaW0lLusJ}Vf#ZGkn{QlYu+G?i5C{AVeSvBkFbpXCj7E`0*1}cWLno8;P z=8%~OzUNnN^-Q41kA{zws6E&D{49BE6x|s5AnvK!{3hzR;TluG_pAljLS9ThOe;gs zcC}gd>>@w$-u|r-d1xgiILNF=YM@0Fm6k$d-HlTTXBo)?)2^H#EbzB5kGOB zzkj7a5C#Q{iC325cpV6FFC)YRlPh3NNHOGe@D^+7s&ld7HB^Cj-|TrqvuNLsOkmSr z?$&)}B%mvPl|4WOg`_A%f1sIrxX^T1;8ivfW7Iypn!C<1IrC?kdnauR{Zd3>WcwR?aU!K6438lj$Rkl9I6< zU$W*mS3c!8lyl513g2WS7wgmzr`$P1n{5Rj``JY5->C%k__^)AB?2xa9hddHHzG2Z zJ^NZ-9{BD>zO*M?`RhHZreo?EBlQtsNy72zxaYsO9YS|Rzp$~JG2CX>8~3$cdYURs z4h>2UwOs&k{pJD>68*Y7JPF2e7k78z8Z8$}1i#lJ{%vA`LOl8X_$zT(;{^10a~Snx z`d*(WI1Ih7fAr0lIl+A<&0V6j-w}hTE*$96NngSy>p4!a89y)w&g>VsH{MMo_{aY3 zA)U<8{MM{`EAH+jB|YN=#@{QoHW}8f0PpU0MyKo2*ep0w_Ti_n82bglV@EFL_PTtN zT@#2|9AG=YUuH)#PZCuJodR;qHiGdstJ03DaAgQ$4U<$hKv0LXwH8%d_2E{0V-%2w7MR|Cc zRQ|jFgJ_DiYg|<#-*lIq=+Tt$W>i za>cl9UZ0l`hWiHlOnk;y(f`FfJuFs7VkA|SD`e=7ZcFmqtO5bmntmWOn#F8cX@pzz=HYWD(`E8hnnyYT-51nT-M0!n zgrR2|86m#}Q0L!(iVHMXm$-fgb2s?&&B8XCZw$H7UvXzQhM{H_B;`V-Yl z!n-ZID@o%p{qr#eLdkU=PVc<#4?@;sbjYFIDpJ~vKezkhjh3n&Ddd=Xiha0Ss5qu> zxVcfVV}F)Zvqpl<@ex@T;VE5kA*6f4*y_sgrOpP3vLaO)>^?<1O4b=f4`3iEa*1V- zXu-8Q>6Lp+{c`4<^vH~CWOO{%VD*xOH^qx}pgko*PQA8eCzgKlZg=8>{!jdSO>cvN z-`Q+rG9n}_xxb`x8pRyLy+uMJoIvP~Wg0*`aDUboD_UsO&Q~%1 z>C?f;TZ4$(b(|(gES8Z82pND94eDRFX+x%Ywy>9u25xtMG=@^BAqgG9oGnjS7}8?I zR@9^r15aw%2^UBwh7-q3dC$;}Y1hRwyt)>RF9nxnMut`E0=JJReSZK3y$GVbWIkcq*LZ=jGX`%vV@lRG4^UR{N44E2d7OjNxnA8DbnoF<{4!BvbPMJZ+B5$J2?X zY`m5DU+GaoWPEtqtF(kdMd2lt=zINhlB8x%y&&1Sl`56;<$IwHgUw`&(bcQ$ zgX8IfyuE;eTgofP(~nP;n~{CC(tFeER1=&r{zw34^jM<7Vc|iD!4!Z$&sKcvb3Yd8 z%i<|<;a!_8*#4T$t6Q#z$7NtpIoQ{=)+`qJVf#Y8F!raA1(vY4?SrqqV9fs6MV{Oy z`Y_gOSvYqmIfb4^onL5l)bTqY(6Qf|!({Gwx(t5$=N4fRQv{W2h~Z0nQb&EeI4a6; zbmj<`jUO)N%4Agk$P;qSh92j5+#8C+`DS`q86OaCXZ(pei;Ao2W^c!daJ^$Fq@q`= zvw;myqtWbi0Mke96~osWY74bg|~7 zA(+K-M5E6Ww7i`6KuR4)Mr zmL$K~X~W^|UHJWTSX*0F%lu4mzdVLG$_lnjBADxU3fi{dilx>a(sWj(YHdoD8w|aA zc=F0YPA?1GR}~dhF8eh{##f$Xnc!v9{vu%iMdtf&QW&)uRS|c?7%Dvu2`>-010OAz zwcnb&vj?Ax3~4ySy27$`{fCEL+=UEYf?l(O>|YZDKgpqmHF{eUy`RL#0YcmCp4Nf7 zSYil-hHE(NlIf!SrRC;e-`rq-S`#$^tyb?Qq9Hsm^vv~rTw-vu_hV)xz=@mOSHc zf_4V$@dba@L8qRVk%=ceg&OgBrgnaA=mx*U2cXm#n~!*RKX4XGHKvRF(x14?1#FkX zUt}DjrM*VsCdM1p;i7HP3#*2a#weCjn{zTnW|m|Y>XIq&tbo=`REEEhKG+{}r>Kbf zBb!+qEBQdlx_=>79NbUi?oT!IPV{=+J9X952zh+{Ky-hi?c4mHzBeKbM$_6Gd+R(Gg_9W@Dz9-pB3W-KGA!-36)6csvPdu!!8cCCKjL)tkS~ zWPSMg@lT!i#=;kW3O{s!1>qiV00!ku1~tD-vdP=&AUBr84jXMr4Bt}fEGC^V)_5$A z%a+C8{UnFxj3kI;!HHxiU!K%KmcG8gUMn>WW zcBQ%^pAS=N=?y=-JzM!4jGH_8NNeQg${xb9ao1m=t%V(4JWB2;N6FEtBNp+KJdP0h zFpX`87Ry*z@?PY2hAza1rhRI4P84IY2wUoJ`LWVRPX9BFmu?mbN4oZ`@Ztxft<>uG z$JwW8|24le*^KMGV^PA5nEu319ZKrk`Gamw{P9UE%mF!kXh5{^kv<~E8KZ5Uv-=RX z7C9v4f81-P)KV!F1e1Zdr7EIvK9{apah}0Kz$5})6`yjn?BjY9 zuPY0Z0HnMbNj__J|BjQd5gCA&5S327TARE}@7=JmYnh0zsAkDgM3rl@&~AFM)~b-< z<2$tf+rmAy2>tgBO&yYMsFHhiixQ=(s30v3?X!9wn-M?qpy!FHjtbnEX#P?Y}mU{o?i(&{?elZgqMo z214u#)G(YVBovLyNj^>&`234PW~$cJW+wP;xIF*@=k&^lFlr;&A{!&R?qgA*_Rl)C zGs)k9x#OWAwR$>eI)=Qf2u%nvd`Ui>^ph`V!63Zt;Bl)!8Yjj4T01zP$z|WFV11-^ z5cv$JH`}BbKa&F7l;vyB81uDZgDY5j!JB0eNm98fIZWen^4HzM^$!C6v6o4@-AYZu zQN{$+{5nm7{o=5!b^hT*z7)}7@r0|W0jx_8G>&4TgRc1eEUl?fxyS1*fGwsZKAx_T z`PV;r#ezmx8|#>^aF?~sR&bwB|L`R zpQscWCU9$}u0lky7S+8&m+FI;?c8JPINkbvZD|gsrFqlws9pTZ!HvCdh$AWcI4*hH)zJo1iL3e9m0zY;IS8T< zN=Wv0jNe)vhl(bf&>grOCnsWC%T~gLTpUdr10@k%E(TU1ETGf(mJdd!9eH;VLX(TL6J@z|O0psIbVoT8l&UUtQQVEx1wd$A#{PVT8SDu+3!`?Zx8 z%Pfu88ztz;6;K%uLATsTWwS?q_vJIG(fYr%auUb|Akzk;s;ZcLpFl=WpyP=dHHR^b zfIn8Vyzjt^aBmpR&WBrLyFK*lngNBO5jA^`JSq5PJ+-R!T7YKgOow{Y*NTRwkha5e zlGpUG+0{q4X%TZjjx+}cNu@TC6M=siW(e3Oa~G1wyu7{=Sbz;QBQY7$I}HWdEadky z9n6{i-{dgIa=U-^*J-y|a&AWC(xosN-mURW;LhZ-6!xK_+{Iab(}7jc@0R3ACeeWS zl)vGcE4(dP#mjE_cfHBOky8}GY%VOu43F%8)Lja=hQDP(VIxTVBFztvi9u1NM^Vh- zUHoShph}esENotv638?hL_BOBXY$b$1^@&z`VXo@%_UI&Voy6u>2C3~*q+W&&t-6D zKLJ5xaaV((yzkHU57)hy+D|S1ha3Pip24v{tGJ4SgEPF|>Tb1M3&Wtp?q2Cz-zRyv z+~$D-k2!YOdfABlc#<OxX_7jFqsko?H6 zyETjnD@~qHgeP$S_4L{q{FeOU?5fiIHoQYx@AI9Urn!r}?@gLKj$`T$%CwqWTm=&; z%MbP2QtIHJr=4cz=ep@BjuAl+@tjJ=N-^wS;qoU__59Ij(sgURO0BR7%&yuS&Tvc4D5wv|#z>YHO-`*MaFK7>?yf zzrcI$=>E-@$dBh4^_u0+fA?D|aeyz2T9R*6s=q4m3kU##z(SYOKzzX$+fO4xKd*~* z>-6Pt=VEbgyp6&3&|KMNissv%WgIXPE&Bu%!KlM;i}1`0HEM?64_o_y45 z?nwQ}B5VNTMV^JQroA1J`13$rIH2;0je>V<>zRT;`tpC4KJ(yR&DcXUKZLB7sGk<{ zBaTOvcWrG={N0wQrR5aS7y1mDU>Q3y;IM#wA0ChQ7VAN5rs`MiTT2`sb>ntgymO0e zbeL2tk^{Uy;IB!gj&=ZZ^ z80}hA)=lNwK^Fc)A)cFIuVWUQ>vLQ-Gl{EfygpImnTyqi$F!AHG=&oO7lH%6uO>0} zJQLC0AJbZQTTHx7_INZVa|gLL$9CIxYXc!gWu@cxRxG`qU({8>vo5!vB7aWKXeJV1 z|Jv_hB71NFU=;HdLG{b__-y&bareujTbAGX-al5{hM=2n5>e$&=95`s9dH6*lJ^FO zVNWQbP?g(5mHbljBr5BMpgMrkA`@C3RMK)yEScK4e^A)YKM<(l1Aln*RJR1Sim=t{ z(x@qPh&Lb8@sC*lNU358#Qw4)?D!Qyw($udjX#Klm~d3f95Jg{zI1=T+f}_x9@*|X z$(A-Fd*|q~kM(1Ht+%kc)8$DyLH`8ejRJ#$Al*lE$OKOa+nV~)qD;L_n4a>i=mQId z@l??kN-NyAJ^QGY!6U+RN?@PkPAmdN^eb%l_wI?6&RT5OJuCJs+rei*kFs<8w9PC_ zg`FTOf?J!|&o|%EmNC98v7KH$1S_62G}tgffm}+&=jziDvv-=XL?*I8?7b}ZidM>-f|QW&9Bs6bS4;ZrJk8mubElXy^A$jT>H#j z`j`u)Ie5$4egIc6S2*z^Swm`o7xz&oEHNhce{^-HvsV~84;tio^#8g^FRtTcZtb#n z*`Hi52-cgI9 z4K@`Xmz*+nwC|Ewuj)!fKc}=?B*2Ya24`y7OqmrNPHBvUcpR1t6vNyYqTW2ch|}0a zlMZKmjZ)OmHHob|3`vjJ-yrjz!b5A31{*t!8N@?wed?{}Me?T|x4NK>O-!C*Sl(fW9N~v@sDP63Q8NZgK5YHl`jOJYMebUXR!a^q~YJUUIIa(k+A6xj@u10*x z_c93UPG88EpzB(MsUj8I-&^>fzR63^y(3|8)Rj35-1-~C#>J!Qon56(oKKXsP&NcL zC+)n1A?__E3+ot5PZn{u&lbn)*|Tw)s12q_xY#aLFeU#RZVTxW*1GSen)l*sSc2Y! z77YxFmWC${2=n0F}&o|6pEu{NF6thAp~U+Al%xv^H~E;xvo3C&m9OvLftGuLr; zb>H`a4$mIvoqRMoo_JWMzJP43t;r&+RYYv;79z{9qM5CocS(}f{tL!!Zsi_bgq<{U z3GbZq>-O^Jb3Y<94G&xzJBH#;A`p2$>T84tP#v_mHEO? z(4vRjW9xl=edJ6%ZOL$GO(4?e8@EeVusxAcfmD!-op%{s_0-RI30z4`Ey{No$R;L< z6E4c{*gXlhQw^_e9n6VuF4&}} zOpqKYuF^<@>`Fqt;J!4Rr8VQ^+9!uk$d>1t0{WV$2t@}u~6}#@eMSKor z|KBAJHHJLWcjpP7xdr*Ep9C73q_JB}7?zlAnvlp<^7_B#I@k8X^j}yTS3DYPlX|VF zbf^mO8x7+Z4<(_!`cNEophZ!>d6pwYB0zz=jp(sl^sI?9oKngPWp4}L{QMrzt*n$) zUgw!Ie;(SQ9@E^bmSpl9;cyUwA~lvbh93B22b<5+@k#$*&oVLJljbo zeE;5U`@PJhNV=aZr-nZ_%b9WYB-E0&-a?kcBu+dBU)D#@_U8D({^n?mz#+sjo zuwIFi1yg?YBsUQqVjwGamKQ%MP~F;!iFkJK=G)$;3c+KGu;(pX z-Mc8^VEZ9r+>op_?8-&`{C0iyon)=}z4?-ah3!w;bS1yOl-)Gnx(5{%_D`#%Rk6%> zs0d4$CG=~y#ixGVKpK`n(r9^8QOC@xtupIsg%%kJF~!!Q9RsURVI z3VVb}D~sK&N%THW;mhoz-OU@;T=GMC=yE9em$TbDS^?LeX=jUrdJJkPGR&fV=@CVoYxqdk8c;0p~ZQDFVYE2D4zN?kHdlJtxuz zFHhiV4qD@^*VqnLHWz2m%R)s%GN-E`EIkS9j!J=@kw(7p@sd}5rqPsl&Kbe}Kwu6! z5&AWvHQGls1#`lB@hi4`4nd?9f8n=tBnu}g0Y}8eYikB5yo)$b-#g>f6}H0S%D*AV zgeV$c&#prpG5iJ-w$M}bvSG#=h$IB?c_s-l0PMOo+|}PeYBhfGwq{3yIz8M!z~IOi zrd;*fe;1z+@n~7Ia{>r{|HVOz0{HzI9|Zb4fbq}3ERD1BF*Z5xlS*b57DhoqZ3pGN zCpZAa6t7&nFYbESXi*=1Q2ceenFn-8;)3A$`L&Aqz_}gr7vCEZb724ZAIuO4xu?$! zMh~@=RO>_?A_8oF(vrszm+>(M(NphR8NK>DCo6|HXcLo@@$oz%*p2rcu(*#IfyluI zOMEc?xHtQeR!`)mfgJ@cG;g03k9CsDc9(a)0 z>eRa&_JzD|4zPOZmZP`P0wyz@5)Fd&wm%7k}+pyPgZ z=fe3hWjRbcj7v}Nf#yi}mOxpYt%`BWVjK3hvbs9S=Sj-5viK#kW%Z8qu{n$naH8?? zMN)^1vMRUb(W|0M2D=W_^BoX!+t20BuTlvF66F$)aURsIQUkrxsoNKsFi_0lN-d*9 zJIJCC@(@XBH1btUOG`cq4SyIb9M4L~kMv7q{u^*C>EE9?vIiMm%-m}iS;wO^=5n`8 zHudYlm{cjTp3p7MbUH6k%LC(0u>9c($VRNux@sq#y-0^sXGs)KIn^W#yL=TlDQSFX z<^>7eCupAB^q9rGA_dG{ziCSw?2ViRZw(h5{$X*nb#Nlzrq!^tj`FH-U%qcpdObC| zWb9Ctdc!)>$-R#=L>7Y?9?ox#*g?wCocq87eeW8#OLl@g+J8?Q7eFtP)JB7Nm!fM0 zGE7dEK)GWex>|68=v862z}<|QFwT7GNr8PHT22A7XgmJe$?%XGI>Vx8`Y-Vii_xU zN}I6pj2q;?<)+cl=&8x1tztbPRdsd&2eh&6OSDF) zl4KExkEw74P&wB#P#fkp&<0@AnR&Q zd2GPnkZf);wkgdqdY4iFpipT4&+Q9ul5N-u{Yv;I(w_6mt{=C!0RCH)PEf~*uByj7 zY}&!>*$KLywbZM3ckYlau%a{jpY{Q1o)x51aOb(sva8DX}hA!Stn; z<6TefD5CrgwF$Ld>On%aFFQKYxEBUSd91ZMWtDbrU>*kipU@WYpMf^iyIt1&7=8yemlFm z#tR)ygkqpFlLfs4rUbfOOd2l`)uM6{qsFjJhx=PN{0{h#T8 z&k6p~fIuLs*+29DUjwP{6B9#+hT1qkxo`nD|0*4qC;WtSLEH<&Z9IuVw>Y1zuwCOm zdHcUDZ;^;f?^oLL0s4@7*oZN;MCL-%?0O^HTg#2 z_|t!EL%bS)>TqWptG*hUel(eWh;J1DjpF=qnz%1o5}!%OaH?oNJoZh;$!H&gW`58! z_Lx@P8AGn@`j-}#kN7$;E6x-7jCFS34E)gwnKoqK{bmLur z#7eEokbA-?u?0oPM)*6GM7C836|rHRO#tucl$_P@GgDh4 zu6BK_LhbKIDpw_YYeamj-%|pye&zty>VG-FM#TEDPSFpH^DlbJ9#=KE&=|>XQkQ@Zr*g z3~y25QBZ;i3jrGXyzpgfae0;Bt|N5zOyx?Pb ze^_3sf!K+PP>?2lWZO=_68x=JjRo=bd}D_uO~_1-W420aMl#tA@&ZqI_BZi>bV#`A zTtk7?k}aJc?oteoB9c$jsnzUfdbGE;p&44y1RJz4hqB_X*?TiNL4K%M*OC^lzdaWG zeviGmQzAF4NxBo*MPQsuc`aJbP|tF0`$vqmpOph2vc9KFNVC< zk3Z#D8Z{2b5ydtX@*^w>C8*@Hw^i;7uQb$kaytvEs4T1FqLiW>-ON=l0g%v-5W{J* zwMco0XLu1&Q0UX5$sIS4!NH2=#0K43 zz_Q#DS;Sc&_ZYS>6RTh3hGg)uo}jR|zhzkDATv!BxfE6)2dyRE%Yc_fjdjvUqR}#1 z3IZdUEtqBr&_A*s>4w@~+|!+G^#T7_e(Ufp|24guCQm>0hM@7S^#lJS^5$ ze1X0B0X~oZ<)`T~TQ$h@yDbH+Agam1Ei%&g_C;hKEbI${Tv&n%d)$o_+VFzss3bto ztTZ#m@n=kLkrork{pT}g>@JV>McL#~t=r8bGV|@Lx5vlU!Pm7z$D9y64)lWDtCcQ}@!^g@nvn&pf+g$GG; zm{zp2;5n(&dCVG^9j84pA;)-Nm*RM_{3C8Mu8E0>xa4GLtMARAq6#zXec17_w|=vg zcroOpE8BPacyfv4RUTzli-UY2RbpJ47h00w2*ZRhR+ntSpyUILN@{91%lXXdI}WBo z*_h@dNLgfmMw!+!9|5knu&g{i{=)S=`~Ey!cKRdk_;qOO_K#wLeY5c6my%kGlZ2$Z zH9aK>Hw^7a$2eH>>ttpa$8ST^RS2l0$is?BgSDD$05k{Pf_HdD-`SA~ab-1m#2#gL z-jr(bKZ?$oV|c<0;I$z&Zu!PkbD-i`t1I7t{zKLij1d$Rq$Qn)l=9X-be9x`kZg)B z+7>m(e9GGjo_6ef-T2fPKf=z$*_oe)mbS|0(g7?lKTyk}qvtHiHCy^gaD`YCg*Z3- zn=tsiX4s$-XL7Cg8C&qj(pw5`i`-2nFnCbVaU4t4%R)$%wOZ)Pq{UnKM}-L=Jx`Un z*Av!eDH2wD-u-=D1pP|qktVSY=PLPU-6vZw1H_dhHD_yS!=^tOPwe=A3?KDwj;an$ zV)Qe8+ZeOG!@B)N!%9r+UljzEd|%>Mfz=h)Kt6 z-m5fm4`ucw=T%v%&JhoJ{rfvh`3F%d9T-&R;PgQZH>yNt3S4(wQQs?Q6p4VIG z|GuIS##C%8q@0F>+py)3#b}6fRZen(-?F4h`4AS4Ft1+i zFsD87K}v1A!AxzP55}dg>u-U62>zo52Fr}<$C|ygg>1e9qN$TUKryO>z=+iT{Ce8? zdfC`53C08Wu!Tq^@xN;kn~`W=?!$gbcX&(&%d9WdY}Oo^HsZYRbYF}s#;DLHhU38z z<;_(q-Q??92EPrz!#$sArk2!so<0vKRpp2Ez>+kvJ$28T@ea8cqc{7XXpVzQ0=GPW zsq;{>ZOv-U%kBnIxmdW=8?OyLnb$WH^bU;`4ObP0IGgBi?)VZHZ#>{Q=uhtVG_HmY`qzA@IXtuq;NCa1pajHzw zG|mg{wF^nFOm`Q=4GopoEYWp|4cGo$2C_QKd+I;j$~3;BgY1CSv2y$+dZy9=lg!UW zRxGCnE;hT;kV+0s z$vcp!vh6~L`uXDgEW5!}^nVeZT|yL6APfCvivEn1Yq96+_wwJ()^U)w6s>L4<^OexYs4$6o+dvp8SJvxlGz`r0m@z|P&81On%1`350QLh- zC0sTS#|A8;0VC<|h)TVpP`g{u9Se68P1GT6bEV@rL8;hkIFj$+!+sUyKOHrW`2yJ3X zNUll(0fkG9`CaEhCznB0+48H6w^YH1%2(&pA^wfbTY@_xPV=F-Rwzyh7F*1I5y_Rk z>~BY9U=)u%>Cx5KS&N5`JF(k6Mw-Vih+@CYr=|gI3&lbq9c`&(sY?;>50R`SD^Nx3 z>Da%McjV!9K^roPAZpPq^Ty-8b09ZAKZXLeeWa$KMfMO{(*f5iv6A+ zCV}U!O;xwK1KYoh1>Mry5E&8ocs}8~p7;5Xu|_!$H|v-9jJ0#-Rw4M@di?JiuvVEU zAD+#Gddbb_^k7%4q)$o2@9pEoRxJ1M_VHRxSE8W+60zFUe#b1Vn^-7YLs%XFAIlp1 zMJyhp8kv%QB_W$JKu>R*D|rR#wJZcDxmD#WIs=K1^%C-31|!?B^y0iWb;|(x z*XTQBn?7$iCKS^80<7V3GGrBE;R2-+#4ey ze_F!#@#QSv7&%AV5O`UaEsIb#P(;)OO4yNnAA{ce!;7$rSYbU;-YCxB3qPkXwhy1u zevAW15u^UxBPaY{JVbp;+~u6vPh+?%}?bCy4vTh2iq}I zQ=9^|n4l(O?HnNM;T={>OOHLN4UT>YsVjQ6e2F@Ru&qE?%?ZiwMWrG|&dcqn{vzkA z?NtAEm7=%U)G@lY%RTKG2V>=G%t4ETOg8tj-EI}UtrW$z^f6xFEVDHv`NXa~`WDKZ zWxD~ps@GVlTW!#vW%JptV2rfp5{x^eY~4|E{+%f#jBAO;Fp|i>5tHYcW3)};I8QMy zFg1*^*^4O+&mjssJ6fyI?1c`-xq^PnE~3zq{!K!|{YY-nih(#qcI{x7dO62x$O?Q| z>tys9`giNgCun%v;akAsL3=e&dlaHdam=z^2K?xjUlzic<$&Eh_8^b5JxNR$NO%1C z1wLcontgAlmZh}N;W1HI4H99Y5AZ z&|xea*gy2|nv)9Ic#RuEHa1F>8ohD*_)O%6PN<<$?!<-uZGi|X>-DX>ww3KF3nvdg zN+)S?x}s$PWV-wTO7Mf?Uo(KSy-b}{&b>C`kIl>uIf8!?!vW zhNNCz9^-`&{Kn~o=h%+4hJgiCUP;@O?SE_|3kU?@JKqm;c+sSkAE}w*5%V6_u-Itf z^Z9(6EVNjbfZ;jSe@D5g=0a2k`XrE{pA*Yge=Tf&L&H@d3ZjV0h}WMDP*l3cbnvSB z%}9WT46bSv9q%;3_@szshk$A%HJ4O4nu?xZ)aR=4Q$iqc^HaSQYC$tU6>9<|0&>>> z*JokLktQJ_X%*z#>OVusvKkeCn6fJ#=$GHKJ&>g?Q2}*`j$(arwDrAeaS1P zRaH7zG+85gyvyI{xH0jy%-*zm&R+Lq^3|cP>Why-4VUGN@I~8Xs?4BS`aJW)UFvOG zSF(D63m3ls#S+XdD*`>dOd5W9GYJ4O(&zQM)&?$4x^^+Rqj0;<4s3wM_B`K<_puUp zM~xUGNd8)J*q}{lL6Hn6Sv4iDTsq;)NtkxwXtowlmWG7St5=KiRoN7r&Y_`-0;~PS zJINIFsJ~orhOQ10D3b}Q3B6o!$E!pB1_)EgiB&S3>Uf;YEYu*M z9i&oYS1Kcq!ki%btYOIrbL}b+0jC;3v%~zmT!rYs4U6hyTATv(3-Wnt)2moGcogfe zZC}IM;*6vN?d1o?ESZM3D53~O??><+1UWzEz!jZ5!oYpIwi)zZJvQt4e8=n}cE+jH z3W^5Aa^~~1u;)Z`xY}R5|aG1eQZ$i(yqb#wcmr;6{K91!?2kq3$Hi%n?_)&=gX^+$?LpV$ z?86{9eFqHS}q0M{SIn2ei#2<_afrd&B3c=YUlGp5m--1VMZ{5<4R7+%#`G?`PGh0)`J8&a0jgv!p%9pqEZi_u}Z{lg!bwMB|75--0~ zS*&~t#we5K_8~~vmE7!SGJ9#Q4|T;fpBHLQ;lFySp{|VzEt{l^8Rz`1x1enBcTZP0 zVj+7SN_lw&3fORG)kOJ3?$f*bb^e`bb*Cg-fQFmN6<%*0A6ryGirG@w=!szkYteEM zrmXJ*;hZZDYo9#kL5-6P#bfsf@WD^M^~`yNuC@(SXvQC9^M#-DGXm76;4#-)pTHGt zopq(eylD*{NJh!k<-rN+_5nPr$0_odnk$0TBi|>_;?LwhU+*oV-3A^s>e_@X$%UD3 zSFUdB_Mxi>G8REJ()P4*Xt^=$7pa27aOKXh@SgkR6#fgfT^;k;uf8B5C0&C@Gr!7D z?;6l%c`5RZ-jd8zY_LXt#frm5qV7TuW-V`!->rmYug)E z3Ilc&SXhKjN&?&i3jds%ckc{Vf+{%@=RReJi5h(Vzw ze-`oo*?^8-U~}|;-bg~Xt^ZyfqK0ICXW^3W{XS!bxLNvTwNo@@v$3_Ma;L+YXsq%& z@QQ10X^C!gFfn-6?xStQhk>an(lhdk?v3PWQ-M$M2t?uU{h|vt@LKNaQ>2B(MM7fY z;HxXo#yW)OHZFL04>*n>0Q3SyMK2w3H+leZpFTzG@7r0Y4&t3aYI1X#5VedW02vtT zJ-4Tik05{`aiR+upok299Vd3>uj%aM6p)aRa1MXkCrpK_Ldk7z%u9CXJj6@4822HPaVPiQuu%|F#JRBi{MuSz2+WE#hnqR!Zw#8q`=3x;>_SGn&CuMrHw`*dRm97VJ48+l+6Dpx^>gMbCVF%N0W- z-nkP6)&QUYv?y6KgwKwT7?|^=dv=x*Qf}OV$aBr#kwGxa zDIgL-^FT7-SVTatMag#We13K&XKb8Cf=tG14COJZQ&LeRB1}YG`{eITh;qXDGhM<1 zWIrc_2#>cNrO!g3&%%)c`q7};e%%Bhk3-{krvq$HY!$$-VOLSuCkEt4tvBUv^x95N zAoK^Y2Ep&$CP2Skd!Dt1CG+y-%ZYOa#HwVBQI*n=nKSwc=;8U(dk75WoEhOY%n~?{ z@ntCcjIEg5qHxh!aQK9p#e7(aUDmqwWAi@M>BL{ij0_!35l4|i5(e>mHy9&K!F(F( zHxQ3Q>G3q7{+Cl?)o9wtw6wIgi&v^uWnyYY4GsF`*bb;869}%Mct7>S9)Qewl+R7NXS29h+SN3E zWRic#j&r97VZ7|HNi(vxd2hRwfO1Jj#AFzP&8XKhli&{h1eS7T9Ic2RU?8}4jqzcXhufd*Htt)0}8Zj>(F-zgZN74~U zCSTD+Pn-DDeoNv@vVFEd4q#PF2|@5NWFz{#%-mF`Kr?`m$4teOi3{!F|m76Mv8d>!R8LP~dbcAr$=?i00%tj*{e?{^LiD4&>cojjP}0M;;lol_PN zwaR0)wvb;|m?JE|aja`>a}0(r!vBpJf%6#t9}f6;m{;{1otIV{mYtGC(7}IcVxm7h zp`xaaWKltIrHCK^KEyMa_x!V_j?N=;a&kQ0OtZCVWtt{fPe;eo-|utAhz7|W$FQ`t zY(D9w*8l4E`CU!7FOrNMLdoUD{QmkgwwMU9tHLkO%Ji6is}sMQGGpzv)_ Date: Fri, 24 Jan 2020 12:28:39 -0800 Subject: [PATCH 044/358] draft --- ...ed-with-the-microsoft-deployment-toolkit.md | 9 ++++----- windows/deployment/images/mdt.png | Bin 0 -> 120521 bytes 2 files changed, 4 insertions(+), 5 deletions(-) create mode 100644 windows/deployment/images/mdt.png diff --git a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md index 22658affd7..b21851c4e2 100644 --- a/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md +++ b/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.md @@ -21,9 +21,8 @@ ms.topic: article **Applies to** - Windows 10 -This topic provides an overview of the features, components, and capabilities of the Microsoft Deployment Toolkit (MDT). - -To download the latest version of MDT, visit the [MDT resource page](https://go.microsoft.com/fwlink/p/?LinkId=618117). When you are ready to start using MDT, see [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md). +This topic provides an overview of the features, components, and capabilities of the [Microsoft Deployment Toolkit (MDT)](https://go.microsoft.com/fwlink/p/?LinkId=618117). +- When you are ready to start using MDT, see [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md). ## About MDT @@ -65,7 +64,7 @@ MDT has many useful features, such as: The offline USMT backup in action. - **Install or uninstall Windows roles or features.** Enables you to select roles and features as part of the deployment wizard. MDT also supports uninstall of roles and features. -- **Microsoft System Center 2012 Orchestrator integration.** Provides the capability to use Orchestrator runbooks as part of the task sequence. +- **Microsoft System Center Orchestrator integration.** Provides the capability to use Orchestrator runbooks as part of the task sequence. - **Support for DaRT.** Supports optional integration of the DaRT components into the boot image. - **Support for Microsoft Office.** Provides added support for deploying Microsoft Office. - **Support for Modern UI app package provisioning.** Provisions applications based on the new Windows app package standard, which is used in Windows 8 and later. @@ -84,7 +83,7 @@ If you click **View Script** on the right side, you will get the PowerShell code ## Deployment shares -A deployment share is essentially a folder on the server that is shared and contains all the setup files and scripts needed for the deployment solution. It also holds the configuration files (called rules) that are gathered when a machine is deployed. These configuration files can reach out to other sources, like a database, external script, or web server to get additional settings for the deployment. For Lite Touch deployments, it is common to have two deployment shares: one for creating the reference images and one for deployment. For Zero Touch, it is common to have only the deployment share for creating reference images because Microsoft System Center 2012 R2 Configuration Manager deploys the image in the production environment. +A deployment share is essentially a folder on the server that is shared and contains all the setup files and scripts needed for the deployment solution. It also holds the configuration files (called rules) that are gathered when a machine is deployed. These configuration files can reach out to other sources, like a database, external script, or web server to get additional settings for the deployment. For Lite Touch deployments, it is common to have two deployment shares: one for creating the reference images and one for deployment. For Zero Touch, it is common to have only the deployment share for creating reference images because Configuration Manager deploys the image in the production environment. ## Rules diff --git a/windows/deployment/images/mdt.png b/windows/deployment/images/mdt.png new file mode 100644 index 0000000000000000000000000000000000000000..76a00ee065f63da68d90b90d96303511a05664fb GIT binary patch literal 120521 zcmZ_0WmFtX+XafdySux)yIXJw?(XjH9^7Vdhu|I@0>NE^y9Eetmz?+HeE0siv(~Ix z-CbQ>UGm7@yCzyiNg5Fj4-Nzb1W{H-LJb52Y~kYz0R#1MW^rbA`{M`HRZUt9q;`_v z_~QV=QdChC1f(Gm{>2#b;~3USM#mKd1ZnWk7xW7~5OA){(F>|5?J>@`d?k)~kmm z70b76CmsT%$boGqA^djt@&7wQXR74=-vypr=CD|sf69CmJ%rx|W`7j_=dMSww(^6& z74)F|zi-*=WT+U?y4wBss-L16TbBFf^RFKgx0~kj&YPXve`|k-3M^xMXZ-QFAkmx_ zKToq(GZ@+bZ=-l}>-wI-Ru`F%Rd!z83`6V4DrwJa(iEP=E30%EEcX?dWLAY#`5D{&|g?iZ14KN@3pXUSg_n`D5A0Rfpa%W~_zT?b)6t zO3~N1w`Xe@>;J~v53a>T2cQzwpSd3SlG1pKzDF%6x5m63E5R9UzN&^bTg@>vGr{rL ztjjoWbIT9RCJ`nSACWWucMJ(8H%X7Bt!+)#ku8A*TepkpxcqAjSetTbAhjwX?s2>kcnHCY1QY}wq7Og5_7 z4e1cgHAOsYxVG1U73FVxU1rfWszr(__i54$)BNe%NqAJ@ttC@`w z5cpi;mrg)!%ouG8TamIy5&Yxt%6Q31f}#|)@BG41Rjfg2Rlsq+v~_dXhMQ7PMICKr zU9fJbp;oj&M#qOYGsAk>w!Ex8I5b2`DrE3m-rMEx1S1BwR+UwdPk3p`*7%r>bmxJz z1$LhpHN+|@&Ob?(e4pds$Bjmh#bzF^Hy#-D*YmjenMe_jgp`1k2Ed_89nYFhFdaET z#lno;BSNy$Zl&@|eU7>MuM0Ot4~XYV6~#lL5CL-@!lA=DLjvt+2_FHAk7 zT(`6S6Lq3vO0)NT5{D-<(~J4^aGqUqQDc(n1e zST!s0)POjBz0qq~K{4|#XDJshIox3C+^NwIL3tVz2cUhObJSO#)LKUIcfvl+O+$1) z6U2kMHmh4!)jTKAIp}K9l!bS57#?;|CUf-F?g)8cFxX;J;(%sikMJ0M zxV#@Csr@*1tc^7UNwihvnXrZ$RVq0t6O{9bL?+?q2IoUfx3dLA^C}Igb1Fnuk5!DW zsHmX4&dA%S*772QZ>+A$0{&=mNz>?21nFq;T-MbMRQemeMEEVaVU!Y~)Yz9>eLq~6 zyNu}_Aao93&d&(9_l&47$hTSV?AC(feWyZ+gfh_$wucAG(s@iVCV%=xlxt0)61^cj zFV&3fqmZL`AXY6o45mWJv+excM$~S+2-4s=LGe3g3L!EaSX5ja${MTp^=+`8^I_mc z4`EojHab4*Hu+x0?YQ&!^^vCpy<3~pj>Hdqj;+BT7k{zQhp@vmI>=z+=6IKW+4;B7 zo`Zvv$JaQLIwGM2k{YzJ?k{cb+YDUx>yd>xn#%O5+(?Zb=l!8pp+|xKr=X{uBg@SW z;6#HlqGZg>_WgW|wZ5{tZ5_USpRq#F*IKsrOl7a%(WM0VAYYvKxafF>b|;=lCVcM* z`liI3PL?PjFzmufZ251Mnd|xN2bwLNfx;(a=wac|yIaGz+P%jqI8ZcOdj|+5w{(bn zt{iQQ2ty?2)+>Mz7^o%n zbvnQGpYb%`miYEF^;~jy`67O~?G%En`W&J69j30Lt~FmQO*JSdlAS=uYp}$>4Idw| zbuT~4|68r-;zc9(CX$K5_I-ot993?QIW7lPxUlq5l_gJyIlIzkAb%2u7_*UJ)#diu zcD<`pWL+6-St8-^8@%W83P`qcXNdFh2I|wD%hn&;e@Hm`vMc_gcR)ON@tNOwZB1#jTK8W~I!BAso#!Q*CqrT}*zd>I%BekzRVFU|n@9QeLzCJ(Lm$Hjs zfh(w!gwIM@;(>NFt4uu6owiTp%8#O6k4HSK95nF$xhe>Re91*yvV^+g4HqLE8YV1gyifE`-A;AC@iqEGaYR6PA2Km{rz%% zN4`@?sb4CcFFn|aGO9dYv;`xd`VVmjqwUU{vF#1#?_&x;~D(Z0d1VlV`$t~qSY0uy9Dw<4og z-m|u9Sx$5f%CSNf`EOpdxxN#nPv}Q=+F{(fP08#rO=BVxXxf=AkiS)Ch9r)z76~N|IL71#;8P;$8;#^;E1o`rw$w=hk zVtfQeVGTh+sXx#Usdu&K%`$vv7hA);;%+PcZV zeX{Ya&Fc$V+u%GBTeO?ZY$&}R;6&7&bJqvUN4n~3wS3L3kK7*l8M>}d$^6?)9=`L_ z4sYD?G_JgZ$|i;Az?;)(?}btBAMa?G?0&ikkcdVr*KXM1Pv}o)aejR7A4WW#>DJ>m zo5%$9zBy=!c#~i$d7H^ppbD<=368gtD4RQm_=p54C@5f9Sy{#0+?r6Zu&4xl?-abA zepj&gJvf~vUw(DnB;CI4_U*qdy$w&2-3_-C?1a5vYe8Ysq@&Jd)>Yvtpj2tgWUq1( z@Tc2;`}Ve2#4speK-p9)pc&Qh1i1~E9xkf*r5}au^MHkxz8;MwMs$g(t93Ln+l8U~ zG>_?^{fP)?T?yywW3rRu4G`1HqKp7 zz|wk^iJWK~QsL|^W4FS!8gG}Hb^ai7J9_5K4RG=r!s=OP z(8SM<7Y%THf3-W=8ao0EmP*9zcHoVDx-0vEmazSRO+ENmE#dmoE_#k%wsc`I$zrW( z?&16)N;v5)A@y2k%A#$({&6f;d$6Q;`v!nb=5a_t{;4AVDPz_?u}^hA{r)YM0S$8H zh91S4Z>wE~;ST6iuz=2+>IA?DQmK1@}QhyAnSZ5#fkQ@EUJm$fMGTLO~ z1rx$14n@R@OMr*H@w|>`8yiJy{fl+Vbnm0ew)yYR0E-O6aOit3czgOdEQTNP*ir{J zly|442Z&)akqnmMwc+XCC&WtoRZw;J5qRodv^w-qb}K4_4i!jjFA?eoO3F)8e0(Trl7?ly~M%KGz4X!_};s|;XSF&5epqo@ydHcq)=f~Lz{kkv< zR|3AO0Lln|8VD_FQ+s6>UB#W>K75W;ZB*Jy=;emv?+~%Y*gBG7U-J>U0HMCBO6OZ% zp(O?H)~Osw9x`P$`X*Lvw~l13-EKiMgsaIGU2nPCNrI*%0tpAOVlIp$w_NsUQg?#!(s1(&nMa=VgUt%783lldBYw zMc|z3;O!xtdwJ9pKaV_j;C4*V>MJ~1ZI>ef(C}DsZPkt9$pk$tnYS>4orr-51hH#l zaKNZu_EUUFe&N|Hx!~Vp8`^pk)o*Nf1xS2(%xXH8dW4@hk})tL@6*DKu6u*!*DOc@ za+X*{5ry@p$1C{;LG-p1x2?(HG!WZ}&Gur7jRj``n;QOTWo*l^_zltxahO%4at zltq~$L-tGNc*)%1xLM;0srByeuo|g+E&wRL{j1jhOkHCDHkhEG;P%DETS5^FG&Hnr zrDNpp_KSPK{?QvFon~#ED!DX??P9fdmldf}u0V8FqlJ!XAW~0kd98i}!}b37fJ6_N)AuEy#R4F3fAh4BL(Xs`Rq8U;W(~l>!L0JMJ z!iWpPCB1J72{6@cNha72zwM>NxzXZhew#fWqgg-*O^-Ic8sbHF!{bD^hfAx4riuOC zw;mqLy3?AifIuZ$wAfDrr%EngW-9%)ma78Qo-=Z^;8QdwxDUx!1@oDL&O&^tYB;es zjn{%rV&!-S#3s62i?(6wDG zB*zyP2nq9rG2f9^VjoG^O`j|mPDTM~&yu-pNemzk2CK7N8?3fr z_KZT2!au{5GHg(mcC&U;A*tI;om2+vD&D$ER`_5~yFRG02E2vH{;D$wIj0n#QSZrQ ze__pDD3#YiCOq|QSfoN5@zI2z9rL*g6(0k?7A+7)q*5vfhlC#i_{sTFSaT@k>LMf{ zDk$J9{GK6W8?R^OYTZd^6Glrw81iTpQLV(XSH<0Z!-0ODm)zdX!0wx(HksS-qF7%J zvmWbG2`y1=d`co|DGYXu=)hSMfc5^aV5Sufr;1uuZ*~ulW!XPSiN0Mx&FtrQEkcuq zMo#@naHL3%54wDXcTV@z+U&J*hL0>zR!c#*JuaMLdp16U1%HLJf?a#Hda2Qs;mbcD z)ubUh1_nh>btaenDmRnqa9o?$)p-caX3A`dyy@_7>vHvq6i$epPDSZNg1+OqvKmrh zp-oA3{;$c2b&1>v+ z#JF%30q(Uc#^}b=4r8$av2r0!ENJe8CbO{ha$OVZJ>06Oo**%E6^>Z!wNE5kui2wJ zVt`tjl}fy>%n(}EV-A<8szfqLc;GFBkLYC1kVa%LkL*!o3}X!Y%1LBT<19cvGC7J3 zM5yG1+!Nq%^m%{{?1zCVNQ4`0qzLu5#&wbPER-M@NI2kruv!~$Y*;JWknW<0+$ru2 z5<`%{%533D8zl`k9})T;pK;%>Qtfg56@yMz|1lG1k))0lf;g2+sbrJzZJnLW$qT%>NL|`NV9s>uJ5>%`U2}K zi?AgfY5mtyX9Ae?VH!;0&XzywO!5TeZ~KM?qG|Ng7Ah7|B)+l~C4u_8L>8GfgjfaE z^42OdjEbGBR%&2Q>)S1?B+du{gyFDgKn4Y=V?Fqz|C7CLra;!r_(V~fn*(spLD=(WTww7Anw zmJp*Op^Zo1JhecAKe?n?34jgY@7F)LdJHw8wW}2CN{OW7b$U#V^u6t?*1pp+d}fta zNCAjR?pP}GB`$_I8P<<;|C+0C=Bx=7&8_cG!+e+pW{;oMn2lti+ zDF@W{cydYsUngK_IsON~^MesZ`SoyR3IPq>>zqg=h&J$!sFceS43vz~^>6kQ&jY;b;6oX0p0we?Y6NZGo(MryU`@~Zj z4dF`V`0MVHN}gxa^!ih;Jrg(p8V;S}qE|vhY)40&iJRw;2lfgPja;H{W?+_A+u3yM zI>Hf^4T`c0I3I{n>r3d-XECWw)Hgunr=`Ev*wU}pa3h4$o7G1+*{!gUd}N!`J4wHe z;ww=8!HC{9WI~m)IbhvS=23rWjW!M6jmMasi0P)kG&R3|1?~xDT(W&q z#jcgrUOBN~l+b^|qE*n2HR0b=NTr`tr7)>%V>UamL6h1;6yQGyd0R#<-u(!job;PE zBpYQbhmv}BZXih6$TYE9`(h&#{-hUh^`K{0KMu+HPb)UFFS$Pbhu!)qzA;<=AFc5Y zr?37W)NTlaz3?A^irp{yzxzMV+=M%+{$CBG|G&3ff0k@!5+XppTa*l+AK+ZI^AThsix*QK zX;XTAfSt$f4U(+DPNdA|6N;(gJ*9-cPIN!7{I1!9q3mxSg3Jb@IxFsDp_W?Va0u3y zQ{dVhA?3k(i&v%>F?*L_tq^SgBqBAcBkb!*n7&RB6C?I=)IPlx<}zqvbx*5=v3{-G za=O*+UnE;7`jV~^GK+Xs$sjgdUd!0!wEq{=JWB8UIMNq=SS?R#8peu3C5501_Oiq& zLjJG|dwQc8qN>7X;3sOaniAf%C2e6lrrOl6w=^+t1KA=^x-DGMvt4@iGlk*9MvuU~ zvMqx;aDfa*OvonEC$zY!SaRhAup{;++Ac=fLgRDw(`usV*3>nY9AWzlg9?|3vR3Nc znt(+SFG|J3Xoe;s#$2 zDqT8VsD)sM@k*0B51J>QU`PB&?89sMmug5c?d6GGsg-BlFPeZxmH%sMYch}!+ zxuxNE}n6^2x2h-+$A?rLmSMM;oK>%6^0`A6?gM4n<&fAtLiWu{)TF8M#%r}zEfhg2(* z1vlh|cD7j9_@P>zreKUraWOzF-@0Y4K!IeaAG1Mi!U!F}kbyV> zlVYF!Vok43+-4px@r9N3_uh2gnkVQBIMSCDVqYF zcHh{}0`sAi63K&>Gk(?Ppe=Fbi%q}T(rA)qP!=VIb1wZHf(NZoBi9h2D^@y(_7xqI zxCKYR>&6gmP;Db_f^xkR2rKF~&tCmG2I*~!+@C%U!1?0Gq$z|M`j_tv9Pq?kfXX9u zQMZfgK+FcJOJN_yUw&5)Rf;@&9Nrqv`V{4LhZZ{St!*k40fTVnjgwJ|AsO-ec*bv= zaNVE>jVhcx&80+fU<{)F_fPp`Fo-O%)o{7}QICmV&iA3|MTyF0ce~b-#6Kq3NwEweip=eH2n-?Mi6sHM!5kNr`-8`jE^g^ISwK9PJ ztmFR5aW>20qK~RT4JP0hj&eu{%F7D^0r}EaX#?7-dPi8yid>2t?^hBAg=C zj)oXo3J{na)qkY@j6}Cr6$ghID0wiPx*cmJ5jGTcfC8lmX0pq1340YdOlwaN6N2$);04e15tv5v)L|T5F>?(QPMEkw4^YbtY6iu^Xx2jefP43}@Xe$ZTa`%O(L+{1ibx{!cFsYe zH1pN0q1n1*q7p(>jiEg~xkn*6fx8pGeme!rT861{grlGk6CyUw;u1M<2>)0e-Z?wV zs>f7dVE#6FK~8TPYGmgBP};}k&4y+Q1fZKax!s1L!?RiG+6BEPbY|_ZUc8SXl|7ne4AI*d26ovKev%fOgvkdN~I{4$LF5;))3m= z-Q7l6W(M}D&yCbt=Xx%^f6t}8jk$elzcV{jpYk&x-Ycl^G%%X=<;FJ8B+FzbES6Q^g$M)dK z@#cqtdhzSy&0&#EGaj(uKRtlv=sw$#o6mZ?d+70$&CYn#`$25XrrT}e7kVv|qiKMN z?!WF9=}-^2fY0i^<27IV`PmSAVRQav7yb7Ww=~McwAH*O@!uv0N3O7qJqtecdaJT> zaUnh5owq*ylq_R6e!7m-ZrX;ms0j$msv6*IQq1nkzm(Is6+lTolCQdJ!l{|lhH#(SA6(VL+-ay>8( z?7UHdZs7Xss$So9FtYuS!m08^YgwsPOb>9ojQa2VnGCw3K4@EjY$}!2&n{lwR)_eH z^pAvu1cWaSiP!aDaBnOXm59heaEBa#ErA(O)@Y_iMgh35us z!TVoqmy3K;7ki@Vsw`f>1#gf^xCKPn%B1Jcg~tvRuml|}{vI>JWSuPVjTqYDbtU5Q z`xkl|wPF}JOuDcXN_n7uyGywW01ONq9F>qTerwC<;o-q(1}G^bBU4Xw%L=2Qm9w%4 zk*Wjrfzy(C3#u|uvji-9d?Teii%U)~{x7`reW?OI-D6rBD;2=bC=ofS(~^$v!^F;Q zPsVz!BP8^j9&j*|1C(d`e<~RZo-j70lhlMNhGdDF*#jNg7>`~TTuSB`tQhZ8mfX7?yP1r z(j--(L;xr%Q$&km7Z8^=IGR05X=7qYm*+Kc3l=fkCO@NLtZoBlrp5Ei%fu$@IWqAG z1esK-cpiSm1LEH^S?U#PqznuQ@%Y>=M7O9g7NhaTN%$W`Msu~C%bhMxeotIzY@jiP zwOh54@#5frZ{PWHdO&Q7whE^-83Y{sNv#{#B^I(m=>lO-GK^EjuS z=p|pFRwB{&@^ot};Qxf-dHHkbe63Zox3RJD;j4+270qgkJ$-=a;Vvo(_lOATplA_i zpAp;E1w3xb<6)StW00{MQQo^Hel&TZ>3#KO8Y2dJSm-a`f?s z@+FFW-i+wFA`|inBo2Wu6zqzR5`rJPiQo<_wxwGH*hduY!$0#o>_2OTvZ<&(zQ-0< zorl?&v-dT^Pw0cak&Hwl+&Ve2L40JlXvCG;jTGJjs=(0biG-thr~QH<4h*74)w2|3tYr8>FAb@b*jrzFO@r`-8hOjUR6T#%?(omYA66b-DYJJMGQ* zxr2jFqcRK@ovP5|eDz~o1e2prd=PVhb`@l8?x*PwUi%+F8;*b%i-4dYtH+tPstmKv zR|sC0J&_OL(a#AN*B)j!p|Q~drVgE(jG|9#RKW6lc1xt$GG*ojkbi>hM_d4|O-HXR zFk52z16qExyH!Rwp3BU{x$06X5PI!pth`)r2mc~RIV|k;OT-Q&y5-@)tKsT&u|`~5 z8^^@dbf{}n+V~LWPok-9|3ixKS(KvB=qa;u-01QQBFg~0X4?=icow$dSTjovQo01e zrY7ML!^z~Fg@Pie()4m`5ThE4Z`W{1vDPgpv>QY*Ws)zoF08Rru<1(np`7VK9>dAa zGmKRTHRApnaFa#*iR#M4*HFDoDG%@VWTCNi?;jb#vshzVv8a$HimDHqMhh@I9W)^} zwy|{U#csNt`t|ti>}5mZw)bfmS0mRhXeR1}M*5a*+u&6HjGZm-PAzJ04-R`0*4fD# zFoZ>uHtBSQFpze#;k2>^g$?a{rXz@iUpMm2;BmVnxe%$d8?@+s8KEXma9k4>x@-+c z-xVT%JohT`^RJAgLZqQMT|sBjOR&zV$$wUM?mJXVe@w30K8Pi@N1_?`+Wqd^*`5k7 zPv4BeV=&J}PxCYCgO(&`Jj~6(kJwLTO2#w5l^uoV&``9sR_2i&f7?Hbn#0LFthp7B zq_}vJ6f)D~hDDln?^`h2Q#cw!YYGTv%k)X43j>2+*Dj$S35}~0hJ6d|#KuZ;v>NCY zDQVP9=8B92tR**c`XYR70^KMk-Auk7gRBFzmL>FZ196g9R~hztrs4h(S*fS1TC_VT z{Z#yr>^^OUfTcX1rzQ0VOV;V@*#{iQduXd9sSg&boVRwmnEh0~awJ3K25*V(xHTBg zayKxydmPU%lfRyWc?pA@9$6L%J)Qw);(qHCT2_W{*1;1NQ9si-i+XY4;G}YliiQDN zl0)4kuns``(yUNjMZK^vl%Jb!`oP`Jd4xgDU|u_Ea|7{(bC~winZz`5cm$iogDuV5NI4s48;NXznrNOsJ-Q z*yXL@Pd|%(INo=XLQM7A*C3tTRkF_tgYi49ArVKB9Cjhcj6UBcM%> z<(jh8xVxK;Wn*?P3WFFB_f0&W7Ph)de=W{AdKi&g?`lKm=c0uC?_8!Uis*%u0)an7)qOVGLq@tp$(&AW?FWL1)Hm7?omuEpq=k!9=$J3djF} zGdDAH!KXx&a2t||GSkWOUDC{P0j9r)UdG8c;nz5B60M%g;HGZGwN4|zD66u~LIzs- zzAW=+A$q08al9=>{Yv5@s@6=Q9lkysCwpJ*aOGw;N#M{h5B4#HGPm^lDjOK3%f3XU zuu?yhJ%MH`aY(?cF1c3n_42bCq*i()?Qb64^wBt=2HuWZ6STlOfs?y?;2!Km%$GzR zJWTAxKOX5ZP#OxFpWhCD4Q3TKrWuvr%bC~k?|>_S>mkwix-~_A5;5?so62puM0j*c^@9r zt#x=5G3BjR^qwe~pU{sf-ffuxE+3A{_+WN!V?j)O$-_>GN{NY!Qu8yjB>+b zD!;kUQq$RrZL>f`IJyMjr*ljkZ%TqP3(lc1&EBmNqi-{F_tTD#3K;J7p-gXlQtm_% z2~{nH>Ne2&NIh}$HD$)W?_}B>4oLY>mxH4-$TOCUV8xu(!};)}JWYYnYOVSqvFPKb zCYzKh{KBFmQbp4Nb00ZFD-mQWB`Mt#Rz44R-@tCKsYzq9*TE5jP|u%yYVw_(EgWvR ztx?;35!1e^bSR?Y2F3o8A!g^na;e_+hU$zj0CQWEo3;EM>};i-(DxFT#p2Lizd#?J z#m4D!N7e4K*@ghNlJt?5U0o)&w4k31g)YENhiq3(D=J#OPy0KCj}gG+n; zTg9UiP&cTojJUra{TGi+(B^q$60vgFV*+^RsQ&xTxgKuk=$8-8b0j>O(~SX_8FG|p z)Czo5M_j6^^-Qfg9EFwN%zi6X{hTjQ9hT6bm#PsNcTY-?%ygE-5fph4XSPsO95)0_ z4d81*zF5$c5X+2Fp2Urh##w7M(?FWL!ny+f9U!OVIN1IO3@Jc07PXP+hZp;;ksBiy z-cq9Wl{lDtb%`d9C!AfbRF&lA3l>zUxvF>3Eu&bfL8x8H>DFWiA8+#LTzGz+-)GT#kFqyk~+UPBY^A%jNTo$wtkxM29m4HA8R1R2xbgY7`%sgHa zrG|$31U|@N(@OFzIfm?%Nz!1%n6g7bqYL3Y8lS%XcVuW4^fQ!gOgN9dD2PKx$QEZZ_ zyfc69Mq+3yK(0Yb+x-lUNDy9B;RtJJ?6!q+wh*nt`+B?d1ko3Cq}Av3@IZxiM+_sLI!SYK5wdP=ifS{F2<2{DXjRB; ztBQkk&L8rO-C{KJ^QGKCEuvTgv8i49OKHZ>Z zv7cfT@RfVpeA>S&hC9gGRc&F~ygJ6NwRC$>oS5Q9If5W!B-2YK_ItRx%Cm(yNsH;> zU1VFmFKK>x4w;4vX9`-15li+*mPumTJcD!2hHHOl09AuT__D*2klz-D&VS#(rwL1Y z4e<^9YBaYM&L*7^!Vnu54IK@@nQ63WtFytuQdSXHJ(h0z`W@a20|TO27D=#KwJ36> z(9~pObP4tkxIFpJ>%vpHQ*S+^Bw?r%rXNoQB75)rAV>2do{rHA*k|!vL_j!Ef#!`} zk_?{@Qr?z2QlaGELvr}#mS#LW$}6+v#sQ^}9h$E*aU^7k?bj^;N;T?>d>WoRscR>E zjVBa5$y4uym1Z3~u%uz!>4bAgz4wvhQIuP+bRpt%ee3HpAo#-A>yA(FNc3$u)zz05=y2*74VS_jb2$XN+l3RdP5VD%4gBhq>ksnYC~Rg z*CZ-;^D4F}MHYuPzcAd4Le2ky$KIHeX|uSzeQ;b8B?0@hwr#$byieu|gV&7G zTX;!CQE{SV8>^VYnvTTboYbri6GCWw=KA9{R-Uviwsl*=J z!cWrC8O2I9;zmY=+6jz1a)gseM!P&Xx4KqVP+4SVay*?pVx*}9N+rXkhQ8Y_clnt= zS((uj7N9+WJ+a&z6B7{}tT^AF1~BgX8HeJq4R)^Pv|!WlH#w**8q2u<$Bbs{Ask7|Tl{!?XojWZr9 zUH5AJuS+gX;PblUTCmm{NYvE6c%mW$0Zvq+puW_U2-U(6;e_gPx>|Dx(3;3aO32|w zG5eI3uXYidH4(|~5wky06Ye~cREZSY#?LW#t}GU%?~q)MbZ}l9oXqw|mwD$ZIg=Xw z6!69oI=j)U*h?&Lw@?3}HV-YgZEHR$Zcf&_y7lGlzp56`$=P`mCh!G(OAyLZvGjlv zh{+6Hs5voRZ77p5XhT}8F+h53P@-A0BZZ4w4*8nFZxT>R={2L3Ah6I$&L#kLm36Yy zH;J3M#3m?}6)CEn5559MPx2hK@oRMx^!XxdE2|2<#SSM9!-y|b+0LJ9(>L$rPu%0- zLFcjEGkmt9;rvjKw^S=h%Eu=bSM)-gI2C*>xxV@pRrys8;4qV>(4~9wNGdZ=)gusW zEO-c5UFR%6c9fcZHWYajj`-h3v=;_H8FhKEF*e^9ra2d7QNZ$Z=buC|GB^y) zpYZAfk^n|MsUu`dTzR3*hj9rh{l<^;p{Qp(9~si=iL2JqdyU4E*YDEwOR<+Vb%rXM z@zFKhD|}=A^~19Al*=y0r6eZmm{*wEuk;_JM3}9GeSzZ?2OT~1LuDAV zO5y+XTPA~PgP(noIJ?52$FH5IVdRk);98KG2_r2%@?QHmk`Z&VRQJI_?~n=z2uP@6 z6Jo|fCz{UG8-KQin{55t-=i|X>@YQTb&QM6US=CqH2GqUKL~J8P!Mg8vbI2s&%zk7eekxVi20n?0_4XjU&!e{a^7d6ni>S@h3&ed7=BQXVnx^c} z#EE&dEik?a311|)1DHRgY$ea`4tOxF!mPu{NgPxkZ~c1of8aj)wbMuMWhRHbH1*vu za?2MP#nB@ua24T~$D5ENr0YKfeJ(LB+E}qN8XB6@`6{PshS_Km=*7jwAE@F;`44Pq ztN45wdlGH-soRft2fe-g&D!|TFf|PZn;KeSmwkblYUdVRB8(t7mYiN08@aDM*zn0M z=~x`Z9b#`a!)jU>mf!QTiO6`|oWuQds4VOpiV>oBEK%xs$p~=o)!9zc^C7T#$~DK? z@(_t)uO@-40@(2Do|1;mg2koV-*B58wy$0@55-IgN_6;*NBtzKk5PW7pb>WHPA5a9 zR9ewXTf7J3e_JST$i>OB24_Cz$p_BN__OTD+;^5?dwaXh|C!5;kFZjsimKG#P+hrz z4HYr40NOrfUs7^%3fkY1xug+vwuH-y32~_sS|? z@tx+Q;%%&9%0Z+O;l(F}qxt0Ob-?&Kvdkb0yXF4YRDp*g#COt8pZ1M?%FXod^LJBXacE1R=1YE&y|yP#y8v)o3-dTl`HbF5^H3ME+Elj`0k6#f7o z{E)3ohCS$iTqPCUQQij#keAu--?(zE2|gsq!H3zVrn-hvpg)nT$-AY z+Fx9g_LJ-U`Pgpv4ar8jQoUlZ#Jl2xBKw07OXjrIRONa7u=n3KlrIL6FZ`uH)Q>-# zZL#qgQBrh!gUX5|~;yU)#1;nfbms(R%ZNUijQ=j~Ns z$6T9+HVTWD+YU)AkY6CH^4I&e%)INvOJoH&V075i#D{=yG)u<#@Us0Vy}xM|0rZt- z>ZG=y zsFsxa6o>+Q9MbSq86QJCRX*!*Xue6!Fxdb(aXnf?H0=~aIoq5`EIIOMCEEOi3<&B+ z`&}#fgrxpaS(Qxno|@^R7FB+lw^t88EBcbu?Jjq=Esrt*v`TXF zS1rdSY!t%AIgw3YP9*hc^C0%AzfkT=Kez0o5cA#D6*if1D}w3L&CjQ%Aj1o~R3y^641F18&E&lE3fI*R+~~D|H%6k6MT9OoS~O zi9&>+Lb!CBLa9{k<$Qv@S}lIjeZ~4zsuYGRSG^oC>@)vNV|1B=*KNr-^q3?VRqz#0 z(pOnBC&)sZvlf>_i))8&b?XB>2j++mV21<_~c?iKyG)*MIxgaxBgd!DnlJ`ru{bqCC~qzaLEgzz{fzb`y~g6RZy-^*+weZ2 zM&OSHskLc`(_;r&yRIF!#O_(NGkR>5)xyX$WgYozPM*d6)p@XTpx$9qPCqd^(((HH zvWp#>%lpF=%}0PANYDW*muMoZKdb3-IU@Vq^d;fTV0v19E`=K9%u^3ZqhJJzWB;N* zYz0$`d&+le3Q?KFcv#wa4CaNrLKZpZg>fueCBB5~)Ky92CS@7-^nPplFUooq4zsLk z0ctqLIdx5x(zhuI$+_ytYXM2$llqJKmJgnV)Vl12KAu%pW8bURzE@@nBWJ4jQ&`mh zWB;$qOw+EvjKcHNQ_tAP-s0S>lZg%G)3-;u#}+?qYe{yQ1zJWg9d z4~qxS9~)JV(8Wk8!lNvRO9wMps3F9o0%Mk=%2fC$2Uhd&Fc?#?D`qVlh;EsxtF{ZT zgL~m0bGMN>(K6@oIPBzwCGK`Lwd3i{?wnlI`ze)ku8gDQFOT^uo9qO8H_6(~KNSyTfl=UgWrWl3(EcAQ3sD zB3F&t>)mAK(jLu8C-d47213bcPL4-s--qOL{=omt;vvytD2iVNys!7-AJPUfuCDjx zoxM49>EyGc8Zgb9C|M=$(OoF=i&@qg(+z4LV=E{AD0f>Vl&;yEG@I&woyBfB=rJq3ZuS0jdwMx< zC{~%+r0l$RcfJ<+K>^0T%2e5@@Tyall)RFPN089c%2tE>`-Oj}qWRgz^3pt@^=}G}7to-v%c&8b}{7C!ATMBEX@P zeuM_-&=={Bk?~~tP*r~4LBXWjFA-OeAgG$rlT+Yi)>imIqC18qQ+%h` zruy&*EUEn;{|^B8@XWH?P5%#5?--s*w1wMtY}*~%w(X8>+qP}nNym1_wr$%^I``{+ z&)(y$ z#}9)%f\s)c965pv_Ju8x6`0I47+(+7C%-2ZhbR>-Se1^-Zlt+rx}Z zqvThCdcEQPdOrd_Pw)Ov)Q~-wuH{V`^u^4O3~+i1C1*wsa4mgp|EnwOY?+Bkv~B}| z99>Pm1@(rrpX+6Zv&>-o*@C^A5kmW=u*IL2q=D(FmjNXS~w zHoZ^V{9LPYqtg*yFnX`44kjt=d(>_rtPmp_ZK}%EY6O8d~Hw0q3s#%LG#mu z^F=o7+cf~UbZh^hFCOX$<{gz5yr;ozeIaSF(Tt$&JSh;O`l)jESG~E0d8lys5G{R< z5@Ewhf#$F1ig!O|cT%^==^5Pe|+^HB=O1);+0hSywO?i#cHP$mTIkbNP#RR z8yFd0cjQ;+iosVE;pnk4BDLXjoM1K2|XlhAwp_)yZ@Eeis8Yb zE~G;0;PPqA>#aB6ziN{}LZC!8OEr6_$>d+(RX3*StAQGz#4S0D>9vgd|9mxp`9XkdTPL64%RkRB5%!p^gj!7AjFf_uE}TMVh3I zHise(CF%(7_4z8xPS>m1-zwD37t3&fk{%Qg%nm(@7nE2gj=m1V?9AKd+ zK*$2H;!%4n%yP^ZTCKK20A^(p^( zt*U^Zf8MxX4j$cC_izL%V5jSgF8~Xj%81E+Auk&8r?q!BSRqEqc$TBHcQ)*gPh77M zxsx)W;wC+$qQ$@3j!4sFt26i|eFO+`cJ#*LYfM<6L4%?ASK(67oTXIxZR6JJOXAX= zrKEa7F%4ziOPq%vRp1V?P_^9bW`tkGTpTC|Lf~E*?=Lv=yK$!4aYLmfF)JIS)jJN* zY2d_-;;3`H+Uvc~cj}cglr;!qgivjXVm8dv?v2Ts(a^ZeuIGt9A8GSE z#0DjIbCsj)79FHg=cU+=9b`wDl1jzshB)q>?&QcvL|Kb?YHc-J3G`v9vE>dFN#O>> z(+104Z=S!xa=MF93W@sj8{A&?yL#W1c(8U705CLvC~U?|pAyFT}Gwr9jF1v6C&oPc(rZr9Hp(P6nllPd(YPDI+6ltu<=E-!Mg)c(j#pzS|@ z?424i1L~r-x3{?hTN}e7bykD%I^(M-2YH4RN?^RZ*Fq-gNTji(+}%9}GVqG@&q_E^ z(~S8ft}ot77p}5#s~wc(t#ohnA?OM8UfA15LWB?4P9e@;jAJ|&&|_? z1Ysn4MOx-~;3mk(+)R(B)N^e#W&A7NiRZ1!pr|rK$QD2{Ny!4l3L}G!mwu}Z*(2-u zecpwo|9u3s>bc$M9FHd{r}a^~J)e*l7ADM%Ed~196bgjw0rn50s;aDD7MT5vickVmvMJS>BA7b%=LVKkDO*koTUu~z*aCabS080mBgyp zp)`;~Nn!ye6uL;2-^>x3$R&@7zNs`C3;^E10X-cQE&@0Z9DNb~H}@3uf;H#U%wmPo zkULdc?)5KxVzFpMFvsW1HAaVhk$RuE`y&(x4Cz!Fqy;4oC{0V0BT*YNBtFwgOh#HL zS1ID=xOFS;InoFXOY)_l{7(R%Lvt(%l6$??33$0+WKm3CRQ{W5^0pT*d7((PoP;gbK_uS}PBLwFr`-+VS>fCpa z$M4u3;P6Rk))^CV*w?XM_d=hk$sYXL7^ycFAiwNM@n0Ds)8EXu<#43Oho>T6&B8Zm zSKmf9?@D&}eEm^FpcfSp)M0p%f+5l71bbqe*SFkWWY5Zh#MB5htPG|=vyXnAf!fw- zLEhkY6&YOVhFIwftwF*)1C$%y){W)_;no)j27?4bkiLlE;JT(wliq;rKv#3g!!dy9 z0u*IRBV0HKbWJD8!Da_(O0OM2!HaTe?R~d93oJwMiStZ=5V}bTtfpGkS88I!V08@J zB~fQYv<|d>QdZ|ILQbRJ1iGhb=ITRntA9f?iOG$NV3cfUy81oN+3C4Ez6QwH&=LgZ z@#uSwyvbV(K9J`!UqF4qOT1r~kvLsvmaA9Lg#MjFhr?MJEYL~Cg8KJI`jaOHbU?kALrmo-a*zp1Kd%7lRP+PM*SSmT zwVOl^;({zy$&h&--p2^i(0wEoURNpX!_bG?A1;RqXVT8dK9SD4IGf`>58eSqCbXi6zG4j(y=1 z^D&}oc}55PmeEp{a{-%(?Ha5MLSeM%qfNF@M>P|F9(f|k3@E{}WQ~or4(o(JQfxKF z$35S{p_g&2+IGN{lcD&-!3Nex#x9bV6;?3toNs((xXRjw*&>oAa$s1a&g0Iv?{iSs zydgm$-71>G!d~||3e&~M0<-{6R^Tx7sLpQ>ZOD8qsJXK^s@O#Ixpk$_gq@#eCU)(7 zVt*nDTEjmPj19&tWasXG+lhggQAEQdOJ3(bt6f|@4`d*vt=PlDYCAusQ zl+U@81fDNwWs7dGpc4#C*`z=uk*q?Ogh3m{lsld)eBAzL!p0fU@zfR^ZMXSz>CKLd z@r>`;qXF#MyaJE>7Iw18;6>WL^((i9?9E^F9ti&Ca@(ygpxhn40Iiefy}qNMHb?JH z*8gaV__-1lhy>9vFvue*Gc`)rv@#>e93+@?SfphOqc82CGTTd4@F6J?EU3G!#mOL$ zNp=GR0|$8|tCBcD)*O;{Ns_>!kmqaldeA45QoTtj?6kP`D`=3t6HkdL;8NsGsYvw4 zNP-4gp~N$%N;t++vwjxHj3{_C$(#K0Wl5qIydr0g1Q1wJ1Z;!}vinK-8hT?aq4|zb z<3ZyEY+@oJ;lNp-^bzhB8k`l|B-tez2J302MU-}qiRq<}zdFYrgFxFr;h@Xu&nQ76 z455%G77?6jn&W<=pkYfaR%@v}D*aWiS;YAD*5V@|@${vt@XWFxIdQImyLQ?@%bM{i zLq|E85FSAvuvpXA_IyZ5XM-1pMxNKdg^JJ}4>aX_6>2@yS>Rh?)%K+h)Gh>{!3NxF zTOxRdK7^=V$d8@EAII&wG^^@_!JVr;az_p}`&(1Yb?UuPF0E!%rJYQwf{EDc?0$5! zm{y8pYp9akpzSL?(Ya6++!1Cs;ed0jx zyUIvSPPU5X{^h4dTLu@JW67gfIv4JXyq<7Ne|x^4GhF?(tYViGUvl{u%qAK+Qr=-S zEGIRwU;SmB+5XG;Bs_G`($oQkUJsuNM%EA$O~s()l>YUIzbzjQwr3*VL6JrAHvCp7{m z(&#jV|ARAj#|I~p6hnG4*30Md?bA>}iA54Sh!ZI?k^W3VKz0bO<{+t;DBN6I(?GRD z20Vz&b;dmax=#YI#fp0?=9(&59Kl01WRz;CQYj$^fJPWd9?r>XQ6+&EkVrsj4n>;U zj0Fdr3)q}3RwPmETa-|buc%ff;W3wxFF=n+1yg01twOs~Wtm=Bv}Bx%Gp{}V0$^>a zBJ@|%BZ~YAycS|v=PL~WSKx83b&rL<&|PwFev8DHyi3x$>_}44A99LrmY?}+_Doyx zKkMZS^UmqlB2XUp3E`4S05!RSkGZ`t^Eyis9h`4D0tMbuOup;a25^M6V~J~2>{6O3 zzsYmWt&~CB!vPmDlb=@c-LHPdO7SBk@;dJwQs?Sqc+Ul+%{DY3gg2XPj%=(mW*mKe z3s@;L_j0m+!|RN`}D8dW_BItXV`y=`{b z#=n#Ozc!7DkLCZhIM`OaQmD8c6*wJ{HmWKvqPwJePIg0NU1d8PJdsN`8f-)n# zh;ctb5>VT5<{X|?wX7R4%M`WN%Q0jNY~Htq=ahgwIqP?VhcFo|&Tv-TF1<0~Jnu3+ zv$h+)dEext&R;=U1B3GRZv$l0d5wMm=cMMVwGVOl9VM8v{{wKdZxEokk!PKSNtj`g zdy2$jkPjp#6YGc-$)EsIyU++~mDwmqV?7z>1(GIGAP)WBA9JQ|6REU?c&>nNG0{6I zwjtwfLDxa!mf1p4m^<|bkkYgZ^BzDJ;AZj=nWTSgIm2|egh}Et0Sl}fRf2v~HjhsS zwcD6LCf))hLsbELds7L4(PjTe?dIrB-D|z^7(}P!KBO|b|51Gh}4cb=vJdm_xqe!b|n=Q!+3F3Jq>aEW8 zxXFe6Vd+(9sOkp0<&F?L-A<_e3U}m~79hTJHfp3iKr5|UzDQ@@VU8s`^0D$8NcMng_&pO=Z5sL^6?ySL4WwQcCrDH2Ooykn3@s5enj> z;l820;CsCDb|MiZ*P5qHg?cZE7v?fCvB-MHI(?-B)KxFev_Eq?1>RIcHQ9Ot^sTYP zrgluROc$(}W)r2kVMjD7yUNxj>p(Xg+QJcBXc!!vDGXKO z`UZT&|F`+ZPsE~$5`mMNtvix+oC-&?z{utenukC?F|yaSx0WlfF^e^QBKd>{3WY-C zd$h{iVKgcoxPY~LO^D)Op2*A2WIY5-&p~hI8uI)M9d$P1!%gyX*jNh)0j4PBiYVl= zf?J`oiZ#kej9)!dV;~pt@sB^y#=-h^(Gi3PWmhd~^gm-uM->?em_Xf$te!WQ7Xe+c zEN*xsx7?7_oT~eQRwIEk1p1d3BZJ{FumcBT72(J7)H&>DmvmM?POf@_5}6uAJ7eQU z^;%tCE1G}*AF!Nvel7rw`DW@q69Y-bzx|ksPmBOsLs@`j6WmWU75)1963sG-B-YZm z5X-n0Ha-{Zk2O_=(p-+w&SbF|l-H1+y`*0%5C{M+%oF*UA-9?tIva_{0wU}8O)^Ro zG%0oZSKMQL7^%L#-f-L4OqLACxYPS`mC<22{k}}Yp`+}Vm!!Hh8Le@HV9Sg#yUoY^ z&uSJSD>Lb1f~HV*JYk#CPjd#LAQ(%SjCzTu0u7UM@pJO=II@&c<={b@rJVQReMlzy z0*?1dc0wp;DRGn8J7u$u9i{Ji528ML!M(?Ok|V+;B~MEM17)@x=JBNWSQ%S$6?Dqz z@%&rB&*v@=XaSGEN#&(Z&x~gz6ueJ3PiSzergB-)^VQ=0`OP#X)CEmtD%>>GI+&~x zv*sF{G}+6wt`1J7dyW*z1*_|SsDo{#=SX_Uk@pJ=<}wN#9Rl;^f`MG^O+j!&wEg)g z11ey}NtAedS9j3!`%cep*+zs-Zy-Y?A@ES{?P8g!^>6ln5aU2*9R2bDWTs6$C@$0O zmjvvLL4IL~rzav4mTT`_{tQbU&u7gNH75kccqUeA?2?VIRQEy^Be6II)51!IpS&3b zZxW+riBOJ>gquE`WoD#qbPE1u8{9`>W}!?YgFt!#QzFwx2Me-Tg_|VcdO&AiXV$}= zlpAuE@2uS5`rBd&wEPnEbk!k}{phqna=v$Z3?JMwEjs0-++TMJ^ch2r2`8g``m|E0 zZ*q*$Vw~k)25m||spZhzUcyiQl#7txhEfK*R}v6v04&UnAIF3?fF^-QrG7L_sE`lA zb7+~m*Au(4-8!lg#?{d1c5_t)={_T)8yZC#L2s=`UV+ZLra}yF?3?WNm(iOYvWFL^ z*o?CNdw=S3e5=ToPC&wfae93@8YmmnBK4&Ky^qN;b>Dv?^4^>*QPQ@@lNkWZW6*Ua zizZ$&7bJdG3&i%bn_gfqwtnf_~w=Xpqu?Sl_HUusLFhuHYoM-s1)qE3T<%%2)#?&n|xq(0j7=&~@kivc!(R~lCgo>YA z84j*X#?F_s2pe?4%->Ggx?S)G!|*~qW7Gn96>A)Zge_OO0e?2|f%h;NOLyo`c?|h< z38AvYY5QAvneRSgH^O_|fXr+a&U!;!7Us^<;L|%&_=@4X+MJPB5Nw9%tNt3b>Y@(( zryRS=k03|(oZm#7`qN^uAhtx#drYiBVXEH zAi`ilk*ynK0S{g47J<8z_fgaR*g9%VoW7{eD?2?mHR!|M^O|pL?nXBI`fmqHR9?TI zmaoG)7Tefa)<%XKO&X!N$=-PsrqB6u#8}+5kTk-y*{%VJ*EDnB6+nB@{lf^gS__%8 zAz5UL$O34GrhKaj&+(K_|NSv)RIii8(U>km%!GOWxMpe9l@E5#Ox$2`9n$%F8<`#h zex&OHDx8NK0_+`spnMvwzF9;--MD$rx~% z(_;)C^Dr|Tj8pCOc{UAdBh)4O(~se=j@e=*5&;Ta^`6tj!L@L#s`cCUz|?n3`7(BX zl$jyd9_7FOekjTE9Z9i;$bg*xQuLAC9Es4LHtMy3+3k2Gie|D@*s#tAaqk;wVC=Pc zm$Vy8ttO~PLsCv26qUGIyl7tkHh?yI*5}7UonA%vImZxcX2Y8$5tT!wQbxY|Z6Z8* z#nAP~4Q(X0YKS1|c-J!=9=Z`YWr9_F;aB@?l?rD%UAMrw_Zs4E9^8;pdAz+hwVd;9T^>O$Rvox*3#7Qfx*q@ zguj~(EcU>|Xc907>H4r0T?j)wrUqu0x)cbqLN{NOjFoy!i`6}_7jm^>CMMGo&eMvx zId=R4xk(`L&j@ZjJQ{ekzvTLg)u{8in8CixI1G-4={Q&pF>s+j@oX58u3}XN+mB=i zaVO`rW~;_YCwn;X=~bUbvOmxms``jwb1x%HtTYYX8^K3eY?v)|F@tkgCiJzh$T2yl zktUW~`|1_(>NjfHxj5tmcNSFYy?jBc>^4vfy2}br`{vXutYbKR?hQ=Gs1#^6<7_o{ z=&+vL?6dv}(chd;b0uCR8}^b1>qv@s@`h3eUp{8PR3ek+=Tc`hdnVG>mE|)zfRxs{ z=?MAyG6NqT`h1nZSrgm24c42^HcQ{FgqfGt+Ylkw?MG#?OVv>dqT&p-G&@A~g+2gB zo<|i)(cVq(!&=4hL9NLIW%pF-y+v(NA07pU&LYwoO0cw()P^_tG!&NyP&}+$dzJcd zgohVJz-Ej`8|1ZvjbI%%nHkScwXweIprLjt!9l*U% zf!zK&h|vaP4$q@^dzOxiw$M%>68C8faS?m&gJ3kax0$5hiy5z!rO;i4@zppVApVUL zwGr~j=@@lkW@=IYBj!@Ae}wtRN8@+kcDs^53K0ksczg~AVmv$hFRnZO(SI#x+JY?R ztzM`Oi;e9zC<{I0DFPwnA1!Ca2b_8cnsPHiTjfe`ZH_MsTo`TKm8(CVKd=Hm%glbC z#Nh;A!apdIIKdJX9l2xWfG0!}-HvV`U^SMGglBj$TBVzWra!FQX8gxc|2gV?Cd1kd z+TnO4Wkqvh7Lr1$z=*aqQXrsv~0H|DB$8 z3pgE%saX7m?P#vVK)0zv>qqrDs!)_B*le*FA4^Rt%+W+z>;In?13Wez=6SfntqDa1 z&DiVMbaKKYD&mXLzd!szn)>Bsyx4k@Tu zDlYt?wCX+p30cN4wh1M>88DUezSowC+$Hvs=n+rmV}y$kHS+Ayvmb&L-qnovaFUDK zxY})oksE40`1Ngui-$K<-P2=&)=ZF)C#0;$;{?iAb9d_`@87A!VVk`Z(m3L__cuqn z&FzB7>E!NQG@iAY7C|vN#*$~=MC7;gpHq&L->jc`9^Uq-nJnob7rXaaMe^=3;s`=J zU)Zxn#N{e9FkQS0g-dNl;c;8B9h{zxdAo6;=+x&&O&hH` z^OJU`6VDI(^_U-D?hdAi$%fs=msek`#u)j{V*t{MQR(&pui4`Bxj98zI3**i&1;ZJTp;g}`sZ_@dCpP6GPT17ke z@D92v*dBxY6r-RQdV!*rY9zzD!F6OW8;tSSKhGiKpO&6;il*#G7# zw2aPOu4uN|zw;5f*$BQZo2aK_zrg2-R)N$NOA()D%Jl!Kx0rJ~Cp3R#%I-i2zQPFt z3acR^JjR;F-Ga!85>;?izo}Rn&E{-edNI0F3b*9E+}%Hg3h9TVliMCmS-=3Qi8CN* z#QR;>91lU?AK?;Iuyj@}E`b?8)&q9U=M#(}Pyf@@l)tJQ&nV`@3-Ftvt&QW;3NIP4 z3GN{D+T%o6pz>r&IG4~25ep?cBj-VIc69gr3`pMUGcE`izGnGEoeSuN1wF;(BoWC` zT(e*!rg;JgF3fIt815lnD*DS;JA)s-6t$$@eFG_4&JT1djg&|S-0BeLQn1qVL-jK7 zNIFe_Z$1Tcg9Rnkbu@sil21>4gS)fQuY1sC!jDJSaC8?h-2U@{pt65UP5-#NcetE**Nzq)dC9VN}{y+Hj;DC7w6V}Or{$4xW zxKPT&2%Do7Cq<=8LGWFp+Lf8N ziY{L!m|$}isNsKB93}!AH}37LFuLO)fyU3hws$csqrQgbQl^ETEjemRRIIsw#=Y}4~_i=4( z7uThMXa5Y2(+0`T_%QFZSfLU-gq>l{bntjSXTIT>`sDos$B)`NN5fg*;mmBPPV2(6 zUndnghdae^Pfq%>b|LHzXuf)5p&g(X z5R5X9;iHGC^xo4JnRw7?k&uRF`Uj)Bm`op#@U+$e_4EO+IUuWyPdktNM?D=@dOSkV zmz{nz&pXbT$_ z>2)kFOY#sqYg(MEA^Bgt%T-BXq9#IwI8E$-vxgChvNbvS)A%rhZt=(1UUld%#3(TG zyx$_a`qJ3QZW&}?x*C{sj($GuE3-VL3(XSIM$xm&Mh^t7(NvR%UcJsHu>s14ou90~ zPdK9br0oioYYr#vg6SxsEL~?N(==l2m4EP&lx zpBF15BR=1+J+c63{r+So&go=YL)e$c7h2Iq{9eq!wAFw%Igtvz zLyV9oa5>vot*$FhW)DbD&umkj0Tm~YM0n;oq~7MmGgy4+VE>5(me&)BT^zNqL4}); z;;Nv|N#u1vRNbZhr>UZ{~$ z)z++!mV^l{(vP!ILo3w5%*^Mkm7a54$3{2hwHaR4BkD+W-`dp;>%4Sa@+c^J|ug1+N(;#g`yx zEoei~!v@|_&VwwqwZ<0zQQI4jw&QugAHKQXN`219>ycN|l-12cB89w;OG ztIzn3y7W?bV6JG6rWPtHGp#@KLyTi%Ax|u06+&_Yf>5{w>9%4Oh&U83;AV?+H1VCC z!^9#~tmLxJchE64vS1^!BF^8mSz3q^Go2!4AUea1q1aBktrDKNjEOk+&^pYM6K<93 z6+wFe7(vZVe=Ly2cdM)2;gFcKKO?1OTT(Q+h5B7W=l$^X-Xe>9C-*bc; zLp+O8Tz%7yriM~Z-Zlogo2~(Kg#YW#;r4Ol%jId-=Zkof*A4P)t(Ss`29%IcQUah3 zg63}Q0kgO-)Y=)g%UeFxGkDp`s+(8_LF=wE5Ls6(A7(SF*%r!J?)JyQsbdfSD~4HT zx1zIpR30kE8DP8CXcSgJSxTE7l-n+>$g9PjDh3`R7+3ddZPCUR*xDEubC0!9s8RN0H2e4RllYBzsB<<^Cr0_HUnzE|aT^=^MORL4 z1W?W4%+*`D!K!;eOK2d+;6#h*B?5b7<$LB*nQO;OTNd)+XlwuRUOWF_eA^RsF*e4` z<$>$Fy69_j$cZo~8+Y!&JVj3WDIe}nNeF5xOGIRZJec+MF?#44k58q?l@Z(&z!x5) z@KgRtvwXXd{doo-+75#A9+f(Xh9;)F6~_2ogbXByCy<)m97v~W zoPSRvay#=8^2Jdy7wIO-J`x5BLd^9H`sSFFYwvVWmV?6%$)=Z$z;-`r#;X34ObRj| z_|L;t?a9?r!ESWgc;cdHIR44oyGcllRI=k{a0}^Wk(|=0di!%@)GAI~gpnh$qJ2t+ zzmH*jbAL(GGk&;;bX;QP`#8cC)aL%A(lR|%=<)eWm$rag7TK&7M7mMa&pcyarNx7- zl$PCJB)u|6mxjY4761q9Z(!A8c;5@opt}={=O6{k*M;K;ixqh0^-M&J%wRL-X|D2I z_>-^G1`b`D(eSChl4CLF{V&t7wO{OKPMX0|HWX&7JxFOXeDAY^EK*VdQ%9<)BygnR zesMzjd~N-zn(WAT09Od@$<+;jARCYU5_Fy))<1ePFTK3c-}(eoZ#=@i_~1_ebHtd9 zt75JH<8i|mJP90OII|ljT^(*Q!Y~=$LuC*t_*=m~T>Pz9tn!+sRERD~yBuGx7j@NSQL>0SFwz!x(k$3saP zo0^jr=^z*8Ho{GcqD9?)^=>UVOp?7)|!C2ABuEbk5Khr=H2qG zkRh4f-$AhkYoDU4K6|7%bF>4g0 z4K_-yRJ1`bDM2W?x$8vJ*Lhn_i4o^6ZM1bjBMpDT?=FMIq-bOFIzvV$+!6}aRSxCx zBOw%fuLtCJwQ6vrzTDY#00UR3_mf*tHQDG5a~xbnGWhTkv_6S10`MErjlM!@)t7Q? z<){{M7U47oJ!*eAvf3{D`JpYh#7s+(KwSR-+G zBZR4~lBUB0(m0HvTj~(9?fy(D7eccmgoJEJ_+U{37i-$ESzU-e;yFTng))~U6CucQ z?6((8AY5u?oweu=iVlVGOyAU4>S<9hQM9~e9@tzV1B!%*o=MZ||A8uL9}h!!n<)YicAm6!{VPN?e52KzC#Sd2Y@+7H5QXGKSctA znFkLj@WYsXdlGwDCjJp&LpA)~_WFdR1DdM0dHSJz7co%%MLkz+&4+s0oP~!<{RcK< zJljY)LXO~I zXn-e4NLijb1d&$hkL5wgu8w=mxHUaYKXmf1f-xxvYyZ1XQ65ysGe|Ds-U__1c-|uD zEOPl_VTVcbA*~t$JQx&M&%3VfzG(;#A);6^;G4lM`0LCTshz`H#?!@)9|siHU0K?h|weL zyKlo!?mp!B@W)LO84a+A1;gE8E7jtX#UrCrO7Sx~;NO?Dj5fcx6$d>q-r%w@oCBmR zAk4(kWXQOUp=tbo_}M96u|ifyaS>_64r4OZG2x=UF&G?y8bAIj{8bz9T2d@po+1qp zk)ii!h{v}xT22T!?6AwDz+!7^!O|`k@OP-nf~YLht+uss-kao z%Pf5u$_!lE&n)A@9JdqEULKOw#vI`c6WK69kab-WD%CwR_3dhQAPlR% zgG1nQJbx4w2XX82?8K-Us&l-jN=KPS+4T-& z9Or6aUl_=Fm=Cj{`q4D--A8Byvsx=PTU&_a<%ZKS=N1f{U${Tt1A}A8#KzlDBkd() zm}q3$K)6MKU^EoywS6NS+oHv<#HcKkN|BKXRE!XRf5r<8_HAu+jD&B5AuZGblXejH zv_kw^pU8h43wE($Gd#G&ZgY^0c+A++XPLLk=xwS&|2QrVT5!m!kml%X&j* zTanlrk)cF{BidexP8gPxTyOO`-y~udXYP?=@`x8)3s>J>9x!v#)vvq(&5{Shh7eZapOrNdj zqAOD5(ly6*Ru_0m>ME5~4Q%ts`hyjTLw3aF03kDrL0%m?78)ky@YeV52=TBqNLtMp zM0`?BkiQ3$*{w3O7Oa7~wHT$cS!94QnM2sb1!$=&W5b6bMfTYhU9?Zh*8Bpi_u7cl za8v!yNigJK-F1aFWG#A{`h9`+b_u%%2_&j&njG=^=+{-|wD0T|gV9)~1{3L)Y-c}> ztrjN|!>(IqSxRj15i_USi11A~*yZ%^KW(xnWmmB%#h|3EnEb{&gz92Fa&OR}J2d8v zzf9Um14b!{*h4A<#^5vxp0Nloy_wYl{_{8rAIxegySUf z^rJSH&1-1CRe<$Cm_ld#b6Cf_{A0Kq40xfyZXz(L?y{cs`tLsf5Ur085_@p}WM0KH zcFVUEr18ht23-N9!8c;!*;z1iX`0YT6JmBlG{#12XILC7g4rG-*lJyi4vRtcgIyRco-CKWY-joJx1zwJqb#o9ZX6WtwC7Rq@Q0PsqEccsypC=NHiXQ&a!#` z*$DRxT}plffcrwzYPB>S558p((qa=3&_`plO0{`Bl-l2H^Ab`}NVwnahah5OQ;CR) zMOpxSc_GEcB#HxxEsWSPb}ZLvKa2cU30~p?(a8QRO+))0l=(PT36ae94YI9loEx(bTkQspf<*{ zyD&%2*MC-YN1;mn?d4=d&>y{}6h>U2z|BINu#Ek@W4io#bh_9Q(S|*q&FK`+Wb^0?f;IaHE?||HQBQl8C!h;+}f(Yr_0L)Ya1E7kX3)ufU^El1KuFB zytxzQ@j)PLaS~nVqFJObMOuiTJJ=E9reLIiQS9@8I~1IBp}ObkOcaf6)^xUkKF@6t zy0TJdx*=H(hP62THrpx-Wd)1q>%-5M=MGtXMvgD?Qz-%)zzXD~hnmi?%WB3jsENm;2KCmslrUSiSOu}Lwe-rvPxsb*NUd^m z6=_beNsQ3tcW(F!PkSmc9!DaH+D`StRg+t`*hW3l&^<2eR;?k0srs>?$@1!ZN0TzU z3Rfo%up4o*)FcW|s)@A1<-$M38?AF@pWD2_k@9fIm{islxsT9|-V_ZduwEdZs{&71 znhI}TZKXF7W5@W}#0q#4-p$!guA)pHmY{oJzlc(Lau|5VvL2}Q)vwc+r?GR!KO!!i z5D2w2xF}NQ@$2sJ1lokv43O$5y2eIDFz?>z`-Z+9wET2w7AsFp%MDWx@ALz;Lf8xl zfHQGawF_v#+QG;A-lbT+?1TeR9#yR795*R6W0_lRb|-eWpe_&$L0#oBrFtaA$=9fu zMC`9Mx;qY%Q0n01!N=|ODfp4OG6UxEXhWmxil`ZuY`$2{c#7w#RdcNstrYj90L{g5 zVi(Ldq@-y?Bch`f^QM+F_s2o!b&cinv6QmyUK33GyUKhiANT|3=kD0u7007MD0t3! z@397$?M;S1Uc?Y%Tm2K)0#ENIrFcTC3Nxzg6}*UcU!iOnKv}e_^_v#^Bqh3}nWNJU zrRLA0z(XwSo`rX$D9TD-nWNR>*tab&C+>9FKyX62phS^3Z1VQ>wA><%jJ?5Tn}d40 zV+m{OLu3CS6RHf(bUGtQv(*avO#Och+Tx|2sPZdN|F86PAj)$3zMH=0qX(xqpq{rtWY`R9q{!{Aez zBK*@@{&!DL`Ow~%&AU-;q|GD`;NSK_wVTIrLYFxR{EsUnI}h}K#0#=w5q-tnB-k$)NdB#; z5kbl*;{>>tW$J5x5^y}9B9;!t^$*4qjwX@QcO^>d$-d&C{ypU|g?*pYj%z@8-tXej zpxs^D;%;+_vu;eXw?8pLtz1HNfhqB)vW&w=Uc#zREMj@(^YcAs_&`R^?C>=(o|ouoCRjVD>iXHWn7hP74QzmTO~bRk?G z9Pm6F@Fn_h<*RzcVMWqB=#S@t1x023W{(odNk9k~u>w00(skDM{LwrPxN6gSBL#5G z4rG+@57I}XDS9V+j|*X|+~xFQliIOwJ>RjsdwZC(J?y2i1TiHaHA1GfgI_S*j6Q=5 zi&Q#DfXM+}XOJfwz5ktgG7S-rWzt646MSDDjSMC&q>!G#>f~A+ITb7&nKVmcUQPK8 z4FujzEVcMMuni?nu@2d%^?>zQMk_E$O@8n7C`R3*9|&NN75oTzP~2R@_iV@Ln8FPU z^?1VMwS|(?;foPgYt=uf$qMiE#R}M3HgJz3QowGum)1c>Iic;1#3yxl7-f}C$i4yp z-}7|?7-{X9gik30q~Mu#rXwUW7-lqIfy7b62l~O_wpxh`U~Hj*#JX`UpqGZDbEfJ# zc4*L#!G)cvs=7U(((Ih^S;>5@Wgw>Hf@WltVc=dCa9eSq;6H&Xy{ZZAXh0oJBxJRu z;Q$g(!oIWQm9`TR5+OkzdO?fQpS=M;bd(5z)o3s}3^h94DP;K_4JSP3?O{M3C$8*{ z3rkZ%M~Lo_8pN@K^f$wCn!lf4Y5E`PM37;3m*F_i3W%BtZLPc9?auMacyqzxeR&FB zlj^I@x<=EmK;gLB3LKEdREyjHVgF=4`ak>vKPHPqxniYgNiwICDosTLQpf|UaNpt( zW5Xm#FO)=hTq8gR-&X#AH1%&NEI}S8*E%w}JXnB10`EyhxB0vJRsj0qf6q0)AQ=!~ zLYLsqAD_FAo1X76#n;t(qv{Gy+<&VX6j?VCfz9W42IkXaBIJqFTbq-y>9-H>WT~B( zN_q@gI{)A1BtIY^v4M>^V(qN<66%Tos2OUhB>G+k`SB!i@e{HdZ>P6?o~4`gcTL2&<9ON^W}B%b%rh`U0QG z1G79WUi8UO{i+-WC}z`{k@=J;Mz3|_s@3oMC(n@W=_iMrt1D|&BqiImni=evqw2Eo zlhgN%i}3IGP-s5?`GBE1V$|?%AJ7ZA?&^&kA87|Nid+>2=nvIN(=Q&B1+tlu3bjX3 z#@)Gu>U2&UaC91-z>o)1qxX!vtuF-1ysyLKuBX{&Qy>OF(#hybU0Eqm~}% z`_^_a=$@bLWsjlk0JF)3+5)bptPI!N$qU`?9{Emx`GM>9!{DuaM?M;!w(f$#+f9Ux z%)l3x97s;CJ(}UPQ%jc`>`?d4j38{|x6bA}tMPoE?lj=S+t%2-zLwG3`It1BG1@M} zRgMJ8m_n$@6Og=k#kT9T2ukDtQ_X3lq*;Bs^YrC>MX)lX}7>Y*CtD3psVW= z^PARB5Vogrdw=TKd+cFndsK(%F`1n%Wia@ynB#78-Bd!gxG5Go$HkT>B&oc@)ky5! zfRKmSY<$b!=il_3UgCBQ{*B?h4cBSR8CM>m7yjKpm$_ei`|uFbnbf`Xa#xP4v%7DI zP|}T}y@khrU24D=$H;8{Iy9}*a(=p43HxVy$*%X^pp}vO6#Do}6~s;z()1`M-Erys zjpH&$qZ60^dHwsF&;!~vhvUJQ&{{2M_j<&I9~rO-{=ro1*(~2E1zTsUh%^MV+D#LK zi>Ghr*Vb-6o#%i9-ZZ9I{RmEfeyXvci08yrX^|~o1Kea;oEcmRGS5^<72t#k2Y~Q>LowsdIQUm+ zhpxYl#r$EVkh;^mODjRMNwtbttFvmkqgHn?Yf2&%C$`0-euFe@-vA?uVBWZ_=rQFEUN4`58k1KeyGaX^S&4K7 zs-R=@`e@XkGnQOCfO92EAvkY&G;Q1-H3}6+mBww+qDgh6cV$_nD*(SI&u}%)cK$R1 zW3o0tsRpT#($@|py6+c57gfrGQtTRacW#I$30Kgda0d9M@Im&99q}L*7}=o`mYlJC z=J)cjYG|_IBKGzA9rMn;23{UQ$?WNnHZUccZ8!|MhZDP)&*GPI#gQ{dAhOjRDIRxn zacAVtkq!a&9%!-po){)^V|hOm$dMhnGI^tHPr7z&xrg?i9q>@xKa6G>$HI(fs4L5g z0+rLkmkm(+Z;5AdC(%0RG~7NriCwc3;900EPTg9KZq*iuW;MG8v_Rf$Igq_@DJ(ig zZHd7j6*IsiRaz8mJQZQ?&Q!o#Si2hJ%8CGgSGZQ2$dcbei;@|T%r7~zm2QSB>=ZiK zy}eDyWJ-3^FkwxPhRB^gJF=IkhAr2VSPVP=wF)6+a$oqBZ-OZu=irLgA#5PfGkD*L2E)?6vz7FZDngWeq;=}*pre;RgOrgTQ3 zR;yr$zk`jJ=b>Dx+!(R>?Gu*s;}_!Oj)w54KNg6+kB((C!qd+WSxVH!$rmiat7E8M zAUzX|-pEn03m)m%Z&E2^0|jTq-`&8x%1r8KradW^~SvckzX6$0}V#3u3Mb`hA|uo$}zlfyG_Rh)|i&Q0uW zIY;^PW6J(ez!Z)arQO88QCZpFsJpBS#<$Ikz)TsD(lI4As982QH=;z=?8wP}@6`wG zqKvVme@O&p&V=MLCrr1@Lwo=uMpX)A{hJTDvZcpd@zLRVRFI`d-qLB2EJb=uKThW_ z3WF;Kiq}aYx=!5QyH5TOp=H-pDiwD>xTEFrek8c4=6p3YS{)1qt##JWjHI~x_;tfG zyo`@T!4r${91qaA-cI{jTA5VhCP_nlYz#YG@5fh{@d-G4Yqt)qgkohIfM@@;RQ~*oqsAf5Yn= z>#+7(WvsgwjJsFoA?xFfXmha?6YVeX;$=8qO{fGz)yeoZ%NV>mycE->4#%$(&*Axk zR@O>M2ry{hK44FmH6!f3HMqO{4@^E1g(4NoF>$vIBR5=!v%MPWnyf+a(?}ezpMXK@ zu8OnN4hjLASFc9dk!SHbBpNG=KEkx~YK(7G9IH>UA%pr9#@{K7Ips4TNf(0ZV}tQ5 zA_@)9ZAGyyFA<)28=i|dL5FLo*K{sYRw{$yMe<_Lu+|8ID?C#MV&nc`gavIw`0}MF zG`K$+{;~)0+Xh=}Z3{b3M!m&kKzNNF3oc;g`Db_@qQ)Tg7%aUTfhO~V@F4OfUcA<$ z=FQI7VsL>yeY%UGaBxHD&gp0|?ip6xxrsKZonc@DhfF@@*x+Lnf*xK#j}pl&iA928 zO00!6R#k3d=gp~bN0dI*7^RL>!r;OQNHkb%WX(n$NJm&;LZ|i}yrPi_69_tk9y*)z zKx9NdepCu{l^ZoQ1_d;K#49u4!dBYooF7 z*Zw#y_@Yd?vQTaxhFLe`uwn0Y4oxTOQBftg19_u7W*~W zqJ)#1llWycR#P@0bzpy-Wo*Ej4ciU`BmC|6$g|~Zf=OYI1Q&W&q6}@OWc^>65CfSgH{j_ zP*6B>$>{qtbe)?+xeZ5cB5I)t#-k=Rm4kGZ>U!_nRjN|ils zpIm{PQLXSOA{3`)wS>b5?OWJ|D@3Arze}txaoC!1JNjHU!`)E}=V~(%n|K2CVpd^I zvT;y{zrcg_zv1xe*|>jn39e@y$F9RLygIWMMdMeZO8;HR#LiLPl=fITeGVPliWf(z(k1bDRy!OIx`P=zwCFkJ zB*KIURB*Fa^G_%-c-j!;%bf?AecZ5l!A2Hl2cJxpaOy-bUThnLphJ7{;_^~F%sbz5 zoor;+2^;KlIGj(1i)zj{f<6kA3;yE1%m3Ir3;4Kkw2ePuW@ctiQ)XsPxhXTI%*@Qp z%*@P?1`0`&G|bGCnM^X7(I4!}l8xuM$+2D4_YmsqlGjj+UOb5LL>aaPso>u~vj6BTMK?L*U_I zM1{O2n)zBu0}6^k>>Z@rA~h)M6rsv~5-NCmkvb(1j`ap2DW6`&-ccF{8qhT7Q(;*F zepNX;LRD5=3?A>Rr2C2-R5h8QQ7QMXM8nmpHcF}3?!0&#_HNmMo9{ni{|H|y+6>@q zr_aXIq`Fd1M~8JvK>vqIB~=(3OV6WWAVE15gj!uEqSo<)Sbg?6+7B54ReH{uiR?k;^DE@uE^Z63;s%2EC! z565Z|__{_g*Ocz+T310(R0Y0?B`l;tG)#yJ0rRR&y04~`imkWr0)^?2XSJ~OHJq3V zHGWYEemUcq3N!g)b}ldjp&cj%Oebnbg=%|18klx zkB*x12tHlI(^^#$1~wQ6y$`_Ovywy^qcZZbi&SS*{)AOertJJX3!S9Jq34kK33 zhmlq}%|FIL0TY`KK^2d+*(#byIU1j2X2NpZMjYR~4JWQW!>#>Op_G+^YDXvLq$n*Y zgy5T3r6S}>F5KnwD; z)AWVvY6x@;VJNDJ%IG7z2FoOh*$F6Xs7!w9Aa0(%fJFJ6GTX9)DEXN?ZK8UhY^+<4u2CT zynOcptu#*}Kt&T5nU_`6UNX}PzO}2^O)wddicQB3V*C2Ba9}^~l!LCOv?5fh=|h{A zgCMH_#7Sl+h2PuB|6h6rzkz??V>BN43{8Tbqd~uCs89cz41A8}gP+5z`!l?bV%{Ke za7f`qHOEgwEE1x;oEceW_rNbMk$p%+MFM@G7h5;MZp$ZV*=r6KFP?|7gJ&VS#s_T@ zaTR#QMJRzQc7)G_8r>=>;?svjHTVT|8@|}>k%l${reo%m_UJV4Dby7zsfd+LZuS|B zptuznIBpI`4jurp+ahR$PC(<1s}N)1gBJc?sCI9T>B3X!IdTqy`}rclaswQh>lEgmrI_T5Dh6;=_lvYa6p0D60E2S!bujp@_J zpmdna1lD{fZ9?q z%4IsKev?*6*f9aY!J{#BS2|h;xY1Ax>{}tmuzsh|bX;G$FQMg7j~zYiR5&%nsZvk)|E2kd=& zK}k}AvNCBWwvt~CzEJv}i$&2C6KiQbOxIUWRHaejjb_fvy90 zL8Wsb>bO`!jq1ro{pw*mGgspa3Q*O^!QnZRF?-G+%z4@oqdceprFL6dAvG%Hy8Tf5 z$t(<;GzSBNm&3rd4}6=ohx)lG7&|!_9R`iW8^aNpo4W?xht9{`;K`V_`Xmw_FGTZB zD-mt(jTQ|WLM3h!I(46hTbU|o(!L`kwhlN_KOdcYO~;}o^D(C9SiDMnfT06M;pA&R z8V2@&0n_n#JrCYJw}0ulvY0kTEtd#vn=>B^_gqFMZBuBM9c9HlYC+V(Dl1S{%7baG z?oeRuWEK`4q;^6$QO&?p&_RK`EMGY=`+jOQn(Lc`7$>JT8}StuB}rEB5? zFXzwW&J$d3Vjs3efk1CA`eU72C$M8pjc5C z##%B_CCoxdNIWE(dZ<;)8_Fn0#M5y0dir*C;bFy$1r{OnNhE|ys;JeVE=`jV8L=fW zb2VjN@*@4?6C}YIO+BO|Zw$hsG(>$$N2P>7LbTAJkq;Y}p)?~FQOSAqj_EZUdm-k) zLhSosf?)$|LDS3?9+tY`<>W%7WdMB*MdT-ZKul%{3>*SP^EcQ2xI1$qyjlv zr7*QLMM3;iyysb=rT@265ty;sjJR@`IU9eukHm-&WKh*<>D>?xx=aa3@bT3v6o@2n ztlbzEY7*qKW*Vvtt)Wk|J?mW<%1j-gUrr^pqd8Or>3H!j6ISlEV6FRg3^{~~ zu04^>aBy7@@Un6s);EN%s&vAGu&e-ORT?m+>N)=HJLCx@R4gjMI-nkGYE17e&CG$s zzz}+}-^EbS~Ao@EF!5%M+>mD>8SmDhu*hXs3$&xlJC@#2Pl}`H@RtRvnheTM6Jm#F{I`leuC?=XP)l-+HOiJ>*H%Ke1 zgoRf_IO@rxFgX({HWtwQZb+z*xn7wiwRL;&bK>xhwm%x?j_`GozHcc?`G}9HOnH0I z@-~2=AP*I)G@nTx!rvu8D6a}f?>aEoNW`Qb^AUXM6zsofOEE4?oP;-S%@F8k0WIg+ za5Yduc{Xhm^ekYYDospvNeV*Wr$W)d9R8k8Y~2#%#^WumH;Q^@@bPwrYE>@YgnXi{ zn=;Iu{NP|Jp>5h5c10mQ`}**-R6<pNYzGtI^*>YTNHluEh;OGt3)Nhu!~z=oM!5evB!X z=Fk>}i&P|w)@_qo4h(-N(qW7r{@Q?-lZ&Het zqbI{@_I~uTlZxWsM-t|AS&b1__d+(SLq-|S2cJUi&7<*yCBVV)h3cxeIDb?TeMfl7 zLKwsdIdm3PEjyvH_19@&e;)+6bNnehySIde#?M)2<)6kMA*wr#eU48_rRdbk19q0W zh>d&%DClG3{KhzP`VP)KHOBJsmT2JrpG0*9_O|PVish#VXPA$9sxS(c`bHI}Sc|pyfgSmSS|0F@p zV2@S55Y!CX2;>Ac$A5{Uvfp=tnn3||hxYrM3Tg&*v>n*)|E-|@qmUz2fJ8`zk_44i za!@yDjKHpqp{y*AcabSn#8*I$ok;VakyliKu7T{M6^enb7F4K^W4N($I9we9u=q$E zprj6EB~@sm4Eu&J!TLGF;1SRg5AxWk9RC0~QO)rul8Ln~7s-|l`%EN;=#52!Z10cY z)QslPl=H;h-{!I9hu{~cBQ3Y)+~MDeqzKWm(iW7Lbq6aZoWsBRZ1Tq`#tN^2xLsqa z>VG19_Z$T8lP-TKr5YK@sVJ?iF+cbZr4mPjCScziW*xM@38LEw@>)T2^2f-JJ%%w| z_WaIr`>pU1`!St9`hOf!osZYIZsFFgaOo;Azk}qbJ1}{~$#3Mvo5M@7aKkg?CtSnE z758Y#79k;}ggq90eLr>_3SqZ@8&yb-OGU*GzhC`PeoH%4h#l?cf?YB1caR@*6l1#Y z`{BHgzP=vQrd^Wl{Yj8g#KdIb`|K7Jr6V;*+U`BxvKhypvL8$Q&ml*|R3ue{aR^#c zPEgBB0}Z{!2%dKch1Cv_mzSe)e$8Ql0<`oCF{zdX9PI62?`V(u!*`(6#28uk7Gm># zeH=ct5DDQ2@F7bGMFj<@(fYja;5v}N-FSbn4>pXL`)`(d*ldk;^4a7h!y;CCG;&SFgDVIs^Xt@y&piy2)dfg z5_dm_f}%3iG*tfN#x)+nV-NhMYsx7W;Yjc#EZX_-7ozF6Vr*gvEp_E@u5WB)096GE zj2t^->b%yFi#d%&TbY&O0ryTLFn(xVcKf%HkJWQ`qu{@PJNs|=E$xs2#@|{AKiS@Y zi;*$SGmUTa>_4HXOzWm<%~|+=2JbL&;(2yDXHAk{9KxO}QjeLd-Xwhe%jP^XAtE9K_%i8DML8CK8j9k(7{xR|m$! zxLk?t%sbB85|wlaH>KK zW^uDClUl*v)eFv6TG+rkDM&-GO?R~DY6TM`eaycl9cq5FZ3t}jO=0Tnj(v>7z?hS$ zW9I~CM{`U+C-u?ynYUZVVco5n&}lFm5^)M9bn;~%X0-!nA)}gJ;og2M9Ulk-eGkk$ z5+?fGau#Qxi1xU^w4mW}j9y%kUCPwu0> zpA*bYbkJ^+93HwQtl%L1e%T*tgYr)jKM1nD(Gz2=rMb@a!Pw@eDeI6b`!Y|Jd6r{;`VXQX1~ z3mFg4yp{{>Xr7FI974qn4J!-B(8hJ(>SBv}6OXge-W?kQH&#R4dk@VU~Z&>Ijl31TrBVmLYqKKnCPou^6Bqf zyjLe>tDbmWNRyFp34=TW;NfEm^SZt8ni-g{h{1@q-mtKmK7aJOzsbTf@cK9)1JYQ0Y(O99V`~!F`~s*A(j)bVQRyQV)BQ z!WfJm7KBWy93QVA2_GkCcsA{f8*zjl3&rwYE#cx<$0q)tnUUmQT!xjT{b_5y|k_`})N1P<-TVc(pNFfq`ERp3T89*RRSpnfg3 z+?q^foT!Mfzw0b??`I7&T~)MR9g4Eo_woMO66n+m#EUdBwhU#Q581)NzB!)!+o4bw z1P&UEQ8W6n9}pktIU7Ct(mbZ;Y&?%~_EVE;tnT0fCwDJ+db#1`M``G#Ne!WGW&^w0 z!ALaFV;?BHhSq_;r49VLuSGtsYlX4rux7Ihftk z9|p$8@b5GRaWt(-clTjPBVX9t8^XNBB&5|C@-K~kiZ?e`!_B!ac8Br7zcdvJdgd@S zP{5{VvPhp1C181nMhIx=g;oPkK_m)Cpr1Efoo&!=!3}Ag*EQQALZvm2wo$>5y6t(3 zah}WBHx%g?=fF;vwmDX&SQnOtoed|m&ZsU7Uw~e{>|w624xb5^*Xj^Ci z8@p-r4!`Bm+*Z&qp=IYh6mc}qm`|)9uOG$QCF4xzDm9O)ygLYTssk^7Gg#K?f@ic@ zQ&m=goC4F~Eyt<>wV`Kh3h&na@sSUlU)~8zu1MeRq+eQu9_ue7<;Fn_Y3T(UD?>Q< zS&ZEi>%o|I9Nb5pWaA;{0b04a()_SS;JQ~dpbYEkjYG%&w4I@C)ZpWp$hvYFuO3W> zPV?b-m;L#57s2VJE3j%@ZPZ_N1L0fNr6+=#Xbns6E_ zbtZ+pM`-Wq!CtTH%HQrT|F1w^TmZ%D98^>ZAQlsxc~FM?&tjpW?+8IPmA+ygX)uoyf+C5+rHsbE(_uK^=5tV=^^DN7(=SF=(^cGi8|2+PBpb4O6D zG5{9;tnWtu-@=J%j-Nm}Mh!cHwK1tkOHRRfLoM)WLn8dVWEry-Nb~` zu1G1$K~CIbv=-e$hkzCE4IYninUX80r1hBEd^bv8uEvWkvr*piAoBAH zaHMH5R-gO;O}RpxEvb*fqK{ZRm|4#5GsakYU^@l{4T7&?3HBa*0pQx}o*aVJif3`A;nCL&HwfKFb`wNk6Gd;1CcpbSBBLKgP6Xh@rA9ya!#f-KJ# z7&mb=)D8yWcziw<9E-!q+4qqxh(mi@ZB)@mykXvBOd7NY^)^4nktw~=n3lz>#CR-e zo(S*ZAt)@%Mpk|$tkBS&Bs=BB+T{@kApCCB;uLec5IBoSOp1QFcc7A?VXiokigR z44fH>u2UwWt$7*NuHAtONj07n8sq7QC|umu17Fs~sJe}zN6jH9%s^V^1Jo*J=2bpK zhhewSX6i)rZfJ!A3uhvqnQLj_f(KOfWL_MPQ)`x?K&%2qWpz{~t;d?&k>KTLA@cBW z99gs;ZhhxL{?2xGX}gn04x(+xVSq3m)n1bk7n_T%E~$9qvJ<(5r5N}j9Lzd7tGZ1^ zah>)UH(?|c_VmWFDkW6q-b3fDX~-_ggu~H|D6ZEZEjq15>Fe`osIVKs51ZmbSTYim zwn5{Ui-v!pQYeIwKHQmC)TQ(x-hN{$J!clYE^NiOlQR@C`@k*?>^A^iYFS|C!V|Pw zpT+u^ekjYP^*(GfTzJ(eO4^Cra??{-Map zFNBz=;N$sai1XZp!n{0O>aT+}d!9i_oCZnlrASIDz)lwd&c2h5h%)H7H%Ie6OOX&4 zf-#;i;J=gyUU3$33dQ&|(hIL@b|6S4?ZheL(9=lVKi(O014cvKt|!J$7y-f7KDd%s zgkHfl+aYDzITO>iN+6p?BLSaBXlLpL2CSjyFQIKtdNf+86r!}4&&DaweTw??laN(Z zfR>MrAd+^*`}8`E8>P9lEsRAV5z`W^0sjnUK5Y$tE-kx+!*DATK~jDK182NN7iyOs zY=zjkb}Nc2%TR6G5s?wu_^_-2)^9ihc_kGnsi-6E!7@BBT!iAh96Xrjg>~yLqHF(A zh`Y&jz^k$AR0xLl?uPQh_duiVNKG%mG{GHY_j`@J;!HHWbPLH;K#!|C1%?BLV(j=~ z$X?L}w`j{;k@pm1PG%s77munHi=p0a6gu_Ti_%92;A{4IzP22KR;<9XLm%*pb^vqp zicuw&gP8vbsJ|X5sri_T$4Kq+h_(sYXnFk(5@;?2H=F{^zyb7nBT%@eD^C0a<_XJD z8yWYrS@wRS1$<05<9}Op}IetH71^8&= zj(Y6$3O=f6BO^zJw1mjXM2a%x6cwnk$w6LGkv^WO5cH@oTQZ0TfxI&G5RNuJE8#tO z0J;zD4u54O`p~L|x>`Ny8pZOKus171WmpulTeV|<$p~Lt>q@+B*9~(zv`6z6eR2HR z4FuF&F-**?eOtz^-C8cE3_D+`;};WqO^68NRZt7vn|ZTg-w?7M4JW=wtATycrE62z z$}^v;5UJA&dRSGFRvmfTStu)mpn`dlSE1P08h&=t$r>)TB`7YcroZrkn>BM>03*#d zkX~I87CL&+C(qEh{!Y{y+z;IbcZD}Q<$1O9dNyO$ zn`Tf#=YbZubowf`&!Ocwm8S6BN2rXOgkh~(Vep(SIJjy!&Yy=_#N?aNNCuK zmJ|aILS}?8{XI$tOvbp@t62DmTmtpR zjoC9O(PJ8h1yI%ULK`P-+<9{mF&`VDZ$nioYIWcsb5;V?0MvD0nq>iWb#$RtU4$rS zSB&n_6D^x}#nw0P(O0*ZVOIgvg@+>_1$-)wD`aBOVieLJOhMG@LGbY$g3|xc z$}6j=K!u7)MvO@aJtymAM+Y8G6`+0MucV!XSGx;nFsLuO_G=F}W%`?sA5qY%Eqj<( z#)n8j0aeM#sBSE^%W|Fo)l6F;Cl7gASA^wd)V8I@!GtMLn-x~mj#!jX>9`k9h4`qa9*aj-a)T5Cz#esf?lRkYfHPBsOd*vk`sxdD)>_ z%vd|U1o4BbHPgDN!^2gCvZQRh_pAr$0+s@Zn3V+BZ5baUk=d#}yD2O!M-|Pp>bO`a zjS0qZYF9xsH{#%$QBbZ{f~}P_U$hJjp=}^-PZ_%s(fV#!*PlJ6ZA6Vgxfn|J9Z{d3 zk24|XXnWcQ?W}3tt2BqZEn}GyTE>mwZzFA|jI_0B*Et*E^%`MDm(FO>yeIa)eu4HV zqHSU$S=vqDVOxwsKD9M!SKq^|qc30^1)3yw)dWI2NfvOmkuDLcq}l)hw1dEumyxy( z&AS{#1k}g$E?w#Mx?^|9D|C_;@!uMz?3k4xs%hSf#PrEkB#)S=2oz<#r#VTjg-GcC zrCqRpj}qz(9gGH+Ut1ZQhMmx@nKY;C4xEjX=P%;Q`Ux=CaY3)iOr0tNPr(o~mTbhK z9cy9tjS+GDo#8|^$L~km1!K!%F?j7396h=n&kL9*n=*XsBw+5+!#J^PHLex%pgt99;!+3$ z2B5>;X_&L|AeO8gg&pCZIHZ3MQ}%`;Dl!7Q=T1jh&1Zl_1b&&2ogU!l)3% zu8WWpRA9Z$!!Sn`tev|EM|RA@u%pfh^igD;un5?X{Hjr2Qo^Q#d410-;Zwn(51o1% zD1Y`6FCIL_I|1_$@`P6Cdd#>Uj&h+0LYfZ}HonYRLsbP8E9EfoX$QsK6S4l-A?!Q< z5@qz^{}oMi(o(~=HS=-&@Jj4__8vSnOU&_?!`^+j@iy`UF3uT?lMx>8E{Vo&09G*_c( ztbB*TlySOL0~KTF`75B1+UoNs zFAz9nRJ84ocXJ_D zJV}D8yac>*0i69BB5(IJY~HmUlUCh>hkIRA3QAGV)_dU( z-?l@{HwaEHp_sGkD2{JmgGWNz@iyv=p^+OfdF?@L+B5=-jz>a)-V@VhW;zOjDkgo5 zv#V0@tb8yl`zeO)+J~cucj7Ir!!^H9K%M?*b|M%Hj~>OEH3#v&vJ%Sv()*QNoDrE)4zdnO4$M$3X?t7@^(FT%AY8$lkV(#AxatEhi?XJBDUV03c_D$%C z6)=9LJ_gnsjRw1>vZI0P-H5UXd5f6sz$YtFS{P0*P|V% zZ?5NnEzZf9x9cf;y%Y3$H-7ZX-@lM@UNNsIUZiiBD0G z`H}U6`t#94)837^(dmC63X3VS?O)~d8jzotwr2kQ{Ku?W&A|N2yeeTjRxe(@f}4jI z>};fNS~>oiya{`U06$M!_VNe~4TX-54&2;6j|eg-!MkTOX!FG|5+`BXGcjgP=?LEr z4N#eq0+C}A%%6ppo>U~O*kKn%J!sq2Lp>)Iq~{6Ip#NC(t!)NnJ##oaIlxG_hKCUbBQMlfPeXjZ z7|tDrU|1t(=o-7g(@P7*#Z{;sI0C%`Y+>eI8+JOhqoC@FR$Y3)S-A)q0u2PtnuU4> zsxWl1hl9Ntw3Jj~TiX@3^xjpV0jF9HG#}j2*|rkzQfP<6y8{+Q1PiM z1kg@^n~wvG%`M>M?*vO*eW+*{!k(tr+R+cqno#vxt%11kyO4NwMLTa}S>gff`n8~6 zS&Sl8D-0df557)jFss!Oj>#=?vxkw17Bq~l;b?CS+gc4^r_D#cNDH0&4MuAp zYiLkm!J9xVeK2z&JPn{h$bEUQIeSfiH-xhcI^mzGeg)qIm6t<;Jc61^w6xmHL^byK&?(U z%B$hO8lqL_L2xxn!^t(T;X-ZF&ao+m46F++6+PIw+rh-l1?_0M za+5P*(I5~L1~rgABn9!fo8KJUgQU}q)Tj+Qx!c3gPy+^bHgIyXq@qO)R@82-ZA@TQ zr!(y2GLT0*A9`McFv#B$W*3Jv?A%Z3&If6-m<`?Mw?1 zm01bh`aLkMy)Sf3?a-*P7IM<~ux&pWW16}`&(ahAUW&-g7Q(0JNDQdw00UDiIJj8D z%*F>k&LR|u%+ab*En2V5VeV81jeK;GnZ<)&_u&}Y)D|lGX4F3HV4$ZCZ7X{?(=ydp z|12+*QMVSqS|4ppVeR1ndplETDk#9z-2>KEmS{AfITZ6MVJ?orwl_MMJHADYHz7u7+R^|y zDWx!N-X9ZNdqc}9hKtYVvNph{m`bq30l?BL5GHV=+eR# zooL(Jv4K9iwsL`&r#nQ5VrppX+1)p$KC!vOzQ4 zEmlK=ZrgEUQ^&vPwNnv1s_~*fSROI;E!+BKX;Nalk_&dXiY7Pd@qaw%uQ{G~X*E0O)55Ox?SoqDi z^S^;=T%ENTM_&InCn80O7cqClS$gGnSls&nyDG`IWMh4+1+pc#{(F+29>CItH`$L6 zf1NBW>^1Tm#}q`wM@gA<-szu#u;3P^_uP*^z<YMSNm1($Z7tu~=jjN@qp?Cn8Udfw8;` zj>Z<@>cY-2(yotJ-%NJ?t;AwMtM$~1{~lz9AIHLJmwq{?{inmj@nK8xv`mPqavmzh zKRlN7n|QHnEjFEI)|~mHNXGJ3E07}F&d@ zD~eE;C#e374^MqPHB|8!A>@n2XNS{NevcWZ-(QBBGs^!P^t6;A5{SOe{r-;-RM0fl z{9LOd_5dcWsJX88AB(D?Iz;7vo{0a~D51mR>FDA0*H1JlPd^SDGY6cEmx|^iQ|rRj zV+H#m>be#l=r?yYRxDqFnd63G$;CvVI1Jn7F2c;oy-?4iE9NX;iW3iiO&S&8=sHE@ zNIqeZ^(VZ^>4yBWSE&DE^GyB?u2^<|IMk2V2=52M5RB3rjfb0)BOGnbG2;?54#vlk{+lsq zm??~ObTI0)Y{WQZ9W?aKU}xupmnKrj2Q^vQ%NQ0G7HHCYF|O~wf!7blLbuH%q?V*3 zxUMPeon27Ba}YjK^-`Jh7&Dr+hmW5L99s{^2XWW8h(93-692@Q(Q+zBCTw+nK@4#0s4!A4U~4*w<9dM=KfE zW~1?tCD^%WCyuRc1(V^2X=olM^{5RaLj$y)a)3D{!jB%u%piZ57#YB4>_IlHCifR~ zgO!5|?5#|&gIyFN7aQBmMUTE_Fx1tC1m3X$QC04PE zA%~)&xiuVYEimbVbPV#2=PUcdn%5iJ{IwCQ(*T|GniejjRE*}>7( z9lK=%jQfX~!@|l6?*2iDtl5*Pfryx3y0lvc`dZ3S?CKx%TXWbmT&mY8* zV<&Oy{37Jd8;v^}t+DCS8C*EL6hnH<#|3(9R5qjV#U7kFl)V%#uQ=qsLnLMY*2gD7WSI)*AC*q>aoyN_rm6v#W*+3mAwZi zkDg$C1$`k7i`#9ZwX+nPTFyfEK4vhbcDDHBT?}fV4-4OxxXCOFUGWCf8+JxOT@%&PizM8nX^QwlGeZV)voh!mI367`9Aof`@suB?#M! z0Gh{6Uj8`Dcub+Z+R&Z-VAZD9WF#AEe={GwGW`{Xv@nO6kqvq;WSrdqZ}v}wC#@r1 zZ3f^Kmz9 z%(^3eOHvuR2kv^t)P~H_bHcaIj5s(r{sfpg)jx_@EG80(gos2U_OG(Ck_ZF>!sGEs zad9yzDk>tmxw#}YHI<~%zX=m2kq1v+$$ri8Pi5<_L!?qzL8_{%$fix3$b}0RWJhWu zAXhG2B-c+aAol1?20_}#-umsY@tuM)9f=Ch>X)~YXvfEOG4<-_w zCL0N#*~xrNvh!b&z+Ok#V+<8(FUgq;m&v>yElAMn=cF{_5b4%@0edWT{S-3u_y-bs zaXJ~h^cfrWaNc5a;1!b+Lf$>ULoT1&Nt)<1CKoCsByP`eVn6aIdyJ4%@-;hF5M3#37B*)I~A;U+VV#BLq_K|T*!`SWfb32g{J3p}7kEeDcbMK~+ zSF8Jy!5bpku*<#bk*N=h+3l|sl4HltkQ;|56FdFMG|x-PL}OQShduV1v~ihAOY}8q z;W3H+%kY#0x7$hB;*=4#w>R+)l$K9XQYdW)ZW9+YA$#uKCi_>6A#HljAthBwq@{N~ z@>Y5ha=u4*vLQ}Hx1N)}byw4W^T}X!KQiy;4RYi9A=2L5jy$HJ+uK-?36Gd~H4%|h zBc_q#G5I8H+Yr)cv9xVj-N1n?V6!5F^wsT0q&ZPaP8_HAcXS%D*B(oFB$0G+4x}Z- zkVJ-CE~01qKpLYSS%2pyIe&B&Xc}%q8`{eOA1^AW1xU*!zw0-1Y z&mhug{YLU4{yrJ+yog?hkd5uylSe{nJcfj=E@bjO>2^`#84}#*5UG&vex>LladaLc zv$qTq zagw@;z;8CmlF;q)hvdHWre(Y*L(FH>bQY0uM(*T38+Mm?>a-y_bgSs@Dl&Z1HNqEO zB3)`tAeA(%_`w>|ZR|c$o^qA=HtH{}pX43!w{A&oow3dGGP2gHcsNF_oT4&J{e>+j}*}T-0*{B+K6*B zRf(jfR~-_{CRj|iH5*Hw3QNe|1xk>*-K>8 z_%5XFu=DgRk4R_70o1x^6Lnz;ZEJ3m^oR|l?}#&O^pA(ulXb_!*=;FhWI>;HWaD#b z%{kV>gY2Y1%gBchA4p703`t5#BI)VrBqt|_6ciM&aY{-` z2%pbqH7ujdy<>M~O|&-Jv2EM7la6iMPC8ER*tTuk=-BAkwr%U=*?YhL;mi;9ZH+ZX zRgGD*YF@CdsI2U<*w_Z)P@24bM>01wjm>Y<)`9{fQGUV162dn^{0o0$3SnENuv`h- zd4d_#jF8mjVOHYf#lt3CJY=Wn@*G_F+QOdw5HNw(Kqy}5W)SW(g+PjElI(MVt46;dqA8E;C@p2=*AxP>3rnR9kocDvcj+Ld2tnI8}LGC{;Ktu-hRVs z1-BisDm;bgdbo3g{(OlOA&^{VdSmBnhq9g)hIdaNcdnr1IfpW2SrS$YQoP3po3h|L zXrN2l_dG+o(*T*TYDj1+4+IRa!L|^R8%b?EN3)chMbo|TypkpOCmT?6P)>{h0(}2A zevl$~FO6EyZ6z8DnihC)a`x)j-FE?@dtFLoPnSStG6F5R>N!JfF9r3$ta30f*vC8_{6G#o4@GH{Jk!Do*rAVB zz6MxC7o1M6uA!h*>coDn26-0U@grO0M7B(!icb@|KD z5t{Y$f_ywuda6uYz2*LTbPTxG6R{|@(NFIoGcT7-A$y&x}3vq$S~izNQb`tlf9 z(wz-^Vk=@N1e_A(%-Gp&6=HWO5vhKSKz!suxKK_z?|BlJoNK8jUD4Mi+Lc**Q3&Kb z#lVXLs*EnZl2V9v)-O>P?`blq<}cp@oV0>wx&M?bwv;V54PN=>`#{KQ3DF~uDG?tA zX4?k1IQmB4n9sZ7vpojk8`YMJ9Rh(O*nu-&y~VW$W)T1Hw_d>uhH=o`^L2F(nT<$I zU1`R_X^hBPa$%+~5~=o<0C!QY2^vKUly=0fQf|7iA zG_Vq|1aa@{H%8-B<%7n@6wOw>-{<1NHhlM6t>%P8FQ9VOu|s)<0~*VB`lFpe9@QL$ z63SQ^t}*s%$|0aqb?mj%^s}WVyO1D@j;KCT{#xdz)Oa8NuE{&q)d`okaBO*t3YXz{ zq~j*rl#=a&eqofzSr*pxK$1a~17_>+is*GMK2?>1j70excpgiadh>!j@R$`<$|1>y z;rQtUz>4AR%`3w|&f3rdpT9r~JRVZH$A!oaPCvhH=dFGU8LR(*N87Pw$hkI?Gkt5= z=yzz4G-gMP5`?th7ZQFB3X1Ul(jX6AzMz@<-NTvlnGTvV1UDBBROKV!y9O07?bF&J zZ(6ru)U!cLp^YoAOdyBAK&YR5iX$7y2_K|`>PoZpHAQ<$XQDL~1;B^>)NN@UJDXq4 zfV(|x_$`3UVKVNWvx?&Q5R{r$g#`U5`2N6e9jf1_=ISfW9R*Wg!JO!C;KwZlgHCJ9 zDtVSQWpRZCdsw{ZG9m-<-bn8^Pz@(P_99?rY+Y8S?yDT|oSFHYQ8*XaHMBLrAIW{hFg zdWmYvfO16vlSC^K4#&ZQd8#s{1>vPY@3thJh+%fIwoXI39DeTD@=T}QYaxPxh+@F^ z4ZL1R)<^|O%E@L?NJB+MuQ-RNbE&%}J-v_w)_z!UghB4edH^!Gcq)dplMloMa;TpTldvG9`aX4DE-eyk`okq0Buc6{{uTZ_knXc&bd#!E-TU1-C{=G1-6UQVTbz%c1>tCi!n(| zPo%sEH5@>S`_}`<>`!ytUt^#e-p)v{N;MMlMAw#4Ra_6m7-i3xJvP2lURldmj1m4O zlF8cN#aYl3|K=Rt=BT{>m5QUj7pmR<1|8}!YB+b}qg->}UAz-Sae^sBEhVl9`0G@% zQS44wU<;{F7!>*tkC)o1Y)1`V*8b!h*ib=#TT z*jogDxuY}=4_@+CcV8b0?%ipLh1uIb3Bk8!y*HQ76IO2##CD0(H!%=}_h>ld@+AC` zybl>29ilu!cCvTvr**a3c3TBH`4$xD$fptM}@ zu6ARy0gF9E)b>pT@yHGPd&C33?EE^Us1)OdQZ}gN5@fb2hQyi8#lXrK0fx`z_Y^YR zC$#K$KDCC7fq@wi3m*}6v<{)9Z|F&q%?am%sI8l|hUaSEj0i$Yj_XXq zX71lij&?Zb!AhF^9n-G!QqV{+z595buh8JtJa(wNqRea4McAU z*x(cntTntb0o!rum}<+&Q1Uf9Y9iEV0A4^;cI4I{Hj(BEF7TB@!~0u^u%*Z0e%DEZ zLt8L!77{Hzc7?)NBRmjcjSkQ}7e4-)Z0``_+L*L$;$Oq?A^P|W!)i|e-+kb%;-f;z zT+K3Z-|ePEm>j+KfY|h8ixncsFZlMEC63_gz{%9tm0@@ngUbtla{i^NEXV6jg7RZG zq6cMKl`L^113c-nbDaKvi(u{B&hLkLHI*>Z6xwN6*u4`|;AU?>Y6%OW(H(ToXlVJy zLcYiQk%n@nD_$4${8sHoaveu?Hx6Q@-7Nt3AGp8-Mq9>Sge1v%p?mHyB#$q&9SY0N zhCM5{t6gZ;Im8V&Irf>0xsi^s@Q;D)uV(g3@j&c9$%kl*h7y;P8AqY4;Zm&M6FVoy zP_lGL{N3KMgM*|N@9-lrnz@^2^WdppG3m;7`!BC3XcJBozC{K9-^gE5nHya7LBokosmkS~%9c0}Y7aXSqGq z1#!w3x#6Z3HeDU++55D9|CGk=bfSyXo(cv3?r<*L&WZej0>Nov9#Qa9&bABcATgsd zEsmiB#mPK!d0%U(`9G#o(y};{;H@L?!VriV#bKHdOTF26*{PxJ;cOYLe?Smm%r3M+ z=sXrhM}t`asaX)yW&?`T18^=I%ntj|$@6gUhK?w9m|8wAD<(EJQ5>zcB+T+r_<|@q zrhg*e9v^OY)?^0{Dhs`rYi^#bgSgSj+T72{RH{2?3pAY;ZYu{1*J}yO*CCWMn2%Zg z=#4#N*dO2zHF@ft-NXXl)WSSpag&c+cK=jF+!X)-Zdu`Paxxy)dDoF*0hOFS&mq#1aEQ5`nij)#QF%-o>X)D{Q z_@Cc>$HhLr&RneI{Ebc6g_>X4_ZTt0_*p+=58np&q5yQ?q^2(8l@jd%^rl1A4K(&x z%*QHkkqbkmqAzUKx0~kiZf(epk-fG|M>252b&Qi}DpBUgJx!7E(9SrfugPAI2Go%+ zhTs)mm2U6AUYCDE+_xh2RiR7a{0de#fm}mgPlWn8gz?T61|gZ827wC_AOCdvo8jOJ z!NM;Z;mCX)MFI?^*x%e-SKkm5?ekIKuZn_$gXa9dj+e^6wga5L`fpo9Q5JFk3t#ge zhFD+ke<{{?ipROGLHK*|yuRr3%nmo}gEykC@t#*?^y#OB`=9V(&ni25k>=tspcyVE z-9NZE)o`|E$2HyU$%U@UWd>kh7NV~UuWc}DR63E zkg-n@A0Y^&SJ&DsIwL67iDvNTXI9r(FF5m5Y7;d>!cpfaC5%0SpUvI_8WhiY_ktL( zfn&7)dCbXe$bi{{5=C>!&fa40>LMBn^sWd76a&94Slb&HHaQU6sNc1%&x^rQ@*L7Q zq7p==BNDq-bMtW1TgEqyiGU37Fynh;e;Q0M&$V}2gDzXm&1!6=gRLa>JD3Qe5-Lr{BZ^S&N{k`^CZE<)lH-8*+J0cL9Zf<0Bzh+Ijr%GOgdrXc$G6?ll*X+=D#*TgS=az2l)Uq{MU_vu{oKK zm_9@p-ZbrmAKnQ?84<%1rX|*>SD1|0PGqzbC57-|Sll(ezC-<4xc;7K(0e27*9g9b z?+YmWm1e+&DUE%{8tA4N?ck~Sb$wYq)s_yNFdLt+ePuZ&-~=RL4mlrx19v$u;^iF0 zkeLad>NFLR!;xEK#8jVhsL=DrgV2U}%l394LKMN_&V_r)1G4U3gHokR%V=QCX{E=F z@8LRU;ONFnr6^}e_}1PlLRu&kq1Ayf9^qUqvF>sQ33rPRgFtLj4D*uO=9~p<>pYi) z|A}qQ998*MCp?(mc&E`4LoR14X6|(I7BS-m;6mMrK|w_J_)E_1I_4>L4#~HP;whF( zX#N@Vlc#53L)yG9FA|M?YQ^v4j+8e7eSdF&^x}_Dor4>u2fa?%Dh~e6VZzhg`riL- z^78*S`Ll9DM8{S1Z0aMaVOTy%CZXN{?xt3IV`!#}qL7?_oR&67Q`I=9Ami^$v1AED z{&=#*vI-M+QUw*|;EWfP8rD;Pvj(u7;u!dYyfT^CdZM!#m1KG)^FLYyn;BBs)Iqkn z!48@7JFnW*ZHEi_)bfPLk%FXi#rS9{s(Dewq)S$jKo?eiQYSODh?1wQni0CQQQ2;L z;pqIYqp!oQwU8xdn;H~Ysv-Cm$8&zNp(*KX6RfQ9Zk{M16Pv*h`MZ?KWx}E4vN9Vp zMJ;si=iDyNgtWAxqamkhE#JI3J>Q^YrgRn&PB(*VFnnEUE~BIhO3L|n{9tan&G{ck zST*{dAh}pD3Yo6VVL}M3CVbo{h5nNAOM;Q3qtNhY6~7mZd26lxqj)$FHH!lEggs|? zRYEG2Q5dC3GCe(h3+wp(qh^v_M(|CX==-0z#ra=Q;xh7OBEG@vBPQy>#?VD^>x_nQ znDLLVIw=q8__JE?fF7QZAlHk~k_+g|p;9S&6bk|pjTe?V^^Y|EO5y#ycw1az?B2n0 z7`m!5iE3!Z8_z~8z3^*gVw;3~pT!@d+|X(GRUsJYnf7-`8K^U0RWu*~GML4Y>7M2w zj>i#o7!9=o5KEJUZv+}fp+bT)9!xBEzCW73-$){tLwUhzML|Kw_kv2hJ`kp@?z%j-L39UT1FP!`#VQ6G zNX;|99?;(W!S9cNd%ulxWyi!A6Q14<`q9+GWOYWABX1VOK~rT-Ur{|;+XU4uX)@cC zq_O;)?@b_&*k=43-p9$_#V}0E3y!xg#>n9!(%}PSGa@`v&Yl6W($~Gu*~Hu(YZ}_0 zzpFv8-_AVM%k_VUDf&;f@B?Vb?UH+pWCLM(vFAj+lR^Br10HV29F6&~Lvk^q52@jg zy%Q34UTcIo=YAiJvHveV(A!)pxG?`4IJ*mXtM(l^t0V&CoOF$VtsMa(wT4_D#;j*cHLJH^l8@xOWOzwDZz3-j_?R?6l%TJv_36ER!^nR<=FFWBu>A~^$`j=*X3^K)a={Mu6om$e=HA$hGUmsNf z5#N7_!C!jRNG|(uKAk0B@hXHL7sdypPhZ*8)=aMZ#L8oA7yeEETS>o&bNajCJoRV#S&)=Q-0ok_O-ow&m{bT>)Vko_%l zR&3jbstzQK=Q29hALk4tEGO2OscOl=X#V6t-DPQ6%0E)Wk}8Zdbk~bNM8)Q%Qjn}E+ZzvOE?HQkssw?ClLET*rrRxhw;%XTJaV@1Ayu*j8Q16peW-{|%t2Ty;NyfG zKSWH~Ql5bG!-%v8VW`WKs{N{(e|Ch+O)|bLf?e@?X?YvvzI##|ivY z7FTFx{M?IV{)CI&{$uEaeiZm2*^d4Ik2Ju*^~Eb)5%gRA?>~3Jv^5%PFF$)GdQgiI>RnFEY?F}e{*;} z%j%%B!{2(@j^uRQzzrW?x5Gb^!;UCg^>?xayzK9j%*;0LZ!8{WijSLL6mmIz&7;>~ z)sXRaIdzs{qXs69TvHeBz_t{goIGoSqS#P%Y`>49WJilK14_l~-|oPQl7P~g?BcWN zA>i=5)6!1oIx2rFtw8X4x}qTH`TokKB9&6pp~UC?8>wE;r7#nBq^fiv{nSq6uzKO6 zX2vX4Y0*={i;$lFaKJjEJg>acAQNlwZqK!S*EJu4c)CpC zF-7P;e{+{P0dv`9d7~i~6Oj$KzPF6&^L-<-;_vs8gnvRNMG_Yvwc}^GCo`V ziE*4-#@2b8$kQy!H@5>2I;(RSYN{m)$#`%0dT-($cCGf2ImgES7qn!#_Q&i_SEZx0 zwTi|SuVGU0uB78iKi+O8`YuQXO82XE6R|{XqUV$Q2y;y|mE}UBnn)4U6$;A9OUctJ zsHD4N*_mxF=jdA{7}6lG>42vl@@kM+#OWNJkfL9)40Ctg05C2Y_sk3;vP-C|xi^&O z;sNELk*2SWHXppPo|AEy+owLZjZPOFc_EUX16AJYpKB>1GF5YUz^Jy355L!!BDMVx z7puNS);R}Zmv96pM(ioyR{Q6#)y02|PECH~a7V>Hy}FwG!z_3M4Wt{qp2)|!U4rQA ziW7Y#9yyr{G0Y}snktxq9d4GH_TM0bZyDPWPQ?8q>N0Ov#2<;yw4Du%=+7ryS94Ac zt+GKEI4#H11SAKC5S^0mYhw&!fWQM}v&c{inGT_O+z}OVDMK$_{-Msk=F0r-DCX2+ z@!gyY`~sLXXu&vw)Y!C9o;JaAHI=X9ESkJSFN|qn`~n$uknI#&h>>sf|G61S5R$V) zW^5qKKW~o&C-P2c;(Q3oF!mdB5&ptCZb&!Sl9;Ko|0k%bfHqf^$r=`jQCrY;)~ z42g&N_@MB>=L%vophmtE7>PR~6X5qhZ9WLbdqM@S$MjdvFyd-3p?Lm5Bj#|%0e{Sl zEJb3db6;c4^3?a=sH|l4y3z~k>I!WxG}{65CNI^|@CzA8A^e!s_5$Pr>)lfDdZ$K2 z9fvaR@5p+2ykm>IR*z_}1_t{lb@hD!%{$zV(R4Bj(*FASX z0JSzgL+TveJJ`t~lG}6#j2@RV<{4XGv}1+4wJzuB&sef=JvwOLQqqBiJIL3$??PcG zM2@*+7;Yz0ZtyYUC@*!2(xW|-xz7SHQ+mISSn5NMj0f)u0q|>?kN-^j17-|#* zyWGA&Z93!#&WfiQ%~!m1eBYq2_Zx{y%b~s+Z84c#P|(I=>s{7tHlpeJiZ?4A&QSyp zw)k&wTL^+&sh4V2gCAO#nf@G`4vLEJO|*ytzBb?AXL$skn?%OpO8&maff4Ey>EAy%k= za(pA|#66K#%+PomzLPyLS1E89%Jw`QtAU-=ABBfQfxWz*A&+E1ED`pB(PKI!td&Va z7A}JtYYXg+4o#}Kr<@~*>+`l*m!7u7l-HG)MNAKvqHsF`Tq$#nrvtb+F{TCvj4SQA zn}97bhWnbAwIIQ;R@wkRsB-@P9a#)S0+itK_2XT5wEG^Bp#A%SSu;VH)h`AlR8vBF za&#(!T4SYJxF!(d-T;?Oq}yAPt!$l`!)I%mKZs-oLN{s|#;Pm0Dj41fLqZ=HjOaN& zaFYK}aMwIh!cTA8nk?b2Oj8ir*c|6 zhTPEE7$c&Z*|$$pHndv;0)ug8%k1q1!(UJQu!5tR8aK(PJ?@1_F5W0=x$b^x>TdP# zy-aKF2fI5#n~>8I!lRccE56iGPY%ShwYEIConOFEw|0!B$4U|%Eyy;uEcm-?pms;L zec4GSMWj8$DVo}=9OxYoti55ntv7G(3mgUQ1&o0awjKxswMItQj|=Dr_C^Mt6Wq7J z1o$@M*YxYFfLbxw;k|Prz!ziEKWi>IXZsI3VIL5q`ZNhrWMbs-m7ah9q=*qAA!A2K zhK7cU%F4nHj*b!*7E}_%zR6|MMDTgt$==yU1d^*e;NztX!OANth%?!3i81JP;_zN& zuvWJ`nEz&`%BZz+kh!RLk;lI;#mTB8OWbA}n;b4ADeaAAB%4lVyAU?GiSd10~Ef_5h)|^nFB|%s4n@= zZ@xNtSNAw5R1U;-!<~YPaX9}2Xx`lboiq0(?!a^RB3bodj~B5ym&mh}{jh#T<{`0V z{t&?p=c|vPUB#Ii9_L&Lb>4o?;?-|S!u5$4i>byEeCph79GQcEB1WMa0uj=~*%cD==%l;XZmOhwo2R9MK%-z7{$kmZCb$r$q ziUmt74uwz5kGzh%Ganf{TPHGkuhTj}i_Rc$h?~f9j)o*f7;R(MUVQbE}UY9kq!8s(;3XGemJ2AQq(-c&USi|e*&Yw^uk z%HPP*LRNACcaw5yg1ZDbj6}3a?gn?yGHWNtmMAz<4h~q-$Sc(Pb@$YOv9^7?(NGZU zu?%B7O9{5sZEtAzq+~I(>2#5tVwUC1rEpTUv&BYj+$SA<`!swkz&N^iSkHOfSUG+Va5Wfh z8E0H*4@yl1()Qehw9Ipf^qLI0b!sn1JZzv*tiN-3wM(5X-jj6uz&Dj{WSPu+>aTVX zS+4xSlcb#{dbR2L`WGz;GWt}SJ6eyXD|w!iIW{C6I@$$^|F@?ONpYr;>Ph=ijd@!3(7`67VyfAB)UL6ZF!ZI^P_y-E~AvN~LMB9T`-&OWe?;Dvz9dAF+a!i6rk~%Yb0Mr&r68FIgc7#>Lyn zQt$LknzGhn@=()S#OjDrukuGECTJ*rPf4pxRX!{*0Vdt;1&fN3hMe?~x*oez`^i&? z9nP81kbxfg_?B(`A8*5kQyVKC({Z>won1z(s|c8`1QHbyNjrT(b9RDfN?92;l3j^U z#~RAE9EzmF3jH2qb_z)`_cwU@>M^41q558p9En*)^;q(Yiqb@BFiv|^N-WTA?WMSm zjf~{@PGFGwgFh%jj-Z8AanI^Zl(T@uvo(D&)vH?UDAdd1nKi6bDP{9hBK zzzIJPUof!I`H{+y5PY1TqCCu}lBc*CMmk$Oc3Oc#+#2{81$qV{qmYMW2N`FoBvmv* z^l@QrRkN=T=A7mkSrq3E*82L6eYA zhL0!r`4<@W4{BVj8?uWL)J-O4&*Yd^MjHU>F$toeYU8(ZX8%C%5w%o}vvbswmQY<- z0*vQ<+R`3F|H3sP!Q7>X&cY{@x|u>OCMt#>k-kif8m=MBu0ghun46zYewyy} z&sUsfp(|w;7Zz9zy@G4=V8?OgEuj}Ewqjy+L9lpZVl_gPEz7H>;J^V|*uqmov8iSn zVxUaMnAJl&SNL2x;ZfOYfuY!nh3?>d@$`=cz}HEC(#+oRxVr!kf%<>&IctewSHJpY&_)pIzq&u zmx?7gVb>j2Cjs8?O8iax<8n~D3L~Zwdc44lwp~B~J1ol9SV;sV5`HZRoUoQ;0e@^B z%ncP226Tkfj2LkS9Cz%v;k6~dSYAgn6x})WO`>D(5~epEfCIkYv&3hFbno;kf2O1~ zAvSeNj2vn7!;+HJS^|^j-MI5o&&u%XgCp(jMBRnHR#rY?}PKH z(?|N62pWWzPQx=H>SJm|>kQ8_?VGdhh5II!W!3kUVXW`ZCqbUnWp=bTvkWn~~rm$CLA8 zW998%8ta&b&P5pH9Bkr$^AhxwqjC~U^G!TCGSF>hqMimGT+uK720pp|eiHU>va}R= zPU|!dVk?9mM2tM)$B_;=lLC@b#GnY3HYl@#r;%1>#d!_GS1h_cv9q8RBG6e>RawD$ z3~~DSHR__%_oWp9Z8m`w8AkW%7Vwp}TM}~z?EyD-{92;V#ONZHQilx$ujQA5 z(RsxeXkcRQnjy;86_a*Ebh%lmMOtE+S6;l{56$1X9xb#uOU~%v+8f35I#W?266xTS zZ*N7|<)#}2_!C2gcL5}fkfuKs@}ugJ_GlB6p#9hWz7$S*j75VwBY(AEa;97WVbXG; z7V!fAJg{cOt{_y__yUjxHO~#QquL2U-d>VskB7NX*g{Jmh~D0;G_vC1k@n4tgdGud z>BZfsi{oo917Vc5_<2xt5wtj+gnG6?e@}rTV~pK!pXGI)EPr!dHXG6~2*G zz|z}bj*Le7$HQ5bRiIi+#&0b9iLt4c$;YpUWa=ncy;NV_-YN_Drkn+ zyN8H~mdA0TL-^7otAt@|%`TbbfJ`+(Fe9`lh{b?nRbkvJi>NW(ZYs(=Ide`v2|rsF zyoJ+EWJkM5%Tf#rCVOVk_x9c&=97nG^le?3JdY9UblE2(J84agWn={=Qw3d2({iXP zh<=ubGOVub&e0zJLWpgB^C-Nr=Zxof0KG?(+VIU>%dqZvBp`(z(PMR#k^`BX?aoqDiF@_ zc|mnCQ`LHNA>NlG^?)qW1{HRRT(mv;U#uzky*`Oe+>|3T3yvpx>WvWt=5%m67HLj8 zZ%9uxt!>j&(^2m(xDaeLOqYGSkBo=l!fA!5c|K5O5Sp|z4dbU<4a%}H)D3q;YATGaBK|2d1par`?NFL8C$}cW-oC> z20ZkO4_v+M+EH-xEfs@lOR0L2aU6N>n@&t#hXDC;8q)6t#YMJgzek z@oXLsCqz7N%kdcQpp{G3M)UDG4TywicOF@v8VJ(IYze_1ue|FmpbXBQhOTiPv~GMZ_Xul-Mg$+RG2Apvp{AUVfxPwbK5f%z27$L?AUG0hyAL(qKG=?qsc*Mthi= zx=C32+w=<+4Q+KlDx2|rqDLmJvy->u^YywX7^nQ`Wu(A*9lEfDE$&jXzIq$v6C~Tz z(-$u12TCfA!m_#*OXw#W>ykDFb>@q@M@#MO4JdtZ_1~n)6*a2yZ>uTfK)n&9LpS1>KYwBMsFz1z=^< zfu7jJ)0Y>Fv;La9iyGv(R< zg~%7Se#V~lt8EnyA5h67?F}!bfpV!aX;|BJ=u2){vt{C1Nf%R~y~2hsX~pbVI9c=E z^^7++3M}c2YLRxEYw@ywUjDL`t%R)X;K!*pgRlCwq5LF*SEVX9XchK$Lmq2Bk{B(C z#J#6X$#=|M9qN?XJ z3gm>46-Gfv&sA{_QWTGg1T!}^CB@NAh)GEur83N6m7+;H+)Df#ePxc&RZNL|s6sVC zQx_5yKFbJFPl}G(;5>jDR8Uk+2{|;aTb8GJ;}sK&%S?~S+5=6ZqV{&Nx&tFZw)}W$ z1J%qRrJOz{;SkR_Vj!_Cf*oU(4Ij&$ms3#Hin^#$DKbkD8fEycBm|6%jNDhlN%(K@ z?|?Z{N=hJfJ-rsJ-PBJVt4Jy$sK>jvm(cr8OiL3lHXj$47WFZwACs7DN-@(!O30%B ziH8Yq+??DTmJS(MQ8cwG^h3SqY9P|_oA%N^Clxcv&pFnwRdRxAo^QALerCu~;% zBlsH!%Xb_|m84lC4X3AQ5z*bAIxwY}qCwUoa#O)s1?@9ZVU;M*jHRL^*zy~UWTGCS zHxR*Y6~_2~MlC*qX_1^(5DrjS`e*azQrA-<0j78tKDX{%I7IBQ`0(F{ZVs+h(A+WI zFOyv~)?5Yd>iSyJQ2!hwB=X5rQp*|mAH=_ zsP17d0aP~J0aveqy8-^c@}eM%|j}y>0|bkdWSe??2Z<3bG?MS)Fi63v=GQE z0D@IcHG04lt`wBPE*l!~pd*@Ie(`rsx|=}}yyVkpE(hG*ib3X`yyUU8h%)kv9Afwj zPGNf)IiSHS$#-h$%<&*uLc3-9k+51JqtqxLaWBHiD?;`SuJGyyx5&23|D(E~>T@7G z)Z`RewpBo#s9ZN(L!{^G7V5A8(OLc=Y>t7nS0I$P_696Btt^i5_emjl z;nzoyMqA5Pq)XqAUyc`fKbxw8rdCk9cZz|G6Tet9ZV0S4MpBog;Cb~(-6#hTp9g(# zXChd_A9KTveHzS)7yQVjY~gedwmFuhx|bDKPJXRe@=E;vbx|w?_@rHCcSv7N4=h7~ zu@{1j%#RC7Hf5QX&47RO6J&y2NW+gjbHW$Uza<=dFJ-4J93CXMhh*5^Oh)f+&smBZ$+v)uL+B()NEJD0-iJ+it@ApTs<&zbdGfRRkzWBju#>bT2Crnm=*&p0V;X9j|Jphl9%Wnb{pYMT2A{lP*|nEdR3|M^f!j z&`)bt?(zW4<3w-ZG(i%Ra2c{dQZ_FR8%+0klC!P>$<@_1q!L;!Zu}FH?K-%vZXCk< z;=Hg)5a;C`R%pB3lGC0W_bxdXQJD$TO%9yM<@DEruhh&GHHM*^_YJ2LiPBP4FZ&wN zQo^`!^B;yPeSFCB?|*h&%xgd}SJ?T>0j3slH^3jg^(Uohfn>SsXnS>6zkV%MONt1p zdo#)vL`vm6ID+}L+D=9p^9Y>7Gft#1k%x^SgUlJ?o{auP}x23hKdcd!9 ziUb=NXg$OGM2}9;4i=vQ8D5UP;%dlpVFeo)EPok-ub5$Bm=jaBTz$*y%Fn*Q+y{4! zUsvfW)~d!TFqFMBpdIrb0aNeL2|?T{+ed6Dt#e`SCn_D2uOS=|Me9DX-il&%Okw=; zmsF!Ht?+!q9kRlju47IBzLsi;Z^lV(vcMTz)o0ZvrFRg zmt6sbsbg_O99s?Es4}|{GnNgvA8EbAb$lNjmN=0E>8K;Gp{~tM;i%u2AnERx)LP#> zvCrc3Tf3i#3w4)zbZ+qJ+bH^7zm(8`g#~x2B2R(5MTV!HRe4Rd`uza|n;lAem-_0;)vj zZsT9!@H~R^MPi*68N9eMVbbekRfQo?wjMs=;(%I-$Pl2x?dghI@+@j+xa{N!%2BL?nQOxV)xsN!-HzOd$-+Yct*$y^D zj};CkCdQ5lTW|NlS0?@LM0|^e9+)#M@%A^+W4%=gSZWRhQInmV*jk*>R~ zCH4BenM*dso^DDLVMY&B=a9M4P-UjbjuP%+){u24^Mh_Rl@xEKOL>(5CZ6Yn4Np%X zcOSFD33^JB@KIHwD$#f=9~^nF0_R}SuFpFcDHXo(*-I?)#yzCb1eo^Hhw zBO%Qm0NbcJ!QH5_)k*c2&WX?wVDd|mz3JO=YA6thqq7{xqj2ol;>5KS3MccWRZ-X^9*!MWb)G8c|vf4m6;vq~G6)E{qo)0w>msN}fB zJDXg>YW{dH?M_aS`yWJ1j7^^Ux0uL!v1=akMlsenN{o^09iPiuy=tMby#hV(#t(Mf zd$H3Cy9jcpFZV^Ctp5GkupeRQbjP+f!nf%M*sjQ8A**zSYDt2_T5x1kHX2-5i_KW! zzTN3<(Om-}Dx}#IPU8A`%|zi*r>G)xD+*GlC`uf?u_Z$xlq7LU2^xFbrZE==?CD3G zxhXQ34(jt{axTCUbOIPgW+=b)q(0F;1KK=2N6#MT)DDT8Yn8tX@G_jW&)5!MEX)h8 zRwHyG&7VX}+>Rv=V)C*!(z(KI0C5Au?mX+Eu%2;(Q%{+4SI38mbl%=!CBZCwsRH?U zwhakm7t^R)^HM%=!Q4OPsJtUIco{VY7|wI#U{lA zTPC7qb9O>#ZuTPA&0j`B(|lKIOp^Tksjyr0E{yl`L9--3{1y1ASC|n20%E~pYnaZj z7a%*K?ZU9Z!gwXDAYznN$XG;dYO^`fZyGWMbNxiAyb?3GC#UW+=o4#fVM%qIYIB|6 zgX4&Urm6c|?RtcVykX%FsuqT3)Df7|#Au6z4aEvfkC8RojXw`DgF4}b`FDxh za=8Dcb3xbu|3e(1N#^p46Z9;RB2%KEg-tj8r%-ULsMHkjz%oKz_V33>OdhWrq;(%e zR#`;|ek<271(PN;rM>3D$7rUgkJ<)+A8`|g8P(8gxWVa{t4R6Icz3T#)&ycbQ6oMv z(LOg@6QV&GQnYsu@rR5up^(pX6(6MjB-rW>x};;IZ>fVQXXXH0E;qV#|J-=!vwmep z8BA3)=b>}f;?W0Y1J}m>9>t$BG~M^NVqD;M*gimf9zRhn2*Wc}_-{Kjbp-asxwF3r zj2QMD`ETOd-;sh*OUm;3X>N$pm(IJ~W*D+Tkg+*@!>ufW7C!1$`L5^a7AsX;v@S`6 zjL-c~I8ZiU7;(rG_A=tR!%j@QOEf{D6b1!dERz^Opy|2y!Fdf0D%?XrU}1%a|B6IJ zC1KX)WQ2l~A=vdJ-yNq2G0+|~955trBN^wF(5{rHB}kaV{JyNOh`0=?%rs|>mFb0* zqxFPoyZ%4c-ub(d=ldQWgcIADiEVpgdtyy&+qP}<#x^Fn!HsR3H#VNU-ks9VZt=MYWyZu8DF2nsMeCkdkVY=^2B|lN{^M zbD2eP+uO%ed_GZEY1gnq@3}Em80ASgOA@Bi++h2 z-0vfdv>;nBw4XI1eNE%;3yhHc#h;Xt*ZN52r65&N$Temx+=j6)W!K15+*StjeW0)3 zmFMCUy;s|U0@KJ*0Q?hOzEe|udE;n~!?`%LA7>U6B$5|Zly5ED!^c`vPCeSa68_DQ z0yP6^A+I1==_`V<@R2!np(bUtC`d|y9M62_#jEEP#tqtPFntOpBLxY2>+=-3kn+tw zPq&OnBu>Y#DJwQqd!l@p$S_gWIh0n$iFhSqyBC$~R8%8mSO6a!zZMH0F-qY{rb`(_ z;;EGNC%pmYSyZy(pRs|D6>Gu+nig1l12Kuxbv;`Q8l~mkPKk9C`P(}9V0~yBky5rGQ zb0P;a7xRaS_S05nusVN0E~VR@c72{ECp4qkLUH;^|x>t4^}}~ z)F<8w(E%gkMhbhq|Hl!k3t}#_(5`83w+o#c2hNw!2{?TnOPCd)d|*`K&y?sG?Vhp6S$1Qg{7lQ1!j`vL=vQ=kRx4$#rzufvA;VcML_qPqE&L zW0+R#DgJL5zapmF?DW;r6;j!P|lH z3fjtYVdkO5*v5JXtfTs8d5D~=o8NWc`59Ah`q&JDsSL9iCl^t=b#S-5l$g6*tsy+b z`!_4T#sH6q886Y+=(@J>8X>4vqDIj?CWC|H%ypyimmn8I-1-x9W`!oOkRXdW`P*Re zvvIcoqG-348vTLc29SvI7VywR&u&7ocNPcmj;2^a_((xo{a5}#_eCvYi*R+#XocgqZ zbc}X)0gHL#3V^LbDN{~Wjhw(jz9znp=32zHL6^rQh=Zvn)!-6;7O78SsWWqFxEm5E zchBCMH=zL@XQ7_ff3IaXOc)UWA9btD1yJpzfx_W1^tojj3kquAM=BEoikH(RBO zXhO^NAI%3%=&OnAUSqmJ&IOc)VmWo32l!8_Lkz% zb!4`0A3Y6*rRXOFCff_hv3W zzZ8}?>ks#`k}lnnD7Rq9Gj|;7r+vyp=|g9voQvqD!o@z6^vyKm|VEjTIl z$RR~jp~I+_#M?V^omDJYT0SctcTZ`vZurl9JkYipFhiS2Hgasx-w$7d19xo$sh(?2 zUnr`vWRV}P`K$Fh{7#FleN+@!lGJDlT}%0=4j|ZuHorMHX5&F%Eq{{vaRn^gy;tW% zpx8f9S8MZsih;!oC@M&sb69fy4`}0q@tG&L^Ag084P^~!wgMmi5)!oNb*&i_APE)g zKhS?WX;N<>Mh-p(p0Ngf1jVaq-CCXM?y@z)7(>3=9(cTarFjm2a6DYD>ZjXlo|Mq&%jtDQ4*?15`QA4l zK_U>ffV}&&YnWnI3PtAqy=&eNcR=vjT-;_v+DL-~3Jgl#uhJ+45*0FuC|MErXnCYh zyioUlD599juvxpSnN>ZE<{mj%8$BQLmtQr=EiD^^i}DTc1a+;Qhg{v2(Qo~o19o5x z0lW82VWtb4F0z-ha~{(4RwtsQY@|05biNh8ufirCxRah!(N|+@G1DuC4~y< zPSDC?F@4Qw6m^|9@Y)};h@3v;@{Hy8xE5S`RBui{7x^V;6EPjoTsI`vlP(Rax9uI6 zlydn6%?!r%UTLIiyEm|TU*DkKAq6LR&a{~cW=kLp`xaX+@9ejMP)3g zFO3%GH}^yiV#)9poB93zpnkBU{yZP-)L8t7MX`Oc>}s{Ny_JK_?t(%5QC|K@Wx?@3 z)O9W(VzAlz!T4v~8{xH`*$`y<6dUj#!uOshm@~cIi0x4xVddtBUB;gg=2B|JPyLKy z9|(be=~rJuP9UsGvqKmVIp0aXWockUYdkO*^v0FcV-URKqN~j11M;Ch$;g!YY(xIl zeLz{I;lP{fKvIG}>e`;ciXqLtEyf^uFTZmd+lE!5m!Z7%KF72B&_s$$M!_#FHtW-% zo70nt4_vOYQ%m7}isol`aPF3I2C)Y`eu#&0DWlsW+;V)bDB(hL7DAWqE+ebi7ko%X zPRCcey(Z_p!iuZ$(7=x$7zhYu71V-~DuF2v4C?}KoIlD4=AdN>usP&5N&4PyurBEn z!*;M5CCTn;CfBsijqS&W|{Ccn5ajFYDl+t;lLDa{3b4DN9eJUpZ0{ ze{L2^KgTyI_he%*1_vC&3;S9tKRUEa&iEyKE5ibprjEe?X(-@a`hutJ4LEpn?^4@)L6 zc3FGFFFoNBxh@(!J>FxxZqb*|tK?M{z-)IR*x8waRuR8us|Efk&F}XE42NPvKYt38 z48r`nhS8K=pU~aaLuvN>kS)r)(?3*WP@yL}cT&5|aMgX5eG z`UrNye3|UyWQQrARi0MXP~6>zt8I|f$sY!h5$(3JHBS^hor?LTxGp0)5GLL44i8}4 z>Cf-33vm=Z_2cyshI?uSyMf13RY>v$cV`&em1CE)TaJDq-%S$|@CQ2Os>&1#srOGB z_m^ns@>5f0iVR?{v8o4eRZ88CkAHxxuh!y%`4dyGPbY(?&6M4o%08fWSu~pT^PMWtQ-q6<_ z0`4HWl0}U1ZLz0jVRNkx7>)Xazbkc=jVPXFlpA`ZbJTLp0mT}=WM8%L;Kt~z!;$+v z=9Y&8cOx~tT`@&7Cr##)GMuu#rLzzF$-1a`ytF8 z+z*7)R;RKTFB^S6`zCjmXA^Ik3CMWj4xRoacu5MDvh9s*%Plw5lasVW2e&4-t+UmJ z#;Bs4aPB8V$EOdMd>t8!`-hGn_ttXNXVUDJTA#;UCkEagrqs32JWLRj?*)c>C$b83 znjPLI90$3F67A=3E_gj9BM;?8^AHNe52rhurv94Pj2A!YaQU-L*i6W5+C{J0ejo90 zqi=TR{>(If(>>1;WN%@p(f2_gzx75+Yknc*uRmu(VX=&vIPcHqP&@u;=7wdkad=x`iU^@@F@G6b z>%%mjaqR24bhAkw`V zgwN|4PZya{zCAkpjRJ{mFWpf8yWyhF;X>vwDP0}^YA?%j_Oy|TuA5u zbo9rdV(AprbgNMJg@`kL`vkfUlW9_KhWj-h*_w#uve^bM*l8v+S^~~Sx5BhZA}9gC zKxC?`o6`e<;SFE0`6&uS1d=NY3(dsD`CvT5X&(C7?;F2f6+)Knt0} zw@rr{GsRE?#eWm=$BN!!(_Odxmp1vwt~Lf}bK#vFV-MHf{*KKKT%BDD6N>#FRmwfR zdRMK>IcFjz3n(Tq#jM6G9wy{5^(>(@o;>7pXQ1Eq9>am^u8?25$y{r7^b^w811q!e zFrcoF!Mb^cbr6!^9QcIl$Zr^4#D}F0!b?L#pH(F@e+%~29B;y7SkhjPfkX1va5`c) zWZ&FBDTW@y(4SYr8_s(JFZpUv4ZTOz=kz8_@!q<^?@cxQJ%iJ@yj;Sl4q2LQ5W^wV zSss6?5N*9Y!!gBj>br>KCS17JM2xnTdJlLSo_YC(=b`fV;{FC+!&O-3g-!ZLj{dtL z#Y%D0UP_uv#5}a_y7zeI62u8cjr2c%``7yIA0C!8#5K0YJ1G^M%d2^#iz%V5@=TSM zc$jiFMEAjDlWOe0q?=D@JJ5+^cF|{4@dtpj51d?$#IA(hTNmXhGF;bRSZFK*}98s=v0HwbKa5sd$W zaBRq)W(>@cA2v7kSCX}y#uJ`TsTKT3aj>TSODAn^ZtrzgFq{fya@hwB2SEOX1!qNn zLoJ`rXwg=WyTR63v12dPX+xdMqyDq$>5ez-sj=h4g>J!t9fh0@Y@DT&gQ!>St2+>@ z`(nH_u^Zb989orXU19;jkjobL+n~BkUX3R-trlA03Z{)6Wp{zPhTv~(;?pfhMmcBr zGK=^968Bt{DbomtV3u+%9_ROj+YcU`@?!AsP~F_GNKNa0ocNWF>9`3~yE|JET8~m^ z86ggDC+_sRdLs8C`?%$Zcr?3wK4|0kcJ@s>{rQ4_HdSIq4?oGIMO|k|PbDH^fMe@R z_|igFv?CsTOfH1Cdfq8$(6Lvty_k zGcORvKGj)DR`oDMM6HE?^J z7BoxpW~mT3jYu1gU4SXd!r6ypZC{FOa7|z%<#P| z$?MOXGvKOK1 z+4->)B^*Dy)@dJ)rsfjIA$eAFB++*+pyp@KC{Laz1DAu(GcmoJ3LEY#6I|mXnvsY( zA3N*SjZjhYD)qWjeKxLw1})1AyR&y%h_0o`FIvaQ;YiW}AdG3#fIszq9me!ZqF{)g z7Hb3BRjNZ3!vj3Wf8A%a_aq}4`%>hu4Yu2NIMJ?i{SOMYGj}!ZFjHy z%%Akt&@k%MSRXjl322fNc^WqfwXuoPYD}18Lt<3@B%Kwx1ZDRIUh}b|VReMqFY}J9 z84%a$Rq85bLC*VX^!LBSx;eTF1b5MeqZxyDF$}6ine9i|=gd-qvtLTl;*6m?;0TLP zV@i#vvO-CtF$hu#cjtNwd4J40nyI_@6(H=58%)-@bY$P zW!-SbgL;<~!rKDrOsFIcUW)aHR~+#LoTAhuB`eJ`1Jec=_R*!41AhYs`0W+(NM@+TYyTpzt^|(Z$UsgDMYg2!F!h3Bv3sg3s~0^Z zA4GQLG5PqKNJB`GZO-#A7zR3olN=&7@7g3qI8jQRl|Z5^51Dr3?K%)2()c}%nFa+l zaLu<4R<{MBmT*eBc zZk4^L;&3cixHN0ZIGJQ>Db&K6NX2Phz&zHCBz)=CnfUG>a1U6%TeYgo;S;> z$s`3Z|7S4dy+lZ_EYcJ%w2{rrQ?o>j>^Q>#88hXV_L}V0lKr_@$kpsyaYBE}0E*#z zA_e^-8AchqbqnB){K=Jq(2U$%N#ul>Q{%^^H?0qmKcpbO{i7dW`noTxh$wCCJ6#TlV{Q~r* z^<(;^OUZeE2S~5)vt`x4jr~*zv_|TNpQpbCsQDGI<_lcS)^R7$4Uh{DHrU_#qOom!p!P?9dKdN(NVpSLMBN56%uiYX84QA zhAw%?`f%hfnbl?^B-#g(OZ$dk`3HNk@hJHpy4l2`Wi1w34;)cEj?(2xmT(EhRmYcs z4KAd*?!>a0MvN|1J)&h$4s<4uVy%&Mb;+oBasrth?Q~#FO{ijX#u7zx#gu*@;?5Y` zfQXNG@SKFSm3mY=VqNZn;Ihf~!0LW!lnYgxhfJ@4G{ZAwbdi$^(>V1f35f|_-3hBK zf*s{PDRYQOU1w31T#Lt~`9>Ke9aI#CKbJp5scMwtnsl(mc-d?oOh0&U|Idwj{T|kS zsfuzrIv5nV*=e|(UQD9-lTPTjV8KQwsjL{%bPJ=_$qA)yH`REB@j>1x?MY-MI#tTU zF2b)J1Lr?eVD+fC}0g*+c)(H6=M>Aa3P5{E*!=jOt>AqF3J=c84wiUxYe z^XHF%v)~}q#3qzCp+m(^Nym)aEb$`F6rV(MO4W&fQFN1L`9&4P(bM?rK^n(>C$%E> zeK@(KJ03#tOeIjfr~|Miq1N_eoV8jMx)V&JMq7?{ zBTNQLy-?RkwS;mHc51faf9vNDl8JKt)5mvIiur6{sl`0ak$@$y_}s?u9a71xM;{Z( zL+;`w_TN@7&&Egg)szIu`{Q~s|EOr}Ei@E@Zu_#boq`(MfaZ!-F6!22B2^)D0G(P+ z;RgZqQp*t$pR5v~rx-hxU}DMmKp_*|kamG!1HHNhNmxXLT8pBRHvG0C(;usatkhY} zubKzlcf-o4GMMZfhZmgsk@&3RX?-haxL(1i_xR$8M~Y254CWY(X}4yCjjb7A2l{QQt9n?Q0=f0 zzP1$+JIrP+`dGG(q@j6WTURhlPxul||E=a#Zz*tMLJUGjASsjn6Q{prLo?XGdU^1! z!XJi|lr5ba4|w2xPL>R0r_ai}RA=JgnJIA{qNR#AiY8-MJs<@R=pXz_5jE7tw5+2A zg{mF#2%w6Xx713?;v(Up67SYBBPe$pG}$|dBw|O|wqoFP2_5PAGJi*^dC?JOw9f~_ zM$7ju)9}%&etM26yz@(c*3qMYXf^JvBv@R7OHZsoElv3`U}#Eo!#UQ?Y`C+0-vm$& z-*04KDBSMoub@|BJwhWyWNjW61^S2wf*j$-Npk&P-(s-_C_Ekpr4Eg7Ys}~#y`bTz z>Y}DvlvB&Qd1x&qE5_dK@DmpqW7EhscU16Z7uL_ngVvJ!LB%JZmAKziJo~Edn5`Z~ zy^3QL{On(~pzE{;N75+25-I9z)HG|zz%Rta5Vr~ShKeraEjvsZ$;E=ye}s1squsA*q}N2`ubxd0Ys zHqv}GzJTLHI|M&^6bBELRIa{}vlQiJ)oGqv>F(<{x7xDLFewAuvF;UW;GmFYJG>U+>1XXtRqr|xs66>nub0WEe0odf|HvdZ`DaZGeR!y$IV2e_Ey`&?o^db_K_FGPB zIAT)3P^3eXDnu_f0ir=JcET>qGjfP3z8;~jdF|UHFd|Q0l31~{cj935;C+A}>Em}8 zOtjn%wtW+OwP-zOTceYzk2a+owaAm&CKiOZ0lGhtVnGdE&IY0SDUd1u3~!bdfvNXV zlvJNQ#*~JKgLi%4`7~j`GbF913*&hY0u@1ZDco5u9O2MA=(_u_eEY49*}#iXL>rrG zfi{`N_`FBo&tp`>M`TnYPzGC$Iq&>WJ6u!}*hl2x^y~(=SUbhhsA5VM(19c-g^%iv zI=6r;tN1M$&P+ZhE;Q1b)qK7ej9YB6CpUgVLaklBFdiC1$ZEJ@pZYy*(y_>s-GvXb zoDZ~l0|Q^I%N?_KOuz^d1;Ufl_fT3Dl@7Rb)RIt`gm&|fueyI56>{~lNuEqrC=?C+tohW*=<#;Fl z%-zVpacKRK3HJfrzW2AG8Hyi66%IhBI{+>}`rr_47L|L9>6IUHCAXiSNjO=nq;;?I zN!~tA-&XM+eI(>Z5PY;(i$9wE_KLVNQd(=u$KMMVyPftWQPr%(h4XS1L zwvZO0-Ry=-U4|SlK6$^ZYVAkl`+M-qFz#8g8IM9?=MruUORyXgi?zP(34 zH#UF=rIi;y5D01r`AHd1MspuuJ#z?i1V6evo}MYBKBx&IY0&j&e>Txv`AQ8kX z?pFa`ETKb@3})_MN~*zRQ7YpUHv@Bb;4n9zbZ45BdZ%U76#C5v2KKx{<5~GG4Y&7b zz>6N5ogL-zdIYn@qTUjH`(Jt;kEdwk{Tg?BFLrNFD>TpBRX)D<^gEu9XOy?t;QD$X zt8SzzQZ*l`*g7`DvB{=fC)z8lH}Z>XHfi4kzTz%m@8{(dt+vtGV`5d&s_kL3l&xtnCTL zd+9M}y*W)RagTR(j&4pX_lno9zfnlGWqFOym-|h9x$}IIW9@^Mrs3$M)tk2Ti-GI6 z)@kcSvm{T`*N$q29MIQIqpUOhx;ec9_j97KiJoD6Eei3o%8%@N8M+gn~p}usja22d6%)>bw zgW+6>ZqbK>rgYy~x0}}ehUb~8WhH}woBqO3N9ogu#6p(t!_pbMOPew4^V;S*@kFoC zU}2=Vy_2xyr=AbzYEsD=J+jZa?wytHuXA#1G@6s1UK1GIQr^)Jjk@d*&ma$#Andu=hKFIM>l*{m%*3eaVMzv0!kl6RoXQ7XH(ZL=H>plI%ave1-YsKgldih?_c~ z3m@=of3~zr+MLar5Ss$yAKQJ_5qF}S63f&`Y0_C*cU798mD|xNWT|O*@n{u8^>SB( z*W9lY1u9soN@&zL*-ixZZ5*f;Rh53}LB>D{Pvw}SkEe%rx-(yolJBotXRwGK(X`fC-uqp7K|!3mA&D&^27s<((NA4lr+QW zJmK_w)Nvz-_66G;=oOi)LDtCzOej{kv3Jh2D&}4MdcE5^vg!qdV@QCre>~KG5C2r2 ze57h&SC(1dJT~V#FIchltN|HKYNhewRAPIpyZif3S20IABt+j*jpR}J!! zME)|CYT`-3Sp~GWTjp6yHZ{2BF799sl0ubsy0xXU3}@G6?Gy-DGwjR%HB% z;Bod?a7DmZ!IPpoYTQjbA;VvN>nVpO`&DWV6jZ839RgOdbsCH?X{$xsXZBpqe++YY zQb~&P=vy+GAIao^c0avWljq&Y*7%(qz%`OPnwfAOJ+yKc{hdmc5pAOxVAk@4!_X{e zdd6E^Jiv(QVlLs&yR%fjkW&HPetX)#wNh71O7yzbdKI;d;1G*DPUYDd5e8*o?Pttb zdKr`RUK={3RA)Wf#d?O8Ch(bZvG*VjZS;kzMzbU?=n6-Q>glP-Ev(FT$Ve|#^L~k6 zl%!gXJ2;*#SKF>4V3{qkrCDjVovcmgF?%;bnFV{y6q#aq+**kpcd{L?H?!PHd*V@$ zOD5d@B>is-p|g0m;Bf8s;c#ABFXTWX7E-WLAp@&gE74-U;?hjaa$+~C%9~gD;TaX( zma=}BhxqSW|Gi_#Hm$$tyYP6+ln!Gr1n1$@bs?R^2yzr00?6QJZ%VJfoD%jVmGG4vCaQ z_+6_atnnB5gMt3v2ORI${R>%y4de>t>h>T^(BJ~Bw5R|cKCff_%cE8RxMuq;Cwc&? z+N5+{edpWe^~ug3W>GJ9X(mA|v1b#!t1CF;`dP~{k9AT?-XxPnhI}tU9fvJS>J&QR zWDptG%_(itz08@_S!($Y>CS|=Mu~{-B^wk=v;2nJY*%%(ZMo8VxU36wX z-Qwoj7S9(cO;`Mh{x`=djy1WZ7bN`ioDkzxhVZ-#zhn<#gMCCCc6Cklzvd~!H;n}0 zVLro4A@1|XR8}-myDM3OMYA}Z?dFhA(Afvx3fP%6zJGh;7u8QT6T8p9zHSCP*6!&* zoxd}`@|H*@$Ggo{6kmW}lrtS!Q8cMn8_bx>RcQMbP#i_3)`qeYm(!aLA>UCBhv^Cm z)4TYp2UuExj0HCsg&xrsL3F48T&_Iu8tfcgHpQK0Bte-M#8;jLouoe1xABD%m}B^8 zZjD}?k<|l{^$L-!lP!$;lPqVnA{u60-vxRYW7IH=RkHq2j;pVxmDbvyW1dX3%KiQe zG3ubJf6pgf!ZAF0ax+PEPy`c{tgbmZ&x&P7Jri)R0d@U4qK|7LH^k5|sMPKzdEL6) zV3-W!=VQ6-*22D;`(g*4;YE4QRBCv#AfBWplRmPrFK|y6GVsK3f;XKGC>}VWgSDgW z1HQy^)^JKu)O)G5nJxxJ%FM(IpGua1KxQh8oI2%?g1J-@ZE?eXpQe(S1 zLY&HYd!!?OL%I@KZ0}}mm+c?Q}yA%>Z@5G_O8mkfTk%H>WSNyKtIo_D534UtoZ-%n|cxLw|@W5t>l zG$NCA;Jr$B%n12iJ{B(`A{dGD=FaSbZfI(3_&m2}Ac241>^^rwhT@^-P|6;%V?+a; zHO3ZnJZ{eD!G1$N`FFC4g4R4Ww9Jj8-VFyFoWfn@aN16aT2K&%^0QsKa z#&pXzH*e^+o=RoI%+wIbuH|lDdZe7D5^pLNgI(uV6UKKx(BLv^RXS#%F2w{!lmPh* zp3;;hyjc_CADR@E^9QZ?I@l9ijKuM(D;Z1pxR?tQ($fJ;=i`yY@g+{t@Pl}~_ z#o*A(MhB8+*=&;g2UPl(wPKe`6bG!8f3*lS8np(bkRt!W=UBG_Kjg9|UxoNU!@gjk;P?-}_UMOWaY2iF=1@!e#wF_vA$X(eD8)zoXZ#kEFDg?4-v2RINIO8TpTYVbdk)& zVo(X(P;7o(?Y^aMKJBiXlGBjO8v`el@zvMxBKJrgOedaS$`yRHMwGU{kchTr_1H1G z&pQBs8{{>bs!j(sZta7Kub|we*Fg(hskW#$**5rQhoUY{b`$w@U_OPdy26k@m$l|q z^FMi7UG_jZNXJhR*9aWTm|CMwlDq7xqmJWl%8!&23~*TydU;d^uy15`+2xq<)H9Ws zcQET3vH{2RGI@uU+A$6hj$oPF6MGxaciZiP+bzPn1S686fYE;E3x`cK`WV}jy>f0x z{0K`1!^BU>I$L5|0K5B_w#ha{DpwDsgs3JU8!nv8c@qqgm1b)2Ge-CO!4ZkK0cn2S z<~z?1$%G;Sl22cEj_<&-G#DD<4b9{;Ly6dplAri$#c-c-Vm-*@Il&6m_?~{+`q#X5 z;<9cRo2`<4QYS?*!i<<-1l3w4Sn}S~Z0=2M(1`}bHAI$#ygWo?%2yC0zwI1*QR2}; zH4x-$#Y&!YM7f)~H*!@cA_i2-S48Vud;`_O&f+Y;QlX+D35ng93*LMg&s^E128@~OYwXt>1HYv-;FI7$V8HYx1}`99?)1Ao_BWe z$Mf9_qM}cMaa|jY^t+-?BCLudJ4Tg8g!i!+vp6g1)mqwSO4?k2%OdcwT}X7R^bNac z6w9j!O@Mx-CZ?oL#<%64^)71=CY3zIpdf_!RG)m!NXSPcdbwnSf?IB5qRbCs+=+F; zKLB0U9)X;Rz)}|b%U>Z3D>MN`A!(F`8ZQx+J`u?XEGeVGTJG6qwDKVPycB8s`hp~B z*%3tarG;R^0&T?1p42ajy4_Lp2q$X$y#;kq>CD;sbgPVD8&-GA1G1APW^&og(e4)? z>>ckk{-W=@2fBrJhZ9B;#bi{vToVSA+C5|`Jif+LHM2OgZ8Wp_*7Uw%q1K*Hy)4#tI;+lnmsZvRjZWCLNVC zNfSFHuO*|CKq|SJ+bREFvZMIr$W*Y?-&>I)+lM-thuwpacY`wPbnBAMy>huVHh zqK)vkCxSVKhQoyTqW-w^5@h^RZ$E=~k{Jk62JFuFoDEn_&}&qIOGT~*Ur0jai-BpP z=&B6HWLqzk-@snxz*?9MUq2@top3mJ`O09poND%<9`E5mj@}(%4h&Ihj6wFD?~1q- zyvoa{Xj{?=o?>g`LT&cvgf7dY@sp!&WNIj2&*)Kxo!ZNZ--4E|O2&0V^0a!IOagG$ z_+R~}i$>!@!df_5Z4G{+lysa||N zZ5-9kC84He`z+0k@j2lj#~$%D_jkg>s5Yt$lI)|zvC$WftH}AS<2~7fPMq2(5Baj* z_(ni?_eHt3fcD3!ol^OIp(XGZqNj6Ic$0Ch9-}~k+!eLo+x>DX6uSyBc8!cO?mkkX zYQ{nN42;c!a8Lh4sj&oSy=6VYkLu6R#Su)mWo$GQ++(v zX8&CO9LU{LX$)j z>#2eTMXd^XRw!$Y+YrEv#EBaYV`YgLSR&pHOa^)AzKw3t(;UL9KWAXq)`&N2wA23O z)vrbjnh_P3TgADQ6zS2MOE6I0tl$mOc>2uHV`_y0w@Db1Y`4iUFYjDv zpY5Fn@z^d;IjOLRZ22Up1l`C*V~%cmvNN_xw6zh_m719kO!r(1Ng_PocptaTnyXY~ z_S+TtaWb7N*1IQDer+w_nsSZ|zK)(Xm)x_&&@@-ij#euLA5AI8-3wI6;cfK{;s^2h z5@(0NM@8N4RsQ;8Yif}$py#ol?afiFQB&@Pz_I%nkt~7q&2&V8j>>44Vdg`e_vn%V z!XnrdP%V?_|BRHT>^ZduMk~X}$fD)vaWc#_m{l6-y zHwjKT+5a_ijQ9C!|9>=nJ1%5fGbmk{e>65UNJ#ZSN#D+v!MetNzr9}|RnUQqwLw4} ziJfwnT3ABlE4z1N>13@KGQ{mxUkyl02{}eekP-f<+FDZcJAwGgo0Vgs$#!1HML%YLn@FWt?-|7Dk%T^#F?L;o%C#Skshf`Nz&PRGrY9Bt#1R6-)ML!e-3gS zq8Cj0w&x%n9DU?ctM>kJdjCK-d2*;RVu4s~J`={D;^v`=3;m9Usmjh7(PN8s`?rhg zK}%iJkl}qrQv=)63ri!d)0HOEl&!CK?l6~$qoq&vwW+q5^q}2-d&eNxFib7iz|xxR zy=6f26|9+05{XG?