From 0c7cd54691ab2bb00b0f3e86817f494231fca893 Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Fri, 15 Jul 2022 14:21:12 -0700 Subject: [PATCH 01/24] general update & add wip 6010051 --- windows/deployment/TOC.yml | 4 +- .../windows-10-deprecated-features.md | 21 ++++++---- .../planning/windows-10-removed-features.md | 42 +++++++++++-------- 3 files changed, 39 insertions(+), 28 deletions(-) diff --git a/windows/deployment/TOC.yml b/windows/deployment/TOC.yml index cbeb91ed35..35e59bd128 100644 --- a/windows/deployment/TOC.yml +++ b/windows/deployment/TOC.yml @@ -65,11 +65,11 @@ href: planning/features-lifecycle.md - name: Features we're no longer developing items: - - name: Windows 10 deprecated features + - name: Windows deprecated features href: planning/windows-10-deprecated-features.md - name: Features we removed items: - - name: Windows 10 features removed + - name: Windows features removed href: planning/windows-10-removed-features.md - name: Prepare diff --git a/windows/deployment/planning/windows-10-deprecated-features.md b/windows/deployment/planning/windows-10-deprecated-features.md index 051bc90e0d..26a3ede517 100644 --- a/windows/deployment/planning/windows-10-deprecated-features.md +++ b/windows/deployment/planning/windows-10-deprecated-features.md @@ -1,6 +1,6 @@ --- -title: Windows 10 features we're no longer developing -description: Review the list of features that are no longer being developed in Windows 10. +title: Deprecated features in Windows client +description: Review the list of features that Microsoft is no longer developing in Windows 10 and Windows 11. ms.prod: w10 ms.technology: windows ms.localizationpriority: medium @@ -12,27 +12,30 @@ ms.topic: article ms.collection: highpri --- -# Windows 10 features we're no longer developing +# Deprecated features for Windows client _Applies to:_ - Windows 10 +- Windows 11 -Each version of Windows 10 adds new features and functionality; occasionally we also remove features and functionality, often because we've added a better option. Below are the details about the features and functionalities that are no longer being developed in Windows 10. For information about features that have been removed, see [Features we removed](windows-10-removed-features.md). +Each version of Windows client adds new features and functionality. Occasionally, new versions also remove features and functionality, often because they've added a newer option. This article provides details about the features and functionalities that are no longer being developed in Windows client. For more information about features that have been removed, see [Windows features removed](windows-10-removed-features.md). -For information about features in Windows 11, see [Feature deprecations and removals](https://www.microsoft.com/windows/windows-11-specifications#table3). +For more information about features in Windows 11, see [Feature deprecations and removals](https://www.microsoft.com/windows/windows-11-specifications#table3). -The features described below are no longer being actively developed, and might be removed in a future update. Some features have been replaced with other features or functionality and some are now available from other sources. +To understand the distinction between _deprecation_ and _removal_, see [Windows client features lifecycle](features-lifecycle.md). + +The features in this article are no longer being actively developed, and might be removed in a future update. Some features have been replaced with other features or functionality and some are now available from other sources. **The following list is subject to change and might not include every affected feature or functionality.** > [!NOTE] > If you have feedback about the proposed replacement of any of these features, you can use the [Feedback Hub app](https://support.microsoft.com/help/4021566/windows-10-send-feedback-to-microsoft-with-feedback-hub-app). -|Feature | Details and mitigation | Announced in version | +|Feature | Details and mitigation | Deprecation announced | | ----------- | --------------------- | ---- | -| BitLocker To Go Reader | **Note: BitLocker to Go as a feature is still supported.**
Reading of BitLocker-protected removable drives ([BitLocker To Go](/windows/security/information-protection/bitlocker/bitlocker-to-go-faq)) from Windows XP or Windows Vista in later operating systems is deprecated and might be removed in a future release of Windows 10/11.
The following items might not be available in a future release of Windows client:
- ADMX policy: **Allow access to BitLocker-protected removable data drives from earlier versions of Windows**
- Command line parameter: [`manage-bde -DiscoveryVolumeType`](/windows-server/administration/windows-commands/manage-bde-on) (-dv)
- Catalog file: **c:\windows\BitLockerDiscoveryVolumeContents**
- BitLocker 2 Go Reader app: **bitlockertogo.exe** and associated files | 21H1 | -| Internet Explorer (IE) 11 | The IE11 desktop application will end support for certain operating systems starting June 15, 2022. For more information, see [Internet Explorer 11](/lifecycle/products/internet-explorer-11). | 21H1 | +| Windows Information Protection | [Windows Information Protection](/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip) will no longer be developed in future versions of Windows. For more information on this deprecation announcement, see [Why we deprecated WIP blog](). **_TBD link to blog post from Rafal_**

Migrate to [Microsoft Purview Information Protection](/microsoft-365/compliance/information-protection). For more information on moving to Purview, see [Microsoft Purview Information Protection and Data Loss Prevention for a modern data protection strategy](https://aka.ms/MigrateToMIP). | July 2022 | +| BitLocker To Go Reader | **Note: BitLocker to Go as a feature is still supported.**
Reading of BitLocker-protected removable drives ([BitLocker To Go](/windows/security/information-protection/bitlocker/bitlocker-to-go-faq)) from Windows XP or Windows Vista in later operating systems is deprecated and might be removed in a future release of Windows client.
The following items might not be available in a future release of Windows client:
- ADMX policy: **Allow access to BitLocker-protected removable data drives from earlier versions of Windows**
- Command line parameter: [`manage-bde -DiscoveryVolumeType`](/windows-server/administration/windows-commands/manage-bde-on) (-dv)
- Catalog file: **c:\windows\BitLockerDiscoveryVolumeContents**
- BitLocker 2 Go Reader app: **bitlockertogo.exe** and associated files | 21H1 | | Personalization roaming | Roaming of Personalization settings (including wallpaper, slideshow, accent colors, and lock screen images) is no longer being developed and might be removed in a future release. | 21H1 | | Windows Management Instrumentation Command line (WMIC) tool. | The WMIC tool is deprecated in Windows 10, version 21H1 and the 21H1 General Availability Channel release of Windows Server. This tool is superseded by [Windows PowerShell for WMI](/powershell/scripting/learn/ps101/07-working-with-wmi). Note: This deprecation only applies to the [command-line management tool](/windows/win32/wmisdk/wmic). WMI itself isn't affected. | 21H1 | | Timeline | Starting in July 2021, if you have your activity history synced across your devices through your Microsoft account (MSA), you can't upload new activity in Timeline. For more information, see [Get help with timeline](https://support.microsoft.com/windows/get-help-with-timeline-febc28db-034c-d2b0-3bbe-79aa0c501039).| 20H2 | diff --git a/windows/deployment/planning/windows-10-removed-features.md b/windows/deployment/planning/windows-10-removed-features.md index baa2e8882e..4510e72618 100644 --- a/windows/deployment/planning/windows-10-removed-features.md +++ b/windows/deployment/planning/windows-10-removed-features.md @@ -1,6 +1,6 @@ --- -title: Windows 10 - Features that have been removed -description: In this article, learn about the features and functionality that has been removed or replaced in Windows 10. +title: Features and functionality removed in Windows client +description: In this article, learn about the features and functionality that have been removed or replaced in Windows client. ms.prod: w10 ms.localizationpriority: medium author: aczechowski @@ -11,36 +11,44 @@ ms.custom: seo-marvel-apr2020 ms.collection: highpri --- -# Features and functionality removed in Windows 10 +# Features and functionality removed in Windows client -> Applies to: Windows 10 +_Applies to:_ -Each version of Windows 10 adds new features and functionality; occasionally we also remove features and functionality, often because we've added a better option. Below are the details about the features and functionalities that we removed in Windows 10. **The list below is subject to change and might not include every affected feature or functionality.** +- Windows 10 +- Windows 11 -For information about features that might be removed in a future release, see [Windows 10 features we’re no longer developing](windows-10-deprecated-features.md). +Each version of Windows client adds new features and functionality. Occasionally, new versions also remove features and functionality, often because they've added a newer option. This article provides details about the features and functionality that have been removed in Windows client. + +For more information about features that might be removed in a future release, see [Deprecated features for Windows client](windows-10-deprecated-features.md). > [!NOTE] -> Join the [Windows Insider program](https://insider.windows.com) to get early access to new Windows 10 builds and test these changes yourself. +> To get early access to new Windows builds and test these changes yourself, join the [Windows Insider program](https://insider.windows.com). -For information about features in Windows 11, see [Feature deprecations and removals](https://www.microsoft.com/windows/windows-11-specifications#table3). +For more information about features in Windows 11, see [Feature deprecations and removals](https://www.microsoft.com/windows/windows-11-specifications#table3). -The following features and functionalities have been removed from the installed product image for Windows 10. Applications or code that depend on these features won't function in the release when it was removed, or in later releases. +To understand the distinction between _deprecation_ and _removal_, see [Windows client features lifecycle](features-lifecycle.md). -|Feature | Details and mitigation | Removed in version | +The following features and functionalities have been removed from the installed product image for Windows client. Applications or code that depend on these features won't function in the release when it was removed, or in later releases. + +**The following list is subject to change and might not include every affected feature or functionality.** + +|Feature | Details and mitigation | Support removed | | ----------- | --------------------- | ------ | +| Internet Explorer 11 | The Internet Explorer 11 desktop application is [retired and out of support](https://aka.ms/IEJune15Blog) as of June 15, 2022 for certain versions of Windows 10. You can still access older, legacy sites that require Internet Explorer with Internet Explorer mode in Microsoft Edge. [Learn how](https://aka.ms/IEmodewebsite). The Internet Explorer 11 desktop application will progressively redirect to the faster, more secure Microsoft Edge browser, and will ultimately be disabled via Windows Update. [Disable IE today](/deployedge/edge-ie-disable-ie11). | June 15, 2022 | | XDDM-based remote display driver | Support for Windows 2000 Display Driver Model (XDDM) based remote display drivers is removed in this release. Independent Software Vendors that use an XDDM-based remote display driver should plan a migration to the WDDM driver model. For more information on implementing remote display indirect display driver, see [Updates for IddCx versions 1.4 and later](/windows-hardware/drivers/display/iddcx1.4-updates). | 21H1 | |Microsoft Edge|The legacy version of Microsoft Edge is no longer supported after March 9, 2021. For more information, see [End of support reminder for Microsoft Edge Legacy](/lifecycle/announcements/edge-legacy-eos-details). | 21H1 | |MBAE service metadata|The MBAE app experience is replaced by an MO UWP app. Metadata for the MBAE service is removed. | 20H2 | -| Connect app | The **Connect** app for wireless projection using Miracast is no longer installed by default, but is available as an optional feature. To install the app, click on **Settings** > **Apps** > **Optional features** > **Add a feature** and then install the **Wireless Display** app. | 2004 | +| Connect app | The **Connect** app for wireless projection using Miracast is no longer installed by default, but is available as an optional feature. To install the app, select **Settings** > **Apps** > **Optional features** > **Add a feature**, and then install the **Wireless Display** app. | 2004 | | Rinna and Japanese Address suggestion | The Rinna and Japanese Address suggestion service for Microsoft Japanese Input Method Editor (IME) ended on August 13, 2020. For more information, see [Rinna and Japanese Address suggestion will no longer be offered](https://support.microsoft.com/help/4576767/windows-10-rinna-and-japanese-address-suggestion) | 2004 | | Cortana | Cortana has been updated and enhanced in the Windows 10 May 2020 Update. With [these changes](/windows/whats-new/whats-new-windows-10-version-2004#cortana), some previously available consumer skills such as music, connected home, and other non-Microsoft skills are no longer available. | 2004 | | Windows To Go | Windows To Go was announced as deprecated in Windows 10, version 1903 and is removed in this release. | 2004 | | Mobile Plans and Messaging apps | Both apps are still supported, but are now distributed in a different way. OEMs can now include these apps in Windows images for cellular enabled devices. The apps are removed for non-cellular devices.| 2004 | -| PNRP APIs| ​The Peer Name Resolution Protocol (PNRP) cloud service was removed in Windows 10, version 1809. We are planning to complete the removal process by removing the corresponding APIs. | 1909 | +| PNRP APIs| ​The Peer Name Resolution Protocol (PNRP) cloud service was removed in Windows 10, version 1809. We're planning to complete the removal process by removing the corresponding APIs. | 1909 | | Taskbar settings roaming | Roaming of taskbar settings is removed in this release. This feature was announced as no longer being developed in Windows 10, version 1903. | 1909 | -| Desktop messaging app doesn't offer messages sync | The messaging app on Desktop has a sync feature that can be used to sync SMS text messages received from Windows Mobile and keep a copy of them on the Desktop. The sync feature has been removed from all devices. Due to this change, you will only be able to access messages from the device that received the message. | 1903 | +| Desktop messaging app doesn't offer messages sync | The messaging app on Desktop has a sync feature that can be used to sync SMS text messages received from Windows Mobile and keep a copy of them on the Desktop. The sync feature has been removed from all devices. Due to this change, you'll only be able to access messages from the device that received the message. | 1903 | |Business Scanning, also called Distributed Scan Management (DSM)|We're removing this secure scanning and scanner management capability - there are no devices that support this feature.| 1809 | -|[FontSmoothing setting](/windows-hardware/customize/desktop/unattend/microsoft-windows-shell-setup-visualeffects-fontsmoothing) in unattend.xml|The FontSmoothing setting let you specify the font antialiasing strategy to use across the system. We've changed Windows 10 to use [ClearType](/typography/cleartype/) by default, so we're removing this setting as it is no longer necessary. If you include this setting in the unattend.xml file, it'll be ignored.| 1809 | +|[FontSmoothing setting](/windows-hardware/customize/desktop/unattend/microsoft-windows-shell-setup-visualeffects-fontsmoothing) in unattend.xml|The FontSmoothing setting lets you specify the font antialiasing strategy to use across the system. We've changed Windows 10 to use [ClearType](/typography/cleartype/) by default, so we're removing this setting as it is no longer necessary. If you include this setting in the unattend.xml file, it will be ignored.| 1809 | |Hologram app|We've replaced the Hologram app with the [Mixed Reality Viewer](https://support.microsoft.com/help/4041156/windows-10-mixed-reality-help). If you would like to create 3D word art, you can still do that in Paint 3D and view your art in VR or HoloLens with the Mixed Reality Viewer.| 1809 | |limpet.exe|We're releasing the limpet.exe tool, used to access TPM for Azure connectivity, as open source.| 1809 | |Phone Companion|When you update to Windows 10, version 1809, the Phone Companion app will be removed from your PC. Use the **Phone** page in the Settings app to sync your mobile phone with your PC. It includes all the Phone Companion features.| 1809 | @@ -48,7 +56,7 @@ The following features and functionalities have been removed from the installed |Groove Music Pass|[We ended the Groove streaming music service and music track sales through the Microsoft Store in 2017](https://support.microsoft.com/help/4046109/groove-music-and-spotify-faq). The Groove app is being updated to reflect this change. You can still use Groove Music to play the music on your PC. You can use Spotify or other music services to stream music on Windows 10, or to buy music to own.| 1803 | |People - Suggestions will no longer include unsaved contacts for non-Microsoft accounts|Manually save the contact details for people you send mail to or get mail from.| 1803 | |Language control in the Control Panel| Use the Settings app to change your language settings.| 1803 | -|HomeGroup|We are removing [HomeGroup](https://support.microsoft.com/help/17145) but not your ability to share printers, files, and folders.

When you update to Windows 10, version 1803, you won't see HomeGroup in File Explorer, the Control Panel, or Troubleshoot (**Settings > Update & Security > Troubleshoot**). Any printers, files, and folders that you shared using HomeGroup **will continue to be shared**.

Instead of using HomeGroup, you can now share printers, files and folders by using features that are built into Windows 10:
- [Share your network printer](https://www.bing.com/search?q=share+printer+windows+10)
- [Share files in File Explorer](https://support.microsoft.com/help/4027674/windows-10-share-files-in-file-explorer) | 1803 | +|HomeGroup|We're removing [HomeGroup](https://support.microsoft.com/help/17145) but not your ability to share printers, files, and folders.

When you update to Windows 10, version 1803, you won't see HomeGroup in File Explorer, the Control Panel, or Troubleshoot (**Settings > Update & Security > Troubleshoot**). Any printers, files, and folders that you shared using HomeGroup **will continue to be shared**.

Instead of using HomeGroup, you can now share printers, files and folders by using features that are built into Windows 10:
- [Share your network printer](https://www.bing.com/search?q=share+printer+windows+10)
- [Share files in File Explorer](https://support.microsoft.com/help/4027674/windows-10-share-files-in-file-explorer) | 1803 | |**Connect to suggested open hotspots** option in Wi-Fi settings |We previously [disabled the **Connect to suggested open hotspots** option](https://privacy.microsoft.com/windows-10-open-wi-fi-hotspots) and are now removing it from the Wi-Fi settings page. You can manually connect to free wireless hotspots with **Network & Internet** settings, from the taskbar or Control Panel, or by using Wi-Fi Settings (for mobile devices).| 1803 | |XPS Viewer|We're changing the way you get XPS Viewer. In Windows 10, version 1709 and earlier versions, the app is included in the installation image. If you have XPS Viewer and you update to Windows 10, version 1803, there's no action required. You'll still have XPS Viewer.

However, if you install Windows 10, version 1803, on a new device (or as a clean installation), you may need to [install XPS Viewer from **Apps and Features** in the Settings app](/windows/application-management/add-apps-and-features) or through [Features on Demand](/windows-hardware/manufacture/desktop/features-on-demand-v2--capabilities). If you had XPS Viewer in Windows 10, version 1709, but manually removed it before updating, you'll need to manually reinstall it.| 1803 | |3D Builder app | No longer installed by default. Consider using Print 3D and Paint 3D in its place. However, 3D Builder is still available for download from the Windows Store.| 1709 | @@ -62,9 +70,9 @@ The following features and functionalities have been removed from the installed |TCP Offload Engine | Removing this legacy code. This functionality was previously transitioned to the Stack TCP Engine. For more information, see [Why Are We Deprecating Network Performance Features?](https://blogs.technet.microsoft.com/askpfeplat/2017/06/13/why-are-we-deprecating-network-performance-features-kb4014193)| 1709 | |Tile Data Layer |To be replaced by the Tile Store.| 1709 | |Resilient File System (ReFS) (added: August 17, 2017)| Creation ability will be available in the following editions only: Windows 10 Enterprise and Windows 10 Pro for Workstations. Creation ability will be removed from all other editions. All other editions will have Read and Write ability. | 1709 | -|By default, Flash autorun in Edge is turned off. | Use the Click-to-Run (C2R) option instead. (This setting can be changed by the user.) | 1703 | +|By default, Flash autorun in Microsoft Edge is turned off. | Use the Click-to-Run (C2R) option instead. (This setting can be changed by the user.) | 1703 | |Interactive Service Detection Service| See [Interactive Services](/windows/win32/services/interactive-services) for guidance on how to keep software up to date. | 1703 | -|Microsoft Paint | This application will not be available for languages that are not on the [full localization list](https://www.microsoft.com/windows/windows-10-specifications#Windows-10-localization). | 1703 | +|Microsoft Paint | This application won't be available for languages that aren't on the [full localization list](https://www.microsoft.com/windows/windows-10-specifications#Windows-10-localization). | 1703 | |NPN support in TLS | This feature is superseded by Application-Layer Protocol Negotiation (ALPN). | 1703 | |Windows Information Protection "AllowUserDecryption" policy | Starting in Windows 10, version 1703, AllowUserDecryption is no longer supported. | 1703 | |WSUS for Windows Mobile | Updates are being transitioned to the new Unified Update Platform (UUP) | 1703 | From 74d760d677ec93b0b27185819de16ba95979d635 Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Fri, 15 Jul 2022 15:18:13 -0700 Subject: [PATCH 02/24] add wip deprecation notice --- ...reate-and-verify-an-efs-dra-certificate.md | 26 ++-- .../create-wip-policy-using-configmgr.md | 133 +++++++++--------- .../create-wip-policy-using-intune-azure.md | 105 +++++++------- .../includes/wip-deprecation.md | 12 ++ .../protect-enterprise-data-using-wip.md | 74 +++++----- 5 files changed, 182 insertions(+), 168 deletions(-) create mode 100644 windows/security/information-protection/windows-information-protection/includes/wip-deprecation.md diff --git a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md index 3f1a5747a9..3f7ab6e65e 100644 --- a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md +++ b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md @@ -1,22 +1,26 @@ --- -title: Make & verify an EFS Data Recovery Agent certificate (Windows 10) +title: Create an EFS Data Recovery Agent certificate description: Follow these steps to create, verify, and perform a quick recovery by using a Encrypting File System (EFS) Data Recovery Agent (DRA) certificate. ms.prod: m365-security ms.localizationpriority: medium -author: dansimp -ms.author: dansimp -manager: dansimp +author: aczechowski +ms.author: aaroncz +manager: dougeby +ms.reviewer: rafals ms.collection: M365-security-compliance -ms.topic: conceptual -ms.date: 03/05/2019 -ms.reviewer: +ms.topic: how-to +ms.date: 07/15/2022 --- # Create and verify an Encrypting File System (EFS) Data Recovery Agent (DRA) certificate -**Applies to:** +[!INCLUDE [Deprecate Windows Information Protection](includes/wip-deprecation.md)] + -- Windows 10, version 1607 and later +_Applies to:_ + +- Windows 10 +- Windows 11 If you don't already have an EFS DRA certificate, you'll need to create and extract one from your system before you can use Windows Information Protection (WIP), formerly known as enterprise data protection (EDP), in your organization. For the purposes of this section, we'll use the file name EFSDRA; however, this name can be replaced with anything that makes sense to you. @@ -159,7 +163,3 @@ After signing in, the necessary WIP key info is automatically downloaded and emp - [Create a Windows Information Protection (WIP) policy using Microsoft Endpoint Configuration Manager](create-wip-policy-using-configmgr.md) - [Creating a Domain-Based Recovery Agent](/previous-versions/tn-archive/cc875821(v=technet.10)#EJAA) - - ->[!Note] ->Help to make this topic better by providing us with edits, additions, and feedback. For info about how to contribute to this topic, see [Contributing to this article](https://github.com/Microsoft/windows-itpro-docs/blob/master/CONTRIBUTING.md). diff --git a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-configmgr.md b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-configmgr.md index 0c4214d344..3994f27238 100644 --- a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-configmgr.md +++ b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-configmgr.md @@ -1,24 +1,28 @@ --- -title: Create and deploy a Windows Information Protection (WIP) policy using Microsoft Endpoint Manager (Windows 10) -description: Use Configuration Manager to make & deploy a Windows Information Protection (WIP) policy. Choose protected apps, WIP-protection level, and find enterprise data. -ms.reviewer: +title: Create and deploy a WIP policy in Configuration Manager +description: Use Microsoft Endpoint Configuration Manager to create and deploy a Windows Information Protection (WIP) policy. Choose protected apps, WIP-protection level, and find enterprise data. ms.prod: m365-security ms.localizationpriority: medium -author: dansimp -ms.author: dansimp -manager: dansimp +author: aczechowski +ms.author: aaroncz +manager: dougeby +ms.reviewer: rafals ms.collection: M365-security-compliance -ms.topic: conceptual -ms.date: 01/09/2020 +ms.topic: how-to +ms.date: 07/15/2022 --- -# Create and deploy a Windows Information Protection (WIP) policy using Microsoft Endpoint Configuration Manager -**Applies to:** +# Create and deploy a Windows Information Protection policy in Configuration Manager -- Windows 10, version 1607 and later -- Microsoft Endpoint Configuration Manager +[!INCLUDE [Deprecate Windows Information Protection](includes/wip-deprecation.md)] + -Configuration Manager helps you create and deploy your Windows Information Protection (WIP) policy, including letting you choose your protected apps, your WIP-protection mode, and how to find enterprise data on the network. +_Applies to:_ + +- Windows 10 +- Windows 11 + +Microsoft Endpoint Configuration Manager helps you create and deploy your Windows Information Protection (WIP) policy. You can choose your protected apps, your WIP-protection mode, and how to find enterprise data on the network. ## Add a WIP policy After you've installed and set up Configuration Manager for your organization, you must create a configuration item for WIP, which in turn becomes your WIP policy. @@ -28,18 +32,18 @@ After you've installed and set up Configuration Manager for your organization, y **To create a configuration item for WIP** -1. Open the Configuration Manager console, click the **Assets and Compliance** node, expand the **Overview** node, expand the **Compliance Settings** node, and then expand the **Configuration Items** node. +1. Open the Configuration Manager console, select the **Assets and Compliance** node, expand the **Overview** node, expand the **Compliance Settings** node, and then expand the **Configuration Items** node. ![Configuration Manager, Configuration Items screen.](images/wip-configmgr-addpolicy.png) -2. Click the **Create Configuration Item** button.

+2. Select the **Create Configuration Item** button.

The **Create Configuration Item Wizard** starts. ![Create Configuration Item wizard, define the configuration item and choose the configuration type.](images/wip-configmgr-generalscreen.png) 3. On the **General Information screen**, type a name (required) and an optional description for your policy into the **Name** and **Description** boxes. -4. In the **Specify the type of configuration item you want to create** area, pick the option that represents whether you use Configuration Manager for device management, and then click **Next**. +4. In the **Specify the type of configuration item you want to create** area, pick the option that represents whether you use Configuration Manager for device management, and then select **Next**. - **Settings for devices managed with the Configuration Manager client:** Windows 10 @@ -47,11 +51,11 @@ The **Create Configuration Item Wizard** starts. - **Settings for devices managed without the Configuration Manager client:** Windows 8.1 and Windows 10 -5. On the **Supported Platforms** screen, click the **Windows 10** box, and then click **Next**. +5. On the **Supported Platforms** screen, select the **Windows 10** box, and then select **Next**. ![Create Configuration Item wizard, choose the supported platforms for the policy.](images/wip-configmgr-supportedplat.png) -6. On the **Device Settings** screen, click **Windows Information Protection**, and then click **Next**. +6. On the **Device Settings** screen, select **Windows Information Protection**, and then select **Next**. ![Create Configuration Item wizard, choose the Windows Information Protection settings.](images/wip-configmgr-devicesettings.png) @@ -71,7 +75,7 @@ For this example, we're going to add Microsoft OneNote, a store app, to the **Ap **To add a store app** -1. From the **App rules** area, click **Add**. +1. From the **App rules** area, select **Add**. The **Add app rule** box appears. @@ -79,7 +83,7 @@ For this example, we're going to add Microsoft OneNote, a store app, to the **Ap 2. Add a friendly name for your app into the **Title** box. In this example, it's *Microsoft OneNote*. -3. Click **Allow** from the **Windows Information Protection mode** drop-down list. +3. Select **Allow** from the **Windows Information Protection mode** drop-down list. Allow turns on WIP, helping to protect that app's corporate data through the enforcement of WIP restrictions. If you want to exempt an app, you can follow the steps in the [Exempt apps from WIP restrictions](#exempt-apps-from-wip-restrictions) section. @@ -87,7 +91,7 @@ For this example, we're going to add Microsoft OneNote, a store app, to the **Ap The box changes to show the store app rule options. -5. Type the name of the app and the name of its publisher, and then click **OK**. For this UWP app example, the **Publisher** is `CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US` and the **Product name** is `Microsoft.Office.OneNote`. +5. Type the name of the app and the name of its publisher, and then select **OK**. For this UWP app example, the **Publisher** is `CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US` and the **Product name** is `Microsoft.Office.OneNote`. If you don't know the publisher or product name, you can find them for both desktop devices by following these steps. @@ -131,7 +135,7 @@ For this example, we're going to add Internet Explorer, a desktop app, to the ** **To add a desktop app to your policy** -1. From the **App rules** area, click **Add**. +1. From the **App rules** area, select **Add**. The **Add app rule** box appears. @@ -139,7 +143,7 @@ For this example, we're going to add Internet Explorer, a desktop app, to the ** 2. Add a friendly name for your app into the **Title** box. In this example, it's *Internet Explorer*. -3. Click **Allow** from the **Windows Information Protection mode** drop-down list. +3. Select **Allow** from the **Windows Information Protection mode** drop-down list. Allow turns on WIP, helping to protect that app's corporate data through the enforcement of WIP restrictions. If you want to exempt an app, you can follow the steps in the [Exempt apps from WIP restrictions](#exempt-apps-from-wip-restrictions) section. @@ -147,15 +151,15 @@ For this example, we're going to add Internet Explorer, a desktop app, to the ** The box changes to show the desktop app rule options. -5. Pick the options you want to include for the app rule (see table), and then click **OK**. +5. Pick the options you want to include for the app rule (see table), and then select **OK**. |Option|Manages| |--- |--- | |All fields left as "*"|All files signed by any publisher. (Not recommended.)| - |**Publisher** selected|All files signed by the named publisher.This might be useful if your company is the publisher and signer of internal line-of-business apps.| + |**Publisher** selected|All files signed by the named publisher. This might be useful if your company is the publisher and signer of internal line-of-business apps.| |**Publisher** and **Product Name** selected|All files for the specified product, signed by the named publisher.| |**Publisher**, **Product Name**, and **Binary name** selected|Any version of the named file or package for the specified product, signed by the named publisher.| - |**Publisher**, **Product Name**, **Binary name**, and **File Version, and above**, selected|Specified version or newer releases of the named file or package for the specified product, signed by the named publisher.This option is recommended for enlightened apps that weren't previously enlightened.| + |**Publisher**, **Product Name**, **Binary name**, and **File Version, and above**, selected|Specified version or newer releases of the named file or package for the specified product, signed by the named publisher. This option is recommended for enlightened apps that weren't previously enlightened.| |**Publisher**, **Product Name**, **Binary name**, and **File Version, And below** selected|Specified version or older releases of the named file or package for the specified product, signed by the named publisher.| |**Publisher**, **Product Name**, **Binary name**, and **File Version, Exactly** selected|Specified version of the named file or package for the specified product, signed by the named publisher.| @@ -185,31 +189,31 @@ For this example, we're going to add an AppLocker XML file to the **App Rules** 1. Open the Local Security Policy snap-in (SecPol.msc). -2. In the left pane, expand **Application Control Policies**, expand **AppLocker**, and then click **Packaged App Rules**. +2. In the left pane, expand **Application Control Policies**, expand **AppLocker**, and then select **Packaged App Rules**. ![Local security snap-in, showing the Packaged app Rules.](images/intune-local-security-snapin.png) -3. Right-click in the right-hand pane, and then click **Create New Rule**. +3. Right-click in the right-hand pane, and then select **Create New Rule**. The **Create Packaged app Rules** wizard appears. -4. On the **Before You Begin** page, click **Next**. +4. On the **Before You Begin** page, select **Next**. ![Create a Packaged app Rules wizard and showing the Before You Begin page.](images/intune-applocker-before-begin.png) -5. On the **Permissions** page, make sure the **Action** is set to **Allow** and the **User or group** is set to **Everyone**, and then click **Next**. +5. On the **Permissions** page, make sure the **Action** is set to **Allow** and the **User or group** is set to **Everyone**, and then select **Next**. ![Create Packaged app Rules wizard, set action to Allow.](images/intune-applocker-permissions.png) -6. On the **Publisher** page, click **Select** from the **Use an installed packaged app as a reference** area. +6. On the **Publisher** page, select **Select** from the **Use an installed packaged app as a reference** area. ![Create Packaged app Rules wizard, select use an installed packaged app.](images/intune-applocker-publisher.png) -7. In the **Select applications** box, pick the app that you want to use as the reference for your rule, and then click **OK**. For this example, we're using Microsoft Photos. +7. In the **Select applications** box, pick the app that you want to use as the reference for your rule, and then select **OK**. For this example, we're using Microsoft Photos. ![Create Packaged app Rules wizard, select application and click ok.](images/intune-applocker-select-apps.png) -8. On the updated **Publisher** page, click **Create**. +8. On the updated **Publisher** page, select **Create**. ![Create Packaged app Rules wizard, showing the Microsoft Photos on the Publisher page.](images/intune-applocker-publisher-with-app.png) @@ -217,15 +221,15 @@ For this example, we're going to add an AppLocker XML file to the **App Rules** ![Local security snap-in, showing the new rule.](images/intune-local-security-snapin-updated.png) -10. In the left pane, right-click on **AppLocker**, and then click **Export policy**. +10. In the left pane, right-click on **AppLocker**, and then select **Export policy**. The **Export policy** box opens, letting you export and save your new policy as XML. ![Local security snap-in, showing the Export Policy option.](images/intune-local-security-export.png) -11. In the **Export policy** box, browse to where the policy should be stored, give the policy a name, and then click **Save**. +11. In the **Export policy** box, browse to where the policy should be stored, give the policy a name, and then select **Save**. - The policy is saved and you'll see a message that says 1 rule was exported from the policy. + The policy is saved and you'll see a message that says one rule was exported from the policy. **Example XML file**
This is the XML file that AppLocker creates for Microsoft Photos. @@ -251,7 +255,7 @@ For this example, we're going to add an AppLocker XML file to the **App Rules** **To import your Applocker policy file app rule using Configuration Manager** -1. From the **App rules** area, click **Add**. +1. From the **App rules** area, select **Add**. The **Add app rule** box appears. @@ -259,7 +263,7 @@ For this example, we're going to add an AppLocker XML file to the **App Rules** 2. Add a friendly name for your app into the **Title** box. In this example, it's *Allowed app list*. -3. Click **Allow** from the **Windows Information Protection mode** drop-down list. +3. Select **Allow** from the **Windows Information Protection mode** drop-down list. Allow turns on WIP, helping to protect that app's corporate data through the enforcement of WIP restrictions. If you want to exempt an app, you can follow the steps in the [Exempt apps from WIP restrictions](#exempt-apps-from-wip-restrictions) section. @@ -267,7 +271,7 @@ For this example, we're going to add an AppLocker XML file to the **App Rules** The box changes to let you import your AppLocker XML policy file. -5. Click the ellipsis (...) to browse for your AppLocker XML file, click **Open**, and then click **OK** to close the **Add app rule** box. +5. Select the ellipsis (...) to browse for your AppLocker XML file, select **Open**, and then select **OK** to close the **Add app rule** box. The file is imported and the apps are added to your **App Rules** list. @@ -276,25 +280,25 @@ If you're running into compatibility issues where your app is incompatible with **To exempt a store app, a desktop app, or an AppLocker policy file app rule** -1. From the **App rules** area, click **Add**. +1. From the **App rules** area, select **Add**. The **Add app rule** box appears. 2. Add a friendly name for your app into the **Title** box. In this example, it's *Exempt apps list*. -3. Click **Exempt** from the **Windows Information Protection mode** drop-down list. +3. Select **Exempt** from the **Windows Information Protection mode** drop-down list. - Be aware that when you exempt apps, they're allowed to bypass the WIP restrictions and access your corporate data. To allow apps, see [Add app rules to your policy](#add-app-rules-to-your-policy) in this article. + When you exempt apps, they're allowed to bypass the WIP restrictions and access your corporate data. To allow apps, see [Add app rules to your policy](#add-app-rules-to-your-policy) in this article. 4. Fill out the rest of the app rule info, based on the type of rule you're adding: - - **Store app.** Follow the **Publisher** and **Product name** instructions in the [Add a store app rule to your policy](#add-a-store-app-rule-to-your-policy) section of this topic. + - **Store app.** Follow the **Publisher** and **Product name** instructions in the [Add a store app rule to your policy](#add-a-store-app-rule-to-your-policy) section of this article. - - **Desktop app.** Follow the **Publisher**, **Product name**, **Binary name**, and **Version** instructions in the [Add a desktop app rule to your policy](#add-a-desktop-app-rule-to-your-policy) section of this topic. + - **Desktop app.** Follow the **Publisher**, **Product name**, **Binary name**, and **Version** instructions in the [Add a desktop app rule to your policy](#add-a-desktop-app-rule-to-your-policy) section of this article. - - **AppLocker policy file.** Follow the **Import** instructions in the [Add an AppLocker policy file](#add-an-applocker-policy-file) section of this topic, using a list of exempted apps. + - **AppLocker policy file.** Follow the **Import** instructions in the [Add an AppLocker policy file](#add-an-applocker-policy-file) section of this article, using a list of exempted apps. -5. Click **OK**. +5. Select **OK**. ## Manage the WIP-protection level for your enterprise data After you've added the apps you want to protect with WIP, you'll need to apply a management and protection mode. @@ -308,15 +312,15 @@ We recommend that you start with **Silent** or **Override** while verifying with |-----|------------| |Block |WIP looks for inappropriate data sharing practices and stops the employee from completing the action. This can include sharing info across non-enterprise-protected apps in addition to sharing enterprise data between other people and devices outside of your enterprise.| |Override |WIP looks for inappropriate data sharing, warning employees if they do something deemed potentially unsafe. However, this management mode lets the employee override the policy and share the data, logging the action to your audit log. | -|Silent |WIP runs silently, logging inappropriate data sharing, without blocking anything that would've been prompted for employee interaction while in Override mode. Unallowed actions, like apps inappropriately trying to access a network resource or WIP-protected data, are still blocked.| -|Off (not recommended) |WIP is turned off and doesn't help to protect or audit your data.

After you turn off WIP, an attempt is made to decrypt any WIP-tagged files on the locally attached drives. Be aware that your previous decryption and policy info isn't automatically reapplied if you turn WIP protection back on.| +|Silent |WIP runs silently, logging inappropriate data sharing, without blocking anything that would have been prompted for employee interaction while in Override mode. Unallowed actions, like apps inappropriately trying to access a network resource or WIP-protected data, are still blocked.| +|Off |WIP is turned off and doesn't help to protect or audit your data.

After you turn off WIP, an attempt is made to decrypt any WIP-tagged files on the locally attached drives. Your previous decryption and policy info isn't automatically reapplied if you turn WIP protection back on. For more information, see [How to disable Windows Information Protection](https://aka.ms/disablewip).| :::image type="content" alt-text="Create Configuration Item wizard, choose your WIP-protection level" source="images/wip-configmgr-appmgmt.png"::: ## Define your enterprise-managed identity domains Corporate identity, usually expressed as your primary internet domain (for example, contoso.com), helps to identify and tag your corporate data from apps you've marked as protected by WIP. For example, emails using contoso.com are identified as being corporate and are restricted by your Windows Information Protection policies. -You can specify multiple domains owned by your enterprise by separating them with the "|" character. For example, (contoso.com|newcontoso.com). With multiple domains, the first one is designated as your corporate identity and all of the additional ones as being owned by the first one. We strongly recommend that you include all of your email address domains in this list. +You can specify multiple domains owned by your enterprise by separating them with the `|` character. For example, `contoso.com|newcontoso.com`. With multiple domains, the first one is designated as your corporate identity and all of the additional ones as being owned by the first one. We strongly recommend that you include all of your email address domains in this list. **To add your corporate identity** @@ -333,7 +337,7 @@ There are no default locations included with WIP, you must add each of your netw >Every WIP policy should include policy that defines your enterprise network locations.
>Classless Inter-Domain Routing (CIDR) notation isn't supported for WIP configurations. -**To define where your protected apps can find and send enterprise data on you network** +**To define where your protected apps can find and send enterprise data on your network** 1. Add additional network locations your apps can access by clicking **Add**. @@ -345,7 +349,7 @@ There are no default locations included with WIP, you must add each of your netw - **Enterprise Cloud Resources**: Specify the cloud resources to be treated as corporate and protected by WIP. - For each cloud resource, you may also optionally specify a proxy server from your Internal proxy servers list to route traffic for this cloud resource. Be aware that all traffic routed through your Internal proxy servers is considered enterprise. + For each cloud resource, you may also optionally specify a proxy server from your internal proxy servers list to route traffic for this cloud resource. All traffic routed through your internal proxy servers is considered enterprise. If you have multiple resources, you must separate them using the `|` delimiter. If you don't use proxy servers, you must also include the `,` delimiter just before the `|`. For example: URL `<,proxy>|URL <,proxy>`. @@ -358,7 +362,7 @@ There are no default locations included with WIP, you must add each of your netw >[!Important] > In some cases, such as when an app connects directly to a cloud resource through an IP address, Windows can't tell whether it's attempting to connect to an enterprise cloud resource or to a personal site. In this case, Windows blocks the connection by default. To stop Windows from automatically blocking these connections, you can add the /*AppCompat*/ string to the setting. For example: URL <,proxy>|URL <,proxy>|/*AppCompat*/. - - **Enterprise Network Domain Names (Required)**: Specify the DNS suffixes used in your environment. All traffic to the fully-qualified domains appearing in this list will be protected. + - **Enterprise Network Domain Names (Required)**: Specify the DNS suffixes used in your environment. All traffic to the fully qualified domains appearing in this list will be protected. This setting works with the IP ranges settings to detect whether a network endpoint is enterprise or personal on private networks. @@ -408,7 +412,7 @@ There are no default locations included with WIP, you must add each of your netw **Format examples**: `sts.contoso.com,sts.contoso2.com` -3. Add as many locations as you need, and then click **OK**. +3. Add as many locations as you need, and then select **OK**. The **Add or edit corporate network definition** box closes. @@ -416,13 +420,13 @@ There are no default locations included with WIP, you must add each of your netw :::image type="content" alt-text="Create Configuration Item wizard, Add whether to search for additional network settings" source="images/wip-configmgr-optsettings.png"::: - - **Enterprise Proxy Servers list is authoritative (do not auto-detect).** Click this box if you want Windows to treat the proxy servers you specified in the network boundary definition as the complete list of proxy servers available on your network. If you clear this box, Windows will search for additional proxy servers in your immediate network. Not configured is the default option. + - **Enterprise Proxy Servers list is authoritative (do not auto-detect).** Select this box if you want Windows to treat the proxy servers you specified in the network boundary definition as the complete list of proxy servers available on your network. If you clear this box, Windows will search for additional proxy servers in your immediate network. Not configured is the default option. - - **Enterprise IP Ranges list is authoritative (do not auto-detect).** Click this box if you want Windows to treat the IP ranges you specified in the network boundary definition as the complete list of IP ranges available on your network. If you clear this box, Windows will search for additional IP ranges on any domain-joined devices connected to your network. Not configured is the default option. + - **Enterprise IP Ranges list is authoritative (do not auto-detect).** Select this box if you want Windows to treat the IP ranges you specified in the network boundary definition as the complete list of IP ranges available on your network. If you clear this box, Windows will search for additional IP ranges on any domain-joined devices connected to your network. Not configured is the default option. - - **Show the Windows Information Protection icon overlay on your allowed apps that are WIP-unaware on corporate files in the File Explorer.** Click this box if you want the Windows Information Protection icon overlay to appear on corporate files in the Save As and File Explorer views. Additionally, for unenlightened but allowed apps, the icon overlay also appears on the app tile and with *Managed* text on the app name in the **Start** menu. Not configured is the default option. + - **Show the Windows Information Protection icon overlay on your allowed apps that are WIP-unaware on corporate files in the File Explorer.** Select this box if you want the Windows Information Protection icon overlay to appear on corporate files in the Save As and File Explorer views. Additionally, for unenlightened but allowed apps, the icon overlay also appears on the app tile and with *Managed* text on the app name in the **Start** menu. Not configured is the default option. -5. In the required **Upload a Data Recovery Agent (DRA) certificate to allow recovery of encrypted data** box, click **Browse** to add a data recovery certificate for your policy. +5. In the required **Upload a Data Recovery Agent (DRA) certificate to allow recovery of encrypted data** box, select **Browse** to add a data recovery certificate for your policy. ![Create Configuration Item wizard, Add a data recovery agent (DRA) certificate.](images/wip-configmgr-dra.png) @@ -452,27 +456,26 @@ After you've decided where your protected apps can access enterprise data on you - **Allow Azure RMS.** Enables secure sharing of files by using removable media such as USB drives. For more information about how RMS works with WIP, see [Create a WIP policy using Intune](create-wip-policy-using-intune-azure.md). To confirm what templates your tenant has, run [Get-AadrmTemplate](/powershell/module/aadrm/get-aadrmtemplate) from the [AADRM PowerShell module](/azure/information-protection/administer-powershell). If you don't specify a template, WIP uses a key from a default RMS template that everyone in the tenant will have access to. -2. After you pick all of the settings you want to include, click **Summary**. +2. After you pick all of the settings you want to include, select **Summary**. ## Review your configuration choices in the Summary screen After you've finished configuring your policy, you can review all of your info on the **Summary** screen. **To view the Summary screen** -- Click the **Summary** button to review your policy choices, and then click **Next** to finish and to save your policy. +- Select the **Summary** button to review your policy choices, and then select **Next** to finish and to save your policy. ![Create Configuration Item wizard, Summary screen for all of your policy choices.](images/wip-configmgr-summaryscreen.png) - A progress bar appears, showing you progress for your policy. After it's done, click **Close** to return to the **Configuration Items** page. + A progress bar appears, showing you progress for your policy. After it's done, select **Close** to return to the **Configuration Items** page. ## Deploy the WIP policy -After you've created your WIP policy, you'll need to deploy it to your organization's devices. For info about your deployment options, see these topics: -- [Operations and Maintenance for Compliance Settings in Configuration Manager](/previous-versions/system-center/system-center-2012-R2/gg699357(v=technet.10)) +After you've created your WIP policy, you'll need to deploy it to your organization's devices. For more information about your deployment options, see the following articles: -- [How to Create Configuration Baselines for Compliance Settings in Configuration Manager](/previous-versions/system-center/system-center-2012-R2/gg712268(v=technet.10)) +- [Create configuration baselines in Configuration Manager](/mem/configmgr/compliance/deploy-use/create-configuration-baselines) -- [How to Deploy Configuration Baselines in Configuration Manager](/previous-versions/system-center/system-center-2012-R2/hh219289(v=technet.10)) +- [How to deploy configuration baselines in Configuration Manager](/mem/configmgr/compliance/deploy-use/deploy-configuration-baselines) -## Related topics +## Related articles - [How to collect Windows Information Protection (WIP) audit event logs](collect-wip-audit-event-logs.md) diff --git a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md index 39ff0696bb..02e8a1c9d6 100644 --- a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md +++ b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md @@ -1,21 +1,25 @@ --- -title: Create a Windows Information Protection (WIP) policy with MDM using the Azure portal for Microsoft Intune (Windows 10) -description: Learn how to use the Azure portal for Microsoft Intune to create and deploy your Windows Information Protection (WIP) policy to protect data on your network. +title: Create a WIP policy in Intune +description: Learn how to use the Microsoft Endpoint Manager admin center to create and deploy your Windows Information Protection (WIP) policy to protect data on your network. ms.prod: m365-security -author: dansimp -ms.author: dansimp -manager: dansimp +author: aczechowski +ms.author: aaroncz +manager: dougeby +ms.reviewer: rafals ms.collection: M365-security-compliance -ms.topic: conceptual -ms.date: 05/13/2019 -ms.reviewer: +ms.topic: how-to +ms.date: 07/15/2022 --- -# Create a Windows Information Protection (WIP) policy using the Azure portal for Microsoft Intune +# Create a Windows Information Protection policy in Microsoft Intune -**Applies to:** +[!INCLUDE [Deprecate Windows Information Protection](includes/wip-deprecation.md)] + -- Windows 10, version 1607 and later +_Applies to:_ + +- Windows 10 +- Windows 11 Microsoft Intune has an easy way to create and deploy a Windows Information Protection (WIP) policy. You can choose which apps to protect, the level of protection, and how to find enterprise data on the network. The devices can be fully managed by Mobile Device Management (MDM), or managed by Mobile Application Management (MAM), where Intune manages only the apps on a user's personal device. @@ -118,7 +122,7 @@ If you don't know the Store app publisher or product name, you can find them by 4. Copy the `publisherCertificateName` value into the **Publisher** box and copy the `packageIdentityName` value into the **Name** box of Intune. >[!Important] - >The JSON file might also return a `windowsPhoneLegacyId` value for both the **Publisher Name** and **Product Name** boxes. This means that you have an app that’s using a XAP package and that you must set the **Product Name** as `windowsPhoneLegacyId`, and set the **Publisher Name** as `CN=` followed by the `windowsPhoneLegacyId`. + >The JSON file might also return a `windowsPhoneLegacyId` value for both the **Publisher Name** and **Product Name** boxes. This means that you have an app that's using a XAP package and that you must set the **Product Name** as `windowsPhoneLegacyId`, and set the **Publisher Name** as `CN=` followed by the `windowsPhoneLegacyId`. > > For example: > @@ -147,7 +151,7 @@ If you don't know the Store app publisher or product name, you can find them by 8. Copy the `publisherCertificateName` value and paste it into the **Publisher Name** box and the `packageIdentityName` value into the **Product Name** box of Intune. >[!Important] - >The JSON file might also return a `windowsPhoneLegacyId` value for both the **Publisher Name** and **Product Name** boxes. This means that you have an app that’s using a XAP package and that you must set the **Product Name** as `windowsPhoneLegacyId`, and set the **Publisher Name** as `CN=` followed by the `windowsPhoneLegacyId`. + >The JSON file might also return a `windowsPhoneLegacyId` value for both the **Publisher Name** and **Product Name** boxes. This means that you have an app that's using a XAP package and that you must set the **Product Name** as `windowsPhoneLegacyId`, and set the **Publisher Name** as `CN=` followed by the `windowsPhoneLegacyId`. > > For example: > @@ -164,19 +168,19 @@ To add **Desktop apps**, complete the following fields, based on what results yo |Field|Manages| |--- |--- | -|All fields marked as “*”|All files signed by any publisher. (Not recommended and may not work)| -|Publisher only|If you only fill out this field, you’ll get all files signed by the named publisher. This might be useful if your company is the publisher and signer of internal line-of-business apps.| -|Publisher and Name only|If you only fill out these fields, you’ll get all files for the specified product, signed by the named publisher.| -|Publisher, Name, and File only|If you only fill out these fields, you’ll get any version of the named file or package for the specified product, signed by the named publisher.| -|Publisher, Name, File, and Min version only|If you only fill out these fields, you’ll get the specified version or newer releases of the named file or package for the specified product, signed by the named publisher. This option is recommended for enlightened apps that weren't previously enlightened.| -|Publisher, Name, File, and Max version only|If you only fill out these fields, you’ll get the specified version or older releases of the named file or package for the specified product, signed by the named publisher.| -|All fields completed|If you fill out all fields, you’ll get the specified version of the named file or package for the specified product, signed by the named publisher.| +|All fields marked as `*`|All files signed by any publisher. (Not recommended and may not work)| +|Publisher only|If you only fill out this field, you'll get all files signed by the named publisher. This might be useful if your company is the publisher and signer of internal line-of-business apps.| +|Publisher and Name only|If you only fill out these fields, you'll get all files for the specified product, signed by the named publisher.| +|Publisher, Name, and File only|If you only fill out these fields, you'll get any version of the named file or package for the specified product, signed by the named publisher.| +|Publisher, Name, File, and Min version only|If you only fill out these fields, you'll get the specified version or newer releases of the named file or package for the specified product, signed by the named publisher. This option is recommended for enlightened apps that weren't previously enlightened.| +|Publisher, Name, File, and Max version only|If you only fill out these fields, you'll get the specified version or older releases of the named file or package for the specified product, signed by the named publisher.| +|All fields completed|If you fill out all fields, you'll get the specified version of the named file or package for the specified product, signed by the named publisher.| -To add another Desktop app, select the ellipsis **…**. After you’ve entered the info into the fields, select **OK**. +To add another Desktop app, select the ellipsis **…**. After you've entered the info into the fields, select **OK**. ![Microsoft Intune management console: Adding Desktop app info.](images/wip-azure-add-desktop-apps.png) -If you’re unsure about what to include for the publisher, you can run this PowerShell command: +If you're unsure about what to include for the publisher, you can run this PowerShell command: ```powershell Get-AppLockerFileInformation -Path "" @@ -202,7 +206,7 @@ Regarding to how to get the Product Name for the Apps you wish to Add, contact t ### Import a list of apps -This section covers two examples of using an AppLocker XML file to the **Protected apps** list. You’ll use this option if you want to add multiple apps at the same time. +This section covers two examples of using an AppLocker XML file to the **Protected apps** list. You'll use this option if you want to add multiple apps at the same time. - [Create a Packaged App rule for Store apps](#create-a-packaged-app-rule-for-store-apps) - [Create an Executable rule for unsigned apps](#create-an-executable-rule-for-unsigned-apps) @@ -233,7 +237,7 @@ For more info about AppLocker, see the [AppLocker](../../threat-protection/windo ![Screenshot of the "Use an installed package app as a reference" radio button selected and the Select button highlighted](images/wip-applocker-secpol-wizard-3.png) -7. In the **Select applications** box, pick the app that you want to use as the reference for your rule, and then select **OK**. For this example, we’re using Microsoft Dynamics 365. +7. In the **Select applications** box, pick the app that you want to use as the reference for your rule, and then select **OK**. For this example, we're using Microsoft Dynamics 365. ![Screenshot of the Select applications list.](images/wip-applocker-secpol-wizard-4.png) @@ -257,7 +261,7 @@ For more info about AppLocker, see the [AppLocker](../../threat-protection/windo 11. In the **Export policy** box, browse to where the policy should be stored, give the policy a name, and then select **Save**. - The policy is saved and you’ll see a message that says one rule was exported from the policy. + The policy is saved and you'll see a message that says one rule was exported from the policy. **Example XML file**
This is the XML file that AppLocker creates for Microsoft Dynamics 365. @@ -281,7 +285,7 @@ For more info about AppLocker, see the [AppLocker](../../threat-protection/windo ``` -12. After you’ve created your XML file, you need to import it by using Microsoft Intune. +12. After you've created your XML file, you need to import it by using Microsoft Intune. ## Create an Executable rule for unsigned apps @@ -303,7 +307,7 @@ The executable rule helps to create an AppLocker rule to sign any unsigned apps. ![Screenshot with Path conditions selected in the Create Executable Rules wizard.](images/path-condition.png) -7. Select **Browse Folders...** and select the path for the unsigned apps. For this example, we’re using "C:\Program Files". +7. Select **Browse Folders...** and select the path for the unsigned apps. For this example, we're using "C:\Program Files". ![Screenshot of the Path field of the Create Executable Rules wizard.](images/select-path.png) @@ -315,9 +319,9 @@ The executable rule helps to create an AppLocker rule to sign any unsigned apps. 11. In the **Export policy** box, browse to where the policy should be stored, give the policy a name, and then select **Save**. - The policy is saved and you’ll see a message that says one rule was exported from the policy. + The policy is saved and you'll see a message that says one rule was exported from the policy. -12. After you’ve created your XML file, you need to import it by using Microsoft Intune. +12. After you've created your XML file, you need to import it by using Microsoft Intune. **To import a list of protected apps using Microsoft Intune** @@ -343,9 +347,9 @@ If your app is incompatible with WIP, but still needs to be used with enterprise 2. In **Exempt apps**, select **Add apps**. - When you exempt apps, they’re allowed to bypass the WIP restrictions and access your corporate data. + When you exempt apps, they're allowed to bypass the WIP restrictions and access your corporate data. -3. Fill out the rest of the app info, based on the type of app you’re adding: +3. Fill out the rest of the app info, based on the type of app you're adding: - [Add Recommended apps](#add-recommended-apps) @@ -371,12 +375,12 @@ We recommend that you start with **Silent** or **Allow Overrides** while verifyi |Block |WIP looks for inappropriate data sharing practices and stops the employee from completing the action. This can include sharing info across non-enterprise-protected apps in addition to sharing enterprise data between other people and devices outside of your enterprise.| |Allow Overrides |WIP looks for inappropriate data sharing, warning employees if they do something deemed potentially unsafe. However, this management mode lets the employee override the policy and share the data, logging the action to your audit log. For info about how to collect your audit log files, see [How to collect Windows Information Protection (WIP) audit event logs](collect-wip-audit-event-logs.md).| |Silent |WIP runs silently, logging inappropriate data sharing, without blocking anything that would have been prompted for employee interaction while in Allow Override mode. Unallowed actions, like apps inappropriately trying to access a network resource or WIP-protected data, are still stopped.| - |Off (not recommended) |WIP is turned off and doesn't help to protect or audit your data.

After you turn off WIP, an attempt is made to decrypt any WIP-tagged files on the locally attached drives. Your previous decryption and policy info isn’t automatically reapplied if you turn WIP protection back on.| + |Off |WIP is turned off and doesn't help to protect or audit your data.

After you turn off WIP, an attempt is made to decrypt any WIP-tagged files on the locally attached drives. Your previous decryption and policy info isn't automatically reapplied if you turn WIP protection back on. For more information, see [How to disable Windows Information Protection](https://aka.ms/disablewip).| 2. Select **Save**. ## Define your enterprise-managed corporate identity -Corporate identity, typically expressed as your primary Internet domain (for example, contoso.com), helps to identify and tag your corporate data from apps you’ve marked as protected by WIP. For example, emails using contoso.com are identified as being corporate and are restricted by your Windows Information Protection policies. +Corporate identity, typically expressed as your primary Internet domain (for example, contoso.com), helps to identify and tag your corporate data from apps you've marked as protected by WIP. For example, emails using contoso.com are identified as being corporate and are restricted by your Windows Information Protection policies. Starting with Windows 10, version 1703, Intune automatically determines your corporate identity and adds it to the **Corporate identity** field. @@ -384,7 +388,7 @@ Starting with Windows 10, version 1703, Intune automatically determines your cor 1. From **App policy**, select the name of your policy, and then select **Required settings**. -2. If the auto-defined identity isn’t correct, you can change the info in the **Corporate identity** field. +2. If the auto-defined identity isn't correct, you can change the info in the **Corporate identity** field. ![Microsoft Intune, Set your corporate identity for your organization.](images/wip-azure-required-settings-corp-identity.png) @@ -395,7 +399,7 @@ Starting with Windows 10, version 1703, Intune automatically determines your cor ## Choose where apps can access enterprise data After you've added a protection mode to your apps, you'll need to decide where those apps can access enterprise data on your network. Every WIP policy should include your enterprise network locations. -There are no default locations included with WIP, you must add each of your network locations. This area applies to any network endpoint device that gets an IP address in your enterprise’s range and is also bound to one of your enterprise domains, including SMB shares. Local file system locations should just maintain encryption (for example, on local NTFS, FAT, ExFAT). +There are no default locations included with WIP, you must add each of your network locations. This area applies to any network endpoint device that gets an IP address in your enterprise's range and is also bound to one of your enterprise domains, including SMB shares. Local file system locations should just maintain encryption (for example, on local NTFS, FAT, ExFAT). To define the network boundaries, select **App policy** > the name of your policy > **Advanced settings** > **Add network boundary**. @@ -420,7 +424,7 @@ Personal applications can access a cloud resource that has a blank space or an i To add a subdomain for a cloud resource, use a period (.) instead of an asterisk (*). For example, to add all subdomains within Office.com, use ".office.com" (without the quotation marks). -In some cases, such as when an app connects directly to a cloud resource through an IP address, Windows can’t tell whether it’s attempting to connect to an enterprise cloud resource or to a personal site. +In some cases, such as when an app connects directly to a cloud resource through an IP address, Windows can't tell whether it's attempting to connect to an enterprise cloud resource or to a personal site. In this case, Windows blocks the connection by default. To stop Windows from automatically blocking these connections, you can add the `/*AppCompat*/` string to the setting. For example: @@ -466,9 +470,9 @@ corp.contoso.com,region.contoso.com ### Proxy servers Specify the proxy servers your devices will go through to reach your cloud resources. -Using this server type indicates that the cloud resources you’re connecting to are enterprise resources. +Using this server type indicates that the cloud resources you're connecting to are enterprise resources. -This list shouldn’t include any servers listed in your Internal proxy servers list. +This list shouldn't include any servers listed in your Internal proxy servers list. Proxy servers must be used only for non-WIP-protected (non-enterprise) traffic. Separate multiple resources with the ";" delimiter. @@ -478,9 +482,9 @@ proxy.contoso.com:80;proxy2.contoso.com:443 ### Internal proxy servers -Specify the internal proxy servers your devices will go through to reach your cloud resources. Using this server type indicates that the cloud resources you’re connecting to are enterprise resources. +Specify the internal proxy servers your devices will go through to reach your cloud resources. Using this server type indicates that the cloud resources you're connecting to are enterprise resources. -This list shouldn’t include any servers listed in your Proxy servers list. +This list shouldn't include any servers listed in your Proxy servers list. Internal proxy servers must be used only for WIP-protected (enterprise) traffic. Separate multiple resources with the ";" delimiter. @@ -492,7 +496,7 @@ contoso.internalproxy1.com;contoso.internalproxy2.com Specify the addresses for a valid IPv4 value range within your intranet. These addresses, used with your Network domain names, define your corporate network boundaries. -Classless Inter-Domain Routing (CIDR) notation isn’t supported. +Classless Inter-Domain Routing (CIDR) notation isn't supported. Separate multiple ranges with the "," delimiter. @@ -507,7 +511,7 @@ Starting with Windows 10, version 1703, this field is optional. Specify the addresses for a valid IPv6 value range within your intranet. These addresses, used with your network domain names, define your corporate network boundaries. -Classless Inter-Domain Routing (CIDR) notation isn’t supported. +Classless Inter-Domain Routing (CIDR) notation isn't supported. Separate multiple ranges with the "," delimiter. @@ -534,10 +538,10 @@ Decide if you want Windows to look for more network settings: ![Microsoft Intune, Choose if you want Windows to search for more proxy servers or IP ranges in your enterprise.](images/wip-azure-advanced-settings-network-autodetect.png) ## Upload your Data Recovery Agent (DRA) certificate -After you create and deploy your WIP policy to your employees, Windows begins to encrypt your corporate data on the employees’ local device drive. If somehow the employees’ local encryption keys get lost or revoked, the encrypted data can become unrecoverable. To help avoid this possibility, the Data Recovery Agent (DRA) certificate lets Windows use an included public key to encrypt the local data while you maintain the private key that can unencrypt the data. +After you create and deploy your WIP policy to your employees, Windows begins to encrypt your corporate data on the employees' local device drive. If somehow the employees' local encryption keys get lost or revoked, the encrypted data can become unrecoverable. To help avoid this possibility, the Data Recovery Agent (DRA) certificate lets Windows use an included public key to encrypt the local data while you maintain the private key that can unencrypt the data. >[!Important] ->Using a DRA certificate isn’t mandatory. However, we strongly recommend it. For more info about how to find and export your data recovery certificate, see [Data Recovery and Encrypting File System (EFS)](/previous-versions/tn-archive/cc512680(v=technet.10)). For more info about creating and verifying your EFS DRA certificate, see [Create and verify an Encrypting File System (EFS) Data Recovery Agent (DRA) certificate](/windows/threat-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate). +>Using a DRA certificate isn't mandatory. However, we strongly recommend it. For more info about how to find and export your data recovery certificate, see [Data Recovery and Encrypting File System (EFS)](/previous-versions/tn-archive/cc512680(v=technet.10)). For more info about creating and verifying your EFS DRA certificate, see [Create and verify an Encrypting File System (EFS) Data Recovery Agent (DRA) certificate](/windows/threat-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate). **To upload your DRA certificate** 1. From **App policy**, select the name of your policy, and then select **Advanced settings** from the menu that appears. @@ -553,11 +557,11 @@ After you've decided where your protected apps can access enterprise data on you ![Advanced optional settings.](images/wip-azure-advanced-settings-optional.png) -**Revoke encryption keys on unenroll.** Determines whether to revoke a user’s local encryption keys from a device when it’s unenrolled from Windows Information Protection. If the encryption keys are revoked, a user no longer has access to encrypted corporate data. The options are: +**Revoke encryption keys on unenroll.** Determines whether to revoke a user's local encryption keys from a device when it's unenrolled from Windows Information Protection. If the encryption keys are revoked, a user no longer has access to encrypted corporate data. The options are: - **On, or not configured (recommended).** Revokes local encryption keys from a device during unenrollment. -- **Off.** Stop local encryption keys from being revoked from a device during unenrollment. For example, if you’re migrating between Mobile Device Management (MDM) solutions. +- **Off.** Stop local encryption keys from being revoked from a device during unenrollment. For example, if you're migrating between Mobile Device Management (MDM) solutions. **Show the enterprise data protection icon.** Determines whether the Windows Information Protection icon overlay appears on corporate files in the Save As and File Explorer views. The options are: @@ -565,11 +569,11 @@ After you've decided where your protected apps can access enterprise data on you - **Off, or not configured (recommended).** Stops the Windows Information Protection icon overlay from appearing on corporate files or unenlightened, but protected apps. Not configured is the default option. -**Use Azure RMS for WIP.** Determines whether WIP uses [Microsoft Azure Rights Management](/azure/information-protection/what-is-azure-rms) to apply EFS encryption to files that are copied from Windows 10 to USB or other removable drives so they can be securely shared with employees. In other words, WIP uses Azure Rights Management "machinery" to apply EFS encryption to files when they're copied to removable drives. You must already have Azure Rights Management set up. The EFS file encryption key is protected by the RMS template’s license. Only users with permission to that template can read it from the removable drive. WIP can also integrate with Azure RMS by using the **AllowAzureRMSForEDP** and the **RMSTemplateIDForEDP** MDM settings in the [EnterpriseDataProtection CSP](/windows/client-management/mdm/enterprisedataprotection-csp). +**Use Azure RMS for WIP.** Determines whether WIP uses [Microsoft Azure Rights Management](/azure/information-protection/what-is-azure-rms) to apply EFS encryption to files that are copied from Windows 10 to USB or other removable drives so they can be securely shared with employees. In other words, WIP uses Azure Rights Management "machinery" to apply EFS encryption to files when they're copied to removable drives. You must already have Azure Rights Management set up. The EFS file encryption key is protected by the RMS template's license. Only users with permission to that template can read it from the removable drive. WIP can also integrate with Azure RMS by using the **AllowAzureRMSForEDP** and the **RMSTemplateIDForEDP** MDM settings in the [EnterpriseDataProtection CSP](/windows/client-management/mdm/enterprisedataprotection-csp). -- **On.** Protects files that are copied to a removable drive. You can enter a TemplateID GUID to specify who can access the Azure Rights Management protected files, and for how long. The RMS template is only applied to the files on removable media, and is only used for access control—it doesn’t actually apply Azure Information Protection to the files. +- **On.** Protects files that are copied to a removable drive. You can enter a TemplateID GUID to specify who can access the Azure Rights Management protected files, and for how long. The RMS template is only applied to the files on removable media, and is only used for access control—it doesn't actually apply Azure Information Protection to the files. - If you don’t specify an [RMS template](/information-protection/deploy-use/configure-custom-templates), it’s a regular EFS file using a default RMS template that all users can access. + If you don't specify an [RMS template](/information-protection/deploy-use/configure-custom-templates), it's a regular EFS file using a default RMS template that all users can access. - **Off, or not configured.** Stops WIP from encrypting Azure Rights Management files that are copied to a removable drive. @@ -601,6 +605,3 @@ You can restrict which files are protected by WIP when they're downloaded from a - [Intune MAM Without Enrollment](/archive/blogs/configmgrdogs/intune-mam-without-enrollment) - [Azure RMS Documentation Update for May 2016](https://blogs.technet.microsoft.com/enterprisemobility/2016/05/31/azure-rms-documentation-update-for-may-2016/) - -> [!NOTE] -> Help to make this topic better by providing us with edits, additions, and feedback. For info about how to contribute to this topic, see [Editing Windows IT professional documentation](https://github.com/Microsoft/windows-itpro-docs/blob/master/CONTRIBUTING.md). diff --git a/windows/security/information-protection/windows-information-protection/includes/wip-deprecation.md b/windows/security/information-protection/windows-information-protection/includes/wip-deprecation.md new file mode 100644 index 0000000000..915b808853 --- /dev/null +++ b/windows/security/information-protection/windows-information-protection/includes/wip-deprecation.md @@ -0,0 +1,12 @@ +--- +author: aczechowski +ms.author: aaroncz +ms.prod: windows +ms.topic: include +ms.date: 07/15/2022 +--- + +> [!NOTE] +> To streamline and improve your experience, starting in July 2022, Microsoft is deprecating Windows Information Protection and transitioning customers to [Microsoft Purview Information Protection](/microsoft-365/compliance/information-protection). Purview simplifies the configuration set-up and provides an advanced set of capabilities. +> +> Microsoft will continue to support Windows Information Protection on supported versions of Windows. New versions of Windows won't include new capabilities for Windows Information Protection, and it won't be supported in future versions of Windows. Start your migration to Microsoft Purview Information Protection. For more information, see [Microsoft Purview Information Protection and Data Loss Prevention for a modern data protection strategy](https://aka.ms/MigrateToMIP). diff --git a/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md b/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md index f5e201aa75..4845b6ea7d 100644 --- a/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md +++ b/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md @@ -1,26 +1,29 @@ --- -title: Protect your enterprise data using Windows Information Protection (WIP) (Windows 10) +title: Protect your enterprise data using Windows Information Protection description: Learn how to prevent accidental enterprise data leaks through apps and services, such as email, social media, and the public cloud. ms.prod: m365-security ms.localizationpriority: medium -author: dansimp -ms.author: dansimp -manager: dansimp +author: aczechowski +ms.author: aaroncz +manager: dougeby +ms.reviewer: rafals ms.collection: - M365-security-compliance - - highpri -ms.topic: conceptual -ms.date: 03/05/2019 +ms.topic: overview +ms.date: 07/15/2022 --- # Protect your enterprise data using Windows Information Protection (WIP) -**Applies to:** -- Windows 10, version 1607 and later +[!INCLUDE [Deprecate Windows Information Protection](includes/wip-deprecation.md)] + ->Learn more about what features and functionality are supported in each Windows edition at [Compare Windows 10 Editions](https://www.microsoft.com/WindowsForBusiness/Compare). +_Applies to:_ -With the increase of employee-owned devices in the enterprise, there’s also an increasing risk of accidental data leak through apps and services, like email, social media, and the public cloud, which are outside of the enterprise’s control. For example, when an employee sends the latest engineering pictures from their personal email account, copies and pastes product info into a tweet, or saves an in-progress sales report to their public cloud storage. +- Windows 10 +- Windows 11 + +With the increase of employee-owned devices in the enterprise, there's also an increasing risk of accidental data leak through apps and services, like email, social media, and the public cloud, which are outside of the enterprise's control. For example, when an employee sends the latest engineering pictures from their personal email account, copies and pastes product info into a tweet, or saves an in-progress sales report to their public cloud storage. Windows Information Protection (WIP), previously known as enterprise data protection (EDP), helps to protect against this potential data leakage without otherwise interfering with the employee experience. WIP also helps to protect enterprise apps and data against accidental data leak on enterprise-owned devices and personal devices that employees bring to work without requiring changes to your environment or other apps. Finally, another data protection technology, Azure Rights Management also works alongside WIP to extend data protection for data that leaves the device, such as when email attachments are sent from an enterprise aware version of a rights management mail client. @@ -32,18 +35,18 @@ Windows Information Protection (WIP), previously known as enterprise data protec > [!Video https://www.microsoft.com/videoplayer/embed/RE2IGhh] ## Prerequisites -You’ll need this software to run Windows Information Protection in your enterprise: +You'll need this software to run Windows Information Protection in your enterprise: |Operating system | Management solution | |-----------------|---------------------| -|Windows 10, version 1607 or later | Microsoft Intune

-OR-

Microsoft Endpoint Configuration Manager

-OR-

Your current company-wide 3rd party mobile device management (MDM) solution. For info about 3rd party MDM solutions, see the documentation that came with your product. If your 3rd party MDM does not have UI support for the policies, refer to the [EnterpriseDataProtection CSP](/windows/client-management/mdm/enterprisedataprotection-csp) documentation.| +|Windows 10, version 1607 or later | Microsoft Intune

-OR-

Microsoft Endpoint Configuration Manager

-OR-

Your current company-wide 3rd party mobile device management (MDM) solution. For info about 3rd party MDM solutions, see the documentation that came with your product. If your 3rd party MDM does not have UI support for the policies, refer to the [EnterpriseDataProtection CSP](/windows/client-management/mdm/enterprisedataprotection-csp) documentation.| ## What is enterprise data control? -Effective collaboration means that you need to share data with others in your enterprise. This sharing can be from one extreme where everyone has access to everything without any security, all the way to the other extreme where people can’t share anything and it’s all highly secured. Most enterprises fall somewhere in between the two extremes, where success is balanced between providing the necessary access with the potential for improper data disclosure. +Effective collaboration means that you need to share data with others in your enterprise. This sharing can be from one extreme where everyone has access to everything without any security, all the way to the other extreme where people can't share anything and it's all highly secured. Most enterprises fall somewhere in between the two extremes, where success is balanced between providing the necessary access with the potential for improper data disclosure. -As an admin, you can address the question of who gets access to your data by using access controls, such as employee credentials. However, just because someone has the right to access your data doesn’t guarantee that the data will remain within the secured locations of the enterprise. This means that while access controls are a great start, they’re not enough. +As an admin, you can address the question of who gets access to your data by using access controls, such as employee credentials. However, just because someone has the right to access your data doesn't guarantee that the data will remain within the secured locations of the enterprise. This means that while access controls are a great start, they're not enough. -In the end, all of these security measures have one thing in common: employees will tolerate only so much inconvenience before looking for ways around the security restrictions. For example, if you don’t allow employees to share files through a protected system, employees will turn to an outside app that more than likely lacks security controls. +In the end, all of these security measures have one thing in common: employees will tolerate only so much inconvenience before looking for ways around the security restrictions. For example, if you don't allow employees to share files through a protected system, employees will turn to an outside app that more than likely lacks security controls. ### Using data loss prevention systems To help address this security insufficiency, companies developed data loss prevention (also known as DLP) systems. Data loss prevention systems require: @@ -53,15 +56,15 @@ To help address this security insufficiency, companies developed data loss preve - **The ability to specify what happens when data matches a rule, including whether employees can bypass enforcement.** For example, in Microsoft SharePoint and SharePoint Online, the Microsoft Purview data loss prevention system lets you warn your employees that shared data includes sensitive info, and to share it anyway (with an optional audit log entry). -Unfortunately, data loss prevention systems have their own problems. For example, the less detailed the rule set, the more false positives are created, leading employees to believe that the rules slow down their work and need to be bypassed in order to remain productive, potentially leading to data being incorrectly blocked or improperly released. Another major problem is that data loss prevention systems must be widely implemented to be effective. For example, if your company uses a data loss prevention system for email, but not for file shares or document storage, you might find that your data leaks through the unprotected channels. But perhaps the biggest problem with data loss prevention systems is that it provides a jarring experience that interrupts the employees’ natural workflow by stopping some operations (such as sending a message with an attachment that the system tags as sensitive) while allowing others, often according to subtle rules that the employee doesn’t see and can’t understand. +Unfortunately, data loss prevention systems have their own problems. For example, the less detailed the rule set, the more false positives are created, leading employees to believe that the rules slow down their work and need to be bypassed in order to remain productive, potentially leading to data being incorrectly blocked or improperly released. Another major problem is that data loss prevention systems must be widely implemented to be effective. For example, if your company uses a data loss prevention system for email, but not for file shares or document storage, you might find that your data leaks through the unprotected channels. But perhaps the biggest problem with data loss prevention systems is that it provides a jarring experience that interrupts the employees' natural workflow by stopping some operations (such as sending a message with an attachment that the system tags as sensitive) while allowing others, often according to subtle rules that the employee doesn't see and can't understand. ### Using information rights management systems To help address the potential data loss prevention system problems, companies developed information rights management (also known as IRM) systems. Information rights management systems embed protection directly into documents, so that when an employee creates a document, he or she determines what kind of protection to apply. For example, an employee can choose to stop the document from being forwarded, printed, shared outside of the organization, and so on. -After the type of protection is set, the creating app encrypts the document so that only authorized people can open it, and even then, only in compatible apps. After an employee opens the document, the app becomes responsible for enforcing the specified protections. Because protection travels with the document, if an authorized person sends it to an unauthorized person, the unauthorized person won’t be able to read or change it. However, for this to work effectively information rights management systems require you to deploy and set up both a server and client environment. And, because only compatible clients can work with protected documents, an employees’ work might be unexpectedly interrupted if he or she attempts to use a non-compatible app. +After the type of protection is set, the creating app encrypts the document so that only authorized people can open it, and even then, only in compatible apps. After an employee opens the document, the app becomes responsible for enforcing the specified protections. Because protection travels with the document, if an authorized person sends it to an unauthorized person, the unauthorized person won't be able to read or change it. However, for this to work effectively information rights management systems require you to deploy and set up both a server and client environment. And, because only compatible clients can work with protected documents, an employees' work might be unexpectedly interrupted if he or she attempts to use a non-compatible app. ### And what about when an employee leaves the company or unenrolls a device? -Finally, there’s the risk of data leaking from your company when an employee leaves or unenrolls a device. Previously, you would simply erase all of the corporate data from the device, along with any other personal data on the device. +Finally, there's the risk of data leaking from your company when an employee leaves or unenrolls a device. Previously, you would simply erase all of the corporate data from the device, along with any other personal data on the device. ## Benefits of WIP Windows Information Protection provides: @@ -78,17 +81,17 @@ Windows Information Protection provides: ## Why use WIP? Windows Information Protection is the mobile application management (MAM) mechanism on Windows 10. WIP gives you a new way to manage data policy enforcement for apps and documents on Windows 10 desktop operating systems, along with the ability to remove access to enterprise data from both enterprise and personal devices (after enrollment in an enterprise management solution, like Intune). -- **Change the way you think about data policy enforcement.** As an enterprise admin, you need to maintain compliance in your data policy and data access. Windows Information Protection helps protect enterprise on both corporate and employee-owned devices, even when the employee isn’t using the device. When employees create content on an enterprise-protected device, they can choose to save it as a work document. If it's a work document, it becomes locally-maintained as enterprise data. +- **Change the way you think about data policy enforcement.** As an enterprise admin, you need to maintain compliance in your data policy and data access. Windows Information Protection helps protect enterprise on both corporate and employee-owned devices, even when the employee isn't using the device. When employees create content on an enterprise-protected device, they can choose to save it as a work document. If it's a work document, it becomes locally-maintained as enterprise data. - **Manage your enterprise documents, apps, and encryption modes.** - **Copying or downloading enterprise data.** When an employee or an app downloads content from a location like SharePoint, a network share, or an enterprise web location, while using a WIP-protected device, WIP encrypts the data on the device. - - **Using protected apps.** Managed apps (apps that you've included on the **Protected apps** list in your WIP policy) are allowed to access your enterprise data and will interact differently when used with unallowed, non-enterprise aware, or personal-only apps. For example, if WIP management is set to **Block**, your employees can copy and paste from one protected app to another protected app, but not to personal apps. Imagine an HR person wants to copy a job description from a protected app to the internal career website, an enterprise-protected location, but makes a mistake and tries to paste into a personal app instead. The paste action fails and a notification pops up, saying that the app couldn’t paste because of a policy restriction. The HR person then correctly pastes to the career website without a problem. + - **Using protected apps.** Managed apps (apps that you've included on the **Protected apps** list in your WIP policy) are allowed to access your enterprise data and will interact differently when used with unallowed, non-enterprise aware, or personal-only apps. For example, if WIP management is set to **Block**, your employees can copy and paste from one protected app to another protected app, but not to personal apps. Imagine an HR person wants to copy a job description from a protected app to the internal career website, an enterprise-protected location, but makes a mistake and tries to paste into a personal app instead. The paste action fails and a notification pops up, saying that the app couldn't paste because of a policy restriction. The HR person then correctly pastes to the career website without a problem. - **Managed apps and restrictions.** With WIP you can control which apps can access and use your enterprise data. After adding an app to your protected apps list, the app is trusted with enterprise data. All apps not on this list are stopped from accessing your enterprise data, depending on your WIP management-mode. - You don’t have to modify line-of-business apps that never touch personal data to list them as protected apps; just include them in the protected apps list. + You don't have to modify line-of-business apps that never touch personal data to list them as protected apps; just include them in the protected apps list. - **Deciding your level of data access.** WIP lets you block, allow overrides, or audit employees' data sharing actions. Hiding overrides stops the action immediately. Allowing overrides lets the employee know there's a risk, but lets him or her continue to share the data while recording and auditing the action. Silent just logs the action without stopping anything that the employee could've overridden while using that setting; collecting info that can help you to see patterns of inappropriate sharing so you can take educative action or find apps that should be added to your protected apps list. For info about how to collect your audit log files, see [How to collect Windows Information Protection (WIP) audit event logs](collect-wip-audit-event-logs.md). @@ -97,9 +100,9 @@ Windows Information Protection is the mobile application management (MAM) mechan Apps such as Microsoft Word work with WIP to help continue your data protection across local files and removable media. These apps are being referred to as, enterprise aware. For example, if an employee opens WIP-encrypted content from Word, edits the content, and then tries to save the edited version with a different name, Word automatically applies Windows Information Protection to the new document. - - **Helping prevent accidental data disclosure to public spaces.** Windows Information Protection helps protect your enterprise data from being accidentally shared to public spaces, such as public cloud storage. For example, if Dropbox™ isn’t on your protected apps list, employees won’t be able to sync encrypted files to their personal cloud storage. Instead, if the employee stores the content to an app on your protected apps list, like Microsoft OneDrive for Business, the encrypted files can sync freely to the business cloud, while maintaining the encryption locally. + - **Helping prevent accidental data disclosure to public spaces.** Windows Information Protection helps protect your enterprise data from being accidentally shared to public spaces, such as public cloud storage. For example, if Dropbox™ isn't on your protected apps list, employees won't be able to sync encrypted files to their personal cloud storage. Instead, if the employee stores the content to an app on your protected apps list, like Microsoft OneDrive for Business, the encrypted files can sync freely to the business cloud, while maintaining the encryption locally. - - **Helping prevent accidental data disclosure to removable media.** Windows Information Protection helps prevent enterprise data from leaking when it's copied or transferred to removable media. For example, if an employee puts enterprise data on a Universal Serial Bus (USB) drive that also has personal data, the enterprise data remains encrypted while the personal data doesn’t. + - **Helping prevent accidental data disclosure to removable media.** Windows Information Protection helps prevent enterprise data from leaking when it's copied or transferred to removable media. For example, if an employee puts enterprise data on a Universal Serial Bus (USB) drive that also has personal data, the enterprise data remains encrypted while the personal data doesn't. - **Remove access to enterprise data from enterprise-protected devices.** Windows Information Protection gives admins the ability to revoke enterprise data from one or many MDM-enrolled devices, while leaving personal data alone. This is a benefit when an employee leaves your company, or in the case of a stolen device. After determining that the data access needs to be removed, you can use Microsoft Intune to unenroll the device so when it connects to the network, the user's encryption key for the device is revoked and the enterprise data becomes unreadable. @@ -115,7 +118,7 @@ Windows Information Protection helps address your everyday challenges in the ent - Helping to maintain the ownership and control of your enterprise data. -- Helping control the network and data access and data sharing for apps that aren’t enterprise aware +- Helping control the network and data access and data sharing for apps that aren't enterprise aware ### Enterprise scenarios Windows Information Protection currently addresses these enterprise scenarios: @@ -125,12 +128,12 @@ Windows Information Protection currently addresses these enterprise scenarios: - You can protect specific apps that can access enterprise data that are clearly recognizable to employees. You can also stop non-protected apps from accessing enterprise data. -- Your employees won't have their work otherwise interrupted while switching between personal and enterprise apps while the enterprise policies are in place. Switching environments or signing in multiple times isn’t required. +- Your employees won't have their work otherwise interrupted while switching between personal and enterprise apps while the enterprise policies are in place. Switching environments or signing in multiple times isn't required. ### WIP-protection modes -Enterprise data is automatically encrypted after it’s loaded on a device from an enterprise source or if an employee marks the data as corporate. Then, when the enterprise data is written to disk, Windows Information Protection uses the Windows-provided Encrypting File System (EFS) to protect it and associate it with your enterprise identity. +Enterprise data is automatically encrypted after it's loaded on a device from an enterprise source or if an employee marks the data as corporate. Then, when the enterprise data is written to disk, Windows Information Protection uses the Windows-provided Encrypting File System (EFS) to protect it and associate it with your enterprise identity. -Your Windows Information Protection policy includes a list of trusted apps that are protected to access and process corporate data. This list of apps is implemented through the [AppLocker](/windows/device-security/applocker/applocker-overview) functionality, controlling what apps are allowed to run and letting the Windows operating system know that the apps can edit corporate data. Apps included on this list don’t have to be modified to open corporate data because their presence on the list allows Windows to determine whether to grant them access. However, new for Windows 10, app developers can use a new set of application programming interfaces (APIs) to create *enlightened* apps that can use and edit both enterprise and personal data. A huge benefit to working with enlightened apps is that dual-use apps, like Microsoft Word, can be used with less concern about encrypting personal data by mistake because the APIs allow the app to determine whether data is owned by the enterprise or if it’s personally owned. +Your Windows Information Protection policy includes a list of trusted apps that are protected to access and process corporate data. This list of apps is implemented through the [AppLocker](/windows/device-security/applocker/applocker-overview) functionality, controlling what apps are allowed to run and letting the Windows operating system know that the apps can edit corporate data. Apps included on this list don't have to be modified to open corporate data because their presence on the list allows Windows to determine whether to grant them access. However, new for Windows 10, app developers can use a new set of application programming interfaces (APIs) to create *enlightened* apps that can use and edit both enterprise and personal data. A huge benefit to working with enlightened apps is that dual-use apps, like Microsoft Word, can be used with less concern about encrypting personal data by mistake because the APIs allow the app to determine whether data is owned by the enterprise or if it's personally owned. >[!NOTE] >For info about how to collect your audit log files, see [How to collect Windows Information Protection (WIP) audit event logs](collect-wip-audit-event-logs.md). @@ -139,19 +142,14 @@ You can set your Windows Information Protection policy to use 1 of 4 protection |Mode|Description| |----|-----------| -|Block |Windows Information Protection looks for inappropriate data sharing practices and stops the employee from completing the action. This can include sharing enterprise data to non-enterprise-protected apps in addition to sharing enterprise data between apps or attempting to share outside of your organization’s network.| +|Block |Windows Information Protection looks for inappropriate data sharing practices and stops the employee from completing the action. This can include sharing enterprise data to non-enterprise-protected apps in addition to sharing enterprise data between apps or attempting to share outside of your organization's network.| |Allow overrides |Windows Information Protection looks for inappropriate data sharing, warning employees if they do something deemed potentially unsafe. However, this management mode lets the employee override the policy and share the data, logging the action to your audit log.| -|Silent |Windows Information Protection runs silently, logging inappropriate data sharing, without stopping anything that would’ve been prompted for employee interaction while in Allow overrides mode. Unallowed actions, like apps inappropriately trying to access a network resource or WIP-protected data, are still stopped.| -|Off |Windows Information Protection is turned off and doesn't help to protect or audit your data.

After you turn off WIP, an attempt is made to decrypt any WIP-tagged files on the locally attached drives. Be aware that your previous decryption and policy info isn’t automatically reapplied if you turn Windows Information Protection back on. | +|Silent |Windows Information Protection runs silently, logging inappropriate data sharing, without stopping anything that would've been prompted for employee interaction while in Allow overrides mode. Unallowed actions, like apps inappropriately trying to access a network resource or WIP-protected data, are still stopped.| +|Off |Windows Information Protection is turned off and doesn't help to protect or audit your data.

After you turn off WIP, an attempt is made to decrypt any WIP-tagged files on the locally attached drives. Be aware that your previous decryption and policy info isn't automatically reapplied if you turn Windows Information Protection back on. | ## Turn off WIP -You can turn off all Windows Information Protection and restrictions, decrypting all devices managed by WIP and reverting to where you were pre-WIP, with no data loss. However, this isn’t recommended. If you choose to turn WIP off, you can always turn it back on, but your decryption and policy info won’t be automatically reapplied. +You can turn off all Windows Information Protection and restrictions, decrypting all devices managed by WIP and reverting to where you were pre-WIP, with no data loss. However, this isn't recommended. If you choose to turn WIP off, you can always turn it back on, but your decryption and policy info won't be automatically reapplied. ## Next steps -After deciding to use WIP in your enterprise, you need to: -- [Create a Windows Information Protection (WIP) policy](overview-create-wip-policy.md) - - ->[!NOTE] ->Help to make this topic better by providing us with edits, additions, and feedback. For info about how to contribute to this topic, see [Editing Windows IT professional documentation](https://github.com/Microsoft/windows-itpro-docs/blob/master/CONTRIBUTING.md). \ No newline at end of file +After you decide to use WIP in your environment, [create a Windows Information Protection (WIP) policy](overview-create-wip-policy.md). From 71da29697df0d8631fa76084fe25dcbe1bb85faf Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Fri, 15 Jul 2022 15:30:10 -0700 Subject: [PATCH 03/24] update TOC terms --- windows/security/TOC.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/TOC.yml b/windows/security/TOC.yml index 2871ffa4fd..f6b85468a1 100644 --- a/windows/security/TOC.yml +++ b/windows/security/TOC.yml @@ -219,25 +219,25 @@ - name: Create a WIP policy using Microsoft Intune href: information-protection/windows-information-protection/overview-create-wip-policy.md items: - - name: Create a WIP policy with MDM using the Azure portal for Microsoft Intune + - name: Create a WIP policy in Microsoft Intune href: information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md items: - - name: Deploy your WIP policy using the Azure portal for Microsoft Intune + - name: Deploy your WIP policy in Microsoft Intune href: information-protection/windows-information-protection/deploy-wip-policy-using-intune-azure.md - - name: Associate and deploy a VPN policy for WIP using the Azure portal for Microsoft Intune + - name: Associate and deploy a VPN policy for WIP in Microsoft Intune href: information-protection/windows-information-protection/create-vpn-and-wip-policy-using-intune-azure.md - name: Create and verify an EFS Data Recovery Agent (DRA) certificate href: information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md - - name: Determine the Enterprise Context of an app running in WIP + - name: Determine the enterprise context of an app running in WIP href: information-protection/windows-information-protection/wip-app-enterprise-context.md - name: Create a WIP policy using Microsoft Endpoint Configuration Manager href: information-protection/windows-information-protection/overview-create-wip-policy-configmgr.md items: - - name: Create and deploy a WIP policy using Microsoft Endpoint Configuration Manager + - name: Create and deploy a WIP policy in Configuration Manager href: information-protection/windows-information-protection/create-wip-policy-using-configmgr.md - name: Create and verify an EFS Data Recovery Agent (DRA) certificate href: information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md - - name: Determine the Enterprise Context of an app running in WIP + - name: Determine the enterprise context of an app running in WIP href: information-protection/windows-information-protection/wip-app-enterprise-context.md - name: Mandatory tasks and settings required to turn on WIP href: information-protection/windows-information-protection/mandatory-settings-for-wip.md From 9dd3c8992e266d453281482c28e1316301a239b6 Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Fri, 15 Jul 2022 15:37:31 -0700 Subject: [PATCH 04/24] add single user mitigation --- .../limitations-with-wip.md | 51 ++++++++++--------- 1 file changed, 28 insertions(+), 23 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/limitations-with-wip.md b/windows/security/information-protection/windows-information-protection/limitations-with-wip.md index d984b38ce8..73f91f204f 100644 --- a/windows/security/information-protection/windows-information-protection/limitations-with-wip.md +++ b/windows/security/information-protection/windows-information-protection/limitations-with-wip.md @@ -1,54 +1,59 @@ --- -title: Limitations while using Windows Information Protection (WIP) (Windows 10) +title: Limitations while using Windows Information Protection (WIP) description: This section includes info about the common problems you might encounter while using Windows Information Protection (WIP). ms.prod: m365-security -author: dansimp -ms.author: dansimp -manager: dansimp +author: aczechowski +ms.author: aaroncz +manager: dougeby +ms.reviewer: rafals ms.collection: M365-security-compliance ms.topic: conceptual ms.date: 04/05/2019 -ms.reviewer: ms.localizationpriority: medium --- # Limitations while using Windows Information Protection (WIP) -**Applies to:** -- Windows 10, version 1607 and later +_Applies to:_ + +- Windows 10 +- Windows 11 This following list provides info about the most common problems you might encounter while running Windows Information Protection in your organization. - **Limitation**: Your enterprise data on USB drives might be tied to the device it was protected on, based on your Azure RMS configuration. - **How it appears**: - - If you’re using Azure RMS: Authenticated users can open enterprise data on USB drives, on computers running Windows 10, version 1703. - - If you’re not using Azure RMS: Data in the new location remains encrypted, but becomes inaccessible on other devices and for other users. For example, the file won't open or the file opens, but doesn't contain readable text. + - If you're using Azure RMS: Authenticated users can open enterprise data on USB drives, on computers running Windows 10, version 1703. + - If you're not using Azure RMS: Data in the new location remains encrypted, but becomes inaccessible on other devices and for other users. For example, the file won't open or the file opens, but doesn't contain readable text. - **Workaround**: Share files with fellow employees through enterprise file servers or enterprise cloud locations. If data must be shared via USB, employees can decrypt protected files, but it will be audited. We strongly recommend educating employees about how to limit or eliminate the need for this decryption. - **Limitation**: Direct Access is incompatible with Windows Information Protection. - - **How it appears**: Direct Access might experience problems with how Windows Information Protection enforces app behavior and data movement because of how WIP determines what is and isn’t a corporate network resource. + - **How it appears**: Direct Access might experience problems with how Windows Information Protection enforces app behavior and data movement because of how WIP determines what is and isn't a corporate network resource. - **Workaround**: We recommend that you use VPN for client access to your intranet resources. > [!NOTE] - > VPN is optional and isn’t required by Windows Information Protection. + > VPN is optional and isn't required by Windows Information Protection. - **Limitation**: **NetworkIsolation** Group Policy setting takes precedence over MDM Policy settings. - **How it appears**: The **NetworkIsolation** Group Policy setting can configure network settings that can also be configured by using MDM. WIP relies on these policies being correctly configured. - **Workaround**: If you use both Group Policy and MDM to configure your **NetworkIsolation** settings, you must make sure that those same settings are deployed to your organization using both Group Policy and MDM. -- **Limitation**: Cortana can potentially allow data leakage if it’s on the allowed apps list. +- **Limitation**: Cortana can potentially allow data leakage if it's on the allowed apps list. - **How it appears**: If Cortana is on the allowed list, some files might become unexpectedly encrypted after an employee performs a search using Cortana. Your employees will still be able to use Cortana to search and provide results on enterprise documents and locations, but results might be sent to Microsoft. - - **Workaround**: We don’t recommend adding Cortana to your allowed apps list. However, if you wish to use Cortana and don't mind whether the results potentially go to Microsoft, you can make Cortana an Exempt app. + - **Workaround**: We don't recommend adding Cortana to your allowed apps list. However, if you wish to use Cortana and don't mind whether the results potentially go to Microsoft, you can make Cortana an Exempt app. + + - **Limitation**: Windows Information Protection is designed for use by a single user per device. - - **How it appears**: A secondary user on a device might experience app compatibility issues when unenlightened apps start to automatically encrypt for all users. Additionally, only the initial, enrolled user’s content can be revoked during the unenrollment process. - - **Workaround**: We recommend only having one user per managed device. + - **How it appears**: A secondary user on a device might experience app compatibility issues when unenlightened apps start to automatically encrypt for all users. Additionally, only the initial, enrolled user's content can be revoked during the unenrollment process. + - **Workaround**: Have only one user per managed device. + - If this scenario occurs, it may be possible to mitigate. Once protection is disabled, a second user can remove protection by changing the file ownership. Although the protection is in place, the file remains accessible to the user. - **Limitation**: Installers copied from an enterprise network file share might not work properly. - - **How it appears**: An app might fail to properly install because it can’t read a necessary configuration or data file, such as a .cab or .xml file needed for installation, which was protected by the copy action. + - **How it appears**: An app might fail to properly install because it can't read a necessary configuration or data file, such as a .cab or .xml file needed for installation, which was protected by the copy action. - **Workaround**: To fix this, you can: - Start the installer directly from the file share. @@ -58,9 +63,9 @@ This following list provides info about the most common problems you might encou OR - - Mark the file share with the installation media as “personal”. To do this, you’ll need to set the Enterprise IP ranges as **Authoritative** and then exclude the IP address of the file server, or you’ll need to put the file server on the Enterprise Proxy Server list. + - Mark the file share with the installation media as "personal". To do this, you'll need to set the Enterprise IP ranges as **Authoritative** and then exclude the IP address of the file server, or you'll need to put the file server on the Enterprise Proxy Server list. -- **Limitation**: Changing your primary Corporate Identity isn’t supported. +- **Limitation**: Changing your primary Corporate Identity isn't supported. - **How it appears**: You might experience various instabilities, including but not limited to network and file access failures, and potentially granting incorrect access. - **Workaround**: Turn off Windows Information Protection for all devices before changing the primary Corporate Identity (first entry in the list), restarting, and finally redeploying. @@ -85,7 +90,7 @@ This following list provides info about the most common problems you might encou - **Workaround**: Open File Explorer and change the file ownership to **Personal** before you upload. - **Limitation**: ActiveX controls should be used with caution. - - **How it appears**: Webpages that use ActiveX controls can potentially communicate with other outside processes that aren’t protected by using Windows Information Protection. + - **How it appears**: Webpages that use ActiveX controls can potentially communicate with other outside processes that aren't protected by using Windows Information Protection. - **Workaround**: We recommend that you switch to using Microsoft Edge, the more secure and safer browser that prevents the use of ActiveX controls. We also recommend that you limit the usage of Internet Explorer 11 to only those line-of-business apps that require legacy technology. For more info, see [Out-of-date ActiveX control blocking](/internet-explorer/ie11-deploy-guide/out-of-date-activex-control-blocking). @@ -94,7 +99,7 @@ This following list provides info about the most common problems you might encou - **How it appears**:Trying to save or transfer Windows Information Protection files to ReFS will fail. - **Workaround**: Format drive for NTFS, or use a different drive. -- **Limitation**: Windows Information Protection isn’t turned on if any of the following folders have the **MakeFolderAvailableOfflineDisabled** option set to **False**: +- **Limitation**: Windows Information Protection isn't turned on if any of the following folders have the **MakeFolderAvailableOfflineDisabled** option set to **False**: - AppDataRoaming - Desktop - StartMenu @@ -111,8 +116,8 @@ This following list provides info about the most common problems you might encou
- - **How it appears**: Windows Information Protection isn’t turned on for employees in your organization. Error code 0x807c0008 will result if Windows Information Protection is deployed by using Microsoft Endpoint Configuration Manager. - - **Workaround**: Don’t set the **MakeFolderAvailableOfflineDisabled** option to **False** for any of the specified folders. You can configure this parameter, as described [Disable Offline Files on individual redirected folders](/windows-server/storage/folder-redirection/disable-offline-files-on-folders). + - **How it appears**: Windows Information Protection isn't turned on for employees in your organization. Error code 0x807c0008 will result if Windows Information Protection is deployed by using Microsoft Endpoint Configuration Manager. + - **Workaround**: Don't set the **MakeFolderAvailableOfflineDisabled** option to **False** for any of the specified folders. You can configure this parameter, as described [Disable Offline Files on individual redirected folders](/windows-server/storage/folder-redirection/disable-offline-files-on-folders). If you currently use redirected folders, we recommend that you migrate to a file synchronization solution that supports Windows Information Protection, such as Work Folders or OneDrive for Business. Additionally, if you apply redirected folders after Windows Information Protection is already in place, you might be unable to open your files offline. @@ -137,7 +142,7 @@ This following list provides info about the most common problems you might encou 2. Move the notebook folder via File Explorer out of the OneDrive for Business folder to another location, such as the Desktop. 3. Copy the notebook folder and Paste it back into the OneDrive for Business folder. - Wait a few minutes to allow OneDrive to finish syncing & upgrading the notebook, and the folder should automatically convert to an Internet Shortcut. Opening the shortcut will open the notebook in the browser, which can then be opened in the OneNote client by using the “Open in app” button. + Wait a few minutes to allow OneDrive to finish syncing & upgrading the notebook, and the folder should automatically convert to an Internet Shortcut. Opening the shortcut will open the notebook in the browser, which can then be opened in the OneNote client by using the "Open in app" button. - **Limitation**: Microsoft Office Outlook offline data files (PST and OST files) are not marked as **Work** files, and are therefore not protected. - **How it appears**: If Microsoft Office Outlook is set to work in cached mode (default setting), or if some emails are stored in a local PST file, the data is unprotected. From 6379aee754f0ce8787f168aa8c5c48e6ee6b1c1a Mon Sep 17 00:00:00 2001 From: Liz Long <104389055+lizgt2000@users.noreply.github.com> Date: Mon, 18 Jul 2022 16:08:19 -0400 Subject: [PATCH 05/24] Initial new disable wip --- windows/security/TOC.yml | 2 + .../how-to-disable-wip.md | 64 +++++++++++++++++++ 2 files changed, 66 insertions(+) create mode 100644 windows/security/information-protection/windows-information-protection/how-to-disable-wip.md diff --git a/windows/security/TOC.yml b/windows/security/TOC.yml index 2871ffa4fd..daed4c3904 100644 --- a/windows/security/TOC.yml +++ b/windows/security/TOC.yml @@ -260,6 +260,8 @@ href: information-protection/windows-information-protection/using-owa-with-wip.md - name: Fine-tune WIP Learning href: information-protection/windows-information-protection/wip-learning.md + - name: Disable WIP + href: information-protection/windows-information-protection/disable-wip.md - name: Application security items: - name: Overview diff --git a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md new file mode 100644 index 0000000000..352ce7d77f --- /dev/null +++ b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md @@ -0,0 +1,64 @@ +--- +title: How to disable Windows Information Protection (WIP) +description: How to disable Windows Information Protection (WIP) +ms.date: 07/15/2022 +ms.prod: m365-security +ms.topic: how-to +ms.localizationpriority: medium +author: lizgt2000 +ms.author: lizlong +ms.reviewer: aaroncz +manager: dougeby +--- + +# How to disable Windows Information Protection (WIP) + +_Applies to:_ + +- Windows 10 +- Windows 11 + +#### purple box + +## Use Intune to disable WIP + +To remove Windows Information Protection (WIP) using Intune, you have the following options: + +#### Option 1 - Remove the WIP Policy (Unassign) - preferred + +Removing an existing enable policy will remove the intent to deploy WIP from those devices. When that intent is removed, a device will remove protection for files and the configuration for WIP. + +#### Option 2 - Change current WIP policy to off + +If you’re currently deploying a WIP policy for enrolled or unenrolled devices, you switch the WIP policy to Off. When devices check-in after this change, the devices will proceed to unprotect files previously protected by WIP. + +1. Sign in to the Microsoft Endpoint Manager. +1. Open Microsoft Intune and select Apps > App protection policies > +In Client apps - App protection policies, select <> apps. Select the existing policy to turn off. +1. From App protection policy, select the name of your policy, and then select the name of your properties. +1. Edit required settings. +**liz figure 1** +1. Set Windows Information Protection mode to off. +1. After making this change, select review and save. +1. Select save. + +#### Create a disable policy - write this as a note + +You can create a separate disable policy for WIP (both enrolled and unenrolled) and deploy that to your organization. You then stage the rollout by complimenting your existing enablement policy and moving entities slowly from being targeted with enable to the disable policy. + +## Use Configuration Manager to disable WIP + +To remove Windows Information Protection (WIP) using Configuration Manager + +**liz needs steps** +**Copy steps from create-wip-policy-using-configmgr** + +**liz next steps** + +baseline -link + +collection -link + +deploy baseline to collection -link + +moving devices from old collection to new collection \ No newline at end of file From 5ee3388815ede987c74fec67e9652ce1ed0e015d Mon Sep 17 00:00:00 2001 From: Liz Long <104389055+lizgt2000@users.noreply.github.com> Date: Mon, 18 Jul 2022 16:17:36 -0400 Subject: [PATCH 06/24] update file name --- windows/security/TOC.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/TOC.yml b/windows/security/TOC.yml index daed4c3904..0b32d6a8bf 100644 --- a/windows/security/TOC.yml +++ b/windows/security/TOC.yml @@ -261,7 +261,7 @@ - name: Fine-tune WIP Learning href: information-protection/windows-information-protection/wip-learning.md - name: Disable WIP - href: information-protection/windows-information-protection/disable-wip.md + href: information-protection/windows-information-protection/how-to-disable-wip.md - name: Application security items: - name: Overview From 0706046fbfcd966057336cf73e958a3f69e1ce6f Mon Sep 17 00:00:00 2001 From: Liz Long <104389055+lizgt2000@users.noreply.github.com> Date: Tue, 19 Jul 2022 09:39:21 -0400 Subject: [PATCH 07/24] add more steps --- .../how-to-disable-wip.md | 222 +++++++++++++++++- 1 file changed, 210 insertions(+), 12 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md index 352ce7d77f..8cf814bf5a 100644 --- a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md +++ b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md @@ -18,7 +18,9 @@ _Applies to:_ - Windows 10 - Windows 11 -#### purple box + > [!NOTE] + > **liz add blurb about disable** + ## Use Intune to disable WIP @@ -37,28 +39,224 @@ If you’re currently deploying a WIP policy for enrolled or unenrolled devices, In Client apps - App protection policies, select <> apps. Select the existing policy to turn off. 1. From App protection policy, select the name of your policy, and then select the name of your properties. 1. Edit required settings. -**liz figure 1** +:::image type="content" alt-text="Create Configuration Item wizard, choose your WIP-protection level" source="images/wip-configmgr-disable-wip.png"::: 1. Set Windows Information Protection mode to off. 1. After making this change, select review and save. 1. Select save. -#### Create a disable policy - write this as a note - -You can create a separate disable policy for WIP (both enrolled and unenrolled) and deploy that to your organization. You then stage the rollout by complimenting your existing enablement policy and moving entities slowly from being targeted with enable to the disable policy. + > [!Note] + > **Another option is to create a disable policy.**
+ You can create a separate disable policy for WIP (both enrolled and unenrolled) and deploy that to your organization. You then stage the rollout by complimenting your existing enablement policy and moving entities slowly from being targeted with enable to the disable policy. ## Use Configuration Manager to disable WIP To remove Windows Information Protection (WIP) using Configuration Manager +## Add a WIP policy +After you've installed and set up Configuration Manager for your organization, you must create a configuration item for WIP, which in turn becomes your WIP policy. -**liz needs steps** -**Copy steps from create-wip-policy-using-configmgr** +>[!WARNING] +>Don't just delete your existing WIP policy. -**liz next steps** +**To create a configuration item for WIP** -baseline -link +1. Open the Configuration Manager console, click the **Assets and Compliance** node, expand the **Overview** node, expand the **Compliance Settings** node, and then expand the **Configuration Items** node. -collection -link + ![Configuration Manager, Configuration Items screen.](images/wip-configmgr-addpolicy.png) -deploy baseline to collection -link +2. Click the **Create Configuration Item** button.