@LpgnW0f6=A+TR?oZ)%mmZRdM|2(!_nZ}bQgIgzmy=Zvd2|1?4 zpB_MXLixW@eS`iSG4GB)8%Y!C{(G~B;i%a)^tz;m!R)Lfr=ZWvcm^4fU?ILnNrl(S znkkH*9TT@il}%T6e8vnV9OM)fcPdSFWYZ2hQH+H)FzU$`#&BkTrs=iREowbO^?2*mz*NzY6Nybb&+d`LA{oD(Ei%opLw zA^klTjbVhbo+z8T>gp^RO)gAw5gZ;{XtJB`Jsl^{lD4%!Tw*W z`4@&t3E!mDfGw5y~uZMk0BR>At z<_~u6oA+`1E#T->K3S>DO|O;3kph7z_kuCFoVK?~2mw@#7O2BARjVTGP;B!r&@XYX z#m{h;oB3Fd_&XNer?6R8)>|=pq>We9Q7$lIC{6Z7(%YVTodLLIWZMp^Qmp=C2{_k@ zp+Tfe=eNa;9*>Fd8AivKp8M5;MZ0RJ5p@&eY$>vLCou3eSHjIZljdOuFyGeAjZ=ue z@zUKZAOU#I7i?SdGJJ<1Jg|~$2_c&j&=M;CdN{|_Q#4>Q3S~`+>Xg*6Z3n)Gqh74` zZ_r`(=(5KTX4fEnlRq<8?+JhO3^bM6c_&4za*L)XJ7!Q5jQ_9Cj#vMiVOYlHSSZH| z{h6K|?%4WyBIglF!>OT{r5)}*#~4ft?C3P{%2DY7N@(2PlL(c$T_{bEcP>?T9HyF^knUIrQ9bvOx=WjD5A>SPDM{YDWOPY=I_MCCxER3@evwg z258yJ2r2*Md`lO)QgQ+lf{tY z$uSUi#nV?lH!GHQS;*~$C<~e&)@VHbYlTrZZtF)>c9#R}%Gu4l%l{1HyXB`5 z?S^ZJIH!u>8af=`v#TU<9u3cFdf6g)3~5?z-Z4szMukjfy0ci4**~sy`dxpeR2dAj z4w~OG0d`KSv;O0CRmGJr7(-{hK30ORS7}mwdC2#O7!v33p|?lv=Nvv_@Q6-dV{B zUBbH93P{(BBY3#d4vrU^wt0DA9niH$%=!tGLKsk}d9qCvVr(yJSH=cEff2clc>@O{ zc5v!%E)U4*`CaoRaw?Cy+rPbezITI=FwW}|#q0i?1#gQZv4+PyBSNqbF!$$cl0nLF z)Ra9nBn(gP<59&!bz{r^eR|r8^QSU*xH72*<5dJO8ys<~9^#mM9>582PpU*s_~8T% zf}Df`;mo2Tx$FyZd#fzA=+$=(&TIadRQ`^U;1rhBXriZgJvOvTXyCY1nXG!4Np6HPl_H4g!$rnBJKks- z3g-aeACr{MBrY@cTv* z+ui>x>T!?wXJ(0~uGo9i3lwZdOQWVxLmxolqb z7#R~z=A7TYqXF;jKqJ8Iw4GKHHeM=!EqF_(#(~AVDy$hDLLdccp3Ju&VYGW6Q)g7y zK;d~%!rMSC@{pn;(;wX^IjCh$YB4W>j^mp`_!K>9Xju3!pCFUF!=X$Mg-H+LDMOy9 zS_nr8V3=g=v`$Lc30vZp>=0MT2tcjAChh#Peu}O(^e7|l<@96P9>je-=dm_zAAXYT zF5(u8(x4RLjZ*1jFlNM_Lvq>&4_(9}bsb}=fb^pxZu2aXvOLpe38gKLd6c5goD}7U&JkN(+7J7ug zut;lB%y5?$YDQBRH7P%<$Jf}Q%$U&sUe8D#-qx4(5BW}+Gad4+*m5fGu!a__q3B&j zEd5Tb-jQ0OGppnlZf<-hC47uIUZ%_ry`VR5+WZelLT6mATJp(ItvyZ$Sjs~bZ73Er zG>O*AaQaiFo7~r?4Su+D5P4h z9}FK-V|`P_Aa*vrMqUq-`bx*n47XL; zXNLmh8_kkE{*YDzHG?eK)4RqOvGLgN1$LEIA=`$1h$wZPpv_fWC>g&M)pX=8L6QLNRICMvE&q=q(rGwWW5gLooO3RhJ+Y(|BCT)pmJOn1xIA7nRCulo z!hq%SiAArXZ>#k)Gog`vX_1!{hs9`!wjQGGtM3HYuIS$TW+)T8@GH~qsfc6o+%9;Y zd-oncwgmB!mcw(N6RsffxBKz#2T}Bgm#9|QxnocNoscs%ORR?vc`kG#x9}|Q-C(Dt z#lL9q65-ID`bs>nkPoRn^ueegeWQxYrduyU=57bMiz~cm)-j`_Cp32T@if5%%Hb<5 z;fGqzVMQ6RqA&;L3Z-Q)5et%~TD)0*p5S_&r663i!)c{Z%mEIvm58I(RG4yS>sCi? z|MMnqw`(m`2lRLG@uXk^$jZzEPbf%yg-pknN_5KC#jY3=bJi@wFT_s5vMvQSPoZ-A z;~D4fQ=tCFo^1{FS z>$jm^XQtDfmCOV`NTju1$vpFSSPJ_5i#DRQ)s=%_<|Ltlk2Y~L1lYKHl&^0F3y?;7 zgQxVyw#;{)ugn2{IpD}=C2*mUa_QXx1E-Rxj{axt2YXMgzz2@jYekf7-Vsw0VkQZS8h`m`S*y3=Ig z{w9A{%)jyhTw3iolZmM1w}zCKdnl)mGc9{ehl0?R8p+GU9H!Dqj&w7_I^Wg)rN_9s z-9m$}l=Z_|Ph_dKfd36zkxe1^%Ft_sON!3T*P}poCk$ozd2McrO5Ku3SfD=u&UJds zZC~ND{VF&9JYZ*UP+?l?H}TTU3;L(RgO)vzCx-fS+3n+P;heTxz^YCrmy^HI&_Ck|%l1{dU}njy zq`~bDax{K4QTJT-GLZV!xyn=J1+QYU9U3ktL8avXv^AW+ksNr7jMizY+MZ%#D4{C7 zy3$G+cnr`HD*^i1W1e4G(2`s8oqvQ^C$qnJo@pb8k<)k_%^qifHqD#S9R0Mc=o6)e z04pwsnUHy}WUA~z5Xd@1wDV2*@mfrK%=VxN)9*tfcuoZ1|0a;^%#D+9E*4G(h#}f{ zh&`5uw88-uF?huq@CYD`yFj)O!CuYFiRy94(emjoY|iQ5A4(`bKAz69PSk6twqTid z?YkHvZqBfgN4xuLi@XbzE7{{EuDHKN-&&qH!ry%$`sewVt0osBajWHVDC9$uV4I-0 zb@(TtAe*~j=qVT~Zw%}N@3#wsdYr!ZqVf*b!@~q=wJzOO7pgcNxv)8z9CBnBMcDCL zY=^=HV3F&qX}?wv+8&nT8nbxo1C@9Ms@u$nAcyd)EvmQ-Nfve9Tl9;vBcYPT?y2%p zuu-H7OSJG2AZ|)uBt(SL-%6jx(f@5o52!9Az6qmka^Q=zdVE^i=+p1&&q6EYwl{hO z^Sw)=tdy$r9HDw(>0#;E;H*$aB#JP186EkL#~pz3k-x(aZJyzE{OGSvGmt`h-=9jT zn=-f9B!?!oGA=oWZ0h9^*Tx9Pv3g@n-jIVe&e-&MjRow`EX&{X@kHI%-Ci;4hI#2l z;PYF|FvYx3cx)=L zTVxQyb?fSr3(hKFxF*8X1QmeY2o>HoO*A?CjLu0e`gGgzRi0T|9qp&!__qTh5uc_%el1-{hB4`j z0A7NL6F7sA_hVsUtx4@2I8pv7s}at3oa&D$CS!k3yW}9L)q>XfSu23`X$l5I-S26^ zJjY8M8DBP(O0>mXFgIYWB;d9Zkc>>*FfmNaURO9ez8o2ZSo}LcmBEUp_{#ae2OKG zyAr!@N+;fbW_R}7yEJ1!l?$AC1_X=GG4fZ_p^esM1|3MvD_%oh#qiOW{yo4yoa3o| zP(U44-{#~(!tp|j)jae*`TF6T_yF?5qOe5ah`EjSWR7N1>gCG?3eCg3`B8^r(+F9} z*|jj2Q1d*AeDeHjD`X*WCDuH9mtts8~dCTB*7~{jDfNZdA z?@Yd{o>ok*GM7k|v0M6nq387IKsZ0ZNv+IA!j_A4aGb?*-tw8w?|NbT;~N3NPuooM znLH%2&EG>+|2?3}a&deA7|Iq(XGUmjju2z*Xma0Rx+|lAS88QEOFaZwB=XTDP>lOS z%uiNhDK%Y=lgk!1UD)Z|VTbHL?fmnFO(@IWa$>urs$4MsGiC`BlfCmkdknN@yVNI3 zx2KH1Q68PT%7i}G9Tua8O!08Rv~c3}cTC{dygZM(*CA<#Rl7v5t`}jm^Cy0?T(j9~ z^sW`|xPhJ{0v=O3-P&4VhXd3$m1IHB~^)~wt2r(}yC7%qUk!v`H zRxpP1d_8=0gIG8Pchw&egxUr(0AzIJN@&m)qW&UJ(EN)Od$vG!4!OfjMu#a3$rypF zRxzW2yS?H1*UFTF`8N^hj@BR3#z)M%{W`uFOc7Nj>m0dMuR*iDE)bL8) z-j$6{49$hAje!csxk)MOei*uCwECV(ln-e%^w!arRPIGiY0TzXA(zeK5zGiJrYrAl|^r{Q0t@E!wCSnp!fBVAdVnr8`S zxCjSEQ+CQz!6f=Fu3U8*P7E=IVNO)-sM7E|G)MT|+X7S3CcW zbc&^$o0l3Ls4g$-y$tkc6oL$ldI6iDsFJG3W=;>{TTJqyPl$;6*Q2?iF(ha_coeyM z@ulDGMvEKs4MGK|(haFNXmCODyajdP*dBJc1FTOhJqeM?u(eN4X4{cUtfrdxCDpHidi1u=AjU@P8X7() z@~)tyg$AuE$-6I@B^O!;rE9wIMd0RwDjhXPjFNR&bBwFQ*!PPLIu5@3x9XpYm}Q)o$+KJTK>mvCf1~Uo0On!IP|hY1Mc%EHQ&O8f={a)`;sET$7z`OUX`Kqqduc ztjFmlS=aBkBQ_g)P|ZeYS)SBQ8YD(}UYEzOW-6pGCMt&L`=i%wu!PKB9@K4Z8qTE9 zg;+N5`&_gZxDzpsE>^@EMx$#@mb)k?ggT1`&vgw&xFu3ZdEaSnkkDicY~Q;&t23B%Z<~u z0P$ezW1Z=?$V%-YLu}fQhCN$pP!rxRlU7#8{b=I!Ko&)NgK6#j#bzJ-q;T8cL|yqd zyL~w;Yr&>4@$I5IoP~0^e?4YjSf7}k-QTG5EysL%LG8O%{-5u@XU?Qd3mXhl&dTPt z)7|3jrxpnLZ6@$A9vw$7YQ(q~74ezb*+Fqi@vU#FEnwTSOzR#o)dx!DZ+INLL4Ph_ z+)c=m#n&pKx(21){bDL8I!oVu3`}zPMZw%EEJLfb=Y9XxOo21Y`HztBjysu|mU=)TxOU z1coNs))eS`Qu6IUNT3H0Uo~l;fTGVz>bO*6gJfH$6S5nRF?IN@6B>|}u`AX&qBqem`rkkjVm>ZeiS3E3rh!4?oy-fiOYNP{C{{u881GRL` z?fjI>o?}nj<1(5VeI2ma$;#Q)^4Zc>p*!nt9z>&bP3zvFXs!l(ZQ7z>WQoH3QA5NH{FMN~tn#tfY zb^B!o{!?g146G26tvgko9!9qaOOjlYkzI(w$fG1@(L$w^jf7KC!|LEyQhtZo0x^sD z%9ko#pNbmT4_+L1GzZ)eYZCIjLbKc3y6YJI8qh4o&F#XP2o)Z*BxOa|litg>vYjoS z4(8?zKd|-&1-3`vcJxI1^UZ zrRw88pBLmzaA8hYVV)i|>P<>^;~-c3pDHQ8*Y{^;p#PbFaN>!fOr?4FfMlbd1+^iz z0d-JOGZg=gWn!&u+|!HjCY@YMA#%0WZjq&!b_vpuSkEe{Ik17iP__*c6>tIdj{AWP zmQ&1O#d(TKQnX4U9`s1teB2I1a`G?OF#dczaCpI! zU(zH=l;*_nc!D}eR+d!`ir)xVrDA#DBLxdK*bcoX>Ii3dSts3-?9In?5*AP|Q<5i4 zgB`cgSf#tByropsH*`t9$Xv5)r@?W{F;6n;?Wk zmmc>N3Z6ZC!m%G2{adcWsE?Mper=@zV%i=UjuuRlR>}J*w!#cIJ>CX7H%4z?Js9oM zX9Gkq&k$9@*hD|B#+Kxv@J1i}5Od_mphOy)60D$W%3_CBuGr#p2z7n=wVL&TYzr zZPls1xB?Zns5S}coMn4FPsZGL@v96!rb3l%ld0iI)o!gu7OhVzr%v?4^bWGNZi^QY zZd6*a!O;auwrEoNos3Ykm|c9iiDd^b2`) z^&*wJL{XX}R0S%kH;&bEV_!$P7+txA&~0*r>GZhMi2NPaI1@y}@pUWEiky%C<9fSV z-nB9;LRKohS7P(~c-K}mT#B19qM?{vc|9@0pDI16)1SVI#LdmsPixeASZ?xYDt)n_ zjo_kKgD+z}U##!X?uc%P`7({0k0R={D5@Q4wYAhn)$T}E4!bn6`ge0#jdLCbTt@MY zF45`d8$2P&at1ZQ(ui}*HkU%|?gk4=?RIvB-fsD1_xg$>SG6j8GQ9COPClv-ovvV9 zN1$hUqiS7z{fgwu`%lA%_Oe?oV`ZiKl=~TgV{Y^$+Bodox9Ws&O!+Y`s{|1uZ`efH z;2SPE!~J56lOOp)gD$2RtH{m6@+{=Sov17E$|owGG3moHF$&dXRxS>4zDCns)qO}y z6k4y;-40H`7+#wF1>i@=8%jleW;yID?r38eyN+o$D*$oB&G zTn>ZehX!>h%Q?LwC--HxKwz0xJ7s7}UpsWR)`(pWhnw_qnE?-^ZmzUK@o6M+)O%T2 zBI7L$-O1)<$4QeqrC7sKX`^1+#a9hCo2pb~!m*^)Zvk@&_$JB8QPgn6OHO1Z4X6r{ z)Me*uMwwXc$W+|6(xousJ9z$J-$|Q`VdFrJ_@?k zkYDME$S1!|djqM6Fil=A@MV0vNn@mfm9qJRjwl=Q&}7oYu2# zK6Vuvbj7i(&%(?GEwQ9Idim^}*6?kR#c=#@8pX`?u$N7>*njy;oIGn}7SMO($_t#H z+0^o$P3+eRMXxQi?yh>nO^3x43a{L?UU8eH!YtWqLeW8!EU zxw*OR|KG;!czAeF=i+R-^-<$uU`9s9!_&?Vgt}Hk{&kfJ=8s#3OX?#q`kndN@kw9FPH>(^Td4n zh^D$tUoYgJrk`ngaE^k2mD>LQ%g4i30rGQVp%2%k_G(SYG#?h;zw={w@!Vp0vG0;jl2Tj>ez^^+O(e;}09tA^{4w zQjauS_9PuU#-B?dao{K1tdd-|b-Xj<%dKrsw4VARv6upIXEfa(C3WixxK_wd*4Yjy zMl!-x1ggo%TEa&vs{)gZ@sfq}7lSL9{PAjlad+_et-IGA7Z2pMtC;MB;0KSkcGLnv zzmp@ye?uk#i2s`s5jcJo9nTGTTwmHxN4Z}9em_?r~{N zybRWDtf*>Mw^C%lP@&*xfSY++!1s@koH3oo9XeAvJIs;%H4)cr=B%{(m(5Qi;Ms8e z+XnX$wHqVfD$k)HjM+fn6iY@gXP3*sShAJBT?6=U6Zy5>!4zRY8=NkaEx7x$zHIhd zt85M!UJ72A?l%(Jx!$>CN^i}O&Nl}0e~4o_u|5Ig9{0W=#B|q(whmd}*4vL@@c=nl zB$gOOPqQI3CGF89yvcMHq0KqWTB)NXzDaxmCIFj2IeHKyxz@g|!d)J#KVj$9~$F%6G)cxYExMEzj_@%`j z@~gLd!YT7IcJ~HeYFp_tq8cdFLq=7CHE|Mby;L7SXy*m|w&p&2@i)9wx7(k;QtNC_ z)|;c_5dEW2S3gvfnD6$Sgq7vg?C2r|dUL^fLL)Kkpv7c75CwXSgtPHb*Pyn8eCsC} zc~Ae|df`8#uJxKQAwSj-tj>t^Sdy?l4}6|ozAR@>;v$soHu=<=e4wpV$9(>_+(d|6 zkSYUxw#<^m{iE@aRXNU1dq;nN7#n=@+_KIz9-d9A(re7U_H&Fs-p<=#A32*eO=UJ5 zz1h*8^V15yU)z_B@V5HAHLYnrd+P)=q}Hj@-z?^4!dwklUzjzE3pjaNdq_SKK?U;7 zD!#b4680W4^HNYOEw2BKj|`7_ev5S#ok{&y>cGQP6`|8jF6NnB4q`APLDA54h+Cln ziF6=+LdqB6gDAGt3?t-B(}52qO?t&VFIYQXnZ@c;ktQ#{exv$bP>kUAGFE1ApRur; zN)!IGq3EMP5MAPq0|`DycJKjzC*7FWEjkDGSu7aFQQmC$$~6NcGD1K3b|WCW#jK3R+jH z0vlZMnwXkP&Q*Un7Ci~~(qc7oG#Z@#j`^z<#q?i4aa#wdA%E=KDZ_-Me!8iH!zO&Y zFB$@u8D|YcT@T!{QotGtB4V4y+hql@r;nz__q6e61FRGzp4*Gu8dn-5qHBT3g^ zO<>TpWY zK32*4U-AdKw4$l;oblAv>7`ZOJjGaA5ix$tM>=BBTMSyY+Rgn*I;(M*_<8YxP-hQ5 ztl|VT#>!cI>B+u<7{+Vc-z>x1Ut4W8w@X}L{4FUfW=PsPRIGMrd^9!r?}saBceD(n zAnB>$->3C=T^((y&9oB#472235C)KN^_?ba)scdHQx}Mh;zeQ*+0*bFo?|+`12w*S z$B)elm^iUj>;5w| z%lqk$`%!R3g$6)unK_R2ZbkE>f?qQnnfjQ2h0%d2GpW~}HLTfgq|Nx@;$ogiyug6Y zu$1@1N{jXWUxDoI_Bg>QBNfv@abJ()kvo>7_KV&8&*P^}#~i;-b23%x1E@Ln%O*C% zQe-V}eMTDaDi!zSs%;Ee1XqKZ(nZWE99B@w)c}vj9n7f%Ygz9oho<)qQgP1NjAFD5 zMBUP(2U7pF8sh6|Ge;yX{JmdSPjB1UT`6PMPAQIUe6X3nz{k72vIcJ~ zE=B!vOd%Ml!C<6O1XAqtYK)(;uby>qco+$LI`k?H-hJ$>@7_j>0V7i>^ zJ&-{r6EV$1Ck!SgZpEkqUHaV~kFYCZ4F;!3f~@>$m05)Sq;mgwluef*qssYYfjJnK z%Mf@|nXP>~8c;^mGc7s+*~?x)*ZJfU0M`;fJ#W`+BE1`an8(k_I(lqbe9y3dmt*a7 z0nACA%_aJs3~j{(=e=HdLxGHh8^x67e)Idwl}Wpd>mL{Eu#cAr#TQ8}+x_i0ksP0g zQ+QDqq+^}$#IW`rl}a6~JY0IP2(#`$NYSn&YfXvURHuOXlsEaTaE*$1pu zL<|RIX4=1eKzhft6!St}?+thm=ttPTnNOD`9jm>E@i&iZ;9 z4Ddm-w`Z=y*;2&ZCi{VKo4s_j;}dw9v2r%8NanupNpK~ABCsb=8BZX+3%Kp=9Ia4P z`bI8RzL4L?eTb@UOkDe#BarheD~q6JzEUycHMN@Wtx-u_C35R?9df&UJ(+R&&u-M^ z^o`hP*K3|E>m=5&@KqmiX9PST?<1a?lsn=dEfT-R4>K_AN&k3bv@ls{!vdD4?8 zZ5+E)d_S}DF_t`gbb1ODfCAOGON*DB;(C^xMu{~H4)xcn8+Ue1q_>gH)t6*dw+5r& zgGyMJoZM$8jj3Jo>yf^f*@(Bi;>k<+j@v(AQ7*j~`=r{SmTw+3QK=`xik3OXJ*JMO ze+YVH?mas`=59Rb;Q3EyEGJ&rh`vhYhv`h54iHN#%K$TPr&{Yz`~xZ&(n2I{R9ix^ zteWZdt`PzBaB!a8e&&};VlecpOPu4SMirpC8dnUzw*2{tOynCC812#C=W{P_q$JY1 z&e~ike|Jz{jU>0XD{%SkIIF4{Uir>ss|U?%OJkS%R#2a=A;vj|rI2&49#H7$gyj7R zhkp$*%YWq}{{Q6S`>)<)axy>Z^2z(|42Z7|CX!c6$R7dC77AHm(S)-}A`*(W4!Uu~ zZ(PiCCY$xyM5iN025W+}NSMj`;(_Jw+`syPFqQMPu2ynE<2dN;_1! zoAe*~(gPqn_32wj1aLF+_kzCne#Em=~P?1ugZjXf5?UgxvN_;OcfWk;@v#A_y?UYMC?=Qh`h2?8duS^f-+=}?8jznKYI$jYlg0= zow-!SpB&lCI+4@~eBwvODh_t1??xRK@V}i_sNzY-^JII=ZG2Jp^qgEKl!<|V^p%w2 zn*Xj)b8j$PsdF{c9|ou;u6Uqr?Ipxw**()A9MOq46XM4`{aC3Yq-Q_GAVKt`G7b(b z>RnIB4*l}a@yK$#ikYpku5V*fLqgDv7L7|NtTam}&GWMS)ImDCgdCaSxKFhli{pZc zdv+yawsnQc=|nk9!$x)|A+lbuzwU8+F=QTLoE)-FZmUahPDi|>cR(v?9+{I4Iotc@ zwKu+dtCr~iFYx}!p(Jb<(M@@n;$&kVg zfaW`+kt>7W*<9qMtoS^CMzGu)%BL+a*|Y0E=cNC+vft7LT}gTQ!c6?g!Dc5jb(~w! znQ?*+Az9VxZh1sDrJT8q{3ftpZ-Gh{o*5LqUf`|%3FFVZp3Po zI`r*ki7!b^W9P6EJY!92mkG5rV;aq8{W-?!2l=2(JZBz{=T8XoL~)QG2fZ$NS~`4M z7UQE}W6jp-^wlJ4V{+FhX~?v>Mc#kg4uN!UKh^6__Hgp5e0AYtLc0e8hlPuFuj2hQ zf2q8*?e&mjPy#sPJ+)g<&&etzC4-aD%_s00!P06^uAaf8%&=16zEL3KLGHhufjF`M zYu{pq_lr*e@bcj7speg55EVHG29P)ZHHCq0%L#J9a*Tdz0Y|0q2XRUCc3sy0{@nYY ze(cvSB(fuYDmU01A?d^81#~|vXa(n?mzEF+n|keg-hS0S{Oo<6$aaz@T^M_-?Ek6; z%UUV={NA6kXQ%$_R3)tTrC%flbao$JTha2?27&ySBEpM1zB}n)v(m+{nAvK2{rq|^ z-MhtIscp>T;a`H<1Ik89;&;DcAzMXzV#Ml)z#l9l%3*e5aY`=7w(;e#$Gh_@9BCHf zELZePpO~P-+jS#TCkO^XIq2-vWl~s0FNv!z=#c70M195l345gVP__<);#{lM#tm#A}#A~9tR(dXtLlBP(W{;axG`q2FJBl0VIk1 zoOFmqn8O1pLHkIxmjyKwbt?{%(v%J4ipNBD3=qJ3Ut?cly=v9;b2>Wg`Z2&3PxSPe z5{;zmo6;f}_n)`~AQBF4J!;0#Ujw3^$W{t1xI?S-^cxnX`MW`2c?>|LtFJ2yvXs#X=rX?b5((8{f`zn`Ao*#?B*R5AQm%fqiM4j=02oB!9AJ&ASCsG6^_l z+@Y`+z1u#Mh1#qRjgxO4+M@%ZT;w7qF)rN#1o+vbpS&vfDg+IAXtu-O5_(e+l_fya zg@36%Dyh@tvN|XY&e*S{W*KdxSXtsLpb*(4!w_?oWBUCP2yNkT1pbV5gpBM-v&zh^ zsy7>dn5n4cz_^+;Hmr$*NK=7+g50B5cgD`>qW>)STJWgH=kVBW+#q|Jf5~6vk zTGIy_kVpnO{~2@z2ex10oYgki&&&FQcA2WaI@c+Ye`DF5g_p=g-FFxSnmKGvH>G^l z&cX=zd&mE*8z@GIF?IS0KeE0l-wK!s6;Z_cB%-#?a@N!4nv+)(lov#&b&3Y|>w%e{ zYq!X6BJTLwyir)9zsM$(c;{kCWH&s}Z*6;H%wD0ttVe#|g`1`qGfvI`&J+R?(;wBX zUC|&D6+HBFCvL-YugK)IM~`bHrP9G|j=q8cE>}3Q&5w=Fr{bwKRkDjrxcsNIH=2Wt zO2GEY7V5fsC&9@Q+u^^XU@RKhSL9vh>!Kj&>wc>5ZJE7hx?2g?cD5Ub$duH}NOuLc z4tEtRuZNNay#dhFfidd=l2^WCl{z>+v<=sjis7-I-mur0Z|bY|v!O70Q0p9Gc}Nyj zuKtQGvrfS(#!7i8WW#DGq^#OG#>ACd{tqn3X)$8uDw-qys7veOJ|;^TM~8RXAzRZT ztRw7+kzo)c8n8A)E7*JNkvIAGD0<8bD1faT&*<=lj6$yAWX|0v&T*7gnb`&4Su)g6 z&NXb?C4C7nchm9YLfoOXD?i}DiSzsfZ^s?{JAoLPrIQG6H7FAdBpd^TaN6IXnN?xI zpEtn`!fq}CB0#Mq<(*9S*upHeHoLaJ0G2(1r1;=D^2z9>Ie;H_&|c3%hBM}m)hUSB za9jVA?|dXe(*EoX=v@u&*{De^K;x(rA&tv(5L9Fhy-68leaxsI0w#bZ$1)Cl+AiJO zeH-$=h{|?oEh6!;r{@xO*R5cIlk@W3BWn6c<9`)a5@~Yl&;)^#sjy) z)z#RfjkPGAmd9Bqw?Q2|P=wGg2|Ws42=l{vH^QxD?0^psb#Atrq}6w!?_NO5Dx6X8 z0O%%|DdKYZ9b7zuif6bYIA^?(*a4gzHvi0?s@y|DblJT7#H&2fOb-_Xy?ylDXqUpI zB(vc@@OWY*2Ol@nC45o6ZmD4VO5J-~>fUZs)4zQ&3QKgJR; zh-Pz?LlP`z;Ir2=!&OTRm$+rH|&mu}+5O>MSzsGYcwLnW%s+t6GO1E)~ z#G0~}Vs<++akBXTC4Zs8BuuSykfQNj((LQC6FWZ5rEXYyr!>JlSu>r(_tl>E;vQ9q z_}E(SfQ!k&AkvWDh(JWBulVlc4O98(Xicy4M1S<)5&^?2SI$j4aHhbM466~p*rFIn zINvG+%^8Or&JdxxiNSbFZfc%bjxqqCm-^z5kObI!Nm#Z_pxN4TUlF$@qiMbYz%M#})QTMnyj z=s}TC7yp^}+uQCxJ?*R<06H6aZY>@HmWIe%Z`UB&8K6Q(6-z7K$#J*Rq#cx!!Ew`A zeSXsBvCx5Mz(*^{;9g1!-&zmFGsI7Acq1<2jwM?Jj;(HoW1i*1!l8SoQgsvv#?g`M ziMjUS;zi?C#784C!rtiQ>LEeLYHy@v9rzm2<(t~S>QAWuuSta_A#H*EG8Q@MksHgY zd8mBh4!1P+S}TmL!%BOF6e8)kQ&z#q8166yH!&PSnt9D|uN{@Uis@uRUFY zbL)4+lF4^IppJZP$m${#{waLiba)n0nN{e!2ksw5qqW{6B_L|Rg$=jt>GOAba%sm- zQBzH3K3yX;*iEoZj@ysNKI^x6!$0~Up6(9kN>rUCX0GEqn%bTGvc5n4y3`!KCI6__ z)$gn{MSMZ8!Z_MOBndPE=v>RArhdgHD}tra6i=~t9wKRp;K|#XE0@R4^835qznNDm znLD1&b?<^dwcB2qE<$sT$si#^X=G~E+Qz!YKdk~%^*Y=F4zy^U^KgLT0;L+xO~ zpgUB~8#0qsa3RV>s&qGlt<~1|lXqi-{`+c^oPx^@I?hLzyC%j$_L$w>ZHh4kMywoPu${ zLOARo!tg@ZfX<~|{)t6J;u|(ijOAI1-CFx&NTa?~J?qGOVq*L-mW{p}^|+rHbuo1Y z&2&aS7}lw=)Y`{JM67y!Cy2Lg9&jNTZ#AvK5B^01O`R4GWPs==TXO0@bxfdPN9Yq% z>Zi0fy*vn}FG4(0QAE8SaUBoE+|o z`dH_=sFi6c2gqn_! zI3`qcVmuTXzs+R|cuC75zJ!I>7PonofAV!hB(*D*hf2sm=5}7cow4OH2HQ`k0hXNJ z$m}SY8Rgm?ibVFInL^&JV=!m4f5Z=mSTFdISgG#O(h`jCHe})u9Bz#^%6&AD$o%*d zH~`qh2-)-q3RmDF&kPDJ|;Cv!dC{mIqlR& zuXv|--jX^8oH5|#-0AcU&{-FEeHHLa5gbvW8dKi&;u{%RN2Hr8D;(<` zx-|)&#W_WIXRQ-^4TdX+fcJ;HQC4!iyNi53?pf?E;tPSv;M0<452_b zweC!MO$x0PHul{kQT|Az%OEWs#HYlBri3iZ-T=B;W-%_=v3O)Za(r!#Do)HsFkX+n zWq5x#trum&Ao3The;|@0AOINO{@G5scXwr8{|8aQVK#H*Pj*2@kHp9jo22<*ozhlH zbz2W+B%Sp?zk33F9yUc5wY>TztIYj>d{k96F4h~r*4qZLNrqf_v}GW48)c_25sQkS zWOEhyUtN^4r} z53 zb(pnrE=Mgs+umr}<2(?NwP1R`c65)HqRhBgI+;Aec7dJh=d6j)$?WEK6}4D$+TCAg z4@kZ|jaTQq5Qf;(Gz?v6LlDba;_Kv14Y>B8*FrafCUW&CXmdyVI7)@I3vEd2IH`6l zUhEi~H`_jXC@cwJ%n!9Y1tqO>_D*x~6&Tbt6sU9WZcTqwCUF~8vq#M81MZfTMRokiD7C~4Yq&~E zCMTR-u=>WXn3EEICofUC&cD9FNULqqcu^ziQ@sf$-&SqnK&M>S%RcJSW!)$rTM$l{ z!q%c%NDyN-DN}!-3WJfT-|!B8r3@MCsD>+rUN_t-;o(r`I=qkG47l*sBSO%uvlm5a zbM1Klr)0*B+@4v5-UYSt3U{E`Dt`~kgC+eDnukS(pNk7anYKjXM!fhFqH5qgNd^Ai z?d6Ln-lO2&7!nN_xC?<>WVWPt3#HH57Hx`Xf@G}I6R{SUB%P>o7f%`4Y0||_hk8bj1GnGFRW7aUOA5q8{L`Ai`l+@*xAAufbZqdYm^YA3}qK-HFqRC%;oOJkkBQI;>T!(&(v69niWz+M6l0? zH`^QR!Nn_-kKgQkS z?0HO6P!&;O;IfE!&9IWE4j=My?9+{cWPQrH9vLM37OZp&|KKnh{)x_f`r4p4br@bl-|y5tPcLRg`{D=T<^v>tpTz0V%eX2(|b z5{)>DyayDKQHyJw3h^&5ixOA28Vtx~eYa0^(Fa8y1=cV!^V#aI*0Y5I@Je;2#gk9` zbbUN(>h1oP9Q);RGrw1gPTM1)IYHncJ=8Bz zM;2b=lYctjrAImtGp9--W!G;d3|7M4jvkRoCdw6Yv)cV#-j!<*C;sUN9i47;7n(== zehNU-ut5#di9s!gPg!Y5k{i*ifP$+1p&HA?TwEfec}%Qu4(4375##4cl3~&sub>;H zN~diEMO_o?;$sKkJ-))!2}4oW(W}7z>ckfZ%oUSwI}}aNuvNAS`Rm#-6&|;Kaf%3K zEx8DzsyGhe5A~+1B}Y-$zGQM##X7kM3^sDf#b#qbB#nywNDSTj3(X5lRwZ~#BOCsf z5^V`4vywm7-1@c*Y_fQHjSHU|nr6M6Voedzp~k4pHZh80c5iNsQh*YY^gE`TLzUT2 zHEPe*qV#|%bL9u-gUI&mO$6R5|9xdt$cUMrbOf7~L}{~JbL8iKkgJpp14pkmTj*uv zwc}!>7rBdBMiaCRxIlaNq5j@)mT^od3YSG`3$O7XO~ek{gh{4|t$gkUZuv|QHj3uwl0Uk=u;JvSfm&#}COUY)TJbV>gVw;n7!S8{r>(?py;CT9H)(+x-+j zWV{OHHa>P}Pk@gFo#yi%Y=Qt=B?Du_<@_0>UVnE=C4bP+l%KsD-Q4wd5y!@qEVs%* z%23aGFBz3IAggdD^$YF+Y)dG7Qm@Hr1kYmChvs-^_2n`_>u?Gr3P7)Bolz$jE`-S^ zSSjW2B(5)I)XNA!ftlgD{z7_-rwYyxxzjZeolXVX5zz!lqN|?*jQtqR!`F83?aK5& z{9i2a5U+*x@L3ef_c?ux%S4!?DzIOv9@Z=_<{mSU0*Gc@yDmnI2S*^ z=fXKL4%&g)nX_3@`oZmPJ9xac>oop~q$`u&zZwlc??CbMEJn6*m{k76%ZXm954clB z-bTj%{oaiBGW>}co}&?F)G7KBt(y4qVv%Ee1boovRj(23Q1JXci^A|0 z@C$x?HyT2*aQ2QjV8_|FDaS};zD=Ys*Jk)NwzYNYf(4YD)`{;{d-r+2b=Z=K;@L2u zc0hWeJQb%wshR4THe;_~y^g4)wmjxo4ZqMQjRRZ@des#D?)@duGg!jUtL`N+7qv3{ zN%@m)@rKneT}&w+77OSL@!i{9`wv!RZ%&sdS7?3spG67EQYxDl(T*(+Vwt;?A({x# zS4`32ElOEP=v(gYl}8bwqM60^p*}Ss#*T$ye)74M`RQo1$>gHyo=Jx-{m*1?W&I59|B_(3w(Bj-_~xKU{9hfE z{~vb$-;P?F8dLX6=e1@*#$z$*d%t78-!#(2o-Xx2Adc(<8O?v`&_&J;_f!aIq(5E* zpN}ArI|2bSu6Y>xrecE)*PEI97QK2^eY2h*zX|acv`kV=X5sL|~S@+|wb3&(e3Q~C_D0aSF zBY%741Ji{+*W3FJQdooig!iK6o;q&V<`%yp zsBEjlxExoaGkx6Z#*9f~NS+zg>Lodecb?d&Is&n4%!$! z)#dkPdgY}p6L6eh&d~hoEHrb*R%&oecBGPe7n6;0`Q0;7o+rnjp(uvv3}=W9Pz{u( z?NMGU!)-uO_1A5N=I_zEX{um=z`OOMy*0Bs=ggh0ZqXucWZh zm)lNVh_A~_AZh#tUEyhMl}rY8XPp2_2)28^$XJZh4@iI-i9|pW2XBtDl4?`rCG|H? zV>`wrY*x9FXz{{`Y`F+(xy|G9Pk)X>$kd}+@FwNgx|(=}y!RyxJ^MxX_^6ae$IGUS{9DUKK%ju9`@8#!?tCD!jk`lwPMx)Nv{ztOU zR{@b(6#N_ej)>+-^5;Xvvg4hHfvC_cJl65dN#_2kAHX5~Q`c)N((5E?gEb?e1vQBX zod`4{qSae7LA(8F)6+PzhvwrKw>>eRm$V$bOyof&loEYqE%ocO5kvNbg)=$MS4r}o zZ1wdv@6tRE^VIs@WZM%Dj(mw2!VA|D(uQb}N33Lt39WEO)Y{!Ua;YmD8Ky zQiN@7{i)vN`IV2r1guu-Sa3Q#+*+SYr|s;}!FD;Fh~RW5IY5g)y|w@O(8P)Lo8FW0 zXS^1pTRp=7B})Y*gjS7#yH!mu<|4X=h7wV+S-U;LX zAzc3dhwIb-p;+S+{cdRZWZ3h6f4j5)2eBmMe0#%_$kiH}2ZB7TQbgx~iR0G!eU}m_ zh`i@Krlb2R233%u@6jsZ&20CeX5h(301p6z_QRUjN3=w!yt%TEJsLUl=l!X79BZ-r2bG_o zLl!*^X>NSvH!E$&_m{V5Mtu(hPQ-Zp9xTMb&DtCbFk32Y=f4qq1pJ#;#TNf$H=suL z-Z%_%ggQ*dtZ*6s<(tT@CO|vsKHUd>GPkwpFl4*S=@{t>%}z=kI69JA8Rds~tuo*q zM{UZVNNW-4JDGuVzR=O9vWN!T{F-SHR2{x-TuyU7Uq8hc?~YM#vj6KiN8zLE9pF9o z>!8y^>99?r&Ae`}W*b{u^hd?FC;SK4-YYKP92u_5Mk3!8X^!in`D&%D!qR;l0~u)C z`^;_>C6u@%8hGL-6S3r#v8JDXN;}`aK+i@}bxA1E<0ZiAEB8g5JUSz&+~Qi8r!B1O zq{FuNn^${%%}k;XYuM@a_^a0E_I8#rcLK`6=G!rt-PPulp&kq2P}4c*0f=dctn1h7 z8Iqa{)<;4ki`z5^SoVK>!3QxoK5wV%|2VP>2Y)V1D`yvertwI_);{^n*XA=^$W}J`h2@Eim?7{s@Wf)eIh;n9^?8wPg_Z z{DvXRvmQE#WQ!YARRCt1I6DAtU<%kT%t+*@sUxSX&Hzb7W_x6_4u zz@ox|c92*PMTk64SC3K>`s{3CY+MO~;~T68*Qf02{|L33W`?5g^MBg6Vjz@}G4+q4 z-H?xPLA}(XoDm=HAB6aunCKCjyC1Q%3hg24B>cai>fEiJJ?Es)U`BPiXv_5&#@Xbc z2VBE2^j`y{PVxO;UR%oJNxFrh&u?#g7>S%&uEi!W3!nc0&-^UZ=Vjr^o3ZYJ2#h4a zL?W1nu>ftyHk{yn5C1B9SdEy%!gJWIXS!(;E5&>M=1*_e`bv=5k{VBNXOKz{vlSzy%cEC0a56ld&E9`Rk%21+Aj5NkE(mEW77?x ze#hjZM=?N($=RgiaI;CndXu91CzGWQr_Bt;09fwM4T%9MQ>9q>2=6I}XoVXo@XpPr z@vx37%+kc0?|`W%E$9RIOhTVsCQLr)G7m+caw+^5vH++>PI~B{0J$>fr!XRu_``|V=p=&P ze72tG{(SkIzMQ!uVTD9k8?Tde?ihwXq!&q2OHD2#N&mCJpn}`VLD4)oJP^HD4?#fq z8Zl#P0nBPWRv*yLqZ)KF8{U~|2$^XJoB4Raow)b&H3kvYbSJs8wm!2IE$k!xnTXsk z_wli%IaGN&JTbYt#M-6?eyuA~(;Vh~!;fqkijtD3J=mMwg|QA}>xqzFPkw&NQva93JpThe(*?wE&`$okwC4Px?PZ zpuzvnI(tSU*fA6w18r?>;n4H)@^Y16rY*@mttZCE;cm;K^Z$5hi2aoEqgB?O zp_R~qQd{rz#KQ%Fw(9EVY>7P{e3P>cs;nvKQzdDrM|p_TolM}9GJxI)2qMkY5L7iP zR@ed3Y2Gnx6fCV5I#KBG7b#S!dBY8ae&x5N1VqTDII z^4{2HE;=%B<@?&jt()kM zwZC7%b?l?xpal^i|;g)W@n3B(j@^#6| zRS3T6GERD{<-i)R*IV!3O%93P5)}Uc%Cd1!_y4UKW4i{lWKo5Sj^NrXg@E6ZDM1hE zFCzoF;7&Gka5?$msu#^+=5(dIP~OC!A1(C+G)Ea{B^&948J(*`Xy2q5Ej2^z%=ZF5U&9)tnR4>ib`DEGsjUwa{O!L^`h5O}!$xN@ z@jD5LM5o~t2+drr_tkk6&*xrE6J(i=rsUj-WGZ#G{mP>WS0UB8)#2#w<;O}|%6|J3 z-^G+1S+*DV`TNszjT_~6RgGK9_O=Dyrj+zA-(%h){aD6*iJ3i1Al9=iyfCLEJaj7x zKfe51m7(*3pajhl`YD^9G23PD1J#$^S6|thQkI_Y70(@J7rt}`;cwnIc#fvs-6yNdjk$Rqtc3f~y#kR~X$V5Dhb zZaHYe26(JC97MI>Cb1Hyh)GIHqEVp2Tw>6Rzwqm1 zXj8eCXSLTU@sa!UGQ1?=ArrX#`XeXr_&PE0p$sAJ!>{6>ZTR}DT{m!$hTzr@bfg}W zbl7vM?zx)nO6YYl!0815O7$H=Hve>!MAPAP1=KQ}o5!-_rG;9VHy4$B1?$il8B^t2 zRJT)(9Y-w4xOR=Ww=c+ttyLH6t+5xCV!I4GkZ^NN7@}*zOg(3#nqAy!8yi(r$oknr z-{Rs@q!MdPic!A|P@?eL2+9b-j}j%Nr=00P*CAWKp2?oD?@`Ua*609{%M}Oo8d|;n zR`+c_@R^yZv*dRm#L4t!W9s6|Lh#62l_S?@?{(kTT>$l_dseq+rL%rO1!j|mLz9om zOOfTbUp~PCYqQv0j|#er)@?MkeNu#Vo*|9|#Kl)H5dpU*Bjs(&VVYFW&9?#UhjLRc zBR!ocAG>wUln+IkJKjzMVS{u61Fw7fLi2@{46(+WshO~8WPNKn;ZX+)YJlB z&$yDY@#gBUVQ#0e>anw)OMCXUaa^mL?MjNijM?|dZoc%SyW>ol`P=Smc5_HMsJUHs zzXewu>o>!eiIa^0vNeKAHDsIjTOwEKUVJBuS62F>3CU>z`ayrPdnqLin!ZJhf`PlS z{8l^2gQ+5mP9{VyKTu>SR^A8T{~6$$?j{6oR4#rU8tOSgqc6@}@tYjmjiO@UaUq?+&9^KTUc)g-7>bIxOAiSN*^A+9Ex%r|wVip#ZmP;C zy(E_q?SN9XY!nUNV?kgcF{eARwk`!2!3{KEN&n57PAfVY@x9Gx~jL z>Ne}+K2>kCp*>WpmT4p??FmaTELCRX>dn0S#R&7$t5$@sM(?;3AAAo9dE=E${aPe1 z72Cs0fgj;M!^9dtSAm0}h$e?%JH9FU@4~b@Gr3?+VbXm1zzt#rCD*?Rm-oFj{8r)YiEH$9t$cGq7Jj;;y|dA> z^}ET}2&(kr=Q1EdS4vGU6pb>?kCzw5a{I7S#cmf&Ml(7lrDZs7WVfWD`8?@au~6wl z@gCyC3i5KL8}&6K1i4$kG`cTb+fjX@j>s-0I6XOIRSB5s^NB8AHUbKbJN5;EA;&*Q z7$2VOQ?$!^e;|%EcK%tx{!P)|2i1^1`+9QAG;h{X1h*X2;%l=6Y|O#vI+p7#pHlNG zml`S4$MjX=skAeh3i`I|Y4$$7v4}0b-r~jR0CQiJy}eWhe&c#!G1}_>dy@J+x5u+# z0>g2dwFE$C8N;%lo5gSA-OTvYdAt68SqaDx>hOvcwl~FY(q?-Qr=}LUq{R+j34nf# zkGU@_`STkEthM_+vI;+`lC(!yAC&8EJp=~cm`M#RL4sYFfnx6VKPPX?T-Ca?FGwP>v5iZ+zCa}>XCXtWVOtyRJPU}%Q_Xf zRlFJ-_xwHmVbIP1u5iaS*`>4o-RVy(&nG9}e$7l}(`8cfsRt&c>j#wOyLQ9qYdQwU zh=6tl7-MY>uW4A1!-Jt#!E#`+w-^L8t=?=A4MJ#SZF&KA?n^Ug>vpsQo7fO`2bfEUIWolptwZ z5OQqV9+_rIz5BOq73A^{zrVWFiO(FWdEEiIJ!%tVU_VT%^r!Z>v>EZoY19=qw`;}e-7y;UZ2KbQ4qft$bp}}#k~jLcEX{H}dIW|Y zX>(+<(GsqdI#Q)jhD$N^WSkPVj(xrco!O|)Ow30o{7CO_ znlE{AadH1yCJ4px?2K{Qg}5Vm?BKKbWYDVsDvjV0J`+jN#rdW1iG96S66cw}*^7#i zW>q!A_l^0Ny?`94Eekon3k|E$+GyPkb(&d!@?6+ zrheqHrR?~PjG;%xJT?ow$!f2MPKaR&KhY%rR4=5{0l6~ z{sk7l4V!K<^}6s(aHCPNLRybp**1)MJDnzy+DHL&jtdtm_%vg_-p_e#p6WeLO-3> z8^H?X(Y+Z`#ysg1Y&(bBfw_Lies4J68`4xio+70c8ojIl)fK-dZ~ZLARI)mQDGY#5 zITDap&|zWqGaqiWXPI?$4*=T!qXAZb6s9Ddp)2FkxuRr+oDU0|407uuXo2-e8&EgS z4{|u_y==vz+eoJxkUp_s(a$q=*y+9_s=*{OnjjP0DQS1kDCx$?&5@83dV+vi<9(|z z*t{z+DH`*$lvm<+tq!rt?uzVepn1rsHR847GDyeu)yPqxlYo)wcZI_RijtBpd>i-#)*0BneZQU&i`(feGvf;=)6c$WeX8iY+V-P| zEsm|1zAQEhb$JxnnoPv=OCVmbQE@$yt=4h(_IJHqhpcD}y3)M92wSZtELK}$?x&dK zicWJhn@#K*y}HRlBg!ZC5*t!A^GcgwiPn6B@R$+Q=vOOLaDmvFuxjm%DD{n+0uSz| z51Xj9LUXd*et^iyvT1WoXcejEv09)SYxHMmnJTm)#7|bRiBvn&XPA)t#BqQIc3@Nt zn+RnLFJ}AcjjwjkUZTb54U6P@RZI#jB~57_+^X2WD%Wc(GFEr5YXSA4BGsro^Uik{ zay%YYib(V0jzj&FHE28feocx+M>Ehyaeck!BVJEj)d*q@{C^ic zA^-Qr|Fwr|1hdH>kv8Ql6?DRIl$x5Frk#&$48(858!=uX6_k|)NwGZl&EDWJ*PeeXg}Hq#q*HTaIag%?!D$ByWyvaE{3ULB&!B>I?dSZ6Mj4%x8}V z1+snKdA`eAhJ*0w>BT&%Sn%-0_EYxnlTzOnoZK?nLM9GL0|WB&^YaMv`>vB~GH)r6 ztwe5X*BZM>6$U0Ihs7{)^WA{zGUzIwoh^L$;Je<~fwfs{R&|}g-2=BWSxUBD8#!|J z3es|6p7;DhnhpQeokZyFOnF^hxz*6{jty|-X&6omy`Rmv65rke)2O#FpL3gm@OAr| z6%u#0y!n&+d1A9m+0@kU{+bP|m8pMjG>C4gxOcN3f^)X`D4uU~SgTF{Z4H-RzNfxl zPUt^cSh%C^TYO6qBM0yhYE+0;-954$Oayy78|7_((76j^#>Xm^7=&{Q6Ur*(<2N)k zNZ&rKrrF>%t1AY7=EsGnWHCA8)o?eyk7+S!BX-G%K(d3lbCTiqLu0h0QJEYO`1*(k-& z~-<|xH`gqsIYhV?&?J6y#*_)AC;$coR&X-%C{$;}MwU-k}K~r$A2{x+dt}^$=i#!v(0- zCAPM|sE)}@k8j0-M}|m~_u>1T!WPb9w06TT!Y!g^4Q2TJzdd4)q|6#NKPC;qJzOUG zBvu-@pP4#ZC9nPr{V;+iHI%sv2|%T$CuI}!E1_T!&Vfp+e;r_}6m4OyWK$f>`AAat zcOmn-f|Xw27b5OUOj`LGdX?}LLm&V_lsldJbusc_0$q^4qH({_*xhRMkr*BV`&xLo zSLY@m+&4~ulbdbkviTK*htc`AK;)kQQe1v%=Lv9iP<+ymi_xxt$KiOK5v$$sg-6ka z_?UcH?a@Rqe@J-l!d|V15!>YBo8x(EQqB^_&1Dm%A{UoX8i)K=T%3&92>w&1&&xVIfPPwg-Utr3_qFlh$fW?&EG zt`>D^;Fp?T;Iy+J!baU*y{OA>xOT7hb}6US&ITX{*ia)r*~Ew*Td3-jb*4Y_kvDzc zzaXNzvGq+8l*^jen|hV(d2sda5>3^}*?7hTUFNut-M=HRq^=O2670xZEuySw>DEIf zBJy4&1Lu80OY5(YkYxM-8yf_g_GX@QxQGWuf9(a~qd~;?P1|A)(Y9t;F}JPwQpk3d z_!P0T$-~XEGQ@WQim!1p--=wN#clVXxW+agME~6K&VF=0MEBMlzToxY2ggQQ20J*| zT{M2R&{E69`EjxJs2e!8Rs77;7WBkD=dV}7{7E`V;KiGgltB#WOn4+fq218;PW0hc z*=_B%@E~G!p3vO#eZTL-Gk~&5;_2WuRzwD%>4N~|U+<0mhU|jJ>;%%7xo=#yr|-P@ zMIIb2e=5~Jbf)!x%fL<;o;vLQwND!Xf*+)o6_T*9SL=7a^h7AGY6hj#yYz8OaFrX6 z(rLgFc$xGcl^>tFo)u=Np5)m;m1(%HmmHq*Ptx9DB6&iN2xzhftr zB}!g>H_MCRbFlji zU>h6hH>Dbi*Y9T|15Eq`my56JuvnpJpgy*REtNhd{*ME*D+8hXi3R37!Sfk;0?9qw z{>m*%zU~b=YghF-ZNY^bzY`5+pt%sJZM5Co4CQ+sL=m60vyR(?<}`c?6(Pi-cm1MC zv#2{Oh~l22%+nTsFift(aY$?N0cxIjKBx8WU0EOZvr)j&mj2lens2)ybfl+dV|#TH z<^yXav~Rf+exC+Vok^-RQ^Z1bIVHa39&$7JvZD3fm#ED1(Na?_d;s6lMBInP=3-_& z3tER@N+hf!3d7Ade|k3O7zoMLT_-_9Iz*F zo5K<>58di7Mo{YSBWq?G!T2B_A07||FJ|4NXG;+lb7~caZ}MlHIw21HXPtst`#zpU zLBs{FEt7wj91&(#=m-NDmtUUM0(w6mHGU=m7heX+3m+_h-tP=(KQKy5SD( z1Do=@gA9jb(VcaK@NG{q=H^bz;OQ#Br+ew=&RU*jTc3mt+56wi$)L1QkVj>c(5=joffF*)RL@`fF-sD(}U>ICq5!Spye|OZ5{4)VqjIp@|S-HIv zGPv$EXg=+5TI7C0Gq`&&Eh*F@7;;C_k+WBo^!Fd_cVB?wGV}j zATzHL>DIPx{h5xr-4X?s_r>q3_x(;s+zhDOx7oK(=6R>n^k+*=T356bB`Jw6c3s;do_t z0`*oy9COf^`#Ks1`275k|q?-_;cvMW>DtG$o{#oG*HIzP90^WH8#sUQ; z=}L^%rPm@QkTaZJa5wtHy=XYQy}2L8wC3AFBuUTA7uRV#Z;uvgWL!_gh@UeQPkRw_ zDTfsNcL-mwCQ79d!I!(YJ5FRoxUY*=e(=o^sSx46h988gcN9`M8i7r+&as2ZLS>6^ zYCv^Efp(&7Ju@pT(tGhIr=6m$-vKB&%Mh4S4Se7`OvkI}M3Os$)|;f|WMErPaxWs~ zukGKJ3ROFRxD!fmx|guXVhu9ok_S=m6FsG)li!AHcjt_6Fi$A|?h2HC!XqQfx_GGE zVqQP-{MM<);Akh;tVYoYA|zW*7||C9jHj+rl<)S`_@4HyrzyJCALI2P3`HgzV=*%P zLoq(XQxb999PT6Pn=dCuX%5o>kzhp%%DTGaPFkZh8k2BCJ9$IF20AAg+eHIRq)u?{ ztjN0{Dro^Co~B75lORC!E##sQlT35W4!YoxFdr2$%yV;IR(0wqo9$>2>LX9ApM_h>?^r?1+tWN;cn^@>6qbPf}ONvKh}mLb{`kd+&bXm^fc$B*sRn$Q!pQOk|g5~4vuWWGz%$nW{-mAWw6?lhg zJaxnpUUVJkINI09?Hy8hf-(N#SL?MdyPfMUF754hy}kC91f2GjD8*6o%pnzf<%;gdrzX2NsWxynwAR()a`TZzgnFW{D6p}m<(T6&HR=pyLVcR#=ndO-CpS$k35X}NWfHy2-`vNgaT}$Cjajlszi%VuB!0EaJ%z&r#BbCffDdRDB@&d=+BmQd z?B9>ISu6}Pf9Ly!@UPoFS0Z4)d)f|j&6?u{#m{dc z_DOz(g|8hn%leSDDT0k8q}Kywp{rSCqQt;hEb649=ey{nM*3X4jPl`?{s^7Q^F9PdA?~0v-L)f zZ@wq4^cI^sejvFvn#Flk;zP5Cx@K<&(>sjn)&b8WuFn!Ua8@gQS{(LlMQLbgkZtn~ zf?qzO8Mhl!X4lw}V*N9|tBK#(|S>tLdn?1PL5L zltxXOH3ut{ZputD`fe|uT*p|5h0We7wSqan$vWav)@woVT-RC#V0=3UY_0bXmK#c~ z^bAHQS+4aP-o0(a#NuMFCOlU|3z=ft^4?w?^WllI>IeKFB(X|Lk64Y$aG2>A<2#Dr zNaQ@=nu6$My6n-W@}7QuSo^Ix%WqG9oN-E>=kvsJeE;ZPe^VP=(b{;-^rgn{g;QBt z2p9!rw%n27js-$-d(4vv-_+$ht~aTFzM$A$)rt0mY9E0p1MH549&W~}93Rf;iH9bJ zd^&G9eA`ioB0A8Rv_FWH5oWZWv7XBpok2a7dr$F|d-ZSMBcyv!SA^YBQE^&vSI`Xi zsafXDr4Kg&4WyNI=8_|RV%*%}4*h|&(O%hlk=Ev#=-k|5{Ucvri5E=!{>U%7SvOz| z`B{Q7FNDn??i5DEB77dC9X@6e58PdSRTxL{RRCSF4O&QA2Gxbp3fDauSnb8|Bn^Ab&bdI=d+@^T?cl}M6CYG>aDHwlX!6AJX zQs#~v{@6GZxw_yNJ^Nivpm&VWC)?OQgPq#W$9zQef-8J_2{Rm*h8tHksJhX9`+7NN zTsPHbUceE&1P7w)8iR{~CD>;bGI^%UhZ$!hcN(d45-iZy#YbS`jp9my*tJr7Hou0j zs38MTDi<>jZ|XFO@*)rVj+w41fy0M6b+=Yp56z~*w-5UU0>*&wTgAA?W)%Hmf%Xbl zk@$};GKla|_qbiv(nY)BRdw-f(8&HnMbU?Px-tS*zA`pfRtVXSvTdkfkR{C@bBqaC zL)u~s~vH(?%&_j%=!IQ^*be);(jT2b+=2-yo)b{w8aIa~L#e54qN343X1Ra?0?^aNwXr?d)RQn z(Rv|MZ?hs6oHtrlrlaw?y}o@D-!M`+Lm+YMxwL}U2H2o(7k&8Q2~8;J?hVM@4S!k3r0ZvNY7k|cZU8=O0~wL!ap%y9 zQeWoKQ_%gW2ub{)=FRbe_&e_>ndXHjl84hrh3X^`QcC8zpj*+pzIt8Cjp|Nb4secq z%UFL@F;IQyDIO=IXSigIkGmLE-EvHmZ5_2$+O(!iKR#MCZ4Skbvw0Wp@{*N&ndpFM zw0EM${Klp8vA^X}U4i&#a1z_F)Nc=DXAPH*F0Q-}w?Add3;Rfjy)S?79x#3>?@}?~ zvEdWyNZSu&JE0Ugggok1+s&wrSmbQZ=X02?J+HZiqi)1<_{vPp~oYCaUtQJ#lf^n@SviO}Q~ zQVnC`Pu_}hjPEwM4&7PNbx6MVm2Xpuz59#if3%G*2FVe8w_{oK-)S`nsNmwIl4*%u zmp_!nx(To(J{5Fb}VK&o$Key!7rHy6J9sDK4 z+@y%;V--)=auZ6U>zV2DuwnltFYvw*ui7fb>KEIMDfW|qe(QGT zx&pVw>s%Jb_JXS!6ql^|M!+Dt{NFXGl*fJiR|Ea;6&Yo{0ViyIV?8zKg-2!g99V)u zJ07QVm%kJFz^~~*a_s}9kBR4dcoFxN#CvHIv1zX^2NXNcDYZ8K6b^Bi{3ZxkXozeL z=snWL@qiSc-Rv-)LSMDso7FZFt0WyNT&`$_(2I`t0V&yf>&#!*(^e4Uc*jH&t)xX# zun1(9Vtn5cr*k6ftg(q;d~1}}Mlt7J8W~P<6X)Pp{N~y_JzBff02&qD_@O+1b?}$k zgSDIpo%b2n)2+!%*P?mYmLP`_MX_TBb6_c$XF>yFpj)`#SJ!PFZwI-_@oGLjrhdga zFV=dVKF*32xMDB8AF3PE!rb;+y|h-jU#BQiKZ%h}+x+)_KjjR|>nh8V-dyPP>VRzc z8Q2v4Z25)J&8Fq>3ZtL;66ZV_KT&1umVU^Ds|--(jCuI1m}^)Y zk$4(Y8*($2H6?V?VBr@~f+E}IMfG*M*Pg{E&u_h5M)&`=`$T5Y)Ep(Q$qI>RGWHPsMOQ#8uU*s=F%K-E-><`Gh zd-%umCCI+96#kGf%;n!8FQ04qs;rveW7Co~|3S}fFN$AX#7~f)qT|ocv-`f~;7PnM z79j2F!2!;|)MTpdg-;Q|y6D4)DP29q5y!nsnKjW>71Ip2_1Cr;Akr7E})b zyQJ}jix2BoqiWU=&Mq0{7F@pz#+W!%5@Zak%LE56pMIpHl5e3rVlMTsbM`cAT*w9* zkt2zLV~=4gwzWmq)p!a|bddb7IvUkSF~hThnOd)r?8=f?B>YF?tb%CP1N)ugH6whW5AzL9F_T6{ft4#u zyYAD0d{hh}2^qc^02V}v_yU3&nE6+sd&hTWhJJ1*Pr~zcwl96>Ty=(O*HWNu-B;B= zIo22P*_p8tKR;#MZ1#a2G(mm5T&T9(<$P9#oMmB!XHXl}W79XTh;!CXLMH3>4+ zT6f{r$7B6&Fh!t?uZY^btCX}f+vU-Q+I^QlU$o$zRJTuDdqZZrf;{9fG43AblI3!=w73AJ{m8aK%HA0DiNkzPwCT_aalBCsDSdIjL@NI>j0X@nx06@YKgF= zApD?BW1YHpxTY{>1;!2EpeO$Z?8-DYxnwUTShM% z05)HRXxV`JJ^gBTzq-KsRJt`^i#>LuxyRp=f+*r8daM96mtM^Pm=9Jx`(09|trihZC8cfV-SH1hfqc_1(O32Noy;2m{PU>&2qv_A z6XP91zU!N-uVMs9Jat8rNPY0Z9ujZiB4r#_(j`4ZNnQ5CA4}Pw7mE7}PCS9_y`k|XVG3y`Jvop@AaA`J z|H7e~@qmvV^HDQKOBesk$y(aDCPiPF%+7k;`@Q~4o*kJ}`=rLVZ}K*p!zUdMPFi~} zG8Vs+>AQW&$2L4wW&b|F`;5YnGbTNhDL`__`iu3JT-y-Ll1_5ZC|!5~Ppv?y-{_=q zync%Vdg>1fXC*E1XKTYP5;Oq&e&6jUjTmEfrs8KH850C`MamR7^Szb+YG@$%O{;ou z=`~rtSM;y7$5pkLHHs+VganH}Bx?Asx~ooamxTXjOKA%|O5x(+!8A2?!W|P%%yaW{ zX-pK*aVRKy@o|>Ia9Y{gGs)g}Wh}B4nOlE_6p%ji6;l+!Jec=8nOnE%4ZwRVDu>|` z{eZ|tAXIz@9-XbIC*bk8CQML`(>+d~7VT@eD`uL2i|*3$%1~cmN-DjPPsMM$wo}_t zBiwAU-1XJ*Qx{^ZebDk%UQy<*ewx@9u}DM{>Kut}jy;j88@Z#U48o)`CjIKaP`z)w z5M$ON@@FlkOrm)oxK-hj`zP1fe}m9qN}`nJoz@8(H+mr)(xT6CJep7rGvP&Qq6iEx zFD(*&pU#J?EPVS}$Y6q)5Ilr*obp-;Jp~ zZLAr3cS-#6`fqH)`c^E-uI~fpr!m)JUUP!o-~gMYeL1-&0;NBOn1F6r!eYSA^CLBn zrsq_TIMc?CxP%EoVlZR5w=EVbz?ol51WeaD+DOS;^F;a+5u*YWo-vBIM>}U_$Fj<4 zf0QK%N3YbV+^@GNpCVGCnN!Q+hO0kRbZz?nrbKs~`qL&0p9LZ3q2&UZu zZbGo%AoQRP*aEK=MWZyzUcj3-KcWPPZT!G~g|r{gG!L14{9hz%$$a@P539zgnV2wh zq$7&}7$r+uQL>XW?ME>(NJAs|;LFH}yMFb#m^g86fjfEmzR~=i$RFRHB8yFO4az0yhFD%LmNsft zZRP#1Ssb*$G_ctB%Z5Ha&1EY~uiVE8qxpWcwEb5#aBxIL|BKwxeHoDlv!zOdX-jTc z!r3mTq09-JF5P1xq+2K98(`^Xzt_eH8ZnSJm@8=%tR{08*@|_3z^t|5Z*i@xQS7ua zgPQBhU3{H?Tm||@2ochH1(S*aIE7 zJkoR>d%grCSn)m3? zel{;^PTp=GUMKJnLN*L;Tn-6{1@j3;g&6gZgbXeGuH^Nca7Z+=>k+g1PF*Um7G!-RQuMT{2(z+s0*_mZ z-b;k-F#c^3)1V44G(g_4c7ZpdFLdm>JHk>)MdDLW**W7z^q$$9cs)_qUs^@Y_yn4; zUdrQ!G%&PczQ{>qT40K2Rz;OiW#*%ahUTj^c?GQv&5VHG=AX(+xO+AA)`GiIUKHEl zyUxKl3CxNW<3)=uAyZP$Qh&}G-xMExRnw+K)VScutrgB?H7a=`-7wXRDjqu0^qhvW z@&q_EHaqAC?00q+MOC0>6apX4w$uC1SbMIDE*!>?`#N`^k`;P&h>Fw3QYhVJieQAqZY&6{7vJ>!`!{TVwqWDq(csY9 zB^}w&CQ@Ou_z_pl$RC@g4*;TzIoKJagi6cLAxd6>sY;c<(dXwF^Ai zPV;!+F+byJN!$8ogp-RXt+(BWj0#~_wbVo#SfnR-1?+@Np&v@eGKVuy@J)bH#DqlqZgT%;IV6JYLcvE#JB79G9K*CRqY&q z*PF3ad0e=#MT509bB2WYNS&L|Q-;OS)=%8_OJe=RL7t0l%l$AoIEcG)q+RBaS|=e~ha_8P~c0RUnT2^p`5J(}efkC5O+b zG7{ZDeqJ8wPzW|HDooNvg?)v>YBIr@LYq_5Q zt?OXopR2l8mNR9Bk%Cj_1aEI=T(XfP5s_rK*N(~xMR;>ne|LAaCEoa83XK$g>2gOR zc6>#$l>SrOSC1tG0Rn@ZCGnII&9^zDe6(p?k`rrnn@ z6%`{LmHI>FrgRh`nDYS*OHWr+qzlsq%A?m-2ll%oe0qji7o3sb$aIzC4+J>vjaVn4l6Z{E1F9(ci*X}b z>6|~$9FHG|E&5;EKy__LHNCaGQ00sbMZ4mG=H`kajkX|a0575icAFj}L&N6dMgiN6 zTRWZa@qT^W?(d%ZHAOybAGG~W(F`#o7{7&(iC=9W`)75p`Xp%;y% z{IU(VI(vnOw%HOCCmNF?XKo0p!>)0!AdD80pZt&gu=}vQ-# z(&Uc*;$4Oy)2F%MArgzO8E6Q8Q5#*TX!6@p;$#q)z>r%o)m%^LohBQV=*Gg#@tYpi4sO2 zDYN7dr#?a#5TVmsuU>V(y}xuFj_&UKy^&&r~r;x;nVwvjLYtK}W&gV#d z+;k$cT=);fA0hj<(*44s+6J~?{`%a2JiXmgEHoYyKswE9+4UHC!*d9v| z6txYFlp=H+(^{)qOQVVw_xs%Ex%c1u{rNrLInQ~|dCz&@KYr&s1B+}WNeu>eT}(kF zwFe6nKL9_KoZwP#y^RCVl2j;F6L*`#(e8LxgV@Gfs(koI^wtIhghXLOK`Phs#M{RFdhb76NTk>KzN`M1I(M2^?uzBr1m<42 z3pu;2(PieCSM?_rGEZ^O+?Bh>w(0{vdDrl^9U|2>@P4FQcr}ab->7oj4yS~u!yOU} z${Ek~mX3`4_2^bcv`d7w-J$pv`v+!^P1r#Y&6~}yRTw`rbMpWlsZfjU2UVB&(yN;$ z0)@m!Ro#uU%ShRiH_KX+X{IN5k$<-~PF9>og(AI@m zdoL*DcbEJFsCm3kXYN?y0ti}ORsD_`Ee2k*zf5q+(Sd1;X?a!UUD>CFyU$*Xn(yvR zsaIsUKd~q`M>!{pcI9ce{A*166~oidmUe#qU@mBE%u=ci-;%I7bMJ>2vWGu8@=>OE zV)(w9R+&M`XiQgle$BHZ33j20b(&lG(aTeAe=(lC0VXYX54kcaVf&t#($q;Ld~R2S zi%vYQ$9~hAZi7_g9E(-EX9!YE7`6@tQ5zN_LC)}+3NN46jC|#5^KK+??}83f@6gv8 zJHNXd2jazw*0X(QzGqBYtJ=@`#U#x{sXD9Mbb2^u#NawoJKOhq;9W%r8YBgKY@-ct z>Hcb){AK9E+UwPg@tuvbS~TeyohXP@BAgx73rZ%5ihBRNEsh@R7Ngs49^YOc;PY3E z>>ra4Jie}Ag06C^D3=DYtbhpvFWv{l?n2RMZ&$kHw@_;=?Zza!k|`>EF%ZFDt(gnF z1a~b{7y@Z#m;$tc5UQ^VZAhXglh)UkC!8mKEc%nJRZJ?u5);dYw`lc? zlzDtFMUBzGkPCssO|mFn`X>)g3;8A$rd50uSNU%!gD;R`$K6uYnq`e3DLg4bc?68a z{`A)GDio)~@U_P08f=cuxeF@=i@>N$%$@f*DTd>}s*Y}5+euprg`y(^W4D&Y3!Usq z4;wC#1V)Xm1Td^WMyq7QS4ZLm2og6X%ZSiHZ&++4n=?gj=HyZ|8Fs-+2ifTd=&w>RgqXg6UzM`bGzg;jou+)@z*Eqb0aua1|IoX zt=WQvN)0oB5QRvyiwdBX@XS#_*ZQXP0$yl?#tXUjNlnX~eMoju?p`|%W(Q>}$!_;X zz|`YDJl9|{nawO35zEWLVl#6}>)0(M_>s-iELtHeRHkq0>ZiWQ(8*HX%fwut0fKTrh7<5}c0a*_ZM*{3B2d5~0xF1Y zH)9e#=}^IE3ZfKkj6PaH`f`TNqD8Bl$=A>;Wm%VNr(%afvWqG!JwW%5><8$45BOZW z4@5eHiB3X(_nY5@XWwGgW)s;w=6f?)b_}na6`Ef}x@7K@OH7HNyZuK@bN61@Zi4dD zthi!{c!knSnK*?UPFlz~0+Bi@PysU0!KY-X7|M$s_br+2PA&(#3RA=449ZzkVV7$~ zzS*rmMpPn}`BT*Dzwts1`rG24*nCA@`iQ zaI+wAd2v+eA8>R(UdU|HF9Qnt;rpH3t_-Y$Hde zA()Jqa~A!~o$&PB(B3bmTnSG*8X^EFSlHEhOzDC7bF^xIyzrk{MUbEc$ALVtB(6j< zJ>-Wr0%d4>RIb4*N91b;*L#cRET6sX32M7SGnA}2#P|X1WgSLF;etEV$tgVqdM$Qb z&zN8e`g3rm(an4n$JgGls6AA)K=UUDKHcdS_?XcfASx{FD!@oXvSigako?h~K2y}Z zxy|Xm&QrEv4LoIbm_?PfJk6t??jzKvIg{|hI}1IwCj%D%yfb~L+|Z!U6sCF`$zy3= zR$dZq%K4_|u!DpBWuVE2UrO}M<{O87e>J!gUh#rOt0<(0P^X%oLoPl5Bl2#^FzVsf zu?&~(GOjFTmvqPa>%Y&e@6!OK?|16_56lFeeE5dO|NVk1x2 Date: Sat, 25 Jan 2020 12:01:27 -0800 Subject: [PATCH 045/358] second edit pass --- ...tral-access-policy-and-rule-definitions.md | 6 +++--- .../configure-machines-asr.md | 16 +++++++-------- ...er-to-change-password-before-expiration.md | 14 ++++++------- ...nt-digitally-sign-communications-always.md | 14 ++++++------- ...-this-computer-to-use-online-identities.md | 20 ++++++++----------- 5 files changed, 33 insertions(+), 37 deletions(-) diff --git a/windows/security/threat-protection/auditing/monitor-central-access-policy-and-rule-definitions.md b/windows/security/threat-protection/auditing/monitor-central-access-policy-and-rule-definitions.md index 5ec17717c0..e7693103ba 100644 --- a/windows/security/threat-protection/auditing/monitor-central-access-policy-and-rule-definitions.md +++ b/windows/security/threat-protection/auditing/monitor-central-access-policy-and-rule-definitions.md @@ -24,9 +24,9 @@ ms.date: 04/19/2017 This topic for the IT professional describes how to monitor changes to central access policy and central access rule definitions when you use advanced security auditing options to monitor dynamic access control objects. -Central access policies and rules determine access permissions for multiple files on multiple file servers. So it's important to monitor changes to them. Like user claim and device claim definitions, central access policy and rule definitions reside in Active Directory Domain Services (AD DS). You can monitor them just like any other object in Active Directory. Central access policies and rules are critical elements in a Dynamic Access Control deployment. These policies and rules are stored in AD DS, so they're less likely to be tampered with than other network objects. But it's important to monitor these objects for potential changes in security auditing and to verify that policies are being enforced. +Central access policies and rules determine access permissions for files on multiple file servers, so it's important to monitor changes to them. Like user claim and device claim definitions, central access policy and rule definitions reside in Active Directory Domain Services (AD DS). You can monitor them just like any other object in Active Directory. These policies and rules are critical elements in a Dynamic Access Control deployment. They are stored in AD DS, so they're less likely to be tampered with than other network objects. But it's important to monitor them for potential changes in security auditing and to verify that policies are being enforced. -Use the following procedures to configure settings to monitor changes to central access policy and central access rule definitions and to verify the changes. These procedures assume that you've configured and deployed Dynamic Access Control, including central access policies, claims, and other components, in your network. If you haven't yet deployed Dynamic Access Control in your network, see [Deploy a Central Access Policy (demonstration steps)](https://technet.microsoft.com/library/hh846167.aspx). +Follow these procedures to configure settings to monitor changes to central access policy and central access rule definitions and to verify the changes. These procedures assume that you've configured and deployed Dynamic Access Control, including central access policies, claims, and other components, in your network. If you haven't yet deployed Dynamic Access Control in your network, see [Deploy a Central Access Policy (demonstration steps)](https://technet.microsoft.com/library/hh846167.aspx). > [!NOTE] > Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. @@ -42,7 +42,7 @@ Use the following procedures to configure settings to monitor changes to central 7. Open the Active Directory Administrative Center. 8. Under Dynamic Access Control, right-click **Central Access Policies**, and then select **Properties**. 9. Select the **Security** tab, select **Advanced** to open the **Advanced Security Settings** dialog box, and then select the **Auditing** tab. -10. Select **Add**, add a security auditing setting for the container, and then close all security properties dialog boxes. +10. Select **Add**, add a security auditing setting for the container, and then close all the security properties dialog boxes. After you configure settings to monitor changes to central access policy and central access rule definitions, verify that the changes are being monitored. diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-machines-asr.md b/windows/security/threat-protection/microsoft-defender-atp/configure-machines-asr.md index 5f51fda91a..666528f9e7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-machines-asr.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-machines-asr.md @@ -1,6 +1,6 @@ --- title: Optimize ASR rule deployment and detections -description: Ensure your attack surface reduction (ASR) rules are optimized to identify and prevent typical malware exploits. +description: Optimize your attack surface reduction (ASR) rules to identify and prevent typical malware exploits. keywords: onboard, Intune management, MDATP, WDATP, Microsoft Defender, Windows Defender, advanced threat protection, attack surface reduction, ASR, security baseline search.product: eADQiWindows 10XVcnh search.appverid: met150 @@ -23,28 +23,28 @@ ms.topic: article * [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -> Want to experience Microsoft Defender ATP? [Sign up for a free trial](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-onboardconfigure-abovefoldlink). +> Want to experience Microsoft Defender Advanced Threat Protection (ATP)? [Sign up for a free trial](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-onboardconfigure-abovefoldlink). -[Attack surface reduction (ASR) rules](./attack-surface-reduction.md) identify and prevent typically malware exploits. These rules control when and how potentially malicious code can run. For example, you can prevent JavaScript or VBScript from launching a downloaded executable, block Win32 API calls from Office macros, and block processes that run from USB drives. +[Attack surface reduction (ASR) rules](./attack-surface-reduction.md) identify and prevent typically malware exploits. They control when and how potentially malicious code can run. For example, you can prevent JavaScript or VBScript from launching a downloaded executable, block Win32 API calls from Office macros, and block processes that run from USB drives. ![Attack surface management card](images/secconmgmt_asr_card.png)
*Attack surface management card* The *Attack surface management* card is an entry point to tools in Microsoft 365 security center that you can use to: -* Understand how ASR rules are currently deployed in your organization -* Review ASR detections and identify possible incorrect detections -* Analyze the impact of exclusions and generate the list of file paths to exclude +* Understand how ASR rules are currently deployed in your organization. +* Review ASR detections and identify possible incorrect detections. +* Analyze the impact of exclusions and generate the list of file paths to exclude. Select **Go to attack surface management** > **Monitoring & reports > Attack surface reduction rules > Add exclusions**. From there, you can navigate to other sections of Microsoft 365 security center. ![Add exclusions tab in the Attack surface reduction rules page in Microsoft 365 security center](images/secconmgmt_asr_m365exlusions.png)
-*Add exclusions tab in the Attack surface reduction rules page in Microsoft 365 security center* +***Add exclusions*** tab in the Attack surface reduction rules page in Microsoft 365 security center* > [!NOTE] > To access Microsoft 365 security center, you need a Microsoft 365 E3 or E5 license and an account that has certain roles on Azure Active Directory. [Read more about required licenses and permissions](https://docs.microsoft.com/office365/securitycompliance/microsoft-security-and-compliance#required-licenses-and-permissions) -For more information about optimizing ASR rule deployment in Microsoft 365 security center, read [Monitor and manage ASR rule deployment and detections](https://docs.microsoft.com/office365/securitycompliance/monitor-devices#monitor-and-manage-asr-rule-deployment-and-detections) +For more information about ASR rule deployment in Microsoft 365 security center, see [Monitor and manage ASR rule deployment and detections](https://docs.microsoft.com/office365/securitycompliance/monitor-devices#monitor-and-manage-asr-rule-deployment-and-detections) **Related topics** diff --git a/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md b/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md index f5599c4348..1991f617c8 100644 --- a/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md +++ b/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md @@ -1,5 +1,5 @@ --- -title: Interactive log-on Prompt user to change password before expiration (Windows 10) +title: Interactive log-on: Prompt user to change password before expiration (Windows 10) description: Best practices and security considerations for an interactive log-on prompt for users to change passwords before expiration. ms.assetid: 8fe94781-40f7-4fbe-8cfd-5e116e6833e9 ms.reviewer: @@ -26,7 +26,7 @@ This article describes the best practices, location, values, policy management, ## Reference -The **Interactive logon: Prompt user to change password before expiration** policy setting determines when users are warned that their passwords are about to expire. This advance warning gives users the time to select a strong password before their current password expires and avoid losing system access. +This policy setting determines when users are warned that their passwords are about to expire. This warning gives users time to select a strong password before their current password expires and avoid losing system access. ### Possible values @@ -35,9 +35,9 @@ The **Interactive logon: Prompt user to change password before expiration** poli ### Best practices -- Configure user passwords to expire periodically. Users need warning that their passwords are going to expire, or they might inadvertently get locked out of the system. This could lead to confusion for users who access the network locally. Or prevent make it impossible for users who access the network through dial-up or virtual private network (VPN) connections to log on. +- Configure user passwords to expire periodically. Users need warning that their passwords are going to expire, or they might get locked out of the system. - Set **Interactive logon: Prompt user to change password before expiration** to five days. When their password expiration date is five or fewer days away, users will see a dialog box each time that they log on to the domain. -- Do not set the value to zero, which results in displaying the password expiration warning every time the user logs on. +- Don't set the value to zero, which displays the password expiration warning every time the user logs on. ### Location @@ -70,7 +70,7 @@ None. ### Group Policy -This policy setting can be configured by using the Group Policy Management Console (GPMC) to be distributed through Group Policy Objects (GPOs). If this policy isn't contained in a distributed GPO, ti can be configured on the local computer through the Local Security Policy snap-in. +This policy setting can be configured by using the Group Policy Management Console (GPMC) to be distributed through Group Policy Objects (GPOs). If this policy isn't contained in a distributed GPO, it can be configured on the local computer through the Local Security Policy snap-in. ## Security considerations @@ -78,7 +78,7 @@ This section describes how an attacker might exploit a feature or its configurat ### Vulnerability -If user passwords are configured to expire periodically in your organization, users need to be warned before expiration. Otherwise, they may get locked out of the devices inadvertently. This condition could lead to confusion for users who access the network locally, or make it impossible for users to access your organization's network through dial-up or VPN connections. +If user passwords are configured to expire periodically in your organization, users need to be warned before expiration. Otherwise, they may get locked out of the devices inadvertently. ### Countermeasure @@ -86,7 +86,7 @@ Configure the **Interactive logon: Prompt user to change password before expirat ### Potential impact -Users see a dialog-box prompt to change their password each time that they log on to the domain when their password is configured to expire in 5 or fewer days. +Users see a dialog-box that prompts them to change their password each time that they log on to the domain when their password is configured to expire in 5 or fewer days. ## Related topics diff --git a/windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always.md b/windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always.md index c51746c7d7..2c0315e826 100644 --- a/windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always.md +++ b/windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always.md @@ -26,23 +26,23 @@ This article describes the best practices, location, values, policy management, The Server Message Block (SMB) protocol provides the basis for file and print sharing and many other networking operations, such as remote Windows administration. To prevent "man-in-the-middle" attacks that modify SMB packets in transit, the SMB protocol supports digital signing of SMB packets. -Implementation of digital signatures in high-security networks helps prevent the impersonation of client computers and servers, which is known as "session hijacking." But misuse of these policy settings is a common error that can cause data access failure. +Implementation of digital signatures in high-security networks helps prevent the impersonation of client computers and servers, which is known as "session hijacking." Misuse of these policy settings is a common error that can cause data access failure. -Beginning with SMBv2 clients and servers, signing can be either required or not required. If this policy setting is enabled, SMBv2 clients will digitally sign all packets. Another policy setting determines whether signing is required for SMBv3 and SMBv2 server communications: [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications-always.md). +Beginning with SMBv2 clients and servers, signing can be either *required* or *not required*. If this policy setting is enabled, SMBv2 clients will digitally sign all packets. Another policy setting determines whether signing is required for SMBv3 and SMBv2 server communications: [Microsoft network server: Digitally sign communications (always)](microsoft-network-server-digitally-sign-communications-always.md). -There is a negotiation done between the SMB client and the SMB server to decide whether signing will effectively be used. The following table shows the effective behavior for SMBv3 and SMBv2. +Negotiation occurs between the SMB client and the SMB server to decide whether signing will be used. The following table shows the effective behavior for SMBv3 and SMBv2. | | Server – required | Server – not required | |---------------------------|---------------------|------------------------| | **Client – required** | Signed | Signed | -| **Client – not required** | Signed 1 | Not Signed2 | +| **Client – not required** | Signed 1 | Not signed2 |
1 Default for domain controller SMB traffic
2 Default for all other SMB traffic -Performance of SMB signing is improved in SMBv2. For more information, see [Potential impact](#potential-impact). +Performance of SMB signing is improved in SMBv2. For more information, see [Potential impact](#potential-impact). ### Possible values @@ -76,7 +76,7 @@ This section describes features and tools that you can use to manage this policy ### Restart requirement -None. Changes to this policy become effective without a device restart when they are saved locally or distributed through Group Policy. +None. Changes to this policy become effective without a device restart when they're saved locally or distributed through Group Policy. ## Security considerations @@ -86,7 +86,7 @@ This section describes how an attacker might exploit a feature or its configurat Session hijacking uses tools that allow attackers who have access to the same network as the client device or server to interrupt, end, or steal a session in progress. Attackers can potentially intercept and modify unsigned SMB packets and then modify the traffic and forward it to make the server perform objectionable actions. Alternatively, the attacker could pose as the server or client computer after legitimate authentication and gain unauthorized access to data. -SMB is the resource-sharing protocol that's supported by many versions of the Windows operating systems. It's the basis of many modern features like Storage Spaces Direct, Storage Replica, and SMB Direct, as well as many legacy protocols and tools. SMB signatures authenticate users and the servers that host the data. If either side fails the authentication process, data transmission does not take place. +SMB is the resource-sharing protocol that's supported by many versions of the Windows operating systems. It's the basis of many modern features like Storage Spaces Direct, Storage Replica, and SMB Direct, as well as many legacy protocols and tools. SMB signatures authenticate users and the servers that host the data. If either side fails the authentication process, data transmission doesn't happen. ### Countermeasure diff --git a/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md b/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md index 008185b850..5f27780a1a 100644 --- a/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md +++ b/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md @@ -30,23 +30,19 @@ Starting with Windows Server 2008 R2 and Windows 7, the Negotiate Security Su When devices are configured to accept authentication requests by using online IDs, Negoexts.dll calls the PKU2U SSP on the computer that's used to log on. The PKU2U SSP obtains a local certificate and exchanges the policy between the peer computers. When it's validated on the peer computer, the certificate within the metadata is sent to the logon peer for validation. It associates the user's certificate to a security token, and then the logon process completes. -> [!Note] -> The ability to link online IDs can be performed by anyone who has an account that has standard user’s credentials through Credential Manager. +> [!NOTE] +> Linking online IDs can be performed by anyone who has an account that has standard user’s credentials through Credential Manager. This policy isn't configured by default on domain-joined devices. This would disallow the online identities to authenticate to domain-joined computers in Windows 7 and later. ### Possible values -- **Enabled** +- **Enabled**: This setting allows authentication to successfully complete between the two (or more) computers that have established a peer relationship through the use of online IDs. The PKU2U SSP obtains a local certificate and exchanges the policy between the peer devices. When validated on the peer computer, the certificate within the metadata is sent to the logon peer for validation. It associates the user's certificate to a security token, and then the logon process completes. - This will allow authentication to successfully complete between the two (or more) computers that have established a peer relationship through the use on online IDs. The PKU2U SSP obtains a local certificate and exchanges the policy between the peer devices. When validated on the peer computer, the certificate within the metadata is sent to the logon peer for validation. It associates the user's certificate to a security token, and then the logon process completes. + > [!NOTE] + > KU2U is disabled by default on Windows Server. Remote desktop connections from a hybrid Azure AD-joined server to an Azure AD-joined Windows 10 device or a Hybrid Azure AD-joined domain member Windows 10 device fail. To resolve this, enable PKU2U on the server. - > [!NOTE] - > KU2U is disabled by default on Windows Server. Remote desktop connections from a hybrid Azure AD-joined server to an Azure AD-joined Windows 10 device, or Hybrid Azure AD-joined domain member Windows 10 device, fail. To resolve this, enable PKU2U on the server. - -- **Disabled** - - This will prevent online IDs from being used to authenticate the user to another computer in a peer-to-peer relationship. +- **Disabled**: This setting prevents online IDs from being used to authenticate the user to another computer in a peer-to-peer relationship. - ***Not set***. Not configuring this policy prevents online IDs from being used to authenticate the user. This option is the default on domain-joined devices. @@ -77,7 +73,7 @@ This section describes how an attacker might exploit a feature or its configurat ### Vulnerability -Enabling this policy setting allows a user’s account on one computer to be associated with an online identity, such as Microsoft account. That account can then log on to a peer device (if the peer device is likewise configured) without the use of a Windows logon account (domain or local). Although this setup is beneficial for workgroups or home groups, in a domain-joined environment it might circumvent your established security policies. +Enabling this policy setting allows a user’s account on one computer to be associated with an online identity, such as Microsoft account. That account can then log on to a peer device (if the peer device is likewise configured) without the use of a Windows logon account (domain or local). This setup is beneficial for workgroups or home groups. But in a domain-joined environment, it might circumvent established security policies. ### Countermeasure @@ -85,7 +81,7 @@ Set this policy to *Disabled* or don't configure this security policy for domain ### Potential impact -If you don't set or you disable this policy, the PKU2U protocol won't be used to authenticate between peer devices, which force users to follow domain-defined access control policies. If you enable this policy, you allow your users to authenticate by using local certificates between systems that are not part of a domain that uses PKU2U. This allows users to share resources between devices. +If you don't set or you disable this policy, the PKU2U protocol won't be used to authenticate between peer devices, which force users to follow domain-defined access control policies. If you enable this policy, you allow your users to authenticate by using local certificates between systems that aren't part of a domain that uses PKU2U. This configuration allows users to share resources between devices. ## Related topics From a0fb8eaaf9cb90747750ff9668a85bda6ea3f447 Mon Sep 17 00:00:00 2001 From: jborsecnik Date: Mon, 27 Jan 2020 11:44:57 -0800 Subject: [PATCH 046/358] second edit pass --- ...loying-advanced-security-audit-policies.md | 186 +++++++++--------- 1 file changed, 93 insertions(+), 93 deletions(-) diff --git a/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md b/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md index 3107cc966d..2a4a0c3e3f 100644 --- a/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md +++ b/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md @@ -22,19 +22,19 @@ ms.date: 04/19/2017 **Applies to** - Windows 10 -This topic for the IT professional explains the options that security policy Class Schedules must consider and the tasks they must complete to deploy an effective security audit policy in a network that includes advanced security audit policies. +This article for the IT professional explains the options that security policy planner must consider and the tasks they must complete to deploy an effective security audit policy in a network that includes advanced security audit policies. Organizations invest a lot in security applications and services, such as antimalware software, firewalls, and encryption. But no matter how much security hardware or software you deploy, how tightly you control the rights of users, or how carefully you configure security permissions on your data, the job isn't complete unless you have a well-defined, timely auditing strategy to track the effectiveness of your defenses and identify attempts to circumvent them. -To be well defined and timely, an auditing strategy must provide useful tracking data for an organization's most important resources, critical behaviors, and potential risks. In a growing number of organizations, it must also provide absolute proof that IT operations comply with corporate and regulatory requirements. +To be well-defined and timely, an auditing strategy must provide useful tracking data for an organization's most important resources, critical behaviors, and potential risks. In many organizations, it must also provide proof that IT operations comply with corporate and regulatory requirements. -No organization has unlimited resources to monitor every resource and activity on a network. If you don't plan well, you will likely have gaps in your auditing strategy. However, if you try to audit every resource and activity, you may find yourself with too much monitoring data, including thousands of benign audit entries that an analyst needs to sift through to identify the narrow set of entries that warrant closer examination. This volume could cause delays or even prevent auditors from identifying suspicious activity. So, too much monitoring can leave an organization as vulnerable as not enough. +No organization has unlimited resources to monitor every resource and activity on a network. If you don't plan well, you'll likely have gaps in your auditing strategy. But if you try to audit every resource and activity, you may gather too much monitoring data, including thousands of benign audit entries that an analyst needs to sift through to identify the narrow set of entries that warrant closer examination. Such volume could delay or prevent auditors from identifying suspicious activity. So, too much monitoring can leave an organization as vulnerable as not enough. Here are some features that can help you focus your effort: -- **Advanced audit policy settings:** You can apply and manage detailed audit policy settings through Group Policy. -- **"Reason for access" auditing:**You can specify and identify the permissions that were used to generate a particular object access security event. -- **Global object access auditing:** You can define system access control lists (SACLs) for an entire computer file system or registry. +- **Advanced audit policy settings**: You can apply and manage detailed audit policy settings through Group Policy. +- **"Reason for access" auditing**: You can specify and identify the permissions that were used to generate a particular object access security event. +- **Global object access auditing**: You can define system access control lists (SACLs) for an entire computer file system or registry. To deploy these features and plan an effective security auditing strategy, you need to: @@ -46,7 +46,7 @@ To deploy these features and plan an effective security auditing strategy, you n ## About this guide -This document guides you through the steps to plan a security auditing policy that uses Windows auditing features. This policy must identify and address vital business needs, including: +This article guides you through the steps to plan a security auditing policy that uses Windows auditing features. The policy must address vital business needs, including: - Network reliability - Regulatory requirements @@ -58,7 +58,7 @@ This document guides you through the steps to plan a security auditing policy th The audit policy also must identify processes for managing audit data after it has been logged, including: - Collecting, evaluating, and reviewing audit data -- Storing and (if necessay) disposing of audit data +- Storing and (if necessary) disposing of audit data By carefully planning, designing, testing, and deploying a solution based on your organization's business requirements, you can provide the standardized functionality, security, and management control that your organization needs. @@ -68,11 +68,11 @@ Designing and deploying a Windows security audit policy involves the following t - [Identify your Windows security audit policy deployment goals](#bkmk-1) - This section helps define the business objectives that will guide your Windows security audit policy. It also helps define the resources, users, and computers that will be the focus of your security auditing. + This section helps define the business objectives that will guide your Windows security audit policy. It also helps define the resources, users, and computers that will be the focus of your auditing. - [Map the security audit policy to groups of users, computers, and resources in your organization](#bkmk-2) - This section explains how to integrate security audit policy settings with domain Group Policy settings for different groups of users, computers, and resources. In addition, if your network includes multiple versions of Windows client and server operating systems, it also explains when to use basic audit policy settings and when to use advanced security audit policy settings. + This section explains how to integrate security audit policy settings with domain Group Policy settings for different groups of users, computers, and resources. It also explains when to use basic audit policy settings and when to use advanced security audit policy settings. - [Map your security auditing goals to a security audit policy configuration](#bkmk-3) @@ -80,42 +80,42 @@ Designing and deploying a Windows security audit policy involves the following t - [Plan for security audit monitoring and management](#bkmk-4) - This section helps you plan to collect, analyze, and store Windows audit data. Depending on the number of computers and types of activity that you want to audit, Windows event logs can fill up quickly. This section also explains how auditors can access and aggregate event data from multiple servers and desktop computers. It also covers how to address storage requirements. + This section helps you plan to collect, analyze, and store Windows audit data. Depending on the number of computers and types of activity that you audit, your Windows event logs can fill up quickly. This section also explains how auditors can access and aggregate event data from multiple servers and desktop computers. It also covers how to address storage requirements. - [Deploy the security audit policy](#bkmk-5) - This section provides guidelines for effective deployment of a Windows security audit policy. Configuring and deploying Windows audit policy settings in a test lab environment can help you confirm that the settings you've selected will produce the type of audit data you need. However, only a carefully staged pilot and incremental deployments based on your domain and organizational unit (OU) structure will enable you to confirm that the audit data you generate can be monitored and that it meets your organization's audit needs. + This section provides guidelines for effective deployment of a Windows security audit policy. Deploying Windows audit policy settings in a test lab environment can help you confirm that the settings you've selected will produce the audit data you need. But only a carefully staged pilot and incremental deployments based on your domain and organizational unit (OU) structure will confirm that the audit data you generate can be monitored and that it meets your organization's needs. ## Identify your Windows security audit policy deployment goals -A security audit policy must support and be a critical and integrated aspect of an organization's overall security design and framework. +A security audit policy must support and be an integrated aspect of an organization's overall security framework. -Every organization has a unique set of data and network assets (such as customer and financial data and trade secrets), physical resources (such as desktop computers, portable computers, and servers), and users (which can include various internal groups such as finance and marketing, and external groups such as partners, customers, and anonymous users on the website). Not all of these assets, resources, and users justify the cost of an audit. Your task is to identify which assets, resources, and users provide the strongest justification for the focus of a security audit. +Every organization has a unique set of data and network assets (such as customer and financial data and trade secrets), physical resources (such as desktop computers, portable computers, and servers), and users (which can include various internal groups such as finance and marketing, and external groups such as partners, customers, and anonymous users on the website). Not all of these assets, resources, and users justify the cost of an audit. Your task is to identify which provide the strongest justification for the focus of a security audit. To create your Windows security audit plan, begin by identifying: -- The overall network environment, including the domains, OUs, and security groups. -- The resources on the network, the users of those resources, and how those resources are being used. -- Regulatory requirements. +- The overall network environment, including the domains, OUs, and security groups +- The resources on the network, the users of those resources, and how those resources are being used +- Regulatory requirements ### Network environment -An organization's domain and organizational unit (OU) structure provide a fundamental starting point for thinking about how to apply a security audit policy because it likely provides a foundation of Group Policy Objects (GPOs) and logical grouping of resources and activities that you can use to apply the audit settings that you choose. It's also likely that certain portions of your domain and OU structure already provide logical groups of users, resources, and activities that justify the time and resources needed to audit them. For information about how to integrate a security audit policy with your domain and OU structure, see [Mapping security audit policy to groups of users, computers, and resources in your organization](#bkmk-2) later in this document. +An organization's domain and organizational unit (OU) structure provide a fundamental starting point for thinking about how to apply a security audit policy. They likely provide a foundation of Group Policy Objects (GPOs) and logical grouping of resources and activities that you can use to apply the audit settings that you choose. Your domain and OU structure probably already provide logical groups of users, resources, and activities that justify the resources needed to audit them. For information about how to integrate a security audit policy with your domain and OU structure, see [Mapping security audit policy to groups of users, computers, and resources in your organization](#bkmk-2) later in this document. -In addition to your domain model, you should also find out whether your organization creates and maintains a systematic threat model. A good threat model can help you identify threats to key components in your infrastructure so that you can define and apply audit settings that enhance the organization's ability to identify and counter those threats. +In addition to your domain model, determine whether your organization maintains a systematic threat model. A good threat model can help identify threats to key components in your infrastructure. Then you can apply audit settings that enhance your ability to identify and counter those threats. > [!IMPORTANT] -> Including auditing within your organization's security plan also makes it possible to budget your resources on the areas where auditing can achieve the most positive results. +> Including auditing within your organization's security plan also makes it possible to budget resources to the areas where auditing can achieve the most positive results. -For additional details about how to complete each of these steps and prepare a detailed threat model, download the [IT Infrastructure threat modeling guide](https://go.microsoft.com/fwlink/p/?LinkId=163432). +For details about how to complete each of these steps and prepare a detailed threat model, download the [IT Infrastructure threat modeling guide](https://go.microsoft.com/fwlink/p/?LinkId=163432). ### Data and resources For data and resource auditing, you need to identify the most important types of data and resources (such as patient records, accounting data, or marketing plans) that can benefit from the closer monitoring that Windows auditing can provide. Some of these data resources might already be monitored through auditing features in products such as Microsoft SQL Server and Exchange Server. If so, you may want to consider how Windows auditing features can enhance the existing audit strategy. As with the domain and OU structure discussed previously, security auditing should focus on your most critical resources. You also must consider how much audit data you can manage. -You can record if these resources have high business impact, medium business impact, or low business impact, the cost to the organization if these data resources are accessed by unauthorized users, and the risk that this access can pose to the organization. The type of access by users (such as *read*, *modify*, or *copy*) can also pose different levels of risk to an organization. +You can record if these resources have high, medium, or low business impact; the cost to the organization if these data resources are accessed by unauthorized users; and the risks that such access can pose to the organization. The type of access by users (such as *read*, *modify*, or *copy*) can also pose different levels of risk to an organization. -Increasingly, data access and use is governed by regulations, and a breach can result in severe penalties and a loss in credibility for the organization. If regulatory compliance plays a role in how you manage your data, be sure to also document this information. +Increasingly, data access and use is governed by regulations, and a breach can result in severe penalties and a loss of credibility for the organization. If regulatory compliance plays a role in how you manage your data, be sure to also document this information. The following table provides an example of a resource analysis for an organization. @@ -127,43 +127,43 @@ The following table provides an example of a resource analysis for an organizati ### Users -Many organizations find it useful to classify the types of users they have and base permissions on this classification. This classification can help you identify which user activities should be the subject of security auditing and the amount of audit data they will generate. +Many organizations find it useful to classify the types of users they have and base permissions on this classification. This classification can help you identify which user activities should be the subject of security auditing and the amount of audit data that they'll generate. -Organizations can create distinctions based on the type of rights and permissions that users need to perform their jobs. For example, under the classification *administrators*, larger organizations might assign local administrator responsibilities for a single computer, for specific applications such as Exchange Server or SQL Server, or for an entire domain. Under *users*, permissions and Group Policy settings can apply to as many as all users in an organization or as few as a subset of employees in a given department. +Organizations can create distinctions based on the type of rights and permissions that users need to do their jobs. Under the classification *administrators*, for example, large organizations might assign local administrator responsibilities for a single computer, for specific applications such as Exchange Server or SQL Server, or for an entire domain. Under *users*, permissions and Group Policy settings can apply to all users in an organization or as few as a subset of employees in a given department. -Also, if your organization is subject to regulatory requirements, user activities such as accessing medical records or financial data may need to be audited to verify that you are complying with these requirements. +Also, if your organization is subject to regulatory requirements, user activities such as accessing medical records or financial data may need to be audited to verify that you're complying with these requirements. -To effectively audit user activity, begin by listing the different types of users in your organization and the types of data they need access to, in addition to the data they should not have access to. +To effectively audit user activity, begin by listing the different types of users in your organization, the types of data they need access to, and the data they should not have access to. -Also, if external users can access your organization's data, be sure to identify them, including whether they are a business partner, customer, or general user; the data they have access to; and the permissions they have to access that data. +Also, if external users can access your organization's data, be sure to identify them. Determine whether they're a business partner, customer, or general user; the data they have access to; and the permissions they have to access that data. -The following table illustrates an analysis of users on a network. Although our example contains a single column titled "Possible auditing considerations," you may want to create additional columns to differentiate between different types of network activity, such as log-on hours and permission use. +The following table illustrates an analysis of users on a network. Our example contains only a single column titled "Possible auditing considerations," but you may want to create additional columns to differentiate between different types of network activity, such as log-on hours and permission use. | Groups | Data | Possible auditing considerations | | - | - | - | | Account administrators| User accounts and security groups| Account administrators have full privileges to create new user accounts, reset passwords, and modify security group memberships. We need a mechanism to monitor these changes. | -| Members of the Finance OU| Financial records| Users in Finance have Read/Write access to critical financial records, but no ability to change permissions on these resources. These financial records are subject to government regulatory compliance requirements. | -| External partners | Project Z| Employees of partner organizations have read/write access to certain project data and servers relating to Project Z, but not to other servers or data on the network.| +| Members of the Finance OU| Financial records| Users in Finance have *read/write* access to critical financial records but no ability to change permissions on these resources. These financial records are subject to government regulatory compliance requirements. | +| External partners | Project Z| Employees of partner organizations have *read/write* access to certain project data and servers relating to Project Z but not to other servers or data on the network.