+The **Create Configuration Item Wizard** starts. -moving devices from old collection to new collection \ No newline at end of file + ![Create Configuration Item wizard, define the configuration item and choose the configuration type.](images/wip-configmgr-generalscreen.png) + +3. On the **General Information screen**, type a name (required) and an optional description for your policy into the **Name** and **Description** boxes. + +4. In the **Specify the type of configuration item you want to create** area, pick the option that represents whether you use Configuration Manager for device management, and then click **Next**. + + - **Settings for devices managed with the Configuration Manager client:** Windows 10 + + -OR- + + - **Settings for devices managed without the Configuration Manager client:** Windows 8.1 and Windows 10 + +5. On the **Supported Platforms** screen, click the **Windows 10** box, and then click **Next**. + + ![Create Configuration Item wizard, choose the supported platforms for the policy.](images/wip-configmgr-supportedplat.png) + +6. On the **Device Settings** screen, click **Windows Information Protection**, and then click **Next**. + + ![Create Configuration Item wizard, choose the Windows Information Protection settings.](images/wip-configmgr-devicesettings.png) + +The **Configure Windows Information Protection settings** page appears, where you'll configure your policy for your organization. + +## Manage the WIP-protection level for your enterprise data + +Set the Windows Information Protection mode to Off. + +:::image type="content" alt-text="Create Configuration Item wizard, choose your WIP-protection level" source="images/wip-configmgr-disable-wip.png"::: + + +## Define your enterprise-managed identity domains + +**Add your corporate identity** + +- Type the name of your corporate identity into the **Corporate identity** field. For example, `contoso.com` or `contoso.com|newcontoso.com`. + + ![Create Configuration Item wizard, Add the primary Internet domain for your enterprise identity.](images/wip-configmgr-corp-identity.png) + +## Choose where apps can access enterprise data +After you've added a protection mode to your apps, you'll need to decide where those apps can access enterprise data on your network. + +**To define where your protected apps can find and send enterprise data on you network** + +1. Add additional network locations your apps can access by clicking **Add**. + + The **Add or edit corporate network definition** box appears. + +2. Type a name for your corporate network element into the **Name** box, and then pick what type of network element it is, from the **Network element** drop-down box. This can include any of the options in the following table. + + ![Add or edit corporate network definition box, Add your enterprise network locations.](images/wip-configmgr-add-network-domain.png) + + - **Enterprise Cloud Resources**: Specify the cloud resources to be treated as corporate and protected by WIP. + + For each cloud resource, you may also optionally specify a proxy server from your Internal proxy servers list to route traffic for this cloud resource. Be aware that all traffic routed through your Internal proxy servers is considered enterprise. + + If you have multiple resources, you must separate them using the `|` delimiter. If you don't use proxy servers, you must also include the `,` delimiter just before the `|`. For example: URL `<,proxy>|URL <,proxy>`. + + **Format examples**: + + - **With proxy**: `contoso.sharepoint.com,contoso.internalproxy1.com|contoso.visualstudio.com,contoso.internalproxy2.com` + + - **Without proxy**: `contoso.sharepoint.com|contoso.visualstudio.com` + + >[!Important] + > In some cases, such as when an app connects directly to a cloud resource through an IP address, Windows can't tell whether it's attempting to connect to an enterprise cloud resource or to a personal site. In this case, Windows blocks the connection by default. To stop Windows from automatically blocking these connections, you can add the /*AppCompat*/ string to the setting. For example: URL <,proxy>|URL <,proxy>|/*AppCompat*/. + + - **Enterprise Network Domain Names (Required)**: Specify the DNS suffixes used in your environment. All traffic to the fully-qualified domains appearing in this list will be protected. + + This setting works with the IP ranges settings to detect whether a network endpoint is enterprise or personal on private networks. + + If you have multiple resources, you must separate them using the "," delimiter. + + **Format examples**: `corp.contoso.com,region.contoso.com` + + - **Proxy servers**: Specify the proxy servers your devices will go through to reach your cloud resources. Using this server type indicates that the cloud resources you're connecting to are enterprise resources. + + This list shouldn't include any servers listed in your Internal proxy servers list. Internal proxy servers must be used only for WIP-protected (enterprise) traffic. + + If you have multiple resources, you must separate them using the ";" delimiter. + + **Format examples**: `proxy.contoso.com:80;proxy2.contoso.com:443` + + - **Internal proxy servers**: Specify the internal proxy servers your devices will go through to reach your cloud resources. Using this server type indicates that the cloud resources you're connecting to are enterprise resources. + + This list shouldn't include any servers listed in your Proxy servers list. Proxy servers must be used only for non-WIP-protected (non-enterprise) traffic. + + If you have multiple resources, you must separate them using the ";" delimiter. + + **Format examples**: `contoso.internalproxy1.com;contoso.internalproxy2.com` + + - **Enterprise IPv4 Range (Required)**: Specify the addresses for a valid IPv4 value range within your intranet. These addresses, used with your Enterprise Network Domain Names, define your corporate network boundaries. + + If you have multiple ranges, you must separate them using the "," delimiter. + + **Format examples**: + + - **Starting IPv4 Address:** `3.4.0.1` + - **Ending IPv4 Address:** `3.4.255.254` + - **Custom URI:** `3.4.0.1-3.4.255.254, 10.0.0.1-10.255.255.254` + + - **Enterprise IPv6 Range**: Specify the addresses for a valid IPv6 value range within your intranet. These addresses, used with your Enterprise Network Domain Names, define your corporate network boundaries. + + If you have multiple ranges, you must separate them using the "," delimiter. + + **Format examples**: + + - **Starting IPv6 Address:** `2a01:110::` + - **Ending IPv6 Address:** `2a01:110:7fff:ffff:ffff:ffff:ffff:ffff` + - **Custom URI:** `2a01:110:7fff:ffff:ffff:ffff:ffff:ffff,fd00::-fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff` + + - **Neutral Resources**: Specify your authentication redirection endpoints for your company. These locations are considered enterprise or personal, based on the context of the connection before the redirection. + + If you have multiple resources, you must separate them using the "," delimiter. + + **Format examples**: `sts.contoso.com,sts.contoso2.com` + +3. Add as many locations as you need, and then click **OK**. + + The **Add or edit corporate network definition** box closes. + +4. Decide if you want to Windows to look for additional network settings and if you want to show the WIP icon on your corporate files while in File Explorer. + + :::image type="content" alt-text="Create Configuration Item wizard, Add whether to search for additional network settings" source="images/wip-configmgr-optsettings.png"::: + + - **Enterprise Proxy Servers list is authoritative (do not auto-detect).** Click this box if you want Windows to treat the proxy servers you specified in the network boundary definition as the complete list of proxy servers available on your network. If you clear this box, Windows will search for additional proxy servers in your immediate network. Not configured is the default option. + + - **Enterprise IP Ranges list is authoritative (do not auto-detect).** Click this box if you want Windows to treat the IP ranges you specified in the network boundary definition as the complete list of IP ranges available on your network. If you clear this box, Windows will search for additional IP ranges on any domain-joined devices connected to your network. Not configured is the default option. + + - **Show the Windows Information Protection icon overlay on your allowed apps that are WIP-unaware on corporate files in the File Explorer.** Click this box if you want the Windows Information Protection icon overlay to appear on corporate files in the Save As and File Explorer views. Additionally, for unenlightened but allowed apps, the icon overlay also appears on the app tile and with *Managed* text on the app name in the **Start** menu. Not configured is the default option. + +5. In the required **Upload a Data Recovery Agent (DRA) certificate to allow recovery of encrypted data** box, click **Browse** to add a data recovery certificate for your policy. + + ![Create Configuration Item wizard, Add a data recovery agent (DRA) certificate.](images/wip-configmgr-dra.png) + + After you create and deploy your WIP policy to your employees, Windows will begin to encrypt your corporate data on the employees' local device drive. If somehow the employees' local encryption keys get lost or revoked, the encrypted data can become unrecoverable. To help avoid this possibility, the DRA certificate lets Windows use an included public key to encrypt the local data, while you maintain the private key that can unencrypt the data. + + For more info about how to find and export your data recovery certificate, see [Data Recovery and Encrypting File System (EFS)](/previous-versions/tn-archive/cc512680(v=technet.10)). For more info about creating and verifying your EFS DRA certificate, see [Create and verify an Encrypting File System (EFS) Data Recovery Agent (DRA) certificate](create-and-verify-an-efs-dra-certificate.md). + +## Choose your optional WIP-related settings +After you've decided where your protected apps can access enterprise data on your network, you'll be asked to decide if you want to add any optional WIP settings. + +![Create Configuration Item wizard, Choose any additional, optional settings.](images/wip-configmgr-additionalsettings.png) + +**To set your optional settings** +1. Choose to set any or all of the optional settings: + + - **Allow Windows Search to search encrypted corporate data and Store apps.** Determines whether Windows Search can search and index encrypted corporate data and Store apps. The options are: + + - **Yes.** Allows Windows Search to search and index encrypted corporate data and Store apps. + + - **No, or not configured (recommended).** Stops Windows Search from searching and indexing encrypted corporate data and Store apps. + + - **Revoke local encryption keys during the unenrollment process.** Determines whether to revoke a user's local encryption keys from a device when it's unenrolled from Windows Information Protection. If the encryption keys are revoked, a user no longer has access to encrypted corporate data. The options are: + + - **Yes, or not configured (recommended).** Revokes local encryption keys from a device during unenrollment. + + - **No.** Stop local encryption keys from being revoked from a device during unenrollment. For example, if you're migrating between Mobile Device Management (MDM) solutions. + + - **Allow Azure RMS.** Enables secure sharing of files by using removable media such as USB drives. For more information about how RMS works with WIP, see [Create a WIP policy using Intune](create-wip-policy-using-intune-azure.md). To confirm what templates your tenant has, run [Get-AadrmTemplate](/powershell/module/aadrm/get-aadrmtemplate) from the [AADRM PowerShell module](/azure/information-protection/administer-powershell). If you don't specify a template, WIP uses a key from a default RMS template that everyone in the tenant will have access to. + +2. After you pick all of the settings you want to include, click **Summary**. + +## Review your configuration choices in the Summary screen +After you've finished configuring your policy, you can review all of your info on the **Summary** screen. + +**To view the Summary screen** +- Click the **Summary** button to review your policy choices, and then click **Next** to finish and to save your policy. + + ![Create Configuration Item wizard, Summary screen for all of your policy choices.](images/wip-configmgr-summaryscreen.png) + + A progress bar appears, showing you progress for your policy. After it's done, click **Close** to return to the **Configuration Items** page. + +## Deploy the WIP policy +After you've created your WIP policy, you'll need to deploy it to your organization's devices. For info about your deployment options, see these topics: +- [Operations and Maintenance for Compliance Settings in Configuration Manager](/previous-versions/system-center/system-center-2012-R2/gg699357(v=technet.10)) + +- [How to Create Configuration Baselines for Compliance Settings in Configuration Manager](/previous-versions/system-center/system-center-2012-R2/gg712268(v=technet.10)) + +- [How to Deploy Configuration Baselines in Configuration Manager](/previous-versions/system-center/system-center-2012-R2/hh219289(v=technet.10)) + +## Related topics + +- [How to collect Windows Information Protection (WIP) audit event logs](collect-wip-audit-event-logs.md) + +- [General guidance and best practices for Windows Information Protection (WIP)](guidance-and-best-practices-wip.md) + +- [Limitations while using Windows Information Protection (WIP)](limitations-with-wip.md) + +- **[Create a configuration baseline that includes the new configuration item](/mem/configmgr/compliance/deploy-use/create-configuration-baselines)** + +- **[Create a new collection](/mem/configmgr/core/clients/manage/collections/create-collections)** + +- **[Deploy the baseline to the collection](/mem/configmgr/compliance/deploy-use/deploy-configuration-baselines)** + +- **Move devices from old collection to new collection** \ No newline at end of file From 6bcb9f4f063ccf805d65eea621751ea0bb5796b3 Mon Sep 17 00:00:00 2001 From: Liz Long <104389055+lizgt2000@users.noreply.github.com> Date: Tue, 19 Jul 2022 10:08:53 -0400 Subject: [PATCH 08/24] add more links --- .../images/wip-configmgr-disable-wip.png | Bin 0 -> 46988 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/information-protection/windows-information-protection/images/wip-configmgr-disable-wip.png diff --git a/windows/security/information-protection/windows-information-protection/images/wip-configmgr-disable-wip.png b/windows/security/information-protection/windows-information-protection/images/wip-configmgr-disable-wip.png new file mode 100644 index 0000000000000000000000000000000000000000..49caa3be400ba28e7ead0632c9afcdb050e0f84d GIT binary patch literal 46988 zcmcF~Wl)=K(>6|l0xgB&Qmh4v7bp(Ji@SUA;w~XbDHJWGxI=MwC%6=M3GVK}0?7y5 z_w&v3Emfq6i2TQCN4zs1L6(9Hh0K5fE@XAO8@0?eo7N zAk@8)5f@eSFgRGm@FAGG;W?oU=-c~*f)pa}$H;>542X~M?wbSycaDy3m{I7jGiyY; z=~^VrzUg^Pg8VqNZfOx4eG^Oxe-!+HX9RDQCtugU#G;j6m_?RZI#1zsK3+&}GNfY%qfzwKz zqk$@iV3`7LT;c7dD>~4=9bRhIX&dL(b@OHKo*__BoqYQyG7;EY2)rj(T(HA?5@)Aa zvpeP1Qje?JWaah!`O(h8=<`_?s~_ipiMsxi^-f+B)rX4i`L13q-x-UY~M=eOGN>IL@^4rSqUR8 z@+bQiYQ$GtB7XQ9Ee((5mU3G?WN>D4-qX8N#g;Urh}eqg#EMk_K;ESJI7K#j zZ&8AW5*oj}Q~`b@5(C~oGvH*%lvqEjWiDQS^*vi^vU}{(dV#%*mT2*)0f#)Z6uT@e zu&{G2_`C5AvvAL`0S|_&5^Xx&lNB*b+DpXHVv}LzGRmvEd`I1p5@n$QSHLbx?G@03$3T6PhUo>#syVW0?v&`Mw zy>7u@jKGmc9=J_>%OQ5=`t#9;T0X()Mze#*bB6Zr0yk(qE~?p@Uqy?2RY*kWC|J9u z&7xLLfm-0mOX2q4Z;z(IZzExEvB1gn1*o%AEar3r)0_7P(fO$5f>#M<#-QWoK!?0O1)6Tcot4jwDib^rY}HSDFTMq;$sY1cr(j;qgGp@tJ{y-fpQ zhk?!!>V}cc`aeMgC$adpy~639C}BJUN+E|aGG5_5uW)HIb-kVKri6eMz8Dlh4y>)e zZGNY!r$uk}68af8X5r{NQ_S-=hJ5fH<-1EeXW!4V4r(QwfLpRV)yU+zx(;&P$r=~I ztmOIaZru}rGWEw1xDSW`4{BIClD)Ldi+<9%95tPeG1toKM7VmYJuTE&Rw1EbL^;i+ z*$yG%bbfDlm^;moTsEzo0L7Oa`Riz?d3o9!{pmof1_7j794X~z%fc`pKnUa^E<5B| zzxRzB-1f@9)#Fj$-CH2=y?C8=GeixrJG`H5sd+IbIC;ZQvBD|+ct~7u3RO;_9X0%? zTxv$ZfoCyUNJ+_!D|q>SK<6Ja7#m&!7hPJ<>$3Nd9ctEFH+Hy44g9}vIb6W=4kU*Yn7@GPXDEv!$0Tu>JAz9x` zCNDmr5^(mKipZJzK>8(%2bMwoQCjT zi*GX)Ay^mbY~Nlf-ylJlM@xY2WOK&0(6QXH9oMVudfBKZ3Q!`K2D+CN)}Lo^$pc&0 zB9dvE7A|$DKsmcxq3ytZ{tG%n{YXU9gH4xSF;&VQaz?G70?cv<*2*uNn3K`p6wQNN9yf`o9@?n(mSA%C1wSbLz=EjFY{ug5!B07zcA|i!SQd2Y{wc*>zS6KVX1;fU;D;a zSJyT(9n7;_+e|vBqfu*-2J!26*-gbGv$da6tP6#*kM;{uL%CUdIroTwPM-jmQ;vWR zZIWy&ciKH$jT!y+mmloB1&=(nS}7;bkbL3}MqCG|dCg@{F5l8wP945Yc$Y3)_j<>N z;AEOo%J?0!*Hc`pE1W7YyvO~zjQiopClCWqawX129iiNt-+*Nb!#{#NLYI$Qvj6P> zyWJp7!p#QRppOT>N~-esLl8L?f9hy^DDQc}dP9jYF6QZA{Bs;;w0 z6EU~zf6$RuSaxqZndclh9if{z9XO3~WdU3uBaaQ2w)s^1d;WXJhwf`$o@^ETSnE9s+~B-ReF~0i>uZ8q*ccz0 z)1ZM0B4d(UJLD?gQEbx5goHni6Fn*_HE@BNR}sKYuZ5shiKTtnXbAq1&B$0D`3$?qn+-ALKV8!+q_*TKbhg>VlmkQ05^-uw;VZ}QJ= zeoJp&yyCGq5%60BAWHUeBV|<4dF#<;L&A-Hja~I8mlUqsQc;z05%N0JJ(7uDLw)`R zLv5NGO985h{6lYOH2Udw{FIvjJF)J@ZRBnwcu;L^N6Ox0E7_mY8f7tFdYBV48af%c zSH(^Y@^Q}deKCH$#;bj7$0;W5V}{>MN}2z<>nIL^-pFrLD@5s}2D|*i=sTOG#47xzM`wA-)=k;L432jo_y@*qi>U45dSd&|-o~Fe zlU#HRcwkij!qA8ArGn{)IFqr85|`7mdInVTwCm@=a;$cVvUNbd&^d{b2p{Q4_&{w?**Y2Im_nf;1L({?KTyZ%Wh-KAJ!4iOcihnVYE$cMPH&^tALhi8qf zFVnUc!3QwB6cylSO!rk=Ce$*5#9%xXe4z}g2a_I6*Qj1cs~;?eHI%aK#_oAqa`hDc z8q?a|ARV?{0ug$-Zu4kl0;#r~0sRnElCK+iWTMoklIvSG;z8#FVlteR&~(^^YZ>F4JSBVEaUAbgh4CpeeH% z)nf?9p~IzclDIyhao~-3QAU-*d@YJ@PJ+bXR6XDhQeS9=;byOI65&k3fyGHd6l!-U zTkbre>#mW~*e0Gi*gBa|~2K{WiQNzl8wMe0Q( z6RnPg_`fL@j)fcLyG6W9;H{Dq{bf^5^z%5|52i&%@E*(oz}c=@A6NDh!tMhxqC;ju z2w*xMzAcRfJY=8yG2OI&jUGgLE1^H4#=wUeG;TUG0T_s6~6TFQt4I`pgSmr|vd#All?^_v@Q!?R&- zQ2vqyQ$u;(j1nl3__~`a<|jHI5T4H0>!E>8YQPpetf zy5|R3ERlyE-igGUY$B-ZjV|r<1uEqTtiW-ih#V4$S>JC*Dw`rmXTf>vBeIo~cf;u9 zO%CEXpTh~#| zz)-@nN5Z`xE!~4WnQY@I|8HKePbpY(y-=|^zUgT3&;sTx^N23gdesHxmrgz%gt7MMVfh*P|7)%6^6#MGYC5_tj*BzybF}|pm+ms#uGFUI)C@8Q7sIp&0 z36C}O8h+J!eIfcy{YwLCH8 z%kS@OMOC`5?y)d_!LL8$?wDSFu#3KGCA96eIb*Dvf%``o=9gDESKGwwE;%j_)XR&!hl=ehax{_`XJG z@TDtc6nXvh=lo?5t8j!LrM57mZ=6AQV^nKppPf(i2N%0#RQR5>xcFG+1tr4?}wLy%18|& z4Xkew1=U1Y%gB2{E|wP1wfkFSRC zBLAzZ^3KqgE#z~N3;K-L2W63SH6;#(mRRE!3OtaEx|NYA){aKFPtf^L?S*w2j_MKK z-6c<%#+&VP_2%5j`?2u{oDwq?3h;=dxe~5?6*PO(2uBwRQe^HBp8600cJE~tL(4i` zihy15Q@I`(ECqC|TZ7SXx|tXKB9iGsu4Yds$^O_gi_56)&+kq(zJPz2AcIX?Uz9qG zx!ienEBNT+MHJb6?!X29$=zQdGQ5B5knPd>=~xzJyJ4EQG_`gynrgS=F0)m0eHZDZr6luUgN&|Mq|f}WoSK)&-)uQQzsb4zDTkjW7heTM27#xMXBNUdTVs7Kh*m{)6-$-xU@74{6c;|3q3mi19x>wop`AS-D~NZ5GLB zt~}|4)YC0$EeWdsYck}2e(wK9T+GhDu}qHFC&r7cK(mB@$P77CB}M!I^0vCKb1LW; zK-hV@i|qK~t)tP5j5>bseK z?uozU6N)x~H8eUWb=lOuFyhF4V4UHsRR;*$be`hPkF^;r-dC2=%o_o`F)y%9fm9IF zJ}gs6_dxXIYZUuJnGY7B4a9}tScQAjF_VqxBWbo}W8A*0d!~2LBd+IZ`Q~0h*Tw4j zby5TGvOPvYZa%0zF-ioo~)l*2;&Sa1J8hrJ;D5@V(9HE`Odi#KrEKSVo!$026dKtRg#HQ$9zB>_mb1u0kN-_S`yr3hgbpBIkhXQ%zO+Afp5SWDy; zQ%jz{9@&t0YP0PnycB_E&(qtD zJ!6Am?A+U9XUkgqFRIOPjwogO41?U#ktcfm^6b#fLI>nrEPziv{XR2O_n8nXt+o3~`Zs{7uX|-v#{uiA${ zPn1Kq5AMfBEQN-<4Gw)M{k zCWZD)!MENXwhH*>d%-WP_1dUraeEtThBp!2$Ie4WHhZPm=}H?24h$y9I6)Vx*wmA} z&paaoyzL_}{~p@Du=ZrB0;c)Fe!Hez@J%|te_uP#^2~uOkP>~L^FrrpVDM~`+g-DN z#zo`2uI=y^(eLxss}Nnpmh~i+{i95wDg)P}sY`f2thoPd@+S0;f-gkR{ULIwEk7`) zn1LvlZo|!YHOTjzGEVmgBArJ#&+ROG81bF~3j%N~+8l>+__QuCL)Nnvc*A(yY_eeX z0fyj)A9&5H_&>}J7=Z0~sU zBLOXrmsy;tP4z4M?#bS-PB`eqi)E z=lIt0sP%m?2*ZI)j11jM41xKCP-^!(=_|nrH1jzA@x*n?2*0*#B)UNaGxT0xeQ^aN+ zL>hfW>Ww7tTpGDb$~3}^jycxn5RI4agVTEiT9mMg;7;tPyT1R>-z{$&IwNPZA8Xq# za0lRx`kNntC9SWiFW(&lyD9wlZx z#y}8e_(Jla3s!53X!od z>_d5!W%_V^-*Cjr{e7ti^h zjY$+PN*oLRDfH8<*kg@a;dS@BVUA-JM0(yjseIQkSu}Omk%HW4S;Nv=5*hY3B;IfE z;yc4Qpb)2G47=qL-m>Y2?6(@Sp_i1kag=q%Ej&f_DK+rtcE0rm*QzB?TMLfxOcY(0 z#08F+lHooL+8f)N=C?C>C0b3Id=@SZm3%M##`6E<|DU{>o=c(xJ zV#5DEa9eM~B}Q_kgYdH9x7ViOE${_C`3!y?f05`@)Kn&rL3V3I6d&Q+(DRyJJ^qNs zk8^h9S>(^}t(X2OW}>6bMYnj3)33~=43j0R4Y%DjtMxEd89@=wN9uJ>4c_*V2Q=f{ltykT>? zisczE>D7-tA%jQjZgl+@k~#IxBI#MX`Uilh{(k}>g(^yL=oHlTADkmDUQ;$MdT+mc zO?JNYcVh9F<0?t*9~eem$c!Bt8v0irIO}^oC^cKT58Rn7&8Ap#Ucp)z-Q@Tp=ukpI zPaVZ=JD(u*4>;K)a8$Ur1y&&4*3UAHLidguV_;Y6Nhr{#Ej>g>{tleIuvY$@z{`>* zcra<{UZjm0m0|Aqz~2FNcr0T{GR~#FsnLIc7gGnLFDv4Go2TySX5I2CywOce?!wIc zITa^QxtFriweTHug4_}?7SxwEi)G6yupIt|&%NUMACx%t`zJ3Xh&}_pwZndKKoT`D z?fE!RFlTmbNs`)a<%`87a<1kpp;bTpoB$Z&#=d6 z9DnGEb!Y9kwN0+@x>RzpwET}9e`0T9c-k(?q$1n9{$irE*4n~Qq?G&1!MlCLA|JG= zz#amz77@U#Nae{~@golJ@~&bZygxA_G6!k)Z@!o!hKnQhB41-trE#!hUn|W<&d|xaojCGu(-ZiHmC~lah?cUonJ&}KO8iomCU^n z5Sb0fa2x)=)e@eY!u{z)&d1Eg^_(0=Ki1B^`tKTq_V=+Lyqo1neH8%j9EsSRVzLdI zv%gRt9AkcX8|l(=4E<$alerB4d7#7gtNcDtCdYGL2l2K6{6 z2foj%Ci2t-YiIvFy6sDK{RB}#he|c4wEBDmxdS;1Xi|)o6_Z2q1eOLh8 zz1O4pdYSX8v9S}pz4lhDcP-JCrAA_nHdJ_^hZ8sd5Wqe1wWt&Jb+F#~g`}cxcpW$R z{M~YWx$CBh9PGvjey-jFQ}_5%UMx#qm)g2N|Il=@3%BFJ4pyI7RsB+USdj4riyPLt zcX*QBs)75s4`r@r{CTk10u?g;l15dHm)?fI%%kE#tDBQjZ>*N|Xw~~1HQTSYF!q4B z7zc|ITd9bEWZFSj1=48;KeLxpQVkRAUBiNIZi?R9yudgiikKO#H&*LMrfhIXjaK?Y z)eUMzxYDm6ARegQaWrnYKu^fo(ua>9j}FkTmZExjjt@0*{ZdrNfw658RLg1mX=?W0 z*_`gB_foYchV%az8P7G|web2hP$4i#dS&xvkL)yV#}y>F+|=gqZn#BCLUq6VDqu3I^Js1(Vzmg)%bqZ9TueN zVkjWFw0Dk%_?SYn7@sla$A^0sX#o;pOuVP9wE11JmBpdM-MGx?1&Y(n8pVN8*dw8`iJ) z9eXuoJ=3m5#Y^q(#+Fh=b=(KbAWG1kSt!g#w|b|nvFaxI`(vrU7gZi`i^EL1k~=_} z=?zBPnZ6XLwo#6Z!i_b_+dBY_F|SYnCpNJm0^({|NG;=bTE&SXH(!}JhM2bTfH$0a zyU_XC?-kP5V-WLFL0$1u7b0M6e6K`s z^>!`2(NoF~}zBk}%nTwdAE)?`?y(QBXhhq`#>VJ){Lc9_>1* zp}ItH{dGEzg?NS~u29W#%kny-sx?(e7`n-Is)qeiXoR`9x?Fk_CSR`oCFk9T3OBLa z%R}(Gy;T^*5IkD}S9IqFPP}+LQ}-`59tK)mB=r|FFP-aYrioh6?gk4Ze?H{HJ?iV= z=q46juhHva%8Z#rFS}2V5XFM|p-kEK>ya0H%(m@rCX2!IbsekqGy z#UbLHooslD=!KFG)XFd-bCX*jxk~HV8K``Ohe)Uv74EgDjN7cy5|A=PK>6W7_tbsD zMBwLWQ&WGzv0ss0`ThWFPngYJ^Ut$c$uC0omvp79Ym88@u%5+H+wxt*nD5=-P7l$v z>~;Z$01#vm_(lqCO>%X*$d%(Mywp65_NXlbTF`ZQ>`%d)hdln4y_80iC1-^^bnbi< zDW~om07s%=5N|jD438wfl5b;LPB@LWoE}$w?;C+>WR@u5>A^IkSWZ4F(|iX0GT3*E z-)-%U1FXXJge!qRI%jh=-oFcXY^FZ`3x2z%(c}u1Vep^@(CA4F18!=pDuiBN-QV_R z?suS1;?*rdnQHJ?KlQY@dzS2<5PJ6cc(E)oj=!pJARQcl6Q+3%%?E$uM^iWEe{{JJ zq(?HR%RK6bwNf&-t(>9j-_B-={ysJ_e_A=+up1eAswEI+RCx7r!%@kpyed09_v@YT zE9od7n3&u_ski^3^Vs=PPUDP?=e+TT97(v;5}(y~W`ewP_3**dKsGVLGRh!yiiOZ_ zMQ@UGXPaq)D`vS~62UbhZ$ch^4H?ImXl}hL7I-1u{F+wqpI1y{X?55LWL@ z@yc?RfM#B=C$k!BoQZTLAyhenJr-_PsEa+UKk{)^j#E$I{ZKXNFm>;t`MjN`J8&>h zU-^2~i!RUf=0I6Goc#ty*qb#|u675hiDyK)$a0KNF93LwpHq^B8fZ#3EXOW$+`-42DsqgYRBG_>txygvSL%T@|jVL z?)!(fwSM+cvsh~lZA{L%w>$UlH~ks{^$y|Qk<&3=Q{LQ}D;A(Xg>37d6ff#5YxMx~ zV{;vKjQOZ`+%*^KC%20*dN_b;siCl-99CW1=Us1cyJN9kS^w)Z?9Z*d;cKah365}= z9UWA5Q?^s7ujfy+vGwZ*>Nks#ahN2E^p$AAiAuP3*$exVC`TWI|C{vQ(B8uMX0PalLl^3nfRBoMXHwX1YW zVUyd!EpK_<1feWv+_2?;xNmt3l1br;eX$8mt|<40;ft54-v7?RDL;NRGTTDFx#5fRI+6yp0G9JrpP@h~%n^7o} zzrpgRah0ebKGSHXCTJntO3u`&HH9VW@}zQoACeZ+N!p{>LA+bO*8u8#LjtH-m5yag-lSM+nR6AzT?N*>_=SdCq@>1Jw*K{?RhlROim~ z0Q}_tRS{y)U_l+cr_MUiURHrxs1Q5p!`E-H!`9#-38=%}1%qN~a~j{c-mOr=?;7G{ z9q_(p5qA1Vp=5tC$@p5T#(ge-H^Je)J42IPcXjA$rM5I-&9g7$5& z0JN5+Q7>4_^c{GNIe6_r1FJXXOluZWp2=H2+w|p(t-Bo3S^1I1LsP15wujei9DsQs z_2s?jv?!AVVWRu?#z-*dLVVWc<;P>{D=2vmg397RCGYk*Gw});;a5P*Tl02phM`-?BP_qlVF((nz6hO%)KJdvnfe!O0_>*sxBO&^ z`PI<54b&&6Z6WxO&&tf)4WkKWF9$q_ogZp`bUH&3f*;wWFfw&VtI~NjS23|N1%4Th zF9cza*!XckG{x6+a1c-eh#6#o0~sPg&M(MrHil`rCcN*+{o=a-}x_{_3U!1P)5) zjfE!RALpq(R>@Z8bxXMsT7mMuWBRUo|^Kyh$UXvlsWfBFz{#(!VtwLi(D+ z1i%VvhYJx~yiS|yPEi#cKFCXTVavLz|H@4DD6_X*SeTNE7l|PSf9P?6FY)EQ_t*`g zRs+NgZ!*3K`DT3l@75$T6pQ;!ZZ<|q&Xh+JQ4?of6BwnKte&FNC$vLzlm$&_wT^HE z8Rcc5R+$d6a>!vb1}Z(ClLjggw{uJ^k@U9KNGD=e(&Uj-HPoG6L&IY#wFLc0(Hp7r z^dV!XJYl$yz2pqh`vTQGhuaIQ3oCE!(WA*-Rj>KVN)`P(*hRqvW3^^`3+4`;pb2_a zIjt!Qnlwut$^~oJ$IwpiZ8xb!Zq2;?mDXPo`<{X#B8YkhkmG+#xne(Gt#(V*6oV4y z&*f66p^6LvYpj@Zl*(K&UT3(~Vq2!U*DZS#hHn(JaCWZdb*-Y-?@5p93;=|S$UJ`7 zn~(nba>`va@b=d)Jc5k$j>tf0pj+N&gGB-_ZdMU&(Pf2Z&{tjnTS$~6x`9_W+bccDJS6<^B*5Z|WwH*ct^KF|{4YOepzL+9tBl>Db#DDF!5|Gi`R zzv(PK=EjFk-v2zk{a^X-zxu0;mP#OKle|_PT)Q5}o{Qn%_^+n<;lWOfJof~5`=Ila zV`Te17`uL)>0+a6qcGm#e2tiiNft3R-&M8MM9;;O>RzgsJ)DZ9k=Ha(Vb%;AFe&>+ z<&TdpJ3onEC0<{9Ob|A#5fl(EH zL$;^MkcWNXtBq#(>W*RF+4fq#U*x5LULE&Bk3oh7EPu%N%Y8Nw;vaC4kNMymQc+~>r}he_SFKTy6FBS&6w;I}6}9IX*uPv(MswSZxQJ#X-h=mr z`~yu#F4D;#$WHoW?v%A4T)mPpeB{*v_ytC^a0RU8g`1b3ef>KO3FpKmVZ^_P_w#-K zGk2znm?^KTej?cHs`qnD+IReODyq@ie{}y+U4AqJ_BY>GI-EGn&;a!85M0;$FeCcX zk+5Z(_zY-kNZ_1 zpu)wMOZD{}E%(Mdn#Ltb3H_JV%81%Dzi%XMBAY!_aYmW@&uWa%NG7*|5Z2<`HJLl; zfTpsJj?OMixygpP{TWVkjJfHAcU8svwG|$mS1zY+7#XUI64y{UZL820@S>jLQ8RA8 zemvj(S;oV_$wI@?64GYlRXeTwOYe!HD(9nnd(waOsjQBIy?6B*7{KhUv1Z6mn313V zjF_1CrTcO7d8Bp{C4ZbTH+{o?CV25L1AuYaC@s6*dlGW*pIFs_o8_7cbJfy7xBx8~ zN>c`X^S1`~@R9ZosNDa;8BANxFFPg-TYJiDFO?w=;f6Z8t_T>IPx38S4J}K1pe|<$cFe@v|X~MAG-`+j* zFeugGTAZE5dVc;7o-*xxHO9%ef4w?1U~96jDIaUt#(@I)KO-4@?=1iGlac>j+;fR! zU}l;jA4^nHQ3*J1h2j_jAhAb(496c=$#)899ghqtEM;jPx7*AMuJGxtn_c1i&e|%N zGr?!zB6Qo$-5Fv>Xsk68#}|>Gi~ss{$EMTjWPz&XR3SkUmrd?O6ghuxAoP4hn6jdx zA|x_$diODi;XlT0t^+wV2&!RvM}09eUp}s6z-^Gs;S1;f8~UL9+l}q*^^?`k`n6Cd zhuxg`BsKeB9P*Bb*$c|*uXA{gj*j%Pj}m@*Xlki-4y!4pYkDBnwUp1Ka#DtFERs#f35_@0%;>wP$~+F2W*KSarR}_@b=^Aly#X4d zUwq1q_0(EUD;y}*Z@O4^K=v|Lv>B0o6uJGOjm(E7`0$ezA;yPlwd3sr123-by4Hnp zu+&02qvsqUgONT+bN-j(QLc9%A2w(~+;3%gy`*X0r|Er=;*9-Q6`Z^p`eo_FdHO2nmMcXcoxiqj@S0v<|9!YeKC}fWzP5_s77HA3sFb zdm`jRCH96v_m^O;1}D1dQvD**zvpxhqEv=ENYnVhuX}}0#${O>njrf#$rZ76wqWjJ zotn^+^9Pq!PVLEf*zEZIb2zIX)5q0p`(r=IeQc_FbH& zsy~&Pa`I%Any*xSw)nnvx(YrMN(tVkfbr6oxd@!(|I~=OeEW?RbT@7V zB;diuQon+PkB^_gzVyXFTe3dsgH-?}>?HX5W&~IY_q~VA@VzSwr4aNo+8NCxppbi{ zg{B^dTZTDq5W^Oad#9paQ@;(z8}g5TDFU_InSy#vVRs{Q0)q`4j0cA2`%3J?uc3y$ z=w)!sQ&+(wzFKttX}}(Nv8Hs96!cXQ}^NnTO7Vnq=5(=989V zfFcMPBosZ4s&eS}Xd=9)WtUU)y>i)d8C|V*hA>;P#7f*^8_!beG>%BBpeI%DGjP`}d z07NtKd&zqW68#$AqtRbv0BTaUg_oEnckv`+u7AXU0Il*-*V4zW*k52BO@+I-W#XAtr_F(%?p0Gq&uZ9s| z81v52!IUh{dbL*#A&uj8m@M$SMA4GOboKtK*DYZ}t7Ooq<9a!aj-egl;&w>Zx^?ba z)KJ*UpQ9XpO87<3Aqum8{8Z%5!eg@zC>klgm6N{4TQh8NdD+>ut!dO%B}7 zHoS6Q*vxjO9Vd&IA(WN-J*7mfU&~V4s_{#lYRvBI+^Rvl(h@`8x zw<+xU7+j}VCL8DYQ2h8nVyEJ|VfRp18sM2`U$cBNw?vUf$%TXZJ#-m9P51H(|55!q zPPN^lPTs&RYtsRTd!w4nPj~o$7b%zZw=C*&TDhBx3B|EYG4uyQ4atl6G3Hf%)qX_d z|C-m)mX!?AORNn6R=)9Jqv@9buYm|0s9RNOKhtELM(ai~w+*eOcHIn0JDs1ZB4sOb=!jtt3AfsHA-t*QS4KrW-{eSlCN0>`Ru) z=jwC}lB4mj0o})<m2n+?R3I}IF~4R9RV{<@C{3!AwA#R7dZF?WB7jHO+A zP<7BG@Fg11^pHgtz;Ev>aoeXKTlub14|o*%Pz)IF)=Bp%rH(A~b4IOb+C)7ZEa0|# z^IgkTI;2R5W^8U{nn}&iQFJqXrvD+ugwW=#2ij6n+k7_kxjp#MoM3+z5O%pTVcOPe z0W1wG+&|g|whN_n^{d3Tx)&wolQ!~kNRaa2lI;YQlwkgnx37>5Z9DGdq#3$Z=P_9o zT1luTEywky6|3x3-^s{(%{Y6R?pa(T=R*W+5q>=vwfLRXp5hzEu4m&%XsbTy6nrk> zYv`t|@|Dz*icC&4NT)pDl6(Ogcs^t(K{CZ8%Bn}a|Iu8Y)$eU5hz^g^;2U~larXx0 zq7lK!vNmbZai(+BJpoUAn|i>l>;Cla>l62*1*;y97|%np9fw)$O&PnY>z(YV3quSY zI+6Q>s*#2EbDOf3T+-DTDm^4)j6S;ZSSpR&*o^6!x@F%m`_>!D5gS&iI4ks-aWp@a zp~~l0&rcrCR;xjrz{he*itC96XNy#RmegtxKZf07 z6~rGe2qkkW#RFmiae#QwP5+R4Hc`GNEuqI^D(m*mPAa^AVzZCrT=2_c9$z{Lct2<6 zVWP$V9<=QQS_cYJxrj-NtKE~N%^mjMC8AG>HU4>!5?nlAHcO!=RyTF-;NEAPZsA`~rq5)Sn02bCzo z@kYKfiw3g*rus4yYC0?gtAI+Tyz9!gCR1?TRX!tZo9^J1sWhKSNd57M&8fk#Y=Xz8 z#$XeiRVi6_{SQ%n_1EL)AA?Xzeude&YZ?M-h}YjdK^$oryK~nW{k*W{fj~s!xU6Hh z@`D4~jMu*=m=POLnm9^8Mz>jEEaRee#~cR;;NesE20gyE_!Lj=IQ+4ADq$r*1MNx! zZO}%Wg@whwDLrCKF?gw#sqEtS+)v2BWuMUB*7*jglMihhC7Y3-x6tlU^SOe%%pxWg9UG@!iUsAG5m!4je{L6O!=(J&a4XuAsf-=(C^Z!2jvVOWhV^-r0B{@`w11OV z{^9s%>45&(5Ki;W_-it|XD&Oj`AGW_*PSWdvpVItr9)w-+aPV%#hQFA7aLrk%fDfL z3)&A2AHsE9=emSw;whwFMcRyWNX;j zLX>FlwHD;Bqf$(xzLpIWuWP-ws*36JSi9Q0KIjxGux2x57hnxw>e025jlSwOCXeyxh&Vls+dZr@)my9>XM4#xiUS-4MVwv)pE$>Z%D#hg^4 z!ljh75-Zq_lIcD_p-GOia%P5g`4}qVx&rDhRdp5x6nZPx+aKP#-z4;}^(WTYPhU@+NmXqCc)6e?Igir(T3ARfqo`O^1-dD%@ zo8S@YEVMOET!W}%7(0eAar_T4|8eTEYcDyq{X44xV8OaGx+MJY1>Rfjh-1;25&Q7` z7@O1m^nuF-|7Ca`D~0zPf|kO}?_wVtU3RnJ^Af9_j|Gjc_G38&YqFZ4zxNXf@M#)u zaTzw*cVnr2hCey*foI7hTa)S3jp?=nCo)I$0q-U8*q4UYqU+?c_59thQk2Q(?c5rRnj9ncE5aFG@^9GY`I}Da2~8cQqU56{qR^29@)u{QN$&UMv|H zGW?s{w(!@vKG(nHqSlSoiPvOjV{KQ*AGeT(KR5#4VrD>#P53nF@E5O|l0RVT_BTy9 zu8S2p7~Yx-C`q-#&d$$W$6PS@kXy20qnToSgxUeBO%*(kGzlj27o~K57}We-`Cv(} zx)N~y?Yt({8R~ zHQoI;$s2=LVYc62EBt(5Lwvh2N6e}Ao^*#nqkU;LS}!Pwi=Q%S+|0J4<71)xLDaaR`|RZvv2oRi5* zz<*D_qd?FVb=jNueBiLnU=0>u3B1V>B#P89TK9#Rhgmt*avxgfx!nUL!T_&4m5CLJ z*s!@7d^E_*kKrX)zzE^yR@74a$(8Pk9j@yKkK`fKoX*_-prBHwuM-__vhrzf$k6As zdrD(F<)KL0(R(GC>eWQiQsvt+Ql3<*2GP}T$X+Iilp~}6s?Zq{PS?k0`O76^nY6_< zeorBu`m%s2g;}=W<$MZG&`VGz&2?U6XA;+xW0N?nfcx?OlQ#9(oM^xeAL(e=QNb<5 z_L%?lvy9C>Z{L&2>HuR*_Vgw$5C%?S`L8AAMDN~Q#q%n540o{W0hl%e9)ap0V+W{1Bsw)fJkb2SZLbyi z@}BYAMc)t_y1?)OHo z;||%ZH68Xbz2X$5Boo&_gYW=QLf!{$p=9_{$YJy zE(e2{MWKBsNM1?hyp13)&w>wZvBb!mII{aovXU}#_d*}to$tr)=x zri<6ISr;h@Mah`BE+{MoAgKM}0o$v*PaOeInOLD)ov901msv-v^ka1E=%0VhXE_X4 zY*;m7FiGb*C6$@%6@$w8?;UH)<$xHcHy_# z8BuPGPqRMY#-fE5~7nNFT8O;Po4VkjIul8)1 zt#!853Ma$ywi9yL6%9n+l!~1jMY?}VO>K=*)`47ouHzSMm*iYcNYNjp&!1rs&OHn> zsCftN4D^+^NlmE1R`3=FqrTO zp5iA8Etj;+5!_rVlxm6R7ni&fIegUdGKhe21(l`Ucn__py!AWbyKdbGL_I;YwANw? z>3-vv$@A-X*tZ?!L6;n}wBX| zq3?$iou#FZfPVII%Xs~P8 zZ!(tV`8Zd-=&NpyvU8#xv`8X(-bkx$D_?}^Xe9+}=rdfGX69-myV*+}XHMlTyEU!F zgQ8Z}{a3J3^q|KjUEm#)7qh zFss}o-VcW(iciiTIOahGFSG;BX5S#7Nyx!hy{2Gp6Bp1y+Ijn#`K+Nt14lCyeyU66 z7fgJ4g^mX)^q0bUaAA??#W@dYKYX-vu0Q0P4k=}@eiPJUjJ4%mWa-HfwIJ{=A(=XG z;G2&+2aT0~e#`5evl(>>8ufT4z>%`F$&zQAfvax7b+J{FVTL1XYlvj2njF&)LL6!? zZ`GiPou`?roW`uD(Qo$yKMbw#A0tK03W zP%l3hNa8uR#mmYIzIIpu$n^5jQlPT=Zx>gyrc?hEqbsmbq6F@P)>GdG(50dEGtU<| z6OMEk!wZCcCwd3uIMb0b@QI?d4%4C$zv?1vXy{8Qx)vk*$ba-IB~6l77lDav-@1YR8(_4eCBu z)5)5ZbZLE;JK_bV-#<8ljBGU786XG)IlDcDZiV{4x5bxm4)U4gUE?-EprHNQ4y8ad z|J|y2y8X*hF&@CIu?l3c8%NGPXmQ#D`@jR$qI5}MVQmTIsap+ncGEL=#68bRyWB<; zQr1@GwRJ2d9-jc?+c)s8Mv^Q#_WK!gdbxShL}T42F%sIAzZtY{X^ z9~k{l^&#y6c?s4iS@QIp4fv7WK}#e}AM1X-gGfS!n6$+eZk8MHKujtBqBdchspsrr zQvEgGb1L#W*)7Mu;y_*-R?KtkgKeNL!PNH?nfm3z(r4`zxOx~@{z^&x<>|1kSiJiG|sZ$U4KwBUFhVP)MT58 zN@%yr)KkZ>9r9e*G+;0=6Vl$dojf5gv}*C7!=RJDBSj&IM~VuSIaHX>-UkK z-c(RVXMLF@{CxE)&f6sxLM_7PP}IPOM$UGW8LTzZ=vd04cIp~@*NkxQ7*Sr%G$qhVH-5HbZve{2rk z-*swx%Kl-M*!aMd?6GBbBQ?#V%xa=a4BOwTlg&hoE(97`0w(iQDoIXBBYI0ml>3y3 zoYI6Z*$9VSbrBfEs(l-Kxa_&?=a@X~<{Z$Z0IB`O&l%mT8`=@n@KM1ye&bF+B4WZ# zf_*1f6=W;fH|AGi;9m4CeKoH^(7+_s!r4(_Ik4!$85Ko-rpC`dBocdc_N^>)a?AJ6 zj@~{<_o%u2M2`!0{qEN3KJ#zz`PWtm6$nywMaELqj2wIe(@I35vB@s!2OXH6fYO(` zY5Pt$k(Ix|!e`f@dZidnji{j`gZTYcB^KXGFGRqK*l}G#!ev0u;{l(TWT{HoAVQE- zkwefm_%{5h&kQZzr}c0V+7`;p8JuVOvo@rugq}|9k9`*(`q*bpjEP~LwY%cNJt)rn zJwN723i~Bqwtm^p4KrWifjLxxt7;aBvU#hxE3ENR@!q4@`xfz~oD7)sf;AI{&nP4;43gD9|Zb+2Bjp~m|h z#Hp>uQyrm~+m3DlVz$Mz%O&x2@n@~$3BgAjgSq+m{RbI5v_0R<(1kAt%2zrL_BFCT z7dmfJ&ps0-MwQTc+VS!9ofT7IGj!D$H}b-YFl#%6Y2=fGbZ+LYUM&@G*5) ziP=We!m4RumK-8d1uU{0cu12X(N+u|%9;(?8(?=m&c$$|Arnx`EeqL%3E^h9OkL`H zkZir!rk{b_gXJQ@18$!)$r;c5J|iZ$7mCoAOfZtBdTAGMQWt*yqNPg!aWB$&O}mU4 z$(sFW5NHn(!APKo3$6)nJX$zG>btb6-BjHwJ@Aw)%j|`Z!{JgRO~qgD#?q6|pSGu& zn}4dfC~Ww*4_^9;c!bQ2tCquSS^CC~sUB=cj++)?Mo!if`5STI!o??iS|`Nlw9!Jg z8buOv=Zd>`^ooIDB${I6XNPi;bG<a@$7jSvV3#v0X({C? z<_{3QBA6XQ!*)x4BN&avUzhi8g1aw_Badh-4*c(#u8)K?wiP8$bOg{+dPd{#Q_=VB z%Z@aUFCM9(RZigc>4Jh(v!9&#G*;fH7{9$P(7cjd9IKesicBC(3HSz#6@;-3>1a?(T&c9k{kBt=|owdL#S*=ae4i zBc%$Kpb5!reXFOi&|DHTmxYPDVV$W`)wmC1Q9s>XF_C*AF?=E>)q(CDOQ?l8Vpv4N z^jx}}J=#E0WR{YQzGxnz?|Inb_8t80`c_{&Cq^9l8OoJx8F3hvjc9F?39OWcz~>qF z{k$+mXJOrfO>~iEyERb)JL|d^XZq|p;>|>S?WC9;(+^mG`{^(=|72*r`KHF;={AJh zD_r&q;ZJaqC^x^~f|?h`nT5R^B6m=Cq#fAM%Bwg9UD6cy3+$6CsY4;6-Qf0|2 z(J7~Tcop)>R$HI`a50o$)FFyp6YpjFxY+XuvSpfURAwE;^0ta~Wpx=fQ-{8$1d38P zZpOPZ(K|r%osh<99xETo@N5Z>xs>&}uj$Yw_0sg)ZQz-487Wjj@)3Wrw2toHo|>|r zX(a-RusG5aGs#^zZoMt7tKQL%T4%&De*q!V@8}Y*GKDYk3@P4pFKo`wZf~?=+y)LI zvt!C>3|$EzIeg{)O!V`oDRUTA)O>!Ad78hwmxpC#<^@7qNql^8y-nBI zTGv?DcI#ti28R;`cMgA1l*}C*>@Q&3PxURjeW&He{AKZgwbL)|m@@Y4BGoee`#ZY> zRUR~VJ2@^G!v8eeEIxZ{LU_?W+KUWyI^1)ea$QU&}rmx`KL;TLD ztQ+oOOBsu+E^=vXw2l1tkWR~_PE0H8uFD4FU9t)7y|G$MeOg(Rw}=sc()UZ~wTxBd zGABCCVe1!%Qbc1*{ws)97Q>|^US(Cmm$u&(LyGIJ6G^vE~DAVRUy3(@@< z*emo4xR_|E=Godf&T;@ZyHs&;08qTJC=brfKbZJjtY+8*>nW04eWr@;7a$f8C~_#w z*%u9VlL1Qiq#8^EoZZA%jz_QYzN9NcP+d}TCq_~wTBP6JLo){8h zuZ76qj+UQm3!@rJgH#`72fQF@^qg$fHp?s6HGXU|_p24$49-?97Skf#7?dlV=jmHn70IdrURU0It*XdOt~w3$UeMyDO^RPp>s)T3^c zb1`aJlHe96SM)xviQ@nS88ukiISoZpBALD+#eMe8$ z?n7&vi`#j((j7Q|FfJjh!cO%b>#Zzv>%9{p|c-{b%#^Ob+=^DLM<}i&yEvlr*(Z4*z31cH9Ld73Wwu_llB# zvsh(UX3|aYVNdOrM$if6*T&UOWlZpDbg~Q$Y)9D?rk|R6$<_a=>|<)C-HP@iNjIc! z75WgF6$n?39K5#SlGf$6-oZV@;84K!Dp0Y_96wcdHYsLVyNNK(9k)7uhj`x9awhSG zz&B9dOrkLUeS7w(p}&4#pX05zo%2$*LY)_*D3}uMBWU#G*cvQgb`?fv7?&}9^efp3 zazxp}oqd5gvYz)BLtb^oha3s~+QQ)>0ue3&CCacjBn`V|Jj3_iW^?2)-? zR96!5HDNq#&f2(ae{=>s>_K9h5~6U2%%Wc$F*`Pp0`TcD>n*Gd>2{K8v;(U2ht3s* zk_)hh=gk^ob_c6c>FvW(DkxH@0t?ZA9z(pboR{{DaFK7r&8W(4{ zY0hxkges7{*E7P&Qr2-2KWjD)F534sr$=lQ#8^*3Z%yTLG0t~vi!OOyf0>nY1HT;i z?_LRbXNPXJEt`FTt)QSF%ZOy6%i#wpVbHfIU`%93?cyk%@D9z*&kD*fC-IZe>OSyp zxe#x;JogWz|ClLNZvI>-A-49hc4Dp=PMX9B?l{K>y=P8On637l{u9846*Q>?G|2`4 z4J?yIX5;tK$QN9N9C*BPmE)GWo)v?_$oA|pMTc)e1at{<$WM? zTfs~`!PAz*$XunODIBZi$Y@?{1MhahAi`p zVoq!+hJ7|FwfUkej_<7tc7bzdS?od;b<=_gXKwU12ir%QSiXAiG2K}NBk+={^+(sC zft0=9emoCVz;trfj*%e$tSJ*xI+tYy%&W-jD$L9d-uYX#I@b*jZIu~aDD zmN&neV(3L)T8-{a1G4^yov_z?E2o;{;0Kn4Kg>^u)<5PU7H1Vs0CGb;(JKLk!}ktj z)5cf-LMzbnL|IS~mYLr~66DME`6kGKQR4c>t?Kwed&bH&s7S}>7YAshNw>7<@M@w2 z#Vgycmkp>G5&w~rfDC*ul1lhv%8pKvQ3H?S`wI@_m&T}F$Yd)*2f}zA`qK94e~Pg7 z?u(7_T>GJtqKo+d=u6sKe}C0-;txSfswDi}dclQ~%`fgvFDiR9of&@o zPJ+k1{XC$NH=6>r)LmT<^@cDvz~O}NzDP(BX~-0GP0$VuxhD*CiX||%@&K{mp@FMBaWfe zI%U%8a493C*6F|(?q5GJFHHtl1!xd8{a2HL3r9*VEW)$D=1l9?RY{l5XO73q0#T#H=@aCl9LkUci6FIOuuSc-@Zp} z^STiw>(x~%twBX`*=M!(^!*Z{#OXM=UNsv`!=U&O|GRM)L9^#5oc0# zXK7BVYCR)sVck}I_q?q^{1vnU=FYKZOXsr_>%xY^Aw0b(W<75z`|VwUX~XBTITku! z(D3beU`RZnt0Ib7O16UahleAy?|T>iaP_XyTCwA1d{^oULH)2OSjkGhK>`O9D0#Uh z#p6xTx|(&4Jqoo#1V~A8zpz9_PU)^SZ5$?GxT(4ZEWaK(KRaVBtaA?67a*TfAa_$H zZZj=TA&R!j1XbbR=3*cb6KaGgN=AnKUjW<7b8;(q3RBU!4r1Q$7Q@|L(Zbxv@weVy z-E;F_QGk>grT?*wq+nk56YldUTSm9ff_q_XotBE+4VcCSKB~PA6fE;coo|WXC_O+| z=WQqCKE^WMND6*Oh@Ed{l)LVttgxhnmd$(B0qC966os!V#S(qxSOj*GP*BYeZ3bMb zwEka<{6cja`%~=R1JbYKfj&C#pjZ>joh zC^3wYxU>Um-U(ARGSWFQjG1F=>&15)CW54u0W`8rs?uw2QsvdOhaX-an!W7t+mrS+ zrAhb#-8CqMjy;!j&TsKX&qcE0nbE@t67v$myl793Uo{r$^l`Zj)1!LOD1@ztWl-N! z@UXd)@=v$Z=(`M~%EvN|dB%u1`W8m`6_y-D-5+NiYh2pGJr`=OgP8AYby-?yQUBh8 znQP5GICjJ4c^nw`(JkAp;I%(!SeSWuHa#?7D_bkn91vJa0)1FNmK3}^y=!yw(SAox^9wxz8_nJ?I zUb~upa0=rQIKnoHO2!q@T5r172&8uUDngr-Ys&Yjs&F2N=}A_KJ|3=~O;?&H^5KnMEeL2ioySnL*e0=xh%}I&M=w+hZlrXP|G{J@=hA z>F&J6h`D2&?auSOtP|A7T9^$C=zynT-ca8kIk_-gQ6Mt50y>nWck`E+#-?ynm3Xi> zPVKJP)2E;c(ma}}Fk{k99NaYGLe-xA23-i|>Quere9Y^m&ygS2NKhhmH1Q>4+OCxb zX!}-L)F;`kEUSFtsM+S5UB_igiAOc@yCIdh^n}l{m~db0b%xoCO?(`QB!g-^(50&*{o`nZP1NQ zE-7p8f#*as`Kk}3{Mw67>nM>W%cE)}_Xv$BixA^Q7LfQm_L+8UsMLa)f@~~$D3Lb3 zETSn?!CsPL@gW&jXP^ZpK6I18q~tk6^J#N&WA}}$QhLuHsJW2wxcQ7UDaJj^4{x0= z;_g6IMO$0h%@wAU{*!*H9z*54fw@6vav)~5-K3(&QzsJEEU>M;#7aGMsTLed+3 zT^et*X5XsNTBzIXHYR(R9gFQ+uF%nS&%X_UG{H(H`Sh{s!Lc2BDK5dzSgkonYX=J% zjN6p;=nI=oh3s!6w~H`k&IUbV)OL16u-#3wGR%`fSDt(qnoR`1f{}vX;zy!cbNy(n zo6RzgwtQuXs7zvDhwEZjPb#}3n;4-UZ5SLs%JIBzTCrxTTpOp)MIXf@1o9m}L`Ro~ z%1Zt*VBL-kdG)(XneTLGJ9f&Oy~auU8FLem2s3`X$@0UynwdZ$)NPC-bc8Hc%@oa* zM9hm1?HlaEYp)V6wP_^x} zmY4+JdyGt9nTYw}e036kI$5R^o?KfD=I2)_HTzCIhER{vzeI}_wqtvMlFO;?KNn~R zV~H+;oql}ya@t`U^>j>#K`(W33P-OJ`Mq0f+5Zzl@XgYm2bW?ciH|rXm1AS!IB}i` zKz%Z2V{oEe_8v15gfmVemP1JQ4Z6~T#Ndm~^Jui(BC&4+CPn6U(0tIt6tYdsKl*9v{(w(rSRldG{r@v13w^w2=&sT@ z+dIRg;r^1ze0VGbyn_GbQ1-eul$UV+er_h|*8mY(b`h9MLrGZ7n~GgGU93cgT}@-d z&;aS)0gyb?H+pYFvBPIkZLttzud?fVY^BaP$&yiOiq3nUZJY2fvYYD>UBbnjGZ=a= zShNGF8PGtKmh%(%qZs4!!sy(64DfDemaf>fJmg1eaM>m(&w-3obR<{03)(1MP%V!v zD)4}Kb@>1exprDFHj>3C_KCs=Lg|)2_SD=3nDT;JlM1F<)zv^1H6FW8x=^Qgov;ou zDm4L$LVy*>0P+HDPls z8Vvd|8;@)QCi9eiai-={ua#OTHhA# zN#_e4UhdvDyCKi#zY1gX113qm{5aiVU!UUW{{Gge7}jj=#aEU=$o>(5L|ky_y|p%enFw6KyCF@t?`wJ;_^{t~pf*qWt`5OUCAHrHIHqrh9Y zi|xl}9&a?N9aUzG?oaa46A>x=oh+1Kbdl=uZEPJTTYA%XP3D$^=gF&*#N?}$T2+(h zdGzRKRfApEf{p$Ep~PRJwiV*Mi1VMn?I z3X{?H)MSZAY4#iKu!ufgENA^Ur?Ai56SSeZ=i&C*iB1i6{dM}B4-VDN-oTCYJY4I* zbhk@D6L(OD#4Y@U zl2^TDV)TysR&`9Bm7aA$rDzQjGV9lpNZJ-s|MZP} z#(z4zwyB=>4J|qkpHHos+C673>zo!q_MK@R+vs9AynvlI!h-HKeT&cB2;l1HGN zTSVF~L`1e-TDL5>ZcLAK`HHE_S!8 z)Z+uorC35tZS>mFK?GM1{?0a~_WyxNi?QqMiK}-w0G8{YD=cu?z0JuL6Snvj#8VO* z%g~r7h1d^9*GXN`=w$w~OtOF6K^8oMwb7#6c|2ne@2WO!2v9FDh-JQ>cVmMRz{?iz zY#y8Mx&VTl;D=u1UmHkqp*+br@@8AY8Z`Q7wu4jFv-Y93Ui`9NYQ9GqzW^4|`TuPC zBgj;qXBv7Qbc>YWyj~;sCZT!x+MZ%>Yesgs;$;rbm6<1nzlm;)T1DEH`daM&7MMWJ z(`C^)eAkRd;k5z9DL8;yQO$orwJglPAOv@3P=|%@25TGnA%to2KEwZh)SVmXG9kD7 zv>RD{v_w=Dyr9?osYANrrgRTe`M*3I(L@XYM&kwKR8NAAt9o$?ZZ12b!2kS2GjF!? zZshIR)Uvp>vMPlPrIv&^XsYF9n#I15HN-*Am1CX3ibRe zc0IjIU#NkaKg(5x`U3gkn_sT>^0FYl@62~-wfH?1oC2qhygo<9&my$&4QZc^cP)u- zH#AR4@I27)?-%=dZ&{7OO2)EG&B55u~nYeAPk7Y~%EEW4O=*r{KS;nndMy zUWd-uk!$a_;cM?pwVWR}#4Oc|aF=vv!K!UfqQi*uezUjmmCGmZNBRPN2yO!f*EHM~ zVnipPZl*_w71U{Uxm<-$)Yo)-RidEw_?p2GAZMMHyYA?35Hh*UV&buvYEY?y)M1cu zU))`_XmINdlmuRwFG=13C|D9Q+(8njIiEl!O97l9kT?{AQj&)_>fmWmBT= z?eE_%s9ZV4gLHMDu0JDu`|`|c*`4kx-M`jdji@M)fV$tQL8*hmX4h9UOt{(8yifcH&NJ^g|JYpoRN2YrgBqcNlU3I}$&tC)taa)YUW+3ol@=oM zr-NCk;o)G$YBq6LZI$?>#d-gqWgX#v81Z~Drnhf$f7ejQQRTubd5~9#V{^oA)9Q-J z*`MCr0*iCDck?YeK3G^-wlU_~G8t8HOGXwx?cQVJ@O2~tQ>a|qs!e&lpockM$H|&v!d)=ddiq>nh&b)IxF9X4v2|i}k`d_yjC2f)%Evz~PaogphE zEuH7WLxC1It7**-@#s5h+T0}*S_8_PMaNfvDPiVku3-Y+3-?O(f5G1f(ZBE$Kz(47 z4ZFBSyoppJ6FM~tT7U&Vxs{uZjPkne09|^@1RZZ`NK$9{WcwqtY@>u~7Mdrstr$xK z7ViKI!~jU{S9<)5ckmdrCh3L22h4Yo+IwuL&SV9RHeZ|QERXlHL)Te@5qY?05LTJo zv{T#s3f}ohig?3OY z`J5j-JNkW1HxdZmY5E9SHV&3GwPF6~+TocBPm4dby2lZH${OkDL-(UjAZ+4g3}mne z_racI?=6tB-2z8jc;!r<3X@LxZ3?mga`&6+r;DHP$nzRL{`I3pZx;aK7F^dRZLWwf z-|)FNB-V66!zGiponjHPL^U7OcG}w)c)Ge9I{q!(;JiuXw?E>wR|`GW;3cK9%CopRGlm^A)#*#;c3o`@s8mGVBBEGd#}D!+F7T`mleO(!ua9 z##?R1d8_fqFD>0DlnbY$r)1Rq*dZthmz$~}@b(f+)thX2*6x48FITT<*hu#`ea}ZG z_DJ+)Ew8966}Gn1Ox9P(h{@;JsIRd6?5d zAQ>RideG0w&*-S{HtBmzox64NYoK(Xr_FE<+z8+YMTil9H#>{DcSr8k?yjr96H{7@ zB=OVufaxy5(NudBJ+Ru`cg-caSXIm%B}IE-@nbChQ$r75&@8|Wa*X^3OqC5lNo4ffLh%4Zbe3;pLLd^U_sLC%-_1)d}B0|Cz78Dtko$^%MHm zfWM)mSzGM&?B#Cx%u@Tj)U0LUi3;(%+`lKq9tA9>Md^`S*4EF8((>0H?-0Cznz#Di z+!^1dX+9~NivbEsxsU=%y2*vm_N&n79*Fnwv- zXIAP5In2|#pEW3kpATfnnUZEN?F&w%AhM=wEn4~K;hPL}$XucO#EuIJS@V>vG|*N5xzSd7a^mK zGp_Updu=VgJMCHPWB^IzqA)H6@|Bu5pHTU9bP`H*`$rkQ@B5f8jw&A7*1>Y4cV@94 z!b_U^Xhix}bL?fHm%ZQy)i@9@4WlX~DBb~UUMHA4C~VJ)v^Z~(X5UBsr_}>MBBjSz zrfD>WNsW<3obBa+{=%V3Iq!1OY(8>+BW32NriwMk7y%LrBfEPG-#RNL*`Lqj=s5!( zl3M192fYC%>@C^xPvcLN|M<}C|7u_Ytak!VuSV16OGEl89Ju;Su;@3XCc}UCsVZS` zhUm0G{1*xS4qG_?-KU6WTa}|5x2pNIs=a!Zw#~-u?94SA^7zQU$n^RS49;&nz#>!%vs*STiiS3#bx9`JL^>hB(H z+W2?(j(CMngRCcYa;|_kFyy%!yuvYxAYm4v3eD{Mhlf%@C5H zauw!ykS0cXlVC(5CfYaukh27VJOrW}z)lZ;vm5_sO9s85fwJkp#fBn=H%ZI{It0-{ zU$OO_mEE^Pp{r*jup*V1pb_xHw!j~Fck6iI z(1^P)UL179%KQD1uji$O@%dU%BG4og`1$=JZQ?!38}#0aMY-a?1tvo&kpaVY)hp4b1W`1WFoEpT-v0%>N+ z^a}l zj40wfKI=yN4xrKttn_D&N}%Zvt5TbJ2Zt`7<>&-y@dv94M3pR`S5JOSINv)5rTm98 z)5ZxW9T#@WLqFG*5ja6DvIKLJ3HRbaZi!~<-v6gW1-)LFos8l-_|%OZ+?c!y82PQ9o9U%G?Ven8)4 z;~IZ2wuN|osWAh%-ttO z+C)~RAG*#sHsmf(@)67j&}@9&FZkR&6J;a;IC{$^QfBkhf=bw`0>_x{mJ zh$cvZ1#GU#JZADu{fG-{N%|(tjVCBydZ<@g!f&g}83v*OpBH@m zeXvs$j!tBj3z+ONQ8ra5_Q{cp{d?iPwka3b)uvS7@qya>YY4>tYv#1{$CeYfGQp{D|DGiV!uKPXmmys(tZ$@6GW=) zImYe#^SXJ95EC+;(|?LCzIoWH)?Srx3bMNh=IM}fz9y9#(gnc4P+l8^oI&FL-v0J)W@l zOY^CEm{4&zfaN4kO`J?kSVZuOJ9VHJ#SY%d?m-T8@hNyVifI%;Q9@yHmD5_#|5>k*mdWRui_1}j{a3% z7oyG`z3pD{1(Gh+S&B%H)p`?V82{Ki#fYr!d#heVuC;BraIwMKDu4gJj!W*vX6g~C zvjM@>-QSmH!j%u&jr-h=gCwYTfM$%>qcxAEfNN2M%N>I#Sm5{F?*zGyy*{+6g&yz1 zOyjMjC{p|aQG&+M-HgQgk+1%kQnr)lC|WqkNwvSfI=)CSY-0gx-e))p;4-*VEb9WM z!6I<4^1fzuuyobwsc3wrhjdTtjY99bfql+a#dCyyoEi?WE;=-fgf(D`2VMB4Z;hX$ zq_mRC#}?}VMJH8(WL$awX4S4?6PlXMJ@)7iMIDHX|M6XKPhbbIH2M;xm3kbE@$vhJ znbx^zPF(F#-{@$C*pE>Qw@Dp+V+n9}o)|t#6vU{R`2=i6_MFBT>!Uaqeww9f>obG- zG;!z29;0}YMbp^6$H7V8+v6>J7Y21_ufE^f@W_6@rP9sanp617B-2EuZ#k-`j#yKp zpzUjJK18uj}_|OX1FK`2}X^=;ybKc+fWID>vyiT3oE{SU2x~Z_DzA$-Rd+O#} zf7f$KXi$we^58M&hnFn|3x>}sDc0`mjtjM78?5Hg*q0Tovx|z*7}=QYCa(>Ycx%FM4>x1`3a8N2C9q2~#bBl$1;x%O z^Jo^c;O)rSW5N)i0>4di8KEq&F2EN0?cVKiW9_WFeuUm$I?{{=plo$Oh5SMW( z<=yF~1r@lYtWHUL0;})p&_8#sa9O$_B8krOYsYS*@%0+;7>8!a*H-Q}+z)$Nup}wM zW#fl8X)=?3am9`tNAII$G(|6!Dzu2q%%2(X{iKxb0rN$Y0;_Z~IG zrSXlMBE87@oeFNFsGs)cC+qztk5DsF;boT%p;_t=d(R!;$(Ux?#yqFZTkG#C6xn~U zZ)C_2{AiZ)*zmXZQZ^z0kL&S|X(k%aME_d#>Jm|OE7G%8Y*de{V6J2q(cx1w-Y@Z> zV8_i)+O^1LQ@?#H=`38`k8%$^_t=Ynj+D_YEP`Y!gCO0v@uU_YprKboqmnC~R4(v+ z7qBM?RE+}QNDUgDFa6HX)@+>tYi)Xd>TG%b5YTmc|5>K@_~qA@lvQ=J`N`mVm%@kR zlufw%$G%nhbs^5<9EC^^C;6Rqv=__+3#GS#8)a2CA z=bNDw3Uq%NulU(gICKJ!`ctH4GAvwp{zaP@fmjovZqW1qM{wM}q3gqadPR4T&+8I` zvdwE5ah!=L8glrqAk$OreMkIOcE2Gf;JYR|vd%@temt62=&0>3W`ESx6Y6l;cCjo8 zszxm8eO;_s4zfF!N=$aDlm8Aay~2J(^e4R=AXAkSCj=Ct2}Fuf1!)3B@Q90v3QMzv z&)f$kjj8HT7LFp`RZ;c5LT&2gvzx^|70wxUYCiCn+vc2EVr3T=!$4yytEVkha`1f?$*%XfQPuOZ=q8xkgbtR3 zLUBc~0L^qOI?lI{i8VnY{r&ti<(erF?IADH^wL5>1QseynqZOB(ohaID111rUKQbJ z_`RsViO0l&kt$Z_O}R&$>Vx;aj+Pv5|6PXS?vsqDA^Jt>J5wWk-E&Qwb%1D7KT7k! zIQ-V{gi&(%h+vqgE3We!qi&<7lWLC4^Os)fw}KKIrY?yoGhy$8_T`YP z7sf2*-W$x@_dMA6Th7V|X$@6PiPc7z(l7O2VK{~;xtV{O$+fpNEIWA7O5ncf*d@Ja zB{H)<5SJ1>{CN-e&r~+4@kUER4e6tee0C<$7j&1MutelZX}nf-*8X1Dqs$JH8dCJr z&c2z_*^cMt2-N4>wu_{@hE^fWh3r6u?(hQj_)1*2F?spz`vugQG8`p7hzgJgEhf0Z zN)oKIKi}TX`2t1%*WQA0FmbApr-z1L>&eMq$`BiSaluuRcGcx}O7AIbmpq0p2|jK9 zY=ON!@p7^xw5|jVqqjCB*TbJVzMk%47_;(|lCCNMkt_8ZDgm}COhS3O2dA_!YMBgv zsqJg_R(&NHtFQQQ(~gmClCI7l4X7@#?yBI@2)#cx6I&=DJqEk7mJ~U=1dr1U-U*pC z$^AVBxE<9%oZclX($c4+G6|>*y8G^WM>}&||0BP}{eRwwk^MxewSp-w(eElS(6jWZ z^@byqr+2@w$W?B2Y!Xv`?Wf+%-%3bB^}R^3SxM-5gd#Vu+`^uV+vC^lO)LzA|K*gm zwHVmJw>AbC$l#7PYF3Uh6F+;lobv`ETxF`Xq<^ZTymm4J?zS+sIN>)IHN*J>;tQnx zn1MaZ0W>LE`Ho3dU#0}Mxe5FhsM1R1ikKrN~^ z^y1$(ig!{*3~)l?f|7)cM#7__hb^?%Ze!`j7es&wB4#6QX#D>^?_T^}ZuwgRvM;aw zD3rXMuU{L#F^$g@H~m0o2Chjj_5a(&T4=9uw&-|`pOte5tkAQz==hpR9rU`kNY$i^ z|K7iUr+phiGfv0l61)f=)Aq@&Ya^+;q9=HWZ5oFaR@o)(9NT9{R^P?b;Si~SwqRjq zFTP==?;Z4SPai5WxUeKXn`zfYVLBE${pto28vB{LhSuh}4v;@!6(IfZLR?P(7);hR z@y+;8f}JiM4j&|o)+mAn{TwctH>dNz>;<7($Mm&*HBSb_w+H!}?Ad5L&OXtSWsR4Z zg{A?PSO=?*;o~K_7%IAGexHt6NX?Ho9`G)=X#xQ9o;Ulk!)d>VpOw%&@`03(mQ~;=1KR05ciSm^d%bmGqV(!$3IE1u6{uC%`m_lL0z-ERz z3SrpzzuWvgKrVDtRIz1M9h4dxUW_ex9L2Y*U$FH-`WNMSCO0>W5pnzb>s-%>)ORIg zf`at&$94};il0|cAIfoweaJJ7WMZXjH9q+ulR>aokq15v;2&N7`C80%5lJ=9p{X4N zKo9op$>+430D)M(9)L{%EJQ2R-h6aytQ;JgO+-Tz_k_!EsqKiN(&fQa4MlrfRbu3;%5m*8*Jri`QR5oF?)eUlJ6`O( zT5Ec!SlLSE6CZ%?&H_cJJ@F$q*X}Rz`P~KT+Kd@wE`16pRK+X>+=^h(hZU=yg0qr7lhIsA~9&GcJ(Rco4YjHP(c+gRk*!m0h<;c#NJ4SUm9gYnsq z=Y833WDHxSDPo}8n`__IIN?WhbO}JeXRB`J34ihJR=kUbzNT$tTfu3ADpXHyUBq{# z?)3rf?X_*({+!?>6q`}jS1FR>&4tQA31L<2LabEU8fz(1eDVGfeW!4-4_P~Ghv7=T zJ`8w>CrAdqq+**Z#!*H*`Ai^9`IyhW2d@x?!usQvOt>bb} zoYSO58)Cn!vNjckw@oZWQhHlq-X3znA{+Ruhw8Fk=UN`l4a`v5#9s-nyCWVZef-!> z4S=*tW!&M&{NHeNw4fu?5Jjl?H@@E{C9>QxUOt(ecb>;alCABYYU*&JP z1cDeTQfvT;P~+s|%Y&~3l6Q>NLnhH}piU(7%(DFPf5D5nC;WY{U6u44eI4*}- zUfi9q0l3IftAE4ocBU0$;Z~NcO2; zZ{GIVl&-%aii)I^?znfWpxSztVnMO*U~-0_?+V~Bwq-c7Zh3GK^3Iv)INPp8p4>Ud zu{j1%8Rb4OBPP)GK+y#<3239T?9`QhMExFgL~I9gpxo#6W&r|(8jifqEkQBCUR15O zo-!eJ!N(^{VOTxWP3|UZN7t6O(D5IlM?Nk(sjq7;TTG)CXsTzkAI!~P{9KBkWI32C zpeyK_yJr6)xre}91BfJJ5BEO_>ij>QePvjbZQHH1f`AA}gMbL4G)R|#h;&JZAT8Yu zqJX4`GK92rm&7o1Nq5800}L?qzzp%-=<`0`evf1S+57r8$1!(babD|O=US z3(h`7)rHE`0|5VU^LD5k1Cs{K0`Qn z#wJ&=yu&jAN|PZ#QUZOp9rbNa`4D)#9U|`7SRlFus@`65sXqog!#}OLA>b8h-$#W& z>ku)zir?8^4hECNtR~w#NA?ZnM>(WjzR7OqJ#{)cqNiit7eD4~(shRFuD6#*wrr>J2sLabMJ%rH(N-G=i-N8azeHn{ zTY`qs^9p&fRjUpA1NL|Q=-3!bUCZo=%9SO(j=i^073{ud1%xTN=ai~ubB>uL96-6mYx5g9CvV&CN17W8A5xv5h)TtSxkr3Je7lEQ)XdxmB}A^q>&89WLUCa0^+qqz{E z(tFbCd`^Q-avCTV^RxOQFjQF3Qf)Iy?2gnD|MA7teoVHex%JmbB?+J5WaS2H5<~Ry zdsngIlpaR$TyH|vTF3eEimoHe`k38eIgE4$9HC$BDLY8Fj@hHa^~V6TL|6Tjl^Jbm zcVSzDqT+i>Rab|Uiz%5ee$>9+GXt9Eg1>xBPik>}1A7_evSmvI?9uYUJbEi}8Li48 z#cq$X$V0il*!6IVFTwl@Y4RDz%*5+Cig1~%@{e*AQe$C31(r$76VCaR{WD@Pm6+N9 z%C{yIKGRk6OHZQ8H_c2k`~uvvR|xF(f~-mXURoAu*|>e z@wIyLauL?7`@Y9@RL1C4%#cp83bM!7=L`8oMZVh!cQf6=HdN|Fv|Ok~V2@+k^EDZY z5Z7fegM$5{rdKa_X$dc zEFb{uy+mJf1pnpI*n@rah*gtoCQ3az{_foq-+Pi$*e~|%YViyV3dg?`eS`Pg zcN3n=c9G#P<5xK)no&!(YJygDo><=v*73}2?ae;h=up2vjl?>inBY78&Nf*k)$Kgs zQixn@oTC4)`Gc-IIws38YdtjIi1pEQJqJ)bUfVVhFaH6>SOxb{1Mn6)TliVW>pYO>H+k4r3DZ0?&;gxQ02$LjM3r|7o( z=*J4sc^v(h;r8RGl?t$5Oq6eWi8);Khn?h)&9v=1(Uo#|$+w5GY0!wO#3va78hcN`N0v@b%Nd_r47#EBU3U7DK4W56^xJ<(*u8|EN z$|X9ZO($_z2^CGK>JE6=Vp@=#2%pCuyDD@)Ctnejdu==2_awjsXKdTEg`QQr?E(+s zPePON`LWSq`}UC^#T{hG3b#br;84Q`Oi-$*uJ}gnpf!)B2bq0w_31oSdAX8atS^LA zwbbYK2FfiEZwqRJ_LTnU%O$O?8G&`!|2 zH0x6HWhiU^Vnb6x^Uhms4P0EV)%X^14_+sXWLzzj2VU?vOa_F>-7Te4vhP|-Z8EKa zbIf;QvgM<4RdQuO2Pg-|Fw4gzW{M1|=NZ2iS0dK+6WA9Xu@Ax)V^!p7M+V>0j&`&u z#V3{wxqX_tQcC|=c&mak@n-;qDRI%$7RP=1GxUtNQ4b;wkSeUjS-RcSe%=_$x{rmc z7=)0wq11kzwt0+F_X7u%yNv8=ki6Bl}?&>gvbIM+>`WfU}P zPHZxI8%ir-6S~dtUqgiXPR2U!dvK}&AkbjQQ#CacJPY!{C3( z=1PCb=6Q%iW{y@!)s=<&onO(~j2M>>>-P9sBO8A2uPuFi!k+X5jhb(Jq}d?De@jr}VZefBNYnMQnXhcw%Wnq+hMg81AP}7?mR1 zmH5KuDsic##O}%x3`HNF;3`hYxs15xuvMz=^R2FP$2bim$coqkPfz`w+~e-c-WN)G zi*)=R|9x&(+xGVW*q#!JFpje!Xt_+$NKMy)BA(VP7!x~&_({HY=cX!ETaPRp?7erp zXcrGA^KwkP_`c3HOUJl_6qSTL2^zmR>m0ACv^kyVzupzg(=fX($e414M?AYQ)!0{_ zcEo_Dbpy7PPqI!sZ>08)eO!t_jf$0#qtW<46=%_=1+|MQPSKme2mODE$1 zAvn7f?5>RCfXMX0ZYKI*0-J0vcwK9wrfg^72RM607GB z;#k$NTrQoh*ErP|(Q3nB6MiP*FujD*LUU9|fTTzTTR;ulU^4u2*raeXaWQBOb&M(z z_g$d!%-kySO?!uH_>An{2y@OKkDA=Wq1I9{bRxh=;pxjKf!oVkQx(YjuS*mLPC={`Xarqk23I zb|$)tm=#o{`IHEC7_U3p0=$DuoYT2w1Q>;-O@{b`zTXA?mL7Ar#j2)$7JXa4HBoPI zSe#OmfRF?SLiEBARykmNR9O1U@qSqo$`&wZ$SyAK|2h6PM&v}?9qZ%OkYkVQ%0*QE zdP|;Lv;^0EEn$P|+#Us|Z%Z)gJWdOe!q!GL=#y=+-|h2;W8tZ4%>)&P;Ctn6G0(=3 zzTN!2TblP3xJ3O6V1h3T28W6emATBFMY3;N5Z$|J4<~6vU$x2n>8Sy zuKfG{ZU1F_k9!=@Fo_5@p3d5#&^ac}0gpe0hxZ(|Hmz=6MiJ!oQEpFEzk~_2Y~Y!V zRLN+*pDvef9^8u&-Qza5!~5f2x19+HtTVH+;-QgK&>w`rMw9BkY18w{Y$Bn8jh=(= ztIxU(0%F%a^#aoEX#OZV`vBfO__YfjG&idHe#iyS8z+k%rp{Ity!yQdon_Fqy55`P zn%fV3pEdU#q7CPCFVgZuZ)~(D9zEFxfk0t5I?~qAMU%)jfCyLGhg##lio2$BA&6Ot zbX2X<4Pbc%@E3on=+}c@9z05<_$tGN;qT{nK~;3WI|DcsU}ce&eAf${z^$n z_Qea#LD5*80|0Te{mLH!N&)J^=M{(G6FbY6Z;5u6!ot>GkutC7l zzY0qsTk1XP+i!o&LOH!w4LEw3xQpjQ>)v8b76;I*Z$m50yN4U~ zT#t9Bi0}BLGxe%0E!qDNUJ4@t+jA4KSxT;gj73YylURG*2v$ys&y$2n1X63NMu5G{ z-X(1x$RfjTs)&0n!C(QS5&QJUT%JbIq2(hUL)$tiP&MxlfT_Mf`bI6Vyc**%o$W_1 z6@l^(-eAplUN5wSXZ>_OG$X`B& z%H&npA{81F1KawQW!Or(VR#IFxqciUe0pWPa=$}*NJKTAi-&{>{&q)6RFL{rm z6j$o;TsugBy&deU*gu}&DZwQ@qHd$lMSGqI1q=F!fB>`GaR_O#zIZbm*kB`p z!X?)u3Q2OkryFqEi*fQd`6d80DXyxli(&kCgp#DmB_a;MXEzY#s1rYeBll$SW^olS z4p0tG_&@$u6K?_DkDUtt3m0d;_x2;ys;7tu$wzLjnu12bPaC>ch%HL?_hEzw@R~5^ z1&e|Gwp2Rq+$ol`RbP4c1yqJdar+?+nwjyPs96d(*feOcGu<}@|HQMuyF7{KRh8>$ z70TTItLH-ots8}zDp)GuA-Itl^h^*e`DV6{j>1Y=)$IX3t1igqOkeb-k7hMIeW%up zn)W`^Jn$CsTOsQOe79GA#J1OtHiS-!eVb=~%hwSa)TQ@X!FdbNvGKas6J(`PX}cq)wnh1$r+Ep#rm3T>NleHDXo ztMubN{Hniii6b5tLpAPJM@pw7@ynr6Od$*xfkb5pkjX1kB2TPeO5ed0Q@Wp7CbBx?)y)q*#7Mr%zZ z-_M-}19zc3`m^e{P*SdAbBYrFALx5R0N_24DLW zAyDmCj*~0=gH^M=u5hon<=P#~drw++9$CqFX38?YHD!3l0Pj(dO#H+`#mp^5QQ!#J ze9_4rc=pS`4&AD?cy>^%8e0o4(=Qe*Zcuv0Dv*p6CcFC(Q6iCrg+vZN;+q}s6$h*X7 z^!Bud!0>!5%^Z95x#;$EkrV_uz5eF9hyQ1*Ev0Hg z9_;C6tOD4|9Dv!S8I&qPyFZ4KRJ3sHXZQciq)b`KB>eddS9{lLUWO4vVWfiwf!9t( zH1qShdk>~+KA=Y4&!pKB{>#M#zEyi(?|!4M?ffZ>~W(%WgyfWQxe>8 zX9GH_k*5#@J!lJUNZ&M^%vGitlb6*Jm*|}jIXRN(I4D#7bHc)>$;K`iDAh)yDIx@5 z!uMuc`cjAeOW?2L7dxHjk8$em=BfX(U`X)yB7>$q>z1S7Zy74J`4CH#)|Gpm+D4#2 zVP*{@01{oW$2Tzf!h^*N>VQL~Kv@$~3k_hw$S-BPsG}^CD5qattZ)B0UR)jtZ8n^2 zqZqR~T!N?D z5^ol78N_^BUW+pqaz0~Ip-*V;9^Y4|jj@fgasc0!BQ=2kIPX)6^L^q2h4HGEUez-* z9Qh9ET+6@SfJdK;_M6_j(NXj@dk`_;WZz>lO#`8L*`)JNUd<59LUF} zsGwN#YeRvUx;QUB>om#J_$N9?#eX)ed!hd9>YcJya27s5R~jd;p(>3qgK#Wkj|;F8 zkv@0q`siTE9iBh8VRqE`2zwxVhNl@nIIwe-M9_f`5dPu&yX?toQ2^_nNpY^Nfy?~b zC_|0Q7LXKFmn}G+jPCy!!50?Li(;-@Ns?)RrvLP2SJMjK*(g@n3?X?HA22ZhiI&6v zv)TcsWp}`%Xd?U+Cpz~t=W#x|6yOKnNxUtK~Qzge- zaqG|zJ9!e%CAvF|)4sV3uXc0dEdu)Cry@j_jM^N`eY85N$yUa81{Vy(cD`c1yY6C* zgTXVgbTJlH(|?7q0b+ESia7OBUjjuof_!(R$%2$$xC~>~Xqv3nc!HjTvwm2~BF=L% zuvjEc{P6x-KBpP`CSAe;V5d9iPp#32*$Z$sZ^b4%GlQ5r>G(IyQ!SB}P?6%wQM z7-8{d2-{hjV3Npjq2|t6EG`|)O)_NN0A)EN4*L&}>5nrwSj7jCFLi?tabZqNC}c2l ztljfcqgR?@NT;tWI{ujFm~6`=<|GmL+SMx@IGgDf1F)Hd;cl5S*V>x*cE%4o;nHEV zFp8kxK7Ii2^`{WM@x6(t#=J5afT7y|r3}!rVTkQ#;?p$(=q8!+gwJa6pF2zk6~rpH zuEr{Nl`*8{qo;sKvO9*3PxDXFr@OHJVf2>hO-0iEVM%Qtp32_j%nSvB{(45-EiCW~ zF~s~pVJvcAY3q|$W^sAw^GX80I~9lK6V&2$j-M6b12>>_)))+cITLR%&Ba+JMz)Sygpl>=KCJ zC#0K{WV8@k%f5iZQ2t{`6&gqEWYCGvZ37_br%SkCc+hcH=r>8a&?5W|K2(nKzL)fS zO{|D&K=hU`RgE=$)~<`yAsbUg=cl4znYrYD8~}`TSh%M``XRH0`J9!4x&8mb)lx z2GZYgxwee0R`mamQr(=Sbu+OS;@{c4KG{k?*dIuGyxtFZMIyvzZh1pfU;M5h%@vKA zz>D4X9Pcxs`qjN$_@M4^^re^2E5(ZjPrgfAu-%+isRU$jt0wZ(oKgPdBKe)hF!Csm zp(>ZxC)n|=Ab9*(z;KR+Er`>BYmTMWfBIyKCBx(cCDQqnPDzYAa-p7y|MkYY0lag;i2q z1|f6AvmE-&KSgyD1p1rJrep$krFg#!Vx^YWUymFrCtgOdei;n3cwT5#5*L}z))a8I z)Z+}T;Ozh5Q#CYrRAo+OnJszWHoF7!(=UJ;JRX*x&Ut??c7BbuUBJFXlp^rXS31Ey zvnMXx%CS`pch^)Dv2qg)uVLmq=K22FMGpEC%AUnwt(HH0T%)_<;&c5e5neS{gr&i{ z_GO}a3&ni{4oEG(a$ENM-1v%GD8I{FZL@DYKZj^z#jP4U-rElK>!BVJ$z@W;n}1%< z!w~Iemqh-{li5-XPibOxl!sSbFE;YEe#WUU*%xkYt|@r%=h>pqw!*P2x0o#qDDKK@ z-RNqkL=(mYF^T$cc>k)@^qSlW`?eOr0C3#zBX1LY~p8(~VpKLk? zRY^`w`=V(8b9RrsL}y4vsmUYZMQvE|gJIuiUo1h^!zc4}B~Y~O(e)gdVTr9!lxPWh zn*;X%N}G#wZG`#j%I4J*4Ms-%oLT)JukyxXqRC#fsEH;Lx$Ucl%dj!p+P86K{q;H_3fbjB#$4tJNwe}olZx1kgp?; z3^_w@S$gOa*m5gxc~ReW?oQ&96)ZbFk+olX8kJs^&wCVIjzX1o4pQ+3uGcMT;x ziB82Y^3zg8e0w3)uHBKgQB8ZC?s2)@_0%K22SM09X&Uq8?OfjGO(L!Ta zlRFbegkrLvee-t+yqjVcay3Mr>7;|V5mf=q^wF`TYv-8767ebeH zKH1pEYtC1s0k-d;J-&15r0E(-e7d+yOuc%wpi(>(nlAX#lyH+}C?jCGli9g5Jit&G zbA^;Meey7cphHsjcq>8?t@7~s(%z0#dGT$Y%z8W+Lz6Q`g$_3(7K$}8tKfh=XQ5Aw zPkE90M*-q<2ksS`q&f%Mr}WVpzeM<5Hq1{i<^1&Mi~XL(_N5Z&=xRsUDl(|a*uVGf z=plIAN<`z%U-zE?C@P~VTG z1>8LKcz?^)-sETYM26x&y&w=d>RRD(s4K?r9d$;#dT7G|f|HKq*<)@@ViY+v(NIIJuaogE<9aC2FfNa;M3%mj`3I>*8cDG$E3c*j%g0Cu|BiYetO_ zxO4)RmAG@?#ipv~GO4$Y2UPV_#|s`~`pmxynb>u&Qb|+1XTab?-)c?mu(9COE_g5x zz0S?Mn=NmWfh$@+SZ%ZJ6A{{2=j+e)++vw3!+5+vh4BP}WG+he)-jEzj7{fCmsj;_ z+&uht2qfkY;_dl{Edb8ykB3-j#UU>Bn&S|G43HSGmF`u3ndeZ+{Pbz3pN2TMP7Uk# z)CPO0x2bVy>|w0<=~HxS^-qhQw!MKgZ9jYMfy+wK1GNqG!1+))t`@Y6Xy#e$PZS$c*Dn2NpAv5(qv>z zb|4bO(%MBomaT%K8_XpW&vy0XSY-UnJ7ZWlXr>!oxtq5R;FI2q!j~e_-9FjcjW;{@xHk9^jI{)AlgFG-~%~w(rj18Zs{nxYe=WW z@{b)AKlTkE(Tls#-mG-3yjWpk*)!{XZg9*S6u7TrSMH(>!9U)$`Qul_U(J1)#?}}5 z0wqpD$cdHuhswM47WnnIv2+5o;BdC?wRA~LM047X=R;r{zB%^rIyT{2hnOrEN@_th z2Grn>8PAOe@7fu6b~B`ny8{2QF8_jYdCWq3kTWCa15|J4v-aK;KHs!&97@f9@DgBb ztN)9PxRCvW!!Tvh{<-K4K+Gop547^%f7Q~LzDx}}a-Le|t61-F67M!TqCu>V1ny30 z{@r}bezUQ`Ie9uL9-JK~#_ti^lDnEd;+h(B{IO!m@w&^LDWlo@!de`3a}A*Ja+G9T z6*mSvqjtZ48FxEPg!isI`snz+;t?G0V6@fYS&HACt{Cb}7(fBMY3jKwgxl9{?}Zk( zYTnGvnMW~1-lBsHW&o)s|A!w?$b$~SvX%jmQO3UqJby&E9UF?S*a>+%?Q(Hf%)^T^ zZEH{_(1h}GnL8phvd1_c;}UC^QOtXlJW*_eR@~ER8rehkY+*hp&x{t|bn9EqbRO&2 zdOhN9e0TC;539K5UjT>N_ABlQl%56a>^A+yL*gO7M;|U0!|^xQ8!b}X$3+}H=-Mys z880>rbXHuTdbY;wn2NGrL|6hS^B;OU!8N9=cIm~Rka0Q4qgTwt<@Q#}=>9z6h}t&* zIb)eTvyi4dkCTu^wV9PmKt<@gj56ux4|Y7y#bB2n&LP*^W$XQ++xu6_wk;N_a~#LlkF^>~6AcKp+&C4uT5xL*bP*NC~$R22g> zNqMQlQTsvd?tJf~p|=mHJ+L?;JN%5E`xXX*8lT7RRM{h(4J$4sDgrimAKo`&79N_3 zl1@vx1RFGXr}w#kor~BKA9VedUc&A;&qLVNgw-X?;Z4^3%4zp+rwGmZ_Q7ZDjKtga z%=zlhvHx`RE7dYepZ!tirQl15Pl=LEtH(1P0ptYBOEsMn6+(S?`vCN+lr}Ynfq_4% zQ*3<+10nh6*^xdFhIY%U52VHI{S>@l)jXBQhEz6ps=ciO2SJ`xf`zw}Mc z$B1gyd;A?JGE(}|{>a}F{flSpP0&MjBFOP$l!QpcD@O)Y=l+xotJ5`@^*A|6?eqCa zi#NmbNh|^6G-mZz19j%ME2Gm{8{(XrzLF(P2hkdwIkP!K#7sDD#gu{Kv70nit|}oT zTg)Fj=M6Jq7CchkoxC1se`D%I!7+x^Uyuq~lX9WXdQzx+PAXv^_;su5BCNju&b6fijEdoUZ!d>i?4812mU z#)#kWB#2>eSH0%61i>IL)6D~s%RN`$%qK}`wV-){ck)g@s)e7?KuuIG#~E(^O)J}d z!^1pDC$xpK`L-%Y&Q*nvQhZ-F7ap%}?uQo@f{OFb;%5%F<28G5HQ|X~S||8ihF3+L z^Ai18UfZhZ7uxkFp8})kC%RCIk|U8gf5vcD=A)d9CbTRAyWn0c9543a=v3^LljI?wnwQ+h z${o#{U)B#yew^h1iyF{IwwP?xxUf(LX+RmlF5->Aaa_~wmub$p0mw_PqIL5@+EDpY z5sGtv$nA8Y&*79;htT%?K<4vM;}f+C5NiybcmkjY5wlB$nyHin~J$wr~JmsB@ENrc5;=< zLba2DpjkXMU`Su9lXeU(T8@-^SUToU*wWAIjLpz%nUG}>S3(G3S7ou3O%eDjn~<6Y zOp5M9S9oQYs*}T!LB>@2hsxAGLKr<>xVnlzUgC@`63H4vLx>X*Be{!Az3J74 zmDyqt6P}(ytZ07!x$|BNQA^VWT62PUpg%`YUq6RH^{gqa_H=g6b6-|ZhN|V%rfQJ1 zU3eJKpoQ}OGdsDwG6sBto9R_wO^ydzE%bS|iZSq1`ShEk`>bI3+Cj=i3Fq$dy6UVzE5j=Y>!qQFT8r=B z%Ku7c8)XRo8iirB9j63w;JtJQ49M}Pqrr~VDU>!1I&PV}^hg(k`{nf~s|JyO7L9lf zd2iSTaW`MBY8R;MG4W`#SAc}^g~J`=3**n!d8)0Mw-S;Iwq10|UMRObHA?+E)4HgS z9{Vzh2>cTkWW84?$o-o;3J=F+_$O+Rl@ Date: Tue, 19 Jul 2022 10:21:42 -0400 Subject: [PATCH 09/24] change tip --- .../how-to-disable-wip.md | 140 ++---------------- 1 file changed, 12 insertions(+), 128 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md index 8cf814bf5a..b0be2650cf 100644 --- a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md +++ b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md @@ -24,7 +24,7 @@ _Applies to:_ ## Use Intune to disable WIP -To remove Windows Information Protection (WIP) using Intune, you have the following options: +To disable Windows Information Protection (WIP) using Intune, you have the following options: #### Option 1 - Remove the WIP Policy (Unassign) - preferred @@ -90,6 +90,8 @@ The **Configure Windows Information Protection settings** page appears, where yo ## Manage the WIP-protection level for your enterprise data +**liz I need a different figure below - this is Intune - need config mgr** + Set the Windows Information Protection mode to Off. :::image type="content" alt-text="Create Configuration Item wizard, choose your WIP-protection level" source="images/wip-configmgr-disable-wip.png"::: @@ -97,6 +99,9 @@ Set the Windows Information Protection mode to Off. ## Define your enterprise-managed identity domains + > [!TIP] + > For additional help filling out the required fields, please reference
[Create and deploy a Windows Information Protection (WIP) policy using Microsoft Endpoint Configuration Manager](/windows/security/information-protection/windows-information-protection/create-wip-policy-using-configmgr) + **Add your corporate identity** - Type the name of your corporate identity into the **Corporate identity** field. For example, `contoso.com` or `contoso.com|newcontoso.com`. @@ -108,135 +113,12 @@ After you've added a protection mode to your apps, you'll need to decide where t **To define where your protected apps can find and send enterprise data on you network** -1. Add additional network locations your apps can access by clicking **Add**. +Add additional network locations your apps can access by clicking **Add**. +The **Add or edit corporate network definition** box appears. Add the required fields. - The **Add or edit corporate network definition** box appears. - -2. Type a name for your corporate network element into the **Name** box, and then pick what type of network element it is, from the **Network element** drop-down box. This can include any of the options in the following table. - - ![Add or edit corporate network definition box, Add your enterprise network locations.](images/wip-configmgr-add-network-domain.png) - - - **Enterprise Cloud Resources**: Specify the cloud resources to be treated as corporate and protected by WIP. - - For each cloud resource, you may also optionally specify a proxy server from your Internal proxy servers list to route traffic for this cloud resource. Be aware that all traffic routed through your Internal proxy servers is considered enterprise. - - If you have multiple resources, you must separate them using the `|` delimiter. If you don't use proxy servers, you must also include the `,` delimiter just before the `|`. For example: URL `<,proxy>|URL <,proxy>`. - - **Format examples**: - - - **With proxy**: `contoso.sharepoint.com,contoso.internalproxy1.com|contoso.visualstudio.com,contoso.internalproxy2.com` - - - **Without proxy**: `contoso.sharepoint.com|contoso.visualstudio.com` - - >[!Important] - > In some cases, such as when an app connects directly to a cloud resource through an IP address, Windows can't tell whether it's attempting to connect to an enterprise cloud resource or to a personal site. In this case, Windows blocks the connection by default. To stop Windows from automatically blocking these connections, you can add the /*AppCompat*/ string to the setting. For example: URL <,proxy>|URL <,proxy>|/*AppCompat*/. - - - **Enterprise Network Domain Names (Required)**: Specify the DNS suffixes used in your environment. All traffic to the fully-qualified domains appearing in this list will be protected. - - This setting works with the IP ranges settings to detect whether a network endpoint is enterprise or personal on private networks. - - If you have multiple resources, you must separate them using the "," delimiter. - - **Format examples**: `corp.contoso.com,region.contoso.com` - - - **Proxy servers**: Specify the proxy servers your devices will go through to reach your cloud resources. Using this server type indicates that the cloud resources you're connecting to are enterprise resources. - - This list shouldn't include any servers listed in your Internal proxy servers list. Internal proxy servers must be used only for WIP-protected (enterprise) traffic. - - If you have multiple resources, you must separate them using the ";" delimiter. - - **Format examples**: `proxy.contoso.com:80;proxy2.contoso.com:443` - - - **Internal proxy servers**: Specify the internal proxy servers your devices will go through to reach your cloud resources. Using this server type indicates that the cloud resources you're connecting to are enterprise resources. - - This list shouldn't include any servers listed in your Proxy servers list. Proxy servers must be used only for non-WIP-protected (non-enterprise) traffic. - - If you have multiple resources, you must separate them using the ";" delimiter. - - **Format examples**: `contoso.internalproxy1.com;contoso.internalproxy2.com` - - - **Enterprise IPv4 Range (Required)**: Specify the addresses for a valid IPv4 value range within your intranet. These addresses, used with your Enterprise Network Domain Names, define your corporate network boundaries. - - If you have multiple ranges, you must separate them using the "," delimiter. - - **Format examples**: - - - **Starting IPv4 Address:** `3.4.0.1` - - **Ending IPv4 Address:** `3.4.255.254` - - **Custom URI:** `3.4.0.1-3.4.255.254, 10.0.0.1-10.255.255.254` - - - **Enterprise IPv6 Range**: Specify the addresses for a valid IPv6 value range within your intranet. These addresses, used with your Enterprise Network Domain Names, define your corporate network boundaries. - - If you have multiple ranges, you must separate them using the "," delimiter. - - **Format examples**: - - - **Starting IPv6 Address:** `2a01:110::` - - **Ending IPv6 Address:** `2a01:110:7fff:ffff:ffff:ffff:ffff:ffff` - - **Custom URI:** `2a01:110:7fff:ffff:ffff:ffff:ffff:ffff,fd00::-fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff` - - - **Neutral Resources**: Specify your authentication redirection endpoints for your company. These locations are considered enterprise or personal, based on the context of the connection before the redirection. - - If you have multiple resources, you must separate them using the "," delimiter. - - **Format examples**: `sts.contoso.com,sts.contoso2.com` - -3. Add as many locations as you need, and then click **OK**. - - The **Add or edit corporate network definition** box closes. - -4. Decide if you want to Windows to look for additional network settings and if you want to show the WIP icon on your corporate files while in File Explorer. - - :::image type="content" alt-text="Create Configuration Item wizard, Add whether to search for additional network settings" source="images/wip-configmgr-optsettings.png"::: - - - **Enterprise Proxy Servers list is authoritative (do not auto-detect).** Click this box if you want Windows to treat the proxy servers you specified in the network boundary definition as the complete list of proxy servers available on your network. If you clear this box, Windows will search for additional proxy servers in your immediate network. Not configured is the default option. - - - **Enterprise IP Ranges list is authoritative (do not auto-detect).** Click this box if you want Windows to treat the IP ranges you specified in the network boundary definition as the complete list of IP ranges available on your network. If you clear this box, Windows will search for additional IP ranges on any domain-joined devices connected to your network. Not configured is the default option. - - - **Show the Windows Information Protection icon overlay on your allowed apps that are WIP-unaware on corporate files in the File Explorer.** Click this box if you want the Windows Information Protection icon overlay to appear on corporate files in the Save As and File Explorer views. Additionally, for unenlightened but allowed apps, the icon overlay also appears on the app tile and with *Managed* text on the app name in the **Start** menu. Not configured is the default option. - -5. In the required **Upload a Data Recovery Agent (DRA) certificate to allow recovery of encrypted data** box, click **Browse** to add a data recovery certificate for your policy. +In the required **Upload a Data Recovery Agent (DRA) certificate to allow recovery of encrypted data** box, click **Browse** to add a data recovery certificate for your policy. ![Create Configuration Item wizard, Add a data recovery agent (DRA) certificate.](images/wip-configmgr-dra.png) - - After you create and deploy your WIP policy to your employees, Windows will begin to encrypt your corporate data on the employees' local device drive. If somehow the employees' local encryption keys get lost or revoked, the encrypted data can become unrecoverable. To help avoid this possibility, the DRA certificate lets Windows use an included public key to encrypt the local data, while you maintain the private key that can unencrypt the data. - - For more info about how to find and export your data recovery certificate, see [Data Recovery and Encrypting File System (EFS)](/previous-versions/tn-archive/cc512680(v=technet.10)). For more info about creating and verifying your EFS DRA certificate, see [Create and verify an Encrypting File System (EFS) Data Recovery Agent (DRA) certificate](create-and-verify-an-efs-dra-certificate.md). - -## Choose your optional WIP-related settings -After you've decided where your protected apps can access enterprise data on your network, you'll be asked to decide if you want to add any optional WIP settings. - -![Create Configuration Item wizard, Choose any additional, optional settings.](images/wip-configmgr-additionalsettings.png) - -**To set your optional settings** -1. Choose to set any or all of the optional settings: - - - **Allow Windows Search to search encrypted corporate data and Store apps.** Determines whether Windows Search can search and index encrypted corporate data and Store apps. The options are: - - - **Yes.** Allows Windows Search to search and index encrypted corporate data and Store apps. - - - **No, or not configured (recommended).** Stops Windows Search from searching and indexing encrypted corporate data and Store apps. - - - **Revoke local encryption keys during the unenrollment process.** Determines whether to revoke a user's local encryption keys from a device when it's unenrolled from Windows Information Protection. If the encryption keys are revoked, a user no longer has access to encrypted corporate data. The options are: - - - **Yes, or not configured (recommended).** Revokes local encryption keys from a device during unenrollment. - - - **No.** Stop local encryption keys from being revoked from a device during unenrollment. For example, if you're migrating between Mobile Device Management (MDM) solutions. - - - **Allow Azure RMS.** Enables secure sharing of files by using removable media such as USB drives. For more information about how RMS works with WIP, see [Create a WIP policy using Intune](create-wip-policy-using-intune-azure.md). To confirm what templates your tenant has, run [Get-AadrmTemplate](/powershell/module/aadrm/get-aadrmtemplate) from the [AADRM PowerShell module](/azure/information-protection/administer-powershell). If you don't specify a template, WIP uses a key from a default RMS template that everyone in the tenant will have access to. - -2. After you pick all of the settings you want to include, click **Summary**. - -## Review your configuration choices in the Summary screen -After you've finished configuring your policy, you can review all of your info on the **Summary** screen. - -**To view the Summary screen** -- Click the **Summary** button to review your policy choices, and then click **Next** to finish and to save your policy. - - ![Create Configuration Item wizard, Summary screen for all of your policy choices.](images/wip-configmgr-summaryscreen.png) - - A progress bar appears, showing you progress for your policy. After it's done, click **Close** to return to the **Configuration Items** page. - ## Deploy the WIP policy After you've created your WIP policy, you'll need to deploy it to your organization's devices. For info about your deployment options, see these topics: - [Operations and Maintenance for Compliance Settings in Configuration Manager](/previous-versions/system-center/system-center-2012-R2/gg699357(v=technet.10)) @@ -259,4 +141,6 @@ After you've created your WIP policy, you'll need to deploy it to your organizat - **[Deploy the baseline to the collection](/mem/configmgr/compliance/deploy-use/deploy-configuration-baselines)** -- **Move devices from old collection to new collection** \ No newline at end of file +- **Move devices from old collection to new collection** + +**liz for above do we have a reference link for doing this move** \ No newline at end of file From f9724abed1668f0aedad8e11cfb12b96f3019bca Mon Sep 17 00:00:00 2001 From: Liz Long <104389055+lizgt2000@users.noreply.github.com> Date: Wed, 20 Jul 2022 11:11:59 -0400 Subject: [PATCH 10/24] Update windows/security/information-protection/windows-information-protection/how-to-disable-wip.md Co-authored-by: Aaron Czechowski --- .../windows-information-protection/how-to-disable-wip.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md index b0be2650cf..266ac78ed3 100644 --- a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md +++ b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md @@ -26,7 +26,7 @@ _Applies to:_ To disable Windows Information Protection (WIP) using Intune, you have the following options: -#### Option 1 - Remove the WIP Policy (Unassign) - preferred +### Option 1 - Unassign the WIP policy (preferred) Removing an existing enable policy will remove the intent to deploy WIP from those devices. When that intent is removed, a device will remove protection for files and the configuration for WIP. From ad5874f8d53a51440e2137c39afc9e4dfb950abf Mon Sep 17 00:00:00 2001 From: Liz Long <104389055+lizgt2000@users.noreply.github.com> Date: Wed, 20 Jul 2022 12:28:45 -0400 Subject: [PATCH 11/24] add in suggested changes --- .../how-to-disable-wip.md | 122 +++++++----------- .../images/wip-configmgr-disable-wip.png | Bin 46988 -> 52534 bytes .../wip-configmgr-generalscreen-off.png | Bin 0 -> 45302 bytes 3 files changed, 48 insertions(+), 74 deletions(-) create mode 100644 windows/security/information-protection/windows-information-protection/images/wip-configmgr-generalscreen-off.png diff --git a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md index b0be2650cf..2dac0002ca 100644 --- a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md +++ b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md @@ -1,6 +1,6 @@ --- title: How to disable Windows Information Protection (WIP) -description: How to disable Windows Information Protection (WIP) +description: How to disable Windows Information Protection (WIP) in Microsoft Intune or Configuration Manager. ms.date: 07/15/2022 ms.prod: m365-security ms.topic: how-to @@ -17,130 +17,104 @@ _Applies to:_ - Windows 10 - Windows 11 - - > [!NOTE] - > **liz add blurb about disable** - - ## Use Intune to disable WIP To disable Windows Information Protection (WIP) using Intune, you have the following options: -#### Option 1 - Remove the WIP Policy (Unassign) - preferred +### Option 1 - Unassign the WIP policy (preferred) -Removing an existing enable policy will remove the intent to deploy WIP from those devices. When that intent is removed, a device will remove protection for files and the configuration for WIP. - -#### Option 2 - Change current WIP policy to off +When you unassign an existing policy, it removes the intent to deploy WIP from those devices. When that intent is removed, the device removes protection for files and the configuration for WIP. For more information, see [Assign user and device profiles in Microsoft Intune](/mem/intune/configuration/device-profile-assign). +### Option 2 - Change current WIP policy to off If you’re currently deploying a WIP policy for enrolled or unenrolled devices, you switch the WIP policy to Off. When devices check-in after this change, the devices will proceed to unprotect files previously protected by WIP. -1. Sign in to the Microsoft Endpoint Manager. -1. Open Microsoft Intune and select Apps > App protection policies > +1. Sign in to the [Microsoft Endpoint Manager admin center](https://endpoint.microsoft.com). +1. Open Microsoft Intune and select **Apps** > **App protection policies** > In Client apps - App protection policies, select <> apps. Select the existing policy to turn off. -1. From App protection policy, select the name of your policy, and then select the name of your properties. -1. Edit required settings. -:::image type="content" alt-text="Create Configuration Item wizard, choose your WIP-protection level" source="images/wip-configmgr-disable-wip.png"::: -1. Set Windows Information Protection mode to off. -1. After making this change, select review and save. -1. Select save. +1. From App protection policy, select the name of your policy, and then select the properties. +1. Edit **Required settings**. +:::image type="content" alt-text="Create Configuration Item wizard, choose your WIP-protection level." source="images/wip-configmgr-disable-wip.png"::: +1. Set **Windows Information Protection mode** to off. +1. After making this change, select **Review and Save**. +1. Select **Save**. - > [!Note] - > **Another option is to create a disable policy.**
- You can create a separate disable policy for WIP (both enrolled and unenrolled) and deploy that to your organization. You then stage the rollout by complimenting your existing enablement policy and moving entities slowly from being targeted with enable to the disable policy. +> [!Note] +> **Another option is to create a disable policy that sets WIP to Off.** +> You can create a separate disable policy for WIP (both enrolled and unenrolled) and deploy that to a new group. You then can stage the transition to this disabled state. Move devices from the existing group to the new group. This process slowly migrates devices instead of all at once. + +### Revoke local encryption keys during the unenrollment process + +Determine whether to revoke a user's local encryption keys from a device when it's unenrolled from Windows Information Protection. If the encryption keys are revoked, a user no longer has access to encrypted corporate data. The options are: + +- Yes, or not configured. Revokes local encryption keys from a device during unenrollment. +- No (recommended). Stop local encryption keys from being revoked from a device during unenrollment. For example, if you're migrating between Mobile Device Management (MDM) solutions. ## Use Configuration Manager to disable WIP To remove Windows Information Protection (WIP) using Configuration Manager -## Add a WIP policy -After you've installed and set up Configuration Manager for your organization, you must create a configuration item for WIP, which in turn becomes your WIP policy. >[!WARNING] ->Don't just delete your existing WIP policy. +>Don't just delete your existing WIP policy. For Configuration Manager there's only one option to create a new policy that turns WIP mode off. Otherwise the devices will remove the Configuration Manager policy but not change the WIP mode. -**To create a configuration item for WIP** +### Add a WIP policy +To disable WIP for your organization, first create a configuration item. -1. Open the Configuration Manager console, click the **Assets and Compliance** node, expand the **Overview** node, expand the **Compliance Settings** node, and then expand the **Configuration Items** node. +1. Open the Configuration Manager console, select the **Assets and Compliance** node, expand the **Overview** node, expand the **Compliance Settings** node, and then expand the **Configuration Items** node. - ![Configuration Manager, Configuration Items screen.](images/wip-configmgr-addpolicy.png) +2. Select the **Create Configuration Item** button. + The **Create Configuration Item Wizard** starts. -2. Click the **Create Configuration Item** button.

-The **Create Configuration Item Wizard** starts. - - ![Create Configuration Item wizard, define the configuration item and choose the configuration type.](images/wip-configmgr-generalscreen.png) + ![Create Configuration Item wizard, define the configuration item and choose the configuration type.](images/wip-configmgr-generalscreen-off.png) 3. On the **General Information screen**, type a name (required) and an optional description for your policy into the **Name** and **Description** boxes. -4. In the **Specify the type of configuration item you want to create** area, pick the option that represents whether you use Configuration Manager for device management, and then click **Next**. +4. In the **Specify the type of configuration item you want to create** area, select **Windows 10 or later** for devices managed with the Configuration Manager client, and then select **Next**. - - **Settings for devices managed with the Configuration Manager client:** Windows 10 +5. On the **Supported Platforms** screen, select the **Windows 10** box, and then select **Next**. - -OR- - - - **Settings for devices managed without the Configuration Manager client:** Windows 8.1 and Windows 10 - -5. On the **Supported Platforms** screen, click the **Windows 10** box, and then click **Next**. - - ![Create Configuration Item wizard, choose the supported platforms for the policy.](images/wip-configmgr-supportedplat.png) - -6. On the **Device Settings** screen, click **Windows Information Protection**, and then click **Next**. - - ![Create Configuration Item wizard, choose the Windows Information Protection settings.](images/wip-configmgr-devicesettings.png) +6. On the **Device Settings** screen, select **Windows Information Protection**, and then select **Next**. The **Configure Windows Information Protection settings** page appears, where you'll configure your policy for your organization. -## Manage the WIP-protection level for your enterprise data - -**liz I need a different figure below - this is Intune - need config mgr** +### Manage the WIP-protection level for your enterprise data Set the Windows Information Protection mode to Off. -:::image type="content" alt-text="Create Configuration Item wizard, choose your WIP-protection level" source="images/wip-configmgr-disable-wip.png"::: +:::image type="content" alt-text="Create Configuration Item wizard, choose your WIP-protection level." source="images/wip-configmgr-disable-wip.png"::: -## Define your enterprise-managed identity domains +### Define your enterprise-managed identity domains > [!TIP] - > For additional help filling out the required fields, please reference
[Create and deploy a Windows Information Protection (WIP) policy using Microsoft Endpoint Configuration Manager](/windows/security/information-protection/windows-information-protection/create-wip-policy-using-configmgr) + > For more information on filling out the required fields, see [Create and deploy a Windows Information Protection (WIP) policy using Microsoft Endpoint Configuration Manager](/windows/security/information-protection/windows-information-protection/create-wip-policy-using-configmgr). -**Add your corporate identity** +#### Add your corporate identity - Type the name of your corporate identity into the **Corporate identity** field. For example, `contoso.com` or `contoso.com|newcontoso.com`. +Corporate identity must match the string in the original policy. + ![Create Configuration Item wizard, Add the primary Internet domain for your enterprise identity.](images/wip-configmgr-corp-identity.png) -## Choose where apps can access enterprise data +### Choose where apps can access enterprise data After you've added a protection mode to your apps, you'll need to decide where those apps can access enterprise data on your network. **To define where your protected apps can find and send enterprise data on you network** -Add additional network locations your apps can access by clicking **Add**. +Add additional network locations your apps can access by selecting **Add**. The **Add or edit corporate network definition** box appears. Add the required fields. -In the required **Upload a Data Recovery Agent (DRA) certificate to allow recovery of encrypted data** box, click **Browse** to add a data recovery certificate for your policy. +In the required **Upload a Data Recovery Agent (DRA) certificate to allow recovery of encrypted data** box, select **Browse** to add a data recovery certificate for your policy. ![Create Configuration Item wizard, Add a data recovery agent (DRA) certificate.](images/wip-configmgr-dra.png) -## Deploy the WIP policy -After you've created your WIP policy, you'll need to deploy it to your organization's devices. For info about your deployment options, see these topics: -- [Operations and Maintenance for Compliance Settings in Configuration Manager](/previous-versions/system-center/system-center-2012-R2/gg699357(v=technet.10)) -- [How to Create Configuration Baselines for Compliance Settings in Configuration Manager](/previous-versions/system-center/system-center-2012-R2/gg712268(v=technet.10)) +### Deploy the WIP policy +After you've created your WIP policy, you'll need to deploy it to your organization's devices. For info about deployment options, see: -- [How to Deploy Configuration Baselines in Configuration Manager](/previous-versions/system-center/system-center-2012-R2/hh219289(v=technet.10)) +- [Create a configuration baseline that includes the new configuration item](/mem/configmgr/compliance/deploy-use/create-configuration-baselines) -## Related topics +- [Create a new collection](/mem/configmgr/core/clients/manage/collections/create-collections) -- [How to collect Windows Information Protection (WIP) audit event logs](collect-wip-audit-event-logs.md) +- [Deploy the baseline to the collection](/mem/configmgr/compliance/deploy-use/deploy-configuration-baselines) -- [General guidance and best practices for Windows Information Protection (WIP)](guidance-and-best-practices-wip.md) - -- [Limitations while using Windows Information Protection (WIP)](limitations-with-wip.md) - -- **[Create a configuration baseline that includes the new configuration item](/mem/configmgr/compliance/deploy-use/create-configuration-baselines)** - -- **[Create a new collection](/mem/configmgr/core/clients/manage/collections/create-collections)** - -- **[Deploy the baseline to the collection](/mem/configmgr/compliance/deploy-use/deploy-configuration-baselines)** - -- **Move devices from old collection to new collection** - -**liz for above do we have a reference link for doing this move** \ No newline at end of file +- Move devices from old collection to new collection \ No newline at end of file diff --git a/windows/security/information-protection/windows-information-protection/images/wip-configmgr-disable-wip.png b/windows/security/information-protection/windows-information-protection/images/wip-configmgr-disable-wip.png index 49caa3be400ba28e7ead0632c9afcdb050e0f84d..f1cf7c107d2fdd717f30fefde50228cccf216310 100644 GIT binary patch literal 52534 zcmbrm2{@GP7e9^^Qr1LSBc>4T$TCPtwl-UqNs=Ul7~9M!3R%XIrEFJAg9*_{(a*f7}6AOpUop`ebH-16~g!OCv6>&qzU*>vrH+ z;Qj@N04^@s=&irpNYb)9a8m5SIr|4!eQ!U2y863wnfklC`vlzaec)ol4-DxkHZw80 z7VNUX7N|Hl6j%^PAj213^y}dB#Y4^WYY1Gw{&n(KpHXc30&OI+sA>qO{By3#-7&pX z`QbYr31j0O2XFfcibV2W;BQg5d}(_|$f2o6H{~=>*j(CW9AWtAz!k2SXZZOu4;6{;-a7ag84(fN z^#6LnO-aEAy;v1rV8x-2VWx*2eN)YINAFcdcYgVMESo>(!-o&?swA9LX2hlOPm3R< z&y_GF$u>0F!cQf1(4v1Sjeuwv3!b#}Uw12ge(VP8v(?G1HN3ZKfGXVlEJC3*8S=Ii zSL0P3^XeL7`JQiEX_=rt(K5U4rvjOVQv5iW94J?5&}XHbQE0@u1<@ zEuC`>&Dt3r%D*#Xr*~+Zs7PpaV{9~&b7>vV@_HUKKt&BxZ4VvCe7|DBF`TCOQ=44v}^{pnXGoEiUHt<#Bn}EDJ3RtT1yB1i3Lcje9 zd?#hYHU%rKw4X^b?FQ#E+(QVY^El%ZNr4MFiA30ewtQGn3>U(xrM=L`;Cn!=AU}V^ zvgwvrkQ<*nr3y{RWKqbe3N}GTz>@hJ|Pf>n%kr0QPiSPs$oF z0~P6v@9Ks;XJVoPZn;5uZdT;k+TBjs9;Li6ScZ^^d%PpYkeBz%#wAn3sEPc<7^#?u zOGcjprmb{nFPPc)H_)bpUt~SK)q%5CdNa5u@|>k}Axn*Xq9Wq)z>6I$zk*M#^Gidh z&Vy0j^e1^6wNZz{wpECs*0bC)ovP&I1^81w4rc0njITdua2wOG&SHVEba>pzoD64K zk|H=^vT|{X$wWn6ZucrqhV(xQB)iELe;#t!CWwU&KrSzoP5#_J-Sx76HF#>uNoDN% z|Y+Qm`&z z#S1?^pPiBqwU@&$yYIZ%?F;H zG-C?O_bVebE(?l(I5ce9AjK$%^)xfa-n}Y!!u0KDChzIhxb_q>UuUs7tI3Zj#;&r? ztO=^{n-pYzP*FI8MbQG|+fOH*in+gb3Rw^*y83g!$B)uu1b(c_`~E4p1dyEXR0cV^ zWl{sYqnN!>gW{Z-axswPve#QxQmDIh>Ekn~n*z_oTw!T?H9pkbr*2&cMayLpW83qd zRTJQ&0x^N}!=0oIhz6g0_@^=d?jvPkG@of?M5f-B)-w;~mz#;daVm2^*!%%9F8ffs zF`gEd;NZDn+rz8oCp;}F_@soVi44lCu-zlF-OT$uHn8Y)RW4RR5nLT*kmzB$3#)Pl z-^TJM_CAT1Jwr1|LX>*woR|#%oO&lD&@Gd~$j!{|8=7X^dssW4fes5MQ5(QA7ci-KucqU~$ zSf+$~sj%FCVp_WA!{~DNoyu8tP2C;mys(SmToJ83Klo$JHS4cc z`HpI6;erF6?2IX2XM%6_I|f)C919pDBtr=>Epd^uMW_saOlRYnuQwjerW~v~D)y%7 z&G&B?=gx?A`7qxeQv$5`=xtoy3Sw4DSe?nv6e-NLR}*lq8YrUJ&#J&IaiP)b>ZmAu>=MsJulZ(Gk->y-_fHR}8I!1| zPjH%+x*{T}kz3p9+eLU+>I;0Tx!O4SLf=HoC&wNk)%f~Dw|&ATraXE;84-I|Q?1Jc zQzlC$XZ&QvKgJ)CN7LN0^Bj%k+sjYHQmhRthKZBZ++d+u2BzS({A=IoQSY4VM5NJL z<-Gj~F8hl3ga~csLb?0=a4||(1kjnJ$mlRf-yx)fkOswvv@g$mK%B*gE^YeFR7r@p z3D28Enze64*_eraw7qic-~|DVeO=17u>|>d$0m5Y7ENJqI-N5!)7nnXo?d^H*%?04 z>Gqg+;DX|cz#X;o)2x&-byo|R|06{i$00v^_Ok?ULobo>n{7NzQl_R2jmz=vKT9Jz zhTpo?!4q_+lPPFYhP?SjtlNzu=SNv#vve-5xaXfmMGCV0pWefj4aM@;i{~Rx%;xZG zDg@~>go&(e9AR4PT?rAW9J893FoYoFkJ?&Dfq}j71!R<#w`}F99OK=@+XK5O-8OfD zH_{;T%}4cjmOpUuNImD@-I_LBbM9~*KTO zHJ6vyP+}|W&wZmy?V12k!g*mHo*jvSuYO~Q;E0Hbhi6QxREtr&}W@c%wM&A6FMf))MQ` z9?=U)^_`n7pFworEZjacbTI`-A*bl0Qx=JVSY6800JR>SYPC{ zW{>Ka%@=puZj=^<>Q>U1jOy6~m}khOK80Dd1r==bx2c zc2loQkL20v|2@@O&meDZ+fIIo?X`=Kqh1i82d^6y>fOc2{(S>G>#cxZg1Cq(*Q!Qj z!~Cx!d&FIi1~0#a=huAsOAbei5alNy79>Lz>iF;IzxZA&K2FitXwTS#TW7l5S5Wx- zu3U!~U%uIMUp}|%{hi?H9H@xUpQWBQ+#2u4qgVwc{8ZM|+dLa`gCh{K!CCX~UW0bq zWZ)0>>(NpQX*ZkW_@j9LtZe9nxp=Uu0Ka8l{o_#s2dpkPKAeN`fTr|-UMYoF+_5ez zT{~ySnFqtp4wr^qmuuJ*Kv5doiG5+YsiTw;1ushYd7ta-D5r{vARYGVJaOiyIcfE( zMk<{-?7n>c^Vz|dA3UGS$4UEMp|rg(^?dFn$x2E^KK>*5)LVdfSJf55jdPU84j)M# zP(?5ot9wuPrSy6`R(C(~$W5b1%cV2rL!HQ|O;HqWynqzDyR?Iqs@Y-bm75f&S%20F z%sivRam?t51-WQ+H~6K=gs~+2d#K&SPj012Y?}VLKD}ku$vcI@i{BEIX0JEI90|jV z{;d4wUEPLV|7x0-o%92@zmRdqLE9GBmmvGMg?$0cXV$?mIG_`H)1a|R%p1m<8M1?< zg7U&I$_4*20!a<)SGweeGPZ{-lk&RCHR}|i_~kcFe)Q|~#_d|2&<1E)w*UF2!*-o! zAm;O@5P6PT2-78{n!0wy%BCM=ry-85B zqj^QRdlIRyVQsMdMh`u%L!Y&VWXS3Ub(w=h9pplZhf$;|G-*)HwtIV_MrwHj^m+Dj zP8>0-z*!xXU15yDuw)$It29!K5?mo#F0@J}gh=-vtS-s;rh#(A1h7v~7x}6>K0rD4 zn9z}8>RKrTq-KW)WjL?L^z`Z&BMhdT@`Y`XW_ucZCf$Uh2`t0?Gg^3ar}&3f)hxn?8UVpBg2l zbeE>BXx5qZ(K#3CebsiITGsT3*&7J~#2S)E*VlHqb)q%{ZKW4JzpA6-Hk42{m)=f% z0Ya#2v1S5M6RqB5R8ldOEl)`ga1qym;dK3HP|)tL<<%W&Sf8XJuiEeCIEF z{{8?0_yI)y)C;d$?TNC~C6ensUs0cFGHj(sYCPcZMt8C8r457AJR?)V1UGUB1fQD9itse(nwS0?rLXHr%k= zHW04*F=c=tzuOh)VR=VRS=~JE_U1rlR2RxkpGQv04+ug~@ zcEpisNLrQ){t(m`?l=W~s;7b`grti=33d@PuSnpPB zci~jX__f&huLN3mA#=l=b3+(`4h>`wdF=xTl2(w%P9Alk^<mOWh33v$DTyi3F8 zPKEfhSE#=x`#USEi&DQegcXKeo2$wq2Ly}@{qc9FXSX~(gr`Z6PgCx@9BlPi$oOOV zE+t{GBEcZ+ZTJeGUH7sb_+UX1%*+bDRNz1II*T+W?~`T&{;8bNaM*uw*yKT-velun zwUQ1Tx}_e^>_huA`*8l<897@MaZTmTT@Gm_kY!q zwb>UTE^dY|MjoqQW}K&ULI@enzQJZfuq(uwf^+HMaz_lkNlu4d2_@Fq1$A~|@x1_c z=B@ws^40j0Vsy^?fwJz?<|=Y59A85IO`?|;+eAn&JRzJpN~@*l&&X$?=lcqX51Dys zrtpDWxF|Lu5wez{@LxtFGo5H-b@`eU0Oz;%f88$Nt`T!kjrngeM`3g$;$NWlKLzd;A! zd*vMm?GQ90$dFviLaU%Xi-vy;LUm%Qp7ZbV5;QL{Gzz>&D-Fa5nfWm27%^0pzfrOh7 zyOD8BgD92FP(CC1vxB-j896)Z(J$ZI4`3;EKSIBo&98n2NeDv-0}PGFRp5=~dX1^U za>OBs{;Dl%iW)s8%g;XdZr(TaT1nlwA8NHL(8^GzW^+G%fjgr^5<`XQY;@@8kXs5# zZ+rL3|DzT-> z9$NRFmG{+|2w@mH^d5E?F(5X0pk*@&WP)K_GvD<->5|{e_nDVin4P=oCto7fKTwkA z*R{D{851L-X|=(5F3Tz5i{{mxZ!-+ke*;YnJp?s1RWPPxp{ig7c5axyUl~r0Bc!@v zK40(CTQQ>JpN8nr#!N{?0eR1Sb2$+*{@<0$7D`Lft-~iOEDV?a32Fzt?`@BIf%m%v zAbQ+FVhbCpPllgfYZ5F;J)0WEz6xzn%7b6H^^+wBo&HrS=M~E>v0YVY&nE84>tRZ7 z%VVE;H|x1V?=k1-kmP>-L(~r@7Z%XeKziXeN|LkZ|Dgoy4iZ*h z)dR69M{nZTb#n7%Q(9U=ru9`o*`aYVK?@T814f0!C~+S@6hBKYon9)66Zr7z{<)~yT7g8BM zTY8=FaAOfdKcNL*-S$^jQI+(LXQF?T)lYgEDU^aluqMkkIm~VeJ15tjPcqN%jPZGQ zb7Cq>F2$=P?1I%sUnMmI>z#tcDN$p?T9r3ddH2Bfm_3e?6o2}3JLKK_eo46zTKc_!2iK|!T(sjvjTia3x3jA>=JKjrCL8E5IRp-|)FJd>u z<#4w(>TB#{w{(a~v^*?QCU8NStkGhJ@lTdvRTkz%EP*F$wQ5EOON;T)i|fugWNpVI zOsjfptDi~akHvVqci%mm4^uHUB`N!kMc*F5Vmc9OnSEY&FTTS=pT^(1<33Cq+55cY z?D6XO%f$#u=?%SOTS{}hfL?JR=(uDTFc>(p%yI zDJ1IL4piLR2SuJ-q>%z}vayjuj>^$8K|oq6zmWzGawC+7aSTG z7v5(sy}xwH07meM9u6CSIdOLMk1NJq+|T&%S3x&YaL4l1x$iM*_= zsn7?ZC&~DCC<6vIjlyb%k29&H$o@2?#F~qV=51?>0pzr^NX#`1W2pNU0oH#c7_5D0J*<$6Tgqn2wFp}^ zm>C50iBmcA_%uR;1F^ZfiYymSTu(oA=~#X#oY_zI!M)vxLkD?~LTSdW?a{*ve#XQG ze2po5`h2pm6Uvcue|Y%`_=&p;IbQ!%3{--Sh)wLaX*2MhP4Q>97q6dW0I z!mllahRzEaLW@Mp!`-b6cTJgp&o^8eeX&YEsE1$2%&s4vbu;|xEQkQTwt-(9(0~*K z7pEYyRWIsQCKP@@7F6Y(bqt?)>~4te`P1Y_espannTdJhs*yrpI5VSh_YTC-0SMgqX=|b4al982`E%xGG z{z4&y{gE}H$+;OFd}&o93ZJut@MG|SH;mTZy(ENzO!GbStUpqZdSQR@7BKNR#51v2 zO-Ro23BS~*GkscTV^x<#(;$qez$HXCy)EM|S=5-Oyz-XVJ@-0%X>T$C?O7WB>j{nu zv85!_oYko2cCjq1Zyk_#hi5QnhqK7RRwecBIb*@z^FmSLBBo9=7?a|LrU!jG$c|YL z!X&(JZJ}H~s5F$%c)Q6)G%<*Bm;K_JvlobLHkgi2u+KS|p#kaEpV*^<@bsUVAEOC0 zwbbYAsuG(IN2|XvS4hC5EYg&3wt*7%H+#1uodPr4`jM}L+ET!nsl6g!2op`cdUbavhrrj%3*Tpo$T5y8Bp~%G2z8beAftczPjs= zQ#r(3uWneBvk4u4EO~~v1!S-+5VFZ6`PzhMNm> zANt6|LBcsXan&8ZP9UlyHjcHv`^dFR?~fijdoB|1w^3h6>+*G}wu1v%0nH_qKdBI( z493jtrsqMzu4C5iXtlb+)r2ymk{bFx+V;C_#kH}qv;IFW7vA~_VH;ZMuW8WQC;PM~ z;q*Qft+SKhFb|KNO=`C75bZAY=b3=M15dT-AL1TQIbr#o<#p4*wOkER35i!lYR z*O7wmlf4#9>auy86gDlfP(AT_CtSlvAxgE{(*eQLq-qy87dqR&6li-*u3DJJcij3n zp4dBRTk5jd^2ng;&BQMyd3wy~=Ge4B27B?;DNThPN94W(%-6my*_iq;6S;7f4vJId zK^$#&)@azwk?%&-+^S|3bgy?IFlEXIpV3^to!{PC3Nq{4gf9A2m%pOMz>(XSmtq@l=unrVfyV?!bkAbA> zVwOfJFiIHdV`0ff{Z{s|>B3UXb$}3jSaIt%OEtUE>zqMI_o)9&T4|S- zZQU=^%PKzDa_DXcD#c0g2w@ez648OT9OthTp!78Iv93+a}w zy}zQk*Gh+^szWELi5vOlFF?OQi6`=OPF(gUq*}wK-mF6vUgi1iws9$)N@2}hg|km; zhwZ>QWV6x^1~<9^>wA@$(&Uuly)Z4uNA0|Q=S-ri*&U}0`|+BtiT7!XVSedL7??ZZ zS7M?g~a$BK&+ zOTNGCLdO;cb%%)^%V%}Ro#P zByBG9X?6HwHpS=^c^x}j&acxB4ddq=0tjb7QrGmdS0cl3rD`8CHyR%c*S5dVsQ1q) zsx@vn3X4<+lWyv;X5xtE-F<$9K>PK#CvY@*42*G6XEH^NgeIUb8ld|>P{THtt;Z(K zmm#mt|NW}XRn`c`H*#O(P62c6C>g-y$ySfyd^hd?GW#flxVLwXb2^$eyPlept#}(x zQFE_qbrZDBi5`7pYMbkW!~GR-`Y@C<>IGNCI@2ng7&&N?Ii$wMVEyx`3}V$(t7~%u zV%LRWPRYjl(0rNw+@gmHq<=8KV{;a1=viX>0Cr! zIHe9v0?H5W1a^NCknf#zs9NA7GlfI7Ch7u8p9N^R945f&M|HeNJ3$JoqAIfGiTV`} zS*|*NaxAr@Yk2EkhPjB4B>+qSfL;yptuRb{f&cSNI5 zBgEpiFzO0?k|>YTv_dF~3bhle&X%B{sZIf%SN-Rfp`8!;ij(`{Q@81>AfF5{z1xvE zDc|7Cnb0IBAz^c;=_|0|uAZJ8>IX2|3KKG6d3 z8$11R4$s!{@?d_>fAZYl^1rpOr$ zQZ(QH&}MuJ(K#x*t6M1ii{F#%EoRacdTyyuh!@h6}*D4XTlY2(C3OswqjjVC+b=+=FTvznN|RKay#k2Owy3A^lq}Lb}>N z4HjM;>{}x*ztM!v8q?=QCA*#m_$I5Bq6o3Ejy_=*OHlN~sC59@&~0d4+cS!Sc#J8A zJ&%a;rTieIfjQ+$q-_+oAbnL{BbAct_gRm%!5GtHsUeU4T_L#*P+Ql; zMDjh27r|+Sa95pc;jl;O;tlVdXC9p35Ek1d_bL=ho>svRZ z9=4MHD=ec+p4})(jGAl!34^Qf3CGIQeGIk#_X1$@X{3O|M1{e7a z1Fe=p4CYW1#O2actpWN$XA%Bf-?dl^JrH`jQwadc_xt{`G^x{OTcweHo+i-9T^GZRIZF8Sj^~I6IpTbbn89?d>RMeP zMxjM$hH-VZ4{i>lG`_uMrN3T5vu^1uO)8aRq|J7JE2vRp+Nb?`t-Od4J+oTiuogGW zU`J0{*Phov-E!&Erod^@ztZK|u#olT=`q;^lwfIcvk)f{AV?jKhp|Gay}nNBkd0L> zoNV;wG8&SkgrQoZ=BLo9e%_trlQT{agw9CHy0LQj{w`pj_WV=OA@~hg&(jt>1!GF( zp(s7h4{_=o5|XOrLYTp9TOMAQO$6$nwRSXi^c!+o2E-4ksZU#2p#r!Lr7MYbq9y6A z{#qelR$*`RW7PALn38(G;JIr*CQI+bW}vDVcBCos)9aE9O*r`^>NfehmWCzg)cPqb zPSF&;Wt~RaHw-JZ>`kUhv8e|={p?@Mw7VlQ2)0aEH^u?!W z9%FIVR$bc#J}VKjSeaMTp1H~tX0*=rW@+gzzeH-*Q@hlt6T%20$AVTaots*K1uN0? zH|*Eh0_+f5w!2FGxBJUBKy=TVDuH*v9$w$n&fdviujDu2T1W)gxBIl#nR+8~soOWS zyztoO%dzlpN66^Cp^^tH?pqayR7~#~{<9~4ym=0UH+@0=Q+c=A^F~VRHcq2fQ%;dT zACwRPbCwIq*7wvH9fRGP4cX7w_VCr$@|Cv5=`*H6_mLVOA_k6y)Xhr139P$oweY5S zZF1PIK6T<;lvuyy-}U#c#*o>0A(Q#9%9d4Z=NQ}LoaPL;BH@gm6}g5j5W=BPj}G35lBwy8m>sFsfmBsac*gfb$OKpr&)) z2LmOFF*kEnIiQnbL?F6d4mOsL=pUb&&wVyMylF2NvT+$jA4U`B3dzsD_1E;^LI%JJ z1%$_$`izV8nN7WmoOWNbT0u^DRUIlMZr-tdV!5fUA(VT(jZ8Knwm!VOo$YWP0Xl2R z{>?xFjLYB_5AYPKFnB@2B9%hP3H%Vg=rvuNcV$S^rqr?8Di^lyKy&w$5N6DzAnuuM z3N@ca>M7HDN;AU92$Q~srQ4{PSA0&6>``Fvn@?v4WI2V-Hv3QMK)a0iic^r`GhS3C zWitwhD1OxMsq=#n{3ZuR zYS_fW#t1>dtFa!}q2ejr4BcI!?SHoved26YtO5FCQ})sCj>#yuL<8q_`ijF(N;x6f z4e6{*08>&m57R_m)&mxQ#iPt9fdhF&PCpYoweeRuG{DYnZ6KK7!u z%j;Z$)2cBFn~R&wXX?z=NiZ>T=hnTetD>{IS}(KS1#(ZP(y=hS~+B0W~u_ zgh4M`{RV;F{PkL1-^GA6{`%Ie2j)mLoWw();1E)`HTYMBa|8>}p=|$Ec^2}ldnaFd zXEdC7g8CV`0BV;DFB^L>)JvUPDeWwQIw~45FE#!;7bU6rN7PS#*Nb*J8Q$T^!|fh` z7+tgwXX;bxNC2M|%LjxvP0V>Kea=Z8#!KH04-X+f9@nX}d>!qZztpImV8+MrklD}2 z!+z|e;=aKZw2Cp`*f+loA8{<#G?))=(iL(!Ia9?s<@v{nHUF-$?a)-f;|`R0c?5xs zAw#Q@iQg+0wy3&l{9Sh791y*At3Y)qy5-Lrzt{JEmYu8e!M*rSxet}TjwrICoId!< z2yytZgoumY42F}hEg?Mi@b8Y6(5+-*fNXf@cpgsl0`Frr>lB2 zYQfh&utywShD}U%6ka6xO?G~ zmOtxeEopYIimkYIJj{h0U`TdurI#RuAoAGZEG^%@Pa{BgAeSKw*n~iL9sVM3%ew@} z)Hl1Axtf*titOas>f*amvGq(#!-Es!y}hGiA|gkfM1YSixVQw7Ks-p}ZAmmSyce=k z3`pRyLP+HJ!-%bm_Q6}vR9C3-#wEwZR7EH}jC8$ZV`%Ta)o*y?DDcQ{&9X6zK*i{i z;T~oG&%%aUMJpYGF~C-o=H9yJsPSKmS~dTkrR8ltvqyw0vgOP}(ce?QZUy%49M8=F zMTK}>k-b@`y?Nfp2MQg=!25Icw_^CMz~NY-t#w2;0(V~IF_w27gt)4TiMSr;zZAVx zHv(8(9fvVbCN~2#%ocd;nqzeqBefrcbhn0mZ~r~)=DhXkPOnl-?m-{NF}H(qY!j&) zB2m*e!SD}vE{&q0rK7^s!oD3u1gV5Ac!maHu4FxbK3jCpr;T~Ar|0dWs7Rcs zudQ=w4`e;lVv%{{3nL#dn#Hsl=+Bu?#kSuHid;nBXI;B3Y~2>Tu_B9BuewW+39bZ&C$1C7_316Ee zG}|<*(Iwo~lXKqr+o1~zWhOOeo$Az2n9*0=Pc94#W2`Z6p(?rrpgWL8>j?hcB% zjL035@BcJ4R1;9nSM*tPiq7?A<`a;rp=%6!t0s zGk$#LeAJnGGo0a))w=ot|76;|R%zBdHtKnIg~p5MSqQRC`BWvZNjZ|)R229*Lh3vH zWKqbGsi@KY%$vEwT=7C%Dg!C>+|u8>?emwIaE5p4$~Vf*jWb>r0}lYz49!qIQOQe{ z8lM;+?!<+U2G!L;n2*NbQOf61RbJ=)@MSD5HTfWQq09YZrRl!fPpCRAQk^-{rEOkA zk2{@xcA-K7A=1`x^1S=$_~%!&qaWZ=Iw(K;NsIRMD$n-$6e3in)BqWF-A-GwRWEUo z(^OMT4*^rM+5~QfAWRjKdi|uPZ_fsYY4>@n?&J?RavkpOHdkHJ(Vk~|do;Po&iHXa zRS~4Hgc<%3S;=CnxiDNbRriLizcd^W7to zRQ21&^RIFl4=Oyr9^<2UDEl5RvCO{nj#;8{Cu`+Y3ev~x8;sm0^J?-&qSgzysnj-M zY#B+u4LNf`jHyQ!z)jthZx2G`bQaO#7+T1H?{>yynJYa3<+ti=u!^Q;uruUKhD7YE zuFUul9*X0&|^|-cp~cf(*(u zwhJSYGq5Q7uFLy+0~cwoz~j~vU6Hu`z&25ik19!8eT6-6I$rQzuZ)7oF^#dsAm#aAZPQF2zl+F=ad+%JsU}ik$ThO|8_f(erw?{>GC#!`% z_8b}Qr(Hgir|NbjGoY_v6j0FemV&~$xi5)ttuGXnBtf6j$b_k+jKht*`MJT&@v31GqwwgIYC!36J}(Psn|r>m`qA2fV^6qcpp@5AlikCkuB#p`b29{m z^~16OY0I|GaWW4(;slVfm3!0Lu8rFVHwB$D;1(=%@nj~hEw7?gY#lU)BRIRE(tr@R z+?I&QKrmqLX)zk_-S|mZ_6T8(`-Fk{`@?2_mPXv2k7sxGyy6tYa zyONRRK|5ymJS^GT0CVbHnNG#X)bQ(>Wl?1<&9@DcE}j}wI(JvG$5eFT^UEojRn|W< z3yWc`l^w}DW6Dn1?d+fRahqH9T5O*mI6s<(M4gN7zc6g>S=pVS>)fCk;Kd{{4`o@W zecqdZF0Tt_aSen69@5CraB>+i+GdQx?V31`7oVgAUMOXJzh<#x!u~JWNiaT(^}o`& z_NCQ;74m$D_hjt=`pwD1E2R$3B@H{>N{-WB>6olkwq4Wilkq$*UFv+HU24buv3jIf zU+bAfTg3UI@Xg}W%OK3MlzF?8`)||SXYw!PoQ=>gJ2PNLr# z)Id9X?=WfV=X9nTgUGx{1KjnVb%)c@Nv{m_{2**Onrgr?z}U{T?OF5v4&9Jq;@ZXN z*8ts~;x&1DY#%$L%Dme$??KTlv#F^l!{~=y8cLaIEB|(7-}eUBxL3!v87h4~`H+vB zJE1+x#!hx~HY4yrFJvJ5C4Y(-!pIwBAd&iT>>MhfVaR%vfK*oRj+O2%ST*+PIl#D8 zoBCZ7TV?JnAA5y_at!EDemR_Zruz)`b%2FzOMB_W*qKqA%(xJl1Wx=96z7|Ej(5do z%CYlI92PTio%sHMf|zQK@Z)*63PH}12Q5}ub?IiFBD?7tU3Otl@AXtF{hG9wSKqSz zh`UXjFjsHeAg>%R?@76>s8*rrFUP#Omr2rm2P{y-%rw}XknFTNeMaL`vUN%lk#U%A zQtDQM6Vr-5QsE!?nSWM^{{A%0r~N=os&uM;U*cL!N|w->M7z9p{b?*2Ea`EH2l&cm z+LN7-V0+K5bo!j@SWq^ru260|X|?8ou5g%k!6Zj_%4VQ%|JemM*|?&`3&Y(~(8ntu z1AK;GJnJo(vqx`AmmG(4-O>1uj@uG^1h#V-UL9u(-lzj2)gL))x%|k>-o|xO9^b&# zw);O@D=t07W2o3vi;HXjHVTAG{NX<+qxPI-sHjk$=+uNDR~*mQuz&5yf3U$H%m4kY z$glsX^*_jBYG({;-}4tQEd}L zD0t3u6K?zN?AN4){=V&Ng6H$hU>_pxWc2r2@x>z2FgN9Kc`47&7Y+UTpHar(bG}5- zj7>^t+^e8;t|g`oL)8mx@NWqG&4PPeZ2a)^+#IbgH1H8uDDBnSg-d9dgYzTw}dB>-#s=8oTRFwO9xH_>wPc|qkWc65 z=E+arFc(i{W&HG1o4WsBi^}IQ_5^+K8w5TW1aUZhkIl0SvF_v%U26=i(loP)`lEe>;_lP9|1IHd#~co>n)F~)@V)4-e}O{l$n7Q<83Lhd0vhI- zleNPI>p|$3eXacnGjxq}MP6brLX0xda=kkMc_VP0pdmaOJsC6dMgS%Vad8ia^%dU( z=Rh69cS-&m9=_025E}!n{B+YjXXfLCt&MaAbsIT*b0_;|rP=Kju?@MFF>l&V9$huS zJmil#nU1LYAmJPQKXN^$C4KN?@vVk6Pw1hY->rd`9V$c3o>(P$*KMpKCS zrYh~%6G*TR;<$@##xJq?leaV8IDi|WaJU7k$|&S$-yGzX#z!v!kfiUK=K(={igHNN zQtDXfkA8itw1(zmyZ()8J>N&n@F|6qT;sC@{LnuJ`)9xZ2Ri?WLH}6%J|%AM$*2D} zRQ|td*Z*f&|Nr{|C$AayboKyg!FG%OK54kb^SrcK;5(Wet+`Nl9~CKVe2;^H%|2pH zo78_vTwS55<&4Ch69EtVd47p;3{M_pmIoNY_=fdFcGXY(%Le-uMMVVss2GtMT=cBN z^XfSZ5s}C*|B_;EtC9jfJLBi<;pfYF8@fiK1{e1XsW~*sw|mhUrpZs;LJ`Qe!@=1f zUwe0BX~#~T5MP|fJ-hETyMB);`oRfo#G3v2^QCj6Q`>*p#NH1PF>~Vizf!y8ABuUta(P4`OxHp4u5|zFdywkX8aV4rhDA%oTsUH-{F|Bch{lT*?f-rS zaS=}k@;A=21#z~*Y@eLg&Iwdi8}4yaW^x{A4Qd9P4Q>i~wwUqVlQs7G>SgD_ydyzv z+x{)Dy~v3BvHmYMqDMs;vvn%pIF&YXps{m2O^FUsXz`cE`JcRF56%40{P1n#9FO7= zFI*Zw)!nw@c^(|bKcEx^dhuS zEjX%^Ue#^h-f#f`8vk*XjXa9s2j8D?@PWXLa|G zWW^B0bq^(avaC&N0ZlOh01?JS_8FFg-m|;)-#UA;lmAd_Y})c3!M*=pqk_WT17wZ! z)(GTHzyHooZ(bhY%>M9$U;FT1TKeA|^EWzj?ap#cu~Ys@7;_Nb+D;+=K~4_$@O3(% zJ=Y8?Oiap<5nEShp8gYx&ct0Z3|@}-efoXkzfKEre{L0w;pOE8?l-jiixz;-qIo{u z2rjqsiBshM?0(`mRq=A?KM@i*zo9FlbIrt_v^7nVt0&K2dGvGxrg!>kQEdbzbOO8gT)LDjpV`?z-O?(Dd)&?y7auA1!s zl=yjP#F-}%To;yZ=ZtY3-GAZylWk^G8%>{O5l;f+MMVU^jQ7VC)$2g2PCN9hOg$=l z<094ox!C0rKd(9{8W3{_5-m-VovHhNI+pdp27K{uk$1e-JaI?FSHt7SWiA|VmrPvT zI8o#lA7Rg5r@h4VRAf$sqZh1G7ws$6-6TN3p+&4}p#qZ)v=~;g4 zrpwtiFQufgmj~E8pe5D4!yj+(o3w_Q!Eh$kA9!wFb1O46t_gfQkd^C!MuzGlTg`y3VsgG=km{V6-M%RFo>(NlbBTnyrStyk3Y2@I{ll4& zH?PjO&-B(t4jglFi@#1jA`NYl#gO_<`&0O7L3}%sMAH7%>rEU34mvOObtuMwpvAq4gaURb}xOQUMvD*S+wZ4gJ z#e(92l3LDc@>+#RhJXOGf+0NL)pq41s5L9lpZ53w@3o^FSeehh78Bq03jHQ;-kWN1 z=R*y;c5#2zd=Yimcn*?!Jnxf7Y}lORVea85EC_4sTqdhh_dG&iM29=|8J)eLVK!nQ zb2Wb5Mn#MTFVRTwN>p2441{1$9fi33P|5GJuX6xFAyUSMkB!ykK2|1d@xQ<;G72mV zqmb4T`*>bKPP$r(tv08=(W8B+R#`UivxYU_syxYUC5|Z9_^EL*vE20i;Cd~hMzo(W z)X^sW5_ammp^0DfTG7aP&!-Xhn;KKU2kwkHQs!>{NRm%gYOtz!u|hA}R}h$HKpJpH zdxYE-dAKicv%EJn(Q@sG#Vz3R>d8aic}un-QJu7La_~X7WvJ8xNJH2SoL>wjG590~ ziS>^6bN&jn@jN4gmdi|Y1~c)c>Q8)Vx_fm#WAzv?nL$r6*{VxXd`~p z*EL?dll((?;^X6qw%4#VC55gwo4p027)g&>OsGd|271lL9IGv<6tW0a|7|uYZy@Iy z*B3|K=WQ)FY);-wvCPs!F^U~+j#jh)Uj{w=a)$sLu+P7-J?>+m6XVivF^8@9nRzzc@}-Vg zx7Lh5c1@DZhR+mi5+_dR>*i@nx9JtZpFMW@Kg_*%R8!lxHjExn5ETS5C{?KnQl!@) zf~W|Hg$@w{g3=5fA&Cb;q$@~~Vgyty6agVXAW=#pgpSezM2OVTLJK4W-VMidf4}$M z_uTuvV|?Qq-ye>lW@l%uwb!0&KF@sSoaLut@jtw4o#81Hy*)M$G`B&q+Em>Sl-4lT!ck5{Z>RtA^-a6Mfy(HR^nJC}_4el>E2_f_ zzLAL^7KP!V4@jh@7l$`fG9K6u!IygO6`))(yCaSc^|);lCxEK5o%2BLZozDncwl&08G8!rEFx(-Ys5 zYK}3}i`^71+D(iRCZEFf14QHQ&mCw7S$q%HRA=^cP*HLgN(8$xJ!%5nDzILW31eanG>9aDHxIPN$SI=xAbXfi^+>{x*L8C^=m1Rr0L@%%G72YehFgdsn3iD2xa~Sf0 z->XBJeimgcn8W>{ElgJmal?jkn0Z>Ty!y^GmXJQlpsEu-7k)&hR~&@8j(24?O`SKS2^6L{p5(q!ceG4iHXluDbLQ*#P>-A`6PVT+~y%@ zq?=xmwQM6*(%r9_&`tJ1Njn4g_{Sff7QIIO-IzT@~~s{`Th=c0yM2S zux5d1DE4v4m*6(4Dcp79`3BR^VoGS9-ffX1n2RGPL2s^B%rt2B+Kf@Wy0KGS!txIrI|NFi@T^e0khCX0OUybYtnVMpp$&H=W0N962G$P{a%Ksv01^Kg%9`nfqte?D`Hheo$j=2Q zQ@jBFTV=itP3z`Zmc7nG*0Ke#iTp9*mA8D>F`9aXwxj(jE$w|lp$g{Cp#fKig0A!< zb<@0XEm}vf9aSMI*kK};lrBCwu2cN+el}o*rV(-P$YsmgLLa-@=>iN_5(j0CnHa9C zVKv!v0qksR<5X2?41bGoj<4^3TyhIF2TG6{Ry~Z%NjC5?2=yXcYnXmv<(~J7FD1gGL8!$2nLxg~MPF?;W#VkI1KA zEb6GFY#gVkkpx6Q2}fRS*}~J8`(|Y1xrsnLL=5ths`75(1c|@U;yv=K&6O_o$0hhx zC|wy2F77x(5MyuvOF0VOD;3@oZ@#9Q>pM!MAbGp6%;;xG2_KnS$HAas-+W)M(WaKV zF1O1;?wB#2$jpto@_0N;TR7CfUY9ETp?Qp&%-wSK- zIIV4=iQLEIsW)(c6Ljz|8*o17Wuxu6V~Bb&bkdstoZUeu1CMHp!3zVNeP(wqGvJnf(N(`!(CiDxCuyC1ohK@YkGVsZB|0vHLcvyS<@ z`=Cqk4_4EAj^80^&b@iQ@xQ(odP=p;r?6yUKXeWh59yt|`E>SPokU?AJZ#uEmt~Jq zMTS#uvw#!E_zR}YmlvncoCEU9XyEGR&`}3z3_>X;R zS!?;XA31+zkHlnk6VBSzQ7G)s51^Yu4+2R2_Nak@0T)zOoMBdDYBK~Rx$>zS)WZ%r z*X?}h44`8!ilq1^^!g*Q)b=fGD?-hUa_ za76l-{&^n$z+rQo3}37y9iH}ih=GlZ8h9&?Fula^gR9DK>YEM--WW~p?O-f?s1npy z2kxYLFOI*Z|Xc}X@hl9E6;!91GE{MXl1 zFBm*0J9@CPy;F5~z01^%X%v|4_^99ovd=g|47mG={W~7o1rYBj)Hrs#A?$_4itMvA z_ZS><K+AU6(qkN`7s`@ z8frmR*`xGD(Gt|ykskKvPvZ3>6v8{wh=x4(M9jmTsp#)c#n=G&JDcjR%lQ{Bx%^M= z_7gSY_ysY>Q)qMYco}|akL;dZ1wu-rEBBK?IoJ2GkBdl-W9a39TV*qAb7eo4IAq!W zb%h$yt+|_fd?4pfkNz^VO7BDAY&E+i#>2}lWgLxJo~|3oK;~hKyQ`_m#&z4$_CX7D z-_&rN)O=ULxaY|8K)JL#Nrq<~OBKk)$qQL!cS4CKwq@aF3izdQQ@6`YH38Fnpa%5a zm{$U2?F$Xx&hJd@i=^`CUPD_&&^+0E-rgv5@?3$_7CV8mNZaOGezj2`nD4kCP1yG%LSVx?4AIUCu*n0<|8@45osTr!cSU zDsX28$j@T-4fhf99?;Af&G1}IIW8!RGQKwVzRIS?uvaFpf%|}<-Y($IkmTjvL$#Vs zN7O8&texBA{Nu->qZlHWX=_`ty%qE6lgnp(HTlD#GDOpL+ZvZTugUp_h~HRgXIV1^ zzS4zzn`7UYx=u%Rw6p`n;u;NIa2bQ>cqL}p8RxqmNI#9{)_lCH-E&|jvT821`R7${adbGjLZ}_D*l7iV=*1~9J?5&8RQhD3V6?6dD z_AcI|bfQYC>{nz(8QcUbe9qYUbKu9t55Z{*bFZ#_68CHy>KA%S@SPdTS1a6w=r>_9>&rN%rl=> zAJKVp4-H5aZC*0kbPDJ)E<>;$0M(?@FQ6-~Qoj@K?V$T>?0a35^OBTkWMvt%^_u+Nz|dMR5jj3TL7<6%~Lb9~Z`ci;|N8ZCuljkc6 z7c_2&tyZ|WPH_aDxpaobQAy_Z2G3{h1uiOHc4hV4a+eK@_9oTkGefzIg)p;!j!<|1V0L)a3^= z&_o@$s$9Y}=fZ(s;XQ)Y%2Jf(jn@>p!Q2yE;0ugQqj%wT?Bx0%^1x zxheDR%jn*7*%-aGZfH)SNmx$(@^y5IR;vJ^ElFa#DrZ`(v-!CyVmT-IiZ)q zbClyK9uBIV`n&`AF2+m2vi2|%_i|5Hl{Vh-XhSN;h ziv&D9E+Ije7OU;Ta7Q@_+ksFH*VR?hy(Wp2M$eH2>uQg9uY)yW(o$W<1F01(5{q4b zL@`dRi8%A!ngCiseOz8e9PDyX{d$W$lyRW<`LfuJpn=I6hAkc?IG`5Mm6>Ve07Dx$Yl$Wi6aCZQ>e*N#3#V~A|u zE?rEkjJ4JMaF^{eSbAfp(TL33xuuBJuDN&*(Jk_=cA2keHK>t(^-_c~0qaPyj!#+E zm?$pkrL{Jl_Vg4+HOgqbOr+dl*~?8etn$R|**PZx9@SizW;F20`H|3#7k_PvGL3LZ zn$y8eA;cyga#OTd2Bajz-W`XucF3}f&kcOmyOe10THvD?xLE1!*k*i)b9_~TMAf@} z!5ppFKyYGT8zDWKdVH7sI>FhAn0S;`|N2S(+I0H#0#XRf=P3zApU)~`g~u-Y0c=^ zksClcNjisz{LbO1x@!6z1PL$QnX^R)BySDmfmG&F6dWO+;h{R#_8LnuB@5#@1TRp# zB0qIR0)}3OvNh(ulGVgbErWe#4Nmp{19nr$&Mz>`eyWKbClvu0ErVbOb8)u1lZ`xw z{}t#HR1=7OzUtoeK`HSHmDe{I5cV7<#fcNU!rs;)xYcufl$`c zswp)NgV#bP$iz^=H0!(eYUWcZPs1#xgS=jK?VRb|MthXkfn>#zDHb9K_DyDVgRsB; zmu_AE+Jir>FRJZB&+$j7o}@LOpUvu=H=*pKEGM0}q19t4v?$uYp{WhRfkK!J69#r9 zWHYK*$)TY5)1szv5t=Yk9>pC1VJ{P;7K15ICXS1GMz8g4eOHxHjU7AIhVBFp2j8^m zaKIdZ+mc2)nq+N0cJ`%5ja!j(Attt8X{VPo&_rkz>u1O<9eR95amks`i|IYo)DwPYP`V8&x70r`U9K&BGGF{+L|1q>tQ5TK>War#IVMs2s6vS^#+iGSE)a` z=+@ldfDIrqAG?j(9Kesj3PmiF^Dn=&urVFWTt2(%3oW^zL>{WFobFDqm~)D2k5&z8 z@9Ptym0=q+UwRbgBBOon#PAA(3bCUzW6MMv)Te~xxEEWPD=iqYxU%I+Sp-JEPo1h^ zSI#S!m}U#tj;|(c4IqYm(<^;Qn$gWO5gr-Ip5sib<&e=S zYgkL;qlawoxc>6-W4J)PyN=pYE)V=$scZ9&qqg*i?7qMJJm9!(M)-}E>o|_lXFssq znz!V}Uz|--eAs5g{p513SzA#kK;mBK6@<-7Q{aG(ukTja#mH9MTFcIimRJ% zaf*N`rQhnf>LGR`9{I<=gm(sX?ZDnsyu4H^$;(^a+^!AgisEVC5FcNr&XIy8V@BqZ9 zW&WyWY8lHa-^){Xzm13VMZm9Hi<2AmeLjgyXxhGmpeFf5jTe!>2QyEU+s}SRs6U}V zNx0J^Z_5{!LN>PeH>=JxWj{L(E*a`iSc>$40sVqQG0P>5Sqcpqm$ke)E-oIi6hCDiISx6RZ(mKe z@X)h5ij0NiE}R)hkd@an*7||nkjb+*uk7I^o8UiZ(*L4!(b7L}GHr`OvK+Z}XPQN`W|?DhhaATC4`-1Gi!fItkAK1Fp#hJZ;~FOHnbm_9eKS!Wre5ep0J8C-VEngj^fBM}epOsdbT>(lPj=^_?c1ZwzJfVox}tMLa+Ck7 z4L7H(%rU9q7GUmpHugq?Z`*bI;6s;iLR}0s8KM}Ti@lK@c(>Ueaz8&1bruG{{0aEq94FCZ04b1*4PILjP^d;?p1Y z4;|yp_27)r+4t@@Sr7x1A@PYGKXZUch+NRsNZqyZv+bi=6>3UwNSwr3MC7uHiBAkaFY7xl3a3 z2SKTYb{Mlto2@@gI2w1YnJekoM<-oO%pJ@@LHMnd`0amXZxQRZTa1=G}J7I*K$xk~%-^+x26@@WYxl5fIbz;Ozf zryHqqt}CNH)KDZ-UR>R0NLFL${v#l(x7qLKpZm1~?1`V-@9l)8DKQ-uv7ZKQ#KqHu z6+MHGhLgYk5R>stdEH6QwecU~(;5vzReAEEBXp5&@Y3CloH_ zmAsaZH=p7nEJ>-!`%F9xvjvauMR;DF7S2^S6W~>>TS=COU>y`{rcT-75OuSI6~tVU z-P^z!XaxuG^RfWoHDZW7;rCIz^sep;=lr!oTdYx{{m149m#>pc#ri53b5AIZ57*Kq zH&0gU9JZV-Gy_8;&;Os0Vd}h5D-aR#uX} zki1ILiuy%CcC(|rGC2Xsx~!ERpQ~=W|{CK?&feu~- zk0XyBE>___^6IJ|MJS%K21%3c-NN3mg2u3LW@2H|nj+YEZmhIwL9zC$Gef>Lv7od!#(=T3d4@R#}Z*9&7On4$^#9CFR+f@bI7OUBs9sQ8S+cP@LO7m_>D|pgYwO0Q9Yady(3naO8HvaF~yS@g!uC&Zn8z7 z&UBc9SOI;xYC>CkJK6u$J5*u_jTWUXE`D(@YBNbC&emWmghzWyT;;I@Jl_|>sXG@J zZ*lJPkRzufz#9MhYW$r5^PTu=d@}gYPJ|uk;jBv@sIqYANdd{YYJICd_c=XPEKKR~ z`l%T@%Lb?cNL8u1R9#ky#Gt+qm~OQE5ZfF^kUe)19r|QqtWQPbZA9R=-vLnnvUyvw z2qnJ7pB0#ue}00$t(vkfz?_)$NvI>1Cer2(P>i8%?eqY$<&$8H?@+=mjb{FatS?dBeWn}F!0f4t}ibyAaGP}SG6?A4jGFnb8gtD z@%G#K+0Qmfh5p0DF+aJNxK5iY_0j$w?!Z)R{nDoq zdJcxOLgBid4_rH|=@7l4f;f@#^KVpa6DPSxi4?_z)%xgTbsakX_aJA3=E(3^Bi1>b zh_(+!L+9X_g!i7{Y3!}uuFA2&=t+dtu>_UVeLU1Qa(;P0+pa)#WXFkTutaY(Y ziG3VNCzM_&6tv2@W%aA1WOP%cYs2n)<bP*vnsb{ z#36qz0;=BBO#A2yn%5~+l2h>k$E4S`x0$0yCTl7b<2+MSo2Jzl$~1>(&LXFTep4U& z7%Ih?*CKsq7}CN{g?vLrqwg2_TV$Jqyt}#cS0`S2Pm-#uE`}bnK*v3SZz60VUuBAI zAzNb(l23;!Aw1q$kgO2lIfSZ@lD?yRf^QQyQ^B4)ojnr8C*;2ZKiWvdTWij{g69jU z88^hxkaG(W%1zL_mb@}P_5qs*$wNcsrR-Zi!d>n~!f^L*9Kj_QSqzcE=K|spytBzCKns+KuNtBibHQ4iPArY!Q zui`v7pBS26A(!P#tzshkv`YJr$jlW0EsS)BlZX#u_&YH2<|eiS;kgRCREVX4EW>2% zrudZOJ{AQQMxPIy0;-3-=)JXd!SBKO1HPvx`JS-TFZxOyv&=dJ+6$8NPItIU0{tQ3 zWF_jLtLL13H2CD{St30@5`KJ+Z>ULD#KaRbo@Mb9j&T*$cQT0&0%MC+UWz553M!5X z^nNXIR|WZt93Xhpdz9~dObQ@p2haMpD_e9i#z_qJ`t;*mG4w;k`qHEEbrc(uRom8N z09-XJ>wQ@|EtK+6CDHMGR<=cibkgY1uDx{DeF1rqv=F@os3Q{2O={(mWSE z=@7N7rrEp3I6)iR`lA*46X;k_Bf@Z1&imy^UWS)>H*pbJK|?sY|92Zgm6)fF#1w(K z9wLIhwtr`X>^m#I@3ij9e1v{p08oII2-HatW|SA%SxxhNI}dM-8#;BnG*RfDsE*l} zvDX;s2HkW`i!2ja{o7uEcm3V<>E67=#fOh09zL|}StvDKP_+v_e(%qRg8ucGeX;QU z`|#YmyO6=jzvKEU0Uq#o_P@b45G>++a<5Y9SBh3VP^UoX;RjcpYn@wzc~t`)l=#9C*CT)64LQE}cj)zL0R6In1f>hF z(z%CTDfAnAGZSpx}3Ze zKyP5(jQb9w4sE58sBaU@P^HFQqcLerW;4!%CJ+8-E~(`!Fj$3mYR%$PK~TpPa4 zg>Xo9vC`c4^+BMJ&Q24Nhnex{haQf+{-BB#dfloEMe*>Q-ztwn_cTYF<0b!QEB&si zb?(=hHtypWb%)m?-4ucXx@M)!JJqvpC_Jt>*43Z?3%6>Ge1!F9r(8iA_B7Gp7ojuS zD8ual@+mJW+<&fxafL{ktJ1&QSN*c|H(#7a=jrInMh;Y&x~v4WQ-dz5Ce3ahhVzBn zt6cn*BBvc6EYpf5m7Py|(n4j-)BI0CHjk+Og$y10@A+BbYA ztpruPK8~j$XDQV1Isx3hPzSMv^o?kW-}7vM7CYljK{#eb_{*9ltC_F854IHRE#-oy zrA9Z>pu0RqQFY@xUt97>!DmzeSiXc$MSq`jXliML4G__M*W7r36J^u{3J*SVnWg8f z*G*8PqMIP!S?t5#~ka&LX@^ciI*6P0Mf$21)Eo!)TU@+JS z_3E*5oo}t)6m&4j*9Oovm1%DwFsc`MCc`f|w;mwmefvksxAVbKnV6!$TS;cZ1@Cn8 zqmd@Ccp$(GKAB~D&FcNXC=q9e9b>X%fI{mfP@9#$H}(UvtIRxCTg5Y5hVzOF6O~;_ zmM@!nye%wehk%EF-ge#!-X%C}XH?3Hs`5*Izcr`U>KIUty+MvBb*1gZB%;?q@lD`% zUdF`WttsN*8UompFQ1htaubWN7jTJXdC;3beSOji_nEiaH@=gXV9E{A?^NE43I z3*=4+L}wzIp?OBMuWaiA*yM6+9`u@xlX{RK2!Q!&$9?xa`>DWLWZx|U${A{^&j;mw zC-=Qa`Px_Jtg47Oa3+Kl4^gNoakhdM&2zyq{A(ovBG66?g`fwyiTE*vPZR6;?8b^i z3b4zS`GOlP1*%tt#odHAdLz9K5rM7Vo>>Y2n?0|lm56mzPZa-eSY3)op+*12<|Z!` zd3Y!KWV;yzFZS;B{e0)7mGIeeMu4Dy604k5MON@0u7n*9T>o6zP+iIKvMXB7A_f`? zflP2hjdocf{?^i6P6$2Oji1FxI$^gLSruk5VB)u*o4}R`Up2|MyMQ3@yXIHyk-j~e zd-inlz|N^~8p1dz9ZKydrxNm@UrJv9_Ij7%5j-gQ^&4`@etlX$UPkggH;@2u;6I-; z&~1_3LPtnMi+!IOLwe zHRf_fA9SzK3dddT10%;x3+`o$KeB5fD;{>Tw=q5sq+|LFZbveGbRNuJCcbrdy`z1$ z!@D5ncCn*nHGF>~*p6}+?83jD7)JF~tb!*j;N4bJ+VzT1hsNx29KI|kjFvR0qhq)v zpRPR7>m4pK&h-{)85(}@5YnV7@#~*0d@S00w(JTu;$z1(th=ZOy#Y2c2+)(J#(jGU1~~YO2=?Vz1Qz7 z!=Q&;T(`bbblYW6^1(kzS`aYmfIqS203Os)`UMQ}Sv|htPDRa6h6mzq>(21UCZ7r~ zbZC85>!E8r2j~hU#djph9(!_Wg-aag`BmjkA13-YJ7ucYFn->Enp}66p8FbPb1dDS zHpZ^DR_^i`i`AW#S(&qXDP1*~4%E3^J}Y#?Vd2Td1mNTZ5{vX3DEtg2tEx~QF{H4< z#jMzj8*3bg=>Z+BfIJcdv-QJ9GyHLnPK_R6G?HM3f@#6b05aKj5qdUunu{10j!9** zB75_-Xo7O_m(iHEwtLp-S`w{vjZ$_B`7tMdO!)cQ^>;79um zNfUicxED)&J`eK*zhoIRq+WLAFYsXvq+pQQg zibT#znkVx+?7b(|VVR{gDo0wIOOC9~5kEn52o*}deMf(A>H0V=;P8$khvPdwp5g8p0x0c=1%ZFEHS9*7oq@)fr5EIPR6-9ecV6w^0hxc`WB-dx{)WNM zy@2S*|B=4^&zA$c>@N|^e{wc=Ou#=e!#j+wj=GQ8UT=%ezM$KvZ_hfvegdBQE@A5g z)F813`hK01oELlr0E*rF;4d1~jcE{$$pXj{R96ELk+wwe=Y*Q_fUE#j&=EekfZEw(_NqZ zN$B*Obk~igalbBOP%~qd>eg562(+C$S9C+{<5}Q_2D`=xUtE`Udn@_zb2YsW z)s9;n8-?WnMZ@FvT;$x5f&qLQ<4N*}+ti(ze5_TxI-muSnZI$lep<1HnzS7gHCfs3|;QgGHcn|w%-u=0!s%%X{XutoA z78WZbl!vo^tX$F*vYD&6drqzdi|_k-Stdu)0?hjSA5s3tfv~yvIor>5tM4<^u`HLW z+pD^G%V7c8DU-W{HR{f~`N9`|JNVMV1y0kuqLm#7zr#h>s#8#YPbpBa$j}AC&VE&Q zXEttkS=isgn9p63{vXzR78g&wCJp49Pdml|!LqvXk(#-Y*y*)$Zky(UdncfG6b5>O zHmaIf1*Jpz7WzK@Cd~F0fP5Q#>+w=0=6=kW^g4l4cMBE~UR&K>J%K+yG)#*O=J3Pb zjUUQLrr9hj{H-&g!8|KeCLOhVdS&1bU30XDR$xitCi zf7X`Zanx)aq~oE7g9rr(*|tP1pBd`d*sp(53l$kqI}W&K1@@b_TSp&M!zt^J0~)!u zy^j{UTS0b0e@*_vmtd=v1zL6f)|vFeh=V5M)mt@fUE<3z6T(sp3K#$M zMa=j1V}z;qhkC283!-mhqqe58#{Ip_iNVy>)HDJK2JcotTfxBXXpfhU6De|Xn);=? zh{5C30)J0X=vT%RfE#$W7tTzk{3K;6pF%l=e$9ZAi)nKB<_#hLK5J^o#Mtu+wM2`t z6d?-&tbD6TU}cmM-Sk*W`~mP@^IPz9G{(rhloe9PY5RsdY|@< zv+-ia`e{HUUwN5&Dl<-q?%Bk>rqDK>;zPTxs>%!rcOww~sT_QRoWi+aA9bvRA!h`r@3oZ5SGWWG1OLL^Nfl|Ckv z_V-*9j?{tH89tLv&aG!AUH?oB~y;CEbyHyskR#wQ$p=2PT^ zgUiI|J%O$7lSqm$g1=^rm423e!jE3%%G$W>(fn@=+T4_1u?;M4!hQ-huXCmlNX3f6 z7J4sCx*RRMHAN-X`+Z#KEXgnYxqfsbi!`o0gt%Y(At&tO)jsP~f6P>^8C}E}TFeK2 zEpBeS?KNMDBX^`)dr*npniCJEPm_a_a$ zHHGw6hMm+aWrKztjCjKh?Wywb;8BG|idL5v4R_VLHK4n-)uUj2%~9mc|$(+dds zmUdF!`W(Z7R7mz{Gc44!yR$m2G$G1#XTorfgEih1;hDv|-lXl`czp*gdG)G400-&q z0Z!uug(-a4)kF&$Fv7O!l0OH~g zZYxX5BnVSZ9pyCxuDQ30c}hJ-ugge0$tEwjbIH~Chn;h?%9)Ej-J6Q#>n2KL1m8Oo zcDRy-HMKkF{<|zMUIL*K38^)6Cy)OX^0^hOC82_FsxB28=NiWQK)IjH``_KZk~rY| zr|%OjUu%#UU0N7|o471C{BMY*)BPDv!hvwxyRhs&!j`$TtVfj@LgQ27P-z>LY;3!J z%GJjYziq?LrvI!aBa^nK(o7#;Nv_b0ISo)W`o~)~_BVfCZkD+rvK|yg%hSq0+Nz%d zsa)wU2L@7?s3+l303@yW$M9KO`>fjk%9^+T#o%Jl33YwAV|t4e>f{Y)A6wh6>tkBS z)+Yf}A%UcBwj`7Q2nNa`#nMXslpihS(T-O9!M00ax}IV;vOIS^&C4SPkvtv4igO8& zv)~s`uwCcEGSXJ(;8&QJ=?zO~l+{Mh?r1~!FBsTBgIMg)0FUmwEA~@a_=C`B{odLO z5Xd|l3aIBFX<}h@5}8?a9@3AqXvRU~TT=@FWm2{d!*t5b_AM#K@~0D4+1U2|_2dd& zC0It+;jUh>U`X#n3d!4N7!OL14m2J&hEI$MOl*LXSe(}!cFq;y72f;=> z%(%_V3%wemah?`@G!{^(Nbhp#z!ZRd-+xR%*nRDQD|Y1d{};&Q{~<>D2LtjSQj7l! zIn4hXcxrdl|E#xAQB!M@E2&lgCBXJ7W@k;i|CYm#6UX!76p~k|eMF#UqwsEDL47NL zxnO$;sNvYu?gILB3^zeEtgz6jZZLre02bhOmo(vUr~VmV%=#+Q@z zQfE(`&tZ-!heAI9b?une%lsUX`gyN|kAL6k`MiPGz@EgddEzEIz0cnGOC+yJT z++99p$nOpT`B>*#Z#!S}-aI4t)*V1h0!Nz>hSINxG9|sk1la2s^b39Z7XyUrVF&Mx zz_OjjdXG0KP3&d+^kipWy#9At{B#v1F$KjMK(*z%-2*_BGig%>RphEwOZj=tGB^0( zJ*n%5czJITN|xJZl3_9=|J-+r)FYMe>t&NWeBkje2V0aF(@zE(v~IcUO4z8(8?YIq z?4WkwM+|ZDMdaXX%#Q61a4;w5@0n<-T9)yhvwn#Tc%49BNNY7-g&g``s(YcgeZYdIqqS|N z(&Kg@K0FtF_@fwH5;4!DFAxU_E)KKebzeJh;$5sGfS^r9AQWQMo5y^i@P{U#>E zqph4+o9e`v|54yYl3F=!tXy9PhzW7&OL;b>7Me~bl1B{-*PU&F1A~X{6X$WEJ+w4_ zUQ+Vy&^@`$4wr_M4IDEWQZsRi*#3meK&OyaWx}_T&6X0)01`6B4nC%6>ACcMgol6P z;i9rA>fma&;GydVubEs$1ou;2Jr=Wq8t!oUw{sMuCa-SuK0{(*RbWdXDJE**GugE* z*_yRw%)CK6Hu2XG2}9=KH%Z_&ba=zR4RT;GHPxQ>;W?AFcWL|Z9=6P;e-_pOIVuL5zvwNm2nlt&k((#!~@p(pNkJ=xk2W%jcUHhBls1p4=q+|N{=S}KkO{F>>QcpJe z?;0L2F%g!Vmk~12CL}K17q;a4NI1n05}0&Um;R_LYBF`hStnSyT(ici1|_^)<=Czm z>p4fa^I1KTD1$DEG?bU86P&O4cWJKSjwBpO-@~TLu|uL|{-eNp=YZNZdMO-6;KgQ{ zFZB($3v3?ec6^WctcSqIY_b*uq>RkS+w$oNM^5@S~YbVgwjxis4KrK>OnC|;r zCxG6m;sc~a<^zpEfv^2l^5TC!r;fjVXb=EgZ_u-2sv>p%KRH#;UE1^K6!4=D-~O9k zeD@IBCne4h5CJ}7%LhW&JLNl6qkv{2d)U74mX3tU?0O48m87F9V>?Bi4-t5IcYT@T zy}{xW?gei5?wx_&DeggbDTC#DddkoF{z!<_dhsIjnO3>apWk|4Z}smsWob}hH`-Nf z>^m*4Yp(l?&)ZA^bj@fba~-rnmlLlKLST|?YKkw|HXtV7M0!u&alLn^eeEOLPPK8b zkULyY();veJKA!jlG+gG=WW->lR_IuL`L8CKdFrCrUm>O1hZ(?82viV5 z&m4QA&EXf}ZoFC8_XP6IK)FJA9CB>}o&c!=#dzS9& zT+PH(nmM_L!{c6PnceFF(wZHFFU(eDr1_=`-o*^uJ}AP{LESHYk6dhKIh28c+%mD0 z?Er9}zU?2L!ZScojc*Kd!UDYBk3Q%=tNJ#vE-?Ld@YhEVfkNRzFQfJvHZ`Q|-~7|7 zcJt=5TZC^f7ewX5%r{L3m=$2&fdvgCecJNU7-6f=ni;fo25NW|pm8}3B^V9}epwHQCEAaJ0GwD{UcSi&reNPn{Vbz2I9 zpd(YL$mQ)cp$^UBe+>Zl#}TQlJ1+K31)m(ibv%s9@Bj=cU+vE9yP;Uii3MWOIjNm0 z5Nm@1+)wlg&Z*I>HN&Q}0b)DbsQ2nJ;A=ET#^u37>GN*W2Jz~@^+V9*KJIh))`AlI8E@j;PvxknHxq) z?HS$_0%SnM!>18MED%ipZwSl8jN4gzpr5|cFeg2gO$U7y*9w2Y;`9iob7PSpQyhqh$AWbC;gi4>Fi=M)4t)N=wdA1hH zC>jO7njk>yqc_t?676MO#_zy~AuPsiaotq^h#3(+c3isHC#9bSPh7IuK7#Qzo8AL! z+vd&7xN}md4fJ;5e>^uJ2ty8#EKM<_N7|=sWA%r{eq=H*l2(pD9z9U-zClG%+-G|e znc4=~yiM&(Tif=2_6Dc0R84Q0zo9P?mc%lmVt8=d^j|sK=cIgVeXsazrs7UBH!;Y8 zzgK~MPZwJ^hGQ6~)5$DgBt9#=i-L0hYuJ<&+~ijKBWB);3}U2iUVBurOo#VDu*;;c zSu-AjO14G>UNL6{BTcu)Alp5O^x3A}DnCFQTBXw6M&*y)oeYN72FR&G+a80goc*l# zy>((+gfiwLxSc)H$Cr_i7GlGSLz?L?^K89s-4qgaK5z)&Vu2uVCSZ?tY$NcHm(~lm z;~bX47GTK9^T-dkklxcdigl161Pwh5HC41gH#W3xZ>adq;?}9v^cmO=VY6fBf4{-< zM|oR%#8`Ac+WxHsrVdZi7M>i4t6XUfv)|p-`b-|=#db#ejlYc`P}=;767P7m`1FSQF~&!S@88oct=uFKI`h&bz&E8LfmP5XpitA? zXLVIW!`@jl#kwh)^I~>8#jH37g@jm94}jak%oJH1R@mfp+wvcCx08%a0F8|xmo&J6 z&=Y^Ppn6;LUeVR$I%xf_jh~^k8u|{|Y)43lw!W`Rty8hk6dM5#<79C)xF2NnbNFR6 zQg5p~@g6$n;zlpVAg^wM+pNhW|G#BB`QRgbuUwo!-siTrx zK4)Wc0%Y|PKesM%KKt?V5slCY&KEIQ!YBF0{I(=(U+)(avg1*bec5Lln994+Q?xu$;O9LM z!vy{4bj>(rXycVlWV(}HWEtu~a@o+r0WiqBP8m;lxW}Mh)Iag2>H8jP&4kX0a1GC| z$?1sR&xiHOta*~-OHGY0yx)y4U7hhYwuil5Wg51kJr~jA@b5LAm3AVOjrC{z?sJobiM~@_B5>W)=}l?~y&LHXUsPUtBF*YBN|yWZ{}FY0WJQ8jGZJ zt`Vs*xRkczQnW5HAEzO)Of*2t`M;|F{LGn0aCkw6!Bv+U+cw5)XCQM$$iEkA?Jb^H z=GW(R<9>q+k*(>t8d=ud^)9nK6ov|C(gXJhihml3+0Jo;-yu%`h8=LE{J(q6M{4}W zxuXU+cmBs*C4cx?9?P6++Fh=%&npMr>m`K<-@|0qCs|`$$*P(yp9Y|-S=yG^Q`W33 z`(Jp9)k}}LO!WWYs)bqi@!o++wSDJxO^W;Joq3cEL}tC=Kg+~e9s!?fKrvMhWU=h% znSN;sx6JE*gEb77oprT%Mp|XF>vdi2oheO28YHv9Z`6tdS#uueqg|NxjL(D31as>V zKC?05d{0TtAEbu~!C2PbDy&>}eGbU|-PWKQGThdt{cyha?(Y1D9Al)mI-~CUmCNTz zwMS4ijBn&aN2uCbzg@Oo$B$cC82`aL4zrPJDs=6G{B)j$N-R$g<)kIHmID1u^wm=3 zD-twTtR%PkIkm$-P61?k?T}CH@7z&GNE=_i>{{|`sWf~;&s0|Dq_I9o#V{yKXv3^~ zOg76+MmZ&XRYZpHJKWx#e(^@*gVb2Mres_IfB6k6)Tz;g2mlMU?tHusFYee6SWP~2 zOPeWfJ{rC5`mI62v7|CVzhC<4f+L0~5gPv3@h=vWRljYlVw-wOC2VxPr+?m6=Ng)L z^{NX6^^ja_-v<2- ziQp0a$JX*)HS9Zlp~8vWn75dfl6coMu+u9OrS#iJice=fD8X@fUYbd$Th)b|U>`aJ zmCz%ztfva$Y>xz2B0KEw3_hx%0&yo7tIRwUAODt^sS=C$Yq z^>Sf*a_-de+hmpH%Md2U?IW^}u&XG`TP}M) z%`F&DLPZ=i=T+R4!`G+tqGFgD+I(9Y??<0G!(lD6{mHK9YXx(IXZUS40hY`qh9TRqoS%n=wI1*F+FjuX-ozH%uxq+?`40uBUAS&% z&}&$%yPfcTwX5$AT(&*1AU3BUb2txa*Kp0Z2-PF8xv1gi&Si}nQWTx6d29g^c~QBs z-(uEkrEeS^q;VAMx4qnim{9AP!yo| z^?9uojAVe9947=WYV-&BmP?D_sy;pxRpTSe55~U~80U4wtIFQ8u;RX}L^H*iNNlmY zJoO)&9I0C6!8ki#|IiIJI^FLnR61s)>~B_4@_j4FyNP_lxWg{=J_cU$oi76Ko|>$Q zb8~np?ZMJhH~{>zuA(1d7=?86aJ|rS%+dZYzZT?5eK|17k@~$*y~O!=lF5vRFxI`$ z*G*-ufbcZB`lr(mq-Ao(1s0)G0flB2jpuTLMYX?edA#znCP*zlWbxJ!Z5h))7lW&eHF5s5aUzZg&A(1Q$PA9(1xY9z-~sW1-`}UL z@WZd0ul{t6pNj>DD`S_N!bGwoMN+crL1tGPRA{GEk31`tgMU2S!xXLawY0XkQcaTc3qH z8u~7TwUYH)<}DF-8L; zUr7;Ud-9_&(O6&%m#Bh0F_(HNJ1l$!W#*xP-lWD$pDQ4Agb_MK+o>17%5@o`;U7AY z-Euci6u!-=vuc!AiAc z79{S_45a`R9ErgC;T{KV0NCLitZY{5UWIp;>A=}nUJAIl<5rWkblz{=&(!RP>xGD0 zuA&r!GAR1a^LBoiw{XRGG2*9|UGloTGhJsr_KEpaBBC?mkt$K=wyl}3iTe!u-3^-g z(yxX2Rf12}={xCt=5E-Mukh`85XN)XXjK{69sIpFyHWJsRf z7EQ{{Pkp)6mY1f?f_64)oB9sI34$`}A3oL2^Xzd)|jMdAJj$ ze_M5Qb-QUL@(9XJ<%4v|*vfH*70%v-H@og#YN{)>Z<_S^MlP*fJild>Eg@1bN5mJU zdC*HteOgqnv5c{0>^=4GV6u9-C*8;j&E|*H8o1J~Rc4p@b)-Ay*bXmzJPlRb{=PKb zwKT)kxg|ih@|$dCmVbss1uS%NnKt15&C(u}iv$qdSHvc13JL*`=XLqUC24K+`;Chm z=ncG!Pbxh;YqgK?YMbA?v}7@0x_O-|`YX02(EZRtO0u>vR3 zoPIQ+S260$l4sboy!_q#0%iooX0sCQQk%S-!qJn+o=syc-ll&^x+#@ieNg7txp@H& zrwao8)@gPoy;)h;?VBuOBzyPH1tX7bsvi?%HRBHl2RsyBgJLvXoj&F2Vl|w8u%i8)PZZlLw;PD^rgc9Dp@SgG9Ok?53UMBKhq(Gby6#H$oNfxWjFSlC@a zQy>{&SAC1?YJADLM@QggWtW$aOd0~es}sOyiWVLsQMeRXGQVNhW)PrfViupRGxwS3 z9k7hiejdZ_(-|Mbj=J9@Y;+JR7oA}gvaG!>QWX>N(=nN=RBr_DOHcGz?epsKixCt1 z%n(!KEo!tZCfG6C;{r9xMbo4D)FP+1T2dDlAB{KOE~MeaB@n#YfJ)_OP3j>#&bZZL zGEyZm-O1AaYrhl2tekqs?iuDL#j%=Wcbp>iw^pUSv8!o=#VYRr`Y#Seny~=J`MIn# z(~JSaxV9LjtE6qJIpQUK6uUY&Z=7E1abDCd0CtJc;KkU18o?{2ODkiaB$m@?NcR-84pRNL=$Y5CrwnDL%%|>WnS>kfo}_xNKP!a3y_D@?HF0VtD`a~NzRA)s zO^#SBTs_*tq2KrZ1J}C`PJZ}_GJ{_osgjnJUJAnW;eI*WV@QK+IbAW(vDl^Ca&nKY z`7!{KxIroQ#so+9O>)TNvdD^1q@J@dC;kv}wPae(@Zz?C_Z)UT;_f8t)}3T4=kk-# z(#jk)q?!19hQ}xhWq{ApJ#42UjBDus#DH~EY9~9^s_L-q(7s%yVHX(OKGI)Jh^uz3~%VL5~C3KUWA|6txhZysP zXD>d5tbc@>O87Geybn2q~E-1%urx(2Wo4?H%dEZb$|H0}Q4#1u+mu)k;sRGkIw&nqu~E z)%B&>zvwsjQ#y9c#Ps;o&jR?>qn}+70LuW>Xz_xTor0WYlzLaUV|3W2{pOP&jk~@% zq=T}8`{qi^WAsm0$?!3NehCcGyT;PLpkW}r8auUTcB{MjuTDoshc~v~((af4-z$-T zt8;Xc5;bTZGb@fwX=Zmn)uynF1$w+MHh?C_(7k;Wm^JGaQHW8lLT9c&X8al^vnXxcJPgR_=@UVI2#J z)S%xb0}-qN*MR@UABs=-^Ap-@f89Cky-Q8v6b0M7-V41x6K_}be)>RPtfq7IzL#2j zQ0M%ihij^>{)=}Njz&;A^1fCXd!*~kWF(H#*!ffE%UZBRsQ%!Wva(4!j``6I7~8x{_G za~$fEEX{o!qg9v9ijUYPyc`j_MKm4$v>@lNRycV#)Qw$B(@$k8a{0)M*!-aqtyar> z4^JN?9mXrRcl6|3F5OVpH8SYS`oTXdTZ6hHJZ#Q=sH2wVxOv1GVAlb0C5(*oJ@UA^ z7p8JsS-O*1`imYzjmJz^_+NbrH*9hiywmads|-FEKkL^mU;RrUJd}7(ibZ8wOqhY# zg&dK6i#DqGL1bO@i1jE4FgkiRXjyJrU?jI&bd8~v>-Xif~a%N ze;nL@_ZykCHG!2L$CR}`|I#$u%y@au``CM_z1Ii3 z$MLhg(ZpWywN;{}cOP_R#`@YM{1wq_xbcC5p)JdN(}Xx6sv!R{{CRvGsZ23924L6E zmbKiiU)4v~PxuE={0Cu4T~-}WJJpB(`ry zame<^u6_sm0=??!#R1hiJBe}f>GADFN}ejCcjzRDSMgBQulj=S`r2bd4G9*Hw5mXi zra2Tg$@EsR{6;N{a$UOL2CG?2n#x*Vfn+1_oM&0>(W*=dQ1oOynbI^&m}8b5ikUk7 zMp?Pt2VO zIR6wEuymAl00nR_Im;KXKtw)y40f$*;;*^6?a6!w`~vC{przgQ(*VB!$f&=HNhN;# z`0;36MW-i+ailB9WCAhDtT%Vwhy}a&xS5i|l1x4z>W%q;L57TGGy21%e3*Zdi)o#+ zc6T`?<6j?)pb(-+dHeR^ZC6eW6`hNsqjLN+rWCYlssm*134j(F5U~)#1-~eq9{}So z=89`DQoanb9fXOM`uZB1p6(;|cQ!4=$2P29wmRcnjaev((mx#+GNF&e7XJFN6oGrX zg~dNq;T2sc8W78}(K6&X!@t%2&^9slRRhYv`#JO!sj=(AXPqBNXEVJ@o;1hRGgit5 z?5!|ZM2nxXo_Cjr>H9o=KN50+tELfs*~$tZ(Gr2Ac=Fen2-9Q-3yCfh32aQnrd3O` zun8tYBe+h(@hq_>R+g!bO-9PYNRbxbh(V9#W#Vv4gt_|D*%n{W!kRXL_t{aXMk9wY zLj)MT-xC7HXY^@n1)sGgXyLWkji9G+d?=`Df+aqFlcmJ)$Sf+A z99uAWqG7Rqb$E+{=E$G3yw^0L>+RV~JZXi6mW>5#K#P?7!3^N)5}sY)`W!U@>jg2B zCaL=74JyJyOEEAkKEcs>Y{}6b@|EWA^V$7F#CF+e^|G==ddzwR2}@vYRT;`1M4D87 zLXVrHXJ~PCwQhzN!JhfVkvz-ob{JaJulnh} zF8d|yy%^;Zp#{{ zg@q@_fk>tD2k(A*6zne)AOR_!t6=`@<+X%Rc@`C)cD`_y_2=?%kX1)`z&W3qwSzoF z(vxoj{^sUe12yrjDl4r^ofATBtb48_d&@K2U8Jum?zGYzcB#<{^P<`?jn8LF_nDcU z*o$hPb$Jii!?)iAc5=RPZ8LeVsqb7f@Sh_UZjbsXj0xW-FL~gKMoaEKkaw7Icd{|w zUNeE%q11yX85VL=Vuzu_&*{Rd*UiuR>?|qq1pEqU&c%>0;{?oB%|xSQG%lXwPj(Z$Tq%7$(Zh#~84^~PN74?v4iz&$enIz8MsTU9>8?sc$xp4=<*_3fCX7g06J ze0f{5uTlsL+i_bBHQQO7&dib^J~#UfB-7#n1Tkni^d^6s0 zX|b;yD4+_yBgp!+K8THyk{?L3p~J7YmM;5+E~Y-GQANm?2&%!xdVWz#WnXAj-(BRWx9mE z-1Hhq40mkzfKN_vPF_=z_5e=+fd18RkuCEOZMHwNL(Y=#Eq?92*Z805E-Be!{*R=6 zO^VnSUV1ArvwRS7w{AVO0r6KxOOVRBkJ@c0ab@#>s>CSq>)kJZOC2Z0f}@n5*CuRH zyh->)vXrpc^Q8ri%4KO+SWpBlM-+T%aiznVb+4KMeOd{b_VxnU#w4=S*9;t+hK30kogm(G|ZcpA1tO!ml z-xNkJi$vfxvEPA~|7xL&!>#AHCl~5p>6x=;-80J|lyj zwHtL3iGEq6@v(RKrv$QkNPK_%4_{Zky~sda-z<+9ugNCk=&5}`Pd+fn*5D2WS>F!6fv1IC}H|K_l=Ue{9SJp0osnL39 zJ$as3S|7Y-#ta%%S6G&s7c-SHKFE$0e!w!K>EhsCX+f%E?L*qZETalR5NPi~K>3LM z6;i}Vd5JpkPzZznub|ujQhN{!!=1^TQUyk}O9}i@-py`$E4+3=Rw2eFl+(ws#$VR909-U&iMwMfMf+uB{Cpgf_t0)<6i_EN~FAp#9s| zxS)rqzXoi@>~uNc?7R#!WGSA%@uVq)_C`UYzsmH1lh>%f!Mw_-*e7Ufg}KFG!(BEymruWfsP` zgVP#$1dy1p0*%;n%5lcI}?xmWP3rW?+X+dP7kBFWr;EGooLi809}Eg`0en1iH^49 zhQ_p6_`o9;M$4NYn(cpmh~R$=jN1;MQ`Z+KG;b#ICEF^*-v*|@tF3;*X}4MG*Tx%< z;im`;El;;x{TjkOH973i)%>oa4_JyN`p-lr;?A0<$ylbWWoq;R{coTH+3Q4jDNeO73(o31|V zy_JXZ`Q+EJo1J-@QhvVl--g;=Y3t}Tx22ddKsuv9uHw-X-k4tE_^Tr`sHC{+g%flU z;`X=uXVF`cV!ird>;(2+;e*IqRV`8 zaNIrdEu1F*n*_B653}x1&+BVusbcD?7D0uHiHUAPP6poC|LOB+Y(w#!_*P-05Bi#8 zCJSv_{WRLZd*fTA{~^a$ERBiJ6K4!ISLRaM?xUAESDkl86G)i~r~94mV0Pp(uU6g! zewIZZjwzS%rpAnChs2f`rjpURQxcN#QR-7Et7*y5d|d-$W?7MyN71 zr0thDPaxM ztfkf{%%QVQ@am|!xN!VYnrY=*DARzHaU0+8lK`PJz2il~x(PQz!ygIK^sylaDZkX+66AjI{l~Vbh5=Gd*BfTSVJ|n~cj2AF$7|D7@bvA+Hnex) zFCEN&ou$F`InBLtMyO!g-UQZ7Y<*K z0~T^3V+jBmeX+!|Q*L33GV3!Z9@Q8b(oU)>Z7FiD$73sia%der+!((}-E=nkWK)}O zq%;+x@diKlak?|aS)^D5wQB5A^g7G@B?}Sy%j(a)Zm6q5-hzZ(#mY*rb+>ChcoFGN zKR~X=5r)%QE)#-WSxF2yIZ6*j3g*By!x8*yIsgYMv z_X&!wM^(IjP zwA@@t@N}ALOwG0>_N-Cv*!