| ### Computers Security and auditing requirements and audit event volume can vary considerably for different types of computers in an organization. These requirements can be based on: -- Whether the computers are servers, desktop computers, or portable computers. -- The important applications that the computers run, such as Exchange Server, SQL Server, or Forefront Identity Manager. +- Whether the computers are servers, desktop computers, or portable computers +- The important applications that the computers run, such as Microsoft Exchange Server, SQL Server, or Forefront Identity Manager > [!NOTE] > For more information about auditing: - > - In Exchange Server, see the [Exchange 2010 Security Guide](https://go.microsoft.com/fwlink/p/?linkid=128052). + > - In Exchange Server, see [Exchange 2010 Security Guide](https://go.microsoft.com/fwlink/p/?linkid=128052). > - In SQL Server 2008, see [Auditing (Database Engine)](https://go.microsoft.com/fwlink/p/?LinkId=163434). > - In SQL Server 2012, see [SQL Server Audit (Database Engine)](https://technet.microsoft.com/library/cc280386.aspx). -- The operating system versions. +- The operating system versions > [!NOTE] > The operating system version determines which auditing options are available and the volume of audit event data. -- The business value of the data. +- The business value of the data For example, a web server that's accessed by external users requires different audit settings than a root certification authority (CA) that's never exposed to the public internet or even to regular users on the organization's network. @@ -178,49 +178,49 @@ The following table illustrates an analysis of computers in an organization. ### Regulatory requirements -Many industries and locales have strict and specific requirements for network operations and how resources are protected. In the health care and financial industries, for example, strict guidelines control who has access to records and how they are used. Many countries have strict privacy rules. To identify regulatory requirements, work with your organization's legal department and other departments responsible for these requirements. Then consider the security configuration and auditing options that you can use to comply with and verify compliance with these regulations. +Many industries and locales have specific requirements for network operations and how resources are protected. In the health care and financial industries, for example, strict guidelines control who can access records and how the records are used. Many countries have strict privacy rules. To identify regulatory requirements, work with your organization's legal department and other departments responsible for these requirements. Then consider the security configuration and auditing options that you can use to comply with these regulations and verify compliance. For more information, see the [System Center Process Pack for IT GRC](https://technet.microsoft.com/library/dd206732.aspx). -## Map the security audit policy to groups of users, computers, and resources in your organization +## Map the security audit policy to groups of users, computers, and resources By using Group Policy, you can apply your security audit policy to defined groups of users, computers, and resources. To map a security auditing policy to these defined groups in your organization, you should understand the following considerations for using Group Policy to apply security audit policy settings: - The policy settings you identify can be applied by using one or more GPOs. To create and edit a GPO, use the Group Policy Management Console (GPMC). By using the GPMC to link a GPO to selected Active Directory sites, domains, and OUs, you apply the policy settings in the GPO to the users and computers in those Active Directory objects. An OU is the lowest-level Active Directory container to which you can assign Group Policy settings. - Decide whether every policy setting that you select should be enforced across the organization or apply only to selected users or computers. You can then combine these audit policy settings into GPOs and link them to the appropriate Active Directory containers. -- By default, options set in GPOs that are linked to higher levels of Active Directory sites, domains, and OUs are inherited by all OUs at lower levels. However, a GPO that is linked at a lower level can overwrite inherited policies. +- By default, options set in GPOs that are linked to higher levels of Active Directory sites, domains, and OUs are inherited by all OUs at lower levels. However, a GPO that's linked at a lower level can overwrite inherited policies. - For example, you might use a domain GPO to assign an organization-wide group of audit settings but want a certain OU to get a defined group of additional settings. To do this, you can link a second GPO to that specific lower-level OU. Then, a logon audit setting that is applied at the OU level will override a conflicting logon audit setting that is applied at the domain level (unless you have taken special steps to apply Group Policy loopback processing). + For example, you might use a domain GPO to assign an organization-wide group of audit settings but want a certain OU to get a defined group of additional settings. To do this, you can link a second GPO to that specific lower-level OU. Then, a logon audit setting that's applied at the OU level will override a conflicting logon audit setting that's applied at the domain level, unless you have taken special steps to apply Group Policy loopback processing. -- Audit policies are computer policies. Therefore, they must be applied through GPOs that are applied to computer OUs, not to user OUs. However, in most cases you can apply audit settings for only specified resources and groups of users by configuring SACLs on the relevant objects. This enables auditing for a security group that contains only the users you specify. +- Audit policies are computer policies. Therefore, they must be applied through GPOs that are applied to *computer* OUs, not to *user* OUs. But in most cases you can apply audit settings for only specified resources and groups of users by configuring SACLs on the relevant objects. This functionality enables auditing for a security group that contains only the users you specify. - For example, you could configure a SACL for a folder called Payroll Data on Accounting Server 1. This can audit attempts by members of the Payroll Processors OU to delete objects from this folder. The **Object Access\\Audit File System** audit policy setting applies to Accounting Server 1 but because it requires a corresponding resource SACL, only actions by members of the Payroll Processors OU on the Payroll Data folder generate audit events. + For example, you could configure a SACL for a folder called *Payroll Data* on Accounting Server 1. You can audit attempts by members of the Payroll Processors OU to delete objects from this folder. The **Object Access\\Audit File System** audit policy setting applies to Accounting Server 1. But, because it requires a corresponding resource SACL, only actions by members of the Payroll Processors OU on the Payroll Data folder generate audit events. -- Advanced security audit policy settings were introduced in Windows Server 2008 R2 or Windows 7 and can be applied to those operating systems and later. These advanced audit policies can only be applied by using Group Policy. +- Advanced security audit policy settings were introduced in Windows Server 2008 R2 and Windows 7. These advanced audit policies can only be applied to those operating systems and later versions by using Group Policy. >[!IMPORTANT]   - > Whether you apply advanced audit policies by using Group Policy or by using logon scripts, do not use both the basic audit policy settings under **Local Policies\\Audit Policy** and the advanced settings under **Security Settings\\Advanced Audit Policy Configuration**. Using both basic and advanced audit policy settings can cause unexpected results in audit reporting. + > Whether you apply advanced audit policies by using Group Policy or by using logon scripts, don't use both the basic audit policy settings under **Local Policies\\Audit Policy** *and* the advanced settings under **Security Settings\\Advanced Audit Policy Configuration**. Using both basic and advanced audit policy settings can cause unexpected results in audit reporting. If you use **Advanced Audit Policy Configuration** settings or logon scripts to apply advanced audit policies, be sure to enable the **Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings** policy setting under **Local Policies\\Security Options**. This configuration will prevent conflicts between similar settings by forcing basic security auditing to be ignored. The following examples show how you can apply audit policies to an organization's OU structure: -- Apply data activity settings to an OU that contains file servers. If your organization has servers that contain sensitive data, consider putting them in a separate OU so that you can configure and apply a more precise audit policy to these servers. -- Apply user activity audit policies to an OU that contains all computers in the organization. If your organization places users in OUs based on the department they work in, consider configuring and applying more detailed security permissions on critical resources that are accessed by employees who work in more sensitive areas, such as network administrators or the legal department. +- Apply data activity settings to an OU that contains file servers. If your organization has servers that contain sensitive data, consider putting them in a separate OU. Then you can configure and apply a more precise audit policy to these servers. +- Apply user activity audit policies to an OU that contains all computers in the organization. If your organization places users in OUs by department, consider applying more detailed security permissions on critical resources that are accessed by employees who more-sensitive areas, such as network administrators or the legal department. - Apply network and system activity audit policies to OUs that contain the organization's most critical servers, such as domain controllers, CAs, email servers, or database servers. ## Map your security auditing goals to a security audit policy configuration -After you identify your security auditing goals, you can begin to map them to a security audit policy configuration. This audit policy configuration must address your most critical security auditing goals, but it also must address your organization's constraints, such as the number of computers that need to be monitored, the number of activities that you want to audit, the number of audit events that your desired audit configuration will generate, and the number of administrators available to analyze and act upon audit data. +After you identify your security auditing goals, you can map them to a security audit policy configuration. This audit policy configuration must address your security auditing goals. But it also must reflect your organization's constraints, such as the number of computers that need to be monitored, the number of activities that you want to audit, the number of audit events that your audit configuration will generate, and the number of administrators available to analyze and act upon audit data. To create your audit policy configuration, you need to: 1. Explore all of the audit policy settings that can be used to address your needs. -2. Choose the audit settings that will most effectively address the audit requirements identified in the previous section. -3. Confirm that the settings you choose are compatible with the operating systems running on the computers that you want to monitor. -4. Decide which configuration options (*success*, *failure*, or both *success* and *failure*) you want to use for the audit settings. -5. Deploy the audit settings in a lab or test environment to verify that they meet your desired results in terms of volume, supportability, and comprehensiveness. Then deploy the audit settings in a pilot production environment to ensure that your estimates of how much audit data your audit plan will generate are realistic and that you can manage this data. +1. Choose the audit settings that will most effectively address the audit requirements identified in the previous section. +1. Confirm that the settings you choose are compatible with the operating systems running on the computers that you want to monitor. +1. Decide which configuration options (*success*, *failure*, or both *success* and *failure*) you want to use for the audit settings. +1. Deploy the audit settings in a lab or test environment to verify that they meet your desired results for volume, supportability, and comprehensiveness. Then, deploy the audit settings in a pilot production environment to ensure that your estimates of how much audit data your audit plan will generate are realistic and that you can manage this data. ### Explore audit policy options @@ -239,81 +239,81 @@ Depending on your goals, different sets of audit settings may be of particular v - Network > [!IMPORTANT] -> Settings that are described in the reference might also provide valuable information about activity audited by another setting. For example, the settings that you use to monitor user activity and network activity have obvious relevance to protecting your data resources. Likewise, attempts to compromise data resources have huge implications for overall network status and potentially for how well you are managing the activities of users on the network. +> Settings that are described in the reference might also provide valuable information about activity audited by another setting. For example, the settings that you use to monitor user activity and network activity have obvious relevance to protecting your data resources. Likewise, attempts to compromise data resources have huge implications for overall network status and potentially for how well you're managing the activities of users on the network. ### Data and resource activity -For many organizations, compromising the organization's data resources can cause tremendous financial losses, in addition to lost prestige and legal liability. If your organization has critical data resources that must be protected against any breach, the following settings can provide valuable monitoring and forensic data: +Compromise to an organization's data resources can cause tremendous financial losses, lost prestige, and legal liability. If your organization has critical data resources that must be protected against, the following settings can provide valuable monitoring and forensic data: -- **Object Access\\[Audit File Share](audit-file-share.md)**: This policy setting allows you to track what content was accessed, the source (IP address and port) of the request, and the user account that was used for the access. The volume of event data generated by this setting will vary depending on the number of client computers that attempt to access the file share. On a file server or domain controller, volume may be high due to SYSVOL access by client computers for policy processing. If you do not need to record routine access by client computers that have permissions on the file share, you may want to log audit events only for failed attempts to access the file share. -- **Object Access\\[Audit File System](audit-file-system.md)**: This policy setting determines whether the operating system audits user attempts to access file system objects. Audit events are only generated for objects (such as files and folders) that have configured SACLs, and only if the type of access requested (such as *write*, *read*, or *modify*) and the account that's making the request match the settings in the SACL. +- **Object Access\\[Audit File Share](audit-file-share.md)**: This policy setting enables you to track what content was accessed, the source (IP address and port) of the request, and the user account that was used for the access. The volume of event data generated with this setting will vary depending on the number of client computers that try to access the file share. On a file server or domain controller, volume may be high because of SYSVOL access by client computers for policy processing. If you don't need to record routine access by client computers on the file share, you may want to log audit events only for failed attempts to access the file share. +- **Object Access\\[Audit File System](audit-file-system.md)**: This policy setting determines whether the operating system audits user attempts to access file system objects. Audit events are only generated for objects, such as files and folders, that have configured SACLs, and only if the type of access requested (such as *write*, *read*, or *modify*) and the account that's making the request match the settings in the SACL. - If success auditing is enabled, an audit entry is generated each time any account successfully accesses a file system object that has a matching SACL. If failure auditing is enabled, an audit entry is generated each time any user unsuccessfully attempts to access a file system object that has a matching SACL. The amount of audit data generated by the **Audit File System** policy setting can vary considerably, depending on the number of objects that have been configured to be monitored. + If success auditing is enabled, an audit entry is generated each time any account successfully accesses a file system object that has a matching SACL. If failure auditing is enabled, an audit entry is generated each time any user unsuccessfully attempts to access a file system object that has a matching SACL. The amount of audit data generated by the **Audit File System** policy setting can vary considerably, depending on the number of objects that you configured to monitor. > [!NOTE]   > To audit user attempts to access all file system objects on a computer, use the Global Object Access Auditing settings [Registry (Global Object Access Auditing)](registry-global-object-access-auditing.md) or [File System (Global Object Access Auditing)](file-system-global-object-access-auditing.md). - **Object Access\\[Audit Handle Manipulation](audit-handle-manipulation.md)**: This policy setting determines whether the operating system generates audit events when a handle to an object is opened or closed. Only objects with configured SACLs generate these events and only if the attempted handle operation matches the SACL. - Event volume can be high, depending on how the SACLs are configured. When used together with the **Audit File System** or **Audit Registry** policy setting, the **Audit Handle Manipulation** policy setting can provide an administrator with useful "reason for access" audit data that details the precise permissions on which the audit event is based. For example, if a file is configured as a *read-only* resource but a user attempts to save changes to the file, the audit event will log not only the event but also the permissions that were used (or attempted to be used) to save the file changes. + Event volume can be high, depending on how the SACLs are configured. When used together with the **Audit File System** or **Audit Registry** policy setting, the **Audit Handle Manipulation** policy setting can provide useful "reason for access" audit data that details the precise permissions on which the audit event is based. For example, if a file is configured as a *read-only* resource but a user tries to save changes to the file, the audit event will log the event *and* the permissions that were used (or attempted to be used) to save the file changes. -- **Global Object Access Auditing**: A growing number of organizations use security auditing to comply with regulatory requirements that govern data security and privacy. But demonstrating that strict controls are being enforced can be difficult. To address this issue, the supported versions of Windows include two **Global Object Access Auditing** policy settings, one for the registry and one for the file system. When you configure these settings, they apply a global system access control SACL on all objects of that class on a system, which cannot be overridden or circumvented. +- **Global Object Access Auditing**: Many organizations use security auditing to comply with regulatory requirements that govern data security and privacy. But demonstrating that strict controls are being enforced can be difficult. To address this issue, the supported versions of Windows include two **Global Object Access Auditing** policy settings, one for the registry and one for the file system. When you configure these settings, they apply a global system access control SACL on all objects of that class on a system that can't be overridden or circumvented. > [!IMPORTANT] > The **Global Object Access Auditing** policy settings must be configured and applied in conjunction with the **Audit File System** and **Audit Registry** audit policy settings in the **Object Access** category. ### User activity -The settings in the previous section relate to activity involving the files, folders, and network shares that are stored on a network. The settings in this section focus on the users, including employees, partners, and customers, who may try to access those resources. +The settings in the previous section relate to activity involving the files, folders, and network shares that are stored on a network. The settings in this section focus on the users who may try to access those resources, including employees, partners, and customers. -In the majority of cases, these attempts will be legitimate, and the network needs to make vital data readily available to legitimate users. However in other cases, employees, partners, and others may attempt to access resources that they have no legitimate reason to access. Security auditing can be used to track a wide variety of user activities on a particular computer to diagnose and resolve problems for legitimate users and identify and address illegitimate activities. The following are a few important settings that you should evaluate to track user activity on your network: +In most cases, these attempts will be legitimate, and the network needs to make vital data readily available to legitimate users. But in other cases, employees, partners, and others may try to access resources that they have no legitimate reason to access. Security auditing can be used to track a wide variety of user activities on a particular computer to diagnose and resolve problems for legitimate users and to identify and address illegitimate activities. The following are a few important settings that you should evaluate to track user activity on your network: -- **Account Logon\\[Audit Credential Validation](audit-credential-validation.md)**: This is an important policy setting because it enables you to track every successful and unsuccessful attempt to present credentials for a user logon. In particular, a pattern of unsuccessful attempts may indicate that a user or application is using credentials that are no longer valid or is attempting to use a variety of credentials in succession in hope that one of these attempts will eventually succeed. These events occur on the computer that's authoritative for the credentials. For domain accounts, the domain controller is authoritative. For local accounts, the local computer is authoritative. +- **Account Logon\\[Audit Credential Validation](audit-credential-validation.md)**: This is an important policy setting. It enables you to track every successful and unsuccessful attempt to present credentials for a user logon. In particular, a pattern of unsuccessful attempts may indicate that a user or application is using credentials that are no longer valid. Or the user or app is trying to use a variety of credentials in succession in hope that one of these attempts will eventually succeed. These events occur on the computer that's authoritative for the credentials. For domain accounts, the domain controller is authoritative. For local accounts, the local computer is authoritative. - **Detailed Tracking\\[Audit Process Creation](audit-process-creation.md) and Detailed Tracking\\[Audit Process Termination](audit-process-termination.md)**: These policy settings enable you to monitor the applications that a user opens and close on a computer. -- **DS Access\\[Audit Directory Service Access](audit-directory-service-access.md)** and **DS Access\\[Audit Directory Service Changes](audit-directory-service-changes.md)**: These policy settings provide a detailed audit trail of attempts to access, create, modify, delete, move, or undelete objects in Active Directory Domain Services (AD DS). Only domain administrators have permissions to modify AD DS objects, so it's important to identify malicious attempts to modify these objects. In addition, although domain administrators should be among an organization's most trusted employees, the use of **Audit Directory Service Access** and **Audit Directory Service Changes** settings allow you to monitor and verify that only approved changes are made to AD DS. These audit events are logged only on domain controllers. -- **Logon/Logoff\\[Audit Account Lockout](audit-account-lockout.md)**: Another common security scenario occurs when a user attempts to log on with an account that's been locked out. It's important to identify these events and to determine whether the attempt to use an account that has been locked out is malicious. +- **DS Access\\[Audit Directory Service Access](audit-directory-service-access.md)** and **DS Access\\[Audit Directory Service Changes](audit-directory-service-changes.md)**: These policy settings provide a detailed audit trail of attempts to access, create, modify, delete, move, or undelete objects in Active Directory Domain Services (AD DS). Only domain administrators have permissions to modify AD DS objects, so it's important to identify malicious attempts to modify these objects. Also, although domain administrators should be among an organization's most trusted employees, the use of the **Audit Directory Service Access** and **Audit Directory Service Changes** settings enable you to monitor and verify that only approved changes are made to AD DS. These audit events are logged only on domain controllers. +- **Logon/Logoff\\[Audit Account Lockout](audit-account-lockout.md)**: Another common security scenario occurs when a user attempts to log on with an account that's been locked out. It's important to identify these events and to determine whether the attempt to use an account that was locked out is malicious. - **Logon/Logoff\\[Audit Logoff](audit-logoff.md)** and **Logon/Logoff\\[Audit Logon](audit-logon.md)**: Logon and logoff events are essential to tracking user activity and detecting potential attacks. Logon events are related to the creation of logon sessions, and they occur on the computer that was accessed. For an interactive logon, events are generated on the computer that was logged on to. For network logon, such as accessing a shared resource, events are generated on the computer that hosts the resource that was accessed. Logoff events are generated when logon sessions are terminated. >[!NOTE] - > There's no failure event for logoff activity because failed logoffs (such as when a system abruptly shuts down) don't generate an audit record. Logoff events are not 100-percent reliable. For example, the computer can be turned off without a proper logoff and shutdown, so a logoff event isn't generated. + > There's no failure event for logoff activity, because failed logoffs (such as when a system abruptly shuts down) don't generate an audit record. Logoff events aren't 100-percent reliable. For example, the computer can be turned off without a proper logoff and shutdown, so a logoff event isn't generated. - **Logon/Logoff\\[Audit Special Logon](audit-special-logon.md)**: A special logon has administrator-equivalent rights and can be used to elevate a process to a higher level. It's recommended to track these types of logons. -- **Object Access\\[Audit Certification Services](audit-certification-services.md)**: This policy setting allows you to monitor a wide variety of activities on a computer that hosts Active Directory Certificate Services (AD CS) role services to ensure that only authorized users do these tasks and only authorized or desired tasks are done. +- **Object Access\\[Audit Certification Services](audit-certification-services.md)**: This policy setting enables you to monitor activities on a computer that hosts Active Directory Certificate Services (AD CS) role services to ensure that only authorized users do these tasks and only authorized or desirable tasks are done. - **Object Access\\[Audit File System](audit-file-system.md) and Object Access\\[Audit File Share](audit-file-share.md)**: These policy settings are described in the previous section. - **Object Access\\[Audit Handle Manipulation](audit-handle-manipulation.md)**: This policy setting and its role in providing "reason for access" audit data is described in the previous section. -- **Object Access\\[Audit Registry](audit-registry.md)**: Monitoring for changes to the registry is one of the most critical means that an administrator has to ensure malicious users don't make changes to essential computer settings. Audit events are only generated for objects that have configured SACLs and only if the type of access that is requested (such as *write*, *read*, or *modify*) and the account making the request match the settings in the SACL. +- **Object Access\\[Audit Registry](audit-registry.md)**: Monitoring for changes to the registry is one of the most critical means that an administrator has to ensure malicious users don't make changes to essential computer settings. Audit events are only generated for objects that have configured SACLs and only if the type of access that is requested, such as *write*, *read*, or *modify*, and the account making the request match the settings in the SACL. > [!IMPORTANT] - > On critical systems where all attempts to change registry settings should be tracked, you can combine the **Audit Registry** policy setting with the **Global Object Access Auditing** policy settings to ensure that all attempts to modify registry settings on a computer are tracked. + > On critical systems where all attempts to change registry settings should be tracked, you can combine the **Audit Registry** and **Global Object Access Auditing** policy settings to ensure that all attempts to modify registry settings on a computer are tracked. - **Object Access\\[Audit SAM](audit-sam.md)**: The Security Accounts Manager (SAM) is a database on computers running Windows that stores user accounts and security descriptors for users on the local computer. Changes to user and group objects are tracked by the **Account Management** audit category. However, user accounts with the proper user rights could potentially alter the files where the account and password information is stored in the system, bypassing any **Account Management** events. - **Privilege Use\\[Audit Sensitive Privilege Use](audit-sensitive-privilege-use.md)**: These policy settings and audit events enable you to track the use of certain rights on one or more systems. If you configure this policy setting, an audit event is generated when sensitive rights requests are made. ### Network activity -The following network activity policy settings enable you to monitor security-related issues that are not necessarily covered in the data or user activity categories but that can be equally important for network status and protection. +The following network activity policy settings enable you to monitor security-related issues that aren't necessarily covered in the data or user-activity categories but that can be important for network status and protection. - **Account Management**: Use the policy settings in this category to track attempts to create, delete, or modify user or computer accounts, security groups, or distribution groups. Monitoring these activities complements the monitoring strategies you select in the user activity and data activity sections. - **Account Logon\\[Audit Kerberos Authentication Service](audit-kerberos-authentication-service.md) and Account Logon\\[Audit Kerberos Service Ticket Operations](audit-kerberos-service-ticket-operations.md)**: Audit policy settings in the **Account Logon** category monitor activities that relate to the use of domain account credentials. These policy settings complement the policy settings in the **Logon/Logoff** category. The **Audit Kerberos Authentication Service** policy setting enables you to monitor the status of and potential threats to the Kerberos service. The Audit **Kerberos Service Ticket Operations** policy setting allows you to monitor the use of Kerberos service tickets. >[!NOTE] - >**Account Logon** policy settings apply only to specific domain account activities, regardless of the computer that is accessed. **Logon/Logoff** policy settings apply to the computer that hosts the resources being accessed. + >**Account Logon** policy settings apply only to specific domain account activities, regardless of which computer is accessed. **Logon/Logoff** policy settings apply to the computer that hosts the resources that are accessed. -- **Account Logon\\[Audit Other Account Logon Events](audit-other-account-logon-events.md)**: This policy setting can be used to track a number of different network activities, including attempts to create Remote Desktop connections, wired network connections, and wireless connections. -- **DS Access**: Policy settings in this category enable you to monitor the AD DS role services, which provide account data, validate logons, maintain network access permissions, and provide other services that are critical to the secure and proper functioning of a network. Therefore, auditing the rights to access and modify the configuration of a domain controller can help an organization maintain a secure and reliable network. One of the key tasks performed by AD DS is the replication of data between domain controllers. -- **Logon/Logoff\\[Audit IPsec Extended Mode](audit-ipsec-extended-mode.md)**, **Logon/Logoff\\[Audit IPsec Main Mode](audit-ipsec-main-mode.md)**, and **Logon/Logoff\\[Audit IPsec Quick Mode](audit-ipsec-quick-mode.md)**: Many networks support large numbers of external users, including remote employees and partners. Because these users are outside the organization's network boundaries, IPsec is often used to help protect communications over the internet by enabling network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and protection against replay attacks. You can use these settings to ensure that IPsec services are functioning properly. +- **Account Logon\\[Audit Other Account Logon Events](audit-other-account-logon-events.md)**: This policy setting can be used to track various network activities, including attempts to create Remote Desktop connections, wired network connections, and wireless connections. +- **DS Access**: Policy settings in this category enable you to monitor the AD DS role services. These services provide account data, validate logons, maintain network access permissions, and provide other functionality that's to secure and proper functioning of a network. Therefore, auditing the rights to access and modify the configuration of a domain controller can help an organization maintain a secure and reliable network. One of the key tasks AD DS performs is the replication of data between domain controllers. +- **Logon/Logoff\\[Audit IPsec Extended Mode](audit-ipsec-extended-mode.md)**, **Logon/Logoff\\[Audit IPsec Main Mode](audit-ipsec-main-mode.md)**, and **Logon/Logoff\\[Audit IPsec Quick Mode](audit-ipsec-quick-mode.md)**: Networks often support many external users, including remote employees and partners. Because these users are outside the organization's network boundaries, IPsec is often used to help protect communications over the internet. It enabl network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and protection against replay attacks. You can use these settings to ensure that IPsec services are functioning properly. - **Logon/Logoff\\[Audit Network Policy Server](audit-network-policy-server.md)** Organizations that use RADIUS (IAS) and Network Access Protection (NAP) to set and maintain security requirements for external users can use this policy setting to monitor the effectiveness of these policies and to determine whether anyone is trying to circumvent these protections. -- **Policy Change**: These policy settings and events enable you to track changes to important security policies on a local computer or network. Because policies are typically established by administrators to help secure network resources, any changes or attempts to change these policies can be an important aspect of security management for a network. +- **Policy Change**: These policy settings and events enable you to track changes to important security policies on a local computer or network. Because policies are typically established by administrators to help secure network resources, monitoring any changes or attempted changes to these policies can be an important aspect of security management for a network. - **Policy Change\\[Audit Audit Policy Change](audit-audit-policy-change.md)**: This policy setting allows you to monitor changes to the audit policy. If malicious users obtain domain administrator credentials, they can temporarily disable essential security audit policy settings so that their other activities on the network can't be detected. - **Policy Change\\[Audit Filtering Platform Policy Change](audit-filtering-platform-policy-change.md)**:.\ This policy setting can be used to monitor a variety of changes to an organization's IPsec policies. -- **Policy Change\\[Audit MPSSVC Rule-Level Policy Change](audit-mpssvc-rule-level-policy-change.md)**: This policy setting determines if the operating system generates audit events when changes are made to policy rules for the Microsoft Protection Service (MPSSVC.exe), which is used by Windows Firewall. Changes to firewall rules are important for understanding the security state of the computer and how well it is protected against network attacks. +- **Policy Change\\[Audit MPSSVC Rule-Level Policy Change](audit-mpssvc-rule-level-policy-change.md)**: This policy setting determines if the operating system generates audit events when changes are made to policy rules for the Microsoft Protection Service (MPSSVC.exe), which is used by Windows Firewall. Changes to firewall rules are important for understanding the security state of the computer and how well it's protected against network attacks. ### Confirm operating system version compatibility -Not all versions of Windows support advanced audit policy settings or the use of Group Policy to apply and manage these settings. For more information, see [Which editions of Windows support advanced audit policy configuration](which-editions-of-windows-support-advanced-audit-policy-configuration.md). +Not all versions of Windows support advanced audit policy settings or the use of Group Policy to manage these settings. For more information, see [Which editions of Windows support advanced audit policy configuration](which-editions-of-windows-support-advanced-audit-policy-configuration.md). -The audit policy settings under **Local Policies\\Audit Policy** overlap with audit policy settings under **Security Settings\\Advanced Audit Policy Configuration**. However, the advanced audit policy categories and subcategories make it possible to focus your auditing efforts on the most critical activities while reducing the amount of audit data that's less important to your organization. +The audit policy settings under **Local Policies\\Audit Policy** overlap with audit policy settings under **Security Settings\\Advanced Audit Policy Configuration**. However, the advanced audit policy categories and subcategories enable you to focus your auditing efforts on critical activities while reducing the amount of audit data that's less important to your organization. -For example, **Local Policies\\Audit Policy** contains a single setting called *[Audit account logon events](https://technet.microsoft.com/library/cc787176.aspx)*. When this setting is configured, it generates at least 10 types of audit events. +For example, **Local Policies\\Audit Policy** contains a single setting called **[Audit account logon events](https://technet.microsoft.com/library/cc787176.aspx)**. When this setting is configured, it generates at least 10 types of audit events. In comparison, the Account Logon category under **Security Settings\\Advanced Audit Policy Configuration** provides the following advanced settings, which allow you to focus your auditing: @@ -326,46 +326,46 @@ These settings enable you to exercise much tighter control over which activities ### *Success*, *failure*, or both -Whichever event settings you include in your plan, you also have to decide whether you want to log an event when the activity fails, when an activity succeeds, or both successes and failures. This is an important question, and the answer will be based on the criticality of the event and the implications of the decision on event volume. +Whichever event settings you include in your plan, you also have to decide whether you want to log an event when the activity fails or succeeds or both successes and failures. This is an important question. The answer depends on the criticality of the event and the implications of the decision on event volume. -For example, on a file server that's accessed frequently by legitimate users, you may be interested in logging an event only when an unsuccessful attempt to access data takes place, because this could be evidence of an unauthorized or malicious user. And in this instance, logging successful attempts to access the server would quickly fill the event log with benign events. +For example, on a file server that's accessed frequently by legitimate users, you may want to log an event only when an unsuccessful attempt to access data takes place, because this could be evidence of an unauthorized or malicious user. And in this case, logging successful attempts to access the server would quickly fill the event log with benign events. -But if the file share has sensitive information, such as trade secrets, you may want to log every access attempt, whether successful or unsuccessful, so that you have an audit trail of every user who accessed the resource. +But if the file share has sensitive information, such as trade secrets, you may want to log every access attempt so that you have an audit trail of every user who tried to access the resource. ## Plan for security audit monitoring and management -Networks can contain hundreds of servers running critical services or storing critical data, all of which need to be monitored. There may be tens or even hundreds of thousands on the network. These numbers may not be an issue if the ratio of servers or client computers per administrator is low. Even if an administrator who is responsible for auditing security and performance issues has relatively few computers to monitor, you need to decide how the administrator will obtain event data to review. Following are some options for obtaining the event data. +Networks can contain hundreds of servers that run critical services or store critical data, all of which need to be monitored. There may be tens or even hundreds of thousands of computers on the network. These numbers may not be an issue if the ratio of servers or client computers per administrator is low. And even if an administrator who is responsible for auditing security and performance issues has relatively few computers to monitor, you need to decide how the administrator will obtain event data to review. Following are some options for obtaining the event data. -- Will you keep event data on a local computer until an administrator logs on to review this data? If so, the administrator needs to have physical or remote access to the Event Viewer on each client computer or server, and the remote access and firewall settings on each client computer or server need to be configured to enable this access. In addition, you need to decide how often an administrator can visit each computer, and adjust the size of the audit log so that critical information is not deleted if the log reaches its maximum capacity. -- Will you collect event data so that it can be reviewed from a central console? If so, there are a number of computer management products, such as the Audit Collection Services in Microsoft Operations Manager 2007 and 2012, that can be used to collect and filter event data. Presumably this solution enables a single administrator to review larger amounts of data than using the local storage option. But in some cases, this method can make it more difficult to detect clusters of related events that can occur on a single computer. +- Will you keep event data on a local computer until an administrator logs on to review this data? If so, the administrator needs to have physical or remote access to the Event Viewer on each client computer or server. And the remote access and firewall settings on each client computer or server need to be configured to enable this access. You also need to decide how often the administrator can visit each computer, and adjust the size of the audit log so that critical information isn't deleted if the log reaches capacity. +- Will you collect event data so that it can be reviewed from a central console? If so, there are a number of computer management products, such as the Audit Collection Services in Microsoft Operations Manager 2007 and 2012, that you can use to collect and filter event data. Presumably this solution enables a single administrator to review larger amounts of data than using the local storage option. But in some cases, this method can make it more difficult to detect clusters of related events that can occur on a single computer. -In addition, whether you choose to leave audit data on an individual computer or consolidate it at a central location, you need to decide how large the log file should be and what should happen when the log reaches its maximum size. To configure these options, open Event Viewer, expand **Windows Logs**, right-click **Security**, and select **Properties**. You can configure the following properties: +In addition, whether you choose to leave audit data on an individual computer or consolidate it at a central location, you need to decide how large the log file should be and what happens when the log reaches its maximum size. To configure these options, open Event Viewer, expand **Windows Logs**, right-click **Security**, and select **Properties**. You can configure the following properties: -- **Overwrite events as needed (oldest events first)**: This is the default option, which is an acceptable solution in most situations. -- **Archive the log when full, do not overwrite events**: This option can be used when all log data needs to be saved, but it also suggests that you may not be reviewing audit data frequently enough. +- **Overwrite events as needed (oldest events first)**: This is the default option, which is acceptable in most situations. +- **Archive the log when full, do not overwrite events**: This option can be used when all log data needs to be saved. But the scenario suggests that you may not be reviewing audit data frequently enough. - **Do not overwrite events (Clear logs manually)**. This option stops the collection of audit data when the log file reaches its maximum size. Older data is retained at the expense of the most recent audit events. Use this option only if you don't want to lose any audit data, don't want to create an archive of the event log, and are committed to reviewing data before the maximum log size is reached. You can also configure the audit log size and other key management options by using Group Policy settings. You can configure the event log settings in the following location in the GPMC: **Computer Configuration\\Administrative Templates\\Windows Components\\Event Log Service\\Security**. These options include: -- **Maximum Log Size (KB)**: This policy setting specifies the maximum size of the log files. The user interfaces in the Local Group Policy Editor and Event Viewer allow you to enter values as large as 2 TB. If this setting is not configured, event logs have a default maximum size of 20 megabytes. +- **Maximum Log Size (KB)**: This policy setting specifies the maximum size of the log files. In the Local Group Policy Editor and Event Viewer, you can enter values as large as 2 TB. If this setting isn't configured, event logs have a default maximum size of 20 megabytes. - **Log Access**: This policy setting determines which user accounts have access to log files and what usage rights are granted. -- **Retain old events**: This policy setting controls event log behavior when the log file reaches its maximum size. When this policy setting is enabled and a log file reaches its maximum size, new events are not written to the log and are lost. When this policy setting is disabled and a log file reaches its maximum size, new events overwrite old events. -- **Backup log automatically when full**: This policy setting controls event log behavior when the log file reaches its maximum size and takes effect only if the **Retain old events** policy setting is enabled. If you enable these policy settings, the event log file is automatically closed and renamed when it is full. A new file is then started. If you disable or do not configure this policy setting and the **Retain old events** policy setting is enabled, new events are discarded and the old events are retained. +- **Retain old events**: This policy setting controls event log behavior when the log file reaches its maximum size. When this policy setting is enabled and a log file reaches its maximum size, new events aren't written to the log and are lost. When this policy setting is disabled and a log file reaches its maximum size, new events overwrite old events. +- **Backup log automatically when full**: This policy setting controls event log behavior when the log file reaches its maximum size. It takes effect only if the **Retain old events** policy setting is enabled. If you enable these policy settings, the event log file is automatically closed and renamed when it's full. A new log file is then started. If you disable or don't configure this policy setting and the **Retain old events** policy setting is enabled, new events are discarded, and the old events are retained. -In addition, a growing number of organizations are being required to store archived log files for a number of years. Consult with regulatory compliance officers in your organization to determine whether such guidelines apply to your organization. For more information, see the [IT Compliance Management Guide](https://go.microsoft.com/fwlink/p/?LinkId=163435). +Many organizations are now required to store archived log files for a number of years. Consult with regulatory compliance officers in your organization to determine whether such guidelines apply to your organization. For more information, see the [IT Compliance Management Guide](https://go.microsoft.com/fwlink/p/?LinkId=163435). ## Deploy the security audit policy -Before deploying the audit policy in a production environment, it's critical that you determine the effects of the policy settings that you have configured. +Before deploying the audit policy in a production environment, it's critical that you determine the effects of the policy settings that you've configured. The first step in assessing your audit policy deployment is to create a test environment in a lab and use it to simulate the various use scenarios that you've identified to confirm that the audit settings you selected are configured correctly and generate the type of results you want. -However, unless you are able to run fairly realistic simulations of network usage patterns, a lab setup can't provide accurate information about the volume of audit data that the audit policy settings you selected will generate and how effective your plan for monitoring audit data will be. To provide this type of information, you need to conduct one or more pilot deployments. These pilot deployments could involve: +However, unless you can run fairly realistic simulations of network usage patterns, a lab setup can't provide accurate information about the volume of audit data that the audit policy settings you selected will generate and how effective your plan for monitoring audit data will be. To provide this type of information, you need to conduct one or more pilot deployments. These pilot deployments could involve: - A single OU that contains critical data servers or an OU that contains all desktop computers in a specified location. - A limited set of security audit policy settings, such as **Logon/Logoff** and **Account Logon**. - A combination of limited OUs and audit policy settings—for example, targeting servers in only the Accounting OU with **Object Access** policy settings. -After you successfully complete one or more limited deployments, you should confirm that the audit data that is collected is manageable with your management tools and administrators. When you've confirmed that the pilot deployment is effective, you need to confirm that you have the necessary tools and staff to expand the deployment to include additional OUs and sets of audit policy settings until the production deployment is complete. +After you successfully complete one or more limited deployments, you should confirm that the audit data that's collected is manageable with your management tools and administrators. After you confirm that the pilot deployment is effective, you need to ensure that you have the necessary tools and staff to expand the deployment to include additional OUs and sets of audit policy settings until production deployment is complete. From 8241d1cfee3675fab2907344adf20d770f95fcff Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 27 Jan 2020 11:47:39 -0800 Subject: [PATCH 047/358] draft --- .../create-a-windows-10-reference-image.md | 171 ++++++++++-------- ...prepare-for-windows-deployment-with-mdt.md | 16 +- windows/deployment/images/fig8-cust-tasks.png | Bin 45446 -> 57509 bytes windows/deployment/images/mdt-apps.png | Bin 0 -> 48823 bytes windows/deployment/images/mdt-rules.png | Bin 0 -> 30909 bytes 5 files changed, 106 insertions(+), 81 deletions(-) create mode 100644 windows/deployment/images/mdt-apps.png create mode 100644 windows/deployment/images/mdt-rules.png diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index 96abe23e3a..34a0836075 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -27,9 +27,9 @@ Creating a reference image is important because that image serves as the foundat >See [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md) for more information about the server, client, and network infrastructure used in this guide. For the purposes of this topic, we will use three computers: DC01, MDT01, and PC0001. -- DC01 is a domain controller for the contoso.com domain. -- MDT01 is a contoso.com domain member server. -- PC0001 is a Windows 10 Enterprise x64 client and also a contoso.com domain member. + - DC01 is a domain controller for the contoso.com domain. + - MDT01 is a contoso.com domain member server. + - PC0001 is a Windows 10 Enterprise x64 client and also a contoso.com domain member. ![figure 1](../images/mdt-08-fig01.png) @@ -155,24 +155,24 @@ Download all three items in this list to the D:\\Downloads folder on MDT01. 1. After downloading the most current version of the Office Deployment tool from the Microsoft Download Center using the link provided above, run the self-extracting executable file and extract the files to **D:\\Downloads\\Office365**. The Office Deployment Tool (setup.exe) and several sample configuration.xml files will be extracted. 2. Using a text editor (such as Notepad), create an XML file in the D:\\Downloads\\Office365 directory with the installation settings for Office 365 ProPlus that are appropriate for your organization. The file uses an XML format, so the file you create must have an extension of .xml but the file can have any filename. - - For example, you can use the following configuration.xml file, which provides these configuration settings: - - Install the 64-bit version of Office 365 ProPlus in English directly from the Office Content Delivery Network (CDN) on the internet. Note: 64-bit is now the default and recommended edition. - - Use the Semi-Annual Channel and get updates directly from the Office CDN on the internet. - - Perform a silent installation. You won’t see anything that shows the progress of the installation and you won’t see any error messages. + For example, you can use the following configuration.xml file, which provides these configuration settings: + - Install the 64-bit version of Office 365 ProPlus in English directly from the Office Content Delivery Network (CDN) on the internet. Note: 64-bit is now the default and recommended edition. + - Use the Semi-Annual Channel and get updates directly from the Office CDN on the internet. + - Perform a silent installation. You won’t see anything that shows the progress of the installation and you won’t see any error messages. - ```xml - - - - - - - - - - ``` + ```xml + + + + + + + + + + ``` - By using these settings, any time you build the reference image you’ll be installing the most up-to-date Semi-Annual Channel version of Office 365 ProPlus. + By using these settings, any time you build the reference image you’ll be installing the most up-to-date Semi-Annual Channel version of Office 365 ProPlus. >[!TIP] >You can also use the web-based interface of the [Office Customization Tool](https://config.office.com/) to help you create your configuration.xml file. @@ -183,7 +183,7 @@ Download all three items in this list to the D:\\Downloads folder on MDT01. ![folder](../images/office-folder.png) - Assuming you have named the file "configuration.xml" as shown above, we will use the command "**setup.exe /configure configuration.xml**" when we create the application in MDT. This will perform the installation of Office 365 ProPlus using the configuration settings in the configuration.xml file. + Assuming you have named the file "configuration.xml" as shown above, we will use the command "**setup.exe /configure configuration.xml**" when we create the application in MDT. This will perform the installation of Office 365 ProPlus using the configuration settings in the configuration.xml file. Do not perform this step yet. >[!IMPORTANT] >After Office 365 ProPlus is installed on the reference image, do NOT open any Office programs. if you open an Office program, you are prompted to sign-in, which activates the installation of Office 365 ProPlus. Even if you don't sign in and you close the Sign in to set up Office dialog box, a temporary product key is installed. You don't want any kind of product key for Office 365 ProPlus installed as part of your reference image. @@ -198,18 +198,25 @@ Additional information If you need to add many applications, you can take advantage of the PowerShell support that MDT has. To start using PowerShell against the deployment share, you must first load the MDT PowerShell snap-in and then make the deployment share a PowerShell drive (PSDrive). -1. On MDT01, log on as **CONTOSO\\Administrator**. +On **MDT01**: + +1. Ensure you are signed in as **contoso\\Administrator**. 2. Import the snap-in and create the PSDrive by running the following commands in an elevated PowerShell prompt: ``` powershell Import-Module "C:\Program Files\Microsoft Deployment Toolkit\bin\MicrosoftDeploymentToolkit.psd1" New-PSDrive -Name "DS001" -PSProvider MDTProvider -Root "D:\MDTBuildLab" ``` +>[!TIP] +>Use "Get-Command -module MicrosoftDeploymentToolkit" to see a list of available cmdlets ### Create the install: Microsoft Office 365 Pro Plus - x64 In these steps we assume that you have downloaded the Office Deployment Tool. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to D:\\Downloads\\Office365. -1. On MDT01, log on as **CONTOSO\\Administrator**. + +On **MDT01**: + +1. Ensure you are signed on as **contoso\\Administrator**. 2. Create the application by running the following commands in an elevated PowerShell prompt: ``` powershell @@ -239,7 +246,10 @@ In these steps we assume that you have downloaded the Office Deployment Tool. Yo >We have abbreviated "Microsoft Visual C++ Redistributable" in the $ApplicationName below as "MSVC" to avoid the path name exceeding the maxiumum allowed length of 248 characters. In these steps we assume that you have downloaded Microsoft Visual C++ Redistributable 2019 - x86. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to D:\\Downloads. -1. On MDT01, log on as **CONTOSO\\Administrator**. + +On **MDT01**: + +1. Ensure you are signed on as **contoso\\Administrator**. 2. Create the application by running the following commands in an elevated PowerShell prompt: ``` powershell @@ -265,7 +275,10 @@ In these steps we assume that you have downloaded Microsoft Visual C++ Redistrib ### Create the install: Microsoft Visual C++ Redistributable 2019 - x64 In these steps we assume that you have downloaded Microsoft Visual C++ Redistributable 2019 - x64. You might need to modify the path to the source folder to reflect your current environment. In this example, the source path is set to D:\\Downloads. -1. On MDT01, log on as **CONTOSO\\Administrator**. + +On **MDT01**: + +1. Ensure you are signed on as **contoso\\Administrator**. 2. Create the application by running the following commands in an elevated PowerShell prompt: ``` powershell @@ -288,8 +301,10 @@ Because we use modern virtual platforms for creating our reference images, we do To create a Windows 10 reference image task sequence, the process is as follows: -1. Using the Deployment Workbench in the MDT Build Lab deployment share, right-click **Task Sequences**, and create a new folder named **Windows 10**. -2. Expand the **Task Sequences** node, right-click the new **Windows 10** folder and select **New Task Sequence**. Use the following settings for the New Task Sequence Wizard: +On **MDT01**: + +1. Using the Deployment Workbench, under **Deployment Shares > MDT Build Lab** right-click **Task Sequences**, and create a **New Folder** named **Windows 10**. +2. Right-click the new **Windows 10** folder and select **New Task Sequence**. Use the following settings for the New Task Sequence Wizard: 1. Task sequence ID: REFW10X64-001 2. Task sequence name: Windows 10 Enterprise x64 RTM Default Image 3. Task sequence comments: Reference Build @@ -305,17 +320,18 @@ To create a Windows 10 reference image task sequence, the process is as follows The steps below walk you through the process of editing the Windows 10 reference image task sequence to include the actions required to update the reference image with the latest updates from WSUS, install roles and features, and utilities, and install Microsoft Office365 ProPlus x64. -1. In the Task Sequences / Windows 10 folder, right-click the Windows 10 Enterprise x64 RTM Default Image task sequence, and select **Properties**. -2. On the **Task Sequence** tab, configure the Windows 10 Enterprise x64 RTM Default Image task sequence with the following settings: - 1. State Restore. Enable the Windows Update (Pre-Application Installation) action. - - **Note**: Enable an action by going to the Options tab and clearing the Disable this step check box. +On **MDT01**: + +1. In the **Task Sequences / Windows 10** folder, right-click the **Windows 10 Enterprise x64 RTM Default Image** task sequence, and select **Properties**. +2. On the **Task Sequence** tab, configure the Windows 10 Enterprise x64 RTM Default Image task sequence with the following settings: + 1. **State Restore > Windows Update (Pre-Application Installation)** action: Enable this action by clicking the **Options** tab and clearing the **Disable this step** check box. - 2. State Restore. Enable the Windows Update (Post-Application Installation) action. - 3. State Restore. After the **Tattoo** action, add a new **Group** action with the following setting: - - Name: Custom Tasks (Pre-Windows Update) - 4. State Restore. After Windows Update (Post-Application Installation) action, rename Custom Tasks to Custom Tasks (Post-Windows Update). - - **Note**: The reason for adding the applications after the Tattoo action but before running Windows Update is simply to save time during the deployment. This way we can add all applications that will upgrade some of the built-in components and avoid unnecessary updating. - 5. State Restore / Custom Tasks (Pre-Windows Update). Add a new Install Roles and Features action with the following settings: + 2. **State Restore > Windows Update (Post-Application Installation)** action: Also enable this action. + 3. **State Restore**: After the **Tattoo** action, add a new **Group** action (click **Add** then click **New Group**) with the following setting: + - Name: **Custom Tasks (Pre-Windows Update)** + 4. **State Restore**: After **Windows Update (Post-Application Installation)** action, rename **Custom Tasks** to **Custom Tasks (Post-Windows Update)**. + - **Note**: The reason for adding the applications after the Tattoo action but before running Windows Update is simply to save time during the deployment. This way we can add all applications that will upgrade some of the built-in components and avoid unnecessary updating. + 5. **State Restore > Custom Tasks (Pre-Windows Update)**: Add a new **Install Roles and Features** action with the following settings: 1. Name: Install - Microsoft NET Framework 3.5.1 2. Select the operating system for which roles are to be installed: Windows 10 3. Select the roles and features that should be installed: .NET Framework 3.5 (includes .NET 2.0 and 3.0) @@ -323,16 +339,19 @@ The steps below walk you through the process of editing the Windows 10 referenc >[!IMPORTANT] >This is probably the most important step when creating a reference image. Many applications need the .NET Framework, and we strongly recommend having it available in the image. The one thing that makes this different from other components is that .NET Framework 3.5.1 is not included in the WIM file. It is installed from the **Sources\\SxS** folder on the media, and that makes it more difficult to add after the image has been deployed. - ![figure 7](../images/fig8-cust-tasks.png) + ![task sequence](../images/fig8-cust-tasks.png) The task sequence after creating the Custom Tasks (Pre-Windows Update) group and adding the Install - Microsoft NET Framework 3.5.1 action. - 6. State Restore - Custom Tasks (Pre-Windows Update). After the **Install - Microsoft NET Framework 3.5.1** action, add a new **Install Application** action (selected from the **General** group) with the following settings: + 6. **State Restore > Custom Tasks (Pre-Windows Update)**: After the **Install - Microsoft NET Framework 3.5.1** action, add a new **Install Application** action (selected from the **General** group) with the following settings: 1. Name: Microsoft Visual C++ Redistributable 2019 - x86 2. Install a Single Application: browse to **Install - MSVC 2019 - x86** - 7. Repeat the previous steps (add a new **Install Application**) to add Microsoft Visual C++ Redistributable 2019 - x64 as well. + 7. Repeat these steps (add a new **Install Application**) to add Microsoft Visual C++ Redistributable 2019 - x64 and Office 365 ProPlus as well. 3. Click **OK**. + ![apps](../images/mdt-apps.png) + + ### Optional configuration: Add a suspend action The goal when creating a reference image is of course to automate everything. But sometimes you have a special configuration or application setup that is too time-consuming to automate. If you need to do some manual configuration, you can add a little-known feature called Lite Touch Installation (LTI) Suspend. If you add the LTISuspend.wsf script as a custom action in the task sequence, it will suspend the task sequence until you click the Resume Task Sequence shortcut icon on the desktop. In addition to using the LTI Suspend feature for manual configuration or installation, you can also use it simply for verifying a reference image before you allow the task sequence to continue and use Sysprep and capture the virtual machine. @@ -347,13 +366,6 @@ The goal when creating a reference image is of course to automate everything. Bu ### Edit the Unattend.xml file for Windows 10 Enterprise ->[!IMPORTANT] ->The current version of MDT (8456) has a known issue generating a catalog file for Windows 10, version 1903 X64 install.wim. You might see the error "Could not load file or assembly" in logs. As a temporary workaround: ->- Close the Deployment Workbench and install the [WSIM 1903 update](https://go.microsoft.com/fwlink/?linkid=2095334). This will update both files to version 10.0.18362.144. ->- Manually run imgmgr.exe (C:\Program Files (x86)\\Windows Kits\\10\\Assessment and Deployment Kit\\Deployment Tools\\WSIM\\imgmgr.exe). ->- Generate a catalog (Tools/Create Catalog) for the selected install.wim (ex: D:\\MDTBuildLab\\Operating Systems\\W10EX64RTM\\sources\\install.wim). ->- After manually creating the catalog file (ex: D:\\MDTBuildLab\\Operating Systems\\W10EX64RTM\\sources\\install_Windows 10 Enterprise.clg), open the Deployment Workbench and proceed to edit unattend.xml. - When using MDT, you don't need to edit the Unattend.xml file very often because most configurations are taken care of by MDT. However if, for example, you want to configure Internet Explorer behavior, then you can edit the Unattend.xml for this. Editing the Unattend.xml for basic Internet Explorer settings is easy, but for more advanced settings, you will want to use the Internet Explorer Administration Kit (IEAK). >[!WARNING] @@ -364,13 +376,23 @@ When using MDT, you don't need to edit the Unattend.xml file very often because Follow these steps to configure Internet Explorer settings in Unattend.xml for the Windows 10 Enterprise x64 RTM Default Image task sequence: -1. Using the Deployment Workbench, right-click the **Windows 10 Enterprise x64 RTM Default Image** task sequence and select **Properties**. -2. In the **OS Info** tab, click **Edit Unattend.xml**. MDT now generates a catalog file. This will take a few minutes, and then Windows System Image Manager (Windows SIM) will start. +On **MDT01**: + +1. Using the Deployment Workbench, under **Deployment Shares > MDT Build Lab > Task Sequences** right-click the **Windows 10 Enterprise x64 RTM Default Image** task sequence and select **Properties**. +2. In the **OS Info** tab, click **Edit Unattend.xml**. MDT now generates a catalog file. This will take a few minutes, and then Windows System Image Manager (Windows SIM) will start. + + >[!IMPORTANT] + >The current version of MDT (8456) has a known issue generating a catalog file for Windows 10, version 1903 or 1909 X64 install.wim. You might see the error "Could not load file or assembly" in in the console output. As a temporary workaround: + >- Close the Deployment Workbench and install the [WSIM 1903 update](https://go.microsoft.com/fwlink/?linkid=2095334). This will update imagecat.exe and imgmgr.exe to version 10.0.18362.144. + >- Manually run imgmgr.exe (C:\Program Files (x86)\\Windows Kits\\10\\Assessment and Deployment Kit\\Deployment Tools\\WSIM\\imgmgr.exe). + >- Generate a catalog (Tools/Create Catalog) for the selected install.wim (ex: D:\\MDTBuildLab\\Operating Systems\\W10EX64RTM\\sources\\install.wim). + >- After manually creating the catalog file (ex: D:\\MDTBuildLab\\Operating Systems\\W10EX64RTM\\sources\\install_Windows 10 Enterprise.clg), open the Deployment Workbench and proceed to edit unattend.xml. + 3. In Windows SIM, expand the **4 specialize** node in the **Answer File** pane and select the amd64\_Microsoft-Windows-IE-InternetExplorer\_neutral entry. 4. In the **amd64\_Microsoft-Windows-IE-InternetExplorer\_neutral properties** window (right-hand window), set the following values: - DisableDevTools: true 5. Save the Unattend.xml file, and close Windows SIM. - - Note: If errors are reported that certain display values are incorrect, you can ignore this or browse to **7oobeSystem\\amd64_Microsoft-Windows-Shell-Setup__neutral\\Display** and enter the following: ColorDepth 32, HorizontalResolution 1, RefreshRate 60, VerticalResolution 1. + - Note: If errors are reported that certain display values are incorrect, you can ignore this or browse to **7oobeSystem\\amd64_Microsoft-Windows-Shell-Setup__neutral\\Display** and enter the following: ColorDepth 32, HorizontalResolution 1, RefreshRate 60, VerticalResolution 1. 6. On the Windows 10 Enterprise x64 RTM Default Image Properties, click **OK**. ![figure 10](../images/fig10-unattend.png) @@ -383,11 +405,14 @@ Understanding rules is critical to successfully using MDT. Rules are configured ### MDT deployment share rules overview -In MDT, there are always two rule files: the CustomSettings.ini file and the Bootstrap.ini file. You can add almost any rule to either. However, the Bootstrap.ini file is copied from the Control folder to the boot image, so the boot image needs to be updated every time you change that file. For this reason, add only a minimal set of rules to Bootstrap.ini, such as which deployment server and share to connect to - the DEPLOYROOT value. Put the other rules in CustomSettings.ini because that file is updated immediately when you click OK. +In MDT, there are always two rule files: the **CustomSettings.ini** file and the **Bootstrap.ini** file. You can add almost any rule to either. However, the Bootstrap.ini file is copied from the Control folder to the boot image, so the boot image needs to be updated every time you change that file. For this reason, add only a minimal set of rules to Bootstrap.ini, such as which deployment server and share to connect to - the DEPLOYROOT value. Put the other rules in CustomSettings.ini because that file is updated immediately when you click OK. To configure the rules for the MDT Build Lab deployment share: + +On **MDT01**: + 1. Using the Deployment Workbench, right-click the **MDT Build Lab** deployment share and select **Properties**. -2. Select the **Rules** tab and replace the existing content with the following information: +2. Select the **Rules** tab and replace the existing content with the following information: (edit the settings as needed to match your deployment) ``` [Settings] Priority=Default @@ -397,7 +422,7 @@ To configure the rules for the MDT Build Lab deployment share: UserDataLocation=NONE DoCapture=YES OSInstall=Y - AdminPassword=pass@word3 + AdminPassword=pass@word1 TimeZoneName=Pacific Standard Time JoinWorkgroup=WORKGROUP HideShell=YES @@ -422,7 +447,7 @@ To configure the rules for the MDT Build Lab deployment share: SkipFinalSummary=YES ``` - ![figure 11](../images/mdt-08-fig14.png) + ![figure 11](../images/mdt-rules.png) The server-side rules for the MDT Build Lab deployment share. @@ -436,7 +461,7 @@ To configure the rules for the MDT Build Lab deployment share: DeployRoot=\\MDT01\MDTBuildLab$ UserDomain=CONTOSO UserID=MDT_BA - UserPassword=pass@word3 + UserPassword=pass@word1 SkipBDDWelcome=YES ``` @@ -444,15 +469,15 @@ To configure the rules for the MDT Build Lab deployment share: >[!NOTE] >For security reasons, you normally don't add the password to the Bootstrap.ini file; however, because this deployment share is for creating reference image builds only, and should not be published to the production network, it is acceptable to do so in this situation. Obviously if you are not using the same password (pass@word3) that is provided in this lab, you must enter your own custom password on the Rules tab and in Bootstrap.ini. -4. In the **Windows PE** tab, in the **Platform** drop-down list, select **x86**. -5. In the **Lite Touch Boot Image Settings** area, configure the following settings: - 1. Image description: MDT Build Lab x86 - 2. ISO file name: MDT Build Lab x86.iso -6. In the **Windows PE** tab, in the **Platform** drop-down list, select **x64**. -7. In the **Lite Touch Boot Image Settings** area, configure the following settings: - 1. Image description: MDT Build Lab x64 - 2. ISO file name: MDT Build Lab x64.iso -8. Click **OK**. +4. On the **Windows PE** tab, in the **Platform** drop-down list, select **x86**. +5. In the **Lite Touch Boot Image Settings** area, configure the following settings: + 1. Image description: MDT Build Lab x86 + 2. ISO file name: MDT Build Lab x86.iso +6. On the **Windows PE** tab, in the **Platform** drop-down list, select **x64**. +7. In the **Lite Touch Boot Image Settings** area, configure the following settings: + 1. Image description: MDT Build Lab x64 + 2. ISO file name: MDT Build Lab x64.iso +8. Click **OK**. >[!NOTE] >In MDT, the x86 boot image can deploy both x86 and x64 operating systems (except on computers based on Unified Extensible Firmware Interface). @@ -489,7 +514,7 @@ Priority=Default DeployRoot=\\MDT01\MDTBuildLab$ UserDomain=CONTOSO UserID=MDT_BA -UserPassword=pass@word3 +UserPassword=pass@word1 SkipBDDWelcome=YES ``` @@ -518,7 +543,7 @@ _SMSTSORGNAME=Contoso UserDataLocation=NONE DoCapture=YES OSInstall=Y -AdminPassword=pass@word3 +AdminPassword=pass@word1 TimeZoneName=Pacific Standard Time JoinWorkgroup=WORKGROUP HideShell=YES @@ -579,25 +604,29 @@ As previously described, this section requires a Hyper-V host. See [Hyper-V requ Once you have created your task sequence, you are ready to create the Windows 10 reference image. This will be performed by launching the task sequence from a virtual machine which will then automatically perform the reference image creation and capture process. -The steps below outline the process used to boot a virtual machine using an ISO boot image created by MDT, and then execute the reference image task sequence image to create and capture the Windows 10 reference image. +The steps below outline the process used to boot a virtual machine using an ISO boot image created by MDT, and then run the reference image task sequence image to create and capture the Windows 10 reference image. -1. Copy D:\\MDTBuildLab\\Boot\\LiteTouchPE_x86.iso on MDT01 to C:\\ISO on a Hyper-V host. +1. Copy D:\\MDTBuildLab\\Boot\\MDT Build Lab x86.iso on MDT01 to C:\\ISO on your Hyper-V host (HV01). **Note**: Remember, in MDT you can use the x86 boot image to deploy both x86 and x64 operating system images. That's why you can use the x86 boot image instead of the x64 boot image. -2. Create a virtual machine with the following settings: +2. **On HV01**: Create a new virtual machine with the following settings: 1. Name: REFW10X64-001 2. Generation 1 3. Memory: 1024 MB 4. Network: Must be able to connect to \\MDT01\MDTBuildLab$ 5. Location: C:\VM 6. Hard disk: 60 GB (dynamic disk) - 7. Install OS with image file: C:\\ISO\\LiteTouchPE_x86.iso -3. Add a checkpoint for the REFW10X64-001 virtual machine, and name it **Clean with MDT Build Lab x86 ISO**. + 7. Install OS with image file: C:\\ISO\\MDT Build Lab x86.iso +3. Before you start the VM, add a checkpoint for REFW10X64-001, and name it **Clean with MDT Build Lab x86 ISO**. **Note**: Checkpoints are useful if you need to restart the process and want to make sure you can start clean. -4. Start the REFW10X64-001 virtual machine and connect to it. After booting into Windows PE, complete the Windows Deployment Wizard with the following settings: +4. Start the REFW10X64-001 virtual machine and connect to it. + + **Note**: Up to this point we have not discussed IP addressing or DHCP. In the initial setup for this guide, DC01 was provisioned as a DHCP server to provide IP address leases to client computers. You might have a different DHCP server on your network that can be used. The REFW10X64-001 virtual machine requires an IP address lease that provides it with connectivity to MDT01 so that it can connect to the \\MDT01\MDTBuildLab$ share. + + After booting into Windows PE, complete the Windows Deployment Wizard with the following settings: 1. Select a task sequence to execute on this computer: Windows 10 Enterprise x64 RTM Default Image 2. Specify whether to capture an image: Capture an image of this reference computer - Location: \\\\MDT01\\MDTBuildLab$\\Captures diff --git a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md index 211b916ace..d390c86c17 100644 --- a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md +++ b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md @@ -21,7 +21,7 @@ ms.topic: article **Applies to** - Windows 10 -This topic will walk you through the steps necessary to create the server structure required to deploy the Windows 10 operating system using the Microsoft Deployment Toolkit (MDT). It covers the installation of the necessary system prerequisites, the creation of shared folders and service accounts, and the configuration of security permissions in the file system and in Active Directory. +This topic will walk you through the steps necessary to prepare your network and server infrastructure to deploy the Windows 10 operating system using the Microsoft Deployment Toolkit (MDT). It covers the installation of the necessary system prerequisites, the creation of shared folders and service accounts, and the configuration of security permissions in the file system and in Active Directory. ## Infrastructure @@ -52,7 +52,7 @@ Several client computers are referenced in this guide with hostnames of PC0001 t ### Storage requirements -MDT01 and HV01 should have a data drive (D:) that can support up to 200 GB of data. The system drives on all computers (C:) can be 50 GB in size, but 100 GB is recommended. You can also use a computer with a single, system drive as long as it has at least 200 GB of available storage space. You will need to adjust come procedures in this guide to specify the C: drive instead of the D: drive. +MDT01 and HV01 should have the ability to store up to 200 GB of data. You can use a computer with a single, system partition but you will need to adjust come procedures in this guide to specify the C: drive instead of the D: drive. ### Hyper-V requirements @@ -214,7 +214,7 @@ Alternatively, CMTrace formatting makes the logs much easier to read. See the sa ![figure 9](../images/mdt-05-fig10.png) -After installing the ConfigMgrTools.msi file, search for **cmtrace** and pin the tool to your taskbar for easy access. +After installing the ConfigMgrTools.msi file, you can search for **cmtrace** and pin the tool to your taskbar for easy access. ## Next steps @@ -225,10 +225,6 @@ When you have completed all the steps in this section to prepare for deployment, **Sample files** The following sample files are also available to help automate some MDT deployment tasks. This guide does not use these files, but they are made available here so that you can see how some tasks can be automated with Windows PowerShell. -- [Gather.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619361). This sample Windows PowerShell script performs the MDT Gather process in a simulated MDT environment. This allows you to test the MDT gather process and check to see if it is working correctly without performing a full Windows deployment. -- [Set-OUPermissions.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619362). This sample Windows PowerShell script creates a domain account and then configures OU permissions to allow the account to join machines to the domain in the specified OU. -- [MDTSample.zip](https://go.microsoft.com/fwlink/p/?LinkId=619363). This sample web service shows you how to configure a computer name dynamically using MDT. - -## Related topics - -[Get started with MDT](get-started-with-the-microsoft-deployment-toolkit.md) \ No newline at end of file +- [Gather.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619361). This sample Windows PowerShell script performs the MDT Gather process in a simulated MDT environment. This allows you to test the MDT gather process and check to see if it is working correctly without performing a full Windows deployment. +- [Set-OUPermissions.ps1](https://go.microsoft.com/fwlink/p/?LinkId=619362). This sample Windows PowerShell script creates a domain account and then configures OU permissions to allow the account to join machines to the domain in the specified OU. +- [MDTSample.zip](https://go.microsoft.com/fwlink/p/?LinkId=619363). This sample web service shows you how to configure a computer name dynamically using MDT. \ No newline at end of file diff --git a/windows/deployment/images/fig8-cust-tasks.png b/windows/deployment/images/fig8-cust-tasks.png index 378215ee2b010510d2db2a24e3891124c8a4bc58..3ab40d730a6a6d2adb6c84f8cf6f17758511ed22 100644 GIT binary patch literal 57509 zcmd3NcT^Ky_ig}b(kuu{M?gfX(z}X?h=7RnE)rTo?;TN45u#M-DAG$JCG@UD=~4rs zS1F-N0))UF^nJfqzh7N<-9N4?EQc_2=FBngc6x;CE`5J4Wsx5Pj?M z4++XS?=c88C8vJt#zP0w?>!F4rrBm+rzV*G7qPCdzUeMa;dJo#o}re7C>02ji5>t`!zoIMn#>`%0y!6%+-muN7I?+87j{ zfBF9M&yU|}tCYVF&-|x{515cg>#(2~IrhoNpQY2Ox~Gu_S^;nV{(}Azq+dew_~W7d z|MXC#1@}3US<|6K>gVVZ^%=xfd{0USVP?1tWyz+JI`%QOxkt9d+?TjBthp?LQ1tos zHcE6E(Rht@fvzm*!Lz{4h_&|Y+of98yCex^_ z-;$j03{NSlCGC(nSOgRGFd@vrZ<}D@?;ZrUFS{T zmhL*^W&b>ndl7^xay!nNm(nB5m(0A38K7(_(rAvMii2!>(Xj#N;~h|}cE7JkZ`V4t znA#QrZK{x?p8Zhw(WaI33&@;bQKx(6aY~c+R`$gs@<*wDBG>MqYotMjKB69>*dd}7 zx-BxP!5hxdz%{>rEjE$x08LR@E%(YHO-(mQMye5^nAUK9xJ)Po*miR!$0`oy^68~k zuM_>H#m(H~2~|P<9Tqv2FG1}+uMMU}+xSg9X=9R5KI$57Pj0hNb_6Yq7AiRAucU>p zc-)?p6%eO`SDc%^8)GrhP_+(9)_dEt9a)p{A?R7vv}D1I$~)r7wa`4K{aqsdOZZ0(T0;ezT^a9w?1X!=_7NTYcMnUgbb^w4tZ;$JIguEP`HU|WqWLCL zu#yb-W0Z3kbNQS0hWm#=>8f$O-$U&!wd2+vpTCi>r2YtVH=5hrqm(_JOYqC{{%5hd z^54Mir5HmeE`A)SLnko#m0S3!K6Yfq3@#2+(8N8iCU07;$I&Xct3ZC=Q~B{Mc>i+M zLof@aXF{W%LOsN~>cg$6;qWYTRkXfCq3#)`z>gPT; z!i{spi^PR}qxy6wiy4Pp8_B@%hl(%Zc(G^=PIJ_ib*tp6qA~xE2TEOoJc*4jnX$}U z*Ev1+Q;$vaN3S~#X8Kc(mJ4a_)elmsygNa3y)o9*b|*F-EU~RxOLbxSH*7IdMY>-v zyBlhGqlchZo~;n)-oh<-4YYJQ;@mL;h-Q~Twz zHw>LEgf)GNHLy&JEi3CU?u;l^;sWohM`v&T2(p)#jJ8LM%qNcY4CW85U(x(nf5u?O zacP)eKzVy#vi{Py#lc06I4nM#_<%#Hj_9s+Jmq-u@=XKh#Tlt;PITLgu5>gdQz_|l z?$yuC5!YvDmSe#k)a9oc@A7+*TxOljMm0p4bZCS38D)lEUDK1LHXNG5$U=1mOxO8Q z*RYN~WKM7Mi?RGz(S#(lirM$F584HR6-BoMmyXJ{b`Fb%W$Cx!p1U{o?&?wvL)S(Z zbri@~Dh_sj&Ru;%bB~XZEyo@3wCDb~eG(n&+FrbsNxgRD&YgaV)ynehzoxv$sS-^y zMr=YVhc5Gx4^p4*V%#|fZnD|7m%e(wd;7o z+SOM?)>umL?kG2LH{nf|mBcjz4rJrQ9H|+u;5|XB82FRRY4ke!!)3GB{7OLgJ8;nr|P|@T8lNeQjYPTfgszo!+*OCGd<<(IINrWMvgByi%lW$~B9}a>(pcn1 z^;PW!Y_FJq&eL`?%`U!??d~}*`ubOhv#;Sli~N6h2&2Wo8xQ4v1u@Nj_Iv2RLudN`^`U;y;ojnsqQ{zK z=Fgc<0HIfq43u9F#Pj3Pmuxl$tW0`LMc(Jv>y)f7j#uO5e@?(7);|<$x_j}wXD;q` zBuyyHjGt2!RmmUnD1xf)qilvR)M3P`CK>lpUqNsZN`3eeWB|U^_hQ|zD8ll zZAttunxPntr$>_LFr{l<@fnqC0P7EFwQcTuSs?1Ko)_6OG?FYWo$K6R7NhMSIDHEf zpnqCAV!#&o;-zMpRriMoCwy5eTJw@F>e-sQhQ$$|2xz!bY!lh|Q1GuY$j z$>?9MA{*x#OWj<2MjE*flOr3!TDLp&14b!&lc|uxk4e)DON-8BK1z`7yzl?kOm&w^ zx#-oDY`Hqb%9|(DG<1S7$a9x>@A=)mfs1YJ_1Z7X2Dk${NcUbE$p`g8Bm-SzhtZ9k zGk6AYMRvN91*>*rqMP`{Q|M1Vh}wi$VuYDbRo#%`x?;q^g_r}`3w|ivvX2fnopD@| z5rNHB?d&43w!VXY8!)cs>GcM*ZArg=nCSO@F^|)U)3JA=c*c^yBkEl z#=weWPb&ptR$LzPnxB;@99`isZvEJjuGLkPgU9Kx6#{-m@aVo zY{RXT!C255#A4AdIGAf>gmy|BiH_pb)wdXmvEC1ispE8*&Xy@%*ZgI*er)R(AhyG^ z4!Z)O`t(obKI4^hVvRJ@^cV9LlptYOBa~m8es(*FRW%Q88!cH{jBZwlKf~U^1b$ zw|#4yy-GM?N#~O=Olxpu;K3V*7pRSjl=e=k#5cXiY;imbu%2Q^{QaR0CD7!ungc!J zE@I%S63C=o{`owwOu|C`J@kZp`~-g&eq`b#9+fb=uOHLA#gaIooU}3RpMNlMr`7H! z2rzZI2*vdY1BBwDaXFs)@5$an>tBMbr%_>!Z>K35_8(nL5~AMw;x7+WPn*sHA-jzW z`{}TLxnJfkS&^aiD-c~qRUP0nP->ThNQ+cCW(UBB(0uCGoq&`5#cut}t8&nu{+Iiv zRQU_1_Q`Aif1TcYvjr!=UT5v)@o3k|U zhb_zvQ$?*cEQ1zCMqfFy@RiE@-_^Q~@Jku= zK^vc8;MuM|<@&?^g(DnBusOJA4Ib!mxGYO!QRTudFV*xE`&kTF`6V0I;j4Znmj3?! z@`jeIebZ(_h%|ZR^V=q$s%P`@x|muP5TPGdax1f#?t6DOMuV&%J6f6e2=V40l~^B&`? zC$~2Gn>!uGjJE2Qr>EgbOjZ-#Is!V@3bTRH5#P$zxn)%oQnEN$CrSHe`ZgsLq?VZ$ z-FH8l)_wk%@(r0;z|CYCxVI%wf{=7+-3f4mkNhxKGn4*UV(mRu(ikK?LF~F$_jw23 zfUjRggMf$+Zl%?yz#XLziVq}GY!$~kE@aj*)0ZU8n(WAw{k3}i=Zk?o28NxtG`ju1 z_3q(!HDw14Q)&X~aB0-6ThX`4gR1K3@YaP5I_bBtU~zYa-EAhnyROO6noe}a_HUyT zy&qKea3YuJQ+kGHgriAvS&-z9KBKj5D_8dB%*&SQqn8p%c9)zJtytSexBblR(-6)U zgw_lLS0>CPam^c8ErlzPjFIyX2_gZO6k&RVpvny>p0e=J{c$V%D~(hMw!1U%tdQ5a z4Bn^@LKYFGa?G#%xB>=gc@Z~8LdTxq+S`+51w!gQ$DZJu!Be+W!%$uNHHtRJp~{?z z8TI{>I|Jr5z32sgQ4*(6DBZZ(K^JV&(rI^Bx^>btwOx}-O7V_hwVV#B`*Wc@r6X~u zLc5~~DMJo*JvpYQkY-TAnbR-5#2}@CNF&8hnyl<*gDg%lAJD|&B1IeCva?QUA&Qlm zSzZaFOPs6N%bZAjrjUxekE|*qV?iHHHllW=ip4%Qm3Qm5{MdXTr-)hGvdi%8p_@Z7 zfSXuA4PMvi``1n*DyRV$B^s$=?Xg__3~Cq`o+uu;>ks<6u?D=jVffOjvk`c7Fl}R+UOBQtJ zz-{N=z7*ytv1^fG2}fBWO++C<~I6 z>II}Bg~yXl;tYhIGYm;X6nGuR1(wTl;MeIN3N3pSRXQS(hfiz=Z zg}m8@7oTMdI8p|VGbC5U>dBg*^w68dRrEv0UL^5z_EotZ(`Ko3u8~2O0yR&OM(+lz z(AJho>9IrUD;tO5Y)5snkF`Z2lq|5pt)V$=&TF1(d0$mbM7ITAxTN8 z@H8SED+B*PUxE0*;8A6xlUcHcf zxES49eGuMsb&R3+bf`>GCIAVl!rEdbzQsPz9{&7F3V}-HPRvM!GE}=YC^^@YcJO37 zk4sm)d}r3n!H&lk4@55zi-d?ZPyhnS2Irx}vd7$L$k%D&cJr@(ohYiObovY@9sP-O8+`^-#U>(^K(dONRfn>RR^y1cj>azz#4i`d%(jtuC^B!jKQ5@#P7B<>eh8m z`;}hppAp@ZE$b}62O4*VOsp>qk{hlBhVUadnF($}i#^0T^8CsDLgQTvVgmVM#*t~o zQFVs5Z?p8lkaJQ-<*6-`;Q3i8_LL`l&aNWSReQUO4xaANy6MVJ3#%h|P)AGBm5vHU z&Hhr(`8T*$i=@d?3(K1sFU#f&X6f48BF{h^pAUA=pIyG>`C7@fWOR3187BH*a5Lj5 zRSN?dP!Z}dyz3cfgf&&tQ+&woNOT+@I9fB@H(ru~!aa`;%ajRaK(IWEv}Rr}!#3?^ z?tja=zWvpK`cBQjC#T^VCM(wKNl*L(H2H?rZW8GtZl>F*ru$yn^l6us$({BJ6@%FE5l26?k0b!jQs07ObA0ThdBYcW z%;bMDAwhJ|c9(S6PBN4|orNncoEox%@Cg2Qc6;e z9LX^jJ?txM9!w^zo}XTMiHu*{)38`pY7>h5NpiQBO00j3wMYrwZN;R9LH&;WyMi`J zAClF4?k7PnH6dl5ITb1Pd^WkQyfdH+VEqzAH2hcSIc6v180Wf83eA3vRsM{CYyXjF z5&E(<0C0cg3_jQd)(xP2$1J$teT_{#+U8X^d;f7-tSEgrwy2Z{L`IKS?*NTIPp9Gs zg3hAO=MBIXcQ_BHIl(A$A7g7;fJ@e=hEriCm_y`6-5f2G^8=YKMF=FY3($IR^0Px4)38GRL)#1G!^1P)~I&Mu&GXsnGLZ|boK zp-wBT2szq!9-GzGWvqDhi|GemxCl9m6mZD@$?$Rr*KVONL39TmME*>n@ixy9^=b&> za%F=<=V0*{kyr2Yl3xDvCj)Vef%3Tk&+XIJ>530zNnF?_18{*#Z~C?~#MaH~QK_}d z_}q6&TOabse`Shm9jB~nc_6@wGj|2z#|=qZHd|(C4|6?kvZVvQ0V*E6cWI$eCUUk+dmhE2Q2*6H8H-^O5artpI zq}a<-^3=R%5&3}^TX2t9`R^SsIw0mI8=wzgWK@ffa#AAQGok5;UoEzlRKL$OrbgF6#=eOt8eu1Bxb}W$Tj_8W5 z-6>!9KS(ud99hquM=NC0D|>C&#ZL?u>)XCeCOeH}#*kvFt%1#u1#+Hj-zQisR3uv;&>)xmu5T3Jw z*{-AxMZO1f0nd{HEd7r>04I01DKN_NyB=LENac-ChFig^EJ)oi4cK>>&ZWZKE*=BU zs|?BngzWyR&i0sl&t9Cl?3b=*w%k>tN*>z|l4YsgcWk%nHb+$ki^?ZOa|Y)hZ`so( z2EI&wM}>)m9^)>HntQgIaukuIL5CL3ijU~akwN;4h^XY!M(7JmLqF89W>oS zo-tY=*bC;`UG3Ig=&dLO69!