$WhN{0?DE?S+ti1FnLX==aKEhCHaGG{Bg4qNnS+MA>v z9o4c*MuPHq%k|Tig;W~j3oXY^7~QklZwd#n5FpC$K~?yUzUV8{aa7THcxy@1W|#fy zvXs&fZtyCd{gkKJZd#r?@WgMT24dQ&OT>p+ZG>W5k<~B-XNDTX=UK>6fPD>zN z82_zTbGlOW3HMwTA^d?yL1e@c$z5hthX|IAQBH~_*8A5#1kV8USf3kt`p8W94IMXk z{(E*xN^al|3W4ZAC>~1>|4#-7Qp(Yy0W*WVIiHk5A;pOs!n5q9HMeNdf@go1fkq`GO%iI?&lhh8;Hay6(V)Mi{ zMlCh6JC!NJ!R`sNAJ^^gKx*`~^idz{)JjX8FwqF|qwwElE$L~a78X=DNCQBCfmn3! zf4^xzwY}dPuEz6(Gqa64g`3|+3cb-L#?^ny$GbxC^Z_cWNXh+__y6rp(D&;ms#Tkl z2B0hhxvY&Sq39a~k}qzw(8>vTx-s%Y*g&EF$PntRZE_XA``%D4dKJw=-jo}$0E?du zEkU{3SdZfQvqNDyWS9qX+UQQxHhM6QQV0Cf3~s9mnv^!jm3p-Fjl264I{hi{9|awS z5V*mb-#*4)eV{<(T+!a3|L%0Ey>7jl>=4TbQv8Qo6zMS+9JE^Ywo&Zj{T~#nt_7k7 zL*mv~@ z=e%}6TiNk&Bl#}fB~Hrf?8YkY4k>s|bzz)JgNGGKP+)8piV?5P_&podSn7J_lMLlo z6M%8oH=K?6;%{Q(6gyqGplbhf5~WeicZ_i>Qb_pGe)8~6F5tHYyLUYx#5RJcz{viO zZ>4QiGHhF$4r3l)qpD}8r8OESQx^Dp13kX@>-~-oV>rTwbmk%;Pms)fkIn(jo6y`q~)a-By$;8?2hX*B~6akODC=8bTMPfi~A z1kd@{M4T>PC>Y$lFl`EjnHPJ!b*n>22NPt@L^?EVJ&|`zTF|6sAnSw@KM>Oz zk2x7|LZn!#-{{D1kIgT#tTV#qnS^U{=P>P{?%I*ccurOhRV8f zRB&jOinxmC#qzmD+$R*e)X6iiVxeD=*VG4de<*y)v{-bOJr7pZ$NxwhaK^~9`vYo| znUV7XMBsms+oiJ*>z{>I;@sJ*M>eCr<^@w&<~V(OXJ|%$pzaQa5r?5%3C*2?`Y$ng z%3iu0>^>#%=KwOFuC`HHA9B6H6tF0!&IJ1`vT{WqtlAJ&rB8=wadK)-^$TatpH{T= z27Volr^r1NRy5r@c!2V*8vwCC2re7z&o~u4$`(>L7Jx3;f`>e`APl!5Kz#p&-3ul6 zF4faBu+J{q@2IN3EoHscFTbCT#~HS5h0m(mx9CVWpZ6fGmO}mG*cCGl zhAkHiq0`gvD8J4o94rijSfT`{S8xx8`(~yjlxz?i8|yVoY0D<7JPQ+3Q`TA|Z@v>J z5#hxfvygGw{y%Djp3n@;|4}&g*N!tVuErjeJ&_eRDQV|SQAf;B<+V zNp!Z$4sgHEf!WL2+~d;UdCOhxtzkZCojwnpqRKoo3KJlDB%R7Jt@59!mA>SO$7>Fy zvJREbg9QO5ubyF#{%AO>FQUE5>-MnFMCZOvs`i7N z{^xY+N`Iiy{Y@?clpd){6!~!qO{o4Cl=Wp(Cmmo#=KNZO>7O29#c9LyboC63W2UD+ zYnJQI=2a_>3iq*ad;~ex#?d@_2yaxDBjsu1SArYUUnV+c{FZYMvkvI~uxRc!H9mHpMa!6|qNC4`p_6B`leI?nn6c4}7#LYIj&M1GX zRN&X}#Es!s4njI#K7>SDQol-ctiAK~BrU#D8ei1k?%g4Aup_2ms!ocE_De>C;X&>i z+n}9b9D~A6&F>f zYy51Ika~J)!`xf z*8Huc_3^UT&qY#jbW65I*1t4!4U09?V>3V9d&tmdJCm`Xn&Ey1drM z?P_IVbBXH?%F@L9NOh7$U45rS5`mPiSbPRvu|<&qaK2(cIVJBLdf7X3QnLqxM>($R z`IK)f{z^M|*3scZoX3$CXQ|L-h z%4X1=R&On}_t_L_e93gQg4o-}kc(ee=;EOao?b(*$uv&7)@BQ}+-*A<=CSFbxE>MO z`pD6e@yI$XEB9B-VP@h!4WXdSw^{r_@hzq{;51d38!h93 zHW857#Ouy6?(Q?c=}lszBM9>RC`E>rlj|&|Tk0eQ52u2vjn_9eZgUt+z{lVJiUvw% zN8e`A!yoeV_uD+2lp6AcQ%jqh<&i>+YrONXd5EpN{p(G4*7lWP zfDs4pjYW8G4E9edusr0l?ID<3#7zY-C$9T6zYzn8YVOnceSA5Q2dhbHa;$9eCy1P_E5=t8`;}Br z=ncYV9%*O!=?|I>>Z1)DT{E~ku*CHR2cHM*p2RBk*$`jUI4xs8e-KqzS>Ge-OK6$f zw2WUKZPLhXX!^_`@`6y+uh&vSi!*fw4K4*MKB(Si@0?#QLYt%ejxtvqEu|~5ezxNL z{H$tZD%ElBF=IQ#vkbffr~}A8i+uE;=72l2jLtb1Rj+l)tevC;M;}#R)5m2&+nniB zS`8=3adO(VPTccv0@SBBZ{|p=+Mu5tq5vu(Zqzu%rRz2qt|7wgq9`t*SMPwig+S`# z`BZ~j*eL6ha#j!3CxGFAK*C}mix#_|ObGm!|GgAr`p`vj_k7|w&uLil&iUdEd09|u za;lYT_5ospw7Reqqq0NRqW$9LJ+M*unAM${dsg#sv_{1mx4-&pp9{DS6XU5(sJ7J>f@Rekj5 literal 46988 zcmcF~Wl)=K(>6|l0xgB&Qmh4v7bp(Ji@SUA;w~XbDHJWGxI=MwC%6=M3GVK}0?7y5 z_w&v3Emfq6i2TQCN4zs1L6(9Hh0K5fE@XAO8@0?eo7N zAk@8)5f@eSFgRGm@FAGG;W?oU=-c~*f)pa}$H;>542X~M?wbSycaDy3m{I7jGiyY; z=~^VrzUg^Pg8VqNZfOx4eG^Oxe-!+HX9RDQCtugU#G;j6m_?RZI#1zsK3+&}GNfY%qfzwKz zqk$@iV3`7LT;c7dD>~4=9bRhIX&dL(b@OHKo*__BoqYQyG7;EY2)rj(T(HA?5@)Aa zvpeP1Qje?JWaah!`O(h8=<`_?s~_ipiMsxi^-f+B)rX4i`L13q-x-UY~M=eOGN>IL@^4rSqUR8 z@+bQiYQ$GtB7XQ9Ee((5mU3G?WN>D4-qX8N#g;Urh}eqg#EMk_K;ESJI7K#j zZ&8AW5*oj}Q~`b@5(C~oGvH*%lvqEjWiDQS^*vi^vU}{(dV#%*mT2*)0f#)Z6uT@e zu&{G2_`C5AvvAL`0S|_&5^Xx&lNB*b+DpXHVv}LzGRmvEd`I1p5@n$QSHLbx?G@03$3T6PhUo>#syVW0?v&`Mw zy>7u@jKGmc9=J_>%OQ5=`t#9;T0X()Mze#*bB6Zr0yk(qE~?p@Uqy?2RY*kWC|J9u z&7xLLfm-0mOX2q4Z;z(IZzExEvB1gn1*o%AEar3r)0_7P(fO$5f>#M<#-QWoK!?0O1)6Tcot4jwDib^rY}HSDFTMq;$sY1cr(j;qgGp@tJ{y-fpQ zhk?!!>V}cc`aeMgC$adpy~639C}BJUN+E|aGG5_5uW)HIb-kVKri6eMz8Dlh4y>)e zZGNY!r$uk}68af8X5r{NQ_S-=hJ5fH<-1EeXW!4V4r(QwfLpRV)yU+zx(;&P$r=~I ztmOIaZru}rGWEw1xDSW`4{BIClD)Ldi+<9%95tPeG1toKM7VmYJuTE&Rw1EbL^;i+ z*$yG%bbfDlm^;moTsEzo0L7Oa`Riz?d3o9!{pmof1_7j794X~z%fc`pKnUa^E<5B| zzxRzB-1f@9)#Fj$-CH2=y?C8=GeixrJG`H5sd+IbIC;ZQvBD|+ct~7u3RO;_9X0%? zTxv$ZfoCyUNJ+_!D|q>SK<6Ja7#m&!7hPJ<>$3Nd9ctEFH+Hy44g9}vIb6W=4kU*Yn7@GPXDEv!$0Tu>JAz9x` zCNDmr5^(mKipZJzK>8(%2bMwoQCjT zi*GX)Ay^mbY~Nlf-ylJlM@xY2WOK&0(6QXH9oMVudfBKZ3Q!`K2D+CN)}Lo^$pc&0 zB9dvE7A|$DKsmcxq3ytZ{tG%n{YXU9gH4xSF;&VQaz?G70?cv<*2*uNn3K`p6wQNN9yf`o9@?n(mSA%C1wSbLz=EjFY{ug5!B07zcA|i!SQd2Y{wc*>zS6KVX1;fU;D;a zSJyT(9n7;_+e|vBqfu*-2J!26*-gbGv$da6tP6#*kM;{uL%CUdIroTwPM-jmQ;vWR zZIWy&ciKH$jT!y+mmloB1&=(nS}7;bkbL3}MqCG|dCg@{F5l8wP945Yc$Y3)_j<>N z;AEOo%J?0!*Hc`pE1W7YyvO~zjQiopClCWqawX129iiNt-+*Nb!#{#NLYI$Qvj6P> zyWJp7!p#QRppOT>N~-esLl8L?f9hy^DDQc}dP9jYF6QZA{Bs;;w0 z6EU~zf6$RuSaxqZndclh9if{z9XO3~WdU3uBaaQ2w)s^1d;WXJhwf`$o@^ETSnE9s+~B-ReF~0i>uZ8q*ccz0 z)1ZM0B4d(UJLD?gQEbx5goHni6Fn*_HE@BNR}sKYuZ5shiKTtnXbAq1&B$0D`3$?qn+-ALKV8!+q_*TKbhg>VlmkQ05^-uw;VZ}QJ= zeoJp&yyCGq5%60BAWHUeBV|<4dF#<;L&A-Hja~I8mlUqsQc;z05%N0JJ(7uDLw)`R zLv5NGO985h{6lYOH2Udw{FIvjJF)J@ZRBnwcu;L^N6Ox0E7_mY8f7tFdYBV48af%c zSH(^Y@^Q}deKCH$#;bj7$0;W5V}{>MN}2z<>nIL^-pFrLD@5s}2D|*i=sTOG#47xzM`wA-)=k;L432jo_y@*qi>U45dSd&|-o~Fe zlU#HRcwkij!qA8ArGn{)IFqr85|`7mdInVTwCm@=a;$cVvUNbd&^d{b2p{Q4_&{w?**Y2Im_nf;1L({?KTyZ%Wh-KAJ!4iOcihnVYE$cMPH&^tALhi8qf zFVnUc!3QwB6cylSO!rk=Ce$*5#9%xXe4z}g2a_I6*Qj1cs~;?eHI%aK#_oAqa`hDc z8q?a|ARV?{0ug$-Zu4kl0;#r~0sRnElCK+iWTMoklIvSG;z8#FVlteR&~(^^YZ>F4JSBVEaUAbgh4CpeeH% z)nf?9p~IzclDIyhao~-3QAU-*d@YJ@PJ+bXR6XDhQeS9=;byOI65&k3fyGHd6l!-U zTkbre>#mW~*e0Gi*gBa|~2K{WiQNzl8wMe0Q( z6RnPg_`fL@j)fcLyG6W9;H{Dq{bf^5^z%5|52i&%@E*(oz}c=@A6NDh!tMhxqC;ju z2w*xMzAcRfJY=8yG2OI&jUGgLE1^H4#=wUeG;TUG0T_s6~6TFQt4I`pgSmr|vd#All?^_v@Q!?R&- zQ2vqyQ$u;(j1nl3__~`a<|jHI5T4H0>!E>8YQPpetf zy5|R3ERlyE-igGUY$B-ZjV|r<1uEqTtiW-ih#V4$S>JC*Dw`rmXTf>vBeIo~cf;u9 zO%CEXpTh~#| zz)-@nN5Z`xE!~4WnQY@I|8HKePbpY(y-=|^zUgT3&;sTx^N23gdesHxmrgz%gt7MMVfh*P|7)%6^6#MGYC5_tj*BzybF}|pm+ms#uGFUI)C@8Q7sIp&0 z36C}O8h+J!eIfcy{YwLCH8 z%kS@OMOC`5?y)d_!LL8$?wDSFu#3KGCA96eIb*Dvf%``o=9gDESKGwwE;%j_)XR&!hl=ehax{_`XJG z@TDtc6nXvh=lo?5t8j!LrM57mZ=6AQV^nKppPf(i2N%0#RQR5>xcFG+1tr4?}wLy%18|& z4Xkew1=U1Y%gB2{E|wP1wfkFSRC zBLAzZ^3KqgE#z~N3;K-L2W63SH6;#(mRRE!3OtaEx|NYA){aKFPtf^L?S*w2j_MKK z-6c<%#+&VP_2%5j`?2u{oDwq?3h;=dxe~5?6*PO(2uBwRQe^HBp8600cJE~tL(4i` zihy15Q@I`(ECqC|TZ7SXx|tXKB9iGsu4Yds$^O_gi_56)&+kq(zJPz2AcIX?Uz9qG zx!ienEBNT+MHJb6?!X29$=zQdGQ5B5knPd>=~xzJyJ4EQG_`gynrgS=F0)m0eHZDZr6luUgN&|Mq|f}WoSK)&-)uQQzsb4zDTkjW7heTM27#xMXBNUdTVs7Kh*m{)6-$-xU@74{6c;|3q3mi19x>wop`AS-D~NZ5GLB zt~}|4)YC0$EeWdsYck}2e(wK9T+GhDu}qHFC&r7cK(mB@$P77CB}M!I^0vCKb1LW; zK-hV@i|qK~t)tP5j5>bseK z?uozU6N)x~H8eUWb=lOuFyhF4V4UHsRR;*$be`hPkF^;r-dC2=%o_o`F)y%9fm9IF zJ}gs6_dxXIYZUuJnGY7B4a9}tScQAjF_VqxBWbo}W8A*0d!~2LBd+IZ`Q~0h*Tw4j zby5TGvOPvYZa%0zF-ioo~)l*2;&Sa1J8hrJ;D5@V(9HE`Odi#KrEKSVo!$026dKtRg#HQ$9zB>_mb1u0kN-_S`yr3hgbpBIkhXQ%zO+Afp5SWDy; zQ%jz{9@&t0YP0PnycB_E&(qtD zJ!6Am?A+U9XUkgqFRIOPjwogO41?U#ktcfm^6b#fLI>nrEPziv{XR2O_n8nXt+o3~`Zs{7uX|-v#{uiA${ zPn1Kq5AMfBEQN-<4Gw)M{k zCWZD)!MENXwhH*>d%-WP_1dUraeEtThBp!2$Ie4WHhZPm=}H?24h$y9I6)Vx*wmA} z&paaoyzL_}{~p@Du=ZrB0;c)Fe!Hez@J%|te_uP#^2~uOkP>~L^FrrpVDM~`+g-DN z#zo`2uI=y^(eLxss}Nnpmh~i+{i95wDg)P}sY`f2thoPd@+S0;f-gkR{ULIwEk7`) zn1LvlZo|!YHOTjzGEVmgBArJ#&+ROG81bF~3j%N~+8l>+__QuCL)Nnvc*A(yY_eeX z0fyj)A9&5H_&>}J7=Z0~sU zBLOXrmsy;tP4z4M?#bS-PB`eqi)E z=lIt0sP%m?2*ZI)j11jM41xKCP-^!(=_|nrH1jzA@x*n?2*0*#B)UNaGxT0xeQ^aN+ zL>hfW>Ww7tTpGDb$~3}^jycxn5RI4agVTEiT9mMg;7;tPyT1R>-z{$&IwNPZA8Xq# za0lRx`kNntC9SWiFW(&lyD9wlZx z#y}8e_(Jla3s!53X!od z>_d5!W%_V^-*Cjr{e7ti^h zjY$+PN*oLRDfH8<*kg@a;dS@BVUA-JM0(yjseIQkSu}Omk%HW4S;Nv=5*hY3B;IfE z;yc4Qpb)2G47=qL-m>Y2?6(@Sp_i1kag=q%Ej&f_DK+rtcE0rm*QzB?TMLfxOcY(0 z#08F+lHooL+8f)N=C?C>C0b3Id=@SZm3%M##`6E<|DU{>o=c(xJ zV#5DEa9eM~B}Q_kgYdH9x7ViOE${_C`3!y?f05`@)Kn&rL3V3I6d&Q+(DRyJJ^qNs zk8^h9S>(^}t(X2OW}>6bMYnj3)33~=43j0R4Y%DjtMxEd89@=wN9uJ>4c_*V2Q=f{ltykT>? zisczE>D7-tA%jQjZgl+@k~#IxBI#MX`Uilh{(k}>g(^yL=oHlTADkmDUQ;$MdT+mc zO?JNYcVh9F<0?t*9~eem$c!Bt8v0irIO}^oC^cKT58Rn7&8Ap#Ucp)z-Q@Tp=ukpI zPaVZ=JD(u*4>;K)a8$Ur1y&&4*3UAHLidguV_;Y6Nhr{#Ej>g>{tleIuvY$@z{`>* zcra<{UZjm0m0|Aqz~2FNcr0T{GR~#FsnLIc7gGnLFDv4Go2TySX5I2CywOce?!wIc zITa^QxtFriweTHug4_}?7SxwEi)G6yupIt|&%NUMACx%t`zJ3Xh&}_pwZndKKoT`D z?fE!RFlTmbNs`)a<%`87a<1kpp;bTpoB$Z&#=d6 z9DnGEb!Y9kwN0+@x>RzpwET}9e`0T9c-k(?q$1n9{$irE*4n~Qq?G&1!MlCLA|JG= zz#amz77@U#Nae{~@golJ@~&bZygxA_G6!k)Z@!o!hKnQhB41-trE#!hUn|W<&d|xaojCGu(-ZiHmC~lah?cUonJ&}KO8iomCU^n z5Sb0fa2x)=)e@eY!u{z)&d1Eg^_(0=Ki1B^`tKTq_V=+Lyqo1neH8%j9EsSRVzLdI zv%gRt9AkcX8|l(=4E<$alerB4d7#7gtNcDtCdYGL2l2K6{6 z2foj%Ci2t-YiIvFy6sDK{RB}#he|c4wEBDmxdS;1Xi|)o6_Z2q1eOLh8 zz1O4pdYSX8v9S}pz4lhDcP-JCrAA_nHdJ_^hZ8sd5Wqe1wWt&Jb+F#~g`}cxcpW$R z{M~YWx$CBh9PGvjey-jFQ}_5%UMx#qm)g2N|Il=@3%BFJ4pyI7RsB+USdj4riyPLt zcX*QBs)75s4`r@r{CTk10u?g;l15dHm)?fI%%kE#tDBQjZ>*N|Xw~~1HQTSYF!q4B z7zc|ITd9bEWZFSj1=48;KeLxpQVkRAUBiNIZi?R9yudgiikKO#H&*LMrfhIXjaK?Y z)eUMzxYDm6ARegQaWrnYKu^fo(ua>9j}FkTmZExjjt@0*{ZdrNfw658RLg1mX=?W0 z*_`gB_foYchV%az8P7G|web2hP$4i#dS&xvkL)yV#}y>F+|=gqZn#BCLUq6VDqu3I^Js1(Vzmg)%bqZ9TueN zVkjWFw0Dk%_?SYn7@sla$A^0sX#o;pOuVP9wE11JmBpdM-MGx?1&Y(n8pVN8*dw8`iJ) z9eXuoJ=3m5#Y^q(#+Fh=b=(KbAWG1kSt!g#w|b|nvFaxI`(vrU7gZi`i^EL1k~=_} z=?zBPnZ6XLwo#6Z!i_b_+dBY_F|SYnCpNJm0^({|NG;=bTE&SXH(!}JhM2bTfH$0a zyU_XC?-kP5V-WLFL0$1u7b0M6e6K`s z^>!`2(NoF~}zBk}%nTwdAE)?`?y(QBXhhq`#>VJ){Lc9_>1* zp}ItH{dGEzg?NS~u29W#%kny-sx?(e7`n-Is)qeiXoR`9x?Fk_CSR`oCFk9T3OBLa z%R}(Gy;T^*5IkD}S9IqFPP}+LQ}-`59tK)mB=r|FFP-aYrioh6?gk4Ze?H{HJ?iV= z=q46juhHva%8Z#rFS}2V5XFM|p-kEK>ya0H%(m@rCX2!IbsekqGy z#UbLHooslD=!KFG)XFd-bCX*jxk~HV8K``Ohe)Uv74EgDjN7cy5|A=PK>6W7_tbsD zMBwLWQ&WGzv0ss0`ThWFPngYJ^Ut$c$uC0omvp79Ym88@u%5+H+wxt*nD5=-P7l$v z>~;Z$01#vm_(lqCO>%X*$d%(Mywp65_NXlbTF`ZQ>`%d)hdln4y_80iC1-^^bnbi< zDW~om07s%=5N|jD438wfl5b;LPB@LWoE}$w?;C+>WR@u5>A^IkSWZ4F(|iX0GT3*E z-)-%U1FXXJge!qRI%jh=-oFcXY^FZ`3x2z%(c}u1Vep^@(CA4F18!=pDuiBN-QV_R z?suS1;?*rdnQHJ?KlQY@dzS2<5PJ6cc(E)oj=!pJARQcl6Q+3%%?E$uM^iWEe{{JJ zq(?HR%RK6bwNf&-t(>9j-_B-={ysJ_e_A=+up1eAswEI+RCx7r!%@kpyed09_v@YT zE9od7n3&u_ski^3^Vs=PPUDP?=e+TT97(v;5}(y~W`ewP_3**dKsGVLGRh!yiiOZ_ zMQ@UGXPaq)D`vS~62UbhZ$ch^4H?ImXl}hL7I-1u{F+wqpI1y{X?55LWL@ z@yc?RfM#B=C$k!BoQZTLAyhenJr-_PsEa+UKk{)^j#E$I{ZKXNFm>;t`MjN`J8&>h zU-^2~i!RUf=0I6Goc#ty*qb#|u675hiDyK)$a0KNF93LwpHq^B8fZ#3EXOW$+`-42DsqgYRBG_>txygvSL%T@|jVL z?)!(fwSM+cvsh~lZA{L%w>$UlH~ks{^$y|Qk<&3=Q{LQ}D;A(Xg>37d6ff#5YxMx~ zV{;vKjQOZ`+%*^KC%20*dN_b;siCl-99CW1=Us1cyJN9kS^w)Z?9Z*d;cKah365}= z9UWA5Q?^s7ujfy+vGwZ*>Nks#ahN2E^p$AAiAuP3*$exVC`TWI|C{vQ(B8uMX0PalLl^3nfRBoMXHwX1YW zVUyd!EpK_<1feWv+_2?;xNmt3l1br;eX$8mt|<40;ft54-v7?RDL;NRGTTDFx#5fRI+6yp0G9JrpP@h~%n^7o} zzrpgRah0ebKGSHXCTJntO3u`&HH9VW@}zQoACeZ+N!p{>LA+bO*8u8#LjtH-m5yag-lSM+nR6AzT?N*>_=SdCq@>1Jw*K{?RhlROim~ z0Q}_tRS{y)U_l+cr_MUiURHrxs1Q5p!`E-H!`9#-38=%}1%qN~a~j{c-mOr=?;7G{ z9q_(p5qA1Vp=5tC$@p5T#(ge-H^Je)J42IPcXjA$rM5I-&9g7$5& z0JN5+Q7>4_^c{GNIe6_r1FJXXOluZWp2=H2+w|p(t-Bo3S^1I1LsP15wujei9DsQs z_2s?jv?!AVVWRu?#z-*dLVVWc<;P>{D=2vmg397RCGYk*Gw});;a5P*Tl02phM`-?BP_qlVF((nz6hO%)KJdvnfe!O0_>*sxBO&^ z`PI<54b&&6Z6WxO&&tf)4WkKWF9$q_ogZp`bUH&3f*;wWFfw&VtI~NjS23|N1%4Th zF9cza*!XckG{x6+a1c-eh#6#o0~sPg&M(MrHil`rCcN*+{o=a-}x_{_3U!1P)5) zjfE!RALpq(R>@Z8bxXMsT7mMuWBRUo|^Kyh$UXvlsWfBFz{#(!VtwLi(D+ z1i%VvhYJx~yiS|yPEi#cKFCXTVavLz|H@4DD6_X*SeTNE7l|PSf9P?6FY)EQ_t*`g zRs+NgZ!*3K`DT3l@75$T6pQ;!ZZ<|q&Xh+JQ4?of6BwnKte&FNC$vLzlm$&_wT^HE z8Rcc5R+$d6a>!vb1}Z(ClLjggw{uJ^k@U9KNGD=e(&Uj-HPoG6L&IY#wFLc0(Hp7r z^dV!XJYl$yz2pqh`vTQGhuaIQ3oCE!(WA*-Rj>KVN)`P(*hRqvW3^^`3+4`;pb2_a zIjt!Qnlwut$^~oJ$IwpiZ8xb!Zq2;?mDXPo`<{X#B8YkhkmG+#xne(Gt#(V*6oV4y z&*f66p^6LvYpj@Zl*(K&UT3(~Vq2!U*DZS#hHn(JaCWZdb*-Y-?@5p93;=|S$UJ`7 zn~(nba>`va@b=d)Jc5k$j>tf0pj+N&gGB-_ZdMU&(Pf2Z&{tjnTS$~6x`9_W+bccDJS6<^B*5Z|WwH*ct^KF|{4YOepzL+9tBl>Db#DDF!5|Gi`R zzv(PK=EjFk-v2zk{a^X-zxu0;mP#OKle|_PT)Q5}o{Qn%_^+n<;lWOfJof~5`=Ila zV`Te17`uL)>0+a6qcGm#e2tiiNft3R-&M8MM9;;O>RzgsJ)DZ9k=Ha(Vb%;AFe&>+ z<&TdpJ3onEC0<{9Ob|A#5fl(EH zL$;^MkcWNXtBq#(>W*RF+4fq#U*x5LULE&Bk3oh7EPu%N%Y8Nw;vaC4kNMymQc+~>r}he_SFKTy6FBS&6w;I}6}9IX*uPv(MswSZxQJ#X-h=mr z`~yu#F4D;#$WHoW?v%A4T)mPpeB{*v_ytC^a0RU8g`1b3ef>KO3FpKmVZ^_P_w#-K zGk2znm?^KTej?cHs`qnD+IReODyq@ie{}y+U4AqJ_BY>GI-EGn&;a!85M0;$FeCcX zk+5Z(_zY-kNZ_1 zpu)wMOZD{}E%(Mdn#Ltb3H_JV%81%Dzi%XMBAY!_aYmW@&uWa%NG7*|5Z2<`HJLl; zfTpsJj?OMixygpP{TWVkjJfHAcU8svwG|$mS1zY+7#XUI64y{UZL820@S>jLQ8RA8 zemvj(S;oV_$wI@?64GYlRXeTwOYe!HD(9nnd(waOsjQBIy?6B*7{KhUv1Z6mn313V zjF_1CrTcO7d8Bp{C4ZbTH+{o?CV25L1AuYaC@s6*dlGW*pIFs_o8_7cbJfy7xBx8~ zN>c`X^S1`~@R9ZosNDa;8BANxFFPg-TYJiDFO?w=;f6Z8t_T>IPx38S4J}K1pe|<$cFe@v|X~MAG-`+j* zFeugGTAZE5dVc;7o-*xxHO9%ef4w?1U~96jDIaUt#(@I)KO-4@?=1iGlac>j+;fR! zU}l;jA4^nHQ3*J1h2j_jAhAb(496c=$#)899ghqtEM;jPx7*AMuJGxtn_c1i&e|%N zGr?!zB6Qo$-5Fv>Xsk68#}|>Gi~ss{$EMTjWPz&XR3SkUmrd?O6ghuxAoP4hn6jdx zA|x_$diODi;XlT0t^+wV2&!RvM}09eUp}s6z-^Gs;S1;f8~UL9+l}q*^^?`k`n6Cd zhuxg`BsKeB9P*Bb*$c|*uXA{gj*j%Pj}m@*Xlki-4y!4pYkDBnwUp1Ka#DtFERs#f35_@0%;>wP$~+F2W*KSarR}_@b=^Aly#X4d zUwq1q_0(EUD;y}*Z@O4^K=v|Lv>B0o6uJGOjm(E7`0$ezA;yPlwd3sr123-by4Hnp zu+&02qvsqUgONT+bN-j(QLc9%A2w(~+;3%gy`*X0r|Er=;*9-Q6`Z^p`eo_FdHO2nmMcXcoxiqj@S0v<|9!YeKC}fWzP5_s77HA3sFb zdm`jRCH96v_m^O;1}D1dQvD**zvpxhqEv=ENYnVhuX}}0#${O>njrf#$rZ76wqWjJ zotn^+^9Pq!PVLEf*zEZIb2zIX)5q0p`(r=IeQc_FbH& zsy~&Pa`I%Any*xSw)nnvx(YrMN(tVkfbr6oxd@!(|I~=OeEW?RbT@7V zB;diuQon+PkB^_gzVyXFTe3dsgH-?}>?HX5W&~IY_q~VA@VzSwr4aNo+8NCxppbi{ zg{B^dTZTDq5W^Oad#9paQ@;(z8}g5TDFU_InSy#vVRs{Q0)q`4j0cA2`%3J?uc3y$ z=w)!sQ&+(wzFKttX}}(Nv8Hs96!cXQ}^NnTO7Vnq=5(=989V zfFcMPBosZ4s&eS}Xd=9)WtUU)y>i)d8C|V*hA>;P#7f*^8_!beG>%BBpeI%DGjP`}d z07NtKd&zqW68#$AqtRbv0BTaUg_oEnckv`+u7AXU0Il*-*V4zW*k52BO@+I-W#XAtr_F(%?p0Gq&uZ9s| z81v52!IUh{dbL*#A&uj8m@M$SMA4GOboKtK*DYZ}t7Ooq<9a!aj-egl;&w>Zx^?ba z)KJ*UpQ9XpO87<3Aqum8{8Z%5!eg@zC>klgm6N{4TQh8NdD+>ut!dO%B}7 zHoS6Q*vxjO9Vd&IA(WN-J*7mfU&~V4s_{#lYRvBI+^Rvl(h@`8x zw<+xU7+j}VCL8DYQ2h8nVyEJ|VfRp18sM2`U$cBNw?vUf$%TXZJ#-m9P51H(|55!q zPPN^lPTs&RYtsRTd!w4nPj~o$7b%zZw=C*&TDhBx3B|EYG4uyQ4atl6G3Hf%)qX_d z|C-m)mX!?AORNn6R=)9Jqv@9buYm|0s9RNOKhtELM(ai~w+*eOcHIn0JDs1ZB4sOb=!jtt3AfsHA-t*QS4KrW-{eSlCN0>`Ru) z=jwC}lB4mj0o})<m2n+?R3I}IF~4R9RV{<@C{3!AwA#R7dZF?WB7jHO+A zP<7BG@Fg11^pHgtz;Ev>aoeXKTlub14|o*%Pz)IF)=Bp%rH(A~b4IOb+C)7ZEa0|# z^IgkTI;2R5W^8U{nn}&iQFJqXrvD+ugwW=#2ij6n+k7_kxjp#MoM3+z5O%pTVcOPe z0W1wG+&|g|whN_n^{d3Tx)&wolQ!~kNRaa2lI;YQlwkgnx37>5Z9DGdq#3$Z=P_9o zT1luTEywky6|3x3-^s{(%{Y6R?pa(T=R*W+5q>=vwfLRXp5hzEu4m&%XsbTy6nrk> zYv`t|@|Dz*icC&4NT)pDl6(Ogcs^t(K{CZ8%Bn}a|Iu8Y)$eU5hz^g^;2U~larXx0 zq7lK!vNmbZai(+BJpoUAn|i>l>;Cla>l62*1*;y97|%np9fw)$O&PnY>z(YV3quSY zI+6Q>s*#2EbDOf3T+-DTDm^4)j6S;ZSSpR&*o^6!x@F%m`_>!D5gS&iI4ks-aWp@a zp~~l0&rcrCR;xjrz{he*itC96XNy#RmegtxKZf07 z6~rGe2qkkW#RFmiae#QwP5+R4Hc`GNEuqI^D(m*mPAa^AVzZCrT=2_c9$z{Lct2<6 zVWP$V9<=QQS_cYJxrj-NtKE~N%^mjMC8AG>HU4>!5?nlAHcO!=RyTF-;NEAPZsA`~rq5)Sn02bCzo z@kYKfiw3g*rus4yYC0?gtAI+Tyz9!gCR1?TRX!tZo9^J1sWhKSNd57M&8fk#Y=Xz8 z#$XeiRVi6_{SQ%n_1EL)AA?Xzeude&YZ?M-h}YjdK^$oryK~nW{k*W{fj~s!xU6Hh z@`D4~jMu*=m=POLnm9^8Mz>jEEaRee#~cR;;NesE20gyE_!Lj=IQ+4ADq$r*1MNx! zZO}%Wg@whwDLrCKF?gw#sqEtS+)v2BWuMUB*7*jglMihhC7Y3-x6tlU^SOe%%pxWg9UG@!iUsAG5m!4je{L6O!=(J&a4XuAsf-=(C^Z!2jvVOWhV^-r0B{@`w11OV z{^9s%>45&(5Ki;W_-it|XD&Oj`AGW_*PSWdvpVItr9)w-+aPV%#hQFA7aLrk%fDfL z3)&A2AHsE9=emSw;whwFMcRyWNX;j zLX>FlwHD;Bqf$(xzLpIWuWP-ws*36JSi9Q0KIjxGux2x57hnxw>e025jlSwOCXeyxh&Vls+dZr@)my9>XM4#xiUS-4MVwv)pE$>Z%D#hg^4 z!ljh75-Zq_lIcD_p-GOia%P5g`4}qVx&rDhRdp5x6nZPx+aKP#-z4;}^(WTYPhU@+NmXqCc)6e?Igir(T3ARfqo`O^1-dD%@ zo8S@YEVMOET!W}%7(0eAar_T4|8eTEYcDyq{X44xV8OaGx+MJY1>Rfjh-1;25&Q7` z7@O1m^nuF-|7Ca`D~0zPf|kO}?_wVtU3RnJ^Af9_j|Gjc_G38&YqFZ4zxNXf@M#)u zaTzw*cVnr2hCey*foI7hTa)S3jp?=nCo)I$0q-U8*q4UYqU+?c_59thQk2Q(?c5rRnj9ncE5aFG@^9GY`I}Da2~8cQqU56{qR^29@)u{QN$&UMv|H zGW?s{w(!@vKG(nHqSlSoiPvOjV{KQ*AGeT(KR5#4VrD>#P53nF@E5O|l0RVT_BTy9 zu8S2p7~Yx-C`q-#&d$$W$6PS@kXy20qnToSgxUeBO%*(kGzlj27o~K57}We-`Cv(} zx)N~y?Yt({8R~ zHQoI;$s2=LVYc62EBt(5Lwvh2N6e}Ao^*#nqkU;LS}!Pwi=Q%S+|0J4<71)xLDaaR`|RZvv2oRi5* zz<*D_qd?FVb=jNueBiLnU=0>u3B1V>B#P89TK9#Rhgmt*avxgfx!nUL!T_&4m5CLJ z*s!@7d^E_*kKrX)zzE^yR@74a$(8Pk9j@yKkK`fKoX*_-prBHwuM-__vhrzf$k6As zdrD(F<)KL0(R(GC>eWQiQsvt+Ql3<*2GP}T$X+Iilp~}6s?Zq{PS?k0`O76^nY6_< zeorBu`m%s2g;}=W<$MZG&`VGz&2?U6XA;+xW0N?nfcx?OlQ#9(oM^xeAL(e=QNb<5 z_L%?lvy9C>Z{L&2>HuR*_Vgw$5C%?S`L8AAMDN~Q#q%n540o{W0hl%e9)ap0V+W{1Bsw)fJkb2SZLbyi z@}BYAMc)t_y1?)OHo z;||%ZH68Xbz2X$5Boo&_gYW=QLf!{$p=9_{$YJy zE(e2{MWKBsNM1?hyp13)&w>wZvBb!mII{aovXU}#_d*}to$tr)=x zri<6ISr;h@Mah`BE+{MoAgKM}0o$v*PaOeInOLD)ov901msv-v^ka1E=%0VhXE_X4 zY*;m7FiGb*C6$@%6@$w8?;UH)<$xHcHy_# z8BuPGPqRMY#-fE5~7nNFT8O;Po4VkjIul8)1 zt#!853Ma$ywi9yL6%9n+l!~1jMY?}VO>K=*)`47ouHzSMm*iYcNYNjp&!1rs&OHn> zsCftN4D^+^NlmE1R`3=FqrTO zp5iA8Etj;+5!_rVlxm6R7ni&fIegUdGKhe21(l`Ucn__py!AWbyKdbGL_I;YwANw? z>3-vv$@A-X*tZ?!L6;n}wBX| zq3?$iou#FZfPVII%Xs~P8 zZ!(tV`8Zd-=&NpyvU8#xv`8X(-bkx$D_?}^Xe9+}=rdfGX69-myV*+}XHMlTyEU!F zgQ8Z}{a3J3^q|KjUEm#)7qh zFss}o-VcW(iciiTIOahGFSG;BX5S#7Nyx!hy{2Gp6Bp1y+Ijn#`K+Nt14lCyeyU66 z7fgJ4g^mX)^q0bUaAA??#W@dYKYX-vu0Q0P4k=}@eiPJUjJ4%mWa-HfwIJ{=A(=XG z;G2&+2aT0~e#`5evl(>>8ufT4z>%`F$&zQAfvax7b+J{FVTL1XYlvj2njF&)LL6!? zZ`GiPou`?roW`uD(Qo$yKMbw#A0tK03W zP%l3hNa8uR#mmYIzIIpu$n^5jQlPT=Zx>gyrc?hEqbsmbq6F@P)>GdG(50dEGtU<| z6OMEk!wZCcCwd3uIMb0b@QI?d4%4C$zv?1vXy{8Qx)vk*$ba-IB~6l77lDav-@1YR8(_4eCBu z)5)5ZbZLE;JK_bV-#<8ljBGU786XG)IlDcDZiV{4x5bxm4)U4gUE?-EprHNQ4y8ad z|J|y2y8X*hF&@CIu?l3c8%NGPXmQ#D`@jR$qI5}MVQmTIsap+ncGEL=#68bRyWB<; zQr1@GwRJ2d9-jc?+c)s8Mv^Q#_WK!gdbxShL}T42F%sIAzZtY{X^ z9~k{l^&#y6c?s4iS@QIp4fv7WK}#e}AM1X-gGfS!n6$+eZk8MHKujtBqBdchspsrr zQvEgGb1L#W*)7Mu;y_*-R?KtkgKeNL!PNH?nfm3z(r4`zxOx~@{z^&x<>|1kSiJiG|sZ$U4KwBUFhVP)MT58 zN@%yr)KkZ>9r9e*G+;0=6Vl$dojf5gv}*C7!=RJDBSj&IM~VuSIaHX>-UkK z-c(RVXMLF@{CxE)&f6sxLM_7PP}IPOM$UGW8LTzZ=vd04cIp~@*NkxQ7*Sr%G$qhVH-5HbZve{2rk z-*swx%Kl-M*!aMd?6GBbBQ?#V%xa=a4BOwTlg&hoE(97`0w(iQDoIXBBYI0ml>3y3 zoYI6Z*$9VSbrBfEs(l-Kxa_&?=a@X~<{Z$Z0IB`O&l%mT8`=@n@KM1ye&bF+B4WZ# zf_*1f6=W;fH|AGi;9m4CeKoH^(7+_s!r4(_Ik4!$85Ko-rpC`dBocdc_N^>)a?AJ6 zj@~{<_o%u2M2`!0{qEN3KJ#zz`PWtm6$nywMaELqj2wIe(@I35vB@s!2OXH6fYO(` zY5Pt$k(Ix|!e`f@dZidnji{j`gZTYcB^KXGFGRqK*l}G#!ev0u;{l(TWT{HoAVQE- zkwefm_%{5h&kQZzr}c0V+7`;p8JuVOvo@rugq}|9k9`*(`q*bpjEP~LwY%cNJt)rn zJwN723i~Bqwtm^p4KrWifjLxxt7;aBvU#hxE3ENR@!q4@`xfz~oD7)sf;AI{&nP4;43gD9|Zb+2Bjp~m|h z#Hp>uQyrm~+m3DlVz$Mz%O&x2@n@~$3BgAjgSq+m{RbI5v_0R<(1kAt%2zrL_BFCT z7dmfJ&ps0-MwQTc+VS!9ofT7IGj!D$H}b-YFl#%6Y2=fGbZ+LYUM&@G*5) ziP=We!m4RumK-8d1uU{0cu12X(N+u|%9;(?8(?=m&c$$|Arnx`EeqL%3E^h9OkL`H zkZir!rk{b_gXJQ@18$!)$r;c5J|iZ$7mCoAOfZtBdTAGMQWt*yqNPg!aWB$&O}mU4 z$(sFW5NHn(!APKo3$6)nJX$zG>btb6-BjHwJ@Aw)%j|`Z!{JgRO~qgD#?q6|pSGu& zn}4dfC~Ww*4_^9;c!bQ2tCquSS^CC~sUB=cj++)?Mo!if`5STI!o??iS|`Nlw9!Jg z8buOv=Zd>`^ooIDB${I6XNPi;bG<a@$7jSvV3#v0X({C? z<_{3QBA6XQ!*)x4BN&avUzhi8g1aw_Badh-4*c(#u8)K?wiP8$bOg{+dPd{#Q_=VB z%Z@aUFCM9(RZigc>4Jh(v!9&#G*;fH7{9$P(7cjd9IKesicBC(3HSz#6@;-3>1a?(T&c9k{kBt=|owdL#S*=ae4i zBc%$Kpb5!reXFOi&|DHTmxYPDVV$W`)wmC1Q9s>XF_C*AF?=E>)q(CDOQ?l8Vpv4N z^jx}}J=#E0WR{YQzGxnz?|Inb_8t80`c_{&Cq^9l8OoJx8F3hvjc9F?39OWcz~>qF z{k$+mXJOrfO>~iEyERb)JL|d^XZq|p;>|>S?WC9;(+^mG`{^(=|72*r`KHF;={AJh zD_r&q;ZJaqC^x^~f|?h`nT5R^B6m=Cq#fAM%Bwg9UD6cy3+$6CsY4;6-Qf0|2 z(J7~Tcop)>R$HI`a50o$)FFyp6YpjFxY+XuvSpfURAwE;^0ta~Wpx=fQ-{8$1d38P zZpOPZ(K|r%osh<99xETo@N5Z>xs>&}uj$Yw_0sg)ZQz-487Wjj@)3Wrw2toHo|>|r zX(a-RusG5aGs#^zZoMt7tKQL%T4%&De*q!V@8}Y*GKDYk3@P4pFKo`wZf~?=+y)LI zvt!C>3|$EzIeg{)O!V`oDRUTA)O>!Ad78hwmxpC#<^@7qNql^8y-nBI zTGv?DcI#ti28R;`cMgA1l*}C*>@Q&3PxURjeW&He{AKZgwbL)|m@@Y4BGoee`#ZY> zRUR~VJ2@^G!v8eeEIxZ{LU_?W+KUWyI^1)ea$QU&}rmx`KL;TLD ztQ+oOOBsu+E^=vXw2l1tkWR~_PE0H8uFD4FU9t)7y|G$MeOg(Rw}=sc()UZ~wTxBd zGABCCVe1!%Qbc1*{ws)97Q>|^US(Cmm$u&(LyGIJ6G^vE~DAVRUy3(@@< z*emo4xR_|E=Godf&T;@ZyHs&;08qTJC=brfKbZJjtY+8*>nW04eWr@;7a$f8C~_#w z*%u9VlL1Qiq#8^EoZZA%jz_QYzN9NcP+d}TCq_~wTBP6JLo){8h zuZ76qj+UQm3!@rJgH#`72fQF@^qg$fHp?s6HGXU|_p24$49-?97Skf#7?dlV=jmHn70IdrURU0It*XdOt~w3$UeMyDO^RPp>s)T3^c zb1`aJlHe96SM)xviQ@nS88ukiISoZpBALD+#eMe8$ z?n7&vi`#j((j7Q|FfJjh!cO%b>#Zzv>%9{p|c-{b%#^Ob+=^DLM<}i&yEvlr*(Z4*z31cH9Ld73Wwu_llB# zvsh(UX3|aYVNdOrM$if6*T&UOWlZpDbg~Q$Y)9D?rk|R6$<_a=>|<)C-HP@iNjIc! z75WgF6$n?39K5#SlGf$6-oZV@;84K!Dp0Y_96wcdHYsLVyNNK(9k)7uhj`x9awhSG zz&B9dOrkLUeS7w(p}&4#pX05zo%2$*LY)_*D3}uMBWU#G*cvQgb`?fv7?&}9^efp3 zazxp}oqd5gvYz)BLtb^oha3s~+QQ)>0ue3&CCacjBn`V|Jj3_iW^?2)-? zR96!5HDNq#&f2(ae{=>s>_K9h5~6U2%%Wc$F*`Pp0`TcD>n*Gd>2{K8v;(U2ht3s* zk_)hh=gk^ob_c6c>FvW(DkxH@0t?ZA9z(pboR{{DaFK7r&8W(4{ zY0hxkges7{*E7P&Qr2-2KWjD)F534sr$=lQ#8^*3Z%yTLG0t~vi!OOyf0>nY1HT;i z?_LRbXNPXJEt`FTt)QSF%ZOy6%i#wpVbHfIU`%93?cyk%@D9z*&kD*fC-IZe>OSyp zxe#x;JogWz|ClLNZvI>-A-49hc4Dp=PMX9B?l{K>y=P8On637l{u9846*Q>?G|2`4 z4J?yIX5;tK$QN9N9C*BPmE)GWo)v?_$oA|pMTc)e1at{<$WM? zTfs~`!PAz*$XunODIBZi$Y@?{1MhahAi`p zVoq!+hJ7|FwfUkej_<7tc7bzdS?od;b<=_gXKwU12ir%QSiXAiG2K}NBk+={^+(sC zft0=9emoCVz;trfj*%e$tSJ*xI+tYy%&W-jD$L9d-uYX#I@b*jZIu~aDD zmN&neV(3L)T8-{a1G4^yov_z?E2o;{;0Kn4Kg>^u)<5PU7H1Vs0CGb;(JKLk!}ktj z)5cf-LMzbnL|IS~mYLr~66DME`6kGKQR4c>t?Kwed&bH&s7S}>7YAshNw>7<@M@w2 z#Vgycmkp>G5&w~rfDC*ul1lhv%8pKvQ3H?S`wI@_m&T}F$Yd)*2f}zA`qK94e~Pg7 z?u(7_T>GJtqKo+d=u6sKe}C0-;txSfswDi}dclQ~%`fgvFDiR9of&@o zPJ+k1{XC$NH=6>r)LmT<^@cDvz~O}NzDP(BX~-0GP0$VuxhD*CiX||%@&K{mp@FMBaWfe zI%U%8a493C*6F|(?q5GJFHHtl1!xd8{a2HL3r9*VEW)$D=1l9?RY{l5XO73q0#T#H=@aCl9LkUci6FIOuuSc-@Zp} z^STiw>(x~%twBX`*=M!(^!*Z{#OXM=UNsv`!=U&O|GRM)L9^#5oc0# zXK7BVYCR)sVck}I_q?q^{1vnU=FYKZOXsr_>%xY^Aw0b(W<75z`|VwUX~XBTITku! z(D3beU`RZnt0Ib7O16UahleAy?|T>iaP_XyTCwA1d{^oULH)2OSjkGhK>`O9D0#Uh z#p6xTx|(&4Jqoo#1V~A8zpz9_PU)^SZ5$?GxT(4ZEWaK(KRaVBtaA?67a*TfAa_$H zZZj=TA&R!j1XbbR=3*cb6KaGgN=AnKUjW<7b8;(q3RBU!4r1Q$7Q@|L(Zbxv@weVy z-E;F_QGk>grT?*wq+nk56YldUTSm9ff_q_XotBE+4VcCSKB~PA6fE;coo|WXC_O+| z=WQqCKE^WMND6*Oh@Ed{l)LVttgxhnmd$(B0qC966os!V#S(qxSOj*GP*BYeZ3bMb zwEka<{6cja`%~=R1JbYKfj&C#pjZ>joh zC^3wYxU>Um-U(ARGSWFQjG1F=>&15)CW54u0W`8rs?uw2QsvdOhaX-an!W7t+mrS+ zrAhb#-8CqMjy;!j&TsKX&qcE0nbE@t67v$myl793Uo{r$^l`Zj)1!LOD1@ztWl-N! z@UXd)@=v$Z=(`M~%EvN|dB%u1`W8m`6_y-D-5+NiYh2pGJr`=OgP8AYby-?yQUBh8 znQP5GICjJ4c^nw`(JkAp;I%(!SeSWuHa#?7D_bkn91vJa0)1FNmK3}^y=!yw(SAox^9wxz8_nJ?I zUb~upa0=rQIKnoHO2!q@T5r172&8uUDngr-Ys&Yjs&F2N=}A_KJ|3=~O;?&H^5KnMEeL2ioySnL*e0=xh%}I&M=w+hZlrXP|G{J@=hA z>F&J6h`D2&?auSOtP|A7T9^$C=zynT-ca8kIk_-gQ6Mt50y>nWck`E+#-?ynm3Xi> zPVKJP)2E;c(ma}}Fk{k99NaYGLe-xA23-i|>Quere9Y^m&ygS2NKhhmH1Q>4+OCxb zX!}-L)F;`kEUSFtsM+S5UB_igiAOc@yCIdh^n}l{m~db0b%xoCO?(`QB!g-^(50&*{o`nZP1NQ zE-7p8f#*as`Kk}3{Mw67>nM>W%cE)}_Xv$BixA^Q7LfQm_L+8UsMLa)f@~~$D3Lb3 zETSn?!CsPL@gW&jXP^ZpK6I18q~tk6^J#N&WA}}$QhLuHsJW2wxcQ7UDaJj^4{x0= z;_g6IMO$0h%@wAU{*!*H9z*54fw@6vav)~5-K3(&QzsJEEU>M;#7aGMsTLed+3 zT^et*X5XsNTBzIXHYR(R9gFQ+uF%nS&%X_UG{H(H`Sh{s!Lc2BDK5dzSgkonYX=J% zjN6p;=nI=oh3s!6w~H`k&IUbV)OL16u-#3wGR%`fSDt(qnoR`1f{}vX;zy!cbNy(n zo6RzgwtQuXs7zvDhwEZjPb#}3n;4-UZ5SLs%JIBzTCrxTTpOp)MIXf@1o9m}L`Ro~ z%1Zt*VBL-kdG)(XneTLGJ9f&Oy~auU8FLem2s3`X$@0UynwdZ$)NPC-bc8Hc%@oa* zM9hm1?HlaEYp)V6wP_^x} zmY4+JdyGt9nTYw}e036kI$5R^o?KfD=I2)_HTzCIhER{vzeI}_wqtvMlFO;?KNn~R zV~H+;oql}ya@t`U^>j>#K`(W33P-OJ`Mq0f+5Zzl@XgYm2bW?ciH|rXm1AS!IB}i` zKz%Z2V{oEe_8v15gfmVemP1JQ4Z6~T#Ndm~^Jui(BC&4+CPn6U(0tIt6tYdsKl*9v{(w(rSRldG{r@v13w^w2=&sT@ z+dIRg;r^1ze0VGbyn_GbQ1-eul$UV+er_h|*8mY(b`h9MLrGZ7n~GgGU93cgT}@-d z&;aS)0gyb?H+pYFvBPIkZLttzud?fVY^BaP$&yiOiq3nUZJY2fvYYD>UBbnjGZ=a= zShNGF8PGtKmh%(%qZs4!!sy(64DfDemaf>fJmg1eaM>m(&w-3obR<{03)(1MP%V!v zD)4}Kb@>1exprDFHj>3C_KCs=Lg|)2_SD=3nDT;JlM1F<)zv^1H6FW8x=^Qgov;ou zDm4L$LVy*>0P+HDPls z8Vvd|8;@)QCi9eiai-={ua#OTHhA# zN#_e4UhdvDyCKi#zY1gX113qm{5aiVU!UUW{{Gge7}jj=#aEU=$o>(5L|ky_y|p%enFw6KyCF@t?`wJ;_^{t~pf*qWt`5OUCAHrHIHqrh9Y zi|xl}9&a?N9aUzG?oaa46A>x=oh+1Kbdl=uZEPJTTYA%XP3D$^=gF&*#N?}$T2+(h zdGzRKRfApEf{p$Ep~PRJwiV*Mi1VMn?I z3X{?H)MSZAY4#iKu!ufgENA^Ur?Ai56SSeZ=i&C*iB1i6{dM}B4-VDN-oTCYJY4I* zbhk@D6L(OD#4Y@U zl2^TDV)TysR&`9Bm7aA$rDzQjGV9lpNZJ-s|MZP} z#(z4zwyB=>4J|qkpHHos+C673>zo!q_MK@R+vs9AynvlI!h-HKeT&cB2;l1HGN zTSVF~L`1e-TDL5>ZcLAK`HHE_S!8 z)Z+uorC35tZS>mFK?GM1{?0a~_WyxNi?QqMiK}-w0G8{YD=cu?z0JuL6Snvj#8VO* z%g~r7h1d^9*GXN`=w$w~OtOF6K^8oMwb7#6c|2ne@2WO!2v9FDh-JQ>cVmMRz{?iz zY#y8Mx&VTl;D=u1UmHkqp*+br@@8AY8Z`Q7wu4jFv-Y93Ui`9NYQ9GqzW^4|`TuPC zBgj;qXBv7Qbc>YWyj~;sCZT!x+MZ%>Yesgs;$;rbm6<1nzlm;)T1DEH`daM&7MMWJ z(`C^)eAkRd;k5z9DL8;yQO$orwJglPAOv@3P=|%@25TGnA%to2KEwZh)SVmXG9kD7 zv>RD{v_w=Dyr9?osYANrrgRTe`M*3I(L@XYM&kwKR8NAAt9o$?ZZ12b!2kS2GjF!? zZshIR)Uvp>vMPlPrIv&^XsYF9n#I15HN-*Am1CX3ibRe zc0IjIU#NkaKg(5x`U3gkn_sT>^0FYl@62~-wfH?1oC2qhygo<9&my$&4QZc^cP)u- zH#AR4@I27)?-%=dZ&{7OO2)EG&B55u~nYeAPk7Y~%EEW4O=*r{KS;nndMy zUWd-uk!$a_;cM?pwVWR}#4Oc|aF=vv!K!UfqQi*uezUjmmCGmZNBRPN2yO!f*EHM~ zVnipPZl*_w71U{Uxm<-$)Yo)-RidEw_?p2GAZMMHyYA?35Hh*UV&buvYEY?y)M1cu zU))`_XmINdlmuRwFG=13C|D9Q+(8njIiEl!O97l9kT?{AQj&)_>fmWmBT= z?eE_%s9ZV4gLHMDu0JDu`|`|c*`4kx-M`jdji@M)fV$tQL8*hmX4h9UOt{(8yifcH&NJ^g|JYpoRN2YrgBqcNlU3I}$&tC)taa)YUW+3ol@=oM zr-NCk;o)G$YBq6LZI$?>#d-gqWgX#v81Z~Drnhf$f7ejQQRTubd5~9#V{^oA)9Q-J z*`MCr0*iCDck?YeK3G^-wlU_~G8t8HOGXwx?cQVJ@O2~tQ>a|qs!e&lpockM$H|&v!d)=ddiq>nh&b)IxF9X4v2|i}k`d_yjC2f)%Evz~PaogphE zEuH7WLxC1It7**-@#s5h+T0}*S_8_PMaNfvDPiVku3-Y+3-?O(f5G1f(ZBE$Kz(47 z4ZFBSyoppJ6FM~tT7U&Vxs{uZjPkne09|^@1RZZ`NK$9{WcwqtY@>u~7Mdrstr$xK z7ViKI!~jU{S9<)5ckmdrCh3L22h4Yo+IwuL&SV9RHeZ|QERXlHL)Te@5qY?05LTJo zv{T#s3f}ohig?3OY z`J5j-JNkW1HxdZmY5E9SHV&3GwPF6~+TocBPm4dby2lZH${OkDL-(UjAZ+4g3}mne z_racI?=6tB-2z8jc;!r<3X@LxZ3?mga`&6+r;DHP$nzRL{`I3pZx;aK7F^dRZLWwf z-|)FNB-V66!zGiponjHPL^U7OcG}w)c)Ge9I{q!(;JiuXw?E>wR|`GW;3cK9%CopRGlm^A)#*#;c3o`@s8mGVBBEGd#}D!+F7T`mleO(!ua9 z##?R1d8_fqFD>0DlnbY$r)1Rq*dZthmz$~}@b(f+)thX2*6x48FITT<*hu#`ea}ZG z_DJ+)Ew8966}Gn1Ox9P(h{@;JsIRd6?5d zAQ>RideG0w&*-S{HtBmzox64NYoK(Xr_FE<+z8+YMTil9H#>{DcSr8k?yjr96H{7@ zB=OVufaxy5(NudBJ+Ru`cg-caSXIm%B}IE-@nbChQ$r75&@8|Wa*X^3OqC5lNo4ffLh%4Zbe3;pLLd^U_sLC%-_1)d}B0|Cz78Dtko$^%MHm zfWM)mSzGM&?B#Cx%u@Tj)U0LUi3;(%+`lKq9tA9>Md^`S*4EF8((>0H?-0Cznz#Di z+!^1dX+9~NivbEsxsU=%y2*vm_N&n79*Fnwv- zXIAP5In2|#pEW3kpATfnnUZEN?F&w%AhM=wEn4~K;hPL}$XucO#EuIJS@V>vG|*N5xzSd7a^mK zGp_Updu=VgJMCHPWB^IzqA)H6@|Bu5pHTU9bP`H*`$rkQ@B5f8jw&A7*1>Y4cV@94 z!b_U^Xhix}bL?fHm%ZQy)i@9@4WlX~DBb~UUMHA4C~VJ)v^Z~(X5UBsr_}>MBBjSz zrfD>WNsW<3obBa+{=%V3Iq!1OY(8>+BW32NriwMk7y%LrBfEPG-#RNL*`Lqj=s5!( zl3M192fYC%>@C^xPvcLN|M<}C|7u_Ytak!VuSV16OGEl89Ju;Su;@3XCc}UCsVZS` zhUm0G{1*xS4qG_?-KU6WTa}|5x2pNIs=a!Zw#~-u?94SA^7zQU$n^RS49;&nz#>!%vs*STiiS3#bx9`JL^>hB(H z+W2?(j(CMngRCcYa;|_kFyy%!yuvYxAYm4v3eD{Mhlf%@C5H zauw!ykS0cXlVC(5CfYaukh27VJOrW}z)lZ;vm5_sO9s85fwJkp#fBn=H%ZI{It0-{ zU$OO_mEE^Pp{r*jup*V1pb_xHw!j~Fck6iI z(1^P)UL179%KQD1uji$O@%dU%BG4og`1$=JZQ?!38}#0aMY-a?1tvo&kpaVY)hp4b1W`1WFoEpT-v0%>N+ z^a}l zj40wfKI=yN4xrKttn_D&N}%Zvt5TbJ2Zt`7<>&-y@dv94M3pR`S5JOSINv)5rTm98 z)5ZxW9T#@WLqFG*5ja6DvIKLJ3HRbaZi!~<-v6gW1-)LFos8l-_|%OZ+?c!y82PQ9o9U%G?Ven8)4 z;~IZ2wuN|osWAh%-ttO z+C)~RAG*#sHsmf(@)67j&}@9&FZkR&6J;a;IC{$^QfBkhf=bw`0>_x{mJ zh$cvZ1#GU#JZADu{fG-{N%|(tjVCBydZ<@g!f&g}83v*OpBH@m zeXvs$j!tBj3z+ONQ8ra5_Q{cp{d?iPwka3b)uvS7@qya>YY4>tYv#1{$CeYfGQp{D|DGiV!uKPXmmys(tZ$@6GW=) zImYe#^SXJ95EC+;(|?LCzIoWH)?Srx3bMNh=IM}fz9y9#(gnc4P+l8^oI&FL-v0J)W@l zOY^CEm{4&zfaN4kO`J?kSVZuOJ9VHJ#SY%d?m-T8@hNyVifI%;Q9@yHmD5_#|5>k*mdWRui_1}j{a3% z7oyG`z3pD{1(Gh+S&B%H)p`?V82{Ki#fYr!d#heVuC;BraIwMKDu4gJj!W*vX6g~C zvjM@>-QSmH!j%u&jr-h=gCwYTfM$%>qcxAEfNN2M%N>I#Sm5{F?*zGyy*{+6g&yz1 zOyjMjC{p|aQG&+M-HgQgk+1%kQnr)lC|WqkNwvSfI=)CSY-0gx-e))p;4-*VEb9WM z!6I<4^1fzuuyobwsc3wrhjdTtjY99bfql+a#dCyyoEi?WE;=-fgf(D`2VMB4Z;hX$ zq_mRC#}?}VMJH8(WL$awX4S4?6PlXMJ@)7iMIDHX|M6XKPhbbIH2M;xm3kbE@$vhJ znbx^zPF(F#-{@$C*pE>Qw@Dp+V+n9}o)|t#6vU{R`2=i6_MFBT>!Uaqeww9f>obG- zG;!z29;0}YMbp^6$H7V8+v6>J7Y21_ufE^f@W_6@rP9sanp617B-2EuZ#k-`j#yKp zpzUjJK18uj}_|OX1FK`2}X^=;ybKc+fWID>vyiT3oE{SU2x~Z_DzA$-Rd+O#} zf7f$KXi$we^58M&hnFn|3x>}sDc0`mjtjM78?5Hg*q0Tovx|z*7}=QYCa(>Ycx%FM4>x1`3a8N2C9q2~#bBl$1;x%O z^Jo^c;O)rSW5N)i0>4di8KEq&F2EN0?cVKiW9_WFeuUm$I?{{=plo$Oh5SMW( z<=yF~1r@lYtWHUL0;})p&_8#sa9O$_B8krOYsYS*@%0+;7>8!a*H-Q}+z)$Nup}wM zW#fl8X)=?3am9`tNAII$G(|6!Dzu2q%%2(X{iKxb0rN$Y0;_Z~IG zrSXlMBE87@oeFNFsGs)cC+qztk5DsF;boT%p;_t=d(R!;$(Ux?#yqFZTkG#C6xn~U zZ)C_2{AiZ)*zmXZQZ^z0kL&S|X(k%aME_d#>Jm|OE7G%8Y*de{V6J2q(cx1w-Y@Z> zV8_i)+O^1LQ@?#H=`38`k8%$^_t=Ynj+D_YEP`Y!gCO0v@uU_YprKboqmnC~R4(v+ z7qBM?RE+}QNDUgDFa6HX)@+>tYi)Xd>TG%b5YTmc|5>K@_~qA@lvQ=J`N`mVm%@kR zlufw%$G%nhbs^5<9EC^^C;6Rqv=__+3#GS#8)a2CA z=bNDw3Uq%NulU(gICKJ!`ctH4GAvwp{zaP@fmjovZqW1qM{wM}q3gqadPR4T&+8I` zvdwE5ah!=L8glrqAk$OreMkIOcE2Gf;JYR|vd%@temt62=&0>3W`ESx6Y6l;cCjo8 zszxm8eO;_s4zfF!N=$aDlm8Aay~2J(^e4R=AXAkSCj=Ct2}Fuf1!)3B@Q90v3QMzv z&)f$kjj8HT7LFp`RZ;c5LT&2gvzx^|70wxUYCiCn+vc2EVr3T=!$4yytEVkha`1f?$*%XfQPuOZ=q8xkgbtR3 zLUBc~0L^qOI?lI{i8VnY{r&ti<(erF?IADH^wL5>1QseynqZOB(ohaID111rUKQbJ z_`RsViO0l&kt$Z_O}R&$>Vx;aj+Pv5|6PXS?vsqDA^Jt>J5wWk-E&Qwb%1D7KT7k! zIQ-V{gi&(%h+vqgE3We!qi&<7lWLC4^Os)fw}KKIrY?yoGhy$8_T`YP z7sf2*-W$x@_dMA6Th7V|X$@6PiPc7z(l7O2VK{~;xtV{O$+fpNEIWA7O5ncf*d@Ja zB{H)<5SJ1>{CN-e&r~+4@kUER4e6tee0C<$7j&1MutelZX}nf-*8X1Dqs$JH8dCJr z&c2z_*^cMt2-N4>wu_{@hE^fWh3r6u?(hQj_)1*2F?spz`vugQG8`p7hzgJgEhf0Z zN)oKIKi}TX`2t1%*WQA0FmbApr-z1L>&eMq$`BiSaluuRcGcx}O7AIbmpq0p2|jK9 zY=ON!@p7^xw5|jVqqjCB*TbJVzMk%47_;(|lCCNMkt_8ZDgm}COhS3O2dA_!YMBgv zsqJg_R(&NHtFQQQ(~gmClCI7l4X7@#?yBI@2)#cx6I&=DJqEk7mJ~U=1dr1U-U*pC z$^AVBxE<9%oZclX($c4+G6|>*y8G^WM>}&||0BP}{eRwwk^MxewSp-w(eElS(6jWZ z^@byqr+2@w$W?B2Y!Xv`?Wf+%-%3bB^}R^3SxM-5gd#Vu+`^uV+vC^lO)LzA|K*gm zwHVmJw>AbC$l#7PYF3Uh6F+;lobv`ETxF`Xq<^ZTymm4J?zS+sIN>)IHN*J>;tQnx zn1MaZ0W>LE`Ho3dU#0}Mxe5FhsM1R1ikKrN~^ z^y1$(ig!{*3~)l?f|7)cM#7__hb^?%Ze!`j7es&wB4#6QX#D>^?_T^}ZuwgRvM;aw zD3rXMuU{L#F^$g@H~m0o2Chjj_5a(&T4=9uw&-|`pOte5tkAQz==hpR9rU`kNY$i^ z|K7iUr+phiGfv0l61)f=)Aq@&Ya^+;q9=HWZ5oFaR@o)(9NT9{R^P?b;Si~SwqRjq zFTP==?;Z4SPai5WxUeKXn`zfYVLBE${pto28vB{LhSuh}4v;@!6(IfZLR?P(7);hR z@y+;8f}JiM4j&|o)+mAn{TwctH>dNz>;<7($Mm&*HBSb_w+H!}?Ad5L&OXtSWsR4Z zg{A?PSO=?*;o~K_7%IAGexHt6NX?Ho9`G)=X#xQ9o;Ulk!)d>VpOw%&@`03(mQ~;=1KR05ciSm^d%bmGqV(!$3IE1u6{uC%`m_lL0z-ERz z3SrpzzuWvgKrVDtRIz1M9h4dxUW_ex9L2Y*U$FH-`WNMSCO0>W5pnzb>s-%>)ORIg zf`at&$94};il0|cAIfoweaJJ7WMZXjH9q+ulR>aokq15v;2&N7`C80%5lJ=9p{X4N zKo9op$>+430D)M(9)L{%EJQ2R-h6aytQ;JgO+-Tz_k_!EsqKiN(&fQa4MlrfRbu3;%5m*8*Jri`QR5oF?)eUlJ6`O( zT5Ec!SlLSE6CZ%?&H_cJJ@F$q*X}Rz`P~KT+Kd@wE`16pRK+X>+=^h(hZU=yg0qr7lhIsA~9&GcJ(Rco4YjHP(c+gRk*!m0h<;c#NJ4SUm9gYnsq z=Y833WDHxSDPo}8n`__IIN?WhbO}JeXRB`J34ihJR=kUbzNT$tTfu3ADpXHyUBq{# z?)3rf?X_*({+!?>6q`}jS1FR>&4tQA31L<2LabEU8fz(1eDVGfeW!4-4_P~Ghv7=T zJ`8w>CrAdqq+**Z#!*H*`Ai^9`IyhW2d@x?!usQvOt>bb} zoYSO58)Cn!vNjckw@oZWQhHlq-X3znA{+Ruhw8Fk=UN`l4a`v5#9s-nyCWVZef-!> z4S=*tW!&M&{NHeNw4fu?5Jjl?H@@E{C9>QxUOt(ecb>;alCABYYU*&JP z1cDeTQfvT;P~+s|%Y&~3l6Q>NLnhH}piU(7%(DFPf5D5nC;WY{U6u44eI4*}- zUfi9q0l3IftAE4ocBU0$;Z~NcO2; zZ{GIVl&-%aii)I^?znfWpxSztVnMO*U~-0_?+V~Bwq-c7Zh3GK^3Iv)INPp8p4>Ud zu{j1%8Rb4OBPP)GK+y#<3239T?9`QhMExFgL~I9gpxo#6W&r|(8jifqEkQBCUR15O zo-!eJ!N(^{VOTxWP3|UZN7t6O(D5IlM?Nk(sjq7;TTG)CXsTzkAI!~P{9KBkWI32C zpeyK_yJr6)xre}91BfJJ5BEO_>ij>QePvjbZQHH1f`AA}gMbL4G)R|#h;&JZAT8Yu zqJX4`GK92rm&7o1Nq5800}L?qzzp%-=<`0`evf1S+57r8$1!(babD|O=US z3(h`7)rHE`0|5VU^LD5k1Cs{K0`Qn z#wJ&=yu&jAN|PZ#QUZOp9rbNa`4D)#9U|`7SRlFus@`65sXqog!#}OLA>b8h-$#W& z>ku)zir?8^4hECNtR~w#NA?ZnM>(WjzR7OqJ#{)cqNiit7eD4~(shRFuD6#*wrr>J2sLabMJ%rH(N-G=i-N8azeHn{ zTY`qs^9p&fRjUpA1NL|Q=-3!bUCZo=%9SO(j=i^073{ud1%xTN=ai~ubB>uL96-6mYx5g9CvV&CN17W8A5xv5h)TtSxkr3Je7lEQ)XdxmB}A^q>&89WLUCa0^+qqz{E z(tFbCd`^Q-avCTV^RxOQFjQF3Qf)Iy?2gnD|MA7teoVHex%JmbB?+J5WaS2H5<~Ry zdsngIlpaR$TyH|vTF3eEimoHe`k38eIgE4$9HC$BDLY8Fj@hHa^~V6TL|6Tjl^Jbm zcVSzDqT+i>Rab|Uiz%5ee$>9+GXt9Eg1>xBPik>}1A7_evSmvI?9uYUJbEi}8Li48 z#cq$X$V0il*!6IVFTwl@Y4RDz%*5+Cig1~%@{e*AQe$C31(r$76VCaR{WD@Pm6+N9 z%C{yIKGRk6OHZQ8H_c2k`~uvvR|xF(f~-mXURoAu*|>e z@wIyLauL?7`@Y9@RL1C4%#cp83bM!7=L`8oMZVh!cQf6=HdN|Fv|Ok~V2@+k^EDZY z5Z7fegM$5{rdKa_X$dc zEFb{uy+mJf1pnpI*n@rah*gtoCQ3az{_foq-+Pi$*e~|%YViyV3dg?`eS`Pg zcN3n=c9G#P<5xK)no&!(YJygDo><=v*73}2?ae;h=up2vjl?>inBY78&Nf*k)$Kgs zQixn@oTC4)`Gc-IIws38YdtjIi1pEQJqJ)bUfVVhFaH6>SOxb{1Mn6)TliVW>pYO>H+k4r3DZ0?&;gxQ02$LjM3r|7o( z=*J4sc^v(h;r8RGl?t$5Oq6eWi8);Khn?h)&9v=1(Uo#|$+w5GY0!wO#3va78hcN`N0v@b%Nd_r47#EBU3U7DK4W56^xJ<(*u8|EN z$|X9ZO($_z2^CGK>JE6=Vp@=#2%pCuyDD@)Ctnejdu==2_awjsXKdTEg`QQr?E(+s zPePON`LWSq`}UC^#T{hG3b#br;84Q`Oi-$*uJ}gnpf!)B2bq0w_31oSdAX8atS^LA zwbbYK2FfiEZwqRJ_LTnU%O$O?8G&`!|2 zH0x6HWhiU^Vnb6x^Uhms4P0EV)%X^14_+sXWLzzj2VU?vOa_F>-7Te4vhP|-Z8EKa zbIf;QvgM<4RdQuO2Pg-|Fw4gzW{M1|=NZ2iS0dK+6WA9Xu@Ax)V^!p7M+V>0j&`&u z#V3{wxqX_tQcC|=c&mak@n-;qDRI%$7RP=1GxUtNQ4b;wkSeUjS-RcSe%=_$x{rmc z7=)0wq11kzwt0+F_X7u%yNv8=ki6Bl}?&>gvbIM+>`WfU}P zPHZxI8%ir-6S~dtUqgiXPR2U!dvK}&AkbjQQ#CacJPY!{C3( z=1PCb=6Q%iW{y@!)s=<&onO(~j2M>>>-P9sBO8A2uPuFi!k+X5jhb(Jq}d?De@jr}VZefBNYnMQnXhcw%Wnq+hMg81AP}7?mR1 zmH5KuDsic##O}%x3`HNF;3`hYxs15xuvMz=^R2FP$2bim$coqkPfz`w+~e-c-WN)G zi*)=R|9x&(+xGVW*q#!JFpje!Xt_+$NKMy)BA(VP7!x~&_({HY=cX!ETaPRp?7erp zXcrGA^KwkP_`c3HOUJl_6qSTL2^zmR>m0ACv^kyVzupzg(=fX($e414M?AYQ)!0{_ zcEo_Dbpy7PPqI!sZ>08)eO!t_jf$0#qtW<46=%_=1+|MQPSKme2mODE$1 zAvn7f?5>RCfXMX0ZYKI*0-J0vcwK9wrfg^72RM607GB z;#k$NTrQoh*ErP|(Q3nB6MiP*FujD*LUU9|fTTzTTR;ulU^4u2*raeXaWQBOb&M(z z_g$d!%-kySO?!uH_>An{2y@OKkDA=Wq1I9{bRxh=;pxjKf!oVkQx(YjuS*mLPC={`Xarqk23I zb|$)tm=#o{`IHEC7_U3p0=$DuoYT2w1Q>;-O@{b`zTXA?mL7Ar#j2)$7JXa4HBoPI zSe#OmfRF?SLiEBARykmNR9O1U@qSqo$`&wZ$SyAK|2h6PM&v}?9qZ%OkYkVQ%0*QE zdP|;Lv;^0EEn$P|+#Us|Z%Z)gJWdOe!q!GL=#y=+-|h2;W8tZ4%>)&P;Ctn6G0(=3 zzTN!2TblP3xJ3O6V1h3T28W6emATBFMY3;N5Z$|J4<~6vU$x2n>8Sy zuKfG{ZU1F_k9!=@Fo_5@p3d5#&^ac}0gpe0hxZ(|Hmz=6MiJ!oQEpFEzk~_2Y~Y!V zRLN+*pDvef9^8u&-Qza5!~5f2x19+HtTVH+;-QgK&>w`rMw9BkY18w{Y$Bn8jh=(= ztIxU(0%F%a^#aoEX#OZV`vBfO__YfjG&idHe#iyS8z+k%rp{Ity!yQdon_Fqy55`P zn%fV3pEdU#q7CPCFVgZuZ)~(D9zEFxfk0t5I?~qAMU%)jfCyLGhg##lio2$BA&6Ot zbX2X<4Pbc%@E3on=+}c@9z05<_$tGN;qT{nK~;3WI|DcsU}ce&eAf${z^$n z_Qea#LD5*80|0Te{mLH!N&)J^=M{(G6FbY6Z;5u6!ot>GkutC7l zzY0qsTk1XP+i!o&LOH!w4LEw3xQpjQ>)v8b76;I*Z$m50yN4U~ zT#t9Bi0}BLGxe%0E!qDNUJ4@t+jA4KSxT;gj73YylURG*2v$ys&y$2n1X63NMu5G{ z-X(1x$RfjTs)&0n!C(QS5&QJUT%JbIq2(hUL)$tiP&MxlfT_Mf`bI6Vyc**%o$W_1 z6@l^(-eAplUN5wSXZ>_OG$X`B& z%H&npA{81F1KawQW!Or(VR#IFxqciUe0pWPa=$}*NJKTAi-&{>{&q)6RFL{rm z6j$o;TsugBy&deU*gu}&DZwQ@qHd$lMSGqI1q=F!fB>`GaR_O#zIZbm*kB`p z!X?)u3Q2OkryFqEi*fQd`6d80DXyxli(&kCgp#DmB_a;MXEzY#s1rYeBll$SW^olS z4p0tG_&@$u6K?_DkDUtt3m0d;_x2;ys;7tu$wzLjnu12bPaC>ch%HL?_hEzw@R~5^ z1&e|Gwp2Rq+$ol`RbP4c1yqJdar+?+nwjyPs96d(*feOcGu<}@|HQMuyF7{KRh8>$ z70TTItLH-ots8}zDp)GuA-Itl^h^*e`DV6{j>1Y=)$IX3t1igqOkeb-k7hMIeW%up zn)W`^Jn$CsTOsQOe79GA#J1OtHiS-!eVb=~%hwSa)TQ@X!FdbNvGKas6J(`PX}cq)wnh1$r+Ep#rm3T>NleHDXo ztMubN{Hniii6b5tLpAPJM@pw7@ynr6Od$*xfkb5pkjX1kB2TPeO5ed0Q@Wp7CbBx?)y)q*#7Mr%zZ z-_M-}19zc3`m^e{P*SdAbBYrFALx5R0N_24DLW zAyDmCj*~0=gH^M=u5hon<=P#~drw++9$CqFX38?YHD!3l0Pj(dO#H+`#mp^5QQ!#J ze9_4rc=pS`4&AD?cy>^%8e0o4(=Qe*Zcuv0Dv*p6CcFC(Q6iCrg+vZN;+q}s6$h*X7 z^!Bud!0>!5%^Z95x#;$EkrV_uz5eF9hyQ1*Ev0Hg z9_;C6tOD4|9Dv!S8I&qPyFZ4KRJ3sHXZQciq)b`KB>eddS9{lLUWO4vVWfiwf!9t( zH1qShdk>~+KA=Y4&!pKB{>#M#zEyi(?|!4M?ffZ>~W(%WgyfWQxe>8 zX9GH_k*5#@J!lJUNZ&M^%vGitlb6*Jm*|}jIXRN(I4D#7bHc)>$;K`iDAh)yDIx@5 z!uMuc`cjAeOW?2L7dxHjk8$em=BfX(U`X)yB7>$q>z1S7Zy74J`4CH#)|Gpm+D4#2 zVP*{@01{oW$2Tzf!h^*N>VQL~Kv@$~3k_hw$S-BPsG}^CD5qattZ)B0UR)jtZ8n^2 zqZqR~T!N?D z5^ol78N_^BUW+pqaz0~Ip-*V;9^Y4|jj@fgasc0!BQ=2kIPX)6^L^q2h4HGEUez-* z9Qh9ET+6@SfJdK;_M6_j(NXj@dk`_;WZz>lO#`8L*`)JNUd<59LUF} zsGwN#YeRvUx;QUB>om#J_$N9?#eX)ed!hd9>YcJya27s5R~jd;p(>3qgK#Wkj|;F8 zkv@0q`siTE9iBh8VRqE`2zwxVhNl@nIIwe-M9_f`5dPu&yX?toQ2^_nNpY^Nfy?~b zC_|0Q7LXKFmn}G+jPCy!!50?Li(;-@Ns?)RrvLP2SJMjK*(g@n3?X?HA22ZhiI&6v zv)TcsWp}`%Xd?U+Cpz~t=W#x|6yOKnNxUtK~Qzge- zaqG|zJ9!e%CAvF|)4sV3uXc0dEdu)Cry@j_jM^N`eY85N$yUa81{Vy(cD`c1yY6C* zgTXVgbTJlH(|?7q0b+ESia7OBUjjuof_!(R$%2$$xC~>~Xqv3nc!HjTvwm2~BF=L% zuvjEc{P6x-KBpP`CSAe;V5d9iPp#32*$Z$sZ^b4%GlQ5r>G(IyQ!SB}P?6%wQM z7-8{d2-{hjV3Npjq2|t6EG`|)O)_NN0A)EN4*L&}>5nrwSj7jCFLi?tabZqNC}c2l ztljfcqgR?@NT;tWI{ujFm~6`=<|GmL+SMx@IGgDf1F)Hd;cl5S*V>x*cE%4o;nHEV zFp8kxK7Ii2^`{WM@x6(t#=J5afT7y|r3}!rVTkQ#;?p$(=q8!+gwJa6pF2zk6~rpH zuEr{Nl`*8{qo;sKvO9*3PxDXFr@OHJVf2>hO-0iEVM%Qtp32_j%nSvB{(45-EiCW~ zF~s~pVJvcAY3q|$W^sAw^GX80I~9lK6V&2$j-M6b12>>_)))+cITLR%&Ba+JMz)Sygpl>=KCJ zC#0K{WV8@k%f5iZQ2t{`6&gqEWYCGvZ37_br%SkCc+hcH=r>8a&?5W|K2(nKzL)fS zO{|D&K=hU`RgE=$)~<`yAsbUg=cl4znYrYD8~}`TSh%M``XRH0`J9!4x&8mb)lx z2GZYgxwee0R`mamQr(=Sbu+OS;@{c4KG{k?*dIuGyxtFZMIyvzZh1pfU;M5h%@vKA zz>D4X9Pcxs`qjN$_@M4^^re^2E5(ZjPrgfAu-%+isRU$jt0wZ(oKgPdBKe)hF!Csm zp(>ZxC)n|=Ab9*(z;KR+Er`>BYmTMWfBIyKCBx(cCDQqnPDzYAa-p7y|MkYY0lag;i2q z1|f6AvmE-&KSgyD1p1rJrep$krFg#!Vx^YWUymFrCtgOdei;n3cwT5#5*L}z))a8I z)Z+}T;Ozh5Q#CYrRAo+OnJszWHoF7!(=UJ;JRX*x&Ut??c7BbuUBJFXlp^rXS31Ey zvnMXx%CS`pch^)Dv2qg)uVLmq=K22FMGpEC%AUnwt(HH0T%)_<;&c5e5neS{gr&i{ z_GO}a3&ni{4oEG(a$ENM-1v%GD8I{FZL@DYKZj^z#jP4U-rElK>!BVJ$z@W;n}1%< z!w~Iemqh-{li5-XPibOxl!sSbFE;YEe#WUU*%xkYt|@r%=h>pqw!*P2x0o#qDDKK@ z-RNqkL=(mYF^T$cc>k)@^qSlW`?eOr0C3#zBX1LY~p8(~VpKLk? zRY^`w`=V(8b9RrsL}y4vsmUYZMQvE|gJIuiUo1h^!zc4}B~Y~O(e)gdVTr9!lxPWh zn*;X%N}G#wZG`#j%I4J*4Ms-%oLT)JukyxXqRC#fsEH;Lx$Ucl%dj!p+P86K{q;H_3fbjB#$4tJNwe}olZx1kgp?; z3^_w@S$gOa*m5gxc~ReW?oQ&96)ZbFk+olX8kJs^&wCVIjzX1o4pQ+3uGcMT;x ziB82Y^3zg8e0w3)uHBKgQB8ZC?s2)@_0%K22SM09X&Uq8?OfjGO(L!Ta zlRFbegkrLvee-t+yqjVcay3Mr>7;|V5mf=q^wF`TYv-8767ebeH zKH1pEYtC1s0k-d;J-&15r0E(-e7d+yOuc%wpi(>(nlAX#lyH+}C?jCGli9g5Jit&G zbA^;Meey7cphHsjcq>8?t@7~s(%z0#dGT$Y%z8W+Lz6Q`g$_3(7K$}8tKfh=XQ5Aw zPkE90M*-q<2ksS`q&f%Mr}WVpzeM<5Hq1{i<^1&Mi~XL(_N5Z&=xRsUDl(|a*uVGf z=plIAN<`z%U-zE?C@P~VTG z1>8LKcz?^)-sETYM26x&y&w=d>RRD(s4K?r9d$;#dT7G|f|HKq*<)@@ViY+v(NIIJuaogE<9aC2FfNa;M3%mj`3I>*8cDG$E3c*j%g0Cu|BiYetO_ zxO4)RmAG@?#ipv~GO4$Y2UPV_#|s`~`pmxynb>u&Qb|+1XTab?-)c?mu(9COE_g5x zz0S?Mn=NmWfh$@+SZ%ZJ6A{{2=j+e)++vw3!+5+vh4BP}WG+he)-jEzj7{fCmsj;_ z+&uht2qfkY;_dl{Edb8ykB3-j#UU>Bn&S|G43HSGmF`u3ndeZ+{Pbz3pN2TMP7Uk# z)CPO0x2bVy>|w0<=~HxS^-qhQw!MKgZ9jYMfy+wK1GNqG!1+))t`@Y6Xy#e$PZS$c*Dn2NpAv5(qv>z zb|4bO(%MBomaT%K8_XpW&vy0XSY-UnJ7ZWlXr>!oxtq5R;FI2q!j~e_-9FjcjW;{@xHk9^jI{)AlgFG-~%~w(rj18Zs{nxYe=WW z@{b)AKlTkE(Tls#-mG-3yjWpk*)!{XZg9*S6u7TrSMH(>!9U)$`Qul_U(J1)#?}}5 z0wqpD$cdHuhswM47WnnIv2+5o;BdC?wRA~LM047X=R;r{zB%^rIyT{2hnOrEN@_th z2Grn>8PAOe@7fu6b~B`ny8{2QF8_jYdCWq3kTWCa15|J4v-aK;KHs!&97@f9@DgBb ztN)9PxRCvW!!Tvh{<-K4K+Gop547^%f7Q~LzDx}}a-Le|t61-F67M!TqCu>V1ny30 z{@r}bezUQ`Ie9uL9-JK~#_ti^lDnEd;+h(B{IO!m@w&^LDWlo@!de`3a}A*Ja+G9T z6*mSvqjtZ48FxEPg!isI`snz+;t?G0V6@fYS&HACt{Cb}7(fBMY3jKwgxl9{?}Zk( zYTnGvnMW~1-lBsHW&o)s|A!w?$b$~SvX%jmQO3UqJby&E9UF?S*a>+%?Q(Hf%)^T^ zZEH{_(1h}GnL8phvd1_c;}UC^QOtXlJW*_eR@~ER8rehkY+*hp&x{t|bn9EqbRO&2 zdOhN9e0TC;539K5UjT>N_ABlQl%56a>^A+yL*gO7M;|U0!|^xQ8!b}X$3+}H=-Mys z880>rbXHuTdbY;wn2NGrL|6hS^B;OU!8N9=cIm~Rka0Q4qgTwt<@Q#}=>9z6h}t&* zIb)eTvyi4dkCTu^wV9PmKt<@gj56ux4|Y7y#bB2n&LP*^W$XQ++xu6_wk;N_a~#LlkF^>~6AcKp+&C4uT5xL*bP*NC~$R22g> zNqMQlQTsvd?tJf~p|=mHJ+L?;JN%5E`xXX*8lT7RRM{h(4J$4sDgrimAKo`&79N_3 zl1@vx1RFGXr}w#kor~BKA9VedUc&A;&qLVNgw-X?;Z4^3%4zp+rwGmZ_Q7ZDjKtga z%=zlhvHx`RE7dYepZ!tirQl15Pl=LEtH(1P0ptYBOEsMn6+(S?`vCN+lr}Ynfq_4% zQ*3<+10nh6*^xdFhIY%U52VHI{S>@l)jXBQhEz6ps=ciO2SJ`xf`zw}Mc z$B1gyd;A?JGE(}|{>a}F{flSpP0&MjBFOP$l!QpcD@O)Y=l+xotJ5`@^*A|6?eqCa zi#NmbNh|^6G-mZz19j%ME2Gm{8{(XrzLF(P2hkdwIkP!K#7sDD#gu{Kv70nit|}oT zTg)Fj=M6Jq7CchkoxC1se`D%I!7+x^Uyuq~lX9WXdQzx+PAXv^_;su5BCNju&b6fijEdoUZ!d>i?4812mU z#)#kWB#2>eSH0%61i>IL)6D~s%RN`$%qK}`wV-){ck)g@s)e7?KuuIG#~E(^O)J}d z!^1pDC$xpK`L-%Y&Q*nvQhZ-F7ap%}?uQo@f{OFb;%5%F<28G5HQ|X~S||8ihF3+L z^Ai18UfZhZ7uxkFp8})kC%RCIk|U8gf5vcD=A)d9CbTRAyWn0c9543a=v3^LljI?wnwQ+h z${o#{U)B#yew^h1iyF{IwwP?xxUf(LX+RmlF5->Aaa_~wmub$p0mw_PqIL5@+EDpY z5sGtv$nA8Y&*79;htT%?K<4vM;}f+C5NiybcmkjY5wlB$nyHin~J$wr~JmsB@ENrc5;=< zLba2DpjkXMU`Su9lXeU(T8@-^SUToU*wWAIjLpz%nUG}>S3(G3S7ou3O%eDjn~<6Y zOp5M9S9oQYs*}T!LB>@2hsxAGLKr<>xVnlzUgC@`63H4vLx>X*Be{!Az3J74 zmDyqt6P}(ytZ07!x$|BNQA^VWT62PUpg%`YUq6RH^{gqa_H=g6b6-|ZhN|V%rfQJ1 zU3eJKpoQ}OGdsDwG6sBto9R_wO^ydzE%bS|iZSq1`ShEk`>bI3+Cj=i3Fq$dy6UVzE5j=Y>!qQFT8r=B z%Ku7c8)XRo8iirB9j63w;JtJQ49M}Pqrr~VDU>!1I&PV}^hg(k`{nf~s|JyO7L9lf zd2iSTaW`MBY8R;MG4W`#SAc}^g~J`=3**n!d8)0Mw-S;Iwq10|UMRObHA?+E)4HgS z9{Vzh2>cTkWW84?$o-o;3J=F+_$O+Rl@}b zW_>#3-yjm_5tuY~lTFbDrp4f)4upGslVni24WhOgr>M-`Rgq=mAJ z^T5yAfzD?`R8))-=6+R^h9-Q#i%UZfoC!UNyb_AK80@3s6zt=J2)T+3^>UjJK2j8L zXuspB2rs@o@{#G#6K?cDx5g)X?NKfq+!YsmGyow=T^R31nYjY~i&H1uMyVd2Y&Z5X zzT1n^Q;$}ZuGQGLPwn%AL=BBspEn;@Tk5f|$g(~qc`SPA*yWA&>*Dl0w(j45#WcCW zR#1 z>{C}!aR}3xzs0;`;bQP|`x29){4>9Aw%VcE-y1Dxq(=ONnIFxI21uQrQ(wbFFk5v0 z+-za$aPR*8q4(beZ^~5GR$c^ZY_lmNI1$VzO3+J1hyb>NJCFnefQpa;kC`#%7061= zzmHBY*uQ2)|A^Q3r6vH0YiuR0GJ@KbkGKx4z0`gLNlD@qS7t}_-v;iO7Y4$VVg@GB z+E)@ljGDR57}b4QAN5>SMdcYeUUUAETesqGX`MI{lbp90YG)_pA~>FOe8T)E%8`$T z>`Wx>NkXC_vSPdT5)`=;j$>zswjR2ITX_r=L=P|fS^Gly4AUWhSbSc8@g1tC4e>S-t!}H+mkXBzU@w$2jFb;tz z4Zd6$O~8lIXR0rd5r>o=CIl<>9udzqRC#sG8yM&`45&Wc5IN?_{DE01UCZ=es497y zh$n<%;qW$3J(HN0?K@QWsogjqP~Ja!7adV9Pd_4?_9IY#8ewPqpmxsBl2wAFd?Ljx zC!z{7aTmVp&)~hXXIJK{H`{1tsWVX!6HV#0FrS9K4reO2W{Q&fi<)EfoMTiD)?QNE zztVVx{<`bhdQ0br^LvK2(uTG})+loI1>^3_Nxct6p050i0P= zVJJOKmXJ4?IPqVp`wGJ-7mQYUQ@CigR3NhHrhO*Qdx*VZe6or+%W5KOtY>!tf>I z-8Grtau`+HQ40_wid(g##0-BJ3ud{%IzD8OaJf{tHkXHr(6NzA|H{fJ>r{_M3x*Lbboc0~t0oHHDDW=dw;_a>60DeVVAg*PXND+jj08h>g9K5XS2e4{7T) zB+cxr-tkk*C0q0AI>T4;yNnf@IP9|(IPpyI|rvHyjhiw+ruZ6wCc!_q?au0T=* zykz7;AWsY1hh3&ADe$Sf;m5SWDy#UX7V7c2B+=ALfrkaxq@QUZMoXYK1KvniAv&#l z6X9l88A0EF&{K^F zZc{eUS`hRP_0P8!8?t6P;erR&{qs>GHi}{&Eu8(&WL7L5_U~4C zx2OJ3Uc0YwKe#9Q$pU$-n%Fq5ix%|_Q~tA)O0-n&{@{Agm=}M`Cx6@Q z=96otBeB%!wv;pF=M}e0Mt6-Dbomy3rDbf@*BQSza98W$mkZ==Di*8!4PZuAnrZPf z_vCfcp~m|0m^|K^{XLr16WCe4rgTj+zf`yXe#qrD@Q3-SGiT52v3`SKz_)tlVz9Z~ zXJf3eXnU12Uk`3{I3Labh^S@h5QR;Y;H4&8WfJ9>5XhQb+xPIK0uQ`Qf__zx%apnr zt6mZpftLP-ylCmkFDmaskH2qq^kl}AFhgsh>)nLZQiib>gRS{&1M@68=FF$aqr1!; z&M*VsnK_h7ZfgzO@NwZbPOJP#0K;(x2boZ)o*~Z-AJVuRfe3HXN-(l*HCgMvZkIy^ zjt>j;dmz<9w2R$m_0~SW$S@rEclf5(N>{GqF+uDRzfbHv)_1jTu_gW|FLD|rTgKq= z13Mq&g4*eJ2}<_dVGWQW_Bplt(=g^jwlw6tUD;=~9EQ+QR;9K-$_2{9nnQ1m$rPuV z;r9ZhK9ua-QxkjNVu7BfRWTd3dn^RQXZ2sDz>8uS~xp`53%8ir4uj?MLwkr%n;buj zR%y-mhV_&g+Tka#TX#7Oa$g7FX4ViPPC?9(;2KPQC`RXANXB?=@5GGCg-wP}REmR# z4qMso8BQ%|tdsMrXfHP%spC+n1Uc+liHZW%=TS9J?~f=iy?nt1&t^ zH**HE4{0S@^r?Kq9X1rU@6lUSwrbIPo0)68Qo*|_n&}

RMl&)wa5=OyT;y8|mz- zm=jv1>qZF81Wb-WurX6qa4SS_f^o91t4FjRUU-?pmy$lIJZJ7nKSG3~flwO4wzu|t z_?m3Ix-`-}D=D8KobyiCK~2}2;m5A@;y1-5l1O_YCagT=U9+U2=p{?nArt^?nz&Uv z(tqZ5i#Hg?r=6rKt5mivxIEsg(LtM8X7a#p(z(sYOs0jZbW}E{*7l*bb^7xSU3N-; zO-)7eiBr<5sJBv4k$*oKqw*fKVU-mG`JRM9q;=j*-A{)GrWT{Urd7XCX@zr67u z_;62CP2;-nFZi%+_5b(H&;4SoWx@wAr5MKLA5##0ToDX_jbJ!Y*uCuffk7^y3)`G5mI_V%c0V3NMJ!r&;Kba| z$E>ekHQxUd(?t};UcSI*HR-0}r73zRk~MCA>!t4KN{?uHA0fV+*o#^n{Phek?yoy9 z=63mC9W}}7fmXf1n7aI%SpF5X*952~%ueDwT;ACkTm6L2(=E7@=FX`ptuue5 zy>l+&>=TFGTOFKLlJgctwL6+G(qFxDmt9@(#qwwW&Zy7FN3FfiTyM2nt4C_9`I4wG zMYU}*bqnr2d5kAkfBv9CX1O>}}ySyTL zbmBe$Fd^Yqo|F#i^jAZgXZ5XH^KWYWR{jBt!u+GpHqV>CD$6fEDXeI#yIN_ejD~XE z@z`~rQ-ohj@8xqn4Vq#Bl~NPHDyp{^%}xQuGYqm8B(jFBY`%ix#9ER*`sJY9J;Uj? z+$<*Rc4{X%A>VlV`FSc?x&f_|*Gr;CqS$*cSj zd@`5a-U!~TQFOB3>Z9#3^Xe!Z!!v*TnzkBcPB4&q3`1DV&C#_ z6F8Mz6R#^{N}q>NP~zGV#mDrA9(Z(eS1ORVW&KnYCapFellxoWZ+(uR-gw+zYrX|+ z*5$BPSBHZK0v5$9AhH))Rt)DvT%zhOGW22%d$FdUM$0n<2BW?`%wvma(ebvUpZ(Y<_x!K~+|*K0 ztiHQ=eB!4iZU`zf(Oz_RO5F7Tc(<{2sez*KlG|%w#Q5=k0s`M4q+pN?Lg_ytsxwE&_j=)ephx-t^Au&*!RsS*+d3;CpMH~ zD}9>4jwI3tn=qHYWY7E{utZI?T8vUkB$*S?-#k(5HpKPOL#Xc2Yp9y#NsuelZ>Dc{{Id@m%0X+4($TY-J-uT%{Tv-jjUGyKXBB!< zSQJ48m$1ujwk{QTKmkyl=W%(I={tU`12Af9HVU{ds!oH2rrA(yPvY*=K1Y5Bb`4ol37yY<=tR#V*=FZ_E$P=oNEjgUz zxTlwu{f7zAWlG_HHdpO$+jg!m)zID~k8H3YmW#!aqVLmffP{w#boVOm@kF<50J5em zgMAglXwl0y%h24M;ODkegGX4KYCV6rz$4=+!|$0aHx#rF;h`i`xI-w`dU{q+Qb1;i zu0Zn1Uf6;_F|?Wro`e8z_|fbkfemrgg4-13lVLmBdJQ!?fg;%gU1P?$$;F~!eS#Fv z!$;KEmnjUelIKqFFcd38^Pa5$+r$oIEJUy|hO&%e0_lp4_HJELgF7LllRcYA-?46k z>P>UK->&9+uqEhM=Xu^}#z!qo{_g1~2oL!X0w|=AKm*zAK2%3iQ@C$-RJyIS^aER$ zLHm>)G_e?{GBgf`QI&hGW~MWN4tGwlACA;+Um;hwqBf9x*~X&Ft!ZcID17vIH3q?d zfPvbbm-l+1Mwn7`jI}7EDH|={h++jw9Fm7`YIAX$_}O@~QXyg*5%;1R?oGL`GToBT z9Ac?M#%7WPSxg?%lPs2F5Z4=^sBYU4GFN#iNx&_)#f{KH#T znc+ky!}f@pV=c*M#<*_#scB2r&y2EJX2#&*>TX{bN@^1B3r1w?I{V3_vabQ|C7@yJ zUINdmfuIEA$!AguL;3h$#h*C)+lYouJgQ=`t(G4_G{h1H2q>9_w z_)EMXB$t+DGeP46Ob+h5eAr3%4LqIZ{Q<=c$Yed;4Z15oukbu9xe_zgoPfS+J^U<} zU6}y=sk3)X8?u@f*0ml;M%w+LNoG9Q?z&W_Ty9_)s`QbiDpvkS>qWfh3C6*lV9s*W zpF^|f`TW8pU|eCQ59WGdlJWnz7UIJ*;quoM@1t;+)vz+8wSvgJm0()P&1Mq)8J@)^tjU6Kux-EvRPzxF_K7a35OjMaWPT zNBTl{39*-4=^4^c>Jcd%0G<)p13C&J21pjz{m@Z{uQoB=g$D96CFmQbX~tD@RKTV1TIOD_H@!ZQe82lCxM#_x7J1d0%9|3 zOm=O#8j-y1c@ig*>#59m4yoWCLUkPIEGIzA*%;ng?t@6hdKBw!w2Xf=m)b9D*AQ=w z)zn^#<2oXcDfk^0m5%8TeSES{?h(xJAk<1yHH6LA5%*0YYHo`tA9*<_U6!&!=>{SN zajBW=KJcNuMN5roQL_cWT{xUiLpL*6&pA24PB>*0YH}5kvi`y2V7Tp=4a7uIU90GT z{0op4fAEUvn+Gv5#!R0e1~AKVoD;2;vZ)U_E4)Bxa(98=Ka*NrRVG2qY!TV4lRm1f znkIHo`80892nX9F7W`fJ172uS7vLOxz>(Hw;%*QZH%}bd%Nr?hY28S)KNK;m_&H5k zR-#zK;7?(UOGmjtv=e&(K~fyT&D)1v-^TaD2U+z_WKo1)7DFA@gpb>Z(*7m{ab}xb z*-L6&Nhe+C-Pu6^6{uQ>4}~cv^nqwIPp*!nV+NSQ!)oPH&fZTDUH3l-_U*-vx_R@d zm_u4Ut4%^B9n4Nrh7~f*z$@^+ZU0YqRtAK_qdkq&S~Uw1SA=k)w=Y&-YHGS>zPA3p z+zl7%mTQrG4yD^;tGyr&rip7L-=Q2%#@6U+BY8nI`(r0`2#6lvfa>%lkUfB?7EYC^ zYJXP9V6=`Eg@Bzh171P$gAC3W^~wiJuAwGs808Bsv6b@iEHlY=r6{)YCeuiW>KNlr1>>7OGC2+nqj<`6~a8?PX70PyzmCq;Y$EEFEqO8WbaNMf$V z!R!I$T>#1}M^tMYiiZ0388-yDmgMIT5NwXxirQzIFl)7!YI%usq`*bpa=d48uU2Ao zCn6Zdn#re(G;!H8MEil$^64d_`?1L21mmc8y80RCC-ZIj`4skcGtLhk82Y0vzmy^` zILfh`JPk2{PT;U#1axD=|JeV*bq;afqk%C6?#8Be!)79+d^A95?v`5^-E2g^ULc($ zX9Ek9Y(;5iLK0zvTzfTkoyKf(d63xlJ+*B2w51!k^S@m?(GC-h}$p&MGy)S5=6BP zpFAjv{m@AoNTPRRc$5*8iDE#2{VIToZ~Uv_Lou`8e4zt6Fj=6en}O{xLXTGhw+s>6 z)c?+ZsQSX=(BpDHekzd8%n8lSM&(JR%rcTIte?d-4#SRHIy%%9I4?Ebb#%V=LL1k* z9h`_@*QoZjXGH=?Hy0X>55Y-~gLyWZiJ5p@%i3#>57xDlm3VwWyi{5oRdkkbRPCS4 z%K=p#bXO`Q5<<;S_l{Io9WpNrsm+N?a&n;F`mFM&?Ver6@J}n-aa>B@4{G8zO4dHbE#Z#S$mc?FR9Yn3%WKQxisb*Gh+s$89jX435h5t#w& zSg$+~OEqDXdZ4`P^5VAMRuva#vRmH%q|{ zh%kbjr!@74aS2ID%eBUc=%Emx>>{S-=ATg4J{tuRk8Gs814*LGne-X=b-h?=fFMra zWqfUa#Z=SI*w}L=s+ZW9q*>UwZ~#&mhQke+Ba{?TIgHXtqLXk0UDc=q`>Ntno|(|5 zyNq3Xc3V5oCWmdXmWiUXq`LJC7;QpbG%{dCZgY7Yt_z*KL-A#|DTEsq>t%R}U)fI9 z`LQas;Qcu4fFUf51MR=`3mTqGk=uw~II&NddGTl>DvxzTD~Gc{FARMPcc0*vcUqjM%j+aCs$(T>F!@PQ0&X?|YWjA4l3gox;)@~Fu41Oc16T;3 zt!iDQXNknt;B@lYaJ zq%tz{43^i3W?K zOLa`G>-a~^PqRjvl=X6jtv(k%S+3ko2wvXb<&E5;k$8@_p9-3v7JWk88@Y-G zUF?X9b^lsro<}Ei{0?OXSPatKZRUDlXhFp*mwuG3cyo7aR8RJY(IraWdG~^-ugXW} zdP_~JV5UT0l!WWiFr`KSznKmoAchbazgE1&6WFAlEhqxV)Y z7;#foAGMAhSNoTEA0@1A*O`!lW` z#5am>*jlzQHnuQeWT zu3edSGa{Lu9QF!5UYBmZ(BgM$c52`-U45bxC+`FrtvKJRt6yh$jmE~a`d__P?f;~% zo4?!68HB0r#wOFqgZUKcCe&1q0c#|e^%EL2K~dbP6mZ65?dqgECN~_^;#)7Qz2P|A zev3odq^(253@WDh6n1Xsw{pUH@f+J|C(H8nG|@BL(abi01%dKA*u+Zv(9XLG;cPR4S3>GQ(yg)Hr0Vm;t8jVFbPa=bl@?LEkcmCM% zrGF{fS92Bof@oRk7BiS~v$hVL>O+w>jW&XE=LDG0Q3b{ajwoF+Q>p7h9zKxk)!c2NqrHY>Hs^I@+JZK4`WXUu7);-$#V&u&`883fN zdbPVHT~;EU&V}*SV{gsJ$h2_dTELr3#MkstMbcglSSo8{E~{O%4S!jD>sAU|nV zf0Yoel#AGWE7(BOUiltT2G>8B9yYX9`1QuQ? zUM+fZyB(-HA`s#Pef{S63HZ%)!Opsj*U0j|v$%Fg+I|b%aX|QyQSL{;eAPFpir;K2%z@|AmwnTs;KWUr)6*F+Shcl$jl zd@BmTQ7(bgJ5TMDSA%&quB35#-Cp2gFL4yr+>U0$;P%_g@kIKgG%qYs<_#s(8PIFA) zk7?BfXCgn^3P0zuh&rS?TxVZ0((?yh83^okCr=SbE%I42D-r=cu|)(|GSp@KBNOl! z8y$}Sc2n{~OU%d-#n)I3ZFB259ow;OxYzq=>Mevn^Q4~Hr#avXn;}!io+hL^1m2Yv zd?=%E%9}|_={zY*85AJ#J4eSboB&pspqzID&<dwAO5CgEuSQ-Rq}%9IMJyxl#{)QuK+!fd7C3<4n%iXxqI21nnJpf3^C4{xP(tg@cjvquR|ITD%MAW{y z>_};pn2Ct$Rn8k-h%M_?ejH(7X8cjjYq^pifx^g6a>G_?dqRR6j0A2CJT)wi5;(dV zvO~e1#lMk4Fk1hjzymWMz`B*aY`pr)g(BGmL|H7AabftGK5Qy5)!opU_By)!Bc=5g}gSPNS&d=ZGs;-jv+6q;<)EXu;~D-qL>qh2Wu! z%nm;AY2|6b?Xl`mrs(JnB&dkf!%4Hsu0T~5=F5z)740z7}r%aVMZ9bK`^NDy6Ag|;lkSIFjD;O-&^h+Vs2Y) za){fYeqDYFE64$h1(wGekZ{S5^~!qXKvF=sfGWz#%*+g-g!6+vi2fnAC}28v(sK$j zTL!0!%|&-RIpc6Ok|@WQHQIhCrkuYD)mLL#o=OKNrFf(zcMWPCJPCB^8>4ECP^r?E z11K?v7FxBvv;4Me&JUWnrVRx2xYx?G0(UqSN|h7|=b_pPTxV6*y00mGLhj&@LnkK; zq+yC#U7cW@+?NxWn=R27eg9x6hyG0asd-cVchdOLzX7Z{a?SO26r~Ha>+B-)VXwiA zpx_XFw#E=@I@VR()+q2_+=SvwJ~cKqkx(2AgF2U`fQ=z2LdE3!XkmOKFzE-Ga5oto zt?Y(Hc4bF>i3PNB?T4D|c-x7SW3}wTYa)`qYejoDMqvY4HkW4rar#?Be9_8FsEK)C zUFv}i+bDX>Rc=sVc@{&b^!==5xmmGBwo+!#p++|ukO}BM4N-zp*Z^26m_+tF4y?f* z%{dA7Iwa^W3SPAD=0mL3I=d_XR;XP5RH$y0J<^;X02Nf&vZi+$qOFrX9)Xqd8TU1V z#2xi+3nJ}oZF%(d&sF=|-MvBxRAC6tFjeMg4fdI2z!izMO4)R0$ydmWRCwcNcxk!- zmKF8I0(k28hAqyp1C)BKJNmd$FD$Secffn}jt6VIQx+HOmDy(%Il2KzfR*=P29Cg{ z-Pb5;af(~EfGsRkmpv0$0^cc4)7-maFZkPCJ8P?}@u#wOodgzkzu#1g^9o9K<%xiR zd5HpiFmd@FyO#Wmh*jrKEZdD*6S{-A{UMbZ+%7U!5^@0!dk9(h{Fwj5GC~Jl>m0fV* zu|llf#B3C*vxg!_SqyG=KGV1Tb#05yo1*)F;$gZ67!^R;^;KxH5$-x}s9i+%Bb?!7Vf4U zEJ-4Y`P7MBKy;qUj=b*y~va{@ex9CRn$CJbZpSpD{(!1gl1wPH6N;WDWi}% zlP3#bT}{-RnE2=4Le^Y^09eR!MtY`HmU+cHYYo6~14dvOE|;Y)f(g7ZGj2*FE$xL% zH-asHgn+b27|uctR3FLQBmFTh3$cuF_Y9%aB_{6MjH9Q6hycxrrOxZ1*dlN&`E-db zdjwX|C?8Bokn@k#t_g{iwkff%GG{aYW)JAvbBPd56_VRE2IA228jSGbI@>i*I>t>J zu2PH%idTQ~ouN}8q)$`Ze`d$0bVrnpGjefN*m3O4N8R$1blkh>@f$|QFu8CtVS#Q;ikPx z8{CkiA|?xMaB1?hA=^wjsUdKU)9?41dI1UQ8;l)ZFQ}a5) z>vr>1|CHGMAsj7;bFeL9-a6j9ef2-2W(Hoo2T;i+W!|ZwBkhKJ`~&CG7iCFloE9nU z5Yi)sUOhh8W=VE>V?}l{#`Snc)p!E$^K!;{Upe8)ppR@hFlQW?ubzP|vA}q>JB2=* z`jQR7^oM{k#wEy-RbEB|9?G9(P%5Wvm6^cV;kfS^7`O4KZo__dHV((-Teer13LP5A0 zJ}?$8Kq~qpM0jPj6$|8M;DHI~kqE0WwgtdO^)?W5`)>TF;Bx_ z%&?Q^Q+{L}VLQSlG+lMPZ15f6s+`t9HD@rwoG{#AQDZEwUq{-sS@aQ^HNYHdXu%0# z4}zu2zO{g>VjzQ^tL*0igX^0@{gC7a>dYt;A#%FroE+eMp;_;FU;H11zx_oA@m2R} zj*Ht>z=03df5Hk9Y~_RyjN-NdtI?g)-(&+~%KkoBApD7St5)1?*xv6LA%ivmRd#Yh zIMCtCR*~PtK&`LxTY=})Gv)nbA9j8a8{mC#RpvUYR}U7;c3=AwI9~j!bIfQZCjHE2 zQqAd0*TP;8TCF)$U!e<~ZRWF{D8fcbB%|I3pQTI=%7cgq+qrWmB0PN0HN42(uoZUN z%-t}h*@V7n(?Y$~#+T12j%USb75`p6dKLB~p~FUqG6~Hl|4FsJ2mfw@ z`Zv*hJ9P4wNBJxj&~+ExPj3gi>tiIKb6#T79C7ZnA=ocI>iY{wjdkr9C__YY0ysjN z(!8bPV2n*2&)gLEP*$xAn^wKlS?Gz73i*5eFyJ#=a(;DV74Ov6W0o~-jNMbEE-}~9 zyQuy zRR7ExLoZ!-PW7hh8p-qPF-09<dor%->N#ZR8*EcmQ&G841U~#;E0KRFW?P}d84%NIp1MN46;~!; zQ#v#8cm^}yzy^H7=*3?esIxda>GAlh+J5Vm8Y|YLJp;gQZ>p#_S}|G;uqo`OY}=_l zn4ks=m%h73;8S=1Oo;ZOkt*+quKyJ9g>&%5p#H^YI(@v&Xw0Fj$vs3Q9cs5a*Zvb}q{aTv?F%ARQ&RQbC zkKY+zHSVa~_|jJ5#R5OR#e=J$RR8=agy5_00B2@NJ^V-B`e;zHM$Gf|+-C?s}dqt1E3mj!#sn?kyw(ShD2 zd|&q9&yI?BQ@1KytFL6G9u6?tCC_q!i~NH)Dzh^Pb>!C8^?n;sZ~V zxU9XZQ5Cj;=Y6Odls-*t^-@@QQ1Yg<_n6(vEw+og6^k*jTkinJ`lZ&njYiAvJI9>a zyjpQCpo&*YQl5@!0RijoadSPf3e?Z?)QZ*pj*5L9EkB;W4$w$^?bHwz0p{)8MQ{UKjy@ljX8y6 zmr^k1{>{wC?E3(&C2+kYIk4CAe%WK4!`LT=vA928^GbRMRY0jDZy&??^(RQDl07HG-(RJ@Emh(3Q#)L%_LpP3te(2gDKU*+ zzf%3#i;m30y!&tEn-55?TwZka=8fy*qvKx&IeH(g2(ydJw*`1EA3?u<72qL$_G~vn z3Po89%LYc9lZpd)vO#8B2Pq1FmDZV9p9|$ zbScAAL>wi}ck3bQ$ipS5($C0pALQqFtDW8^>sl3e8-_DaZ(bP_wrX1` z{cQSJ#x~;enG-(vBV{ciunki0P18pB)Z@4dqRjH-b3q_{fz<6rB)XE`XM@K_aH>X9_{*eki?U1PyFW`i zgK#`M-RHwur52e1oxq3c@PUwQ!pRcIryWXwxBnSQUg(~Dm&H$8{M3JpE` zj?js-|RSA@kk%M)+%R4BNNgQ63&OmCh{AO%avm=v;BM z7E@S4cVirwR}*#})OL{a{TNcZW4S~}w4G_GMA8NidpUMbg!#eiru0S2T{8T0yPV?r z%Y=C!B9t}&GMl@0*$guX5}Gqy=IKp+AXVMs4eoi3`MYxF#H$$7uaPxYV_z=h<|6kL zj4$!CXzN?N39IiHebU_Pv?ycrh^D;{a{<@Ao4Xk~nI;+8cKi@>Z=#RXYmdoQzdY-e zw0)jt3FjsxVxBC(5ba$@Y~sDQ zlEPjyp=m@BRu&*V+ZT2`3x3gdp&a#OxRmZAB|e+dyVG>2!rvx)m$;zT@2G*K;FnIpLpC3z1=E5Hs?yF#+(~}JsbPvg#9lsbf~D;=>OA&cEc=X! zZ`;7!Bs_7^*2s%_ADw+r9?sIr?)=hKSnO3RS4rP)uK$;s#_C_Y@DeSkY#GOH%!*u< z>2el_ed13e9i0(4MD)}~9`ty78MmO;%?EE_H~&zmZ8&dsX*}&n`ow~O=2UNCnS`a$Y(8iO^^Bv}bTWsl@xQ0K;N|!=o(x ze-@eV!7MQ%=1tw_udZbU!D4*A{fgg3HuE$OG+fU+Y}t}Q?Jn)T&}x;{Z+LW%WqJEr zO!fA3ZD{=w;;JqBwBj1%r7xN1@{%sm(?dzKi#bm_ui@`oG0{|GNpWx2he$qhuo9Y{ z728qLb2j-vy3U+KkBh_t@m*?q^Q;a1X&DbN-?DK-)<8xdsnz5iinfnBIW)BFgjn z?BdA&CtvXlnfz%^X)E@yQ2opo&`r$OyJ}~VS74^N|99{3z8b5P4#TFr5yOWIH21%s z(e%VTku_4PGQIt(lYo)Eio}-eh z9Qv@`vJOj+H&w+>+?~DdyqP6;J8#1~vyl19nm#w#e(FG4tFxZT+a z$C-Qjxv*>qk~k~bUgkj-Z1`W>Za)o^-bY-OWnw293pe*JyU|iZN2$>schff z_XTX-&_5z`Z$C!5T^wY!H=wc8ds*KOA71ElZU8#?GS)WXzxa6fPKTqeiR%SUAdWgC*$GBcB_`e5I2ZL-rTXvIplWzN=&kAi=kLMD$SAl z+TY$>WjHh~AnY72^y=Awe*xQ0^*G4oVUWm!9$Hx zFUzXJFLT1OdqsqFm4`F0iB_-WGfDqfgs76rz-)+~(W z0s)cufB?2;dxzOX4K%N}>Qv9h+Ottow+h(A^rZ&{ZJ~!B6mZRZ zX}y8OHn>F4F%jlT%Kjpq>usut*?4Y;*+6#BQtXB7nQouvE%+bOp-}t+p5|1nJYTV4 zw4`j8wOH{b)w_w{@LB3T?Jn+$dc2k8;#N`BqWj;JtG!vJSntaZ(m#ezT^g>>o#B=L z$6x$wProyPe1c*?Y~oYTc9@uwjw_WHy!lN8{jjE25|unZWBD`Yf>;*VbA3( z4~%SCVA|8u1MZUJbNs=m>ZNFNhqzd~XK>RkbH`cv-5+xGOm^-6Y#BN?@# zLsrl|z{cGBWnRaQX-IeXy~+1^|2~9%aOHo}!qsa`s&0g>_-o^vn?AQb>CVPBCm(fn zna2;vA28WAefaLLymTcv!6T*)ru~)DZFTJl6Njtd7dV2-?M$mv4-|Xf%KBv z)B=xJ3z*sx2tI33hxy+0CHrE)1z5QST%--FO2o)7O!ZOgTD#%A(SMMLr6+KmBi{9~>U%mTWjTDB*x`=#Dr;uWhrY&1vr z;Ok*6x|(b;|DYod>p3vG?;5@(c(X^Z?x-!`8nGt(jcw^6WxPl3i?Ykn;a#g1FExGz z)|+YqKyD>q3KXlzdQKB&4zo9c_l)a8oCez>R~_XsLa}x~wl35Q$NR|ARJ0eo=7rCn z7tm(Z^GaC)j(db~IL`gR!33`x$tsm;T64<_uH3nGs{7syc-*o<8(c(J9Wyx(EbmbP|OTw!8;ozZx)4>Z<;bpt&0}9I%K47y*!(2)~0b0`B+IigU(P|jU zRaEW(C)JHwwtxsZ8#~oOj@-71-{wVV_9`hv>%K(Wuq^!`vDcK@iJ|POjJL7ky9&y( z#jjN_f#+=zypDpnIfH`Ex$dhm4o=YgdsogBIY)F+Py}5)k23#Far6Bm!TE1_Fc)tw zX-~RukCH?$JCd2ss(J--bKov$hRp?^#0}49^1PkIr(f?l2SJak61RbWS`_m;N|_NY zuf@zKK!4E{5^#&n3%#xd7OBNG z>p3Q$shDM{tHivn{5^0gU488a_=~ch=p_jW)(&;v+B$uNyERquTw_oMqdzie&L`ck zzYd>o?(BRuf}4#(CnwYQ-l+M|WUr!f75Y1fTQ1TI>s|e_@?v;+2fwSh`aDQ3UDyk< z!*hPi)FE-Uv;16xaPy)ir@=2d_!NBkPhgKp_P8`ilYr;`{p=U(t;@1}V^$kWSJ?mD z_~s7Z?bxv`2)U1MRO|gDSMs$yiw}<&BPD42QxPs1uWTOVc|cx90i$JWnoibl-=m;! zs<@Rgw`Fc=CT_BNDDzIn>AeF(yHQzu+wx<_USSsZ9T-yvxgLEIKwbC%t~jxE@O*?( zllOBDxr`WCJzo!Mx6I3Y#IHo8bZCguM;ta5O~GDV^;tT^rltrrNd}RECvlKFy`vw zQ+H!YmohE94!%iv)Fg*J*0$R2)%l6?b;A9`M|{c9XipNL2{C!YzU;~9e5Q!)Ch!*x zz-HNHd+%Z1H~fRM-}3#Rh^7@KNnvZ;iO?0yUROCQoPg1tvRiZ~?B0>S@{H<`oi9M! zNZ%jxmy7$V^6+!GB2(EtR~IggFwyO-W^P(`r zUfEJIka|+A81{o!7=4qWjt^U%AX8I9p2~M6y(>ua$2uTYuX+$oSm9@t>m^ankGXH# z$ngOiLLuatC*O!(mOuUKY>XKZg(a9Y%vBB|w5dm;<7LHu&_Jwh$ZgARx+tD{^p?zd zjhPmn&%o2i>DmjWg1^PZ!(|7E-1X?fofF|zKKb$mV9Fys=O5r*%roGcO`{`Pa3_1x zb@3>Bs|gZshVEAo!V+>MZ>i;8B^=4lC!Hgln{r8h30@fDasExYD_d!?1v%%^pbpEt z;uL$H_uuvRUl+Mut4#>&m_1;VQ?aQ578v>5hnacZ!m{D1QuXS3<&tm0-Olzj%$ zfSHre8?6oEmBSmSANMd$6d_!h&9##|$99UH9{Ur=lUxz2%-0C2cAGoA;+{!rr|S%6 zT_NPk)?9^Lgo_6*L4KA@$f~B+6m>L0MCF7YUu#11ii(^8pHO9gE!H!Vs-bM@s3i@f z2MO6a%r?vd?vvV6tqFEpy|?P~y%osk*0{@X-Qqyo*IfI@@FBXEnB2judFmc)=fg;o z5u19n*a#Zti6!O?A@h3e24!QrGN(+KSALWk9?iN%;%u1HFUlG>LFZRVHgLZocb>E4 zoG$ersYn^PouT`nU^c2Kr@_A`#j>rzuchb9rA|v@qWD~0M%qZq)F4rR8h=;P$t4fq zI!mzqwI#YO;R|@zqAQdyim*j6@np8}!$)ezBspt1bW2BBsQvu8pti(Brk?{VuGtfv z9kI&KCaP~)$9=7~dXux@cLu~%hr_bvwI-({91mJfm&3gwUzz!}Be0YXtVe%XH2Yxp zKwOrV62c2T*X!V+>@vtbp}G#yHnMpt`fM2!9SNMOIGQ_S)7Uvu;xiOf?r9mhI8Ob; z|HIyUhBdXd>%yT3NVgzJw;)Ovr3jc%>?r6`DN=$$6ok+_B!E;4qI5-y4OBWp=tMxJ zM7o3$iby9EArK%1&H!D&diQ(wxA!^w`}KX-wf?NgoO8@E$9UR(KlkwTT2)0M>*q#@ z$4n((Oe1{C$uF}Bj?0eEa^#T_qsF8)KhuxP>m8|~ipsUwlWAxuph0$1zvadod&p{|{D5T_y znh?ibEHcGJ9l9uZTF%MI>W4{$52#qA<+C-<^USzqB7RCT!j=}=nGM+y5~}SV z)<3Ub(&j-DOuz46sFyUI6F&cr~}BsQHtc&O+@!)cIZO0CoqHL52G0b+otD@h*hp5oRCsGm6i9X z;Wj4ktW2+2-*lLl=|aD4@MxcTleKh0THD;mkX05}l&pK#*L(Pg#p=%Ns4ysy$ zLDfVWo5c93)(vq;=BAg-*rEt2T(n&pv0}m%?8n=ag_F8Pj}|)R)3W)-UoVy1ry>)n zq8R>0j?uV7$C-?1C3vXgneS)*B1Xpf24b1uD8GzpSx`PyETF+JpG>MWyX zW@M16`&iN(I`*;PVjX(i+dR~z)W74_Kqvo4bpA|chc@Pg9AQd>FLwKBLi=b*y#A!8t+vd{3!6!r_dl2OX}NA(*yj3` z!gFgN_{Fr&?9SUoJc-?|J_CdKGnfFM8kg@x<$BROZ+KR>eXw5H@5atM`w7dR$Qbl% z_2v1-r&1N>dCLRET*(fJ+@m!SffWVGRmxGMPW;)jixu`1-;w0o#)R#o+vo+C_(!(U zDawg^x=6wfO`gKjE(F_aaqZ}ZB9zIOsbEsoG6FT`yqEgoD=wHW^RYvxsz)!)jf23R z+!mWh5^e10c&OB*vF0}Jp@`nVWw4p6@I6j1Fr8h%&kD0p4Kd+aRI~203i@IuZN-hF z*$YKgCysSUtM3`tIgP@Vyv3cFLgECdd|3&H3CWJ=nvPp_%6m%Dvqj+@CZ1?QY|}^$ zZg&u2Y5;4Cw_H8eRg<@H&+QvYguK_`wH-`aqp(8E>v;L|#6-6>5|s~m67aREsy|_wa+@JqzrdY!0RsgTVo-cMtv(VAKLdH7wb)aj z5eWn&;9rf_ViPvrv2@QTebU=`#n4MHSGj|jx7!MF@HwP6%e~x3Yfu#wXD5A}@m=z& zT!gu*(W-S@9J=fLuEw;(75i6C4uIPP0(=fsmEbYl&0GU{FDqHY05?ox4)#@&^g89q zwxC}#=pjGi0fz_*4to%ePtFhZ(>T9+Zr56l_B$+Ao&ALV!LXl=CD;ZQ?_hTNu&GjQ z$98S4BJ)moXLc7{P}S;rIuD3m1=a^F@Z7#1(Hv0D%nDfMzKdGH16o7KS$`NO<6A?f zydS)MnB7^1g5qj$vvaH6Du&{JlEHr@uDGXI zi8@yQpEOm-*y5hKbQUkiFuZh6mDT*H-)+OARnmf8?%OspZ4%fRAZU6{K1_CIKiD)wuR9=Mum`?th1kz*7Bxxn3&GN+ZCrn@QWz_ z#)I`0)VmWgY;5)OO$hMO_nEq?Fv0l1dfu3dSLeXl6foNe#%9^bw79w<)U z{dA=mwIcmdHxAyqIW_C13Z18{46w|?(+hca?@&I$ZgY-LLmq3VeA4{P|nNt;j5)dEi*tSa?yfnJiU9}==YpKB%_%!MvLJjtGWy#nxK9p}Hb zvgc5RM(=Jn)-cDDYrp%iTZ5-~-`0N7RR5h0hHnf5B(eXvFkg)+CS|E8Dw7>U?QD&a#a5F$G-WbhzRD(isdkrMF zF|*UpZ&A{3PO=YZ5)8=^EM!@u2ickHYyGU(h;nzYJ%9{=p2L#TpTlP8AB%GnfxRoN z@Nx6!xv|^q=u11@%H;Y3jGnJ|iG4rJ$57P-a zaw4^Ev>aP$=6<=SP>JVKTa!uro0%sCoX;Pw(|gu$cFVuh(O9t-Hs)OD6~_`r@9i+e zPP$LV>$8L`7GI4V=Od2v_$r?3S(v-)@oR;(R9g8iEK}J}`r5v*&-8->w=D5Z^t9qY zLkIVdM1vx_VTOwfX?*J1t(ucx%es~X6zp_3c-x}veeHTK>76BgmF#sb5)Mh_6<5x7 z6%!M3u?%49utIVi8J`)H?j5mH%+6cBjdYiWnfF9ANW+pQ2?1G3w&CiR7nLSUrw3mG z!kQqQnN41#hbT!~x%uSRq%+B-?o$I?N%c!FKj+Vm#5}C})XKqwb{D&S ze>E$Y^8q8+qi>slE=}th9f4mM74!Y_6~BVO?HPIL6e1)Z8DJs+I@H5k_lUDIQ7wM; z;SFBaj`GwWJF-pi`b7<&9~&>Oe0zcQ-uH4p)~xP% z=$XBD{m)fZ4SkMJh?i9 zubV!yLfK0t>PGfn?DmFvBQN)ch=`|FH}h&FUATAJ)8{_V-U?LJrAKMtBc=6Nt$3ES zJ5-o^KKve?AdujAb>--XG0;ohERz4WkoWB6Z^fm>LXqKq%UZ@SC0A*_ z`{1wavB7oIHH!te%<@(q;9cFN+iB&QP?DFk(6x#P>w7O*!-jH$f(9K9N1- zI$)p{i+pHL=HZi$g3j*@y;juVNd+(Uy_TQhmBANmhj^h-oyURJ{t+wLh%2qpkf-Rg z`}Vq0yjm9dQV)GF3;0#2a2j5J=(3CvSas&eUxO~lsAMmr!^P|=aBngWGeRg-*oM8K zbfdy3FMOzASID+5J;m&)3t^%Jb(Y0KP|JAglxE-K!d&P%a1 zqYu*XF)~K3T)eINdrp=8BELNxosy1$?0|~hulfNMdPEg}Qb7E1^2O*d!~W-Sa>AUG zA1!`tGd$WY#U&J+^P?jiznv;)7rOQs?$iE|yR8wBD|_}=d0AIz`>(Oo-bt7)9uzGhzijnzp6q=Q7-xOfcgl-r+|L45omqWJv?{_}&Qv!n8t!Ds_ zXu}XQzB`}DpdD1XZ!#3z5twrZh=2s1+MDw`sIvwhO>x~>?fK&*F0Xkji0r?*E*4+t+-;Y5odZ1@Eoh+9$hTynV&;&JzC{iffeIt{hvTB@y_5jxHXM0 zKLFM}nwc@kNN{o?mC_)N9k}$~3F=7CqXOTlgPOj*X0vl;2?@E~!8;UhkMz*8^oSOh ztsLQZ{KEnR^I}hbG=@WgF58iheKR3nKsXQqw#Qt~twheR9>pRbwM-N>lR46;sdxRy zFq|Q$Sr+LPjQdD?+QdS1R&;dNx>3NUU>nGWzW6zv7*VA|P|PGG7-Y0zCO>>CF(}PP z7EPx3b_L22E|=Kl%CfOml7U=Qu*oPPkdUrt+%ch_ea@9ogEJUHW=_45qqFhu=j3he zz-O8?3^$uHvjOk;VY^$?$wisxyBV}=KT%VpdvK-hMaJnTh02J0?8OD+Kj=K}hIV!Z zQ+~fXY`8oS%@Mm3&=JnlagKx+E?Jolmyet<$(t}-#scC zwaGi&1g`m8A3HhzwPp=-0w^uFj?Vf%cn*+&od#(!8R}pBTKy(YR+b%9H66j86=#|j zw^-85t?K<~xsTzN-{L~Md>XPVCVak>AMfl;h@5{}vRIyjIwiugL;Uk(hUsbcZVAmt z`X%GOeE?mWxf*6oFgR#8gPBzPz2W|T5VEXFM7T$72&7djds4Z8UdkOLb+ljqNu_sT zrI%_V6uOWfNJ75pH&&o*$BY&hYgZgkG{63?>JLV>ReHB%UanXLb?_umb@@V~ zVOpidz991GQjyE`U~rydp$ebp)B#hj1xXHe#o+P^O&v+5r z*rXMrgV})P{P>b3Y)tvB0UPg5=6qR7pSCiV8u#w?QFf!NwnYw6Z z|1Xh(#gL=aM&(7a$&AFlTVHv8ey7oV0}7lhjEEO&R1r$Dj>k3KG|pG5eQa6B(**L_l&~ zcZjd~$wUA9!BBRH@5z&U{@Y3ZCy(DUACZt8Bj6uWKq$2FYU|b$ESVaJNKMt&0`UCLJ60Qo^KZM)K-i3Nqk;i)7t0> z+D*;;P%7c92Yxx7zZE(nn3)@AzhJYxoJDNatrfYt*D!+bz& zd&uzbENbntplFuRykFuVMxkip?pDv8{__%`YI!Z~-~8Uoc&c!}CIpp&D7Xm%!L=~- z(&68$<1*la$bb}Q>pFX|^=W?=NK0OKj_*Ie?qNXlh?W1dN&fywXEuLSy08{Ry;*x^ z7fITE_?=ab5kYs1*O)NOLvM zVKByS~Z6bGgD7~wZ1!y!VqT(S*O$qD1(sveUE!ALuf=E z(qXgE@t}{~{#-0GVey%)Z8?;KdP9SZami@Ab@x?)?*My@hF(N5YBkcG1OkArlnb$3ER5)!eSyLG z5%^C>g@i95rk0(%)JFWJ+Awy_4mW-9Xsfnajeh<7OR(%X%WtXWKW9gX&v6*}3aWIaL$ok$kU!IRn~s6ujLvR9W>60pz7Pzx_<8KA5U&^5>BiKTfqa&|7~~C< zhuT+e6hB$|g;=3S0vsQq1c0{E2A&8d^VBx)#1W!vSKgdzPZoc9?9X8wrJ#EdgFS+z2aH1I<^jh>#RYY$NpT2X^0>U*5F;c$~-GHlvic1`S!X}J(wX}78~?UdaJu_ zAmEHa2qDgem6%eauxA=4UsVoh(maBdhz`7yKKH?qZi^`}>p0Sf9f~A6)O&&y%0^4j#{=U)F+kl~pP8yFOwthM9M$Htrdu)zYNa-vli@pGjW|u!PE= zz!yb$KJ)F392M`;QDL%s(-Tn>`6gBAF1DS+!SUhWn;Q>x3lg(vZ#i;If zx}UWl!#lQjWVY&O<2-&;>)b?n$;uvNX3nlWJ$?18lBiGP;xY3{-I4R}#yXtl1Ct_x zlj2GmCH>EAgbbLk#D#DrQ#7wby__uYRq%<=>7R#QVtk`9Ck&?rG*4;syo4RL*q3eXe1eTN)M=FY#BWO_1* zXI&j14oavMlXUn-VM*jM%EO#mx$p22YgcZC_DneM1Z&lQ)Q0)7%fi;Y0@l+0AQFiY zOK5zU{q^c(G)Ev2yGA=r%?tUy&3KBc z$!14tSrbh|4et--CLNtff;qP0Q|X z-K%!xXC%9mB&nT*!ZsWDM`TF8*mkaE+Yd|6MeA+9EyCv<@D!C)ARnPl7Mk&JwdWu( z=0tC}W;IJ(P#Xe-|G854FVJ$Yjc)}AXq1haYE@OEf)LXdZ`alOO?evgsBb= zvJyY?Dogotg+NWLMr`F%?tFH-Nli*1LM$U=MM~I2_1AqCEhLjj;!IpYBO=G{COW@A zco~mAiyIx4O(5TML&ev|c0hk7cl#C6v+{kr(0AGpBBCZ1WU)Z!Vits;=qNW{%O6+?g+8tts zhtmrB2Q0o%lxE0I77}RYu~W*ho>k9hdPKM9*=r^xn)?kefkp}BcpX$}(V@9Ta%8{n0gPyk!}ng`H20S)RV_uE z$EA0B{26bVjH;2=`!@FrRNVzvyJgGrsvWXoa;5RZ!*>ctJD;z4tkh)dJIQwXmma4j zuY?eq-O}ex5MIk&!@m4kPd+0PDO1YpBp5@_q;CsS-#Tn8D@@Cu$Y0}6N=_~N`k`^A zpx?9H(HNo&T3!FN8Yr2eb%Pp#cwJXaKvgDWE<~hahe^bs%7kzCn0{On>%p%n+0F3W z2(rnedkgik@`N}Gg`aUk99e=x^s~g_!1s|Ww5A6&x1q5sfm(lgx}A&5%qw#%Ly+i{ zFUy&vSlPI!sW1H_!DsNs7x2#4T`Q8?C%JC>g#q{K|>1|3oQBmCsFs=1O!O4vz_ARK?A$zj3IbryeBTUY3RwLR4lkyicz z7dPo~5GwYC;f^w#Dnl?=g{?cm-I({IauWn}(uKz-|8{_(%Q{}+F;j+wxh|Jf96vt2 z*#Ro@g5awTiB;Q(DRu5U=G?FR+0zl>a^v$dL;aGF~4@w)(m6!y~*_(e@>6_l{-})yLZj62J z#B|Xhx5vn{J0;cJ>ffT)B#|@RhExiEeJqACK&&_4L&(jcY&OIs_f~M}#E0~rui-*# zjQx{dGNd<`VsqDepN#<9d$&x5a1FHEQ~tPmtLKzke9rDndU!c#6_t zUyT(^SV;oRwhL-2UkD|2&^@cI$boEMc`}bJ*AJs2Mh1wH)aEveu9Lms9HTV>L~fm7 zOO-r5Gpj2zK66GR=j#;nGTK8UKLHPrcu6)O^Emn2TM@ z|FE6<$<)(yr%d}A#V3~AASrvd+#H;Iu-CpV_0meG{)yq;ixI1{Fu5mQf8{-r5y~Qv z&o6!t62h@!uiEeT(%=hWw}ID6E-{H*J8LNZ3Kg5a<0M>bJD0eo<2FV}&b2?R<{Jit z!%_0OxJ8jSWP$@0oK!}7W3|^9Kk-^Zz?b;RgynM=L<6h+GH_^e)XMSUWvFT##x5x> zaH5K40eVPboRB%y@>@^(^kT9)N-o?w!V>oLdJNg7saw*|ZrAxR_K{&yo8^%n!I=1X z_N;sHH3??)!$cv7zr=4A3~0FSK4aVt$+hi}^8lyi@Z)2&kg6hmKMycX9p^mAzJDEst!5S60b1_dHa6+@&GV z9E)uh6*eq;)b5c=_hNvgJli^rK#bF#G}5rrnQ0O~glk)yK-+~K7Xo!uf3?@Nh*uzU z%EFfGEXxb5@9yuyUsHs$%$|=w$4VU+hqK_3hCJQ#0^%R0ZF{mJqEHvIwOiY3-r(svff?DD&RgC&0;e-ucj5NvNS znTkmriqdj$m%chK?(>o~oXf)z)#cunE;>hlNRv8qs2ur@!WTC0nMc>lN3p(|sQ5aC zRlmB2B#^ zv?F)lyC)V_V|c0++I^bgRZaxHM1s0oETMi>NbB@SAyS@AW<@p9t)9XHvADk(5M7b< zJE+Ha&lK?lCR*sw57kGLBELl`6M5>ol3mjR`+jC>^Ffh3qeRQ?`}gn7Cy=VOT#t7? z&Jtb{7mcq71}`G0JD`?nX$vJQwvs!!%rYj}MViv+nyO zpQE%vhNGdGTMVJd={2F;r%*Bik(6Jjh%W&n;Mj~5Uti3Ud*M4*XW#H#scWybyiF9M z#O!{&8EhOq+JWv3N0Gbnv?={!aOmN;aQe!5dv717<>2_zi5Xh|30^GO7CWeC4l}WC zTHI$cLNes*;O{`Ye?!sUq_LBdPTG_e^*@^;WVMVhQ!TM8xf-WxAwIVz7w2rS zFw0#?rs)s3?c4Vlu#Lyq9ng^H7;XyK0h*wU9&A~if19$dmbf?>@VQZkMGj^!mCpJ) z$}#ozuYMcd1M}=#iB=!yA={Sz(^vkA)6=?#8O_4r*J8eP`DNQ=RReSC)I$nDx0f zZ#mPT>pI`F#oYeY4C>FBH=q@-$}*CkHTVIvy;N`ZYQE06>)%;m8>bHB{TiUr+$qVv zbNR>5*<;39I!W@pW$Awd^OE0AK7oTJ4#d{poMt>6RVdRVA{lPkI zoIJY{TzPI}v?fZpa60N+l)p;@<%jSo`uL)J75%8~wMo}6#f_efB2 zXnb5zwr3l+oLBL9SiKI6yRgX3kF#4(*qp+ zuwqw~$h%Og7^a5gc7y4P=didb#;*LAhU<+rl9>SCMsT29KlHH05RP(lpC6XMU0dE+ z!0n27A`O4X?XWOwc<`0HJdP&CpbagUA&Z0=5!&zjV^K#;^s^zKaWcm>gK*1Jw6AIG zhT`@31De2m3T^p{ZmWVFj?L-GlSJAtyr^--fN2B&q@CUvS8;T$v^haR}r!$i)A|7H1M^PgMc&Ax3M( zvj=q2X)HJBf?(nUZC|lxifzMUAfg;~q%`>a2vPR58rIH#l6AaG5$_>9Cx7Ol!a*xn zb*I(5h}q1G1ALG2=o}HFDo}Fih*N$0Jzx3{j<)4Y)2dt^<$N-E)bR8p5KYByTD|HyKJ(z5Zr1bU z;bYj@XI5|wX!nK4D1pfbwE>zzG2hLzuRL|D$U_Z^yD$ zrbez69-!l?nV6DV~Z$!eWL)bj%$Jn4gyswk(-SDHJ!j%byeN8+ofL>14y<#u=%O&6EKig&%XW)7 zm_of4FE)R@)1G*B8H47a*HX@#D873k(1f3I6-M`3bkS5xW>&8`atFgAx+>;f(HyPm z3U5cH;V^YEBvlMv&K657nhr{sB>VDJS-U448^|54*?p0}X*e2o2G(2cvMY;!I$49K zz?6@{AF*ZNAoknm$G4`&t3tJ26E$Oa$=TW(a80p@#Prd?1R9THxf`s7tgusnVe_tl z0{=ZU@80>T>QfqFj{-GqEs}6?T%)#Ft<_*eIGO{AS5q`|7OsfEt7Q(R=dAAQjfG?4 zNC}tt-{4XMZF&nMNdtu)&*cMcL`)N!u8)`WMi^3bsgEC@ZlYepXJ@@8j4!>Y%loqO zZS)XY*e_4b5bG$oK$Nc!DQvasN_6UtTN1>yYA>-dI*lf;DR^o^edB1#Eei~44hWo zN?&DQ0YF~zh$Y<9#N55F0Ug+(^VY3Y%mI2?p0MbNz6pO-QH{XirA-d48{zUTG1(#b zqYBDI`p4Ju^2VuzxOXS_TItnhihj{*|7@k$+{#d(blBvZuh(RCl@+Gf>PIpydIp{k zeWv%ekYc5EX!oK>V^lI;EugI5x63ux>e;qPS%)?OED+m96Y?42=*r9B0s!00(S}r7`iDcTbB6*RVnKN%d@&qGPHR! z?cjy`4#$`7a(#Ue=&(21ts?k*YTML=GCPz0xQdv?oxmF+cIlpQc7l|>%9Om2=T~|x zS1boTPWWt*FM*~>8r~)ykYg`@joV@5Wav>`hu=c!NP@(>JJ$kg+Yf$N$C`tnMpzg&5Fw8?XW?GVYRB zm4<{*7w?6gWAP%>EP6e~pYbTP*@)EcVf`48(|^%PJf0;wKhsSHNk3B)jUoCQ#Nt>A z@J>r^QI_GOqx3hVOgayN6&OwL5#&xBndig$rK^=382&FCyj zPRa|?h_oL91Zozg$JJ{R9yoA<5#qXODsg~F0Hi*F2<}CX+I^v(bG9Z3^8#reqkL=L z@Wz8|$0yoW4(BsMN;VU83vo8ylkC~roF-A^ZID>*jph8`DBu2ZEB^&c|DVtfRuZ(DHNn ztdXVpL&%o$qEJctG0pt4F}!&mzWiMqA`lb6GjfkUF^Z|KAa*_`AN@tTekF!}x4uH2 zY#Ku3qQuu@PL9zb{y`g|{>xH81kn=uj-Izwza(;4?k&UQtwp!^8bN!XBZ)4M19clw zLvyb<(`U;{S-q7#uPk`yzgl(-BRfu#&wNjQ0)4%JsF;7+ByVnZ*k0ZgW-KS{&qp~| z3mVSGjwNF8ndNd*caW|Gd^dl;W5hBBuyk+!jTV+P1aE*wVkhM#0MzJ%^0ePI;>1sh8ddIbpTE&eAImS- z_UrOS5Lo=#H-c=gUM?BUgG|v?7KenFf^bwspj)}?ukV7sb#s|oF^!9XFAL-iI?Wa2 zrwKQdlfYqz$d9otZls!%)9K{Bjnet&{VLHxxS*S_cx7IpsZQpWvx*3mD~jtBJH4P$ z#|f@G5=y=5&F!kzhA~%gINFry)gzJwVv4g-$oZb8yUnmQL8cgCx+s40a1Eq znO?N&YYi^oMhX`QHvv@Uo{&80F%Z@3_@}ywz|{{rmYOS$`5wLT)jK1@3qWPl2y_t~ zXo{d*eYnQ*5cEB<=goaUe<94R_z66%np{sA0}X>G2a6EJ;L_kxjGYgHl>Wj6a(K%! z%i7DZKOy;?gV25GcBR;3pxbPnVAQ(YlGct_9P#G+gCj!q2l5g{O>pj@)EYD5aY7Qb zQMp$6a$P&oQT|QdL{24TRQZWmp-kbEQRQhY!8cK_b5s~ozft%WDzQD~|0H?Y;u4gP zi^blYa^8lDJoIH5S@?d8GE1)Va_V2EjR}~W+JaN*Z$68ha_uz)yF3Vds(4EB2uhQLBX64W&33aIcKP<637!IdZB#bO_QfNsCVQ^*2P5X( z+~DC_@SDZfu#EAlvJ`m#o}?(dU;JxuS+QWFZ9aVDL<>TfI<~U55WVcHyz+c&mP^c) zvxkH^hl($C)*v+sgGqLiXVa$Y2FtLgl(7Ub7R4=Nq3jZmRakyw3_XeIZq|?poNHbF zp~RiCXUm_k@qW=y2HIP<&Wmea`(!J;RkWk`y!cp5JLn=Zf^IHuV39U8{r*#<^Dk!Z zG=LygM%Oe5f#!1wI7bo)W_(_iW!VyU>s%2QzkU05&zj1|+M$^}JukqzHqndS296b8 z>c3@i|~Aoe&AvWIQ{=B?uoF1x;YONhmBr-u>>rW=z8 zI)*k?4>uGj|81p$0TP?_tFYS5GLt98Z*wRRh39NspBy(HYSLEcu!8~8nXzimXw9w$1{+?rDZ1{Eog^kNhcBV@9E_KEW;Vxd>i{othe(DlcqUOX}B(EHuPAub^ zqjltDj@Ql7`aj3EHM9#m5Dp39o(lH|@n)zlIha*wMqjFWfm)?iVB z+{~Q4C*qpiCYO)jbJP-&&;UIFFx8i-;Tk!)H@WOG|^59Uz^?oao z)>(XPEv!IxJ}xuv8;=9uk?FIP_YU2Ad>`00;1(rIZd}Q0AX~P1&9=u|d0(J(Fq|sV zN7R5iF|9Mt?H)-LdLkwnZf4-%cLnW(K1mf$z!5R`mPML$(uS`qKCw$A{*rpCfp@u$ zJyU{Jt{PS9%u0St`L0}EaAwr7&%p7URG)oD4%!L+knqqPdlMTB-B}6ck1!l9H1FSq zY|2GVP7%iQv%8dax+8)@XbVQPMTO{&v>B`$w6!BqaRoKuG}iQ({*@|{NT|a6B`6No z@miM_=p6hwW9Q<4T`=Fd|28e|Sv0Mh+gONok1p=6iQqkzI$uo*(!I*-T?vjfBQ!;& z&$`@BXo?hAnFd!8A*x#se~RO6^0>E4wUBd?J4DJuQ^gPoBzil164|9a_16mZR% z3`+nh8sXYY14mqaKz+beM0L2_ zEUBI=pNG3c>yxDW!K=SQ&-bUXBwe5jQlDnWHAGDI6h}cAIPU{~{aeTyeG|~?e#4c= z+Vy|_fh%)k%e#QbEg#oiMJ6}%$37GdZ36>2nG~Ch&#m*{50@0M3L?fJYbG56YWBdm zsRd-qmuui+i;M80*pnQIz)adzo4qe4(%J`xTjQ(@k-^W<4?1j%Pg1(0cui8E+d z2d>D5T`tq`r)(HILTeQ2?sUJ^YyEGhmu}xZ`MBS%6lfBh^7aXwJyI@bSTOTv{9eY6 zIrsibn~EmKO^kQW)p!RVxB)eFKZ?UO**E1XW%?S$UxdXpLKBmo3+uxwxe8wrV;4$0 zmz{iQsxM-b&63iq+GC0`uVQ;g7W3@JY3xn8#pc1wYRGTk{IR*30ut=HG~8$)yX6mqvFy&X81Tf(%1lyQFX?H73ga+3*+rY7Sk_ zC%VjOsBk-KNw_1tx+d7h(q~1j*N~p~jbMemb*7qe;#3JQ^;DQ*9CRJnd zcZ7i%!3{1IXHsacCKdC((He$MtHst{*z%$N7ifWITdbN{NjW%FK$}@%t>tk|Fb6E3 zbwsnQlB!~nm>mdDl*Da|!1dWx+jzZLjH?}?23%6ko-zc#Ml-Oj9sP9N!h1Q#vhn1mf=?YxID08Lg4t_3ol0Ud|fd$S~S#IJrzW{x6+;J z6Ynss8@e)uYKqMrF=@Kqg)WdyK6$6a_hvaeeWb0jxS_CZXWxfYParIyar93W@bZ3P zyIVP`iw#wzEBT)rYXFgV4t6jNo_gri-)+%rnaSlZ`Yh_GxrZfA(+R<&udQv8BQi}2 zM_vZ}f^f!ee0AW*;!NGZ;cv9eBNl&pIsxd;1yLv&dcfqz$|$fk>3XD0-|tp?gIlwF ztLLS#@vK{{zxAUnyu>vjYa(2KJ8=Kue?C-}b{SgV(NpZLlCE=n14;ROBFAMEao-CpkLl`CZtZtGg=2Le0|aW3OLZU_riJsESl5Kgvnv=(xJBdH2Kzg|LZJI%ehTik2bfXNNtLp1uK#E zYVrE4<$>(Hy0o&`#E(^&Hp?4*esy~xv635cgAn4*3#Sl5zRlH*B26(Uz{T>gM`?M^ zc}fY>E>N|hHlm+3Rk}lb)y!A!uZU-B9*mvyYB)VA(>>ZaDg;sZu<>b-(RFcehpF6u z#(3kN)+=sa#FOV-yGi=3Za<#WUvSzZ>R6w)#x{^#Q%vH;?4-qBgfLzAdV$XCrIX+M zy86pHhmcxU?r5S{CDx?<_@l*Om**ek$Uz4%0z)u^Hd2c3Vum1x~a3Gr7F)-i`lr5YkL9Ka#sl|>S z+^8=~lvTL8s}7SIxvU7$V<{g`IW8jZL5nVH_9$A7P%qj$wv0EEOoId6HT zj0*VR2dk8L&O?EfFU4d+lK=7$DN0SYBl`cvQlIEh@O0d@v?RRB-+b1#^gi|fVxH0=8;P)W2A ziD#0?_SGk*Y67xoZ~4F)3;#~Hl!TM93?I+2#I4nfta*j~s-{@Kba{V4*`8;uc~%8c z3@%HWdGtzixpK zN<|Dyo$BERq6LRHJdW~(Hq*4OZHrAOIfWol|SROe7TW(ne**7#%RVSG|iO(>ON(>-JDjTPgV!~`xPC$V? z+6@wrO6%?H3`(evTjRBVK}bDIavfafz^6a7JJ3~_>)+p`We1oG2yoEB-$>GVVezdP z!PWnO5uDR!Je?glr?oB2QAq7%7?KH+b8*Xj-Dmo|_s)v}Wn_1>2+C`nA#%t5ZdLej z;1m#D(@0|13C`EQ$k*}ymH@j)OggSAG?U|Uu|i)NsrQQ`XB0m%-^jAx{FqwqF`jJt>`NDLH>jbXs3Qp=DqGl-%8sKhGqXcJDQ>b5 zUW;?`fHH%05Zm$rr=7e*Qh~JDA{3SEHJ1=)m6U&dRmXW;v)D8J3Fma6Rw?%fT~19ErJfL7MQ z&-=7T0A1;yaO8h5Fo)TgP6-16LrBOLM-?2xhL8nym49qoHc+8SIkLHOuGN9_)fDy> z92fPS03mDHO7qw%)A3ID95H5 zl2B9#XH6UUw5OU6Di5IkEo3hs>A4hCx|fX`c+xGO=CpvQHa-uGdW&%K>mYz!L!NIz zpSA-p1vwtPC64<)WPWTxS84dJH?KvuFLzDE_X`ASZ4nIqAAw}2x(lRL{%0`R|4z{i z%;f)BweA1Ea2=2TzXeYIrH1+cjajvLAOGxGT`&o-%%+2J!Bf?naSWIMT`d98=x-gr zc!B)Rvwtv2{Zl!Z0^$=B8>$1CLy-hb3=7*^WZ)(jYwhA-KDL9ZYdX!LY+O65*}3*@ zSQ{|aM)e1e+jZqhNVZjT^K9CS3D-J_IB+p%xDs^7z|^HJw{!yv4&Xn*Gv_^@M9!Y` zUC^ouWFK8j*lJoHsby(GPX5;BKC`_)0CE?!jsVN?XlHS^!cJ_k4Vq}z+VVJvX6Gi{ z7p3$_SK3H)of+$Yn-3Z^u_^{fBDUT4~!Ebgpj0e+~HZXISTVRRw~u@E;V9Gr&x~1MQ$73RAeS z#>BmS=T4~T!3{&d7VbrtQKw7o?d>0fQ!hed+wmTt5yEaw5Jw1Eef;nAFl0EhE;~FD zmGE3ZcO@~r`2PDw9K$E)mjgHBvBTdt{3_)Vi}J2rppnA4+fKfHhT*aZT?HlPV}|Xo z`FJflG4#+2F&DAap3fj!Viw7*VXDze{RZ4wr>xlZUxQ-^907Ezpz z&y^3qw@mpyU%4l+GT3I$>mxa{O~afC61xxdgEN7n1hTDuDISf{h!t-s3AX_xl79Pr z^Yy0)WsW}%M0`}17ZA8~yU;$YYD#E%u5#+C0Zb9A32i{izD7;R?$2CyzSxytoXm#- z2_X8O##81jJ)AoQ$D5dD8UQ~ z34<_v2hF%d$-R@~DLSHQOcfSS23Ys2g*_ZWFvXACiJJd2un$uIWbKBHyG=8El{| zC%cL^H&q9@!Md8cjHrpfKmqT+SLm?I5n+G7VZ}xl^3oJVv3d` zRU^H-Qkrj=1KrPHb);IC7Uu*$judNA>VqKqoK!uP1PZtBw!Fj;~ ze7Yh$jUk2Mpr*AasIzc@mf?kPP8s%ON7leEcIMvFXJ@aHzyTBtx@pT-l7q>4<9S}@ zt`hruV&&u`e7fvomIpM_XZ+pdI0)Q88*!j4Zy|#$MJ%{(8>=X3IRwiyG7n6Y&voM-sBzAk7fakIe#R23wnXWH#+5 zI*E2B)fd9Yc`(xpZ4rr{=yAuL8rS^#zgoNQxTdmae^clPfnAUlfdHZ|WkFGTiHa0y z>#is)NTR|DDn)t?K|pX7qzG83%L*2d4hENwB1Q;BK$=tuMFIj5LVYI*0{Z#A_s4sW zKgcIH_ntdv&di*dbLM=<@&o_X4PkAPPhSa-4j}dPIY}J%LPd;?At%pUKkiK}*ak@45*y=3p8LrMqcIWC94^$Ru zf{<6^73N%;r(3NxdDW=jiPEU}^zYTelAWzn@l(grwbg^JVh0N}&X#ER3s>r&Xu?+M ze4tWZkruRj6J7g0(MzJFZA!DxN^q=NQHZVhc$#Cm^RPY7>hWCIq>ZNyw&MU;5HTDf z8TB7ggA*hrG0TsFca%U?EZACO*y6+3&p!+m zm}fq?{CK)D7&>_#nL4RL8We%ad$Pudfu^=UhKar>Y{as?G62avMGGvpF+_-A%wrjV z{@}y|9d(2N2^((QHGAd}5zZ(G#ImCEZ)%ll8HSd1n3@rdpFGMU;;SpkT7K z3G%NC*OvLxwlV`JcYg4JaE{imgX(K%V7&Kf_jhlF?URXn*N(9hJ`R8q?^cJ#FG{Y9 zC3@QWeiXtDl$G0te+~q&!5a?AH{e4Msms-QVWpoaB7?=O8|#~X)MYv!2_08xuVb$`P8x1 z-uLeMZAzfXIyE`R~d$OJmc13dKW z8P)_#qMQAf*T2B)G`#2W%fyUMD<>I|0e&$ciub^D!=y3F3}9%6$Ue1~K$nFETW}OP zUq0dD6k8QzI_cMHP+@}7=bj@a=vL*l`YwwN@I89(?L%tE8|2D;nsfX1ee#&l>h#|u z(3sa%?Saj;V=ox6Jy26tUZL>G&*+Jc;&W{sE{cZ}K0ckx|QecgG6}*}-mxkDDdrH%VK|E26F(Y8HD?r&!RE! zq*s0`*v~r?LU(L7MCeb(1tkl&2;B_8OYw4cFtv0LU+jDVwE3^v&C%0k}phKM*&DU$HrQd|c4YpMjKt8Vlb^8E|*7sUcgb z&8+^4coCrM$8AGQxwd&|OUKtG5fJ<3yD+$j3TWsDhPe6+!w7>S@z4QPRgULfU0v`U zoF^zw{S|$c&LdY>{@Aqvas{v#SlUqk2pQos5b;rtm-mFNw0+y)q{H1!XJmrk5V3_VoVIbP3l`8q)5etw~-?}85YIMg$r{+WfU)~nQ zN>$#V0FG?t{SS`qMn|%te7BEpKAp_ZrUT&;2RHsV8O*CpW*ArzB5JQ4HU|hM8zoon z23~yNznrrWi#jmuHPsyt%2O)lsqo1sFwDlkpMjmS+y;BH@zBPJ>J1vUqn|KJT5jyf zY`hWR7`6YbWe7yv?|Y87C}2F~fEaG<nCC6~TkPyxH}BZ{5rTI z0Q*RvsV4vV7KZVT#V<~)HHRT1_$0T&6()ZzyBWW*!QdGt4EgpQhC%X99YOstJ5H2{ zJ*#StFaZia39K!cdT_99mobRC5+~|v&W%TXn-UJfpFH5L+&ak02j{^6SqEDe|F_F1 zwuq@|^7AQo%{i~lsR_hkRd5tq=?&|2pghFt!~b;o%FY~6HDXxS6L?zHAFMi?@P%fmdip@2YHIV;dqO~$=es)8L5^2}jAqP(S^t_iOOe%&g!U`~* z5%Z)G->S+(80FVNSz$=d1DcdSy{K-54P>!~qV2IA4mLZD`O)QEtQ^X{L2G*-FfXQz z)W%)~1^-d0m(0dVjCcIy-qxBQbf4r`2#0vPc^Z5Wy|!KzJN}nKSl>2(R*j zc-pcbNMmr1H#mD434?azD=ccFq?R>NE0XHBkW8}gxmZGk^q*I}|H%A7`I1*t%51baeMoDhKltvwIqcslMsQ^1Dqa6u~e7dfQG9tV`N~jWK6-dJc$Ii@DtZ7Gp^P542 zQBbe|E2PK4N^Z()T`{!-r~L4O=)4i2(4ZMhh>QOS;k_Bq8OG^}Ly7Chjw_KP9|9%bdmi`0g*Qg#Yx|5s*=CGs7Uq&L&hLXmI z?|uoUX3urrXyFKR>`xHY$=m_yhg+U=I*LOs#ndrSk%VYy_*n>WOaR!<_}KbFw5VsBE)-$5ES-KGQp?k@1VpXu+Hm=@ms$r*p5b z8E}X)Sl%<{W@yO?$!i-nN~8i5)fPIO-{dlemGGCobUwMiSu%Y0wfmM7RlA&!u$Vb| zljii|QvpG#Y&qSpyu&Tp4ag;u^VKX6b#l4?UOWC|7dqRsMO5saR}Jx*LBKN^tw*kS zFn~-uD53+`)8<5l93zPAhSv>@5mQoA7y30@rc+SpJbA`gUI#dx{NN`PnmrskpoZi` zGY0;<=YTaQ0NKJVa-wKx3@;z-yenw5?KyOy(qc{Ib(G$c!I3-EQ}xLRW;CG`fQ<0_ z+F(SrW(H9w z>smX(q^1YFew||FSiE>o zO56!jCeS;VtzQfAGuG&t*s^@a8a z=t@nfCPgjTKHAF`aq0FC4QORC5T5)bKW=`Z>tL5R8#|rr>N+CSVTY1+y>M!rE2wKm znoQHyRHUc1n}<_MCJNHOObK;x)gqPrE&VA9r zacl2IIitNv5&N>R@U@cWAI>Xtgl)0q3#ha#mWF8jkvq$JHz3j!|#bxJ(Bkj<_yqPPr zT?F}cwVD@6tm_{7g!Q0ocFU+lC#1zZeZ>StMeqiF#Rq)U?Uem^0*Iw_UAN9N+ zo)$ndS6@Ftx$t?uSeA0O>1m2JG4OWhRqfHy(b>7j6g7O~PQw?`>lMHwzQiD}(Z0O8 zdN0Mee}-nNn?$B(hbPrXCs}g|%>Ld(Qy=)ZQ&DTd&$$+tKG*!fj8Z7=8_5Iwh!~cy z^Afmc|FDjIT55sIAWxLx0{y>SUfRr00Lx|21n_m+4`Tv`Qxf~UT~feXKnjE*dtO2C zBM$&X0sa81z<-QA18^E-Hwd5^AE)#QjE`Rdpep#l*!wcS5~%q4)pc09)AJVnn;Kq> OJB*H-={-A&yY^qY8ijcP literal 0 HcmV?d00001 From ee1fe74ac9cea7bf5b27baef85ef701f4b2c646f Mon Sep 17 00:00:00 2001 From: Liz Long <104389055+lizgt2000@users.noreply.github.com> Date: Wed, 20 Jul 2022 12:30:40 -0400 Subject: [PATCH 12/24] update figures --- .../windows-information-protection/how-to-disable-wip.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md index 2dac0002ca..9fac791ae7 100644 --- a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md +++ b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md @@ -94,13 +94,11 @@ Set the Windows Information Protection mode to Off. Corporate identity must match the string in the original policy. - ![Create Configuration Item wizard, Add the primary Internet domain for your enterprise identity.](images/wip-configmgr-corp-identity.png) +![Create Configuration Item wizard, Add the primary Internet domain for your enterprise identity.](images/wip-configmgr-corp-identity.png) ### Choose where apps can access enterprise data After you've added a protection mode to your apps, you'll need to decide where those apps can access enterprise data on your network. -**To define where your protected apps can find and send enterprise data on you network** - Add additional network locations your apps can access by selecting **Add**. The **Add or edit corporate network definition** box appears. Add the required fields. From 09a1ae8b8ccced609bcf704f60f3274d1ec12b4b Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Wed, 20 Jul 2022 11:40:23 -0700 Subject: [PATCH 13/24] update image and Acrolinx --- .../how-to-disable-wip.md | 53 ++++++++++-------- ...ne-edit-app-protection-policy-mode-off.png | Bin 0 -> 43986 bytes 2 files changed, 29 insertions(+), 24 deletions(-) create mode 100644 windows/security/information-protection/windows-information-protection/images/intune-edit-app-protection-policy-mode-off.png diff --git a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md index 9fac791ae7..ddc896d114 100644 --- a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md +++ b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md @@ -1,7 +1,7 @@ --- title: How to disable Windows Information Protection (WIP) -description: How to disable Windows Information Protection (WIP) in Microsoft Intune or Configuration Manager. -ms.date: 07/15/2022 +description: How to disable Windows Information Protection (WIP) in Microsoft Intune or Microsoft Endpoint Configuration Manager. +ms.date: 07/21/2022 ms.prod: m365-security ms.topic: how-to ms.localizationpriority: medium @@ -17,6 +17,7 @@ _Applies to:_ - Windows 10 - Windows 11 + ## Use Intune to disable WIP To disable Windows Information Protection (WIP) using Intune, you have the following options: @@ -24,22 +25,23 @@ To disable Windows Information Protection (WIP) using Intune, you have the follo ### Option 1 - Unassign the WIP policy (preferred) When you unassign an existing policy, it removes the intent to deploy WIP from those devices. When that intent is removed, the device removes protection for files and the configuration for WIP. For more information, see [Assign user and device profiles in Microsoft Intune](/mem/intune/configuration/device-profile-assign). + ### Option 2 - Change current WIP policy to off -If you’re currently deploying a WIP policy for enrolled or unenrolled devices, you switch the WIP policy to Off. When devices check-in after this change, the devices will proceed to unprotect files previously protected by WIP. +If you're currently deploying a WIP policy for enrolled or unenrolled devices, you switch the WIP policy to Off. When devices check in after this change, the devices will proceed to unprotect files previously protected by WIP. 1. Sign in to the [Microsoft Endpoint Manager admin center](https://endpoint.microsoft.com). -1. Open Microsoft Intune and select **Apps** > **App protection policies** > -In Client apps - App protection policies, select <> apps. Select the existing policy to turn off. -1. From App protection policy, select the name of your policy, and then select the properties. +1. Open Microsoft Intune and select **Apps** > **App protection policies**. +1. Select the existing policy to turn off, and then select the **Properties**. 1. Edit **Required settings**. -:::image type="content" alt-text="Create Configuration Item wizard, choose your WIP-protection level." source="images/wip-configmgr-disable-wip.png"::: + :::image type="content" alt-text="Intune App Protection policy properties, required settings, with WIP mode Off." source="images/intune-edit-app-protection-policy-mode-off.png"::: 1. Set **Windows Information Protection mode** to off. 1. After making this change, select **Review and Save**. 1. Select **Save**. -> [!Note] +> [!NOTE] > **Another option is to create a disable policy that sets WIP to Off.** +> > You can create a separate disable policy for WIP (both enrolled and unenrolled) and deploy that to a new group. You then can stage the transition to this disabled state. Move devices from the existing group to the new group. This process slowly migrates devices instead of all at once. ### Revoke local encryption keys during the unenrollment process @@ -57,22 +59,23 @@ To remove Windows Information Protection (WIP) using Configuration Manager >Don't just delete your existing WIP policy. For Configuration Manager there's only one option to create a new policy that turns WIP mode off. Otherwise the devices will remove the Configuration Manager policy but not change the WIP mode. ### Add a WIP policy + To disable WIP for your organization, first create a configuration item. -1. Open the Configuration Manager console, select the **Assets and Compliance** node, expand the **Overview** node, expand the **Compliance Settings** node, and then expand the **Configuration Items** node. +1. Open the Configuration Manager console, select the **Assets and Compliance** node, expand the **Overview** node, expand the **Compliance Settings** node, and then expand the **Configuration Items** node. -2. Select the **Create Configuration Item** button. +2. Select the **Create Configuration Item** button. The **Create Configuration Item Wizard** starts. ![Create Configuration Item wizard, define the configuration item and choose the configuration type.](images/wip-configmgr-generalscreen-off.png) -3. On the **General Information screen**, type a name (required) and an optional description for your policy into the **Name** and **Description** boxes. +3. On the **General Information screen**, type a name (required) and an optional description for your policy into the **Name** and **Description** boxes. -4. In the **Specify the type of configuration item you want to create** area, select **Windows 10 or later** for devices managed with the Configuration Manager client, and then select **Next**. +4. In the **Specify the type of configuration item you want to create** area, select **Windows 10 or later** for devices managed with the Configuration Manager client, and then select **Next**. -5. On the **Supported Platforms** screen, select the **Windows 10** box, and then select **Next**. +5. On the **Supported Platforms** screen, select the **Windows 10** box, and then select **Next**. -6. On the **Device Settings** screen, select **Windows Information Protection**, and then select **Next**. +6. On the **Device Settings** screen, select **Windows Information Protection**, and then select **Next**. The **Configure Windows Information Protection settings** page appears, where you'll configure your policy for your organization. @@ -82,7 +85,6 @@ Set the Windows Information Protection mode to Off. :::image type="content" alt-text="Create Configuration Item wizard, choose your WIP-protection level." source="images/wip-configmgr-disable-wip.png"::: - ### Define your enterprise-managed identity domains > [!TIP] @@ -90,16 +92,18 @@ Set the Windows Information Protection mode to Off. #### Add your corporate identity -- Type the name of your corporate identity into the **Corporate identity** field. For example, `contoso.com` or `contoso.com|newcontoso.com`. - -Corporate identity must match the string in the original policy. +Type the name of your corporate identity into the **Corporate identity** field. For example, `contoso.com` or `contoso.com|newcontoso.com`. ![Create Configuration Item wizard, Add the primary Internet domain for your enterprise identity.](images/wip-configmgr-corp-identity.png) +> [!IMPORTANT] +> Corporate identity must match the string in the original policy. + ### Choose where apps can access enterprise data + After you've added a protection mode to your apps, you'll need to decide where those apps can access enterprise data on your network. -Add additional network locations your apps can access by selecting **Add**. +Add other network locations your apps can access by selecting **Add**. The **Add or edit corporate network definition** box appears. Add the required fields. In the required **Upload a Data Recovery Agent (DRA) certificate to allow recovery of encrypted data** box, select **Browse** to add a data recovery certificate for your policy. @@ -107,12 +111,13 @@ In the required **Upload a Data Recovery Agent (DRA) certificate to allow recove ![Create Configuration Item wizard, Add a data recovery agent (DRA) certificate.](images/wip-configmgr-dra.png) ### Deploy the WIP policy -After you've created your WIP policy, you'll need to deploy it to your organization's devices. For info about deployment options, see: -- [Create a configuration baseline that includes the new configuration item](/mem/configmgr/compliance/deploy-use/create-configuration-baselines) +After you've created your WIP policy, deploy it to your organization's devices. For more information about deployment options, see the following articles: -- [Create a new collection](/mem/configmgr/core/clients/manage/collections/create-collections) +- [Create a configuration baseline that includes the new configuration item](/mem/configmgr/compliance/deploy-use/create-configuration-baselines). -- [Deploy the baseline to the collection](/mem/configmgr/compliance/deploy-use/deploy-configuration-baselines) +- [Create a new collection](/mem/configmgr/core/clients/manage/collections/create-collections). -- Move devices from old collection to new collection \ No newline at end of file +- [Deploy the baseline to the collection](/mem/configmgr/compliance/deploy-use/deploy-configuration-baselines). + +- Move devices from the old collection to new collection. diff --git a/windows/security/information-protection/windows-information-protection/images/intune-edit-app-protection-policy-mode-off.png b/windows/security/information-protection/windows-information-protection/images/intune-edit-app-protection-policy-mode-off.png new file mode 100644 index 0000000000000000000000000000000000000000..e5cb84a44e38dbe2e2d24ed6c3c3a16c5c13924f GIT binary patch literal 43986 zcmd41byS;M6fa1<6l;-EytqS)TY%zDaZlP}#WhH<8c-; z32pD4``%jbpLz3U4QsLBq z%qOc#;9ryQ zVHH{`%Dm9_0B&7idr)>Ju3;NF4-Ra@MGv+HPy-e71BcrWpRQC-yAkO`FrK`fwhr&4 zu4ynTukXAmX(&FmZGZFIbd=qrdtk#rS*$D$B|5C(IGGJ5d`&UOp~du%G53kp<^v|@M@po@RS1NAugt;w!sgi%+`Autyn6P8 z1Aqsi`tvXDU1iWmVBqzq*AIu`-{7zReyiW#f z-8>;jR#fHZIoQc^*Kt=_e>2}fU(D>DM{l=FdD7aHZU-fJV#F@qOb%z;ZQcSax&{Zk9Obs<)A=so3-&7YKCR5V@U~5+HB7crD zu~{Cpf!^D73*>8*R+bxY2;asH2XetKBVK-AB30kEnnaIV3?rMTNt*baMV9j?vVb(g zbzVj;U&`@xxVn?R=M=#~2(m|mBtak^9lx?P^a3b zV&<^aEX9>A=7wxwvuk944`h%>^df$`CB`{mphu?&&YjtA~SJ{|#ltUdcL<==ar(1oxj%H&$ zk*25u^`9*ObY>DAX7*4e(Z-1ETj&PcJKclW&~d88$W+m?EvLd!X=p&pIBqhc$Pa}- z7I)&B&Sb~DqP>)Hs?0hI$VvXPZkfoRO0XBbO#-O`caU4;Vm$RsQta>(a|DIZ5YcO!u<%7JS2;tmi zghGsEMDF4nA(V4uA7Z;h!OT7O2~?%#*GW9PF)m2OLI@T7)oiS=)oZ!DPBXRWkL732 zFy+8&l-`RE*U2&JZVGb}7OHI7Y@joWnf(vzT+8kBTzX3e90x5@-rt@n>GU7CJcaw# zoqXzY-D^u-jkC*&V-a&+*P-;7U`g5AwexII%>>}fd|!2($= zE_ax@Kn1MMGP7QtWu)TisO#C;BGQ|}!jor4%I%g$?5~nNASog)^_C6WeP^@#!s!a$ z(UP)ZTh&uwmad`5N5Z$sbA&pwx2GT~1MgVI%GVO|yq9;`HD7kDqlY4Shg0 za6jB5St`p!K|T_%&(KN8q}V<~UQLaglBx$70`*UhalFiq@Zr7U$Cb)~srEQ&!j-x9 z{h2lbG>?e}2&~+@TvSIK2E+M7ot5MR>T60o&;3mnABJlSZ-oT77oRgn_FIWlDf3O2 zr<=HT=y-ghCUA3@p7W6lmAq`DlY@Gt>W=JdS3e@JH4bJz`dK?lmett;W{2Cx0W`GI z)#^POv#RQ@8(gbl&kwgmnf8+CFm$znBut$;@wDFs$nO<`x2T6StlmUL8wmtbX z&a9z&c8Fu(^EuO}W&S%`-1o*C@<+ z{#+_aZ}m%N&V4Nla9_SmvGg9Qe$Q*-v%KweuI%r`yErq&P_Qhn<*LZjJ$Z6LX; z)S%8v_rkrVt3v9gp4j)FyitXEUv%y9sqTXyelllZ2J54+K;XofkMsIs*V#UCp6(lY z>og9}uF&MP1jT3l4W`|L)gs|<8hNZM%~O@;M+%h4%=_hvWk?S_w(=ciQgGA<3UCrf z8YuoMTP>*+xJD{OT|#=6Z*3#c1a$9x`?o( z@7f&M2=0uvF0y~%O%bhW+C9$Pry!UN_R6yMn*Ir$g^Hj4%&aECj?Ya{EbWJ09|0*w zey3jx;bo|kpHN=Xw(I8dk^r#lGK?z090GuX%&S!d$kQ|;@tf_x{|P9c<#00kST#l%LFN0X5?DAO)n05!BUE|awB2E+BaoVa7jvxO?DIXZ$;=26K z82~5X%=y4){9?Ib(42KrsYoKkHRG8VGB*i4@g$~IB`Ci!{H?$Qx~1f5sK(<^MqupV z_EyuIWsPRdm+d=I7ZP@!mwD38b68_UNXX6{7bv_#9J*}ZF^o?M)bbL zm9(ozIcrnPg#rR;Su%Ukou@Bp%p-f`;8y2zuFGa0mtv_5rC0%czKHK?Xc4#AE~Ycv zCO@BPoN;w5fPYGnvAwXvh=hwPi-HJ~AEZ|K^4rUX7f8?yd9z@4P}Jh!W^tPR_+$q+ z^<0z7;A$uMt{pxrho9OjiM|PRVPJA(Q+08YU~i(zM2UT+=fU_^;K2RjzT$ID-E6hE zWAkFMEVT>swX6r!FNE}*Zu#rc(kQoO*_F(f)|n5!AK91MMgAk6R;FxtEJlTL;b}l- zqthPh;_43W)H(WdK4bDo4hQptbY4xHu<$Trk-7u-VV#uQZ`YGY9oyPR02DNf05!`L zw|XNfjRDAsJyF@pWv*So4Z(%4bhHZ5vhFg1LtWY!)7@*B<;^z0Unu*qLxMu zX?#lEbEgQ4N1S8OAh82oZ&(SW(6>*?VjNVt@NS(;)#11}&TI;nsRZ+lOijVJn=r55 zS8twfZ6$_+VggZVKYP4fO^?VX@t-?Cr!-_Axj@(ZbrKE=q^)RgfRDOG8V#BTpZoQ5 zosGrO$A{Uu`S{TGiezs4A7M7h1`#Qeq=}a4h_9cz-TG5F_LZ8UMf&EAhqpGKqi@Qb zB$*!3{w)^ut#Khf8*cmvbO2F2-E51CV#CoB2ewati_Gk~Z}41uy=b7HMGbmQp;Mka zRrqJdTm|-@+Ujl+)BkQk`v0JY{a?PaWqJ!M>)sNk!pFjTdUqWh!L=K8`}gYZPvldR zUyRtl7r5WxFY3Q56aHR2k%WG9eIL*8d-3cY@E+nOx8m=`D=ZlP@Eu^(@5Og42vrtN zBg2jB)w>%g5d~5Y#p`|p(|r6-gkF&wR9N&cv<9+DUTNwxp8og`CB%o@^~387;|B)^ zv5w)l{zECpKPVXd;Xi!jTN1uW`Nb$~FlP)$r^LBXMt(9nG^ya~i{uM{_^M9s@om1{ zi~%wY6tg3h5cx4ATtjZ2OcLk6qDt;H2wk(*b_2t6YHv2&A#?~yljH=OD+Tuk5p@bj z;ePCN;1oTVoNNMrOnz3ZlIK;XMSd%20I}lfr3XaUXUm3HRV*+YH5) z;8t}T{n*)D(e^|(<|>Vlsc{!WqL2C;{72<8?Ct?&=klx|AoF;!50~ePOiGsh;IiJ0 zZg*~0nD0>~61;KO3dtZ6EhYt}@S0x07ROa_8%5d1_2l9U5*d16cCvW%6Zxt>A>4YI3d21?5Ju4@O=pw9_Au^?Lh>qizp;T5 z$Lxr}j zib`oQ2tSGn3#&u{b96o_h)K8Wsh-u5&~8*R2g5xBTm!lN&x~Q(YRHzJD_XV~A|%_e zqIR$u(V475Ro1?DUzc=wJ}7Q0*O9P1NI^*$+ww{FN%8~DN_%&G*ANQEJ*6d)^BkL} z40Jo<=XaR{@VeKPd1hVK!K~^l49P}?uq+VH&iGqICaA`bkSO}P>sxyOkJfZe(N-i&rELxYAHAuIpkM9z86vz z`MB{h?}vzw#`Ccm!AY7DnV70G%6kfKSXj0Df1IJaJEJWlO1?)ytPEdEMA0Jp{+78S zqZa|Ni{8d>R5MUY5AX_^g?+5Xpskkkog|}w6I)R->btk!!v#V=s=@*;;G&sm|B@#zsb%8^G3ny}cmX>)%UrUZJ_HMknwnMQ$;mo4BmdBuVHTPP7h=4E$8Zm=yJTc53ag z>5NO>dp80UC!YC^vq5$ZthNygc-UZS64>8Itu(60GfN*rE#g|2PEUn+!-JO5FtBN! zdEPBYK%`pKWhD~)FynJUk3+C`?m(Mm+@_PFj7|>MQ7T@V#wVKE>C2V%q+!2Vd1x>B zrmIu1=jgyCLnb_0tm4|QN&kdiVS~jDu#|1Tb@-jVX>ou0@NgjWsJh1FrU*>2$4g&9 zu)#Ot>h{B=A@b5qf`^h-yJ ztTA)TXwM$gxJOZW*=ql9_85d=;w8RAy*fkM`Z~h$Tf7fWOaj?8#5x>Dhwkl3>%@+r z-Z~#Lrvue5`!GQ=!Q@Z;Unc&nV^KmJ*!iI&L^!Or+yI{-`IqXxUv z{D0F^#4$v?%_*q1XEzDE?;$1yvE%+vY3Kh~e)|}NK>PWWgoe;#WfA|A4qx4bT%4)z zoak@!nn~!R@tJQ#i2RcfKboOW@s27ZGzV*KD9G;EH|F{iU`5dV`#1}Ax)%4K>@qQ` z#(6xMHWN!$@yEeyEX^DLq{9eFs5|9`jwn)4Y~pfuEVsE~HRRYGok&5AtFgHDbn?Z< zzo~o?0VYIVAwbrO@s<(~>x-@RC*57&5h5O%f3r2lddK>2nm^t^yRnX6^&gGjp?Q1O z(35Ud5b)*-Z)RSOjD^BnH~Y0`3+`#$gBTSw2zg3E4F5yxT_wKTLsHZzAjYWvEOxoT{d5?n`~#Q;(;qSBh)xcA z<<_d~y#JOK`T9=Pqk-j4M<3s(HsXod@Zy;7`)+DVI8(hk(0xu=iB|bO5k3)yBvu7J zhUDg<^kB1-?Mii*UfO!|Nzf(qGAHe(@9Q49#QgiDZV%O=IJBu+V^ooR#Fopt=$F=( zI@`&@b%kCm#a`g;HGPKYz94-==hYPxC= zyxmk^IyD2Lp+aoUoexX9&+2;C$#@q5X(pQwJ3#~W3(Z`UAs1i_SHF7b=XO+Uz;aE; z9`o_kJ7gKuPy3@jyIe$K@)2?o*6AL z3VT*Y^m9(1uTD2mjn5@@Ww%R1i8O8ml0;5@kc{i{oD`TfMT^jiZfvq%%b)~z5rJL} z+eNSBit9PCT{g#r;&?noy9UnSSbjxa)=x*m>Ri>FOr0UK9=E@hvfQzdXk=gx&y7%h z>;R+2L4e1UAc$+Wv5d>wMv$RY3xiyuw3}r_SLpocW_uw<+rs1c47QZZY+K{+AB8TT zX-$B*?cVHhYjpmw4UAu2eh<8ddHFkuf*7o+3g$OQFAw!vX1O>!Y8IVykkp7(lbfu4 zch3n`Kk>2#V8p>4{|RC;8u1>0W+wnfMKfE`ib7sr#g(VcUsffxscT&ASBn-N$~2-N zMv13&)~{hj+?qx#8RgioH{y#<^X|1WY?-I>&~DK;6z(*l+36rlaEIo?Q%DRzuZ~r^(|`20qU{dF@zor)Q=ovn6Elv zQ=crUE}xEpH<-Vta7ndw7aBX_pZBxT{n&*&xrNy$CM5eeNOV9dxN*|A%LWaZr2YcX3XO zlI51i$u})TuT}rJTxzM{!on_Kr{{94h7H?m=_qZ&({=qk@jzPMz3BWBui$AS6i7pr z-nVuHJ0^-f7^0$6T0K+NRhIKZPW$<^QmJnX5$2pr%LDxu!?^QMMg>PM<9kO_y$(7b zE|n$nwS@=MtbH^ZzsWJo>5snMDre4x&rhFpk?Qyh&Xg4ixJtR9Wd>J!$~hmA_cm=f zbko&wfBkSFwM1xOwxG-`d_CyEicj%?U@U4UT>0q23E_Ksw3>@wp&dVSK1v&_cBLu6 zh4q~n(_?tr!nOsJq2ZgpGFB@_1&2OuRv*H{8Y?4s&o;pAx6k36WPqzM(y)Xb`;%Ah zlQrh2q4iO7@uWS;g2baK&W$T8!}!~~H3gN`>PpZZ=y{yGKlyA1Yd?1-M;*aP~N`3>PGOIxt_&jULLVOF@zS`;z0F zD|UO0M#p-&IG~wKx4os~hFh3@fARcNeaqua&XjXHY|SlI9*Q#>VYI!VCphOe_+^Wk z+gQjey=JTZ%%OR&gWC~u6IS9ELv}pg%Bd|j++-fF^?F*L2jctdOU*o}+2NRjA3lA# z536y)Ge5K$8x$aAHKDFWuQgA5^1X3a8F%dM!DqMOfuy8j6*Og*laT<0CV>scO@l)p zYQ{+CXhGpiPksmT;lIszvY264N0T2Q!km4mN!8tFEY|Ka^oxx<60ma{GW+s;`|Iok zPyMO;JWS&XpnZ8u4s^WTquV)f)b)cD-07-znWd|m{$H#ECvYAv#PhHvQygPfS#w>Rz#)gp+Q1x2#?_B?)AW%w+k3cxIq3o*XkJ$efqm9lA zHZXDL!xl&Pt&5r->bd<-7dhnD+h&pdX#+f0BAOsRwN2lBulh*$ZOUr!uOB}D_hAR* zf*;M3%ssns@b^W6zt0#K&NSnC@sBt-&+cCDc<;~W*w_DK{g0522NDhF3|DEXeTEhN zFQl?Njy!R&P5I>X8jI=9Kb7XMO!&O5KB{9}-)2*E>guw+Q)Dh@H-PA#=pb&sYit_M zt!JzrifX~C*;ngkh@59MzagK5F%Kk|aQ>>?=F92PHeg!Ubz5V>J>XP=l7b$lwh+pU zpGtM|F)xW5hKX<5q;rZOd8dG%Lr?VZ^g!L)-~KG$3!2@&oHF}Ol{FmyNlmoW974ZJ;ap=Qcm;bnF&)cmAsl^lnb} zCdC0UbCq~Ic6QR~$`H+kLR+e}PT+4yZ1@of*3{_Yt~Fm4SvJ%#XYX6P6*{y&5ja%l zT^C-Wfu_|xX6VZb_^kPQYdNZ7IHE|8m$xQW(*Sum7fZ7uQ06KrAI?5=Ca^- zvVk?uU%d`>Gb~dQ>&BGMl*7MT8x;498)xvmB!*n@{7`mg(}$QG*Ef#mQkou$pM)2( zl=*2{Av%0xiAkvWE+~|h1%k!OS+0*R30W+L`;}i*ff~nDL~@XQPyM^apIm$%J(1X% z$jUH7cOIsl{31AlHKYvdxxu7ajVIn4L5Wlut$Q1D3o6Tvw(8@}%(_(FqlU<`Re3lm zgFg3V!Pm@|b-Jk_Y+aKIP)oBIz8-I?*t(8el5+TPGJBSRSKvA07OFB4BPeFP~lWoPdY1V!!i? z0GbQmR?}jKq77d?f4}py&?^>|Ph-ts`J+f+v*qB2O7McGCFI zQOh!>kCc}?7KMd%tZ|HK58;Ik!Zha5^8Qm?R>S`Er#HUUG0@kPOEVKhh^*xlyD20T z=1}qT#odpEw#3xEaKGEfam`&myqG3cNhag?YK~d)dtq9l6!ba_yb}0T3~!z{KKms) zeX&_$f*14pVj-26rV+I7hJ!$pq}Q>jet!@#c_7b;T}_qa8M>LlyXz-BJgNuZc?%U=DowEw9tb8 z1_iMM1LZV`?kE(k=~~T`m@11Brr%DV%0?>lKunO%!$=FGnM#DI^cVyQHr1Nf5l(oH z@%KB*&}fc$QABXIRNRr#&Rg!;3Ff2eGZ6bDjq^F;YxN*PYJgXPr&Wxi)w+!hBO{mD zWpO->wcMzl%R|u`nB3JR{&wkFeWGIa(sXH9|8NwNIbU|~*Z?Wm1kO8IA+;vSAfM%7(V zv&w&(U|4p8DPf0yio(%j9L^%f@$~!tqmM*uIDZs_z67^&{E#geu%Tq$d=TChzTkgKaVVMuO)*Fu?x|oBtofFaG~Ps1bdd6le{yZrIssg*s8bLj?YV z^kYo9c@}(>p(h@D)ss6lHN_US)J_UoZoyJ{@DJGX-3SVu-7DPD8}xErk{U*;Dz^GZ zXIiQPSBEWlBb>j+Tc~OEzY_Tu6v0qihz7{3QGdpj5fV55#4^b7yvk*8V@5bz6N;4F z2>R5@N^v8>?O#36#6(tT4^~_@I3L zD!jV78V|#VsTD*19I+Kg&ofugo3J^9l=%Fg4g1eoha+?9Mf9??x%&HzM(Cr1RtXbx zCsk}YH2kUBN#X`oY%^coUHE4pgJF0BzH_-(0lzqyl3<2inmIS_w%`~G1*{H-(3Mrp zX~#tB&E^j;BGDN3W_rR(WjrgNu;R6o)r~Q<%KiwMVT*i{9{66kPN%4UW$8VOmI$+Z zl?r`Xs>Te1vb&yMPzQ^;y?Kp_6$~g0-0&K_9^aLZRc^zqk6_z5?=pDQFDzu?t_h9@SGCnGv=G5Za=kR zMLXj$yvO-q=Xoy1My%+i`@vbktUov?vztM8ezw+C@!7{FJlN# zo+Vs-YF!YV_jWlu+)7DFk!K+O#=SJA8S;h~|u4hjccJUpkF-}vV*p=+{Uf13fTZ-Dc_tE0$UT-o;IR2jG!fa{%s zf{l%hr6sex_czS?y7K(aaXm7`R3=*e>-s3(UV^&Y^|=}XLREvB_*5b>Sr2nf*?yGohENL#ve;Ni~v;G^!JKVM2qx8|rOeN9T5_u2udjlEnwHriZpJdV`^dcHU~ zo4-mWVCbKNdDYlXemEM&u%dwdr)fyk6xeF`rMawBgmV{w5;4etw^znn_7j|+C(b%F z!Or?s)xEC*Ui})c%6El6vGUuG`_8FesjiEt;!dOKVoPcSHveoo9hm+ihzNWr?^@uK z#5Cu9(C@M~;3P9VKd&Bj@sU7$qRdp@-CZ!(nuV8S;WKF#T+nvHaiPWkEuYfW_~>ZF z<*KQow7KxLhE?$XG+ipJ1kK{hQA=iUE^LRhk5FJPo$&-kK0KZsKpA>Ce$HUy`@%=5 zW+HQ_j8y@azkyb;d-45AB)dpelPVD&9$xCAhnZQM7E}u(`bXR`m}`%F8NpHdX>E_a zdeX%y#k~`*l~=;_$DVkyIVLv{jnwvgaHRGp94}MM?aVz>?zvR{<~$9%?r_T4-L9i% zPc66I9O%`rNIM^%P)&j{z$uIyXDx9DP+pvqe3Qg3>m%~P$M-FGMIQqNiOufeY?$>1 zNPj`WSPQ2Qe{H4d${HQ3FLX+cum9KDlkqf(3U%ABHL;fW%5U<0myBB<6tLtY9H}7@4R6w9 zICVKVqPE*0>AtOVHUjk#e{y^-h%;{QGeEuSe^^ye_bcAv3_U>Hg!080C8cw@*U@%P zPL96clNRV_x-cMfdr`6(&~t^PM=t!fQMGNEStSW0hu@Qe-0EuGSj{uksz$-5u;FI5 zwT@5<9ig~m2%wr|j4W0vkmc5x3fgFiCsVtvFQ4byvWWhXsmC_76OL5ef?h370x;Of z!FU|ApW{;KypP4a{G#Mez=x!pHDddx`7R5oq@?pt8mk}@2t);EJE*T7an?ME0TH#4 zUykP4mL2MTBCGCnbevzK`0UNP2(Z^j<7$%HD(|C{va+|Xl{MSBf_EJ}J=TI;q)oVq zy`Lki`OjEJ{BtsrZVJwoId?|x=Kt(HntP0?#bcPC9FNm;<_@F?S9zIFKBm2xX1DLJ zx7x!wYgto+UGBQy6nrdb@`UE%*Gv?8Ze8 zS)aQ3rDSd32MxDzF;zCJEqwh-ej4Ax5YJk4ZpPB+d0uHR^_7?kmbsmbRPTCZUIOUQGdA^W8r6%`emzlgMazQqIm z*gQJoZ+@&PnAr2cs1?(gMlk)EpP4Cn_P6?_aHRh6sOlVILCIHJ zIsi7pS-q33B8s%lCp5mrPZO$k+li9Te+&dN6~TAxMYvm*mZ;brdQNpoyyoSPbo|(N z+hezuT8(_alIS0|uon7*JQ3&)#`i@I7}s$BL`|y@6B3uMJ@KGX` zd}{K!-so%%$X0}#{qr{PaaRxF5@AZ?!h)d0uWd@71-D|jQCuH^H*z5^S}H`&b68Wl z=t=}zw>bq&M|Opd2l*Oo39{1`4s*U&jyTL_VqtzAL!EFn2 zwp9}=Qyup8rN9_b6#DiZv6}DscXfi8wTs6-J7{cCZ%&B4$cB=LkNCcK??FVi=5aQ=wLoUA^}=nA`MsXr%=BO_*(PZ$6x|Nn$9wM0PjQ1XOPN#|zh@sI6e zyrXhM3!xd)qW!6-J~*L1k!PeiS3NDK4+Vu_eaqxp$NuuNIPV$FvzKIf*u5hGFIg=b zbeZ$n*t2tTIyM;qg&uC0j`#aY3r0fIQQO-U^omnjJEDje?n?nRosq0n1j-O&!j_?+eBz04&T($97Sj$^cK1`}^g{It2n zO{s&h5CEyp?6rj&)M!^tq0>YUZjfN`-MFa_I7Yq;*>G$^SDMu6BQb#K%<;Mry{7&= ztPY;H)i@)Y`V~ksFa4fEMsmmmZI>woe!ZzO_~lD`*4CceX##HQ4v4fsw*`Z!Dj#2h zU3!ySFojxv0trvU%e9RN&F^fo2ykpy9e>OV{-L3vbn3e-1pb_LJ3-bT=z)1X`BIFN ztP=jkGKCHW)P({)ii6k}7Z+@~QY)Bz6~Tm=rVj98WD$+YrzE>kD*QB|auOzyqw|88 zNoC@flf}{e1=TyCuG6IQS^6dVEp`WN?>#SddkGQm!6o zR~VYwr||T>QFD8}n>PquvwF`S1}*WbttqbG{gU;O2!W0~WVTQA8zIo$77_4X*xVi3 z8U)m-R{lI2Zjl@h^|x`O0eHF&em%3#v^GVZ?v8I%*}+H$fa|k|yEPT|9?Qj%d!N@& z?2ej7efL}ZD_~pb6>j&uqQw`B(*$8>4&ck!z%PZ`O!UKBx0h+iu*lSTJ)Q5p32&m3uGsc(}fGH~%4M zk9+rWzj~N7ys=3IiQXfqPmM$f`oh-RQwA9i18F}gcMsZM1UsfQ?;$1h_lJEaKcK)T zP*C54xpSC2GJLZLlTAqHAd6@7S=D)_I5hd9bb`Z~G?Yc2%V#YwWKmm|<_*Wn?+6Yr zFf-j8CVMXHN8z`^-oAmU-N7FhYux3QCGaz>YJkbv4mQh?m`ofb?f6`L866J=U0t^F z-|)eEG5p30oFtn*c0HeaBZ0tnNQTY0Wi-m}Eq zNwQZ1%fD5CjSTu=tp(&7WdTrNut9*-OC(!CX)uwl8b-iYA25JTno|7{epn@bsK=#I zJ;Hn7E3cWm7(K^P4V_Adzm{t6a9>|GC#HPo!k}L_qJ-tu{Ep}S+*`7TI5VYVXoZ>I zy>(S-Eb=$~^x5TuSWa2_M81X=+*$Dk>+=(dShf~9AN<(3Z+ChqjO1R$@P;K;C3cIj zGFfYH+jc&xCo<-02@je(%tx`xVgUWanLUq7$7#cD;?yj0OR(LUR>;v z(}>Nu`FMk6A(*gCo+O!As|{EErcTla%z*!PZU>)g9x;v@X1o_cjd4TwyW*&dMfiZ9 zI~uW5BAj^z$ZRp5c%cpk<|rx>(I})UFi?ic2;D3(#^72MS%QKniraZO2|d9nFlg>qc}aY)za(8!Q|v4xA~pNjgFt@i6pine&PnUX7##nP7IBWfn}s_ z1Z&b!eIUfpe@3x4glwO62$Y}0_si>lbh#4XQlmp~<%2Fog8o3sx#cP1EF_`rS(9Z3 z_>GuJV@iZRy_GmQ70n5YlH85pfxHh5`{+}DK=VnrogX7e)a9U9;zUPvur4vKi=l_x zxE5p8`O<_B@&t1*S41$_WA#EIe17xl=b&%X!VITQYmF}6ye2=x)ygwcH%SPfrXZT$ z8QNIJLJ$3_WvDb-;pVH_%(m5;MO0^n-pl)&t%L`R^UX0l!Y+Uoh7vepZOc zuRBC73CGSBXb$!UBPDndil!S?p%_eekA=bY1wdY$X4*J~|W z=VF{7A1Hsm*~y)DSs1$jEygYMi`7W@jn(#NleLH5x)s{)!oxG+#K_A_FU{05 z>t3dcfpl`m8po0S?e?^Dn_VPEqGLv0)zetsM9-IE3xH?Ynq0 zr4tVgK@Pi6bwZ3mV=eNK!I~Vmg48ch*O~o%Hh0p54N!*q{s@pb?)R);jES0~^UwXW zbN7BlulMVouCZ8O#5$7yftGe=j}#zkav*|09sL33AbCGstmH zH4URslc=$o2#&%a9mVVF<0%Vouv8ucqj)8=?43#*Khg_OvEQ6ze-oYiZY<(H@wlw^ zM&$x;$tZ8@l2X_Lp8upjxRp{_CQqz=jojmzv7U!#e4ySvZ?0&Wct82}N-nhGq4i?c zN_!Fq5t28hoUD$fgYJ~9EA8u-T^{k<4#t z4{`~(4o1pgt`5rbmHm9Hjm`Q;x{zZsFcF%#0 zRyLd&bJ|YK%}6@UY&f($NwZv~m0#Qr0@yBiT*;lb?XQ}3xSu}tINytSHrslix!hdx zXc&8jh#?>N3H469DPG1es;~?Agdyi(B|7$rzaP7S3=FL>aODcVF&|Jix_V^|6Fnoz!Ibh?lK~3WV-km!nz3W`PdoMj5Bkvc|ekLAc_wh~9 zN>6%*hHT@F-vl!Bk5ii~H;zO58eF=S=$MN!)2o+z(FK12rYU&_D zu?&$q!_nlnq}SV7Pr$m**n78=c23J|9&5yQUa*qLL(huvGOODurtHj3U8PG(JZzr2 z>4ug~%d=iB;!&Mim&b>?-{T+zUdpMnNsX2i7^ul6b$XcAb6Q$_%$v7)N{*z{WY~-a zyx+!=N$n?VWYu`#b*%lf{;Cc2GjmWkenv3cti-8dknNXKXwuriPo$fA$VsIf?Zyxw zt2CMY>PyQwav)KUK8n|hYjYx}?i={V6i$FjvN(Y2Oq)E`11P@AT4C{Bc&lSOX3~S^W2xTW4b1!k?mAi&RAuKmBH2$Z|3H>?Nae<> zU`&0DFD6c2QLgu?jTh{v+SJ5T)sbOzcPF63S5-dV{prKJx3TxmY#xMoRi56Ad23X% z!+I#6Id&tmqEv0gwlJUOv3tkOGt<_`Zn$8%O-hBkHV=+d-@2KW3Z&WmEM_Rt%9A#D z?W>z!zXb{ZvTbAVZKcSrlhCX_X%hS!OEDL{o&DI$le$bhd|WtsGz z%z!tnp|PfqSX#v>k$T9{+j~Y_cWb_Cj<>4wcpT@_VykMO}NO7CiJiEN6r%y^_RLMYEUh#Ki*I?uC_#e-z zC%vrWck_{IXSnA{Y-&e>E%Iu~nEH8q^U`^M?(GkaE&Y4LBh(H{o?xR@V=m;80rkzZ zsYr%(9g*3Xyl>g>ZBt06rRn{-tq;gU5|bE8oGjN&p-#;%Yn~(%Xaacr3il#d$}Z^3 z^Euhq>tNH>;c5 zG9FkAtV1euwt=Hmp^{~d^)RbfnMc2aRMF0^;fz|=M@zNSpp1HLN@~+xUzsmahrw`J zIb7`%I8$IaGyMVF^`m*NqC4&!4w1Hz% z3`6pUzWooG!{l4}?`+hAz3cNNP0~}e>@y4pQTqXl!*=^>X8g?lwcw=E;Z_u4+m_Kj zrQAfV%#FUWlW`mL#kxgAhmS!*;!WpD!i}$*o>!qq09GF{ebB0#_U-kK0#UN6ol=4E zfWWVkPUYGJ`P3WfU33Ajkm!U1^D>!--X?7q3j^yV z#dwhRq81&bOMKXbD7H|0rHpTZK=-4c=^3v6tKbEuAe))VlL^GWxVx|3dmTTM7Y3>( zP4>#$qa6(_MYN)pbM*whuM6@OHg58fhSZAmIYz~Y^OyM^X%3FrydhB1mLd?@&(f+o zscPgq?|3su08p>jm+~sU?0pBOzB4K~>Dowwbh6U_X*NYc*Ih(6L|3C`UYx)F?Vi}| z$--%ZQN(t`{hzaPKHeUjSe*<%h4avP*3OvjD=BTghU2Pzx5w@guYbk~w|_q|*Q%%*xGLKPS`u!++i6Msu8zYM7id^Py--5?Z6 ziO8GBtvGxTOFD|DVZ_$A#x+;_#D??HfKl_3maY_Q*%FD6TJRdKR%(Kl75=<~>%a)- zIlnn$W1{6RL#%S=OWQ+Zibd%mg{(Z*o33khUM2hyjBbx(@07pcA}TxTXh+A@33o%@ zI*EMSGp2U4D;aw$OSQz$6)|Bi>U_GmDVG7v9#T~#Ugnpa;N9FvU)PZw3=u-mQJ9GE z-=W)B7>j7*-yZS|O6A&dS#!tuJ~sh2IIl&lQi#+aV7AsbU2K#)2t_1(82_+`)7k8O zuFIWWNa1flQe{6ENvxd&i|X~~u2ratqgfDqTsDk?JX~^4b1e|IkZ5r_b)6?H(GTLU zdCVtgDx_FMXBwB+`l7J4ce-dtlLcTAJW6_pjn@xA;X*B2RT8vcVy%hMGIzC0l7Ck!5WjRJHX2)qts2c|5to1V;O96tzmn3-ED-_8m?UMlzn zO(*f5k3L`-EuIQ0doE#{T>M#@`mBGknqBM;+CFVU{*nE9N7!fT56=m1r-9b`j1n&_ zJdC%uT}R`CILQiLemV#ZHEMQxUNR`0iGBLeIXo;C&m*@dXerC1zjQ61FK|atM85x% z;m%>r+T-Wb_2cIrP`tf-hvnQK1!9Xhi-vA-rEWzgHj-Dzn&}ckjKkqlCtmjjvFzc= zW^{i+k&oO;vIo=An@doSW*Ta&_nyl`y}j}XpUgm<>i`4+}sQ30}m2F=S_ zd63a;Q_p||hQ|!DlV6Wz@C?%s}29`v+-qrWY?$6Qb4lMR#aFEuj!ijK*bzHujvx z;WR;dk#8f}U0o+?*F01r9V3SgilLUU$M0-1lEaC#TJ)eGkZ(`<4s@&d?S`Nh%jrk3 zkHrJhgN*CWTiWdD@b9|`-9dmtmo+o9IKEGJFg+#1NPGI~qA(d*oz5&zT^Zj;K3JE^ zVpF9?j(_VT18QTZ>k1>8v~eEoFqgzYJ^$hha%4X(6Gz`pJV^Az>9DG#`-3Kg5uU*f z`GGJIeB80+c)g-$O`VkwL1hLswukN)sWsSZwcg0A=|JC8Qj!8%uW;qjJg(sDp4l!w~M0>#HQY?TBp)hF2TbrfpE*VgP)RV zXg85mXMI}kJg<|IBRAWd9=%Q*=qQsflYqZ$jCZy*Z>|XGshST@S+O|2ChMLJ6N6St zef=KY%&~h~q8KP~9*NUBRZL*mO(X3T=HUd&${*NVxB#tAPF;(9;LeIs)9|Yq@ata9 z%5WYKbpc6U3R#`gUJ%!F27(M6%NK!3Al>1Kz~>H5uNY@_hSrQL0aUMzggNh^mnCu(-7%^q0Qx+LECmo{-La?p&4>6vpXqn@&K> z^+_W_4t!5x7XGJSo8yc*jqA30&EZ%9JI7G*o%-MA7+%y4w;GEN4_oAUde$|~I4qnq zGCUh9TK8F*i`Ncoj90-5bNj$C||=`=!^=XBIpmr|S%)0ZxN)RSxHIjlV4 zG4Q)-!bUj!Mu{g={_+LjM%LV^k_lT&Q*Gnt2H3+vB7X#BL9Tu zPs%bEGcnBLoyFMdGG7|;20da02Ol$N7!H;OoK&o0%T|Yoh3aO))LxL{vM%|CkauXw zTDmviIQLNFOa_>?`P}?uf?DZ#_*_XW#h;b`Q%I&()+B^>jaI!@ryM3^r>tc@u zhE{7oK?a5l2TcZOnojQdvPrd;afn!B(Jw#lZ$Bv>mAwVzS~TSzSH0mkaB4NbhsRGS zZbt}AaCR=M*%F<>ag{`s4=Jti0Y6dc?KYTEqDy1Q)T{gHpxPbZ5XPtvWuKYuu>#R_ zAK8%31KiqC6vCz)^mE^c885cH5&vGp>9r8mSR+^XtYg5+{IYhgXQgm z`|sk{%iGA(^q*yG6oZt5v+;x&mq}cplvQ$7D!dj6l?*SF^cs+-?O(0}K{;D%o=fVv zpK1y*!F=3i&Sn(5J2Sp>F0cgk zNwA7cLpmf~AE_NfG7i@;Dv`h`ZHJAAgD|7~w@_90oyRu5q@`ex0?LJ+N+n|>q zP$%A|k5m1&u_q_NtFX*QQhnTIOxF=K75g(*T>aH%5V7MYuAC#MN2*g& zyD`f!P7jhZTsCLV(@WRsl={6oD_2phx~JNh<>>BQ{1=GM>RMU5+^8H8mIMI!AF$=kUv^!V`Vi{;oVt(k?sI4NN-RC8PKq>~HWsVB4dw$(evcarVF9-Y+IB19bPiLEg;=CSg-&mmka$bf zVi{IIjT2t<7_GEbBh$N_lV;C7sd*XuDbJ3TmPwY~LDyHOJ_jv{`3A;N>@d~hVPn$d zV3Kf)D3(>TkTB1_bT0JtYRXECX~RWf>Eq}*y3s^cTKb-Q_SK%v863gjufP6<;TwaC zb-_Sj5^nU=)k>lk)Y!pZsiB9K znH=kwRH?d;`4Ub7w@3RfHw*d+B@Ai4Frfb@O#>}>aDH~JjHS(ebJZ1x;-l;%=Reho zb2HxmRiodhenbb-^JBfW%>EMcwHR<7->b4nZEc#6b4e>S$tRQ&vEQz4i-Nkvb>MWwCNp6V|w98hy1qm{UwW6thZ6t;p( zUh}n%Bn>-Hfe6&04oMo>lZYiQxIB=NrbtkPJX-bxq+xqH@jAu{AF$G`6Z5RTCi>O2 zcy%G=ok-vXwzmH@Lg2dRCr$-jUqW0^>j&)b?w5AAV`1h7Y!QzychNdAcU6vmH9C$Y z9C&y~QfX4#mLVEzOp3s8$&-m)XP@TldW52!Ox$ii`S)ng*}@mzhxeEVt(ACKR)fB? zqu8m8SQDntwfhw3>@Lu ziEryv?6(@F=|OxYv*-b8`}~=nM;(=LuBX}FPaV=7f!Rt`DhVL6q+`j&=XTBS>Z)g1 zY!`Kh4#wW)yRL99ffc5Ypo>ZN^bQMZPOp2%10FXdx4)sJLK-6as@u-$QOJPQwnZWR zEkOvXPE!@zXy)Cg+6s22+W=oV#u7{J6TbBX-o3%tthnl#?&IPpG1KZ_$kx>ERw0gLzaujX`%VD|ASa7>)5nRx%N zp7o7lsVM$Y11LT*;uY4d`dG_m9jQj#Ax0VQwAS7nXYbAOrU`;RA09IU1ywy^3eTOa z?wSOO~4_PGk7>Vva@+uq}iTCL}^@h62%{vVJ}_Yln_QSI>v!Id^sV z--*mx3HDVIv0^Uhq_NhhmgSGdj!jcv7x8OABF?!FuENXGyFCzd9d)tWD8c(3u%dER zhz9V|s2}I4H8V4tw6eRsl7U`9>tu2o>;A{&LCx zdQ!uCC{kOoQ2`UtFA6w$WG4(2ayW zTrVZVx{P>~vD$^w%;2BsCJUR;0bfS-!nu-<@Ao3*YygFa=GI2`mC_i!>eZewPtOEm ztIEyA;pSA#@z`9bp%k#&X=oTgw-h8VSsycZ!^IqI{rl#|4LS-zPKsBI#LjV$TtP32B|SfTAiQ4j8a;*h(}!Y zh?_3p&cBJg6YYhinopYv@}6F7IaBGa?shYg!OJzGpieq;QO`G z=fuavYzcp(;>a&n3T}I`qGf4wMMyJOd$o@l+Kvx=Ct7C1cS=1%O0J{U?2XkLb7T)G%j$sMUK3T zq5P%$I}YRZWVCP<`B7JaEhG<6{u;Cag7Rp zf7qH(Dz6M!Q$|Y>s?aNcsrA0E%Iv9q=4W#pQ$cE9TXjmUUTw=jp~6b8lfi)p$*gog z)(3aT*{fkvdGc5-Ot_*P%QiFwrAD_}sMadC#y_Y}>p)c3&#u{}okSs&M(EV` z^be4#i2fQ$d2?R-H&RA5O5I*KVf(He6vTLrnE9I(3yPjeua};Hy;|a8G71J)B_g$CNC?MkUboHSsBI>6-AO+xi?XO~fKChVUz$q!bW7s@5}m@N+HN z=?ditr7}j}o}MKw%ZqSY)#=XT#W9_Y@T9R-2gPg;4ctj|&SyJomAZH>yL?rm5FN+G z(~tS593@A461()3!<N|E1M}m(+~xrIfzfVbtSrPM$h?9Iv`A6g1|NRwXLMY8;e>EL z;N|XDNi*pu4#4v5RaaWch7CE&yQ@t)8n|VuXNM`dHRU8cBzEqx(<9(KhiQ*LBMF&S zY9vxEb`Ka56LB3Zg`ICN3GK8HKCLLzdk+q~aTdMZv5<~P7L4T|!b!~mY3lU0d!?U8 z?182HiTh81IbwG+Moydf=fx1Spi%gZGfSqGTsGYgbg2yeE6?Aho2M9cVAEF@HeLoR z3;J~%3ry3`mTWppC?%J$Q)H0ZtWf^3ljlFc4*&5n{zNLu&l2_FgP$nv_Bvti18hGJ zGH>MkBt!bCn)!DVM&9&brBfz=pMYY9Af(Z5oX=@ zk*VpDni&Cf#diPhv*K+ngTd(b*n!ChIuJ8+efJ}rOqpj>mON|5J=X%CGXj%BaMzJ* z;xWU~P0;AiDT*vaAB^OSLav4z#{5zq?0@&q{@C+`@bJ$Nu;d+-S(tPJA{f>mm9d)o zbR_ZZyn${=dQCn8l(1JBAIGNIXi>kGaY$Bi-1*L{-v8>=0+X80nSCE7m(@ns-=E=K5sT(s{N18SZbG99>ZwUY=|6doq`8ysGG#|@wnFih^ z&zS7o?q-u&H?`Yq<$VkM$$%LjJ*&9T^bb2H?-9t0DvuMY49SZ6Hka~~!)g4TzwVcE z>Nuk5CtQoi>+o9I{A^pro|yhBmQ~5@r;q9^`bnNO$N_4`;yt~+6L(UfELo))%Xlk1jKquLIQI=S9NEUYOm)$q-DJ$)Z7_Gv^X+1e?7S} z$QpZ}j6a;++GB^K=19YJC5~F?r~{d3z-x_NUs*48a9!klY-vCcqAzMOXeS$aARH`1 zYnw{hl^b^uQ@g!e+0NFAEidpxGpc-NQRoEC;xJ?oxhg$0nmu(ij6d)tu~gLY<^ zhI(d`jDy$Bs-a-NuT3LY28<76P^ZS5N*Z#9YdI=J&}PL< zQct29)kWQI?G}LAefvs1KjE(N9Z&LiVc{2M6T3UHr;R=I4m-{eRXUAqdJLq*y}ytk zr&p;;-xS>;_1```2*!${q0aGbjvm@krTa&7H+u z{E`IA%{cCqu5(n~ItTX4vg7iz&HF+Sf0K+lx)v68(+STHEEJWOm<8;cCe8(G^#+l>KpA3Yo8GoPVH7tr*uYt#f!gQ>8f^bC5jsixVt z=ejbnT#i7=!t~EX|IGA(3Z!Y_hdcz^r&H0^$lJWgZr1?t%p$$}8;$>n_m&Py7JbV; zuvbUZc)wIfLK66=FH65gJ9KzVAy#x(caWvj{9GvRK3=WK9}J}Bt^(pG(=H@T*1~Jd ze6$?{vOJMK$F~2A(gPqX)I&ZKo|gejDVKFLg0Ka6&7rFqzL4XYhvkUMiq6#&-j_&p z|F>G3MhLs@JALfxQ`986J3rs2%DrVZ7lFt&tA0R96 zOX?Umdw_E+?oQ>mkAPz`T24w{^u5baA#HdEISH+ZpEn-kq(nP1NfX||`U1eY08Idt zpZ9ZQ7g>0n$UW-)GyaI)}D+nwZ$yvLqaJ%R(T-H1H4Oql!)%>lP@uKbcjU)v3?Ux#J>h)xq%I z1@aGZ#qbG#eYgE0g`|bnnnZ@ooei7;>x&IT`golw8Vqhc6Ju0&(r4$kOv#Q-Z`K#K zXuDE038U4Iu&BC}dY$41fg<_94*bTK*ti*kxtJ$7|sd=J1W~jgBjV>Xe2d&3z@9 zc4udY%X+Tb{1cKm{*$IQ9#7-8v;nr5IOZ0}_z2J&U(*1>@?>64U5U-hQ;)l2VP@ zr=a;D7_0=y8=ECN%bp(~p&5IaMpM#M+R4h3ZAlP^{|Or^Tppd7J=qlUKj=fk{x3alB#e*b4r54EB08UP13_9=cE!sB89L1L;E* zC>>T8GcN`dZ^_R|uK|M4c&iLV__kA~ronry7pq_5u7BnwgJzi;aw@PI@DB|-ZS26y zziYhZHB~i#eIOBfV}3RCtvw;H^83RW7y@;VU_#lPw}1XAjC30X=*pU*NT=GDKb878 z(b(95*cQr@Mg~V&nS_lGY3!f>4J-ot5q{CT>CD1M2MPPMs^FWv%G!Kb(9LPLM5f@j zJ}PW-GKJ4sCeA^Ga_Wpx`QQTpE_@VK{+qY3Ut@gjP#;p#AJdoAP%N_hj_lbvcl=g} zBLly>g9wya04`1!5C7)o9_l+;S0c?bIuDPBB-o$5Rn#EcE?evG+pcOdH(9ZY%jpl@vXL0y&Ba_+qqiJy}Hd`NgILeQX${XSwafYoss?N z{LwlyNaQ&f17>6NK1!4{{|r)y2iHlHmxp3$*g)n=K2saEUg*U+sI6(n_)8Wkj6a(+ zf0%3t{=JGI+Q6RDnb^jA%G2lShksL>=-a2hVCW+_`pO|3kwfBD;*h$=IzPCAuiCv0qk0= z^oGLmL1`$y$4}Mk8G8lo!>gyr=;W0tnlRC;Yu^7MTO^SGEuT4aU|-)azQwClzi^h^ zL47n3>p+`DZLI0^)I>K@y%r`zYFV5Z3DU0?Dj5jq{~9`tY0t=~_Fcc;UF4hX*vXf8w64KqxViwq^Kz1cr;jsYcNg_i zi$E+R$7FPw$>aqLpN;R=bK?*GZMRwwzD#uuW5!u&pcH@4Z5o>ztMI4b$;iDarW4l; z-Mt}9+c!BUkHLaO;GgHD&v)r*91|wFpD6EyI0K>fd_I)vO^w+HPlSw6SsV>AerLv=h3|FIT~}H>t(sCsur*aLE3Edx zHtFFa!=06SLUs!-Uq8athnc3An5zL?knfGCou5V$q?6A3q_C%He3kPdGFJ})AT4Nxh`-eu9_fkPWngOlj2)T>} z_?vfptEDjEmK;QJT+i$O{^$><2+wm$5k5-@5|C`8ba;P%&j4iU*$Mb2_o(%N{7wzt))U&;3eXm1sEL+d zN-!?)*Mr?+9|G9skf7816f+W13a~D}lI*tKCWka}EZ*JD^w$kv=cAn8y>D{lM$@61n9?U$<8d%;#9*fJGmj$vgK3R%!qoIdcFo3yU2bH2g1d z!)THwa*DpoZmyL9=>&L?^Pg|$&yyX9_xK3Bz1<=_3LQ@;^SFz+TVG#9BUietK}(}a zQpkH4d;+#nrMmE)F^!~| zCG8~sx@zg1vy$P|m?&EIz>c4{-O&IbNKK!IQoxQalvh~%N6GtA=0ES_WAr=7OQX4x z*3Ue6G~InXuU-NS`i0-|O>k;Ru5Wz17lWm_y^3Q*61A5+)_wKmgpgyGP4s0YXkrzA1rrZFL zVq@P}3t7r+^cUjAZd1v>(5(lWz?hXfk zvXludSC;74d7b@q?R&G#CwA6>A7N*JQY$P+y`UAFNdnmOMtW}?^FapyfvIp8r*Xl- z9iIa)RPVeVoEqd;s50;VWDwO&diVwDKouH-l0=$R&DzdAh)Oko^=Nqoy@TYzOVig1 zJ^#$#D&XkdE@>vvom-%s9HC1fm2+qngYn)omcXBl?c4RBGQ3a2_7snh@_@)0?aczY zQM!KPQF61{pIh5lrMCf=npt&tCjFXxE}EM~pP!lUe;dSJ{Gwm=iao#by9j9hY3Ve;h7mLbykUSAj z4uu#{Iv@47jf6V;$KV?WM{R{3Ii_K!NrXnic$75D=igw`1YV?96n#6VjojyS6=mPD zJYQi&m5Z{YDdHx*($gS_6Wxz;MHpAbrot3*s}n<}>>&#u@!DkBx||p>@k$QZ&);OT zF(S+8zzu7*ZLZj7_>aInvW=*IP6{2o?|{uK+xI#D8NM(;(@L@*c$aIy|c>_maMa}(75Rr z^yyV%TpTI?7r!`dn5pv!G(f!xoTFj8T1Fma8Xu=TOqFf;xtYL_|6__0F{^}ob$J&DWJ{8g)I9Q6 z|C$?0Q5|uO+FU6C8Evs136yD;WPJ%QB}Lpa8I5`da~-l@nKmTrJvcJY;%oZ+zRVG2 zj)?WM#j(w4s`iTfAfe;LAEozuEcRYLT@J1z5#2qT_JYK}W+4Mko{3zAiV!#H?uh13 z#Zf#v*3fp!$a^k3rGcx?wg3fsX$(k{p9DP)8I>{W1D4jbY3-Zv_~M37 z`cdiW`pn`Ne{A(L`*shZ`|P}+e7UkOd~tO(5>7Kh!A4`5$>Q3cUVTC(n37Ohzl|na zFYoxo7w3-^KA}4{Iplo#=)YsN1Rj&Le9DUGQRh0-cn1a6is>xzjk~F=!ej}V?o%f) zW(?B`kfN^jE)xJ81rU=6*VE?43G3LWPz;r)EPa#X8hLT`XqQ%?>K6TA-%kaG-kFyi zVd3VP?QNIZPjIEra>1N~@18Q5v)mY}lF|ExB?F7z9TQnVrk1h4qY- zoEHyrM-szvWA!m*n|;-%GE}>>sRh@mlc-1|0${3wIbWm}9y3%E#fprMfeHlpeFR;V z<0*3)^HiR);@X*;7Y-hDO4pmMU1&uykw*w(pe@tI8S`s@w5|% zd$-@N*%IfwWk^`3J_eta^Dnzo?%K$v(wdYxTWpbpi?W`Z9s`-E6ZeqiEkJ8Lzb;3 z5_BG~gz<$zVNHU1L|pc^t(nD2D|@v)p6E$-Vj5lei?8D%v%8qvMwuy-uW7gwNS{}Jnyya|s?Ipa z0u4J^DDwzw8AWCF>;{-6J{%yCuXG^A_Dy9QrFtw&)AYMK6+`q^qUXsDYUjHJ{r8=N z0j?+l3Vt>fP|9TjHVV!xo(_?LS__i`gJ2SRmJ;Hu6neSJGz^+T*o~&!Af4rEGI|Pb zfaRoW%I#u@t%%`xl60AYM-H~vkqX(!>1wjyjLw$^q|WvrM?#f}3yFu~rM~vXGy(vh zr0ub{Eoxgekk_i=S$HD1kd8S1rQ)fgQNWVzPvzIYoLa@De_(?urO?36U!!OJ0Kq<@ z@>&Gt_fxUrXmP~U`7Wwu%oru#>+y?FZ_R8!{@m2Z=|Oy_GC5^-%3%cbbP*rUNF#aX z9R;zrRfO6H;uM%H5}x=M%>QYJ4c?lr1tmT2p8*DV zAHRJ6Ew+WHCmJsnIE^3c`VGyD0Jh)wPG&9qlI=)PRLmc3vU-NJ*2AQ(;OIL^KcQp4 zKw5|%uEacj!QJ#ZnfFWVnBjU_`lLcClKk$d9><$R6G2<#jfWW+olVaR%^iDEljD(J zY9f+=h1Fk7OP5%n#jh&qx)0>{PyRYjVj`}51{6fjqDP>FZuFkTA%M&s~y3) zH!IjZEcnw^Ugtc*ek!Jt%c`&j5}RR_;IQ!UhAFqnWkxZZ{*X)^F~oPzB$oQxSE{7q zZGZi#>!os=!{VM+rmQ;}i)N$U&PPoLV#jvDj>=fhN9`1ncVh2@CXYiN%C-)7ZrcTm zye~2OM&KNumK(nQ-aG417^}>NKVYHa%Og=|WZZ}Z{Amo{97?J*HGKS7XauSP_Qq7DV}OW#@-Zc$9(r5 ztN1eakWBLd>|?%hLfz5gD`)Sq%SH!vfqA>@ntcC3CWyJW&Oo(M+e+gD=5?xO-R;S! zQ{+a|XyN^5=NJR&Tib+hO2*`|spYDko9!p@kj7urC=ckN#%rg|ej_-oOa>1tX%#o^ zdQdLFxdKz5BI(C==z{7;;WfmWGNpyD>d$I9&x*T3cU@k6S>cE0^5L{^r|J#R-Hwg_BRRnulpObP<)>hns z+by7MGx^Vu>`ov4L;jt3;3cFpLq7X~;>EOWb4iNP!=#Ovi9up(*nXFbX{#Y9H>H4t z&8J=FDb?3bp^Y~?3cq?^pUUvOrp1B?wnL;NN-DM`;PmjpWqd9fUiz5ra9t96oV>(v zty8&MC#^yaJyT}?SY3+LANDiZvG8!x<3Xt@aOBlf|s_Hs}y*3mi`_~Ik!2O^_KD0AE|10Oi zOJ5>HZu-M50GFTm^q3zL5}oF{6C7H^!Diz znQ#pJ6jY9Ye&#?`s=oY9DD?at{eN+AY{Y5V;j2Q&+{s6&2@gr}`zq&H9?!E>pJO__ zM#}q76^zt^2zwd-W?2-Z+D)A>PKUEITAh!YEs?;#T(| z%^!#!xqw6XuZtB3?4MHjOt#%2e^JVuaY!ws892Q`!qh%yP}D-Gs#=+B6Z_tgOa12t z-vXD9@I$$4xzc^*M8V*cX0^90b$*p?Tue#c8;ka3^r8u~^R8I>7I5{l(Pr0c)1ZQj z9N9x^E1%y7e_}(v=D-|_8hL9fJ}EGJEJ8%?F>@bGXrl|S9dDKn$W{OOv&)v#i zWw_9Kl;GGCnI#p$8%Xr$&nV zS->#%mqYFkQ~TJz3vW8Vy*gN`FhcQC5To$~uG+T#4j!_dCg*C}C_JH;j7c2`gz5A5 zVm(JLm2cXe4I)Sdylh95tS)2VP+i7={hgFS0a^RH*x@1F@#Pai{BTy9oR+3y$FP)d zIuHh;WdcX!``w|poG!qbtq$w`s`(1<^By6MhlO1+dmhBKxJQs)>&tlD%G;k$edJIf zVhKy`R$zbk_wxHw77Eb-p{FwV($HLA@>F9aX#MD1~fIr z^aCXGuEmz~yP}=nfN%!U8+RUp>ybAlf9sab&a0SsJ}NMJle9nX1X1u#fNMfVJZil5 zi%A{zt?>_Z6>(bjr!bf|#Hkm|#%%XW=L>63xE$%V73n0RyoI_^e&F6C%-f6!$;es` zTCNmQ`MLnqq7)|Ae$%0F!ijEGCzCORE1NLGU5R+l36jU}65X=92o`k8Vp+X#Wl#6v zzVHDKcKL%60&Y7V=qa{KEu{PiK#nxDUAnrf&FRV2g_vf~DmCpo_2gY~DXQvvp2P0S zT25Q9&%*91H^Pi>^~!lWyO0tARx}F=X@r^2{t-qvwV~VUO1e$T+Erp+(AMVZ%dH)? z;K{p_%dS(b@FC{cP73)E&r0L7YlwS!*z5xW1ATy#HzNSfqX5&Eme3dtwT52Ty0D{p z5GQ+;amc459~*nG!5#84eF2>V`UGSTBC}t)_KxeU2_K=mwe;9Gb{v-mYaIS}r=yaT z*Na^~VSQX)5{@G5qOMkrwzO4U`^B&;s;HKnAs6ijA1eVtmyUW)u4e7_`l))sC#T)) zi0){3G)dVAOVG{pWWLFy-|aibTPX_U(q-}NS7#Hgd#&!#gCPpBsr;@sbJf9A?3kq_5svVC#fG01 z3et&GpB|1XCZHHjN%+jkPM1o#h^!PpC#idI)njLU`#7Of-QS+{2tJtHEuHEL3tToa zSZzT|7(fpYZ(ySvn&kos2;TlkUfK6ioxG`NQgjuUth2`cX<7Pw!j^-!pCMp>zVG^Q zQWNs%oo&i$#umpZop>+C0HAR7v-;7&onk#`L3a5(^>5? zxsFDf`VV@$`fwZXQcB~!cfIdWyaM|6(2az(_ML+}yG}_19(^t6xQR z-*4z0IYb>H9xheto(tsJgiT{S zM)v*DKIdK0F!q6L)WgrojIm%lPKWHKCiJT|Jv&?i!lE_O)N>F&W*wuFt#NY_{JpiH z&4QuTw6}zITC-ys;iQV8+e%68a9YOl6fb1n-sxNWMW~pg+IW?DVHmKH`D2VVGw#uk zhrD=4gx3v-sd_QDipx*W;}TjK=*x8oiEp;xJr5gkS69D)$=;|Yb#2fwAkB(J3LTkP zc)Mio1cW)dCNHAWtLb0!m9oZJ`)vVdn7?2W2klDV z4~$>5=_A^QAf_y0WB~<1ITU#`pTjGkexJ?Tz-0W}$e7o?(DOxpE-u{j+(Lt`({S7` zCLZdFz#%`vdhabsr$?)*LC!gAe#t4(qSGbfizQjBV@eGzAD$t=)hu!&17@BD%&m4` z8G%;UuMXo)>a1}dirD((w0zPN z(s(!Yx}xD zY;cV)cFma)?<`$~p9F$@O5zU6B(P-66miq@x&qg;PH#MQ@Lb*D*2$0ANz@dvlxw_1 zl^DRl3~q4Iu@!;B`>0Wp1KHyuNsKEKkiT%EPUn=K$U=Jkhm~BGHs{_Vc zTRxwg$omj*g5WT|Lg7xTNcBhw%3Cu_Cw>84eFCksGWdC|L$1iAZsBoG$VOFO1?%e= zAu&<|&iO^NA7(YZHsyYCHXn9yK1mGgyZyo!Cr{zM`Z4QxAawZl{^PH|1`86Xd3fXu zptyH4LHDaZ`3F_U$LmHqOij_*+oskPqcwcUiFR>2*+z_E{MHjXd0e!wM~vE!uu!A) zPu)pjt`O(kDdIK%-wA8d71<M9BvS6R(f zwDG)v!Z;K-jB~Ea^W*QIMk~7BJ_LKM%q?2wtvx~fdKIk{SjEhd)*)BL=&QxTtL6(W zWP6{N);qjEJ5A`|5fK;lY5w%g=ga5piyrP2qB6j{Y>xpISRZiiHa|<$3~}ytMpv2q zfXxcygi|dsHGy(;74E_Y24>#qiKx^Ju(<6Ja*Z^dd{B!gjocjLqpuL+8GjGCOOP~M zBo8>bbQ@_Z>n!sTWCNcCIf11yp$fo9^vH+c?EoP5gSS?TGMIB}gN$`OwHGMXJhZyQ z_>)y3RYH05xedf~6(a6Dqk&t^7U0YvNr2WvI|ej${b6uIh{Dro`!>Y0@Ek%k24dm9n47p6iQD z*a&U7EgB#&GaHP+Rl%$23jH`$37v9 zG-iHi%~yUL{jHtv7BEs)z7VtK(y_YkKW97Yh~BgCm?R;NkGkx=o)XWuSy{@B#@c#% zQlkKFjhQQ+%wsF}`1@Y%v8!lPl8ue{+HsWWl2owQvOHeM{ty$Yc0Bvz9fy97TA` zd-!Nw`ehrPW%Lh}+&CZIG@W`A6w?}ILlJ1Fnm=(p+^GgjG-_>JfuY4vm_8-9Q>njt zWN?Mg1J6G}pr*jPiyu#0zpZ8L((9?|kB|NfSU9&$m-0`~3Q36L`W4q1ZC6{GHtF-y zO`jZ;|C!GXn+E%Lw_k9Y1Ox2WV4ryHb7BZXs%qttREtdnVEaK zrIU0{6yETRhnYdh7)Muk$<*unroCR^@6*@a*p0~qXzGWDRqLUoUC(DGKBc*?1`Hl3 zRYsteU}F3#b8E;jxL%)NzdMg^yerUZej(B7<8?haR(>-8;{aX*)S7q9rM!6(igZfO2td&Ocg0cC73r;n0)%Z|LJ=m6{5|t0~tjalQi#xd(IpP^t z-dKv|`5} zR=E7RHK**+U&s4>%}zwr2-NJCS695i;b-RWIQT#l&bO6PXB-^KD9Px_FB>%{Ncoe7 zod3G|9w4bMr@Ah>ANSF+Y=#;F2PyTH)3$REv^pdjVoj&1#xG#X1T`^C$0cAFrHsVg|Y_n#_~;WE9=EPrl+ zC5`c~#43k=iR8AK>bl>0cMFuXpyAdGKzC*RCf+02lSQp_%JLq9ntc>PZre+qIG&oc zKjM_204f1KoPQvZiEJmVZ+Uor?-WCX01*nn>+`xDE?@lG%!EHc`nZwl!2pELg$1Sa+D_0ODIZF zdXIo~LPwO|1B6};p@EIZkGpWFaJICNj*1N)uG1`0x00$LA%<_LUr!aTzp-8uP(52b;}1Q3uJ z10p453{~3LFa@7NN}K9e+gZlJDMv&-B>6D5v*w`T$57L=1W$7hA1qK1Qh%_m^t;|u zZ*{!7%#KtrlAw2)SIyJgjiq(sKY0nk* znt`%I{0N*^V8ZQA*V8&jffRdJZCXAmOQ6{|+sMS^1%7}xA}o?lQ(9a>E0_beXUO(b zxK#Cm=eq?mouo2To(d~BZ*~GL7j5j#5~%Ofm~ z*nZvB7r=#%%v)gz4kawX70-U^@G2#-N8A!{_i4QxiFRa4o}#e8HA@f^&(!cU6hBUi=o|0J{K^dfM~FbWoztI4M@= z6@oYh^Z_JUx9_ZFQ+4&Q%YKpOp0ufO8SA1yzGeS(23JB9894Ti-p%%|(ja{k_I8)# zsV12fU#u*s3M~%Gwjhs2U#3AXT4Z2Gp~&@H%#vJ~)Mu~)wPtHVt<|}Qt^;$`;MLs$ zJyfjTS1TnSuZXA_w{71%l(6`6ady`%S)|Ql4JdmC=Cv|vZju zmSS$st`C^QYTd)=*YO?_k152{W;yDHNq1etl2U-DPbt0sTU#jewF(!mm*md0>EmIG z6S43iMbfozH6HUAPRxV<+#z6U=#nrsw2h16>MGwWnD+AeQbPwVoV#R<70PnG75NNw}bB#l6 zO5LWq+20uGeq;&GlsV_wHadDW?$=XB1GI$=3c;7<4tJ96ecCCzi#;}G*H6y+&E_;a z2ml5e8C3-V_~$3MjyBb7ohR&3>}QFacT; z*erj~#(#cj{M}ddOImsI7n<-}B>U%ucl^cwIj8vlx}(^B0jZ;}oBacQzIfS#xWLshN`CCy{XG4ZlFQO$75tW212`s(>J{@vUe zrc#rQ`v&XEe_`sOmU}rQ&Z%+5;=+%VjH82j3Jx>LSz8-QCM_FAyug2@Lh26@yG;22 zuNx3=3ve~Ma+@e3VolkGGrY<2)>UUFmdP6YnVw2_PKIy9!)DHj0Y$P8X&#AVCgG+^ z8szWpq_8XVjG)YGGYM~bxu4WlCeWU^Wqizg-E2cEmbu7vSOJ%^EGW0`Wjk*wM3IT* zXd`%vvedL&?=~|awPSGrJrpHZBADx^5M(J?ZDJ6$!3JnQjdNVhnndw)0O}4^?XHPr zZE2cHvvGFFpaC$w1TdXRLz`AOBC^7O5xcvVuliz--_L!jHsj=hA!plG)0cGb?-}&{ z7OBb$$a1f51#s$yAM1^VQ!INwQq^-N9`S|OAKp{M69NC2Z|>|~Q!K|@1o0J2l&M&w zI-A!w_k*U4DGWTLg^ABstxw)Zw7n(_k zSAF@(G7nj8KO#+9?X|%@$#V}P9tA8A4=y_hr^f1`>L6*WMt1VY4|yyw3j~O70li^@ z7d5=Ba+S_yoOxo1adb4LyyOsth)9bk!^Zpu2)1d0xLyq)er%Do)Tk5sB@^SOJrLr_gKMA^RL3Y z$;ae%;^luYilXGLD$onZ&Dkv^W`2~pV)bxjC&PymG?@_D?3_NXU{Pbk=bjjz8N zc{!3*{a){4YkhVWPZqdcy~^HJ^f^PGY5du0=U|j{_W5eCE*id5VGmT}>gvQAH|&XX z4QQjfsu8F}t~YP;zI2&Rs;UW$mt|*)^OU(Oua`VAt^T2;tp83(Fghu8`Nw?lsy76c zTZ~rHZ_;KiV}Qim1L%yMWsZ%R*WIq9xnn--QII-G8=Yoyfzb-vld?Nmwmk*cL~d@$ z3iJ()exHJGY~GG?I(7?L8n`+x2nXK*JYGB_w1Kbl4ezh1&m!R(GkF(vx1&2_V6z~+J|hUEo=hqqbJJ;Sc8udwl& zBHR!5qgqG$bl)b`=BF^;u*z=+nAv0wN0Yg;%V651^*%xg;^X$gJ>}?i)aUJBdcBg& zXj}sO!il@BdbSaOadY^2kL)G93Cf1}rlteoD3}^6C89`|$aNe+#@>nUC9|2T7Sg10 z1sG^m5WkJ8afY|mui8{eDmHkhJIU&AR<{vb*Z^c4Xva9Eeqb*~_x00)v`OvDup1#j zNmFY^q@2EK8F{WPG=l+Xy9VgDP{lv@=pd&)F=G+D^CzVjb<93aqmPOh|BCGlg6AQfWa``r>(=F{|%C|9UQ?yz$`!FnB zwUes72n!CSnLTl%#QQ*=2r75+hQH6_$xvCiUF)Pc+@%Xd?6c_>V5vK&Nw4umd84`I zg!7DfB3}fbEq_@^jDtXhXcw@b!;~eiDZ`rN#5kV zaOZMXD?C2ll`S*QI2W7arwXv)&aYYz#H5~@?=_N=K+v>8`$rv;1YcjXdQElKE!r z;2pBBvsS|A^6&XCPZf_R#RF-CkHKidlnJ17f1Nf)GhECDe?bI=5Kpht4cf15AL6|- za8y5ikUbFkA?jM2vP%F&n{5O0ZaRQ?6pRlRU6N&oN5)=NZc(8P41T~~ ziMI($187cKUu<0-&pNqgwc;-HaaNKH%H6V$5ONk}FP6VqB_7~?j%h@tHR4c>vs{#} z)cVpjzn9GiCpCFOrt4q$-7+%5iAi8;h2JTX@gDL|K4063e*4#sAWLyC-6>jIJ3)|H z<*R2<5jrz%n(Lq)osEN|!gdoyT{3?F1!@EO(x9U+=A}y|vujdN=Am_Yz38|{C*eo=}D^HF`x2^3*HDT>z zO*$}Wx^JsMmZOx|O0*v7qA8K=YQ<1#S44}_b7~idPc4GqTcje~*8>u{?*cjvZb*Fk zlZHs(HbuKC)7zUp(Pcm)5!dU$Wc8tazpK5h+_Mqj>eXny0m}n)&I2@#L)s(s+R%nY zU~M%3>v( zpru)9ZLg0it1!vZ-UbM$2vusV7z648RJcnNS}wWTzM~M2xqtQqmuJWG56_;@tC@1r z3MWkOzndl(Ty*7Cz8flB-Q|E$IOc*X46z`|kABeu1olq_@Q z3Y`w9MSYd4fa&SP?JM3(u132mlJ~wibyw(@Hm;=f3n{g7%sT_Icurh-D@W4y6CeeB zCVu90+~rFZ4tDCGs779;SPOeI_vp7T9)9CDFFuPGTP&kWb}`Umk5UlqD5WwHeI|^7 z02J`&_#g3%r1#g{|$8{X3f9G=2|Pd{ud50e)=+3jlnvRe8a*1bHHCxzI@o57Sxc=LTl z+w;*2gi2`gZa=Bm%r3_K2QAf!MxLvo5eoaCcZI*EJ}G339U??-DD2Up%Sn;g`;_k{ z{7V*E$QQjzJr|Dkg-IsIF@f88(3L%P^AGOt00_vKChC3koKXfUO8HxqQDuD@5(|`e zgPu&~M+g;OxEJX1b|^?-QC4u2Gbpp#mFFYb!g zZfjIGcI_DN`A)uoW;{d>a;>7ZsojXaUH%2Vyq65owL>4DxiPHAMO-m{TEsn*8_e_} z2eMnogO7#AjZ}Ic{OG-zWSel*49tRM;%vpn<1jGFn*i&S#7qdC+L?nJ(SDmiZBI?f z!}IrOfHSd9_rJS8wzRRpP3)Aq_>i5`s8HTQmV@uYb#&HM49EG>$^uvauL&L3&0?YO zstzb_G3b+kCm>lds{MyusBQ^8Tx1wW>Jyn^;Hb8X2%Bc9Ck=C-MldpqOsz2!j1!YJE|ScxF@ZFbd7{k zEHZ33%i~YWxVf3Dkm5xQ(975%{oGegPm7Wroj>^?tRxePMmtUCFMg1a{8)ee3rjqK za4~d{Ola0_bh_U_Y*s_7QDc`)H-by3`Q4Hez93>>xGsXt{61laIe z%Abq~f8a#ppb?sJx_plD>!a%Wy2nW9!lkBoh>tlv2Z>%W7A$}jGYmg8tJWjLSX?~; zAdnh6wyhulM7FyCl%P=^ysn&y^l8>AAN*D}`TbFJ+JrLbU5aSgZSVYy+!PyU=Ppgd z$16*#nq5GEbPmeS%hOXBB2rhcvApp199vHj!A-!%oOM+zxJ|Z=QHIBIb ztKJy(m+r%K9Hu5%{w>aO_=yc16vjmovBuo6PD$*%`Z0$_TM zK?%>f{BcLZ-*QHFnAdh40Q^JCEPBUz(tSfdtKn$>=S&g^9;?N86Qx2 zsPRv?9Waiad=Ipmzf7sC(+KrbkC$kia?g4i2Mq$9A z+QkY?02%xH>CkVWpB$i><(T{?Uqit?c{W?NGoR_)R zZBfsP5841=qAu}oBafwABliAa68~uQlUHU@QfM*Sx)c6QmLH96Jqg*@q^CO&e=v;3 z%-0dBYKm;YUvG^TO4PjEDw_DMbNXM?KbJr#O)qH`3vRV{UHLUOIzSMt~~k;xkSY&K5EJP zP`E>j9CIV9+eXFm>`HwiQ#dBS5B2n%Y#=p?_*$nYd2MfZ7Jh^ zVZw7KJcuDlsbtE1!;2P)YoQM<9;QW`jyFfQ{%t6JI=7jy{2U$WLMi)onk%;(A*X)uo&3Fwc8G=#@YFkI^?*x3>P zNO&aVmZNd{8Xmv^DmpA1raq*d!e;;mjei>&4!x2~ z=R`XJf1|P#Rt*DN4>%6-dMpbBAKtv}kjgG^!(Ex1nHkM+*izi2CG-c71RR%s-)yH7 z;-!u>+`5rwCP?$gyJ^qmkG>YEDGa;r75iwrMg&w54`LpS_=#kBc%)r)F>hQnn1qlR$FgG-BpmH#HhpwNZ27ki1%sP=p`yFNa2&qD}9|dfMv5G6kvV zX*>vtnNjeayj;s;6&UeJ(E0MaFPa-MJ1OtD3f^q{=r4w-to6+1W@d=1Nvi0|=G44n zJg3PFn#zG61O6PwnR)6v9bgGn8)A+3)^yE+_f%)(WM{TpVa$A=?vx=K{wVrOmk0k$ zeLugupsaNGx8fe1$WuL zNIwL2g2=u#;$vnwxLGE3(QREC;CYjPe%gp7$i_`sof zb;VT2|7?{Yzy=>*(WXhyV&3bCuQswmdgO3`CPpFtWG7gtR%*9YU8MH#+%1$u|! zi)}5KHBCTbgChhEJsyw^Y-P6)a!aaG(|O;=FhpsqCEyz_=0P;eF(wHR(cu6jPb*|W zNu%rsA`i8DDLACxthV2QyA95YpnapCf<%5_$Vo#G8VX_l!t<5Tql&xhqP1uUv*Ofc zMP!_)Fm@5_{qcr+W`Ve2mZ;g}-u7Ar@IO!}jDoe%@q+DYo7IuH!2x>}Zm$aO3psza z2{u$hA_Kxpw=^q$Ox0=cX8Ox!b=(AwKHvCgU2o*$`~3b+q&Xu#lIU;M`mpcHmL_as zg4)_~-oWV*!7EaLA>}Kq#)L27+kz`nEld8}15#js9$NN{Y|+2)d%Z7$QZm&WH$>^D z!;*tl#Uv{@+)3>LS}E!%o^-Pt`;Tcn3aE(=S~|6{jms6e6^4 zzEN9Vb-H0-qwC~@qqcpJhxI4`S;w41E8%YF<_5884F2`!6?>@{iCK2oSl)mYS)ok} zh4`Q2>TS~gPTyo~0JLTs(mAiB&$eILkx9B~W;)NBhn-i@&7%5ubdtkpZ3o^+wKi8$ z^KGFo#mBubW1H{2WiBPQftU2~kR=|^e1Of&3b5K(<|m4RFsq{yh$?gAt4YZ_bl^Wf i^#8-47==YrC?|*Sp#d-(2Y}}%PH3oVsTAM0eDz Date: Wed, 20 Jul 2022 11:51:03 -0700 Subject: [PATCH 14/24] revise wip notice --- .../deployment/planning/windows-10-deprecated-features.md | 3 ++- .../includes/wip-deprecation.md | 6 +++--- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/windows/deployment/planning/windows-10-deprecated-features.md b/windows/deployment/planning/windows-10-deprecated-features.md index 26a3ede517..e5b7464f6e 100644 --- a/windows/deployment/planning/windows-10-deprecated-features.md +++ b/windows/deployment/planning/windows-10-deprecated-features.md @@ -1,6 +1,7 @@ --- title: Deprecated features in Windows client description: Review the list of features that Microsoft is no longer developing in Windows 10 and Windows 11. +ms.date: 07/21/2022 ms.prod: w10 ms.technology: windows ms.localizationpriority: medium @@ -34,7 +35,7 @@ The features in this article are no longer being actively developed, and might b |Feature | Details and mitigation | Deprecation announced | | ----------- | --------------------- | ---- | -| Windows Information Protection | [Windows Information Protection](/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip) will no longer be developed in future versions of Windows. For more information on this deprecation announcement, see [Why we deprecated WIP blog](). **_TBD link to blog post from Rafal_**