&#}1sc6F)_ZR@y4zSsj|83 zaRt{R13tBQSsUwV^O8K=AW7;;x$2?R zbs5jJ95uU+FX^5byPD6ZtW509t>itK(ONfHC&r2sqCrK|;~mc7#1&2!b|lHrAdHzI zg}^ZzfyoQ} z1R&FNuJs#L5}2DDrIb(%|9ggVUaN*1mSSR+6MltdMLiUctp#3CK!vWpyIf$=)zv9A z#j{GVRuUp*pqv9Ghp9}R4tZ0T@I@7kn_6rk+bvK^Jak%?Ps=z=iDV9Or+URdzM|Wl zJHS^L&JFK#Ov*2eODy}~?&=QJUbbqDM6g$o&wB+lF3Ek_lqiX|Uhy3pw7na6y`P=# zG%|kS9J0SQ>Q$lpVz=y6xTKwh_naJO*!w&sN$rk1V-P7YH_6S@ulHn5=h<;RIaeg~ zrb8T)6tvw`{ivC~Y}DjC{N9+Pzrv5gZqca1zE8fEZEQ^`@(FX#8o#Yj%~o^{=xyEi zJ-1RYb89|(x^$8;8j%--2yPs)j`F;-9ZQtZijyAu$YAG3du-*zYh~j(XBpT%U(>DF z@G+|H6jmFTVYvx&qo*Ff%xp1ITKr~df)l1KoTq8E_R)k)b`-fJTO`9|m?!3GVh^Bx z!k%VX*213gKG0wHg0RaEaCgBOZHtsLmo@<*B_2oUlv33x8w?;`?+dR^syl!4ahsg^ z?I)7s)N@Y*5>Q#q$Ox6;jG(0!b@oa>&2S<%(Kv4FoNep;&JH|YX!45)&)52dq?&!d zrGrS|M)tBb9CGHu4fM_h)+X#RGNna)FU6fWdw=*GJDHAaWtutz5D5!}nJ^zUUec@A z^*+(%-qZ;cWdD@X)1(Itgu$$C2pN^l*PDYqTRdM2dfv|>*HIBr@(7#{R&v1pB;2OH zM6asqW62rOD<~(8gNm>uIsVP84SLTwxqbvSDeJ-Kuu*IDt}=yaj{;W_0=wB@Dmv_VppsNtPx@ z1oT<%)shJ!w9!C-nTb~{P3eT1#K~7@JM#mJ_L4_{tB&;*ou6b;a{@`T6r+yOOyC2KS*s*k$(&d#;)LyK33e~RJZrKdhv^! zl3QqV2+gq~7j+Tv9tzDk94_9n2|2-e4ylo8_7o~u5BX5_l=s;xsQuh^vJdavVU595 z7-RA~J@cV*$Dw9zce&kxin1=EoKbS|*fY7dd;m(WsOqaWqW}bWT5vt|N@iu@&}t2J zzsfUo7=g#LOK)=F=~6J$z)y<36fo!Dwd%!yyL{yJOG5Z}DF%f`^Bz()6yvQDR*eGn z;n)Wpn!dUNss9iPMbiIOQ0WlmGYYl}q$;b`PF5K%N#4=5Eszlat*b%UgV=kr~In; z91rFX10yjWGw-tKORegQp1#iu`iJ+WZ~pWxzm2B_Mhd)4jshqFc1(8~P?u|Eq;u|J zehu@dg&s2=8LI~X5U&70Y)Bfx!5rX2WQj-=XS zBS!8I1fBV1AeSB3j-5F z@X3&fnEaIu^T2Oo_4^awn&tR`c>ELf)EHpqJjVgJ1*d(`nfC2a29ZVvRnT)=c}EK| z0kzHcPX@0GxZ{fW4LF$;<%lnC818>`>!Nd7QWK6QxAdLc2kg^0Vp;0CR{MDct5!%d ztFsd0JV8y~cD8gUYnEF86<%8&5!BvR%)u~esQfbdJ&p}o8J!X)2-MVyc~=1rls)?` zjjb7%eE*bm@wJVL@AnCnO*5J^(pJz)6rPUutv*-!L7vc+yhR+Q^ z6TSFur?ZCnRk<5mUV;tgHOa=Ug)yls!_h&V_?_?zx3Jp#CLIa#h8NI`0}{t%m>)ec z(Qt+qJw(WA@uDt|M9|f{v;!nKXF1HCd-#Uk+4F*L>0JAaR!sME6m;z^8*ul(Fn8Ra z@Z9|>1DCLfAEH~$UA@zv9mFW9+C_oH+8VY>TKPk?X)$JfcT#n>y*CYJC8%0gl(mA+ z(u6F&E6#_Qsc|xXUVrGUr?2HdffLAcOp~T)ZIIVpjz~Ck-LmLpdvz9>D}1~I&Hqc6 z(_YuDcz8Gi*?gBW&syQhg5qE(>w84vt;0HnjGvyZB7RsEaW!61)6pHcXNh^TvsrOW zEZJ_OImWjcFe~7|Ot7%<^J4lUwcO#TXRK}+Gxz?r11?hxmvfEwSN+iizecb_v;o8i2( z$;ZYu_>}_aJ>C){>nvTfYIGvM;hyE7e)R^JX);2LTM>M?o${?O;#dLOl^!{XYsAI%4;abia^aeNOiqzid z;0!7HpdqR<8EK-id~OhqFdI0Jz_vW}kAy$_)ZBNLz)}O9v{m99_ZsHA!@Qiel7o!( zIFr-Cieokx)dQ>RRNoZ|*p-tIeP_R<;UIKuxztDtzoqQs(Bm9|#oHuC10LZk~Ps`4udGOOoa%3W6#U!@XA?gP}u zJlB2;H;N?vjqZ5}$tPou!wM>_Chxok+b#7 zf`Z}<(C`q4&(V5s2bE^8=W;M}o!i%0Ol;dZseJODy}*^>mNS_apc0h^o$)>yt45QQ zu^``!)zx0tQr?5nmI2;IFid#rr=)ZJs zvY9dD{HFm)3-l7IUu5OCi)F@#qj|hrp7QT;!*@7b44E`GmzPU3}%Ra?yT;hz_|i?A~K2^25rgEn1{pyKg@=puvg%@=G4LcRW{CLc@o)GryA2 zdd!z9Iq$VpGAF|@oTpmJ_SMTTmvze`unt}(PUKWg34Gj?A5%|E7bBveLhAW_o0Ksu zh@t_dOwEJ~4}1BPV~Q*<$wl+g$~8(%O2yACZf&o4*^GpRHAvKta~_5`pEq}or71#1 zZAD_(1%!v&o8NV#5_8#mI+379Ijb!)CZZn(f=7tkIS3NR3Uhp{l2*b?=udMHPU7aD|im1y>C!FV>0yS6uo13T#Re^e7KE zIy-t6gmU#xX?obh54(yAEXdeEf%&S*)crCbFO9j5Ny}5g@D+X77 z7O-nI>8ZoyKDawQth_&_c)FAUz!Z=M9QOhJBw+V`*P)_v?>Z?C&|?-kf`dWh0AqL@ z&9N^KruJUh6&Jdn)qReUXH8MfsX$ou8%!tos6O|AXQ+7oXKX~pc(-51^l3%8`@2O5&b)0aIO&L`3 zAG&>~ql^&Yl#pv?WZedcSy(_RJC-IJfZSFs1iQW1Lum~*S+DGZI4hZSJX(+zr|Uctu4h6(Irs~PG^SFsN| zrtiN!0?GdnozfnNF)eKriq>3M1_Dyq4D|jg%=!Yg<*2aoo9xTiSl6srJMKO9ZFkR* z=}dw;O#Zg$mms-oq!?h|Q)&nMPKQX=`R{chf{7|TEmA*P^4mD?+;-J729*olFsdhD z=n;jS>KtC;^WQcH^?*FU`JWVHjS3SxVJjbwJy~uQA}Q22#oi3$0rmgf36MSc2R~Y) zo=}E`Rs;2gG@C#vE>;b72|Mc-)T%nfe`HxjU{2nw7Yr7=)7+cr9D5tqzIZB8sOkj% zb4tCMI0h=W*{ef2f-u*=sq?V$pNyo(2b}UgZ{(ko75T*hdfavUXY)plsLE5UV)97P zj){fj!m|Ej=G!_0_f&yAG!>!^IU)B?f;dvU4-a96g|#f|2rN}fkxgBnC*(_1T4x8 zre#sRKq2n){^b_7c9OMa0$}$?Ri2It#_XqvpSTp<6hH7lbTxpk_hZrZmmdPu&_4{! z%+lY}X0UF3(_Ihf27j6{?%U4hJA8V3&gmS!&5U1P?k^$Nm7%CY#Y$ zC_yGXZSbc_QK7chlyj)wsec-}I)CLW+$nJoCF#?OXkeN?>%NA{m z^v;loC^3^<$?bl)*>^yN8HjOMK$xAx(1>2PbOeeBFIm)nY2AtDegfwa#dwSrA#lWo z$HI47kffXh9j0x*KC=SNWkR=IJJa-o?0XE*+Fxrh>B!-8F&ru+?usf-Cw#K%hUmr( znl|B9{^GqbIQtKSjGx^ada1>;ltjJ!Ft8@Lxe_AxLa;-}^w1Fu?Lw&;oypl!+}lq` z(SgnG`tfkTBUF#y<22o25TF!pxXU6b5@lJ@^TF| zK(Ef_!o3h^$odVMp)Khs*4Et{m1fOuCnlIeU>ToW56*4ixS;*Frho>95)CwNZ{KrH z$CSkHlX7)}J!;|~_|QPK{W7rUk%GP9BtwWhVcsVIv)XxIojl@o-6W73=yM-)GC5@d z$hIx+0vWuf$o{J84V{@~mywJ&{{S0Mi2qytbubxv05y&d<nbVcD zw-S;igm~T@NM6>qzVPBx)C_@mA?a_kz$PYPrP6%9=Y>HGMFoFqz$cKgHW$AIB6naM zn_-_oUmUs3sx&jB1^4Daqr?i7N(1TFbKi%-?N~425+!pCzQb}3&5``C0e^9TLd6KI zkqr5K;J>C^F7%fp`pqkhii%_4K`VuArsFSHTQ0v$&QBmk;y?atz5ZQ_xVLk_-=bKW z259rN=^Lm8^=v{YAWywS)E^hV7$u{RlReU7UrhMBFy%vynvnN5)-ma*?UkZDn}JGIlE{o0otmiSH92_fGL+Y_y3~cs!xJ=GBX%I_?qJv zJ&?@Rj=u@mkMXHL_|k+W!Im+s>>iM#(xmp1Cf^N-v`zZt!F$IK(Gj6!)oapc-=-kXcV;C%n$e8+(GJ| zYWebd!Ng>va0*XU!YA6E(YRtgR{{)Bs2`BhBtS+NJS~rI^ zH;wtN6nB>@vA&MV=4C1W`01CvXMSAZ{mVB$!~SsMnOz>McBikhq8lA%ukJ==UM|r7 zV`m#XA(cy?RMglXxB40Vq87j1kP!G6J^1arzX}D%YV^PE1yn=+y>9&56$CICqg+sr ztHPaVavdALB$m6Ve0t3>3Y9lm`EiBe2bZ4yhNSe{=Cg+~s@SuCOb^K5ekbZZEy$pY zypOGRfsp$dc3)IoF)yd=n*Fghls~7Uv(5WQ2&aLNFAmI()IpPlw{k4bUaEruaiws?IMiz>#>_ z;qD(G4SI$>W5;a8>Ng#CtoM_E*`I4RR3a+eSd-7g<|wFECQ}%<=yZH~D2^UB@E7cndjlUW9LH z{H_Ef_jOdRT6%-usDj(hY5a9og$82vV*0kgc8gG1itrE@oso>9$M*86n0^_Y&sqem zVq})lP53+6lW_*#NZ*HIQJl`<7ktvRlXF*Lx`5aj^Si$skcQ0O!l;HU8JNpjcwjnl z3k%eQ44+d9h>7wet*MOha7zAyUj#%J`nI{f36g3gU0ArXaF5DFa)os;{f)I8J@QSr zs@?rK_;6cO5iO)0sn891yF(J9oNoc#GuO4|SUvi4>(4@tO9QHvtx{8R6wor?CWS!U z(odUzK_=2L5#C*7;=@jRV~4g$np}@zYDK9pX~#5G931HRnKt~*BM_5KtKt;%_6B18 z$!W@|3;|5=g}l+Z>A-<~oq@PNp-+yvYS-$dg}EuyG}^oqKiqmqLXHXPrIR*UP1G-X zG<1HNm0oLH=-MNrCi5Lvec@F(wAPH}g6|ZrFyN^pj}7-QnFJ|~@2&aTrt($K`0mAw zgu!F6mG9pSfdDgJD+7|xm;V%uQ9u-Z$oU75j*H6wMj1*nYmMbDW=8Q{0s{UY$u^c5 zEwTjohjT9S3^xc(A!VbC70iDO7Zd^gMoojEFD>3FJ@c~w@w3MDD=$wVLH7H*!7h$* zY%JwwNO_NYCYrq8`kr<4m1r6JKF{fokxDxuuq)T4npj%MTsZt!uiA#-J472-6LKv9 z$`AhiSzm}_JV|n_n#yZA@e83-WD|yD(K4iSjH>g;naAHghp!ugYI!BaH9CIr{td4a zqcdkII~NwfOjVor*{V5_wfsmwORd73oy;VAWdxXIPqS8QU@Y?Yc$qp9P3}?xEIc+FlDNtJp-R)#LIZg6__*2jkco4Wfkoh89d6W7 z{eY&M${S@7JeU*QRp)m2ey?k`5xZUWsNNc)g?6{PI48QMk|$kWUynUBZwMG6j*sNy z;Hz~@hllG&xL|SEQ6il?M*Jv`VkE>t=)#T0sjsnDA%!KHp#wJ^$x}ez6!L0z<=BzB z8=j~bBlonSHjCjE{mj?4X)s>+!OG@90kcrto+$uqBU`&++W z5d|e~u|P8%+hSXsJ?lkC4+&(_cQGxfP>3;b;j{PxB|K>OAge2w?Yi;P2(+b{ z)Eb;UOe!Ifc7}4SitjAbOLDI9Em~#y)x>*G<5{aT)K9+SyI*lMW5anNWbkf(wuYj^ zp6?g0V3XzZ1Bh3*P+dcV3D*7k#G6=ye^i)75K`2oyn_#GUUZL$6K*kFlP5F zKN|2YJQ!eEfv~f-=g+6L#S?kiG}QH;C^drtJxg99({_s?~X9!;Aq_ z{r*&VE$Qf$b{_O5BH0ChnsQ`Nm**qog!t$Q=t~EHxc@ERQ6SP5Je!BQzEY4N;X?%> z?5s{+5P8>i=si~h4K)yEI#g2sd*T=ipekFRFlfRgdFW9kGzK|8Bb#` zbGN~uS&VD-cuR<-aVI)df4NR+aGk5*^=>EKhqbtq0O5O|M-&c`ii;*b#mer6KK25e z&=8~!+M}Vfxahr!Nn#qAL(>mS_o;MV0WXGH*A*nCNHj=RRma!$0yWT%_;Y92nxsb0 zJQP*3Bc!o!??0>T6ol8!IBn;0%acMkUy!Yp@JUX!)qfx=7DV9TI8=^+w;GH(z2WTy zO|9zw1V*s%Fnx??;f8R=AG^g_v#k=;aZ>ep#eLyIHO_tZ?a9U;*;J)gBv8YrwQ-=T zci&5R1wx|9KCt&qU0n@^78U%TZ4Fi~vY$0Jg9vIhe?Nq`_29GIVPH zlEPfu-t~Zpm=o8>voJQ39Q`m8W{|fys&wwL8OM0E4Ebx-3r^6Nq*exNnd!mSyEP-% zM;y{1oWF=M~|im#|9Mt!~I#F!^m7A=pR8tWRCa zvvcnKn5YX8Y{K{e9z6jen{2vY5ktJje?)hW@@ zVuPKP8jh8^-|sywC;f!>(ohdD4jp?PtXmZVdF$KL*&;p2$EE>p)Ubbl?HdKBO2g|9 zOYe7+r0%UY zBnQSxQcu}uddS|=3Xux(NV*A0HrH6pUYS)$b>&1OH496$mXstbf3ql;E~z0KKzn~X zY#!JZ5%(;HbC&`Cwnt${exd2;fRdzC732^iRTmQ?HKSU#$ae}t)+WvxWTXnz5~5YF zuiD1dw3fizINc?HyxBx`E?x; zhau`4UEVX9JPh|;iZ5H>R3b2t-HF^d#ah(SMy#;zZQF{uaS)PnkxE~@Z_kF8w2a(E z|76GQIMefM_hL*OLigiZR4(kk%g*rhB78Ju@h=LHJ~N55;#R6NPPj&kybs$bhuz)W z*@`h`&8zqL2Avp$+ z&t)Ep)m|wR7#Q7_6UAdQMRV(UhCP`i{aDM@E}VZ-zGTRLlRPM+*59g3JE^-4uvL)0Hlr&d*nsoKE`;BAtiVGQ;IwHtm>skK07E%P)ZI zvT{`)Fb@8HQPGG12xb1|8ZHB4*_X!$D&Gj%>g|!v=V*Ka# z4UG#QCm!VLtRVB?%}PK+Qu=9#qhvQkg{o|DbfVf}Vr=4SFd?kb{W{%S4ha2NEbr$v zD`}^3T+`>%T)CI8!0RKhv0&(DQe46$>Z^-QS8CDcZ4Ufnqr17S%=5Ptv^~@P_I#8j z>JDS89u6a=?iEIr1r>kF8nTY@gT*2>SYDJRLf_>+0*XwO2(#1?t@1$M;kuw{;ceiB z!79vw{g>$LCIK@cwT|j^Rj!M)NqRJGf%(KuU)`LB`mv-B`q7OB(iQMy72JToi3B{V9hFMw|mnJK4Rb`6H%*7M#(qu_dprq$_>Xw~25` ztn5OGTIcoMO@CHe9xLPIHMD3%)ANZF+0*9jiEz~}p-V(p?awVM+#Sbm<}qAxW;a-h zcGe>}^0#irIu4db%b4d_m|)5u(O*o%l#GfOQGzQ1jg!W;wqg-^FkZ!$)`oO$JVwc^ z7-m{Epd7f4-jDB7uNEE zLw(OWEOBH%{R+}(3%aJu9wg>>w1TIqH~7VcfY%nnCre9Jt8(wG6_l5_3^I{?Wn-c3TTTm+P*)Ku)Lb4w#v)TE2$`7R`lAk?4#owj7nE1gF=(}G$ zc}Hxe7%uh&f+QOT8K^6yaU!#DP3kFqyY^9pRR1kv@DWxq^K#&lLfpm->y@3H(gmg$rHxh#pqXeWoN5iNwdK)m}_eMYW{kgy2 z@9%GUxO2|Vu5+F1dcB_KT}_fKsq74{{TrF*O3lwN=maU#=obB+5%&^ALKexjWq2ANGfr#@{ScgD%TM=T$RGy-vuY! zJhNjcnJWSK7SdFYk#V)l3*%0{-#0}=*5(}x`GI6BZQ*KjOq`A!du)fusZWkj-o!!; z7GfG>G`!)jwdDpMb+CJBQ!P+9)st~is+juwY$Z;PMBH=k%pNy`>_=@2WZZ4O-8|x# zFr~4AJwLH^)Eg=By(I<*s9ZP>aj$i6hZci9HOkBNPr8P9+wYcYY#@O<$lnCVQOZ`( zsAj>ka*NoF-ViOSBUB-e2vYVkLhpb|Ax8(zJ#Mg6z@_ zTXw*2*xRMJ+C>a~wWCB7Q~eI+3C@m=8D~PDEmrITsdV_4U_9I4x7FFekqkr;^osD9 z5GKK%$)5DY2P(1@+M*^%IQJbUy75^*J4;9=aLm|PpzU^j1Q=1jQH&?&6Wi^5M4He z)%?hcw+j-FLNsf>G9+ee47fF9-xvdHvHD2fLFR{Kvm|Jq8C$^jU9B*89nt<0K&K*xf*T*{+*B%aJqOS_GU(e?(UGh zm#i|IQrJae(gD-rq~AW%8S^h>gJcj-UUJB#}HV6og zmy47F=mw!3f7gb-2SbHvEJYum_3t#yT5)5$HJRl-!Vl-ZP1JFxzCve0=Dzkxt8tP} zFS*RMb->BzdXah=-=wmHgu#_Y=#*eGqlFE6ujxTJqt~cp`t15ERZ>1VtBaTK-hAQn z#0WR%NgSdl?T|uQCxq;aShU6Rk#|ix*Z^GGh!+eO+=t0YZ6HLvs$rZ- zJ{yt!ZE(TPb&28XP57N!#Z0$?C zE3{dEecN@J>^wcr;M`s$Tm`9sdhAEC-+O#uUG+t00`5H?*xd!h7Jsh!mCF_O`s;mbQE9d& z=mQ{^%=bEJs(8jN(4p9vPq4K2cbBrKxM`6SMD>(DdL4ZqUc<)>tu(f>-(hdj*nXzZ z*nT7%*-=M#-?g>B*pSohdq3iGqY?U7Zg6j`1z9mK*msNDz9)tj{gS{@@9vFBksXK= zPMK)w=_>3ORSUKIlTC2SJi3r#bPIb(G#2wC3??VUphz(K@u8}R$H>lBzuW zy^vPq%S%!JlMO2r7wkMXczOn{%yI|!st(eb1=^<|nkz9(+#g7Mhv@VM{(Qu^fnX&^ z(g&~@-XY)F^RfW_-5#h@x<$`hI=~7+hVJWhFW|7(n?j@?1^&eE;wh8>9}wh;=;S~9likMj z03Gm*gs~RkIwLxtD9vg}MS!H%B{9G|aC)Ub{nsN}bWVR9?$wjg%Q$bK6V7~i%f;yo zS7qJk64UkDxqk~A9aex6_I|y)WU0}`#=>>#1vqYwYG>3e^kH#J+L(or`0*Ri?1RE< zNk6h{Xwfoz9bj?rvCGZxz(myn(8pXSf~C=(#P68EiS6+_rlT2BYjh^_P-my`I~f~X zH5I*7&L7WWFX!Fy8HwqeJ&uucsfRN<3Wo+h2#q(;WsD8|dbR+3{PCgF%#Fnkq}c#M z02`g%ZOuCFT+dN#*8bLjD|r5NX+Hg38jmTjtm#}8#tah*rV3^w)Eg9xz`i(pvLD9u zTUDOJFCivUTSLPB*;-@M>sz*R*1E+Em9m@Pgh)q1385Utq+#+x@-DJ5%~>xE6Lx%* z(CS%4T1lRG@S(+9U`9;9j9ycZqIO%@;dvKSoLeAd!cm;NnO>XN>er&;Xzpz2l|z&AqL zo)48vVhD0=J+-@#p*^zWaPgPyz+QGE97mHhUD%?d-$7SOZB9N>meDMJII36~cA8g= zu&^-kG263t_A=bB@-FjUcg7s_VXqZwJ$Tj?XIWus@HSWej{I1YZS4MKPj^2@VUTl& z=;oN@JxYC_waan?U&pq{w(j^gXF@HmC6oPTiw;5$g?ms6efbz+xJ2+a8NbjdBT=l11vy*v}5VEqVPe z)f7!ma9XU6Zzzm*Q`(DZ`s#Io(chiBXj{RMeyGs?wjzZa<>JFr8)*{Ll0Tp=1AtUE za`o=F1sVZjO6Lp$ZRk_%erkzb-w61^I$@+DIC=mgVZen+gYcD-hub-%uDqhd-V6`_ z0)K<|;+EyDfapP_|8mG=el+x=z2Xc6K)N~AscP<|k2N6V5$~qS8tFFA+Dly_th6#z zpi62f?2+jzj~mSw^&{cD2_M#FemLC(4uz?*-)mHDW(+ z-RdK9iHDt6`ch5j4S1@J8xoBar|IP2SxtrfWz2A@^=fob8FjT+i5ip{`RH zIqNXOXIC}((=Br{M&I=eT9Xsq4}?>qnY{Zy^QT55r3DRvB5v-O!)Pt$Di*{M;$(uW7=Y9OKqYM(ijSltbA^Kr5Yi$RJbyoo5>eol47jUU8-Uff03<~o zHvq>?kY6lXq4rKHZsj5mRhh*KZ8EpA<|Od{PGv1#qSJ=WllsYqKxfxQ0aK~ zGkj5Q&v^tdA3rnst9iw+N-QmKv~s52Qu*WWsr3b*YB<27b8%hr`sa=YFyyX*%tIB; z!G%9X3Zdk`p~%~^+L#e>cVm4m7T1AZTy+WudP#JDw1CF4z$X&!+GA@L9C$pXNl|z8 z3=OtRprRY2bpv@c&jkJ__QC@o(wzz^Z1{KQ-S@XGB;F^EuwW|=!Jh#McI}_SoHzVG zCrVQsWJ~C%U+7vr=x0enAwTB=LbC$0vnp{MbX0wHzufUUV4Kz~2LM7q$P`Ncn=q-? z&WbvAIs}!E5zaGiH174xE}ghBnFK^=-{&uo2#oG;_}n z%i0-4u8i*f=F6oy_^o(V(>g{S%eDQ|C$`ttGxmj*+QhJ6?(`QK&~Qr5;LcZl(AO7> zwEt7XAw$#=%8TNBHfl$F59dJ=b^8f*HnPV*Llb<~k*yQ1#K}bmY(as59@V8F=)}6v zg*iFw^hqtL%gWEMcJZ1o6S*`EnvuYNNQsgapMD&#GN29E@gZ5BBDHjK!&JBm^Hy4aqP1z|4-@O2Pne}$g_`6O}Rr`!18zk zrem={0>HeGMq4MGwVMiX>g}~v`^87oXP~Q;Wp_tqO+sySiY0_gch7p4zJusE2qe?3 znqPC?yQG#7Iyu!#7BWBoJb`$?_R$5$^;2kkbqvYrxe>C@Ci<_CvX-VeF|(OpoSQ8y z81!^*qdSTdd$&7w_VQTd`U$r-ll&xkSuho@>mr@K#9KA*=Qur8(4os`sF!(l`L7D+ zpirxkddYk5A4R#dtW3D0OQOzon(7WjF)_us{lb@cDL}|Z89Q>D)iP2gR=$Yb0+BR< zwpN7uQr)j?g3{IBtuZW?sEp@eg&{p>A7;gNc3E{f#?S+~-L&zDD*i6tEHdX`0 zv$&4cI7}h!*9aD_JqI#^2U3nR-8WilU^xfa?WcHkzxLx1#_@so5Gq4j`V?O0yC$Dg zbp89!M7_^&tJbE;;+VM|u*-mN?2omkmb*9-z{HYLG5*t8dedgvbygfaGQ4o-Z6wYk zh^^(xRTlmq@Q-=hw9uk*`o z@z2xI>>+uQ)kd&$)!xe8ZvUfzHM3;zBO7*Nxv+x5lRBvkiu}CxUM`+Mv7mTAcdVb- zNpg8>XI&Leb7wW<%i(FD+Ez+bEncPP{v}2z3q|76a zGbd|5-!gpRnog=$P2YVrS~Syk6y^eJYWyY}ZU3YM{5hhf=r)C?IKzw=ZJiQ0JBDgV z=YyU$HtJJCHV{Z9GjU-DlzJ&w;A<<`7mpCs%46#OtX^3bq3jM47B@Z3Ogdgy%npS( z0@E}H)6=o1$&MD*hO}*ICF=&A(j*3U=Kxg02D$y0XLU!PG~z+WGm48F@I8v1+L$^k z_~tfKXDEEPK5GWdRq=cX$$c_jc*lFy4Qyu=p_etFh&v;rC(H}%>}xprduEYFRpKsQ4W z4;vE#yKhca&uP-ud{2XBM*Mkn#D|)Jl2(S(V~tFZ0FfK7!!jNkb*eDH-Y^YM3z>~% zZAz~0jXEs9{8JvSRRYQewM~T0`Vp>Az2siz@&K%%uZ6ttvPiPiN!_%Z{ zP%LS^ZhCFaFbB?oEX77AaU&;7D{CRgb9O;?fac(aMlwwD)U-bn6SfSYt$%m*nJHJj zE>t4?tP6$XnL$w=9Z~IukwEG@|x#bD1pl zE)@fz&uXz5z-W4w#xI zn@5m+YtL24?>G@OL6v4qfQ8?!c+qo+jYY+%z&;~>ZG5r$H~vlX*;mUo`AJnvT~4a# zl0a=Sc#!JwJ{uy$A~}=wY9icqT85Z__ZjYzAx_w#wz?eSIrUg|lEx47x`;#a?9{KC zt}{&CwtwkG-kl}mTIHBgN4XZ@l#vm{3P>Y?Bkt6UFnPmXFFY~NA^ITEV@g;LQB-+g zYgGFt6pUz{Mzjhi$aJQJqo2ihES?Z&(OrP7{kt&9_tf1wP3VOzE|)5HHTB5as{>-> zbAW+t2hU{Wh}v${3nL%O1hjp#X~bApW#Y@LGADF9Q$sSVd4Q7GCxlB_qXm?ZvpnKA zpJZNhrAlZNRp~Xs;W;AaKsX-97E06|fWciY@0p2{6310z-U5EU7l?5Z6CTG9!KjnC zrV%7cZkOb|C+*E_e4-_b+>}L&6lSPrY53WvS9O^gEbogv9bM-{1U=?-2H{pU*P3YS zwmU%XTOJ<#P6p?v8zga}weQbSM%&E)UkbZBL&i-6yCT?denCy^M7dWVZvF!dsKfgr zoEo`^AB=%IJSi{$wd3eo=(~H;V?=UoK6cnPF1HFFv5wpuu+_MoY`Di`5%Q-N4=CeF z0AX>R0+H~6KPv%14Zte9< z9`^)pm{|I@B3Nj)59(=TXDSp}4|e}Y;p2DMdNNQ0=&O#c^X-mDmTbId8F2ge!$(k- z$43lz7s1o`AWOTuvVjrAZxln@;U^t${cx6bcsdymjum5>qo8YtMjMhQj7P_Q&K4$q zm_RUlqrZ?rBRT8HCwcHJAnYhYYbx6W_Fl;&M2+^(8YFN99878T}k1o?WC>sU8< zgi*6@vW*xpd`v*20inxiXzks1uIo*g_{^*K@1(vN{5~jWpXN*)6eIJ+;SZfZP~4&% z4U>q@Ia~xCT9VP+*2}t>Qn?xF_^ABk zLbMxqzRg1h{uK^;mem66R{6Bt_kh~o=*P)12mArToDu~IyB!a3!(L`mBg2Bw!B+hC z)!P@rlvTTC2i}Y0-&OTi{fsgfCNbr`7z=FTie8y;7hg>Bv4L-$yERBH3pfN|P44ET zWW)$(#k3}5l)LkFwTshe^CKA9NNgYKP2rk-f>D(CP__u#-{uOS1k~di_x9M-NIF)w z$|qOkAa}V%BPd#H9cW389(QSM`DAQ4@r%s)?IL1+g-(vJF}dg-DyLk{+`$I5^77pHuw2}3u`fOl=4Xp zIsdLV#Ps3b-Qrr@$z0Op0Q155^TE(bwh}Sx4q3Q85{bO(Z(w49nHuT*G7YGtmZp!P zl)@2`3qI3#Z(u^*Dy3SwUHzoaNf9I#k3q&_QgV`VcyISD2)L;5sWg0>eQf^T>Jcun zV-bZnJ#w2?sn)vIbHfkkabZO^?66)h~uBf#RT!hDLimDsvj~nf*go9&Oh^kUNhVbXBmY;C&c*mR?QA5JO zJ^Q8Ap^OR94Xy9a;{`i{QSbF91Yr@cW8%6GqPLgXj3o=P;ejjCRj8%$_S@w@anK<@ zSLp2_BZ7^j6%fIR@erPG<__p%K0?(z0iDOde#sKS%Uw@ksgrpgGjK};O=i_;ZTCBn zs?3xbZcjH8NVa_DURr%vrE2_nD~{3QSp!WrR?F(H2ExaEHCwVN)h*5olS03g+CYe*cpU+Jr10QTM<=4Qz0D=; z5~WJ(z@}!*x8(;J(gU95#f%+FB~W7hvZYXj1!b`>^S5FvS$DhnPDJFzp{5qcJdZ+S z2qqKSg#BoyImx!|Xj@TerajFQDhRuAxp&Ya+S0c4$Qs;(5ck0O`R6ZO^NKmRqn6jv zfmeRXj-Jx6k+Ll^2qN^k*#hFM5xKArVZrV65M~`a#8Jpacgjk%X?0%u^IEs3PsI5> z?l*vu)ot&YWS9Ai?=#jzl`qbHB}aesI|0|RSbidZBLp|w^;U1HDp11>P*3T>J@ z&Y{OE!?)0KAB!$jZaz2e{Zr-k3f!8{lan?I)+fX4D(bUIy0i|sRZcKmA$vu3&ZV^Z zf^qzq{T7%^1m5-+}uBC?%3GOolnDpi60F_~ex%>Cp>^^1izO@<=Tv!$Yi6b*ghsZT&MoJ}1YwRVPJCN36s6Q*^PFadH4p~_InbPa-F-^^$xI>X zqsO-lT4lEHPSbTU#Icpp*O8a9zzF7_@8zet~uX z{U8K2DAI;>ssV9N3VJcPz%Cn8eDc{Ka$2iiW z7Z}C2ND#RSl8Ewc>l#ej&wMu(?F*fB!T*Afh$CS->THSzAlKgfI_|P`7J!^08Y+5@ z)I4%MM{yLaja7E_qVfiR)R_Q|sHor(yTX-WANt}2GUXtOVlpR(+iy>1U%!%r%%A0M-}WcM zR~~1@;ljo0>9Wbs40yM%xj9@_R+=vUnm(LK0{?C)7;1G?g*C4TN4~{Rl^7#$7kIK2 zPwu_u!H4~Ei}x|s!e#Tj1a}<^zZM($dn;q-SS%4x4zF5(Gxi?|UpSx=@wa6d991yd z%_nFig)sDTQ6T_kRfGk#zaZHa6QyAe?0oE}q|5eJO*(MzNx>;Of0U>Ufj7iosBr+W zhOZv>yQ@y}Kwdl21l>t?%b`xUa^wqutVy6QqqvZe$(U^lZx4Fl zWMU3blmx0+(1L0K9-I1PW)dP4x ztX$!c0qGIQR3y8BqVUtv?vEnqC$m?^A7sb{1w=g@<#d0kFy)kR||c0lbGy-8pWcGV6H+Q5RRWNIfDXhLg2n zEUK{^g|iE-Ix^33;&d(5ZVZmt4DLZn_VLHEC1+s}BX1_;14O9i)GCBs)=kBBxnh|3 zR;R#04=hULkhzc~`@Fe5xF8LvMOc-AOxgRrpowD&>_vvixnrO|#o5LFzfi`dK`KNY zX>udpkI-`*w+{fyduh>(?;KD*wCCw~${)uC{JODWOBN{T)tOK=y#J}8c*FQX)J72E zc=9tmi+~Lz6Sx!m0EajS;1~08xDVhV4WaeX0<+@|^(xea zTgFWmwLf*1gWQ~2=}av!n@-&2e34H^4mt`1a5>rGop+8-Sy_|$Fa(7?-aqp+UzgKYjsX{ z24!{wR9NxlA4nrw{RM@EjOeUJ{C+B1b?$ve*pDg(drjnaL`j-AW{@D;U*aF1Fs4pk zL%EPae2u8nIeB`ddttl1hADnk94|ygdW!t1Q-eT6GmM=6kOV0HQL*1q9n`+*&lUz? zm7JL?arN&a#&TBUxE#2%3kp<+MDK}ns*0%?3Q5$X8~6uDl3s~^chA*hbNuREmK$az znsRWJ@mz0e9i-~sd5NLBuIIqt|>P+ zzxL$&J7hJr7;~{Tq1msQh+Ta2kSgz@(eORtSvdc5O0x}FDLV$D@zqD7T6e>TQgUNY;+iM*~CuL3{szOvdY$G z8bh?&k$I@$=byygrrawiD$b4ER)YkJhh-gMQ%gvfGcrQQImcar&PK!Qc%sP%AE`F=1S|CEo{; zr0s4$lrl*@aUO{2M`zG#Huz5WTqF94Z)@ut$3Z8fwBw%Vq#S00NLC}36}b8rRr#Ns zIt7s(nX4D(K)CNvif30o^k-&2%Jv*%*rrgA3le~9pW0p1aEJkWCMa_D*0rgx6ky|fRDE5 zZF}@?Y$8MHgiAi9-KwW^%MhI4fby7p1hTZ*B2M`@GA3_@v1;F9^75PAXO$!`%cd8_ z%zY>}G)mE`v>tT3Q{y~*0Kh5upIfHBREEo*7*8qc{s!3bpLfjzbs$~}F~rv~o0;yf zET(A~pdBq)w)3`UM_1s$Z6mP{?hk08Xh-Z2FOlZqgN`SyiYG70AY@Rwvf1%YcN>$< z_wnx`QoZfZ@5^qU32G*P#_)K*!(pf}qPw-J;un*JO*w-(!E;M1T|ME~0QUTs@ZDy2 zXwCO*%cVXAiP-UDcM+L5RfHN&IW(2i)QdqZdXX8ibyW~}W#}6D`UUGJMyBi=Ivxp< zcq-(U2wnLjEkP#E#et5cIiv>8TXbY2RORp3 z7}W$`?K-b0^kv|}`3RRUVIwtPpGNyB9XAOrZvmn(og!xx(>IOmEVhBq{YO;zU0K`1 zH)Ja=F8K9rfAaFb>6pa_^x_zS~oq|Ka;JRlK39CHnY$~jvgbw$>~|9 z;=C(=z29_Y3$gc5jMMQ>9uIp_Xve23p281;8U~s2iOI0*vT>qAA~Kd5xxe32Y@3gV z7EeCY^koo>BbrcNB6uFro0i-xr{EcyT2j7}qS#KS7rbkw-a3LNxTY3GQx&Vc<%`pK z$`!6&A!ZP$Ls#-5q}t>DHd5gz>;+Nzc1Uz6sAVB@OQHPg{=@Uytwu&iKO5xL-i>#ADcBGJmnt0kwq!XW67Z5QI01FYy#l}rYFV0BxzxP7=Q6Emr_ zteu1)z7%P}>OO>Z8q1K~3At0XZ{^R=Txz_~@h>tBP~y6W!d*KjUBaA3p71(v0G+}}N&=Dtv$WJwVr3#l&mtI5!HvqNBZfm(F#PXkR_vCIXPz*F(`A8=5 z{hhckU~t*jRw2Cqnn71`I1}&^>k#*W;x)Zn1pkdsa|`{;_vrgqFqIq++UrwB@2frzF7$ejbEfj-8XEjgKi^WR5te@WC86dw zpHegsNB^W>)_^^1?in;0f@ZX;a7Z^cW^v$9qPM3v$w~> zFti4Y1>Gq(lnaC_;1wK_5%MSW63{jH3OFA(z9wt6&F|` zaO8)2kS8Cj>CFTx7?RalZhZ!fNh4x+q)%OwS4Mt^(suR1R>08#@n`ZWRbQfDE`k3moa`gEfJEL+MU5I;u z&aF9_X65jv+MWc5jgQs3V-F6QeKR#KXTJE<2X%6 zaC)P|w((;vT()KNggdnk=n#9xd#|Go8yXmH zlJTG0r%|YWKKd-eSmk@`qp~7NWz@=1AN}b!$83-7N%Jp(=j$M@9w z>{0)|)*EFl8X5nP>yv@E%UW%|`&Ol|jO(&9{au*5_h^&pNLLFi7rPl!AJwXRzAFf9 zUWI;1?mc@e$3O3QL6>HiP05~%jO@sZ(({9JV<6S?d1aW(25W)`;(3CC98AvwZGA0wyvCI4@L(e@tLHdpx`^H%Hpxe`F2pq( z!pkc*#`NsUy+dWEYl1tEkqvn^#T_{SLb>e8$Tc-N+as;9hVq?^U*R`lkONOhYg;K` z;YicqcsS+>@b?QpnV`?|nScL4ap-*>b+UF5-=lmW8O-iL#N=|Kz83=NUg4C6! zAQ{xj)XT-Sv4!B&?VQ^((Rp7&M7o``?L55=J6Zq&fbF>;r1#g??yq$Pr5V^O@-rnz zaY!4`peSl7B&uB%GhLLLh(y?~_?DtqcWB2pWmZ~m-=*m@`X@kvPv!b$fHP6qzWOQJ z(O6i~k5~bbf-gK-W8YY{sS~5bH7!2c*<8;wXbJ|Y4X4wPk=v0T#gRH{UN~%So5p@p zl(EA+&hQ>5NEoYhl<`W@r`Dy6?s@mp#n8dzbYmi!st*v0^kav%F&Fw`kO=V)s+^A} z7cuwUnn)(0WIqycrw71YFvnWj^ds7>zF6C9gs_?ACL8d4*1Ob3K1rj+z)rL9HyN>XB$V(sTV|PQ~FcXPM1&eO%<-=XDVLuXVona*qbS;#Dumr&(FKb8I|%{?glEW2^Lz%c1K}!HDf%MV zIM`w4D4yg6|H8W6*4%c$zCT?Vrl&sMaR>pFx7<@ce?-+momvsl zTraeH1JJfUuRePCaozT7)1PbMIrI;|9Y+U1N13XCaBr!>hdd-5j&yx0$nCyP4(W8m z>f>5yCSJYJ|J6}*-V)wqAHgE1+-^~@cHyiXI%@dh`9OV|Poa(ng~wI3vXDx1)^TGT z^~%*UEe_5p;c42r+Vg=zDj9&j(kaHz+5pei)oiicNKyr!*y1JfHle_5*wqv9+HN2` z2-fdppN`Jp-_Zdj8+ulu1Az`E@g)8Mg|m>sbHs7@+RhLRVR4yVAga3c`SrQ~$?bsTw9?Eo8B#C)<2vHO5SA6I5q7CJI^%}wK4sg5LEN`{rR)Mh zD=#5rQfacUo-&^r$S*(ncb*xsW4bQ@GHU+nt>}+r`CB)XCZLpl>@gv09$jpr9!D2> zh(CNA34{OdC!1MTSM`X$c`)kkLxp@lKLk9^P(_P|VusBt;(px9b^LdbD#Z*M^G`pj zCzm^+<+9)5s3WJw#H3;>Ae2Dftfu+_SEUeOb(%u^q)v=Vem)J4fMgrAS5I@O%gI6u4Iu zC4g;w*m|Dk+r4^rxkzb%;EK+?m8%a-?&e!aJ=9;&Pmyzi{O0#wf%7wj$Z{ITGMm>a z1Kh;snZ=2VJV(d*Vh*5Xw}I7G8BdvaT>5qRnLYlsdz*SGu7Y0I5eoHWD1KI3nvxHSKJZSk^XZ|o$juZIMz-?b#IB9Qhc zfU4^+9-z-EH2#Uf2IFztfZWPg(DUnm2?5LqY&<1m(msytGu0XCN?S7{a!;4)o^D(6 zpieqgLyPbiAlL{In>wVc8;Wa!ST?O~mbJGvSYDQw=rpk~IqA9WnjfwB@&I7#u(aBL z7vD@I3wfXUEl9_~o)dU%1t{+)jtw_9GV@>aT52~~oI@AI?GzpUo`gPqf}nQ<(0gy(m-_@=Ez?$fZ-Ic_93styR)vpLHkX4<0Ih1-m)V7dfZ=lf{W8$uQR{b1PsfDP1h3J>n^a6J6|=_?9z& z66BltSTzI`9S__VZm!tEF3jn{!eq&ZF$Ga~6&u--$PxskaIEY?#-*^)!@lmZH%XdY zxyJh?Dn+$uP8H0>Z6*t~DOoy?C4Rhdcn$ft-Z&_IK*}SU?<|IrQ6?kJ1F$8dFH+R@ ziu?K|1uVvN(98bKgxoK$9&O2AAg_V=3`@Lu5RD5aN6G6tKLMqO@7ciBz*Edhvkg@1aQls|IbiVfg=jKW+gq9qNY;x%Gv|V zydk^DMFF(rIa|7*d(jsV)fk{0FbK6IsrnuASz_Y`77<<85`dW-xH;eEclcZ7USpb6 zWcH&hw}%XTs&q}C==g3|2$j+kC^LmH&!!Is8lHEwIP=NN&|5UU2<^w9=6IEjy3Yyb ztjgvZg=bz?I1Nex5a0FVw$!vfR$E`=2^N96?>wZ3Njw}R#6-e|kq73@O?JPHTH@kn z9JIvj8Qx3RL+R~qY~*Q99I=&#kZJ#WTQE;OFEWA6lFk$zG8-%zC~=v!8LhNnY21qM z&V_lN%*hn&ET8>k3XY`jX~EGUn1$j42*vqU#pP}&&8ug|B%fP0!316SV-zF1fj1Nz zU#X0)M^9^;_4 zdkgqN@aAuK2DB58*z$s47Dli_eCi=L=db>T=WU5jEcxx@YLVCY9)9S+ptL*<)v0=Y zyp+rF;iBdDPA{0k_6EyRHQR-&B0MEPIsG9+N2^P+B4^V6b6qfjK3V5?%v}qUKq+5m z0{3c5z?oO7SMk-~B4fUNs9HjlnsqrDv@qw;M5_+=KPo@mHcK*m72@N;Yi=c^*wO|$KwNpePT46$udT6VWw|`8t_FrliuQHOTMM%7TdzyM=W@T z3e~LM`ow~Dio%+!jwWuP)L9Yi(ciM~n}hx?63A4lPw03~C?0rz5$(JA9wZ99M4Xwh z0^bRin3QcieLXB*)%|4pBQU75UP3=@Gp#A-lX_wu;OE_2z}Y_{3FjCc|W3R7~yKBR)Ul7j|qr7c`bP>20UwP zJg8vUUIC>_*EQRi^_=^)h#tLpYm!y$!;*2rxA9M~>O>!$)tKyCc$?K;6YA3S+J2a( zpfr00)2Mp1??)a8jwbx$ExGVAOooLCNWO5J!lYx|naGCR3y@xOA2|&g|NMsB{)2Op z{fFj6?D9cf7Gi(<$GeJ|y;8=^bi~5*UTHv{Ca0sIk8DvRzFF1F26dfX$nbHXx%MPFx1+rv6gTzZPZhYXr;u|+8wW8v9%wollewxzQPJs^ zl_F3&VyWeZlxs?;%5x6n##L>)V1W1KQ2#`rTDGCk?WYD zuwyKw6nkC!6y0?2R%|(D{FL1Ed0eAd<})o&-xY{I-6VAA#K=WxD=r`o!b)|bQye^Q zgqVVoEZVV7^q5>e!#ne1+{PgLrp4mxkl@ygtl47JNcqc~p~#bOTUR>9dqK_a zGQz%95I3L=>UpJCOd@i_T~wjgTjwQg5E}w&o~~$cy(;$S)1P^NS}d9U<2{>J~+xEEC$b(iPySlBXULm13w~w3AI9g(zz{DQvo%R-?fU0Af5M)!;31WRHU4HvhEUqDLk~&_e3r#$h=b*Dew!gPC z9FuXtKWC@jmH6M^<)uf?uWN4DV>#*3QtP4nhf7ILFD7|7Xq=Wls3v${rebpXl;j`V zE$=pDd@d6i;fekvqXWj5;UD-8E|Lx@ws>8nlPd4oiG3Rv6soY{(tyK;l()MkD3Xd3 zZ;j|3Kv%Zef+^7AYb^;(59OireG!U*$v5`TJ#*IWTs=_0Q|dt-VZXkSFegBRe`twf z#r(3)h?*nc3eWQxReBjE`k{X54>+Zqf}D0u1yM5Z6{tVj9E z&+Z|wqR;GH9~HW4|GOBwsZw$ar--X7XRNSM?c1m7_5hNuY5=i~+js4E8*(d)Uipk^UGxZBQ=5W*2ongl~yjULb#r(d_fIyO)=BR8^AC z;Ssq5o^7i)P`lr9I)+>YQn!p!O8!l%-+|8b;1dfq)Wn4th=N6(taL_lUUKH>=)qLG z#I5G1er@rd59!OT{<|sr{tNwj$IplSoU@i9(e>VM-)B+P>SS$S?-)@8=?d4Xo&Amkkb;M5G4Py9)kpi;BqN z$w=||vCGPCVx=%lfsyO32dE6U_l-$-ad&6{Zbv&F)b)OGc2cb(kXL|E}E#F9heiRSWNptcJBOzO1gXZz{n#(iSCVtHiuPA1E(< zvr8*_LXb(%Sk?YKJ+7y0WK?Bn0Fefkym~<<0CIO%!qOCv%?q`PB7L{TZ1&GBczY8`=oJIt%T^XBoC&qmi4>B;KLfBNkcK7yp?bQ|6 za(l17uNA(-2{Xg3rw_+n8O{(&Xnck`Dn|`rmI$i-^X@Uet`PQ$?jQFCk__Wg7j;h$ zmdR}c$x*?~@<+6x!}eczyd&2*cZ5I(DabXNfaD3ug?cuBhUFIU2lBFSd|#_02h+(I z-q%RkjJ_?3zt+{mCTir650?Gfq!~z|sUx^uudI~3ENL{}k@zd(k%7spn1rG%H0K=& zC#>X?3w+A#iTn@_nS={uGC7Lb$qo^Y9_R~6n^pUeeV0gx-xJS?ss4;nTZ!yw^?)d2 zA0O!xu3Y!`+Ed6qBvHu>oBsNEbc2X_Mo2J=KvtIl6xv^gbIv zgT5P{ljq2{G0US-_Cz)-cJ}|{?X9DtYQuM7LP1&tMLLxdP`X2;rMpW&V218SN>D;X z5D-whYhdVBkX9Ool#&>_hd6r>eSP0^e(S5XzP0>=<;?77KXK=C-`9n2jG>SQbi@zy zPJ4ej@C@m5KP9O-?G3!zCOtb+ zmi9;4tLx$nO83PMx|`OiD2@-Zx|hD@Z19yd?now31r!Bd_JY6Sf@$5Yc*q|r(N4gR zjI>@P0-_8=TK4sEYs!L=2?tJ$j?`K~#lJGItEU#S3F?e2@LMU5j#KU(nNkLtZaC+^W2VPLCzcnOv(eZ&v8WmzPTZ0rk^eLjCA6{2Q0^IAAedh?&RLi) z%FIMYG9X&E7(|GzmIs+{4;XDQa9jF5bIX9M?SJLciH(k9ly4jK9o~SBPrLz4;=aNOAKT#L#|eI2 zOW*IL#t-xO<&{jVu3mK65&(Wh|EVb80;xK){NuU$A>e+jC5HNGthu8?_Q{Zb|0!V~ zKzC&VID3}0`-N`v=yng{W@Bx*A?6bNC-F1bqFLQx`&%ke9NJwk*%!T3oM;S_#>-kC z*uSqVZC#YDSx7cyH{ICujc9=jU0yG8K9633UW;iz^$Y%qKMfpuEkNv>87zp(eQ_Tf8tcRP?y-kFfx#emIY zZwcokQ<-wVWSt(wSnIK!K2vTn{=@K5Ba?nU0&~_)*yil>asdL={eU;_1#eWs1_Zv) z!tsI^&sPQKs2Yef8hoC&wcQiJoMpFQs&Zkj8q5+&#K0C>Wt}2v) z&xm{3mnWDkOv!+|Dci9);yN-Bdrs_VmUrcgmKT_AGh?K=IjScyX;$_nq<>mBQbSdfnTB`VCnCp4AklWiMFykqH}! zY5tTOgp|dVDvoVra&t6HX5_t`N-3~Jlov7P%c>4(Ak+C89!OS&N)qG|zYlU(O9HwE zCNBZ@o`sw=m|w&K+~a!4AnEp4`&1<7VP;49{bN*Czi-|%q162v)eyzxGrZu)glQQ; zJ(hP%^O5xne*1a*(G}{nirXC%(8#%t>Xn9afTptc$|PR8&JkR&^2jDTM8v-S2yE;V zlMV8vdGN;C!6H+>2>lHY;tlhXKvH1A(FUDz$f>hU>-PDuPc|eJcPxO7X!@?>sl6XE zyZUOWir^TC2)u}ZpvA2UAUz4!vx0(kDqXH!81k0*>=y8vu@_zajky zJ7F88asQJR-AI}bRII3F(P1!ujOt%&!@V-EJr86T0ib-J-SIv>gBkh*2l`V2QRg&)<3voGJ4YiZsX<^&H@+FL zQo}6z>02}zv^sXi3P&E6YHLNE5{Hs??li|8uq;tZvq;P=>VuWV{q_#%GPfy0$eP2X z&Q=KJNsVp?A@VG#jp3)!H&Hf7AY6Lii}M~xj`5yYr%;#FzfJFCBctf54OKYZZ# zW&2R8!*>7hF@Nd=3xUIrByhy4@gMp3LY7#@zhi3^k#eeHS=$jx=sj2j1E`JnnxUvq z5s6?V&1;d>G<*k3-YThGQ~NHN3;;D?XqVK_?`o6(s_`0lw>|41($!V1s-q)`XKmM& zaPh=!=-j%%YSeA)kSm_`^}f+I^1Km(5aVk%+;F!I!8SK zpl0%w0K1eLKD7I;;W{0!F7pPp4#BC|mk?qaKr zg}1*o9Spy@s!~FddSQ=W(S{`|kcT;|5up^%t8@_SmRFQ`N}dqFgd#zOe+Nu89NpQ6 zH}|>fHqhyUW309w-q=-#rjAA3N8CR5DV59zMD;wG6_)UJZLlJ(yd;{yxfDDo+qCxU z<~;8pv~kcilp#u)yul8jszw$FrFe@l;QF_LN{2sl!D4(j=Zb0Q7vFjlkZAb$9}7=9 z316J2E+|k-slu-U7b|E(=CsWJ05#Vm1?wZY=qjl`5;~YkUILr*ikT7-Na#!QQo;OA zR;_ox4$Dktz@kOHx&3^+2g8{}?i{c>v=K135hS}zs?|FBH^&JPPH+cU1sdbUSvR0$ z@ii<@VDCIRe|GnaB5{favZ=hyPk~yulR!Mnh>2i}RD3{k@ysgiF4TDEn=cl!48-F8 z-8I9}(a{23*~F~1Z_4AN9bvsl&U9W;OM_+gNYxEVO5}wLXiTZ;Zg}gO zZ(qaag6rpmu`L+kS*mQ-jB}!g2f_2P;*xPC%WUV(xfkh&+DS@=@8W}>L_kt}Cx6%8M?9gZNUZ$4&IQ>ntAIo?LGk;_=PIQ{UHWN;m7`@Zm7wvs*xrbV& zl690OV=r=5rmj`}Cxu;ILUzK8pdy2aGKnE3R*!fe2(@iUjiol;PaH>H`zrj=A+?t% zzz{dk)HL+#S&uPQ*T0FT6O`;FIdS5qBcE7mTu*medW{Y>edpt~+J$F>vpeqG==N(jdt2p1 zBDM^S+0(7gZ1;nGYSb_+$=W7X+0UMZj5~Icw|Yw%?Xq{vW~P>dq<(bUl2?xA;H`DM z9SyaG=5YMJxc+Ab9&<=92tMIduZl;!^4jK@T2>UXTm|&^Pfr%bN8vuuX{$?^!9|RU zaRWtrGgkV3aTo$OfRY>2+qvJjDKmAM&{0AXm2t#((4p7|`K2gQS?~{_X+n^`)M5ek z=h1(D$Xr;{4Bli7k3=9N&r$^%svf;Xy$-0P3kqUk`|Ftv@#dI#tII4AUvs~n_S zMQ7K>g&*!lj-oZLd~Nvjbls|(ZHVh|04G>t7&a?@LdzUSKJ;srHYH!`O}`oyR2Ly6s(hk$c=X0`gOC7{P|^0F=T&8 z3k~)O`-s)e6~;?_vMAK^7aGCeT-*6UZooBn))_uWP|0ME zTQ1spL`ti);(w|4^8UW@My6OtV!ca-7S_jg;RFl!o#8jzlL5iYOEq{$M5>g zzrPHi%E5y@Zrp^ej%Nc+I{+I9@*Z}uu1!O%R!i)blHavLf0|c_y0E&*ThAAB_(lbu_?cF4gNGGdI zGezX(0F04!n~mv?!Z~s#KB? z_s4b!T({%bdL|ubW4{Q$LASnVmrNy3g-&_w z(mL;bQ`Vf1^jdEca)W<5>MU73-#GESHeO$pe~(LZa_i=O03Yi9KjG44qMt<|&Wz9P zQ3m{cJjI+HbGdq_-o7uSPQlFgSyVl z-BI@nSPLwHP8X8b`-`0OQMFwpLHS0*>N@D$VfWaN>ldwai=%i!KNcSlOAR9r?-ZL@ zt6RDP5;&uL7)j{QDZvP}!G*0({^cUn=GkKS0iWv8U)h9ghxua^@V>Ty#PYU3=a zuQ8uKtRqMoH9q^Fa$I>Xw;*%XpYyH4_vjniu%ugkeQFq9b>~&S&7JBK1!@hCfi`x- zb0<>mk-*i{%Gh$W!e#dBYr&hiL(jDQm}x7nF%jk>{MzDt1j|95R6R!MF%lo1|*es+tCN1F2*1QK0plP_+ zmx8whAZZqdq<5|+Sj=;Y5~P(Qn& z=Coajvy>2h7E$nBhy>dEMuzHPN$SNXg-sNF)G7>ck4;+;QDP!|K<)wFD8h|gg)HFi zT-MP^$!CJT4*>?kI0!$!^_=75Hr0kFS^PECH(SAmT5vfoG&GXbJV`k$@gK9M4Xd7g+z(3`K(Gi%7l7DjETmWHd@F52>|aRxl}MKB7nU&dh*#>iW#j?C z6IJ-Voq*0XfX|P~b7NAV3ZVId+<=|s1NoZ#S`q8i1g?$&;c`#>5X|Ljnck}J(5vnT zOewhf)gTJX#|lk*3OBZ73fHq)yDz4urpmtgegPRz@g~5Vn$GH)3O0nzOuYgyCqPs; zL}w%as`x?-KW=t2_nP#k{#CJsK|xf?oX>Q5w|XG^IHjtp$}mL@zA>?L$_rH~aWAg7 zU~fE261eD!&aaDMx*`Y|pPVd2=fl|jdCMlOJJ&mZGQ4Ev8Gp8mST&>8iGxiZ0H~w= z3I%4x8*7F8oVJ*p0(HuUSq^@Fwj+%4nvu6e1*29YRH=E2caT+%#WC`@!(CJ=UfjR==wDp1P=?TT&$H*;w1j4+lS?qhB)E?GT#yvBDURAi& z%!;Z5(pHcY6ipnlH$SU>AVDfR#rx*-=sZCGx|pT>)fJvgGiCk3@k9EOLDH*cPvHLf z;K@Wyx%spwg7T2Q^8HDyyScl)TJ%|ozW59hah{ljdK&(suUTpizrBdQO)1Zb?!*lNM~_lzZ@d`J z>e^q3wZ8qyBhh)5-Fc$)@pM^|sZg;@u7Su*#X3uNLeEq17*RaIj;U($1p997GsB4| zy#>Ho1kggsx6^f>6LeqJw3EN1jVWqV;aFI7eq&xEobI9pp7TpcKM3LuB7`2^h0a-j zxIwaV?IjE`7e&wW&5dj94h7sefR}2Vs?BYn@@@>eI6iF|+3sTItXY1GeoCo<*XL1m z@9Uqkx<3qKWyQGz$49-DbDwFE{9Vd-QbdSEkt+q7*W9zL-N=clEXASvh|;N&JEYJ@ zQCaRZd9C@Kp~c;@`G(1TQMcPp^SweIj9?Cvc%-m{_+FRfzn&14Lh_NDyZ0iiC(x;n z#B-Xeqj^pAX@tb9!oUH%zd+t)(7BZ;{0!-$vS>EME6CQjC0ieo7w$6Somd0$4||B( z#%E^J5U+(Dwq8+-;KZ|uaQt#aQG#cN)0{zauIFvjI%76=5TkLXR4nuWUG7O7s~@x; zXbWOAM@P|bCkXIxtt^ZQo1!w3AP*hx`i3B`BzQ6wHN_*=dhov0P>LJWT~2sI9PeAG z_ALPUBEUn%P8~FwvoNBYd$Jy7vt~y!Z zCeOv@;AkWW72Kd?cV5~p?jEt49p!H&du_WfZgPJ{daKfyy44HLqWI;&F~=Seep!Q=YjEdi?T&9BDHQ zir++Gb;ehP&GNrDEe;7Iv4%NPjR57?Rxn4fAP?nLA+z4^cOMI-~F{fumC*N;J zrQVTK)yP0f6x~>R^oQ*>b9Y8MRaeZ9TlDJ!@4Q(`E*$qyFC4tuaJT69iqF`#4PXvd z`3&{2e;((2`ND1 z0<8#j^r{$pOQcZLw{!S1S{qSP>KIQ(`36_eC$WdO9dpj1;P0htQQawtf|>SfE2C>sGu=Prh47+xn(~Ba*U_ zOGs7t{(k&5Rj$SSLK+Uu;rA-@WP+X$fp5F>Pr31>kGn(;2Df^4ZstK|D7(6>X3Cf`VVaVo9)IY`)ii{@BSEy5 zZKU-jDk}qcAG8|EqfFjJ5s@VzGqQ7d+N$@i(~8B(wG91z*O*Ad8+wxAAmoHtN-5iu zh;`I|s%`IqieP;q_ab(#ZymqZ?^f>$kx;Yrs%P5-ywK6MPwIEO6~He;IA~1eq?7ng z9!wmTI~05>H&|xyO^UuTx4QpwH8Xf??hq|}9!5G5FgiZMeEj%648^k(=6l?gqV2Sg z2Xkx+6*eGuDnaJ~k{Fkof=d1UaOmCuA>Q~y%X-?w0CIPQX7r7ydk!&F;xC56a|_Ck zpXM(FOR9>z0*-n%8qCh1be;%Bx*1~*-{BP3{9$`E_RELKLLUNqLul_p;?Sb_H+F~3 z^=&;xsp7IL^~vw*xKd>-Q1-IuXB~4dCg2>_rQZNaet7J!T}Ee`F5Q2^mtC^>c2Dv4 zb9d)bxUtxj*tl?mi-#Neao%WOC|@JNGyO0Lq^%({{w-jD5{M*)_xASET~cm(dVG!C z4LriXmncD#1fU%_C&*3ldGOuTWGr~Nb$h@Rx2UV!7=QA?OFY&E%D6oJ%=pt#i+tf{ z#sk^ghQw1)vy~xHVx$VigckHO`S~p0r`xxxwT`9fY0l?Yec$uqq~C{Ii?}@|d*{Qg zmy)Epd|f?(w))eG+xy1;)ozoRqdVIX&01eN52{|p$tw<3WZSQhm*gtZEqwYh7Qj-n z*ZopMl{q?vp$)oLJ}%BCqEH zxA9gI1KPR3y2Wj89CywS_pV>AZ*^D>%O`4gc~h^aF}f2TpggwT+;<6IzjWMPIW(Ng zTF>kmsmIw~^w0|{HMWtYBc~GAUJill`I{5XFFi~F9KL&qP{pvh2EomH2r7_ne}p>2o^8`n<@L+5tKh13T0L!r-p zC{Snm67MU1!h6H=tx%#&i`Z^^#*p;x2p8J&$evr(C;J$Gprh@ELf`F}g#rYg?*a>h zwy|ncrqP&kpUCl{1T8_Gh)+tWX(i{LC=c|H%p5raC}Fz1XsEfU6I=3V6E7Lp8d98s z0($Ib-{aN`p!Q6O>r?xbqbri-Fx%%qC3reZik{}OO>RnqcO{0-Nq!k@XF5LbWTnce zPk2@0p1d|T=q7&Hy~(nl>`{I|ig9@W($`A`DfFhtpbBfPc&euo9q!RiMo`w`IB6_| z0l!TG6qeo(dCHhLm22rKWEdYg(sk?-nJ^;n$=GT_-W&fBBo-9Y&A~QUb&q&{XV==* zgILTuIa(6#4@5?{XFWCgg9gT7QWQkBRV`70&W_%iLg)DW;}T!~sAklB9u;%__~>9= zc<&er+-*!NMz=mLj~!AY?iyYc@ojEEPjpkGvimjKLFFl@MXiZIXJ&#S+>h69g4ag( zvVkbc__rUHyVk>d?Rh&cw6NRg`1vpx1?*nebgcq)-s6Li#k&`RQo8@P_R36!Q`3`^ zuLJZgYt_HS>)Hct+=>?edFb=FMDUwSNGL3KYR4Eu5uRIIv+uv(f3AKRQn6IsuR~Uj z(p`yL4nqL9iN08A`;?WCVFnO)AtTAF1nt1@1^>>^1)~eJ72d))oNIsWzE>d&?(VcP*I8Za4v&k{+*erJvS8!{+H}4BOcUv{5S05!4-ZR|jJh7eR7% z;~O@h8Y?z%hYs*m8@h8l#U@ie;4A%dV!69|c$;gIzH6y~*?x1xT@zOxKIXKL z^HQ-JWO9_zWVUy|Rl#_}6@{P#EBb-b;EHcD)Qh1(NR4ukk)tTvNBVp9N^bb24haO; zt+catq=oc{2hW%IXbplB*stqQ7N^R-dh}64DPS1;amMM?Hmxi{nub106?-NrzIuV* z>w|q9Qtyu=$~&5#cDSJgKgmXD-xNEuMQ4gJ5Ky=W7=~!i7b+{Lio7hPtg{7bsUL;t zf@L`fu(OY2Tun~$_c zn(vd_$m2Hn0(@B03dM)O&=I#`#3N%^@qGtpqT%#5~}?MbEMVaE4zYTS`zC=VIcEbH zNo7dFPRk6taVsGQnfTe=6hG3ND?91s7NAj6`aNBsDFjfIYC{zO64OqPj@<1XwhCpXZ2Zq$@Y`9( znT$###RDWTNeQHCP#h~34LW*FTX-TI8ci7glGY%n(=I2iiNPRRCRVFJi;)AXV`kDr z_W|FXA2|w$zk4}4UYPo2?CEBU?Nx6+F2aU?%(V``IwVgxAyWq=hu<+kIL|PD9+a|) zrN*6cg0zF42S^HdzQg#AKWEBIuCm5^E6Y=ya;K=1%C`O*3(MlCw&WkgpK8}gusFO6 z)qQCb#FV0VjV8hjci#9WL`RcMqHHR#x4JbYv4iNp`r-TBHBp^jo5PG0RCFXaetu>p z=`Wy_mNJYg`bxA>D_cqF*2Z~p{;B4qT8+frWUjQ~m@0XDvBBFnx}zE3V{s#Rh)ydp zm{k_gV^Ks|1K2<*MWDO!G8BtuKIKY}jx0Eu5MzQBMo@x7%lHD18L`|8BP!k7` z_JAm+<$#Xm%mBC;d-Gcx{0|{5>~S*QAVD>=QTAs&SsZI8rdp5=HUZ;pv3WJY&S%Qv zXzw(if7Nc445Z?nnu%BVsHd}BkL|IKVE1jqjf~fK<9zCkVf-YPH2tHQXvoQg|M&r* z{8SrXeT$9O7^vh+@Rt+9Wi@i9?kzD-aWVpMKvRR?&5%Xv)ACo;Q2rQeI9|+Oynj-P2J_ud~SWSUMG(dX$OEF=ERKk*zlL;NVpSojDaIQ_s&9_4J zoxVRTP~5*?_@>0NLm)_`7}+WDe;pvFNF=AnYXI``PX8?utA>g2cW8P`oUF8nT4#O( zLV3x@D)&FwSKyXG2Kf;dXkKR2G%*f(0e*2lSBh|Sul9{OnJeXr(hMtiQkcVbCkGZG z`^q!}{4X_^=?*KP6ZtG_$)ZL-daJSyJsQRNMCfh&Ov-E(0s7=gMI_W!6x?LNY)$5= zGIZ;Y)MfO6nhts|OfP0$8-%D5^W+0|EuVUfeX>F{>GJ7BFEC4T%hm2Y4ti3)?T_$U1#OTEczof%$hl%WD3Wa%Gxfn z{xNB8vXWI>R`H3^8GH0=)<+SVoA1cQzjegU%R6~0Q27)BI)%# zoYLlw;#+|u5|FlmqSoi27gyDz0gd~z#WQK){w zdhjPvP(Ppd3RglOb$YHY07_lr6$loxc@4F!qX7s7KlwKP&NS|SH{~SX_*bGa9#F=Y zdPo2LbfeR~yQM{kGNEv^=k71SA8;Q!<-lrCMS`^<65qj42C;YcX9HHWhLtj^T*$++ zj}E&ln$NMu`GI>nGV|mAvE^<#=F169YFsYbnVT@LbhoSqX{B$39@>?x!%YzvzCXEm zY{%k(vhfYAbW@=~kZ`*1;JHws|G`*u=$u^an`g~^_$T}D_U?}{>pA{sb0ANZT4hx( z0BgW_|2j;?B@KLby=ica4)Wbko4B1-KieP##}iPrU_+<*#OB6?VrudF+F0$cZFU4D zCwOf(7C--b1F-4IJMBJ9b4&frs$P(NXyW>{ilVTOA`U=34TW+%ZY-)0>CZJ7XYzd5 zfq@_sp1sgUPzEQnjWjY8TxkXrK{v~lAISD}o^Z{q89Hqr1~jSTPUvv%0JmP~&(TXU z{jkEP-MU)r-Rc}jht6Nc2YuyyW6-EF#*tZYz+`j(e^2_QG`p?Zl~M*l_0!lCWFF`U zRX6TJ?I4rc)gP{q4Qmub6rdAV3|ZhJn1erJ+(} z_4H$@JMEA)$c5OixJ=%nh8K)vR z7+Nf2#H!BEmPm+hTbES~p_{m9EjUCbr9ZVcA78|n61c1(Hs%+~&kj>}UioZGo5 zRGma#_xu2%Lp=TsNPsjZ`+)guN(xJar^{~-IE;_Z8FrUC5p2m1O3L}6_ef)IDgWqp zV~$os>Xx&Qzri4oncNd(R%Ra!c869*A7ZG&Y=mXt>M_ds!RJijxOUzTLqBY}i*->I z8}M{1sefb5=3avV{PhoKPDZK>C<^Dtr>0zOJ&k<#hkNu=ar$n!cNqH*X9JM`PUq>z zz4J}*-Da8Nq+Z*?h7sv%PQDJSViOc zgMQ9G+2*5|EPl3XL9aJ5tnm0@LFDW$CUfVpc+F$Sj3^Emo@X^&CA+^(3V4-2&=`MK z1ISV3sV-U$wt?lDZ2bSgA_I;>t|(H02P~^9M&`KiHdF&u7k4!Nvk#X|pa1>QFLaUi z5mh8?De}^FIOoy_c=cy=#BC_n1~Cuy1V?F#K4KCHO(&)H8{Pq+z#Qy(m7d#Kk!Ipe zjGVk4_u_w^CSPs%LHMp^N!BJIyl^8~q(pwxb4qGHGcmrsXfwTmJ*Jp1mA9*oW&`K< zF9D=RfM%1~M)b)T6?Rn=IWC4}Wh9iRLJ@~*(5Fv>Akxt_QJQoxKSztbAL=CEahM)C zAD2R`M-}8Fb$v}fPfGx2qAprEuSVr+mh?zZ$~U4EeqG#Anc^A%QzOw_W%QUP znz>`q6NeiWL}p0@KiK-d91>Ra47F1%+c2sIFoX^S_Ia(4W9absm+(P(k+5T!!~V7Q z$d-uSj?I^uMt-AmVNw=9WlCYSp_tz^x;brp$t=x$sWV}!(~a;!CUWaamsAPo^V+cw zF`Fj7Z6m#y;ZCj!yZsH(h7@_`6Zq5u2~{{+XOx`T?W+HIQ$s9qnr|=QHq7DTuT;=! zaMp}@JaDT}Ma!>!K@IJG7~=j;i_F^?Wo0_-bM5*YgdYKS#GAG)_nwN(fSNWv!2Pb_Md6cR~^mLisfce$O6YIz)D* z%`eHR4gn--7>r+kb^R-Xue$yv0P;m12wzVIs+J4??6no~`%Vuc)Vuib`iFFXEX1?^ z6hs*S)vxPW=H8iMDGK9gYvF1ggjzE;ieM9di}*v}k9bf_3~S9U#$uZhzJWzp8A#ls6ZpLX<#2RWBv`M;ui`S4a*XMGc+T~<|c}3YvNZIH&+fu9xGk9lBCwP$85#FcjT9n z{@s!D@BjT(r1D$zGtRJK*W54l#wCo>ZR{Cbc4wj;_=>tZPbrY^LUM&Ay#u4T2~-UF}457u+RNl^0#-lxg9y zSs(;g9s0mTsf{|!th3zu840HY=v#n0Fnvif7+jz_rv&P``dD)MR4bOirGhWSj%1_mp-sQCK;0X42Wdb_se}tX)jv96p z8BtTT*#>{**Yc|OxKACCWDbm6jq@A{74}=>g0HJM(`3WvzP0KG2sGer?V6(5TaB>& z6lg{Ncv2nn*?mr@e|;X428>O8FYQUOU#%kAN4b;S>BKD+JLyW!S?qK^jB}g_u;e?D zANZf3l}!ddJpJ@><(IXC(Vv z%C6kP8c6`>y4Ap%SI*q0$=4AbG1`@d=H{g~THi5@{g%%MJj3Alj-SkY8eTKJRR$b4 z=e$3ocv|YODyj~xKN*9fJs*xIE_^>6Scuqn8~`Wuy~qsVO^|L&I#*3S-%eq%y?rx( zwV8-R%TluAk!0-W>-t}Jl?7gzSrLZ%@FYTUL78Pg2; zY1tW24*xkXHYKJ)?jVgcQC}oYcyS7Ooh3jMo^mOJfPVzgzoa%gn~xR(z6IArNvWbk zPVVs~6Q|cnU!);~_Y(ZL^?-X9NI7s`a;xNQPLA=|{*i<{&mgd{lg67EC&MFwS4jOpUgxwSxS{w9{thWkz0ph8p)vw<3x6J< zxx+L+!+=Dz{iQZ`QD7OV&z%@~ld@Mlo$S_ac5>%u`TzC#787IAKO@LfS)3*#wZku| zu`x0s-|%YfOc{Hgl)c1)XF6`xVvPNjI|rTEVN8;;}EC`cgwg z4iH`n3-G!1PFyM;d{{0YuqQ;O0K4Mf>-C#D`uC3g`_mS;B)`!OV_J~<(9{3yfS$|P zh;@e?&^6bj2SjTCg|`eJatE4P4){G)h=d+ zSn3=B1K`s&Bw-JD1f-j_H7I^Spe8Y~*i&UdAD{ zOE%(5l0(I@?A)w7$hjpUSy_`y6;%}g;F2rq6<*-b#p?lF!KwcKKqYNfk+W|`ih^WE z-@bktFe0GP^=yFi;&qNEdje3+LxwicBGz*(iGWs3;8nyge@H}!1si;L`Q#y7V7@EI ze6+EpB6$DLzZ8A#4U*8kwA@T<79F!khN|~7A^k>R^m`7#d0myUFLNzj^dH|;&^3=2 zcm(RNH8wcT7h@uSI!Zg0QAP2v zYSQVI06^)kZ5nIY!^s!~7x+n{eP7&|lDg`{BSqxO5%U1mRlszoNTD(zRiYmUj=PuW zF;O6QobIJ&l0tgIO}wd2zEC4>GzNbyJgHuM4QvlmZb^~UmAjjLrEnVeFOxfOWY~u8 zcRU!IGK<#iX0pq(^yFDzjH+`$fe;v@GKsEs<^JFaSY(Ty01tKaGb!lS_7Dmag8C(! z7A9s?qLN+RJHUx|zJ)E~?skt90F2d0Hyud0Bxf(rOqs$a9)AplV7C(Q)$%hR-HyVP zeV0Y!C(xdOeT(aSM(0S|WNC)je^SFe#PZySh@gk2v zto@nB>E?c(k-=FjwZY4)_qGiGbpU`RH#~c|b!Rs>2+~7Pe zPjmbLuSZg;2*gjdWAe3_pE%3nPnYr;;?x4|S3t`P(%Yc{j%a^V-Q#DKrzSV7OfjmU z>$D*?t=oDY2&eE;5Ca}-poNSw8f^C)M_a|MP;OR75vOihm!uIdxoOXT&B#3j+(TzB z;-I4!Ks^!S+Hhy%!AH4jeW#DKZ0^Fq4Ye-nr_;L+Qw*7(g-u0U;E**uaM&M&GvZ{=Yct|F?t&J@%(v zsUn}ysJ$;49dclsy#KFqo^4&r0k}%Qfnuwa4uroGy1)cffucKLBK}W`V}uFN7eJ~i z1Gu5SQY7g>mznz26D|X44IudV{cb?p6Oi5btz-a0Hf?Qg64-xh#-t6i2fzS4>pOxg zmA}!}mU)`-&xoo+12&IeQplhyct=63RG@F!d|Wm5-quFx0#KS)8Vb;tBC(;vk6K*S zieQ{FsTv9Y`S?Hsg*S1k5}T``Tx7+u3BEArFq>d!BJFO-F~8LTr#_r%wwu@SG8o8M zzu9sAuDox|M^dmQ|Ea-{@()^Lfu*j|uHk!lho0H4g_Ww^8+E#Hc54mY;^LQ^hY(l0 zo2IZfw~et}QQs3l`;sn;a_pJ_jC%$rA;w470ZwvvM1#)7#>`or1MYU?RtQHmykUsI z|44FI`C>(^l5y{LmEnN#`J!#A3He{>m>2Mg1yNE;-VCV1xw5lm@E#>=ojn_E@)padP{>H{P(04p<9=bV<{37~l! zv7@%1pU+$%mLmD4w`kv8o0g|()IJFkI|@?493s5=p2$Q$XtBn5xu@xfciz-9jM0~BLE%XHRRD8Lu)YFs<(&D;TQDWYyH=sggS9f9f~fBa0$AsrumZ4k(1vVG zsplY};5ZIf^i$UmfI9l-tVq<-ZRq!G&p>$g=rab-t+w)O0p#asNf!5Af6UY2h1J0K zIHIgq0Ln>A<9M^`EcTkehXmiYto)=VjLh~k*8`UhfaThls_E|*21p1v5>Rr{M)cmp zM<88fvs)w`7I`nk*>+k*qv(r1w;0ReFi9H(n}^;(E0xo`3;RlBA+KZ8sT>yszM&v@ zZRAlm+e((>Gz)lEyA%U(oK!JB=sn%O=~07LN^FfNCt9z(K?44211T7ea0(D3>*TU+U43Xs+O#1_c+mc^RcMO0kQw6qX|ST3iH6>3jn^c1_Lx7)Y=6OhJY*yg#%O*GFhnr4&CxV^Oy9q zOb9eTYgQ)g<#N_a=H>L>Y*1Tc{>X8C@rk=(T1Ia{HTE-j6_(8_p@z{~nsQJ? zk#Ndn1BjTuN!^+p`Q>^;bfpItAwYzmpnwM4aAG-Je;C5;gVl_xq8<}^t?}divCx|Y z2&Nq6vH1EoN{!-~17Kn~vOH(<_dnhP=T3GY!sS9%=qBIcbyWGmHQy9%rCaWLrIC#a z-EqF1_G)uN7!5}o!0iV*$X!6!c9|w9du6<69Ow=NeD=lIP_Q`L?9-1*Z3!q8KhTPw z#cO4n;yT7e8&T1s6wn&%NKj@{$ZpP;gu;obq?jaw3dGYhzZeI4-{>fdY^p7O$+*P? zzVrMGZ?G2)$2f_@@Hb{_sapRn5`=Z58a0z*$zj%v{D7l^FKpy~9>)P8HFyXd1Fqgn zQqhnL2KRvmT{ioCjZWMW`q?jaP2)A__2wsNdNCOMD0vS&Z$2NQ!C2uZTXm`KDWszm zS8i2hT)_HdkVz;f+^HPQE9-T4|NBY|_0GF_HH;mJ)Li=3GB%n5*z40bIho1{12hfn z$~hq}7qc7(w4dLUyNYG4?2C3u`vfm$&hzer)sr(DzshvA@b1K(D0s`4U`f4uGG-SD zuI|3t8v}@<>MkAL+qbf9i~uSe9mqWZ_^?w5layO=lMUp4TnJz{^Hx4h0_gRm$+_Bz zrCb3#W_pmjBl3KuP9?#40W)fo2rw|2OD97nhx+aIukbhoW9BfbvfbZkZK6L-V z`(a^?sTzgEBs8|2(pS0xF;pYFXKfKoQXboER%s%(*~4}JM>Hdu#U7;oCJGHv86FBs z;!7|J%GW0#bQJOXX5=U+oP;nGl$h`_44PM8{F_MMOxTxIRq;t@9_X)+mKeX5g;(j= zG&wU@&Ip>32Ru-7?93YSdlmBb2mo69`RI;-#LLdZLwB!9GFaYOKV})8IH92mP z5v1oE7wd-|9!X=O8>_vR`qcTKeXDZu_uag63x<3XMHE3fQE$rT?+-eVjW@&s)?XMR#AiP}Ppx@4Q(9rag*-R*SXJc#<|GTfA{6PC| zarmZU!#MZEU22$LZgd#9!P4xO;a)ZM%wNSbPVI;OS-ZY z+}ctNx(N8evwBcdYMY~_GAXQ#-|R;WzQlB6dxzekX4S}9J;mbcs^_U-mEWe2up~%Z zk;Ywu!mdg|?y<1F+cM9jsWCZv?%u5ab;7JO*Su<=$wkv2G43XD_alvF- z+U0mrnXjg8?ejsiqwCq^kgWv+@TO+xV|FgKWp&1kVXVee@75jsS2HPQ#NKk2iR@W3 zP%D6I&u)rRIc#+u%yPzhAXc_VOLl3p%n|jV1uy-hXR##@=&g%af6eJW}F^JSLh zUYDHz#d~69!ympr`Y~IQlfm9$;*GpJ-z{%{o^J_E@Rz==|0McISt3FRluLnG8<>XlG+s`> zm2WuF*ax1sCw6)3E&Ud)Gv|opG+Zf2#}CK0Pgg&ebxsLQ0GZo(nE(I) literal 45446 zcmXuJWmsEH*EWn(pg2WK(FAvQcLGI=1a~PC+>1+b3+__f-HN-r7b^~>Sn)U4{e0h# zePrgCo!K*MmYnOH75Q034ilXe9S#l-Q$b!@9S#m*6ZXWtLx6*WS0I?3h7G{GsLM&h zRZo39hINpvBtQ~yaCLDQ&nC#QKAMxft_vI-*1&%cdoUv6n(pUJtcZ9Sw2W0F`Ba4 z4iKVNXS+G5N%5|dT{cR_e%N|8gw}BUemZ&n&h(0(Ro`-PeN#ghUs|sw`gZLiEfY>) z0Evo$2)#a!n_o>2?n9>wq4?KJx>x)lO+|qx9}Ylb45wGwjaHBH!WS2(F%l>AE~*)% zn7KB!s2+4sXnnc^_v=5!*N2nMijqX%LROKhh-_zzLh~|3e$}~8FNSX=T(0a~R*RX@ zSSkUz(&vBA3JVf7fj&u}fwsw=^d&@5z4|nKn|<74;Qr1bPt2_sn`Fe#_@&?gF%ecC zm$4iT$6h5-El^?S+ptf8sQ^`Q18o~EcK)FFmJiMg=C=^M3x;ssE`bmJ48hTsT8kvfNU{k5!u zWB9xu))2!6eMl&6DOm{VU=kDYmUcCs#2U>7fUM$I{$$*Y3Tfs zY@M|{A`VkXrT>v+e+&wFN{&IHxQfj_L84vN=O71^qgJ@FZthpcthAZSi z`B&E2Uj@msg#DEB!&(32Rh2K72(~oKwd7>Y_M1Sy<|e?InQtf4(4XRhAaLp}9?mj;NY%Qd!t^qzpPNo^Q9ZDkEsb-@ zEkPAg9t)U`Y);nT{QWLbBhBb2vo=EFy(C^Zp>0e??BB3p&YpMK{5dBp^oEpU%yCDK zISmB(OB2{7)1(6H6h&6!W5{{ZVsqJkYn$9-Wf1gDyKC8GRh@>_WsiX5Yev zW4K#rkCK2?@UL1PN5oW(vyI_~u-x0Ui>?Y;D#Q7eec+@o(I@`o2EOEO-bk&m-?4|F> zS*YYMM86F2*XUS!ZJ?E!50Izt3H2C+a7lh@`iQPVf>2t^lAfD#k*D_Q{Byw|K3Bat zGzyiJ5b8oljXQ2GONvl>lc@3Bmj|VE4ewE68Bg0@h(uv2an^^RGbyq^-sooPZ8IVCe7fkc_OJKZ1}Rk^-*ZhEUPb&aTlGoW1 z{eY$cX>nmutzTiS0(RH+^4o0_B+~Y`wlRLiYFxwVWle5Q&U1nR1ic+w_}ukRZqPs$ z{Gmrx)|`|rRQk(E8H>$g6QWHr#qdLT#hPr}+q$)EI`)?@6c?A7qz7?NVq~PD((6}o z5BB0Qko}7!zh|VsNXr#}WC&BvbLudZ0feLn|wLFTYh+H&&Fr;u*DhAviT#3IkofxcUb0vAK@@8GK+k>V%QSFc(5Ow*r zc*H=Mrw2ux^*4SpgsWp=qic*f-3^YA$((E!o^>&86nVJEK-g8%dq`L^x@x=~Ilj+~ z2j1W}I60VMjWMK3T+C(v=W!v%(}O>g&-n)(53ip5TDZS3Z+a8Uk$%-XrPg^&xoE0F zw&;)LHh5*-JfpeI*1+o2Z09W{FnxMVcc(BOvlXzQbFk+7ne6YD+b=vIAMUSK*n)As zQ_ZRl^zzY|bB$@Go7IA2|yT=zd8!nq2%e;wC(sLs07b z_zw-Dh*`=W7yo(Oh2oMWQUKuLQoxmH-OCV@Wh$FBfi03gD-6}J8s^O8iE`Dl-^3A$ z8!C!0RZYe?1iHMs55PB=hvfZ*>}@92fEGuVx!$WBXG&ao$EZ8(K%Q=34)sjgz($Tp zp?nUJ54DZuB0GyyUd8!IoPl~+-iO7jv5x;{X^LfoCVS+FtDWTBB9-}14H^c`<(29< zX~5-d?)PAZbf6>M@g#jzsyqrq5|rj4?>c}5?9bu&<79!`QAqdG`G*qaEfqeS>fX}cTriL->{m=D!}k^?#FtKTSAZRK5w5t04iS@rICNGuX&#E{yFV(SlPoC zgP?3PKdbI|NcD}z!1Kzv>gb3it1n;JcMF60j`i$z!+5y5l9ICYEL{U)f($+Xp$6eo zy@E+q%u#U*;88!?{tB}Q)SYB&lNnTrkr(ruI(GOBeszs{Iu$CTp|!UCVnImZH;uK% z2lwCQ?rj$|a=DD9(${)oFPr}7Xn5!Gp)D6#yCFn;i0zr>GuOP+v#Xd4v};MflErgP z`TH_iiDitMOBt~FEq-O~7A0;7iB8-5=4QFoQIi&9wi+W?l`yv*jm~!XvK;7BkcB2M zdKaJn%K83ccGLJ|zd^76Sbt_yXlysWMP{MYGI%&kPf>jlW7K*?;N{lgkv{L3%(6*H z(W4e+Sh5&Xk1cjf#*O~4nG(?bIQ_-WAW>)+fZ8w)>R`X~Dzs^qbDyV2{R4jfa~j;e ze|)?eAWS1ha@LnN_iwz8O{(-+LQknsHo?kcl;KG9PviXiM&v{@5~s1ePLC#~0v2{h z5@>-%kK)frm8)P+w!T{wh^f>mZRub0^f zggE>!U(LgZ_6yTu=h<-EB$m7m-|PCw0CR^VMDF!w-Xx6%2Y$fAA88H|0Q( z-oR6u+6o_QjH*_^mh_o$3q9uC2KArEt?g$6Szoq8zn6iH@LbVC=9^3F{LQ2F_vG(M zEGqU%WCUbq@2TB6NZ1v(Ns7e>L_Py%n23=ZF=Pb-L&*vzpMM80nGg_Bnf~1jiN?NV zL(RtU$tvZTto$Jh#$C%$oLv}gQi>hPRZOKSN@4^y5&q0$1s8ogD)UXEV&DmASn2%a! zE;`iLq~#5_B0K{aFrUZHKL5tlWzMrEA_3-t&wzMRHN+OUUTa*Us=2Azolumiht#A7 z@#F~Bjfd4(Am2`@H6~Dt6IjzCtr!uBYr8kTtiqGcsf99?Xtw z=i19}Vs~t$US&Y`Tn!4^UPNBWldSlA@O8!^tiE3@#vTXhSsHQ(|L{MyB1#`)7PR{J z8|2qkf8-KF?7Jc6RP6c$xLh4TjhG{n-Z98rJC!ym6??HFaR23KiZLz6$Yb*A`V)#A z>PIDp%9i5Ig*Em0lS{!j67JuPEP2!t~YW zha7z2M-(+lPu(f?-OOU=3NI)lAK*fiZ>pF6@F)F#tIlPM4&!;{J?jDcyUvZhFTTW< zI-7lrgiNdQet;W#x>7kCX@bW)^6Ypr%b>pVEMghzC`?3)b5#Rra0f7P|AXu-u8yar z`PiQ|9O46JoMOLjDP+%-Q)8vcN%WS|HP2ioX3dQA=ryTuZK;^*=E$o-TgUdS#vY|N zT)^RK4BCo$KT9!lY;DNtLE>BYb(s?OG>9D>OK}K6rOB3zSt@ZT~q^4%rn~ZH=FgIWVUJlCNuQCUQ7e{?x47j5B=@JSNU@NLlD9G$P41EH7v>zgT0z zD4ZZ`9dij*U#jk>G@aitY-bVUE_^4Vc+ry-zPcfSAja1ud9jh?L{djZk58HWuS8SW z268&xl!==JS#RJ8*s-vsR5T(6=$w{OhiJ{woeRzs+FAO<(lZZ#-ULqsSG=dX;LWtT zMOyy6k~T}~_)qrHD|V26adB^KDJPnT-teZkGsK zK4!s=)P-~3sX+Rd^xKi9PdP8V0D%Gu`(h_V*~l<2Z66)}g{ScpsZe1y;j9%XUcF2X zG~O)SAd%hkyFgsenb%Bu9ut!+*b+qs!q$7lgTu0~`|+<`s+1W)-O}D7Eg`mKN790q zg(yXo6vu%ud4`JRlMWW=$t&9t>V3mG5bc}rMBbIoX(S!T`A*qj9U<& z=TsJYHo%}F?^Kr|QmApIh!rWqt!0ucV0iZD8fc_d!<-*mAy>!S;Qmy%NU$pN5&O5H zaHZP{lC*%Gbi&iSr;2nQ#kqIHcmOM=GyQSpOA<%>QO$D2+dqu#B@57awBO`7#pG%e zqLMvE?0?0vNe-fMip%17nc*0&GVRM!NINLlej`~2aiGt_7c7A`S-vjj({%A*x; z?HJ~OREVo2Ww{~>btn;>o|E#DQN>oTmzGm4xZF9&uW*MR0l$wH(Rh=kVPT$4wembYV;5~o5Zj&T}EPMgX z&9W5|EDb{Xy2n%g@X30`QH1I%d>R|WB1VotkQE>-5MJX^qA25ZzWe-GIs4HYgS)44 zPsC69ZcDv@?giawN>cSAIiCBC&5gw{`Kp|heQXvt6l|b)`g6W;4dqG**h?>BK~R52 zhfpXk8yF3djGnVH9XVFXGyv2f7rswa^Xw$!so>ffEjn^#pc+>GdA#@cNu&q$gm&Gv$GTp6A+zKJ($k6XidDhrK0%GIaJM^A{=-8) zgl+R(mlO2&V#;qMb&SKT7xaD)v&jsC6ZV_EhwLs2zkX zO2fGULWLMMiBHFeOi$=MY!FAw-p2@kc71WN>r*y@Z3EHsoid-`J40Oh*!&=gF89ZA>@1`);)~4Zl#$oEjDd z@atCmVd8yk*AKl(7e2EWdp@%V>O>`Bj|`7onQ5@-K1VAOjml+&k35BJ77zjYjU6B5 zJXI;r3dtmrxKW6e>UzSx{nZ~;rCEC`^j&W0HW(tL%|^%6Mq5$$E4z9SQ1pqtXN~Gt z-zT+Si6%~?eZEzrY`H`|%A#+abtHe!taaodXaYvHxMScV+}Ke~*}r!0X7}x`JNxeS z;FM5807>g;48fwAY{MkzVpWo?x=mchYa~iTuq9^wx)x^*1as=J25O1?u+_n4g%4B` z|AqINt#u!%xi7J@i!hLDX)kfNM)I=tt%Co3j99m=z|*DJ56lyD*46X<(@K6D4AzJ9 z46fy#s%I75D~+{mnUWsW*0p5erY}>XPe1IlGnV%8c9=8#`dwtx9qhTwNpk2+O-T!e zlY$Iues-AHc1=fiboUEN=FB^~2pMagE4k_bmT9~IWzp^e1TuSvbu(erljODL5MBUdAY;9tRO0)RZPFMNP=XQ%yN>T&w?1`2<0m>~FE% zKA;t>XO|epDR>oJ@it z{orl8fq?pY&-(R_Fg7I?nNoZ9wDlGEQoCw!gCgAfBAN<4{A)=~R6au<&dntpEfp?S|ss;3nR zf+m|ad5}nmTSR9k_$zU59Ply6&pUrOdBFPU<>SAQHYArUo@M7s;}j6Z`JM9;^iKv> zE7Bw0kV z4@}5bKCME(DPb`}7uKLUr`Cx|TYxpBJ_S0zdNz2dI4eB#CPe9(Paax03u)A0)mxyO zeRTSBm=jLrG!=n-YA<1{&+LZjSE9!6 z#OHhAE``MyQkJSJyEeeEQvz>1uYE7x`?^p*5w)Q^4VTek7$^J_V*K?DFi%n9cVP$< zvCF7poAi`jCx4%N{I5ipokVd~j@)fqxey1@d~%{GD$_Q;pJz)ZRAI&V9Ra9dh&LE- z6cCDUkZqkv@<20M<+8|dNo~Tcpv5q@U!qeV4hsB*Hv;&Tm=v#6t|VN?Xfgd=l)P;~ zucYd)b^SxPn%Z^2VwHN+O2LEucL{@<13bf;d~7kl1yWqDfqlc@GeP5pAGDuo)6uPE zXS-SODjdABE)+Yz?k3`PG()<>6zyXdV~)1yrvZfq9jbyMU{h}D$P|GMlrMw1xopmyimbJ? z9Es=@no}yp(=@RyHCuBtq!0zwgG7YmpY6*jrgCC!18{~J)t-7>5~tzYH6|`-n0z)I zWGotE1o^q4Ij!0i2Y7nM^&Q%qkU+n+4$aoU8A9BlfAHXXo>bxVk@{2{%@cbNXAS@H zK}3>|Tdjc^r|NhE%l*X9M6Nq2Z0CJqaQ%X1?RN{k5fw(-luj!!g5b=@Qd^V`_7XdD z#CV_ch|DoYD^Q<10_vyZUck$*L<>RvDa-Nn&*8L&t|?2jmG9KTZ|x9RkJWrXP6H4P zhHVyR_-tkh_uK{vE2{Neb@BfoV;x}oUCuFq+^u!Pk6y&K_>lc)z7MvjG9ijJo^oRs z<~z>iu_<%B9gOJq_VF{#q-ZYL`8Fbu7yT?dCo(j-)Vh48b#un~ebK8DqI5I1J$W>L znG2h1E2=dxm3{2q1I$T85eA(8tNIr||0DEh$ph1B&DlKm2%Tg1eY%o^GO9tjDuvjC zgT$=X;Td?b%FRZbeT(9zx5c|I-aqAZviq=jDIjFiLwWe&omML*bVeyKEtaq)u1L=` z!E~C6I-hNoc{89D`q1x;c7@a+^W`Z~jx42OXep#6K`@i=PPD7|t~pex@4@%#>`nMO zE@8asP$;PU@q^1bdy+{8{dE-s*DzQMNg%baf7kh#9yhV82Hi~C8{wcPqbknfN zU`8s9;6&<#_$&RG`4}IyoTMMB#9X)2Hqnml68Ck+qit*BAnGegF9wYYTPxBjKceFM zXJtKo=l86mr~A>Qg)u`6iRt4bG>}Ufj3Q0P{W$w^fCnJ~vhqn_SSVsZ;lOw1i!a#d z&|Yo$=8f^Jh234>qE4sYe!DHr`o;}>Olxh)WEY{qBcc;gZ23HgGKhvF$c!dd zdeyyCj8E5U-f6KW((uyocVY=Z9$<$5uQuPD9D4MPF;>In+6uT^F(S(^nkxTz6BQ*GRoc> zGNFhy2AK8F!h(#>v=;F}6n0C({Vk_{Ws>SN`Hyc1cFJlXxK%jr+G=>`>=`RGQk3#a z$F8TC4dPATWQzgG{~sK4?t|O zv?>oj0C>wXzHGe_E*TKCyS;Bpv6XBLq{4X%MPWx(o6F9U5nE2=;h`U%2vu@-WI`Y^ zL)mx;in~qZC=ME;5Oi=owx2==D#39U%l*`9RA1aFTFuiR%e|OZ^GvsoHjAgXB#Cdn zd$bOIV=ZvYH62kx^)BJ8a`Q8nV57MU_(35nC0$pmL;DNH8t`8Ze~w*aa+nA{w@RN4 z+mOhmG!h8pRb08X6=@&*8VXhRNhYYE)27cqe(C6J{9fB23_ym4++)*=L6?Ap$DxpF zCKqj+qN(};ff&Vq5non3Z7iL1cJKB^cnE4Zox=#!r4PcU9-{zSDZxaM5HqGE{*HGQ z{lC6=xgvz?%U%U30ey!LBsbg*optBx88N42nO`FEmz203aO#RS;`$3@i#SK6q-PPL zbi0Hm2u-8;MG}=z8Yy7G!u(jPPpWABhfM7A53srr{#0mA@WLPAT+`9Qc5^AuW9S!O zSp#LCqv3-zFy66JYn`v1`kwcf8_trhy4calmE3a$j#^Bp=V*T!>ltlVySW)Cd6Q9D zTk(@XYmu6fX?D9|GE>&p2a(*dk8~fV$ODg?6#U;a_eLQ4p}{l+hWL7xt?x3=0-m>w z2kPz;h!ky^J8M%6fQE)w>5$Ri1{X_qe>b}7`=_`)qT;W26M+FW>7VI5X9u{`4XhNR z6}x%Qj3`>ASKZRVD`P8zg~}sLqGmGbf|>IZqbBz4cHs7G5-9hBkCp={DMiJQ+oa0$ zc%g{(43-t(Co35nA+W9%gCPVgeeK{xjBM1^WM#H0*WC|?$qL&b-H~4@M69Fz-#uQB zWeA5<>^va$adBNxCI0fX9J%RpQvQR;n-k`!KZF5|q z!GllEBY>}v$TyU^F(ewSeOTO$S2ArY8j@`?6mx=-B4PnVTpF1XF;!UA+%p}Pm@enL z;+3M>>HV5~yj@Dm4|^lXSCs5brU6@~W;&3_B*~Ehu1&kNAHAc1uWFA)`AlY`Hx7)A zz-md2pKZMg`>}%2{P9YZ&@67KwEq$60N|GNQM+wG`LaP-kye(R`hM5jWI{LV-z5LB zm$O0=#UneZ(XsMb#QGTDuSCMO0hSs5NNMH`PY!^UQnHZURlAFqZyK2T%Os&R=%cEo9WzJhoP=D*drz?_CrC zd|Z?8(2tTv^>tu%2S@El>`(g(@@?xK$)rjqc5dU<8vC)P2fmS4q`D}qy%E8Po@BJ504*+F3w_58Wa#@OCG=BtKm$Z}NWEyIbk8r{zQ>se9Q41xz(cdz zzAtlVuh2?pVGP zLH63ncnyIW#^Ue!5$4cp>F@oUCGQ2C4`BW31qAQleaf5;SNiAI3m|s>21rA@EOq_~ zxCJ91q`uEolK0ku@^;S{VX%@AL+vTC9Nnq#TlW`Q&0)9c{xyct*Vtd~-N1dw=0kJg zOirVtkWu-Vmzw9hFJenBXtQZ-8~`Ols_Mt}h}XtpgV0}i(fq{DlwFeEgUZBQJ9|!O z1lDAB>pua9i5XzCe_f=bgBPvlI7%N-e(#*CZ*-o()6x_HOT&&p)8- zlz;(S;X-r`g>?TGkJSRsj*$g|IVeuEIb7N(Ge7A6l;&L;egQpDn2{bFr!i#2`3g}E5ET(o6G^@&f_UFiOdnBd zN%9PUO}o3E7qhOcsR9#%MLRiB{SZ0sXPnJ!EVA@Ege~ennT~e14UnOnr6?UCUelFs zsZu0zd|QzTfl$!S2tgzR2lSh`7K{t{33y>gO1S%|zZztpn&sAO`KaoI z)`|p%II&Xs^gdAxlR2T4?ZeokERuw$pr|@qe5kS`#s4uaxo_YrB znbYW2o4KrP8HH=%yrTze{@*@64NNYqH@pF7* za3DPstr$?4@}69lm*2eJ>-W|6meyCv6r+Q|ly2ycqB2Phh^nLC8;q=ZDE0ApY6Nm! zTRh_{rh2~?bnd^j@V;f-VQM^e04ZR|=^y>w5a-|$Z_ znsWm_hwPh~wm%E|l#zwd`t+9@;@7pLX_EZUO zA8-yih_6o>)fx{gC(7%pXq1sou>c?k0Mc^XxlCS(A{QjzFynSaq#`$Rbh4ZaJPgxyv8~@ z386It>APp->trqflhju#U>-?b2_izEcQlZ_7d}v&Os5JSBu+WwG*cw@8u@2YBCjwX z&FlR}4sC`x)EzT<_gL0Ir0t!=p>uh^#P&HJ$o;RNF*%Mk6LnLT#M&j;H%~b5RgqSOU-Cf z?2S`*WH>cIw)7j2a)xy_L~w;IsqM@@g~p7>lwLOy$XvJ&OzIqOJ7hwoXC6#TB~1S8?9`U*pzV{aNc@46cPqCCG%chj+S;JZ^1cd{xcqeYGiYGlZJGDughTX}5_ z0t(e(i*F-lRK@_4E`cGyM?PVHkY!nqfmoVwdNyF&$mmUb2KTF_Y_sjAaWRB_KIJ+2 z#1^ErYP5!wdZHS@`P*q*?9cf`6SnK;Wf$jjjPbSC^B8K%cUyybQeHF~ZBuWq27YOg z@OhC8s<*z6W`8RyCk_4m@&~R7etU5`pk_aa8elN3&(KOo4P;^^HPvk{#2?XAM~lf@ z4wy^ndGV{>EhLyhvYrDunkI^V0B%ye z&p?tZ>(6{E6A}@zI964~4p6NQ@G00bV^vrSMrP2c%qT7Yf%gj9yjoZQ`rn@C_;*a@ z+&FqCWbBoDLr2Acw4ZU1aOiOeYxC5$?sxUxy7O)8_b;)VB@=YAs0#e2Aef7UBBlO# zSHcVLG(WtJdFV1ls1K*BbimEY@KPnup!Av_*q`N~v55*vnFM`kX1tT_Z(k83@@GPU zEwmmjBQ5yErk3GF#ViUg$Tq|1ZOt>*Ipo_h&a^ju7n-FYW#w@e21iC7x%kr%MjqM> z64D7@hVqu_Hpu8s4h|$v7Ye+5yLz1#do?fc^@5d*qDv*~mShwZhp&lcHinTCi3S2G zKQsAVZ*Sj_gJjucaWj}x3FYQ21eq+klImK2vCx3GIuv(5fDq{gIv8d}6{YJucdkv* zxovjP4o_6bWBi~=gJTHY6OcaD%&k;p>ul>Pp~t^88jDBg2=6$Fxos4;pQrhx_iBcY zL9jG^E_3$C5~*(YPrX99`h3%ohp3SXaGXwW*Y9yTh_j;OQDw$lVD>2Qk|#HljsZR> zzbFW(8NHOlL)x95>2`$MAL0)^F#lvaJYo!B`*Nxz$(=6ec;YZT{ZnbJfaeS!0hGrF zpTS)ac_F~9$mX`a_nMlKpij6$k-?l5-`6K;`zI)nMiPI@8q7Yj+y0XEH#*pGYFC(S zRySb)tUd;0-P>N+Qd>^_dqCsS#_Y1TI{{}YczO!@J2zRd5XpUz0GnRI5$_a)e$Joa z*P1GbTc#XXjbx3`ht6>W6vxMzLGs4W8#N5E{fvD~a1N4el6QOU<8apFT|fkR#{z%8 zd@9kH&rD0UK*23aM>CPujspe)Wy&=(s*y92F@9LqneAwE)8}>2B>qO zO9AqHNMd2gahRW5le8kVN8^NX(Ri`&A3GD={|(DrtlKi-Yf&44gtR7D*t+V9fYF*T2MSl^5D-IA~oztYX?5 zf5Mf0zE`>Q&^rn1oq<}V@mFFy!MyqH+mtz`b(g2@*l zL);O88y+4MwzFMiYp-6hFBe2eh;|43`U>(yiwWY=Y&rkcaOn{0DKd@N;iB=44VgP| zYoB12mYY$nZ#1GwCF_W0g!L2ebid>KOu6|UpOCb-Ffl<`-oPk{ZC#w37Bhba% z8E2V9(i~;6sGzFbcbIY`aSIT2DIket^~uZIl>|nx|DVby1s9G&3WAq6wV&z8mu5#( zxdZS!C6}!nyb`iI_exScQ8jt|tG)q+mNV_~v8&9Iqm2*#CEo%uB$Gz}+Wdv=KdcU)aA;}XxiuQ*tWu`poqN7xtE+>hSVCP4Px5H6@~@VH)RW zNZa=Si8%6Z+5A8+j*nG;Vlk9AXbLg32u<(;|5P z?k|q2eYM{kSt|}0OTMs{EEELn^*c}1nm&e2x`ee$!%76BJ&vtkH4zw+W5pGDqWSTc zZ1z5~-Sl$*d9!A{>5^Ig=bo>cZuFW&@pFqc;;UZlI!(3o%|yLpxC6Zgk+auTO=+s) z^ZJ7v<946n0a?^_nIqCR<=CL*Ehb<)yLM>6XK5K?D8S9Y#CQ8AL14!G#~rX#bUrYh z@QAr`nLfSho3|9@4E!BX9#yF{42UNo`tlkn|0yyWl&JX4r>JR0nnWyZRj5m+nzbQ@ z2c(_u2K}2M(v2`vBxlXZL}2p5+*nI#Z4ws(+#01(qs@@7sr!B~GQHCjy;)Ar zaDEU7tPMrZo3j}|8AOZFtk-Pw?*5gJlLE;?Ny2?t`kQ;D{ZS4*1C!EpP8Q- zmq@Xi&5vvP!~iH3NI|lV^$iVM?k9HQ!!4CY%Re?!jK0!r_cHrkTV0n*CN+cXPbxf) zw_`(GB$Do=yDusHeJGQ3^)B*bgrz9_;}|o~ChGkS#$Amfr#4FFWDT{MVy;57{S6Ml z$_hd+#?#;V%%Cmqs$^@MPlsxZYk<#Q{x(l+pZKi<^HlN_jAo>-Lt;}*Jgx}V9t|CL zZ2De}?GtFi#*2c+m&qf7M4Jb3{G_>8^DSP0smIlC6;K)mj1i134pFikAJ-oh8?c*? zLbu}kzLoG6%d@Mh>_ssVsavlz#1Pq=oP>#*#uv72R(p7((tW9i{4lUPH|z)|)oui||O zNP0N$eAZy-;U?7kgb{$-@!3<(a?+hi{MK;4@7h4!4$(lQm6}yC{LAF$kWB>MH; zJJjy-UmrHAJ$PwE-)C@>i-EYQHW|Ot07aPQ&%#(tH6PXbiMY}9P_mgbXul*Na1%hIxe6GI))E3oRS`O z!~l==mi|zi{2Nh_#pXF7>l% zb@1f>MSuSD?2|@}h6ftaK4+c@0axSB@+*Aqt4>7Vj*OOLRMsGa*^e%U(ftz_5t~by z(fE&VHGvE3iKW8XYyZGa>llN~?6Fqf&BRLFAhb+NQhU-Y1S*d#K`|5Z?Wes%o=y2Va2(k zemgs4-k7TGfh5C~^%JO5DhXdMN$bj0kP){Xg?39v6CM_|>&vH@9e+rNXP-p?5iC<$ z-M#?@ldf;tG`klzA3JA?L~>M!06{OQRq&A(qbuX~!E^-0uq^xrn0B1yCY-(YZ6NJ9 z&j=or7b>%ckx^-f;Zx}+=zE&sQiKNq-W|s~0P6FmmFRL9*C;h=KoRa&t(Zcf41%|itLyKpbxeh~q%U$wz@V;C zwQ~?7X_iQty=@BrMs9z^h_3U{lWTl?k;_IYm%UF?VYxjFBp_r^VxoZB^+n{_7q`SS zQn1Jmy_*_lRRm)NllsVo)9|qy$YXTGld=mHz6xhsI&zZ}nBAHVGF-@PiDgtad;b}W zsFkxwUkH2mRfejn3QR&CxNtd7WIe~-m6AbJG16++{Bdg&w&X+; z*}9&OyDY9$qd=i*idsEdrqF`m=ZaAp+Om*T9lbzix=QA7nI4a?*;?Iwd|_K3LPllw z9hoXB7x{k>AdryICcwIWC}XN*zQ4+SJFA!AgEi!{PZDcK^GS5Jy4bw#4$3aAr|ab% z&@fc3Y2n?ZVASWq8H@WEZL1|4LDQ5Fw<%xlbHte<;&#}*>QdoSpdDVh*gw_g*B^qh zm5r(gv!r2`y@eLipthI$a*fZ|D2H$ZY022W1)p|Vza9a>Ex zo&jq#E%>X$%31T2fFx2w-O<<s<>I4u8^lD<_A;=QD{>0T3$?AtV1$B?d1+Vc`>6BiB~3yo`lLFz_}Nh`6GN$Sn{bfN#)OTZ4q$VFTD=A+%OqQE;rCmMO+G zPSDycX(SfPY1xv#Sr;j~jaH2R23%~^e}gI6fBM}8Q@1YZq_s)5%`wLo-WoavLxTFg z-{m*~o%0z>$2Ub2;EG#*4+asJ?;sumcMsH8>0$JR` z@R>+DmTkRgtbXLr!s$;YI7hv|_h}AeoXNDW;d8d8W+}-qK*F%17fRRFJpM8{qxW>|Fmc zU716!PmOc0SS=veg|=*Yx=gW<2FtSWGADw+0j=`+Y;Ic=lT6TW3Gx*d+Zoo@@PB9` zb--8*159uEh1U+o((=qO_IZKYEu?zb_L**gO+sNl7JF%ea)&UF2M_v1bk}(UBzxpr zm2{k&weZjoHeefX?y!&%B;w9zp~~swYVwDXg8E0Gax6YGIl4tmA(lD` z{-#!os^uOy&=e}@aQBwe+%rY9ebB55;Xr}meD-;X|JbYl!D={Ayn8gzZZ(r1-tYjF zlxKO~@2!YQn};^{YsMVZQ|mQ!VN6E7S-VRKsnnaEtUb8meT z#`_TEk{n;3$lfrxB~C)OXt9HFc+&0n^ZUcS55@~I-S<*}+HdMjCLDiyn-1a6q6!+(pJIC=4ipc(Np8lMGsL)h+`t#|3B>EeJlCDK^}6x<2hMAku#9;?!vA7}QH zXJ|B?T+Ooq#%w@n>VU9yWjs|wLB(( zIWF1|Ty@kU7F#2FgmD?!UO3v$_vlo7Id|X%n@l{(e*}2HFj@xVEs33%0e>GVh@v>n zcoGdVaCTlD3!7%mH_6h+jtyTcA0fQzV<{9`fhg9nI3obenCM<`zv0Txb#~-4Sokd< zW#DZ;euU)+z$jjlOmcHf?il;lVQLU!HcA435`GE9l5fIhOGQj1FGS6b+JN+hPD2>;i>!^4}iB|o?QZ#0h;>AxRXI=2z(`e)l&K51~oVpKu{ z+mOT>;e;aNnLo$Nqjac_xQ%8VKO??WX0O#A_)^>KY23BVlL4!SETMR<6u26G$@P)N zKiyL6UMMF*%J_y72BhI(W4fOGJiia2I}Tmm-!07wJ$kgLJ`G0u8wp*sy%tOe zzuj$#@e(CLeILJ;Ebw=4PJgNY%jlflNHR=u<*^agiswCb*U@r4iex>xcGgzN5$K)qG&dXD8=be^=wF_G)B z{8EijRaH!m+`U#i4Fz|!;V1Kp`xf30(MVF!-%r$#yUi`{(mP=3^_`20r zqIu52qHQ}kYLwl}qkHd)5@Ta{EPwk~rT5=@Ap$0(rVZey^J>V+jx{V77HOJ?C=JfM z+|2L9&4#z0j6FRz``tA+TVCS%@#_=2#_rD#A31`8UzaY>kZnCj@^WlG1@{i#RNyE| zd&K1JCspj|^~uHGvm9Sc)$A#?YbSnIXG$3$W|;~!uBq8?Pwv~W%aB9QtSiax z(lmV~K{qM)PpWb&SKuSqQ=gQwG`mAMrpOnZWod%ZsgAd(Uk}DGx$4KC> z>pE)A=(@4fI)+gnmU!?n#hP15!tsN4M{852z?f9YN3UI8=LN(>4P=5 z`2*+(zx(PF!`Re?l_L@jkhp;)=!8r)N;-{l4madUmi$ zFRt_%J1z?d^4XeSQbAK;j{NNc2BeMssclz^$Dd4EPN!$a1sa$L{||Js*~DKR@p;Wj zDaRq=psZE5ah9@Q5tBhc+~cpPV?hBm76}Cle!u`CAdRR-;68v{{3x$3e&#CPf&=af)v__UcnnCSJ8YWt1fujYvx z9z9-pNCC`F_#GC6)M5&Pn6*74i8I-CRe$ee_r(3gW!c2^R_iSlply3-Fdz_ON4Pkb z#aN%TE%qcYxhv|;r7l^jvFekTAL%EsPxa#J6u-$^VA#3wdI>pW68n4n@T=2+97ubYVZoR?4!ykT~ zuJ*xDNvOj~{O!}EBnr|Xf=|rr-7@e`5ihiQS$w2>il%eHUn;ypj+&tzj&$?)fRWjk zu~BgA{^r_mG<55<)k?{>D5?%2$ko=7#3hEgau-kFKEP{Pn^foP3~z=JF-EDT_%s2l(D<1bwO4{o7BYHENOS6WW) zrooW)^pork|38F~tQEBrnKRp;IL|Tm$YJ|_EoEyi&24_=Ms7#ZJ?AS$TL*CioOfqW z9;#i=ty*MRFpHEA?Vv%5kZ`jDRkP-AG+22!(qT*=#$`w(iCV75ozyJ#@@0N(ccZr>Z$#sM%=}_(CoYw~lAV^> zuwZ|Mm2E z;0=~uDz#lVPU4JQxaV7Z#B9_?*InEhpY_csP9m>ASiDCi7ykLa+{ad$d=e(|3E{h$ z8Y|n8#;~BcgEAdS1ucG1R;Q-j)q~SNnQk|P3(Q}iFYMIIkl}SpN9(y=z26puxryVA9WV zA)hrSTcoLH?s&2`IZtLzr7ZKyLL&GJR%>_qmqLX4YT{eN10s~pwj*F)+|DYU9zcNA z)EB=fNfso~sL9!qTt~6|Wg{hZQ{z{|b zK}_O3EF;%RNWNWg+ju)*WZ(dj*coB|uZtwd6TKB(3{} zquwhay<&G0llMa5MHu*GF!cmEt3JJVIev1oT;W;4{Pl;%TDQLmU@pfxk{DsPCJz<+ zGw)>~i!^yMpJ=fb1i*=?F`yL`hy4cPJ)bF>{2xlGH@-g>TR=`&^y%g}%Z3&Q;?aef#ZOVa*&pLF55RHhybL9^j7Gta~!ohx^mM_r>oR zTa4mGG#G)Y4!!Rkp9JXDy-#hl;tDxN;fK%ky*Ae0D49=!X6MT zrri_6>4UCMG}k3n#$p_8v{N|V!yF{uUHKRNhAMQeo*&E~K-yX#ZSLau)bHW{Bm z4_**niZ0sz$q$*1U}j@Z9)Eff5^te5^XRL`$Bdy#*$aa(Z;A;DMr%x%hoz2LYr_Rv zyRw2QhTDV!Bp_GeRr9zTM;3Bcu#ro(y+!e4J|Xd)T;FQ$RKMBR!F?O%s8BF{M*dNR zmS^548;^qXSC|N;o-po4rP--|(l4PeBP;xGXQ$u!zo8yL2tBg|YrI8MpUVoi`}%9E z=h0E1?azl-n>@Fi9~*hit9g{{GTRUqyQN`WIUOX*(mxY z*qvS~NG^co)SlseFGd@YS*O9%hn+MRyNB!txDbs{%EG432b#08o%)?0EsPYB)G4|U zXXhK(k_9W~c#h%<(Yvs6Hfv1iuNmVh5^VcW{On+hxV&!6Zqe+{{+G=quDz}SOa;N% z9`yx*!5SKsv+`{u290ZyD&F^Mkyg7~_aW=&MwH^9puo3DqqK<>$Gz6w-$(StN6XE! zgC&B$+lqsBVObs_)1M4j0{df3;nZSj~#;J-wJ z1O*B4MBBC51~M6cz=x zf+?_>^@~RSh|wX+wO+pR!hoV9{1?lxZh;;EWZeBfhar}(Ha+|6jN&Q^VD{7qMpk`g z3m+InJ)BXz=bZ=Sok8N-rAnsh=lWshU1AJ1%?p$f76i9@gyHs{qkey(7Kg;6CMY@wKyBVLI*_C8D^_o!0 zfqC_^`<#>euz8_BogBl+zuj5GIFUW)Es7WAY(nM*(!vnBXj@l8{CRx1>)h+?V7zX? zfkIKb39H6rT=9;@!WV6y$G(TyT)}fq3$U_iDt!ThDoi-TQAB(zUDeF8pq{R0vjKc( zWa2H%Fpvq*d3ozE9!3);3L_3LbkosbF=!BuTUe8)iH#9P5edq6Sor!uNO!>hxwvz| zwj>X&|K!;*4k;H#N6<>_Q8J?5;qM9*o#=p1@ZV#M3Jz?052he|29E&xXc)FVNI;2Y*R;-L@AHoH|J0S%Qta zslrimnxrc>mYY9&Yw!fySHyUzWa}7k=Kww;he?>oO?*ibtwEXwdBX2P-&(ZiqJG z+Yv=b*MS;+c4umgMQq*Dp(L7|MX5T@0#st16R39}54j2g1Bn<&H;6^4>~9GzVnjs3 z$8J00$U?@$pD;w%!=0P_a?zNGfbd|j<14elLiG*$j}^E~T?kLWj$=`>B3`$xS|MAW z9d)Y{R}y`pYI#ZEmP3njB|v1(lfqlQKs?`T6qZDF6_Fi32-JxKJk`>e0T&q>isDWOwio!dq7lJ6<{We z0YTteG{#wkG=(w8*TaT(G~tS84~d=f49AxSek4+$dZ#EiQmF3Sxzhy0Xi7E$wv1k@ zEc0MtsXPK9!3RT(<+?WAXn+?4r<;kF7iv%bD31-H!Kw2<)1jwMj1fcJHwt%uO)s_m zkbW^L0FJc6Mom7TLY9qi`CwT9#^;r3?AnJzn`=nN zH`Gm%8~+LMe~2Gq&VL_5uy9YcGTcZZ5h|oym7$WrLj4J!8YWy>EcTkmz@ti;)A2w) zwSB=M8~IM*3>FCYhht91*Nx3aW-*%NO%m-XkHdj^BZy1x<(n_vNCg0w-M4FAI?VcPVsP^IcO}tf1{=7k!Z#Qh#^+ftU-g4F!jB3$!J`m8WzO) ztBNm(?_VeF5pNK)|Bt9 zQ?mMa`rgdkGwJI<#=&}fmD6+XeR|^$pPP<4r@;E}0^E^7z{*IBbaJMv8TV-EpC@J9VbzkK@o0Zpn+UU*e6Lv3S4XR^AT6 z-HPZ+skARBClfx=+hJh}1kZB_Nx!_Y#)D+2XtUDsno`9|ehh-s#wd@;Bd>IEjlvs7 z13`2$k{B|4Z&W9dJtCO&1O;06V6^cM9xAJ7>$IPi+bHA|FPVA+S+aZh-p z8d-nVKGaXc|Je0Yd{L`sfv~wds3||-rvo9uUJc!j7t_vc*oe#eP$yb14@dT@%UaZJ zlV}ED7O;dhpofBHRJ5cHdI8j(czzI2IGtti3uAw-Km`Y6((qDuR{PXnys^)=sHhf% z+m67e`YoO-y~e{K{wlkIBSci6By4b>IUei&n+`m{sX|AGeGLV(MX=-Q6Vj0Sy~vH- zVIcnc#Yr|fwp7|%%!LWO>tvz3^akai^nBe)y}S7E`g$zsd3=8YrE)QO4R!9weANhc z^zlxE-k&v{%czCzIZgWvJ z@$*^+3$LH5f)lV14?0SN9VNz3R!MstDQPZsgc39>pG6WEsCdzjlMl<>o^4blJgtcj6hP0-&d_c;CAwv(&}n9&-mY8ng%7!E<)q3_ zF?z&q|H`#2%}o9APU=09kBgE!$c!iPRAm$KEWRzFKW7Iz&O>YW=W-0Z9nWd1R*&<$ zz2D#aOS6Z>6~g`JhCe(*95i4j%MXi+}O^X(EpKI4XJ)Txv+EvrtB_yxH7J|P3V=re$f-syd?|&oY);XH#HYD$dy05@Fj_tkkFo+ zhiYK8D>OS24_^39BJuf^*kCV1HFcY#CGLx@FYQY^1P?wj2sH1~FU(2KE8bm{{>*b6 z`{mfUv*1u>^)+bSV7T?5T13pdctdXZ5b^g;Zv9V4l0iPk zCl3Ujzd&-IXhgl34R~C*WNu+!sHk-l1mAuSy-!dox6*y*!;p<+dgD!kh#|kii#MLO zQsC@oD!^Nz9Oq4Rw#ckpF{YlLqZ++^r>rn?82CcN^3_|2Vb8EA`?03Rh6(@af`E%| zpF|e*QyCRokrv9G{c|?g;Gm|H4Euwf%+7`Cb<(ux+g){Zn8yPM68}(;r!o00?_vJa z!$wN|CQEt5imV&mo!(OXcz{fBbb)Bs$HGf&NDesz69{rVBNWhme77N_Mw?gOfjw_E zhYq`Lfk8OAMVf>lqp_8Wd#4#GyptXFrG-8}7IDsG=i-W@jy`?vi4giq6 z?!Zm(lO61hp!ocZCb^2< zjoZ9cg;k{FAk<2=XIIBnJ$$E@oyX!`v>-Ms5x4K|)DIi0^l8R;bo1{;J>RI8uzt+3 z`G8$VQgnWkq+u#TZZ%{_CgTFZ3DVCEMl!Vu7+plwN89{}p5&!!E;H*oGluql0|Ok2 zgGKS3&c&5l5ZO*h{8$JmwJ>P_uiLZ}8<&NgiihHZtLR93^68;U z(5z`X?!pq*;4>;%OpFQ%Ox{S67Q7_iNP`02QAk@U>R25l&9qYEmZBQC>4O;p&eKrR zokEn@jVv)Ic}UpDDVUXX>KjE(Ef#$46&c^+?5ULZHBkE&yUu5vFu&`L1~FDszp@@n zF@N^K>D@WI!PODFD;{s8Z&ur`We3GnuN=H6qd5lVR%F|JZn>^wU9?ULD)X4jO}?Q@ z=H_swR%lUsZQec(HEq%SCelc{bD4OQ%xBfpyw2u~XRkpquUkyjIP-n%^82p)&MpCD z^mP-@H!|*%z^29TJMrOqJO^%e;-I{jt$s%rzm&I)aeltok}K)^ zCIaB3L>gz0+91S;=PJ>nZFI65Yg#jg?)=m(cxvRi-}R6Aj#Hwj?>+cE4pnP`$Ku%r za4U|$4JY?f3s0B7-FN4g41bj&KJ_#gT=ls>&^XTk69&W5gDdJNSDDdmKPVB}-V<%2 zQ}~IQE|hB7&Yv9&HrMzTf>}j;X75u?-8cSIScBq|l4EpC@E6#-{1dCE?YG}k)sThN zu7?q3PegblK?}cHWSVZN$wWmFT=cWKvxe^Lq`4J@-VJGHyhIq2aY-=;~5|KC$oP>sjBOXHTMO}L^RJ%9e6bIWl6&zIl147S&&%cR7J8) ztLaDnP3XPytH1a!Gp&mzdCjkGqAo=!py(@lC7>g1wlttN4!}gw#=4(Zhbzf z+DMNMgRO;mQj5P=KyEXZujlWVaCtnLkLir&l4%;GuayXSlGjq+I*Xh9t}^}OYmr}A za+A^t_jsNRC<;|2BKwurs4{|%lIT<{*N$I)(uOY8zVc31f8>#OUh&r(3MyMHF2NiW zresWT{TwvY`gc+*?+->|N`Ma5%!MtXba8Lta<6TrNT?1La0>2Fb7;LhebRK{Ng?Vt z|e-j^hIcS zC3+OZAMC>3S?a()Zp2bV%FWAku|i|}2-ZrZ3K&5*MymsRuAJ&Ut9zZx-H{1$uOXAz zje3LK?d2?l5#wIc7A{+Z%iJ_lFoXLvic<*xPIqwya%g~&f@^tSOH9 zF0h5AIwV;1v6rI4wu3LHdbr1irBkrA@W=E%SFEE_Su*2?qXR!ZL=QKK{Z(Eos*4aM z-w*?f9>t3f6m;OWB0Aq?A)>>|q%eKJXR%R(eWzyw>#(~w+8{Z?6JNQ~?N?IZFbM)~ zXn>FfBe%4#bTFF3B5l)3}8)`w|=l9a!@}MSe_4{mXa>3wE;N&+Tu32flQ2OIz zka^Vk3!+%O^KT13tR!D!Q+RCBTrZYcJi3LwnXXajgZ(*$E!#i;sj>R8@W%xcR7jhO z$`ZrSOD5@>YH}$dQ2lopb|zcL6z3Mfc+!A zpyn&i=hf#8{(`2}Dc!@tG_=*cAl4Jh2=A08V_Is-z*cz91zUk`-J}NDxrfED`Y2`n zv zGwdsr#mpusFMsbko^}re1HStDyYzAu0xvawhLO$gNrT28OO%uDNFCBL*(~qoL{4Zm zro}oJyNU+|;+Orr99uK&4+da0Me2`>XR2iURpN05^T@eQh*XE$>^=yL$IP+tUDBF! zz%Ma)))g((+80W3A-PlCmT&FHcx1$6H%YR5rsrPhQcyKC+1P5mISKX*uD zcn8AQ`m@8)5temFmA1e26bI0ufS0W8J@C7WGP>r42c?1Q!+?pWW#&w#Z8?4*2!5YO zfaS+$C$A5mR~BJc1*Mh862Aw*-#t$F(Uh6+h8Y(^BNu^*q^#%tqYqcKi;{+9zhTK@ zY~res8hZ5{P6f=gy-?5QJI1-IXyOZvz5okN#K@LPvQ|uJ?+%#tJ-lthDQLTWk_V9H5=RkpQ?c79=#NISBw4%NHbJppi+Tn!8yJsKWAh4tWuT%mG*cWtI z6Lo0wP>87F{ngmjSE_-*q-my7Jpy;f_`lAJxZkoSbMU1^P$6j1QEP6gNWfpmq!Jnd z0Wx4QgXIUo{s6D}v-qZIw?^456`DRj{5WgX=@xdaub-L+7k()On-+YSw>$Plu>0qt z3x3`5RtH+W$E@V0G&=VaNx-0!O;jl(ytdx5Vk1W4O0jOxHDHx-QiWIgPY z47`tYL7larv*mXe#;|DMfKpQ)TpD7H0ohT6WP?6bjUO7Ddu_eoYI_~+&_N(EyAhLZ zKp%%6Epb!*6Akgu_e@89g$=oE|4mh!A^y<;9UVf`KA|Z&d_kRCP-yM-EsXNPi-y!! z;y36}Aw(;fIi9f#9UlFm16%`^h1k@gcV3-V8_RbR*HSZ(ELq{X+G{&33t~bgBw5P? zgMc|727>mK9QF!`rcpdc47sJR5~oZLVPUJ)Tz+9IaHbwk3qD&k#j7rxQ$$56GH6D79V-i-NUZLRhCQ}ByiaF zlHd@))i;(b{g9^?U`H75y+cak{Gq7_J4#G45yFiSyn1Mp@4}N>0>qq6n8pkO_@W{r zywQ2mGH;0<1o1fyK`6Dcp#{#>S`Ye($LaQ9F4p|&DZ#<_X?yR@;&{4mOd08$hpKxs zRvRm%741zTb5&RiPBnSLQ~{$yE&hKDf-W{)tC~7%Pw-sm16+o{ZpOn`(5%jSrk)$g zN*qJ@4?F>UZfDx~^Y1)Q);dyyrPTt`NaDbWBs-0*lo?FbO2qRDm9IKHoytKl`bN4B zP1&J^=!oKMh$+=laukoCndiw{F$PL@*it)oNce7|BsOV+w*^&lvBajl{ma*%!d-th zz(1Q_FZebn{%S^tq~>YP)U)!lQgD#Qjy2uaF4TLJTf_V4FbV#_z;QB?*838CC5>Ti zw|j5=9DA&lgWFl<0m_3Uf>pnAd8WQV@z$aMM-NBick*95UPEGvtvt;V6u-zI`FEur zwYhml$@Y>`g>mci%>F4q0RuJaOCTE@4UyHX{LB`&I=_)I^sQgQ}GC6BXr1& zl)|cjbjthu$sT#-S&CtWL#=sQNVxd`vQlN?pd=wtB0wi3!ghQnPxH;o2m=yADo>Ww z{tGC-JTo4|yOK>Pvt$!H2rkK<@cqjZcNN*sg9zccxONVj+EG1TDUei9wXA}4l4s+_ zh)iylVqH^hn~bm?bSlm$yf#VwXQlYL085GDgU~4=A%A$Osyg3IzAFz{GJJ1xp7wj9 z=Y7ZQHF+$EOQ5TD(9v5!ZoDO*@Yd>7;KgI8_tcA{*14KA>0fw`g}$q*q7(0-8!Z*# zmY;gnj%U=Pw+Z`Wp#zqCujw)I0l(l_FkbG1ok8UHSB&D}L`npXIz0K2{HWN4LLOEl z{8{oMfHbdkT*hrDY7o?+Rcze2JS&?bIYIihAB~=GJb*-cKtjfcCk_G&es9{2KTJe0 zG0*Q6)$5dR$!2UHu5LcqgZbD;Jk^vfJtdgFdXQyNlxS1U_G?8wW!$WjOck7zHW{Qx zR?H`xhX!e`Vyhs&OB2B{#{63J>$i$ahU&1Dj+yKu{`(dDwDfTXOZ>RPOS^K?7G!;{ z?o7-QLsVDNdSvpD0K6v#8|ipC#Oa0i*MtlU**FsiM!A-CL4L zz&20uARQ+Q$uz(Vl$j^{VC5bWR&5T|>sz^A_keJ^M5@u{W^;tY=Vf=z$_u!vg+XSd zhdlT?oRYtx<9<70JG&Y&D!8yD-((mAFRU+FiUbqd_fXXZ4XVdR@Dq5%Qi{H2v=cE= zBW=O`npnawthH5bo|LFoM6l1X<-y=+hA!0-s*w}HxZo5W>rPYX$4odT><>fy!_=wx zU{&xW97`44NDC@afk90@(FPuWY8uBF?Vj(-b8 z+Ppso0XVyLfMvZD94o`k5Hzt|mN(icifg$z8O9(Tv-&)(ejf{^)v9}!19v`BytlSW zWRR*{SrWUw=_K1o!6>UKbQDmZIB?mJZ$DWu>5Q*|deld+K$}y=~>W0v6{{F{YqOw))g{vn#FT^`>FpvS7Hh-T~~3xK+ny z7_G>4e|>&$$7f@shJIm8lZtx4iwe`M^#;9TxfPk(J;OmNL?3#@{w77#uz^QQ|Av8pT#SFK zlkHg8AQUZhP`wco1v5-v&Hfinvi!ojcg2%t*r>i}5XH66&W$pRnBGH@A_XVy#Hjlx zT~;|ifNjQ!CnIzpfR`Na)6`R-o?-$BmI>${qsc_Hr3LFSLdqT7#MwH!{9D~=A|xQS+#cJyKBSZVApdcV#L^x+q(3{B=SS` za441Br0IFl;V>%nEUq)mR>S5kG%Z@PqtDma7hG!b8$c3ykq_YY41MiBzd;F12n|SI z)IsqM8|4}T**wVi;^CQ1X+WBe$k9{lpXjj9LM&NWHm$1k6a=a+X6gzj&M0#U#25k5 zBB2roF$w-nw@_`w0Mz8)c^gO7z^{@Y0pYW;2a+Ve(xGk!(jx!$0ED+eL{AwH;t6~j zzW{3xKr8r-WKT=tD*_)88#lnc!uYFlz!Z;8swa#A|B?aNPC&<9KUem$om@wHE*nT` zkL)*Ucut6tZkIRE0*}$@(#KRynKz=1Cgia3R$?vDTVfQNQiN%`oJvx#tlVw~ZPhmH zG+ZB?H9Wf$ZM>}59X#`UM&GlrKM@ZbZw6Xisb5rGwmf-WcaHbhA)wiUSyd70JbOys z?W3i8?qcO+TFr?l_GQqx*z7xe@uYf_#2Du5 z`jq<`mw+I4^WBml5W`uqb+*_GMA+YlgNqkm-TSMN{|RAxgw(L1!s{5Ogn&y9Ea*xI z<0A6!Zm}@-63`$UI1qXHtG`?a|5NEvA(k5Bi!GV8A@f)i3tvZ8socK@|HN0?Z3~3l zX#u(7S1ZdpFW(pu(iSt%kQJ-yT{|o??)~L zBG2Jzd9IUh*Wz?%X~ z4FA2{K4j!-+)Mrd(&C6$zPPYk*?nHjww}${J5*LOWMa^)R)z#qSeHAhE@O)R;n+3z zgcf{ors75XrhQrWO*%bBB7k@a*cxKR$76M_lWbQ@4I)OO-k*r z*OKstGBrWzWQuzjA2sD9uI!5hhZfM3kERHQrfs-TkrPZ8?o z^JhhAUQ-ejzcix&jcp(#lWOV;=3J_JA1HOUJU!Z=$RZ`5wD>B}^-F<_SY^UTa*(Y~ zzELcIsef$&koWKkFa~b)fRqI+2BM)3|0nkqNZ$XO(F}yyad_VVa~w%YeH(WS)Q{04{`LBFC#u`InJ!ilY;n`(KPX(L>ML70HXX=erN$) z-TaceAokYRIXBuzXods<)esZP-dBGn*6)xVY-l<`lX>gZY687*ayNNf5dRbhijI#B z6Ez%={*aU!Yxz`lxq;-@t|E1a<2A#An)T6wHUF{1llseYZ0JSM@8!WOF&x2lpjHau zOCDFTdf%a>qou)Ssc^5hUwC`7e)pm1>6D0=H%BYy@9$LG=M=VD+`d!yWBv#W@-6)J zGkf(m6omd`HPkyn;>*H-<@%Dx(aFv=ntHg8#MNc`(qmN&%3-X~WAF6Ehyi5?!mwF& zeKhRZXrl)Kgx&f2!W1?sK>?QPjp#yzD%9HiOi-maiIG5FMSxNHX*F`TI%O0fEk;5@ zY@No^BF?`7f8919ga~9H1AGFw`{-wo`2S`m4}HsGygCPAVFZkSrbOkLXGH?$`~SQz z;NJXNV5bn8Te28M;2$9CTmmQy_4ijjP|geWsg*>Za^X<{)TYh2_@X|Q57d$Mo& z*u~`uuPEow6pfmi0b@3;K5#r?c7~sK>;2RM{Fz9an!d=w7i;-c!{i=wVk3crTgw#CIvUL+1#-TH9Ko#lT^aigu5jxNCZ^sb-8Md94K<5TfXuv^)E;=IAp+m!X) zbN5e%^rd4Vj~ORkmHTlQMri4C4gW}8g`d|EBemaC-&hJfd5Bq$yjb}I<0KA5*bM)~ znC0}IMe{~~z2Tz3o9GYJ0lx{eqN?k_Wby3N0Md*);1XjCn7Obq2!5JXAA>3 zXH&54NMOiA7KhT55Tq(mcy^U+>hSYd0xhpJ?YZO)4!a4zncw9<|ADVRIA8q*$)SBV zj$d08ar5OvC6|u7RO^_+SH}cB=6a+`Q&FN~OLH`1($OoOdd51VmBvt)o-0RR^Ii{v z1r@`}07Lp332iO&GF+^J56pUFa@sx%l=YoHElIJIjRubeJk~byvsW3$CWdP8g6=aU zYFftb4}(_0Lok<)x8ZyQyON#Jt8hv!Y0Gte0)9T)olsmM-pc6?D#A>;0?GojG8cvB z(p*-VkRC$tk#YR@!0pBj{C1Ob+0$A()l&gn5)}_nO8zH9unkhX8^W_P^H!=Jxi)84 zuOh>yEs~(vIq|@*^kd1dxZ+KQqE^T9D2;hG3*^`R@&3s4i+VLqo04oP^80Q3q*$zZ zf-4iGhThc6Is)~Kk7i)JWk0JR;u^Q#$4+Z=z;i8ig(M8qHREIMX_wirtz8sW=yf8i ziDw~c;a_1~%OxVE1&68kLvk8NKfazjfw*U8$#7PjU4DL3?Y;^=lrWfoVTKg<@077T94dP7~f{Fd(_G6`X(K!J@}6ty&GIPeJ_-#<45+t`C`jUM6g=42Jfyr`lQD@ z*}Y{xFiECz+rIUl+@L#U%15aF4HrRviov)Nk)28T&+Dod-!~%z7Jb$7To}uC^9}nR z$^-e28CAgPsc{x8B>-gwi`ukx8#G0wZ@{txjXDstGQ}`b$dDQ+rDwzM{XR&7v!EApbHTgm_^*F@ zjf6tp9YLg+O57)#d2KBoUpGjj4jzhP04sueA+^F;9fr3TE|rrPs%L!`ngt#l^^A?| z=5o27m%xsYOJZ@J^)ZT@thr_skWAwwvskG4P8|IwMa>|DyN_r?FIA@TeL|~D37UfW zB0!PF@cFVRmESLE99InPtSle%@zyl5vV;Eh=NqRetE?VI^II^PZYaVduFMc?aOMlo z%Aum~`|Efd#&?aF^^9bc5&5Pe;J1HV;#pTYYk1^{c6pQMwU9AC8W`-1w0w`We=%MP z^I?R(s7z|o%&GmvPt0{|%!ruWeSYqA3ddaqY#A2DsTAj7jy@N#gIKL(`KE4HrgO(C znM-(gV&FZ(-;7x}7g-L;vUb`{P3?(~D`cV1Ho+C+=6#wD`pt#1dGx)L!bNA(>YN~V zR%Mg&%jR?W(}(|gt_$^#{=!r7TL-Ti7K0q5{@i}9>|TGBd#8@_Wjsjp|L%ytuHZL z{vj6T^-oB&;b}rr{|og05tRQGjsJ+!|Ia4;kMy|!;DTaGfOto|;>Xs-K+>&Z4g1zd zrI}{IUzM4(9DvoCph8gYt5{(uEa4+LuX9lwZesl-bm|EMk&O0lNyolF;%RW{%J z?v#-4_MG)I@C}Ub!ew&fX;JjYttq)vpvIY>cg_dSM4#L1xA^s|&MEmkxt^$@`U3-w z%6|F_^KJI_8eEG9=20+eIqt--sO55FkQkI2#`G(wrkBl4gM0pZR4jZo=OY&JW$tz7 zb!}+L zxKgfx`slz2Vp@<06bGiAu&FDsg(CCIfbzVJ1vDiE;N(%y;QQJAs7g z2Yt4);ccjUKXehggD13Y5Q5di)*EG9gIyc@j6X)v@Lk;4gHo|v*=nBe=eh4;ipu^! zkLwIt!YCpJ*4)O&lAD*R#!?<<0vJ0OQ5k&4*yF!ONJdf@_O=Bq*{Dcli`|xxyvW_AL%QkPuQ}l>KH$>XD8e7`-&kmP%UJ%+~*T zwXaOn^Lso=%ARfs4>zvGvJ+`{Zfbcu;qAmkjyvxvEAFWbu(v9d&>Kq|E+b<;&cCL< zK`)@MmTZ5`gd7iM43bZl*v5CxM%-JYUNiT0&dz9}v{JYJzFfnUGVeZ;I9f|6W}9G3 zljV~Ve_ihRV%)5LG7>PcEV;q4SaQ4DFY_HL^3J_dzRMXZXgB;`I5;wU>>EBBh;J2A1lb_ne6dy|*1>(#^=%P;wnX}CpN zeNEU^Lxj^6P)GQlW`l9bNYSC`|>tLCz=aC&`VRBJKG4u9p zq~*`bZnuTS*&m30`J>45qdK8(B6|=tw`sG{mnMo+7IC3@USkktf7M(iG{cyWmy50Q) zI%rGz>mSyy4qbv7k#R~>M)&W4`n}?SVfigZh;bTNnW>`889->lh;&tXtOP=_%a_>= z0$3K9Fkv_FS?^y22{fz}O;VXxk;uAhZ9cY+rBXPn5$!dqd-4j)-Yxme>&z#}ri|Fq zFu{&}Kz~3`ihJB8l8GV*+9g=7A|Zrb7=btTQ_|?^i0&pIWnm;=mtfZ;yNH6T50bdw z{S=aW{dzYho+>A(fsV4{^lhxs$2vI(k{ZkyYx8Tc@^x` zgs;C0MxDZ`vmoHS*zvpOBmH&yWM9X4^wg;NmzqNH+8uY7Mn>dW_n2&oA$7+dZX1Lg z{N(l|fHo`^J@HKkr1kb#hkDI3_ig$z`1_L@QnFZHwNl5vhq}e3CG{&~@WOX96keW; zhhBRs+y^ezSqpQ^OhRH548~ z;-A)YKwt+p1d@sy@X#|Jk(G{vxt$|lt(Jm9fxTxP*dx-(pg;T@Fn-ZQ-n)gS1Dfdh zqS|869gV}hTNUPZm8Pzp${PF@i=UaJvgt*|pNJrjwH(sltd8;H+TQ+}vqp`Lx@Vz| zjx$f{ZsD4QIfMcJikz>XM;$j=RU5Z9_qwJr>C>~61%TbcFTgf2njIb{EaHchba_jM zL#zGA5L4Hyvaj3@k2UW!b(L?SoNBqJL?rvdE@pGMo!s;txbsUE0W8-_8jan%cEfZ; zP9VcTB14{ip{VPrIa52b3mwmuB6Sv{tL>IXaZWY4yaGjn`lfmTHr+hMO?&plB>XFq z$qaS8pfr*ltyd&hO}n^Qs$&P1S!PStDN{1*C5NHn-ylxmY}bmwV{tVSW{UjZm!U+l z!Y|xSu=(;NI-$%*Opx166CW6nAqF7B zhAwJ`m2!9RX_^{4bXYHvQ5Zp<3C04hI8RBmSTNmzkI&aj-Uh}AusAEr@qA(86NTV# z(&1omwzXp2{k>7*8{|BZ7S#kj@f!rE4T2>B4Eq-KD^H-)|0$`Yd8b#J#>rEgclFa9 zPK7^|--Gi!DUQvP*AU)OoeP|I9bj}$WZ=A24D)yVkxi*HSC>Lv61_2)B>yzDaO z!^bpQBs0k3ylopdt9L#!und%Iy; z=RWTNbZ(0OYvc*^YD@aqhhAZ}VyygmewPCdFtEH0lVQq_o%M|NN@jZSYEACnRLt6% zwTxVRQ!cGIoQHK5_Ul9{1JA98S^s?UaH->*b8%2waaE8yc3_yh>Ewxa&~W&e!^0M> zHGP)v>v3&SNg2=@tJ55TuKs0RnJl}uC~9_WQYV@>adO8y`OzJtfaBCt$yS(mkH*>~ zTRFlJmfm;kH1s`rMe;4uCSuKO%)onJG^w1SMhjH*ScWg8>RI=lX&vYF&uk3K3jXjN zWV3#r>BKX$bi1E&-8ukqaIE5}Lq4-P*(mGoFXhXASAk`lqUdHfmuK%WnD`(g|99Qz z+Lv&p%j!a5fA4Fzwci@gU+(_a<1q!NFS4JJ{p~JrsI6W)N8#6Xf$<~DI%)gUp%X=b`gR7#ONh?%=028aXpjlhzKcu==`a;?ae9HOgP;Ud>>Fc|b?gaGOU z0^l$3TPV#PJi!~nKk&o->g6HHcN{BI{l z&l9<5u>Zc4(Br4c+m?Z60K@-|p=+i8zyypTC-6?3usPg2dC?bO8R`XM-N7$z6z|JJ zmj2J(N08&IL_tev;pPale=9y;~~ramb<5fQCM> z12UJt(#@o2@USsI_J42FY_TZxQ`k`jZ@`1+!jvDopPewrJ+l86vi5`!)Kz5!YW7OsypL25F zblH(>#BqH6E_Dx(MnG(V4U}BMiF)2u{c)0(!K7F3IQqKz`OT9Z1W{Gs0)Sn6|&htceb84!L%cP8A>M!+>=g|`52>~kK+OG%tC;gn8i zW+&c?TKkfdXAW$8+`0B@lIq-Y|8e71{S7}qS%d0KG4ZKi=MPEC%k-=CDw|4XG1@$A z6xTxp{Zr@F7{kxGa?Ff;?oD1n4cID2#%Nw6gP zX`FgmQ0OGx5=@H|=+iTGnJ9f(LBJx?P}fk(6wysRowGePU6v(Wp`H1gDF6T?z!j6Z zOhnc(I#Hh#tN7y6T;k{C@Y|-@X2s+1ZcTnfE>CIp;j*nRgJd6O7yt1Mg)E zBuEJ|_0acPQO41p?9oF?$0bMDOXV*tmV6j*G|k71pE{F~J5E;g1qy$Xg|{%%c>@RC zV=z%sv5S9NP?otZ?HrIX0C0G4H%x8ve*hxMZ%N1PP|Sz0t|Hu2@}rhGrA>FF+Ra{R z9Gb%iS$t1T7nh;KQyuQrP@7YzM%>V8=r}>&kkhcJ$hkLzq$|eC^V8xTO!<%cmTvd~ z_DPRNXq{k;x63}dWGY+iRKD4g6oNu@0Pt){>N^hjO7Glz|NThTQ0q`e$=wIu1@B%g zaJBSdGQ#6_O{agMC!EY8L_V$?yA_JM==TltsM< zm#X0Ut)Rt`OS5Dwx%~we32sQ%ipfw0Z* zF!7^&XqSo+J|8GM%px8QAD{h9lldc{6nGEQZ4K9;`29Vj-clUPuD*r|g)jh@H2^6A32nKXt{%`uP#Uj*I>kb4#)zk?(9LXN+a~Q=J`E zRT)0?cadM9-xEUfIqkPBl2O~nl}~MOZh+%t-o|MQjeF&EEKV&>@`LpGFSfd%jh4Cn zOSE&6F+J)3eD@OQwz<#?1KV!QKEhq-?{#$@`@q4EFHom{F*LLJK+O_FTuwhr*Y7T0{ywPcazp4)LWL#r&0uggb8 znx%dik#kHS!zw;{wBT11zzu;H@nW;$zOSs*Ok-vgtkbDtTfH3dRSo4j46WdZv-H>J zY|YXG`>yIGsBJs0s*zhw;~Uu9El&n-D);^1ifxb{!|AT>nBCW_l7yh{d8cKo^>&fJ zMj}^dcn|&By|p7PK_bE@92Y1v0nzp5g=Y0{M0j8|=;Y1>W~vFBwG%w%n?nXT3mvNg zPoxj31LD7Of9D*v4)hE27oqHmelH5<2eXUUAt>Q&#YvD_-Chbv9LN=p^i`%}yy7ko zAfZ&gZve9!Il#t8`v9Tic9=BaeRYC{fJL9hP1Prf+bK{>8M9!o;ikw=L;orMIv^ks zv2v?gZqAz<%g-`pKO_*!Zs{!d z9?`3cb}>nigxHgdmgm~d?x^nhS>)vwmjMBDa|%|zni&$_ZJZsuZopZ9ATzCG92+m& z%3i3>pJDqH6!(?6mFc2Ttx98};!vFSUB;4%oL!@5+UdvsFy;Q5h8fUXj6V+Gc z;tr;5+?%Z)Y;BQ)XkF;%I6ff1bRYg0g5D{&@1`0=}dKPNT`qwzl4dDLkiYmQ2*gjmS@h_NF`YkUxho7tYp;K&KG zqt`i}F%`=wu~RBWcrvQFaNF)pw-Qkak>`F|cW2*)n^lyXh<9?YoW4uRcn)9^(AXMgrkG8>Is)`?_Pf zDIfNCzUg*fci0^LOg9wKlcgRtSn594Z?Sh@FJ@b1`RuCQz0sFFh|w}|nx#?y7@c03 zCGZ#@;kY*cD1%QlMX~*ovYtbK-&>LI6m(xbY^2WyCovpEE?lME)1C}6*4VBUkDfCt z>i}+Jn*}fmmJf+fp}{iS;sYOqTUc58nQUX&pq`fFm`Twle8He**Zc>)(P5WRNk`&M zB1S3YTRSdqVyM)*xKrEkWt4>%FY%4JwHi3g>h~sp=Z9#C2Ux2?qb54187s;}hDh7H zhuX~PCb@U+&6qaa!gyW*Y>{lo$RapxD_BOV;Q5ozH+6rWLAURdjz)!t!V6(@%`v%WeVdE8k-Ch|lSx?3z zcMxFLMzCN+m5zsCO3E2(p%Ng;lOk6g)#^Y3EPBjimB^NHp4nSTT&D&c-2l!$NoPPQ z@(+s_%?HaonA$ak7#$7D_(;vPyRpWdtWZqOUDC5nRENxcw2bYXkTfJ6X4bZYWFW zgjpu5Ae;jVd&Av6!}oqogoibQkzTKNXo-%~U1^Flz2nW3PUr8>2;QyDq#DTnT>Jol z0HEyiW!{&4E_-qnE!Pa9-w0_m7)rG2tQfj|c!gYFvQf|I=XI}@;kOG~*fC?lTkD?v zmWw=T`4n0+XALuM&>^2dZ1a=UW$~BVo27RH zNrVH`$K*(KwEZQ(T-;Mygqd@x))-U-)-HYYR((Neu!Y-#Mza@%_=l4GHf;`Ig{+J& zZ@=l+46LddG1+^xJG+cCx?~FQ_Uwfu=^idj8NUnTh@j;2Qr@Q#IeaMN5<7fQgky2C z1jsFNY_rn<6{?n+fSp_C-^ll49p{2`sY)d0xLbPHFO;d5sF62$d$fxwgnK)dEpU<7 z-b-EHrGOimnYT|93X;9DH(Y+|vtCMDt9Zw$=@=I4p-enjX!gVdzox0xckV2$>u z?aB3MGJO+P!-f?&rbc>XVPP#Ne`5v>EJmAeP!H$v+zx`FH|S<(n(m^ug!`26+tj;C z>RoEJuWx5K$a|R45mRKVXEP#$2+lZ{(Tr5TY{Q}lRR$84M&{KbDaUrcWy7*!yKxH# z8NYu0WWcpR%h~!ku22kE-6&}MoD|!CkftNyAXRw`CQz23!M6L%2|EuRMfCQN@l-OE z0ChVs1zX}nQK9^mSU^0CV{1sd_gec_YY;dn18e4qj>Mnoj_I}<6|~p-38zsKi?ed` z;k>)8ZuyqJM>z=A_3T1;>&;n#^bB^r zy*|I#9-g2=Z_zP8bXc*?UC{BcxtG4I`#v772(h`|LR*HkLt6*MvHS$C2L;(@q9YeL znRgM-C-x3Xe?D!gtsh>o3LAb@tXo}YpoQ%K)03ANWR@n(Q5pKiJ^LjsYNCNz+YI)R z)iH>y%S9NuAs!TX2tFLb6wGtI=x_#qfxe%G#n*O5c<&GCpxO*NyD+cluv2Z$?Yr%8 z0!<>fO=;t=q`fZDR#l+lMddB*bhH^2NBhu6d??e<7#r!ebSvAas5Y$<=Ai&5p9IZ5 z?+)AIt|{4J;ujt5Jnj)tL#>W%bI9vto|mvfiri&@ecsKj`hvj*uA~iwhQA!&10CqD zQe?K#DK|XI;j)Y3DOC1B_nEDmCzWJfYO~~^&dYUKho{uQG)zLj=ZSx<$*`!VXJmlp zDR8hlABh?fF_i_V*(i*GIF6gLRueQiV0S z9?+k8AFrWX>R)PTW1rR>a}z5{ZXb=Wo+?G`@)DQ_-}IRNd)FW>bjVb_)jRo`wb*)5EG0w4NC7_${K zo55&9a?BIw1=%D7{Rhi-5{X&kpbc=$te`NosPvP}=yu}d&lx7r_QIa<(%liFj|{zn zI-xx4I6wbHUdCpL?nEZCZoN&N$)nRXTDyO%3kr$lTKBQVgP15jZaigk^g->{vTTmd z*Aoz$WxqkI#dbEyMmN?H?`yC2g)~V5*{YrVgMzVKR?OzgZuzXTc7ctiC)bT?GKt$j zCGnTWk*YqQoNh0_HG2^oFM!QbTPwR|pMafj*+MXRu2RE!P%zm7KOcgjlk73r`Bu2j z#U9T7^8ua&BfJa{N}00L#uhVvsy@4Mn(r1lDX? zqceMZ4DJq-ksU4xvl3>azWPJjVat*Rf7pQTxVgePNcvAQbt-rfC&0G)`pB0iCS;#s zeXyPy2)p@_E8=?aM3|CAWRRz85!^lc*K;Nx1&8!|l`+2>2kP)ViCKlvzNZ&z!GS`z z!~D8x&to}?eNbJ2&x4giuS-1Q`=S4OI^!|pb5OCSNHC=L*EtA4ADm7FAs=oeu1ECQ z-puiGPPLP9a=G!EnrYsnlF9K5Tx#$fsj&EiZ@=J0?ZOXdQLpS|c+aV~@zp(ityvtp z%m)#$Xw>=DnzLk%PTT&@Sez_fuRW)D5l9xGlc3I^YMXo0@nw`^zAz)~V>bk?ta)d# z7*-~M?P58VX4uf#+ADUb1se@L1ESL2w?K=<_o+z2F{c2jlu?W;>x}+{Iv!hu8*M9V zXr|T)BS3^TlSHWw`wrEqI9XLWJVkQ!dq(v1v@*7dThWm zvA7Up?HY4?)l;@gdWm9i6g2jeWl?Q{JRtOFt8!(*T9_sNTlWD`CXcI}9O|ZrXnQs& z3{{cpd(*Hhxc)@NCkg5t-FcTl;;yMR%3LxIf)$yqg3~JVwub9A@;}o+&+xk0BFD`O zcr09Kd@60|ZwFwH*s^?i zsZ2p#@yEXA3fMGe&^hrV*kHq{WZJLi!9_4sNohkIoPQxEZqv@3J>aMK*Qq?N(zWvD z$L_A642pv7&hg;QB+=0IiU{ECw33}kNoCqVoU%9p#lg-iw1gT_GlJY0Wm5DMjo>M( zu5C(hybVXrEd9QezRJ%~5C_A+YZ4zJp;5SSyu;l0v)FJhT32)` zlEw0x!qmvG`{OfarumjiroSv=K;+s!LG-(wHn6^D+X6H?2jNYYi>4iEcA{aC&7(cl ztUJ>pmHnt0*y|IZ#&1x|56)Z~^2P=%v`lxM+9PtSyhgol9y9&VC2i98ErR@>otG(l7#P zudszQS|@hlt;Meyo1bR07+QG~#Q3aJBgt@G-EjtPs{Jn8vQTj0sQS+S(bIF_UL~hJ z@mGmsvzKi_`IqeowRje@=Hv=S2_iH6tPh%6la}J5lgW%CPj_##NA#ZY_GW0+ki6&u z$3*CHs7IDe)0pz3!>tbOvSfY`n{%38M*E4T;+hHmx%71$0^e!>)0K{$gUKQVJ{C>0 zqU`&y!)pv3Y%ROkX4t0~l7RHysTKx<2UKLS z2v2&oQ0>Lh5J5HL?HY7`;~w}SWt91J=1uR{W*n8Cenju>z_WAFCV#;CW|0(VJ zJnM|{EQXd5E(~|pk{xWJo=GLI!j4Or3v}ir?FcvFn8#CVp?t#FYhz>IN1v43MS1li z2YkQy%kVFhn8_~>-AlxxAb?>pgamK2-@%;!i!&%mnz>&B|BH{@c$N=swk&@sgNq7O z#6P{R-xyIH}K| zgKPK~rX`ixR$S|Hwt?*g<9?Erzx)|wIcI{DC+gt^AcS%w7M}~;vmsgRvWK~GF8yB` zy|nAaCe(CGhum+V%Wcvc@$f9{MbatVaB1aLJwg~=d{sWs_2|Z@#k|xWjRFj@abZxN zs5$IzRsqG55(=8pp>)PGYuca4eGsMmQN@mCXk?shJ{fNwK&ajjzKe z%(ylh&o#Ez@;(c$ki1>`rBq=W)+opou)=D{pV*wu5e+l-MjQLs{}gy+_kFF(Ii7;) zS$8Va{5$G-1B^p|upJ?)*fhauCRp42eE!|HVV5rklA493omkgSdq*_FS`t+$a!AMK z9dY&O*&tXRJ3VI|lfXq=4>r^nUcGj2P;5YCBD3Z?gth?RG-+j0SIDMCR^3ZFM@K%8 zZGiTxQr=I403H$GMFBaUFKj1<>rV*Ogr_Lij_KQYmlM}!DfbOU$2=Tk;5>#2in|$l zHx&Dp#pZqR8|o9TBNsV=Ga3pQ(BoqVohh=glI;@){I>+KS>Zn9loRd|%3} z34CdTE2fM<#uj(9P*cHk&KZ$2y13wYcWF4rzDcSckRadzuJpZwG)p>^1>_!3RG8Ag zSJV^W8VEzVtjD@?ZoV&SQb2g%f%X_3woO#|SH+}@yIb7AvUGoV7d1;ayJla1l|lQp zlQ;|a*v!DhXUnooV{2VzU_JTHnGe=?L;U+S)>@<<#d&X%r)mKqe$&o7L$_`I&U;~*k z#WJ1fY}DI@P0c`QgP z7vS#w$f?`#Lh5zEqjhwvWgsmiDn{uZPt2G9Zkx%&$vwo^jwA-(XS>v6TUz>@MqAVH zUArUy#2x$?9BS=XeZr#WE!YC)o{h5amCkGfPx9Bh(sg=GiQc99`>JRK zO96nnfd;S+!t#c%vz}M*wB+}XZv9&k-ocvBtM4q#Y8))djt4KSJo?Eb)4l8ZEZ7ss zCrK$V=?&KEcS!=2r6);ilGn-3I#?;ch-=eP$%M*{X^2jU7cJw2D(X};N)GccbwZ>! zNrnq#hF!q_!s*ud1wdx~4yNOvk)GUh7qH>Z_b+-N)Y4{hBy^mt8o*NbRxjBc+8gMyt3TxIjw+TgZN0Ud9kxEDr5op2a@STKr-NxK3aSuWW^=5E5lg+jti+BZ=xZ_jdZWG5fug$m|1=|1Qzv=%zEbkn{$oGa2dIe&~ zX@02#(E&2v#%6~vzkXu6jsf-_X^%4Q=bk$IA~W=9N-0A!;d3PH!5!)S+^kt>%eAzQ zpS+!5{4uziXxKpWK&L9V_85Hg{TkgRz|_~c*15zEcDd|<2I;LXf4rQT3JA$m*u#>| z@}%4qB6P4W$Ts!S;f-?kmPY{4tUrWxsJA(u`3q-2~ZUH5Mqc}K_?_daslGii@Gj@^Q778u8}cN`}sAsB0Qk_{yI3f z*U4~9SLjy4oZRoa^*e=`qP@3p;&0)O*vW`QTjo4w9yG;>WetU)SQX=^?7TXi88sUS zsbra*GMMP&e8*EQeT_F+U@-a?G@HMKSWzH%Pw8hpwm{Y$h?s9R^yM&?!Il$tG4pRF9Q;X85wKA zAx(t2r6btf?mN=xJFjyQ(!jV0tK`QqCC|qJaRw=@1(PHJgp`dx&T{s&$FzW4=aOGi z-vyR~<`vQwYZCbk&@SJ=x;01A!syRRd_GJie2^cSZw>u-M9r2Ac(_=WweQqVl0-5e z7i}MifLB;`38eTc%qEU(Gq$-_VgPBf@%P{PMRCyg^RA zFZC$hT<_ziIB-*IK)*PFqI$Zf%XqjuZYpSna@dNmYUC2SBf-@(Ht8zqMk8lI_>Dos z{F+i9R44c*y7_jzQ&n~DD#8lA*CR4%-w2<%m>}d_)dpxcJ|s?(F0+m6!L$L!)o|wX zeCdL-SmOc9j^9@sRVm8`?VQHW;E-K4lA5CElPAhuagtR|zq*P~=0!FwG8TbyDpmHdxVjod1q6scR18_{r%G zfHM>yU}Xw9#LApE$=E%10&_;9e}@bx8>a}AKbD}+RtQzsD9bzhK_!=+oQ~K7iZK@x z=_LN{rv$JBkn%uCUOw=nhQ&c@sR8BnZa=oH6S@Hh-3vC5^65B2g6>GLO5o%a>T?pG ziT>!pe8q-raS=TE{(T9+1UF9p_Za=(;sc=fk6=@^UJ^zrv~PI?7Yq-ZFT2Q~#(d6_ zz!B)`2}2%8xNO#FQfjRVy771yx@O+2~ycvBX z=*i$6Dx7{Xt!4{g+DKAr~T!x#P~6B1&BSOnVWS6Rc08wDd=`P9gg1N|P}<0B)Y z)51+EuU-Dj!n{c8M8=<&KVMBPnSHq)AX>l*12fO-nJ z#lKb6c}9{wz-6hK{q%(HESZ_@i(W923F{IQ@Ochj7q3*A+3?)|*kbA;~l^7`eY{ zXwvL`(C5d#utuS5R}lpftUok@gLg!C(TF*c@=`#EP7~{W+PJ(R3UJtnLXhjZREH$p z=Wezx6#fI?CUn+N_Eh=S%t%whOIqu8u;1dTROi+=u<8k>5~-U;zJmE@P?BX;95aF8 zR(>>!K9uMQe6Vd7y&yzxiMbOdz0j)7eg0Q^z%04}lA z0B~zm=l>krsAm^A(mU=*#caIQQni zCnb#=>1RnoUSRuIl55Wmci7E;AmMGJ?{lnub9JT82|;vWNNVECn&)4w<{I@n$v+&& z8(2FQ(%=y%(6o1)SBpJ8E&hGd0oFC*q|3AS*YqoLfAXzmjBH1jQFSehaOGsx*?d_( zTT^4XV{!w>1sOP@cH0j7(D&_m@!{ldMv1o4UzXtwY+}8&LQ0@4Aa7%mOOKaMPdq+o zPIouOa&os7d?1nHJw8$~H;#yQ^*AIW**Zxh*ZqBy(j=LOR+D}7mA@16WF_C)z;Aj7 zbhI^vm1Bogd?~)QpyKwaSO91fQscjLPiYNz4+{IkK?4Ara5@MiJ;(g+)&Cq25}EPu zX?RO1_IE-~b$+LMCcsFb)0hbrE&LN<)~im%UDq#@5DPkM`1OfhRVY4yLL@)U{pD~Ju5fMEd;DR zH;uL}CN>I`ujy53jKtOxVyph{f!)a`7siU?vXgb&(F%j(<7baD3|en(jO?z8AFtUf zY#efRp6n9CGgV(dn6-|MZ5{|uLFCRssl@dB+$%NPOAl)>rhDa`REl~lv(GATWrs-N zs<#J&{;>_1E6v_&``Ethl<0dT8wMo$a4BG<35<9ds#=?c^J-*#A5ArmvD5B0nj?HI zfg8Hftu6bUM1ukjbw>6q+SwYPOi5?~2j*50{`$-FMMJi6u#y#Td?Y>L+L`NB)%nR* zV9OS?;{}9t#o$J!H;e^5r)f|i-3;qB-T5=0;u<1xPH)5yY_Xzij&6w{TA=X{Gm?esf8@zaPP?lC_V)};T zcSnBxxh1T_ z84csnLIP+cRN*PVbwGxt!@{<_@ba#%@D$`l*7jEd^&8Pv>0{jmCV0jhRZ&ZIpZwgc zk*E>VAb83{Xn_^xk~_Y#3q_}QCUURP;#(R!*&~blkMk;;!23AIOSy*%gIm(gw^!~{06!tfa3t2i3I-_M~^oY(ggsAm@|;7?5+XO@zNxS5m-)w z1hS`(5dg9K1myb-kmdsMFAsn=h-iug*!O-gZ|LR>2tYF5`w*d1*(FInefpX7pbBvK zUz@Wes zvv%+(G;%-9`S|=eaEHNS_Nae?zB9$DR@W34jN~|t%|7##fP?7z%V3ijgCrmCy^RBG z(0Uf>8UXNt&S07^?62spuPE1i4MWr$;t*fPf3Wj4{ko@DfodUhYGTin`rRl+SKLcL z5(<*ED1B@VK8v5^d`xXkXvV}HaIJ&uz_0QDgwC}}A5474rP=j*XB4VD&l`qlt>xL% zk;YAM-4o>gtzF(F10$}77|xy%5eZd9G~ev(PrS?q9ppvU z_2%~WPWJ5@_aEPaQo`-zVUG+}Y}KPpggWhwl0NO%a2%9e?X(A``F2>nYkYl3)0G2s zntNo{Xc4b80flZFKyuOijl*vNnSGm}AuyiO_E)?M_Npd!-;J>Y@+Tl*ijp4d0(Spy r02M0flVrTupTm-L;{RbH0>=_%lWkMKXH44v0siElDa+(bz4HAp8O?@e diff --git a/windows/deployment/images/mdt-apps.png b/windows/deployment/images/mdt-apps.png new file mode 100644 index 0000000000000000000000000000000000000000..72ee2268f257e932162bea015eb3ec21d722cd7b GIT binary patch literal 48823 zcmd43cUV*D)(47X!H%6#L{OSY$*2g@6_H*BP&z~Fa5m^YQ%xLca-Hw?LmX2G`|7FB^Q!b+!14+K!Gv7n@uz8ein&D~Z{$c6~E+ zz3rBsjSnB+?hos~8ydV`Ao%!djr6rIUI}nyavUDZHDEHMqU)AN`$fLkkDj_So%Lz( z$r1hN>%X$Xy!MNR3x@AUc}JMV3VqlD-};-l^+U8{Q@n0+^z%Y(zWEKkZQ216aYt2> zXH(6OGBzuuz6E5D-S*j!-YRn8-mj6-nwJeQ<5mv5DIDeH_~PlVvlCxe_6ktO*MA&K zUDOM5Etf7{+Isx{9<8lU#TymBzd62tGgWf^ljDdiQSkel`$mabNS!Vo~d_cOotT-#?K2g}S~xd{4F_gw|iLo%mmGcuC+ea9oD*Zo;nh zC#pVCxHvkBODA#o>;1GQuH=;!-CwI1?%}7i2bNOPoDsn+gRV3l0Aqg`tzL;7UHFv5 zVG;48Nt(#rZH{hJjEUr|&!gQh+FOZus=W=Kox-EM#%gnp-VE^cj3{qsdw+BJqjgOq z8pg|V<1%DgOJqExGYe`9ulLQT10C(1_Q7uO`mbqptCdBWYsG=Hzb0R&W;*n=UR84zuE_E6Ih8}>{smMhCC1o!P>ed-UO}4L6x?Url z34cH^L5LSyVX~{Elt3daLEzwsz@CW(AN=JL3mEOUm6>7C`VD%+(OiSU{sxM!NUQ;a z@Y!t{&D+u~=)r zQDM5l-{>pv!5qbI*{LxFWN_N8P70M-E&E%qDYp`Zj^RLTazKa;{Siu*J$;mq?~exY zV26%F`x}9j{u#+9_uUQ+ocxL(ykNk=KhFs7Rp}9`rn0OHG0L$}pd9Gtk9R7Xvf^ z8JR$bsr2cUT_fXGR{@7Zi_$VeA+N_-W_>z|%{54u34TU(cgD=bTu`}RWM2!`ak9F8 ze$ui14bo42rS>CtR|WP8e7e@8zcyGH1lXtt>{A?BGS0-1bFzGTd{?pz>f2Gd#qYCn zadNH-cJlGMC7E|gUpO#fp~dH3a$$>h_I?=AArTXmTR&pNeP6POdHD>(V%s#U}oZ+nKRMqjj7%;Uus`XUQ_@Q()5=;rZ6i$4+~RJ;X_o9bud{^eFV=^6s{DL>Cvk_p z9R@RWfG(jIndYBskDua3eI~g@*E|EjJ|P7AfsJDdiK^qav?FJ2`uc0^iNM zY8Fk0a)vQV$#P3AIes~ND>g6cuv1{fg$6j7r|Z{Ut8V+Wd_uh0D-YWm0W`A9Tq}N0 z9wtruyW!0%k}+^_B#dFtE_I4vfMn-}V{GS%5TQU#HCy831S7csW1c>XyA%ocBDI(J zeZaKxWTQE0^0xc0Bo-B+wNYYkJY-r}XH^BSz zQ1s^K+giSqv%p<|zAML^kj~rLTAT^9Agy^^>HFA>+3uID!eBi+BR;uQEkxbDJg@TR zRP*bo3QFar#p?U3oM<^1CGRr)jQmo=w9mWBi@{h2JK~y8s+XX-+Vo0b3pu6FdX=us z$2X~J(chh$DAS_Yui$iMQ|#Wb1;ytHnHGF}y|7qj`i6+RBN1XB>Pf#D?b6JH>=|4X zRNc65qtlx)iPOY$N%#J`^Z&CSvrJ}AW2S@GeHh>CO^u4{uWz+QA0VxiZ&UFJdG{UCZ90zAG!TxtJzN6NbEk%H3nu84}o>yPz&spMq( zL#^F8Eg8o&Us3#{HUZxRaMHea_Ih_Cu#s9@@#lqrC>VX2fYDHO-MxGJr#6cy32$DR zvW5m~DzCodMG^Ds@*8D`>q_`ze|ED00hZ_i>@=m)P@84m5gS{eJVvzF^7NynRCfQ{ zznbiSfrMwIE9iP^FMk{M^s#xNB%R`q&(5C1Dj5J)hd0pQcVkVqXo~4dwbEK%MLUu_ zIc7dfvUXm6r;1B%qrDG+=cQ3_zICK<$M20YHCcOepo-6&Z{X5%<@3ryWPEBqf*nFO zT{(Z=6M3_V)AhC1=tK9$h~3Pi1)lo((@J>_{MYgGqu5%NveP>zZd5gtzWe46KgKHH z40leY7&7Y?2Uk8Vg1Z-LSMlQwbKUOw>6@jwY4@glkeqbi zrOR-rw$FS27xqPNgL749^sySfiA&m6@VU(99$s&rE$*YmsRY`U8LiMG`*p6UeIqWb2$YW@v~O;q)EamsV06gV84gqAHwkDl5M^_w4U z?mv=pu~8s3p~|Ioq?cbQII64t!wf?=yN}%7?fHU%OEwT2_%4I5J}?{6Y4X>+v%U4N zD5}3jNN?|SCOUv^0h}sJ`qzm%MZ)6UMQ7Ehxk|T#m#&xZ9akU-i*)JDcGjk|+`zm} zc^|e>i_?geTZ6fW%f&|ohY$yXv`C7}#=s1rZ83fiGzEM#HA6G+iqGV?jnF=$ueHyJ(gt(1<8CbTGDl8==!kg)eIrnkiNpOcQ5dN(tkr`f&Oy?;# zVULYAd-x%hzw6-l{S{<<4O+>Mu++bw{4%rF$R#@!Ye&y@f`F703m&UR_Kg=$3-#XS zCYf#aGSd5qLIu89`2246gyMF#z&($V(F(3%YQx!t@v<0eZ2u?wz>@Tr$cc)AVxTf^ z%>bukzN&0<-X%D?Sy0%c*e}1@vLSi@UuzxJgl0>viR#e0V-)-qA4Rp+JBWUy&7E1a z+j}-J(n>?Re9YPrAc`7B|3^FFo$6@NtBiq(ZNn>jh z`r6cyW^7;hFo@BY+iq!`ocs#*4&Vs8sYH-RP%5!Zydjf;SW^L0Xp1GN8d4%6yyjzh zW~Npkuk;F!+SsyglMda^Ce(~gCL+B8048J8pK5sl5N>3(ZvK9O;iIBOK_$T-CgLuV zZvP$E_wpAR0}^6Yd=*a<+ti`9-U4QGH`>da{|YDA@pef}^Y4+v9fu1S|B4a*|MG@v zK;_~|EBMh?CHkg2>RAg_qPip}R#N8*WSGFqHlzLvI!%gMyI#{1v9MoPrk`N8L4y1G zsVrMHC>z0!QX1g9qn^7E{I1u9I-qD!EW-D;=sGFea6%2*Y~)VdN(#3Y3F@Me_O7)zB0TKPiY6gEK=YwuIHXc78){EZ);yqPJfGvXHMgIY+*_85e&X1f!SG! z(r&nsNM=lSmcSx6v7|CIetih&b~^M;Nyc5V6TuCIg+`NvVtsjZ6V|j}OCYnH@`xl< zr$w#B^&PFk$?)?xv`(rOfc7Nh`L1#VS{veXmo~6tXVf7O}REX(}SeUZLA2$t|BE{xX}ZyRL3n%Ih7MF z-c-lSwWNiB7wqMfM-xG{-D=nw)@U}}-jBBWL{F%EF>qziBC5CTEBsUscx>n)de2o@ z$-W5^2PBPc0(TIfc;zjmI?yM+v2QMG$iw>Qi|L@|YO7WabHtRlU>XU{ryFsA=@J>Bbj?l5lFF#ambx7{`xMl(3dTHY1k>pqz!c$S6_nD}VtBKf z>&p*C)w~e0e8Zg0S-fy~=8`D=dLTNDD;zd=@~fp3%!;s@*LRU}^Hj_P5}q%R!@NmY5_xz^DXl(uU0EuQzhF-gO~m@Ua|gz@Hn5Bf+p z)|NVOw{!K((^qZ?P$W+^8e6A|ny<&wzQU23PkOohB1T(KWqzQKNBe#(y`Cel(r{($O90B|EC- z))N}4>H>>p9RUWU#u$Z{=}G0;;1Oo>l}rUGT{qI;3Ux_7^bgQ`&lEB-*jlMPCtq4h zH-B2UwaKO`v!$wNa%$wYz=rSUqi_0KT2wrWcG26W`bx1uehq0QTlDBfF88E7&rD_j zhnOJs_HXl&_pj}RJ~&`(rwJ4pv31Tpzf%0M667tyH3ivys3p@(;aBWDufXRk-$b}5 zdoIZP8Zj!&WAljgQDG6c+7$|_0>BKX@LteZk^b-J(nljp(g!OZGP>Ks#%U`z?2auD z2^Zv{`d79uRsw?82()G&nVx-?5e4c*??LC_UQ2R#1%dTuVNjGCvix;?Jmqu~xfTP5 zLS*dA+9uZes*bz#WVT4Ok=kxAuK@F}GO4UU6%(ss9Lno~7j_IysS& zK>7B-VysC5>LBo$S@mJ*TNg zHf6t7+};_pZYFc!65zeiPQ)=t_ZycHAOrA9X1Ze>k8 z580W3x*pHet+;wKyHS#=*sO*uSV&zVtSoYFM}2h$SFe6pB~>C}x4E?TF~RBkt4DHT zTDYOk16Vg)*Bn1?hJSsswg}ZV+@hQKGb|}9Wz7CHf4dC0xjdtO@09iVGxAI5U2ETB90mRx*vDD!*Fgkq{3TstGCq@Nz~1+4a`4&B!@MU z!@LrrGLie_DC`U~wi7njp$xWc_02~b!|jArZH{MG^SGtAM zYvb#jt*M@7kSi(4FjsY;zY>TEd9(7t(;@irG?u8LS3W`KY$h?!kB49HvUbOmnK8{( zQJVH5hMF!;49%hzxC~q>SdNjL#~^WtJWB{B#WIigOdxenYk0$h6x=jC^6m^<7{8yd zsJu!|j$LA_5ABHOd)@Gu6U{=tLV^nW;Fj+r{R%(nyuqZSPSkFbG?-XQkH578R-)x+ z0K!JcJM%e=_o$eRMfMw^wG`eQeBH}FC)B*Nv2pYvTYs?6o6bP#cW7_~& zdz>D_SrV+3g%2oNj`0AI36+3BMXKT;HzM!S%9!Z^qFppEJBg`zvd}Ig72^x=0PCa&xNkVrOBzo(9EubNGg$(9Y>C>*3b=Q_LA1!>v^M`V+q$+)ju> z?k7;zLxF3j4j_c6l8EB(&0jg$$lBG!%EZhsz30KUlsVsz1$VB`&Egppdnghx#SE=a zwr4g_RwJ!5M(i??1Gm>oM&Ai^&G`*;-F!kq`ua^H?@v0d$0bj;Z>Bn$1GtG65-nuy zt4MLyqSMNnSK6Vmkt)HNas)`mP3*6^0E>6CBSrhNQL$)3{Y8L?U#gkL@bP(=t)_d^ zpy9+5H^{!eX}o)-Eqwz*j9emZg$PiJ9$g3^-bIrkZ*o(_E)MVaUF zN}VVVEcbY`p-~G#kY9!G&c5vgCPAOT;V2D!i$$_WlANnf^tCjyZpZfESf4_HwWm^* zb2)i&)`8q7mNHAGp}(d)ep6<=RGoCIDZnnR@AIno*y;EsB<_B{Wh|4q1rnpHX0fOg z;{;}A&Af+C0F^7q8-njVRuw>P6Awmvk?rsErp8FGJr6ZIhRoK#u@RI4XFGBeAk0SH z-R{z$NJxv)V+R=|epNVC_!xyJTY-mVpe^dZ`H$w~nG{F1XSfc)nahe}MtX{??q^ZBt;crL9IhbI~j{ZNqLvGJkKi0fi6;G zmps~S`_&C3!U1nyc->1yIs0g;PChoLY6ye))vJq&JY+@A@ z*Y+K!vRWdY?Yz|wpo|X(4vq+_bR=JE?>rE{yw)Yqz&LG{%(U@Ion&#xUa1h&H8F^H z0P1>>#+j(P@lz{jjuW4NLR1Y8lien%r9&##$ucdhGoY+AG#&`PHR=2KE)m{fj~hD4KWH@;nU%gQdy@47FdqbKKb0eJYFi!k(7P6t?mWj!G<*1FD*RiObW`>JQRq&xr)VAyK-K7bmCyV^S zU44a(ugLWj)6VqV_~+P9HQ4MCDpp=%I^S{9^vJo)i98lQnbG$v_tmmSV%y%gMcJaD zJpKe|)oNj?-g6q?n%ZzISoX$zsoj`oUfjbEZ>`{~?tQ6y&RkWziLjgNlFReU|D;_h z=q=?7pp1X?5R$ZeebZCx#8#K1^zSR*=d@=m5Dlx|hTi-VHX z)hvetjMHY#M4E+V0?JOquuEz#j;Y{{%&rLx4pe>6yg2wm#t;{HzGa-!*VN*%sB&nb z)DkfI(d>j62pP#%ohG1psL><-*tXwaoK>P-^9*{&ebnhrNEbhs(H_5tSgen${SYof zcN|gk@6wq&Ncj(aOZ;hCW))uqgTAAtk0`gQ5VZ0Hj>(2dB#-P@UQ!`561sQkEFh`g=@n!xD z&1aRf<+Y_C|-&g3v@etEqvX&I2@*OOTD;`%e?wK zz~epM_zHEZ{P7a+tjBzE2vHEP!(9C8xB1Q00|?OBUk5lRp!!Uiiaz|-=xw=%qvU5s zc(H;AZ#Hx^!ljc?UsQsk^s{Vy~1VfCwYYy?^c3~S+zWcO-@YRPi86fnm>VgmY6Qn0-oRHEmuJP)AXBz_mS725$kw8 z;p3b5{Vyl@h`=fJ$D($_Ky*@kMM2WK^|$knsou(?b>Xh3d(yc>k+6@gTgG%sMLtD& z(*skYPPt@vNCaB0c?W28>G`__!--^_LN&R4gr>jUe(+{0mRUZHc13_N*b!>&Hyy&+ zj@=7c>XCJJ#P9|R9H)*-kI#)ytM%3^Cve6KiqU$IKe++r#RV?gS?D+htc01AN%WQ~go$hL7Cy{Yn5JoX zhxD5s-$vln*=2mwserEye;tWq&d~c0#9GT!GtT8TJ)X|Y9g}c;($M$XP2AF|DP#qyM9-I^#`R(+Pxg6*6x(5!&(0Hsb&CX|`K^w}T>}Nht6&O8`oc@mQ;NqCeShD8x%BVGX`QJy3cH7-&p}lo!{{Hwdhi(X9G+5;yRoR0 zIm-9;Od>YVUTHgFy#*YrmA->V`t@`2UdSIqw`40BK{9y`lF6yZNRMM^Egu5&%$=uq zJTTQp*QDvI2!C}Zk=v_^kICeT7Cw>Wu7dmx4YXF|R%(tY2<{>nZ?%#7FY0=kYC?3L z_Pn{jo^3Ke*^>Fqi{{vJMCoaXsu3EC(WH?vSLvf$ln@_6kzPvB_z~%U`kQ^@O7xJ@ zN8}hu$Lr58NcI&X1?Aa-!<8p{%Dpp_!mNnS@Jp`@F9J;u_#reGi_&UT`O{C}7Nl^V zud9=hg4(JB?>UYa0o<~|{H%zk>i}D({Tz&x_DLnF-tE}*s;f+Ydu6@|KeIcA1x##6 z7!ZBSk)ycGo7d>Yw$Eek6W+8UKTicFqV0A=hO&=vfk%2Bjix?inFQbZ~xUM*aePNj5?WCpXCyQzC8;Er6ruiK-Lbw znaFcOnrj|jy>l*v2#_D@O`8Qsk?7r zmWE#_L+s*lu;8n6)p?HbzUptGyz+)!M*_Aj+2jiN_$BZ0&Fo_(h~Sd@lpngaCvgc8 z$OQb(Kk;;*2c7x35r8`?5HKB42$wA3ZP%|TUMg2&SENtEC?tLsWzYC>qjsH_HEy&5Tq^RJ^zqcwca%yvI4Grqoq z#Hf_{Elfqm80AB1s3gseMEKpimWz(e8e`|yixzUGKdp9Gd3t4oRSjhWlo$>$|N7OY z;CxHF$hNy#8ex7fL;p3&|AWQ+?j+~M{ITUi@8qMAQX7bLt4d$`+KW={)jxP6Pk996 z2-49@fjma9ICZQ&yB@Q%xeG?Q$fg1-FfQPm4{eA;#d>Jaj`Rgv(D_BjP#OMQHBWyC zxO&gO^o6u_>ldxy?2*o zLVP57%;e1RF8=>F6dpt+ryOsm&qq(CjM9~Z2!T^MzaQIF#fcyO+B&c4nkuNd60p>= zcz%uGp?i2C($tyNQp%~JB1X7NMq`28;KqH# z_V&Vr=^I9O$}5H`eax2m1I|9LOmm#fK9X%-Rac_G_5fU%XxrfYM|<&}S^H1IkF_z@ zj;j3JCy@=NjrZ5h*kzzND4qEXNz9THC%+%64~C#sMjy;iOHqv|1JXU@r;nY}m6FOg zve39EUX_15-H357y_i0jf5It%DsO`8>V80;T&0`kFv{uIPr`Wg5?+e`azxIbuz zIXlOs@c{#Hu1dEM))q@HpD#dZug*<1d5eL!k2GEM@m5M$=;eBTbyj`kceLJ9a5~d) zE&dLhZdT85tLs5{{T5Z1l7ge?i%Kk_Dn#B{s*>{tUwB%Pz?4Jw?j$Sz5%Nu217>d6 zW{`-P5K!inpH8;Jbz`4-)tCA82s&&j5oF9M&q!l?MG^1UM|=wOu@bU5D{xHBHB7ZL zk~R1$y~-GZ@I)BM{02B||NS1yLMvJ!U3+AQvt9c+35lpZQ)7bSNl?&L6JVLiFTL|b zZ#02r!Pqj=laDIAh6Yy+icC2nBXO(AVT81O$&9?2Fxe7JqR&LAF*9n{Yq4i6zHPcZp!VEgAU zX@{v~waNRV5YXm33$ZK#Pv5FRZh9S=3SRr=FS^2whN`bcSg`l)K5n-M5nOc<*mitk zz5hR>Oii9p-sPZ`sm;}rAT9lbVT+TE?t>KS7OJG``rREul2CcYU#OwxInwY2J!HQ1 zl&xlJKv>)_PhE)whc}aOdCC}h63%^h2B^`AMG>TaU`FGA5Gw&YmVzUl+3(Iyqf$tV z5u?oM$}Y7)hKORNGrJUqyTJ{5y-|9%Gq z#QP{D9FHPZ6OdNg!A4LS4U^=vfSBJVj6E6SuNN%;VoCt+rV+Fjy@Ef#+;Flv|NR%w z>tpEZlIW?0b0|{C||DgqN$U#iGOE>~&o5(aV*n8a40^B+e zB$AegB5#+YH0IV`@(x_}>jcfafSu%5Q7RnHt+J!?5gct6ciK-UU zB4MavWL}|OTm(W+G^VFRT6qfbQsbfZ)c&1(h@Cr#VE0(Tnd_WUJwdMG*drkKarMmH zj&xVU*Dh|`^+UL0;a}&UI3w6lu$4Eh;(Ajt1`&6_zePXy>-H$`s*V}!lJuLMN~%uK z!W#V;r3K)VoWOkM+OR@Z^b^-ZA7CogQsgw(o*r~w#~+&^;A=jaEb*DOx$*0pIE+3a zy+z%+cuc%j9f3#Q{?Uy2e_F2lvHDOn$M<%fFS$SIR{U5wJ~@$uzqT?CX6-^1e{Uq8?Rc$0XNAQyM~4>_?vDXvkd z7!0Ziu>Bh)Ll`SHJpFSTvTElw$uG7du>DW+(CN&A2OiD|>H>rs+P7T^d$cTfLE0|; zJpjOQl}sWR=4d;X%bQqdeu+ZO@mdZ`n9l2BWE# z5F+@u^yhfTxj&RKl#BCZkzkjjJ+&~8w#_QC?a?u8r9cEe7K~$NSG775L&*K=Dz4E} zCZhc-wccy1m;ICu{B0JE|0fDkui7s-AcV6>=^`KB;jAi0TCn#~N%);11~OVFzr0aa zH&sbDRD_mAfhZ4_6Y$pzH-kT~&i{_80zdr%rFr621%#C{ALb21Jg;m?n{zNZ4PB%T zsZ(rhR4j8k{hSoPRI80G&O4F2>g(ItUxS>mA5b^IC8@ZZAP=maLAv;%R1A>3=gP|Z zi{&sGA7%z-`b_i-fr;l>XUuDCepD6NvmXu;FY>&8{W0q#X4(iM_+;O0EMP3WEnfIC zI|`}>5y0IHq>|?%GefEahYOiP!?(-a+3~}&Y95=xTG7B)W9vr+gie6_=-HxV))R_w z^RijUK=a&%>QFwqdRLHoYJgPSZg6KEXBgR=G8O2q)G8*@eeRhRr!?XH?S7~-=0`|o zRnx}$9kA;-w9n)E?2!6;%q32J5yw1P#^fJ5mM}A;_Hen0Rw~+FjwW~qXHevlip?o0 z;GEn#gZW(o*Y)Io(|%_$1h|9Q>$?;4^o+?@y&I144)7^((a&(CpnGuy2r>MjPcM=G zJyPzkMCKL5mCa|)=O4FJGTs}}bpiRZsZn8{2R(Am&q%DKGIZ5#CHcbNzA!0{dAULm zp=yABYbta6z7gIoj)_cNhlX6km{qMCQjJnHG|l-JjDts>_~+TvucrIX>3d$rc|KQD z%Pg3nw9DnW{RT{J`Qcpubnc@co!N?wmjlCpbd>Vl>91!W{*G7Ckd#MK0F*z(){TZJ(x+dj<~nkstXPPRVVskZR>L+k$b=YIGD zMW8Vt`?IS5n?VXN20WBXZB!iZP~rxi0Vrxt-u%-jAh;>f?Nz&S^I)NfarJw>yGCVp zRC#+AEM?-aSSc08y9UYAOFl6W!T*m){S;Kjlc1?&?Pv(>$P)G%#Cnw=H3LR#INsJv z!yPeoV-h&Vx26CO^aywCb}AZ5mY6Wf%nh&)v$x4QI-K%yt}^B`{~Y4ocm_VZe)%dtB5bsMO_-x1V~r@ni2 z&?}-iBX|SL{ODz6w~|dNWSiHRWAqH1QNcE9_dl45|D)Y9$7iRfgpXKyPZPyD8kjE@ zFgC@4Us555x&yF!KPUT&D8M%_Hd-WqT;x-+Q1`5pFBTDxFHB!?qqrSyHIQPXtgt^J;7bN_eTC^n+ z?(Li1eU<9?8dK}or5_RuwHN=7_P*1#>WNItvamW^>*@dj$bg;slUS9!|7t%3S1l0i zmx1H?c`7$cZRUHOVlE@GXc-z)Vc+dvm&Xm^#&-L)a<@bN^?z0LpZhI(jD$7Uh=OK> zjab`l-}$nCky1r5>r9x^&x;BB&c$#0shi2>#(&Rd{%Z`AZ4fzqT}nX;l;8Md+Z%F2 z%ckVH@2dEsrfAU)H<{kr(2k3>G}_}JrRs30it#35spU8#{N6uVt#uR1z*jW_Uo+FeQ1w32{5vWAW9{s;)>DQr{*BP? znG#h-yXd!^YXWFln4EVg2$Ti<{9vAQm1y7Wp{XT^Z~b7E8pB(@I6nXnEDBs1L6Gxh zO=bfqx^{zDfD{&_%KVD0tPgtoTxsjfD;fN`S(C}Y?eS{AQj5xN^A_IFm-1-?4t~wx z<=Zh3vt9ZWKzT`!UgPfDTm0Oi%X&WZD%H|4sA#2k|McU1tDi3k5G@Qo>Hx-1m?d&M ze+lW|F?lULvN>BpRlK3_v{m0NG5T$`Wm-5}R(yFK2_f55W@=8^vi#|zGdGVoFZb9FO2;>QdV znOkq`UA@`$ZQgoKF?s%}P{c8}OE;!+@9$(W!LpI+wlf^D;naVKh&WhWyXv0wKLdN8 zkr>U@=uzFNHFu?Z4o9gbzj$W9g|fp(8E1sJB6;2mNe_NON+*K~akfIXUfG}BR2l=X z({tR!3)Wf7pVewI87XjCwXGe<7rRKvb|uZ$c&-e#FAxf0moi8UVOsa2?_pKH;WM?Z zXtqRC1D=8VtN_E#&3YdBSdyC{zAd^-6;&fR5xr*aQj&ehQ^iP%ZzHb?7E=)(asz$;6Zj5AWhV4##G~1RY&97M=;zOP}IR z(Yfs9Fk`Jo@1GmQ#4`O(G$mWhRBmWXsa?o+zpCbm)l>uG)6{IMiYcT9hi;cSDjI z{T|b6Z*PAfjLi+isZRzNPg1ulMOPFFwc0Q3@+iu#nV8y7UH)gcA6&;D>Xdn8$;qw~ za_-y3{ox@c~x(Cl3i6tW84j-TrQR80(;1*X@l?qw2X#S%iLC84Th`+FJ5 zBhG+ug+^ctY@G+Ko(xqn?