Migrate to [Microsoft Purview Information Protection](/microsoft-365/compliance/information-protection). For more information on moving to Purview, see [Microsoft Purview Information Protection and Data Loss Prevention for a modern data protection strategy](https://aka.ms/MigrateToMIP). | July 2022 | +| Windows Information Protection | [Windows Information Protection](/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip) will no longer be developed in future versions of Windows. For more information, see [Announcing sunset of Windows Information Protection (WIP)](https://go.microsoft.com/fwlink/?linkid=2202124).

For your data protection needs, Microsoft recommends that you use [Microsoft Purview Information Protection](/microsoft-365/compliance/information-protection) and [Microsoft Purview Data Loss Prevention](/microsoft-365/compliance/dlp-learn-about-dlp). | July 2022 | | BitLocker To Go Reader | **Note: BitLocker to Go as a feature is still supported.**
Reading of BitLocker-protected removable drives ([BitLocker To Go](/windows/security/information-protection/bitlocker/bitlocker-to-go-faq)) from Windows XP or Windows Vista in later operating systems is deprecated and might be removed in a future release of Windows client.
The following items might not be available in a future release of Windows client:
- ADMX policy: **Allow access to BitLocker-protected removable data drives from earlier versions of Windows**
- Command line parameter: [`manage-bde -DiscoveryVolumeType`](/windows-server/administration/windows-commands/manage-bde-on) (-dv)
- Catalog file: **c:\windows\BitLockerDiscoveryVolumeContents**
- BitLocker 2 Go Reader app: **bitlockertogo.exe** and associated files | 21H1 | | Personalization roaming | Roaming of Personalization settings (including wallpaper, slideshow, accent colors, and lock screen images) is no longer being developed and might be removed in a future release. | 21H1 | | Windows Management Instrumentation Command line (WMIC) tool. | The WMIC tool is deprecated in Windows 10, version 21H1 and the 21H1 General Availability Channel release of Windows Server. This tool is superseded by [Windows PowerShell for WMI](/powershell/scripting/learn/ps101/07-working-with-wmi). Note: This deprecation only applies to the [command-line management tool](/windows/win32/wmisdk/wmic). WMI itself isn't affected. | 21H1 | diff --git a/windows/security/information-protection/windows-information-protection/includes/wip-deprecation.md b/windows/security/information-protection/windows-information-protection/includes/wip-deprecation.md index 915b808853..398ac1dfdc 100644 --- a/windows/security/information-protection/windows-information-protection/includes/wip-deprecation.md +++ b/windows/security/information-protection/windows-information-protection/includes/wip-deprecation.md @@ -3,10 +3,10 @@ author: aczechowski ms.author: aaroncz ms.prod: windows ms.topic: include -ms.date: 07/15/2022 +ms.date: 07/20/2022 --- > [!NOTE] -> To streamline and improve your experience, starting in July 2022, Microsoft is deprecating Windows Information Protection and transitioning customers to [Microsoft Purview Information Protection](/microsoft-365/compliance/information-protection). Purview simplifies the configuration set-up and provides an advanced set of capabilities. +> Starting in July 2022, Microsoft is deprecating Windows Information Protection (WIP). Microsoft will continue to support WIP on supported versions of Windows. New versions of Windows won't include new capabilities for WIP, and it won't be supported in future versions of Windows. For more information, see [Announcing sunset of Windows Information Protection](https://go.microsoft.com/fwlink/?linkid=2202124). > -> Microsoft will continue to support Windows Information Protection on supported versions of Windows. New versions of Windows won't include new capabilities for Windows Information Protection, and it won't be supported in future versions of Windows. Start your migration to Microsoft Purview Information Protection. For more information, see [Microsoft Purview Information Protection and Data Loss Prevention for a modern data protection strategy](https://aka.ms/MigrateToMIP). +> For your data protection needs, Microsoft recommends that you use [Microsoft Purview Information Protection](/microsoft-365/compliance/information-protection) and [Microsoft Purview Data Loss Prevention](/microsoft-365/compliance/dlp-learn-about-dlp). Purview simplifies the configuration set-up and provides an advanced set of capabilities. From db28b47b7c42a1aaf25a7ba6be4c1698bacaf787 Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Wed, 20 Jul 2022 12:42:22 -0700 Subject: [PATCH 15/24] revise with PM feedback --- .../windows-information-protection/how-to-disable-wip.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md index ddc896d114..508c6accad 100644 --- a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md +++ b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md @@ -49,7 +49,7 @@ If you're currently deploying a WIP policy for enrolled or unenrolled devices, y Determine whether to revoke a user's local encryption keys from a device when it's unenrolled from Windows Information Protection. If the encryption keys are revoked, a user no longer has access to encrypted corporate data. The options are: - Yes, or not configured. Revokes local encryption keys from a device during unenrollment. -- No (recommended). Stop local encryption keys from being revoked from a device during unenrollment. For example, if you're migrating between Mobile Device Management (MDM) solutions. +- No (recommended). Stop local encryption keys from being revoked from a device during unenrollment. ## Use Configuration Manager to disable WIP From 578adb6b38abfa6e83cdcc647e631424300c3200 Mon Sep 17 00:00:00 2001 From: Angela Fleischmann Date: Wed, 20 Jul 2022 16:57:31 -0600 Subject: [PATCH 16/24] Update create-wip-policy-using-intune-azure.md Line 179: Add parentheses around the ellipsis to separate from the period. --- .../create-wip-policy-using-intune-azure.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md index 02e8a1c9d6..d6db1605cf 100644 --- a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md +++ b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md @@ -176,7 +176,7 @@ To add **Desktop apps**, complete the following fields, based on what results yo |Publisher, Name, File, and Max version only|If you only fill out these fields, you'll get the specified version or older releases of the named file or package for the specified product, signed by the named publisher.| |All fields completed|If you fill out all fields, you'll get the specified version of the named file or package for the specified product, signed by the named publisher.| -To add another Desktop app, select the ellipsis **…**. After you've entered the info into the fields, select **OK**. +To add another Desktop app, select the ellipsis (**…**). After you've entered the info into the fields, select **OK**. ![Microsoft Intune management console: Adding Desktop app info.](images/wip-azure-add-desktop-apps.png) From df0798d740f2cd08e82ebfa5833bb1b237422e78 Mon Sep 17 00:00:00 2001 From: Angela Fleischmann Date: Wed, 20 Jul 2022 17:13:31 -0600 Subject: [PATCH 17/24] Update create-wip-policy-using-intune-azure.md MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit https://microsoft-ce-csi.acrolinx.cloud/api/v1/checking/scorecards/8e93c566-215a-4609-86a0-923e9c40598b#CORRECTNESS Line 179: …. > `…`. (Matches line 103) Line 518: 2a01:110::
**>** `2a01:110::` Line 519: 2a01:110:7fff:ffff:ffff:ffff:ffff:ffff
**>** `2a01:110:7fff:ffff:ffff:ffff:ffff:ffff` Line 520: **Custom URI:** 2a01:110:7fff:ffff:ffff:ffff:ffff:ffff,
> fd00::-fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff **>** **Custom URI:** `2a01:110:7fff:ffff:ffff:ffff:ffff:ffff,'
'fd00::-fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff` --- .../create-wip-policy-using-intune-azure.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md index d6db1605cf..8bcebf38eb 100644 --- a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md +++ b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md @@ -176,7 +176,7 @@ To add **Desktop apps**, complete the following fields, based on what results yo |Publisher, Name, File, and Max version only|If you only fill out these fields, you'll get the specified version or older releases of the named file or package for the specified product, signed by the named publisher.| |All fields completed|If you fill out all fields, you'll get the specified version of the named file or package for the specified product, signed by the named publisher.| -To add another Desktop app, select the ellipsis (**…**). After you've entered the info into the fields, select **OK**. +To add another Desktop app, select the ellipsis `…`. After you've entered the info into the fields, select **OK**. ![Microsoft Intune management console: Adding Desktop app info.](images/wip-azure-add-desktop-apps.png) @@ -515,9 +515,9 @@ Classless Inter-Domain Routing (CIDR) notation isn't supported. Separate multiple ranges with the "," delimiter. -**Starting IPv6 Address:** 2a01:110::
-**Ending IPv6 Address:** 2a01:110:7fff:ffff:ffff:ffff:ffff:ffff
-**Custom URI:** 2a01:110:7fff:ffff:ffff:ffff:ffff:ffff,
fd00::-fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff +**Starting IPv6 Address:** `2a01:110::` +**Ending IPv6 Address:** `2a01:110:7fff:ffff:ffff:ffff:ffff:ffff` +**Custom URI:** `2a01:110:7fff:ffff:ffff:ffff:ffff:ffff,'
'fd00::-fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff` ### Neutral resources From 625417267e497814e40bd7a3934b9fe540519686 Mon Sep 17 00:00:00 2001 From: Angela Fleischmann Date: Wed, 20 Jul 2022 17:19:51 -0600 Subject: [PATCH 18/24] Update create-and-verify-an-efs-dra-certificate.md https://microsoft-ce-csi.acrolinx.cloud/api/v1/checking/scorecards/6390cd4a-0fb1-4f9a-b157-97960dc0407e#CORRECTNESS Line 3: a Encrypting File System (EFS) > an Encrypting File System --- .../create-and-verify-an-efs-dra-certificate.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md index 3f7ab6e65e..c4b4f27489 100644 --- a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md +++ b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md @@ -1,6 +1,6 @@ --- title: Create an EFS Data Recovery Agent certificate -description: Follow these steps to create, verify, and perform a quick recovery by using a Encrypting File System (EFS) Data Recovery Agent (DRA) certificate. +description: Follow these steps to create, verify, and perform a quick recovery by using an Encrypting File System (EFS) Data Recovery Agent (DRA) certificate. ms.prod: m365-security ms.localizationpriority: medium author: aczechowski From df1eca1ccbbb1474727706e66c617f72da91ae1f Mon Sep 17 00:00:00 2001 From: Angela Fleischmann Date: Wed, 20 Jul 2022 17:21:39 -0600 Subject: [PATCH 19/24] Update protect-enterprise-data-using-wip.md https://microsoft-ce-csi.acrolinx.cloud/api/v1/checking/scorecards/4da8c14e-400b-4356-a21b-066633deaf2a#CORRECTNESS Line 84: locally-maintained > locally maintained --- .../protect-enterprise-data-using-wip.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md b/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md index 4845b6ea7d..82bb52d344 100644 --- a/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md +++ b/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip.md @@ -81,7 +81,7 @@ Windows Information Protection provides: ## Why use WIP? Windows Information Protection is the mobile application management (MAM) mechanism on Windows 10. WIP gives you a new way to manage data policy enforcement for apps and documents on Windows 10 desktop operating systems, along with the ability to remove access to enterprise data from both enterprise and personal devices (after enrollment in an enterprise management solution, like Intune). -- **Change the way you think about data policy enforcement.** As an enterprise admin, you need to maintain compliance in your data policy and data access. Windows Information Protection helps protect enterprise on both corporate and employee-owned devices, even when the employee isn't using the device. When employees create content on an enterprise-protected device, they can choose to save it as a work document. If it's a work document, it becomes locally-maintained as enterprise data. +- **Change the way you think about data policy enforcement.** As an enterprise admin, you need to maintain compliance in your data policy and data access. Windows Information Protection helps protect enterprise on both corporate and employee-owned devices, even when the employee isn't using the device. When employees create content on an enterprise-protected device, they can choose to save it as a work document. If it's a work document, it becomes locally maintained as enterprise data. - **Manage your enterprise documents, apps, and encryption modes.** From 13388bf66cc0c4bd77d5b46db3218fa54a77741e Mon Sep 17 00:00:00 2001 From: Angela Fleischmann Date: Wed, 20 Jul 2022 17:26:27 -0600 Subject: [PATCH 20/24] Update create-wip-policy-using-intune-azure.md Lines 518-519: Add the
code again. --- .../create-wip-policy-using-intune-azure.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md index 8bcebf38eb..7c281198d8 100644 --- a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md +++ b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md @@ -515,8 +515,8 @@ Classless Inter-Domain Routing (CIDR) notation isn't supported. Separate multiple ranges with the "," delimiter. -**Starting IPv6 Address:** `2a01:110::` -**Ending IPv6 Address:** `2a01:110:7fff:ffff:ffff:ffff:ffff:ffff` +**Starting IPv6 Address:** `2a01:110::`
+**Ending IPv6 Address:** `2a01:110:7fff:ffff:ffff:ffff:ffff:ffff`
**Custom URI:** `2a01:110:7fff:ffff:ffff:ffff:ffff:ffff,'
'fd00::-fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff` ### Neutral resources From 49394aa0682acc6d1c9d17902e21db89e2dbb721 Mon Sep 17 00:00:00 2001 From: Angela Fleischmann Date: Wed, 20 Jul 2022 17:31:10 -0600 Subject: [PATCH 21/24] Update create-and-verify-an-efs-dra-certificate.md create-an...tificate.md https://microsoft-ce-csi.acrolinx.cloud/api/v1/checking/scorecards/cb4e3f93-e8ee-4fb3-8339-2c0eaa66b940#CORRECTNESS Line 130: based on sign in with an Azure AD work account. > based on signing in with an Azure AD work account. --- .../create-and-verify-an-efs-dra-certificate.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md index c4b4f27489..d382f10da0 100644 --- a/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md +++ b/windows/security/information-protection/windows-information-protection/create-and-verify-an-efs-dra-certificate.md @@ -127,7 +127,7 @@ Starting with Windows 10, version 1709, WIP includes a data recovery feature tha To help make sure employees can always access files, WIP creates an auto-recovery key that's backed up to their Azure Active Directory (Azure AD) identity. -The employee experience is based on sign in with an Azure AD work account. The employee can either: +The employee experience is based on signing in with an Azure AD work account. The employee can either: - Add a work account through the **Windows Settings > Accounts > Access work or school > Connect** menu. From 9c95341c0bbe670ca59465a635d8114ec5fbd044 Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Wed, 20 Jul 2022 17:53:20 -0700 Subject: [PATCH 22/24] revise with pubops and PM feedback --- .../how-to-disable-wip.md | 44 +++++++++---------- 1 file changed, 22 insertions(+), 22 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md index 508c6accad..af94d53535 100644 --- a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md +++ b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md @@ -53,12 +53,12 @@ Determine whether to revoke a user's local encryption keys from a device when it ## Use Configuration Manager to disable WIP -To remove Windows Information Protection (WIP) using Configuration Manager +To disable Windows Information Protection (WIP) using Configuration Manager, create a new configuration item that turns off WIP. Configure that new object for your environment to match the existing policy, except for disabling WIP. Then deploy the new policy, and move devices into the new collection. ->[!WARNING] ->Don't just delete your existing WIP policy. For Configuration Manager there's only one option to create a new policy that turns WIP mode off. Otherwise the devices will remove the Configuration Manager policy but not change the WIP mode. +> [!WARNING] +> Don't just delete your existing WIP policy. If you delete the old policy, Configuration Manager stops sending further WIP policy updates, but also leaves WIP enforced on the devices. To remove WIP from your managed devices, follow the steps in this section to create a new policy to turn off WIP. -### Add a WIP policy +### Create a WIP policy To disable WIP for your organization, first create a configuration item. @@ -77,42 +77,42 @@ To disable WIP for your organization, first create a configuration item. 6. On the **Device Settings** screen, select **Windows Information Protection**, and then select **Next**. -The **Configure Windows Information Protection settings** page appears, where you'll configure your policy for your organization. +The **Configure Windows Information Protection settings** page appears, where you'll configure your policy for your organization. The following sections provide details on the required settings on this page. -### Manage the WIP-protection level for your enterprise data +> [!TIP] +> For more information on filling out the required fields, see [Create and deploy a Windows Information Protection (WIP) policy using Microsoft Endpoint Configuration Manager](/windows/security/information-protection/windows-information-protection/create-wip-policy-using-configmgr). -Set the Windows Information Protection mode to Off. +#### Turn off WIP + +Of the four options to specify the restriction mode, select **Off** to turn off Windows Information Protection. :::image type="content" alt-text="Create Configuration Item wizard, choose your WIP-protection level." source="images/wip-configmgr-disable-wip.png"::: -### Define your enterprise-managed identity domains +#### Specify the corporate identity - > [!TIP] - > For more information on filling out the required fields, see [Create and deploy a Windows Information Protection (WIP) policy using Microsoft Endpoint Configuration Manager](/windows/security/information-protection/windows-information-protection/create-wip-policy-using-configmgr). - -#### Add your corporate identity - -Type the name of your corporate identity into the **Corporate identity** field. For example, `contoso.com` or `contoso.com|newcontoso.com`. +Paste the value of your corporate identity into the **Corporate identity** field. For example, `contoso.com` or `contoso.com|newcontoso.com`. ![Create Configuration Item wizard, Add the primary Internet domain for your enterprise identity.](images/wip-configmgr-corp-identity.png) > [!IMPORTANT] -> Corporate identity must match the string in the original policy. +> This corporate identity value must match the string in the original policy. Copy and paste the string from your original policy that enables WIP. -### Choose where apps can access enterprise data +#### Specify the corporate network definition -After you've added a protection mode to your apps, you'll need to decide where those apps can access enterprise data on your network. +For the **Corporate network definition**, select **Add** to specify the necessary network locations. The **Add or edit corporate network definition** box appears. Add the required fields. -Add other network locations your apps can access by selecting **Add**. -The **Add or edit corporate network definition** box appears. Add the required fields. +> [!IMPORTANT] +> These corporate network definitions must match the original policy. Copy and paste the strings from your original policy that enables WIP. -In the required **Upload a Data Recovery Agent (DRA) certificate to allow recovery of encrypted data** box, select **Browse** to add a data recovery certificate for your policy. +#### Specify the data recovery agent certificate - ![Create Configuration Item wizard, Add a data recovery agent (DRA) certificate.](images/wip-configmgr-dra.png) +In the required **Upload a Data Recovery Agent (DRA) certificate to allow recovery of encrypted data** box, select **Browse** to add a data recovery certificate for your policy. This certificate should be the same as the original policy that enables WIP. + +![Create Configuration Item wizard, Add a data recovery agent (DRA) certificate.](images/wip-configmgr-dra.png) ### Deploy the WIP policy -After you've created your WIP policy, deploy it to your organization's devices. For more information about deployment options, see the following articles: +After you've created the new policy to turn off WIP, deploy it to your organization's devices. For more information about deployment options, see the following articles: - [Create a configuration baseline that includes the new configuration item](/mem/configmgr/compliance/deploy-use/create-configuration-baselines). From 97c5c76d48ac6072d0808722c4f23832ddd25efa Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Thu, 21 Jul 2022 14:46:41 -0700 Subject: [PATCH 23/24] add deprecation notice --- .../windows-information-protection/how-to-disable-wip.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md index af94d53535..1d285e189d 100644 --- a/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md +++ b/windows/security/information-protection/windows-information-protection/how-to-disable-wip.md @@ -13,6 +13,9 @@ manager: dougeby # How to disable Windows Information Protection (WIP) +[!INCLUDE [wip-deprecation](includes/wip-deprecation.md)] + + _Applies to:_ - Windows 10 From 0532d22b7d97ddff0cad41f8b57b595c655ab938 Mon Sep 17 00:00:00 2001 From: Aaron Czechowski Date: Thu, 21 Jul 2022 14:48:07 -0700 Subject: [PATCH 24/24] update link --- .../create-wip-policy-using-configmgr.md | 2 +- .../create-wip-policy-using-intune-azure.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-configmgr.md b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-configmgr.md index 3994f27238..87e2aed9c2 100644 --- a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-configmgr.md +++ b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-configmgr.md @@ -313,7 +313,7 @@ We recommend that you start with **Silent** or **Override** while verifying with |Block |WIP looks for inappropriate data sharing practices and stops the employee from completing the action. This can include sharing info across non-enterprise-protected apps in addition to sharing enterprise data between other people and devices outside of your enterprise.| |Override |WIP looks for inappropriate data sharing, warning employees if they do something deemed potentially unsafe. However, this management mode lets the employee override the policy and share the data, logging the action to your audit log. | |Silent |WIP runs silently, logging inappropriate data sharing, without blocking anything that would have been prompted for employee interaction while in Override mode. Unallowed actions, like apps inappropriately trying to access a network resource or WIP-protected data, are still blocked.| -|Off |WIP is turned off and doesn't help to protect or audit your data.