# zNUVzE&QmYq9wYL8R*=WYrH&DfZ~flZ26Bq1>d;nn>^oDyqL6UZKWi;(0yLz3Fj;(ol*?Id{du> zFW|Vwudbx2jeOMnpXS)25ru>Wb^Db;1*6n-Unwd8Gwqu*C!l6W23KVD<}bW2T?|!3 z+Qb0H;o_ERCy9Qbikv%wM3qE8=>igV)&tyWhhtTol1iU z3IFV+ROdCyk@b$huS>Fn?978S=b5YFM?Y16f{FNQ$Z2oNk7QSJ6jCO&s?d-xXpsDs z&ZF>eq_VOH5cRILfKKb-o`IDge2=pjc&KV~m8Ydsr(6el5%8nvMcwhx7V3~hte*q; zo=Wo?Yy>W!kfTm{TJPUiT~poWR0DuxZ@pV4SPW$}|=c z3>|-w=+Zi)UiGA2RsWG{3Qx3+8ttD_trY2J)VS^V$Zt`b{-iO8NCa3U?>#-_C`Ems zt%|+a**qouu^{==He!)PdXX6oPEskXYO9k8vLBp^Tq%DoSO*Vge>v}v5L~a=$o)aA z$O%!C&lAP^E_IMyfhORxm2})KnSBfL6?clno*N>w!L;_97w=HYnFm)7PVYQCzI*yn zzFj4R{r|N<9gToa`9V!T@qtQO6X1!=b{(#&5&v?%`bNaJGg2k{x(<2`5PrY!hxaYd z7y9r@y2`KxU|l_Y5q`0^3HyVWMl)lQ z@QrA(=`ge9l3L#hLdSHUVkl<(SMy!$3-Mk`FW~355N3afbf^v>s6MXJ2OTb%G^tEL zf+LduHZx$^z{sxFtdTEn-hj96?LN^ zdl?A9o!~rV%N_;&7SBn-C53*lT-dp%`@cA2s_+D2|u*Uo`DXLuMDC^4>rK@|9y3bpnFYU zSDw*#dl|NBAv4W-2D8mIW4uu_>X&>~0FM$Ewj(86889&%iwx~9P}9^cU&RLLkNw*C z@n1T2glZ|?6Ym1+RK$o!yWkd2#Qf)NpfuBq#OQI>H?9G|xqs~`Q z$J&V^Y^XE#ANk@=DSMCFyMUv1Y(?=eG>r%MXu@{i8r~o$++H}bKl4873Drw9?7E;RZYaEwTKBUxc{J(?x3}MU z-!2BngNy7$fH6T{+TziM>bF%vOYe9XqqEG zr1KU6JQ0_SWDAk&CXfuDvTetEesq}wwUFRJo6(^Ra{YNMy1?`y{jG<0{at%$r$Ufx z0`kRE<+CQdc0>?$s{MNQ=@7Ts9Q~1vR$`Xbuz@3+Nf4yordf(2fO^=c^)!~=lwQ6kmjFe#i z6yd2kW=lil{g4>QBparIdm&EQLjgp9Sp|uDZw_t?N_p=*Ua5LKcO-dQ)L2Z|hGe6ar5kS@DEz3;4Cz`b6b{%f&UjR&;iI(vy)g zdb4c|NoTe{Zpj~?$y>?v!j8INa|4ItbceE&uR6XI;Nt_MAOx{)ugcEJJs0mA8f;fP zI-%d}M`LDu7(8gO{TJn5sk z1n!$6@pna7axOEkID7B-{HTIPv5|l@Q|g#*1>JD^62lVI?(`J~t@>(d9}A_FlJT)n ztz>ZFN)CKAXS6L{wH2xmrmr8m@~q`?rWp( z&CV0=CWc|h10Q<^kd)Qi#Fe+dX#Svq469RZ_B~~KBao+{=R~NVx6$034J$4aVIOGr z*r)c*ONN5s7>K+wc@?jonJ^xEqhfI>b!kxKgW|^1FqE!ji*X|h#vOtwig0Jb@#}x` zbFN?E#>Iq)lVwo!+kr%7l}gY)ne4FHV@U;s=N0Bhdp!nwrT8XyK`!nhREu)VPZ-q% z=%b}*`T(;f0Z=;yI({4KM<@-c?6KRsX-*CNc!rW}H{W86RGh ztDjRKq!*Wt*j7>JZO(J20yyZ}jCfc=)7f&Q$D_t7I%lf;eZUnjUxTJAzj*i+S*RJJ zmfF@xwS{fobAj}aladu)nAnCd+9P?<7A-aui+zB?)K=u zsqrtm&K=@lQej`Mxorw@i~@QWnmE$UPr=G_5}PC2yWo7tVHJ9tSN3oVV$MhoB+cv~ zeNM}4=hO*i2c>>+aF-%Pf08SW>ZvfXvCnIr=;sma{W6IiE_}U5)}h=e(qq8yXhn3E z`q2`yF|v%So*5XEFnP$qC-_zam_2?5D@2a~^WgN{RJvn+#$_17F{rHiM&(cZG<@)KY8IZ*o*!!3wFkMNq65dD&rd61*5LoHpG<=XZU~q z_?lNM5D6!iY4Y_3{RvzD3;u&@a?iL~sNWOaQu3Izyf~s>@U4ZT_Vu$PT+_pf{m48c zImw*u6mMgjl9IIgWuiNS{X*>+elXh1#z$ly(!)wbEtc8Z+)cm)^zt^ln=Rz%JLEj? zHmQreE`Qf-?w;;q4A9Si?nb9sFKwG zGkPSj*4VLjN|8*8Cd^pIGY&&$6*`SSuXs)BoXtV& z#=z_{a5U)Ta<4lip@!?(KS}~V7DYSUNxx_=lDO!sr#>|zEbcQ_ZQ_nHtuTd7MnLOT z59RnI*YWh(Dyf^T!5Tg=tbRO9dmkahQw!K-ytg9_iP>guCESsnteY1-d1C!!&o=0} zFzC5cS$I&d%+CXjPbq9zuj8{WS_~DU?$LTwp}!s}aG<;+@fO1Fgk00HNOFOrG^11@ z=C=mg;|HEG0IH*aGd&hb&*TJ0>u@B95b@xH%q&*$Uy2om-4l6eB&nE(t><8|Yb++<%_jq8J$enaH>%Q{JV z51~J40T%`tGp1?pm<4Tzrid!#{lFM4PgT~{uijRJLoIon!5}p&t6hl*n{y{t9*! zz8wg*Uo$(BZD&}tX2Qc^7v$xn-pA@Et63fM`PjbG8y66I%0DazU89JGLuG3Og^eYFgB>N+_8Tcf_gtQ+EoZDpTMlpUCaHM6mQ+S%q-zA*dhSr{AWi zC7d);Kb$pTjjuCjl?n>tpolKF$mv9_kIL;)@3OfPoZ9J#J<$FXzeQ4@&MW6AE!5=d z;C@<=Agx+xw8mq= zpD-2LOi&M8CYiFhxTi1(y%^z?21?Ic*Y>2&nmGo&WQW>KE=H>F-Hg79aaNOX_1E#S ziKqg{qlm6;Wn7m#<4UDmRbL%Qjg|Ja-K=#u0Yh53{MysqU&9XfwQh>!I>xXk_2G)F zjiYr2;joWfji7D}loLGw#HjO?67;Y`;P7}CCKL!xC$`;IHGFC6j9GVfnOZ|^(f86Y zj$HpTliP6qWLKiJ@jE7^lX;jT8RG)I98hLUxT%4K)-3t2Sf43TyI)c8e8=bZFwO9> zBp0Et`Z5FLjR{i}9*g(a@k`l`QSzahkw647)oCm5{)!EzI(IUyWkDE(BDe&pXh9N{ zjHk|bv^hm#?&nv{mx6yB6Yv!M*U0i6*^G?y%$Ys{&jIxFiUUxMC zrUhkIKd!4Y{n5vnQ*mkwz`QF6KNB94X1AUtUNC!5+uq0xLp)3Uylt1Ty_(;Yq(4bR z^RAhDE~8=2C<{l0OnJ&+_VyrIF-knuPko9~G{CIO8@f*gLMlR>JZJ_LYIxt(T6tFZ zdqhmTy|z@07AtmQVt$WG?aO6{S&QyVY9H#CXqSNDpd17hwuk@an#pb3XUUxbVgXB+ z!!N&?n7@17l+n@FaB~XP>Y^alj$K)X2djfz3uHaiJT>qa4Stht&l=?EoG;UPGenWV zI7b1eRv$)5t$bhbGTXnb3aWiTVn4LCM;SczUAh?#JW6UjWVA+dfXj93mxSqS!zjNR z+aC`DXH2i{O+oe90h)qFY4sk6z_ z%2u_5#Ad9{O3u7p0nuOr2sXlt+h75>1MC}OT;BZwPZis2!X?54v}+gR%|n_ z709wp8KwCBcL%$VQ*P(9(b@-SS6YHzD;|I{BkX8x$5TS;#M=Cg1MBBHYEAe5P1;p+os8I0wJB*#d8s$l|=pEedXHDbtU%AbaX! zPLBVVo{m^-c7RymWKK-~5u5ec$(s2PyXBbt6l!S?>c& zm%r5^huUf#76Qg{%>qATCye@;^BsP8KG2bt{{$E}cmYk8`bT#$x zV$PZDaPBysng*?<*M}j$l$}c8JFDE#7+bFwy@vpM4M+D5{bi*-f1K1>2v>lKbIH!j zSAK7|?NF6Vc;xERp?NY;Ecv;=aAFEdIy+Z?GUr)WnIfWbzbYUk>-EF$1pYemQ=sQ z!1svTZR{bsd5pdG)h$}&3Ih{E_?~+ZS5u7cC)M*WVd35QWFc=VAzF?ATF=O3?nC2? zyq_Aaop98=F7oJh_;WcV^-h*H;Y0VnVb9C$5;Atbkslui#A43R0appQ0HQHw<#687 zw)S}GgZ@{y_PlwD&d@=vo-UP%P@u7;`Mv!w-tU9I@t0fZGY)7xGAlE-+$-97qjAx` zhA1>l=yNL|pn&~dYmC%h981&Ji%b*z!6 zkC?{h7~GWqc|4^Sw7?Y?<*UncFJ2q^0ms@FWCa-i5XE)@t+u43)MibM*b7j^1g+ob@6YRN6N z&Rj?~_k~paYFW|o*7?r-azTVgR4Rt?^7}hhG@Y3hU#2P)tu4S)KQzg@uHN0sC|+~4 zC!gf^EY}YyfxsGNEZ^-k1-ExMnV?TbR(pH!3dP#H^)$XDvgOXK+pYul+k70mIotDQ zTE?lztp3M0F}~CRprU1@3FK$pD1a7+`^PvC$K7SqcG7L5X*M1X7C3+{V(?I-FC&rA zb>Zuq&!y=hPzKMX)`?VPZ+Z_a-t8WtnKUlthdXiYyzAr!sguGlZ%QT*@>6oHJ*eqs zF;DsqAip2lOyUbKuk`H+nbCw*HTKj~Ya{a@?wd6>8fEHPW2Dwl4-HRhg8m1EIFXJam~`W8&e!6A z!bwxSvq0_YR7_59bz*aHru(be=(R9ZuoM$_WgrmQd~RjzF%a*7Pk)7rSJVY6!doB# zTNSa`?U|DyeT_Ju+LxEKb>yCK57_ZsL?F%zcg6Dqn0qtePN0L;tJ1U&YFOd$Jdn<; zovdKM!_BU$AO!7duXrbSiLKuFpk8$Y8x{}qUO46jeY8}iFuKv)G2+eMFuVB=?4~^4 z0_I)Kx`Fp4wy3TLhC&@9ua;G_a1z8Vf8P|@1(ap(pnkuU+HoV+6#tb52Zx}RG85Tg zX22yuk|_*wRhWL5#`{-USh%qLvaAH z+GEWO@S$Q9!J|a&Nft(%U@*@y*-#5t!)9_}fZsymhWb_vP;)2nc5|1o5!^1f#AoFWm4A ze&s4BxNdr55>-n(fvw06xZFEv)+AzE$|xxy`bzZ$6%W!oaDiayt&hv>J*Wcw;LMdo zPamoEM~TdqtUef1;z7CUtxNj66+l)e;nzYGNj)VU zOPy?lLL-qQ#y1ByN9q;*3$!?$n}J^}-oOUI@%69_%4(=|9Qz~X!sqi z)pB0{fNFgmbB0yX->pm?OjeBfJQUBMfuGB)tj8zz25TYv_R7+C0tEvw=n|cDdCs~( z{!It*=!kLwA{&a2Y(1(AD)?}Rtk&4nWQ%GsI7ZuC=3-SvGQ&IBWwUU-&_;ly8*T^% zfzP|SWn)hi*mdLSggR$jw@wz<_n1pOE?T#dfNZN(8~muuP*mhF?Vz&Y`MNhlZgW?T zRQPMy(siyylR> zwhj*9TpxX(%DOH6f2b7Z+<@;y zpBUdEx~NnC!fQ1Z{x!8qCb2GK^y_$zGeR@!a>f^X{3%s_PK_Qxet}pSDnbuwBfidJ znUZQIb*bz|^JxOhLdttdbsUETv*W5OyNZO3bEzMN zne{^hSgz3@{Ul;044I=e30G>Rj=SCZEz*q_H;9`m#0 zshtL<-DQLHUR*V+xn5$f<~#T7hSO?v&eF1@lv5)Ot#Kab-v)dcwWP>d|DVW0e{}gJ z=Y#qW1qbH%>BjV!b(HotxiMt*O>L_1f90oH~A ziXc^MX)tz5K1HYCz;*bVNiY}r-I(hvh2MlLq%L!sq~YTQS~&+y_VWj!Q#xZY#r%4+ zw&R9}#eJ98+vw_c3VRs;yod?hb~wwbsceeNJ;`Il)@oa659ve@A~(Lu^B3dqci=k0 zqODiLpMNHwAQK>^gjkRLjbg6Fs+4`qScpYi1H)G8QVS_+QSk%-Rzl<3q^Uw)N#0TI zBIhX0OW(aDlbaDnUm7b<-Eht#f1Is6O>J=KxRY~BCuUcn!?kL?Ke|g`%qIZK_4|GU9phl8`aXcmGE`= z#p(s9)!IDzMa88-TobS+WTF?v; zFL7!M7S=9eo*^fF?4x-&@vf+OW`!N zMU^5bOk13)=EnyQcAXdW+>E3W_qL>dv#KwRd;~k3QUN<;!l-0gzvK1RZU!G?`AcOE z$G;wTTInAQR*YlJ#Acy`(J)%jGr<2*35?+ura!R@4V?`^XlNR=7m9|0^D&d29*xJ} zR%-4a*p^WS+VCc`Z^ZdKgYC`?7{4}9W_-IkU{CzAIA=%j)rFCk@2k=^N@a`)BU#}43T8?^hSrUtuTFk{F6Pih?W8&%s|B}b5ah1? zZsy#NTnL9BTn}Qs$cT<9VMn7wXL)z>0q0#-MF+cZ=*&Vq2%L+1v#T0Dgv$LWD9E;Z z3|`L+?@Aew&E%J}=o^Ekru#8x32Xr*2Hl0G(W_Z<&H+@d@SsZOBwOmCm6o#sO4c-6 z@EJ8%<^19Sai~}rZDeUR76A5~*gkv)Fqy)7I2J+jdb)e8wkJtr+{_i-*y$q$yy$;90w3J`WQc5MuT4qsW`2#!n)X z69PVsC|xXRAmHcf_O^4x&RknzeKs5T&a*{cqMj~7>CYN2)@x+b0N0;WbU_~WI&?qu zS$<7rOlGNw!SQ zCr)2XsnS${K?F?8qtwv|qgPiRLYL8k@N(FG8A`(lSb>rjNbAmf?%ZJuhbw&M+Mfgb=PP%=E#(vBdAA^h*yyzS$jL>?5&5*|62BNw&me~X ziwvP1`AhusA2C~b)VQ|__%)rW@7%AOe^U6RRML_p<0=xTm1A7ccyB72aG`u#?Zm02 zFm(ixdAUf0Q8@=Kz z>W-Wccj83a_(GA@sCh@~Z~yssvab5+QB84w^oWQ!m+1Y7jl0M_T^4(qg*ysYCe`%n z6V`HGJbUuOKRJ!w4f2cy6@#y2@~KG<`B4{-57T7hb-F9cs)&H^Jsdkxt@_cWmJ;cF zmult9T9>0R(7gL$gBzdnz))tqp!0!$DIK;SnjcDs#WZ=9am2JGT0W#zsOM~Z_jZg_ zOw{#8-gdN0$VMq0?Ht;@=o`?OpM{bx;agNonfk;e&R=@zHJ9rkGT=~psGwplcmQ_% z*VF`fiGZx7@49cHe6_92WLUb`o2B>1O>TzeM+T@_RqFJ`jFVLw>OZi0=$lB5uJrIt z*9$RCk?cu}gZ?~d+V6(3ePJ|2T?>vdA3R2E6CCXwh+?E@^=qR>Mx##Q!^Dw9U^3m> ztr#!(JMGxvoQBjPI}^{i41>{3$H<#+SnofD*@K%(8e|n|g|vcr&SppOOxE%P8&nLx z!;{8*!BLcJyU)Jtin5+`Qh@YHw0&Lk-6jX_I0q1II3a)Qvx0iEZkoQk;;C22AIK)C zKZhzkX*W-+0pecJa(-=0Q#RI|BB^K0)FYRg@4Bd?ebwK*piyelFch+hmQn29O)7od z#DAmF6@Xt4s`oz!rY&D@stY6asj4SO7jRGg;f)$3WQMopcVzB{q1OoO{T=Stsq49{ zwbOciw|%7)dYNtv%bz)^caA46}eaw!*(o3BT_W>lqYk`?7e3sp06GFWsz zjShuxGGYkpFALURPNf=3CZsspMwV;u*Z~2+8~CDs%O!Bewe2`qWN(&eN7(bc6e7QU z3P>Hilj*^u**Qi7k2*{(6^xM3{ci|HZ&L@d!H19ghVtP{>XA;oytjxN5(cHQpgym! zCMGeTR+~Dxoi;xAJY8OyDVSC(q5WmL4&qU_GTA<_cw}8E6b8O0X+m0_a4Cu&tN&bk zD5Z5mZ1d^#nV!M04nP3nhr$nT^eXbLf*IX;-vhp_Pf_WcVaxo57#(e2he^jR8h{9_ z18~uh^T0^}i3vBTI2)RyTKGd{_O<55Pu;3}udvL8V2L&qaDat+*IHH7T$makW2^A=S9rWZ&h(Z1xtW2xbQET}xLbR9wGBBrFaCSt_P zQl~9DMFzz3tkB8F6n^MXW}JSszR*sqYy7aG14l`>z`+m9#y8j{ zFoP3j{DQ8#lMQi-C#Dux8-oJ}*4%5?QbWQwmlcg1!K3RRG^nahbVhfq2CCI^z6#Op zGb8Y>WcmCX4$7M4Btl(jbJEbxj#f`r#zMB56*sO2!{L&(TP*q}YwG*=dxwSn2l~Y4 ztu#_Y_55E#E4$A<8HcWnz2l8MTHdomECI+DfrS5z&)_~_f~37x!an=ln;8^S|5E~d zJ?x@&C)<`qThzibe$KZ?WOrvY3WpbB|N4z&3;QqLue!08PXXFkpsyhLc`3 z8qT!DwSNVMv>Dm}*5VLF-pJi2r?UGVG23+YcBpy7X54C|)E?#yv26aP`n$GZ)ai<$s*C0)vcM9WXwye?f8BInq%#=#hPP9_6d+WG353xqKNdG; z&egV>?(p5^Bu#muN^XTLe8LH1ZhluWskCI7w!6NWPcTS@h5(j_Aqnc;TV5W-$ehkB zW)FMFQe<>?v7ds>9GZ=6Zs_^hI_lg}Wxf6Cq(DF`=M>3owaOkN_J}z2dYGJbCvNHv za|zy&P289Sy!4E%je?2$10dgS_8HekP1C+(+mN*DAThIU>IvXaowuX}xWtfywBAX8 zz#i`x?eU)5v%joiFantU;STQ508mDk(X`fYj%rOkp>z{z) zIugOa{zp7t2fe1em0B!q*2XCL_VHC!$x#ujgC&2&D$|Lt&^e74tl)~5hhT1Wpb zk?P%lifxC{h;7AqVdq9&<^k$kTpk8XbN9ub0ezK~H zzFshT^{kO|s9uVrWS%;@B{wviC}3lN90GQW{dq|D$3cL`E001I$<2Bo`;bhb{k3Ow z7lb?v)g({sv$&AhTl@8+Lb?p?!M%H;oy~;M;LHv4XP0=38Wt|#7+GG5TG)QZ-MPbQ zekE1Jd4;4-$rP*-yJ4W4sZ7nX@*{cmXlK)gYHEI%qCh&)(^mdg+qhC9&@9!GAP>I9 zjh7`yw2Pcvv|YJC7HI$!>S-PffTvWG-Fix8=n|shL+8+oCzH&LJQ0-azf!BsmNw-R z8eUoYp;O{V8SN8Owgi3MM0&vlp;`KceaAzi5=BGOI!tR{aTsHG;*wJX_Wr2> zCYTuH0FdkX0-e?Q{F}o}n`_wu)Q~o%s|3g2xAS#iGu@BNv2CA8b;6wOOY=25k?I`- zU>6R1fDXE$)4$D4su4$;fY!l+Cn6oU*RogL5?3y)+mRx;4Rf0}T(^|SA>(oeLa?hOWJt6Q-SUZx8*-&m|F7ch1J;X^?IZ)O6pf{`I6v z!bZ^BTNO;8JR2J-a1?4~3+lFsJf133X>Pek9C9 z0Ig(WFG(@{zZ0T=cgnWCKtSeZF{5TQ54zO!uA7hhwH2wdLgn&^?;|^A*Mc1& zmo<{tC;UVkA1yg`r2frD*=`ojR>X*NE`vqobKq`VAxetA3HjJnFOdAa#3*##d zC6mq;Bm?5CpXB51RQGAIgY>YfBJXQ9CHtR+h)(|GPgB7DZS39OKh_5P*pxq0=uekA zXt9PURBZK}NA|BW3}_yM=0xTi9FmN~Wyt}F**p68)fr%pLeYu8G4hjo>dAoy)(HC(?!RJYap(Ij z_L;d;ycf_cR!w@*)VFWN*BYW6oQTgWOiJkU>K{S|R0qinWvYE1^Xj=B!+t;tvD1Tx zlWvD|XSR+M_%%F166Jy3*y7-A)1@9(+S~W+niR4N&}^QU%v15AYxtQD9&fJb_!inZ zZT5+!%&SsY>yg?q?DMm2@VBRF_hF60!Zkm<1x^jv&}$^X;jA(iwivGJdGR z6lH%P;$%Asxg-OvayaXE4s`j}kv~cQmaBwpN$lC@D(pFrh`n}FC;1EEffVF-HhEn$jRSM?| zvQx*X%PA!dJ9d}?%nw0xkyAtuje?@dhHmAz{>O$d zw7Z&}T>b&T4G;1t`VjYbsuxMVv|16`7kPj`_?GRd#?`3=X(5{wcKr2pI|BrI3O1lc zYr`fFfuso8`xy`c=W0DnkciB@MqH1pag~7;{*Jjq4pPyjS*vr!71=HHaK0R>v%cun z->qA$WyheeiFs&v$a;c=uKqrmX(M?hoHV76zK|3diEuGIIfhG}u;OpanxWSeK_#1o z4cT5kPmQ(F_^)+KVLNu%0xpT|)_^qSm57xvGy!|&qE1uz*Q?L$E+hnnOz*`25rP_n#uB7)ph@{ZmjnX3(YP5cv0Cgc``C18!!iKm+3R2%>2%0pI=R7 zQC0-O+gT$i^ETz;015}?+eOaoY=1b>LEXK>{^-wfi1Vn0o%l;(*42lwBW2G%nEpoC zcqq&gIosi&kSr0`Gcq2WRHcfy|5$$NWL~$y=L(*WlJS+mXF}^qr#_w=IG0zRcXjft z@#Y=hxB(wEKlehZ&Km{e@eleJR^Hz^g>$Def1m4FP*f-j9>k9Ag8#-EVd_8)EBY2~ zNDtWQ+Ty3EP@DxWUFDqa-1FZ*`W!KwH;pqsR-`i6ak;!QTG#4~FIdI~1Qlb)wLm^x z)kMvkl1w{~4!OL$Je1r<`Q0b#%fi}ex4M+^z~fYCt0r4u#~owf4L1aax&PD6R)2|l z_97-oF{^|@_$*vYvVMV7{%hCpPYfQ^1buDV3!#a+3@j+Lrr}s#(yoWcqn)nW8i#%! zd4l~H1uvDQO6BfuKT{u~a0xKR82_EOWJ}{ARLoKR>+(Ix;76bJK&vw2h+O0G145PM zhlGf)9u0ozyS08my3yc#%Byo@GH3u5x>T*5ne5rq(9}JQ3tYFzvCett=9zd)?EYA^ zMr-ivo`BopABU)IzrN%E^QqHd89DJO^cV~N!SU~Y`8HxJ`}25oKzhxE!N6l0#x&G6 z!!9Zn*q9@YJQo$~BSRR0GN1p`WR|)FU%?f8RF;$KUtka51}w=#RU;G#&x@r{3!|!0 z1Juei{^r-|QyOLy6=H`IgV)8^pr%r)Y$c7eKuD>w{P~{!YJfLbvJy`Vu>f`_V4G); zJHRB1|9EmoY-_i%-8@zN%YnN&bEa{BBkDe0cbL!SZ64|rg-T6o0dK;-Nr69J;%HpRB|;5Ipr zC+b0s+h*uwY!h-kwg9LWFsQlOaIFg;#Zfou)82P_5`u@&b)d;97QD^?7rRQ@6$&v% z+b_9K{)=F;S64Z8EjmoR(~Hr+|myJ$38Ou$B_(4x8oEQXP=%?B|1*NiqXodR%^)&-WhO;V*!g<{g}yC z<&+L8b3WQeEjM=CbjOZ<-XP2um>j%2CQmO^+gf={oQ{|pG`lArm4(k>dE%^1{wOYdM(SHs`)FcF*#Le(3)Q+4l>s*mV)f(uC zl=hZ#>BN_DYE9o=$F6=6jbmk{CO0>%y_so9aVI^5*tvz;`V#r;`8?-B`ZcsBeNdh6 z@_TKJ;+S@Yc$A})$rqR})gtJ#G!RZ+u${W@ZgPZA^MtqW3~T*`Q&bN-4N)$$x&DX1 z=s~{|QR()Rhdd_La!g`?iLoDY^l3nTXYpY6doh>cfC%{f?vVnXXG&S;uC{6~V2qud zQZt45qvQDiOh)u%*w5k2!;HDdp3DT zm}Zt@6expFzM{!0W!~b(yacq9ZoXP#mm|VFvy8 zNS;Pv`saC+Jvn~98Gh4>MYq}rzru{k4qeXd!!4?utzOvF0@-P6OlFOXDqt}UPyrNQO;dY>eT97 zSAZN2Hi8Rra@acC+e%;;zIKNQS_Xs-8k{>yC^)(`m4oOLo7ysgMEKwQP?KU|86+qq28jnorS@`Z6$r4|4SCG^>9d!ht3>9pftsP~) z2mws)!5}kCA{sxJ^Tw?+vfct=?jr`q`SPtk4yLdwvTmU+NtBxm*#gLO?(`uutIph$Ht-1gF?f}LtfpDfkY9?b>)cz+r0 zXhaW0cemX`GUJK9&l z!n#*^Z)8a>74-%tKFoKD4F}y6yC;Lc_8nNW(m1`%=xChl`@}}KGki=j`U;fs8&cd` zln&3HoHsGTRcg;EIq`1HCG`^M9#822TZL*(h&x}RNmro{wGnxREOtjh0$S}?@nvgP zyPy63``S43dC~>>C{5?y93RIs6<$)nx{;F0)B-gz8YCuc4>K0yY>c~6s9DP1V~vXj z4KT*M)Y)d3f1H@;+}rn;j0UAex*~*)De}}J=@DC2sbN5!O zJ>NJ~y7o97D?EFQUWr~)dp#z0Z`jaoRG6;0v6%>aNqQSntRBpAge6_L&FOi%{@qMI z%G$;$D!+bWrZ?I95apDtC(|?M$n{Sh0O$92vVvg|_1tjDQD_2A($3s+dLNkvV6Tp# zV}ATAk}*DBnC`1cc9*6I0BBh)f&ViM0t6jpfYtYC4*cVR0x+6)LEDlXq`?e_8M^H^ z0^&CaM{lef`aGZD5Z#aN*nhgyQ*8TZa65rKwKUIDQzXVM2eK|*P+$);s?DP;{vCcN2Ibwg#K+5p8l$a^pAml4!T3<#cx~h3i3EqTyzP*h zIQw|@*L?NoFZS(eXo;#>dkd-)ZFMRt&U>`W@(_uH|I?4JexsWCsjmar0u%;&L4~(& zcIit!!N7Qqh)_6+OS!p7LH12;m&p2|E%$%5qW~`_fS-XT+I-_w?`}GI-N}6au(n9xyTz(slC_uf9afVQ7 zuV|Exlu*nF_fFgK?wkSBHp!al+=G<2P2FRWi;PyUFJ(deF;XmT7R)o@6)^oqK4C!> zLz3ygx)OjnpZQKYt0mF4^6YS$zt+2(g$PB%17M)8W!gh!%h z6-7RqCZhf8^9`%B*1WG71^q4e-``9(zxb)daZ&1s)!=-Jj26aI`dtb4zRO(OAIx_4 zc$hnWtlcMNOOqOp&0Ek=L=7;}->zN6R=?Gh4|Bi~wjzJ81brDo`s4F~oBJ2?^vjKO zops^2e?q*-WvMJrtA>*a3AoMWBFZ~E;`^js-%cgvm+m?`_?Dil64sm6D_<*}66>=I zyX3FKfZ|OfG92@+P$Z0^P2~FG3wx{Iw@>PGME>EJ34pr6Z`6?FcAYB!+i+wnL^HrLJ=ruuSPRjlN+haLBh)C)^AI2&D*Qqi8 zW%4X+TP&B>$OnmbEwc}&`S|pnq7I2{KShT;qQpHkfXMUc`9%Pp@fWfh2Z@>Fce%a_ z61^6UiQKX~u!{Tdp9s7{hGQZrSp|nX;}-%5HGENH-fOY+l<9m zWd)mpUBKR~SA#;=w;9rZI!{nMcozBok`i(Ydw%?<&QuRziqX|GD0*h%w#mZ?W?~vZ zPk%z%e|iFFP~I7;W2ZthrL-xU+-cX~*Q>7UJuUEe#+5q5gQoYlHe?ru*p&II$Q3?# zhCM@VNbr&Uc}x48M-@M<+*HHVU!A*pb6OyMTiWx3q68cRuQ1P0NtPW&!3$tro zwu=`lu5+^B`~&#PjE&^1QC0z5#h(rpD=WPE+roztsQaYaAJE<8ZlGTLBP@X!aa`y; zd1sI6yo9Q#sOWOD*1&Pu?ag5Tr0y6}3J<9p-&6k)DC?{IoT#60@=^P{DjL^aGpyMbsas5TCjYNiu)86A;V> z{q6z!sh5?m=!Dc1Lzu|aMcj8Lg`LJL{}@o~FXrL(%;q7i{f6l(O%g0Hy3@N4s$Se%e+Dr}@g? zJHpz{f80X%-c;7CiV&jDCN)+ijh1{bJh)*(T?~txkuH~4i-|h5B>Vv41Kc{*R55KptbeFmbV6a#f;1~Nn^VbPM)>R{MfOV=d-&(*d-zSD)QP^-mkr3 zRo|{XJ^l&z^GZR8`T*6$vYFPdRV&`v&i@hqj z>pkISr)5*PO$O2!r?~ADZ{$As)^JtBCwbl_Yv{ep14v5j&sd<}^IrfbK=`t~L{IVM zp@4few`BM#&w%A)))%-l5;Y|TxJDmoh3cDj=T2Z4W%rysPqsgVM@{J`gW#02K`emV=CI0uK6pKc4Rvqj&gQ%z87a83U~1VyhR5E-K--b+*tsT`uajQZcyH@a=ddKAjf7Vg9S+(MRs9S{&2F%5oGuxY;s zx~6D!m)9HIDo-kqMkmz+U}WPS-QXZjWj&?`nwnS+CLC-&f%A#^c%>u9;E#&QaNg3X zJE~8SN5_%=CwI$d9}lfuexELpN?Jx@T~@ zyW?yJO-YVgW^?`xjyiKRuEANOoFHGey3^Qp%b@edmKzbp0}gG8w@g}IwwnXP3i$OV zyjZ-R^8Sg8Zt5|harl#i2MY{TI^r)j)2&Z6z^kbPt9x2UUO_a}PhUA&6N<~tW-v`B zEyuNl2)5r=;y%M|@HSak>}LWrvNC!``_Rm8^sVqbxZI_oVlwnP9}-CxfLc zll^UI0~a$}m(Fsao$iwr?2Ah0pA+WQ`SvzQMg==`ZX=V@!LhqPpS`?P=MOLVr25xg zK!dSONJup@#qkgMjfdivuTdU7_w~PlJFB;MUO9|!lW5z}c=2#UgPvS~p|V|$!FZ=x zKLk&)lh9JkoT;zABefo~w_>3)vF(q+^VIOdoEm3l%vf$Y4D8PrlTG1Q?#QG@y_41i1jc1IWx4FG&UV1Ji|KT{yhD^O3_O!iCm*EBi(dK2qI=H@qXE$YV3 z&#U~M)2d54Zt%{zXNTX&sh-zW`-kHtv0JqGtuqA)cR-_9(d3$lg92O?8A!H4Kqp@@ zx8_2b>$L^CcfHQzgzf_DBuA}wp*gZ^HiL6<5obBSnH$RA@u%1}lP1Cg)Tg&n@`OP@|psS5c4 z#le&()3Wo@5cho&WZ&slfM(h3P}3_R!!gGxip`(eUlj>FDI&=b)8exO?mhPhWGACb zb83s@o=5D=4&l$KZa$Wm{bqoa>>YjkF;u7cKWn)a22I47qj9^wJD21}^#hMb38UD` zw+kw1*LlB^bn+)4J35h=P$y|>Z6Y(oH?ybYbWJ~2+%D%D$2yf?nq=&$|BdXjd^NcCerF8U6^<8 zKg+qHvra|-F6S-^@LmfV`_{ntgX#=B7#`UGyU4`Ue^#|EyCu3Ui`ZVN@w1%cV{3q= zA0ooQ{!qn@@T1J~&FI{Xm-eRD)9!>z(|78=yix`v^zEhkk3z!|fjxiIElaT%;-C)V zN<+c)y_}}J-ZZwQc(r_j-z8IiE)`|P^t!qU?}$$}74oBIr<9DybACI^E)s3vQQC$h z6IwUxSYb==`f4vfVISo%{9~m!psSlbOJ4|DAJO*|5H9LcN{QWluai3br1C{$9!Kwi zT^a&MAg8z|)q+^;9~H=tS%Lkq=ndDqQPmy%idJ@Q|Jn?2puB-kc|f^bhjklyfaD{4DOv zR;hs6(ba1T+)x+>HLtj{TIyU>+CQ1rtfphhjc6&;tp+TqQP8ktLP}OjJYW`VXUPw0 z^Z&b$Q}Tr^dR<5iXta-M4W0xBnm*VdF*KjR!3*xdJ?bU8{^q73MIH#>`U*Hx<*^n&~goURQ!7^C{Vvuh7?4R5EG>jBP-c8vFQPo=ozQzex=d z70Mw=o73xZb12b?N2$aN9`%@3U$f$M<)ug8F* zwaGoNSB_syO^)4zjVT;(mU|(3%##+RmEtCUqBrRIx9<@rTXhB@!jFh~+Rsg~Zc+z& z3(;XQGBa=F#kAxHhL+uQ9@oEul&wu5v2VO--ydNa-iP$IU?20=<=l=lOuD9o@Y znL7}SeT{Oa;ecXJ_`0tyZVXt0$^M&vqX*hrw}cK<(7zg>1D_k1SU=q7Cv(sIKNaRKFaD{FK3Nk9m%I&50h0J7Pm`i1WbIh_k7A_x{zofe4z7m=lO$J)8 z+{EsIhlInFdi*si(0QUB^$(YK;|msc3v3BWYnw3U`i zRb>q|g`6rsomPaz>(ZltI;W}XfOEQSl5fksHVhud(LNGFvbA>^sWz%crHYki*5cq{ zgy>5Q&&|3T?GWRKFV+0p?9?|Yk=1bSCfEItjsRXo@v23v>VdZDA=!0wYlq>iqPkrx zL4!{$8D%|39>)xW0Q zQ+dkNRvU@-ZHwt-c=pxoM@wuq3u})|-)O$~^i}~bSzGU5Ot(SpA=LkC?mGjT%(iwt zV?||95U`+#6qP!lfC7>c=?DzHgyKk0N&-p=(jCPDNG}l(q7)Hn5+IRo4-hd!Hwi^R z2oQooAV@;_b|_KL`R3mH=YIF*4?((j^_S&mFPw1T3Z?0*fyR`t=;}yVw$|-l1 zQ_0hIzR_W&H*-qUABOj(nFsduomGo$JJ~YgkYoXHNRew8QFEUB*5>T$HMzDo* ztv_VK70MN~^o7@^6mai}eP)5nGmY~wGR%%4iNFD@$@`R)Ii1F^t)$z9*(?4%<84(z zUQp~13flYCr(Q!i#w38zE{sr5rgJXLTDuU$(=gp6DNyf5MB_TeXVe5>+MUu>qtiOU)B1~=ia0rm7c8jJA7u0)<|wGA*? zbX@dh3Dbz^(C0R*xG*W!edWa?}iTWeiT zgtWw^3{QmPRVTmRrp)^XJuj6~E%>&D8U-+5(@^*0{mBPOj}N55QQ0%2TVzAc zK3Y>RbS{>(6G1EwgbA)bxWgA?Q}GsxqQ}4OuCGUr=kkS3-pAuI!yTW0P!S`n%_QX% z$ngCUo22_>x^h8BZz{ZI@k3>~F8UoS8$u1BX;C=XBwr_pi$<5*y5E|s3Cm=mbrv01 zr)C(nBSgbysYc{`tI6@_<5(M#uvjqgEv>AifkvbmVAbf|)LQ=>)x^C2<}Nl?3iO=*tKH}&>+#pqFFo5bq2XC< z>JDQ21$85^o5^OPJs?ykC{G2#SyQOLxbTB|-(HTsbXZ$Hz@$QG_omLWZ??U%xO(6t`67)r$T)ebOTIuB(T>(_ z=r@Oye;cBA)o9{%8cd=m{h{JuvE%~B%E}aS+=Y1g6-qAzWsTBHb%*Os3hr{Yl74*& z)Jx}hSi26}Ge z+m9`kUCKyc?6Ll^ytB9$-Rw!D(E`gv5gZ;G%e75L2-K(9>}}HinSb{U#75%i{xc^V z5^O60=9(mqVQi2loZS^-->Nn@4ZE0;+EM>rPWW*f<03h1#wTT#*75kT>}dDzZQK1B zzq)yxldqyD8V%bD&*tq#`2HsHmyM_v>A?(jaV&MmVnIp(+kMWHeb**`bi`WWYL*tc zbt+8ffzZX$`A?OY6@R0k6J>Rqy6Ib1%(2kbk1Zb9Vhem(eISicfmFQ4Sa#PxnZ{u( z6ICNwZ|Nre>Z2TgSf+iOXX1Y6hLj4%vEO?eFYkJ|v;%GsQM;!zOSpae{ki;?OE))= zHAh$}mAyuek0u>@!tkuUT`dPaWu30Xj;AoU9H}u#b1e z0?Gxbe$lPB(E;+5T#=@ED_w&*&82fMjJ3lz#yNyTleRxJ>^n=^_}xhC zh#Jlof@*87di~PBNcO)=(B;L&UxJyfy3+oHIM%$w7%xXhr+tQ-r*5X7%mDqDt zU301!v4{?CkYVMBAq-$AX;!6s1L|Ce%{G4&ItE_slrjIjxX(eaDxUUy@U4HvStJKp zaTR&}``IDd!mz~Xq$jenz9A5HS_tFXTzH`bNYEI|fU zR9|On^hI*61>N}lozKxs{)wm#q|(GV&6>Iua|J58q|VDv0R+@plGq{kpsOYw?`;Fu zW4F~ZiWIE9GUKn^VVbHx^46(Y-u1_r??evvz+?(MockCb0$!`QC{a@E4SED68arO3 zig8RJe|0b?^OW(p71W1|=vREbn88n*PZ+IufJ0gHv0Mu}k9S&G9%A_v?Vj-ZrYVss z%!2!5Jx%E4;hw-WFGGD0ujqOelH{kjwg+@zYGYeJRlIBVoLwAJvXCDc&ublCh)#5; zJ3vzGGtC`!hRsG1+8Q#Z(T*PU_+mcpom4K@_$l)XAQq{5l~&$)g$bVl_8Y7Q?H#)8 z*A)lnYX%4Ng*~wei$O0dT?^4*@c7&+Ime*=2C_zMPnl%4L(fst_oRG|3Fmm3qFa{Y zP*E8M7`a7>nA2pF-y}a`TL53l{p)1QoyFydy8A4Jqp@LUl{zC~fDmSj(e)YysSlle z5>05fQXU2{x7eS@?-AY}`e8ijhheLL;@+o{ZNQ%ML1Y7Xp^83j0G0iHFh9UKX5+^@ zc5CT#;sEPx0v!A8`?BEB5tSU`3UCMv%D^~Z8@M&XiJCJyEKHS6A&a8vHqN2S#gY-S z--DTI0NNXHj-=-lD`>wfOx`rrB`hhbacvh`KlYGm1l{oj-g^TEYagH5<{R4wsjgAGuZIm+4Uh(BE?FB0oG+2bShL^qp(?W=j*M zG?Kw6< zq#cGg_5!=|+GGH*=HA?QrU$3E1+SX31*SUHdt9&bruAMTmCPO__0@1w@^pSGwU{5M z+lU|dx?OU!oya}-o!LBS5gwXONlvn;xm7)$jElY~GAF1h^1cG0?&IJQeE%xx5HpA7 zFf2p^!GxA%cGdSQg%4LEBrJJu6dHUgD;YUgSlfln zQY6XGM-J&!q_~GBJUhV4q`$9BOJ%6N#SRI{yI>s0^a^?zphmy7 zF-)XDUIZ^YQRo>!|MC9oya0%H-90>&+E5YLDu98Mu%Qly6r)YernSXvxuaI)cPVi{ zilOF$2x!ucPN`y+hb5C+aQloC=U=KwCspJN!81!OD5|9N?@z}UtNcYR)LY zO2xjE<_WgAcB4zL5A^Jj^gHDkQqk`m|DeDmC)P+o%MSG zB7iJKsw8N?#0lVRMqE6Wq2fAtN{Eb-Xm9j#!}ZHoqQ4ZjF+;S%FX8{BLHr?1uM##QmzG&oxygOHAV96idSXbl$c_I9j{XhmoV zeJ4^7Sw+T~xG3~R!u=z!H;6!VDvAMQYwl=)&lqIN`=vn?RzqrQj3N+3H)>KJ=h+`W zDs`ehZb^+2;c%JTH1PjM`l@HsbJZ>YhM{W1$d%0W<2@6S&4}48zop#kJ2|pFGPEq? zeMMw|cTcYA#+3lsDh;eq%ui|LQ(IK060hHxijvGWGE1aDlS*^TlNzx#Ns?l!ySQo+ zfaCv=_Wi}nN8q%G(<4|br_8+Gv8K0g;dxpnS&m?pU+WkQNHt|bPTj@ncDwmk(dBQ| z^I{&>g`rD$p;!ciRTc%oj`ubF%Ecn!5Rt4DMxAbr75`Z6^7+r;<1bLoSF(GR?&h9| z$~!km+RwNGs}ca9jR$ewIyjU)LYNgl5~dy4SrKQeS|LpEMAUqC9XR)UKVIVfO{O$^ z2Jz9SM}_@$SN`KYvBtzEr%mhb##O)9YB7`gn8_*%iW%up;}hM2c43JexEfEKemu17 z%pZV^>~KjzN#%*|buzMwCJMl4XZRcWC+iFkG*r2W2XjFc|8bq8OmxH>d-Z1;8%y5w z7!Qn+3nJl8mj|9)Rbe3tDsgV;)us`qh-`d z{N-+mLam!F|tFqnL)p^Y6(8n%gNEb$HWwC;22QgNz zQ>=z-d2)K3U>W?V%Qr)_EyiPo;v*GtG%XQoTzK~eZ5WU_r7v9-*+Dl-beA|)LGebB ziE~!&>O?@!`SkKdNVn6U=rUXJ4rz$jr4vU1CbxMJTJ!)3#a*6Y_xPt(Y@jbc9`O^7 z_P;M={u}V5pK!SUn}A1*n}E{yo&5ihwxjFr+$XPuho09?GQ^g!I309}Oi-|aX;G~yP#SPgVJiZdvArHNK0lZwMBzw43@Ig~=X|IVrk zB7Z23?*5F##XhL%3MgjmAls=~WQm(|lfyyk)DOic>m)%M)N;SqD1St-;OPhE5}pXW zx?Z)q+3nF0WxAvI(5oxz4I+@c-)d}c`&aTwxzLLe{c++p-z}JRVvp6`|ILA(H%7l4 zdMA^5_fJ2(e($_lfS-fKSL=k=$8|6tnfy3MG^M1jB{-PCdWGfx+7|C$nJIW;`1FzQ zY$)If|4@n<7?70FIItjSD1kH+SwxT}gU^2MrFZ1~7MqGzp;jwbC;iPJy<9jMm9Bq# zx(X>64xKwCCyqFMUnudhXEM2jPCQyDkRRh_H!Nv)NJgPD=azYRO4}4Kxs|mUUmSs8 zF@&AAQo{bwRN8!dW#0DzXEEr)3RIKQQS#MI(13dyaD~m^rgxZBK&N~7ZopqXre2jc zNHh>Qk)juQNCutM-u$Gb(>NL-!Qy9ND?GcKYYskbd8J?8AKr&_5`t9CZjd z22N70*jnvC)pWT6<>HSCXM^wYh(lW;d-8zbxx!ANxb4_5Pk zuYi7S6KY=I^{QSAPxB;RDooANW-dNh?>fVq} zEeiaEJ>vC+WlJ%MY&T&czR+&!BmAC|P4XHB8V0B4`P4lu*l~hF6)u_g@KBHN&!<)n zJV~4|BoNtu3u6b9Qtt}pDmG_o&pb~VIeol1WsX0;K%$ed&7PelG2u&>zS@WBq&FNp z)>?t=$bW9!#fPr)bfs!RNhWq&FXqha6l3A4yoDg`0mHXC#=+4le3 z?i!qs=HFQ=k;vK}XQ>r9q0oYk+^c^jV-tE5{RdQX__n@vmxrC?YHnb3WLHr@Ud%>N zPPGCd6kJdwL%G`gw(*Hdnrymwe{AfD8+Cw%c$K04pJKTc0PH9KM+LM71Y}(Mfq5Yo z5JSsyn;heKsDu9Tg!Av1;oO_b=wZLiI^4B00u1Zny9wp8{>LF&OzvT!{|0=y3l&~7 z{|ygu(xKs}=lf5|wGjdoKB-Dm^fgGY)^%U#4vgHRFh+|iK*V;FXb4WBt0?)9uT6)vn@!;>9))ms}oG*pz9cOXXuou!&T6&N1u*Zb^o z&B1H3-qD@9;p$)gGQJk|Vv8lQMupp|Vz@0DVK_vrqw#R|a0-X()Tjx$Yv5Y<%Y{IL z8#UAH7WZ8vCXJ!NCB1(=i$iqF@Ai>dA2nOZm3{fk0$IcfOP7}PwUL>^WEx<-TEliP z)#NX~sf`utR7J^oIZYItNG^~pyOug)d%68AJYB!QF%Mb-|7ld9c2xcH>Hmb^9k9pr zZpQ*5;g8{u%>1hhB=Z#X9|sxsA?qEBv>WN)$MWyswuc&-%G9O#qSK@Ds+f?j-q?5= zw;Bm|m}1jnVS1)hF{33Ne<)b?BBLBS=9M3N-_0|s$$zA_rUwG4DyXm>)H?y?Z($} z3A4Z|2M4JFqB;MG=sEvD-K zpZx<7kpG#9_Xp|H~d;ev>GtDEpO>CxIIX0c`cLQp^l z%Hr0f2V8f4-}5bV+VaFf+*N<V-nWGD^ueIc2e(5@G@f{cI+hc^-=W7%0vu}5fZ%_$rqf9>P`2;50-}{Y7Uhh@3E6gCC~egmmwH8nQ@p-ultq z5Hd%(2VjA0mgXVL)D}GmtF_|fdk%pal4kiuHJqV3#K?G$YgnX@91Wj7`uYItY={%# z%kt6}yjoT`!+XitzQ)OK0(bR2O`9qO347Fy$Q*r8XnZhyjCu|cS9hpTH>WTkQ+XKq zXzcV<-8f5LdI!y=ccE&W>~hRJW22dM@84cMy7W75)W!n$OdNhFK>>Z7m~vHA-@%67^ff(cHbX$(rXZI z!n#f<+exw#A8MP#<)1wlD;e`AX@uX|KU7%ZP9AkWr)&P(bZsm&_5Qnr{%7HpR>d>| zLoL;nfFPl|vt*VQI>t%9&W}5qQ5^Z%C~G`M4a)!l+{LI(Rv3wb*;Y)mHxyeLPRsc0 zZAY>`ze%!>2D5O5;wz40&M?!9k|n~@Qx9Kl&&eg}nwQr04Guq>(FpHQ6Lrq&J}yhK zymzWI&$1gu^_L~2QZNdoXZS$+UyA*i;7LNV{e0qCYy#qX-tomA?-Rgyc20PhZp(J7 zpu|ZB|J9z;MX}tRWM7%*THKAb){Day=i2&PmF%|Hd3A}h{ftcpIX`9CHaImAu)P{y z#FUtMQTk$y=x*w>I>Y0IWb*~Z!uR9bGP1K>rj)$d?b!PI<^@Hv=ED3}ggblT!7;4t z#NO#|Vcj2!&DEuJLYu 5;x^z8#LKGSP|Kg zwSBN7=I@6n!pn}RKe|oDBinz|veY9+`=1LegV;rd^2Ethj-hF%iq7O&6VIS2C;$x( zfcO-SQ;r@zdN6M`TjJ=38f`Gm?Y1NRPk~X%7HmT05)KIp$ST-lW&g#{@<<3FCG!?r z92C%ls!Xvx%`*;W z5Q$8C>l!EXMXc0g52%s{yITco61Sw`ZdXRHR8XfP>(57cmW9bw`l=((8_HA0%OMR| zrw*qit07ktCAUG3s_`J6@e2`EGa4Xb7I!I*sxH7Bf{Z&i(_Xa%rVYAE0veUi2P$H7QzYs+BW-H11_qG}%*2U#?LFV3ZnJ zu&VkkQ|EDotK!#$<+=Y>+i2>SqhgiE`J`f;-t2M48)Yis608tMTg!cB4G_}gQf!&+ z8Bb!i%QN~d))3Aj*rU6PqS+BkwiLB0p-N$v?swLcE9i`ZljOcHMDN0Hj2t~VnWrvn zCiQrKpMq!q(^8CiNN*WO^17TWUD&O@m9C4pp@KRoPMlC79#Qr_1ADBA=Y_l(=$>}! zqAKVf3_a*NEj=|2XifPrbrJAr*S=aKpI@FCC5KI_#<(sO@81r}^^SLoagP3X6~$mx zhbczQOeOBD1H}Tqw@E?7xSe=v+z4WzKd2l~Ne*j1404uUw1NBK_H71<47-$E;}Ng} z7uI(e0bu?q0sFIAWdmFo+-&tH24FvCr|ED4SXZnJzbMik%C`5tYXX%ls(Jn3!wng? zG5(xyLA;mu7{|2Qu;Im~|IvSNE0y)zKp`NgECu!guo9%2V+gBV(KMUBNUQ|?<-B%s zY)(v9#Lf&#!MMG$Y3r&h6k# z8SVy;>sX6>KcI8i3S*B0`+mj5hW?9Gaue>%*U0Py->ewgxL+`iTS@hYz#6sh6_Rg;t!o{AB%Hko0SI=#{T-j0zrX-#xxxg9kqJJph#~+o(CF zbCmvFD_vUtbJxUN4TIswcmjb~C?@PdL;+Bos`e3IG~2@9+ZT)r%+C2>9C!WV&V~z)6^_pqGYeTv_UeJxOsl*0^=p$mh5{9(#x|WBxeXh zb1%h%62|lug=@~i*&)(cT`WGVWN;|w=B(Z*4ynq|=XjP;syiJ|I*$>7Z@XR!_Zn@AD1#34)mCdO7scguiv zVDf00PYfJ5!d@tw_nkq<#v~#ZDeuR^`gB2y*u}XMgU-cXSAzDgh}5g%My8TD#cca) z-xx2`!`BJV5-s;f_3mT8g@!PG7ti(yU_3H!v@(D6DJK3_fN9j#he}s zCkNyJ4_4lR;jF0Qy&zN7H^m$3;kn`velF-4Jt|YCf zoMskC-)LH}Bv|E7N|oS?IAtsuh%B?TAtb?QMkr6`Uf5==9#$``WEx?FFkYcN#=UAG zAYY7Jq@a_Or(MNK_Rc{TOq%yyN&>wMu=7|TCNxH;ujhzUa@zGn0-vIBzQ#RRctE@E zw31^QEYn@0j5oAZDJDK&B_AdO3!bFPv8&pKK2cHb5*#}Eo+$WM>zWVDmIlRWK%1rb z`~z|qEF+Fi;8V_gL%4_df+_^1Im7CUn+@h}={p~~WseCNuiuvT=Cq-IaV^TzSkjKI zbVCMn5K~MQhuBOhF6>0oN|!Gqc5*a^*DXpS9q~!UH5m2Wk#tBbiF#{z<4Me!MPc!n zm;`#^Z>@K#Tvyk}?^tl^?SB2C30W&J+!EulV`ZUpg!?eXKb{U&oNI9OM;=l=P{tcJ zJQs|ot2HubuX7eTM1CK`+4dn?vj5@-DajnHk&qWrUE~1+kXSDs3~F-fM34^*_fQ$RMsIr27KA-b=LCircLFE zJC|?#3Vh#j+teXw)22O*{GVS4{%_njZ3?$BGdg=E9K@o3MRePLS@gwGX!9qRI-{E;P{KKRzX<)+rfMje&YH@n~7cRzC2 z6svSrd#L$Qv+B`?=4IpF=B4zJ2+gU&q$JU#q{|Qb)NdMlMniuAIN5Y3<1gHb*;A!Nlt=F(rgWmG$aDLVrmp)@3RPuFkehq9e z$u7vd{&Lb44H+3rWUZP-uXH0AWm25k=al+79Z;FBL87f>BZ~teoaqc$8>fGR%UP|! ze3@DEy8XHx#N}|86hnAxxFtDrb~Jdz7-007lkw4&wUvgoL`52u=c#=bv&JIMHgJtz zwpt8onO~v|n|%#$dwwGZzSsKnd_`CSr9L&y0!#$5?AZUbwF=)N{3dCBsgbI7Y zBp%E9Yh?CNIC{mc4ord)qegLn#-H)x4=~B**ucl$hO0$LyU*hjuhM?A{xdi;D_uW1 z{zi^tGejMyN;Q);=Gq}{i*;AA zYh7pg`pv!aKDyLhQ7(@AHucqxr)l@k9tu2q(<^u7pkfN24+4p~$kS-kbfbZ=EKT{2 zz*FF`sl$J$8)tc|((2x!I3ynIO1syWgV5H)RZ9Rg2S3M54OvrV0BLu_aY!Ey8Mbhv13Zc)nAply0C{ASoe#6 zQ=~t%&sct{A$T8P@iH$IC`&$uP{Jf#ud_@zH%8O{oBMp?=A??GgN)}YBhgtwvfAjN z43f^8lM$ZTkXAhtPO}!12)n(KadN!-$?MXXz9}~)-Py1cSbO$(06E%UNsckY)ow_{ zd1uU8$0WLCWwCt3EZ{M_-;yoX6&ikX#gSrg8Drb3l)Fayl6@xL=7glWXFu{&uAh)i z8t+>cbh)+<7diH*|x=b4rW)HX6IIz9rn3cf<|lQs(eG@tBIcByJ4%T z<8kOgWyMq{vuov? z+L1bO%;k@2>aY(@xA)k3t$8+QU+_Fw-u9Xqec02EwcD@mUD?>DgvE|{E&e_(MX^Qt zo@tqU8||n7CCNCp-IV+keMDOk`oW5?jVb*{T)B%Nm9HI`WT#^!VWdIRI@$!10Qk{X z{`>Pf0{vg0=zouEICIQed&8pEPc(dX=6?r$|BW7g)OvN)y57AOyw2VcDJdhoQP)!M znV-;U;P0nE4bA5$elPy&vIR#9Ut3G!Bd=6O#uKdl>Vcg47>&Ip5tBZ?3%Y*->==0M zWeFScc)zb>@Uz4{IWB?6siZ_zq2cdB#iJf zGSt6L85+89FC6Y%eftyZ7k|`dc(1LJk)UWd&%a`3yZv3Gr^LfEB)=cGgR=4U)TMdf!ELl%rU4v>1B43 zMEQ=m(1SNqWZJ9)N6vRfM@K}3dk5A@`g?v1;_0GC_DqHssA?1|tuC=`mzImu{8=&W zBAH@lU;Q*0pC_Q{PaD|Fgq#&XRjcl+Djbh#IoOe?MvZ#HA;8PbRE>y1D+97+k{aFUggSP4m zD@+Qvc-QS!IlGXWpvd`aVFWUYF|RDcH-}`*l(}7QVtHq3Y#G=(lnP$X*j{x^Az$eG zY(;!tW^Q{;Mvp-nt9GC{b9Q>FS>`Aex6+m9dTg-aMNnH=r&zH~y=2Tl6FbZ?A*&Ma z)406n;<}9k`>}GtiH-2cF*SA=`m79j!%lkOmKEnhr5LVOal*x*7yaD&k%5)oPYQ@c zt@Kb+%zR&+XjSW~-{SLt0)>#;oM6fxBz8~rf@OPs1+ z3si5j(%PrhLZ|ynufbAPFAvp=7d%aV=1r>)p{0P^V7HrYb!T^=hmBWtD><7R{tAuq zi`l(y?ol041M#79qPb_xjD9N&|1@KGYz9o|so@?~HwA zVvviCnv&{{6Jk>r-acK>+#%^s7E2++3rHN}Ha*>C+7*@Z)KlLbMlKxIP~>&{$5^sb zmjEx-39~wvlf_GIIu9!mE@96&cLw6ue)Kyyysq^_tRI_ZMjQSSS0PH)PSz8hp}u%p z4|Gm`QPOiWLDLc>M=cf))6xKCX2>8@uHd!K=erRRcOQb4bWa{AQA%)ZeG3A^{Y%ew zph<0U0&1HMq@utY3hTyP}{$Gw}Oog^57=#nxq_JsI<8 zJjv_|W|k2Ej|qM1CN<7oP@fXQeC<=GpBE#p8LAP|Hgv&z6ly*%4k@i;`RQ2*!|&&? zQtnvNr9*2+YqC*;&01I=HY|>N)Z4NssN_d}PkFxtV-A;aBiYlb9yg;}@c0G=J|IS! zik5R3HgBqr=b5{RRb{2V^(M8}fyJ4!@Oixq(>Swx-BX7FHv}xl`#5_uBO~r-P+fQD z|0&x36G$O|e{%o7z9A|sXQgV5JN#dfe^KW9F!`T+U*605b3Ji*xAG-|p|S5#=w2f+ zK%Otr)3viNwj1egUr#S?8-@=>SZ>XccrEq@fPyOjVNkukUcDZew>U#TOT$fkrO(Jq zaqj9h=ou)j;G)7^`AVsm%nk$Xzw5n?@+efjzW_n3k|9&7_dC?676#wrI-Q+27=Bc+ zbDhBSVZEtZ+0C7M)DEz~zb?Atus;=xYMku=9|f446=iv(H_>Ot=n<#B%XA?s?vKzK z>GYElmk`0;&_RSd-aKqIJ)urdiC3>*QZZ18;EI^VM4uvH3qyWNR2e?xFxzcyh@)%r z>4>mC&f3Z~Jz<&`Jv?^I?hS-eZAc6$eBMzhZhOBTURC2*V*@W5tzlLi`1yQD_)wu~ z1-N!a19-ebks9m80)KG!L^=iMx*u?tn25r9e0!s}qDo4ZE0pr;-3I|QaEJUgq9AQT znsV?_=(9K81zE&hXrq3-eAn;jc?vu(mtBGDC{oYmXK>SY#td_@ZJ85>$4wt=8Nu! z|Jr4-&TM_r*MUzT^|=inMP(Q$Tc0YoK0>)Uq!6K8^+O%F_njOaxttQi9&f(SL+{G;Wmwtt3)M~Mr6f7={;&>t!Veus2ZufCSf?uRnk6!cujU2N z^j4k2+C_k5zDD>Rg)(TpTdD}dTD@D4;Qc+TPZNk4GAZvP30R%VQXLDw`#1x~&mRwb zy9l#&Uu!a*kCH~aHL>f~(WL%(_8AjtlLLTB)QPfUm6368>=CdLb>G|meP7C1s_&eJIu$#psq6P++_aUr z3;#9*f_Gc2mIChoqWf<Lgi0_OMASb6U^WVyGF=L13;J0U>5jZNM#U%Ahn>z1~)lh0MP)c=Pp1aIL4M=Ww# zG-B050)oLHAhyB$BEoTc`iLzIJr_y#45Gkh?*&G81o8WaS>i}z;A%0AUlh8tdqb>e zPrdDPB|gnB%3Dk|j%529);ZU^bgjXDKTAtT|8|P%vhyFYs{Q`A-R&agZl}Cll)nh8u)EvCz?ZY zN;SHL%!-&KM_-SK65Hnz>Tq4iPxV#__Jds{3SoiOdo|2zk+C{s)fU3+(0IA75a_Z) z=+2*Dq#3@knPtKd#l|7aL>CD&+$bJ%okWSy&0n8(PK@7_Zdg{rtTNFL2I<+?q>c*ksfYb z`Imit1pw1z+(RQo-b8t-FEsU-ROpV@*Y$m_s#?Z-3R&$P8O_#8KD<7;ba&r6I6JiU zoV_9as~T4;%ilN1*)9b^J54BTuR9sQ3#&D18oFLI^TY2FAEHkS5J6b%4g2E6c(8*o z*}j|^cQoscU7W9nE=P>$wubdciFCN#&F~w(J@Mx!*5!NDW~AkcQS{cY#}`IIc0&wY zT2pLGd>A8pnm+n4A1!0xSG?-J--ybo{Wbs)nT82evtxHp_VYAYqS@(;X|tP5Hy%bp zSl0woz=^egXD>5sm#P)Q)RyHaf3Kk`&E{KH=5lTD*nu7x?fJFMu!KMk4p7|}sK8PH zradT)^po=A-d}A6Nrw1NfPL338}@4& z{&LRKRN7apu*5JWl1>@Kx;*do56{V(9)Akax+tb2OFo%&D3YVGe<(qo{{4Bap3&1i z9GM*E)}_XpsMnI@gs>(fBxE?yd>9gAu9CQdgSLt!SLDm=tk8jz%9}%)R&q`j;zccB z*%IrNf8C(m4F1hrz0&DO+WljqDQ#CB4rhUvUamuyKo~?2@oslfB?QwVsCC>(am<* zz52Ev+zVh!mmJN&f{3>nf+oIvA)KW69p zh0#-L79*MAb}h(%Xv)<0Wp)Zewy;ROBV<5`8o#jlCJAg^l zW)sT{=M#W)a|d;Io+wP0yz_kEjh?(RL<%-Hn8DW}|f{Ey6Et2cn-9fme*s>cpyL zx=IF3-+x-(5&t6qbtARU326c`kH(juWQa=Ms22DCxb&ueh0oKozr%({-cO`=#G8Lh zSBt>Dfpa9)^=HHBBB;MyBfU0 z!VTvqs^7{uPb+QX-E$+(k0&Dez$h&6SJmDbFiUQ%gS}$3*(s^wk2N3WTM_l!@%~io z{BMmmL-jI0UfhFuBjq6Awd0eOWuC7xKB_v@ps^^C*?`=3YX2g?=JY7RLky{m}NQT}xNrq=I6p3sQ#=5J4Kg~5CWXWev$^PjeyB*sdo z$$*8;SC&x|FElC-LQj0q+htg{@68sys91!nGoZ~Bc@^=Bj z(3i=kAj#yHY0h?+Q||QT9c6V!CHKf=N91GiqFvjwu@-g5Je7lTz*<>B`#xQ0V!pV! z_Po~3TQ~2~6jhZb((T%v*l5rXW>c}ePt~li;whg7QzZ;cps0E-xkeVBcy%jqXr>Me z2nrH}jVu4_AnlpoOHC~jM@xC~hQDkZiMpo`>YDAEZDXi4zu7<^?)4W>OGw4q#H@d1 z?6Bk@Skiu}~57JLYnOGOTv99s<8-RIKRdPXBOx316@W;K|NognSZ;@UWdOyXNs z)L8*|5^`L;N}hOQMQT$WzPe~jydjKxC69(2rTBn-tBNz0Qh1knSn;mj7XPbCn?X0T zbfk1uR+>FvSxX->`aMN&O=zx9IpiV4iE!n*~uGpRcR*by3 z|J#d~n-W<&QNHJ*HDJ@%fM@QI?rkV;^b!V4sYXGB(5({m-#$blMlU;I^&;C&E4swB zdDFNL>@`0r74iu!92G=pp%?IaA@2KnTDp>!w0mg=A?`_?A#tYZzpC7;h3i_FJZ{Fi zVfyfW5JIX!>F!S#D7v8qt6hW;sdc=ZJ}|Qph6A})#;=mu53{%^ElF-N1wiT^G+oH? zTu!8eclXH*?7?yrGY37;$5qMpmXnz+&HB;)Y=?D`7P-MaLZM}rXzPT`$`L!A%izab z3o-%@I}X2b(QDzyLwC9b)czUtkDgx-JvSL_-B97bY_{octM&W|t!0Rx3Px+!czHBu zG1NAh^UT5n9TBb z;En+0ft!abj=zV{IlrE?Hj4^+Z!Y%{fgo_(eDrPck~dpz#E9zX%B^|ZF)mmeri(na zGEr!3S%~uySY^{Q0nOkX*5e6wY*T(oq|@u9AAX`{2fit_csv}{t^!kA2(L*{wl58B zSgEQSPQwzfaI^lAgAi!CPv7oTi1C0nH>b+P?k<+~lrS04 zUe2c(c7Ma*KJMxHdYHAlQK?eyV+Kn{+MvT5Atu7SxX_=iuc?*`A?@JbFS@ZKrdpRA zt{;0x{61?dY=_o!$93L5(9iV5u=bxhg;y@b5>&eCvx_nM;IKq6-;ZyqmKN;7$QhQQ ziSAgS6S8h%O7hnqJIX0=Ju((iaJNV7D8gaJuL1t7pIes1_}7zOyZ_*G5oI7)Yom&` zkxTuLDd_-UIZ^?V9D5wSJ@!`dz$TnKEM>G{#CE`aahdJzceuS1-9mFIl>6cmroaTb z^DW4A^M=@uv@S(fG}Dva{XD6czs8GeN$!X6q!*^^d&xv0)H^b|CB+xXZC#wKAwGFn zF)GcELtJ-nJl!1nQpQI34N#K1sNgT3nSpJyxNRUNr9@rYd}@WA@_99D5Jjk)v|fe+ z$L5Z_z&*F0F)L!Xc}EmptSr6~Ew7%wqF$z|ieUS)9uk)N2o-*l^OHTg$yzr}y9qEP_4lz8~LLOYtf$NV7gpYoC@csB!n|r-7rI)H8xOs}M zRonQ}*D#Uxd}{scHM&7Qo9O0JJdxI-F4EFwp&;{~*rZSbLUNZh{Sqf6kOmEON5_U^ zbytUw$M8?CFvxTSWo#bj$H$m2ih{sy>^JjsSC6Skk98|CjA}gtH7BchA4@1oq#{10xGM-h(YOlVqV8>&j%TLRWh3TasRL={E z;A=+$U=pk8|B`60?j@#8Qd*vG65bE@K0C9QG-A!#kB*dh(%d_#XV^#IdBG9UN)-7; z9gT;Np<7e#!;Mch;>$8Xo(Y4;{wOucloEl=;Zro%ew!M~FN=|Nub+%y+W=+gUlArSP_oxek1L(E8$3?AmTr~CA zv8(qGuT@PCsRA~?RRD>9Qng0)f0hz<3+(BCtPAO0id<#aOp-qina(?A621T^@bb(^pI_U+LV9ssfQ#;3uy{V^0LXdhxU41tO=NFuSQ~w`D zrz4#PzqEf2O)SIzdf~&|l?2&osUw~lLG=N8!-2ceHC5sW^(FG@wROVT0?C~&Tta zdQC))>JXQXm38j51UqE^Bvd$ENoj;kG7X857`0AMfl(?-cM&=#oQ zG7;(}1kAA`VzGH!L&r=Zu3J0G3sX?iJ8r8umHCu@Z=0w=hIMGUMYg>b$_V;#dI#7? zt_Nk~b$U!K8|=C)%6ixTXl8&L1}93h+QvJsQETbLM}de}e`LdN;Yz)kK}8u`+nKgKNjuDZ>PmwZSie z1H0+V?AHxm{zo7B&*S@TPioz(i8MWzIrq4Vq-L#S)C?-y(vMc)UOn*A&?}Ht`CaP* zJmVKFt+6pjW<8wE&Z=n;dqOwvUh4l?#!B5b`!T5zyB`lDl5e0ao>y4%U^IZG=@|iF zfR0g3c>9yvIq8(-v-&O{9)-XwE>mT3v8Bf0%a}HhwNpd)SNHe{f8e(LDD&G#D)YPLPpwb-P~*Z(AWR9@ z+NDK&^C5x_*$Kaf89On`A=(_xiAo6X`dF)efTqWJo=XF8roPw;%6k+MNPFNO|CwT8 z%4nOZznmR&SK+vFhrC%CtB=y173591*GgMF*aGr$;nlb`!0qo!IiFXt3=Sbzwy?sJ z=-BPyEftF4r6by6f0gWEG*`GP_O29Ku9UdYFc6+2ah{qmSITpyj6rWfS6l$v@4N&B zOdvbUje1H)uRwy5ra?uVh-c`!pq>hu4xtwwexB)%`t)^-#nTY&qF=#-k8XW{`*)zU zPTNJ0u?fnIXBWwCUMm7!6gRL~5m#c~|f=9MA_(?4bPuG3-81{*^uVd14dB!zFkRqBcfog8e4Csb_p z>cZ+rSFz3v19N^<{*GA-(o&#s1l^i7s<5;BXkfR8NbWU=kp()dQ3*q}@_@j&o!amZ zt3er8STD{fu0kE0$-}P>)f6O* zQs#OJBA59FXQ7m+=Dd^bI1}0K$KxAwy1+36Z#i~3<@xS!RYQkPZ>Jr%6YF%8soLMJ z6k1oy%641M)Jj>V!f>P_r&dCAIE(QuII7IaGuvqp!xC?>o_5^tFz$qW7}Dl8tbPlR z8JVbZ{Y?{M0cXybK)_&>e|qrp1!A~)6C?N`fnVA*5CpG4vyihd7+s9|)dBEtccu;r zPJz7$tAOkMp0aBKm^a`vD@ro?rrjl2JqjMdy_!!5;?^B$>Gehz@d5gLiP za2r?r#azjlYg3E#u}%kL_S{0CnH(rv$!6(h7d#9KucX0Ak8;Qn{^O&dp!t)fmvyB!Tt<}6&V>8neWT?;8ii3{^(N!A7f!`w z%tIaud1_c`&5&B6>6_~!-L5Sq5tnoppFZ-aqS^BqoBF%%)T>S%If;#uM%BO8)Na6* zF2Nhiha`u}?R#7sOo4khMZx~|ZUJGWLQfsa@m>z8a^~ z1hI~@GIcCwuxsDoZEqs;53COuCm#TrzikZd>stt-;1k0ptX6zniTr-(e<(As&Kpso z2F>(8OBiGuTh<+n ziIi~YV=czc0&(xVu%{bK0|lDl4>zE~=gqDQf6krFR=y8qL3uS5Vvn)j9#2kd`IMQ~ zGf#!iXHI#DBTJ%aZWj2+x~Pm_=R5cwXjpk8PJcEXAG#XRl8jXeIKi7WL0ji&729^M z<|ToSv(zy`Ssw5(2c642o27IE8Uw=kp4h>(aZR30rK(;y0IfH-4|VG-BlrNdNh5nd zYKcwh3jH2lbShE>YQ+-;2-QOcb|lu>ansS(9o6b^urJ5mY&_CO{R1LVIiya9Xa|3% z@UD2T-B)E3vl?5mL~D+oLNSt9p0}d3boG=MBP~9Z?A>=7Oo>gJy}H~Ba+ND^c_RI} zvm#U(&i>R03VI0fT1l=*@S+Ykc~vKLfj||xZiDL@n}00OSdAzI?QdIeit;<^i~fMt zAvOgrA1`yudaMl0Mzct*M9=$^y-d(b*+gHCOG0}&z7t>;0&hPy~7TfNznGYq^AwsvnOC3 zC=i;D{g1=G1sZNKxKxLU2TH>=Ej^N2nTl(Q_Yx>`{Go{dwmQUY^hBo4L#O2w^q(2ZZ-9NsCgHS}-%*Dy92NNrsC-#6d~&;07w7SzH?@UPYVFmy2;Ns!Q< zSMGP7Pi{Yd9`r=F%wxDm2;48+>1?R3(=A)Hx2Zh6^)Dm$z1W?7Lbw6A{VJqEP zA#^)@MsH*n*jUZk^Ui~?1fRkC`hGIx4AUTc|E`BKK_+j9N7k1uBPEGKob1CrY=dDb zC;3sGkf28m#HI8?=_gT^a9Jg>zoOC{zBpsiuiy8y(0%YaUeNL86#X*H)u*+U<=Y1x zojq;vL2cuEkh*ZyP2+g@$5FA(1sqw}HBDL8wj~xUbe_-@fv$VVcbW7|ronm?^!LF5 zMm)mQGd&?FQyyMy#=Kn4^=f8Nx|4rWIKI9Lnh>f#-;do|TiI)ItCaUL?+~uzc7oYp zRDw-dismOp`MwgoPtcEy;fJ+u>IMg@tio!;>dmCO811JM8Io1=(+O7{#!&6-E6Mbo zW{Tw9>96+l{TlRdBmIAov$1r)Ejp|T83;!MTAO|^*pG=bV{|3fP=itZtImOv>Y=^Y zG+9prBK2H#Z%4d{^-(yPYRQ!4a_h8)cHh-vEYi*VZIzsMf+)Y}!d(1pqMApjbz_%b zN79BxuJno7N%a-B3^zwSq8 zXr!>QYTwmny)i70Ys7mq={vmbZBc}{VGyhA$`lRX*HNeoC@)YjF9R!Kh%3tq>l+W`-Rl>y>K)_8?f*=4Go}9!H%!K(F-Z0hG z>su(jCFNOq@UAFL`3w#L-cU$NE(<8Bt=Lp42e@D2S!)JEvQ;7H@uHRr5tWY(Baoy`HuGYED zkc@J<$crDCB4<7F)c#)XwCC+yIks0HUxW4GqF6d3$xRVD8G{^aQc<+R$_bK|7P(UI zA@ql}!N=7hENykF_&QSGK-(YR)L5=?bG*0xQ$C0_JldaNKNk>ou{&vH_|{@ZE8`^V zwT@8UO8eBMQ8)NV;!h0-GOE{7Z>}oHY<}Wup(0~yd|JUwujEQ8ujI{@*b3mF;r&m? z9Lzt8)yX$a_WZs0oqGULWM6ScgY#%m8BR}yaB4@&R&tH8IG!}7!^HI&guiheIh|fX zHLTQ#?qGD6zYuk?>Kpp#&C6wgr&Y-X7u1W3|u=(3~A9xL9wO#6Hj~;B^Ly*GWGonVei-N=0r^ zTZcxfl*Q0!m^#*VM>biRKbs+UvacP*a#hbK9IjP6Sqvt6A(dTlD{CV9^`}+Im<4_Q zXe?4Niqh=)QYKPF+3;H4d7Im29z1LFw-w*Fw_J2rg9^KH3!_bcW8y3$FlDc!_plnRNH=8cPafdRnzkvGT4Shhfv`Tx-at3s_f}~5B00VXnd|nzUe+@N zvN(Z0qR{-1{&4-Q%>NB)635N#lP`jQxp2nh>q4l*C-=-WkkJQmeVLvhEl-IV=*j7*?EEkpAEGS2`*Ee0#6TyWa;{;qV6 zBLG7~A{&Vy(9Srh{o~kY^GkGXZPVn(I=tfa{u>RRvP^2Rp|M>db>b0Ig@L^~>7 z51=6gP0G&QxJ9Xx?@*qlt#AG%MeLeuzM-ANJ9 z4d0SiAU(?PZ0OsZD08)I^uf!=E@oGG+X8Wgu2NN+g^G8x%p!}S$MED6uX;M&cGHw1!E&Gf`Sfq* zH=lnZJ-PwEP^TQ|!hY6!yJ~rc?i2prG&-(*A^$?6Y=MV5=}rM84cg^P^a`nbMGB$B zy4ZZve~1H{@GKT3D-%k=#Dpb&>;AUdhT@(D0E1h2g_ld2h{QicOVH(mPFzpA7*0u@ z7~-m8;cZ;iic0I2{it9V`940qGP_s82Qs$v!K~-|f(k>6g%dzK%{iISHm9oEQ0|db z&yQa-<2N!00LL!q=*G>-1jr^@EwUB3%dZgA&hM`i=M!dL_rOWxk1^I=wNOafK>iTs zc>+;n?@O@7JwGamB{9cG?=S9xFl+FP*^*A7647LQ!cQJ@&LIYVv#NGG)-xR8@U_L! z!^z9H>SUqQG0;V3U;20jfmwWkF8qa|HUfEg>_o0IyJ7o}{4VE%KXidr-?a#^YT`^~ z-qBduCuTa#vgxiQ=c4pMAg`|4Z>9o_TaD5We}A67{8$MG9`u6kcy^`=>luPLb{Onx ztGifzvXLed z{@!oDn)zPWJOqfc=|4tKi@X_m!ZeC6|MJ2if#UuzEm-b0_HxM@-|0^K2~?rEC6E3m z%Tr$;)|g6y$2r>)6p0oWW5rHFGL)Ib;N_J@w*?*k7ztr%73vX34JG%pgOev?Ns|L~ z+17i0n<`gs$wS5i9v03R@w+joNo@sbUeR(*r$RLB$v-SU}mDv@l4PW%{U%O<_UG z^S~+>=~5^oOD$7+BsC2yMY9MMPG07+(~W*m?@Lo(yw_q=hq5V$m~Fg%B-8j!%q?AD zIFAt@w!#mKP=W**Fz=&R9g9vJ9=I}5R-z8~(RIqCih4FZtntt4Jow6iMa6d5>!c3* zMl6*0n-pcKWsy3f5@~21KPjT8bQ+4Jp#=%1GtqUulWIX(R21xu>(&ZyRiK~opM#;4 zU8(Rh7>_NyZ?yj66k_c2(2_HuAI5sqPETT8KHB7*o^X25nJyto9IwQJRd_V4wygb| zU9Jb!s`jybq=?_oWx+t^Xd}kXDI&S%yPg7=;hYe2$p+@v46 zoOs_@>%mvd*Wq?rsJoizn)j>W*Knv{k5ULnwZ*F@UytcW8q1D3+N`yYMXw%YN)gAo zCBPdUi49G?JdwDlL3u8bpPEPc2#k=oMWZb|;U**S5&=FIDm=;~+N>c@L zz)jOv1<>4oH~A6_U$XgNdS`u2g8b~(vNRk+eY4J(^&eRU2q#-lTA$Zc=Ex$^)}%?( z#b3M4-J`7w@jEBNtvsl6a;ZPd@B-^Ko0D%6w41wdDmG+zHWwbNL}&J!m63pd%rBY4ed%_>pgOm6k&{y0=oTorUZ53?Kv>1__gu9*$e#qYDzG?_OHV4Kl?xx zqHn(D<4j6Bucn6uebMlCnI4*b?jMlwxGpx6wcpra_e1gue>z8r6CSBVs+UBCnBhVA zhE)UpS@siXe-3brE{8-rlJg55U38zmBy5i{UdTZp+b-%-?MAC-o+~abP8y*Kpufj0 z>I1dfWrOwd@PMGI0ZgoUb{$N5?=pAIUi8j!_7^^##Pu~+axX?Bfz7#H^&ha=3nJ8Q_YCb&2=YP7&>jb-49PsJjLL$! ze8wK2dT3%zuSc|4Ky%&wh?!yC+n`pJPFA-(bfy$5obFd~C^odiMiEIqsJ5uf&EO8A z94(dnXQ--9 z;XS}9ezU9hbuXVVx{XRuo;QFJ;vDLdFxIXIYyNBUB7{p;OxdZ*F4kZqCXVS5o7nUl zeFb&(PifF_0_bu>N+cj&wS~awd0Vb}h8zo8^vZgwj4vL2TH#g2!6D(65bw}18?O@G zXl??35~3zs2c6lEx$G5FC;HU}p66Im7Wv|9%*78bo)ca$Dl=m+0T_a-`Jk9_({qe( zJSqa?=?BK2bxOMW+P&@5yBP}L%G%Ukj~$_7%{5otJ>)GmXXL>s2xd6ruwf!ltZy3+ zQOdz_(H+wVe{oe%b=``&=xLizQgHP*Zu5680hiAPG-~*W*Q}ljp|G?cimVjAVOVR%Sg!RDXu)ja#33w^%7wGKHKh>3k9k-?y6vvb$73Hk|yWKG%77zsX@+z}I0BF4708g!{7NcAGN2~8zfgUo zGDK+UCE|0i^_~dDTMbZ9r6_q2{5(EpeM&7{Q4lNw=Tx{_@!>Y#adTN$`9u_paE;{a z$`NNOdXqj|DTkryQ1UdD$&UiJ3v6@@aP`vE+CaVT9oL0D^wph&+{@^Tj8A%o)JJoF zCPw<0+shd;BGNUGy(l^hM?Rl1s6CgHPPGE%SJWQz@~M)vO(6N-6n`D__7H4 zGi|b|jzf>o+w);gIqAFo=tCI_7ieWUj@+Iq-AELa1Tz!Pj4qQbS(;@!?NL`}JM^?y zhCq(hL_Ua|RN+2(puP&w+oUC^j#Ow}%IcRLgPID{NOJ|9riyHdeHm=L;>Ue~_42pJNKn<(o#-I_a? z9Y-HJ8Nw^2r%`5z#`XENv5xeSUBP+Vu^^uz&-AOBk0KafKrx=M;FD;^I#Yt4@6Bzu z94gAqU*fMcwt6e8dR#rDWnrRMKGFK{*im$zv;ryQ;4ct{#fmdkfq>HeZeh~I(hJh> zt0LrKyXuQQpVxusTYvAKQRVmbH~9;uE4qZP*z{u!uGthi_#T)K?7v?HK(5et*>lnl z)yu_+-CRucn00;m+X*5J(0eUHfl9r6zj~4=a>@UZc>SM0f?l=MmAaBsL@-gKMP3jn z*{_V?=@X{*50wU{+-2WqgNBl&R%ftzM}R_pS^Lr-N!AvUTV@X#&P)>BfatcX8e&(hrw`XMc`=+~ z2CaQL59OCy@q$TbKmifrpftP^IFkLzNNo$-0ePuwpvEB3AJwJ2V=mx)+7+iM4OVU1 zfDm*`z9@ch^+N$+UO20I>|~h7qKPueP<3#&0F9K~;Yyt%n?ceT zW`?ipO~YyG<+%*1xIK3_!`bU0Q`;6=sZ7gXDG?cc6K$0=Q?|Qc_^1S0d;Z9Ux3*3~ z?MwTyhGMb}CIG$azdKMFcO%R0Rhy0~y zA3Hzo%w4c63+h-xwm#iU)``5^rqGqY(%K)p=a3;I68H-anDLk<|{HbI>xNroP(6b+eGw>h1a!5-Il0jOcWZCcd{VfFbEzR=F)k$EzOaF12QvHe)E#%oGot-YBPH~u{ zWb8u+XJQH8FPe<+Ksh4`={HUm(=;o6bL+p?4S1jKh)!gP8ZryQ{Pv}Hma(qZR>;%m zuVH~@zeEex<-4mJC2YW5IR%t-*%2)q4vb?nbEB;YS5$kGW9e~+fVu4nTob7~NLh{2 zYCBAuseC#YgQz5yRs>zVInV)-`=!I9F+x(#4YR1HJzr6|-sBydD);5X!QU^gjBQi! zad#psmiH)OA43a^*#o0$Yf&e(mN+(KeG^?XY)sJgLN^i}Hl%GoX|Mk<{Vx0qmP3rl ziYRruPsuikr^SV~FV05lk6UORB)(4}b>O5=ue5mN3272-&HlC3TB66Tx01f;lh!-b zSpt9Y&)K5CUtr#-D*Y?U)ZF6XU(ubr7`*MP6CB*n4Qy+FCUur&y|!FSk8P<^GQ)9_ z;Z9Wu$H>TFzjslQO8(EpW2`NxCnzhNDZZnu7Z+f8^vk&)I@8sDT>bWh9F_=u*;f!&(9Rh z;f(z@u7nd~*5}n#*>seWQ?vql)T?MCn_OE;QDd)9IwE!J+rCw)>OmR2=3x}u*2$Q;w;HxKK_R$ZOr_Irz!EI&sshRg3{Z$bcADab3j=) zNxax9p%q+LX=ovVcI|Py(qNjOtvy&53;WTnGlK6fxUqKnHy$fbjkoKz#3inO*%5?P z{GtkQChl zTdlt3hdzFHAi|Fm2>m|bX2|Z0b@YqzJgIEbS7kIl8(#7nn4*IbHFzWQOIKPo$$>o} zgZi~^op5G2`ExHaK0+sSaiz4}YOv$7raC|71hJ)S8~9@>3xNV;<^EO#{S}&AysbUk z(GA^IfXu5-OGJuYQ1aq$a15zH?`ZA>sR9pH1t#H{ zzoUE~r{Cr0Mt{HP0#s)zmanIk`WfTRpBvb>6w&kAT$)b&?hL#_RDplYtElP~BULTd zJ{pRwe}&8ln#5>%tIJvEY&ooF~&ZlF^2EwgXZ*{ z=XtK@xqjc@^}R0sU_Nu-pZmVw_j`H0H+#3_C$#3>lW)%kM%9Z9RsHPlbbcZH)QYzG z9nFcVDEqr46y=LOayk>FdETk^IJ~LNLK$+KyX)499}X(K6aP7)5Wv*OZG(8sUHRj^#2vNfe?-Ed7x-B^ zgBK%10I9i`TnPAe_Y$#~<|Q>>@gJv~R-$oogj{oO9ZXgS*%JI*$;QSE;W!+W=R*xa zHgD)7zpS~rP-7~SQa+GG4xpw7siT0`6`2%9egV#)EVX*e-$pEP?@pPFT#@;iHd}`3 zpTx)9m<4&opwJ2iuP0rFe)vO%-Hvnx7O%s(VD)|$e~Il2*PuAL&ZgbzDM)o(u6oau z#_B0~wO7qu;#B|sR86%DuMW?QLV5lkVJ0!&ld?F*y+h4yyXXq=4v}GD4h66a6u;NI zc;lHTKJUVaS?_!4qx6THQB~){9iuK?zLk{aiS!4ZovCdsgK_72f64f2NorGp-5(Qo zYu`lI7P$72TRk?m1%&@~*x{q0m~-~Q4@aWDbbNBQlpNxseUMIG9rwut?$EOb`Voxh zbDv5ze=13`G|_8*;8qjC2;3H7ly)hNe?;>4vP)Kd#s$XLKr5 zhQ4T7Sf8TsM~ON@=b0~*nm?RIk8idj2N*EA3xWJPitqA65l@e|1t$4J`Lj!vAQ9B+ z2n7a8?12(`Wl2oo#{5&h(tl1XM*(T&9HTGO;rZiuYtv3w$8B(GO~Gz&?tCv$yv3;0 z-oh8q5*aBdmJV}o<5^-#sVp#Qz2A4M9cX4BD1Xe{w0k@6o`vt{hvaRS5W%*vkVZeg zA1f!Q0~L#6QH(}1$Sd(hhlMKuY^*ojok7voL-KNP55y9gJKxSyD<&yE3|UD1Pis#8ojpV~i`3i)bG!QZYJ{_H4YjACjg2Y$E|}8KBxf3-7Or z1!k*+2$zPsb_rwZvHn#$N$p{y_Dz+{5l0F3uo%a_jXYPa#Ke&z$iTiXA)S%yf7LJ5H5#Y5KaN{?ItWS_<-9_fjf+9*p?s0 zBPRQ8at>=CnrNJmYuF`UG~Q_**%7Z^0q^%rY2)ax$rP)qrImQTc_Fg`g$nMx zBq4xXaVOgtda8(?UtCg9$?Hx%v6akij!ok9h1g+y9T~4WEM+ln1`a8bG%gTD2;neR zs9^r~H+2|*mKn%GLZ;pcy~);=4XMPL0=6?c&iEl}>0XPk2OLw-QV z@v_J%f-IjU4ObqiDX1mB*zWtD?OC_qflbxTX5oOuQy?y)xGmUYLCyZaz+cZ(Z})RQ zGav^8h%*xVw@TfAXJ2{dxc8^YZkSof-*1oX?t3_q6)Gy7Gs2pkKU%M06q@gU_q^KN zj#LhXZTlFU&_#I40C&h}W@dD#MKzv2q=pUNh0md=xIoJgXv1pjZR8RA})obOU9vFCZ{IVIFg3yG;T!|2gp>#h{2VmXklO<>I6#Gl#2fGFAa=;HJ-Y?!B-f zrgglpNd;pgr&t;oc%RS=7yw)y&1Z&Ziv6?Tl8y_-uF2G_Q#ic(d3AF*t)Iwf$j@mjmXUbawQ~V^J>hPSez=(%Tqb%qAg!+Qg-8MjP|Tcv+u6Al`Vsr) zEMQ2vs7p8-l>1{s+p2;iC0pdu!?^uulR&$LY!>B!G=2+pDR|L2VBvk65*x?e3`ZE& zqXYYLWptaLmneL~+mK(D`4n0;%XXxJhLoEyAQ~{Fm|iX{wI{0E^fr2Ay1+r^_{ZQE zZ~Ck9+r_q5a9q!Q7iimS}6&{#+nPH;~6lW-3lYQg7ZiM3$34{!9%H7SAOF>r*2k+DZqaXQJR6OY5h z7?>LyTuD|x@#?_Wusue(-iq(jwN`WpQQ@5h0g1et+dexxRg!tPR2$0^REU;&2CzC{7JgWtAA0`>ur}GpW+`XF*vLd&6^p zo&1;m0`T++$#Kh#vWIA_jzMQFNm`g!;K>?k7LbsXgmczEQ*)!35_S{r=U9(OmTA%j z(z?&bzzo4n=Ly9zSM+5|(9TnWVx4!e3du97cT0WhPvC6peh7CXz|H#!UUY1TnHLU@ z0`PF{d!TXkI#Kv#Q2$bMJO=7tN1T;Q012`%(Q9q)PeqYJZA1KOWoWtP<7zT5*mqy+ zZ=FsadSN0%D+dB#L@p}|RfyQf=vlEKR9$bi_wEn-lAU(q!IKaT(RrejjFE)L*oC@K z&wSaX9}t6AcBo^fz)wq~MG(UhF_!r@$v;J0 z0B$Pqi7DQ{)w=-8m3z{-?(Knnb0 zIu_K5L;{65JKf?B&|()Z9wDO9ceGLmRX;=RDV44oRBw0l7mVsp*)oJ-KWgR9oMvO+ zcgd3hvWg7}|+vFZ+ z{2T+WLGT^-cv)Y0!dl8I^~+oP^2JxRVg-QOik#5z85%F*>J8v@s_k-yW}-^Fck#zr zf%*2Im=`i(YIJrM6{R~qOW+$D5*ThpTiAcsIKA^xj^_0ey|aYS{hO!>Thd1WMkVrE zN@ykdZ%}D1l57viGTli%Z)qw?4xH69y+plp3Ei91JD@tLP}SyRbop$+sev9H7(Pkv zON{J>AW}0+`eYM}QM**z5|voBxYTb2Ky1<2=7yc`7%)(!SIZy{_6WLg+G;@DBiu9eZ}eMH#@2}-r)Z@N>~sv}(fUeX`P@Mm4e zn;pmYt4!n{y!)8o7rDec7obwyY6UgO^3F**JL*mpaJ95x`e5n*5-Cju`?@069mjM!_$b$&NS{r zlbVKP5G{TU`HpnkjO#U0>6as{0MH+YPbyc|>Il6wRF-6cG9S#_k}~Z)9>GS3XqT?w z(;w=DuX|`sv9aEYG%(G9II8z+8zS zeS8-mT(%Cc)_N9Jh60MI`@-;<$Z}q{gnULQwGV&YAi(?OLCyS+`SMl8*@61!j>L8+ z$k)=sDgWBWZZO1$zE!Sf{-%4x;^IzoczE8zxd81$+jvULLqv~7Y`!ZG8#hg#G0C6l z8wG-H2xuodr+<%Ss7g4M#CpXl8}7JIQ4@4Xjeec*vUoo#F+AjD|NEv%z)~n(|1sn9r7`kV)sU?n{iq5Z;keG^_PjO#r%0)!*0$Fqg z=92yL;K*6o`FY9bwBK}Vf+#XKS|c(+&F$*EFiEX@OOMOVsFT}R4RcfT?n^wNmbS-( z>471lCx0fH*Ix?*OSXyF2^klt@jSVkY4$*_YtvJ-sgWVZV7c}RsW1Rb02&N<>|JiF zKsInZ1dYfzF6kaTWt#!v3>qT1zcBOAgc>q2zRP|WHrter7vRw`hxzZ{sc{}UtcUc* zy%J3!cWLeZ%Nl`T4TehT-DhD$`5B^neEu(Ik{fJ?#gvywabIWVmqtC@DT~;+Ag7bs zn=g?w^(PC&MfvZWlgr#QIE0&~L`WN>rHI^|FS~;3*2~vU1CA|`uls~2w`ylwe!AgR zTsJVdfZb6sQ|`-SEYn7!cwFexL@nq!0c`7B&aKCZlV>%%0B>eej_u?@TbG+YV$4P~)fC3LXxG0OMU17jE{7y-;T52}lW;LvE2;-;9IftzHco-mbWL&ALU= zI9h|Ro+(fXRxYQ+&H(C1MEfm923o6S_3pp3K;uColx)s z;Q)v5B}$n$FYR=BS7+mOttSj{tjPj?3r9sI_@xv|EB(a;-7&8uh1GF?45>+Z^jgJU1z^h&0Uk+P>;y~O^oWZ#q-RjQO6+ugJ-xqQHlF;S&RTXC0&)bA0>dN4AFw{tp_ zWpyt6CP$rtdSy&SL^ADaB!VYhmF7SV=7aoq8+m4U@geee@J1Bwy<3sz!ElOqk6 z?@BHX(*e-C0(6PaxQC$M@J5ZT{^Y6k{F(a~c8oAb+Ae}>w8(d5UptN(nba8)ki}v| z)ox?Uu!;vD`yZnI${G(EK1)7Aws<~U#>tqle&>j3#c&}Etj;I;ATK1+KNs*ePW0a) zn;`D#{beUwR?*fp-s3D-pl;=o+Pk7(#B*=GJxsdIntg^ARHdG4osj!dtv~&8V01bf zP|;tj_JBZZkx;M##;|rs_AMv?9bFlK-|FA|e28o2_=eKqx~qvh7m|IAfEySMwz+r` zF@6`SOFst((SX-VLLV|n%GG67-XJOWv;_j*`SHN&xb+z~k*IU7>lk#0USjj04h=l86COOK70hk6y%khX9eI{$HVoBrIk><;Tl zFR~nOV)zb7p;M9HQ>e!;I<8?iPYPIF(E11u4s3WNqeZwt&x}>Fq+SiSN)u2f@ z2={5dx;7jEG#ly0pQcp6cn2Wsu)*N`_P5sxHiP<2VuyvEUY?;OpWi^~YqdUl=PI%|twH+fuHGv!LTp0jo7L3q!)qnP*9h}R{^Nm< z{<*iZZtiXK-Ool=>U~TiNE$WWp4;ZlOvv|xdZ^f-s*G0Bn?Cr_R;!VNDmfN^MlqMz zopve1@i^+SB87X=E#xGeJivInT8Yf&>N*|DaV%3DX|0TM{n-!9694e?$F*|ikl%>f zTjU>wouqE>2Oxi4qR|)-2ge1{v)*Dt$H#eH+7F%tjCr%nAqCOOXQj0HivG!6k!iQd zX%)Z2kVm||WBa*vut+w^tI!-oOu_DWT==R?drPt%yLbg*u=q17jcBVN+ z&qxCSuNuR^qu@rcpw2uLt1q^|lT|$Xx3);zNVvD;tg@%TtfsG8{e@=CR{RRtB!1f~ zK+~4!frbzX;DnFARX_ixe5`HCpFvft_0_-mve#bEe}k2^9;G8TYSCR8!4BR^b#HC- zo7^YO|H$DGr$7aJ(1tg6cDTJtMlTcP2 z4YzrQHU~1`$mP5P{c{7Z??^=@iDaUkhPI^)&9P44j$Ms9D zLMrCC{uGkh8UU2O`Jw&Q#V1zddb0&hy4EPYd)X>p%2vaAw~LjK+=!Yu42CEXiP~cJe5!FIJ+tL4ZkK|M0E6{VKLHy7!PL zyQ8{q)oZN!M^xH^V%G5VhWXIxyZ~`{;EIlsve4sI)|=Z|5dJHrB?7jcf=9xEv99j^ zHWt8wRaKcp6Jpw}v6M3#%$0Fe^ufJ-s(Sq1tcihXnF5SEiZIBJ#+gtG<@%#CVo)$g zr;ORO&Oe%UZvwUW+R-3m82?tyA0Ypp4@@!HFQh~q_re!!qUk5@WKY^+lBo*G(fAmJ^tQk+`k$PcR(1wX7` znM>sA_SH(;B6k005BzPhOI9FJ)tLR$O6P^&?q3mn6pz~%zGJmEmdsJyq~_|%Ay<7y zJXZH4T%@bMVO4ZaisZ$_t#X{uz%eKdme>Li86lf32;<)_s)uU26j$ zIfILvpCzvJE|Qv|X?6ygEH2JKTy%;3qv9s@i;ED(5$!Fj?I5;hYfvPvl{P1tcsIxL zr|HOQf%TNMXYxWAZuv0pc8I~+3tY25K*7SL*w{Qlf`@zTIN^r=m931P-{v@i9o(r+)02r!8u@IwZ~HBFGZ)jc$;x@z}mqvi3loEn@` z5Qbi2&-k{1#(;{YR`Fw$LN?&b=nqH%prc)Y33bopaUZ~Mo$?G z>se<2wBlQZl5(IvF#QCbr$foT;}uy$Xgq@ucexnK09yZnS7`Ee z!firDcH^B<^yN#rdQSzT`SOZ97LA_?m0XeS$Yp6S^!Jp9+R?Q7-v)}yZ*$hRE z9WYtUenuYWe{7cB&{eD_Psw6Ap+b|m<)pgQZuLph{__EXQ_JH^eVF{ZiT;U`ojtoI z7f*D$Kui(5N3}EQ-{_|B4%djDqrltwCrzC^hSOO&z@tC>@5$~vdfvyBn@3{*&u`qn zxb+dxZ*3USpCZdTY}Yz4{?aY_?f?JF_Kf#Y3~Jm`-2EF7G_P6nxH z0|)(U4W6aw1sn$33f)IFZ@2DlmeP|Fh%So9eO;IJ+2Zn!rpqSxK2k#t#jie6*!FB* zwg3TmOi=q01I0bRa;1~@gH4(~j~>G@j^P5gD@?P`i;bY4YMFtZum%lpbAccDb%lDP z@5d4CLW_3Q+una$k)RcgNN)NCTx{@c^aG#e38bt?>{l+Ej+$vq(KK1^9A6$HX__of z%@QXm(+vn7FCh^4bFqf=FucY54tFw^K$~qOrZm(x;scumy1YYa50^&kWB5;&U1}7S zlI#_7y~OIYj_g5-OY5P8?*#1tfq(6zM6o`l9@b;#}6h`0nk+n>83!b&LwsLSPouv^;CIy-Y z2(Hb3x{IQS=&TOgQ0GXu>X0iF(9zQtd8O)csX87P+bRcw&Mq%`(M=i_^EBf|J1#GqUlm3;cfej@(F6w z=6e}Ftq}p9PShn&H;0O@AbMk}OHqvDP(k+*M}bB~mo zR7o72NP&LB*%LI zuKz~T61L#me585NEh)5) zVAtODs~p%0H2@vHiyhQgw@{^g}B8Tk0n~%0L55U)+kA8)s zhjz1P4!rX)xIiRMdqVWu%&jlDsAy+0Hz^E7Y(OS|*6lufsbqQ+jZR-#o0Kn1G!DAJ zOe%u2{$YphswVU)lgqL&fXZE%=%+cKD@z*)bQ7OViIQ2)BLVh-@rUR%TR(h`6y5Vc z(2VAKr-dtQUmMDi9WpoLU-Dy9G7zGYDZYU$-4e>T?yWwhl9JG0W`=dS+`ButG? literal 0 HcmV?d00001 From 27f30e0ba67b99c7dee3cc1d6b46c0621e9a4655 Mon Sep 17 00:00:00 2001 From: jborsecnik Date: Mon, 27 Jan 2020 14:58:19 -0800 Subject: [PATCH 048/358] proof --- ...tor-central-access-policy-and-rule-definitions.md | 8 ++++---- .../microsoft-defender-atp/configure-machines-asr.md | 12 ++++++------ ...ompt-user-to-change-password-before-expiration.md | 12 ++++++------ 3 files changed, 16 insertions(+), 16 deletions(-) diff --git a/windows/security/threat-protection/auditing/monitor-central-access-policy-and-rule-definitions.md b/windows/security/threat-protection/auditing/monitor-central-access-policy-and-rule-definitions.md index e7693103ba..6ea5d16060 100644 --- a/windows/security/threat-protection/auditing/monitor-central-access-policy-and-rule-definitions.md +++ b/windows/security/threat-protection/auditing/monitor-central-access-policy-and-rule-definitions.md @@ -22,11 +22,11 @@ ms.date: 04/19/2017 **Applies to** - Windows 10 -This topic for the IT professional describes how to monitor changes to central access policy and central access rule definitions when you use advanced security auditing options to monitor dynamic access control objects. +This article for IT professionals describes how to monitor changes to central access policy and central access rule definitions when you use advanced security auditing options to monitor dynamic access control objects. Central access policies and rules determine access permissions for files on multiple file servers, so it's important to monitor changes to them. Like user claim and device claim definitions, central access policy and rule definitions reside in Active Directory Domain Services (AD DS). You can monitor them just like any other object in Active Directory. These policies and rules are critical elements in a Dynamic Access Control deployment. They are stored in AD DS, so they're less likely to be tampered with than other network objects. But it's important to monitor them for potential changes in security auditing and to verify that policies are being enforced. -Follow these procedures to configure settings to monitor changes to central access policy and central access rule definitions and to verify the changes. These procedures assume that you've configured and deployed Dynamic Access Control, including central access policies, claims, and other components, in your network. If you haven't yet deployed Dynamic Access Control in your network, see [Deploy a Central Access Policy (demonstration steps)](https://technet.microsoft.com/library/hh846167.aspx). +Follow the procedures in this article to configure settings to monitor changes to central access policy and central access rule definitions and to verify the changes. These procedures assume that you've configured and deployed Dynamic Access Control, including central access policies, claims, and other components, in your network. If you haven't yet deployed Dynamic Access Control in your network, see [Deploy a Central Access Policy (demonstration steps)](https://technet.microsoft.com/library/hh846167.aspx). > [!NOTE] > Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. @@ -34,7 +34,7 @@ Follow these procedures to configure settings to monitor changes to central acce **Configure settings to monitor central access policy and rule definition changes** 1. Sign in to your domain controller by using domain administrator credentials. -2. In Server Manager, point to **Tools**, and then select **Group Policy Management**. +2. In Server Manager, point to **Tools** and select **Group Policy Management**. 3. In the console tree, right-click the default domain controller Group Policy Object, and then select **Edit**. 4. Double-click **Computer Configuration** and select **Security Settings**. Expand **Advanced Audit Policy Configuration** and **System Audit Policies**, select **DS Access**, and then double-click **Audit directory service changes**. 5. Select the **Configure the following audit events** and **Success** check boxes (and the **Failure** check box, if you want). Then select **OK**. @@ -53,7 +53,7 @@ After you configure settings to monitor changes to central access policy and cen 3. Under **Dynamic Access Control**, right-click **Central Access Policies**, and then select **Properties**. 4. Select the **Security** tab, select **Advanced** to open the **Advanced Security Settings** dialog box, and then select the **Auditing** tab. 5. Select **Add**, add a security auditing setting for the container, and then close all security properties dialog boxes. -6. In the **Central Access Policies** container, add a new central access policy (or select one that exists). Select **Properties** in the **Tasks** pane, and then change one or more attributes. +6. In the **Central Access Policies** container, add a new central access policy (or select one that already exists). Select **Properties** in the **Tasks** pane, and then change one or more attributes. 7. Select **OK**, and then close the Active Directory Administrative Center. 8. In Server Manager, select **Tools** and then **Event Viewer**. 9. Expand **Windows Logs**, and then select **Security**. Verify that event 4819 appears in the security log. diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-machines-asr.md b/windows/security/threat-protection/microsoft-defender-atp/configure-machines-asr.md index 666528f9e7..edc3dfefcd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-machines-asr.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-machines-asr.md @@ -25,12 +25,12 @@ ms.topic: article > Want to experience Microsoft Defender Advanced Threat Protection (ATP)? [Sign up for a free trial](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-onboardconfigure-abovefoldlink). -[Attack surface reduction (ASR) rules](./attack-surface-reduction.md) identify and prevent typically malware exploits. They control when and how potentially malicious code can run. For example, you can prevent JavaScript or VBScript from launching a downloaded executable, block Win32 API calls from Office macros, and block processes that run from USB drives. +[Attack surface reduction (ASR) rules](./attack-surface-reduction.md) identify and prevent typical malware exploits. They control when and how potentially malicious code can run. For example, they can prevent JavaScript or VBScript from launching a downloaded executable, block Win32 API calls from Office macros, and block processes that run from USB drives. ![Attack surface management card](images/secconmgmt_asr_card.png)
*Attack surface management card* -The *Attack surface management* card is an entry point to tools in Microsoft 365 security center that you can use to: +The *Attack surface management card* is an entry point to tools in Microsoft 365 security center that you can use to: * Understand how ASR rules are currently deployed in your organization. * Review ASR detections and identify possible incorrect detections. @@ -39,15 +39,15 @@ The *Attack surface management* card is an entry point to tools in Microsoft 365 Select **Go to attack surface management** > **Monitoring & reports > Attack surface reduction rules > Add exclusions**. From there, you can navigate to other sections of Microsoft 365 security center. ![Add exclusions tab in the Attack surface reduction rules page in Microsoft 365 security center](images/secconmgmt_asr_m365exlusions.png)
-***Add exclusions*** tab in the Attack surface reduction rules page in Microsoft 365 security center* +The ***Add exclusions** tab in the Attack surface reduction rules page in Microsoft 365 security center* > [!NOTE] -> To access Microsoft 365 security center, you need a Microsoft 365 E3 or E5 license and an account that has certain roles on Azure Active Directory. [Read more about required licenses and permissions](https://docs.microsoft.com/office365/securitycompliance/microsoft-security-and-compliance#required-licenses-and-permissions) +> To access Microsoft 365 security center, you need a Microsoft 365 E3 or E5 license and an account that has certain roles on Azure Active Directory. [Read about required licenses and permissions](https://docs.microsoft.com/office365/securitycompliance/microsoft-security-and-compliance#required-licenses-and-permissions). -For more information about ASR rule deployment in Microsoft 365 security center, see [Monitor and manage ASR rule deployment and detections](https://docs.microsoft.com/office365/securitycompliance/monitor-devices#monitor-and-manage-asr-rule-deployment-and-detections) +For more information about ASR rule deployment in Microsoft 365 security center, see [Monitor and manage ASR rule deployment and detections](https://docs.microsoft.com/office365/securitycompliance/monitor-devices#monitor-and-manage-asr-rule-deployment-and-detections). **Related topics** * [Ensure your machines are configured properly](configure-machines.md) * [Get machines onboarded to Microsoft Defender ATP](configure-machines-onboarding.md) -* [Increase compliance to the Microsoft Defender ATP security baseline](configure-machines-security-baseline.md) +* [Monitor compliance to the Microsoft Defender ATP security baseline](configure-machines-security-baseline.md) diff --git a/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md b/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md index 1991f617c8..e0ea9523d3 100644 --- a/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md +++ b/windows/security/threat-protection/security-policy-settings/interactive-logon-prompt-user-to-change-password-before-expiration.md @@ -26,22 +26,22 @@ This article describes the best practices, location, values, policy management, ## Reference -This policy setting determines when users are warned that their passwords are about to expire. This warning gives users time to select a strong password before their current password expires and avoid losing system access. +This policy setting determines when users are warned that their passwords are about to expire. This warning gives users time to select a strong password before their current password expires to avoid losing system access. ### Possible values -- A user-defined number of days from 0 through 999. -- Not defined. +- A user-defined number of days from 0 through 999 +- Not defined ### Best practices -- Configure user passwords to expire periodically. Users need warning that their passwords are going to expire, or they might get locked out of the system. +- Configure user passwords to expire periodically. Users need warning that their password is going to expire, or they might get locked out of the system. - Set **Interactive logon: Prompt user to change password before expiration** to five days. When their password expiration date is five or fewer days away, users will see a dialog box each time that they log on to the domain. - Don't set the value to zero, which displays the password expiration warning every time the user logs on. ### Location -Computer Configuration\\Policies\\Windows Settings\\Security Settings\\Local Policies\\Security Options +*Computer Configuration\\Policies\\Windows Settings\\Security Settings\\Local Policies\\Security Options* ### Default values @@ -70,7 +70,7 @@ None. ### Group Policy -This policy setting can be configured by using the Group Policy Management Console (GPMC) to be distributed through Group Policy Objects (GPOs). If this policy isn't contained in a distributed GPO, it can be configured on the local computer through the Local Security Policy snap-in. +Configure this policy setting by using the Group Policy Management Console (GPMC) to be distributed through Group Policy Objects (GPOs). If this policy isn't contained in a distributed GPO, it can be configured on the local computer through the Local Security Policy snap-in. ## Security considerations From 6dc49946fe6b4e238408d0202eaf3acad2dd31c2 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 27 Jan 2020 15:15:44 -0800 Subject: [PATCH 049/358] egad sometimes its difficult figuring this out --- .../create-a-windows-10-reference-image.md | 15 ++++++++------- windows/deployment/images/captureimage.png | Bin 0 -> 31647 bytes 2 files changed, 8 insertions(+), 7 deletions(-) create mode 100644 windows/deployment/images/captureimage.png diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index 34a0836075..b2c2155024 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -66,15 +66,16 @@ On **MDT01**: ### Configure permissions for the deployment share -In order to write the reference image back to the deployment share, you need to assign Modify permissions to the MDT Build Account (MDT\_BA) for the **Captures** subfolder in the **D:\\MDTBuildLab** folder +In order to read files in the deployment share and write the reference image back to it, you need to assign NTSF and SMB permissions to the MDT Build Account (MDT\_BA) for the **D:\\MDTBuildLab** folder On **MDT01**: 1. Ensure you are signed in as **contoso\\administrator**. -2. Modify the NTFS permissions for the **D:\\MDTBuildLab\\Captures** folder by running the following command in an elevated Windows PowerShell prompt: +2. Modify the NTFS permissions for the **D:\\MDTBuildLab** folder by running the following command in an elevated Windows PowerShell prompt: ``` syntax - icacls D:\MDTBuildLab\Captures /grant '"MDT_BA":(OI)(CI)(M)' + icacls "D:\MDTBuildLab" /grant '"CONTOSO\MDT_BA":(OI)(CI)(M)' + grant-smbshareaccess -Name MDTBuildLab$ -AccountName "Contoso\MDT_BA" -AccessRight Full -force ``` ## Add setup files @@ -624,7 +625,7 @@ The steps below outline the process used to boot a virtual machine using an ISO 4. Start the REFW10X64-001 virtual machine and connect to it. - **Note**: Up to this point we have not discussed IP addressing or DHCP. In the initial setup for this guide, DC01 was provisioned as a DHCP server to provide IP address leases to client computers. You might have a different DHCP server on your network that can be used. The REFW10X64-001 virtual machine requires an IP address lease that provides it with connectivity to MDT01 so that it can connect to the \\MDT01\MDTBuildLab$ share. + **Note**: Up to this point we have not discussed IP addressing or DHCP. In the initial setup for this guide, DC01 was provisioned as a DHCP server to provide IP address leases to client computers. You might have a different DHCP server on your network that you wish to use. The REFW10X64-001 virtual machine requires an IP address lease that provides it with connectivity to MDT01 so that it can connect to the \\MDT01\MDTBuildLab$ share. In the current scenario this is accomplished with a DHCP scope that provides IP addresses in the 10.10.10.100 - 10.10.10.200 range, as part of a /24 subnet so that the client can connect to MDT01 at 10.10.10.11. After booting into Windows PE, complete the Windows Deployment Wizard with the following settings: 1. Select a task sequence to execute on this computer: Windows 10 Enterprise x64 RTM Default Image @@ -632,9 +633,9 @@ The steps below outline the process used to boot a virtual machine using an ISO - Location: \\\\MDT01\\MDTBuildLab$\\Captures 3. File name: REFW10X64-001.wim - ![figure 13](../images/fig13-captureimage.png) + ![capture image](../images/captureimage.png) - Figure 13. The Windows Deployment Wizard for the Windows 10 reference image. + The Windows Deployment Wizard for the Windows 10 reference image. 5. The setup now starts and does the following: 1. Installs the Windows 10 Enterprise operating system. @@ -645,7 +646,7 @@ The steps below outline the process used to boot a virtual machine using an ISO 6. Captures the installation to a Windows Imaging (WIM) file. 7. Turns off the virtual machine. -After some time, you will have a Windows 10 Enterprise x64 image that is fully patched and has run through Sysprep, located in the E:\\MDTBuildLab\\Captures folder on your deployment server. The file name is REFW10X64-001.wim. +After some time, you will have a Windows 10 Enterprise x64 image that is fully patched and has run through Sysprep, located in the D:\\MDTBuildLab\\Captures folder on your deployment server. The file name is REFW10X64-001.wim. ## Related topics diff --git a/windows/deployment/images/captureimage.png b/windows/deployment/images/captureimage.png new file mode 100644 index 0000000000000000000000000000000000000000..e9ebbf3aadafeed9b2e5fc9a99eee8a455214396 GIT binary patch literal 31647 zcmd?Rc{r4P7(c2aq@rx~hM9^eTPRBy&8w1xq>`)=3S-UAOihbQOp$eLQAx5hwqZg{ z_9O;_p<%=r+hCaWJoLWr?|06*&hp1O|D1DOb@6Q9=lDc7* z&HEk>;nKj(YrTrzP(O+rv4;2O(8j(a9-M2ugBi4|XN1 zD^bQe&Vg!q%A*LZ%UX^ww==Q*iyi^ghVw&s!RJm>~M4_@^D}n}&uVhiPj)o4Vs6B^6ZhAg8+VX%$d}Zl5s}(h9C^)2=enkx{?Q#h*W#1|UGT+4 z#Fv!&j>HsVjUXQ%x(!pXK)f%1oJWBX((v79+6=-e&rRd!Scg%TXC}`E)eI!5D7U%( zM-IeW1Zinc&u%*&vn>n6)fZAQeNlkoj$V zU)%$@r}eb~R)viDy$}1nLN2#}+bmgpVKgx6HE5;Yc{EVMKVk{~ZHxiy@`j@?TcppK zZ37>swikDVh_vI~ti-CWpINjKq)f*tgR*YJeM(RpdTv7x#~==}>jl0iah2u(d+;>Z zow)D|6_I2PfjG*Kk@a+3nl>W zbX=%n?W^DzcPITtm6K$oDvvv|G_%Sj2y%vh=jz3$3{REKBdNujxYgO-01r^$_s|Ua zoT&h`N~UjehOao$N#C_%%;G7m+@Qfu$I~v(7Nh65u*9-?-S9GwEXTqZ4^JR3M*=+(t9rGS$Rdj{=(sif+d>p;yqX>l$!f%& z_7>seW4eZN9--sprx+P)@N&*HqAal)u}ZLC=EeF(x?Yy+2!OF9{#A*E$Z?|kV%s4( z4L!Gbrx!8Xli3{z?S0B3+iV?=dE7#S?zfGfUZZ+-`r^Vtfqo@(m+5rvw+U`7Oq~=G z1UI3+gf#bb8{LQ=!dxH@y8ZB} z!O7rZ3%&^_$Fy(GGl(FR0-jf?g(qTNPQgP|f<~TmO=vghHY=w4gR5|d9?9hW<>k-5 zh6|wE%j7}EJV)iHgH%$`KQ~kcOn*34CJsyS@vXGw`Gkh{&0H0G)AGd?Wq6~nQb|b! zS#7kGULO^$Dg+54+n8I}3cYDV9GoJ@EAP6{(cyB|%QA9Nl;rHV5lu+5gpF3M+ax7B z5fKWSj<~={rGo2vap3>k+tV?cxo#vcE1UsC@Qk?Hf4HheT`&OJ2i!Q z^a*wPd=`8fdAFuwf&n`PvN)-YaPl?a656;C_@dPzFTz4h2`zTomS*FgX-$?*ox{eh zQy;;|_}=w0;Vkd2jCl=m4osNaS9crp?&QM=Yt= zHy#JE+L7Q*?}7`#sS2sFn{q#xrmg@cudqRAk`#J$^d}~rL3~HU$@st-r&(zsgrxdj z_Pk$(cW8Ckl-FJz&9v518f1Ng!i zu1Jlrh8p!k9mf|jj;ELN;KhLCBIvFkVs+b*&L>aqvV}h$jtl%{M+-;a;W3B$%PeJY ziyNXxHag~li`lumbR-&1yw>)z6z>o(4mPo37jZBWV{mRmUOdpf!% z$OG-PzFIYWWI`zLMZ{b=b>~!YX0>JRnxNyM`Sn|9?w~!(4c8Pj!IbpNi_x#7><9@wa0J0M1kcGer0(3&Z&{Z4 zr{&;R8V*r=d&u-Wazh+(|Ix-XbM_=DV01#em(!Ba4(rjt-K|oN?>*Xys1m;0-@RvT z>F(%9RYcfo_1#=gt&!qej;|q!R5Lh8%0E~7Fcjy`aMlPnt{# zm5s`E*us>@ z;uxtolBYg<+camvsFzbv*_))jnQNXUd4EDW!)QwMLSG21VYM)?iy#*e##7U+Ubdu%#9wogO0| zjNau7?=V>ZVoXUw`<_mYh-CpNzE%wbM3c_6q>}0~K&^XS~ytD<4M zw{pR5_lWCG-mlws;JH)2M)T@jxt0h*!NZ5NBu!z~;arRCNp5QO zQ+AZhk)SNSmG8Ea{L^T=kiQJ&8vY)VON#-yHvsz$uJVV9O>tZ(0*$sFnJ_i% zq85M!icVLJ1jOh~lc&?rJ~hqkaTH>3H+K!+HU6I1HIDZ=8NnXRn0GaP1PW_s*O9^- zC3jSft=dpT7+l{#dK3wG+!wU4u1s$cZ19+mWYL|4l+;*9b#)!^j99xo}d33B`4f^r?151qX%Q4Bp$Io@PjQ-eZ268+E z;Sr<9{Fv*o&#%v1C)G^7{-=H9Qj0qg1Ec(+W$A#3!Lb|D#hjE4eWUQSgX}`B&hhut zX^o;zlkhL0C{XGazMeEuhsDo&Qwcq2Yagj}@PdRg4JjDnKo={{ z-kJsedE|>C@lAJ4^EdPkQOEtNz8z6-lyQ@)@+8Rc(`tVaTh zIk(phDmKk=xh59b0r_YjL?Gx~6Z_oY)i2|>zKxPrP<)zT9~iq)Zp6}}=UYa#r!O~( zcS+ii?vD8{2Gf^qGJG7@+O0dyxMQa7i=q}G3;XAmP!MbOt0kk_M)tI-Xqu~KR4aDc zxF_YP<&fKeMO3#;6tk*J*n{&VjAcdA_JIE~qkK5zt7%dwTlkNH9P}^#V!2Yj%`N_b z!fQ8V+U2JThhx`{i#sc{U2ZTgd5iqQMPDj2i4snjwc0;Ak@3PCx>!O(lah?Mw{Rx- zqAqj%24moftMc&BJ=QxZe(N+KF?%q2SVgF51aWNB1T$#dXM<}o7_@RxbyK~*U!#C@ z3IoUEP-dw<+7Y|~#V!=LKr}U(8zY*ATh+7^V~>gg>Xt!+@0nq67CpM;jMl^GPo1ip zvGm_2op2KapRuJe#V+_l#4wipF@y4ejDxL3v8*XtS-kj~QNZA9dq z^VewE0Aw~O`w0o|WSzGX8-amBi)tfW1sX9T5LXDpL%Qbg@v;szt*nhskIt~^439AY zj;2z5YrEJiCj&hDyODm|2Aa2iPHSCX5#31QU9pnDu0%2(wHh&>7IfM179HtHRYuNh zV+)7N7xd*c3KqgU+1*gfG^h10!Oqh*h&KC`8XD!JtL3$SR8%+DCOR+U=e@S5)ZL0P zD66Y~6=t1>zM3^&zIjxw&3EHdXc73zw7$O4c^uj0xM?cyL+L%bUe}+Ev~C+G-1_7b>C_&F$R`K)M$bn-pCbS5krjo}TdrTw(iw}a+mJ3k)54BT&U9W|Z_M3P zx(WA1M%?i+h4schd#e(>D7=YXh}g)ZOpo1<*%+#yKV^jLaiB<(m~M14Tv+jjC5~RQ zLEz1((VtM~Pf6RKJY@n3i60i+3KgxX24xBRN~t7kovt_fhk5{{bhBD6??T3?*ALr=w*(aly$TWR)|-|I9KM&ADsE}eJJJA; z-e@C4eggtr=3Q>jg3-|KHQli}4c&GQE1pM{r$-t2z1V2L1%B9Q0N}GDT`M`2z#B=V zoHjyagmDnqUhGn`Z!kz9yaiW3#!-D#-ovcco2{OyH-2RS~6~F7rnW-u8IAvpbD+;gX@c&d}9rB;ccrF{abZ=WLej@3y`&m zwV-_plv}^*zyeUJ&BUS3T<~2ZUV=1#-yaKoTMDlJ0iUR2&ii_Q1XoXC>PD2;ukxqE znKKk)5c8EDcb(h?6_mTPS8rV`aPW3?Dhk0S&-+STyj|jo-)kd362%y$P}E0Ux*-fr zx)EZ*va5i%K<_eh+Bi}oEWi4=bHnu4ut{B2iH|aFb zKVE9_4Q_v@33*o8g2LU~_>`o2yt5YkTbrjE&l--j2!U({^yo71GdkQ#g5L=vYG8v1 z18lI68iH0I3D47`q_}npLKe3L{xDTc1;F}%Ovs48+H<2Nj$&H#Uc(V7Awe{Uw4oOG z1q8Y~#>!-*SsMj>s$tF+INS!GN4^S?Xt+P^KtURDayD{z_@3nT^w@jCnI1;uvBROf zfff9d$G7;`@1RRf_v4;M*#{g{sLGW;o$+S2*hNtU`E+}3=qlC>`u)|NkW)ltHjC}m zl2m*k;-<5C;2+Ze(UJve;X|9PB}kv?z1Q;8r~`!s zv}ARmw3wtdcg|ku^akNYMQK1oPKf;nT@b+WI%8L;Um~Zesuwv?T%U-p z3lW-}7Q(=Y?rS8T0|n+AQO8<;C9xwK6!ub&`P+5GNh`_7`Ix{X_Jt!G`a2b6aQ#@; zE8{Nxu_X(J8d5?S4+=qUd^52)?E#-tp-+frxWpN*>8`FTY$dCwpTF~amz09q-+9tj zMxkgPWq-cSBXxHNXzIoO)g0QnvNY2>9h}*y64&ZNczPKk{HpzTVuiiYN=@&k(irfP zsMgq#)wVcld@rtd{ln=$d$AS!8iqR{$!|#%O!R7CckPknZx(^vg9J`^jN%_#=-w^} zBh-z#t&K7YDGzq+^;-~Pk1cQzEyW_0!u9No?ZiL_wm+3);wACw)?~7sjm&7W+5}dS|wY%QK zEK}dqJ~LXoN^SnAT7`{(j{jsTzFu(krU*Rzt;uVPxzm-#D_{I|!{ z?V*0FHksPLKE3v8C@V#di*mwM(doaREBJM z5Oy?+-4;DkxBcqwZ+PT9mTtjlZV`p7XV(B^cNSKS&A#BbMNB-APP4W&?B`@J^VlF> zN4@JS)*j?@lh@Qr$%tJANu}BfC!OxcA8frpCdpfJYDUw^dOuqmvAtvJ7 zly<|d0f>Fm5qLR;Enp+|)8@(+@$K~Jmb^+A!Ih(!_fEq3!o^G`|ZUzHr zadj=`4_YsgX-A&zV8tNEAuRCUTR2`N+8>%d$teO?H^L_pB+dTd_yf}X{#)8Y=JXsO zbuoPB)FpkT{=wVUQkxeq2sB!-vI8ES|7V#`U?DnuViyuUC*5E-?-Y+S28iKvw%;@w zKY>Q+;JH%`cESJB4Air+PAWlAzxz92Wx#z8-1=^cjj+F{k?U3;POUfJxwUV+?-)=v z=DVrA#qK6a{;EOsNT*0=Jvi;-4gU3tw$0rpnQvJo@Pb0odCdlONVSXrRQ#VM{}5^q zU2KW=-Zx%DdposWnXBl{Ih&+y3q1R!?D!U-%|(veva+vA@mGz7Q~$1;`CwO85w%6r zHHm+WhS-b|TKsH;?U3Z>hl*|eQ!%-?nS}#%QP*O`1h$o?EPXqQs;>G9JSi5B%+6$> zb|HzNuz{~iLeI|c-jYp*1plqEgdvn}1U5tc1B+eTRTn}88Z(@t zy4UAR{#VZc+y;){@7h|!0RvwDk=t{SWFw~vr~Ph<26*x8y~w}o{}Ed<;B!?38l8Bn zP9FO@q_=7`XO3_3yc#(^kI&T67`G;!JJ6TN2RFZFgMr1r zo5G8yHnocYpD@s10wrx|$*A{GV8M_^_&Kpdd;X9;$sl7%))M?zh0a|SXk1g>p>^OV zttKeGqQMO6T(ycaJq%TXZt7Wfpuod;M%||Vp8vcdi@b-eC1GM^-Km*&a|8UZMgLuH zi_5GmHfA3q?3kJm##eYuZ}6AfQh%LDMB1-CPfGSwjgfB4m_KV1jt z>PA|ncCDf$ufyg_goEc@O=eu)UaWZZIO@u=wdEk&$Zy8SZwyQDo5R9EuLA^3JaL)< zw0(VlRKmeZ>?a*=BQ_U0D^T7HSu|(wg^D@GtG0!zTB{AevLV`Wb~pVVjdmv9a#4?2 zQ;A==weQ!eqK(+(@EeFp8+%PPH^+FW=RC&HCG9^VrsVW`;f#;1*q!0~QE^OtH6c%dZ%SqV(UtL!q(ukSUBo5% z|C-i#Y{48jo}_5o%b2< z5;2-lOj2cD727R(rhoTZ?bv6*js?vE--?cmn68sIbt0%BJ<{&IwPp@F=JYdrlajfd z9ef?Wo&t^Ql0KIOG)7Z=po`bbF*d2rHaFAV~ThlMEvBQ8leXtReD8>{=P8Lio*A?k_p|imsm6>(= zF_OEG=YRG9KArhVNvIu*D|-k!aqL-_bl(Y~U`7FL)Jm*V5O5^U{{I@>^pYM9<0N}fUUe-&KPlJT>MaCp~tm7IIr zEB+hp=}89??T@^!h8CEbyg7L$UN=S^@(9!Rl2(_+Coat=eiR3y4*+TO-;EM}>q?%3+meHEdr(;r(# zs*?Zms2}t+B#mk3`&VQ3cLer`JUN$D*$}&*bAxDM5Y2aGGuBu_AH3J>LVh_o`mtR2 z#w=xSO;udV@U_af+JL%~Z5H{8B0nxf;lg>tl^{if<pX5vPDxjzMq z-P}6$Ox*w2I%t7}>0#PSztC=iDP{nwnhQRw4uG30;?KXDLoA#pOOw8Q9rl)H9L+j= zvFtW${k87FPUSfN`cZ^45}Fm28MDs5&3G8NbV0n|l& z7vJ^^OV~e^M7UG6Bp>&FrLHR_NEV+jbF^XasilVesIm?`t7;)Iz;UEbP_;_n!Jce@ zfXjK{0}9`l_Be)h;4U7RtXg>7G1`S)`{ef;{8cCHUT)^Q{;EU6^4QCln;yR#R$P6N zLxhw&PB{)?IM4Rylogir+{(gEK@Y*E55xN_hJDiTrj>bptTzT8vq9PSAk(Y-R%@lM z&zaVp#zZeojZ7=#EeG`$#^Z36p!wlUa;*jVTAag6BdojY9}??1#5G$pc8r@e`a1D~ zt`3dzUAFEvmhVc=Cb3l6?IF#{X#ecY!Rx}!zbOuv#nvgVgk&YY~;BaV~sl=2yd#klF+H;OaALi`&86-Aq9S} zKbqz{DI0h~2$Py6x4ZKTy)W+`v66w&sUO2`Xhw~$48n0h{rX~%tdy_-RCZzSiikiX zMPd5GT4{E#N%<^Ddi#SJbQIKY*bcVsBxf=M$>(rI?3z6Z+oR+~bl$ik=I!3w6Qqlc z5OjvS+lzhE-{E`O*P0Mpjf6%_XJ2e31&>qlR7d!DSMWv`rK`9I1G?A*AByPgAXOB4 z_Q9;>2pCsFJx_xLSM464uUT1dY2DfwKR+!Qi2{OqF992Sn8%A%w;4V?;zQ)2P zsByOH#DGgo{a=4ord}8ePD}n~mNTa~u6?*@Eg9cmx4luH-&~-vfQBJ|t-V-XaL#Vn zTvGM?zU;NU%d>d=9%37+gIcF7)6S_~*#qncSn+po1XS#W_=e_lwQmJWZV{uqwijm% zW6swxm6x~;{sC(EMW*w6qt?mQJZ;6XT8k*-KPh#s`4zE?ISx_hK7?0d9mUpZK_`UR zLGzMfywE2%1fbtRyaP{4z~AxLEf{gi=YH`=+V+cxTn23cnK-1gP9VtlQ~jfd_j17ibH4+ri7ZHX zSoY7((bZtS4_kA1XHB3F9RHvMt1aaPZoUu13W2RGURGdRIN&&ecJ2ST&HS2}*w>st zuZ}}L_!96VU+3JmeU(0cRLN)Ej;Sw@1qaJgfPg6EhM#%sp#I^-|6?@~QTG+8*BJ7vy{+ znprz~FTRwI??cSiD|5lGT*fC8EVb)`X@AL{-fgQ!eXsO=&GJy%bzZSug2Czd$&ivV z_kqNq7|WvQ`DvUv^dv6~?XAN1U?v9)4&PULp4+W24QlCTHxX`cZkKcW5{_jcuJcre>sk<3Mw{}F}f(#4*P^Ul_>17TI1Kd`1;kJ zRVPKfldT=dP_4DPR!R=Pdc9T4QEIjPty7M+#gycNMd0lxL_5a-sm_NVyNqWeF=)Ks z*tr$|%1LYpPAb6Fv}foJ!5&?z-?-`=7MSJb)L&cZH~Nm?ML*C{Q?TaWO6r^OGQprH z)A?@7{Kp0D!yDUNgf~)N-4L5A?|}e25Bai9@FVToBxU%>OvwQ3*SPPr&&Z|yGo*K; znntz<6a}WV&D)GCyV@@eTI#`HU2BKjT0Z@wo_GG&{$oXNOGMpr$g6?rH?Md6B5SX9 z818L7ed$?_{3oLQS6E!@LKga|cKW!1E5<;Qzzs z)nvcfUQg4r=*hR4*J^?j;i5K)n5)ApMi(#6Ht`?p?NJIlF}ClU{Anm|zkuEM;-bLU zcl%UP-PhgcENFlDd6m<9IaKv$>yL__JNSEY5k8+)Tld|)Td*W!8C zA50t6K9eQR7xQ#W$>|P^~Y>NK5PVXgaovpfs>H@S2je?WyWT=I+SiApSu z@vh^O+V!uRBJN*?M_k#kd%8)b>^4B!Y&)qPQ@#g1xkuf&$`N`%o_!1q+yCVEF-J3( zVR_MZ?aJV^%Y(ejE(+R?Vy9M=Pj_QXKYX}ecGt8nwN$^ol-TKNFZL!)RFRs&^aip@Z3uaHGyq;2g?8I+vIgv&WyaNME-L%+QToKlSdo6^fJf8E7Nd2mBESA zsq4e{WN-sI|B4OpO-?!|&OgNN0E0y0vm~GKu9iydpz*Hy`|l8iSC?Gl`gzdYRfW%1 zqvUr@kTjKs_rwb-wC#?!n~0mjc@`;dpAYrdtd+tT4wUiCpL=_s5P+h?3KcAZQwha@ zxz^Ag`B&=OoNm{KQ8d!4-X7dZWVN|@19bNGtZXU!pu?f(VK5n!ccq2S4v}#&_>3Z( zj!NQU)EL_kW+KMRxKSJ=pPUDn#Z{HS@E7(M9}Hp13;%U=VnyYrJg zS~6-5$6D-v9G+8hM#bm*R4^1d6H2Ye#KsYM-B+(r>JuHzM?7#O+0%m%d}9&gsHh)dB*u zWTTG|Zg6F!>2jFj*ogQA`dt}K?s&wlP*^BEK@MOoY&V~_)~@Y2(i%NT=W?rr!<`pY zYqnD!Ed=r%f^J3^C83p|6tz?@+I3s!fpv&r$-XUHwiVgVQ;m%EHqJRIviw?zM>d|q zpA7&NY;%wP@6picvrf@_UZDg91a960^U=RD^d7`!Z^noywawC808n{zdH*nC@ouh>ych8bcl;Xfa)g|AGj?rtq}yd=m2{)uXH+x&(a8FT_Z=D^^ztyO zt9tk4Tz4Kb-XvbC9IWJf;;5Dx-=uDTamO2{EWI{g<%2~`9DuZR2tW7y^mW4Y!kb^b zR36hwv-TRsrMhX;ucQS>&^p~O2dGKS5GuM|<^zRYd`7*CA1y}qv>U{e*&6Pv^?yO4 znS>34Rs#^d=E6zKEv78(LXL)zZ+-(ZoQU)0+^Am;Z$0RREtV$ z1`E*seM)=@h={5^ z%MqpMG7s_h8{Fs^?lM-uHeRy3Rrcejqo*Sc9_-UjFIcr%AjrFV_7%ONVd<_!dwP-4 zQ1QB}?3`m{r2_<*PjzqW>Brh@n<=qFsj6ltD`mx zW~}K4S9H7ma7%UZ`K3YiMYm8rmomwFrw@nihNbVJVbc57_3j($;<}QX0QT+&ZxcL2-1I5&Uy%c|+TbkGbvOWf zKQO021lF0?>+d#b(yf7Ws>+X}ybVRiH1S!|MAG$$gk&41sU_y{?A@%(5kq0It$i~x zo#c^LSbMEsW;~rzWv$;cR;w13uuylGI9HuW^%@DLRdcKD*6NR)$x4#xq2VU{F9c>B zvP-6Z>RWf=VjQ}Sxd$drC*G^-3z99Sv&N%F^SdsSux?LA?AvPnaHjYJGDZ=x=REOC z%mN3LEbB?zmLq(kDs*8|*pEHn9Vsp~C0=Imwq5z`KE`Ce!98jAp^Kch;PjU#EIS*9 zyH3xNL!*jNV{1=Jd?j(5yXYnJmb!z-@R{+cMF?z$$; zZMuJcI;+lNI=eaLOeOk|&3%i)TOg#X1aUxIpg1GWRjo?2JIrOo6Y0VTVNv#j7pUGO zui2=BAm3*4?&&l7+A}5{)KA3q$MCqijA*uoC*kL{B5E~=xiLTB{=s*OnVs>|zJJ>F zhXxbh<8-uld5-bu^ejG<6vt_r+;ml6bENrm!nYTZWLho1t+fSTkJvA@{Piz`eaTIV zlfwzDkLIhUBg9EmVwMeVPeGsF?~@<8rw8eJvID#K!g=O8)HimmQJ%sbf80y1FmyTi5MV-S%~|(-mo;2}UEU)*8Lh zP?=T0jJ$lN)p@>*aPf1ErAwq?@SOB9lP$kl1R&6HzsTJEy$O+vyPg}U5!!;e=G}_K zdsJXsOz|2AT&<@sdt%S=8!R?_c4rdJHDe_&JmlOrF1NIaEB&Ih=p4B{DpU7Os%r#Y zWS4T-TqO}MClTOU8K^a81UFd14s+O$5Cg$-y((^44DoYT-;zcE9i(W|STpmzD#(rx z)sRH}a4|T5jG=mFy&XUua*Q6+EssK(vYt}|o5|O@Ljt_ls2IZaovxiejF zHM{fe2`%B0cEBHpJ$Cq&B9y24 z<9FKtq|FAWcLZMcM$y%mH2zeqNICO+Gx}VpRzXrrF<*c6A*(QK4vN`zeUf=oQ73B& zb7L^Mgy(uobA12PlETo>PuMbooacxH)4Z@}ZP>5$Nz~hX!=W)MG1RWk;NnOC@q~MT z4~H&QWowkj)wtD#!xX_tY@k$q>ZN`)hP_dOUAr;x)G;f^-<>tD%+wqTd|)D*SB14t zl0h3<09LrVDa;9j`??o&yPpOVyYu^tz+y0BC!>&KKZPrz{`^EI7Lvk~ag~}C7URp_!k9pn;{kS;b%dnfkd>Iq4u=2Z zF^4+7?*KmSjmZY5Twc0ypEM>bCcz)mmZ?L_72tcIvgMoYH{i{JF|IW#qSfuml=fclvZ)<&OpB5;)!|EdqP8ICnX#maJ;7u(;BEhOEKt6Mpw8@NT z?@tH~5IWnPop&BBFh6qkIxqZuZs?B#9<@maoUT<%!~Dk}U*sEMLjcLMFv z*sVCwVJ-F*G_wSf7KYyhOFV79y?S$ha55V;Ag~~|j_;B+YmiGxtXy@GJr6KhWDBmV z0O;GkFn;m%YGq=M5b#Z1zZpBB36mfIoxfQG7GmK|Pym^i|DUgk4fD82OW)u4>MR?bC(ajzau;kW> z3rOS_ATLyL0R*+#Dspg9kBPY+5%9Yx@+$!A9o{) z(3HxTexTRs)TGiVGh*0LA>_@5|K7vi`!MP8%=00o8S`VLh&02hb>ZOj3Mt_`iHpf^ z6*5~&TZJiG?O<(v%>2CsOCpYD*Og>tht9=~aUBuF=z(ZWc2EuN>f65P(Fsat7{;yFU<)s*=deS;bG6G3XqWPmJqW_=sO+x2NU*l=6|qo2an8SN z;U3(s+SsXL9sl)+EhFAJh<9XClIs_Oz*!AG)`Yt?V6tfVYVhDFCziorWtn?hI}u&i z+X~D|DrrrF4Wo7^@Ujf+VS3DilBnd9M92W*=~=y`0H0qeSkPEXIo+K>?DNrgRHf!L z<)#-)aTJ7*gS(;7@wb~30#e-Q7qA}^$Lh5`J3c+WY&jxtinc&HkS^G|qwFO4wS!#| zF`NRMyn@Nm3)-dTkq%}q)~v}Ul0}v)@4)g+rlVOVIjnHC@c1wz*A6;fX-&l3C8(Bh z5?!LfLN4Wk0uQ4%#|>_-BhQ-tobA9q?lk-I>G2Q=l2NhKG)rV^@X`-kSq}+}C=^VcY&MJm-3Hk4?n+jFBRo=NW<5UP9jOAQkBZ!C! z7drJ4D&Of>qNFuFxccIa!K)BL%-*_0*0(G596v{xU88@_;8`P2ylFSuVLHUIMylc! z>Oza_F@S+8|1vP?E%-{pCuiF?N|%1r=4D-D3fmjztL$%4$`7%!+#kcKhfPV2g`&*~ zP6$L@m+tYs_#?t4Tsq$vVSdmtVqVe*22#Is$cVUS?KM{(;<^9~AuEw%C}(7hB@X>I zNhz78bj?qLjt*--lfC-uWkUsQQ4O$d^yz;rz4fXDzgqr_1OtREb_^oN8@3QOdi@5L zi}L#!|6B77|FtHCmMN}3&ikCH=f1iE+$!f$WWPd7%d%mWkL8NSY;lz(r)u|g{P6*4 zuTP{8M?2V2FCcZO9W|@)Wtplxg#jy)Jd$p$gg3A?@_ys0Hm#%Qi^*_CD$JGjV)C_r zOuqrd%=k~tamcd)SSJ2rg&SH=st|`hJ_{72U(9qC+_=0Ca8dgu_~mwOciHD^yKB4Q zZMzEjxOait8nIzhBY;DD_n&QA0uHYnn7}}SpI!UMO16%K0JHgbiATr>VBq*!EdReM z_I0x!?X5O!7;$hblATxHMCp_#n@;ur0Gk8XfB$a)yNU<21gNFn=(@7?+1cLBfC2>3 zv+Ym4PPZfftkU#BbzT*(d$C zYYenc6#&t*8k6IzZ!fDZN|0m~7Cxm8SkvAy%Ym}-P6h|56+AndXrY#jyGiz>((wajR}C=-qsp1$5!5=b+%W z4P6cOZ_11b<+b2imcWqJoNzq2Ke3 zfan#n1^PMb2e0G~I-uM0&r(4B0N~~3(8T{`QuYjx^BU0?Afu%1E@RH^>=ptj z1#fDHkPH1^^#H>E)`_G48m^Mi<}q^c;{R<8`@dY`<#}~rn(1Il8V@Fj@CTRFGY${_NqcLcMhj>R?A zW=Tma7e|cplZR#>t9(z}wF;itKl^E|L>O`H-L>dfuzHB6fU!(4+K>j>cx*_BUO5wG zu$et<&S!0<8>ROJ9%BDCyyT}Z%|F&~{u@~}iDZF|-Gjb{62EI&;&uLf1!5!afjomO znGe~}I1^lwwZ8^(YOUv~k(_!HEyu;(K%J}m!p*Ke#B=id`3WmSz+r-=^#Ao(Ws>|{ ze3<9+dEFmvAtgOZOG(=J=LOgoAdgb`_Ck4TBX@t%9=p51UqARuVU~+e|JD4GHE>OA zlKK4u;yDsLXoD#gXbi{MgxGg<9BmZp<13C0 zgqberZUZS$_g7BZHkoBtuCBVZEIo3|y;F1RSX;pLbbgqUX+5Y0QZbvQlL^L#y@GfT z`LJ}uv98o4DwbER^G|?4uQ`Vj6O75ZFo%;)ir4c(D~16=MYAV%MEmfl5|c zMq56wC3i~;Qvyw|-HZ1Wg`>*VJ-N^+mVl*SG&P6HkgER^H>A8+QPU)0O%XLwU~A&<-?k|xC` zyO!H)9i(uz^G7abzlSYU|H$&cDpMGUDnJQ8!9DzTtS`TZVCJ;)FgC{+gbd34Cc!^H z7|ioGBIApqwn&Bu{Og5lkzW)t&bv57xEWr2(FY6=e{Ce~^gApZek3eb{B9K@Y~+(H zA?rk-+7aC(ncNZe1SK6Qe(fzSSDZj8{?0mQAnHHy_h!o5TlHUJ==e{@8}aD>xfEE% z1;7P-+S0Vl`rTXJDd$fH54?M`ZVX%l`kkBj2>1JQB*j*2Zm_i3n~3S!{P@D1 z$6m;n5TJ# z5^mGqk?)ed+g5!+;@jFS{lvGnvRhdAIS`nP0r{tF+k|8qRODIsg|iT;pU3XhO_UtZ zx6|=b27ynC*PSi`fxgpTzR_u7mQ3%yjxBkk?&?y^Ihyo_D+VV&jbqd zoqhfDd_Z0}3gg+ZCz5-i3@F%lAo*w=XJ2RjDRi#W_@Yk2sd{ z+ApR29Ee~1DB49k(JJg)snQ>Zm@84=SZaMSX^UXA6vi;AOs#p>)RYJosyhMKSxJs9 z2=jTP@hlYnW}`hznq$A6Z+r`dZnnIugxf^Ls)UE;fo~(O5c8GAzw6q5R(y5cC52aQ zm2NM6C#$UfSIUHTaDDuss7(RnR8_%63I57pq`Zy=l1|<;g)uLr<6otqm4-rEQVBQe z^lT{krQj0Sot~HhCqBNvw`?zCRv6ogBc{uV2o|dSjO;Pqu+f$_j4c5^FGIO z9MALq@&4zyTyuT5^Shj%^K*W_7mQ{D3`)bEUK(nWY4uEK=ucH_eJ}HR?(RZeSqUZR zaCGF$D$eRK`j`JkVTez|j>!<0Zq@KH@)u4|(%M4!MFK#3&>cq@RP5n-_>9|y-c^_r z3G~XKrB5;!ZaRrXV^dGlTHj+d&KTTRPL%TWv3gZeRMm4^IOW)$$7Bs4b?ah#?H_E? za!vld%^f^kO1I;e;ypXLF)z~Nq0Q7+t(!M(vdMSR%qQhQ4J$F;cBbhZUQ2_MvNo)k z1A6fK=L%xHPyHGm&1#q<c!77KUvMNzze7HxHuCtA)$!Cng>7?#6_xh4=RztEING@r3 z7*O-r_hGsT(!TA?3%U4-OE4cfMIaZgMRsem)S*ne1L55CgQ`c%Qs2dM1+!fu5WHIw z`{V8DgkYWt7u}`uor{n&sm?ElA!n46)VD5-g&tIlcF%r*XGiV6m+1G5)VqRC{&qES zz;feFS*=4{HOC`d58NFz7bv%Cb+V z#CHe~azg5J*GGWLkurgf&j}tu%<(^)tlr<+ycAM~-mR86p}dlqcu8$6H`1oEes8)s zp!W0o7dFD}cj<>G+z#ZU^&9J@_7NE$%li&0+Z`{L8<*=Y?-ZDm>L?xG&RA z3sBItJ9xZ-R{)ZQr_Ol*WBH)_KfP$b1h^wBM2r>S5$Gt8=DugzSP}0ncF;DyLr!5> zmAj2z)8Ui)IGbE>u-G=X2%Miu@_L9QM^z~8>-d-#Gq6Efo{TG6(pN3JVoCuhEEeoN zpDJr1Nm)a0h`m~{+4Y<+6Vz%u2o)mS9;QrC39XBxa7QS8!(9dO(rO$-x|b2n=kmL{hGPk1h>;(S|Jt z)donHjNaV}pg$?pww^pP5oN1f9vK8hp7w-W&)@LD_&LZB3udh^zz?C{GAmECeTNp_ zi$yhC5gRx&zi6*Gm3d6FDnjhAPdOzg%tpS|1WC$nCliy(0y=>iGeJ>8D1Etux+at(qatFHMn~kLqKTTC0mXBQ@fULH+~hKJ(ldt*-f+qE$9CE zHqM_tgz6T7QQ&!VZU@K``m;jkZr*OgF9ygT%L}t-8Bji5n(VLeuj+&JJVazS#2<-;Rp4$zF>F!Y|hfpapHrBIaN- ziUWhc4%%3}l{I+1eID8ly&=WV5G^UX%+lku$AZ zVqL^X`>(Gzds&7M!?p1+xNtT@*`7 zLL4sQbaeudu`D?CRQLYhhVn~{cTB`CP(%n5PK!31*{xa*p|@(AWFMZBqv%BMiP$@` zc%Sr+<41}F#48>z5M9}6&;nZuu4pu&g2@bW86%VE7S!UljiA|{5FlOpbT2FOdu(a{ ze0$|U$mNR;UH^Fiv& za9sP^H&$sI;>kAag&PIf5cgtU7t>ygGJUuxQm%DR)c39EL3V4$$pLH^MPJdhbMuB! zi|Nv$$lBDAzPJzCEi?L_L!8jisR0KdV|% zI^g=T3Wj~Ze1yj7l-cdv3)#}DY!0fkZ}!K~ID+`BqztxqS&FX?$af8T!ggeuZ0!gh zT$D%4n-g!lVP}aSxg$t2!#=i#dArcrX}OQz>EvK#Ije*7FHBrwDFtJf&XS}sgeVt2 zPJ5LDh96cxR=8oO&01;AMte)wXW#JPPVejUdv+prt|T?gqJl_$6UNOM{i&HxYG6I4 zls@eshX;9vD=I`2hYy`2-oNh45Ay42tYpCZT~S%Mm&}lqiVzE^b?6E|=?SuU_K1u1s0v0Gd zJbl(oaw&VihXeyxXLY_B63; zlm8l|WdQd$cqYOj{8So#M5wR{(k5@tzOKEuD#mvgYjLI!S+=s??33KkO$>ma_K6CL z9k&X7qNPkKh46#w?181Gx6db_l3-b|ep{^b)v$J0r){UN1t!S_mY%n2JM{n-f+vt` z9`l~|y71C*|56RTvS)HVjy;Pm=u(dM&{_FGSPs`OW60qb*c9mtqUauJtEL?9EiZQb zecXvbc{QswxL9Y-FpkN%^5%U+YwhzjqG1DsV*6cEC#(}3YgWZZ`vp&NXJV0*6Oqb)Q2GaVyD>n!j{|8khj)p z*k*ShNT4Kv1g(|a)mO@%<%jp#;sdvyBNC0+c zElnp_X)@k-vJ+9DDo5!Tr2Nov>~dVUuB3jSKokkk-jR#GBb~*%Ci2(b z_HoH$<&AyBc}#o7kPUCl#r}L5-D*4EDfO}42ag-QGaXItIXAfS{M1v&o;_k$cK$|i z28?Y-U!E4Iv&$~6Lmzrzd?yGVV6oAa*R&7d_&!kWUU^=?!XE3|COQIPyXId?OI5f9 zbKwWo8F(*tepAV)Ni~!|OPo)4q@~H~p(lV{hXPCTkjj7g@SFov=TJEtbt-m4 z{}^-SYnybZe{+)xGpvy_iaJROX`cSP8=s=J4~S9y6=5_Y=CAKb82_SU@5n5L=?eQ= zY+U+tCOFjh=l)&5(J^}a%=PrFz{LIwFL0K`&1~fA^C0H;z{H7tlW0M^kbZC>m0dD0j%c0pn`)dwL5>$L+%RC?*G{$_I5zrk%%uiPd>z(1F)$zn!I{Z>`!^dy29uJZ6L>9bUUDHT@!iS zkgRmx#y$7g2=kg7&`;V`s49(X z0`X9w6oa#&y2mjw#Ld-y?(?V8$vb(R5Zf&W2G(4fZgam)Lk?&dz{>^z<_+{-0Lg6! z;&%Tf-ueG^xccRBU`lTX;Qv5~@`8hA&jE@>7x0q7*@F>V94>MINdMif=C3<~-Pb;I z8&Z8b_1<2d4@Uo8&_So_H|XF2fDSR6Q--?7Nqa5(+w02q@tkw`zk&|Hnfpa$pzmOv zjh)Tw*G@HcM_dMTICtVZfB^49fK&g^6!O9&r?2(5f%(cB`{Qwr!hdXo5BENJ>zWB) z&cEM4wv)OT?^687=Qeg}u3v9F|1P7rQDbI(C8afe13V(P z>Cv*DX>)X5WkX#K?Blv@f)4?=fl&ideR4VOnY_f@4%XlH4(|`9=xopq!ov^D_;IStny+Psr zS0`>BR5yuy{s!(UYZU6mHZZ5inz&xQEB9{Pbwr(}t{F>;O&-SLOLiZeiUgZfplNm$ zIRtw0&5fmT50DrWmD-A03y~S{34*80l#lvUk00XGJ@>2(nQ|KsCtj?c^Z(UgbUtcb zTd!GO8pQK*J14-+LHL`mNRsq%AD~Ni@Jqa`8ZVLs%?&>azdBK6cJSqx*NZ<}qOEj? zER)FQCBoAva;9yWBC_k?H~Ud@whZsMho)F1O0*SKqVqARJTvb)=JA(mn*Tv$+(Fha z$w%$>{O~Ltl@6D#J(1J#;@pfPVA!(gk~;?-p?Ir?PqqzbZ2u4umsNeit1wVtE*G3+ z%@;j#6NV@$IsY+hwnnWCjhWSNtyAfv+KOjRXxMh@(T~9PL>_HVe9Icd)OX?)1S9=& z)b(Xsagxvq$LVUE|K3zfVWVI&&%^CaZope-n@zqtGcWw*pn?0f$YS}AC_BB#BUR(_ zkCP><n$v2D2hK(0Zz>Ka`a7SVP)OUGQ@O!xTiq_hPunbN{)nk?MbS*ij&=nwVUZJ%BY zQmGEW1BBq1TH#8R*X{@YO@(wfwHrzY$2;-eEqTk$ZE8Qdo@E^36~goKy!pG4{5v=U zFLy@ZtU6xUw0A#pC+CuzFnhe2k zm%Nrw4)NLP1Iwgu1l<#rrYH$I$x30fa5M{Nw85r$uVNH*A*8 z`2~J0E=fa+Dd=V`%MDgQ9w>{RzUKh3Tf~YVy@Bv4$h!T6XatH0YlMCA7O5M`jwi6s z8lgJt96$`yND?HgJa>FxgSxZrH|^&>K>MkTrfT^rzxrz2CD&*`VcE@!`&tXH=7X_5 z(GDK|xazocdSGQDqg#^ig=qV7rj8B+SWUCQQQ+EX|G7TA7;7!h`6VGc_${OuX0LGa~h=$%N4BEl*Fdul>o4# zSqtPdJmc43+D*7K3g5;$u#g{ankHMcCI8As9V=$(>L*Uie69@63{&Nc3?FNnMnzrf zT;UzHczP!y#U*y-Kp6(KHMn+5;&Y>)unLh5pWi~zpu&_Qh`b(g={pn zj1~-PGSp%XVK-O~_l;*Pq2&z+4ui61^v7{Adi0ts=d7Rr8jz=kQ`Q}tLIuvbiOZ;+darqx zY8juQ0a{`{=Y*1p`Ar2w@Ar(JNC@Jrd8%5?SkKH5jpqD4l!D3a){>%*ry#7sieV}HTaot|Dq8aeEYGD{2V@!K2&dm^ z+X(DiTfh&Zu)WTw587X-T#I8L$Q)$$2Q`&*Ix2b=wVr;W$s)ohkJK$3+efXKEDeCq zD;3es->60DdjVzLD=#^(K zYBR;lM@QC&y!q#KT;$O8t2)fVeE4oKo0`_{CH7f*s;x`YZ; zhErRx7Oc3#$WF|-wT5LxHl6aFZY6G*6VWk&>-MNs!_i7+u4#;}ZMqG$vgEb&9n`i4 z$I7I&XP2cUO%s zy083YI)G(fshz$H%21_l;`kY`3oT2ZxklGOA-H658}ouW4NCI=a(>*)Lw*+GgWB*9)O6I4el*K` z3n=YM(U%(|n|>4D03`*`n`P=PdPhDh!)jjtP=nwEPJ|^_R_7)1V!`e39+Bquj*j7! zjiw2sArm);>_dZDFg4%gIWZgQ%zIr?6{K?ow5lsdkV@3Dn>+#37L-HSVKp^rE@~&! zIv=(X=!LB)y-u>Ogvue}`a5Prp_fO?l>0{Q0V978)9nfYY$Tv#oqmJc~UasNBhVh{jAU_=Yq28xj8}81%MVU? zfD02yUMfJ5#$80miG(-@D?=#@B%#tm9@!&uZ3~*Hk$Xv0&#z+u-wM5RVAd{{pwp?3 zt?p-BUR=3TsPkQQXZMCXRZ&YHp)G48DGh3hdaMZxD|RkkCliTxp9i*TE@5B2sJxet z8PQ%0J%BD{s-=pjy?_=lE2jzmpBDpM3QJ*eY)jU))G$1Qv?o4mfEWh~Hd_9Toeo4g zon(reoi)Oq6QWZp*2onXN`g`)8JF*>Pa8EQp@sg~19#fw9=ZW~#SO=!-X%X;SUtsFR$n_Qa3olydUkyjTNcaBJ==lj5KMP7omgVaxjUG|h7-w||* z+n3!qZjklmW$xeqM34M0eR=MWw(aTvzc(2G^Kf?H9#@7f9z3T}zO~7&kCeIrQ+LJL;szG+R`(gf{BNebPP~jcCUj?^=gz` z<+T&Hy)1;!t~BiUb9UQf1>#BOd$YrrTHT0PhrGO~6K$@IhxmpzRTTs*`}^}IlZ;?x zZ`^CVc5y=w4c<}OFLMB{(2ob4Gt}f@f%7$+JG=o6rr(~9v`A9$F7vNfj+Qx&C~yOI z;i0;>6DCeq`pf}2^iQ)D1tX__t@Hm5~y_abke)GBnKc~I}(s+xGdwjSgk}#EM0BOLnlwLGiDy2g#clgyI_+9jTfZYk-*aL zPcBHnKjZDxdm|h|=3-Q_*r#}Zq!8uejQh3b>#*!N;@!{o*3&fE%)gmsJzG}mbCddv z5b3M!tHK#LvS8&_fuz*i8Bgv+UrDrI#e4VpB;2Px|8m__jtDzAsS->IrT4Kl zZ7C~7{m=5R7Y@0(%FbHBMqDu-`@)CW5De9N;F&YqY4eS#aw5R%$HQjQ!X#pgHvKC; zNL!8r8Lx8KG$U~nzg)rhwBt>VpAj+GM@(k;Xfn~Gr$!EZ6wpB$k zr(WFw@9r+@_0kb%cgZE5Nvin(Bl)DPMvr-gN$0$G0jsBF?#@XidxzV#Ox z@{4Qp7saC0hnJ@8U0ddQJKgIMd#Or&(#Ad{_3_ME2{i}_hIN@Ntw_8aY#Xs-`6$<7 z27quMH*Vh)uKQC~!EEPD@{?0HZ)Wzd!75=^1|vI-X-~b!9gUTq8YHVng-Z{~m;}jL8rV0I^cwWB zSULgAUwZ$&^x(* zEVMOt*bMt#osqtod*BE9`oU~TXqLaRUwknIY6k^1#g~LM9V6rbS*yQex_~P#u*TjA z19Uq9A@X-~(iX|$wTp_l2e+IL$l2(fOf-oflC>@wf+ha!BOQG&tDLlV5SI7GQ&=W| zzAh|N{YkQ|>V=}f+296^qYj3#IM=N#il%5T+qoepsiTTvYj~1=9tX*xdxGCxj6iQ$iXw8ZqRG>Rrwh<|_)k5$DqeYAr2I>zkW=|~wgRvRoO6&dW}JeTG+vDx{5iDigAI2< z2KLjr4fL@$9&BTAgPybB@Ygob`(H>$dv00_HsHCk*p~vHIF>%nBgT<70^8`Q>XzF(; z&la%lj~6!-%bo&QTD^8~9&n+?Hr=LRx{h;_7VtQ`rQ?CB&$rKgdf=^?2OU0}P^T5l z)`o=fNOOmsaJze_*!UWM);2xVnj9=pku^kV?1uR`_$2hyWGJ@?A%I*~y|Ojj4#CK^ zyyJhm{q{ggj~~I7#ExoOOQzC3WnBS~?U`M@fnm^^OGEj$CBdn*f=a-v>6pMV*588L1Eh08kurq5lL#MkWbZ0t$Ui=SICq^2NrcLSt)^WrMnKftF`;C2YV&l% z1Vy%78BBb8eX9&URkYH$K60qG34f3jRFfOyqUe&eI6$pmupVJbYKf)Niqs=f)tOem z32A^&^}%$tuftd>&2(d=F)K_Qu0GDj-npt0Z4IPUrYwH>B0uQ z!J+2b{-H#1$HDzJkm1!I9ENX2={ub{eTa`8`QhU%rK4xe|8qd&1NmS-Y z20zo@Mb%Zjd9auES^U|$Mv69QO*`rrBB!PD0JEOChMpXX?&m{az~81`mLnBVRD#L* z3=9+mQZXjx1-CoJ&wSd{WA{t3@8=L#oJh*liz8J()xe_Dp|Z*gdpwwZdqbNweUKxq?uJZ7rW zPXQ`#kI#qJ&9}Y@%*_x|JVnOR8zSwZ7GD^*5#q}6>fZVpHF}RM$(|xuX#@-D%`fR@=Sbm1;Y-g7ZB4 zDs&W2q5xXY^YbDq!OJv-FmJ%Orvlf+G%NSaV;O>6wM)nAzI!4U*S~aNX{-Q-px{HY zv3!r|q@3Mw*Xt~&lALu_Jl&0*HVrM&8L6u3=(E2n99Mem8Bsr|p?~Vgm~kVirhd8G z^yUVRbPOVGJig>gFm6J>BBRzcZ%IY`Vo0}ECTA6;;%`PsyHjvu5|f08{9$_xoE89o zBd|_9mwLN#-hoOg#oqz^NZ5ng+#YyteH8uD*1$iyHq=JAn8XXOaP-k%jH~GKXRlID zqaSCzRw0_!V_7yozZie$H{s}md_bh;cA@i4wL}(!J(G-L8)WM2+X^YuQXA>6Dk=&h zZ)$*J>))eW8OI?7N$r1xA}_|ZC12*+?rW~?sxGdf?~__P?oy7FG@;>)G_X(48lf^P zD~%iy0KX%~Qqf6GC~iag=C4b|pf!`~bIb7Y_(LqcPX8{G1$&J~1fMf^3woW#_o)6v z?1&|{(rl&<>3>1oH;rQ~T8pxs+htibIXdwx%ZVIMq#kG7vT3N#ge?*6Ma2wnl~ig`>I)E zz@WR(*HZ~hWAa+eyV-Sh!7^`@xs<_6I&d@9eFKP!RY- zYFiv>>Vg%|7jNAUTqx9#o0#%Yo9n}Fzs{3L4a#)KP@g@I&fS)lm@22{hABIz=~M&a zngn3;=WNIS9$w|Dt4KytfdOgy{o;kSj7K^3LAwA&U3v~B3b+vH52+`tI3TRpC8pA_ zaCH*=l$ty0nmfoeh7ZF=ryYgA6_o%EG>_=#cuDY?{fDI3LslK2Cgz)3O22QgiaIAuu1WMSWw3lvj93&1A*nER`N?C&Rk+N|)m-V$Fm{5qt|edcX~J+dH` zCVe!NrMaDq`!blzzn+Q)q`3Dhc`~eiR6R4vYEG)U{9tIqIA-hGS8msyt+kOCZF}vR zn~o1k$4{p-wO#-*f*~{R7gFsrthG4HJvSGq3QrN<6oQ2yW1t;VVDsuYFeW#?fBBU) zx*>OP199t~RMr|J<&%~=gX(FyU25X_($yAF(<9!9T=R6i+osmrbLfr@MCM`cheMz6 z7H8;~Dzv*?`1`**0NoqlawT&)QPa!JL;vYFLzY_Q#lF?LVTjVsJ|S1_KuF-rXDM2p zX~5?U!Dv&m$36t7i9(jg{2&JZB=i(>ZKLayt21!Lr)hiVI4J$`sK&X+AHNx*el$=+ zUF-Wh{Q>!CG?bQ4z!an)I>+q@o1qnR66Nzw5O};&!ly}kPUU*0P;N4}5$$eL1l6$l zF^33CjD z=&VLa@WL+Ed<(a{j`0Iwjr|QlAA;4=I`Iy=!pbyC`xeU!{v~j|&U2Bf;5x)uov>lo z?R?Ph0zDM5-}|ACX*pNe`U*NF`YRyguMS2#(vn`41D5A8Xruh9nbPgd8J8x3LzqGH z=*tIY!@9(O1&(b}XD^={tzOCK)3yLc^1BvwG5f+wbW2z&qRnu`yaRX19i1V*57mg^ zd<4a>BqK;{7Z5LL--usVh+{zqP}k{Bmy0UTmn*I8U8qtGuZznM!n5t9Q2UKK|6vl8 zjBlx}2{QLk&Y}G_?srL!@ESx1ZU5P%A7%lEWt>g!3V$(}JG;tAIX{m$o3wTYAt~Qf zskw(3M|hk=#e~xE`XntkZC1Zk#%JtNNq2p~v@$4KEyN5t1ie+Q3jcCw6c9aeTh^5F z1g~sri!A(;xrHou-*BfE5qWW$bE+Z9nmuw3tuRP^aOvjEXZs(vqjN^(MCktWREgzK zM%`nd+x@0on}KKH1AJyB8rIk&_FJ|Y<+S~wIfmww(3R(_b|dsk3-42WA75EnvD+ho zmwU2r9EBFpPH8rOU0;-Vi)|y5`C(yfqd))A0l=I{ydjm5fzuACG>qyDnJCJ0b+5VK z7O?^0598%~TpTu==c|glys+M_-qg)fZ65Ol; z>rW*fCQ7ajoiwYPxxHc*8<5isd$G_06Kx#|lpcmE>pcQmR1cMst&N}^l@=G{J&*C# z+$eL>!4yXfXR!?A>Nl%;xR&yOs;aDYtrm)Vf4qy^WUfg2L*pW&vr<4(LIz^>m14&u z++bTab0PlM;%Di==*+P2b#1qW)C+}lx(nikWq)f>n2;lMU(>HKFOJ7nbpz!JoPG`5 zUdi7eM~>J94Dz5PV=6U{GIbZHNU^9|8z(l_sk{5wMMQuJiv0F!jw{{Od)u`Oh$|U# zz=Dx~86AL3AzHwYpDV2#T_)GjbBtsk$7G@_sTSQII7#R^d*|!J5Vt$R4L5;_@@Lr@ zkr;mIa6dPx&;>#G&s(di&l^p{JQ_CJArS_Za~;oWzD&12n^R#SrLVx$gw$9)rR*i;Fg_n?d6Adj91NS9>wsJqMGS7bcH2g zwu&-VyC(UwFyXBp%KG2^3$Tr=$3zNdIbQIt$*-uP!1qcj)C-6?Ibdn3pdaJ%7hZw@ zqj|(Hb%kqT|Fj|+Tio5d%BQ=Q2ms~4T5OqN4Wy2^xV7L?