After you turn off WIP, an attempt is made to decrypt any WIP-tagged files on the locally attached drives. Your previous decryption and policy info isn't automatically reapplied if you turn WIP protection back on. For more information, see [How to disable Windows Information Protection](https://aka.ms/disablewip).| +|Off |WIP is turned off and doesn't help to protect or audit your data.

After you turn off WIP, an attempt is made to decrypt any WIP-tagged files on the locally attached drives. Your previous decryption and policy info isn't automatically reapplied if you turn WIP protection back on. For more information, see [How to disable Windows Information Protection](how-to-disable-wip.md).| :::image type="content" alt-text="Create Configuration Item wizard, choose your WIP-protection level" source="images/wip-configmgr-appmgmt.png"::: diff --git a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md index 7c281198d8..06970b38c5 100644 --- a/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md +++ b/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure.md @@ -375,7 +375,7 @@ We recommend that you start with **Silent** or **Allow Overrides** while verifyi |Block |WIP looks for inappropriate data sharing practices and stops the employee from completing the action. This can include sharing info across non-enterprise-protected apps in addition to sharing enterprise data between other people and devices outside of your enterprise.| |Allow Overrides |WIP looks for inappropriate data sharing, warning employees if they do something deemed potentially unsafe. However, this management mode lets the employee override the policy and share the data, logging the action to your audit log. For info about how to collect your audit log files, see [How to collect Windows Information Protection (WIP) audit event logs](collect-wip-audit-event-logs.md).| |Silent |WIP runs silently, logging inappropriate data sharing, without blocking anything that would have been prompted for employee interaction while in Allow Override mode. Unallowed actions, like apps inappropriately trying to access a network resource or WIP-protected data, are still stopped.| - |Off |WIP is turned off and doesn't help to protect or audit your data.

After you turn off WIP, an attempt is made to decrypt any WIP-tagged files on the locally attached drives. Your previous decryption and policy info isn't automatically reapplied if you turn WIP protection back on. For more information, see [How to disable Windows Information Protection](https://aka.ms/disablewip).| + |Off |WIP is turned off and doesn't help to protect or audit your data.

After you turn off WIP, an attempt is made to decrypt any WIP-tagged files on the locally attached drives. Your previous decryption and policy info isn't automatically reapplied if you turn WIP protection back on. For more information, see [How to disable Windows Information Protection](how-to-disable-wip.md).| 2. Select **Save**.