&s5Ms;y{gpRYi;KC`u*NU zMzrl6>|~4<#s89o1qqj3f}*JyRf1N1TX>tOAaQuJqIP-Cw{HoxysRXZ7+Eq2W^g)TI>26r(Ml@K8+tRaQbh+I;NWZ~h({#h)n0eF>`}>?h z2h&V?Fexxt$3^)?FmKZ`a|kZ?yA}WOZG-8G0uvG3maI?tGq(Q5an7kRo3xkWJ~7ZU LxsJW+6#0JuKuKaT literal 0 HcmV?d00001 From 474ba7acc05bb0539bba790b0233d21caf11843d Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 27 Jan 2020 15:49:03 -0800 Subject: [PATCH 050/358] much more added here --- .../create-a-windows-10-reference-image.md | 11 +++++++++++ windows/deployment/images/mdt-monitoring.png | Bin 0 -> 50976 bytes 2 files changed, 11 insertions(+) create mode 100644 windows/deployment/images/mdt-monitoring.png diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index b2c2155024..6aa1fb11fd 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -64,6 +64,10 @@ On **MDT01**: The Deployment Workbench with the MDT Build Lab deployment share. +### Optional: Enable monitoring + +To monitor the task sequence as it happens, right-click the **MDT Build Lab** deployment share, click **Properties**, click the **Monitoring** tab, and select **Enable monitoring for this deployment share**. + ### Configure permissions for the deployment share In order to read files in the deployment share and write the reference image back to it, you need to assign NTSF and SMB permissions to the MDT Build Account (MDT\_BA) for the **D:\\MDTBuildLab** folder @@ -646,6 +650,13 @@ The steps below outline the process used to boot a virtual machine using an ISO 6. Captures the installation to a Windows Imaging (WIM) file. 7. Turns off the virtual machine. +If you enabled monitoring, you can check the progress of these tasks. + + ![monitoring](../images/mdt-monitoring.png) + +>[!TIP] +>If there are problems with your task sequence, you can troubleshoot in Windows PE by pressing F8 to open a command prompt. There are several [MDT log files](https://docs.microsoft.com/configmgr/mdt/troubleshooting-reference#mdt-logs) created that can be helpful determining the origin of an error, such as BDD.log. You can copy these logs from the client to your MDT server for viewing with CMTrace (ex: copy *.log \\\\mdt01\\logs$). + After some time, you will have a Windows 10 Enterprise x64 image that is fully patched and has run through Sysprep, located in the D:\\MDTBuildLab\\Captures folder on your deployment server. The file name is REFW10X64-001.wim. ## Related topics diff --git a/windows/deployment/images/mdt-monitoring.png b/windows/deployment/images/mdt-monitoring.png new file mode 100644 index 0000000000000000000000000000000000000000..c49732223acad11353a3037e1cde6435b2b800e8 GIT binary patch literal 50976 zcmcG#1yEew(l#1bBm@W!!GpUq@CJ7Y?m+?!8e9fR2o`LDySvLEgAKu*3GVLhGr%DK z%wD@!cduUkJl*@dijp+u3*r~|?%l(bm67;x@7^QOy?gi9 zo;^YTrA&u<5&h%7(+6p>du2nU+vvd~i}#A}@7=2ezq~enj2=J#ETiLe?;ckB@2~sa z_6275?se73O1xKhH{45o`jK=z_3m+w;o$tup`%-Ulsu)|bILO+&zJrS&oc$^>PINg zBA7nPe=^RG|83$ZfInif}8pN)=JjmG}Zr*ug`g0c!~>DjXBC{C;(*gXfb0UO<_r1 zJ;f}4q%YvjYf1!Q3y-(R{w>zf38&Qw<^NjVi8;b%s)4?A!fq;(DhYrmxz7B*pH!fk zZF9^BqN%YldVG+gwvk8|#ofCa8yAYc6N3zpDQh*irxW@Cg8e30%V#^XoFPi^+q>Hy zrqc65OA-~qZt~6HJAw6|wKcWE)9>aT`1QN#jrL^#ej4%kN+ZKVM2$12mt45_F-Z9) zfnyjqQZ>H!3<3v~zNeFODL;$GEFSYPhMV?60Bkk$r(*I8$Vcn%MvjA=(sNjf4cwZj z1_gAWoCU8-MUp&hwbR`Mkj*kTA~L1zmx;33;96ryHpO;?UPHCQr>3#$>nr|k(}V`! zg~jhthce9+h3mQpfSwq*{PtJkHF?~tCG-J&lQm*c?k_YYV5%h~;wwBzo|{$rvqY!R98BE; zyzQthciO=9sNKxv^)lQ#{fVeoT{iJ{@^(iujECV7c~9xb9$ddJ;db*Kbnf14uJm@y zZ3HW7_Kit3RCisiYvP{ti>TX*XJR$>%T9TRVUX1$+wmu}4&Uc_8TQ58$>YsN$e)6Z zM8?K$te?wL{C03jRTidJriC(_6Vm4%iGnP~XTfOmmgv^JXb+6186bb&a?-~HJ!*S- z48FSn>sGNiL`^tDq#5!<|7z524^W}2zuJUa^4Sf@YZXB|Iw7YfT%cSbtf1YCwPLcu zZXXf%vDv?EeS8@`v?t)%rergFR?4+ti%7V1mFQQKzW=Y~20ynHVv78;SP&_kpbQ)X_F3Pv)z+5`mV^#Z-s)daAJ6V2u_UWxC?*<%f~ z>H7M5{H$A?=k~cpqaE+4k9p4|vv17jX5zdM4K@TCX(-cmE>`|1J6=Oj4a6z4LqRL+r6 zH3WR*kpPG~+!yav{mbN5+ok62v`xm1+=5AD{hx0ox$d!I zvRMwf6tHHKP`QSoq2A8T=gyif&{7#&VM;_}b#&co{@TT!J1HOhP!>eOTjFh*Gjz7N zyFKGHk?0vAuY-bpKzoz=Ev7g)Xk-~ z>#~5h>p`NnraN(5s)L+v>eQ+RTriq|9l?(Z$YwGycuPz`{kpt@_2-%7_uU6{m9~vX zm77lbHZwsMjXQB(Asv!Gu=EH7!q4DEqH096(zE7`k~=HRHR)2#Xszev8j^Y%1Tzr> zT;+83!K%Jh2J&UDq@R+g3cC%5#-&Rm+=iyc4dE2cPrz22dv0&CJ|0kZn8fy~3Nr3# zN9S`uy3_0st;2P$?uOdknlh+cfgMP{VVx@7C3*c!%@w1|bcDFrckjxTsP*V>IoXK9 zgZM^Uq=;u~^ntLeYy%nUwxK`IdbT;$W|94{X~u1GKX=Tt87|pKW0dFpYC0maiA^&# zi~7VzCM7k_3w!R|gQ2GEtlMD3_Qn=*?6mHH%pQg}cnj&Us--TZ8&I=&gSI2eW9@vg z8PHK_qU?8A&WTaqzLl9w}0<(0;WK;OiFJND>x1LHsGvrnKGP$F(qVWJ@xddf_ z-8dSvMkU{;Q_iTwTDJCJ&~yBfcs_lMmoI-#CcielfI9x>cuP%=9A3d7oxHtM*$o;W zy$?qR_3g`5cKbQ=h!^m(IV-~VL<8j3kA66*gJnUYY|M!+7M|(2#@_7~k$I`k-aMg1k|GyCHphM|rZ=c6P!7enk?l)wjXVL<|0I z5C!*P^{iPHk#a4(4!Zf{sPH_rqjuk}dtRUU@a+ptJD@R-_iHR%>D7-Jv;L%NP1eo=xPblhUD8tkh2}3RRYp*E z{SNo|=+MeML+#vpN<>qEEbdT)FQP(7vA3y$@xx8URo-f?t&^dd`5Z+#?|67Tqdn2R zUU!hlY-Rr^Uq`_wijgsp$wO6eGqw&gKRlhwRW^11=(^Vu@lN246+))2e0o*8rF&dy z<_4IPUV7V9A$v7m;IX##jWmdRKWD#~az2jAft7I@919VFkR^&mL+h*a8&SnEBQR<5 zpt)_}!fH$tur~K5jIS-c!vd5-c2g~X!c%n@-XtA#ck{WsW(~cY;p#(ZM@#MI++5u} zhMC=B)wXTd#-4o0XG%G~&^5M5{+%7g+CMiucKsB+Dbv$G2V`icw>JmNge7l_-eH$6 zXG<^Nq7H_;BJely@3zZ*)^+lckNr_pjDvT0v#VqTLI^>F^LnGTN@Dy4> zpOGkGUt%s$$4^=2u{|X%*pH=0!Vl6&1z978JUVV)Is zM`yRW*3xZ;-im!dPX<}<=cB(g(gkLy5*O1B=3P%t4`RDnv>Hqo!%U+Kl#!jqwn*2i zFk`#v9p!h5Eu7?=&YM{VBNm|M1J{%rr)rDsiWZ78=o@eBrWviibErIjc{jYaJfe2) z#x?$QrnYUcbd-r@{ z<8rn;3Zkb_i4-j_b4Yi@jY(S!>~p0tY7uBU{Qg@@B4<)sbH2-mm;4DQzsb&OX%*(vsjwqAna zRFmKxT+s~P5Y=tgtnNt5`LOYP2x?vgrVFoIwQJIyJ{VNOc=-0zK?yZoB`b2M#MK&6 z%;p+Ro!NflV>T=uYToknpf<^4E;ls>u2t5p%#eTh(L%RxQv};3&z~!8HEQyPDF5%Y zicznrk6e~zRx5INAo5>1r8OeOixhS}f2?~bf_QtC?nq^Rb6EMEzx=}C?t&WL;24jh zqIK()RBL!?RmAhoh#*$jVkX5#N>R6-z-mY;0v)SKc?*-fbKbw_k#}@TH(BCV^%AZ6 zF+b)|NKGbcOIMG{{5#84#TzG%(SmHAF5Xgzh$09IuNF-!x9)t_6DO<&)4cTA)mWH4 z$^$lFi@)dpJFOnZg1;=Xl>=|c6FG>jt9d@c1XntcmK@e~1XKKbN+ZbToln5@-PJ1I z;D@BkRo_mGIO3zM%%-LBwXJ2mWcltQU8A(o!B5^vI;WpJ?6!KWB-JgAiE;tRTXfp zvQ{r`glZg|^?_?lg7ij&Q|9iRqgqYZY)_48EB$=~k~31jhyfV8JZ)1nErqv+ zg(QnC-i%0tpgcbgpfzQuU;iv``xz-6q?`P(FMANfdPYk`F>LT%t<>2Tjz}kCS40kd zelmWnTuYR(DYs%CY({!A;W8xjHE=pne){7X*KnL^j`C{vh`@^;YG2MuBIu6dFZa6? zkAeLWGuSnm^uItbWsd2u2j*ZGF8iLN*TQyNYPGc5F)hiUpjJ~ZAMU`fQ8RJHq72?O zMD#Pz&v~>8gdAokmip7ubh&)?`rdUBx$~q^{4S&=4OJA!V}u*GprXjz+`Vs%rp@*d zrV9T6ZA$+iHvCo8AW~|80&QxT`7$pjO-g}Y-R`F@DC+Q_7@{!Z-mAh&Au~I3&mmb; zhqPZpXS=+QDcf9l*9vPJ!54Zf(3dwcdNn~$^+)fze5F74dKaH1(2NB3YyaY$m76VV zyh}uRP7RRvC&&`=yh%h^d`uK%v~OEey`*W$F5CEF=L^|RZ!T#h-)0&l|M&VCNOd66 z_H{oSm^ob-I(sTeo_4ufH6GmNBY2F3`3FK3)=$2XC&oCId_ZlwFrUAppFAtg$`V#e zly7XAK4TM4tA2v>$Gl=A4*rAW0kF)va9D3UI~I{c^w62iggxO)%|^}Y7)1oNn$bRL zd%@m~AA75I-o@O5dHxgNpG79$PM;FaN=gP+(#ka%{8{I--VotrfIoMTbKd_vr7FN2 z8z}i7d_~gBLGqE1jA`*d3g;$B0{nXl%Kc~muSdZp18Ie7`M-0Ve_ytL=_CSLuil}v z@?uqS?*hsHq#5+oG|jR9z5ZuFlK&9v8Bp5!9c1%-(ul7POO&j}_K(v2NewL#++W>= z?d*6`ZDtHBKEBs{5!7z}eXqy0MH%X97wvpK*gp{U?!7wG4uWU-Bhq#u@kg zpwzCmj3nwy+eiTDx!JVN*!K^pjP_3KeU~o6ki?|aEyV}F>$EyXKid?sH~s9mW&W5D zGaO7CTz`LkH4JtDw$z&|^nac-a9bXhrm(GAjxL_YEhuhrr7_i4Nop7HTF$QZ;W+RA{m<{JZvGrxLsutl$5 zt#*UE+X7xfc)hB40K6>jPipi~OS3%UM+3p4%b5&(OE4C#mEIm(sPFi=yUl@yyXO(@ z)Ojb@QK^q46NNb%a?k8lVx(7mx==6J|0ehJ752WyOn`ek7NCKiq>2|*#-dmN?~ywr zSN*OPME3L4-nL6#ytwj{o5besamQz8k9rLHd47YS=YMQI;%ON-4OvKOIRBN!2*}#p zORVAdwId{84qo!R#7PmQ_dhis%Rb@~RU+1kFv42=Zm~i3Gu)ny*ZN3mAf?i@+bY`R z=a>70!tNF1yd0tRUh5Z7idn0r-e_N`1sNA!?#h$872xU5-m9J8} zB|F!$E+`CcbdbK|V&C2uHC~>w(+#CR`_&gTO}!D0<~nXin9i)X*QU1??VUfAhf6gX zlhkU)nRLwUA?RmsM7C!bo}aT8N~GgxxC6EE(@4|<$|nPy(|REj%U7Z;fkS}0rLkhE zE&e~I@~L4tTYQK3cxIKEQ6@LGI3CwNyk^@e?7q*r3X9L|$Yd$x1L*u6i3(cTxt#ZSy(R?tkbH@}; z^k%Bt!f-j~j&v9XM?f0rpuQuf%-PJ^)8_VCHdlXyXLDSR_AxrNozG{Ep9A=yFO)G#+Oi)OspwI3Pkvg5BFcQA>$kE{RBSVJ zH+G(XwdlUN?Ejeh4cgSM>J!Vzn~jwk7tEQh`j3W>=m#T~ETTz{%5fiDqpc6Z?8a&n)Sxu9<2Id*$Zt)Sr<2c9(}8I@JQv(oF>Rj!?ygU- zWHr&dnH_eq@)8oK{(CDkyAwGqKC)fINc7>lRd*$4O}x}o@M^)e;yZiqh1w0a2Vruk zwF)N!ILQ=~0hmw2f%=#z_I=2<=hZ}LdwOeXsFGMdZT?C`C;dtUE&WR8H{|koGjbL2 znBFv0^yXQ*4H8vd97ub1p{L;vg+9P;@=?iGOsd7;b0G<81RZqR!uLBU(iZ~T`i(|_ zfBfJX5U^&0cqUZ5Q?op}J4@&z!V~6;s=f~|d$FAOsm9$Ah)Hgw9U#3Kv)Ve+?7jpc zb6?74asRj%STaDalPo;|9vS)2{JAngAkG|~7EUQ1xD_eN2D_lz7)+il7^X(sza$wA zr;%8#TpXfBJwtIbHKSaSXQ8}^_xphh9vmQ%+Y3|MGl^a7 zw<8r=%?D!Dc0wjDdPkjQ%TVj#LU%KHoV0~S%xtQM!(12l0w-Dm4fO{DVzh}eQR13y8X2mdVZM--JT|c9@m%hqpGC;*U`@1zlVdk z+Hn}opmq0hd2}aI`3CH(Q9PKUFymS~~$5pVs$IXHhDQ+~c~zpI$M^EKccn zJvyBx^dL;mG>6IjMd_=R( z1BY=7X9F$g%_Xe)mUaQOP^V>C^!k9%T_^ExjOndHu+8e{)wy|>)S#iJ>v8`Egus_9 zL(pesc(Xgm056qox|$5X&h(!tr7wu^YZ-mAbNgAKQ!Cx({q)Woo*! zYTFt$H$~*f(b$muoSa9ISAgKLgRxO4RZTL-esr%V@uamqER-NfG;~w?_Hn-}rbPKC zt)=7f_~jwVe3NYZSeUr*e3HyyZ-f%?eG+Hj12o!KpReY<>qar1C-si{BYe>uw9 zAlgw9)f(*7tz6w<=jkGsXT~KF_eLnzAlAx4AdZR>ww= zlshc#^OBx~)dZCd5kQ2)Q$#w)^XrJdM6vnK_4JQ@pV@qeo8xI)=yBmbba|TvdKEc% zAwF3TT}xB0?sXcz+5P<9jRSPRBmeqO49ltcp#_oV*B<=>Zdm{Z>IOzqOY=@|;h@9K z2FxfXODFr_{q~X4#oqiZhr<#J;pm-b*p3r^V6!99g2%E6hWo|?NHyPd_08F+GM~GFpTx6T@Wc*LZH}H(*Dqp*_fJ|NhQ&tK_n)Q9L$gl^o9U{6KQ+PM z43gEuzP`QVORs-t@#tUFNnZU1{r?muf71i5H2?4pf0F%uncpD)e?Bl1`A==|9R=lOq}C=bq$T>rPgn{L0DuX zCxUdp35eh2(SM1;=~9uUyQ?CJ&luA|6RGt)G-_KemMZo|wFl{^RJq>d_xME- za%xp9QJ&aEB3BRJj|EXpHCs>=dHJYopj31;0!~gG$DVvEC@z&WFd(xUw^j+jd|Z8h z%|+oitAW;)N4*<|r0SS){7ru!`65L5?oDJf=HCJc=6RkIXPm`p+9#Lri$`^<92!1U z>~$@=g0>;5q%PIBs~1?e-9as3O&?mu12s08%3)s#jCQ{Hl%Gq#)qZKDh*?xr%wadj z--KMS3?o$a%M=gF$}!`YiXhEwuL5{ou!j-zpsm5n+TVXn)rq$3kM{3ghtPk4)Diw= z8PeOoSOPJahO@oAZi&^4cME@KI8LfKRiE*ST&X~F}`68`TjOa zSXGVVhIll}F$!Mrka6e(Cs^Jga@bI;$Yw0&y0$jFVP9?|9#JBqBYZx9^|Ex7U}? zo6*HU!H8F4j$h5Od+D1ztPPHC-j))jrSB*2Ef|e94bv&$4MP(|Oo|9M!afxc(t%}s z!fe}rawrhAuYDIVTjTJFT376pEHZ?UMWVXxo^|3@A!Yky^`5XbopBa<@yr|*7CyIx z{JAHL*1uW^82IB^k+LgwFC%@;3jpd&QnH2umUPdrrec7}QVNG4&*)@k1GHVk$VzxMM(_T(TjQYVGv)$gYv}ROR)eP8*Xd3rf zMvmE|2G?!BhM5dr(6vwfP?2UiRXS1LyCN1QG)@0$r>9t9yDHB`huSlVw<;e`lCdSG zQeC@gTA?4m5b|oUY~z`VuKE`=QI>H$6+c3S$ItcYeS@hZG(uz6Te)ZX+kfdVFBuRh zEStDU=hPX>{WFV4)nzn}S`!H_Lii1Rq;r{&7SQxPrqZX!|oZPQwJuP)D z4PtX}LswB*nPZR74LXX=s)aKDVx|K#KO5uz)*UhX=*Q>xSmuGL6L!pITj{es)B0gz z@%L-%q3ln^nGKSIcC~8|NdM|5mWUr-ZOL^Lj~B5=l9n&0VZ9qS;a&Q4av0C3{dC86 zwf13C!Nu3QoLADaVMIN6#o7{`-LG(woe?3yMHeb#gkMcF`Xn^w%|}nDy5+sQ_YRQTn&xJQCxei88}XQ%P0N#~ICgUqky+yckn4 z>y3sBl=6|00Z$etW4`d2e5M>p@`*fNc&0Mku%IYvSjZ9Zi4Rot+FUude1zSTG3!WU z{AXPipAwgaj`P(!50(iU?=jhU(Nd(`p>s%O`d3nO){-mO$C7r=V=QPgYa{Ry(zagC$UX*IQQM&AJP>DA&Q zNf${TO@s)Gs@sHlIPidGfD)Y#xOBw0LAu?kCOxKLH;?CB;!ipDvLdNZjS1)J%by#D0$X?>mo?PR~hxUJzAx`F3pu0#~(ALQ;zuDD_ymbZeYgGQ*z zMM!LE{201_+7)Qq&VWllu32C6%dsbWbL}YCS}$95s|LRMrawT=;W8w0Lx`uyv-&6r zAQ5@IV(2?L4g01J)qbkK2mFc@6O2s-y78;|95%-2;OCN|`JV89Ha-;#F8 z=wk~0~^WZ^TC3JO*{Ji9yG5cRXxU%n`nZ*=l1AePJF99HZ>(x63Ly4Y8Jenp= zZwFyOJba(pb567jZ$%119PC>Y3C~zm)QqPX#x<_^5ZVVXTz9rLQ8?1g0{e1#8jt&L zp2=l+k~rf`V-S|3u6F_z49YvGcH)cjVaDkZ$nMgVpYLOqVSb|=GA?>HX~BJ#kRN!b z4vjl{$3>oGQH!y>LIuj{J_TjytUd;)?;~oZuK!oA#<=>*#|l#XVxtK)sF_3rN82X% znPFlRIYjyRwX8`0mTbYObRjippdvTsVpK_fBAGowM2wzEiRN7QCgUArsqVs_$MWM+ z^JIW)`&;YNw}X}$VS&LkpoDh}XsvFV*+ED3Wm0#js@2aKj=ObNLPDbH67b_)7n^3- zRLp6UySfXfs;ZIcO!s@w)Zsr39znhM?A&Tp2qOzOZSZ|z^leI@-(k^B zx$|h+`}4+dln=%blL!sZTSDz{6-^SpC_T1Vso{C8Qkbb*qZ&dI zAtITN1S#e@6j~Qrd7Q*iP_F^?=NmH{vR;2>6y0HbXjy=f#i{ajJ`mdi}^#9@*B(_dU7)nOxJ%al{sZ>_T_pAb`aj60FRqQXP*x=mU)?qQ*4fj&DIyU14Wb>SrE4OrL7bZocDwR(qhcHoLs8JP${!pF6`Z>N!z z2C(a27pP*yx_$T^;Z>s_ie0uFu5z5el4>u`UodG`7GN~{K7HjXyS)2jA_AWx)B=1f z@Z!sIH`#5hg&~JA0EfuxhPM>=3y^2h{I^WGYLc{rc5>(H;$1p7- z44zzUEWt&utgjuaIfN}Ye=M#XzEtYE5!%H#mG$YpW_IFwO#wzlFiPBUe%FeUOyj_J zBlnI=8yPQF7QHC4UP6vSdCMm=Y~PGLWpV64H1dI81H z=s3kkox*H7HmOY{mIOpRQwt4?6e2(V?sT!mMH;BGaXN+3DEc&uJKX?Hzt8Ejb1WJi z9x?`aw43(GS?>w4oL~2DhRf^GupLUzz)f~gbiQ0_qIqRrCkvjj@KI3OjPi(XZy$zC z52rBRbXv4vdTEN}#AY>MPYDuPM)neXwq`-AmMpd*;yy8&v$`6~CTeE7(cIjd@cL8O zUZko}`V!1fjl*5&RjF!ax=S1KZvUNE`O?!OUyJO;Ku_)^H4TL0na-j3fY-!Tj@@G@ zlIv}gD|^|E&;6mpM%?$Yc;CnF&n|Y$F5;-k?x>(H_#X4`Ae5K%kc>kY^CUlxdpV_^ z#>yY%n-2XHTF1;ArjGiQY03x)QSoAKpz!7mnJjXb#pcN%PtV*{C7{YUfsM%zq`kd{ z-Ft9L97e3__q4(7y`%HH>X3IKavFw%8vdyy4-CzQ5CAMSeALXeLsDc3%a+Cb=Gn4Oz= z8M|kNy%*v3s{^J7tI-Ua3y->zdTHj5tY<7B!wO}sHAdeeGZ>HEe|2RL(U77Sq^lLhSu)jyuN6uQ~ zy~4Y|ugPZqgZgvSq5N7&>wYhf4g~Ik8|iGs9#V0}J&m;|Ery|5LZ9XpuLa)cuUleZ zj%*syKFYA6Y%qOi$4dHL;Fwd#OFCBn8_CO|j&2h5qzeEVW4nlpj>+St`rCD<Vyax#vsCu9Vgl2HmHT#OEO_yu_I$dtPk*1Sg1Iu?Um!Vk( zNys3%@#-x9s-=s=$MB^{RlsJGG4n#nh*^S1^dNcjU?h=kco+dPx3d;G1C>2a(S1uT zOq`nc7HU^<*7FL~@HK&u>|D679~Fs!Y=yuPPt<;SjJpNmr=Nq;81{Csf#>LRFvq)m z{?p!OO{z`*Z2JK>!A1{v&~oRErMpP0Ftr1_SM(^XuM3g5mGsnd$kD|=d)!&{%*)P8oG(1w_w^w8ac2iMhyHU=0Z zsMTt}V)oHzK(pz!*u%8%t4~YR^^BH#v+uB4KrY{AcxO%|zb0KN|JrVR?CuyC5*%lW z657mO3JP#XcZ8~i7qutM(_#|iOXX$FauBSLjc?AVU}m|v6g336@1Wv$ZOWU63C2Z4 zy{ZVE!WCADzoHu5Mkh5}XFLHl{aQNr$Fx@Pi8`IedWU!%nYp?+b%ozp@}A7RQL7D~ zlFiXOPmueLWCxYtybpxBVoQEvN&;Yoi8dG#tor|;7B?Iq?~LFZl1l*hxX(y(g)Uk|NWO?ie@4QG+CfZy zQy)k=ek>;6FnST+u)#>b!Bi(nG$0Pjt@Z9lanTNAs=fh!6mOOifj{eptv(vO z@r#GjKM&gx4`cr-ctM%oA!JX=5Mrfgg#(fH{hmnW|6}8q86@Zjh8YY>ACw&DEjq`S z>(7npW5gX>d!E>TdlP>DoU=u4E|$>DB)+5uH$33gxI6`kX6RdiwqfO8^-G**^ILpW zWHN@S{ZkPnrXFEQ_#1DjLVw5w`)e>!j%!xmuXKMnCY1$!`^j1(!_YRsj67kCa{EQ^ zYmMcK5T6<}JR4UBLb}Tb(;~Nqo1ZdbX=GGoiHT+w*Vbz0Yg`q@Sdsoi2h{}sW`r;O z{_rX228&Xn--0465FIs%rZ`%nIKlI{_ynDt=4%>lRi7h#@UDdCPMe)Lwn%h9(ktpw zvE-vptzqub+QJc^g-t>$bLG5`6BsEbLjm2Z#`v0rwF6baDQON3Fc6Wj%`tu_!_8{V zvpSyU9To}jNhj~*YBJ+*aNhR&_}9d4p`UW^VX>4(4R%nGS3${%P+7}w2K6^>4ID?y zcInS&U-~i$ki*k{7@9Y7JCJ5M=1v?h$xY7bMMiD;_Mt6}o{VkJXiWua>g@(z7^51W z&M~{mFuzqBqn`Fn$RqV-857|j?wrHgc*~zv9(Po6$kZ~5J9n6Ia!}M91k`3xVM^uF zRcb$^T7E{nW9oiBzEBY7;&Hv>DF@uD$b=rkKpKhcXi}}9tW2Ua(~-2OK+Hq(UTo0s zNT^4EW>sa1|C`*iSy)UM{DQN>`GDSzkjIr~=<`>qg4Q>Hv95PSqd>}7x@@OcTv8h{ zu92^_JWM!FR-i}zcU#oq>AMCMC@gkWm}z54UX@4 zT1{0LZ=vbFr&y$a6;Os=;q z($3(h^{FYlRR@Yt6!U5 zOfnHnnm=MXw#{%(ZA-)%POi2SpXr>?8#kT3UjDu}7-wrCyK%^oy&C)e1?5X6X&hBi zO4{A&1OFeja>bmWHwqN~Jo1aJI|0p=Ruj0|0_!4PJhxBwrmt|Uu;boB>j+!P%Bd=j zIrc8IaFv9PC(U~mdajq5DXgslFD7r_^-%}-jG4&~fNB9EwKaQ8ltlln=SCzS1YoKh zUs_Q6sb}5@A^!kIqSb2_mN?f%?4By&Uoi28e-x2Ct!SgYbwSwU- zhr5T`P@9K&-t{j>wPH-o6DhbR)J?C7UMLuOyyBWfzY!KUZekAhy3Z3kE-(M8C^1Ck zV-jV}{1OVUX1)E@+>M~$tl@~1vf?ygs(C38-2)a?eos=TUW}#HSbI!~M5fGJ-Jw(9 z&}mjT7+kIR-_+*LjqRCFS0ZaySgJO2UV1HUrQP{fAJ=S^^)uFV#Lmpyv%832 z3{G__v%C-4lp!WynTK&?(YKhtLAR}){L?VjgY%w*ahkd|;<{tS%FxlBmojUw*^*v>ulPSZxyj%%TEVQCzuUEI@0msYKR`7?HB zW;&Ln)oL{QzVZ|DB$9&H0aPFxN*67#Conj?GmgPxIcGJ3N8Y^64w0}SQ7K>`U#KF4 z|2jQo#;k*3Ad+3vYvdir4g({j`tgT49eW^W%i6p?^LCjaey(J%;7jM+Aw;wTFLiDt zEaxElr2!0Qw0~G?G$L`>LNZV=syp<@9x!D3bapkOd$4XHVE5LYudKcvx2)kuq#Tjk~tNZ~RI)Az~Tk~~EcZkec>^dwf zlCgMA#ma|QIeA`-e2?TaF0#aJm*X3W$_vpcuelAcM<`Rx4@Z!Jk`4ETX8Xqo4!x@= zKXI19SFMc3SJ_>vM9jB$WysmYs`44oeOJQ6mIIj;4Jy_J*ucj-Sw~OX3(9~$Z;PH> z=Ptg3(EP5O21i?ZH}{KuFCs~0e+B%N?dr$aW%slf&AWRNU*DGyV@wZq*B&PbM^jiU z^T8ipS6Ogc_5j9 zjHMXuLwxKj0wgrqu;sl|G=LF|Y8Fi5qtIt#yHzC*$dSYAO&q$>qIJ1oew3nhpKbTt z|f#PISk~p=+=3(OJ1F5JT zG2ql{05NJ~+k~DTf=K-IOa;i5$%<;w!&JNT-Wa>LYBy!oCA)8FKuIPDeeY3&nI)Y@ zAU1;H#MsD#2Td-K8I@0m(e}4=rsOVWI4?7L39r7~6Hu4`r-K3bU80>8A{}5>5DqN! zR}XXNi0Xb##n`NbK?%;}-w1w78EHg~lr@(z9LNa6jM6KB7AYmwMA_7zk1k~|2g}u& zq-<>)n;_11Y(-q>?UMlQs$iFh%$PIE`y^)8jrmZ0rUk+%Vbs9imHefIAxXLE$${qV+h*wTF}D%HYj- z-b>wxRlc%~#KWP*-u!>0Yxp_>atk7RlMJ0{6a&gX7W#LjU z_~%p5rRzZV<}$r3njm2egPj-ByExxF!*RqIDMwzt*C$6Fd^JXN{3_OBQ`bVNmIjwkL`d(QALeLzXJ9F+;*-Uz!={$!By~?KS~z2TA<{v%8^P^8J?h{e zl+4+lCEMx^N=!z1f@VUKuqk$FJOK;}jre13*6i@HLe0b-q+EaAKl%Wd3{sEQPS{KZ z08mVo)`yuL1!>bpCG9aD{TvQguftNC?j<81AG}DhJ17k^JrT2VKk#`}!Dz+)?meC>M)Jw%r-iUn59z5NNik~cYPv=b-nUZ-P zWv+baKTS;yVun~uj94k?!Z6cWXTQQ>GvUgL-X|`O$>=Cqs99qUUqh1fy)l{CJ=K4_ zxM`7XHRMo`f}r3(+XkzM96wE9heoG0XpjXj!NDw@O>EdEhnaEgAiOK8;foK0UdLlG z75jdb70)EUM*dC)C(_ z>46fk^(u=dIPVfLO5jWy+J!9POlsdW_|_(O)18+(tUVb>G`cDffn!1Fr=^N;#-?DP zJqVpa({$i&ppNeyKM9bo3~^q0)*wqC6kZ}?jc^(y8zRVkSF_{neY+-ncI74Owc*1L zubT@8E1W}zw%ZjNOie#FY1QvL?fwMa?R8)Gko%61t~E2Yaogr9NKN|T9$h)sr|V>_ zQ2caGwZLj9ynyxZyeb6vTZ+HpNNfvmJZm|-%Untm8on%edZg-&S0E7l5&Gh^ku3bc zlsGI?a9M7wIQ~i-&n5H8SfS(8$!n=WPN}24F6pfgpI=DrtKT0`n{_Kr>v;9uHxTqP zLb@Ekc39$hj>)#u$OA{ERWuA2m&TCZBv0jVlBK2dX(oz>%|s}-%!Mn%=5l#tTOzs+ z*PT4)w{j*`*m@RI?9vug5DXOtEdZoSQsR~6zlEW!dck%AfRjV zCh5Y2;#0spxE4S+Pr`imJ!8&b#NQ0BA1-+9m@pGL(Z-d}7UtW{pT@IsSZu$ynVtO6 zif#$1{)CR`Xw+n7MXftA#*$cDQ(i^hi2bCpSU5xaEO=rMV`(|9eISZ=W%g{)>?)ai z)trlV-r=F8;Zi^D6)7L5A;IkdlzAtf^jJ@GGn0hGSK*&f|*HvUW%%X^XQty@?E$0kRk#xY>ibzoj^O0#@kseq3 z-uAvNVnAE}>vMTNla+Y1YBCdqqvH-by5*wdBHDga+2uYU&V#hK#*H+kKiNSaMjT^@ z4R3d{3nEIjDwi!~Qz;OcWD2HHa6MI!)Ny=PtAG zQQ&TKa<{7=Ki=hr{4P5MTTQ}XNpL4ta9yd>;o<56Hi*AI)n{>jon@pWnPA?~j9lQC zy8gb90*~9GFd|=DDzhh`yxYe@&bk^az{kGy!bGp$RUvy5Ldvz8Km!g1FhA|_347fB zSJerP64UIltuuH0jn~+$WUnjkW+;U0&}nSGZtOI(poceWa9FzW>o0de;jAAZWdmv! zpvqebp4g<@uT<@U$xxqIf$inZybkxfn<7uYSIc#T#W?ADMH4?7)4RL}8wJu$AVqQM z@qDQdFvJS(nY(tnHTpy}2w-O}g}J?rF7tO!WmFS=2zb%((eH(H$AcH8onNATgZ(JH zo=W3;QEcKBCztEu1CTz~=d$)DphwRFKb3$J{=$DIEz;@z*v&ZNMLB5S{n|XkN=r4A zaXcOLd91nLS(`aEn2|~OQcOV#Gcgd1rnOo+_9Ax+cC1Vz&HMKfZ!ams464W}yelQ= zNe@Qo;2mrdLNQV+QGU^%du!;IwXj*aR~4F%>GAYY^r^R-&ucHtdo9^~&sEh?QP<7K zA3G5}dH%T~LhNTpAp!cH*Y|xPL9|!PgX?de@>*-Z*MGc#- zQZApTmI4cV_uHK{37l}*BAh`UP@R#$1VEyl$jCwpA)j!U;)hy3JwGPa;;VqQK^-dA z-Ky=1#hhpVhpo2`i?ZwbKovw#K)Op>Lg|!Hx`z%Wqy`40+aZ)jVx&_Lh6d?Q=@#kk zhM{3-I5*Gx_N3Y+=oi3-#L&<2O-%pK5( z$BwUvc+Iq11!TW@u~b~!yY`9F>>^)WoEMdLlo)kHQ-wy-wH^U?K)7SxMrc8pFw$@% z#$ncABfvW?%A6u?+_Z}hi%v)$g z%VgsmUBeNj$)ZiGBQ?MU+`nwc<=sQ<;#5OG5RdpJt5{{~J1iTDeVjES=+Q_7;)oL* zLU9)U{WV^P$9wiza9rd}I=;bnP2gD6-kNTA5}jCZ#Mz*y3{3~tpZ{C2NKC#%aRK24 zFr~_Wo6@+?Ye!_fD=u`>TaDezBIbd%RB`PiqNnw9SxcDrNbz70Ac(A?%-6?&l` zBA3d?Cml}mL0vP07FoO-$(`QO`(gqkDFs`~&!P2XzXf1Tir-~4rp8zDN2vK>Z>I;N zR!BV>nV)*;e_WSIGL624W`#%YHM;F;9C^{%JlPS6{lY(uNSvmUbx8^#vP%uXG+f9z zel!NMTu%c|n-N9RS9L#XHI1BA)Yi1+BHx*VM4Jr1{!h6&#?8G~Lt|()nLcQA*(?Na zNx$S8+1RwcXQm7zL0QN{=c+0AsPW=_Gy21B2j^lvPf%q|aXuiK+D zLXDyYvm6GOCRbA19=xxMoQUm;)wVyypx@==GPdm)DdJC=>2XZl7D0ZwsA`z1iZ68f zg=#`PHItb;p0m1ep4o6zJH~Y159~^30fUy%bS(WWeh=G~n6!y`*1G1THt`)r2as}m z^FMA9$My;Yb+Y-1cSiAzz4&x%0IaNM(NuJeUukd6N`SM+z>fg9H?yOf)vPmbV4>}5~~Dc52p4e=BLT6gr%&AP2J0n@jy+UJd$_3En-ugx^?-l+3X8kjNcS@-;H zKg(ORvgtx?esNI}UGoLx*0$ez6(~M(wW)Bt2_Hf9WK+8}jXGY|OL_ekbxn6LTi7)h zg@xNpM;q7-9mpTgzit*F-1E$|`Osv?SBffJ16|yAI0{XB=tSM7h764*)X|Y&N{SG)XF|;*G%U2l`RWJ=+XnUkS;qO zXkfaN+i7Fj!E>?eYl^TNPl8S#+XRsnVjDiK4D6Wt&ividz?S2m2F5eqnQ?Gny<(aZ`90REL;oSPju4h_oH%ie(0hPiy=ogSqtdM~ zDF>Fzxs}r9zlaNk8c+f{h{EN^X& zevNI@$v~1PSG`@Y$PvG`Pu{j7U9*E^ijsAq-Iis$VB{^cZMVo}%JXC|kdByFqoe6g z11&ES_{wT~$X(<3!yhoGx|`CVa%F3FqcWS7z}eJls*%;fciAO79lE=WU*m2Lmuk%Ecl#hIY(F!&qwT%5^LIY++1=^g;b30tzCf; zKqZz>5dAbjZG)T*f?)O?wq)3Gf`?>)FpONK;be65)pm0UmAn=pevb}8r2a@@X)1)%@ETPX$V*7?N2<>FVA!M$I}5k5PF zgx7P;i|DKiL&Jf?4*Q*7>~X&k*)0a)=S=TjCbGUO*N35%nI?+FJ!<^v9Wu3Yc6AEC zk>wU|h31WFp3$&Re&)igT5dyoAH&aPqrS9Mle;K2d$5LhO*fHPuo(`7g2A?8cy6;w1F&N` z4NSq6kQ?F3(SR&(8~x-`R&1bjcsJ_mRq>3dRFXBvxVU>W=|kbu$Xo?Y4?0$j2V>h~ z?iF>xhN(B@9F>Y$;p`o-!fC|c8oe7ltk=#fHy zQl0}#5aoMTo|Ah8bVGko?!VLxJ=?JRg??Q1!bW>KvqB9b_=;T+uezDTcFubum7bh6brcpqXhz(IvE6@>O5t*g zt4^Gs5woM#eSnYZVc$03u|(BymUC(;t=3D=MO?wUwuJ-C=|OsI6k$>x{| z87_AF(7ORWJdD~+5VWA^?4SOE1OC{Sn+LE&qxTaSpFmz`sz3mx?l3n4RZPugNN+Gz z--k$@tl+N&q3BvMfMCat$WK?FaodN>UsEtYoIY`wF}hgO;IfO;=22r+gtup1FG=x4 z@u991h45R(!+5Mrf9E$hamumTS!`uiigaA+ZfRm(l>o(g%(C2KGI(io7|tV>T8p{Q zas7CIzzBA>ZmT`*f3{)Uj_xF|IpJD-mfFdIY1?9I2)S?lZTF`_2+%*A1v=zT3O`#@ zcr6goURK+Ya5`oA@m(_|I&xR);`V#QM89B=dMIK9#gTsG+ZO-l4f|dGCQ#89GoW2{->FQGR`{wSeng$&ctVll7FjBKU{X$zdtKp6Ym zYVgvGd905BCT4ij8LKsp} zuw~v_o>QU{$2iFQeGaD0COlL|%kO%)M*pP|^|MVQp1~cj1Y2DO_^@$O;MA(&ww(%? zm55RpxY+Ga-~ct**ox3~8em-T{a?T*vXxt@eG#us){uZH9F>im@$CXS*<+abiJUIJ z(v%nFNMEEg{S;ettVvdgdZ~Km;3YuzY*v5Jl=M6hMwy=D;B_#?6lPfRjDEv2G%ArI zX56&B-;T?1U4T?bu@Pu6gJX5dEmpfD-Iqg{aYKS%ewS*+7q=RH!NVkKDszVF>4YaN z_;6@j9%GN@VGNFhrM2CM8O7Z9H=HPJ`z^Cwog;7{O;m9{+=KA-$d^YyZCiI{WD$jlk$dkbQ?eS73U z-+SYxnW5B;GExfPWfC*!wyLK%2AhO)o@Y9Te8c+tL0UL9PhgNgf=WqBlgAJ}m)y@p z%nZZd6~N`vOeQJfTYqZDI1*jQ`#ewT5=3v`{N#szts_~w0r8uRURSFLZG*Kj)MzWTebf7mdADX?v(go3N+WSA}oViN8< z#1t4iXxP~u&&i3nXrC<=qA*Edn5h`EDN2v#)N!6P-%gNcxhdZs)MN_Cyof@i>ZBE3 zA|`kEdl{5zb?UW^vR=(NJkMnLJAGP6iRFY;iS%0GN6zCZ z#)Mk;@Wc(n$d2$$n$#clb)l>=V%T`ikq&7f1yKrwR~9o~FD82sJ&O=0sTaS-1~*-D z)Ld<20`qkzqcL$!a41p}dN-XQ_m^uO%#$|oxipLr>Y*HHKYmjlGzWoj?x;*LhqDz9 z&=lZ6rsXGec*G!2@uEa|q4!EYN3&oGTlrRD`6h-8M>YP03q+jCC5@f4({}tEB9aek z1;DNN&U>yjohnmdZi>zAC0hktCYO)1PG1aN61OQ#09!dQ_KXjTp!X)#a}jA7}TRpd30TMJcFjt3FXVUpGKou&{t%w-J<myr}VnIcLs_VOT|wzq^KL`Z^S%B zyeJ+kB?YBx#H}=vC3C)m#Ei>eeb<%&bcotOSF}acg^dC(>kjY_4u=&vjDHuh=nC7> zRTZ9--kwV0&2r-tQ3S300!%bFqLWp{mKZ*g9a(>LzgpnD?MV9|H~2e23?W@kEMUkK zIA_n_WKYT{tW|&hTR=q^K)JjLlh=t!`XxL52zkRl6l+BIgr2vR*?rp!gx9?rP zwjs{K$D^PZNod0XY1KWVDjUco%!@=A_Ttq8DvxL&#g#JMoGK^D&u>Q@Zsj;) zbC5;6G6==Zi@d6Mm-YG5!0(6po1S7R49HAH@DzP;3(uz$OVLWU_qL6v+Rpp)sF)-# z+mSAqxO%T~BiFo!4#o;{4K7iTzdasYZ8*0?bNr=bKnti6ICY!{e5)xC@q_jiB$cXpKefU z2wQ3kgafu9GSoNkjrZ-c6`s)A_yQdd$EAkj-)%%X`d{)ivKMz)=u3CMCztI0v{t0vg4jewd7&gN#w?3yC={VZC- z@I}1$$2PrpYuzuiG5;LT?{F?=ZE!-TEx-|RKWf1+zEc))xF5z=?tj7^M$c!+US8HNO4*dQmgA;*EGpF0TCBUm{d+KB1#wOC|IMtmv0&luN)7F1=+dcTZ6 z$^SJKA`7O-R(V%0TRa7X0d-lVoRA`Tbm&F9@PJefLFh~O%@Hg}Srv2aXPc|g^ z57Fa~TE8o220+SKc_QNSZuJaL#SGbfLfWm}Zd6Bvu|#lyIg+>I00KB>A;XPKkTGu) z4&}MlRjB-j?1J~z&E{!_S$3Pv ziDg(03A4(tm7#AWtIgt7hJI&Pwsgx}Epk5$MvSZxg zh0b)X14G=v%g(|<8Pk!=HNg@)=H9b?=LWD$lhkO7@^MFLZH+3G`;KB~zjZVpvsP0A z;&AVTAe*O3N?v<^awGS0!tozZ z-ORy#A@sU%K&E>if$nD!{cQ#j$(#phctHlTXiI14s&ED{$fADARBQRg>{0h=-A$5+ z$M^3`YRc;u{SmrcsesYKq}QMFXiYMZ>P)E&3A6Biv&bPGV&m-(h)F z&W-2^HQ`(7{)3!z>b#hp8#Sz{o5J0E6IH)3K@DRqqt(Ho2?(A=-Zdh=H41knpQzxe1BChTk8z|+MZJ*Dsyp93w1E`Ag9+LgTB+)v1Mq! z@p(PX`JW&rkrZ_G$!auLZF9P^An_9eS9qeonyGR9Z)G>1Z=5cg^Zq^XBYAIG1OE!I zB&!pQpW_HJAxDN(_vI&2ba*_SZ(8v=j8wz9z|P{o1W3~T2ylO<`Y+z%y}5YqUxj>J z)#zV0hC^R+L`|9E#PdwK@sUyU4Nt@MFBc%IF65x{sPtKyY_jB@uTgBma#GZ=&w6b; zKW9Etx!ar5%pM+{SyD5p6%W2 zKN0syT;Jj4C3Ve?V$_I(9kb8o-_Qsfw?=j|7O*!iHu=~aDMA;FHt*!LCvLQp{6oL? zLk#^Z=nJ7O*?(9EQZ0G&vA-V=iZ2+S>&n20I4-ykhoFskB;{QKPjbmo5fo1mpClT+EVXvCBYvi|#!(y;efU3cTFr3^M@%7q}uZvS?oE>Uky)l#n%L5B8?7kp|zbW**he z3;2WB+Zx5X#%3FWe*={ezRsOUjsv!M|42<(9ekUy&~_=qik>?BIkol>#buuLq|xGl z^0qe!jq&M=w%snuAUrl?L4W>gQ>mb`!P#wh1Jm8k?@%=jqbCTe2p%8zr=Nb#!%C(> zlnG%AcVn^c);8fq0pF0mDQC)AV-biaL2b`WbBc<7 z?(B31r5h@1lgvF_=r6FhzpkCUS+e6i9`k9L(=qx0>{(a14Fz8$FZry%@*aho zb$bZeNxx}V>|RZxTRdRFd~axr>PAJpwM=C4E5WENQR!*WMbw)kb5mp{08HfU_=Gn8 z$9Hu0bgFx+#zHvG2K|4&M$$)QaM|iNZNcq`klb)f_Uua{Vj5XIskuPEPl~~L zB4d-;1~fa(NYu)8KWB!F^oJDWVb8DGG&2%GWpX`Z9;II6>gO`m2O&&TeXH!!z?hd37>=#1dhD%t@ zQbu$?c|*y9ezL%D#6?#4Y>hSi2UmGp#A}1;6K-yQXPcR-WNW10rJVr&?8WX)1^os2 z)Lo3}YC8lx*;hRZn0H(Eoc%ILlfU<+9ii!~LisoNP=*xvlmg;XHS(kctz;1eM|9?5 zH6j9ybW#acGugGU0IkkXj2_BKe08aEa%+}ok)b{UP;cNyAC-03X!W;KO zb!PT<%@UbFD^dLH@YW#`_@HsG?B$8-#F7thEW`j<_WkC&(1PiWQo)#++t5Am{1cA5ld ztZ`-7r`W+ef?DkOl3q4c8OR)dfwCqx+THK`#>mxHkB#p^Y(+IF8aYZW6B;rmGp_}V zXWmczxc=!>dYMPSbv4-Bo^l0hzts8NF|YQ$1*wgC zFAoJx)#Xi!9h-2P^*sx*O z`K12PhwCWGr;AzO7Cp}O7HwSo)SBJ%k(%E%ZoYcxNXZ4I z&n1a6r+JF1h~KEpy4hJYT*x?Lr=syF9Go}mz^^Jdmba2$y%~fSw|$OJZ9_oP5`}3vB1 zzwDB-rxyVjV(8K2G&Q~Qm|GLbs=5&qza9hJX?pf2AY)Bdnp!&PWp(O#3PA-f9pL9En{gDc+MaaX^(p~oCWQZ8sG?gwFw$~`0a8Q?_l#N(H(qSVMwPz# zs*of?CrUhI9xkkzbZWY$g8Vuyy~zYi+vl*T?Lpn`cBuVsEXiW_&MN`H7U|xB^q*9ZvZocn zRY=}A<_3ylHdVN8U&;-ct92-^=WM?63zr+2crBx495J;b9>nl{j_CI?Q$? za)NZqG(kSDkUy*`BvbgMR_eD1tbtVan!{BL_dDyj$-k}s}m9tX1JG6&jOAh*7dck<*y`? z9{e3B-Uz*7dDp;lR%q#mL%MzgPMTw4_FoMFWsMJ<)(16~JQAAispEd?241Q*@_WuQ zgppM47S4S=RL8dn`$!fSeaodxZSy!WucyHuH@z)U^eEtuW;;T!{#vr|Jr}XH&2+gr z79d6V;cCa_``S?Y!wP+_9@K6Ga5+$W8mg+9z(L;uM)HPwj!DWL-2@nHz%Jip+xB^Gx8E4kepUUCUu!f}l}GsHm3loMxxbKI+UIyx3{yd|*h!+e_3 zlFQhzXzxxsV=bSb-jxeg9eC0VhQ<7vneJi=ku@Q?SK;|5 zG?Ny=IQDatSfW_4ykG7dqSTCen>UCqKhNHaO5%%O@M!3gDbouR47k{y4n=-M?pIZ- z;4$(LK<$Hpjg5`*h#dE;9Fv4FKUF6pl7o!vQ)d|2h*{glWdX+o7^XB~l}l+&Dtfi> zc6VCg?n=k6aSiN-0 z=yQSL6&9-`dOTexyxcs$6I7Vi8kRr0Y(WfqM0)fr!A;8Bx#rpSJFFn*GMd=jQ1nt{GM_G|+pBC(VKO83TNJzzvq*BYLo+=c z=2vG1!%x(FS+i}%pLRF&8DE*K*hwv^*o2`+qA_rp3^rBc z%}$}yE4Z1opP-T+^cbFymtzjbeUv;~#;!Szjjg#zWURSNS5I+k;{m^<7Q~`XK7?~& zld#Q|f>lf*hBJXfQ649%b!EP<2f*X*rvnP?L?bzJ9Z56J?s5cx(C0tf)}hT5Qa44= zHJezjN|N_h>l#-TTgi}@%;)mxsea?~$7_e4taCG@RLm9f!{GeO$yz5sJ)|ZOqdr>r zHd$1`feXSeE%_$%8AeZTYHdyZq7v35;ah_nSO1(@Kc5%wk5|aaaRX_#<5AmoE^yt5 zud#(+s)wB7&!=xkhvic}VG4%7y)oO>+y zR-#Gv!7tE8%{lGTVzy>W;@bEyQE-2S!2Y5^Vz%OlZkB&TMw3eQLh{#a;&$M$tF^gk zr6NER!f#{tb>}TSn#kAAhVKlKn0&6|!+p<0ofvB#KH1Qg*h75L7Oe+s+B| z@Qdmgx^g|UVR0=QEJqp^Ub-^34%JAyU~`@OsUeE7j0anAQ{9V-^+G8w980l?>)8o9 zZq`i0`VaXvhqI=tMiNCM+^;t2+$a)v0NXUKq3pP69eQ!v#Q$yvp#)Krli+NnyGJd- zG$X`H9m*6Ot$bMJ8B0d%OR!=prO3+nrV!6Xf~U3 z654w&65shebGI#0^r&M5Bi_JM3>n*47@oQ~zJYsQg>I#N%hiE^U{J__0yr|lQ-4AM zpWbq>{&)J_mgHUJqP{Z~rCv*dSaF@h>`om`HlyE<(7^jaMO_7ji$xRQ@k|>d`ylM2 z>gRlr{r_g8fWLm+5Pg!E4Y_Mz)ne*}zzVXss58DGJ{_q_YV6=l{<+uByP=|%je5!% z&Gl-+^s;{{xUQf2#uT_>G&#n?lVY51_03$?fwW1kgxs1t zK{b(nm~oIZ*uP6Oz^M7BtuB1W0oro6RN9z~JGS!{)C#}@T@L%Z53H;;bBI@pXsCnm zD%UAFU5erRLL%|eoO=-bGl@@Ce#hb!Pau8vz%6`!699B~zcOP*TPQQ1H`hHKOG^t~ z+o=-jPfePBk#9ve34P(edqq)VtV2cZkzcJBNW3U&qlZJJ3Wq^JJ7VIIXIh{1lt7s9XjQCORA27Kj$n zt3g^?K4C$yCS1EBoer(vavz!YZs$ukD`~;~&u0!$p2DhP33?jCJoc9x?t1NkGxqvN z8_+uqhz%X0*LR-Rn-tvPM;M;SW+j(ej|WWh9eaA#esXHvd@?SrMip#gB#rSJhxfzE zo^atjzLGVPS0$T+!W%C#0`>2d@rpZak>@YVa~L`hr4*tW9vbUyB)P3T8Z@nb6nk%^ zYq827N({Yg5M9SEL~^u*hZeOTrqRH{(Os8EK;m5aj)|g|vMv&^gHnJ9BEs|MBEjik zeH_;wSC{`pX_nIrRbuJ!=x(B4G-gpNrRH0{Al*MX%x==C@S(NM&{JXYvV4$;@RPYF zH<7Q^C`;~yOOoYky7n~0J)gvvnQQG|F#}jag`MzdcWPN#854zQtIy4Z&ysIBsKq0I zd8u&3JBSB#@$z1BsoP*8*}7Q@TEK@}48%Q;v%^|!X+Gh$hTJ!h@&0Dg!RE*l*CbI! zy#!HAW)2x?7oo=>1k84A!uaso<4q=Yq%citq7Tl~=1Yrf=N24?n~G#Lnvlilvo5l+ zp1NN3Ebmfpv(@ljYIb5-8&7IsqLlEK*8?@@I;@_LJM-)_ZAJF(3Yt3xjr9Cfzn9`V zy?6n$Hu9^FXnN#VRiNx416}nJIl39)bS6=qcz!Xjb0&ZH#Yn7K*#^3B%oraHq&U+8 zRJH(%f4P?=G`?8Y>qT~s9aZ5oYq-U6>Zigv;`XoM583tJ`%%M25VV;>|2^r1<;=lJ zNe}LQ>}nOki%$JMA3ZU`wgPyh_z-(uRNT{x=&aJT#xQfT445wPMVd;5b;h8 z8nHkwxEOCfw=5FF{LJs2dmCGg>q;qEE9p?elhs#hsZs&{&^;kS#SoU6qpW~eoMqj$%a z&xzn4)5d#Qom@ol6wsN5Etn&nw}yoxs`KZ!Qsk_`%g6{5b{QirVfI{1AU`B!xwo z#gr(jE|+&VW0!Hg`1VnO^=b4UYqp(I{yO|I+C-JC;D^a<&2JfqrGPQ+W0Cs?24c`f zlA0V%z6{VS@3kTo6CPjx6Fj9s67jsSH@M!k;$u($3l3I^c%lvFqIh=|Qi-7w1^H1H zIWQ5e3y@LY-+uoGxZoX%#*_&_l`N#U@|r+Du0II124!GqqpK0+{`zv+I7v45*vJp( z@N=(r4&h^Rl+(>S87|+Jcm8d7Qfqno*$!rR4*0UX#L_=#eFIfVOG_?lP9D+5GCtK? zkWF1?T=6&wPERO(@r_h8QWtCKUF_icPJ4z+uUQ z7o5rkEoUs`tX;;ZBz_KUd?eN@vW7r5OsDU3aRJPN4KM=!w*D6(kzEdaYmz9+r_2dG zu_TM!sx^~PN|w`AB5n&F+Wjg?9}bOCCVflSV^PWIF>pPe9d~IS!&SAb>k#4`!Xqsw z8+iY(?FWc*3&=z3j*Kz(5PnIgXKl@hcbM&3AN#2V`0E+`rU*hi0VQSS5dBCsCF!fMIOF#2 zZd&X2J^gXd%;&) zbN&Nbs?X2NkukBc#(*nqUXc^MzS|hhB8QI=g{aHeimIC>uhkijguRZ@qbd=O`_0np7EC;LZMXU*Y@5vdrq?kJVVcCrT}efE~)Xu0p4iSySfgQ|^c`q>k|RAfga zyoqZuPNK?+nlMd@FKQE2?tP)5shJSW_Ok5g1;kDM$i1U>`lX5rK<=mYSfMVS3B5xAEmNrwjwsyM1zHk$r(g(Y&7;j%$~> z%^5QNhSOz`-6VQ|m|M%I=8;x?5c$qAf^TAD>O|10D<$;&{RVugg~s$~ZJ{e6UA!}H z*hlj4S9E_A8SY4{(`x7(E*CZqTN=Nxeqfl^TSz3t(mj!#7|C69!~)4T=zB6WGJxn* z7-rzYB7%y#Ms+H*YDU(5d=^ToCcODopnFvIiSU__LyEHxP?yd747vjL7XMRB$@Hh% zzX-Dz^bHodomFWSDdjiwO2ysYwyHFaCd!^7fQ9xDs6|cG042j?gT_uPdY0;`6-M-M zS={0DO?zwPs>!*&! zBR-3z?KZYN4_2}qZ&+R34;2U{9MuF#8VDG$Ca)zw$g3U)%U#g$ecS0v4jOtH_`x}E~0*D zwpaKubjqZ08hD|QF`V}O+|-^E+}Q1PCg1<|FZ&_LM^;u`ChgssQv@NFa9Iv}%24C^ zhFS%uk`MDJ>rDW};>$)E*rU!&KNz6uN>kkw?# zu0H9ej!ZOZC*KM@G$rLbdap!n%KMG6K%Z%}$?WxI@Hf||vPd(ovW+Or-z|IQu=MpA z+k@gu0#Bea^jM+kTtQuS2isFNH-F-vcV9y%S0 ziigWZfh7Yk_mVs_$=}%QlGnAqGv>I7?Nz{v0xnrC{dSfZrDS{Lm|V0xxKkTnPx1v} zlx#C}cEsEvO;!#XXpJ;$3D_VuS?PaY3LSbmDSAhaNOEGCe?cAEw2yk$IQp5wZqrYQ zfTJZ9hej4Lqw(h=`wrN}UrfKoLNh~*)k#BNLNl$8ne@h?3emF@X4S4k#L73`UnxM;sT?G0g-p}_{QH8`J!(4o67+RS!$bhuy4~~w zB@xWn*|#iRu9@z~>J1xym?ar3QxI#V`RV)b8BVH&|E~#SheR;5LHb=|D|0VvRlpJ~n zP*V+fkWc*o))sp{w)DT7R^?}>T~MjF9Y~rIoW-idJW;EZx5JFC&p`G7HTY52%`Q$q zxnqaTy9xl<*$YvN^KbOE;4`w^-|o9?*QlBHRy#^P7Y{8@|CV zFskx(7^_}2=~Fue#g4(hvD2|arEa9~v|m$vO5On`JB>k{jWDp?ge@e-T}6)O$B zGQSLiPHQ`Bp3`6$4`+f7|B6u5+nwdomOqT5(G!P%xiK2kzUP78cV(UaRK3{y@rwT{kllZdgXECR5sl9`n@ zVYHg&egA394I93CWl%z!!D>kg3%aWk0JnFoH26|*Nh>k*ciu#82-um_KmGZB1T&uG zn%YV0myQ65&#mFZy5A3JBV&8;L+d?`h|L2)QL@6QF5~9 zgfWpa1oca~zVM;lW5Lz~I4w7ho6kPw$-Lv6Se}&3yfdnRKIZ)g{0$L2-Uou&1x-2y z`I!+t)nx0Se7q5*@-9zq`(Y7$z>#VE3D7yKJWE zyR(DlhOqc*zh!4B=wO4)!jx}TAU1G{KiF@LFGe)vB&Gzb-@`QnH9E1OVpCuGp=7gdgT%qJ1qN{Q@FaXXercpiJY++Oa z!~od0?RTY_OMbhJjWKQ`ZQ#sYwMX@ZnK&(6?Df}!(W;;W*K0jOIOhEH3<2u6TZdPc z4=3wTLTu+sFiS`tA@&$8aUqJ8nQ@x>td4ygE9N=9H&Gl!=gouAKWm#s37=s@@I~Xo zKczJ3$7*+BcL-6;mf+s%BJrXZn-P&iH>@^K_QbLu%ylLzqTB2RI6W=;MMz~yRxXR% z)nk?rUA&#iAyRLLb~)^NFRt5I0&)jjw^*Fjb#TuhCtK zu<1Fw4=2_W$&62E2Y`1Q|2c@Z-N95I(;mf!H>w6isuSuD&u<=L(HQ#v{{EUGQM1nc z1OqPaiNoie*sAsAgNu+aABCD)>C=`=yApc~4rjwp?6%*b?6!B;&V*iGXoj<=&o8A@ zJ8XDoC^02qOQK~)m_-Id-}&F5>$-P$99pdw-Hv+IFx0% z88`#A%y|FEUixfBKlXv;CHM4^A+$@0C)Q-WJ4rO;WK|>NyGu5YyZV)coZ{bt7r;af zxcJk{%xO#p<4SWy1t}|`p?I^mtSA&Tk^|GwWWchtiF5W?{5@&GZmWrVb<$-(d>Y!i z#?C;^!Y5nyX42RHkWPV?6F^8op78ZkJ2``x0Ob*s9{1_)m*zSw0YeYeZEFG3=}dXj zKRco)6r2x=!`#Wd=6AlVUCp-~mveMUTK{fIi%aq4J5Af+gGvl%7md2N0=gJAB4+Cg z!9V3y4C=Eqv9i9)^HOV5+n;nJo=W3}^#rHs)s!zfp4^V>$H=k}SGl~S-H{B^VoXm^ zdg7FgH;i|mn|n_25^+IM(C1|v?R?Yo9dZlYX)4zM7W+R&Zc_K)FH1ee?V14C4ry85 zVQWGPJL>y=04d`6Nct*qfI^32+F4$BvUX*!9&)?dB~Q1D_3!Oo8_5g3Os^9j=%%g} z<+h8YTf&|9&LJJTG+=ec1zvd8n~ezkrQna!hxgO4C`0Fmeof%(Cdr(7e+djAFavLT{_FgvV?@3#@HTGNeSmQq5$W=2 z+gx}eeJFSCE`t9P%KKF5#Tn{cJtyYtKD*C$hZm&dJFMkqOjxGO9Shylsy#tdBf1_O z8recN@7zbD1?WR61pc-Xid85!86z-LnFUxWh6s4HFH!r!zV1?o2f+Lv>*RL zpgHU$gHCVFFd{N`q3t>F)cYpP<>QBA9)J+y1^4WjYU zj}N6Y!OF%fmXSdQ*P1G%wi9V_C;#boWhZ~jJNskeME(O!B>hnSDyOeg=5$ z=Yf|8nkOb`LI%_^n)c%^nk12t=Xt09#yg?BY}x#&m3ft*)lxF@X)MSmk3P~;4vBI1 zxj1=K4%4NvDroaAQ_RceKKrPSKO(T$UW*vFu{Hiexq^FY%|DIk_A&ALsTCYLRgF+Q zdYKICi6UV|K|&c`^07N1TVv&X?vDgyF7#YS1QRTAt%tbebly^C-&4#S!bdFt_@>)M zO{%#UKEYVPR*$;%RcWaVj?JPMlOt9r{6e(!lD084bS%>-eEJD300pG#W2F^vh|>gB z5yD+TK98!JzUc;gDD|Madu&C!pBCgCUSG=&dFbj~m!8?wRCUeOWX|k69IoUnW+r<> z#+N0M=?!Iq6R2HB+HJp1wiWRftG%SQ$>fu5=!LFxwUOv?B`Tw-{m2pk>ZNr!tCw~r_^}l?qR>=@C%r;Ni(~1z;mp! z`AXKg2^x#9v!$@p62s(8W>th6@1XMp?Uk5?gNc$asHLS-p7%EX>xmVPmvcRoT*K1A_~-n|L$m#Aow=R}x_XcgY=eK{LG&#$q_&G2m-a zIk(ZJ+ZEmL(e#_s`7;@ck>l%}?z z20X^s|>!qBha>nRvZDUy7jm7Hg_s`6hEW+msY&sTiO9D;cVsd#w5Hd-Zb%d_P6mMbiJkPKuz5C1j8ej1vAMT^9al#L-ecVW6EDNlD1D8 zqLwtH?MJh$>w79NRmwv*$3ZT|qZN(Wct(JW~wJzY}~h-iG^9y{O(q-WOu4#J3}$uCE{s z`LCHq7b9uXT%6w_zqX2~7>J)|ivWUb0P&YzC#!sUXO@9;6v4NB$j!MHF+8q`@RdhH z*%_qV=$oh9n3YPl9k=Epbw;4d>)8=er-F|EWZu=b%xX83$EMAc#&S5wH&I#eOVVEh zKLC*{Fm!OQ*3LI}a!3FEx#Cey#--}1CrGG^%V^$$2o!Aly>zb=By_B|M@A~wB zwyT2#ie((*-4!xjc=>cx06gGo^=E&B?h8*#W6YLLwN=LU1RoO7L0p|qt&JNL+4mv@ zcE1F19q_hPhT+h)z2{)r_8Zjdq*bHz9bM5-9!F}Jr{o{^m0frp6=_yX?)vJ^cs=oq zOs!?*(*e?GEJM<>&Nv=%oveN6(UE;{>m?!dq!q@T{_+I0qtDqNm9`&_^Z6%NAFrYvNr?>!FS__1XUNy*lQuu+uE~z}QF2`y_2Z(RUf;!x z;{p7NtVsc4-&B(VVN6h!IRQV`u%7rCG5iU$5OUYhy6~}%vIlWA=h@!qM3W-d2i8(nj+`;*%rkZK_7B4<-UVCCq=;QnM6HM9zL9=Im7DPT` z3{n(=D-}Oikk(z2+))w(F{{4p^$;!JF(?prws5lAKSwBIaaienqmtDyve{@puHHQ+ zQtmH+ygTUb6;SNp?9(%rX}DP?H&%Yt;P1C5?|Cx+sNDNP?didx^1x(?6_5!njcm=P zw&;4(#n-f%pI<(TzwWvT;?^#vJ^(-QdA&|^p>{Z=o7B0;2Z?9om2s z!wb-aeR<6Vdp-efEAtOmmHAqq)MuY?iS(xJLOf)3S}^8_nB*^pMA=K3^Bu}wt}pym z%m74Uvt!ryix3%oOEw9Wv)H-n3}y2w4K>LuTqLEhHYA+QmZv7Lj^J%srHQ8p24X{< zEHI!{9_|Q3BkS4RACw^8YI`}6Q@@M4RR2%`YmCm2zep|nXAUea#-G;p6}0@* zxvq+jY+VpO1MIdz-Q~CbJ@NVaK9B2}B_oy+1iX$+J+l+dl{?~D6)tKWC+yOhp=nr~ zh)3_1vvaBw3luod9jZ;Bz5IUN9|<;FG4YEiK8p^B^4ox+ z<+3oAU?8Cz*hWBAdtj@0PdMbz71fQ0NhTjsIOBW9Iy_#2k9pw=cN;P8%8T9Q*M?+W zym%Q~=IQ{n<(XHwhM^Y7A4#lm`QVS@Lic*5fd<=c43NW-^&u9_YGLqZ`SFotkhEwH zXIdZxQ8;c!(B8SYKMF*-vk&Vy9k*{PqA95W`DFO|WLp?0yR0ta95)7o7l>nqaSmZ) zi(ye@b|rEJdz6r4U?m~2RWy_-zKMZL2Zk$5Nalf~d+>{NZ%;0QFGgw6~B78k2KZIo`5BWq}x^_ z#-vniGUR$ZR^m`8I3gDGJ6REMh1KIl#G;JCZ#_KUTNf7;6~3Q@nJ-1JwTMTPhMzb2Z;^7fqLOkggUFePw(Yf7M%JYu_$ zMP85*Fr1Nvq6V@(XwPT-%pIeML!@83*nAt*FoVMch`o`V0z9r?kDy(aqI7l+mVt_n zp-+^au#~*-^-@{K|F|+)M<6dxH)^oPSR*0icO?VJsc;397u>_GsovvO&3B<9GC-k| zAGd@ACt#xqW0Y^dOu%iDfRUhW5rFAlyp1sk&~Bz2DNy;9p&>{M7*Onhm-X(}4dd_U z6TX|EEY*n3^azN;c$P7=~Aku7LuPo9yxy?4RZ=Nl}|9IRSI*etcm8l|GjF zutgvL@Z1C%+&7-8>b9D~kxWk@w7&HVfECkMxn-3)&bA%<6S$MtfoGGa;|&|b!D38O zIy{VC_a{UJRRe?)&1czP_r|z>)El|}I)0IEmG%1JByAU84e_%n9{w;NwLl>nLm&Vp zcv1FKS-M%@vL@pq3Rks~%$}x%pJeAM2QpndJj${%KN`9kphm}4`3-eSiSlt})AxeI zKAHY7Dg8hPAZ!r?cC-<432k;&0U}JO<>KszC}s*C>@y2vM7w9)RRgR~oXkrE85@h{y-k?0ZsSVhA z`KLF35|4~nF`ngAYWKhb zjcFUZ8ymMK#efKj48FfUjyx|rW!vP#vbZ=&I-QJsJ~ge_EopvoI@HDgm<}WSr0{Sn zYChtFzzDw#>tQcHmu!|xLEIeX>472-^QqokQ_knmw%d4Z9aL*n*F#uL<_qIDp5eCw z9cUZ;rLyf(@9woH*!*kQl)&4brr4|C! z*Ke$}e*h|uXmG$;RZ7wy@TJt=oenOb8N2wPQ;JnK>MqDQKR^1opakxik1Cm9j9M*P z!*WG)2T!8Zo}w^+e{%Q-n)>zN`jf27aLc?3jwE3}HY+ZvNyORRlF`!+Y$!yc1QBHN zd9Y;8oty}bv#ZB5u2gFIMLhO^qgV|>EgA}&n1D9%|3E(zJs{~vLkYOJ20&*onDuBP zLyoJ(nr+a(Ge4nQ*UQYUK2bHGOkuf2zXZ%KW3?+3g6q9jmO7n__bz82eHkVjM_T5v z8d9mstK%r%%EUKmnFFb5-<@?p8rTm`*g66fuDbIN-bLXxzuhzcFB!b?{(=D;F^lq@ zhn`BJJ8A~k{!1^`wZ;^Z=rD8&0EPfh#psLYan?z=~f zPyPuZz^ilXmsh9v>Gmmg@?TpGSr~@166fi{y?4DjR&>*Av^TfsM8KPQGXT?50h(aH z0=i(o3+UWDvQoR5$5ivignUfl9DQ22!NVu-(oF%Di)^{3>(5gLWRrI|#54@y z^#Zu^W~A)8M>-diA%IJXl6!?X^qq&7^+Z8*8R_U_lRtuS?|}foUYe_aS79Dn*Z6Nd zVG1N_y#NV6nSr;I|4C#3%T<;Hi4;U9_&NYpIEFuylGhYlQqw@5n?AJnHKpi)ct4K9 zRUqC^>Q!V8pwGF%0KNO$s5BkDrBZ2PQbq&>$Wh;l;+Ie6tA7Z@!x;-YhF{^&sN+scdL5x3q*A329M>JalQ5H8Fdl6Z za>c;3;{E$O9lE1Ed;(3<`0S9yFApkQ(QT`0qrn@&*7-ynvB|u>yQ*CN79O!hi1L6Firb+22G4zqO2YV3Z1Nh1JNHD`+8BZ}$?8J_?W-s0>UV z5II%JRz?$#r}#5oux#l785D83_aS&u8kf0;xq64IS?@4P3XjRb!jFeO|BC~0j2m{d zF(x7Sz5h|omTHSz;j(W+?q)f`n7|&b!6s6Lel(A2Eeaip4FRyBQmalFg z6&X_Sg*?H2zih!ywP^>cszl;jK`dR!)pPDwDflE7Xm?G^z`IZVV+1?VrT5NtS)`u6 zosr6yD#w<^$B@JXOD2*&$I~);(9~VrH5r7!2YrI3%CzeEh^RpUGy(i48jCkZLWqHq zYT8cv!G55T=>{w&mZzq6Q?gGRaD2r(pEn@;L;)K48C5Lw&?5olZNU6L+>%88TMCIX z3{~*#U+D9D_gbOq{b`jNejiqkz$&YcNV@uG!j9o|kqV2z&8FD3?+$|qXtjVj7t>nM zkK|}VZT+cqwLWj$EhwcKFITt~l$&kY=^(SFcftB0c8G`YSX&dwZyF` zVdr}2rj$0p-a~``1iwx7bA==J?zd=OCTNUC2PJSkldNelxZXX}{>?oE8r<{Nm|1Oe z{nK_1EFd6z$walnFUeYL2E1uHE1$R{92%Nw$-8`ajYly?j7`q4uVN|(GxQrzo?@PSJ?nLb0QTAW$3VV^R1tP%G8V_YGajmK-9GeYU)}x zf6jSG5BHS6-{u{mhYIdrY-kj6Z@nu%mGfNt;*v?D=+!aDXgJKk{kf{Tx!4I`Js10J zn~}^a3oEfU<{9)k3q2kF)h58WkPx8UD~@B6OZjq*5A)>_Z_@U8|37tXfLEimipIBa z+18!r-DQ*X1Qdd2_j+f5@{GYXS9dBaf8JcIsGV+w*5o{gR*v3;*1}?x1m%M`JYaSw zjMM%ks}?|>{#*NPo|5>Sdh|k+&hTp;GAo9S1YI9OZ*vB0PboJBjo*ot8%aiivyfIgqV_B_h%L(K!o?7ly=8j7mFmjM3lyF>@%`(EhFcl!CyWsmLa!r9OU>*duj zal0>z75pkk&(r@?Rs>M}hjQi)=1($qH^83WiyrvTx6f@(M zeO^A@c4vryRJN2I=mcNot~HQ@E*Fv$YW|c1?|X1Gql<+_9fH55Co6{VkWRt#1LS5a z&m5#&b4XlA%v@-MOy|w}39YgoO~VgHM*S?5Z5snZh3`eLTJrJ=HZpT`AEd!0e_aOT zfwBC*9C%<(4u2zH0MAx$^s56*jz8StkDsoJ?iw7IVvo$Zu~kwO&BfF0?*@SC$yA=|P2^^-4E;V&i2B_^9UHBs`eYbDFNiFSB#u6{;@HZQA=Amw}ph)wB4s3S= zsQ!ryHn(U{S|`vmS><=4AhGq<$r7Sx@<@j-6vl@=UvcR>Ae3g|PEJc3)&xSu@vNRN zu}@7x8*jBm-vO(0tHggwwjSdM#3b`|ytSTCPHE^Y7k&_J>~ZtrO|UDWHt0>R8=%R? z2k4=hP5D%yxba+~&ZeAa(xYEIurMo$qF3+40!Iy8ZpM#l0>Ru#3!;enUjwnh!_>Scbi0)`GD_nDuAA!LJLxpu3hFQOm8ar@P?WZQvsFz2jWjsa(st zH_0f63#kTMtmjmA6j>k>?5^y5_7YXx5gu*2Q7O;SZkG~eVJg{e6LnpJybX8iRGXEG z9V^oUw0dnV4MCM09?FS!Z8`sfje%PJpphJ3?3clF%8WD1>E#D@va)Wj;_-3L&6W?u zwhfcRx3HosbwgvH*XM^n7sfA+mvKg2!aZlC4=}z%-%DkkROELGEBPu{o9l@zR!>b$ zJomPhCr?|=agecC9{%2PFQP2*?YS_waav=iKc%e^ar}lYy7oogMiOi+z3=1qz~Co9 zU@((?lO(M~QjB*78uj<;7{b3J9^s>3<@Tz^-OUdp9%B@G@w+W$PeZ?%%P9vKgKYSn zU;p=*^{$15Qnl>$-f|-gom2#KaSy9eoAgci znsSNrH?~;TW{Lahc+T6iZk?;XRsQ-Q?r~+pjg*udJojF`y(QykWqLZ=bdXzd?PF53{Fp z$t*EYx@_IYZLfyhmeBlBR(;n9^8mkr*8fZmvL`%n5K8d+yEtkUS2~ zHYKwZ!1zPZzXjt%$Z>JSML#ck%q%P?EaPtTf5X34c3U(7XF?7o-yGydw*2?)CYrLNQJdd1A({+qs^E)s+YQkL|pA#$G5MC zKY}>n(?K{~Fl4@Wx!yIiBkT6|y0x+~^C>tLmCtGTUl3ho&z#RVa+%0vQ{UD*VQNtD~oz)j?o66lXVVUfnocC=h) zK7MVU4R?l5xIi{2bQvU`2sUYFS37aZleG219}QbtMrt2Y@n&4b2!U{0l98aW?KKt> z-@~JqVd&hE{*Wvg8LhhQVpXZ+{;rj+X*`+`Ze2Ut(2Z+=E3GaInMgXU0=bCoOHMOb zAqlmruIJ)s_SU~I<}jL|)7@L*`e0()i3lBHk#diuLMH{K47OaKKIKu1`J^SJqCtN$r!Pu7puHKN)u1ak zoA2F>w$-vtH*DVHmbZWrm*02 z**P<>FKWjj#-JKR^|x*{=nk@5rKQrH8dl?TE@U|Od6h?RMsSJA9HD#FcW|1tyk+y8 z#-cc7Nw#s@Gz;kpjXvv|W>_=m+3YtkByq{!6@S9IPcf|h`+^sVb+4p}c&65ljt-Y| zca#)TzFN!+5(QDVamz>vi&tqcZ35VRAw2_6L%u#BV^jZF>*JyesY`l&t|w2#rmuz{ zMVmg_);IAdFDo(V(o)?3>(VC35w5<+alyYe7l~@S7(8F~4@Yl%GODk|*0X@;N%Iw6 z_Rxjedy`HZeObsih~?(qz_Srot_u!I-Mw$LZc8s8S#@Xd(fN)(miT*c zzA+Q2IV(JSS=m)RK~(O9OGYIJsW6SxS@yu)#KrYSJ$5xLn!I&cB5|?&aGEoVMb_c; z=^{=s9s5Vhkn~48B*hh{9ON=;Cj8r^5WuOZsA{|*Z$a5fGBF;g#))F~O1*-T^5t&8-;WdQg{h=H~3#m@Hz29C1C-s>8YQyc0HW>e92bIvXkmd+?pQ z(TealZ6+Mo#Z@iCNbv*NuB$@Xvw;n;KAEuU&Jc!L+aWO#VO}T~O54UnvS{+1<5mFF zPnkDdLxTUD*!g%Ff4&)A=iey66L9i%J(#SECVmSZYx6a%x%3oYa~og5!5jTTDH^(* zUf(Q1Y7_-}s(aaDo#mrlzZoy)A!9QCy-K9L%i4<=Md}HO@+uGIP zye{pu?WwPN*@oMZaNVk2ILy_2235+5LRdHvhBo{eop*?gn;qnUN=3Ba%T;y@0ixY) zH8t(GDR16i$fge9*jufg(LnKwZ0FT!pq;pyX~8ExUx>TJTtJ}f+9Toq0&ZD*az!_J zsS9RAVt`E+kgK-gZhWP95D#>1&|xSVrZ za)B((fLGWTU5zQ#D1xiAERoxP5pJPfaUhu;mq=PMPdVP zqf2t^$8SwPzf8iSWY{|Z!BgKM#WRw)l#@;{L7SaGS{9b26%>qwe;ZRFtCY0!1Vi@?afIzF*H=qwKu+LimT8$WatVW&@kuf$El z#|i6g8S^P@Vu9I=!EeG_cYscE}vpU^HAOt^^tU)UQ)Lb5|&X3{kEGMw&L&?c)f; zRgyz3uDOys1U z_m-q`!~PBJ?*RFOH&K1K{Oc${@7wqOX3N?*k78jDUqiLNs30$iuFYCz3>+8SV}w|+ za0ST~oHPGYRCMJ&E29<@HFY@)2RyW9le4^y?(c6;oiwy;Yd%RdNk{%Rw4c7( zBF(%8a~0nZ6RBX3-kk*s+E#A%<=oM~$;ztEltn1xleHgUB-w4ccHm}PBVWLA1KdfCYAxj(($sZU>)tVCc zwC$U1-t?uLIHsvPLw324FS*&O?$qVK7&|khA>n)>1Dr^YaDLn&g}PI6T8=QXetJ(u zqX;O5G_|Y%H67PHdwF>N6GpoHDeorE}*1#(Q! zAzc5oTj0;C_wNB`6ih%eZA@3U(sKS*Ez4Te*WJLV zLJ`}<>?lk#cr zwXz{-l3sR`+rj{D=}#jH`NpQ!wOPmn zj!#=_(V$H^7*#sP9H7w=yv&~yiglO-tB?kzqrLXfOXUV7K1y<8yDJ=i_sk*-r1K7+dSo^~NuZ&U0wpg&rj4 zv%qoPXH6tn)pi#k8OnvafOespVRonB%tN_Ji&(|e$rFY4>|Kr>Ew3@E=5w>Dw_+BN zZ-~F?cYiBo5{kA47;282LfPD*Bz2ly4R6w?d#$@>amA;oC>uX9k=MPv%Ha*^!SJXJ zj+Y-yn<%`?-enb{1p5@R5DwN@NCEZPfQ;PtkX*d|?qpqKgzHT+XGb?P#3zaTta9;u zh>eq(tC78A`FL4Jm^EZIjI9<`8zz@`IBYsZG=x;_9G5gQ9n~tLmZ|M5P&tDN*milnGoi---OH=v6)Xp-f!3=&JAsEQjhIO zSo)EqM7ZWkr&iV{9~oAsa8|?;uiWw71JvIS&;BA}>_uVoUOhSE7T!IoQ-}jA{R@XQ zclOJJ8innRa`^%6*8Mml1YOL3pkU`SYvkeU{AmySfi zRkQB(nHfIrZodaj!!xVb1E1#Qy3Lj?;?Ug46UscktEO|1Pw>%=rnTyY zX3Odwyd^SL$My1I5m)}hokQIQ1P!_Y0fTD4x!YoE=02X55ljLGjeeRS5JIO9z8)H` zvBKJuI4ybNU*@Sny$qYDXmTY}0En;oM0g3W+9PqH3ug#XVJ8U}su^9z5i5Sa(9nMUz z110kTI>;@xODkK>>w%&lZLMjxR?aS_k#;T)t`bFrZwF*|jL8$x1KCC^M9;BMiXLg5 zxb!d;&?Bdd89LZ?;Qc%U@oWAy@wHg6Jz-KFbJDh%`&Lu3WI-*SzXxwBg>TffFc!^p z`sdF7hkVq;hZV+h{EBZei?lqwyusiZTI6wV9;9)RrQooh+9Chi_)c3vkFYAVt&1RY ziRCC(#J;(1(BVk$Z&VBbsQQ-*=;hRahb{CV{3=f%*jU)No)NS+ABZMB zS++0Rkb6PU1070=%G`+tm7Bv%l#P7pI@={?PwwTWra6 z?pQa;!zhhY2TTXqS>`G-&%lWpMQ&Pzp5pN%y2{%hG<}(2cja%LhTnPjC!vK^km4Ml z&nCeZD2AIPOE181bD9Jy5k+Z(MMQ|DrKR-n@<9uN*r)o2*vp71RiSFuCo0LtC$42+ zCbo-qtXplr4T#t)@r~(T+vCI(>H!-P4`ok{Y-De@&UKe>PInW(PGqmf_AIUktv%MM zU2WH)M?yl<;LKT{jEgGHz)~$;`dROvWYDRdYsl=9T zCy|TJHgRG;FkpS;i<^CYn-OwaqBGH=h;JH;4kB6)y&(sbUpSnCpHatkNH_gSaTzb; zUZ^#@nNH}8oq;c@6$K?vL0oDN{{i182X4;{+V{@aY{HuZ$~l4B5TV`64K-OvMA>SB z=)@XAVy*kEZI68GG~e-tP{bo;;XhbdAj8!s4xPpoXOBbqxynhaw6)s~gN$pg7LWU# za8rw|Y0X|L%5E}q;LF4osoxmn1-^&f?KHpP(I5Kdfp?L6r}sOv{cl{b|E&`Hzmxnh z7yV~C|NsBsLgmAhiBuJO`!N5DJ-c?m|K|sL*$3iZ@S-@+v@0?qVuE*`lU30B66X)GEF6{CE0Rah61F8JEFk9HJ9iBq+$cP9wS>=xC#wW_j+2#x&G zc@_hG4GAc|{TB#gYEkx~zdgoTGwqrWDcmhQqGwTkaP36yRN>E6orO0x5*)ez1Aqq@ z5WoTe%v*m=b+!gXMb#V30MF4m*mSu!ln2POESSnu=*z}564bL6J%dY00Js~?mV|aB z4|y*4nr3zERNHkuCiE0q$4C75D7xpJgEO0c{P{h^fpUtJ4_k-68uR#o#YFGt&o|~~ z?n7T0Gbql8Z7&63q}Bc?EK@8|2o0o6a0L2yD~xSmHxb}#qM~aUzXfBBYhOZbO_7k zm#^~7o7#N3OjOveMscVQlJ|Yzhf?*#wvymEU{cId`DHm%UF_~46Wi>czwh&w*5Ldt z6>zqpGxzTU=pfL$=b&+>ffQqOP57x>HkK5b@ToMbt~Ih-0DwopGx*`P@ZFa#WtR?l zC+gxR7)YgAckeZjB3U!MAu7;pyjOnL?ljziz%o=_aQMA9Vs_uad|zfj&z7!b#Z0wF2Uvit6(UC!ly!QAOVXG$1Ofzt4K@{%p0MVlttkQu+(H gW&>{>1VJ04+HSYH~;_u literal 0 HcmV?d00001 From 07929c2005022bd8d23505ece0c1ba50eabedf67 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 27 Jan 2020 16:14:58 -0800 Subject: [PATCH 051/358] troubleshooting section added --- .../create-a-windows-10-reference-image.md | 9 ++++++--- .../prepare-for-windows-deployment-with-mdt.md | 4 +++- 2 files changed, 9 insertions(+), 4 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index 6aa1fb11fd..2686994547 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -650,12 +650,15 @@ The steps below outline the process used to boot a virtual machine using an ISO 6. Captures the installation to a Windows Imaging (WIM) file. 7. Turns off the virtual machine. -If you enabled monitoring, you can check the progress of these tasks. +After some time, you will have a Windows 10 Enterprise x64 image that is fully patched and has run through Sysprep, located in the D:\\MDTBuildLab\\Captures folder on your deployment server. The file name is REFW10X64-001.wim. + +## Troubleshooting + +If you enabled monitoring, you can check the progress of the task sequence. ![monitoring](../images/mdt-monitoring.png) ->[!TIP] ->If there are problems with your task sequence, you can troubleshoot in Windows PE by pressing F8 to open a command prompt. There are several [MDT log files](https://docs.microsoft.com/configmgr/mdt/troubleshooting-reference#mdt-logs) created that can be helpful determining the origin of an error, such as BDD.log. You can copy these logs from the client to your MDT server for viewing with CMTrace (ex: copy *.log \\\\mdt01\\logs$). +If there are problems with your task sequence, you can troubleshoot in Windows PE by pressing F8 to open a command prompt. There are several [MDT log files](https://docs.microsoft.com/configmgr/mdt/troubleshooting-reference#mdt-logs) created that can be helpful determining the origin of an error, such as BDD.log. You can copy these logs from the client to your MDT server for viewing with CMTrace (ex: copy *.log \\\\mdt01\\logs$). After some time, you will have a Windows 10 Enterprise x64 image that is fully patched and has run through Sysprep, located in the D:\\MDTBuildLab\\Captures folder on your deployment server. The file name is REFW10X64-001.wim. diff --git a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md index d390c86c17..ba80eb37b9 100644 --- a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md +++ b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md @@ -156,7 +156,9 @@ This will create an OU structure as shown below. To use the Active Directory Users and Computers console (instead of PowerShell): -1. On DC01, using Active Directory User and Computers, in the contoso.com domain level, create a top-level OU named **Contoso**. +On **DC01**: + +1. Using the Active Directory Users and Computers console (dsa.msc), in the contoso.com domain level, create a top-level OU named **Contoso**. 2. In the **Contoso** OU, create the following OUs: 1. Accounts 2. Computers From 42a591246772423ffd7df2d6e6bf739f3bcb1a22 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Mon, 27 Jan 2020 16:22:35 -0800 Subject: [PATCH 052/358] this doc complete --- .../create-a-windows-10-reference-image.md | 4 +++- windows/deployment/images/image-captured.png | Bin 0 -> 55522 bytes 2 files changed, 3 insertions(+), 1 deletion(-) create mode 100644 windows/deployment/images/image-captured.png diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index 2686994547..0f4be2a068 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -652,9 +652,11 @@ The steps below outline the process used to boot a virtual machine using an ISO After some time, you will have a Windows 10 Enterprise x64 image that is fully patched and has run through Sysprep, located in the D:\\MDTBuildLab\\Captures folder on your deployment server. The file name is REFW10X64-001.wim. + ![image](../images/image-captured.png) + ## Troubleshooting -If you enabled monitoring, you can check the progress of the task sequence. +If you [enabled monitoring](#optional-enable-monitoring), you can check the progress of the task sequence. ![monitoring](../images/mdt-monitoring.png) diff --git a/windows/deployment/images/image-captured.png b/windows/deployment/images/image-captured.png new file mode 100644 index 0000000000000000000000000000000000000000..69c5d5ef1517483531ce12986eaa9693a2ef9510 GIT binary patch literal 55522 zcmb@ucT|(x5;m>}1rZeKog5Az(wp=W0cp~ucLC{5dQA{%QX{<+rT5;eQi6bh(jgQf z^d4#;3H;(Y_ndq0TKA9d_pNU&%A4@!-Lq$A&wien*+gk+C_T7OcmLL{TMtx}pTE3y z>kjzVt=k><@Nw^yR9fA}{krY>Qc3Ps)hNR@?!_HDS#{Z4w`w6o7|Xl3*Mx7BjXZDN zdf5Bx`}Tla$?IFUW_?wj%j)`>?{yM&Tm7p%TSaLnQn|l*9_H8dWLt03( z-S?u-_u}#^Vl-RE&em>I>f)Ok^&`1^%wd22_|OpsBl*|$BRS<jjj* z`{&OM&;J=-PEb`p7Mil#6tOd{WPThp{vV?bN*M`&55NV%FY^9VVE;NROvPe@kQUdB ztNNq=kffmJqipCO95Ww87{%UvHd1}QDmZsgK?4j`>P$&Yqz7gR$ip4-qExxETf7nk z+4C0ry&h%R5%*Zo6O!V&HC z4OUqULPS!xY>izxH&SxdNd!^8QPbznv2UDlu|5K)SX+=>3=F7nvy9Jtvf_9gFi$$^ zChKnLuU3$1ewH-

JOZfKEJ6-iP!B&A|yQx7F?xr@2I56c#wS-4sR@1LkEP4@Kn| zsDWg08hZWkvQtGd`6*)@jih|UL*Y!IrTcawC8D^rRK=lp+H6Ok*H>EkM=SvQ2P@_` zPP#AD?yVu!pljLIHvSXymf`UHOF5a?kKnD6>p@-Vm+|0`Z9ao(qP_GV9G?;FKlaEl z+cuqVAw=E`_RI86pi<-QS(p2819JAv`IWt9LwfAK_o{UGWB6l>j&8Rn*X$7_p`bW48Llmu~kC+lQvrgIhsxqT{YnESCscQ-0`$!UY`_%0(_$vGI+ ztLBhMnyLg*ZQNts_V(;t{AU98W34GTk5|#K69L~@+!{>XW_jI@DlIS9@rZ*iU!OO( z++3ptY=)8zv$<8%`wDF^B_UznljI=XS)(LMXP@nc_Y}=EPRj`tsHUjeCB|!>}wCo;AtB0>nPQ< ztD!f@G)DFcC|RJP47V$ zK@6`1bqv`1F%|Zh+R*EY!%)|Yj0%hCd$yl0*w4`q0h6xgSv%ygJLV5H!T?M^x+3x8t+3=xkQP)-=H@ z+LT$dSVW{Sq2Qm~l{EDPZk-0Gp6NG$uxoNEiwDS9&{Kx{e%qp0Ly~jB`wg1&Y9K_u z=)zII6E&CdE8z(9rX2RA<*tCmrWZ!Wz`pk`F{)C*9o5_gntJURZ*=nyFSVkK{^wKb~vq zR1ei~!c0z2b57XJe2|?L_;|-8Ksx4(MEX6STPN*sb=UovU@R9mN`Z7E$1mvJw=HUB zUJugkuu>wL<=drI&&f{w2}}aOhy78aIX(&G?fmCyjCD+{psP0Es2pz#D-`X(Ol|B@ zy8)I6QE6hY9gUj4>;GM$Otm7`t7+i-op%WYI5<#oRZne;72&!K?4<&@ozcINE7l z%6dBu8)vy-Y+CMwn>^pPi}8bQDNA4tpH3kTSs1xMk%uG}hWZyF-BNK4SBo{E?Q`h- z!Q|+d^MLPl3W`G%4QJo4DPJ#|u;aF^M2EEt30m!O1`g8+C7H8zwIn^nW{kxR*~!@D zU0a45yh2S)DUl}bfE$yW%7VxYq=lN{7PUYG5gmQ7Oe??Y*&nKT4?+=Pb@J0J&6*Y$ z14d%hMp>0UEiO8iLa70KV)D%cy2Zlx>W|xP-^KxRrhT`aHH|?Z?k8&UEo;RuMSR`g zUK@ywPd0ix0O_(&L*~}8%p@rdghw=Rl_sn?gr3SjlMZod)b=(S&^~Rm{{n z@>t~iBm%qNs9duA0Tv3Bc?IBlw=P_rR`r?RB>22RM`@gG?wS={g1CqTa%Z7G zTja{mV|kHFU25$&#Ar72)NaPB|EUs*dZe{rK%LDsE`pIpMG5W0ZwjA!O)4*VpTrHV zx%aBABz0d%7gGR>VhC^U>V3BOaQ0>_9AaKnEp>A@v8^Q|gtnIGnd}%}SS5Tt3r>v- znB;pzBYmZlWJMOHbCw(Xgt(yfTW9Exnl4rEz`ds8RCY>MXg3LFooW^59v=rFlZBeq)ZPHAC6y(gh|foz^Qd16!j1KkYRozT(XsNSSFVyu>xQ#a;eWzKu zdD%ufA6x8FUd$WZj=fYHmU}!zfpM3`aw&Ig&$9jsOG!=X4;gDA;r(+k;^P zyE^b9CY47If2=_#J}x|?r#B8jo830f$IURQ5SyxK7Bx%# z_s8Wak(!%Xcn~h?Y#{SV-gep?wS4fpu3I?zc$|&p-j;rx3WS80R*t@%Ne$N8S~dvq zC)>P<-*spV!0c<$%x^NQ&<3>QEx%eXmmem-eq-0HAzI0L|8Vp3VQNIsawkl#<00bw zGA`!fGJte`3)UD2K($ka*R*pps~b(e!6)g=kNr$P zj7DXyD-{crmt+XE6L z?i>20%ZuRtf?#wS!&C4A$1*L=QG&*A5L&Bu19zFj{M^T!s_c({A>7s%)3N`CxQ{$u z|2Jg*{+}pS#~$2fzAJy!@Z!2gTAEj-G0ZL8T~@!7X1sY z$-;Ye_QmdL^_mW~Q}L@W?RXTV_GJW>(RzTLWGXm38E?OyaK2dk+Co&Ow+F)opK5Qj9jF0>Pm25Q|42Zg zcpUl*$E#3n(!-A{Dz7T&+09hkxp^~xP~2_Lscn-IdYgDr=EBVHR?B1qUomKNJF+ zCOx*DZwYH2g9-apGzjz#ykOs!wrPy~xF0tzBVFCi;K227M#M_#F@Vw@Hu8&)Sy)Pb z<+%0uU1zpobvHK3B`)I;6AKHsg{_uQD%llhEvTqVw;meQ>_VqD_&esM{ab)Rdg-xVvD8A)rw)m*A*Ss~xdA^O5 z%OFkMsg!&QCB9&6Sw2EF&zbVD*;qms5>7|3?Q+hK89)s1E<)DNA8eSM-*V`q*;CTZVs~%(5Q1)rL zzS?!a!Cn+QUl-u;rO4z@BnQcA^w`*EIJ7_%kMqT%klko3JrMtdz(qJ+)QyRbj*j0N zMm#w=DJI?<)wT${!XBsR27v&%v~2(=Z<()E2<2`jzvGJsSFsh($3E$aT_0=a(EMY? zwfi`lKYdWDS2PBdss2JM4fK$!52XPDz$nY14NVD{raDL%zw?3<+4LITKrt&CoeqEl)1bUX*?|d4SGN5^oNooT%nF3yadi8T|-$R7avm^N$@pB5^a^y_hc=>+~$wdRkZ} z9}6XAQ7oYqEKLV$Klm^&&BcFF2~TMwX}dMUBSF${!UsE?$&N!CSNH9gSNF`TJ0Z8= zpZ)Vw^8yyNDz3Ij*_$(-cn@>u%JZz>-WZd0x_n#MSyI064%9AcyMPkEj@Go^5yt#( zPG=G_GvL;9)_m6AsR@1yv31kk4(NPJOLDp#L(U7*to(P_@%>tYtatAQ1rIh_dyuCpJAOQWhmzVAbWsY9^4N zavhs`zWU~bR~7Ew;!vJ>MjrkZHfB>OAT655&>5MAm}3q^_NmezP5yl0yzrxJeDU(T z*20w+twxJSrZM|JzJKsR0AUyBi4)(Gb5adDQ8a`2rfK|Ux zbj;=l1G*%==$X)7d{sdawx%3!vhSO#W(sCB;Kg7g*8pOX3^W`Sa(C2jsk2WIBhI>wd0& zcXR1ph8$Guzgj7?P1(Rg^grzaEI#u{i>}&HlNeb3J=uGMjDl8}t)elGL%r1olKxW% z7@u9!sw$`v!AnuRow?(SREX;Kgb0POKKDnfGv2 zcf2#O08QnmS%7KT*x3A5!m0Ve7*xTArY_#=6O8$@5sFs^gf;bdgn%7H7n4|gU$_0} zwB=U9k^pvDz=Pe5H4)qzDb*>?tDMU~=6l_W%)D56bHc>nIv*vk4o}|pY;l*CfnzzV zGA>!1s~Vx5^$9^+&B`Cq{mH>8t4 z9(Zb#yrZT}B}2vzG#^ba5ErI29(EYr~IQ}&?i%S{cAsOQ4Z zrbh$lBFiiGm*%NMi?I0JT#|U38aJem;|?OO8pl?SQoF=DF7GmU=%z6vlw6H;V44$P zw0?EbV*1t6Q|}l9$S253n>hPNcn5Ta#1k?A*kFV(q1|Bh?FT)Fc32Af@=&{LocAa3 zGLcP$^6CB5WFv6*UB+@A=RZcCwEg6uRQhMLUtnf|L24@V zv@?L6`hcEhp#7Jb$D%7pn-M=}ZE2=li%-frO>;8)2$FqAogkLHVba@`k-;V^>+M~TIS8wAr4@# zTLhK@pxHv}ZE@cBDUR=>H})hoS3bsm(X+$?F3AELgS&NCszIAzo%SyCHXv6elU^zY z$JzH|%_RM2p5O?y2o>UobhGvA-Qg`GUr~I~uD9m&ZeI@V7&ns>l_&SFFT+9BZM)&1 zmi)2X3s(!~r}Tl3E@WiL3>L96RsL4=RRKX2r|~t7dHGHi@uxW9eJIj%=K^6zmYWO2px#c9=W&T+OLf$A`e(XO_3}WIo$xEYRQ>aY z(~3q+MJ6FG{@TsfSmNZ4n!a+`(XXDqdXRo~fW}=>n+GvUN65spD`IG4n!01nV|e>Q zhsOrIaklc-8_p*C_I%N`)q8kKUD|gAqIuYJCfy`i`x$|^0WTWE?z&$?r+-p!E^qh! zV+mG+uPsOx=W=_kjj_dgPRTx0hOm?Viz3J)+zyHPVr@TnCg?bvt6gSrJV6n!yiVTbbfHgLAvcIV}b>OjXJ{?Z0T4=9YIlvr;AcZY)ggqF0Zc&IGPx zYJ$VgQdUTOsKy1rRlxy~0jXnC5Et3*+CYJ|5zRN}DPuopd`Dr`*A4jHZD`eOcW~{0 zxr;u|U79`NGbyQcQ8Y58nKE*?SigdXgPtFx-s_r{BOjkUQak|ot+CHH*=CU)oy5mAQp?CEJr!B00^|DMCt$|G4T?45$ z(zJ!<+udFJk)UbRCHoTypcY0k3mJt;@l zFNxNYe)JPw*{{VtVVr+(*m)hO7I5hpyT44y0&S;}&lLw$OZz{>m-0zXf~zIB0YIle zk}3bfWusz;kRJ;Fu1^h$*EwR=1aXnwS*yhRpDm@pn#1tlH!-s=tIVP1THIOwsafGJ zrU;YkkUDyL|M{MR_isN?pPoeL{rxqh^MCxhL`u(pL{`_ZtW5g-&OBa8BP&!dm9vsR zDoN8Uv8k+yLC<@=q=^;kV;DVt!lhzpni9|I(pX4WK5DEgJlf_MW0@uKGNE zJy#jmcOTTFbAZ@;Jc40ubMuhYRQw+yyGBE|-@FN#l^amK$i=Xt&8R zh4x>=z7zrH9+=7Dl({mlX&T@+ws~cz5Wx7CD3>4S+X8f_CO_uYks$^k1N3gOJx43O z{C-ETi0MTrSQLp3cI%|PwjRYYh$rTiXzRM|?XR2`sRa#aC!-?d+ndAFvp{3SwW9&U?FTdC9 zD=t&pYvSIo2`pr`549+!T9YXeo8N@S`b4{s4+=Ac>|m#BNt$K+xMB|h9gsEY&BtVu z{}{jvA5olFrkDW~7RC+Iifw{dtUI#b{XT05DJsH$Dk_>+SU5+>7UrdoD{gGrj@8)= z^E*v*7Y-(|=NA;*F>7O`P`Ssf@=JU|f)}lKFO+;NZ#G01x?2_O_`whL_4CV$sJze4 zaL-;(wPJ8|l6O%Tc62Ob(93UXQdH@_&U;dJ!odZDq)T2b1y(1zUVU{22!P@x55(Bn zn8Th&!bk>L8J?_DEdb`iv02M+ZZ@cLzMwd&D-;XAp-L}QNA6xJi_a5+nXpfyXm(hO+{u>7;>_5w@it+lqnN8>Wx zrS+fgD98vo%d2S9Z5V3hFish?c4;c}K0`#lCVQCdL39Aw>$x6rYYFy@8GVJ({Td4` zbKDImGo}SLFM}mHIft}$oWk`C0;-yyMDJjRaAB)HsP8BN-nFJ*J+57t!N$O&=vB%c?y<&=00>|CgG3 zP^BeuHif2|+b~Uq8f1NgsD{Tu*Otf+YHB_5_EHS{nYm+p@e@v`p)%w|C0uRyL?xDC z?!ht&b~a57vQ@Lo7Len(RQo-N`S*Yf@dM6Ua@RejnB=CB{sR-yQC#IZ;9jlr97_D@15xiwAPOj|?)e)-#S#5Y-95f) z&uJCe#M2(r(aX`xCtxtk+#jOnk=N*A1V+(&6uJ^iC}KT z?zW#x`~kPDGGTJ~*gTQa_E>i&I|mU+GlCNL7^pD?>gns|)x9LnbtGmKA#Pp-6AW>2 zY4PC5eI8C@7b>+)iXyHI`Ruk7xbR%UQdB_)JkRPJ{hZ39xq7wRS?xm|N0UH^7@&4D zqX{6UxM1D6to?p6yKOb&7a+0hqKDkvMGg7zDq1Us8((DnuAwXUXB7~2)X?i7?@(Jh z;=@=w6(;k2gtA$q)9tRL*)cd7R|mBHyADXgEV4}lv^vW6Ikw0{;jydXYS-LyeBY*8 zH6#g)cG(>JeV2$>9VJ#17qO(2?HzxN9e(_Nd12>a{d*T^hs5aM5J}3c5?qe>(hRX0 zc&_wl-EV8w`f&=DzStVR#b&gqROhnKUW)V#gIL;NlGC_Oip%Qm%SS#KsH{Tj7{m?D z-yb{E*PD8IDl^!o0W76&D;--h+=&u(vJ&O0Y|L>OdzANt(;DYO^)|y)HkfbO{+*3X z-GxpYNkT3o$#cMMI-o|n=W4Qt)l0h{eL?03#j!(SnvU%SF(+{!(ltKG*U}#7Q}5tx zl9`1cYD^ccGP#>**2Sj2t97dxrymj=42dObmxXT&`FbcJ$2R=+5?_sI%0-th8^FwRYFpVN0syh(+Yv0#9{ldYigh zHWE?M{^A~RyTGqipx)t+wpL4AM~4f6f_BJ`A!2ioJ!Renv$Y}nnne~k=;;1wEDfg1mPa zhAq*oQzlD#Mk-gsI?(GJkDb^C2-yTaBS{pTy5<24{FN97Ci9qPkYHt-U=#Zl1va+Z zE*=7nMkK1v21i{DU#*t2?kxh!cr0Cx+yYm9(159*mrQicQyjflU4*#(uBNJxbNzw& z6b-N2SsTJfmx)`+MM0Qu$Vqy}gsFbOZKI3n?9h=oOaQSk^ZoU_BW?criZI*773Y%>hKoOcwBMTEY@%-I@lksMaOh=%)RWgWsqEi@2 zav16(44p;pN_GW7BB_9O)5AuHNve+B8i>N{+t&U` z<5WH9O5{%AF!A6;bt8`e+peAT!l2U*!FF|+r@?oh`Sq4Tmr$5)b4;lV^ZrY8RZ`IM zAB??MP3*3|9oQo8iKhAO1#DqeF{hK3nO?pvDwalu*mudDp7Y_*zQt5YRmqR4=4^Ne zYd0^HgIws{({NfKp?g(G!3gnjmR#bPna|8(+mq<~2J8ahJ-%ih?DMUU;IM|LI|a5- zlrzD?L&%NDrABlvCThLB`>h{%Hs~^`GO~g1iRNB4Z*Bm>k8jAC4DLYM;$nFwNj*~* zB)PBvp>lA}>SP+TPD|q^VcvfV4kL-)rZ|Pf zR7?y#6I50A2A`p6q2={vLmz@2j+bD{&Vpt+YEN%jUK15UI_;>kqo(75ULd(32WzxQ)pW_PO4tJ&yR_`H)yEPKwMjTH67!GrilYz(zyVgT>R$PTOe&xH1YTaT8d`I1m9_U?CRi@zL z{Xp>{Afo-Sg_3}TsV^kjk)eU2ed$H|4+Nd;c?JEL8lxyA-jHEOdr@CK6Am0j~M9Krr9MT~U_ zG-Xa^5t7`8RLLXZt72%lAp8OK*b<1ZsFj}DqvHu?SA%id&Fa(j(ra+=777i&##6Gg zASj&Z5vm=7d=~$gM(_(`Iy6tuKAhh@jp_FJX<^@l5_WjuuFfn+hW25(=tlS0{3o#39LSRl#EhDp-p`jL} zb>mLon|KV~%})|o5v%J{Sh z)7)}roFs8y-K_e!-_W~=waQW`5@}7JuZX-v^iJD|2ZG%G2nsd~W9qf+rq*tfyhPg5 z1E)$73B+f`w^J_4()nJlf!$03RS!9#l?e(7iv%fSmNF*gayk12MA-VlKFg1sUIJ}xv-!4C7V zpa&f;;t@B2t_a2g{C&^hCDvWWpi$*zRPDWO9XBSznBo|hmj#%mvoP$=fJM=@l7yz| z8^)F0bB`Seam^ZQtdFy8L~<7}b@g#vJLAegV=ds_sF^Ihv~X;;H^&;OGF?A=@i>tV z_^w<1N`T=sFu|*xClf%JJeRl~WGH z0Xb&YFlFkEg5IwO*Zjos_lcPfOUGN|Gxqi^z`o_;SY2(MPq9!(8%*ry9N&eg zP=befn4hv|MSR$Rn7oqF>I!;Xi)SK-J?4X2PskfrSp<9gk)I|d9Z&>wP#}+EDU&!+ zIECBowrW1LoK2f(8*q(Xls-!-+$npZtE<2AOo4LfEK*vBVv6Gzoga6=At)T#>1n+i z2i@yINbA{SW{=vF9_I9-aJfyx8J$#o657}-w=TlUN}iI^QaKwN@rO*akvO7TbNGs9 zh~zsC2#)gND(D|H@cv{Mk4FECU4;JP`uR*prVeJB4`>DNG%vi2?F_ugYc0JS_aM%` zq+A|k#dmzGY&>c%=@x z+1Z&{E&eAP6aXieIq^HA-YmFpGIF{GpSVuu(Yfq&>+g2ks;YCwKN|NRG(y--HyG4f zT{{`dw2P*KP9LRew9;CrwfrV2s{R~%ZCL`>d)HPumglpGH+$(Xn(c)V&=}=klUaXX zJ>+eXU(#)iRQ_Z>oF0cRZ#3}T7-}LT`|W=aI1fGK5PWw$ay9 zSN2cdg$uY0%Bb;`!y>sj1zhH2)lAv|69zbDoiW7>8(Zm(%qiUBh60I4gaIF0ead*8 zT1y=TcP<{tF2;A2z%j{!AjcuszIY>p*R!YuFEcHMLFOTR#-rb*Z604X{kYGi5}0*) z1WW||<&Q62zhD#0X1gyRT)4UZFp32f?ik}*M$RQ&d-oLD`CaCClX>AWrK%)(UfZ{w zKmeJBX>~jm9Jz(mxnh!2QY<&VWr%rgeIO@`>xXtaF7N1x-+n-e`2Ob2Q=Cjq>QMDX z?e=r?$>hbiJN*V$@K~byR~QBrau)a*TnHrS{OvM`xI7jo-T=Q|)CkcKQ8B~S+ zNWu0JTt0Z9_o)t>iV0csVB`?A@7Bp=f-!W?rRg3A%aTRdb9P)NgkXRPQq|pgJI$o+ zRCMtTGG%7v-Ec6(!s1*q+jme{>>{t+{XD!o3KackO8=M<9Z*JRl7BP2 zFKWHfL#JlaNDttK$6ZkE!;<^k1-u7caehHxsM>!Am%ym!+!X@%?Wqi4GHwQAhE5%3 zfxn%#6O?RTPPzmUH(D&kXWDejpHWl48rz)tabKvsd_@UySb~TDZN=m z{y0o#Y`~yfFMi->)Pmg?n?7{RhphrD%=?vzd7s(*qEz`3H)nY>d3whkxRxF~;&?}Y zkH-xLg$DKx;u1GuA6WW7H8nLbk;~>;TWC(<5@7i2DN{63&i7nf^J$=9?YL4KNdcQV zjgD@6>LSCdS4dtpGb<49ocb@rM@k{s8BgqdwmnOhffQ$w=zQ1Vi5-8LMlLtGk;LVX z0bl$}vO$7Fw$haJ-=~c6T6fw+_NpCan}OYX$*W3gkxvxE`7|=P%<&X#cV@4Z48`RV zy=`*8#?mCvGbI+Axw!KuugLbdyLc3E-s4)Prfwyc%S(zzdJgK%lzYn0UFFPzKGI2E z=vfYyRi<|bk#BGtLujGZirW?I=}%p5`|P>>)ndPP%Y~;>Ea*K(gKjgh4(%%&IvCxhD+&&MHw#1EluB%73GAwLcy`F0F9ry&j_4<8XtG;;GMe z6es+-DiiSgCX&fw~Gk+`T`u4TFX%0?JJ3hBAYgYuK5Trz2+Jmgu5zo4Gq7z>PX z=3se`OHh_)=OBf=zsaAU1Whl*WKu3_b#8g+j-c5%ftQ4wG8mDET{i$j$$dfGfdhK_ z=Bbs&AG@`#s+DwKZ5B}4yP4Xn0>V8*q;k_XO_0Fh6wV2CYW)cAVmQ?UyP|{vOzlwJ z@{Y|+f}f>yrm_tMDQZ4Ha zOD3w)gKUiY;D!DEJ8zl=;&+STVRA-B4AiKuH`pqCx z3Js5>8m!Iyp~Suz{;8d5z|NCX1p8}rTz5IGqA2(^4B~_ddfH8P$h{Oh7}K=c$>;N` zF5j0Lmc|jilRY$Nhv~S1g`Uf2Pn`tuDo)uIf3kwrK7n3Yi1A-SYu(0|S1LmmC-==# z8Y@u&Ijc-lE@E#b1?%dN_>I6M^Qqx zwkFaChvGwnrPhFIg?V40_`bo~eb`{z1?FWkf4v6qT1WlR>ON6Vn!cI+j{m;rhl@O& zF~rEBsPmd6^v##5u8aBp&PG@IA>NloQ*O94s{5#AE-0}^dX9CdD?SnSyzNpMylM)e zFq!$|>cW7Ly=b@SBqE8lLFdBZrGhz1rmD*u!8J9_R^}$lzNlW{p z*HyN+ZE)yEy9z1fhtgW`*yKrmiDz-Od6kH_!ZbQ=A0ApM_~oR^5&i zm$~?N!mDVe(PSO-h#5a*f+xS*o`PYAV^&+|E)2-`Irb7=>+h@c9@pix{S6liznZl5 z(fEw4L}!W!v%I1g`?IQWXAB4TJ?TnN2=vYE15rmQe~kC#s@g`}sp|VumJMz9s9;IYgtyl_ zS{SU`A1~<0w>MZW;~1#tFQ4UXu3G$dd0pmdsUe8Va1f znz1S!Np!lkPH?>+S8am+6bhyfjfIkIGWD69%vg@U8*%*jBw|eRq|Eo(MIO7{;P8Olv7QuoE!aeSX!=lLJ6q51Fv%uet4(XbEA zz_6p~p)XLlXRs9UFdj?YZ*{+A@!a0oKPxr-IuF8S&zaQbdc7MEuS3_&xZD>xF!Y#`(Lz2`;PwL z0N@#$b2UrnKk->|mrH6WZq&ozy7VJ6xy3g$nQ4G!0JZM&jDgPFvWf=4(H9Lbx8)#$%L^6+$+)$IB%XwENGUTO$3mSu6Kmn#Y1Z=#-cPX3j56u<4|Qy-`_c8&xHDd?nkxM$ajZca z;*}oP2G3$x%I<~bcIM*HslQX^%;`4Jxl9mz5aiL4q{A+AbgpKQcDteN_X&cHtMGcD zl)ZS$DQ{8D?+p#LB5358GhvkluZA^so<~SozyE`BR6n@GbmY~2XVr%Z4RPb5UDiDl zZu1K5J6x5)lWkpxjSYnB>8Uo2vm9g8Oqsk(=8b&Pm-k55#6BUD+*p?_matW;Ii4?v z2HvL5sA3k9E2QJ%j%};ur*FxrLG`&m&2s;y?z`>51x%316VXS3CGGY}&;5OViSE(Y!p1zm=Yvz_`| zb%xCjC}3JN{J(2@B(9-{+n2os{fS!?73(^@8=tAx(?|Ht!PF zKkbr?muZs3w@3OIThLjUrm052-TB@#dp=+~n_4l8-z4HX*=o0QbjY8k=JWi#XvMJY z{ZjW}&@*oHYw~Edh8wPP`+lTuEEEd$CT%)&>luJn_a{yT9$iM~>`+ycx&=qbB4qmC zY6Cuv{UkZsD^C)zQ+VL&?_83kqXb}(#E;q(mkQ_ruT(@5om-qntHP6(`YEWwa;JH8 z6#7*7`A?;oy%jp1=}|XdO?sP&yIkKnO;g3SmUo)-jA}vS_=2@0aK%P44^#UA$YCHO zeGNf)(gN%D_3^%M4lxs6t>^2+j>xrInMjv*_8V^K^LJNlmeQd(PBxW^6v7c+OGdo< z3+r!o7FG*(y8DMo+V{kaCVB$kG@}zzuxY8D-cH>OB!LuA<6w~}_Qqohv z52I#t)xrOoGoVX^Rx?$thh4So%}Ks|cD6*Blc<3-7=&3w!xqcc`aRy}}n{j}olqLU%S8{7lMz7CJeN9}NacJqn zj9cT^K1$ozR*?a;%qY_RZTWArs zZgmZ$)^=_+GLb8LyzD>QYUwN2HQy}OPJ2KH+)ryE2nDVayUF-Yn4~5 z9m1CbwD?(97@NFpk|t=qFIrewvXJ0!rtjOHas$1M7zy3-hoEA0*ANXMO5n8 zG8OwLOrxO%$&2E{K$(S%^aN`S;DC|+K-}go!!NY=9lH)cOwYCDR$e|O1eSu0Re)%u11XoX8>y`ATzb-t=y_af8kUR! z(e>>N5Mb=wD;|@8>*lhYi9Ys{6kC9 z1%F7*@DS9fV@@4(5kC;*z`+@uJOLX^^(Hz(CL17E+SyQRp$6Jl8o}HcXEL9|*}Y#W zBr+UU07`7988#G=d8Qrqvd5hN?7eIk*gr8#Kc3@N%k9K-8<~x8pJ-kgaWE0E8hUJc z^YeFH8iAd*Iev2ur+6~8kga81Y@V? zt{m9XoL(8xoGu&dn4yQPwwqPK@QTE6RBXrrVYgFod$!g`>Y*zg1eDrTNgtvBP5zmG zp=gQC?4NB9q(9%E+qfhikX+Z*ojfSt*8u;hQg4jY6kUH7w)Pk|g&X9V+t1x)X=XOk zapX~u>OE#$V_S#)^=rIVa9L@of?lHwhL}-+xOo{w4^y9eFS=O)qZgX7S{vBq9~!3@ znzlNP72XkAKKmR#?Y9*PS-mUIpy2JZ-hezgujxt$x`=Ib0KZ-`yceIq|8$yjJ00n2 zk*u*5LQ4*n+s@Mb*;@-)!IDCLA~@V6TGdf}HH<7JW*6T#t`q{5(UYLQ`Og070L-UC zhW8&9SSbH$D9Itsl$lekf==RAQ@a5!XXo0!s~-yr##>6qvMGY=@Oy#Ak)(ji{;!bf zSCdNR0>=np|B`LgqQC**vqJY55X_5W>M}(Sv02j*^W<3zXz>$9>(AhEvjqMvj$N zw@MgD_ULc#(cN-Bh-(tYbzTj+lw<^w`vkusyplO3U~eW2{j?$qd|5lRo^|S)9>>3E-CB{{R!TL0CA53aX5F=`@W_g<~Pr6K?FA(lX zlfEF_$>a8QI`csqAv3b!RIhV*5XRdmtg)IE3{TBb>RD_^C9@ToLq;{Xvo)z`k_U#y z7OP1@u(ou?X0WDt(8`9UJsC6ezYc3S0M5^nT`;;c(_Ft6qE#%|mr-%lG|CbX9K}2_ z{c5XWDz&Sx#-W@a)60jOVc$?Ra$4XY`jAxc&=50jt91j{xGJOPmG%&Oqou`xwzKfR{uH^BbR*>ReIxuPr<2_-m zg*kzt?{6ly{r9{Cgyc2Z6(JiQ@BPWDb-3XE8yes2wRdGg2cllsLruVjxp!6-)jIrf zrHS?JEgQK1Dtd2{8<)M=8i0$e&2*Y(EQEiiJi!tn9iA2XUMDS9PUr3&h1xE_1g zF05?_a@3gkrh!-ODHp9;Z*^-eL-AI`q+PvELDx5aGOos)W+t73m|esKHjPU93I zg#P)TZ9%wa&|6&D*nr=gtZ%Kn z{Q{RWt*yI?1%M*P6sXOT6Sq%B;raYE1=LhQ68Bsqn1#>R zfVK1O-RqWDllwM3m!?v(x=@q~ECpQz}; z_Db^Vz-#-hjnK|qG5UV$0|DVvLD2f;2#FCNr=t5eZqieX+-#d!S1ZWU|5Pk)oQ!8d zq<*hXekf^9M#asa{IztDEo9~v3#<5_?Xn**5irg3gx%uk`vTyyNqA?(L;7eFH!ek| zxY&suo+;y-YT2AZW7Vlt+`rq%!WCoQrAy~4#=UF~R#?w;s`|o+tJ%zX+FB2n8QGg% z3K~-bAw_(-3Rnz#trKiqdR~R%buCIq$xc1{WAD9 z|MTRGPlZ2hKhKizHuZMeCg{hr2U}h4eEFK|!27tD^|f>XNY-CBr?x>NanvG}o=Mjn zlkv<<>R%^ObK!mO?Cy|Sz56TS#%ontU|-&1gc+iVd~lQCY)ucOJof~bl?ix##pN}I zc{q8eZ?3L4G;pYLf*GbMk?jtnZ8_>8LVii+Fch=7Bhu|dDbnr5ao*`AkqY#XlDS6s z3jBYZy=7RGUE4N%d#PB22ug!Uw{#Bz(k&n$r8L6OoeBt&LpO}lCEY3AUDCqPDP04+ zYtZ|;ujjj;cl);Q`!&DjjCHPc9LL(%zV8PjA5pX%H(X?9z`f~w?%<|mLvl9l_Jp*$ zzJrcR8DBP-W6<*AnNJ$p@AauYMBHfX{%fbqt@zDjC0c|;@-9V%i>jLb>cH2^QC1JV zQj%hWt$Q1y{tt(;!MVvw3y$YUINSyk4c+N>!LjEP!F>M5g8703?)gZFxYn6{t?QEK zyGy3I#(0U4#?5nB^OpqAkH(hgOcwRKXo*vY$MSS>&qUi`JsfTS0BLk7X}aHRzW!xPofvh}F#W?zivZx!q89(kBTBSveXWwZ;JPt!^wN>E?y zvkv?NN(%C5xFsr*+Y$Z|vzB6ke2`m zdq0f8r?P{nSQ%v%lQs-Ud?*$+rB8EtBaR7@c#lxXpWTBJ&OnnzVI@b3QI8S#kX;X% z_WtsJJd@9tQ!dtF2}*VN$2Nt{Z#u7^F_hp-(v-;D@3 zRet{eR?^hm65$sVu5YsaxKT}v&T^CC`|N5tJ&bZstX z^Pm1$0L64RzC$o%yZ*3~!VW=`bA6)`shfrRTTaB&9Hi%rP)+W?0wHvb5<9_7XPkjW zj>lY^QzgCo1R;rvc_ElQ{^qoF#SUJsP1Zy2ZFb&8MMRQr!(b8W;%WOaE6M6}QUjuj zTI!@Y+39K*X{6?KFlg{W~TD}RUmDB+}b_VO+`sI z(4Lwft^@{bs`*UsvUEOn|MKaI?bBshBA+2gw6|?F?n-=L?-Dj*A}_n!R;2)!ktLNcqVS#prPfSMG&40pX|2M$od6|sFMg=cTO(Rd^#w`5Tp9- z8PfnWuNAt*>~OiceeLKVtj>q?Zf%K$Hajw^=HD}{ao1e0K6raZvJzjYju?^I#pU4} z9|ZU5A$ehL{)HJ}|TowsKN|`w39HlKT%G$N11V zM+g3Y6?EsfRLqmq9}ycY@!^P|vs=CAb0V5c z{8>}%#6OPdR_GlVGLrVlNx+RvIC{ z`c!A=6FBAgz%t7odW8`!YPlRTAzgofcbdK{}iXm}lIYOvT!cK>a@0_lujKaPPuE1Hg#N(~DBV$)nMe3#9GG4JpTna}1H z*1e4^_n$2NFZDDUfqjOHD?iPjXfU)0Lb+4!_yA`8C}0Zro|zQ+T0zH}=F49bTNHVX z9~I@lYw*S!*F*@Ksd{~2Lte7LT7OZw=C!=;n?YEG+s~Z$_i>&IO|#)~1}}Zj|H`wp zqwum|$#p;vN^?{X)4iAr{58}?sCu9L)Qk8ydx*{mSz21^B%AE(i`HN5Nge86_pLaHAy$gR1k(?p6|Agy57r|E9uodGAIHO`ds(PgM`{qeUB$RUZrQ~unb#jno5d5{-*R28a zTy3U>HT99N@3uV3D2a=QRP;)0K1>VkkB{-Q%!hr*pw5F9t0~pB1lSEp-M$lZ^Uz|L z@Ll@+=Ez zRb3k_^P)QYr$Rx+Z_5-P$ld}c*8y^3lI#*NF>ZP~W11e5x$bu0?BC z<{3{ATJC1K=xgXJH1gZBnXDeSuC}z5WXa}%g0WFqLGTj+nOq}Mf#w||yh5qY==nNV z$oEEj(IQ7F-A%V+`c2o3Tjs=e=wtPJoU*IdxM+v9w}*WXtfY4lL?-+t&lf7lK4B~v z&RF_h2Umuh-?fi1_Ea@x0YwVo{HlIbX5C8efr93yjs8XG+pNmfj88uc+NU52?#!%lF}lIYt$uH-Qq&JKwW=JtC zqZ*^>U_o|^)-kN@mY4{#Ry>^T_94gZrt(hU$*DNc z2Vh}o=*Hwl9GJN4#ufc3#Qnx&{m0); z*WW^jaKqfDqN6UbzXn@q)c`Z0e21f&5u8#AKJ0(2eiku=ge+W^Q0Un>vWTh;hMbEl zOSR3q-5Y$!W7iRa)0~-6j)@^BXJQdC?a&xrkzI7pPc=5`+u=jP4WfaJh6~=#{kQiz z9r==WBQT8cXb)wxiK&@bg8667!o!Kl$&9X7W`22xPpaG*``$6IkbjaD z#uuVVK6!vdM%q4q`<=n5?y6+fdM10-daHBQcIlXPVW~| zT5`10J$@C+Z=)$9xvlsRj25NP-;qo&i;~sDe0U}F5jmyj|EOuDA|z2P^^SczLL#Dt zaqZENyruP=_bO^{!WGm;N9ps6a~?g8dQ4luSfTQDj6v0dK_|UvIBuy;P1Cv7Gvq+1IXh_DU+3U8tv&%=|mXyyWlzvQBQ(*5oZ5f^!UQsNdAU zvjV*e$dbEuoN$*lRY};(dBY9fCgn%rSO25_P3wHOp?ja*W7_!QbIbRls|b$jL=O4; zjhvo~y_$Y$0yN@M{rcev%;a@5`IRlPHqlE$QGL-D&sSbzzv>t`k@7YxsQ*{Pnv0IC znyxh@q8 zzKec2%XIth`%%gTX1B7D$sEv-H~QTUL|Re_3&k5zT3HXJCR%>xhcc_Q}}WHTl7fdpLFe#i4g5OK0RUT%i`TmowcYC-y_z1;t>c z@k2t#+RsWXcJ?;nsil<D>ZoH zuRBJ4vDhfd(sm?!|9UnO2$OuJl~@A;*$i_`+7xO!RCs+#vHsWwZBb|=05c~`l{k%KUI_SJi4_y<5k zRBEt%zV3J=F|$kxVAOvB#@&m<1%_8_D2JY}Sq7q;B^O|do!9%jD2SPmXB&cv&7jLFvQO?-YH&E9Ezf4J*ag-7df%Z`feP!w+a!UB|i zTtO25PspB>;A`urfxCGvFE1Y*T{_HU~xR&4R2v&{I;4@ z)ohv?o{d1)LncQZQ;gOuaf09(Po@rd)kkw=;c_*Ey90=RP#%P8a3vd`-SxOBkwAiA z)eLWq>q+>aS$E)&Wh3i++p{X(8b`h1r*1{(baS3my(q#Dr3TKz4C_Sya$h1t-;16& zF2vt0vp#@-V;1_qgl1MJHc&&xZ;Ne<8Y zX!&krCLiD=+AP4VhIZTEZiklvxp#w)NJa0-wC$CvO-2|jS~i80#>$W?U7nJ?XYokpLpK1mLJu|dsa(BjBU42 z5LUOy$%5hWkMUAnPQ|ix9I$g<%CLwmg+G8Y)jxb3$gD`O>vY4&GDsq5A`S?i6Zapv+)#iF-+>*kdP~6FbOd`&FD2m3aMEpH`4Gt5&?Y5! zSIW-~m5Cca4o1%wayBvtI7qHX_Tn zBUwuLta_BbSY#nzn|H+{Px`Rhm6Ynm)_|0)fhnZVr=_ z>ow7(A=Vl>PCLvRcAIHZBgBHNfUV7+Qhq3QVJN%|%Hi?q=VUHR%cxo+*|2KN)&2I1 z6IXdga!Sp`^xcw!l(dY`v5+78k1%_L=G1+e4Xvg}DX6?fEp}c3PT`qT5ZuTRd9XF5 zmTmC;U-|^phLa=jVXxL=Jc&4oh;oS%>+Y2?zRM^@JyCMkf1c=GhLyI`PzxB+;-{<* z@$vCN%L?jRlf~u1Z3-_htwvi-vf{m#C$pvHR3ipeAf(+wWS<$B1tsEM>`feomsqde zHeOg~V73E}29q)nLZQ9d1lkO&quS3GaN~BMN;vzx8)0$=&Ks1K*$J7-%FE|l!()OB zVsx{=$mmBfP?l@maI4R^+(T2 zRE^x&p*7V5F;yeH^Jizk8pZDi&96KV;ZO+@ZLTNJnmQtWKQ{eoT`XpP-+%mT)sZNN zs_aX|rIN|C;6n_4ot6$r3_q$yqVf!eFJ@pl9QT8Y0m~+O<%}{O5=}gu>CvnQhSGIc z?BBzfauCQrEWzzQ$#5OplT`j*Cw=r?hmMgPtRUDiN^`pu8=Za5gQo7{V6%F>W+n|( zm1$>)(&+BStM?}%YD@K)dpNS=hHbA27u%{nS5$Toecz@4bl-MskCX?)TqMqYAK@CF zJ>E@*GKgp6$V$?qzWhm(B+AulMt=Ro&IiA13qe`^*$)nlH zQiV@y+!ZRcNiX-1ZS)Wv%8O4e&cZxtnQdQ zo5Ak3{mnv{$$E_Ks(b*EE!GYqYgnTwaer?d^kS*(>O(wCB8xzXGW zjqpF=_T@)f`ixo$X{AXVDmmE<{b$`NyAf1?-uN6;q=#C8DwW6u-Bg!36T>qOl@N*M zk4jl{`}FJOLa@nT*jJ-N5?~{8N5#_`J7+ohW1}F8gN^UI1c6o$_7=-ngJ8x4dcF6L zqtrDgNP!eXfXgF1_Suh%zv%ID0==(AWrC>7FH!W7It${6e)?slx`R`JRIG(W@QGOF* zHlHD*fp43W;n9s_IAS~lDUtpG+rLwm&1)|@Eww)rxQo+$QCXKO9U21yKREaSlX;E8 zGDm6@S+$w6AGMpBykFwUvwmC)gfN0i6-VSF{Yb%eYB=mBS<IRbSU`Z_VhW%*smIC$HaZW)!6*QcLOI-yhX{)S$|c zHJcLthzTB|?dNzD-nbb+@X{esQ`b5>JNOCtRNip}<(%R(_qPCmnJ;L+N6m|hHA@d# zPwsKM7j8Hk29-ixrQPGZtik%&Kilvg7#s7Qgh_l^Ae>swj)VLarKZtMHkkp0f~5;p zE9dy#&*_FUUd#45j!`J{$tj&tO#m5%6}G-OI-wLpiMOn8u#P-XP6D}RXJ(#EW!^c! zEFO;Npy~;d|9$W}4Gs)?kwxX-ei|V^Peg>A+U^$gi?xO{0wTNvZ~wl=)zkI%xQ8`ha7W6U`tJq^ddN1);PKq_LC03m?CYfVG-;A(qU7&(P(hhoIuakY4-ra{^{& z7gF6zAD&#D@yALPX=~In)6a`~AJ-8lRdzmNS5IT?g<>m9e>-b}Hcisz&O$>DBiylmjeg_k+?5XNS*KOJfs7^}O#X{feU@tD~+r@7>kDl1^$9M!rTl_fb zC2pvqgbTC#A(!GQtrJg0m2jhO|F2Qw39ivEgVyVD3L+yX*9V_u`VU%Glj(Gs|fS zdeq;8CsFPl9@@?+Vtza7TY+B-75;1AGb9hR?Ba=3L7XJ1a<`@WX;(;XFZo8BizIUd ztgT;|6|6eQkBJAaD@ghyQ+iZj>CY{wGa?cSmXp>y8HsF@gP-||Q?Yuu9IZothm~rr zeHxH+q|vGx%Avs>)H#${Mc$%+rp-ksVe)I!gyjvqwHCMS{xZW zxiBlTya4$%A&1ImhLZot9w5qyqjHDIVBel1a0aFfrekK(n0g)B1{)X}@{)?6rrS3j z%~6#%dENjyX54&pnYRCM#Z|Fnf$xy-Saqhqy`4qCOTqJ8Zu+#np+!5j=IuaZL!&mu z)odq$FQi05lmMq*GggoEQ*?WTe7iw(~(d6ldVq0obt>jhRqb3}`1zvPHQ(32ommeh1q`*-|%xBWZ0-0To5 zamjVR6MA<+RtAhV$-|#M;vJX)V)izFPXSc@9fk#x_3w?yah~qm_LMt{C1(yQEaxOS z^_36d@+UZ?#8&t)41pkB?LF2r!F@;k%g#6_{YG6x+rpKd4YhE?Z7FiJPY|NkisZNV z2{Q|0(7-2zG_mp&X6zErE)6r^a7?_Xv^k=;JMae)$(v)&{C-c)lD>7WtspNfs3HuiDN0}dK0ts_3sJ`wU6nz z116win}X}?`k~O(z7WqwDUP-H;60whH2BX*98aH`>Vjs|6-bbog=V1ZPAw_C!Iqlq zV(q@U$I2786;BwT$9m$1TzGn}M20eZ+@!d(+anSnzo{YSLy6juXbl8Xv3#8iWJ$4X zxODnzDRkK7;OrVB(4mpMMp5C|DGOY9lHJx#LG`udm3{3zW!m}giuFJHN^TTN!)Q26 zb6>)9qoBxSo%6@(&&TT4hXm?wTP#I&?ZH1TkV#t{o;GtQO6)cQ{Yd{0)uRlp0%>o- z77LZ`Rs1^s`?AK!yKMV3n#j$XxwZjB{YRF*GxBKN1NOYyqZnrsq)A0cx?4?T0(ZMH zYgi)SZCpPe$+Q33oq(cfSV_xvq`~0lYZj5asHp==DZZC~FMib49JR&zz1#S|?* zU}xWdcG&+l`v5BUom1_C5CuVc3?J6U{u77%zr81i$1|I)QM{C*J$H_AdDZth@j(F9 zQ)k^#HAJiORUDV;Ycs@4{*=qy@Exf2Oj$U9LK?il`osTT(qN;|GGa_~0cYA&SyOwAz;NF9dbf63S47!=aGkAK~M5DcIGXw>o*Qm6Oq-{OJ_ zDnk|yD#cWX!=x+?Ymyv1-H$m{#(I(kfk}z)eo!lTjbl$}b^7c^FgA34F;z%n_O)R% zq7QTPZd2I){M&AC$QtZGzhnaj4(Q55DfbZIEFGwo(-uOKP<%RkxKI+cJFEpE#W4j*-LGB3g z+`k}$Oo7TN7PrlKgOc#6e;dq`_pVfG98nj(lwgBdcuOxXxyA&jhF7dvN4MrIWXu_U2aq>frpI}@L25C0V94F1#oIvQDd4j3SabHX3ZQJY?Als`^^Mrt_TGgH#p%c z^wg47pjTluY`HTr*X*Mux}FzU^?B1Q_~h1aL@tODP*E$tM1MH*Vi4nz`wX6O{FYu8 z#Q-hq5_g96m}vKFh8)I{_JuiS@~Ew`N#n#Vgrw>=L$?&3K)3%Q(AfWHq@Pt-aB^|c ziLNkk*MDSo?2(8$AOCp;DaO=YD^gmUOIC+9ToeR;d5JIF!_na}mZpBpKXm4wMzwwe= zuP3viJ=^i}J7_2aX%=hN&!S|1almu)>$0p5@}6lam+|C@f9*_osU!jSb|y~j04dSF zgY@jrqcAP6|IA@M>P@j%*|i4J$x{>+R;a-5aM^#;Y!?fb-_D6}(BIBL%bOhi0`c5E z!$i)AnyG-|yu#-cey4>%h^_~PXDS!jcA})F(N{M{AFzlm8D}EWjXi>gDoC3mB`!Zy zs6hfhJ|Jrqjo21Fo`?Oc#~#-oX;(w6RNU@4!H(ojNqDUHYPCekZ8=nWCm!EOv^h{) zhtV^uO0OwKd}(|Gi$ODbMnUMZ+TD-<;l4#nFJ6@HG~qzt&+d#gY~96|pfsk_Laf|# zU5?MsznSz)*VMG$k9p?8xg_-1}qXw;KHNX}wL}zZ0feWsuRYD^Ljx<}xv+L&%Qi ze3f;leAjZ#c3-UNARF4bb2vO*o2S-!UwGUfIzbg7eS-T2dFQKdHe+o$9eQffr;HO} zTf_Y?;500azRn8zm!HpBJtlDQk51uM{Xc~e)voYnclQE`3ZdgB{|dKZI;wve8wKV1 z5YW1~Sr@gpgc5K$IHi<55+z`huYS(n`Wc$hvVNS&9Su!T&HtKWG=@*MP5jD2WD2?A zKyq(t%M?bm)4j1~89^sz6Wj#$wsC+HW)t#_!YbIhX3yNUb#a$hNSysTic$7si)L0= z6YkWXGjmzaZtfC*H3k5&m*D(uzITt9EN% z4+JQb!D$zr(A1=9Yk-P|VakKouRm?jZP&<5`ph06|2>=L;#Owj2?ffmfoHc=cmBfq zSpVn6_(GMlXB)+^Wm9i+esimWUF#?JzV8~IkUKQf$Od^jpHRCmyEsp_6(}}BiZl$E zT=&X!*Kk^aNzN4`L8JV5-8m=yHX(xuI$Bg8g3aUg{HB>o{kis{aOXm6}3cRprXvMGAy(58kXM|B+}wZxIWOq%6c5?$t# zrBbID&p_8MR?k;)0O;8UKu_QrLb?ZjwN{1A(x3A^$R6Wlf`LC0J8dDaG`w9wxbF|t zd=FtZ$4fdVw8MYW)_?UtsBT$;XUCs?xBHGlE6X;|J(`Ql_LI)^xn@tYV^tbXa!Qi> zQzzEOnY`7b7+B9e45$;O*&k}xo3aH@W*!WpU6QumIVYuf>d+nfM#)(Qo+5C`Vu5IDhbwD9hr`1Gdk0H^sOmZOr%)P$h)^-R7MUyR*9|S!C@V``XPs9_@^tFnNJU?id`NlA=3(H_58c^r+B__)G+4w$dcvTe zTL({e!veaagRXXTuZA`L%5V5Zi|(>&kbdXt0P(|k5DRAW>Y>QcM|O{C zhAne5?ZeS9?$Yb@J=B`CMBzy2KRqFo{j37IR^j4*S#(Z44RPkyNmBlFECvtnPt+8hwuwq=+y-S{QeMUfjRtzm%oZS+p!x!4NBjDU`FAWyi zhGtF|r_W^=;y~w4_Pbn;w`Xjvgsy#O(|o5*Be!S7_oN-1IcqNY99f+%&nGa{i|dr6 zqN!vTPWT+b@w#7|f_f#3+%eHN`{UOv$5A_R%4a7S=#2(Gl@&Knn`aKc7(Q4z6>{(x zF0tjitH96Ly6wpZEvN?=!gk{n?P8Zhb=J|zno;cQp$)Q38IpT#24!L;eI*iUrGG@=Yg&vptG7%Xj;e8FDfCPh~Zc`RyCvi1c<1 zgiQ!|?zc;=^FpppI%1@Y8Q(qno!9_-_cp5hEp$1(mG_1Zl23(rzF5|ti0cz-4(xXv z|FlW$gxDm+vUw6Fj52BMA(P2wIYsKKWGK5IWmxPKgZmGEGep7h+}i!3qOCmF1~hv` zS##_U0d(8wWeU?<3b$6TI+4rM;<*nH@c^+Bo#skmEWY1I@BgULI=*RMt{kmOCSDye zlMo8gJ#Fg`U_sMwt;H)s4$~AFtdpoC`^wZgw%&0>!z3<}#}z9Ow?{01bw}>b_pEv~ z(Eou}tmtxbiCK(x;^#{sksD1$`Yba4BlGu(HWCW0320~r!OsF52etTnhX6Yup3X$z zgnHevA*gz*Kh>d`BI{!B^$24F*KGui#TcN=io~QmN?VyhomKzODmk=GK|_PUs4p>Y zujT-B=9}eyGqb)lyFFTH2~OJUe5#rHQ{MN&mAG7SpSTMU+Rm+g3`3ps`_6NlP3q77 z_XVv0wfg{j*m(0t5nY0inwE=v&xt9mC(fbkov-he?;U+3{&1mN|Itu4ue~vVTGq++ zwvIa#QylZ^VTA8-OTWjSHejaB1E9Rffk@ptn1bKUpnrw z(9`Xfiv?~BrT?H;x=pxFMS1>@vW^eyHZKCqF}ogkHw%PFwMOF0{CA?PIsS)t#t)h< zS>}YhFR6aim{VrRP5D>tJ1#8g+!L>#1{E zxv(KfZ0~v7JPI))+8bbTh~yUqcM2S& zpU)>~q#{_I44x?9A~GKY?v-_H5$Qnhz`F;11`5-v15fXVe zJzS{2+nl9+^)JBQ_`II3rhgu^U!*_();wO>OLf?FA+Un1b(lNpgBq#8?K;Z~)=Ol9 zXM3m6Nsh9YKk!O1TB~deV$++p>$Erw&wJzcmbY99*DY7=q=!_hKTaqu^$#5fMBMCV zW8_N?cOTs(`}+=V)_|SFSpSzQ93K2lS)nz$ibcP>_J+Dp3E68;q(Jhf1G>xHo}hr^ z#_`})pZ*ZH2eG%rjFGBJke*{kNE4UQ^i-kwzBo&FXD&KC)TUJPdlT8VxfK2GG}{va ziqE04V9)-0uO{*;^JftJsCIN?b6BD2BqqP@B*xQ^l}b(Dt|9lAIGmwy8L{$fNkXt_ z!JDRVHA!L@xka-Ob*|82hL!Bohy@RVyYC1kKC(%qtZ>A(q5MOFM!k?S*fjmNU1*Bs z&c5?Rww7#vt{RJ7V(w$iHa~_a=>@MZ#O40k)f(POzvrndjiE)V&gr)EG8TCiumD44 zA@Gb+Nnkp{dXSxzLdb2URr|SCr=2CU!JX}Awa8Vflcml%M?KreTThUHA)urR9G7B0%ovCl*yV{mX^)eZ>@MKdV{y6mmaXZP@UM4 zX9gFbyaL}*(gM|Y_wWDGWnf_jl^^(~hkd`qj`r0cyuV3gZu+p$@k{!+)vrKZ{wmZi z6zL7l!ms6nlC$9Nx0KY>`~Wf7n2ApuVH}4q)Cs^q_uF^yuIFZW1Nfoj{<=GS17&Px z7})j}1bfzRI$Sq|P6r*6P?<#0qzxwU!DFQ_sqanu@W{v_;}VzNS?$?+uG7WgxRS2! zj*ocrK`LE^qZq4uq4B>ke_y%%?=sl0`rukB|&cs1X{OK&|LaAa`$?f1WSG~#! z{WY`8O@=4v&BawWS|4UoSZn3k;fA009jt}( zxhu%)JoWjs5Q=wK7jsw8pnZxZw=FZ>z^Dtrp@iK#O;hOS+sIQV)Q~s!Ri!_fq6**Y zqXuk5XL>+zHm~Szg~p7SicHRLHxxo89kfpO-9bYrdR_c8RvN=wBnd8BK!}i?(a#~V z;QFE?jM~I%?Q(nl{G6U9Y3`x+<9&`nG3o$a5BPYh`J#zcV#lCKeJHVwe|%g zlq@lD|4j(fyn5=;SA$7I;u#b%ENg0wT#!~%>O`Xv!(pVIt`8_}ch?;c#Ac#1m1?$c zjO5i~^Bd{Ljhy)74A!zfBHsaM+L{rpOh;tJ&+gg%#*@y+!|hZN%P?frMj%VQ)tLDc zX06yU-G;?GgPiVm`zujuI!bV*UijNbGyb_oOg}pRy|7lS)qTA8H@QrDZoL zR^%Wtfu>C88A~U}*0i^3ogJMduW2{5bu8 zg5=A=%2DOBc_OC*^5t4;0t7H56)wq3Tw7M1cj}HucETl5m2Wtx5uX_v8piV4Qe%?v zE&9AP-Zd_m1oAie7pOvzm^k=M@Mh85OLfLmn+MCx8h!-(UC$4P#bQ}0|T0RS~<%$8}3|PzSB@W@EOyP#dC*gM6=3i+`D-;%M z_J`q@9Ob&xM>3UD+q4(P(g>`GQVaMg;s8|i!jKt#(Bz8@LpD=?(%8afn3e34-MRK8 z&7t&#aN3a0y<@V>%ld)w8ADbiB^;cLYGx2EZ|hcQISSz{7!Rh1tyc`ge54XX)*Nki zX6w2Rz*mO_Ty2*0k2uQwsI*RH^Exo|wL{BN+LLr$I?C55G2$h+o+jYF)cn54*Ijog z9evv$N7=9^mbIuf-x-nd7^hv1#(goGM5Q9lc7p?Z4Ab-U5%bp2aE+-pg`}=y%;6U6 zp`R&{R6BWvgW&06MDiTPb=PZgzPVg4cA(It!jsT%50UFep6ZQtn=q5XGHflACKMLMCc+nS6#@al`F8^!QN=eO@Je(ne<6W)tJbX>UG z!|1r>6$%Rcm}Cenl5E`k-_0xF`D8O*oCKXQGLX-B#O$SdV5O9gH*CGzu;8WER|~C= z;yFb>&&PRI>FG1*DSBJO;VLWTO1SNSpBJ>LiR!C^N^yH|ng93_O%*Hy7N0OTixxtp zT#Q?ca@ulW)zm=bH+l#bM4Q$##n6km=d>Egubn&*KUcy((CEL8A1WdR?Cc46Kgixc9V65K{4_}K^)05rX$Rk>T^#$lbu@L{ zp*6>Bh4rX2Z^^Q{%gRDvQ|~5CV&M+F-!ZVxz?bU)y(P!;=z3ZY_~}erB=3sU>xZ{d zC4l@EOSsK$KW*qp9oWIiLph5P!I7_&LPW7gx8Wjm_tNgtKIRLOPic}|vW5y;Tz!bT za{O5{#xaprntte1)wE_^OW?!Z*9DAW`KRnP2fW}A=Y2zOw{x<>R!#z|{VPWfuCjTA zv*F3&J{zM>839?Jj;|O)#r)S5asI02UkP+ix`?eke4*EFNZ2*_Zy_~4}Wjv_#kWeg|_3ZV&B(G z;bOXPf#_q01kct&x62bIsZhD;tk}W?DDTsU!zzJ~pH2wb?`1U&4V(I`r7s2>kI_a> zy#?`f7Wk#OWV^`?*aKklbj>XB|FXkJ&a8*N zDh{h>wC2m0lZp#_wk-b;;2Bzcph;lMcPk7GRtRz`#jiVvFfNMX9d&9;*T)wIt+Laeax7FC>tho^WD{#RL2Y_jd?8y$G>K?AEU zq(<5MC>+AR1OJ&VKORe$e_KkHEK1i3t}~Btkv1WhHj3V@qjU6Ve)d*n`cc(z@A%lQ zxs$}VAAjOY0y!InIJX?-8>63<>^78^c!wFVEcSOQm$Ckj-d3kUk@#IQGzxDuxMm?w zPvt@S6UmPgnt1MB{P7@$Ruv>VyaxIAXK%-Cf1FPgEWo8Ymf1a0&~dd5UaZ0~9!8Fd zp}{VN)6#UdWvGs^aOIoh=1H+&Ye_ z-zJeGe0{gGT=-WeHuBxx+EJW2+~Pw=rl~`qr$&L=Bq0}tcxb8c`Rgv53biK61|Ny9 zf^(v#$^*wwla9_R1mDlyzqFB))KV89XDhVBAPeg}z?N-@U}F&8>ws!|fEi7B9mc9g zdpNnZB3{a(PheiWrom(70uXeR+mL*OQc6rZLSaRBJggdN6p$9daRVE2l^_ zv$w=FErCkaD|#Pc_OjcNuu*+KV2h zbSqw*^5P4vg7!dVdMk(AU$=8|Sv`+l$ucIv)@;Y;^GPX^rr(_eVaIJD2wA%RH7JKe z#0uHeVA-wR(|U@KjeWK8A>j5##cL@YWm5iWPSx59ms1NmW%h{a%EG+^=)ich#o_%Q zq<&6hp>CNE0UbxJ2i~W5c6UhadYzDhW#Yf)om5xo*oXR3p~BkbbL;5^8{OL}tWNW8oTRb&4*NnTiz| zG5QVbV8%Y1fqrWZ$6Z&7x8ZzdNAFw(rcjRI)gVBw0l9Fx?-Cf>pd|>qn(uSbel~GO z_`HWnjnrl{Bc?bt+@hgIl1O&W+iohCEK?-1-hQ`2tZQIjra>Aa(iD0lgC9X-QfPXX z6uELCxZlI>ba}c`NT`mm?*G6V2R5wWc z6%7BJ2D151!|v1fYQSn3Ww_fEsB}2NqPW`$`?dUm!TL+iZK8Vhk9EUFU)=hhs}KP!*n4CGQ@|MYeD|O;AfS7C_|031obEzA^7K zC)HVN2YfqPvu@i%P8kEKjz4F=%5`>92HTe}2|_iFI}RfJn9i8u#;oo>LI33M^Z@hr zQ_3V#0?AA^vv#qejgn7ytyu}Ud=?4Weqa&(x`V+S!=k(GoK$nZ$#^eZ=+w8f zko;7XT8<1H&fhY45tYA2Q9HKpQhV4{hR^+zuy*2#zIO2Ve$b{ZZ?e-S<|f~OkM{Un z(0Z;%;1C^rew16N@kh2{UsG+-qTdB{~6DTLX{q|N3kM%kTF;W>2Tj}{C^ z8ch@%60p19A{4?#QSQ4BKtmgvq~PEh!XmpPwn(Pg&&6`~u@%K=CDE$$zJ35y9@4qr z3!JChO^`i8WamPT96JJszl_2Jx+N?&!U-UHN1Ms+`DfGoJ2rr);L`%Imc5U%_|G{! zQo!cm3VWXhCj<5Zz|3qH)99=oq%I!l+aB+4Z9D1lSa=v@vAMm()4KAB$YBQ{2eAgq zYFqg;UNit%Bvru8!xKf&yk!k>=D2iu$~Yzp3muKu|l!A|A7vn{`f3IUip*9HewYZVo}Po)t<3r-rKeY#!R*^=a#_KRzP1O-NgjsVNZXL`syEdjLL=%8k4 z2^0del5r2%JfquR+dQ*h>#knU;?A64?|%U_FR@N^A9)ibt$x}Af#m4Nufux~_r=!t zqbA-hu0uL3Q3navFqh;yZsKpIa;J=9B^j&7`{NLC{ZUP6j3~sQ(=WM^9ipIW5_hGF zHK~#O8Z1sj?i82ZsIXu-29+2s{lvp_^o$Y$Az(7pL&PCbOa^Q=?)~%Hk^eB5g4&Ci z8)!F4gb=U!+_GIVT%iX(DjUP-#J_sj*}79)A9C{}dp`|UXVp?y8z zORg8fBkmP{im1Wpiesgy;Cvhv$&=yTs2HXRPpn-pXQfd<98;(G?3=<%^J1={S&6F-$TeISA z>FJG$17m97D~ssDL0+*Fsc|pvPnlTt-i*T@Y2_qnS@o~E-<3A-n#4}IiIr*k z#uLk(SK?yRWxoh$JR*eIMGow`R0@rwUa|>B3cq_!u2QKPLSd?DQp4fZWzX8uj*%C7 zwhv(fe#KEH@A zf_4?3{U}18l#*3lYq&$7)Vb%5JDSqx-M7yfao^1=1(B&XaNPuE;K)Q)4*{r51DPq( z066nf>JGv->=pq!n&xG8R(o}M{@#72+MdJnJ~1ZoKGF7d0|(cEleHEw90Bjo?&2l7 z5;_#Dz7uM3M)CSo&1{O;aM{4I+)$L>CK$W^m)dRt?csKIXW=F=$i`8SdlWWyP30rx*+Zl9cs?_TLH22A2#M2|Tr+#B|PlSO)EFlL0wbp(=egg^f8#gev0OrUvTk`x}bSR|||=PLD^p zIYzStS`Jby6auQY9|AGRWdZ6D{Udk3`kE5jIs$rT0hGd??GQcQTlx=RXG{c0VZq-N z+UfwpUx<*LLyGOr+XHFh1AB(U@T}C-8Krj?m|J6NiW2m{_94V&Y4H2CqRtZ*BI$pO zpYn!ysB38aWlP-5>0eLRG;ceYhq%oWa`?SWVz0V@W`hLfS_XsyT=ri4sfX6OH48Ca zc!&1FjV;y#7q2Tc6bHR}Zc*zAw;iBm4@uhT8;M1`#bx`(wRR;P($22n%PrYf2NCAV ztw`hmn9cQxgWK3JrTv=g^!pzbSHbp50_wz66+R&PT@t<{v>fR{U+t{g`RJuvBJ5+P z23As6l@gD=?uHS3P~-*wpPTjRjHnlW2~uq~f%PDDbMv`!7%wJ!9uVaWcY8SVVeQ&A zS<<=B83q!TXUbb9uC7({$xBpkP-Ris5DQS%_{4ofCrZC5mno5kd-?uzc2Vs!;+jA* zfpxIuJ^t(%>Gw~v3^#7YWLw~$V2NWC92ZhA^~aNc0XX=@8~s;}f#80hmp%W4;OQ?3 zX+(Z=x*x`Def`U`NQiQf+v{5nCHd$Q7+%t8Y$F??lO^5N4G<>QTw~8a^6C2U#ejWgNPuQeYVB zTh_OZj}96{&+mCn9zrHU_0 z@9^2&r*8aA;8{I~V457D*J);bt2)E+{#^vktR%mcrg+c`+ed!d^{eiw(w{}jJBQe; zr7fnh7GK|Pyd%HBT?c(!VI5+_y8htw%DS_B5 zHox>r@14WAfg75ZbaGkHR~S%**s)biLTbyJCPybhj-DrLccAMHU3E++1>rn z3@SdFx2u^CTh3Cxe=}r0vORVR=yMg5ykY9&W-4@AQ-b*xt~+J(%qQfmhb2eV>Bsg4 zHI<(2ysD&?T;fyvkb(pgL~d0XKvj>u|3GRC#a}Z*1?+$V|5X&LP&pcTBo}eWxa~uU zXM-Lxa&4nt(1Gr2=;#Cjy>X|1ypvN?a&E@vk4w^pKep!-0qV%m-$YO71zdrhQC zE`|U_ehYNZVFNlxSSUZ7Q^E*9dW-paj4LXA%`X4twxeCp@J7j3rTk0-{cEe}9{x01 z(7molj?Mb@B;q%3i9)`tSvBt8nD@?<-X1x$V?XS!#4t=-C%EF0_NTg!%x^4Db#EZ! zXGTQqp2*0I=_%TwH^+)*v$;JEKRjWsVoSW4iBQ^ATENlcx?7-NMAL{o6N@exKcH>E zjK2Q@cUUEXbd6k#1R*okGU2nPJ+BBzXY%{wyE1vme#Ua^RfX>%c6mn5;y_Vc@C`yy z+_@VH3N%-eQprW=+v;sQfV8@hOqi8F1qY{Nllg9#A+&ZvUNx7LTRFo4oy{GLing#R zhDjl6>J1DG%x2w2tqRq9Tbh|Z2 z%KH&kb?vc}n*3~->4xLpR%+_==J1d+Wi29N4?|;8u9pbAdIZmf@q_Q_Jw5Drw9z_Z z5mgv+Dmz7mZ(_5)(sRVT85vvH@Y(fTwo|3?sA45MJ7ILxG4H4z6POl~-kgTx*;Wp@ zg=C}<4=>}(vfH8pQ77)OS!oC#CF=5c`P%z*j25iy454Ur`~YA#T?Ak}_2&l2AmJS& z>{-)j=1lL!rlGHIEwzG*8+?Cd8r zS?<2wr@E?M3ZS62^Q>L2Ds`I(I=>GAAOp9w{u$6{5YjxD3@0vEUXM0l;+vpMLQg6D zva>c&l;4pHCL=~2pTAItQy-R`D*o(-H=dkIfh^9DH{Riws^qHX5Nc+|2+4<8ow2XB z``q<0SVt#v<0f{<@J-`cIfJJ=Kw}SNak}hG;8_I8O`tWFx?}T9Qf)5v>G*-nH5%fL zX?(qy(=AkX)KVgOS{|XjQ2UjC#Jh5%Km&RwgcR*hR)do&q$Z#W$rPY9_-wn#IV`*{ zR+#jPJRW**?ka`&c_-sTE~a_cx|o>AM&RV}(k9=g(Wjy6vgHNi761E9^`Cl7Un|Jc z=E}(3@x3iq`AUFRLW9tVE}HY7u^R_~K}w`-(wqBNOK=1LWJ z6p2WA5-t>^=rx!43^*eqIzw!ZZUwYL0pjJ~b`Q{3j-Vq{|)jOf6PP5)p=|{3$yE@P!bKU+m=s(7q}OxisjEgHMgHxWaF+ zZR2pC)jd|Vqf82RwX;X>)M<~7ss-_eYt-|b^E`MbsJI#*^QKh6>m+HxB{<}BHL9uy z;0)gNn;O?|U4DPK@VzY91VO3%Ry2uZ4;e!!+GV-MQ2cAmPCfsk7J#vq|eLu8qq2gm=j1fjk>w*qrkC9QCAo zGwKBmP`?)*J6U;ZbfcXjp2M82pwp1IqA!uW=we?1%k5uFMaX;*4xl%(wSc5m>ZQ(I zbl&Bpg}y}r@R9LxxtLR%BM;JWDVzLyGahJqNLpvxrKV*j{8BiZw|hBdSpVQn2RQ{4 zF|853;?yX;lhP=0@lW{^a$16fxk#K9hFl&o^tq;0A^Z+r=NP+U{S^j+k-%X?bVA^U zjSI00RKeFz%YV-kNR$i#>YDjDN;}9>pQGCg1{k$1K2BX&MRsmmBsNO?@vnC?JTIz0 z_yeD_7TT; z-y{~J#}ueVt(JF&KPD%c3I;@@Ak;o~k(8W$wtj;4(Q&jox_22bY$T~Ts5~EO{bh3q zX`*NVCZQM!5IbEAk6X(E`s`_H?U)J2K@~?Z#U5dqMKl@VoqQ5xx`q(npZf+%v$wNS zPotgb3}!uQ*b~HCw@ajoo1L9F+$1{M8QI5Tq5wI+az-n@vaD~OrQ^SFVEd${C3z$Z zU?jG!tFp2!{(_1|115ec^LJ z-^9BoeG^BRUG&psS89NA&&{0e@QgMyZWzd5@RP3@9+ z(K{uA2N;Hj!-N_dSrfnV@mp=duDJCrU4r!)xYUaHzp{sX4v~B{`8vk$WS7lc7KV&I z_=#u@2I%(0Z}eP3=en-F08qUj`X7lig%hLhA2xi;L-x?Pq@>^fNzA|klw>6-0$sIG zc%>u*(FgZNb3skbaz*xiQG_I|u1cVqwu}D;aIKGTt$s;W-U5&|Jpmx?bSw%H*?<`$ z=#k$KtQ9dp7ox&kJ+BHd5N(z^#Q}ujJ61f*p#TTbBbep&#fm-I@toB>LnqOfI?jYU z9}ST`74ij-k{F@49Ic^c2A5$291vt2DD4h6yK8Mwo1}gV1%P!8egq3WWT4zC6Z5W= ziCc6@9DO;}z81e!Aon(jFW6jJ;&7iW9of@3n(!mx@@h``jMeLBaQ2DS_+d8baL;wS zdr7Y8(F0onyWChjUQgpk}yN9a@8kOY4@<0c|te4&S zd8rOOMyrtY7$Fk4*gB3h{T0&rEiLh)o{$WSsUPb0Mx6C*55)!1G~47`1t|GqmOAe( zddRlagsXdR`)-Tq{Ur7ciSp9Npce|ECC2?BAzNP%ydWO+KO9)tCZx1d#x|X|OIM^E z{MvMjkvg2pOF`X0BFd%}QMb!E3SI z0dG+2caj!HJw#j~v9}TSDQ7$o8KriZtpTfdMUK8$6MXI%aqro{J!VYfktHycp=j=sbc9@NV7hLf0a4ntX;qU}&F3AkwGT_G3 z!qBPT3gN~6$4Sw~S5pN)nhve-4udTgQ7%0njd=<}<(pb^{By1G^XBK`G9vk(#Yf(N z$#6u5zN&uh3bMtU2Nf#XWi+fp$rLCqYnx_O$O?VOd;EcXX^QCBq)e0`CZx0o7WpF! zK+*lDN?E zdgH<%8mBxuyVBQ>w8xO4ia4y4a+HLR8-p1s7oR+sm0XZtR22@;c@~f|qy>58$!Kpl zvEAT`?dW!Ufj4{YY>78`wQ4n7|2_zyW+>l#pR;@pK!tzwfZd|<96*Zh6ovQhEc}0iczQJr3-YA_DXp~bd1>1ke zH~NWeE>Z91{C>b^ms)Qp90ATp2h{IZfo1Iz7&X($9mjnAM;kId&Bpr&#f(lDZUI@a z8E!%d1wbRBfKqX}R4SE>xvGV};r{HfjE2L;BFcN+4x|ozr>10t6uPZjSaqJ@gYF8o z8D{gWRDQE$^5_nKy3a(V)IlQPVzNRa1bMSaVGV5@g4~NB5qu>`9&1Kq&LHyAB7#^> zT%%*1_Db+vROCxf`e1tT@t1PLVHvMiC=pBaHlBkkvr#M*E1I@6S?&Ekv8z7f6yZP6*<^X@zS1wg-E2dhLj6R}IU( z%y>-Wj?KxC5ci7=z2_BD<@T`(=$XY&ChO2`d`;TIPp87mfs5v2NlhcuYT>NN2Z4C| zN;u?I3FB%tcCd3}MxDo)Z)}Hb(I4MFC^t$It2jWbT)?t`H?N+OofXH)^?IrB_%M-a z>6ah&7wMmkxca${>g2{7^Wfn_lmt z55s!KQr&aX){u7hl8&9!rpI(i9_Unc7eB@B`e+@Qm_)f8&zN#J3X*ol>EW7CrD6Ij zOYudr3nansC>y8Sh&ty-&ScYQeFceyX$EF*%xuw0-pS9Ye5J}hP89Wp)K8^pH*wQ5 zQcBiO)osMMNb=Dx=KIxyuLi|PTdiS7i52MORb`gL0*i~m+ciqKsKeP^+frJQtD}2E z$BfF@ZcaQr$nQWVM0~#A_TXq9HNvqlj<)dpv8OAUvt3F?L2 zOuGk$1-1ljG8|+o)Iq0_Iq7dyW1vmRr0{3^dG^nGBC~Gq4HQrN+QB8o$ft zuEhMq3t9e{{1&m%w=Cq%AkrG1fx*>H&IsPXIKyvWVojubnhO8g(}c!sVm-zmqOb9O zXz8|Bcw==_Nv|iIS+agjRH^sH^WJl{|L0|-$eceg7AlJPPx^mM4g<)S&?>?Vb-;ke-n%kG~k zZXGxDz+#xRC*1Xp)`}$Vm=MRwD;}3w*ckw5+XASNoX?PkR z;6z3MaF*b!O^Wz1zgJsCk8b3=_PKwxBchZl!+R*&aIGVlDFzLHwlgVNH}N zn#$_`@fKjF+xA=)XHOtq6CbyBK9ja42O(xC%j)N1pMxqraR|0>ombLJc9<5@ky?qW zN_2St{n}27z)Qp09pwb;BP{7h(L(9-#yII0m9;ISwjTymIn@6aL~l45?eIRaTFz%N zL8a}80Zoo3(I27om-BPnqE!7uUn z+mcTV0=x%553qk*e~+E=AscjVk7N`4F<34u`Wi^uYsb|wiA0FzO<3UV(~V}U%ATY` zw6`wj1{92lt=1Spt>5Rpy|qAIdC9Bm>S@{8vxDeqYZ!mHV2F36dwUpbS@j%0=;wO( zp3@A39T8JZ*pT~u)9zTmM$~Z1h-<+wa=XathB=*TD$(hCh@~5aM#iahd5c1~ZhjFr z9rk;+reBo}A>E=(KYbwVh|BWFCCFJsM0UMv5Xu3w+!AowUQ_wu*6Y^*6``_dInUk7 zI-f`)XuB<3Dn6&rP5lm;?DJvEnrlKWy`(Cj^RGxB9&3qzXhA9yyl$>ofb z-pO~k-ZWAl?cxp;%DK(PVsN65CVUsuKYg~=TmrOHE%MzB@?bweclfg4+J#I{SFy{Tc! zI%A~s5!x6*4<*B^9d!2ZS>wr8MuyT2Z6B_Ea~pe-XZmDdVO*`aJ?Z$*3E$7{Y!X7U z_LlsLcrCwn@&o-@zAtakgVaH|!kEyD(Z^5xII?=8&L?sBU5ut^wA+7}U=#ZQK;`^O z;V=r=N6`6*X&;NP-aazPj&nWJk1>9Fu%t1FVUY!@n}}Xnh>LB?_}rpCZ++(*axKne z&XO#({Qj@AoR;9T*MctZ^Wc35F+$nU#a@r75rLx-=@nLb^XR-ESn);!ubs14)uAmZ ziB&kt$pq+&0wkM&!thHmisa1u_*&7|$C7kdVr3uPi^L5yj5=HSE3Zg9&>~?IaZ$qk zGea>2bM6(hqhE8x08EHK)>>$KDvf>WepF_7n%CCVD>KdTAhx5BwPrccL>YCNoiD)D z2}zt804Er6eaHxW<8KD&_7_~t&{Bl))-_o}psW#~+Pzv-gZ~4-Ed>yVXUyLcf*iqm zcF8kf;HEoXM;oe>8E~RwiNU8nQXe-=r#!CNa$N}o&aj9)0sEG)jO$x)APquLx|8!z zwv!whL-Id`{rE-7YONbj4#?fsV$!xcUE)tHf0^_>khm70MRs1N&^6Rf_?UN{P_1n zJwKjiIldbf$#NQ4?lZI?6KvaxA%M~=^FFfvV?8|hYbEMKY88tvN}01;N1FA3Z;hX2*@U7AYH(`XsUIWdy7=gK^BB(}_v zjgwUB>$RSeXJviLWDlV=^El`3Z+3|e)FVI(`pNciqWT7Xm=r4CwFV0OB;(|;n{QV7 z!!26Sxflg_!+^G^ZQ)j^i_vDfqzWc44yR5gP@fIL#3cLdZQeix^X6N+f*97i}gp1Z_M;&HUe>&NaQ z=`ZtWlOlNxDX8r(RlHYy_sBP1`H|R-Bp_SvjBf>$qTG0#53zIUv{L%QmWw4}&w{*( zvF&D){(G;F!E7Hl(9*h9OQdBKA~W8XL5N}V_G+$l_6LkiEN!~Rm(lrIuPpKNbCkb8 zdW6!>|HmA}7g?>Y_z2m;6NT2~q-TG7r=) z4k=DdvQj$7>sHj3foGCr9K8|Lu;BJZV<+h|2e_VeCbQaTXr z`wt(^{ziNKim!T71)#k)0U<1%C;^zAF#sI$Y=4}0fH%x1cIBP7i+7T17HSUQ;I9@=a1aa}6d#IJ?#VtS;3R_6wCAko=#H4EsQ zl-_EAe}ZKQ=C=7vcm{doYFGwYw=_kq?)GQq>AGD2mpz^dAh1N%67uld?%Lj1TZYt4 z5%YuP6l~?Z0}hdvDvLdLuiJR^d!(c;A+&MCKc^SNqxy9C3LC@FxVT}_TKE6Tr2l+t8?f9;e#q@lcr}sv>J_k>= z9n{rYVZA9W4JmXh?XjYOB|ee|z^uBz+dy{^;5-B;ARvp*W&E=D$q19~Avg$j=5_6= zrjxWV3S1HDhVL#|K123veYVyt0bAm|0fKR{}sYr&rb~CZ^L9i-PQ%%8M>a_X8v0V{Ug-?80_C@u|G%h^Y-Nz z3We;~9z1ErN4PBkg3VtztrG`)k?NNNK6OH}R@5-<&G73^0>H=q4WK)DI5Bg>$)5mu z>3Je@me-{ZK#)-LimbgW@s`rzyEZT2S7YRThp%>?$G~O(teV=r^8f(&zr7-IM4AG) zO8;!nu~;b`G%B)}>8YX1<6cYu^kvTb{ApfcrfcD?hQ;rnEBXK^>}tY=#4iBTPqg8Q zCuakYsyEE;AUasl>$9b#Ps*KvK`>cbk-OSm^COV9!OB336;k1&E|i%Tv*7^OwdNJK zg*SZ3ArJ3}IV9cf;J>F3dh6Cr;4BA!09BXkaoUnTNTODVkovcLe%%Gk0|aYj_Jpnp zAxo3=FV8(1k7yWfs3NZ5_r8LhLj`?uvTN#}5}gh#fUM43XteJVQ+VW%U&eG_TP_HI zJvjn8!koLE4lN5@+nLAI&qle_Qa}wAi?~=W|_2V$SoCRF}iK`K3ke@Y)30 z;iwnGIEmdt&#U^n7ZksLqwLWH(FY}iw4!H2q?w z5xAFkWCjlV=ozCehq?87rnLKLcJ?2?K#_m0Y2SsDu#8YoID(G~x-+y4J{?Yt?x_Nx z1A7e-HMWT7<6}V@^^-S+nHj<>TJ?aoTh@ubbB8P%TeINd%|SPZ11M~c&<3;1=I#Rx znyMJc!_ad5Z`zqN8$n6E`HyPxngTJ)Vuw0{PE55BQ7I+{{w!rp(+~g~w=!!fjX{S! z_mYd*>nw)%%9@1=jJfAAN;&N04XByC=P0RIIk zc++~=)bn|X6=($T$>-vd#e}b)Rzt)`R+ub-fdqzo%z&S{52TnxhwpqO8@zBpmg>B% z3vgc~o)a=cvv(h(ChCb5ALj%!BdQ+PKE}ayR?Lr{xLF(KS`6)1qs6KUS)w%X6cbf> zB-a$KK3Duc9VV2=!6jt$NLH55_oAJw(zCmd9#xZ_Cy(lBdu;c|>H>s!2&5gDi2< z;EC0})VgtTjB|{0&|2*l@^Qd@E4lKP-pi*^@tqo?lOkw=|!E&B}T3yMC<#O5Q zVaI}`wS5z$@C3cm40oft#gWq_vEw+mNP6{Rz~?DAesBB`{OCBL(__+SRmB|Vp1%Te zSL)!(k&NLwO2oLt_K<*xh=@Mlz?;d&Vx9DB@01?*MPq}+*641zAerK8zVCGoR(f^# zo;~JK)W(kJ&yj*^xf*B$@a`Z-unV5Ads(GDWn>N?H_T7zT?d>Enu+B|yg?iJ@J|?t9<03;!Dx(=uwe0^Q|#HHLQ4Dj&=Qd zS*_qbtN<#}VO(nV%+0!<>*u5v|+ZetVIyi1U4(&I-L7CyIIT#FESiK9S|a2 zFlg`G$_(z$LpI>Mwj?@U_%j2;9?sk2@XsKZub#%lR}6KemqV4u;gk8%t_VN#Oput^u$@OkFw@UWVjaL<%@d)OBwt$k~%i`~};)#}k9pban>e(I0w zz$Mc;cG~_PV`H_FFGsnYi4Lh4Hp^=8{T5r9_w~YB6Q#+Ue)96 z9OZfxgW)lrl^RK@!_g-7?9ET&r5zME;7rF26&MZO{VFKV&Qiqw)RuRZ(?_HR%a0yK zut-AR_}qto2z(~9lmC$3qry!&N$6c}SDJfq-JQ=LRF-k4JtixdJ77lm%2l1O0Rih& zh8gVxo5$yh65`P>rM9w$O)1sRUj|?Frv(e|_#!9-5KA0cfUJm!p2=ZPMbZ##hA*a+ zX0Y=y`emvHiVE!L=V7Es8@_%Tc!s`Fod{WJZ`s{PBzp-WxR>%^VACE^?4|&Qjy+2s z(okT*15bSoT&H?X%T+^D9#gwoCoUkLW*?PtG$V+(qq2VL%}u-+yqH}_(r@hfKYtN% zWju7WbE9c%roX4fvDD5t^rei$VE zZbZ*yvINxBV1~afI4-9IZ;r1fWZPLYiE%bio2 z0@*R_j<Cr$qdN75bwQ# zSKDXv0X2pEHf;pd=Wqcuye^83sxNwob7UX{4^|ADI zGPZGU*rI1RyK_G?HRP#M=+%nMX@z%%t?}3`bD;?{!Ml(AnT2(Kv*#qBQ}aqav%B;$ zQy65Dqm54hLjf(ju{}iA6}aavC!UDcLVb!XV@EkDfPLnd_Di3SIBhoh>=Uc6E2&8} zU!g9Kyn2}6J`_juKvqK|UXEglct7~RN(zWb234ZaK^AQr;F#IkWCus*J>^pHER|z+ zjbEzN?Z@2=$1zmkZU!%1wbg>iQC?^pruZ<$U@yjJ`wVnu{$f_c)dwEa8?3#k>hnOs za4Pas|KqzGoLoc5TI3G@!$Rf2TU+AMI5s&Zl}hty)Al>M@7FPSv~{p~gTWenqW zjz-F4?yb5ALAohoKnw5qXAn7OKk~_6`jIf}=#9E1USXL{1&)AhCfXPu(Tm?+GZC-b z<=bCf64)G{5ETFXe&8_?GT5Zcq9fi+FpYrjglw8fvwt+X<{YCZYE9 zsG9p-8oFex_o9!lS@>IF6L(H)IvOrwl$nIaF;`CgSG8=hT^VgVQdgb^PIK0g{kC3D z7Vn_=^--&w#8>fU3>s6G_DSsc<&RjS$@Q2pX^S(PpY{x>V@)KF9kd|KDTNGul{R$| z2RM)aji!!{4?o?tbJvMj^?tfou@f~)QJ?LqYB?fR8A=7YP`vPzAHQ5gehIR@VmNCd zwsDrak&^F`f5v)_Y6_dyF;+22&^$z2N2g<^omvp!;>4+Q<>y}ZaPRq(n4Scsce(FO{#uQFUp7- zDp;~{pWeq{W6ct0#Bb@T0+9O)R1c7i+{Kcr%V(5XBG~3sY%X}aJ?%~n1~aDs{2iSD zaVbv>H`iN`YTJK&{r~1elY*ErADOq#GoU=#yP845BlKEy=LOnb7DJdUeU^eG6(ud| z%|)NJuv}$c4ePoDY1Go)%A0gr+_n;TS^OgPxLkc=M30+YE!|NeAOnosZ3oznQn`J9 z2>*NUPWLMF#nV5nj9nrtjt0X0@`V25U` z_pcZNk(0~QiTy$yKHAzoQjjPD#SVPQxe)(2Ri3Z7&E3zBkLR)#c*CUwK%%Q*|TH{atOUJ-!%&ANE;~jD4))#`YNh z5BEU&m6;pA^?!7GgWwcQ9&(_I`}DFdE{|aB{d4V560erOP|z_&v!4=9E#oGpas{{oNlSyDcWN0GjN3&CragvS}HzxK7B1+|GO08lWDA1ShNXB zX3?SE)+Uv?b$2Tu*97r#hdymXky&IBNCE%T;@Et9)80*RO^sSUrG^0+Z@wY>BF=;O zDH-Qh<3d2a92VGMc(% zItY6CEJMX!zu=SPQ~vFFjY~@MH|T%=ATyDN?>f~4mXs=W9qpYC-AIxN76%{&Er8B` zlQVMNd)Pwrkb!Hy3aV#^d-`NKFf$gQF@{?4ulf-PjyHaYu*?)?T2bj*^HM6 zX>V)%L&1n<&H_;sx-~pO$g;bw&SUFx)*A$iPosi0>L*$NP&~EI$zk&xP%AWl*u3_11QpZ6iC)1`<#m z@rO5a)iUB``Riu@sqwx~^lh$O4i?C_+Yz*<4t20=c}Q*1%L~tt#D6lItGPw(^WJDb zs~9VQraUqIs+^kG_5o1?qGUn{Xl~jnHU+PnRvaJQ$uP8wK0dxnQ@s^@9H$76m6)=e z%%mBw*9?Zo&8%q0znE@L*Iuf}d6`0S?hX#gxBI@9VyXv9`l+%}iiT0K!-IJ7LS0G` z6-DNq0RuI+lmwICgP7CT`7c5mxfu=TydlsK=?QT@6r(b*{0K^hnbm;2uKBEdN^iTj zzXw#5uj?YY@QG0Qv~ueq3tLA{d>9w6OC!{y1!}8}^;iv{8LR&>Y=bdN{Ohbp)J6ta zk%tQ5j_=hXJ$9=x0x^jCNdtk_#Ri095?+%=@9NX2U^7hs=t{_9s4 zS@CCrWnS8xVqd%nxfs8aN-p%LF9sC#h7FdK4%|Qdhg$y){B<6rIIYF6V<&J3-n^H% zPQ`YRS8_HrPYx^lq{2zC>(}Y-B7|rr;P#ZFY9iK@OiUwa-S6|i#qqoenw+@-zxwL^ zg(>3aBi-${e~)S3`!kEkPD6Po?=v=1HkPKvJpU_B1s3c+1xU8_fAdR1sP^w~0f#HV zYsU9vI{f=PB%p8Rm+duIychr<=ZeoPG9cwh+1ZMoWf%$_R#C4#OD#LvVqS?ayn;D5} zqHMaYVhY{27^;w=A-rS2($egEx|3$TqS=a3)OS>BOk6FZ9sAfa&BJ=jDhZ}Klg5Zi z70bSV9(3e_k%@`UsIByGne&z3lCBH}uQkZ~MhxL5mQ0Z-_RxN41^A1BQAvEr<`k0;#YY@3>9g^aL0O;os5zz4o1PC^ajZ~QqVdFcmaIMIc*xKMTft9b zYld~%Z_d6Qt;yQC2W6u6)xJ_%(vte8icoRlhmWA_O}EKo^fNa4imJ-+@7;*2w>DOL zmqvnS7X(<$z6C9rtDdvaL1hj_i9o#`x?RE^#MW<-$WQi0u=OYrS7@Ru(KpWn#WYFDKL!~k<>Z-LT$uv?-eiEpud)MEj1#Sl%9wEU!|TFR zW@>8f*Ix{*%$FYw!~xnAkr1^dYh}Ub+&ZmxqlZ(>U#?JljoI?mz{EVrkxu(|dyWy$m)ELy z3WMk8vl@~+7won)Z7>>t8^Aw5dq1kZfkr~;;KkzU40;nuXyaezD(Lw&w$K>vDfSpy zbm{N=gs{vl?E&k4`2T$V#P0lu1pS%)&Hv-o|37^cSnZdh&ao`aE|Dxtl5NjLmL%FL zt&wm`RWI=`HEBY`y5%uV^gb)A0j(DQF{c>iDMfka5s=6oEfcL9rS^_CM#10jN7=JA zThu9iA07^iI?X(>_}_o3HDy_U9z>zYoKMS3{E-x-+TwFzXK|ol!gPUY=+7MIpUakq ztbKEzdEYa3+5R@3CwBVHADp*yKAQ#Au6k=B3^_);YHXPK>yw;l+I!;$RyDy#PD*E) zd}d0da}@u~FZ^7_{PnUTxy*SMV`%Il^Vl>Yz>5DF$a>4n+G9ulj$=16;jvf?zPqdO-$w1Xi z#w{7Mp;Qm`?EV9Zh=2D_Bgi04A^%F&`&utUx=3Q~ zw9S8|l2o{fZLZikLwmgO-P|Yd0afDVC2tL`$5@A!;y(oc&^*_V!6r^Aj_<}r{QKp6 z0U3S;+SmuoU^B!s%*za+T4FI{t+D`Gp;&A@*tfO%L#JD)u7g8~!-wz{tmnuvI0Q(( z;pV@hrR-2}r-FoU`?QCYf!V)>l)*p(OfObz3e%)dA0|_ZVa@kg%b6L9o!-cvu+?T` zugHF~Mk)|*u0E!LFM-2~S3LS3%dDaUS~OFu!g*S&&US50b*Jk$)#+Xi_>cuXc*&Pr z`(61rKLi-n*E}5`)}8L2NXA=4>E%behY)!)i|w9%Vj0oqt4@F0H)5hvj)aqZrhfh$3r&?;LjHofv0X=gg9ye4Z^$9rIDnPp)~yQH8m0=wR_eJ{rNFp ztcTR>>NXUtkQJYVK79DFY6Sf3?%}$S?dTUz(;`a2igi;-yGSb%!kFgok%IQObDJK| z_h=}p148!(SW`B&Gtvb;UNKj%txC=$TR#=g8pKE*eUSuSvpd`feZZTt4IzX)y^!dIM#NzZ;w)VNAl-1Dvh_0E*1cuE1agkh`frq% z73qW|+yl;&sTB$usoQvX#~rZEBQi#o3~Ei%3q1?8kMN@xJ@$i-9~g{i8Oihn%Pd`u z@9d!E?`Z5rwWYp0W=WG6Us$zj!-|-l24+i?$tk=`4TAYBrPejbnoZn^D&Yo>TP>JW zI6e!Ag)^hfXG54V6cC~FpvCh!=}t33ZUUSqUmPm~mwSK7*3|jV8D}2jv(}sjhYV;~ zbS2&>K=HT~?RxCRv74=~dwsA+5KV6zohYto6kFB2iHa~M}0xnDt0`3jx!jld^l54{|9kGk-MIcn@#6BNKFp@o{^7Tyn8kNIrGnWb5Jnv)xyE z`-|80q;_wx=2FG%amNceu z+l=dGo0gSFYgbLBCLoKcSf`UjHr-=W;|-@FW~Rv6^uu!eVhg+ZOp1M5casU@$pRK` zG(wNPS}F}5&nb}XxbK-=aR3#tUE@-$#VH8IZh9~dh=?z4He)&An5jZZK?b05VyZR_+^$z%rNu>bp|sJf3ki!N z?#Cme$9f0GP};YebxdxOhX!2zhSU3)$P<%$-Agkd1Er=sVfTTl5*)Ao5#AS&!EJBN zt?Ob3U`AH2uN)j{*2sWi+jN3=nYfB0eT!i?%4F~=4HDjiBk=@fEPT)eb#Qr`KJ!?} z;`WOd)z71v-r$5r zm?0%hLV?*!^Xjl``|q7I*3+GNjb~LxLJmY-ShK+t4YMjnP|q={Ql8^F&Fcg+Vx|tr zcB_mD+9|TP9it#}+ zeRww;Xny%>Dz~nUY{%ACL4oylO=fXf!^qO{EtvPLmB))VQ_TsO^|H17!qX!!%NkV% zUPB{@V!V&*qt&Fkr#0#!>XibWADk8h^(sUL;y_kLe$}Z9OBzrr!u3UR>ficnybU%S zm66br*!D5>q)2D?N!(`VOgem5SK}Si<>8Z3SMM5Bx7DL&sb8-y0bC)ry=S8Ubvq^_ z-fh?<*i}D&*LZJ$0X@8d{19C!NQ#0$0HEih}Eo-mSrjy{yZwyIg z&%>Qlu(4NK<`PO4p6>dO?M^@Puo;wCFgj}3PTYRCo%o2=E&lO?1kwS)``|a}SGPqH zJChoi_8jbX{vaZH@iZLVqJ9k+!wa);dPp=gQ)<;fJ1KdCeqiCd8{>{mjR9v}ypIuA zFo*jw8Sk7PAOsgus_wB(E`9OOkW|LC8=7XsMs1;@b%!9=_f(iB{WI;%)gNL?)Rhu8 z)H`gOXxbQA*OV|lowE^_>?Nmiw}#^!5!sJdHDa}kZ;XRFwTt1K2;>1wKg^*3=%++Z zMD#-#&`Mriqbcu!Dfq6QOg@u3HRQdD+{tzyAq7?Q8#ms=eS^hC$l=+)mG&^{z{==a%Vk784=I>^QBS+XHQHW3}&yHK(6R zTHwyM-#792;#e&ubBNGv@GkJW0w{q&o6Qs)G(qtI`Cg6 zU`$T_K_sko@_yh=79l4-8xXw8iTMKlp8RtlfG;e&wdwOhjfVS6S~6j%L=WWE?ibyA H_U3;9;9i$z literal 0 HcmV?d00001 From 9ad5e09e17ae3f95954a8d3ed31accb80aa8b79d Mon Sep 17 00:00:00 2001 From: jborsecnik Date: Mon, 27 Jan 2020 17:12:26 -0800 Subject: [PATCH 053/358] proof --- ...loying-advanced-security-audit-policies.md | 30 +++++++++---------- ...nt-digitally-sign-communications-always.md | 6 ++-- ...-this-computer-to-use-online-identities.md | 10 +++---- 3 files changed, 23 insertions(+), 23 deletions(-) diff --git a/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md b/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md index 2a4a0c3e3f..2a16a28135 100644 --- a/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md +++ b/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md @@ -22,19 +22,19 @@ ms.date: 04/19/2017 **Applies to** - Windows 10 -This article for the IT professional explains the options that security policy planner must consider and the tasks they must complete to deploy an effective security audit policy in a network that includes advanced security audit policies. +This article for IT professionals explains the options that security policy planners should consider and the tasks they must complete to deploy an effective security audit policy in a network that includes advanced security audit policies. Organizations invest a lot in security applications and services, such as antimalware software, firewalls, and encryption. But no matter how much security hardware or software you deploy, how tightly you control the rights of users, or how carefully you configure security permissions on your data, the job isn't complete unless you have a well-defined, timely auditing strategy to track the effectiveness of your defenses and identify attempts to circumvent them. To be well-defined and timely, an auditing strategy must provide useful tracking data for an organization's most important resources, critical behaviors, and potential risks. In many organizations, it must also provide proof that IT operations comply with corporate and regulatory requirements. -No organization has unlimited resources to monitor every resource and activity on a network. If you don't plan well, you'll likely have gaps in your auditing strategy. But if you try to audit every resource and activity, you may gather too much monitoring data, including thousands of benign audit entries that an analyst needs to sift through to identify the narrow set of entries that warrant closer examination. Such volume could delay or prevent auditors from identifying suspicious activity. So, too much monitoring can leave an organization as vulnerable as not enough. +No organization has unlimited resources to monitor every resource and activity on a network. If you don't plan well, you'll likely have gaps in your auditing strategy. But if you try to audit every resource and activity, you may gather too much monitoring data, including thousands of benign audit entries that an analyst will have to sift through to identify the narrow set of entries that warrant closer examination. Such volume could delay or prevent auditors from identifying suspicious activity. Too much monitoring can leave an organization as vulnerable as not enough. Here are some features that can help you focus your effort: -- **Advanced audit policy settings**: You can apply and manage detailed audit policy settings through Group Policy. -- **"Reason for access" auditing**: You can specify and identify the permissions that were used to generate a particular object access security event. -- **Global object access auditing**: You can define system access control lists (SACLs) for an entire computer file system or registry. +- **Advanced audit policy settings:** You can apply and manage detailed audit policy settings through Group Policy. +- **"Reason for access" auditing:** You can specify and identify the permissions that were used to generate a particular object access security event. +- **Global object access auditing:** You can define system access control lists (SACLs) for an entire computer file system or registry. To deploy these features and plan an effective security auditing strategy, you need to: @@ -70,7 +70,7 @@ Designing and deploying a Windows security audit policy involves the following t This section helps define the business objectives that will guide your Windows security audit policy. It also helps define the resources, users, and computers that will be the focus of your auditing. -- [Map the security audit policy to groups of users, computers, and resources in your organization](#bkmk-2) +- [Map the security audit policy to groups of users, computers, and resources](#bkmk-2) This section explains how to integrate security audit policy settings with domain Group Policy settings for different groups of users, computers, and resources. It also explains when to use basic audit policy settings and when to use advanced security audit policy settings. @@ -100,7 +100,7 @@ To create your Windows security audit plan, begin by identifying: ### Network environment -An organization's domain and organizational unit (OU) structure provide a fundamental starting point for thinking about how to apply a security audit policy. They likely provide a foundation of Group Policy Objects (GPOs) and logical grouping of resources and activities that you can use to apply the audit settings that you choose. Your domain and OU structure probably already provide logical groups of users, resources, and activities that justify the resources needed to audit them. For information about how to integrate a security audit policy with your domain and OU structure, see [Mapping security audit policy to groups of users, computers, and resources in your organization](#bkmk-2) later in this document. +An organization's domain and organizational unit (OU) structure provide a fundamental starting point for thinking about how to apply a security audit policy. They likely provide a foundation of Group Policy Objects (GPOs) and logical grouping of resources and activities that you can use to apply the audit settings that you choose. Your domain and OU structure probably already provide logical groups of users, resources, and activities that justify the resources needed to audit them. For information about how to integrate a security audit policy with your domain and OU structure, see [Mapping security audit policy to groups of users, computers, and resources](#bkmk-2) later in this document. In addition to your domain model, determine whether your organization maintains a systematic threat model. A good threat model can help identify threats to key components in your infrastructure. Then you can apply audit settings that enhance your ability to identify and counter those threats. @@ -111,7 +111,7 @@ For details about how to complete each of these steps and prepare a detailed thr ### Data and resources -For data and resource auditing, you need to identify the most important types of data and resources (such as patient records, accounting data, or marketing plans) that can benefit from the closer monitoring that Windows auditing can provide. Some of these data resources might already be monitored through auditing features in products such as Microsoft SQL Server and Exchange Server. If so, you may want to consider how Windows auditing features can enhance the existing audit strategy. As with the domain and OU structure discussed previously, security auditing should focus on your most critical resources. You also must consider how much audit data you can manage. +For data and resource auditing, you need to identify the most important types of data and resources (such as patient records, accounting data, or marketing plans) that can benefit from the closer monitoring that Windows auditing can provide. Some of your data resources might already be monitored through auditing features in products such as Microsoft SQL Server and Exchange Server. If so, you may want to consider how Windows auditing features can enhance your existing audit strategy. As with the domain and OU structure discussed previously, security auditing should focus on your most critical resources. You also must consider how much audit data you can manage. You can record if these resources have high, medium, or low business impact; the cost to the organization if these data resources are accessed by unauthorized users; and the risks that such access can pose to the organization. The type of access by users (such as *read*, *modify*, or *copy*) can also pose different levels of risk to an organization. @@ -121,19 +121,19 @@ The following table provides an example of a resource analysis for an organizati | Resource class | Where stored | Organizational unit | Business impact | Security or regulatory requirements | | - | - | - | - | - | -| Payroll data| Corp-Finance-1| Accounting: Read/Write on Corp-Finance-1
Departmental Payroll Managers: Write only on Corp-Finance-1| High| Financial integrity and employee privacy| -| Patient medical records| MedRec-2| Doctors and Nurses: Read/Write on Med/Rec-2
Lab Assistants: Write only on MedRec-2
Accounting: Read only on MedRec-2| High| Strict legal and regulatory standards| -| Consumer health information| Web-Ext-1| Public Relations Web Content Creators: Read/Write on Web-Ext-1
Public: Read only on Web-Ext-1| Low| Public education and corporate image| +| Payroll data| Corp-Finance-1| Accounting: Read/write on Corp-Finance-1
Departmental Payroll Managers: Write only on Corp-Finance-1| High| Financial integrity and employee privacy| +| Patient medical records| MedRec-2| Doctors and Nurses: Read/write on Med/Rec-2
Lab Assistants: Write only on MedRec-2
Accounting: Read only on MedRec-2| High| Strict legal and regulatory standards| +| Consumer health information| Web-Ext-1| Public Relations Web Content Creators: Read/write on Web-Ext-1
Public: Read only on Web-Ext-1| Low| Public education and corporate image| ### Users -Many organizations find it useful to classify the types of users they have and base permissions on this classification. This classification can help you identify which user activities should be the subject of security auditing and the amount of audit data that they'll generate. +Many organizations find it useful to classify the types of users they have and then base permissions on this classification. This classification can help you identify which user activities should be the subject of security auditing and the amount of audit data that they'll generate. Organizations can create distinctions based on the type of rights and permissions that users need to do their jobs. Under the classification *administrators*, for example, large organizations might assign local administrator responsibilities for a single computer, for specific applications such as Exchange Server or SQL Server, or for an entire domain. Under *users*, permissions and Group Policy settings can apply to all users in an organization or as few as a subset of employees in a given department. Also, if your organization is subject to regulatory requirements, user activities such as accessing medical records or financial data may need to be audited to verify that you're complying with these requirements. -To effectively audit user activity, begin by listing the different types of users in your organization, the types of data they need access to, and the data they should not have access to. +To effectively audit user activity, begin by listing the different types of users in your organization, the types of data they need access to, and the data they shouldn't have access to. Also, if external users can access your organization's data, be sure to identify them. Determine whether they're a business partner, customer, or general user; the data they have access to; and the permissions they have to access that data. @@ -194,11 +194,11 @@ By using Group Policy, you can apply your security audit policy to defined group - Audit policies are computer policies. Therefore, they must be applied through GPOs that are applied to *computer* OUs, not to *user* OUs. But in most cases you can apply audit settings for only specified resources and groups of users by configuring SACLs on the relevant objects. This functionality enables auditing for a security group that contains only the users you specify. - For example, you could configure a SACL for a folder called *Payroll Data* on Accounting Server 1. You can audit attempts by members of the Payroll Processors OU to delete objects from this folder. The **Object Access\\Audit File System** audit policy setting applies to Accounting Server 1. But, because it requires a corresponding resource SACL, only actions by members of the Payroll Processors OU on the Payroll Data folder generate audit events. + For example, you could configure a SACL for a folder called *Payroll Data* on Accounting Server 1. You can audit attempts by members of the Payroll Processors OU to delete objects from this folder. The **Object Access\\Audit File System** audit policy setting applies to Accounting Server 1. But, because it requires a corresponding resource SACL, only actions by members of the Payroll Processors OU on the Payroll Data folder will generate audit events. - Advanced security audit policy settings were introduced in Windows Server 2008 R2 and Windows 7. These advanced audit policies can only be applied to those operating systems and later versions by using Group Policy. - >[!IMPORTANT]   + > [!IMPORTANT]   > Whether you apply advanced audit policies by using Group Policy or by using logon scripts, don't use both the basic audit policy settings under **Local Policies\\Audit Policy** *and* the advanced settings under **Security Settings\\Advanced Audit Policy Configuration**. Using both basic and advanced audit policy settings can cause unexpected results in audit reporting. If you use **Advanced Audit Policy Configuration** settings or logon scripts to apply advanced audit policies, be sure to enable the **Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings** policy setting under **Local Policies\\Security Options**. This configuration will prevent conflicts between similar settings by forcing basic security auditing to be ignored. diff --git a/windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always.md b/windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always.md index 2c0315e826..457ba6494f 100644 --- a/windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always.md +++ b/windows/security/threat-protection/security-policy-settings/microsoft-network-client-digitally-sign-communications-always.md @@ -55,7 +55,7 @@ Enable **Microsoft network client: Digitally sign communications (always)**. ### Location -Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options +*Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options* ### Default values @@ -86,7 +86,7 @@ This section describes how an attacker might exploit a feature or its configurat Session hijacking uses tools that allow attackers who have access to the same network as the client device or server to interrupt, end, or steal a session in progress. Attackers can potentially intercept and modify unsigned SMB packets and then modify the traffic and forward it to make the server perform objectionable actions. Alternatively, the attacker could pose as the server or client computer after legitimate authentication and gain unauthorized access to data. -SMB is the resource-sharing protocol that's supported by many versions of the Windows operating systems. It's the basis of many modern features like Storage Spaces Direct, Storage Replica, and SMB Direct, as well as many legacy protocols and tools. SMB signatures authenticate users and the servers that host the data. If either side fails the authentication process, data transmission doesn't happen. +SMB is the resource-sharing protocol that's supported by many versions of the Windows operating system. It's the basis of many modern features like Storage Spaces Direct, Storage Replica, and SMB Direct, as well as many legacy protocols and tools. SMB signatures authenticate users and the servers that host the data. If either side fails the authentication process, data transmission doesn't happen. ### Countermeasure @@ -97,7 +97,7 @@ Enable **Microsoft network client: Digitally sign communications (always)**. ### Potential impact -Storage speeds affect performance. A faster drive on the source and destination allows more throughput, which causes more CPU usage of signing. If you're using a 1-Gb Ethernet network or slower storage speed with a modern CPU, there's limited degradation in performance. If you're using a faster network (such as 10 Gb), the performance impact of signing may be greater. +Storage speeds affect performance. A faster drive on the source and destination allows more throughput, which causes more CPU usage for signing. If you're using a 1-Gb Ethernet network or slower storage speed with a modern CPU, there's limited degradation in performance. If you're using a faster network (such as 10 Gb), the performance impact of signing may be greater. ## Related topics diff --git a/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md b/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md index 5f27780a1a..4870151b22 100644 --- a/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md +++ b/windows/security/threat-protection/security-policy-settings/network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md @@ -26,7 +26,7 @@ This article describes the best practices, location, and values for the **Networ ## Reference -Starting with Windows Server 2008 R2 and Windows 7, the Negotiate Security Support Provider (SSP) supports an extension SSP, Negoexts.dll. This extension SSP is treated as an authentication protocol by the Windows operating system, and it supports SSPs from Microsoft, including PKU2U. You can also develop or add other SSPs. +Starting with Windows Server 2008 R2 and Windows 7, the Negotiate Security Support Provider (SSP) supports an extension SSP, Negoexts.dll. This extension SSP is treated as an authentication protocol by the Windows operating system. It supports SSPs from Microsoft, including PKU2U. You can also develop or add other SSPs. When devices are configured to accept authentication requests by using online IDs, Negoexts.dll calls the PKU2U SSP on the computer that's used to log on. The PKU2U SSP obtains a local certificate and exchanges the policy between the peer computers. When it's validated on the peer computer, the certificate within the metadata is sent to the logon peer for validation. It associates the user's certificate to a security token, and then the logon process completes. @@ -40,11 +40,11 @@ This policy isn't configured by default on domain-joined devices. This would dis - **Enabled**: This setting allows authentication to successfully complete between the two (or more) computers that have established a peer relationship through the use of online IDs. The PKU2U SSP obtains a local certificate and exchanges the policy between the peer devices. When validated on the peer computer, the certificate within the metadata is sent to the logon peer for validation. It associates the user's certificate to a security token, and then the logon process completes. > [!NOTE] - > KU2U is disabled by default on Windows Server. Remote desktop connections from a hybrid Azure AD-joined server to an Azure AD-joined Windows 10 device or a Hybrid Azure AD-joined domain member Windows 10 device fail. To resolve this, enable PKU2U on the server. + > KU2U is disabled by default on Windows Server. Remote Desktop connections from a hybrid Azure AD-joined server to an Azure AD-joined Windows 10 device or a Hybrid Azure AD-joined domain member Windows 10 device fail. To resolve this, enable PKU2U on the server. - **Disabled**: This setting prevents online IDs from being used to authenticate the user to another computer in a peer-to-peer relationship. -- ***Not set***. Not configuring this policy prevents online IDs from being used to authenticate the user. This option is the default on domain-joined devices. +- ***Not set***: Not configuring this policy prevents online IDs from being used to authenticate the user. This option is the default on domain-joined devices. ### Best practices @@ -52,7 +52,7 @@ Within a domain, domain accounts should be used for authentication. Set this pol ### Location -Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options +*Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options* ### Default values @@ -81,7 +81,7 @@ Set this policy to *Disabled* or don't configure this security policy for domain ### Potential impact -If you don't set or you disable this policy, the PKU2U protocol won't be used to authenticate between peer devices, which force users to follow domain-defined access control policies. If you enable this policy, you allow your users to authenticate by using local certificates between systems that aren't part of a domain that uses PKU2U. This configuration allows users to share resources between devices. +If you don't set or you disable this policy, the PKU2U protocol won't be used to authenticate between peer devices, which forces users to follow domain-defined access control policies. If you enable this policy, you allow your users to authenticate by using local certificates between systems that aren't part of a domain that uses PKU2U. This configuration allows users to share resources between devices. ## Related topics From fb4fb066c04530db36a08ec07626e839fdb16ba9 Mon Sep 17 00:00:00 2001 From: jborsecnik Date: Tue, 28 Jan 2020 11:14:42 -0800 Subject: [PATCH 054/358] proof --- ...loying-advanced-security-audit-policies.md | 76 ++++++++++--------- 1 file changed, 41 insertions(+), 35 deletions(-) diff --git a/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md b/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md index 2a16a28135..69fdf17aae 100644 --- a/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md +++ b/windows/security/threat-protection/auditing/planning-and-deploying-advanced-security-audit-policies.md @@ -199,7 +199,7 @@ By using Group Policy, you can apply your security audit policy to defined group - Advanced security audit policy settings were introduced in Windows Server 2008 R2 and Windows 7. These advanced audit policies can only be applied to those operating systems and later versions by using Group Policy. > [!IMPORTANT]   - > Whether you apply advanced audit policies by using Group Policy or by using logon scripts, don't use both the basic audit policy settings under **Local Policies\\Audit Policy** *and* the advanced settings under **Security Settings\\Advanced Audit Policy Configuration**. Using both basic and advanced audit policy settings can cause unexpected results in audit reporting. + > Whether you apply advanced audit policies by using Group Policy or logon scripts, don't use both the basic audit policy settings under **Local Policies\\Audit Policy** *and* the advanced settings under **Security Settings\\Advanced Audit Policy Configuration**. Using both basic and advanced audit policy settings can cause unexpected results in audit reporting. If you use **Advanced Audit Policy Configuration** settings or logon scripts to apply advanced audit policies, be sure to enable the **Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings** policy setting under **Local Policies\\Security Options**. This configuration will prevent conflicts between similar settings by forcing basic security auditing to be ignored. @@ -207,32 +207,38 @@ By using Group Policy, you can apply your security audit policy to defined group The following examples show how you can apply audit policies to an organization's OU structure: - Apply data activity settings to an OU that contains file servers. If your organization has servers that contain sensitive data, consider putting them in a separate OU. Then you can configure and apply a more precise audit policy to these servers. -- Apply user activity audit policies to an OU that contains all computers in the organization. If your organization places users in OUs by department, consider applying more detailed security permissions on critical resources that are accessed by employees who more-sensitive areas, such as network administrators or the legal department. +- Apply user activity audit policies to an OU that contains all computers in the organization. If your organization places users in OUs by department, consider applying more-detailed security permissions on critical resources that are accessed by employees who work in more-sensitive areas, such as network administrators or the legal department. - Apply network and system activity audit policies to OUs that contain the organization's most critical servers, such as domain controllers, CAs, email servers, or database servers. ## Map your security auditing goals to a security audit policy configuration -After you identify your security auditing goals, you can map them to a security audit policy configuration. This audit policy configuration must address your security auditing goals. But it also must reflect your organization's constraints, such as the number of computers that need to be monitored, the number of activities that you want to audit, the number of audit events that your audit configuration will generate, and the number of administrators available to analyze and act upon audit data. +After you identify your security auditing goals, you can map them to a security audit policy configuration. This audit policy configuration must address your security auditing goals. But it also must reflect your organization's constraints, such as the numbers of: +- Computers that need to be monitored +- Activities that you want to audit +- Audit events that your audit configuration will generate +- Administrators available to analyze and act upon audit data To create your audit policy configuration, you need to: -1. Explore all of the audit policy settings that can be used to address your needs. +1. Explore all the audit policy settings that can be used to address your needs. 1. Choose the audit settings that will most effectively address the audit requirements identified in the previous section. 1. Confirm that the settings you choose are compatible with the operating systems running on the computers that you want to monitor. 1. Decide which configuration options (*success*, *failure*, or both *success* and *failure*) you want to use for the audit settings. -1. Deploy the audit settings in a lab or test environment to verify that they meet your desired results for volume, supportability, and comprehensiveness. Then, deploy the audit settings in a pilot production environment to ensure that your estimates of how much audit data your audit plan will generate are realistic and that you can manage this data. +1. Deploy the audit settings in a lab or test environment to verify that they meet your desired results for volume, supportability, and comprehensiveness. Then, deploy the audit settings in a pilot production environment to check that your estimates of how much audit data your audit plan will generate are realistic and that you can manage this data. ### Explore audit policy options -Security audit policy settings in the supported versions of Windows can be viewed and configured in the following locations: +You can view and configure security audit policy settings in the supported versions of Windows in the following locations: -- **Security Settings\\Local Policies\\Audit Policy**. -- **Security Settings\\Local Policies\\Security Options**. -- **Security Settings\\Advanced Audit Policy Configuration**. For more information, see [Advanced security audit policy settings](advanced-security-audit-policy-settings.md). +- *Security Settings\\Local Policies\\Audit Policy* +- *Security Settings\\Local Policies\\Security Options* +- *Security Settings\\Advanced Audit Policy Configuration* + +For more information, see [Advanced security audit policy settings](advanced-security-audit-policy-settings.md). ### Choose audit settings to use -Depending on your goals, different sets of audit settings may be of particular value to you. For example, some settings under **Security Settings\\Advanced Audit Policy Configuration** can be used to monitor the following types of activity: +Depending on your goals, different sets of audit settings may be of particular value to you. For example, some settings under *Security Settings\\Advanced Audit Policy Configuration* can be used to monitor the following types of activity: - Data and resources - Users @@ -243,21 +249,21 @@ Depending on your goals, different sets of audit settings may be of particular v ### Data and resource activity -Compromise to an organization's data resources can cause tremendous financial losses, lost prestige, and legal liability. If your organization has critical data resources that must be protected against, the following settings can provide valuable monitoring and forensic data: +Compromise to an organization's data resources can cause tremendous financial losses, lost prestige, and legal liability. If your organization has critical data resources that must be protected, the following settings can provide valuable monitoring and forensic data: - **Object Access\\[Audit File Share](audit-file-share.md)**: This policy setting enables you to track what content was accessed, the source (IP address and port) of the request, and the user account that was used for the access. The volume of event data generated with this setting will vary depending on the number of client computers that try to access the file share. On a file server or domain controller, volume may be high because of SYSVOL access by client computers for policy processing. If you don't need to record routine access by client computers on the file share, you may want to log audit events only for failed attempts to access the file share. - **Object Access\\[Audit File System](audit-file-system.md)**: This policy setting determines whether the operating system audits user attempts to access file system objects. Audit events are only generated for objects, such as files and folders, that have configured SACLs, and only if the type of access requested (such as *write*, *read*, or *modify*) and the account that's making the request match the settings in the SACL. - If success auditing is enabled, an audit entry is generated each time any account successfully accesses a file system object that has a matching SACL. If failure auditing is enabled, an audit entry is generated each time any user unsuccessfully attempts to access a file system object that has a matching SACL. The amount of audit data generated by the **Audit File System** policy setting can vary considerably, depending on the number of objects that you configured to monitor. + If *success* auditing is enabled, an audit entry is generated each time any account successfully accesses a file system object that has a matching SACL. If *failure* auditing is enabled, an audit entry is generated each time any user unsuccessfully attempts to access a file system object that has a matching SACL. The amount of audit data generated by the **Audit File System** policy setting can vary considerably, depending on the number of objects that you configured to be monitored. > [!NOTE]   - > To audit user attempts to access all file system objects on a computer, use the Global Object Access Auditing settings [Registry (Global Object Access Auditing)](registry-global-object-access-auditing.md) or [File System (Global Object Access Auditing)](file-system-global-object-access-auditing.md). + > To audit user attempts to access all file system objects on a computer, use the *Global Object Access Auditing* settings [Registry (Global Object Access Auditing)](registry-global-object-access-auditing.md) or [File System (Global Object Access Auditing)](file-system-global-object-access-auditing.md). - **Object Access\\[Audit Handle Manipulation](audit-handle-manipulation.md)**: This policy setting determines whether the operating system generates audit events when a handle to an object is opened or closed. Only objects with configured SACLs generate these events and only if the attempted handle operation matches the SACL. Event volume can be high, depending on how the SACLs are configured. When used together with the **Audit File System** or **Audit Registry** policy setting, the **Audit Handle Manipulation** policy setting can provide useful "reason for access" audit data that details the precise permissions on which the audit event is based. For example, if a file is configured as a *read-only* resource but a user tries to save changes to the file, the audit event will log the event *and* the permissions that were used (or attempted to be used) to save the file changes. -- **Global Object Access Auditing**: Many organizations use security auditing to comply with regulatory requirements that govern data security and privacy. But demonstrating that strict controls are being enforced can be difficult. To address this issue, the supported versions of Windows include two **Global Object Access Auditing** policy settings, one for the registry and one for the file system. When you configure these settings, they apply a global system access control SACL on all objects of that class on a system that can't be overridden or circumvented. +- **Global Object Access Auditing**: Many organizations use security auditing to comply with regulatory requirements that govern data security and privacy. But demonstrating that strict controls are being enforced can be difficult. To address this issue, the supported versions of Windows include two **Global Object Access Auditing** policy settings, one for the registry and one for the file system. When you configure these settings, they apply a global system access control SACL on all objects of that class on a system. These settings can't be overridden or circumvented. > [!IMPORTANT] > The **Global Object Access Auditing** policy settings must be configured and applied in conjunction with the **Audit File System** and **Audit Registry** audit policy settings in the **Object Access** category. @@ -265,25 +271,25 @@ Compromise to an organization's data resources can cause tremendous financial lo The settings in the previous section relate to activity involving the files, folders, and network shares that are stored on a network. The settings in this section focus on the users who may try to access those resources, including employees, partners, and customers. -In most cases, these attempts will be legitimate, and the network needs to make vital data readily available to legitimate users. But in other cases, employees, partners, and others may try to access resources that they have no legitimate reason to access. Security auditing can be used to track a wide variety of user activities on a particular computer to diagnose and resolve problems for legitimate users and to identify and address illegitimate activities. The following are a few important settings that you should evaluate to track user activity on your network: +In most cases, these attempts are legitimate, and the network needs to make data readily available to legitimate users. But in other cases, employees, partners, and others may try to access resources that they have no legitimate reason to access. You can use security auditing to track a variety of user activities on a particular computer to diagnose and resolve problems for legitimate users and to identify and address illegitimate activities. The following are important settings that you should evaluate to track user activity on your network: -- **Account Logon\\[Audit Credential Validation](audit-credential-validation.md)**: This is an important policy setting. It enables you to track every successful and unsuccessful attempt to present credentials for a user logon. In particular, a pattern of unsuccessful attempts may indicate that a user or application is using credentials that are no longer valid. Or the user or app is trying to use a variety of credentials in succession in hope that one of these attempts will eventually succeed. These events occur on the computer that's authoritative for the credentials. For domain accounts, the domain controller is authoritative. For local accounts, the local computer is authoritative. +- **Account Logon\\[Audit Credential Validation](audit-credential-validation.md)**: This setting enables you to track all successful and unsuccessful logon attempts. A pattern of unsuccessful attempts may indicate that a user or application is using credentials that are no longer valid. Or the user or app is trying to use a variety of credentials in succession in hope that one of these attempts will eventually succeed. These events occur on the computer that's authoritative for the credentials. For domain accounts, the domain controller is authoritative. For local accounts, the local computer is authoritative. - **Detailed Tracking\\[Audit Process Creation](audit-process-creation.md) and Detailed Tracking\\[Audit Process Termination](audit-process-termination.md)**: These policy settings enable you to monitor the applications that a user opens and close on a computer. - **DS Access\\[Audit Directory Service Access](audit-directory-service-access.md)** and **DS Access\\[Audit Directory Service Changes](audit-directory-service-changes.md)**: These policy settings provide a detailed audit trail of attempts to access, create, modify, delete, move, or undelete objects in Active Directory Domain Services (AD DS). Only domain administrators have permissions to modify AD DS objects, so it's important to identify malicious attempts to modify these objects. Also, although domain administrators should be among an organization's most trusted employees, the use of the **Audit Directory Service Access** and **Audit Directory Service Changes** settings enable you to monitor and verify that only approved changes are made to AD DS. These audit events are logged only on domain controllers. - **Logon/Logoff\\[Audit Account Lockout](audit-account-lockout.md)**: Another common security scenario occurs when a user attempts to log on with an account that's been locked out. It's important to identify these events and to determine whether the attempt to use an account that was locked out is malicious. - **Logon/Logoff\\[Audit Logoff](audit-logoff.md)** and **Logon/Logoff\\[Audit Logon](audit-logon.md)**: Logon and logoff events are essential to tracking user activity and detecting potential attacks. Logon events are related to the creation of logon sessions, and they occur on the computer that was accessed. For an interactive logon, events are generated on the computer that was logged on to. For network logon, such as accessing a shared resource, events are generated on the computer that hosts the resource that was accessed. Logoff events are generated when logon sessions are terminated. >[!NOTE] - > There's no failure event for logoff activity, because failed logoffs (such as when a system abruptly shuts down) don't generate an audit record. Logoff events aren't 100-percent reliable. For example, the computer can be turned off without a proper logoff and shutdown, so a logoff event isn't generated. + > There's no failure event for logoff activity, because failed logoffs (such as when a system abruptly shuts down) don't generate an audit record. Logoff events aren't 100-percent reliable. For example, a computer can be turned off without a proper logoff and shutdown, so a logoff event isn't generated. - **Logon/Logoff\\[Audit Special Logon](audit-special-logon.md)**: A special logon has administrator-equivalent rights and can be used to elevate a process to a higher level. It's recommended to track these types of logons. - **Object Access\\[Audit Certification Services](audit-certification-services.md)**: This policy setting enables you to monitor activities on a computer that hosts Active Directory Certificate Services (AD CS) role services to ensure that only authorized users do these tasks and only authorized or desirable tasks are done. - **Object Access\\[Audit File System](audit-file-system.md) and Object Access\\[Audit File Share](audit-file-share.md)**: These policy settings are described in the previous section. - **Object Access\\[Audit Handle Manipulation](audit-handle-manipulation.md)**: This policy setting and its role in providing "reason for access" audit data is described in the previous section. -- **Object Access\\[Audit Registry](audit-registry.md)**: Monitoring for changes to the registry is one of the most critical means that an administrator has to ensure malicious users don't make changes to essential computer settings. Audit events are only generated for objects that have configured SACLs and only if the type of access that is requested, such as *write*, *read*, or *modify*, and the account making the request match the settings in the SACL. +- **Object Access\\[Audit Registry](audit-registry.md)**: Monitoring for changes to the registry is one of the best ways for administrator to ensure that malicious users don't make changes to essential computer settings. Audit events are only generated for objects that have configured SACLs and only if the type of access that is requested, such as *write*, *read*, or *modify*, and the account making the request match the settings in the SACL. > [!IMPORTANT] - > On critical systems where all attempts to change registry settings should be tracked, you can combine the **Audit Registry** and **Global Object Access Auditing** policy settings to ensure that all attempts to modify registry settings on a computer are tracked. + > On critical systems where all attempts to change registry settings should be tracked, you can combine the **Audit Registry** and **Global Object Access Auditing** policy settings to track all attempts to modify registry settings on a computer. - **Object Access\\[Audit SAM](audit-sam.md)**: The Security Accounts Manager (SAM) is a database on computers running Windows that stores user accounts and security descriptors for users on the local computer. Changes to user and group objects are tracked by the **Account Management** audit category. However, user accounts with the proper user rights could potentially alter the files where the account and password information is stored in the system, bypassing any **Account Management** events. - **Privilege Use\\[Audit Sensitive Privilege Use](audit-sensitive-privilege-use.md)**: These policy settings and audit events enable you to track the use of certain rights on one or more systems. If you configure this policy setting, an audit event is generated when sensitive rights requests are made. @@ -292,28 +298,28 @@ In most cases, these attempts will be legitimate, and the network needs to make The following network activity policy settings enable you to monitor security-related issues that aren't necessarily covered in the data or user-activity categories but that can be important for network status and protection. -- **Account Management**: Use the policy settings in this category to track attempts to create, delete, or modify user or computer accounts, security groups, or distribution groups. Monitoring these activities complements the monitoring strategies you select in the user activity and data activity sections. -- **Account Logon\\[Audit Kerberos Authentication Service](audit-kerberos-authentication-service.md) and Account Logon\\[Audit Kerberos Service Ticket Operations](audit-kerberos-service-ticket-operations.md)**: Audit policy settings in the **Account Logon** category monitor activities that relate to the use of domain account credentials. These policy settings complement the policy settings in the **Logon/Logoff** category. The **Audit Kerberos Authentication Service** policy setting enables you to monitor the status of and potential threats to the Kerberos service. The Audit **Kerberos Service Ticket Operations** policy setting allows you to monitor the use of Kerberos service tickets. +- **Account Management**: Use the policy settings in this category to track attempts to create, delete, or modify user or computer accounts, security groups, or distribution groups. Monitoring these activities complements the monitoring strategies you select in the [User activity](#user-activity) and [Data and resource activity](#data-and-resource-activity) sections. +- **Account Logon\\[Audit Kerberos Authentication Service](audit-kerberos-authentication-service.md) and Account Logon\\[Audit Kerberos Service Ticket Operations](audit-kerberos-service-ticket-operations.md)**: Audit policy settings in the **Account Logon** category monitor activities that relate to the use of domain account credentials. These policy settings complement the policy settings in the **Logon/Logoff** category. The **Audit Kerberos Authentication Service** policy setting enables you to monitor the status of and potential threats to the Kerberos service. The Audit **Kerberos Service Ticket Operations** policy setting enables you to monitor the use of Kerberos service tickets. >[!NOTE] >**Account Logon** policy settings apply only to specific domain account activities, regardless of which computer is accessed. **Logon/Logoff** policy settings apply to the computer that hosts the resources that are accessed. - **Account Logon\\[Audit Other Account Logon Events](audit-other-account-logon-events.md)**: This policy setting can be used to track various network activities, including attempts to create Remote Desktop connections, wired network connections, and wireless connections. -- **DS Access**: Policy settings in this category enable you to monitor the AD DS role services. These services provide account data, validate logons, maintain network access permissions, and provide other functionality that's to secure and proper functioning of a network. Therefore, auditing the rights to access and modify the configuration of a domain controller can help an organization maintain a secure and reliable network. One of the key tasks AD DS performs is the replication of data between domain controllers. -- **Logon/Logoff\\[Audit IPsec Extended Mode](audit-ipsec-extended-mode.md)**, **Logon/Logoff\\[Audit IPsec Main Mode](audit-ipsec-main-mode.md)**, and **Logon/Logoff\\[Audit IPsec Quick Mode](audit-ipsec-quick-mode.md)**: Networks often support many external users, including remote employees and partners. Because these users are outside the organization's network boundaries, IPsec is often used to help protect communications over the internet. It enabl network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and protection against replay attacks. You can use these settings to ensure that IPsec services are functioning properly. -- **Logon/Logoff\\[Audit Network Policy Server](audit-network-policy-server.md)** Organizations that use RADIUS (IAS) and Network Access Protection (NAP) to set and maintain security requirements for external users can use this policy setting to monitor the effectiveness of these policies and to determine whether anyone is trying to circumvent these protections. +- **DS Access**: Policy settings in this category enable you to monitor AD DS role services. These services provide account data, validate logons, maintain network access permissions, and provide other functionality that's critical to secure and proper functioning of a network. Therefore, auditing the rights to access and modify the configuration of a domain controller can help an organization maintain a secure and reliable network. One of the key tasks that AD DS performs is replication of data between domain controllers. +- **Logon/Logoff\\[Audit IPsec Extended Mode](audit-ipsec-extended-mode.md)**, **Logon/Logoff\\[Audit IPsec Main Mode](audit-ipsec-main-mode.md)**, and **Logon/Logoff\\[Audit IPsec Quick Mode](audit-ipsec-quick-mode.md)**: Networks often support many external users, including remote employees and partners. Because these users are outside the organization's network boundaries, IPsec is often used to help protect communications over the internet. It enables network-level peer authentication, data origin authentication, data integrity checks, data confidentiality (encryption), and protection against replay attacks. You can use these settings to ensure that IPsec services are functioning properly. +- **Logon/Logoff\\[Audit Network Policy Server](audit-network-policy-server.md)**: Organizations that use RADIUS (IAS) and Network Access Protection (NAP) to set and maintain security requirements for external users can use this policy setting to monitor the effectiveness of these policies and to determine whether anyone is trying to circumvent these protections. - **Policy Change**: These policy settings and events enable you to track changes to important security policies on a local computer or network. Because policies are typically established by administrators to help secure network resources, monitoring any changes or attempted changes to these policies can be an important aspect of security management for a network. - **Policy Change\\[Audit Audit Policy Change](audit-audit-policy-change.md)**: This policy setting allows you to monitor changes to the audit policy. If malicious users obtain domain administrator credentials, they can temporarily disable essential security audit policy settings so that their other activities on the network can't be detected. -- **Policy Change\\[Audit Filtering Platform Policy Change](audit-filtering-platform-policy-change.md)**:.\ This policy setting can be used to monitor a variety of changes to an organization's IPsec policies. +- **Policy Change\\[Audit Filtering Platform Policy Change](audit-filtering-platform-policy-change.md)**: This policy setting can be used to monitor a variety of changes to an organization's IPsec policies. - **Policy Change\\[Audit MPSSVC Rule-Level Policy Change](audit-mpssvc-rule-level-policy-change.md)**: This policy setting determines if the operating system generates audit events when changes are made to policy rules for the Microsoft Protection Service (MPSSVC.exe), which is used by Windows Firewall. Changes to firewall rules are important for understanding the security state of the computer and how well it's protected against network attacks. ### Confirm operating system version compatibility Not all versions of Windows support advanced audit policy settings or the use of Group Policy to manage these settings. For more information, see [Which editions of Windows support advanced audit policy configuration](which-editions-of-windows-support-advanced-audit-policy-configuration.md). -The audit policy settings under **Local Policies\\Audit Policy** overlap with audit policy settings under **Security Settings\\Advanced Audit Policy Configuration**. However, the advanced audit policy categories and subcategories enable you to focus your auditing efforts on critical activities while reducing the amount of audit data that's less important to your organization. +The audit policy settings under **Local Policies\\Audit Policy** overlap with the audit policy settings under **Security Settings\\Advanced Audit Policy Configuration**. However, the advanced audit policy categories and subcategories enable you to focus your auditing efforts on critical activities while reducing the amount of audit data that's less important to your organization. -For example, **Local Policies\\Audit Policy** contains a single setting called **[Audit account logon events](https://technet.microsoft.com/library/cc787176.aspx)**. When this setting is configured, it generates at least 10 types of audit events. +For example, **Local Policies\\Audit Policy** contains a single setting called *[Audit account logon events](https://technet.microsoft.com/library/cc787176.aspx)*. When this setting is configured, it generates at least 10 types of audit events. In comparison, the Account Logon category under **Security Settings\\Advanced Audit Policy Configuration** provides the following advanced settings, which allow you to focus your auditing: @@ -326,15 +332,15 @@ These settings enable you to exercise much tighter control over which activities ### *Success*, *failure*, or both -Whichever event settings you include in your plan, you also have to decide whether you want to log an event when the activity fails or succeeds or both successes and failures. This is an important question. The answer depends on the criticality of the event and the implications of the decision on event volume. +Whichever event settings you include in your plan, you also have to decide whether you want to log an event when the activity fails or succeeds or both successes *and failures. This is an important question. The answer depends on the criticality of the event and the implications of the decision for event volume. -For example, on a file server that's accessed frequently by legitimate users, you may want to log an event only when an unsuccessful attempt to access data takes place, because this could be evidence of an unauthorized or malicious user. And in this case, logging successful attempts to access the server would quickly fill the event log with benign events. +For example, on a file server that's accessed frequently by legitimate users, you may want to log an event only when an *unsuccessful* attempt to access data takes place, because this could be evidence of an unauthorized or malicious user. In this case, logging *successful* attempts to access the server would quickly fill the event log with benign events. -But if the file share has sensitive information, such as trade secrets, you may want to log every access attempt so that you have an audit trail of every user who tried to access the resource. +But if the file share has sensitive information, such as trade secrets, you may want to log every access attempt so that you have an audit trail of every user who tries to access the resource. ## Plan for security audit monitoring and management -Networks can contain hundreds of servers that run critical services or store critical data, all of which need to be monitored. There may be tens or even hundreds of thousands of computers on the network. These numbers may not be an issue if the ratio of servers or client computers per administrator is low. And even if an administrator who is responsible for auditing security and performance issues has relatively few computers to monitor, you need to decide how the administrator will obtain event data to review. Following are some options for obtaining the event data. +Networks may contain hundreds of servers that run critical services or store critical data, all of which need to be monitored. There may be tens or even hundreds of thousands of computers on the network. These numbers may not be an issue if the ratio of servers or client computers per administrator is low. And even if an administrator who is responsible for auditing security and performance issues has relatively few computers to monitor, you need to decide how the administrator will obtain event data to review. Following are some options for obtaining the event data. - Will you keep event data on a local computer until an administrator logs on to review this data? If so, the administrator needs to have physical or remote access to the Event Viewer on each client computer or server. And the remote access and firewall settings on each client computer or server need to be configured to enable this access. You also need to decide how often the administrator can visit each computer, and adjust the size of the audit log so that critical information isn't deleted if the log reaches capacity. - Will you collect event data so that it can be reviewed from a central console? If so, there are a number of computer management products, such as the Audit Collection Services in Microsoft Operations Manager 2007 and 2012, that you can use to collect and filter event data. Presumably this solution enables a single administrator to review larger amounts of data than using the local storage option. But in some cases, this method can make it more difficult to detect clusters of related events that can occur on a single computer. @@ -360,12 +366,12 @@ Many organizations are now required to store archived log files for a number of Before deploying the audit policy in a production environment, it's critical that you determine the effects of the policy settings that you've configured. -The first step in assessing your audit policy deployment is to create a test environment in a lab and use it to simulate the various use scenarios that you've identified to confirm that the audit settings you selected are configured correctly and generate the type of results you want. +The first step in assessing your audit policy deployment is to create a test environment in a lab. Use it to simulate the various use scenarios that you identified to confirm that the audit settings you selected are configured correctly and generate the type of results you want. However, unless you can run fairly realistic simulations of network usage patterns, a lab setup can't provide accurate information about the volume of audit data that the audit policy settings you selected will generate and how effective your plan for monitoring audit data will be. To provide this type of information, you need to conduct one or more pilot deployments. These pilot deployments could involve: -- A single OU that contains critical data servers or an OU that contains all desktop computers in a specified location. -- A limited set of security audit policy settings, such as **Logon/Logoff** and **Account Logon**. -- A combination of limited OUs and audit policy settings—for example, targeting servers in only the Accounting OU with **Object Access** policy settings. +- A single OU that contains critical data servers or an OU that contains all desktop computers in a specified location +- A limited set of security audit policy settings, such as **Logon/Logoff** and **Account Logon** +- A combination of limited OUs and audit policy settings—for example, targeting servers in only the Accounting OU with **Object Access** policy settings After you successfully complete one or more limited deployments, you should confirm that the audit data that's collected is manageable with your management tools and administrators. After you confirm that the pilot deployment is effective, you need to ensure that you have the necessary tools and staff to expand the deployment to include additional OUs and sets of audit policy settings until production deployment is complete. From 498a95bf0f347f3e506985b6fc2472bf0bb4f615 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 28 Jan 2020 13:12:34 -0800 Subject: [PATCH 055/358] draft --- .../deploy-a-windows-10-image-using-mdt.md | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 238fd0d31e..3d0c42b130 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -21,19 +21,16 @@ ms.topic: article **Applies to** - Windows 10 -This topic will show you how to take your reference image for Windows 10, and deploy that image to your environment using the Microsoft Deployment Toolkit (MDT). You will prepare for this by creating a MDT deployment share that is used solely for image deployment. Separating the processes of creating reference images from the processes used to deploy them in production allows greater control of on both processes. You will then configure the deployment share, create a new task sequence, add applications, add drivers, add rules, and configure Active Directory permissions for deployment. +This topic will show you how to take your reference image for Windows 10 (that we just [created](create-a-windows-10-reference-image.md)), and deploy that image to your environment using the Microsoft Deployment Toolkit (MDT). You will prepare for this by creating a MDT deployment share that is used solely for image deployment. Separating the processes of creating reference images from the processes used to deploy them in production allows greater control of on both processes. You will then configure the deployment share, create a new task sequence, add applications, add drivers, add rules, and configure Active Directory permissions for deployment. -For the purposes of this topic, we will use three machines: DC01, MDT01, and PC0005. DC01 is a domain controller, MDT01 is a Windows Server 2012 R2 standard server, and PC0005 is a blank machine to which you deploy Windows 10. MDT01 and PC0005 are members of the domain contoso.com for the fictitious Contoso Corporation. +For the purposes of this topic, we will use three machines: DC01, MDT01, and PC0005. DC01 is a domain controller, MDT01 is a Windows Server 2019 domain member server, and PC0005 is a blank machine to which we will deploy Windows 10. MDT01 and PC0005 are members of the domain contoso.com for the fictitious Contoso Corporation. ![figure 1](../images/mdt-07-fig01.png) -Figure 1. The machines used in this topic. - >[!NOTE] ->For important details about the setup for the steps outlined in this article, please see [Deploy Windows 10 with the Microsoft Deployment Toolkit](deploy-windows-10-with-the-microsoft-deployment-toolkit.md). - +>For important details about the setup for the procedures in this article, please see [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md). -## Step 1: Configure Active Directory permissions +## Step 1: Configure Active Directory permissions These steps will show you how to configure an Active Directory account with the permissions required to deploy a Windows 10 machine to the domain using MDT. These steps assume you have downloaded the sample [Set-OUPermissions.ps1 script](https://go.microsoft.com/fwlink/p/?LinkId=619362) and copied it to C:\\Setup\\Scripts on DC01. The account is used for Windows Preinstallation Environment (Windows PE) to connect to MDT01. In order for MDT to join machines into the contoso.com domain you need to create an account and configure permissions in Active Directory. 1. On DC01, using Active Directory User and Computers, browse to **contoso.com / Contoso / Service Accounts**. From 317db9c0508f3a7fa08341976c10797bcaef15f2 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 28 Jan 2020 14:36:16 -0800 Subject: [PATCH 056/358] deploy article --- .../create-a-windows-10-reference-image.md | 8 ++++---- .../deploy-a-windows-10-image-using-mdt.md | 10 ++++++---- 2 files changed, 10 insertions(+), 8 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md index 0f4be2a068..11a9727d44 100644 --- a/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md +++ b/windows/deployment/deploy-windows-mdt/create-a-windows-10-reference-image.md @@ -31,7 +31,7 @@ For the purposes of this topic, we will use three computers: DC01, MDT01, and PC - MDT01 is a contoso.com domain member server. - PC0001 is a Windows 10 Enterprise x64 client and also a contoso.com domain member. - ![figure 1](../images/mdt-08-fig01.png) + ![devices](../images/mdt-08-fig01.png) ## The reference image @@ -64,9 +64,9 @@ On **MDT01**: The Deployment Workbench with the MDT Build Lab deployment share. -### Optional: Enable monitoring +### Enable monitoring -To monitor the task sequence as it happens, right-click the **MDT Build Lab** deployment share, click **Properties**, click the **Monitoring** tab, and select **Enable monitoring for this deployment share**. +To monitor the task sequence as it happens, right-click the **MDT Build Lab** deployment share, click **Properties**, click the **Monitoring** tab, and select **Enable monitoring for this deployment share**. This step is optional. ### Configure permissions for the deployment share @@ -656,7 +656,7 @@ After some time, you will have a Windows 10 Enterprise x64 image that is fully ## Troubleshooting -If you [enabled monitoring](#optional-enable-monitoring), you can check the progress of the task sequence. +If you [enabled monitoring](#enable-monitoring), you can check the progress of the task sequence. ![monitoring](../images/mdt-monitoring.png) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 3d0c42b130..823bd3c04e 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -21,11 +21,13 @@ ms.topic: article **Applies to** - Windows 10 -This topic will show you how to take your reference image for Windows 10 (that we just [created](create-a-windows-10-reference-image.md)), and deploy that image to your environment using the Microsoft Deployment Toolkit (MDT). You will prepare for this by creating a MDT deployment share that is used solely for image deployment. Separating the processes of creating reference images from the processes used to deploy them in production allows greater control of on both processes. You will then configure the deployment share, create a new task sequence, add applications, add drivers, add rules, and configure Active Directory permissions for deployment. +This topic will show you how to take your reference image for Windows 10 (that was just [created](create-a-windows-10-reference-image.md)), and deploy that image to your environment using the Microsoft Deployment Toolkit (MDT). -For the purposes of this topic, we will use three machines: DC01, MDT01, and PC0005. DC01 is a domain controller, MDT01 is a Windows Server 2019 domain member server, and PC0005 is a blank machine to which we will deploy Windows 10. MDT01 and PC0005 are members of the domain contoso.com for the fictitious Contoso Corporation. +We will prepare for this by creating an MDT deployment share that is used solely for image deployment. Separating the processes of creating reference images from the processes used to deploy them in production allows greater control of on both processes. We will configure Active Directory permissions, configure the deployment share, create a new task sequence, and add applications, drivers, and rules. -![figure 1](../images/mdt-07-fig01.png) +For the purposes of this topic, we will use three machines: DC01, MDT01, and PC0005. DC01 is a domain controller, MDT01 is a Windows Server 2019 domain member server, and PC0005 is a blank device to which we will deploy Windows 10. MDT01 and PC0005 are members of the domain contoso.com for the fictitious Contoso Corporation. + + ![devices](../images/mdt-07-fig01.png) >[!NOTE] >For important details about the setup for the procedures in this article, please see [Prepare for deployment with MDT](prepare-for-windows-deployment-with-mdt.md). @@ -61,7 +63,7 @@ These steps will show you how to configure an Active Directory account with the 7. Validated write to DNS host name 8. Validated write to service principal name -## Step 2: Set up the MDT production deployment share +## Step 2: Set up the MDT production deployment share When you are ready to deploy Windows 10 in a production environment, you will first create a new MDT deployment share. You should not use the same deployment share that you used to create the reference image for a production deployment. For guidance on creating a custom Windows 10 image, see [Create a Windows 10 reference image](create-a-windows-10-reference-image.md). From 9c5651c23a7ac89a01247df0bf788efeedde98fd Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 28 Jan 2020 15:11:12 -0800 Subject: [PATCH 057/358] mdt --- .../deploy-a-windows-10-image-using-mdt.md | 27 +++++++++++-------- ...prepare-for-windows-deployment-with-mdt.md | 8 +++--- 2 files changed, 21 insertions(+), 14 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 823bd3c04e..677951087e 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -34,22 +34,27 @@ For the purposes of this topic, we will use three machines: DC01, MDT01, and PC0 ## Step 1: Configure Active Directory permissions -These steps will show you how to configure an Active Directory account with the permissions required to deploy a Windows 10 machine to the domain using MDT. These steps assume you have downloaded the sample [Set-OUPermissions.ps1 script](https://go.microsoft.com/fwlink/p/?LinkId=619362) and copied it to C:\\Setup\\Scripts on DC01. The account is used for Windows Preinstallation Environment (Windows PE) to connect to MDT01. In order for MDT to join machines into the contoso.com domain you need to create an account and configure permissions in Active Directory. -1. On DC01, using Active Directory User and Computers, browse to **contoso.com / Contoso / Service Accounts**. -2. Select the **Service Accounts** organizational unit (OU) and create the MDT\_JD account using the following settings: - 1. Name: MDT\_JD - 2. User logon name: MDT\_JD - 3. Password: P@ssw0rd - 4. User must change password at next logon: Clear - 5. User cannot change password: Select - 6. Password never expires: Select -3. In an elevated Windows PowerShell prompt (run as Administrator), run the following commands and press **Enter** after each command: +These steps will show you how to configure an Active Directory account with the permissions required to deploy a Windows 10 machine to the domain using MDT. These steps assume you have The account is used for Windows Preinstallation Environment (Windows PE) to connect to MDT01. In order for MDT to join machines into the contoso.com domain you need to create an account and configure permissions in Active Directory. + +First, download the [Set-OUPermissions.ps1 script](https://go.microsoft.com/fwlink/p/?LinkId=619362) and copy it to the C:\\Setup\\Scripts directory on DC01. This script configures permissions to allow the MDT_JD account to manage computer accounts in the contoso > Computers organizational unit. + +On DC01: + +1. Create the MDT_JD service account by running the following command from an elevated Windows PowerShell prompt: + + ```powershell + New-ADUser -Name MDT_JD -UserPrincipalName MDT_BA -path "OU=Service Accounts,OU=Accounts,OU=Contoso,DC=CONTOSO,DC=COM" -Description "MDT join domain account" -AccountPassword (ConvertTo-SecureString "pass@word1" -AsPlainText -Force) -ChangePasswordAtLogon $false -PasswordNeverExpires $true -Enabled $true + ``` + +2. Next, run the Set-OuPermissions script to apply permissions to the **MDT\_JD** service account, enabling it to manage computer accounts in the Contoso / Computers OU. Run the following commands from an elevated Windows PowerShell prompt: + ```powershell Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force Set-Location C:\Setup\Scripts .\Set-OUPermissions.ps1 -Account MDT_JD -TargetOU "OU=Workstations,OU=Computers,OU=Contoso" ``` -4. The Set-OUPermissions.ps1 script allows the MDT\_JD user account permissions to manage computer accounts in the Contoso / Computers OU. Below you find a list of the permissions being granted: + +The Set-OUPermissions.ps1 script enables . Below you find a list of the permissions being granted: 1. Scope: This object and all descendant objects 1. Create Computer objects 2. Delete Computer objects diff --git a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md index ba80eb37b9..97c764bbde 100644 --- a/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md +++ b/windows/deployment/deploy-windows-mdt/prepare-for-windows-deployment-with-mdt.md @@ -116,7 +116,7 @@ Switch to **DC01** and perform the following procedures on **DC01**: To create the OU structure, you can use the Active Directory Users and Computers console (dsa.msc), or you can use Windows PowerShell. -To use Windows PowerShell, copy the following commands into a text file and save it as c:\ou.ps1. Be sure that you are viewing file extensions and that you save the file with the .ps1 extension. +To use Windows PowerShell, copy the following commands into a text file and save it as C:\Setup\Scripts\ou.ps1. Be sure that you are viewing file extensions and that you save the file with the .ps1 extension. ```powershell $oulist = Import-csv -Path c:\oulist.txt @@ -128,7 +128,7 @@ ForEach($entry in $oulist){ } ``` -Next, copy the following list of OU names and paths into a text file and save it as c:\oulist.txt +Next, copy the following list of OU names and paths into a text file and save it as C:\Setup\Scripts\oulist.txt ```text OUName,OUPath @@ -144,9 +144,11 @@ Workstations,"OU=Computers,OU=Contoso,DC=CONTOSO,DC=COM" Security Groups,"OU=Groups,OU=Contoso,DC=CONTOSO,DC=COM" ``` -Lastly, open an elevated Windows PowerShell prompt on DC01, navigate to the c:\\ directory and run the ou.ps1 script: +Lastly, open an elevated Windows PowerShell prompt on DC01 and run the ou.ps1 script: ```powershell +Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force +Set-Location C:\Setup\Scripts .\ou.ps1 ``` From a416a4e522ab1b28678b95df556c33a52bd51a2b Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Tue, 28 Jan 2020 16:58:04 -0800 Subject: [PATCH 058/358] mdt --- .../deploy-a-windows-10-image-using-mdt.md | 107 +++++++++--------- windows/deployment/images/acroread.png | Bin 0 -> 54675 bytes windows/deployment/images/fig2-importedos.png | Bin 83223 -> 45542 bytes 3 files changed, 55 insertions(+), 52 deletions(-) create mode 100644 windows/deployment/images/acroread.png diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 677951087e..cff4803d5f 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -36,17 +36,16 @@ For the purposes of this topic, we will use three machines: DC01, MDT01, and PC0 These steps will show you how to configure an Active Directory account with the permissions required to deploy a Windows 10 machine to the domain using MDT. These steps assume you have The account is used for Windows Preinstallation Environment (Windows PE) to connect to MDT01. In order for MDT to join machines into the contoso.com domain you need to create an account and configure permissions in Active Directory. -First, download the [Set-OUPermissions.ps1 script](https://go.microsoft.com/fwlink/p/?LinkId=619362) and copy it to the C:\\Setup\\Scripts directory on DC01. This script configures permissions to allow the MDT_JD account to manage computer accounts in the contoso > Computers organizational unit. +On **DC01**: -On DC01: - -1. Create the MDT_JD service account by running the following command from an elevated Windows PowerShell prompt: +1. Download the [Set-OUPermissions.ps1 script](https://go.microsoft.com/fwlink/p/?LinkId=619362) and copy it to the **C:\\Setup\\Scripts** directory on DC01. This script configures permissions to allow the MDT_JD account to manage computer accounts in the contoso > Computers organizational unit. +2. Create the MDT_JD service account by running the following command from an elevated Windows PowerShell prompt: ```powershell - New-ADUser -Name MDT_JD -UserPrincipalName MDT_BA -path "OU=Service Accounts,OU=Accounts,OU=Contoso,DC=CONTOSO,DC=COM" -Description "MDT join domain account" -AccountPassword (ConvertTo-SecureString "pass@word1" -AsPlainText -Force) -ChangePasswordAtLogon $false -PasswordNeverExpires $true -Enabled $true + New-ADUser -Name MDT_JD -UserPrincipalName MDT_JD -path "OU=Service Accounts,OU=Accounts,OU=Contoso,DC=CONTOSO,DC=COM" -Description "MDT join domain account" -AccountPassword (ConvertTo-SecureString "pass@word1" -AsPlainText -Force) -ChangePasswordAtLogon $false -PasswordNeverExpires $true -Enabled $true ``` -2. Next, run the Set-OuPermissions script to apply permissions to the **MDT\_JD** service account, enabling it to manage computer accounts in the Contoso / Computers OU. Run the following commands from an elevated Windows PowerShell prompt: +3. Next, run the Set-OuPermissions script to apply permissions to the **MDT\_JD** service account, enabling it to manage computer accounts in the Contoso / Computers OU. Run the following commands from an elevated Windows PowerShell prompt: ```powershell Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force @@ -54,84 +53,88 @@ On DC01: .\Set-OUPermissions.ps1 -Account MDT_JD -TargetOU "OU=Workstations,OU=Computers,OU=Contoso" ``` -The Set-OUPermissions.ps1 script enables . Below you find a list of the permissions being granted: - 1. Scope: This object and all descendant objects - 1. Create Computer objects - 2. Delete Computer objects - 2. Scope: Descendant Computer objects - 1. Read All Properties - 2. Write All Properties - 3. Read Permissions - 4. Modify Permissions - 5. Change Password - 6. Reset Password - 7. Validated write to DNS host name - 8. Validated write to service principal name +The following is a list of the permissions being granted: + a. Scope: This object and all descendant objects + b. Create Computer objects + c. Delete Computer objects + d. Scope: Descendant Computer objects + e. Read All Properties + f. Write All Properties + g. Read Permissions + h. Modify Permissions + i. Change Password + j. Reset Password + k. Validated write to DNS host name + l. Validated write to service principal name ## Step 2: Set up the MDT production deployment share -When you are ready to deploy Windows 10 in a production environment, you will first create a new MDT deployment share. You should not use the same deployment share that you used to create the reference image for a production deployment. For guidance on creating a custom Windows 10 image, see -[Create a Windows 10 reference image](create-a-windows-10-reference-image.md). +Next, create a new MDT deployment share. You should not use the same deployment share that you used to create the reference image for a production deployment. Perform this procedure on the MDT01 server. ### Create the MDT production deployment share +On **MDT01**: + The steps for creating the deployment share for production are the same as when you created the deployment share for creating the custom reference image: -1. On MDT01, log on as Administrator in the CONTOSO domain using a password of P@ssw0rd. -2. Using the Deployment Workbench, right-click **Deployment Shares** and select **New Deployment Share**. -3. On the **Path** page, in the **Deployment share path** text box, type **E:\\MDTProduction** and click **Next**. + +1. Ensure you are signed on as: contoso\administrator. +2. In the Deployment Workbench console, right-click **Deployment Shares** and select **New Deployment Share**. +3. On the **Path** page, in the **Deployment share path** text box, type **D:\\MDTProduction** and click **Next**. 4. On the **Share** page, in the **Share name** text box, type **MDTProduction$** and click **Next**. 5. On the **Descriptive Name** page, in the **Deployment share description** text box, type **MDT Production** and click **Next**. 6. On the **Options** page, accept the default settings and click **Next** twice, and then click **Finish**. 7. Using File Explorer, verify that you can access the **\\\\MDT01\\MDTProduction$** share. -## Step 3: Add a custom image +## Step 3: Add a custom image The next step is to add a reference image into the deployment share with the setup files required to successfully deploy Windows 10. When adding a custom image, you still need to copy setup files (an option in the wizard) because Windows 10 stores additional components in the Sources\\SxS folder which is outside the image and may be required when installing components. ### Add the Windows 10 Enterprise x64 RTM custom image -In these steps, we assume that you have completed the steps in the [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) topic, so you have a Windows 10 reference image in the E:\\MDTBuildLab\\Captures folder on MDT01. +In these steps, we assume that you have completed the steps in the [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) topic, so you have a Windows 10 reference image at **D:\\MDTBuildLab\\Captures\REFW10X64-001.wim** on MDT01. + 1. Using the Deployment Workbench, expand the **Deployment Shares** node, and then expand **MDT Production**; select the **Operating Systems** node, and create a folder named **Windows 10**. 2. Right-click the **Windows 10** folder and select **Import Operating System**. 3. On the **OS Type** page, select **Custom image file** and click **Next**. -4. On the **Image** page, in the **Source file** text box, browse to **E:\\MDTBuildLab\\Captures\\REFW10X64-001.wim** and click **Next**. -5. On the **Setup** page, select the **Copy Windows 7, Windows Server 2008 R2, or later setup files from the specified path** option; in the **Setup source directory** text box, browse to **E:\\MDTBuildLab\\Operating Systems\\W10EX64RTM** and click **Next**. +4. On the **Image** page, in the **Source file** text box, browse to **D:\\MDTBuildLab\\Captures\\REFW10X64-001.wim** and click **Next**. +5. On the **Setup** page, select the **Copy Windows 7, Windows Server 2008 R2, or later setup files from the specified path** option; in the **Setup source directory** text box, browse to **D:\\MDTBuildLab\\Operating Systems\\W10EX64RTM** and click **Next**. 6. On the **Destination** page, in the **Destination directory name** text box, type **W10EX64RTM**, click **Next** twice, and then click **Finish**. -7. After adding the operating system, double-click the added operating system name in the **Operating Systems / Windows 10** node and change the name to match the following: **Windows 10 Enterprise x64 RTM Custom Image**. +7. After adding the operating system, double-click the added operating system name in the **Operating Systems / Windows 10** node and change the name to **Windows 10 Enterprise x64 RTM Custom Image**. >[!NOTE] >The reason for adding the setup files has changed since earlier versions of MDT. MDT 2010 used the setup files to install Windows. MDT uses DISM to apply the image; however, you still need the setup files because some components in roles and features are stored outside the main image. -![figure 2](../images/fig2-importedos.png) +![imported OS](../images/fig2-importedos.png) -Figure 2. The imported operating system after renaming it. +## Step 4: Add an application -## Step 4: Add an application +When you configure your MDT Build Lab deployment share, you can also add applications to the new deployment share before creating your task sequence. This section walks you through the process of adding an application to the MDT Production deployment share using Adobe Reader as an example. -When you configure your MDT Build Lab deployment share, you will also add any applications to the new deployment share before creating your task sequence. This section walks you through the process of adding an application to the MDT Production deployment share using Adobe Reader as an example. +### Create the install: Adobe Reader DC -### Create the install: Adobe Reader XI x86 +On **MDT01**: -In this example, we assume that you have downloaded the Adobe Reader XI installation file (AdbeRdr11000\_eu\_ES.msi) to E:\\Setup\\Adobe Reader on MDT01. -1. Using the Deployment Workbench, expand the **MDT Production** node and navigate to the **Applications** node. -2. Right-click the **Applications** node, and create a new folder named **Adobe**. -3. In the **Applications** node, right-click the **Adobe** folder and select **New Application**. -4. On the **Application Type** page, select the **Application with source files** option and click **Next**. -5. On the **Details** page, in the **Application** name text box, type **Install - Adobe Reader XI - x86** and click **Next**. -6. On the **Source** page, in the **Source Directory** text box, browse to **E:\\Setup\\Adobe Reader XI** and click **Next**. -7. On the **Destination** page, in the **Specify the name of the directory that should be created** text box, type **Install - Adobe Reader XI - x86** and click **Next**. -8. On the **Command Details** page, in the **Command Line** text box, type **msiexec /i AdbeRdr11000\_eu\_ES.msi /q**, click **Next** twice, and then click **Finish**. +1. Download the Enterprise distribution version of [Adobe Acrobat Reader DC](https://get.adobe.com/reader/enterprise/) (AcroRdrDC1902120058_en_US.exe) to **D:\\setup\\adobe** on MDT01. +2. Extract the .exe file that you downloaded to an .msi (ex: .\AcroRdrDC1902120058_en_US.exe -sfx_o"d:\setup\adobe\install\" -sfx_ne). +3. In the Deployment Workbench, expand the **MDT Production** node and navigate to the **Applications** node. +4. Right-click the **Applications** node, and create a new folder named **Adobe**. +5. In the **Applications** node, right-click the **Adobe** folder and select **New Application**. +6. On the **Application Type** page, select the **Application with source files** option and click **Next**. +7. On the **Details** page, in the **Application Name** text box, type **Install - Adobe Reader** and click *Next**. +8. On the **Source** page, in the **Source Directory** text box, browse to **D:\\setup\\adobe\\install** and click **Next**. +9. On the **Destination** page, in the **Specify the name of the directory that should be created** text box, type **Install - Adobe Reader** and click **Next**. +10. On the **Command Details** page, in the **Command Line** text box, type **msiexec /i AcroRead.msi /q**, click **Next** twice, and then click **Finish**. -![figure 3](../images/mdt-07-fig03.png) +![acroread](../images/acroread.png) -Figure 3. The Adobe Reader application added to the Deployment Workbench. +The Adobe Reader application added to the Deployment Workbench. -## Step 5: Prepare the drivers repository +## Step 5: Prepare the drivers repository In order to deploy Windows 10 with MDT successfully, you need drivers for the boot images and for the actual operating system. This section will show you how to add drivers for the boot image and operating system, using the following hardware models as examples: - Lenovo ThinkPad T420 -- Dell Latitude E6440 +- Dell Latitude 7390 - HP EliteBook 8560w - Microsoft Surface Pro For boot images, you need to have storage and network drivers; for the operating system, you need to have the full suite of drivers. @@ -143,14 +146,14 @@ For boot images, you need to have storage and network drivers; for the operating The key to successful management of drivers for MDT, as well as for any other deployment solution, is to have a really good driver repository. From this repository, you import drivers into MDT for deployment, but you should always maintain the repository for future use. -1. On MDT01, using File Explorer, create the **E:\\Drivers** folder. -2. In the **E:\\Drivers** folder, create the following folder structure: +1. On MDT01, using File Explorer, create the **D:\\Drivers** folder. +2. In the **D:\\Drivers** folder, create the following folder structure: 1. WinPE x86 2. WinPE x64 3. Windows 10 x64 3. In the new Windows 10 x64 folder, create the following folder structure: - Dell - - Latitude E6440 + - Latitude 7390 - HP - HP EliteBook 8560w - Lenovo @@ -192,9 +195,9 @@ wmic csproduct get name If you want a more standardized naming convention, try the ModelAliasExit.vbs script from the Deployment Guys blog post entitled [Using and Extending Model Aliases for Hardware Specific Application Installation](https://go.microsoft.com/fwlink/p/?LinkId=619536). -![figure 4](../images/fig4-oob-drivers.png) +![drivers](../images/fig4-oob-drivers.png) -Figure 4. The Out-of-Box Drivers structure in Deployment Workbench. +The Out-of-Box Drivers structure in Deployment Workbench. ### Create the selection profiles for boot image drivers diff --git a/windows/deployment/images/acroread.png b/windows/deployment/images/acroread.png new file mode 100644 index 0000000000000000000000000000000000000000..142e7b6d74bc857f2e82a2987479443f07f4254d GIT binary patch literal 54675 zcmZsC1yEdDvvq&~!Gk*l5AFmT2=4Cg?hssq%fR67?h@P`f&_PWcOCrad+*-w-dFYa z%+%DGnmToM@7}$8t<^hBURDeV9uNM*hYv^+;=+m_K0xVz_yBSK3FiG5mg6?R_b&)1 zMKQq-m16{l?-w7<1Y`t0e5e5-JR3m2U&GmpYdC%QfZY3^55%BdvGIowvtK2I1(e-% zPcmTjF-#ucgp}l}9$VLM-&Wmsi(E62JcS`f4i{S;zvk-G6&Htws((0S|NbRVH(w$y zQC{%8UGg08Gw{Y*s^e|n-OSY0)WxM%f`goVT#VRd@04|UFV5AJ1IGW$r~iHTh>#3J zs%i_)d`xdx4o&r&cEMLbw_ma)vxJmgwh@-;vS^JghU2tpL}iC4I_1cv+^Aa>{r~?t zP+!cn>!ZNu|9vx{VL?3oNiG0S*WH3o8%G>&FM`0kp+Vr=-$7u^{ z_QF3c`uu-huc@^!vYW!ue*K6NqN5uRp%Ut$OF~$izj8{7laj+*JZ5kOK^`-C&mLi# zGqZV7M3&ygsG9f$NrwuI4mDUp^@A-0uMM|teH0B$Q@0zAd)518_Qhu5$@$7~|5#YD z=nf=D{EpRc!5O^t@FjBD`Ve}-Q*wIC$rh}-N-@G)@!i|dP4O-D{9LTrDiNq^vD5ti zpBp~F28k80f|M4Jn`WIz)Tb%5Jac+1Hu@j?DksdKPcBDC$?K$?Mhp59gC{FMS|Er` zOOLoXWt2=E>?Dt?lC{Kas2<9+M4mI97}?fe$TW;+5YIka6QVF!ykA9J7!~-B33HJe zLX?Rp_CTtd9iYt^Y8Zs!34)*!%|Uc(WQqz_7!{xmCGc0hA>4h17QOhdk%47%7yZTT z$xD%X!O7jqVvPGJtsh04REO6=e4?}1k$M0;i^40kf0;sPD0De;R%(*)RD7Ls9Cqdq z=|kzP5tk(rc{5(khk7wafs9Mq&#d7i)xWEM)Kt@pv>T9X)|H2i8_pEewY;ch>(0*> zuV!7%`2B$R^|7dSLP6*DcMcNYlzh>*RA^a=FF|-@5!n3`&`V_Z)R2@U|1|{&)Ed9p zX=u9OK8d)mu?Zv*Y!8y^;bp<(+ok!?O^(Jil{g(Al8`b&MyM;r(?e*{<1XWJs4d%F zrnF=0jr)L^Ab!LQPz#h=&Ygao-(^Yg0K3sqosdumm`&V+K=PPQsWhF)M*%^YzI4B{ z0XST?!AqfoA=#zgq~7)wjQ6cx+JaR7U#`IXjEbs1SnmA%>GS5q8q-VaQcyJAOq zc|sOi2csTjFu}i|1(W#5lRhF506U=2CS3I)ACd5Yx&det0E5pSgD3)CSvhsQSk9tV z!l$S+g?hz59wd#ax16z<603HXw&n4JNQab3lQw^O0H#GPt}s7s58z=z;0rj1)Y!+k z)p$`9nuGrDLt&sI;HM8KICcFPlGaE&rpV>2#cz3L6A z<--|FjGWoujgCFRb_R7KHJ(3sZvlW>|3NHyT77ash9jO~8H(GMXly}!L|KrHTtr2m?SVku)PdS!?NGeP4Jg*l5FmG~qo<2nnctNtD-Hv10p1#m)m`%&!K-+@5+X-KuQtyuc41ycYO~ zDwgjDpR(=*$~XX%rQULF_s%G7PbO+@vpK8-h-p8Qf7VKr#;SPMON1T)HGgW7iN^+C z1Lp~13&Y5j*7Jz6SdyDym;)NfOn<{`b67JRA*F@1^s4t^MTaVQM+7RkV^MeXZhZ=m zVY}-dQK({sBUryNBA+GfK;y@6AXJMET(pa`TUYqktfTElD#GKaY~j+B{_eaj5H`Vq zTbMAukrMBznbrUsoZ~**e<5r|$r?NpBG|8f`ck2E!ubPF3z>LuE&$^RlxGDJrqE*! zyO!v}QhbsU?@%?59rSkA17?A;Lb53T($>en0D#6^QlyQ^G)!$B- z_MNbZKqiXYplF07XQDgwgH1wl>l26LE=sIMfxq^+|MiqH!ug!D6{8DokG!b`XZEAp z8@vqL@oI^o>Rm^_X28(a%tz$0`3GnN-{wQ*aDe&w%sBjyJU}8=XtDvBfzX;brdY#K zFg4CM1Den^E+9@SYRY z=Ff{Kg38j?m2;bRIp{zxx5BRn#S!R#bOm;!lukq1o<=*2nQ~8eMpsgB{RFpAoj|U0 z9CHK(Bb^>FV%};PJXUD)1;SW>)djf3;N2WccE%K)ZYjGQX1qhOqEtxOqf zZ%$?HQAeivV$TDdOspZ==)#J%9c+mi=wG6m1f||TZr-r; zc6T1L_sv@`pBLV8?%co3_|V?&yA?B?g3LS4Xm;2MD!kEm=f5K%4^XcX#Kbo*bo=i* zU~)^UH?{o|?SoVesk&$R<3|m#EgDQeU=rpuY1Q>5U7|C4IEyzes6o%UyQa=5U&b%w zmHwtBCNTw>@kQ;xsl;*p$C=PnK^BAful&lFEhUs$5Npv!X&@kZoBsP#Nf~NfHDV`j zg8!~EqtToDvn4@70rRYcwoGn)>=FqzeyX$}M`RyR&SFP{4Xtw1N`ck^?ueW`E?J>@ za=9kI>9codMo`&6WzOjqE>kRH2U0uH(qY2Sj2{lYcO?4!oT|k7bBv;|hEA`!h}b!N z)(mqY@^z1!E~CU9cP{Q3U+1x>-`#8y$+TVevx@ljSG^=vNIP%U{KkBc2VwHsw>qM# zyT$(1Li_RApVCDR2jgkJz`M(%hs6E*e4Af;vlFL01wreeM+Bv1;N_(COeBBtWa5BsZwFNXfV1EC8*E zDAp6y!;A{I=c|AxlV8-suMfC@?II{X z^+>DQbue`mF}l-!AG~rXuP>?cpCRhH2HG2Zyv?YX+j`R z=ppsFMW5M~*S`JtGR9uBB;UzJ2*fQcGfwo?i*bVXe$=!Qz zgvyZpBph4uO6xE?D#ST*dl)%*?HZvfEtFv}a*#c9hmH9L5%EeXv&)Ep#4u=Q3pJ9a z?OlR{qsQQZuT?BVSbj>?zIa(iMhdujGb<>m0O z@RauH?!bAb=@wBCUkUC-m|!K!;wjRFo;X+Y?bRFA7N20y$ZFbwc=>UoxNaV}78RZf zeq^?*Mcuo^Gw>X$A!;w4`{a&F)Bbnag>Pi7`>!wzSxix1h)m0T@Dm{Z4_bdS$7BZ zf@g3%s940-eVTl{I8fZv7D-_(6t-NE;IuNBxS#8&$GTS>Q$_5%ymwXDp)zwaA5`-q z{d<3WDwAu}#>yG;X?d=SS=Dx=j`(?V9gB=!p1->4t6Ns7!{SqeUEZ|SlGSOQk3RyVq0OPhoRGMK|%X{r1Xw;=X`R36*z@MYVsSgqGEmBv+nB-gbd_IY+yRtw1va7g0p=~)Q~ z{3kgQ5iye+wq8u$2NHn17=?;!HsQMmug$m1=@Oew60x41ZL;;utUYPMH#fPZmN%F) zW{zjH1@nXNOmGXlD|v*q4f!ae6VX+1SN$R+^0Iii)++%W~&9WbWl@ojNNo zxRU`mv5b7r`!xT+zC$IGvCX1OYrvXzR=UE%iC!*XDQ9*-st9xzLPfhUcrlZ|9b6xYG2X}|z#yUa= z{@DX(19+mOJ6=(4nCqW86|%o;EOQ=7A;)E!_9f3l*wKdUltu zdI00;*jIjIYateZomU#2jEi%X>lUu|z!wZhYfbIv{Xf+7!n#e~eeOwpPW{I@M|cmi zIL;@hLEvZjG_(J#%fuU|EF_9LmDG8A<18}S18>JS5Tap=~4Un47QI3joxX2aV)}O)@(0AeqFou*fdTSRsf{9yxS$)Oh*-j^!Qg?e|LVo_CWH{nfU4OWwi~|TQ}&t z$$_jsa~E_JGM_Pk_o*yYG0?N}rn4M&IPE&)37NM_*5m}0p)>FoY%*QtM4vtFlWi3)Jkvuk#X8*lI&z(Jn(7YVEqxV8Z>R8L8{Cod$<>xKiVH< zpR0n3hE?OIBMPai1&5wRVVU9P+hr3DPQZv ze6P!C_SV5X7*I*-OabLX%znh<%} zJ8fJ+jqYtB9IzUFd|n(tb0oN94q4+nhA4MNj9T7v`)(Cqd#{8#o~ERk+$QzXyyft* z-4*I7{RuIa1pe0D4o|FUyegJ|Ieh@4~f;?d--d2u0a!2cOK+# zFKX%e|n&$)r9Im3R#>%-+=AT`bQYFbK=q+IKcIl?3b|Qw@gL;S&b% z35WdX^FZAoVw56|CxtX4j_GY>Z7y4OLm2wPWDtL3o+DJ!rZ1JECU1TJa^CqDA9Ps0 zc=A%+3)tKjp(Z-ib`(|jKgv1TjOs;<5?{z4H4+QuwyR zl)bqD=3cKE)qS7Ns~>}{s-NxNx>7q|G4U%OeAQp)`SrWkeLxiR+5ri^ZOFa8*R-Yl za;uiFSAES(^yd$S_(BKFK16V{kTZC{zwLeD!g~YUHh)k<)CeQ)uj)wvsBK@7lquLf zm;@I`!NHXyS^(G@aD%tLPE^1*$lm%>IgHo#+160FpFoA8O9 zAD0?lM=UY|8rbplWYI7Qo+*0b?<2@1^+c~yOHALRGVF*j5f>ti2HkS6cx7A)34;kP zOp5%S{^Its{GztCev~WrUSKr}CgR2ZT1x*$@^k07D*0`h-*9Z)C!+c7sWbV$wTyXR zt+S_G@0rNS=hbTT>4EX`W&90x+Q)}|;N{9U`X)`!a5tf5W)9NQi0=p~qiWqD=5h15 z8*NW1I`r~%#~qPO;GJc_dYCk;dhd+)KZvEzaCwq>&IbkIGsd&h{F3$;(?)tDA#ZD+^XN3sDw8(`um}n z-QVn2G4gIn3ag}=tD^E&FRLZFl2B(+o$(BjfQ@1^_lyg@k)Ky8nH1{aXXHdO~^iURXm<7c6GkIxH-@u>WB1KqYXmEt}N)ds@bJ1Kk$+@-{IsP!1ie2$u4(4e6J*svX_5J=uJC=OVNKgyjS-2T$kE25Tkz!IfoUqU9 z;hA#VN<~*Sp)p@)rM_HlPD86iuUt5*z$t@r=Qd1~O`+@S(UOp~B1h1$w|@n?7xNhN z!4b_GmE?)dR>pF|cm7C8bdE7JDC6-Dl#{?JposNDN)e0k=bkY=B_TH?pwkom3NgJK zbkby|e2&iFLsIpdG6PM+#cWu6RUf|9LBv95Fr>d1zI^)zxyb7X_&>9O`5y{hf>zu`HQG-hTDZm-dI&WHjU3)N5?d;k zs8`*st}dCJPh{c~77@G>zT^&&DNq8%_vw*40((635>baRe2GAUS8K3VD>d1H=e>?{ z=s;B-_$1R)&Li>9-~>tW{-YgiAJ>8@@yHUR1959b2q>u)i!KzRtt|u$RSc7l61Z-V zwvC?lUdu~SeTM*GhMlRy)xq+7J7}`N&Is^@pyjHEQpA#aAK5q zGHx(`V?PgTgNmGypQt9<5TY`-$+6E%Tg3lvJ0@Q2fq$1J&pg9_x{4qrm#8ZDhPaHk zbVNXK&;gVG$X$DXu#}!&8K9(H0?SzTs}w*Fd{isp_!_xYM25X(hQU8OSU4PsJi`tP z0v&Uo(*2`t!G&GD=V4R%kBnX-H&rM!yco86%p$0~>AK2@dJfD9+hX*8banzp_VdJa z8G?(Fj})~;-9`nR0k0n2n=C<++rKb$^N4~}=df|)P$Sd)gG+|pn+YN(zE<6qKsOGO z{G~hkf3_jTVp2uJ?C1N+PvS%~mlxVoQPsFIRt6C+r|k;B(7r6>6UsX^0SB%Q>Z_(Jm!fJDWN8y|1Cs@ za>O9uNWe)+q2fw1(_=q`KX)ICrh>``#cO*l((QIG^OkpO>QE~t21L;YwsV{Z#4J{_ z#{@wY>oAf z!99FwNIq-2PcK0Kt%T-E_dym8Nykv?4>$Z)T2P@AfXoXSFZ#oKNf%F}w=;M3qkGfD zc4Yffotzr2i3^!WbX_!=`ElF9;z5*0Q^RO^beZbEUX#hC)K5RVf>;#sqD4CW!H=9+ zhQ1beRC7@+m2m5h(iL~AvWvt9m&@X%lQQSkmrODIncoSY2fjY4&EiRgE10;6w=Jj? z88lmLR7v~ayV8?lGsU6_X(EOh)cuh0(GFr@sWvfJLi>!59wG2_b1V6UivgzQ6845YV~4Y^j{*vIYZiR6h@EBJ z#}!4U+>#@DbsowOzAKHp4nb|ZQ2LfT;4#<8*1Pc z)VP&+EHy>qGV!S>!lk&JL%l1roJhzXPtTRpspOWh1xoH(<)G49&>Ton&&e?D^vCVkXK@k1aosralp>s8-pn zNGPC-(1U*rtO5)t-438nPCaQ~Q9EIY8eQf^^7uxQ8U){_!J7|6Rr4)nmT<|byWwOq z%=!k*Rcg?}f6MDRhQ@Jj~sb`!0ix5s5I%fte zVa0)8>$t5Z1H;ECpD>uDS%FpVw}`A+A8aG|yD}P0U(HUR2bLu=#7UNqqq38eDhIE> z<8bP!@Hv@3&abf{@z~2|9nvT_=4aWvA{tha%JNEsVoxXL1dg|C7k2v*I9;ai3{Y-3?diiTKba6*yD3zH{W~#i_ z1bH`)B>^kPj|(`iDXJ%n9FM^LqWE|BfI=?0ekvlS8%vA=8|L}*4$DlXikQS7lUs&C zF?7}sdMuiKD8g^jh5Xt#_IM3g!LfaIvY0tH{qyQ3=eUC<}}XTOx1<@y0sgtlM3P4 zpiZ4Mei4bbDMa3GB6B_DRDm9GqW;coY0wg#&FBi}OzA8db+@iMC34^3qX>DO{GxG) zu*@to0)A0H%o0nZ7GIN{Q2B{M57@uq=TYB4oC})D9^SXV1Bw4#mF1B~)sSHZGlWo* zOc9I!l;5HD10iRp>AFCP#+dKA7nkpstA4r`*F94pRRX5CQSHgztY$?z4f6N+R<)7Y zSL+^|fn}~0N@4C5#UtaMG&Y@eI>OzhF+}?LR5Inh8ar$!II~vuuEMqc4ET<W zGUU?^1awGmEPUccyT&qgFQJ3)Leb4iBii5iqj{f<43=^H{DbBTPaug9NAo95Myi#@ zShP$egh`Nziv$W$dM5)YY53|S)<|oYWadtkiBD>E!=-fX*7mP_DbFFv4rMyZR)Wh! zA)wizSs-5o@i@1+P5Ty*>3KC9`3-#L|E#6wWrL%ql~5P6oLrhwnIxJJMX^yx>>bq% z9i%*8z%E|>W3jhsZG?D+nwBI439`tMj zu%Bks6{aau8#73!dT5bP4zOM)KFVhgbFQ{E*}ESq0+SebGzt;toVC`bOM#lz5>n zT7W%1SjKPZ7r6SYrC;J!I~RcC8_xpZxp1t&VH4-AT=F}oL*A=Zw#e*}5Pez#CSj## zC(69Jw=*;$IEwqQL<1fm`gl8G#3T|~HiH|JcPjPKV~++mUM^4McqaGx`9TB#AEL}4h6r7$axW9I3~!s2 zlzoX(_0~Q>-8lh<88!V9lh_C3OZQd7#V`2z)~GBiW-bo>>0;-UU{0^Ly#B;<&rY}; z8EB_F!0WSBN5lz`ZzCvC=GVdf)lO6(_5dyI3McE>to`*yc2KI*JQP*yw;FsME`0|+ z>DB&rXJ;F605WFo??yPg8Fvh_xvZaz=e+PBP+vv8@SL3GfaTJEiiEEtMCRjXSTHzLSX>(+; z==xb?KVp_T+zTHJd=}Cq8Qxy*J0IKa|MEhE%Ltc63%ktvqn|6eG`6`zjmPY>dnF`` z5Eku5`Z=dpe0q$;?b!aM7d8bk?80Vf{X#kYiR+VC^s%Ixb8W5oU2)tsowqQIgx+L_ zwIZENB}-F%`%F^LX9n8>;FXHeCkn^E)~Wp=Iwr)nvrq$giSG8dh_ZQSeSc?7e-UZv zai6p^5^#}yY+p=9xhWeprnkVGk1;Zcytp_T&5d$Q=rCwU)_sOWk9mM-mxOsFcfzz{ zMHdDBx{0ANSE=vxBH3Ro$M%C_->*X^KFKXp_>yl0+Q=dwss7%+0*|C-phv~kL~gD` ztJ71Ufg|>4O8C|$?W*Tz4HagjYKSc!UL8z z7aI*xDt5~jne7xh@B&JIJ5z^;dtJD%C?~=zK^9$N>OL0>oVp>D=*b+=$wPkYzc*EO ze-)T~i^@6I16VSU>i@3`1aBz}Ay~<~=_Fx-dCh6th`t`*dd#-On7wuzzphsF2qv{? zz)B_KR*jb(;dR%V?R~w96)hS3?ncdv!Pj15h*oUqTG;~NThA5>!!Ejx9fZ=0QTy}L z-HQz-$t67ZCn$ed=xUdS?#qzjX>N^@$tiLK%uE#zs3AbBrpIU^IOlETR`~+>MNAKm?2)LOL_r%)Gw|sg%$8~(?ko`*IuK6;4$lIQc$WERx271Ir0cru<}QU z245g1hFpn%yp4K@F{^hojoh#F;+-y#O8gniMz&f9p_^wDG}l2>RD|V67t!E@_z+?fi`#8%QB!`kmuQH%5S6>x5%Wo>V zJ^cjfF8WqyV{7zu!&{}gRwfI#qXZRUp}|w2Sav+uYp!>$2YsI-k}X63?7os{WS{vG zDEfE#TnhCL2u~KBm|V|zN7KH6i1rQ72t0PO*%J7^Ep`$}jHa-DGq!&k8lpBJE65k$ zbR42_8zo3@(C_yDzQ#*t?!D%9%LxiNwzqG_kj#>E-ea6eq?XxL@EjTK(GE<=``5he)A(TVVjfgS4_X zbHp--wkC$TLlh`~G|is>#62Eh;a^I6*~|*tTI8~!3{PsNzlE9%3bI@jM+lsR0qNj( zj(oBlJiYAx!>Z9idV8?PHa6WTwCs{OOQXo@WXU1Jn0F zB2udMxa`tSxqtVt&IT*O;TRwzShwsWYU5k!wy>)Qw)#Z6)O|k-3La^8iJ|ajGox?^aXO10ir{VD) zG#^{?<$mbUrOnoxWccQAT1*e^uZ5cPEA$94dH5Qmcvo;W0uc_L$`+{9ppgm5st?gT zGCsXKraE6-G>~_1LwA3^&L2H~s&HZF?Y^3sEr6kfn~AHm4?Fet>}deamy}roNZ!<7 zb`+LkZ7UaHe!M-FL%89GOO6F-`D$SQs-bg+PGr;wG#N<@LQ4ES^|{1v_4#H?u|Ja0 zcE;*2$NS5py|2=i$}qvWFE$z(!A1T_>?IIz!$a2(IF07mZ9&bNTsq$cgC;Xo=ftN! z4u7U1`x9NW*&9N}&OVz(jGV_eU7_{uws>i8k$R2jS7B~;3fmD#PUc6^JP5QWIKpV$+<3v@pXgtP34^ zg_DA>!-K&{_|@i?l_$iq z4bLCN$W`Cib64PWn?$CW6sOSRYiIgW9X~%@yX_{ZO%%%Dm+N&B;o{QYv*? zOU3f+Slb3FMTCrBa@ooJq}8x=Q?AH$_1?aU5);7e)K)9#I#7D`FWPrUlaT3Xv2Jwq zz^gOQlD%hfW8826xh|bPG8&8?vTBuXq`yBTMK%`~mk0i4m~xk`n@Jjf2T^LUooK$% z(0~^Jd!b`IsK&{0!fF)y2VqQ*R;EVo{@)<{KhuZP3J)6*p)s&QPrmy*h?Wr{O%`)| z4TPP2D!Vbpxc`Me3wZ^BF?&IVbYNalfe_n0p@m_%AcODVU9ivEjX1ur+0O6*HiZsT zbLIJ@v0DWPAzao!>z!P*GkjZ7?Rqd#PBjUVGgDS!Z}PPq`^;2N_Hw}@ zfxB)M15YodgP8T?^}WlVoKDH+{@vRu7mnn@UhrEHR?m|rJ6zJ~Srt?Bc7VtN+Qzco zXGoM5M1X%)aI_x)pjYr$>F6)dVuHnFlp@DvJV)fb&A%=^NJZqC2Gwz0%TR9b3J1*Dmj4i9ek_9VVR~vF~$DDjbjVQT(t|k3^UH zL7g%Z5%e1o_V&m^@FLk-S4&vMq*c$gdHs<|TT>^5F5k+B(+eV9z|F@ilyqUSE08Z8 z4g!Hh_Y~@B2_-JUxW5Cd==QVtF$BbPtUDDJ_H{dEGt)Tmq1t$p6eGqD)18%o9N2$C z(66zh!|7i)4V%ZH-^kn8N4zSUG3XbTg2VmrS=X}&h40ye0gHjZc-R^L0>F3ZiglZn zS}^xFN%S=(6dGs{X5e6uv?)K5326;D95}5Q*s7RyH;?zgyC1vViWw^byCz|}Lm35+-#Sr^U~wtkO8)7`ssfA5skX)}h?wOS*vYrBL=?OY@H zqw6V?;R0TNdsPGc@{1$_;28}@sa)MoiV>F_=L&Xjn>@dFZGyw8#eM7a!2?*(_T7;$ zB|7r)M4-I1kd0}G$jh~r!HLHW1oMFT3CC?CbDk%WAIZ<0Ec4z07_CvI z8r9wvc}F zCKx+C167Rhbq@!fXO9eFUn$nV|J&>sOmk+`Tf7`;rRfo*{Z?;2gD)Nf^0MWFD(H zkE*+A{>?vyE>0Z&XUJ|lkM<nCuUeqoftazRbrl8Q7>l&|~A@9X82FWge?y8E50> zGJ-7|LO+&Q$#m5z(MRU;uI(&d%b$!*n06_r3&rq6PK`zX$PkV>PL8eG>UmLj_h3q; zYljGNs<*1`c~=7f>?6cFqQ<#Kij>^sy5FxXPxqk{D*@qVy2n9<#N$FEwnYy6+X2cg ze-|DUN|X@W`c_SQITUVYHV{O~-Wd0cqdn~ijw&ncogW$t-7Xr>+rg`@w$F~ET-tyQ zoXVp%J-7uiR+M*oL^O^|rbk^IQP*Y;QKC0E$EwlxV6u$r@#ZwZ4Xx&*P7fG1!98VK zox$Voq$JS#;c6Fr(Tnn8Wb!cOgQ#J(@|nrEvyD2w;MeSjVmh0ZOBH~;y$3v;Du4OP z0=&*Xz#ln?{^Ge@U0UkpL%$g;6jiKWFPVb9{pYdM^Pt6-tm#{shz~128T21JSY!V{ z4xn+n?h(AJk7QA#jg)#KXVc`mRM9c*xcKA1!J}!31uqYb4xR<9ipCX?>4;r#_lb=M z?U*o)ej`7ipIDF5Gh)dN!OR8^>ZKs!C{>Ao2~juFTZK?#o+ms!)=rG3~o%s$YZ8p zJ437dd4x{!?T~I=h6f@el5WY;p4IPoL0ZLhYWv#CPgN19ruxVYvF*vjmC>>=C!UOp6pP65I7qCZy+j?eISnEVe ziII-{SRUhqVGz`_^UEdzG^RV|KaM6;X80d)N4nQ4&Xj}@iv9Rri+MZgb$jaOJWKE9 zd`o|j{7Tu9?m=8d*P1|1cO$Ky59u<9-up7?@|}_|oF9bpm|xb0d(E*G!M$@YoV4VvP>=h(tuUxG`hV zY5VQ$7}vKs?n*kJs?FQ#Og1~2(P{h=UadA7&jchAf92STFzZgXU2Q27+cqUWnh|ya zhbw&Vsq>V;-f5!DyUoU*uw6uVb6APQ;oaxbw*W<2T*ke}Om-*bS>P zXDQ+kd&%py;TiY4qf=EBld^<8PtL?-I#r#qB3WF^oAMq5bt}ZW-B~hy;cg5`Uj6xud{p} zsrlZXoxHAws4NR3Ois$GIus4(?xq`(xt&Yb{Da@vgpu*SO}BfZ+#cLsm4uP|rjJdl zTFZKc2r@>)61x<*^fWx!FtKlv0156ny`Erlz+L(q8}gcGu=8gO80%g2MXd1mu0q}2 zYwx10HnbhuZO(dNFQxuU1-D&H0N7^_(G5X1*3IH-m!4A^(&aj~NMGIkZi zrqe%~yZER_J5ZeFWbgSLFfQU{6gooo(?3N&9!CpGeA4_ zWA;S|(eL%ypj=iFv7OUX{}m`eHQi-rsZ9_^;D@@h$J^7YyBvNHvAa4Y1U`=sTiCpW z+cl^}>2v!7ER)@ywKKfo`K!>RLmxKS@}_9P&Fgc^<>^Huz~7Wy@99^AB~suQMTl)B z_(*e!ty_9n@CzuX5f5jfvf^k-yJH+`lmymV1^FkxwRG7vn+onEI+w;Ob zXmtvAk5$Q6hX_X))0)AGneAA=1rzZoctxJ9X2i5t(Iz5WV2UdX_#sZ`xXi%Y7}4V{~IM>SuvgBFB#zmtGSX)7E`TQF3E= z?=O3ChL3zg417LqkLl<@XRtnuY9oA!Zfz%aY`7KL+sou^e8tbVI|#4EZ`pqO$ylO< zlOWGLLuJ?4vIguc^X+s42rauNzT_~vJ{PiHIo?q}TdOc>yJ7ZXgRt3AZ9yCy)-lciO{@>C+ z?7eTZ$#j@b{Dkct!=Sg7lMiYY_gOurk}VM;YX}w-y$vKN%tzDc?(?$l-JMozH)}5e zmzyrPtG$BmvE$<=QipyO@|y{vYW8 z0G-vIOyWQGT*T`knN`r&F?0%=q5=%?4|T%+2@^tZEgK>b^t-*0ZH7sy)Z1{33?h$( z23KO42G?(&*&^G;#{Hg4PUn)4#Upn}H^i$s4 zLi8~c;8|mI4{@?8WZ_92Ip+)BguPwXe!4%u4^bG@o_}X7vyPnXd7e0B3as2c?@k6P zb$DjCJ6_@ka;|PnFjri@c%QEU3Z02M*Z32bM;!EtU6j^P*i>ctg|~Udmy03;2HNgF zKvy{7CG5-JQqMG5Xt@)g^4rU=i`t5z;DJh=^!btH)sOJDH@Rst23zo9QHbLIIeA=c z`tG9L-CeS8->}~qj3ef(xogMk8Ascw#LR?*NCfO((at3Ji*@NDBPl5j9XnGu+0F$alxBD_C^*T<5=mql}_E8gX%rtmXJ1OAU zF%>nqujB`EWu6#Am{Mh_(EIN4&e>2~WR3Hi)$OW`L>9$DTxTIhtuknk%r zg!JGzAp`b)1>zdz{2tr7JYLRjO!?D&OwdMrFo{EU-~VF&=7YN3;Z|PCmxL5Q&hfbW zLvzpJU!6S4RqudSov+ECL~{UfK4=udGLe>yObCG2WAYn_Dhf!bG99Y>A+*6ZG?~c7 zm}WKxY>Jjp6znni2p2(VvKc@j4m~?GHnptJoZH4rAr?$`=~nNOaFNo(=+9SJ?dajsKW7i&*d~{7zf{cERR`F zKDYNlH08Tbp+eNPJMVzH`4eZI&Fu2Ni+E)dz*g-P9j~m$PFatjw0sVG+#YwESd zbuaG_$jT-DbNs!pfUp3K={2MD=EjL;ENetQraRUcp227*gU3}j;^w*(nZGofEl;|b zGtGs_Y??KCz<~k%5W^x}_Smc>k~O}npDTTj({n7Va2PydxhoXZOsMirrYtT|_9Y0x zQZG^l^j(i4q_nI-3}LO|#tB=wn9XwiaOhu0`kU(BMV8}LMu=69Te15yfbz}Bq?AZw zX8as25x@gQ9@Oq}r+NtRxDf`OjTy`!Ve7Og{5X%STz$&60`bkr>D~UeSeMt`uLMj= zh@kv9%7v|PJ)2Y7b>brHI9wayDyB=?Zve_Ww<@&T&R_=}@%J1UMiGgwKe|zmZg1I4 z=2k5=*aDt%@ae6V7hp452c?u9f1FNMP4!stva^p8tIIz8kHirZ^1$jmn#}xufz5^3 z=twHwrCuqU#g|v4%scr=ZTKYjWqBT2ptxlL1W^(73z1dr#-y``&qH{bsHCzHk0Lt5=^#t9I?$RmW6Lvcnj+ZPdyYq+&(; zymP}H#TmO)me;lOEoHXhn$rC-lSyjjQ&1ZZ26a*P0scu$+ z{^n@Jh$pr~LKitb00t~3YwoVo;q-eS8H_w>dMFOCi-DL}-e#UWG!O?DH=Z?K_8e@= z$tZot-HZ=DLkFXSn@`D81uV$$n6<+onX%m7J;3^+O%)6{B(-!4w#fvxN&3V&!#-AN zD0%qYL*@8O?)+XZyRd8?o27=G(euEAdS|L>%+bD&b1O3zAGr)6*Eq3w61~zy(~pGc z9~O%3}mY zibIl~D#l{$y&G4L)x0ij$&3a88XvTbdLQ3vw_9@|&8t#R$VqkjzBn$JrIhdsCy-@} z){UelOP?G#4a5o?&@QMNZ#kYN@FB+)Nf0(YEY?{m#{ zi#COk0H0m6d4CznGP!Yu=Dv60R_!{*Z#!QN1>wrN9Q>~Irc3nk{T@aD8bWvMgp}=4|C}I#8IJlX|Jl3hj2oPn8Uk<2{8*S7BQES zAO-yQry0YzDjrFNx&`*{M@9?^W{c(797JSDM@a3&F_C9@6J1profPx{0m^EaP}tTC zl!juG6p%&}DlIDZP->U`93T70eZdHQeSPadV*4JLJCU%WY)@pr=Phy#T>~Rbp;^_P z>Cxm5N<(kUXQ?XEs;7UH94 z9F-O|c;`(vo?8?D)~wZO#wrT0SRf_Vb7O%8i=hH;mBsr-my8K+s+bRp*I?7HIE&Ic z2e!(;^w+)!x*c}T>LAtKZ;^Vh>E$d@r_ZRH2{*Ws?3>2Mn0_AtW(ivuCQLX`Xeaby z1=1OjGqH~Esi0}6)gfCS@ex*DEYB%_8v0ga?)8xK_?tYZN%oFsI1}L z0X>DC4RuvYSWSXOh<=x=xB`0I^wVgi))RIUW-3}wN)`C+_GINA>ESx6pxS3#*uA6Q zPv-6cj4CR(6huw>`Smn5cof#`>R7ub{a{nDLU1Aox6GAKe@QBv1SHrHmcC;%wLBf0 zA~pt6sa7WI^J8fxMFMe`*%`mPGD#_exdO#1KNif{|F;-osOkAZ8mv2zV zJ!>!fUZqz&F9{{Z0$R6^Q*6#>uY`6Y_KOEMCqrHCCEZ|Z}<-?Rx-L-G%oiS1VfI;OLav>4Oa3dl* zbmKjv-j|ES-IQ9Guvn(ZK?rcyAph4mnPF8kt$aZMzst;fP!E0nWNhuM0ggG<%eXS7O?RMRu(!u{uNDd#)T~e%5MXZzhJLBV(2_BOx@>Jrjj^2=@x;*9#K z0bIn!U-svD+#d>TW={6C7^m5BoNN4#`19I7zK%(5%|wGbS;J|vc-<$NK8E-?BlO%s4qtZwndrc zS)^Z%c6hcT^}Vm6b?)P~8NZOXWZG~WRFDQXu7TK-Mi!PZoBEzf1K*?9Wl-*(kWO3k z^TfOz^9_&P#qT-F2u*(805yxm?2^Fmc1V*`yIkCd<(r1_b&Xaz>Wq33lv&#is5OxF zuQRoILutQ46GbypPo~Grl|(O+9{>!U*9y4}KC(Md>~4H7v+t!KDob~)!)!*2>Nvh$ zs5ZrVe^X$=C#mw3a9zcq!`?yC(B{8Q0LV-yf$Pv}aAE_N>nRf#vgjS^*(g<+aOR<* zM!`T=yco9B-k6k7ArhHkS8Mm_8i1ls8a^OuWL85L3a2RKq(ItNXy)DUH#Je6l^u#5 zz}cewS`%HHapRPBzL_W0BN@>#v36#VTe~pJX8RsjTnOe5_9wAW?A8K`dE7>mI=i?Wn8XY=WCfLuOzM_-2b#+03cb}+Iv529 z88U-4uW2S7l$gg!p9z%uy#x6e9fFRQg-5~E@Ht8&;=gQQ(&s!e%WCO+1xQ&|M3B;C z(tkRU2D{-LkXNgm5wJc%KU78^&R(0N4zUjbenpmrCUi_@Sl=rN&WKsOGkFL-W}>2$%Jh zxw@_6EoAA@FCG}r%H*yx(RJ-Y6)<(y zO!d1G@K~7F5)bS?A=-+IYnI6S%(G$W4j*-9pslT4Y|k)RZ6t1*J=|9+Ibqm;Ip?UA ze-w8o>4o$4m0;wTPwWF=Y~XOLY$ii0JVmmD6AE-1Q>+ieZAiSv7zkSum*Be}*lLn) z2ro!~zd^jLeJ9RHfBmDFm)L_*PQvIyqECO7Aj=ID!Gl0}jXQZp&UViltQnaynF5P6 zjyb$EgU~enL{PU9+#ENdixzqh%ou+C(jqi&M| zu)`?f^hhotk4j=&J9McuJzB97QRq&$qGa91X`h?~KWf#BBjay92>3{iY^8m2vHv(n zwKyiet|w;lh>~z0Inqkz(7znsO>Gf;YU@6eMW#^Q_dCUa9RM~jMMJ|p)4=r1N}b}>$w zrO=CakeK%en0Jl3yd9c?8|Lj-NxDHvoh{^3vH{WhV_~IeC+c-+%TH&a$fRp$6Y+GA z?;MD3Y3PI?ETg+j?<$ZN7 zuit8({N-=l8XGJxugZRmFH?z(^hyYdI{*!V5)Wx_vI_;=VAv zofjdA_Pb>>$JxnygEGm!ONJ^mlw}Xp6Nwa+TeNrana_4m>AZy@s51W*7MTC#1hBMz zgWw=OOo-J%`RY>}Y^mt*DEh=w48r?{OKsX@{5#urn<0KVaL(iuSpBj*sM#jEfa;g$7cINW_(Pu z*NY9Av^F-emjQr3dnDU|6nfEai2we{X8!TP?!~vd;})jMXz6IFmdtt~sy(W$suZ~Z zoAu>d-1l|V=sQ(sTpDGjKim!>rA7Mtx)H)Tj^t>Ud=^NF-+Ngm!`(F~6YXE4%YI-O zUY|qG-SJN1NX@n=FS2H`N^bplu#rXigC~-vi*7+BOl$3|hV|{}UL6rZWM+z=-$)&N z)y(9oVT#&wW}n5g5k+Kq#qTV*ZL+|-b&_QnkIr&E6gH8n$ehLpGCoO^^Y=3H8Rl+V z>>YT=!#V3OR^9`BBsjm4H==c;S?xI-uHn|7d6)H`oDR44im{#XX^->mE=rax=y$y@ z)t>7;7!>g=sCozLR5Cu59-5ptf<9-=hwzx#i}mbsx-@9B-Ifs6I`HKDFfR4CvZYjrJGiU{ z1%U!ZbH%INA@P45Zw;r~7DR(n8 zawV{gmLVe;>~?s=?9OJ87zogFI&+qk$tNCcWwc1fe zoD0Tv&4(w?>e%FPv09HDW8D>BG|Cc(Ex4_JheJnAl|koXSCO)2~RaK_5RGN^+{iXcX(Hc_f8)4Z9{%1BWZ zHG$*1zfSUrnH&}??qh=?gq}(d}Ce2PP9QAt|~Ir-|Zq3$NSCu(@=VBa6uU3Cy^937>*13QPO>2 z=S^mc+>9XoZ35JeYP%RROR%qVB;_mSb`RyfWtLx^Tz74-_x9OI^b#4tPkY-~K_cuV zrrD-R|AFHIHno^+F%$aR-{+qw--AT#sWQksQkMnfvLCZpzWZClm59hPY$D9~Qy}i( zvx<>UUjXE9zP^5FXUizRjJhn~RaPHSESg0Y`-zHEG(OAm zhTw_+9mJU?Od+OvG>+uhBPP5P2?;vD#GnDa<&fvld-cvI6$+Rlg&j@h1Bq3_eQ)NZ zVt@ux_KEb3UiJm3rh37C;1&$NSmWyPi3V#WX)2DHu$-slioxV=?=zhLx(M$Y$IFgi%-{pFuRZ%%j~wQL}I9*zQhR?%Xz z#9bT-(J&lLNJaT@v=a(}Uf?h1Tz*nz6fUoR?r!u#wOay(@_Th*A1QfhxjC(`iOunj z9tR>#6K?@Ep|d6E2}E2lg~QJFHNWgf#g7E_3WLHOHcs;eeIN{%bXEF`(}P1sm02y# z#mR9CxqX=C!r}hp$R4yc$kbQ+P2}=(Z1zVVoE9tF&nZOLs-3z|_4Z#Yds};xe~Lc^ zzSiARBSQaAE@8Grj>Sizmsxw)=2xOJ-%`1l1MeTH>qNMf{ zYcp%xdNa~_roUx&SYFPX@7)7WdXlBgO|egqYQ;VXmPz#Vi}j!2P3E`Gzhyy+EUiL~ z*p_5cgJYJ8u4}vSL3lum$fiu-OJ;Uadz&m-Ra#d1#Rbhe#YJf-E`idHG!lGr8Ws{JIubhn*#6g4z%1a+R<(Rb9vr)T*4>6&$)#IlAC2if%<}as12jO^AzjQ*AhRu0N^wG z^7=fM=5C~CAHoNPc<@f^#N)otk_Hz&8m^X8m+J^aw>HIge;eC!G<|VrOuKyl`jP`I zeOnbe9lS*GZR4F4JCIM3H;}8%zhdyG20mcEpz>mKY4}PeT9}=i`Rv24M=ePNV`-9% z%8$j(ixMN}45?Nr30&u16^G9l%sT%~Pl{qNqd_b{tNI0F>XKdi$h)no{7@*CQqY^L zh#J#b!()IDo&n^XVURL^OA;|nliQ+nIJOu0jFSq2$8WhVVV^l%HkvcjAn#>00o5jGlc^ z>=}1){z|Y4z{tJDkWII*zRTEP=E*3^S7%XsbbTojQoeY;Y}<8`=c1Hra7n3>7=Y(u z%x0O>VSu^cSz-JjgDV@!a-~$x3uca@kihk3^|)J>h56|E0bX z(@x#|YZbP!k|5x?jzcAm`>n^`KzD{PPUThp`Va}s*#+78^Es5FolQWy4S8QU+}%cH zMpfOX>=z==?32rF7U`>0H&!*`bg_(wO*Q<6BhY2-IB1@3Gi!0ea2p=qDR*st%UE>- zx^T=}^6rjN62d=1ZY&1uJI^4j>ck2QajDw>tlj=+m_je)s=7C3rlt%J>6}(r$xM2M zW+4G(YQ-S<_uR~cVb532(_DrRR=q0j{7}IIPhCFs#K^w)1Ri<-saqgIe8Z-uZH}t| zB&}Aq8VBEGCY1%RQ%%5RqMP8qvo2=Oz6w4-2|EK59nO>$DR#HIkj#uc;N{Fb0H!PS z@Ed&9QQU5xL~RTK(5I!Oy!tHmmC3e)Q%g)ls-AMA`QSvsG16_83A5PS_5lD-)P{`Qz_+~GJyOv`!Tpi=RFG_LK^X`y+Ow1q5Zd1q z%L1HQSW*6(y?vzZfJ5>K5BJ1R;kP6(xOm@|P_^9ew!S^CSgIKEgmbyle^@^NDnh={ zY|SoJlEP+1dn|H9T8*))gdIK7_pj`1#?5bn!FPH9Ue`@lj(1M(p;nmiua>)HU{O?R z)mu=UR)Tsc6$G6Nf<{G?Wg99{(jyk#tPapzp4qopy^=^Q5Ot8SOxJ&hz>SP1k(CBI zo-AEb+KXdQ770Sn`XtjD<|t0XmOrc;a~|wnqRjW^oZ>-Y!{$n1%69GA^3%L~_XQJD zZD9^3WfjlMT-Tw_M#^|xQICRX#zWCaHF-u^#bgLlKyXnq52qiR$G>X0@o%f4Is1mG zUAh=OybQ{;lP-z}Dm@Zv!KXXhPDT~`n;l8%LqgCiwMA(bj5vc-*DVd~B9m}bN6nq(pBYYJy@mR4 zKvW$UfLH0GXV3@n=GzbvDpdyyC-7$`aQ#e)(pQ(_(Z>zi=Vo8%0oGGt zYO`k6)EXil=kiyE=Jx89fi$U!#Mr@Oy^>ERG)cA@+N4Q6KY?Xb-0{M&<{4r&??#<> z;mrb>D_O=q=jTwlN!#Gq`ob(^7<{}PMu@MuHs2n961cQ@C3@QJ^zVHdU+=oOBH-VB zbDKQ~Y#9}7dwrm=4m}GPEF!Z$aRLY)-Dr;5$aX~tIZq1iDpDWsc{8U(;IZ8#U7y>| zFS(paROvs?fAT*rqIm3opJ|v>KVAm_mP9myh{Taou?U{thlT71VN(+yUW;Y~spu{0 zV>Ac{C}E?{b*LFo|FaA>ji;dlS|settCZXLk8xV-;;z}~_)b29qZjX90wBsl*(p7v z`x_$jMqY*>FY+X^*T5(+=SG~wqLRlz?@a~A1`QgM@o;BVDS8{rwhKcQXbNIOIskr@ z@+3ULY8{ZY-%k~5sH4UFoDMuPJaXX|$IZU*LzOW|0F|kdL*=j+dT37Ea+D)+difOB zx(@$2^-j-p^qG*o$RMUf+(25fBL(e;p!-Q(l6LI|qoM`QW`irtwWe*{V4Kd-SVI3$ z_CTsbk5MMWV31AG&zsHOuud(Tx>Hhz{QmZDPQWp~KkUUr;L58gpa-F|fE4-4#pqV> z#tx^$=O*}&MNVQmghE2G9=5!z0Eu8kE14OvSKG#$u@RH!FZrm;lk#EjDR9lX=1W*4 zQ%Q7fR0ZSwVdyXB2Khuc+Zm)){7ZhOEBE6Yo8L#AiT-1s-2~-Ht_D(+CToT{OcXp6 z+3>(IEw~Qy&chtiKX)MAjg-{G{4YjTb+#jA?hD~)(XB(mVGO$OeHB;>?;;6Sj^I$w zZc(v1d~seDMZ#{ja{7|VV<EkHX%@yJSc5$wJhS;|hcY{d0} zpo*x5fu24UTo9dGH+bcq{nZCX2IQu=6Gf08t})L}5}yo#mBK1U9EJj}$Mg-}lCr7; zp*7Y=?~a9Cp?rYH-9IGihn>Q7L2sVQ7?Um_9)hh?noK&R51^4i z&iZO)$)1YPhD&7GI*5EAvf{J0oUpK_?#E0Ga8CRBN#fi=zi(E$pVY3ZPgV$4wUtdw zNYsH%OfkXbYQ_DM^axwAi_hmJ&lVFMCaJC5)JOLhfg(X?30+08yhHfTrmQJ($zUXc ze0x(BsJ7W_8tSTrNRP5R!_(50)VfQAQG*&e2!bemzk|t|A}w&js+IG?Uil;o+KJq9 z*Oh@b=l{)~Q`k4M3&R?G@?$)Jk7e5F{RWHxSTz5DLMu0Vg@AHG5LOY;xNC(FHY*73 zwp7k8L0?4Zt|RpHp<;ZZpL!hMLS2O~YOLq)KGEcH7ufmF?J2C}$6_z6;Ey^>VH)_r zvl=l+N7^$z1lRz--r&NgjeJS(5CNYBRwZh4<&b0!Tqu+0XVV&vJ*6HoJKJ*579t7r zOwmx6ej=!{LM!qvDprOn`{WDuYvK!`K%9xKMNWnEG!uL>8}+_$0a#qCq3d+SWJepq zkNQQK>S`f)-@?#)d5Dps5|jT{L@+~hA!zrh$Yvw^a0_ag{svg5|IH0DByVj{$cCCM zg^wM`u^{|TmJFjsD=)HfC~#7Q)zm$W7Ha*W@3q|Z+;#Y9S};5ElAjA471i=ebIt#j z#&E4dkc7RkQZVR@_G=G#KGzw5eY_8zJT6B zO2c+Xnh!$09ByoYbQ5K|zSeiThVs(algy`qFCCcim(5Kb+t<`5 zXsdW}*bB>loY=V_yjI;%HjG-qtkMm68voQZ#|p=mnSSG!6)&4@knwY`pR?QIwN3o~ z7zvMEkIyT+)WU0p;6>(>x|6m+N~0r#1KOXy5T$}y?qa41 z%%|JbIq_-q)|?&(@pJ9tmp_x)aq(0E6g^H17EjCF|1||B5d!u?MzY8!D}exXZh({k zGsguARyE7-HGl;*8AXjXx5@;^@WEsZ_0czjMkfXbw)7Xd3Fl(EcPhA)_dXaTiZ@Y^ zR5)zzu$nFu$M(p5JBxV7@thCgWy77e=mKmMI^zp@qm+l@ENFT%)%8coEK}1ucavTt z4BP3z!5cNwXF}S zuyvX3)74a9lbS&h{*827QkSqy|#=<^>gX+r}_G(#Wp89J3_09PUmoF zgzD4Js2!Mn@G4V%Mbr8WQnv>--Pf))nQ~zbJ4+8gKbD4VL8NeNtUu-c>K?LGh8w=N z3y>Xv9H3Y1;CY{E=0AM^W>S=)Z%-0lV%WYw>PmddxnFNzp&Lexwr}ht^KR}D?b@H@ ze21RB%Fvo~V2_h7JO#FN%2AQH3RnnphgZP7C>hCqer{9~2C+T+a$=iUF%0hwrEe>G z^Y{YU{LBUMCP<^U316y>b~rPIzi6|(Llje>RE5fDH~r9fB2-~~lnt7%ed6SPaU>#k z%jyZqDyp_0kiji$%IYhv&@G>Lf*#=}#s9MtKn&R~Aj|3=0XE(l5^|9fBoL36Ov0)5 z0Ksqetq$?}S+Y;j$D9yHM@MeeIL>Mxuhk)0D3OaVrkNxUoS$=c9#qlcC>Dt)#taL% zP%!XjCpd*Wd{?%E)Ttg0yb^alEisv)L4a@iM|vpYlwWgf9SSR?IEoM_M@<(mdh0htzY|MNCv%xYzk zE|LRuj)^RGg26l}GbRblU>+N0M;x zmLmpAYfxgkoOYM{?T7ss^(Y8;!3E(iU`4~oa$#++dsbrDTsOvlI5I#)k(fFX`dw17 zWYMlCi`_>zhwq8n#t)upS;E6jyyCr?LIhp}?wLnFuBNF_0|GaMr?a-pu#p>mf|i+> z;<6tp$H#mSiLqV-#>oZq=UjVa7)P7Bb~LU?BW#PdX%H@sK~D+04x%Y^CI^ zH@0ND9_e}kB$_Y!GtS!jTzFUL;s3P-Tq-n;bTu(wjq# zq(hl1!YZP}#N26I?yNk$b82e*I9pmcDC+@DSF{>41M`Yc&f_Hk*(hc_yfxO5c%~fc zAxidSy(yxdQI~or-xAgolMVI-cscnWN@`1wTspoRDo5OtQ*{AAi+b`(MGUBS$fy%m z@={*rfAuZTGe4Rm_|Rmwh#sI!^jEKsKk_`{_}URRsUlnS|D4%ri!MR3Sjk3YWMsyp z+cY*hT3Qz|6;1ZbDOxBiD#$uZXFM!UCT|}x{j74w)j`Sr_?Y9W?lV9|`wM#Q}n(HYWPaVMrrB2|Qe9_ zFrD<#5xnCYvC(wCX>>#aivflURx++*yHK52ckf*nF9SmM0df61STRUtXL1mx=r@ckWz?u zE*m7}`s{BJc$B1XvyBD?c!~DzqPrHxd>oy2Q9eCY3Zv1!V0&TvM!qNYi~U*Y@XpL# zx*bYjh&FYD=^tU9>qDM@%9+2=jawN+B9v^Q(iMj_7>nwO;f!znB}fMZ=M(yDzp1B2m^W zA07H*XyLwrHc9#8LlgjlxAP_t zWhff=C}DK3xIxzjl+ru9E}!|?S3E|~m$OekV7%jpUExe35Q#-$XXMSr*zcn;pyi!z z`KoNaV_YP=u`rDaM$pu|Ka~a;LXhRibt-X!c3rZ&+pKIQ@9X-8M6g(e!q44`K$@`{ zZZH7|om6^3DQnQ|n`iq3lX zSU9ETk|zuei&$zbR~g$SB$W*y!tbTXamI9tKY~7p?ad2C)E+BrZsw&Aij+&j{?p-3 z;6IC0ZcYWQ`S8c^DDV7pStt#;NN$<%co9Rfya;m#|7<|MtKCoRk?{h`a{4ct)iE4Z6@i!5o}5dx=p|qgnnHIVtu} zd6@>;-;-5If@2h3@ZH;w_#O{)LG3+VeWC3O;dlp&Z=qdH*Z3LJIS8&SfF>8q-Jh~2 z(TOz`dk?TfZ?GV~-sPWnCE>9qpb0avQb=$UsuXQqkQVZ7(rbMnPvvr^KXZ?Gw^pLd zQe@sk@-x;<`Rs$G;Kt>2sU69yfQgL}s!SGiNs(2Nn3GTur25z^ILcF zNNf8FLexU2TgHPg&KeEp$8yRO-9LQl+ypHgIiILqihYs3$t1L_->naNxa$lxrJQf8A04pJ2U z=&^bhR2ke-yp$;aq#L}n|9x+NOS{hFcK-CqZzI$PCT*1f*^5x1(fdZ~!%4>b&*Zt6 zvP3Cas)mUD6C%-e2ggNSY50@Urj~= zwTTzWAwy3SuBYv-OKz#74B~tYsX+DD167=)jg((|iiD`9lfeIFO!3=b^vg9o`lDRP zV|5ru`#h<^y{JQG!Yaw6J4bLCHbYhYi-f`IWA2_Z%QOOR(USmnK#oA7KUZ%32`kMalSx037<9l!T2Ga_lt2Fwe9A-0W~0ULlKPDfx;2zW{xv7 zXV{GHLicbO6ktdG&P@*GXHiF(vom>5NKogGD};&thAdWt(Pv9vnAFwhSNv8G%G$G( znXISt{3R2@^zEj|$AP`9RIt;jEK zA4LRDTnO`pMKph38Kva4d?}t`m(*+A3r=|N)#8KHT-Ml_b9zEf{wp(_{p2nVAe@5t zx2@Qk!eH(3YcqZ&a}(}R_FFDE^P!5J+uFQV!#UB8VL}}pfNAt)oKjQG_9zF|&bt2A z9^Fzt;hix%K1q+!6T6+5p9?PSp<#moPHAW&W$;%DMCf$Yn!icI{s!vx-||WF_PFy6 zTdrV=YbbqRtD4<4RMKQ};}7m17$cjs5x{h3LwMc%cuxGWJ^a`K>j_090LB+3(}DlI z@l!~e8>&-Ni1 z9mi`$*(W1e!DP0&$q0iX%kVw2=N3Xr6Jk6$Gk&;#@P5WfD3PC}5V`AnWH;xx8J2v^ zYA;^KPaAPxbWDn!T!-t|dQV2=5dN{=TyW(K8(-TDA@jkY+)BV?1#Vp!F4kMg_CUaP zK~ab~@Ve$x)LDp&Ttf916%kv2uzJqJW6*XPZtX0$_-q1Q99J3C6zy_=2^BcvLBA5{ zj6OZ5=h*WM1fko%;Cn4zk*@xf{UM8m!Ex(-3X)+?{WJQJ4~EGX8R(}cJ7Zg%y*sk= zuRnZD`xyv!A91h$+{b&?&9eeFNXIlGmPGlqlo3ipv(>Xqa!-H(!`~Pi9kV*Ykr(eA z`_HiRbtn8A>{p1g_+7*fd-$|lO^ML#vty2hdgI(2Imge4ztv?tt#6Ow$KC4tkjOvM z-O@hesqw#($>^_%4WGw&esHyQ5cJWcWKFUgZ|aosSYf82X^*#iIQ+P*-9&0zR>ON^ z2SA&CfAcO{<5bnQt-BM)E)9k!t37R*|*o4$Mb9Mj5xXG%JqR;>mcB0;ghY)W)aw3Zg&w7p1jOn|BRA3K%x6xU!u7dJ;t? zN%hZt`Sru3&g*y0LDv4wvkSq?^cm~bgNWgYo?mbFEx7NJn}_OP%xiKdE9JsGlIQ$) zUDbXCBChDVqPUo3_uQ~XiVx#|zrwT~CjG0_` zPj|LG3!s5G*WJ_|Ho>8=NTio1*~7aE<0$gZnUVCK`wPPxVueOQXWuto#FLLk`u02# zB2yzGl_X=gU!gnk@jL;#8%|%Yt4P~@b#j_Iq%~R+lN*>0lArT%>Z3|rtvH2nD{cT+T9oplduyzJJ@&|LegV=EG_=KQsLYR2|I`o91uM&sTil1I@ zKaA$gL)A$)4dn5yLCAvNXdxyhS!jmQFm6}h+FCNR9pe2H&?+k)WO0nQFl*iW5~m$x z5}SNstLg8XW>(3omhKARM?@WKH9O@eGMF_RbPM;9U<(?Gv2Ab}^%nnlfZf#&UiHVE z>N=yf+bPx6M@5p4ZCf4X1pmR?5MrHK!=Ov-<&E=Ckx@anVMB^YZf2Wz5%g_3&fieJ zf2*JDD*4v6ae998Kyo^EMq!~Lmzn)U{aEj%0SVMyS&8wb5w33YC$@R90(e2)mA&7p z(tTJbekXo)w4I2Z?f&Yq6h6x<)>}(BKY;cEcOplsh|bPh;hUDz1o6zRiYPyE4vsJp zQ%%y?RU~shG^_={HACbke+8WyYF+oO!w2YPxDcp(XBLq#afrwhgZ!9{Tgs%N`#+hI zZz@>W1Gkh9x~OiCZs+=`-`Y6xKXt(O`VJ|VW~=~4*YNM>d{VQ^DF!)1xM zOF?FFLAxb=)!oTPW$25|-~O&8(<7wtCr^ctNHaugL}0=wD+^6dpFF{)W?<{>tt>F^ z!@8IXW9Q^+sQ*-5KZC@F*8W+LwC%`aoZR!45br6K0Mubhcs`N5aKtX<4UMy?7Lu3}J}=T(#m~&_IjQ z)Xq?Xr@POb^l}*+hw6O~`BHdD5GM4~p3_F^|332guA}I3MIM#D z7NqF#={qOAtS3nKs-lR(Df{7vwq8@z5PR}RgL5vWUAEM@h6{K()n@+Lj!fVN7zID_ zJBTrv!9ua=ZXorxK(Y%_w<(5C8FB>m2w_K^kSTXAtfGJorodmFLRieJ(jnz(SEZ-U z{SS&0`q%#n3v{|Rzek^$!Cbj%*8lh9AeC3{f_MuI^z_x`OBTS))YNGtNu8lVxeVB! z(LqnjrHY8m3I{&^TANLuxAjnDo+m|4BDwKXe^%v+ZN0%9`G+NnY0--j=d(T!{%-n8V1bGsyLZ zeU?L`+~eC8cSXleIZZB5b*Bo7W5QkN^?s`$p^6YRK*`oYJj*201C)HJ_IXhD**(He zsL~wNT|(87%l55oc-UCjWS(GYh}Py$Y_Bo{ z$5?A-Ff-x0!ND2D;;oo}<}SWoKKGs2Q2=TPIV?H(RK!(zEj|~BNsoUkj|(Q`)6H71 zLF9^uxXP%P`rc35kyb0excFTTgQkO>t6hgUNtOjk7ra8=ovmADuJJ%y@Z5C|rLj<) zv_A5tUMn3d+%pw^eHKdi)e)SyL3*Qk4BJ^#-|2ggZR?<{rt>nk=V$Wa*z7oHgeBK! zq`QG@;?byE%(%3uaVUN7dBf~%Nt?xrB=<0_W}=dJrY?GcG8OiYnBK4gkiMsovv8Ti zJea7}b!?X&JesU!mh*wxW^E7mAHP=o2n{T|ektt8goJeh!wib0Q3p@-d@;k1;4W*C zWY%iG&I9cZ7%mbpJ>m5Wem8+Qq@BShW~4tlb6^ZTboSTmp2xwYrx5tvyIR*k%7necGYIUC*HVsEPpL0TC`J9n5>{}8D@zj)?cELGrk)z zB6r?Dse7Fn=7%4!LrH+TLa1ubQ5AGh?A+5ZfHL{?>zQYx`i|`m%f0d$5QF;{qak+P zObsjVqjYtb`d;4$paUnwA&s^jUa+-oNIqVC%Q<0_><&)VoIzwh8W{@n^HiE@_3K_&~OswHp9s3Xe&?;Z75D9WkfzJb?%v)az5%6~e=yjEZ zq9RdTP%&gf>Th5C^y&u_TVfhAZ{(AdO;Bfwl(9=@|Nj$O5z1-B=navaBa{*`=_;*Z z6On)0-DXqRsOsTp+1~~7vHox>zuG_3Zy-^LC*O{l*}BME;UDw%S+yA%P&lWjVlNDz$lSMmpO z5<*g?QcRPSHvHkUg#K}N5WK0}@&`Kq7sK_x{3I!$kVPm0KgVaDoJHsk(Z1tCS4ayZ zDB>U1;xAA_361wo0pN)mjBnnXC7=}i!3z(0LaDEjOPopd_V_#c`oRG4R zb)I8`VW(#dX}&g;$7hC#36_mChy{>>-9Li4e}}?oD8Qr8RXO&(8iYfKt|;OA_-Q*Q zLV9(Qd2r>9&B?WqG0VSZz7P10nOoNhyMp}bJNa9jQux1NIYbw2&J4+!s60C6Ng-)} z`BKwiN~8XZ5U+ZbG-DFp8ET~^C;v4hFA@4%~ zsxduu0G?>JZi5`oT~X2=>$s9eL$QEk~AGqir?6t)0 z#2@Qe2*4L82Yx4~&EIe)z1AeD{)>J41xxslY*Q^e?5sPxP4~>GSNtnVXo6Z<(S(Ej zyH4LGy#@g92un8nzp#G+aMa&JkSx*`7Y9ds_JqU4^?p1gjV`3@s2zDcdZy~mIxx2` z#_)GJ=XGX!$gRoL`FI>B=Ya>FlJ^%xbl+yEyEZoTCc*Q{Raw?s5SoV&1-&bju^-z{ zx+y_WZ34A^&@sIXyLsWibeSiO%nu6fe+gg6b(k);=^EuQh!uHt@4M_5ys@Op6d-VD zU$wE2vt98)B?HvZAb*w|9KYI-43=_;E zXwc>|JQF<&5I##&0=h6?;(MdU2NuMQ|Htd-p-hg8NTnzNqxtAuT?eFDN!~l8k610O zYvSX{DS@z~JCoZ--pN`+bGd54mUoiq?YP8(N2V>iku{NtR*i#{LNq&kGU{P!7-Ro( zN3aa0;3yw`Do-9#%+h};?muxR5uG8b+}wPP$&6Ka{N*5|>S%h`HQn9LA?El-X}xFo zsoHAJDAIpt`zbDMtG~qAo`i3!XLSqizS+mE9ruHv$u>2`HxLHbm+(lCd1N_<6wMx- z#1OOiw*~Hs7+Q0NF;@X^vV2*d=z+E51ZE+T;#iEMWHr(X4$A-xS*5qg_Tfn|&rD?@q z!2W?w({A-Bh2^Rwlo7Bb)4_c*B6+0LdQkCK%E9m-9$f>6wbM2Y@v|N?q6YrfXyp_I zw5Fn_-D04aTRi^_>q~(2(A>B0!Sf!x=ovB{nrEZkUUrg@Oo-qg;|j@JLXyW2aUG%X zc)T2LP^r@TRQe!|JZyR9H4!he{;wP0+}d>yKB?EnRh3t1hJF1*8-nm-d22$|K#o;j z3Lb1Od(@Rb8xD_Mc*3-D@<1t{h`b$z8Q5xdMk6GB5BZ_(a2PkWFP0J@e>X2MH zB(T#S)QleHU+_L7eQr)cqL-i&-5R_C0et2qWn7KLE7cpRjg2g$}0G zpHH9IJPa@CCK5l1BRq{l9kw8eMGE$q(l|NcfA|c!v_q_aZNKykF6-@wlRJfqBGg4C zQPdZK(pxq3zvxl8+yMFtZ#Kw)F~vWncU%)7vy6raxMd@2-7?~2=Y-kWgy{Y}UZ5lI z0>$zGQ6>bfG1KLkU~}94S-Mh4Q!dn$mqgJzf6QADMzl@mu?y)ER?xnx?t`&J7c*r@ z9Hgz-|JB}GhgH>m?ZR#ZDWwsm8)*dTl5UXhZs~3|B7#VFgS2#aN;eX+>F(~1Z{dSJ z{?2*N^}gr(`|yWe8`fTH%(>Z?>~*={oqxaZ3lxzbjO^ireDgxv-adV9PuT(GvHmu+Z8=Lfwy(6|FA7J z7zN}k?%@XDa1!kEazqUQR=L{#Kh3_T;8P-(+YP@+uY(-l!a%Wj_oSEJ*XSOhPV0yc z;(7y>MqRV}7^OrMK?x>> zW@wxe4Qx-}3`-HgtpEo|{AGR}QD6J`SQVy1_k|XXz;|(uJx&h~(N*YCeVXWkFhh>t ziA92(u6V8W=E?|BYr7a*#xpk1chI4@D~JpzmJNShF+hxoLY+($aDW)gEE7RxrWH73 z31py!_}c`RS^il#Iz^)_&eUuNfIoWZyLYSw;Ud0}(I{&7YEkfS{QVbTi{BGkVUjHiFdu zUryTckRSH^aqxh6;~|oV|Mbirk#TP?AJpoh$)N*JZ{G6Oj~xE;t293$%j?&#>8#_w z@=BIwAjVhXb_40MDyA;CaTV4sMEoc{4}cR`1wK7O_uCP!n*@3GqkO`Y>0(6#dnttX z10wZaYnG-TEmU;Go`6v>R`x)R&2k{3TL{+t(&-GXtv>Xi3cG*k${WGxH_X&Z!%}R3 zWt@CEURLxTaK{(0D!#g6*dnC813m0Ipt`Om5y+U`XobJm7(}GV%(duO&sp02G3n*& zKQAHfbsoS36s1}JSY%~cXYHwL3us@&I(Y&2;>F;r<2^j z-NK8Jy&u)zElggh6P!)kpzk*BJejuXvZQjT!s_E zN#9T4A6O1tu`7oD+POv2LrQ-+5XN~ag6=Z@*Hyn@xNl6dTN?pA*OAq<`%;B#At4;* zr++}y=V&jF=~QZ^o3D7Hj2}BB+Yfg-_gmC0PB8dT5>Y?_DA7gU`Rvwf1M&+!m-vN& z-Q$(ysDs=mU&CK}x}SE#?vJJiiT=PJ`3s zDYbiaP?9x=6%>?>!S_uIFuHJvN_?xN7#Yt*W=rt9CXRSYS$Tq(j?f%70=(f<-Hqbr1 z^g7}u%&8pF_RJ#?K;@Cr&EZQ>;EmMJ1^F^4C*QGFkQsU_+lNFl2qPa{MO0eQ){jiy zj($~diulG)JDsKbQi~Ye*)%3h+Rrb(yg+4G0D`nM{D4LtCjZK?#Ysyi$@jg+ri(Yh zryji_%<0^0dG{uCIgcF}H)f3&CEshXi3!15ERhzf^T!hKNn*9cm(c%R&U#*=6Hi0%_09)wm5)Wdjm zi+{6ca`#YnoOCABhQT6_a1Ro?jr-okIg4Hc%SmYLL~UT@hB>iCATpNg`(o?_zQKr% z|GFZ(4LQ|B_PcGXt?I5_6@XTLfiV-HwjiN=nL*2Kjf70QP6jL5?lfRtKc%?yDWJI< zY2Xx7ut{{%MM8w@9CzkVTu(5bX|37c?!&{*X?%o{)P#-Z`Law6auKN`wzA?}ruTqx znd9}gL&PDmYv=Bgyuku8!3B$6`i7>p>lt0W6I(5v)OMmN)6adjM9(X%u9j3?tpZlF zO_cTJe@PHyBVKlbL%{ZlL7}PS;2_J@sGKLi%mrz91B;nD=pB6i=2^x zAe{loMoK1Buz2s|b>YrKrW%CJTq+t%q%F)5gV-(~5~h*#B1?16LA+_!46ME^Q;*#K z82kIrOGxa^`bsR@HiRwqTD=W9w+Qm|F?gKqwxW}UvexIt$|$VDXJp_=Cn?5q4yA+F zaAzM32h%;Damr?k#~V@*(#0>wPQ6AC#cNu(Rwv)mWmm|nv=6e@Usl{=xjKu$E;1#E z?c5s=c^CD7%nUIZiaPyH?HKp#Fy=eUHVAFn#HOoXIO__$?yx#q&+PfqN?=0k!--$K z2G9R9>wj~clFwxX5;@1U>n1wFq$m4X92-A)CqvTM4p1{#Yo2l^=LW2L=>0f*%Y8hn zDRTdcz&i`bsXqv)JatR@pf^(EB==#%=t$Lk-g8d-#hG%8;^JMFrH3e9>8u=*$CY(u zYT{a0h}8G%j^SOQ<}yBb&G}F)?i;3~@#{*xO_@cr%EH@%l8Z!b?yq5AM<6P=*8B)j zq(Kv&o0vRVV&RiF4BB(Ka%#MP89=?->dT@|0x*}}g&w}!xmM!jX@zH5&{)^RtmKTZ zCnP3BM|SU26@s9ev8RxJCoz2Ybf6TW)W8+ll2eb7$yVcU0 z^P#imAo_X&JdpnAS^Y*x{_4`RBZ7#fMVh&-TM61_3C(KgZ?aGw<1(Cqf{n3$dm-)q zK`DgBXLVh(m)Zse;HMH<&o^; z|DL9koK#Yv4&A0T)=Z8w?PnO>-Bl*x@6wP_?^SI=tWTF0foml`(l%6zS8}|t5yM9f zdToa-0zIX%SnC_{2tn~4j@&br#Br#yl1+_~5~JHB&S1mYks3m1OZ`a;vui&b z!<|qkDGPQyn+fZvbywA0rl{ehp+E#dlvM=&mUdv@i8#uOkywdZct6>JTV=|hRqXwx z1W&7kb$`5R@)ELmB8l?;5wl!# zPs@MhznwKr`#nMS@Fm~dZui@3@MUJgUicw0xUe5swO_@1gI}a|=61bBp}bBTiCHJA zz(-SN8@ALGErlZfKn+DIHpfti)9!py#I|oxG5rX-b@Ua__9daoh z#-jy`Wv={D4>X#f1b}#6;SlR!ibl-c5hMI+GWA!4^#zH(new%=S!^~~j)+`I*$$~s*9@)O z(_h|pCLsnP-pcCxO+hF+iF^@r2&CzHE#|2gqR+XEt}J#H;~f#NRcc~9g8q~HQ-Uw{ zTFH=l3wTXx8nNEqc1xjP7I+s5SCYMbNEeVA+^uY9VC7C#`jSDQ@M)xhD$L4TcXRen zD|!gAw{E&NHlx|9Kxd8)SHo1%^M;K;WGJvd6?g-D;?>e zzM!gRh+8(JIUIZ{JbRGb#XSyUuTv*-o676bx?{U{s)`F`)|p$ITQG5CCiU_=i0P7t zujM-U<+W6Eo-Vvb#L`9YKa|L{rUXu5ypQhy+4}+V@+V}}0a)33C-FboQo>TRfj>|Z z>qI^Jzp}kZWjZf=PbY}8<48Q%dD=`pE+ylm@vU-=`TMg115Vswx zfNTG=ROh!O)oORxWdsel=zcfYuo2*ZbH0<4_yzdS$YKFJIMKM-y&*yh+fc%22Fp2H zd3|ZmLrJ1jUZ`_}Bg8v!FVj|3!ubT^uc0tY*lc)#^h>-4&4vw1;5H6!G%y_4W{(wc zv0Lp!Qq3|~xdS{@jye&PTtr}2n$hn}Kik1xnXyi>4T}L*Z-DjPk0Uh<3Lfuc@|e_4 zd558TnWvZd-~49lw$_;?nnO_|B44!VVPXO0!M%Z|GmdKd?~=s=Uo<_6-=qXdvW!WU z+2?wavJL^S{{gR=LYrS6n{Jlu`DB_zRSVNHNke>I%C4HV9_v5ug>YoH_d@F5^`n6D zp#Lu|m?~85IcY@3Id451Z7@$g4Fs%M>~$d&&~w!u(DS6CvwuH7ey4Q|>dbVrlU#$3 zpIkxWACW`=krvzFFTD>I2E$}{Ttu_)C2V8ZBMKT^}B%llMvnR z$dDh7IHCmF`P}OMLrjqcfx?}T@7~rWsQ1%l?o4q?YvPSg zt<~b6DYM|b*}9Iy3(wv8*vip%;bP5|&|y-5jXjn2i{qScl~%QIkt(BjxH$n07n32k z)F2I=qkl=k5p2|5E6p_Eq*|a*4Qh?m%zT}@C~aOUSxMMbW0Ck)`NvCD8UB$9OxZVW zoQ_U--S*ERu-o8s=3we_uDgQ}_Cd$hz!PCz?|1Bof5YAmH|EWtwf7yFGTRcb(ZgC`!>ttpaLq|KqI= zF-w*Wi8efy_yz??!*{z!e^P9t1svjjg7VF9^cRDC<(J8I$SYvX(?ckW7V zPfo}1&;DNU%&32M-qu(_LZd-@HH-Q2apsFRF6AEu8&^FZXkXA(gm3#7-Kk6Y# z2hdIYx*EW;_o5Y`NCru0qz`&oD7ZX^MN$aC47tH*(^+1{;a9x3t$$e3&%R!tYFYXu z_jo*xGrwd(gXFUbd-_>@a)CWVX>!;C-XFFLnQu2HIPL6b)yi7~B2}^v>&665<(pY+ zpCHgI2{;irdrkz?r$+?v2mgbf96Pf%lx zQ*C0A)Fc_3aNf=UsNe5_a4J5(h{;q!57NWnGr`^Dv98(kr(;rX&+dsyI!U30nuAwt zNuL4g?pGuX=ok2#>H)?Eun3NV&BQ)1=4)B-<25efypHCHUJoLTmJVwq?4Q2gpW%FOj{t20 zB>IOzDQRfr(+eRXs_af2yz0A@4(RKC#m0*d95oT@l!knWO^KZ(3FdHlV6&B@GuNQ!0+0%*eS0W|z$VkVFGyszS!|P&7%!9I`U>4A1*H_q zgME>W9_m!D{I;=@MdLWExhW#&?Q6Qe=YyGVygkEymkFRAgnACzI2S+H-E*6 z>Vkv!>}>sP;<0N#Lop4TmK!Dw@pmXAZ6uhO*J8eCk;4#H12RHpNihqYMT0{9`Ozwm zx_&(qDyxX*<`C-1$qZXH4|R1%e~kagr;EXMd8VRDy4@{;voQVLc{ydK%Kd+T;_fXJA-*C#x^nb8e538?LOl#!p#B!3%q?)GU$3Y~AnypH&U| z()6^dR@nP**^W`=R1!BiqlX}^l?6%)>H~%Pb97m6rYx{imbPQ?bM4gC0iUqUlV9;~ z%1w?0Ch)+SE0)C~KD=17&T%6r)#W(#30p&Y8M(F_@9~^DNr{#GHqJGY5v%)CvolA& zk+Gy9-5+(EB^FK3V~dwDr;lcNfsD>rV|PiFwk%TA*K6!3O5w!c2oyTrtePOIv`zI3 z=|{bN8RDw7Iw4%n$kLXU*_wM5JBkKY&Injavwont zYuN6&iq^!_BE8E2I??HU_DQL$7uvz^fj)Xoz9j)#Et-2iu^|1(jM&T%hTpk3^&{RW z&W6GpmlUT}tQ8R`*(Mf8$)5Dz_?acd1c`8-HddZ5J{+P^I2q z-%Ry#Ru+h*6S2I{>OLUH)t!8Xo#3IlMPgD%yY%|d!h!Z`N(|{!uJ1ntC19D7B*j~9 zizXKg=Cs&`7MN%xUwB>DyK^h2$CA?89U2%oZo?_x-FCend4j{~(2|oba$n;TnZNG#V&#*&j%_iE(D5uv*ZfL(GwE3+f+38AJPv=d_K74k$C{*b0;z0=@>a9JmPm5LHIv5D|HS6_7 zA@BScIqUpF5%$7u<=OnKlGA*!vSpi;jAp={(^1jMFi_kC^T)KR^XfbbuK$T<%;BE4 zOr36KjC+$$yNZna88KUCX?nT4Sy`KCE5T}h^9QKiVp3pU}jwk=~te&aF!{n}yuqi|y{HWAghX z`}QDs#8 zQb83OymSnH=;u#$ZTzVIUj7;IiUHV^fNIrH`vb0CM1+NXSmx2RDc$Jp^1PDD@Hhq` zh&CdKwUnw?3Tj1=?{l5uR&t-dXfz#riikxgsH>Z*#VLnN+HGrB^bWX93;-4GE0}*H zT$n(1r(ImRC&#U+F$sig_eYiva#vg5oOE5z?1i3fY3u)_t@>&f@LZ+b1a;c7N-OUT zn^^dc^p9v9i90F0p%)hK9jt#5giv!V;)Zc?*+y^mey=uRgQaFh zSiQ#Au8V_^*C$~j3~s094F;;O#G1`7x@|6*^;VBXdl*uC;9J`H{zetA0=#ODO2e29 ziKSzZ45R;OnEO+9p^kbWye#`Yv5J4ynD?s+KEeL@e_L(p7S4P>`sLXHkpYn7 zQ-8kQ`U-H~Tk`kbg}z3;Fh&b=I>yPDxWMHUYjd=`e9p-l*j~v@QfxDUA}Rhp4`>?q zC#(u+p}lLDw0WOSDW7##l4?So30DuLnEwba=-Cd;@Q)}!1on4OX)r?Vn(VAL5&Z_~Pdik%<3_~iv0lxeg zf1-DBczsNT+pwhc)cww*FP`OD4!7Il8!<>nFI}q!Rhc*b*^kRwpxwlE7ivS4=;!&^ zF3(LJ(rm2FCo#Cjn#hXMD0ENmiKs(P9U7gBIHrXGsnl42C}D#AwALhayTSJl;XX-n z=2sO~R$xjAO|zeBL&)>|b;-f21OWg;|9pr80lrbM+o`I-*jVAoVqB5F)2#39UR%!G zh2B6iPf*2U*u^e9CmqUe2nJQvLQGTJ2a4q8`hz7!paVtzC>v<1L?1SqPV-Az8j$J1 zsL~A34SDh?K_e)L!@|UOqmP#HHoWt>Q}j9yOUA2BxRmyw;O6I5hG7{Tz zD=1!nn|do5=YisZUNt{@35~1Dgi$rKZw#dJC@mm(Af(kKlJlj~Gcey7`6lUzG4j><|Gy)Q{!=mM5i=(fja?c3`6Vae^+w|88s6pg02Pyo>}XS72J}TZkHfHb-52JLvjTpv>1GtY+;5xN=+^$uK{O# z@h2Xb*VmF*F)?ur3wnRoBZrwa6Nl2T&IRpt_@5LoUrZk3mX2|Gr628n4^#YTZE*5- zTYD0#4(p^1(tqc_Yo!^0Z>8<$xpz~x4V4uT&2dA|f@IUt7sZcGx^(vz@^(ef|vORV{SSE2p`;$MNN2Q^U$s`rp2@%PclkuT}V+nRh1JhYpu zwFY$u)9}xAb(PIit}s~!&T+Zt8lJ&hShj{%I_ZoXJ1w4?fitV#wNoyX3-EpW53-cm z@=1Pv)8pq~evWYH&5W|BT+MW=}d z!&Rcx!E6VoSO&Un-6?7V$%_wm{&xxlG~c(we=Pt1{+kd0Xv@i=0gaD+QAvb#W@;Ta zjf}b7PTS_cfBdCa{)4+tqtyXg!*zbar2bK5rER}GjyhB4)LClSTkN!_)!;)2XC&Ax z{=KV>zC?csdV89yo1m^r`nweCwdOsxx$jC=S^-!&@@uh7Or&Cq$ ziKZxTL&}dO9y=)J>a%$2Se32O?6k$6J!Nbz){KWEBE)wJT!+Dqe6zQeY&EqncdJ)Y zT&0Xht*j<)CtFds?vDMTr(l&{jl#wa`MH0E|6Na-UJmt~GJ(YcXki&5Sp!WoyoAG7 z4SnyHkIjLmDji9I?CAx7&xfI{D{U0)CiXorR{5F&CLCz!9!iJAar^HxkaBXT%F>QgU89SK)nsDbbdn?(!4 zAjaMZNTSfaeh^Fu;l-d=lxFkOq10lHM@F1usY}>W;l~`p6QS9(@mpICflI_UPl=lB zRVU$o77<2IH7pfP)d^NhCdYdBv8dK|77em1 z`6DrNng7`?>6-|#o?NMocS#{)*QrR4#M#J)R>ToW8hkibPeN}H_%FWwW1OOjD*~>7 zfPpAM(DleK7vHgYaoO{gJ;R9_k?Z;CwZ1aJXQfnx=vEX9_T9&+wGZK;+ zf~gX3ml-*~5awI3n-e~{qQ{zBeMHS*lG`4EQ*w>dVINa>l4N*ytOf-(b4To0b= zYLYKn`h;moLO~LGpRprJMMqzZkbLw<_>7bGLD0w25d;!?{^?13w8xxlP5~?S`Rviv z&zxNOY#BvJ&h5||?1?A$;96?#fLwM@<)-_l)24z^BXO_Er!i2heApa_y2^((7c4k= z8X}Q$^W&yb*>XmFg9z%zAr4S?2}gA*ay62m^_VzQdh&7P*(a<$1B3i~#TZ(N`X5NF>>* zPU~lv^=K5;%$YSBb%>aE`3ppQAl(g=#iazAaG)ZO%iC&1jrf} zsr;L6@ZzqIQT#J&4c9`|NgZ}{T#Sd@4%aT73{Jy^YxI`|foXQXE5o`TC8uD0lcKKV zVMVhqAAhMfcsMI?J6igQN0!PSPS5pXdn*J#r&p4?l4nnUU+c^=L^;)AWjXmV?%pe% zM>^86P|tlih9({(a}naO?9V>MXmx59r_t`gp`WJiMz)G+ySkHE?4^$xU$heIy^dJU zq=4=I0L;?l*whh=-8Kdo2o{x$p;LY zMo_#Bl*iq{YmJ98En&O`xg8Tcd*we;-cepm#mv-yb%5c4Wt)|4e${RKwHZIv5!odi}Z$F)cEin1{IMaF#Yn+rsTli=A`MO-c)>yO(i4qKKWU2UC( z(Xa&7QjU1*k(vUQQRfv9iJRkg#?#CT#+*Vv-iRFF~2m=64XR>p1`d7apRl(=~vGZzpSX+j{xg^uqr;v!o(!%_Jo8-Y!9N&OL-3p?3|2oue{^r3ll zoZ5vAu3mMdUX5SxMaN(uRKqAnQK;E8_Y|5u3yG=R2@$isNkY?Re>a=VI7(?ymRWW( zI9viwv)^`6<8Zv@OTL?V>(o8_6QUrdDAnLrfTAt~J2&NM5jy#P?Le_6r_jN2BmFXd zx|U^B+(BVbBJxa=?|!Wz!94w}B=o%477QziSzJM_9qo{(6;@%1tyE9L$=X0=Ax$Z< zHw|@&?-2Jf?#xS?wvI`f^FuggDt&Ia<^Exify#k zZ+GLwWsmZX;rq5;@>Nl8uFcpY!Ze+ens0JvnPh1Fi5r1@>W*U7+UnrUYR#SZ)GEEq z?AAsvGxN^@+YO7|3$E2Ur`^i=E2WK_gRdCB#+V2d{c@%!l0mV#o=nmZfCBYr5-VC!|3csK9pvcg?Sc(ElG6C+m%snT?T1X!r=^}@su-?_I#P;U>u zvOWmT0={+M*xc-iW?yAccYKw@1RlBxk~^Q9`;eYZ z-1Jz<5?tAd*ubnj(I~Q)Hp}c!?yihBbCV|KC554m>no&uXm~S%CWb%@9HyTGFb21THbV` z3r#RWj_eN5idLYataI84FHo-p4$S7-3n24&mlI7{^6liync;ED7aE-}m(a#NkwB(f zfqK@4m?}+IGL0eT> zUMm*r7lR})eNXRIki0ZV{!?yQ*$Aa7rHf9-V@4g13iqp>k>z32wJtBipSCBkYh4X? zmJurTiXpx^vc=XtE-7y=w0f=>FOf-fh=iM;XgF7HYcVl;lm>M9bhedsk1vN?nsN4A zowOz#;}MpdF0~_^-og~3WlRj`m&iC}yGm-0=WW*~8C9%DDqk$DtVR$l5{ghZEvSnJ zN|QUUujqh1@Ovp`Aw*$c#FrTOYSiA+)SOm;N_DyuhKHv~&Bh9%QwHm$d@UOV$!X(E zvb-+N!j9c?&pvJ*yIHQbZXGv@yW-96*_~-f&wV?CW$ewGtD3ng8tk95yMtx;xaSq6 z(ij=gWEZ`y#>{o&QS_5l%>5#2xb_^^G|4Ia&EU27n}!2Q_I*fGL_^Un)&%E8#9@GX z<0{=t$)I59o52DJ0VDcZT80fQsJm{uX{^v~{H8@0*>28?2CyIRdTm`|#5G!2T|@cK z;XzUQJmPz+shFDCUVX|+i)2$p=7A%5>!eS~A{Afy4mWG|X_d$RU5ELFK#yG=ebE`6 znzRL6)yrKp_VJ%&GnbsYu!eWH4YqsHd);^hTJ#6bl7j@nuG)R|V53=mCilI#0k@he z>y@S|*Ruiyn(R}U!?B|3vy=&up)16=mM5_f7QBAH-b!>S5y!Ao{i9*0cb>sjeSqQB zww`2ly*aX+&(ugY$8|%>zBG#NAbr&XZ`;!Z zmX&5d&|aaYaMx>?8bR5vJiw;A!R`)+FJ-){cl-XWVNgRrD-H}}EH)0pJjS|cKnRc0F=`&(} z)3U6R1LyN)hgJc1(oY)f{c$&U$Bz8u^B?8(-l9@xRt+nd)Ff&QZCPk~v16(>Kf+ai zP&<-I>>P2TJ+s_yD`PdR-OLh$QNGAZ62@+I^%nzN7u(l&ba(apP2DlZ*B_^OmW;T; zY}|+;_^CadMA2)H$K;Us6uhI4JPEk2_-J9C-uOX1X?Fdsi9N5K#YoX=eR7gI>$ESz zG+2(z;~FxwD$QqTkn^kM3*9`t@+~w-{0%e)kqKYGJoP$x5Gud2QVH!qu+pc3EGZ*= zcs4pbxRPbVM1~-E{O1G_Y#qnR^&@ZDX8vlM{YN#H^Fk9(8&~z%SC;8(ovki@7& zkwjZ0*7*S|Qy-#YI(OhB>AwBmN$in_(1TNRkNl!UgDeX)PrkVC-{zI>HguOdu24&B zMJM5CMW5a*Wm>GEhff}w0m@nu&CD-KrFrzF<22JDwCEj=5W!$``rxhpJPl9Q*yG3# z_b~QdvzLjY0f>6dsaXLevF#?yp;xpreC&;nDgoe{$|79KshBzXso5Hl%El9toCF3* z%f?elrw#t$Y_@_zBq|n5b|y7fwoIyEsrxwt-ko6HB7%y5z(*RD;SPaS!SGwiD>F3ov zmA)-1-MOH;Sl^K8c}d~k1Bg>NItp>_387-RjG4R1>|_nGQma(h&~`??G<4cC%sg{A zrLm3cZQrG@k|vqc7ij+lUhi=@Cg5?{ijQMH9*B61V>UuDHO`?HPB25;?NHTosVb0> zvwJ71fyt2V?t(Zz=AZJa#%o19W|JunYAGR^Ra{Ajr{AsNhoN7X16A@?a%b3T3Km?* zpTQY`ybsAWFsAgY+J zRB$7VSFQ<^hf!AmzD&AL<^44pj<*YG}GFLdB-pYx!?(j8w zF#_-N*%J?X9aoG#PU4k>LPWXC<>wcfSylXz30cC`$A>k(qiYVQ)w|ET?c1rVq0H?d%Q0_##`xdL^Ax!oWS8l4+W^Di^THB;#AOU)%&#E7w` z6rQ)>o-Tr9x{>6U#8!bgwSiX~Sj!^H?y@{*8%<7YQ19p-Ug!pYCPHkH58j4j z59Ire^l496p{8_YZ`eSAD@HySu%3{B3%7phSO&noqpI@KbRQzSoV%=zJ8aV*Tsy2= zOFFDjWnqT&`doz6N%&$aXbg+|G#ErGkUq?88k--;^Q`UUUL<#VVk$BV-%;7%IR~oqQzNN&wG8c?kc~w_fA-D9#B&8o` z)yAPi#*)5jy<7ft@jU57q{_KLD(9-pT(7uHuVadr>380< zC1sQNHAh7_2|CNSfS>zd#A2aXJT8yz7Y;M>%u?j*9YyWjqw>d((r9LG%JV0=`Lw2- zi>5DTt5)0s8p&~%_Ug=DDTXaB-qr_!NqaeqI5uLE@vTo+w#)H*F{vd!Ww}^7iA){} z&wVLG7X@BnG5)QxA#TrvKt=Ol6we{Xnh983hIY(fJ#q!m%)hsn zPRi|#q0&l9a?7mK_p`6Ch-lrxS=rfHGU!s*j&Wld>$-9Cq(QIi>}t(P>0-ibiWtHH z6SC5AwQEXHe!)zh7eFZ^k#WhS=B8C2bCo=r^}DN8PBr~rm4_BRo2+*xyUs}U?C)8- z=j|G6BVcV;s4HZVDm+Mgoq}WbXgT^Rb&b11+cyF&Jl`gN2?`|&kdAqlD$-m(2a<=$ zh_ljwp<&Ze1hpG9KfP65#69}cGlqj+*sjeGNF+$5D>I8FxVK?$xu zc>emT(Y{leLzR4{gv|C;rKpxVxN4f=j?~l~p6O5#*bBiHfD#z{y*<~5(lbeFgkp+5 z9tgAJ0-90{lGUp$8CBFiJX8Cl+ns%sQGF16EZb~t{`Yd&ZMwVt0eXk~*Ni@C=K8(z zaS>ji(Ej%y5*c9nI0=YI-M#;wo=1Iu9&}G({aGdd=MTX0oCQp%aFA=Yh$r)ASek0R zK~CM1N1lHTG?q%<-+4HWo{pBbV0e0(7#8VG_pV2Oshv!O`JBhw%H3)D1gGsNsj1U0 zy_HJqV5qi($7aK#-h6P$^tC|5gy43%JTzN6S`-I@o`%tbw5s z&>X;^wc21*ZBC=*!(hPG{4*90TA&lS8fB4moGQaAqROSMlvIU+;!idR?qzZFG*JNa zrEt4uArEWAha>>UNsL;rNTk)br}#XL9OE>U34yZ)NW9Ctt)ln*^if_vowp zEo8J9CjW&z49y*iAalQZ#xSIejAD;dZNqfJ&`t6PBj*y^DT#0EtS`o?p_wBQJYx84 z9q*6C+6dzmO6y>Q&8-nv!3}j#ZxG>%a5RSY#!zMtr{+nDB+*d}#b9}T7&WV_H#m+M zf>_Ynz-?9j?3LFaBu@{M&$^1lcYG*?sMtL0_hc18<<{0z2q9**M#~z{)OC4)Qg6co z1mNR`y>y)Eb#qcwv;__sfQzjL`=&Qi>OH2t?wabb{0*%`^u-ro z{rsbDHY7k>Qg;{(esoH4t&iNI$@bux4~5f#xk{rr)o8+&rDo$c!Q152nV3Qd2?Zhi z8DtGiAC6)^K09n_V{@I_t`sw@@BM4&KG9iGz-ehiB=Ma;|DKGAk5W zEN8=m;-&vyFMxYRhTdI&z4X3Y7_)fegsBV=to_fJ0R2F~>`9X@%sow#tApA51#|ae z6LkC*^jL=**irWg2E+hpl7GCPdngSs&Hvp8z~Ubbh`_<85dK+3y1>nj{^*kbjt~B= za-J7Qzz*z$$rr|JGf-$(wE*4=%I|%iSPZk>rmkdccSqpV``P%k+p1$H%#UI_LL}KL zTtwR>dNKy7YftNaRHv4CSP_!eA{{&-+@HAx_SfE=W<(H`c6!HN6zg1Xl2+ZqQl#X! zkS*fVt+hlb$9^s+1h2mafEbHC)FT+=+Q7xB*%)0gLvBUqp{>1ZvKJ`}o+Kve=vW!e z+d8pG#Z9Jcz0FeVcvA~uLYUcA?BVhf`ZI7Klp_D6f6(aI?rNo5tpD&h567^}BBV!? zB)d1Uie>XcnD?S~`evE#VloQ+6C#l6mHL;mqSI0SX?Qf{4{JZ_)Qs<5Dk~gp6&~a^ zdF<{qeI}A~A@$Myni|-{5wyL7!1r%SqQOIT20QiV$tB(;iLN3#z`9N+p;+q zJDs+ZQRv4OsgY{U*mv>+*9K7viaFE7Ovs#7E^FNy$*;*dwNLh{Hibay|7uNIoz2h| zNl)ffReWrxx4Ujxsz&run;Uk@=Hb+qo`ROuPQFh)>|+vLCSG{By^^-6&D=z{EIC|> zFkX$xlYE&V8$qYs2$cmnDwyldA{lVVE>=`_i3ZX9yX-2xk{tUp%oPr5&vHC$A>-tx zTU^AwyyL08kaa*s^$Oe?`r>9F}xAqiq?1vpYp&ta3B7F8Gw%!3lf1uY!C2$KgoXFE)v{)3$m8&1r&HIS_6+qI z7n}5xnG@xjTjd0Uc>(q1O;|-xU8^Re55P0psp4skFL7$NuTm;Zdcpm>5ovXdwN4Z6 zN4zpr;M%s8)3hBCV`LF+2EHw%(~g;eyaIf$gCT02FMAAa{D1+s9Qv|`r0e_}f{IM&Vn*mGUl|7|KUtcuU?ZJbRHvt5U5 zH8OWnyPNv#@O+v3FuU7s+50=m^6(T^R~5KctI_TZoBb|acQ+jMtJlJdzu%GzGM_^G zRxWD7a*wuUB=znDVa&C2W1=>bB36;zo*Kp4bdAzL-MNudH{82s>!(0~<^hALH;;ZE ztHJVUS{77m_R@d!*Uo&>O!Iq_{|_zu|GNx`Gycy&(Eq#a|1?#YR64U$J^i_gd7=d9 z$MtCZ+krqN69_=wo5I)`cvmfWB1hqWVPW4cGUUI zDO-YYIP6VW_(l}H5n$kBzOF@~41+0GD(KKZ{kEk5!7Aq@`tP5cC{LJWem_QQ97<_3 z__O%CRKf+cd!a6QGwV+&f5kWfM1?5dEIt7`ApiC*)cTizLm5?&w|{O8xbEUsoP@K` zmCvP8#A4lSFB}@QxxsL_k<4;G5``eAb{38kmL*0Krsk1{gIzA|J zV*ftjn-}O&3nG=yd%sX%;$-6+)go%6N@BU*a!?tzK=fXKf9^u8W%VGSIEEbW$=&J%C zl3&+xY@4Hl&l4C3{<#2dNY^;w{Qf)dntwguGZN=i8^JAkpC6R)uV2`YPmtg4v+D9- z0MY^XOluurIq++OKT7pN{q+kx$4Y&x#HpFKUeWyVM@6oIpb_Wm8r-6g6cqk08`OtE%ecVMj1?lPm~m+~ z>lKJmdwE$LSgKhci?8QI=Zx$=gQqeIAQ1lftZgQ*#jLSqeau zC7zAFX;>Lf?BA1doa&WnuXkX;QZSK`ow?M&O-XA=UKTdiG0`!-w0v-MPQ85q>89-Un*uKvIHFEVAP3;r`Ud{FOeS;zm=@s2`WOH-z|Yr||HJ>jMcPIT@7 literal 0 HcmV?d00001 diff --git a/windows/deployment/images/fig2-importedos.png b/windows/deployment/images/fig2-importedos.png index ed72d2ef4db181954281ec3e76fe29fa1292ffcb..90cf910c2471984f5744cca1315099f8385c2f5c 100644 GIT binary patch literal 45542 zcma&NcUY3``#)|rEVFExsi~EfIg-@WT+r0a)Z8nja^AGj)ISEK~~0Bg{u0FF9^Qu@Va7lMM$VRVei)cor3Rs z9^G^d5)#_~<(YeCz2h@E{HVeSm*uc99OVo#X`HXtG-!HN z_{E_ep9e1s4ZK#`rhjBxo+SRB+o#X_?3?bt)!(J__Osct#M{TnNphq;y`Kdlq)d2u zdfC;p zdECs#c?^ZUPA38fy6JFHWgIgk6%4wP`i8mhJdQR$Lo8D7h9GPlS)mtY_#&qJ&jW?(-QBhKj35#0-B2T4SPC z!%?zDZEL<%8@E+b=(Te7O@EM8JHM$bL-OW%F=e4W-Se%^1J}#Ptl`uO~5LZgZHQ%DZU1o?t0fPe0 z;ALG9&c=Bh&)NmfIcQ^^)eiUHp4l!D&UafswYl8!EzZ@a#VeoZF)duXmG+0#e_jig zR~`sMhDm#6aIgA6DjWOqvCEmp|G8giaWMS(V$RMriTo$&|G8>uhTV<6vJqcR3w!Iv zbT<0W4Xw>nD^~xZ-CHAArR82#4a@)UpZw=xra}4tc`->kTx9<-8{`^Q#R{lDajCFP zEjs<)UEtmS zJ|(z!7HlGpCWXoFt^hPF$CsX!3Evb0{15YHbprK7YWoiTOkQilzRBc;ygA= z1q2h_+7)d=M95}IUi9Z~_%VXp{?pY~u%o8SBJl1dX#@M3S3RrX;f~Z==hF}@kl@9i zlRrF)F>zMBy>mkR|Ha18;+OlUT{_adq}n4Q8tUer!vCfvOW)Pzmm`QAzY}@zC!0BL>>DTyHY*Gpn#= zFv5%an9<;iO-OB)|Hz8^4hu-9)*oMQ)Vf;uOLvh292)H6ubRwLC=rw}6ZrBgC5HOy zaU}E7johe2sM*G2Q@+*KELFlYr(I3rp-Ol6lWP#P$3~@q>$SDO+R$Y~ch{Pw+ak7& zt>w6PLv<&ACI?}zqIJd8r`w*Rh7+e3}pDYI@cGS_1C^Mm@05uz?co2c!gSBSgli?HPSq^xAgAqVR;F_yIWQ zJ}4j&w!VzSjBhj!humJC@w}jqajtP2HmzG63ve0w&OCX`Q2Z2raU%CUlbmjsgTeP2 zBB3BVglSbMm`#~8%FMe;Y49OB zH_q1%`fFL7H#Jz1o`G$@-M9!3`kj@B=(2xxp6QatURy#?Uwn-S>T&k%iABF|=39z^ z1rnKHSp+IOk}SF5lyF0?c3aTwl3g~p`|DhS-fTv4Fk(Y<6PjoK^~v+A3i8(3cx4ER z@cIK(xYWEM8z#p1BMI_MXS2BUm_-d!p>bT11SIW^h|8|W_v#ZMIc%G29Ft*q_$~3< zSXPt7=bU*b0~^=4tXe9l_rlRb&AGDJb#gxu#9U=UDt{FB`sC00 z_UIho?)%YHIXuAWC*R(RHzpP7NmVnykVR_2ku9^#rA;g=2gPrW#|OB9Jooz|7DvqI zt+)^I^mWn*L5i+zlT$zUb|S$s^Y_+|gi$3}RL+`#r_=`eQ(6n%%M1Q})hYkj!9-xC z_K&$&>Vz;bR}LSZkjh@D8zP3JQK@>=OVkBc6GblqnvQ46Kk>`O+c`IUxm3NuoWkw1 zC3B3<6X%iVi_IqCBh;PP-0U?niwp}KuI7Zk6o)w5nn!ME+9qU$x%we`7ptvkzb589 zacmeZ1zUxQi$E(lBkNpxi*<56L{XQ0h$T3h?UKlIQ4U!m>W_$o%Txy zjJ!b2?hSkvQ1*|74wc(?lL#OM6(?5}1UM?QqPgs4MZl`FOz_KN=n&IZ$u74l*O28}+6lD>SqZK|e1-j^<*A z_L2@jtFs2+kbA=#M4m1e@9UQ0OJarwy^Z>-C&b2?C}X;`I**rzSqC=cQxHEk7P0iV zq9F!${2w&EnbG)ivr~oaA0#OAN5vq>tH+}X|7!{8wcgb+XHfuw!Td>{9!y4?F8s{O zYS2b;IvF)|HXnDYe;Z-$vV0Cs*@X0mtH(rm& zlmTd%(`!!{Jt$=|PX z3scdxly)7Fp2+N5%b4oV{bJVmC&)A?_wZgg&iUCn?IM5tcuI3g?ikR9DYmH4(u_F? zZiu>q4d1%rNL)1E+$!>Q-<(PBQk3NC6>YKWT+fZkBs(tl5^}w;8HPQQj(++qlOi&i zd)0>8n|t3ca>8^sH@}P}>!r8OTNogF80kXf#|nP8?uWdNmIZNKUIoFqPNBDQ z1%|^}9~WmDN*!FmN-oyZ-^bUgE_3DYFtJ8-ow>$1k~x^E_n2=c3hQ}X1VgzYr}WhF z+jt!6n5!&le>1&@TgK6a>n~4TxTSALZ?*|EUClz;XN2_G z>E5^J4njDUq<6O*C%H?n%BO27Ufs`v_{55DxJ{4ghO&gH-w4kI#uoc6?1xMt?gPwq z+zv`Am8>IxF07J|za@p>l!nx0Blzpybd7u)P`iwEe6@TZHj@!b59PZZV})-uc%!SO zX!(%aaH==U1r}fI%DQr@aBP9gSr%N#BFsht z0;*qV<)~C^uY$|jbwFG^N9hrz!eWW6#M0V_Q5s(Fsh_sFsa*J;D{fv^#`svy0d$V^LS_3$PgSfpZ#My(}$n~rUs&O)?(s;D4d z^Qs*4jpEW21LZWnRB93+yg>wa1ZBaO#PCkl6=5Ku>I@f%a0DWkhlU)TmHDhb)%&?c z{C;sIkIMqM%D^&}sq*JoXFzt8YTVELdbyMSWjfbcS=MNd+K;JfreU@A>lB|kj5wO> z`76i>DF)+}_#5*MGMz!s5t2p+UiT5{QY_ee&B~7vXF1iuEuk1H&kT{PXg zy$(tVr&#Apz!FwT3D@PX;k?U#;nGWMm?YSfVc-sM-T?^7&Y92Y!}M?+NF1MWa38O1 z0X~pOdw^nl7+Lb5mBn?*M3>pUW^ULY4uDJ4y^^YlIzsf=A49-~s1ObLs2%0; z3zs;OgYDyK$n?C+ z=P?#EujL9H$SlK{maa*d5FzZX&plgX;2PEUI_q=D#|3}46bg21TgNZMZEHZgh$x>- zmR1$AoUvrw!-h*hng})F3ALeb)xl@;<#AM*SlgzAFVOfVc@P1+V>u=a@jQV5v!aqk zC~gdN%thYRtPY^BCOE2M5dIY%y1^M&gGKGDV%=>ayuv7!`;T=Sp49x^cI=!@tbCNwC3zZiO5jc_U4Q{qeQ-_x+U|3|xlBvLs$U)@0vo1s&Wn`+~l$PMt zG_1|sltco`PD-SKNwtpU`w?$t9u8^L$5U$9Hn)W7NqhSeCFY#88Yhzbsm~bhOaS~y z=9~`yIfM(QV7Ef`?m{W5i{M4GPVTS5_jYHfy(x3IYgMP@e@;@YVw7?vu``-AZ{XaiucQsm4fN}^u4Zbq@2ksEM zXu8Ao&*$aZ>;JzOltj_cq~z2yj!qtP%LhgiRYo00KL$8aFQKdf0Q^Wown3!wl`1Y! ze~_2O%2Na2^@`4Zic0%{zu4n8(MS;aL%$a+x*c*@^pf%c&$*lCp(8Y{&nq)8oa014 zZ}hH|9t_55RnKh~tb6+Q-NEQEeH$)n5DS6WGDl2L$UX|5?}b zy(8KlL3hN91^1o#-YFKSf0`&Ys%0Dz6sN0KZxFE%VxBvOoUhX=lZJpdEbSsO+`$k!B2tzU>Kcrho=Et!V~rc4+mVMKR@AJe zSd_eOsyrK%B>Cv>N&CIHvntoy1G;NL>YTEd#+vA+^c&AgL<>#C=kD|E{hZ+R}?5A)d>{T;s`Fo?ZVilge)rX4;J{>m z7&>qTFXPEyZy>`5v4_I935c97^4{Uf2o(hum#R(0?FotquL-~h5L@`w9O*saDj`Xv zOJIh=pgPNTiMKhCKKl?gXEmFhecBZ$7mmKq1oY`epOg~N5qhST*y?-XTAa3M){CD8 zT5Hlrwmx#5e|C*lX*$=(EgPd@LkR{s<}_@Pu@8EkMVwg^nW+z zJv+%#nx1$5gTL4~*<6iAHCDX;C|%gqt^CjFEAhMopNlv$RmUF5N{0Xtjg zGecfIWtAFbMc3`B?kX{6dy_x@I@Mx3(I&@2^3W%(WOvCY6JN=t>%5Xp4^S}g$jUc2 zp{o}c&_@RPy_Te=m{Pi|1jOk1Kl=T!aMNUR;&FuooYxi;=t9`Z%pQC=(Oi#SY1_Le zhRhbE-2GRf9udw>Q?*Ceem*l{j(>eI%KUgE_G2_ras5_Eo~m=h?OUd%9=xqhD+h;% zsJDQn#|TF8Mq&hw=C;U%oY!)EiXA{T>NUg9p0TtD559<<4Mb2!4Hd%P*A*Ui2#Am$*map#i;a2Z37=l89(mQhc8K}tuY;pe2Anam%og|JCRY?szB?9{(6x!WtyTQD&Xi1?CMTfd&2KkHE&4jn z7>!{3%uA)hAxpLAK7}5SyUMv?H|N6oI{LQT z&PG@?$fzY?u$Fzepfufme*|o1VkJyJ%F&qhO3&3c4h3XcpR!jiNl}rs?@Wy?n|`w? z(f=Sc)7|3yJBH%%WO;FlqU=$*RDBVc4{Oq5=h*5LKI@8q>(gx-?i~k$u7`~`KGyK= zKh2n%|B>%8-H|w3Q)*rON>rdK3RYsGaB{`Hbew3f4S+dntHDfi$DmngW$`X9EK0?C z*My2`JO5jSg`%OiorW+{^pp7{mm8w<9>gf>O~xAHua^^#DJ(6gxfHLtPd|HvKg?_- z;6fq_niDRaF*M3e>-%DEivL{fF*7R~l;a(w(@l$7K9dkSp(NRG+`I4Z$W>JEIoe*l zCH=OcLVB;=ebm(|jc3b4$}4IWDY1-O(@}~!iS#%FRX&Ozuo*!FOfM{OuI?m@tTsoQ}G6yI1x{djJj4)8N&Ytu!RT+>LZpEGYVwF=%&O{p#|S zQYDJltBJ81+FIw&&w+%GLGEFR8>3_4S4GIqMMh=aD+B%B^WF;=rr%DVSJ6rbIAQGr zd?&1zBjH5`JYTrzE?VJhhJ>=`odNwMt zmap_}jqYaA4ccd@N?Ae~V~1&`oe>_D2HYRHccR03GSvGqkzotNm09caKfZ|7E033b z;0!xMGC@Q0NYNnWV_{1p>VeRpcLJvIiZ0hhfrmyZ_FbVHDOH*Q$@n(`iQ36(=^hNk zQQhyvyPm^jvQ=HBvB1{W7Y5>5Bl|1fi>fRQ+Z@+^w!BT(_LGsFtdvUke(_YT7~`&j z9RHcjdi&1prfTnUc2a3_TQ3cl_d;@xmBwE)H*JY7o_V>gxUitY&Mv^=yz;4C8TS2tEF&2h8D}< z(A;1>-e1AG>nU5_tB|+fWeoadn2i7*T~#Z84kB$X(4uPqlaSS2)N}Vt7}w*O!N|tD zapGgd_yio~PWe81_fHZdIN;B>BWvivnNkrgFh>PYwxtqfv+=I0qy0%)yVMTT?!ASy zq=B`zEw{DX6LrBmkWkK< zuCix#<;aG0dJsVn)DD3do)#%6MceD9fX{~Qb3N-%wC@a4OutEzIOF*t&c4MWWu%f@ z3L-Gpx&ip}8&G?R&>_TGs{!kx+ttn@du6tU3CrhX(r_p9jq5a?ZRA+p-!WEmexm1t zGlpj7)|{0BSqQM#QBsGWRai04HE=BJia&ORDB5CM*b>*;a;?m?p{wh;!gTbRIhj1x zDR1s;+vgS`?@(*{@2`Y=-Tz`74rt0VEs)cB7GREgzIKOrP2=I32^0jujSq#^9}H%7 zRQiW?m=Pd~D}OBeVN%l3@KkPb<#*1nE-NT+Kv;9IC`q(YK5DC4x28ORs8vJVE!gu6 z=G06~Oh@KMPT^8)fK_u-`DX2wslp`Od&hXMk^iEPjpS6QWYDyZRCL(azYZEr8lJN~ z!|5@7Uw$jJqbH##GyNiKk<}0^&3l8^TSV6Q@GmbkEE;*Y@FJkCyIV+W#8JcFdn3me z4|x>J2@Wy>3_4w@PeY}@L2KM=k_ZKls1ZS^8}Kl0GV{~JOAT5|`?JUI!KV#Zlw)Y! zS@es_sW#uuE-onxqF0wUt?)q3pJeNWJllg3zzNf=IP~)3xa!vVM^QO&B*|iwF zWJkR?%zf8HIbuxJ9+)Rg{}O8YkGQN3g{MxvoLT$X1!LOyyp`5c{`sl=#Xk7n_Svt4 z<3Ger$Sc|!8#GYobabWrT?)w~I3Z1ADULc*NvulTCRI=^dq0>ctO!38i`g$*1IcUZO2J<`x3ZY;dL(sEsvx=hCSl*f!tr6XN6$MQ zDJ8l__GXI+Z3qhO@5gqdd%;B_t|tZr`d>U5HqjhX6TbSO7RdYU*4f*eTA^wmCUihF zTJo~ni52arOu6t4=s!fuuhMD>K;JaE(4qM%(U!T~$STZPp%=#g5|xkE(M$NKktb+L z<=iWWmvv|5m}ciBPJA^AXPm}6fa@PC>xac)DzG+)(f-MRzGvuc)y~dZ#oIu9Qo4fU za_ZIH%@)#B>@5m@M_i16LG=USSs-CZu-pxgtA*>P1K0aahGR`toe7_2+^|o+IImTVDHMME1bC%G4656n#P(VIsocjabtCjicqNLWblYLsvU@)3 zpVnys;*Zw#wl^c+v)!H*J^io!x!$g%sY#C7+cs>rdODD$1_Fck| zEbZ902&5FCO55m@zrVq%;rZeKksrrUq-roqZ0!6S$JWJ+mQtMS$a zcO3Fz>RJ@CC(4()nrll5l{!(4cfg5LH|a5YF*Y#o=SSo6fYD+8tk_d{IlWI~+jI`S z+k>__T%NMim74Y5xg*yQX+j-d23Z#P43-GI7a?$J-#3ZlIXXv)Sy*zr6Ce;+ft+i4 za*4g^XhC6SIZVqN1dSc$E!|M(%&p5K<6?Y4ORx^jXTD27XVPD{+s8%Np#DB>%oU0g za+zak_DWZ~oIf8bn@ejP6G~(6B>QzTd23y{@{Ef+gsx58zZu0}*~$vDTO}X0JC#ta z`{8Fc;ze@;7op%arIZvt>7p_L(8wi7)+cJu5|(R*!wkb<-`gFCm)au|c3a!LQSpcl zBjg%-PP){U)T_&4f}uZrjV5h9UXa-$u93M?tre1v1wCOYBcaQ!WvDO_6;_1P?tM>c zV>SP6CWtEz`urT;9Iv7>T0-QUmzcH}9>x3^fxTY0M7S|V6-~3XpH^a{iRi!+Yi!$a z__p0?4wG6tc%2idobEpRNPP@;*whZhAI;Z^E2i?jU^Yzraw6e(m^kV;=ZTW3L zT7KT0^UOU->M(p}m3=Eijd2Gitw@Kq19dsxechdLyi={2lHq=El1^LI5AvQLN9hq` zTnB_(Igz`~VNo_bZZ0umSp@THsHOu{k~oLMm_G+L3!RWXb3EK-?wC(Mo!jb!hw}g8 zSyOc=V@50Z_;I?~aAe|pc^aN2`MrwU&-&~NSjoTHYf&Q%S;EQtGyws4E!ie8HC*+9 z9Oo1NDD<>+xXVeRj8o1hs^+4MW?MNb{#R&A>< zCb5xnY|C{iceCn4A!}iQP@j9n%u5Dh7x6B*-u{=FGnYdLqqW%@fH`?%NTikpDJ(LV zU%e9o(mwXJMgFj%wlC$d?{)|2L*dUMR5bM%Qi%oN%r^qk#^-kA0&`wgu~4&0iTDw*^l1A{T{Np68&3(|!nbip zVz{Vtb^;_-phABOfW@)69rr4K?IdS-m_HgedWO00P#+YaKhW23t_+yEE1DQl<2=JS z>xQ*_NX?+17|x2_kkRmkuT!La9Sh{`IU~GY3i*bNi~)@*=&MCt@jr!A5BAsT;?DZM zp0Kz!S^bTKl`Z)P+Rx9E!+V+;lN`81L%SY6oU~2u+fz)~>Imx31QUa-vY6QYHc)V^ zP`?pZ7$Qp-VLq{M)SBCTnHo+9Rg>)bJmMy#l+bXs-nVEG{&oX@2S+hrnZbD6hu_^S ziFM8bP|tG*aZl^;xpH6k;Q?)lXnQ(d6_M!iM$}np4|lU)%(j>t)Flt=Stvha3%y%Dv>(lmye!yBUt!5C^u}cKDme<> zoz2n;(Kpve_zT9EzUuQna4tqifuz?R2DNBuHzzk_K8N(i2AKriJ~k|jq&5hGmoU-+|qwUIPqKQ9Qg|=}DJekW61>n7AlIY~p!|+M13`OZh)Hmjn4H9%tD?lx1*kbzh zwFzd6>cPu;w^YR(k^Ff;I~5MPlSgz4csVo@!fiOX0-qAK2tmazdCiCRT3ZQ2p7XdR z^uI+Rm^6{^jq3>$Ej;ruB||DmSLC&<6kg6g2`Va&q{>U2;|`+*oYkT-Na0 zu%UG7*)Akuvl_GO>FsO(m0fHkf7B>_?>;&4>6dKjB`wRYHARz!PIap%pAwGH{Q$Kf zIrp8DL-fv91mlioi8(7J5L zCS#k~Psqx9unXc1f%*_!OtFcV`0M$IM#-}Q^zqRG@l#yfI!^FYC!I7XgM{egmL0znQxNvBGEaG$k_tkVY9Nw@(YulF7EpGjMB~oy2 z=6n*rbEYPUT^Ps%L_I*gH5NyQUhb|3xM(YrZu|Pc*EPVtxu4|@hRhm&`8Z@@Zr-2{ z-tcE-NxFb5TNLciv(~*kx?eLhJwg}B@Zj8|XQ?CUBW`OKNW_C%E~J|RB!)S9pg3Wk zyYo+GD0Bk-p*0J|+gc7K@p{=DtQn5hf|7)Qw-QY9$G&pWRbCt;P}MydHgNB< zLPXTIpJ!B7Ttj()0xstKY0ezqgRo8L!{#1QwC3>fqCe&k^$G>d3o~&QSJDOEy|tg2 z`pXcRg&>|ETmN*VYBT@H6L?OxV_>!4-EqgVGT&Zh<;t{YzkGCa!Akx-z3p({OFFoer2Dw^v2CEFUKHGHxsj@&OFu;wO%&k=#%>-KdOCaJ+=@9E_SZ*^GAp_8 zQ~}JNX#lN}iqL_O{RsQC=bpzi=R&~AA1eu&U~}6~vud6EC28H-`6s%DbBZ<0e0>j2 zu7c+zY;DN4=DsgnFe_${TMVl2i?~m65cuX0*ejx!Oj()*Z10$H?Gt+fZ$(6MMsg*7JyZd0@)`mxDHU1Wf$8~KJw_1J8 zeYgFPnEkbp|25MtzooD6nj3EuP1C<$!=JRLx$=%cI zTi~wJOumvLkQWu`w?^qKIB9f1ttw6PhV9y%WO{cSA)!0(aOrOJE{2&P{ZexU-9mfQ zcAU{S4m_oRZg=XFDcc0Z6(>Z{V`IwY^Vf9*(=Ryg%Iy}`=z%iv6X@&0^!L4y1*GXy zP!;6uu{fn9kodV2J45qZb3cj;SryVvv!jA`%EECejm-yA8>8Pe9+s=ujy4%vOeUHq~2XZpW$gqvvqgx|oZko&8t*zy2J7susq2valaOa=Enkcu&9pL}ddW zUx;Mm6tfMlM6>bOyqJ_HtJaxp<_&@5^ga)myAGQ8nOCU; z0&B{nj^tsb8DEF<5R=jdiYq)t>c%Lc_OV~*gQdvq!^DoDleZ@;gPf{oOCg^Un&`cF zV{TF#9a}M_puC4cLb+R$Zceq5mdKLp_%AIk{!WJCSq>S#ciUl>bk>VnMS+`e!~z=G zWEDqLe7w0uMDOl;qZ3a;P29 zcweyFvUrHLa-jlxgR76ej~<$Fa%>1iJ!xvW$&MdUmhShl7Y=bO1*5dDF z8j#-Z*0a+BH3JfPcky#r`Y$dNHP72w;j6a)5}e|%SD~HA%SmS6?5HCxC|37zE8*Z)B?Te3i*Ci8MyWJPL!K)&&N+a6*$K!Mn%6TBWWc=G*I4=hZ{zX*81e z#)wlAKlc%H$4+u5g0`>91leT~wOJ-sS1bYy!rtY)Ri_VIGWATS2{;2V&%net`B7Yw zZ>{v0@yEgjC^Gm_5vSxH{djUnHVEcv;{M)etk5+E&UmgogZOEyfGPbx8%=T_E+(C( zC;Mx-Eof(A-OFz~qf=Y=UbKF_gZvEvNd$>sQV`!)-4@VoAJ(Zws7j$UWU9@LZ(_xy zG;gpmY*65It?BegJ7}cx!3~RZamhNI>t_kOooAcw^mKlJfAq>epxZqdQFXX$-lRBW zZ7x7^q2C~rF`D++*@eBB{qBZvxo^}jOVaDy<3?lpPdL>HN>7oqp+2inXhJ1grG5;Nb%fS7`LUQj#lDq|_F(629Qr8<0YhXSLo82Qi#!$Ug&oGEu9EynqWy9XW%)Ie# z>yn(`id9eypoC|bU|fJ^!7dtb!b-;?<8^xFoMRWAX;}>GUMr5wgzE$P9xsbKlibMx z!^b|=b?U(7<#4a}zpr#lE(2nR+kx#5 zW%AeY_1NsW7^Z;}HWy`exluo{6#EOA4p~bJkNy#S z&U)u^W8t$|EzBS-F|Ze)-z5~3E1K1gc2zzWUq{qR%Q`vOaYOFoV|H^C3I2U0hr5bx}9BpyB%KV@X8_saIL*B4X#jhi+}>9^l`~3V#RZqaI#nS z;Pt+cL3H-`{GLLk>DR6~ijS`RY}1X_8cxXmE=^@;-zzQla!;!F~$1-?I9NocU|s!p)Um{PyYZ!L|+y--&~s zlm3R}NRp-@d3UwZqh=g$9WUE@npAH{M?o>X(+`Hh8M z9u6QYbQ1&8Zy+G)&~98x3q9&rZhZtuD7HEIomZK{6>ft!1g-CP4JMGZ9;V z`w<&{pM_WM0HoC6=&a6Lxy$cBbXC+bsFSZ+?fgD zhq(eu^J$?7|5}?*A>j6JStr6uqXRrO?HF)ZE)^hpTVP-X)q8HH$V>R~>LWO1}_M zja}#N>?`)>8$Q; znw50u1v6jX&S^0+GIu@Iq~LWEabI&rFwf(O`io%Dxt9I4AoQ}O z1mDzQ9Vk|H_zJ?i63i#G>#iqX${N<5J>6F@b_wR}k@K(}WXFJ8QH==>^;1E!9M*l9 zdTPCEFyfaVVE#7@weSeh*dphP$)V(YOylH^N3ebjAPH+DP#@enz5^N89{H9HUtq=R zo|546-taRPIFl2_%>o5rYcbc^kFFM3=7MI5<>-b zBqy-dq49v_;DHFg%{{-j{TT%KI&8WT*?$fNhwC85eD65dUW`w~7|d%JB*K8}bkg zJsHbIwI3gH!2}>x9k4D%z0QCsFV*ye@~Ua5_MSvn`t9VZ=S3ZHC~jv!bkVoS2V$pN z#m>M#@Apo?Yu^{-sF;@|Y6Z~ZSl+s%Y(auHl4d5T>bx5p$d8)3cE5>|rebKC6PVPE zZsC0R)^!n9O||k9r*4}A@yws9j4CPxVrQq~O|6Snst4uHIFZVmeHo>m_Ga2E%cIPu zo-Ck)XH<&HUQe+!v=Yo?MlpG2C3=D>Eu>*G(i$5q7(?S`=2w{crR?kc?3UH|p;bTh zv-X>=5}%sru-WNtf%m98benvi9oO`sG+5U7T&e2G(KBj*IG#5arzg7^Gn?S;#pWNg zDMF4jcWbPoyx|XKBTEk}W<7kr8=d)#b>j5ZmgB=45UGCo1pjM-iZ5&qQYa{y1^?Cq z9sl8+MvzuAE#6ljwLh`2_SG$N$~FytJ~>IJI=P4cp>`U>D(jIWUMY%;aGW)ZA_UOz zk%v4)CU*%&s!9o{?)b;&MU)uV}K7sbuxUz2IP|i0QYgWupI zv1^nb8CAvJsY?ya>^OmxdWuQ!8=(zSuGgjC0K8d`Vu1Z_BdH6QKno8o`_CI~^{Xp(LU%;DDP%%H;|H1X`4})1-%+3Xi zVwQjX>s@Yy&>Wa8%$v3S-R}Pp_|IBxYXMAf%P3q$MaAW3LtUK!<(1vs&%ts`TId;W8qlI%p{1p3t)b7D zL%H(%+AoLynb&OFD~kTIrfn(MRu}L~dBQw7c))DW%Lyg<_{5V<6Vr^B*F1*M*qZyD zBxc8QtkDSU>RLMJ#O7Y-TfD*U=@HIcC-xvHWz+?GChRT@JMml|u~Hmk!)=H~xwMvi zvfv1S`Pkat4|7{};hgw?+ebC`W<3T&c0MEmAL3M38upCa#|Cva1W|xOWA-Z$TTz`*p352Nw`WJ9(Xq}A*^S2*$JeLN_Mx}SG>LI86Ly^uT- z9(_BxzqP#NoxW$!F^0z6r{$(OIq0v~iXNT)XKK6{4@$=_-YK)gDb1)f-|So?PJiDj zp6S@ayVKt)&cr5=y5GD8bc`ukbYcnYt`0A?+Q`+Ks}AcL&WIBaUtRK-_5V7+zIxUd ztAE;;+c<`2Lf}7>eH{h>=h`#>ZjAK!8x0SYZlGbhjOXlF_^eL11R3Km2Inj`AJ+@t zaco6^O$(hc5C+^cflgK?2%6#@aXRF4nnf1rsRPEH%c$j~2`(hjjSEQM03Z|@ye+p( z{vfnwCa!zt`@DAG^cP&mn{knXIR*P$EyJUsfX-isXBSOyU!^WT_*(=5s8iKUW5xB+ zXZkcM{jS3HU1CWnPH3XJ_+90k(}~`8`>>L#_%E($e8M-A|J>Z;81p|9$KP zw-21of3+4%q{z)q?|LswVq{4@ccV_(tFFxYhCjO4{)GX}5 zg(poXT=$#@-~R8X*rih~(4NaB02DU1`0-Up6848|loH+N3jP~iFsP&d>aLG^mV+`b$UdfidHh_@pocgM2G$c8)1QBHzn+*&lzqxfO& zT!k;F4jacM5>9dn z_;qbEjG?C4Ks{bSfK90eB3KbOuK7*#tYA0J4i;c~G%1H5@gn)^aUUXqT-(;j{aYT9h+Gy^oR3Z-L|Yw;oPyz^btpaYaz zXHK=;_)-TXGMKqt0L@1rj*T52o_4`^*N#7Ve1?7cH7f3dM+hz5UYOcKwn5Vd>sY{= z>#i@<>^Or!xm>6cOzccW$-FjSzBb?genp{RiV)b3@)9 z1JnSaaB)mLq^~r!snshhRH#n51On6R(;({B|Ee_vM1u2KiOh_~HndJjBzr%sC&aAS zZfplRPDZCoFhX8XRMeh(nEdwj^BZe%+j|fyT1K`rgaf*oSEfhKC0^TpJv1zR@w{LP zs&~rj_y5P*dxkZ&b>E{ZRuDOeiU^2`h}0+uNVfq>ReB97gbtBTfFvSfqe+d_h|)`< zv;YZBlqw)K)Bw^6y@ez|?gozMyuWgv=id9jU;Gk*y|dR|bIdWv7;C!5&8N1x9Y46` z<*3{pm@2OIhUy$j?SIcRcY76ft6A{%_KR%tZJpYv%ix5Mkhd;^o3t66P8+=?!{R60 zT5l!KD5KT^-B(w$< z))$|?lI~#6^tI`mP5Q{UhrxGO)iub)a<9G6XtP}Q(dTr@+3Q5vBvX5KpRRg9jWb#s znqxG@E0dnV?!|fk$I=5`xXrs$d|dV~2dj0z=HS`Ah`m=n|2%R_~w`8z`G%@Li&AP=vdIKbI#4Vu2y};y+=yeQt2Wi!eRWHI(x4! zBEU$#()Ey-qsds|RT~q6vrp!VJh3#@7EiKAZ@p2ZtU2i^W2O4Zb!Q8)o?^l0D^EXM z^K`C-J@rWToF~hL&GIz7m8~nj7x-le@$%+`T!x;Av#O6leI9gbYj|*8H|GF!`&2~7 z=)Dt_{P~sPTwXcFN+K%c^O2i63sIXUV&lU{I2-e~8N#i~&&mh;bXIS_+dkazSjnW5 z!x;J3*7;x8_G@IsI^GtX2+G8<_7zjS-f*gF4k4b>*O2VwPT!@l+immwM#EBPJLWkJ z3*j^8*`%;v&oe=hz<*(`80vC^BRe>D*KfS#uqTqLze;F+oJ_wtX}3hXF>y2S2I_dNBiud&m>06J(K=(np^i zgz4s#WP%o(qyK+66uMlz@48xaTfChIXG{55Z6LC)a#t)mN)tqS~r959yZp3$@% z6a|@#XG?qBB(F zwMGq|_Y4Nxh-*;t1Bfd*Iku%8AG8bWi zKC;Ma>T9e==yzQ}JNljI^7c67O^;UCdzChep_vO?nDm6|gtNQL>nI`Xm;U-)+oad3 z*nOJT?`!P)JHv!Zo%&1 zhH8z1A-BK&M9wJmF4vB`*?DlwE{|ARtIRXCuSAHXS&*IZoR=*mRCz-$aI!WpW-y*! zDE|jEwcEVJRUlteUa%kpE6c~uab0`-o-l|D_V69no%R^|(Z14xZpbvN5aAo7qVqS~ z_!?qSNO2ADO`}&z%ktC98-vUBci9??aEyleLs^f(wf)Cc&nHN%xbrlRDP7saGn`*i zyKH^B?n6HzRucNhe+TouS38f;r>(t3T=8C-Wp7^}Nf>`?212cSTL@Y3RcIadn7_JW zqg_PY_bYn00PMiKcHzYX_2&N*hwWh2{{&nA0nz@)N3kJC34X3n_gOo!0ENF}Wbvf7eBiiEZ|TVrUpr4{oH(m9 z-wS4&2&*+09WB2FjbLW0uLXJQS@3~@m3WF((OozALR078djRkNRfhBO@`|9Phngwz z*ImEduW)@%bx*6!%--a>WP9Ze54V7u-ShhSdEN4~a{XMGIkPg{_(W@oi7yU61XNFE zHd$F!pXKDa$?>x(SJhZJm2TJYSahgeAT#p=c`(c%);U2FI=kkf+9~*KLHP%Id-_D( zWpEDMflp>Zq0)2abIR6bM`eYdbg>DN&au5$q`4}mMQ!u2h^}k$Q>aEx8CEkG$0sC* zy3;5{t&(@>ylPLxB) z;8A>1n#Y#AZsGbxStUle+tb>je79eWda}-t4Zw;hjCAQJ?vv#Q(^$SO{7C8ExpLqA zJJ~DPJLa(kAe(E!6(tr6LVfwO0|Orro46EXI?tS*Sh%(s)I3=_fc^xFa(pS^7sud! z?|rZhuk+5!GJEkfm)2UbLE`$1ZT5MY1wxNfLYGxqp8(__-enIBlm!@BI8Vw>zLiBi zctu;~!fFYxvxlZUI6|74aggi;yZ$(h`9*$dVOwDeN@gR?i5CekPUx`9Dr%1{%3q?> zKRm%XkPCDR=Px!eR+SpiUAiX_&r(Fm4D9kI6R|&U>mGU$qhZT0$k@Fv_A5812bu;^ z4cQRiqhHf4=wp4Tsr;VS+!^{u9Wy#NxB6(2E3^r!e5rC!?{?SeTf7d6@Ct7~;AQ}s zS@j361^1nTFGC?rFpRUt5#bigyBiHw=m=>*VRE1;1&z9_0jGr!ubig8sr@yk_Wuj9 zVW+ck-&kTo^-lEmi$y=z%!i*^bI6BMW7X7#o-)1e?mjLuzwcx($k|eCXEQU?r(pKjZ|KfkX_$~njU#;H6k%Tcya)5>%;WiSRy$xt~^UpcN$ll1qOa#!>l2-!$R#Ys8!a zeU|y{;iADQ=J|CY*udt5?97xTFP}&ehN7hNcg5VQ%DEEies<;Hy##3T>yp6i(lD=< z2$WSWH&@|eGDwavc}VuJ_81KA`>{UC)2|n>dI>Lvh%XrPh7Zr;?ET&Z+^TkEI1AS4>_-#Q}?-3G<_(sy^dZeRu)$`lS zUPI#T(*YW39dJ&KR(a%=&n{GqzsDr9aaj#{*$lj0DheAh=c3gwq&AIuH}SJ6UL}&Y z0Th|2HNmaPAA0GMg8TOpc0SJCw>C{{SgNEZRkr3twU>%s#`PgQ_+eEDhmyq>ne5Z| z9pBgD&3BBT^{9Z2P)Ti`b6fhsR?p9-EWAa#ryPa%SwCt|Uu<6fo`=$)<1x_~wxKIb za^BG}$&5Znz=gb9n~67=K)*KP;eeh~;U9nkeA0g4Z{+zL5RYCE`@j1r;UnF2@B)&s zRd&CqY}8klVx(MzI&lB=?&SkJCQE?Keo9f@Y+^VyWAdX$t+#BU_&bYp zGL~XEl1JKrXFn@o4`Tg?sB%59;H@Sujig;%?9=}srYv<^J)9L4xuuw9*VLi=WyXs- z8+au3(>0w&9i8a>(a&kK^$&&Qf9ce&mJPaaX}d8nS?k_azqdp44+<23F6{qv@a%!-Iu1crU?*;M6`d+~TV1=KnI9r!nStxkaj7|B7zO^vHL>uN&Db8yS_9 zdo3nme_j{=Z2*9|hp1ri_J}(AI`Ovfk?Yy5&am_^ItG z3I~%yzR*9Na`Au2Y&aD0aCk5xL9ACb+XErZ6TsQbvip4ly53vvv9A9`<(Y&7J01pm zPPmXNgbH?*ixdfGEW#@}E_(3OJZqtbdPgSqx2$H!~Sj~w< z*o^LP(FO_Ob8qg7N(z>z7&y0@TE@7aE`mKMQfw_NG%Z?5$XJ7bfAd%f`l=L{gI%<( zO+1D+actlJp-~&^*}1Ii;Ovp5UpQp+m@0g3q8eF@XkTa8=vcMJD*;V z5c@)#ODMReb7+Xi3Ik7w4nFt~qL)~gB&;1PpGiRJ@SU|mfN`te&(c@QK=u84l=`Zy zy0K=qu!g43;SHlu-Y7qkg0PrnuK-a2uPY9JmY(RnW;qLf3IkagcC_7^VoekV$z7D3 zm6$8$QlA^1hP=|X9qY=-6GB*4(f#7vNu?BT9+$YcAytDD_H_fKBR1hA91G3A;kp#Fo$@jvi#>TNqp-afq5 z0Vpi(w3p6=QQQ-6Vv2-4MV$@L$tIOOL;H#O&5G%>%M`KhF8T>7JZ#>cyYRX<+|ukv zKlY3<6AqA%i#5oxEI$*h)ZzFPbV$Aq+$~=2p8A>HEOU7SS zEh>XlUjEaLxCY=Z4z>Hwo#t#R zE~PXCqVcM>tvcRj z*r4i>N8H>$>~0 z?(9wufGKd&vvbFCPC$p(=uTJ;r%+G++eBj>mTz{XldO1VVEY%Ijh)az?QZ^)NYU|( zEA_P2SM|I&bE{XDYb)ys*jO`{l5a=9%k+uuzj11hPIDPHfJyfs7oFF5Uyiy#-#o@2 z2%FB|34Yw5XTi9SCi_}LH8MI8L~a1Tf}1`y9xuYq6W9svhZ@@*yy@TB4jcuJ`{;EX*; zI+$67w_m&2OYnMO!X4UAHmVRj;-&fiB>zDa&#d4NKm7f+;>omUqk(S^f!8kj&#Az> z5gIY?WLSw`m%3Im_gH+XX+WEI=>YVA{;-(BdPVfOPX5f#dqRp!m}nke;U7nQA1uui zQ|-tFsy)v9hjLtw@%c30%6zT4276h{T%J6XE|35WR^B^mPF_j$(IbTaJGqGsVcD%> zVz`e~xi#v*3oEPUFJ`_rFW9~6?l(kK>k=4RLVdlrnJfM8Fn14u4vDw`oTyp7yoFhx z*yz`9&OgztD~EqXKXCn^|D>YY@)A(gcE0y}K$X`}1*YTwVv zxmk&TI&S9d=GKWiV7$^fBo}OM>U6~kz*-8eUhbb!mybBh$jcZxW)u{UoX=Z7MvZvv zB<5a>ikifQzq(nMJEY^_IT_5ZuR^K8^ZH501EySHm=6>SjoO3%OA}cyCUfq|dX;?l zq$gW1nm9-@RIjxVFWSPsU$))0NFQ9pNz5l9QAx0&h=G8~ezDPq)y>`q_1S{Frrf(F zYmx<{<#^9lw=sJnZg-^MmI}j7Y@CP>0w>alz9k`tRYde>wx&LfNSqWkurzH9*&K0g z_17T4^`qvk!Ul9EwjC$|6^x4h+j^>hhHnj->?Au4&l6L0Sb^pm$_}t%@mH@`$0OC6 z?S?lyWlwW)}A0d2c}e)T5on{Ei|qaSgbN`D`cIFEc7ao68{GFZ19AOV`h$ zi5rQ9ybncqUv)MvK$8XGqz!ql(qU#8Wd&M)SC;Vvmm7%4%6o7~6296d$;D@Y87?V5|Tu?NboR#E0?kNaaWR#m>FlTIc@`j8&YMSO)BT|1JGo zKBrH+)rD|bfhTynrNqQzo!#dnm^9290#tDI+f?EM^uW^cgmHwL9I7eFd-Xjv3L6u+ zfQyL-f!?bv&;kY}4id*}N$hGOnI@LE#tR0He`zb;Mo~@xompn`YyMrw~c|EB)k zRlRv9iq~K}xpx}-C`#w<@VX~XKcD+Jy{Co&3}}|&pV~_|Zw45R_grX}SnRH2+ot2) z#vz>dgJ)O9+k+8eDD!7w3SF)V=3a9eZmpwc#7x5Vi!pgLTg@!F< zdh+HnAERYHrGikMcg!tR?lmV>RN~>0-8V@95Oz<5R3+R~rlO(s*>RNm>SFKuSB7HN zYjC56ZEd!O5gD}8<0)rgCd(7x2~U?fxDq*Wu>XS9KY;BhLFm~?IPz*u>sCc>$uejD zb~+0rirqiKa=1%8LVF|safUMoUy*9mZt>XTG}C(&hv<`+&D)OyK5Kxlj637w=-?2V zeI2lb0SSpk^@;OM_xB{sIgXN8*H2)U0{bK-mSv<_b6+<%l1s>x=()0dbIy24ZE%jPI< z^H{`;>FaD{3TzJpvv4cJxKT&z{TiAzLf)mc_ITyY>@GOY^4b&q@Hhccg%3j3;?xNCb=Axw1 z;A0Z_%NR#oxkCcsm(?3t3uH1#c^vC?Aqcp(xxE`;x`RGnC)wk6NY9F8(E?_)ABXLTElcky*y_cN-CT+Q-tjJY3VP#QatGc@eRN z=7>>)OGrfe=ja$zzvJcmTPEuKV-r(IQq2dH*(927M?E6RScdJ%p0V#(NJe}RFcSinJMFWFhfG%~P0dFb%>XI&oxyfKB!tw)RUOu70ynXr9FY~_5Ae-;W5 z&DE6GpVpBOI5sXb6brsv+n65sV?EMWLe1MfWa`{^ZigiMH9h=6xog*nXVdP0syQDW zB&klky#D{L_LhB1gl0YW1N+4}>f}7@&n~|XI{Cujxs#o-A`3qO^V~67u;)mS&kfM- z)(AMmcq^ab3K5&KlCua{Np8Sr{Nd9+qX@9f)kR+@Ju@$&ug~Fgr_KQo5LU6XU}l;! z^@pXD>-_w8l)CI7hMCyFBV#k=HyVJ5eKh5M@N}&+q>b&~?6gtuRy!UI{;d@wV<4|N9CZ z?+=S%Gb0{w3y<+-bT$fjv!Ym!sE?Nh)LAdSaPSND&88g1QoM4{t$F)|qC*zG1y}Xg zCtmYv3RV4}xEQtu8@vnH)^NC(NLQ4GGeabGGY*Nem)Xn<@tYii*pj?2dk<4F*Esdt zKH9&$=U3=$EF$kz_98`Q@mxxWi48)@kgc}uTJ|@a*bIxyneih;TeI4^m5{}`m!0o2C!ub`2+7x9fG4Y|WjWsAE zwUW;z2;9}#4poq%B>>;1vDYsio0oTp^^Q5~$*l|NK!^ZJU+o2EN08i-`Bhq%N6#Ul z&r4yy%$0rpK@$M`18mA`tOV`Mqzx(;HGo|~*_2>WLH$~fo%a=%4KTV6axPYCw~5^@ z19kvIr^(Iv?p&e|@oN znVvBD04=kvttwt}hqSfHz5K8RS@O;NnJhYZ?Xa)`{f1>^Kc>F8#I{je* z3cf@(-~of;mk;W=$9Y>Y5LVkQm>dNlRk>T* z&id@%dou8pEn$xF{_+`>160~U_p+L*hKQbGdcf$Q15&U-xh^3wvC4CAgJNU zNoG&|XMbuK97xIX-$G<%eyNC{&Si0r%i|RJ8P+dJWKyD4i{m>72Y;pVCY*8gPW41o z|HLAem51INNG?PKIxoCu%`>f^p<^PqlFmogK$RX$v6}p8yWdyk$h)SSpP!L55HI0Z zn?M$KCHL!dO&e~pf;093AuJKpLj^vb{~H!KMi^oKw@P)qW-cLBkxxkgp3|M5`Qq71 z*^c{?aO>||03>9|R~Bs)faSizVx#Zy=SL;P7iV_f1J?f#n;9Llm=pwlk<4w%z}gXe z&$_kcx_)eMXK5uZtNhfh>^)e(&jh_Z?2Eh<#qPuLY^SrG{dptnYP`MSj`thk@WRPh zy61Sc_FolS6FKAE+}LQm3%(k#s;BHiL=-H5NX`+@8+0w^=H(wB+!7q{i^E=G@v|F{8qk$F8?&3{EL0c{4DPQC+9IBnXY4o0_lif zis&nufy^aE^&dL}Sa~6Oi4(mf`~UAIKb7 ztWwA7&1`za`l#>&JEE*;v;W&KCOulf~ZRa4iTsq1rG zX@<^E#pBk`qdqYXRGB76MLDnL%=6pA(UvEtw(#q9rO#vWyT7( z0J7nSO^>4Ns9!rJEoUy)HS^g7y|=e#n3LP592c1BS@_WQ@VD>%@*~&IU5Y8AdA-Oc z)sEnt7hK7=&CP~5%2wPC%!^nl=9FiEpmu6ed!~Kh;T76<%$d1#gi<>)a^kOagrFNn z&-)zRJ|Fig%OGRpASnd(6+M!tGgVG~B{KHC#au|X$LO6``5CHPwkv;fED=?C*}||8 zWyD#2A^e1&`TRTrJwO`^bepq8fQW_Vw^}O6bzY$JHn&z;0%t;Rv4#0w>&#GW+EkT+ z7qg%JYpairvC^rV>rcE!Uv7;hjq0A1b#Z3+t9j2!$jnbSfk8g{+*-i94rCz!40)8G zjx=%|hKx{=~pvjWuPxS}oNnW<{8%7nMAUh0a}~ zD6W)woZaADvF)#5YoN0*E~AvFm0ln)?M-^^>C0qh1WkeuQz04uw)aS3aPpS=tfHhps$0z>FKa!F!iHrJP)vx9#e5AwaQH=@Z0UnR(XAj^+5E7zBr zY^n6svBn@2$RFm`=IY31gI)+<;6RV*Cht;P<$U+cb(wZUhJ0W7aioe*<^fz#KmUQVX3JC{>$-fri4u(s8neRHdJHo?2EPxYs(AL%L_ zWbZXNNQfL6X2X#~YI2Wf6_p(^C^2WkKV+_jTf>?elN&`eIGIy(% zb!&quqgcf0<(k}#7sp{EO4DCwvCGSeug4?U+3q(PK~da(#qUKJz$rqEdSrk3zD%}1 ztvQ{t0NpNB_2Ja8mHH+>CP`hqOD-r^9I~9DIbq#qR)q?#^pjscebsrBiB+j-6nu-lmfNaQ#o>hv93HWLrLT( zmiq>ocdhGE2RS$!RFJfoONdG+3(2o@74IN%|M3SxMf-x1?6Rwy3hh>(4#tA z9}Z^1e8u{DseV3vHgxkK4;P&ayu$WKutC|MtUPOWDG$1teB9altBEt3ZZKxM4yv%l z?*FK?S6S~5&jHD-@TO*}(?TX2XQ@)ZpLb>JIAzetv}xA!PJy!F1arCSucC^y-i1gT z!F^^;mxl1aS?l@_HwaYv-9JyWC_X-5)5>(5iyLt4?+s7^PD9>%epV0L^y_)+`pman zj+)~+E#6sn=q3a6rd4(e$ComKbunXk0$RpTBqw~oSo&EnIjlXvQ`hNeqtzRBH zX=?XhgNgk8Oou-x>w$pj6c`Yx{QM%g4^T1xt$7Da9Dx3^_46$Er4&QcOnC#m`!AH< zz+-2BC&Y~aJjQOu&c2tZkSgxgUa-Xn&q)5Oi+#xS<($g#0{o)NuvXO$UhywQd~yQI zUo>^BZTfv7!o_e@oQf3afQ*LK<|np#k>)B)^zRIVXn5;|$FC?Nf9Rl;*+5+W%Y zAPykZsMOWYn?kY@_uf$|E}~l?43N0VRq<1c#y` zYnak}7zw(CqYxq5@9RS5NXr8OGUs%?$87MG@roCLymianO%pII#Qt|U!E@S&B`j15 zc!k9s#TBLRsGnFv{Z_QNjBK)mj7DD1cOV&4J=6uc2FYH)1(M$Pz5k^?tg`a&g#kyX zsd^do@XENDe@mf+nPC9GcDvrfgNC-0$Vw5TFz0g@>MDJVy7PL(1$9tO-`Qm9hjFou zQxOG_<$8?U2o~u?85TqgH#fD3dwXqpI@7tQXCd8}%Ja&2ojH2K*XzmwyTKs+H?3w! zRyBM=6Fqkz>z|3=KXX;6BdlnQ@4P^oAW7=m{9m%AX$kBe8TZGRq})6P?c$`!AN|WV zKOUczzI8>rUkLsxH|DO$;fCZ^QY=dgwF2<>$PXX3Y|q8o2DQxIm+-tvHg4Lgv2(iW z)h&seGd(j1;=gXzFNr7%l=*e@U!s%FMFR495}+k_wC8v)38)=Tu+;Xn9&E~oty|?! z4cbEPy>>Dwnab3RE7q!IoA|9zi~x4_AU~D}@L9 ziu3&zN4Xw!mA=S3SH#NU6MD@dm(#D;?Uu4D6Lv^iwA=0)>c;1#e?$ytN3MfyDAn z&e9DeV{pD&ClOdZkfd7Yv%bV;uL|7Np$H@?OvM`Q4!SXCWFxXLf^J7zB-O?T)-0U zoyhg6Wya?$yx(la#Fk5fVieIQq7|DC*RQL<$C_Z!Mn`9a_#od_)~e5}Z9Am_O;ld& ztL`Qw-UNv5#0Zn9)Ay5_Li2uQQy@60K$k>Bp+?du(mv*q13yONbD-Mu0BhjY0%o3< z0=$Rh?^@Gy=EfeQlifbnXh?WJL<&iM%fl3x7;Ec%xR4?58M%zuy37dTv^JP*akE}qsZ!D?me-E{01Rnt;#M#|MVI4AlG^S-!Vq18_hClt3|}rVrMhz?^rYIzBlX>a<}wiBKAT|ZpUiP zUq&MrUx=bt38LrdFISP<5?tNeI0?d*Ks#{kTmy1*MP^PaL3%|8C^;Q0H+cVC0p{!n z5x?_r<1i1Ow&VDWvI=n^6~-t|@$vISS$|_~%?}rrXL2GLwcNU-l)%o4#TU7iTVB(M zg>nhoZc#ky+JMp3Y-Y+*iI35}14|HKf*iF43$)za@N1u=#!7e&!`mmPow$0oZAxc; zqkAXmDc(;&VKa<5o~=$209iL`pj>3 z9F;b36c4G@flY9kc=tOm)3zv0qWrUGPMzv0e>uX6@!E%3F?(2Z5PawQCd6r2E5;96 zu8Z*AW}6e**RaP&15y^ZnNFbw@}R*9k~i*@!up#;*l%_rpP5Gy>!8Nzy7SSW{1zhL z#S$Bex#y!vYzkLbloLcwr>W=~=m|KSePAJDVl|K*;gFS;cMXv(biGO646-?N05+09 z)R<3q7%gu5^hwjfYn6E^Lhb-)1`t61EhhrCRplh!biHGw}gR+YDsoTwJXxwBCsKho-&31s!cS9Zf|<}FT{ zc@Oysl4EVTLk}v&9K-@?%I+_TC(=pEZ?hUTznS{57KEKFIWNHq@E-iHJfcH$NGL7G zTD6%bPmXco6Y*w_0d*k295>^@V|aA4MJR@S~A}8+&J*GSJ_`Bj4>wf_B(+g z+8;9g8HpC~6PLKN@XOn}^_a-L4-O%Aj);r7r(t;vh0e?`qS2h&^H-*E4d>2cvV~DI zyyc;f9V}g(Ug=kAgqH{4!aSp^*52C#Frx3j1p>N#!R`bCx@WM)YUPApAk0|wE>e%0 zP^SMfkytYTW{@ItvHQ;La-u#!C4RSQrK|9pS9WQO(aO`MxE3QSyBt0g8#-wrN}tD@ zc_k%?nN=p4*%5M6+b@<4gI_c!!Svo*YX zi)*S*;z%9aI4UF?EwVHFUs^AAd)CXe1LkpNG)cyK-qO=m!#kjsc#~vKpXUS~XYS2f zmgzm_6u6K4fWR@JWMpu87#M7KFd~{K!B>-#{naO$&x17R1aZ2!8 zL&}6sb~5S1SI+j~x&ZOixeY0X9-1n306O;+_DhyiibnJ8mWm`h&zGN){W;#~^)xKe zNdB1IV@2y7dD~8O)BhT3xT_lT1EW4UgVaaTUyoHq%9D>19+8IB1ukd~uYtRtXihH2 ztDV~$f87b76!(u8vfnc3$=j%_M8P>NF9f5JhPBP{m*hpl8`?Gl-Nxo_=l?iby|TRy zh5R0}eLzBP=Hymv8TMYYA`AxCmX-C2p7!pNk;z%W3E!xUHA&4+Z+ue~G@<6x+`4=~ zC^{m*8?dtF+qGTF%6hOVP)v)e?iOgay`nxny|kyC4PJdiDA;_H;l%XTyJ>#_~J=k->-)f1)H|tiHbX9-{H;0mRc;)06j_ zwm2a@W>7A)G>;3~Nnw6tKWM4|eXWYQ$yL=A(dg=a` z6T-|c-p&%|lr_;4J#qpX0~(qV*8pvmhmQ+&LAqL+YpEVZot@ohA(u^JoQtX) zwfZ=0OghC*d%-J6%=fcHct#8^;wnaqiu6}~;3qU>;1d7&^MIfiUt_OHG zrL!qwLrn`p-ly)!r%Jkpk9V{+)5|9d?;Oa%%iuB-_hf&Uf$D0g?3_&q zXI9J(VFjJCh$P-s4`ahsB=v3+T-qkotS838bPd5`E3wYehtST^T?yVzvjSx6u5@@i z=5<-;XK~VB_Sf#FNJiR&`XfXtx3bw!&}WOfAI(-J%yFNC_k2#bvGEA~*q3%DlZw&! zIQr5QE|*y;*Kfz)6y`&>893pYYbU+;jDY=H@5$vZ2mbKx?8=L&x{mkqPH~>;!-aZ= ztW4EYMl<KBI1M@Bd{iI9s0~`;_}w`2HsaB;XjhN?PHu*`}wVa&_Eos_uJ`;MHN0 z@Tfv5a1?6G$A_WpuS7yWk_!fomHEbcrgsg^N-LdTGSM(>bR`rou zX@LJW6xx_Q7k90&XpGaSp}Lz*W62`Vni^TOe4FGJw=yja%kHqldnzQ~%2f4EshbxTX)_WdhF*128T$(R_#&dU8ykM0%1qPmjxkJ z!K&W@lHw>H2!%`Gv{46~Kv@!<*4;u{7IeQf=E6gdk7mr?x-=ip`ZY*YhG=m&86ImklSb>Iu!p7(wlzAgdlEt-U(=H&%N74R=^=W6G)q%QVbTL>+=lb4QT0}XzR>`s^kBk5Q%90o0|z!NS`B>O<*20!DqaoLSD?* zg>sQWUyrEjyQD}+6RM$PX*AU@e14haw_w5=^3lw~`Jm|*Rm)L2aJl%*= zLyI#ODXKxAKiBP|wViloK;5>pI6@q@U>6;IYiMiv9@9^`6m1F#ebZ8~iP8+nQskk0 z#Fm_3Z|xTwGpn*R)rw}6gnI>@qxzNuyAOG!!ceB34_et`@JF<{r(S<`7%Ukh2LXrX zszO8{UD+|qx^xtTye_8u$VAj&=H%qfV}|gjIMeKV@6=V8C+mT^Q)J8G;%>0mKT^^q^z@>a48hdH5zs;#t-G>HZaqY5IiEbw)16vnXFoZott7vc`Z2Tskc| zUYxt2!2sos+uA5ReL2L_Aer$TcobLe2lX!Nji#*vSgm(R?_IG1psR$UTCd=)A6VoO zQeFv&=H(NEsJ&9}4M0ew6X(2|%Erg79~f#|fT#+vDaT%kX9{07Vpo)5%dQGd(+BA9I_mlz6&PdU?`b<~V7VVSjd{0SCD z&(v$G91njJb%nsJz%GG^q>SRp>4LUJnYXQncNbC@FpeuflZPdk3z>kpy1G7`f7~gV z6Y||mIL9dO{W_L#$&tv_p?Ywh=tyt{TZl=i{>sbNw=_+=;V@;;h+~uD<*WCKX ze&Q|dt$=SpIh$30Qw;w^Gt~Ouz5<9%KYg}J6GcXvq}g7%-`hY*9qW5UQ0@0!usyd=1g9ZG%h;?cC?nER1IBIw28}{C87*kUD!+Qb%Lt)lQX^ z25gMXT-`-!gA(UYGtY6x%eIqC2aM=>dR{IVULS9b`Gt@RvNd3}M<6iXd0@!v(B`Y3 z$1+;-?-zU=@`bH8$sCL)cP=GJ7%_Zrp6IirYl+$<7jIR;S8^xgi(MwiGKaQJ=sbSP zWjNlX$x3GfPd>J9dn1lOCg|i-{@HVDzNOZlS<;P1)6>%OZGwQ~7!E)~SIJoiplL8| zXGAQK=4)G^tOD04;PMgaI=Yb2P7|4I%5=U&FRl=(WYj4)Tv~Zy8#uYyAX>R1x=_e# zljnx+I8@x0!GsH*xWupK)5VfskwO6^-oVLVLF_&n;o*_HgfCP^WEKGod@*<(X2Zhh z%`{YF9JMk!fEQa}R+|F0i+GM3b_HUL|B%;4deO)$c2=*v(Mcjyci$_kI zTkj#CUD&RLh4nuyEMt!`>|VP)q;4S<;Jf|8Px)^jku4Z|Dyz7F9Pj+eh^zovIOC2_ zl!x>lw`(h$I2O_;&@5Fj2HgLpf}a*L;1Zhe+wEeJsUI#a-n6e8a|x}8QhIUM+Lhl0 z3g-q!XQ2d$D@80qiS}%uBqsiEAa<8$p1tt`LnF-3YwH%y9oj*%-2(zt zw1tT68H)=UlbiRnTQ-stH#X2|bu41DvA1(M<3t|DLtbA&FQy}3c|*|}0{B+2m6X^G zzy@AFX~$B`+6&Z> zu+ObmVUS^KnES9DmCOQC&oHu-oS;PG4zqprd;8AXV)E4^NSf`K$B+A^qy0vW&yy|* z2pCKdl@@rPg$forOx8>s(9Vd1<4c-XW)n+V0{I@1`2Vm=j)mF95A*+;rWzt>+ayKy)0^snng*;pUC z88QDOeC6OX_n`x{T;kRg$!lZuw#A=DaZS(AW~@zObhF3(-RAUiQTsfVGi|t&D@zy~ zU2}x3S3}ga*7Ff^IP>8aBl)CX+!DivGSX5VK>IC8I0od8(HzBN?mG6Fpotd9${n{^ zi@#fGVjMCoF@8>N5?`UEYfS=qn#+f{^Y@!+jH2^}hgn8?;{arD^! z+R7|@)|W&7)`0=n1(xkLirAC@;%N&<$FboG_%b!4$$Iq*`*Qn=GvpQ;kxyGW4IKDp zhp|FP8RSvd^tDA2;`PLI4Irs@QrTt~yQCnxklZJl_T>Fp5qn7bKTJq@V^yEbAdF2i zgpqhAA37nBPabuLG<`=m(XJ1n3~DL_(I>XOVPBhJUK)u~m`8@GB6}E3Ve#B#{RB?T zEMj$yDA&N9B-ikgLXvqgug)du7VSZ9Hz4_JdAgULa#JP2`la(najaua&< z7GhnQf!-XW18GdZovy1{S&4J2mF?|pcbTwMttMJ&KD(x4j=?ilC8RVH*0i<6dE9t1 z78h#TFqPAHv|>i^{hi(MY)*TdrakIX!jCBz_dm51Ob?&w<2bXTb3)}#?xcC&hg_+4 zmsEYTjGsZZY%zWYy#<;rI{#OD-x<}^)~y{uK~&@j(nVC-p+-Q8)T2m^6oG(r5fC9j zAQ*a8l%vvxAT<^`1f;jn)I$kPx^$$4P6Pn~fxA!<&i8)zjQ7vIW85*`e;Ir4wX@dR zYt1#wGoN`*@qp5ea2!#8rIG^wq)&Y)?p-yf$)%I~^kPXzOru~48G(15?K|~N80H5k zv_T%iPcQK92R)WL^GJ`1B#tIS+T%9z0DTz?%@5`B%C_4kI@}guxpo2Cw$LMCe822H z;Ror*(p-e7!_}L$W)JsQ?*#cYBkyv5dF2F>mcB!~1boYM8Ct_Z?vb{EB%Gk39;S|^ zaeDYKy6F#(J1~1~Il{U-nc8$Gw0YuKmJ^mNY7M%CwDs`l9cxO{*GKWYwMq`BwGFiE zj3s^f=*ZjKqwqt^bck-1x3dTsj?wnNj zgJ;SovBFJstSF2Mi@M%^)qH5oLt^RBNQaofb?m=oiKoC>k2^7@D~+i8u~ZBe+`)V0 zI_w67uZZK$B0D!xj&+;b9=jQ6emd_>K4^`CA z)GGh%?I>CKLpB@4{L;E+b0J2TbylCbI5W9D-a?#lh4G1>F5y7BZ5j<1=SYiDb}+@z zcR=`EUfGSJGra?fs}3x@4|%L%Rt>c2>0jRqpf|sSGv}Fqnq7Lmv%v@md-(k($C+OC z#9duRaq{!|R=t^#`6;HwwrmD1YCzGz%9x)Zm%Y3^~;xtBk zvI1bUkA+t9Tcz@VoU|L-w*v-8y=5)?Q=zIgL~^4d?}3!{`& z#6)cD(ZRZ%k-dlD<4@Ji2n`)PTu8mdamH&3$lv%$-74u$1aBom=ZPC8>S+c^@Jw&wv>Vp+71yf~c-VZix5qwSN5-|Fhi zK+SSZ@AAa?zbLGUF8F!H&FchWSor7f$D2O3y8KoRS$bO9MTMMW#eCRq-7b~f(`xPp z4|TDpVxo(+CWW3uor$bs$jZwuto%|vEMqtZUJ)t&=NzGF%XL{f4f<89)a!9o>qhQ& zMHRPYCf!roT4W>~j&2z<#9XkDe`kdK;JN%G`L{b-XMUbr(FhR0Hiy<@dT|ruO*@ff z^lrg#KrpJ}brr1?Nl78w!$jJ@Eq~x>RDOX;!U{=$9x~^BXtv`@F|`X;V+ih5Z2zPq zR1U`$_*c15nB<;))*^8=>li+x)7oC%R8BF`D4s(f_pMN-V#?gzdPA!heLHkc)=}#u z+hsoI$rg#0m-Dqk3ruzzQ5cr<9w`HumEm^Z{I02{FUkdno}HVK(PoXe`K?7&^hPa( zsp8hE?E#PCM`{rH4wSeTF=~>-V!p=AJMcm2nEvqjxYR)#ilJ{^u74dK^0uHoif^%M za`(9P<*+IlROCly<_w)1C?1UPp>uX}%Ee30QkA+Rij2j_7*X#4Cu*%#G(o*Te_|pT zS|2{f)4XEcoCxijDNj4i(Pc=klHo3+Kjvz?-SpBgfiQo!O53V+5zY z98C~3+cI-UBXU(%GDV}hLBW?rzsEklL89~V>_)`+w#Db45!Nk{19Nwc zdTxcV80QhoD<4oa(_%kSGrL3~a!PI%HCJe!6tL%_WEi}#Ni>6QP8y%bhO9q8t1kDI zvz~QpW=xeEoiT90zu+)4TkiRv8y>^g*#fT1%pOm znPDfsACQ@vBMFzCQz9`Kwb>Y4QWpkc*&C7^Vdid_!Iv52$ES@izv{8*eKT?RoAqU_ zGM(CHHZH}kRqXHDAiHZ}1z5B%%L;Gwc`q9+iH&_D#hFR8&|woVbQRK1O8F2YJgU)H zXA0_*>8j-kQjEbtQ<7Ol;jLtG#LNwMiP+b`BHpdK!v1Z|b%M|+6vog?Y)od{G88Hu zIa4}?$2RJ$6<;Jre(KW$#j}{J#cWS>((HYoR86c97Z=yk$o+mUYa%%+WvXOd-DO#Zp)(>+N7w6MWiEu;d0i)jGO8)wc&ytU3EOd(op_2ftH*&P*r&wp zYfot4^>fqCNoDPFSirMMIEoi0_ShPF&pL;HwkVU?3eHTb!=Ri2&Of@IYb)qW=HZiJ z0aW-Ja{g}R*|%Qu)UlaCTPJc@rqwantr4TV=`Axt4BS;Mmxr`)cB@z0xW6lEpZ~+%*$xo z{tBkxjAvBoc2X!ei&OWpl0vbTmA-H9;O%wWDyHa~t2PPf zbT&!&*Dssb?M=>$rI|z?tLR=T+qmi+nd>jn>$Cm9H$o%SY6zM60sH~S|4dHwX?li+HV);9Aw`;cWVDy&NxMOdfRU>WMwisL z5rg^@{j>SwuXyDnqKWbx@8p?m-w)b~MSx<$eYU`DQPXq1#3fyro8BKr&}eKRgrhc# zb0W5-6`!aDxxg=YQW&#U(0=fAM?Htd(pS0ktuWms#9@OrjZX|~3WpPRU@3SuM1~IyDz4~y4Kr5{se?5go z*D*J;9CUBKaC&8$0rgr2d+og_=8(sD6~TS|eBW?DJy9!}fs!&lfWXkvGO;MD+Ez7BiZGVH z%|Ti03`=@OMnuMpZMyhd8?<`iW!&WK`pWoYx>Z35dRJUEVvF&$o_D5m6tkDVE{IC} z^ri1cb6{|*WcS|u4V`NzdHOPB?1C5j=BSog;|jGqYIpo1_aBC#M{w!6N`5PiF$rx0 z&#N;(irNN8BBEqzRD}1(_=wV!r>MK;ObQ&^5xi}!zFr{SQ`jB)cT=Rszqotb3&(tY z-n}vlGV66Y%DHi)wb4-DR=3J!YQ^BV3Sf}mBTWY8LSO8$*I6*k7*U)5eRto>o(&M> z5d-B_bLdkPLN1U~1AFQx-m~XJ_3R|8$viYs1j*c?aU_V8v2uZj_c(Rtp2A+PcP;#boW^)Z7EM0)QCcUTUibL@>!^S{Oki?&RcT z5#*2zuYf>-5t;gdKni%Y=Kc|F9WaqTXD_?BS(B3^Ehrn@ z`m+|d=}^@aP1k>}8P@Pk5~0fU4wCAO%(CkjgQ(S1u5lfNUkesgR4 z`nNyftCsR#Tk9FTyWJEguDP*#h7MNc%(T&aO$k@MINWsO9@`>c6MY=1)l zBuI>?wHo@N>{~=PReHK4cOkuUP?)EdEnzLjytv4&+zaLQW*~p+OfS5o#v$RT=FKL8 z@TBB&mpw66wDo4)i7JX7qAkuUJZm~%fF-1>z$^`ZA7ir&htRM^ww?alRDeU&;qcJ2 zJ6*ar&5Kh;-<-NfQ=ficEN`a%rh$uFTGnM5ZSHwH{?@DtwX-*uSbGiLv@D#@lDu-` z2u$|XALT?DaGb{t?Z14+IGQLFODzS#hz3g8d_PRB*SP1 z2_XLF>kEa#SBEKLMfSHCz`zBv``mprIFt8U8}3v8wbU#Fwx*&!t+8&m<7iXy<*K`n zbx48y5+k#Tm{u8syx?NwN`!+nd(9Ie|`9ot07}S zlW!$B!nWV{D}At!7yR2d0vxt5crUA7WQYbSX87?we71CdRf z`QvjxdzaSiyR+^^d{P;63p&Gh{^jpaaVRnQuf5QXniGZEWb^f&7nP5_W7`qZwi?>{x&zC*{H2Dj^}E&lmj0$RH1v@uV1r z{>+fh*T)HeIGdDltMCRE2H#HAPN=%ZZSStJVBi>HC!J7V@8JELTllW)^yfha)~v%| znW|MTy$k=-%1iebxYO^wbpRPvSe34rzmx>SW;&dkR&+wEpN=1hgmRLKki&AH$l3v` z$iDPoyxX$B`;OxOnOE$WNCdc$9OWC+#y+t=jt>k8r$fs$4R+5C{n#@ zukY7@IaxPQ5m1t^e3dP{&U679S2Qoye@LBef0VC4D!F|>9pGGSKXmYFaY>2fCp8(; zq^gD<#!`{b2<7_mX-g4XX~baUDy1q&qWjrnV9!cBEeYs1o0QcSvoN^5eu+|cD6+I7 z5_%h+FL+LOG$#FQ+-qD6Pk#l3B!*8_zv%-=+uCL}Q zpz>eOzuNpx8FEfAZH;Y<-C-yY0y#RlKwGpw@LapgzFT3;VRSXa*|Kw>{f#WVni?l~sU`xgrZ)45UK2}29h^S#Yh=(5@%sk?_yy?Ye$F14$2Y)S_<3yp?G^xm|7084 zf8ZxA$ll-X@)z%K#edkwwA6UwP}#Yc8(r-By@LKJ!TUXLtKQ6%NB*fBSW`D%__A&y z*t{;e|4+K5$uymI&nDh!>D7WS%$~I+-byW7W7aOP7d8i!o=c>}<J;clf+lhhx8Xz16xk}tZu3IypE zhw~)wlyoeu2AH&Od>&ewLx@@~L?ldl3~u-eKv!k?h{GaX@fs)m8G{etoj+B3B21G! zf~2?xl@lX`-h~h{w_H_-t}XQ~Ib>h#i4k|rAJ`_EF5T@(K$$m&PvYMPoWM(?xTJx$1#}1u z--gucJbucfm(%?40XZ#68WIuHHhF}_XeemH0?%7>A`Q|@z1o&4P)4(fsNrSNiBArJ z6QgkyvCDL??`P0iR!mUkYxp!b=Dy1UEDZK}&VR*UBG2ol_;6sou((0-=-WwBCoc=m zQzT*-DdI5^d4>k1pPvud1`O(Hs)th!OLF3dCC^paU#@nDIjZ?Q_`_tmlIuL-h6NrZ zgD>zvd0U#7X>VU;t`>lAJ5vbF5ecrD;4e$u|Gb-dPq=OQQh?hgG4QKlGzIZV-}*9E_b z>zIEb)439MBGyZLsI?#JS_nWsgR&?@KO3rJxnGCLje4jtmR!iD1!#&{@1}(A|82s$ zxCk1uc83S$t9(=pUHgzwdUva86#rc18X}i-+EY3B3I|&F8-U_sRQy8Y=)|&^#y&G z#suhMxOCrQWE^(*ysw*=zwzb=6LfqeIXhsF9>wn#rP&iZ0JN`UXJoua zB%$@lp`gago?J0~1+vGo|1H_@4`Sm#xBgA}`k#sV_a}<$9&i!hqLwm_tz%t@uvCeS z*y9&$=Q7}M#J7t`rX!Gs@94CDA=%&01O3mfg9W4hw`W7ubObFT1SHKdAU1!L$ht~7 zWDBHvKJe;+c-C${At)nXYXUBfe@D0OYB@=gBwCL{yH*k44fyB%GBJ0=)cQs|98&#j zC8%B*fy>8JwF~&|+BUn@tQg+}oW##8?ovps1uhExNsSj?$Gkayt`rD8NWiWg0$^$i zxcbN3ezm`7|3FZFpSkfr3+jJ#HZVI?veJZLmPcViLK#Rq{vC4WyVKvu2_@Q!fW``uTkW1s%|mkwZRj7 z;DV~QFGbF2@WlU-Cf;Ih(Y{4JV`Cf_RaS!!)!F_U%5gEvVJ62c%&$RfDg5ID^K5t; z8X8|q-(ky8ms{95R`P|OWzW@YtDh6)Nr7A(JLg$Iz6suYQE73}uyG{n!UKKn$3-WH zhLo>7lkM~O&O@GHN+qu0_8J*cAX_bN@$R+i#toP5b;zC>-;ArP)?U3!x!O=Ed@DY2 zxcJvSHoSW4>lY1Y=d0y+}@qI6%$J}91cKl9)8krEj?*LHI5nYTrC zuHml_d6gQxY-IqAiu5sSv*A9Xxq`+ zmj>c>bK5~pAK5YD?cqTNf%wsiQx8p4F&u(Gs&|?|ijv=hf*mKqcKj@gr`9Mjz2-Os zLMiNU)0wAM6bQGG!?o0ih4*e00RA0cU1Hvxz|^|ih>l4jtCVhx8AuvOvav^EuD4|# zFhU?2w+7x!Y6MvW0aZ;E#M(XZ`11)++fvfs>0PX}aN_REc`p9@FIU8GdmVw4M9!&S zdS*1nE&YtYp~cdrQ93-KAxfZi;w%O7R4*3<^4wsRJN9wSX2sm~JJuwhn~9CGCx$NM z!61-}`JgG?gEi0In5LGItv52!o=kW}JiZbFF;)YO8gMmn;9Zv1BIOea^)2IS7$S=1 zLGhnNvsMTsI-=t79Tb9e#~Q^2+B>-OOq3418xb6%gjD}!iG1Zgz=B_oF;;cq zcHZ>*e!tZ^Kl=MPOJv-c7X@eR3$0k9S~JTjceIgZ{7bdkT7>g literal 83223 zcmZsCV{~Rsu7suHF!mCfP5=O6|9=5w*sjzV z0DzUZ5EfQYFt>BIb27KHCzKQxCbW07Gqtcb0RY_BvX#wLlut2upSK=_q{ID_r0tZ@ zp$V0QqWsa~$*GB8kfp+j@>kIndw+dhb<dhW1AT2zbT{ z{Q(Gwf%s>qkt+l8zySv1zl`<)3UmMi3csUyfPeN&x)%sQJBbJ#BrhI7h-wlp0x;(W zR8Ff!iUKqk0BEMt1Dt>rIsk*Dx~T-9wgvEa3K^~*01XddPz(>D0)Tq~3`R&u+yTMq z05q{Xb)H+AYUE?;e?666&(lWADH@;+P3Himt`5YfoRY+(L1QxnHOvqI_IadZF$J(7 z?c7fQ0D1A~|5|(h={|*6JvGG^+l;7Bch&>>O>AVe|8+QBVJ`px>^l3-e$mo5VEc1J z`rCXJkX?bB>%rx@JV%+2PBQ!G^o+` z6;T{wMKYrAnTm-cgc7I*$>zR|_qJ)@!T7dW0kxKVAYSowrMkbso}?*|HJtzMJp%xD z9d^A7l+a-Q=0UsDZr|7ZpW=CB0Dn`-1P1^>PlObxGSE;s^>YDlye4q_CkK@tm%nI7^&)GGmw5=BZl8jhw&EFI4(!Kf6e zLZ~W%cgO1p${D63)*jD20$>XK2<;SSObV!1X83#Z6N-7jngKY}FI2}t3zPV3ypFgMzG4WwR;?1OBjWMb zbe$VGN`UBJ7&dS>AwolZK?w~R4Y?JGQbJr(mLF>{>@Z-#ihUHsiKWtw6{RU$d1Ez4w)z$Qr?T{E_- zhvH14C8QY%ImkZfKVUwzeBP}(fb zSNXvjrzKRC->g)l7*>kP;*!BR8H6DzU0hX=JdbUTY5r_cbK>0oV>20FE_FtIZv0gI zB=rRB!3`cE6g_A-+>8<{^C#3#Gc32CHEA+`u;!z%hE*8Y8PC&>(~;8cR5hrZslCzT z$6%AClF5^CsOeS8%KwyamBXpttB$M0mFX$_REw!HEAN-VETmMZmS-!RE8{4em2sDb zm7A5?sqh#1YJNsQYWBzW@n_TsFrS3@k z#OsLSEicRG6lRuUR&P+cPcr3)+D~(M$#Ry1Ii@U0z4wjWLc6Bgqr&;aBGblbqGMH_ zlA5AXAyJ`NA%5P)R()BL{ijQ`L-RcVQE*s_LWe@!EN%)S`&fBZd9wtz1VfgW>#-VG zZdHtv-y!1GV_R~SmeZ~0pCe;evgOfr{D$j8|Ecn6^H%aG4zB^(08a|J4nOsiXOPvw zjt7r^c>PvUShrt5xY#h+Fm*RLzHOGLa8WEq3@O@TNN1mP-)6{WsE{0zoQPan_DuFF zLrJ#n57i%T8E%>3$%)B=$)$AGOkT!irsK@x%;n7O76UDJE!yVN=2jEQ`U9;$npe%8 zwjo-an#CHbTDlElRoPW!OC41mB|l2qe85bcq0N!511aZ62i;xIxyS6xhRnXp z()F4vwkwOPu#MaamRzbFO=hQ={t@9F#lu;CxZGq0tL;i(d13hgv!-Jb`d{?%>Q&3N zEyZr-&xY5Sd{2Cix%+(kJnUOcTblY4?0;KETE^x3?Q--(wuSvjzKy>n2b2tCxb&d2NE|f^mUWfrq_SMCKzGzpIFzkJF~&rz{Xd z6nsyXW}pm@45Rve;VDAGLexX~W9`E=uxA-lS>0wggq^lU-b7MFwld8a z%7KiVG#AdTIvm;a2 z@k*1B`maITs1|zsWT;WAhToMCnsl(uLVr$Fv?!OUq3X>{)J=OPBgQyWDspHhFDDwt z)_=2SUFUvZqV%EcCNvj^N~_c1X&iM`T5{I&IC!kX?xRD{gsMSS^0Y=aQ`;=cS6r&6 zR{M65d&*h`==F{T_BMf7ox`cZ9)|dwZ!BNx%4^VTZZ{deg=XXMp+`hkqpf46qWi5- zZnz)fgxQVtq;DiOmQ@V28Bd$enVueP(dB3(rj(~1r6SrQtgba8Y^yb1K0b-A)2B{S zu6G1A3%3>a@U(WCl#EVIa`UScsXVB>sjywmZ8jM$zu3-R;dpgEv0N;!Yj-|>@{M+{ ztAeP?E}AZyyi2|}Jo8sal%Kw&yxZtj$=Ntu4uj2seL|5SHZQj=EaJ`aswl-R(VUAT z4ij{LWna6|A+RB+#$*lck=ToP9GpJGY(L{8aILvUdsXg2%@erdnc>k}3T517h-E5g zylWe2x64oP%`Tm7d47nm6Ch==@MwBS-K&gRtepnVCz{<&M`tHz`}hK1Hw@Mbn!S#H zO>J8u*65;o#%s z+~arrJpCvUo;IE)&%yjE_!_Uq#GvnKGz4?CCb)4(^+A4ti03~v?xL$RJPFfuZbFyTi$d;$0<=P*R2 zsK!Co{21p$g((qn=qy&2;OTa5b9;Nc+OxjCpRTH|>bIHcWH4O?C9N)U>Aa%uV&NKFkswdTe@BAiRpX#n7^Qd(3zj~be|+wCvwcUT~MK`_=#OZKxXaU+@sIAAa9$f<@6;kb*l~0xA6TF;TdHx| zt#ga&3jTNZzAqKwP!Z3!SB&)ffeslyfUyAZWwEqa!Efu5MUQ?0O!$i4MIpj3smRcvRHw3gcW1G+N7Qmq%|63NWe+C zB|B}^&k*6mRsA?XKp0&Vqs1XC^^}&GPw!Pvc)OSwU*HNY^3fd!Iy)Vw_5h_0Mq@eh zvxk2RN?N9-PUcSHGJ2uC`2+zIC{wt@SxX2Q;0#4~Vz#wT8qcEt@Hu#j~7z*vH zTTRsf#htK_QFL&zFtHZm5&`6*!YVME;KpV*L4r2(Wqx+4W;5&+Q$2Cn1`i(S0tBh~W>bcJzEicA+!E@Gqd41(w}mbg`_Qob5tLd$2R_qe82;tRq~NOQc1M z^SCc7LQtQK>jr|$;E{XIXB_WQ4<1#87|5IgmSgXUR~(6J3Pl{O(Oo~YFOCvQ4c_a% zbSrd6Bhg!eqJP#i%;#s^bRX#8>Z(OV-+@49&K4i?>T*yZw3cYhk?&=Tv9@?-g%*EdxgmkP(AGVy zG2ZFzq5q|JU;GI|hjG14SIRsrt4NfI;~_R|FLvaql)nXK&KV}7eZi+zKZ9_I9Y z3AxG#)Y1&9ZybuGsTiHLe*=Y@jk!bw)7dV(T6~N`tP$XwnxF-~`;tLbo1BE^gH(Vn zAu1{=EV^ar}&&xA7=+hPA{SSTUY6pEy(5xw(D~ir6MU{*Ve=CztsImXXg?kxg3H1fSxV^C^0rIcoTFTBZ0PtJ z&WejS;(_hkH>virmAI&#t^^>kjlly47dMq*(J?;YrB7(oo`w4w3{lThsAJ;?|*LCfUPOYjUiiL2leVKB3s~PiRn(CTn|~R7QvqcP42xt(}MxS zdb4D$&~&Vhp;#h=2i7xI>WvaI=PAAUzQM3fK>V<5T=2nx!RVyh(e`l_lQ%bT&PbaF zS@lGJUKhffyIMRJ8C0mz86)%X#)b7p&j<6~Y6%$-1k2`W&?~ka`cl|nqo&?I-^#Fx z^NPffZ=UbL)+lf@uW( z@WTH>u=LNjW>8`aivH?ut~aDXXM@d@drxvU&wGB(vR#pSw}zWaNPL9%wopUQ>2Ynx z<*|VO(0%TJX>Qi2)Z?DMkjxP3olDQmG3A{|%wccQA8R}b_H`XimD zYc_U z#HBh*6VAhf5BpH}!e$NL%=0fdgmp_qmiMqyy?GEthh#~NuLegW^75d!lMt*m5=2uU z`-+tBx-+K%8bcyjI&q7ddNe2>N=bS-bOC$;m*;R)W+5I#2cjUW8>2U}e_l?9WuF>* ze{-Z_^MZA&{vvu|7NzO=(2nhP8{W^K&_RJO=H-iSSa=twgFle%VY5K>x0{#tgKkDV z3xBrE=NR*>maZ9lnDpl=Md1S$_El4-V&+m<76~LU z87;Q(44}bp4N@8u#l>rv@7gYi=^nZ;S}@!LyP6A$RE8>^JJ26SC}^==KSziE z1jJugj*_`+QG^Vf^zLJk5_8PU$@nc&9xue6T2SM!`aSq(i3zG^XT_U{eU?TadQBvA z6MJG?>$8m+16FhvQR*JL_YV)f)!#yyC^*mDrDo$)>&& zO04pTjBA}BgPTG@s*{u)nO}=E(qx-fRT)TIItOysD|LblR9x#Fux`()KDMQ=C0

+
+

Windows 10 deployment resources and documentation

+

Learn how to test, plan, and deploy Windows 10 in your organization.

+

+ +
+